relational

type Action struct {
	UUIDModel

	// Actions only exist on a metadata object. We'll link them straight there with a BelongsTo relationship
	MetadataID uuid.UUID `json:"metadata-id"`

	Date               *time.Time                `json:"date"`
	Type               string                    `json:"type"`   // required
	System             string                    `json:"system"` // required
	Props              datatypes.JSONSlice[Prop] `json:"props"`
	Links              datatypes.JSONSlice[Link] `json:"links"`
	ResponsibleParties []ResponsibleParty        `gorm:"many2many:action_responsible_parties;"`
	Remarks            string                    `json:"remarks"`
}

type Activity struct {
	UUIDModel
	Title       *string `json:"title,omitempty"`
	Description string  `json:"description,omitempty"` // required
	Remarks     *string `json:"remarks,omitempty"`     // required

	Props datatypes.JSONSlice[Prop] `json:"props,omitempty"`
	Links datatypes.JSONSlice[Link] `json:"links,omitempty"`
	Steps []Step                    `json:"steps,omitempty"`

	RelatedControlsID *uuid.UUID
	RelatedControls   *ReviewedControls `json:"related-controls,omitempty"`
	ResponsibleRoles  []ResponsibleRole `gorm:"polymorphic:Parent" json:"responsible-roles,omitempty"`
}

type Addition struct {
	UUIDModel
	Position string                         `json:"position"`
	ByID     string                         `json:"by-id"`
	Title    string                         `json:"title"`
	Params   datatypes.JSONSlice[Parameter] `json:"params"`
	Props    datatypes.JSONSlice[Prop]      `json:"props"`
	Links    datatypes.JSONSlice[Link]      `json:"links"`
	Parts    datatypes.JSONSlice[Part]      `json:"parts"`

	AlterationID uuid.UUID
}

type Address struct {
	Type       AddressType `json:"type"`
	AddrLines  []string    `json:"lines"`
	City       string      `json:"city"`
	State      string      `json:"state"`
	PostalCode string      `json:"postal-code"`
	Country    string      `json:"country"`
}

type AddressType string

type Agent struct {
	UUIDModel

	CreatedAt time.Time      `json:"createdAt"`
	UpdatedAt time.Time      `json:"updatedAt"`
	DeletedAt gorm.DeletedAt `json:"deletedAt" gorm:"index"`

	Name                string     `json:"name" gorm:"not null"`
	Description         *string    `json:"description,omitempty"`
	IsActive            bool       `json:"isActive" gorm:"default:true"`
	LastAuthenticatedAt *time.Time `json:"lastAuthenticatedAt,omitempty"`

	ServiceAccountKeys []AgentServiceAccountKey `json:"serviceAccountKeys,omitempty"`
}

type AgentAuthEvent struct {
	UUIDModel

	CreatedAt time.Time `json:"createdAt"`

	AgentID      *uuid.UUID `json:"agentId,omitempty" gorm:"type:uuid;index"`
	CredentialID *uuid.UUID `json:"credentialId,omitempty" gorm:"type:uuid;index"`
	AuthMethod   string     `json:"authMethod" gorm:"type:varchar(64);not null;index"`
	Outcome      string     `json:"outcome" gorm:"type:varchar(32);not null;index"`
	Principal    *string    `json:"principal,omitempty"`
	Reason       *string    `json:"reason,omitempty"`
	RemoteAddr   *string    `json:"remoteAddr,omitempty"`
	UserAgent    *string    `json:"userAgent,omitempty"`
}

type AgentServiceAccountKey struct {
	UUIDModel

	CreatedAt time.Time      `json:"createdAt"`
	UpdatedAt time.Time      `json:"updatedAt"`
	DeletedAt gorm.DeletedAt `json:"deletedAt" gorm:"index"`

	AgentID *uuid.UUID `json:"agentId" gorm:"type:uuid;not null;index"`
	Agent   Agent      `json:"-" gorm:"foreignKey:AgentID;references:ID"`

	Name       *string    `json:"name,omitempty"`
	ClientID   string     `json:"clientId" gorm:"uniqueIndex;not null"`
	SecretHash string     `json:"-"`
	LastUsedAt *time.Time `json:"lastUsedAt,omitempty"`
	ExpiresAt  *time.Time `json:"expiresAt,omitempty"`
	RevokedAt  *time.Time `json:"revokedAt,omitempty"`
}

type Alteration struct {
	UUIDModel
	ControlID string                       `json:"control-id"` // required
	Adds      []Addition                   `json:"adds"`
	Removes   datatypes.JSONSlice[Removal] `json:"removes"`

	ModifyID string `json:"modify-id"`
}

type AssessedControlsSelectControlById struct {
	UUIDModel
	ControlID  string
	Control    Control     `gorm:"references:ID"`
	Statements []Statement `gorm:"many2many:assessed_controls_select_control_by_id_statements;"`
}

type AssessmentAsset struct {
	UUIDModel

	Components          []SystemComponent    `gorm:"many2many:assessment_asset_components"`
	AssessmentPlatforms []AssessmentPlatform // required

	ParentType string
	ParentID   uuid.UUID
}

type AssessmentAssets oscalTypes_1_1_3.AssessmentAssets

type AssessmentLog struct {
	UUIDModel
	Entries []AssessmentLogEntry
}

type AssessmentLogEntry struct {
	UUIDModel
	AssessmentLogID uuid.UUID

	Title       *string
	Remarks     *string
	Description *string
	Start       *time.Time
	End         *time.Time

	Props        datatypes.JSONSlice[Prop]
	Links        datatypes.JSONSlice[Link]
	LoggedBy     []LoggedBy    `gorm:"polymorphic:Parent"`
	RelatedTasks []RelatedTask `gorm:"polymorphic:Parent"`
}

type AssessmentPart struct {
	UUIDModel
	Name             string
	NS               string
	Class            string
	Title            string
	Prose            string
	Props            datatypes.JSONSlice[Prop]
	Links            datatypes.JSONSlice[Link]
	AssessmentPartID *uuid.UUID
	Parts            []AssessmentPart
}

type AssessmentPlan struct {
	UUIDModel
	Metadata   Metadata    `gorm:"polymorphic:Parent;"`
	BackMatter *BackMatter `gorm:"polymorphic:Parent;"`
	ImportSSP  datatypes.JSONType[ImportSsp]

	Tasks []Task `gorm:"polymorphic:Parent"`

	ReviewedControlsID uuid.UUID
	ReviewedControls   ReviewedControls

	AssessmentAssetsID *uuid.UUID
	AssessmentAssets   *AssessmentAsset
	AssessmentSubjects []AssessmentSubject `gorm:"many2many:assessment_plan_assessment_subjects"`
	LocalDefinitions   LocalDefinitions    `gorm:"polymorphic:Parent"`

	TermsAndConditionsID *uuid.UUID
	TermsAndConditions   *TermsAndConditions
}

type AssessmentPlatform struct {
	UUIDModel
	AssessmentAssetID uuid.UUID
	AssessmentAsset   AssessmentAsset
	Title             *string
	Remarks           *string
	Props             datatypes.JSONSlice[Prop]
	Links             datatypes.JSONSlice[Link]
	UsesComponents    []UsesComponent
}

type AssessmentResult struct {
	UUIDModel
	Metadata   Metadata    `gorm:"polymorphic:Parent;"`
	BackMatter *BackMatter `gorm:"polymorphic:Parent;"`
	ImportAp   datatypes.JSONType[ImportAp]

	LocalDefinitions *LocalDefinitions `gorm:"polymorphic:Parent"`
	Results          []Result
}

type AssessmentSubject struct {
	// Assessment Subject is a loose reference to some subject.
	// A subject can be a Component, InventoryItem, Location, Party, User, Resource.
	// In our struct we don't store the type, but rather have relations to each of these, and when marhsalling and unmarshalling,
	// setting the type to what we know it is.
	UUIDModel
	SSPID *uuid.UUID `json:"sspId,omitempty" gorm:"type:uuid;index"`

	// Type represents a component, party, location, user, or inventory item.
	// It will likely be updated once we can map it correctly
	Type        string
	Description *string
	Remarks     *string
	Props       datatypes.JSONSlice[Prop]
	Links       datatypes.JSONSlice[Link]

	IncludeAll      *datatypes.JSONType[*IncludeAll]
	IncludeSubjects []SelectSubjectById
	ExcludeSubjects []SelectSubjectById

	Evidence []Evidence `gorm:"many2many:evidence_subjects;"`
}

type AssociatedActivity struct {
	UUIDModel
	TaskID  uuid.UUID // Belongs to a task
	Remarks *string

	ActivityID       uuid.UUID
	Activity         Activity
	Props            datatypes.JSONSlice[Prop]
	Links            datatypes.JSONSlice[Link]
	ResponsibleRoles []ResponsibleRole   `gorm:"polymorphic:Parent;"`
	Subjects         []AssessmentSubject `gorm:"many2many:associated_activity_subjects"` // required
}

type AssociatedRisk oscalTypes_1_1_3.AssociatedRisk

type Attestation struct {
	UUIDModel
	ResultID           uuid.UUID
	ResponsibleParties []ResponsibleParty                  `gorm:"many2many:attestation_responsible_parties"`
	Parts              datatypes.JSONSlice[AssessmentPart] // required
}

type AuthorizationBoundary struct {
	UUIDModel
	Description string                    `json:"description"`
	Remarks     string                    `json:"remarks"`
	Props       datatypes.JSONSlice[Prop] `json:"props"`
	Links       datatypes.JSONSlice[Link] `json:"links"`
	Diagrams    []Diagram                 `json:"diagrams" gorm:"polymorphic:Parent;"`

	SystemCharacteristicsId uuid.UUID
}

type AuthorizedPrivilege struct {
	UUIDModel
	Title              string                      `json:"title"`
	Description        string                      `json:"description"`
	FunctionsPerformed datatypes.JSONSlice[string] `json:"functions-performed"`

	SystemUserId uuid.UUID
}

type BackMatter struct {
	UUIDModel
	ParentID   *string
	ParentType *string
	Resources  []BackMatterResource
}

type BackMatterResource struct {
	ID           uuid.UUID                         `gorm:"primary_key"` // required
	BackMatterID uuid.UUID                         `gorm:"primary_key"`
	Title        *string                           `json:"title"`
	Description  *string                           `json:"description"`
	Remarks      *string                           `json:"remarks"`
	Citation     *datatypes.JSONType[Citation]     `json:"citation"`
	Base64       *datatypes.JSONType[Base64]       `json:"base64"`
	Props        datatypes.JSONSlice[Prop]         `json:"props"`
	DocumentIDs  datatypes.JSONSlice[DocumentID]   `json:"document-ids"`
	RLinks       datatypes.JSONSlice[ResourceLink] `json:"rlinks"`
}

type Base64 struct {
	Filename  string `json:"filename"`
	MediaType string `json:"media-type"`
	Value     string `json:"value"` // required
}

type ByComponent struct {
	UUIDModel

	// As ByComponent can be found in Implemented Requirements & Statements, using GORM polymorphism to tell us where to attach
	ParentID   *uuid.UUID `gorm:"type:uuid"`
	ParentType *string

	ComponentUUID        uuid.UUID                                      `gorm:"type:uuid" json:"component-uuid"`
	Description          string                                         `json:"description"`
	Props                datatypes.JSONSlice[Prop]                      `json:"props"`
	Links                datatypes.JSONSlice[Link]                      `json:"links"`
	SetParameters        datatypes.JSONSlice[SetParameter]              `json:"set-parameters"`
	ResponsibleRoles     []ResponsibleRole                              `json:"responsible-parties" gorm:"polymorphic:Parent;"`
	Remarks              string                                         `json:"remarks"`
	ImplementationStatus datatypes.JSONType[ImplementationStatus]       `json:"implementation-status"`
	Export               *Export                                        `json:"export,omitempty"`
	Inherited            []InheritedControlImplementation               `json:"inherited-control-implementations,omitempty"`
	Satisfied            []SatisfiedControlImplementationResponsibility `json:"satisfied"`
}

type CCFRoleAssignment struct {
	UUIDModel

	CreatedAt time.Time `json:"createdAt"`
	UpdatedAt time.Time `json:"updatedAt"`

	// RoleName is a manifest role (admin/viewer/auditor/contributor/agent or an operator role).
	// The handler validates it against the authz manifest before insert so a typo is rejected
	// rather than silently granting nothing.
	RoleName string `json:"roleName" gorm:"not null;uniqueIndex:idx_ccf_role_assignments_unique,priority:3"`

	// AssigneeType is RoleAssigneeTypeUser or RoleAssigneeTypeGroup.
	AssigneeType string `json:"assigneeType" gorm:"not null;uniqueIndex:idx_ccf_role_assignments_unique,priority:1"`

	// AssigneeID is the user email or the group name, normalized to lower-case.
	AssigneeID string `json:"assigneeId" gorm:"not null;uniqueIndex:idx_ccf_role_assignments_unique,priority:2"`

	// Source is RoleAssignmentSourceConfig (immutable, owned by BCH-1334) or
	// RoleAssignmentSourceManual (admin-owned, deletable). Defaults to manual so an API insert
	// that omits it is an ad-hoc grant.
	Source string `json:"source" gorm:"not null;default:manual"`
}

type Capability struct {
	UUIDModel          // required
	Description string `json:"description"` // required
	Name        string `json:"name"`        // required
	Remarks     string `json:"remarks"`

	Links                  datatypes.JSONSlice[Link]                   `json:"links"`
	Props                  datatypes.JSONSlice[Prop]                   `json:"props"`
	IncorporatesComponents datatypes.JSONSlice[IncorporatesComponents] `json:"incorporates-components"`
	ControlImplementations []ControlImplementationSet                  `json:"control-implementations" gorm:"many2many:capability_control_implementation_sets"`

	ComponentDefinitionId uuid.UUID
	ComponentDefinition   ComponentDefinition
}

type Catalog struct {
	UUIDModel
	Metadata   Metadata                       `json:"metadata" gorm:"polymorphic:Parent;"`
	Params     datatypes.JSONSlice[Parameter] `json:"params"`
	Groups     []Group                        `json:"groups"`
	Controls   []Control                      `json:"controls"`
	BackMatter *BackMatter                    `json:"back-matter,omitempty" gorm:"polymorphic:Parent;"`
}

type Characterization oscalTypes_1_1_3.Characterization

type Citation struct {
	Text  string `json:"text"` // required
	Props []Prop `json:"props"`
	Links []Link `json:"links"`
}

type CombinationRule oscalTypes_1_1_3.CombinationRule

type ComponentDefinition struct {
	UUIDModel             // required
	Metadata   Metadata   `json:"metadata" gorm:"polymorphic:Parent;"` // required
	BackMatter BackMatter `json:"back-matter" gorm:"polymorphic:Parent;"`

	ImportComponentDefinitions datatypes.JSONSlice[ImportComponentDefinition] `json:"import-component-definitions"`
	Components                 []DefinedComponent                             `json:"components"`
	Capabilities               []Capability                                   `json:"capabilities"`
}

type Control struct {
	CatalogID uuid.UUID                      `gorm:"primary_key"`
	ID        string                         `json:"id" gorm:"primary_key"` // required
	Title     string                         `json:"title"`                 // required
	Class     *string                        `json:"class"`
	Params    datatypes.JSONSlice[Parameter] `json:"params"`
	Parts     datatypes.JSONSlice[Part]      `json:"parts"`
	Props     datatypes.JSONSlice[Prop]      `json:"props,omitempty"`
	Links     datatypes.JSONSlice[Link]      `json:"links,omitempty"`

	ParentID   *string
	ParentType *string

	Controls []Control `json:"controls" gorm:"polymorphic:Parent;"`
	Filters  []Filter  `gorm:"many2many:filter_controls;"`
}

type ControlImplementation struct {
	UUIDModel
	Description             string                            `json:"description"`
	SetParameters           datatypes.JSONSlice[SetParameter] `json:"set-parameters"`
	ImplementedRequirements []ImplementedRequirement          `json:"implemented-requirements"`

	SystemSecurityPlanId uuid.UUID
}

type ControlImplementationResponsibility struct {
	UUIDModel
	Description      string                    `json:"description"` // required
	Links            datatypes.JSONSlice[Link] `json:"links"`
	Props            datatypes.JSONSlice[Prop] `json:"props"`
	ProvidedUuid     uuid.UUID                 `json:"provided-uuid"`
	Remarks          string                    `json:"remarks"`
	ResponsibleRoles []ResponsibleRole         `json:"responsible-roles" gorm:"polymorphic:Parent"`

	ExportId uuid.UUID
}

type ControlImplementationSet struct {
	UUIDModel                                       // required
	Source        string                            `json:"source"`      // required
	Description   string                            `json:"description"` // required
	SetParameters datatypes.JSONSlice[SetParameter] `json:"set-parameters"`

	ImplementedRequirements []ImplementedRequirementControlImplementation `json:"implemented-requirements"` // required

	Props datatypes.JSONSlice[Prop] `json:"props"`
	Links datatypes.JSONSlice[Link] `json:"links"`

	DefinedComponentID uuid.UUID
	DefinedComponent   DefinedComponent
}

type ControlObjectiveSelection struct {
	UUIDModel
	ReviewedControlsID uuid.UUID

	Description *string
	Remarks     *string
	Props       datatypes.JSONSlice[Prop]
	Links       datatypes.JSONSlice[Link]

	IncludeAll        *datatypes.JSONType[IncludeAll]
	IncludeObjectives []SelectObjectiveById `gorm:"Polymorphic:Parent;polymorphicValue:included"`
	ExcludeObjectives []SelectObjectiveById `gorm:"Polymorphic:Parent;polymorphicValue:excluded"`
}

type ControlSelection struct {
	UUIDModel
	ReviewedControlsID uuid.UUID
	Description        *string
	Remarks            *string
	Props              datatypes.JSONSlice[Prop]
	Links              datatypes.JSONSlice[Link]

	IncludeAll      *datatypes.JSONType[IncludeAll]
	IncludeControls []AssessedControlsSelectControlById `gorm:"many2many:control_selection_assessed_controls_included"`
	ExcludeControls []AssessedControlsSelectControlById `gorm:"many2many:control_selection_assessed_controls_excluded"`
}

type ControlStatementImplementation struct {
	UUIDModel                                  // required
	StatementId      string                    `json:"statement-id"` // required
	Description      string                    `json:"description"`  // required
	Props            datatypes.JSONSlice[Prop] `json:"props"`
	Links            datatypes.JSONSlice[Link] `json:"links"`
	ResponsibleRoles []ResponsibleRole         `json:"responsible-roles" gorm:"polymorphic:Parent;"`
	Remarks          string                    `json:"remarks"`

	ImplementedRequirementControlImplementationId uuid.UUID
}

type DataFlow struct {
	UUIDModel
	Description string                    `json:"description"`
	Remarks     string                    `json:"remarks"`
	Props       datatypes.JSONSlice[Prop] `json:"props"`
	Links       datatypes.JSONSlice[Link] `json:"links"`
	Diagrams    []Diagram                 `json:"diagrams" gorm:"polymorphic:Parent;"`

	SystemCharacteristicsId uuid.UUID
}

type DefinedComponent struct {
	UUIDModel          // required
	Type        string `json:"type"`        // required
	Title       string `json:"title"`       // required
	Description string `json:"description"` // required
	Purpose     string `json:"purpose"`
	Remarks     string `json:"remarks"`

	ResponsibleRoles       []ResponsibleRole          `json:"responsible-roles" gorm:"polymorphic:Parent"`
	ControlImplementations []ControlImplementationSet `json:"control-implementations" gorm:"many2many:defined_components_control_implementation_sets"`

	Props     datatypes.JSONSlice[Prop]     `json:"props"`
	Links     datatypes.JSONSlice[Link]     `json:"links"`
	Protocols datatypes.JSONSlice[Protocol] `json:"protocols"`

	ComponentDefinitionID *uuid.UUID
	ComponentDefinition   *ComponentDefinition
}

type Diagram struct {
	UUIDModel
	Description string                    `json:"description"`
	Props       datatypes.JSONSlice[Prop] `json:"props"`
	Links       datatypes.JSONSlice[Link] `json:"links"`
	Caption     string                    `json:"caption"`
	Remarks     string                    `json:"remarks"`

	ParentID   *string
	ParentType *string
}

type DocumentID struct {
	Scheme     DocumentIDScheme `json:"scheme"`
	Identifier string           `json:"identifier"`
}

type DocumentIDScheme string

type Evidence struct {
	// ID is the unique ID for this specific observation, and will be used as the primary key in the database.
	UUIDModel

	// UUID needs to remain consistent when automation runs again, but unique for each subject.
	// It represents the "stream" of the same observation being made over time.
	UUID       uuid.UUID                              `gorm:"index:evidence_stream_idx;index:evidence_stream_collected_idx,priority:1" json:"uuid,omitempty"`
	BackMatter *BackMatter                            `gorm:"polymorphic:Parent;" json:"back-matter,omitempty"`
	Signature  *datatypes.JSONType[EvidenceSignature] `json:"signature,omitempty"`

	Title       string  `json:"title"`
	Description string  `json:"description"`
	Remarks     *string `json:"remarks,omitempty"`

	// Assigning labels to Evidence makes it searchable and easily usable in the UI
	Labels []Labels `gorm:"many2many:evidence_labels;" json:"labels"`

	// When did we start collecting the evidence, and when did the process end, and how long is it valid for ?
	Start   time.Time  `json:"start"`
	End     time.Time  `gorm:"index:evidence_stream_collected_idx,priority:2,sort:desc" json:"end"`
	Expires *time.Time `json:"expires,omitempty"`

	Props datatypes.JSONSlice[Prop] `json:"props"`
	Links datatypes.JSONSlice[Link] `json:"links"`

	// Who or What is generating this evidence
	Origins datatypes.JSONSlice[Origin] `json:"origins,omitempty"`

	// What steps did we take to create this evidence
	Activities []Activity `gorm:"many2many:evidence_activities" json:"activities,omitempty"`

	InventoryItems []InventoryItem `gorm:"many2many:evidence_inventory_items" json:"inventory-items,omitempty"`

	// Which components of the subject are being observed. A tool, user, policy etc.
	Components []SystemComponent `gorm:"many2many:evidence_components" json:"components,omitempty"`
	// Who or What are we providing evidence for. What's under test.
	Subjects []AssessmentSubject `gorm:"many2many:evidence_subjects;" json:"subjects,omitempty"`

	// Did we satisfy what was being tested for, or did we fail ?
	Status datatypes.JSONType[oscalTypes_1_1_3.ObjectiveStatus] `json:"status"`
}

type EvidenceQuerier interface {
	GetLatestForFilters(filters ...labelfilter.Filter) ([]Evidence, error)
}

type EvidenceSignature struct {
	Version            string                  `json:"version"`
	SignatureAlgorithm string                  `json:"signature_algorithm"`
	SignedAt           time.Time               `json:"signed_at"`
	ContentHash        Hash                    `json:"content_hash"`
	Signer             EvidenceSignatureSigner `json:"signer"`
	Claims             EvidenceSignatureClaims `json:"claims"`
	JWS                string                  `json:"jws"`
}

type EvidenceSignatureClaims struct {
	TokenKind    string     `json:"token_kind,omitempty"`
	Subject      string     `json:"subject,omitempty"`
	Issuer       string     `json:"issuer,omitempty"`
	IssuedAt     *time.Time `json:"issued_at,omitempty"`
	ExpiresAt    *time.Time `json:"expires_at,omitempty"`
	NotBefore    *time.Time `json:"not_before,omitempty"`
	GivenName    string     `json:"given_name,omitempty"`
	FamilyName   string     `json:"family_name,omitempty"`
	AgentID      string     `json:"agent_id,omitempty"`
	CredentialID string     `json:"credential_id,omitempty"`
	AuthMethod   string     `json:"auth_method,omitempty"`
}

type EvidenceSignatureSigner struct {
	Type         string `json:"type"`
	ID           string `json:"id,omitempty"`
	Email        string `json:"email,omitempty"`
	Name         string `json:"name,omitempty"`
	CredentialID string `json:"credential_id,omitempty"`
}

type Export struct {
	UUIDModel
	Description      string                                `json:"description"`
	Props            datatypes.JSONSlice[Prop]             `json:"props"`
	Links            datatypes.JSONSlice[Link]             `json:"links"`
	Remarks          string                                `json:"remarks"`
	Provided         []ProvidedControlImplementation       `json:"provided"`
	Responsibilities []ControlImplementationResponsibility `json:"responsibilities"`

	ByComponentId uuid.UUID
}

type Filter struct {
	UUIDModel

	Name       string                                 `json:"name" yaml:"name"`
	SSPID      *uuid.UUID                             `json:"sspId,omitempty" yaml:"ssp_id,omitempty" gorm:"column:ssp_id;type:uuid;index"`
	Filter     datatypes.JSONType[labelfilter.Filter] `json:"filter" yaml:"filter"`
	Controls   []Control                              `json:"controls" gorm:"many2many:filter_controls;"`
	Components []SystemComponent                      `json:"components" gorm:"many2many:filter_system_components;"`

	SystemSecurityPlan *SystemSecurityPlan `json:"-" gorm:"foreignKey:SSPID;references:ID;constraint:OnDelete:CASCADE"`
}

type Finding struct {
	UUIDModel                                                                      // required
	Description                 string                                             `json:"description"` // required
	Title                       string                                             `json:"title"`       // required
	Target                      datatypes.JSONType[oscalTypes_1_1_3.FindingTarget] `json:"target"`      // required
	ImplementationStatementUuid *string                                            `json:"implementation-statement-uuid"`
	Links                       datatypes.JSONSlice[Link]                          `json:"links"`
	Origins                     datatypes.JSONSlice[Origin]                        `json:"origins"`
	Props                       datatypes.JSONSlice[Prop]                          `json:"props"`
	// Database relationships for efficient querying
	RelatedObservations []Observation `gorm:"many2many:finding_related_observations;" json:"-"`
	RelatedRisks        []Risk        `gorm:"many2many:finding_related_risks;" json:"-"`
	// OSCAL compatibility - JSON fields for import/export
	RelatedObservationUUIDs datatypes.JSONSlice[RelatedObservation] `json:"related-observations"`
	RelatedRiskUUIDs        datatypes.JSONSlice[AssociatedRisk]     `json:"related-risks"`
	Remarks                 *string                                 `json:"remarks"`
}

type FindingTarget oscalTypes_1_1_3.FindingTarget

type FlatWithoutGrouping = map[string]any

type Group struct {
	CatalogID uuid.UUID                      `gorm:"primary_key"`
	ID        string                         `json:"id" gorm:"primary_key"` // required
	Class     string                         `json:"class"`
	Title     string                         `json:"title"` // required
	Params    datatypes.JSONSlice[Parameter] `json:"params"`
	Parts     datatypes.JSONSlice[Part]      `json:"parts"`
	Props     datatypes.JSONSlice[Prop]      `json:"props,omitempty"`
	Links     datatypes.JSONSlice[Link]      `json:"links,omitempty"`

	ParentID   *string
	ParentType *string

	Groups   []Group   `json:"groups" gorm:"polymorphic:Parent;"`
	Controls []Control `json:"controls" gorm:"polymorphic:Parent;"`
}

type Hash struct {
	Algorithm HashAlgorithm `json:"algorithm"` // required
	Value     string        `json:"value"`     // required
}

type HashAlgorithm string

type HrefMetadata struct {
	Path         string
	AbsolutePath bool
	RelativePath bool
	Fragment     bool
}

type IdentifiedSubject struct {
	UUIDModel
	RelatedTaskID        uuid.UUID
	SubjectPlaceholderID uuid.UUID
	Subjects             []AssessmentSubject `gorm:"many2many:related_task_subjects;"`
}

type Impact oscalTypes_1_1_3.Impact

type ImplementationStatus struct {
	Remarks string                    `json:"remarks,omitempty" yaml:"remarks,omitempty"`
	State   ImplementationStatusState `json:"state" yaml:"state"`
}

type ImplementationStatusState string

type ImplementedComponent struct {
	UUIDModel
	ComponentID uuid.UUID `json:"component-uuid"`
	Component   DefinedComponent

	Props              datatypes.JSONSlice[Prop]             `json:"props"`
	Links              datatypes.JSONSlice[Link]             `json:"links"`
	ResponsibleParties datatypes.JSONSlice[ResponsibleParty] `json:"responsible-parties"`
	Remarks            string                                `json:"remarks"`

	InventoryItemId uuid.UUID
}

type ImplementedRequirement struct {
	UUIDModel
	ControlImplementationId uuid.UUID

	ControlId        string                            `json:"control-id"`
	Props            datatypes.JSONSlice[Prop]         `json:"props"`
	Links            datatypes.JSONSlice[Link]         `json:"links"`
	SetParameters    datatypes.JSONSlice[SetParameter] `json:"set-parameters"`
	ResponsibleRoles []ResponsibleRole                 `json:"responsible-roles" gorm:"polymorphic:Parent;"`
	Remarks          string                            `json:"remarks"`
	ByComponents     []ByComponent                     `json:"by-components" gorm:"Polymorphic:Parent"`
	Statements       []Statement                       `json:"statements"`
}

type ImplementedRequirementControlImplementation struct {
	UUIDModel                                          //required
	ControlId        string                            `json:"control-id"`  //required
	Description      string                            `json:"description"` //required
	SetParameters    datatypes.JSONSlice[SetParameter] `json:"set-parameters"`
	Props            datatypes.JSONSlice[Prop]         `json:"props"`
	Links            datatypes.JSONSlice[Link]         `json:"links"`
	Remarks          string                            `json:"remarks"`
	ResponsibleRoles []ResponsibleRole                 `json:"responsible-roles" gorm:"polymorphic:Parent;"` // required
	Statements       []ControlStatementImplementation  `json:"statements"`

	ControlImplementationSetID uuid.UUID
}

type Import struct {
	UUIDModel
	// Href as per the OSCAL docs can be an absolute network path (potentially remote), relative or a URI fragment
	// for the moment to make the system's life easier, it should be a URI fragment to back-matter and try and resolve
	// back to an ingested catalog.
	Href            string                          `json:"href"`
	IncludeAll      datatypes.JSONType[*IncludeAll] `json:"include-all"`
	IncludeControls []SelectControlById             `json:"include-controls" gorm:"Polymorphic:Parent;polymorphicValue:included"`
	ExcludeControls []SelectControlById             `json:"exclude-controls" gorm:"Polymorphic:Parent;polymorphicValue:excluded"`

	ProfileID uuid.UUID
}

type ImportAp oscalTypes_1_1_3.ImportAp

type ImportComponentDefinition oscalTypes_1_1_3.ImportComponentDefinition

type ImportProfile oscalTypes_1_1_3.ImportProfile

type ImportSsp oscalTypes_1_1_3.ImportSsp

type IncludeAll = map[string]any

type IncorporatesComponents oscalTypes_1_1_3.IncorporatesComponent

type InformationType struct {
	UUIDModel
	Title                 string                                             `json:"title"`
	Description           string                                             `json:"description"`
	Props                 datatypes.JSONSlice[Prop]                          `json:"props"`
	Links                 datatypes.JSONSlice[Link]                          `json:"links"`
	ConfidentialityImpact *datatypes.JSONType[Impact]                        `json:"confidentiality-impact"`
	IntegrityImpact       *datatypes.JSONType[Impact]                        `json:"integrity-impact"`
	AvailabilityImpact    *datatypes.JSONType[Impact]                        `json:"availability-impact"`
	Categorizations       datatypes.JSONSlice[InformationTypeCategorization] `json:"categorizations"`

	SystemInformationId uuid.UUID
}

type InformationTypeCategorization oscalTypes_1_1_3.InformationTypeCategorization

type InheritedControlImplementation struct {
	UUIDModel                                  //required
	ProvidedUuid     uuid.UUID                 `json:"provided-uuid"`
	Description      string                    `json:"description"` //required
	Links            datatypes.JSONSlice[Link] `json:"links"`
	Props            datatypes.JSONSlice[Prop] `json:"props"`
	ResponsibleRoles []ResponsibleRole         `json:"responsible-roles" gorm:"polymorphic:Parent"`

	ByComponentId uuid.UUID
}

type InventoryItem struct {
	UUIDModel
	Description           string                                `json:"description"`
	Props                 datatypes.JSONSlice[Prop]             `json:"props"`
	Links                 datatypes.JSONSlice[Link]             `json:"links"`
	ResponsibleParties    datatypes.JSONSlice[ResponsibleParty] `json:"responsible-parties"`
	Remarks               string                                `json:"remarks"`
	ImplementedComponents []ImplementedComponent                `json:"implemented-components"`

	SystemImplementationId uuid.UUID

	Evidence []Evidence `gorm:"many2many:evidence_inventory_items"`
}

type Labels struct {
	Name  string `gorm:"primaryKey" json:"name"`
	Value string `gorm:"primaryKey" json:"value"`
}

type LeveragedAuthorization struct {
	UUIDModel
	Title          string                    `json:"title"`
	PartyUUID      uuid.UUID                 `json:"party-uuid"`
	DateAuthorized time.Time                 `json:"date-authorized"`
	Remarks        string                    `json:"remarks"`
	Props          datatypes.JSONSlice[Prop] `json:"props"`
	Links          datatypes.JSONSlice[Link] `json:"links"`

	SystemImplementationId uuid.UUID
}

type Link oscaltypes113.Link

type LocalDefinitions struct {
	UUIDModel

	Remarks              *string
	Components           []SystemComponent `gorm:"many2many:local_definition_components"`
	InventoryItems       []InventoryItem   `gorm:"many2many:local_definition_inventory_items"`
	Users                []SystemUser      `gorm:"many2many:local_definition_users"`
	ObjectivesAndMethods []LocalObjective  `gorm:"many2many:local_definition_objectives"`
	Activities           []Activity        `gorm:"many2many:local_definition_activities"`

	ParentID   uuid.UUID
	ParentType string
}

type LocalObjective struct {
	UUIDModel

	ControlID string  // required
	Control   Control `gorm:"references:ID"`

	Description *string
	Remarks     *string
	Props       datatypes.JSONSlice[Prop]
	Links       datatypes.JSONSlice[Link]

	Parts datatypes.JSONSlice[Part] // required
}

type Location struct {
	UUIDModel
	Title            *string                              `json:"title"`
	Address          *datatypes.JSONType[Address]         `json:"address"`
	EmailAddresses   datatypes.JSONSlice[string]          `json:"email-addresses"`
	TelephoneNumbers datatypes.JSONSlice[TelephoneNumber] `json:"telephone-numbers"`
	Urls             datatypes.JSONSlice[string]          `json:"urls"`
	Props            datatypes.JSONSlice[Prop]            `json:"props"`
	Links            datatypes.JSONSlice[Link]            `json:"links"`
	Remarks          *string                              `json:"remarks"`
}

type LoggedBy struct {
	PartyID uuid.UUID
	Party   Party

	RoleID string
	Role   Role

	ParentType string
	ParentID   uuid.UUID
}

type Matching oscalTypes_1_1_3.Matching

type Merge struct {
	UUIDModel
	Combine datatypes.JSONType[*CombinationRule]     `json:"combine"`
	AsIs    bool                                     `json:"as-is"`
	Flat    datatypes.JSONType[*FlatWithoutGrouping] `json:"flat"`

	ProfileID uuid.UUID
}

type Metadata struct {
	UUIDModel

	// Metadata is shared across many resources, and so it mapped using a polymorphic relationship
	ParentID   *string
	ParentType *string

	Title              string                          `json:"title"`
	Published          *time.Time                      `json:"published"`
	LastModified       *time.Time                      `json:"last-modified"`
	Version            string                          `json:"version"`
	OscalVersion       string                          `json:"oscal-version"`
	DocumentIDs        datatypes.JSONSlice[DocumentID] `json:"document-ids"` // -> DocumentID
	Props              datatypes.JSONSlice[Prop]       `json:"props"`
	Links              datatypes.JSONSlice[Link]       `json:"links"`
	ResponsibleParties []ResponsibleParty              `gorm:"many2many:metadata_responsible_parties;"`
	Revisions          []Revision                      `json:"revisions"`
	Roles              []Role                          `json:"roles" gorm:"many2many:metadata_roles"`
	Locations          []Location                      `json:"locations" gorm:"many2many:metadata_locations"`
	Parties            []Party                         `json:"parties" gorm:"many2many:metadata_parties"`
	Actions            []Action                        `json:"actions"`
	Remarks            string                          `json:"remarks"`
}

type MitigatingFactor oscalTypes_1_1_3.MitigatingFactor

type Modify struct {
	UUIDModel
	SetParameters []ParameterSetting `json:"set-parameters"`
	Alters        []Alteration       `json:"alters"`

	ProfileID uuid.UUID
}

type NetworkArchitecture struct {
	UUIDModel
	Description string                    `json:"description"`
	Remarks     string                    `json:"remarks"`
	Props       datatypes.JSONSlice[Prop] `json:"props"`
	Links       datatypes.JSONSlice[Link] `json:"links"`
	Diagrams    []Diagram                 `json:"diagrams" gorm:"polymorphic:Parent;"`

	SystemCharacteristicsId uuid.UUID
}

type Observation struct {
	UUIDModel                                              // required
	Collected        time.Time                             `json:"collected" gorm:"index"` // required, indexed
	Description      string                                `json:"description"`            // required
	Methods          datatypes.JSONSlice[string]           `json:"methods"`                // required, stored as JSON array
	Expires          *time.Time                            `json:"expires" gorm:"index"`   // Indexed for date queries
	Links            datatypes.JSONSlice[Link]             `json:"links"`
	Origins          datatypes.JSONSlice[Origin]           `json:"origins"`
	Props            datatypes.JSONSlice[Prop]             `json:"props"`
	RelevantEvidence datatypes.JSONSlice[RelevantEvidence] `json:"relevant-evidence"`
	Remarks          *string                               `json:"remarks"`
	Subjects         datatypes.JSONSlice[SubjectReference] `json:"subjects"`
	Title            *string                               `json:"title"`
	Types            datatypes.JSONSlice[string]           `json:"types"` // stored as JSON array
}

type Origin oscalTypes_1_1_3.Origin

type Parameter struct {
	ID          string                                   `json:"id"`
	Class       *string                                  `json:"class"`
	Label       *string                                  `json:"label"`
	Usage       *string                                  `json:"usage"`
	Remarks     *string                                  `json:"remarks"`
	Constraints datatypes.JSONSlice[ParameterConstraint] `json:"constraints"`
	Guidelines  datatypes.JSONSlice[ParameterGuideline]  `json:"guidelines"`
	Select      *datatypes.JSONType[ParameterSelection]  `json:"select"`
	Values      datatypes.JSONSlice[string]              `json:"values"`
	Props       datatypes.JSONSlice[Prop]                `json:"props,omitempty"`
	Links       datatypes.JSONSlice[Link]                `json:"links,omitempty"`
}

type ParameterConstraint struct {
	Description string                    `json:"description"`
	Tests       []ParameterConstraintTest `json:"tests"`
}

type ParameterConstraintTest struct {
	Expression string `json:"expression"`
	Remarks    string `json:"remarks"`
}

type ParameterGuideline struct {
	Prose string `json:"prose"`
}

type ParameterSelection struct {
	HowMany ParameterSelectionCount `json:"how-many"`
	Choice  []string                `json:"choice"`
}

type ParameterSelectionCount string

type ParameterSetting struct {
	UUIDModel
	ParamID     string                                   `json:"param-id"` // required
	Class       string                                   `json:"class"`
	DependsOn   string                                   `json:"depends-on"`
	Props       datatypes.JSONSlice[Prop]                `json:"props"`
	Links       datatypes.JSONSlice[Link]                `json:"links"`
	Label       string                                   `json:"label"`
	Constraints datatypes.JSONSlice[ParameterConstraint] `json:"constraints"`
	Guidelines  datatypes.JSONSlice[ParameterGuideline]  `json:"guidelines"`
	Values      datatypes.JSONSlice[string]              `json:"values"`
	Select      *datatypes.JSONType[ParameterSelection]  `json:"select"`

	ModifyID uuid.UUID
}

type Part struct {
	ID     string                    `json:"id"`
	Name   string                    `json:"name"`
	NS     string                    `json:"ns"`
	Class  string                    `json:"class"`
	Title  string                    `json:"title"`
	Prose  string                    `json:"prose"`
	Props  datatypes.JSONSlice[Prop] `json:"props,omitempty"`
	Links  datatypes.JSONSlice[Link] `json:"links,omitempty"`
	PartID string                    `json:"part_id"`
	Parts  []Part                    `json:"parts"` // -> Part

}

type Party struct {
	UUIDModel
	Type                  PartyType                            `json:"type"`
	Name                  *string                              `json:"name"`
	ShortName             *string                              `json:"short-name"`
	ExternalIds           datatypes.JSONSlice[PartyExternalID] `json:"external-ids"`
	Props                 datatypes.JSONSlice[Prop]            `json:"props"`
	Links                 datatypes.JSONSlice[Link]            `json:"links"`
	EmailAddresses        datatypes.JSONSlice[string]          `json:"email-addresses"`
	TelephoneNumbers      datatypes.JSONSlice[TelephoneNumber] `json:"telephone-numbers"`
	Addresses             datatypes.JSONSlice[Address]         `json:"addresses"`
	Locations             []Location                           `json:"locations" gorm:"many2many:party_locations;"`
	MemberOfOrganizations []Party                              `json:"member-of-organizations" gorm:"many2many:party_member_of_organisations;"` // -> Party
	Remarks               *string                              `json:"remarks"`
}

type PartyExternalID struct {
	ID     string                `json:"id"`
	Scheme PartyExternalIDScheme `json:"scheme"`
}

type PartyExternalIDScheme string

type PartyType string

type PlanOfActionAndMilestones struct {
	UUIDModel
	Metadata   Metadata   `json:"metadata" gorm:"polymorphic:Parent;"`
	BackMatter BackMatter `json:"back-matter" gorm:"polymorphic:Parent;"`

	// Simple fields stored as JSON
	ImportSsp        datatypes.JSONType[ImportSsp]                                 `json:"import-ssp"`
	SystemId         datatypes.JSONType[SystemId]                                  `json:"system-id"`
	LocalDefinitions datatypes.JSONType[PlanOfActionAndMilestonesLocalDefinitions] `json:"local-definitions"`

	// Complex entities as proper tables with polymorphic relationships
	PoamItems []PoamItem `gorm:"foreignKey:PlanOfActionAndMilestonesID"`

	Observations []Observation `gorm:"many2many:poam_observations;"`
	Risks        []Risk        `gorm:"many2many:poam_risks;"`
	Findings     []Finding     `gorm:"many2many:poam_findings;"`
}

type PlanOfActionAndMilestonesLocalDefinitions struct {
	AssessmentAssets datatypes.JSONType[oscalTypes_1_1_3.AssessmentAssets] `json:"assessment-assets"`
	Components       datatypes.JSONSlice[oscalTypes_1_1_3.SystemComponent] `json:"components" gorm:"type:json"`
	InventoryItems   datatypes.JSONSlice[oscalTypes_1_1_3.InventoryItem]   `json:"inventory-items" gorm:"type:json"`
	Remarks          string                                                `json:"remarks"`
}

type PoamItem struct {
	PlanOfActionAndMilestonesID uuid.UUID                           `gorm:"primary_key"`
	UUID                        string                              `json:"uuid" gorm:"primary_key"`
	Title                       string                              `json:"title"`       // required
	Description                 string                              `json:"description"` // required
	Props                       datatypes.JSONSlice[Prop]           `json:"props"`
	Links                       datatypes.JSONSlice[Link]           `json:"links"`
	Origins                     datatypes.JSONSlice[PoamItemOrigin] `json:"origins"`
	// Database relationships for efficient querying
	RelatedFindings     []Finding     `gorm:"many2many:poam_item_related_findings;" json:"-"`
	RelatedObservations []Observation `gorm:"many2many:poam_item_related_observations;" json:"-"`
	RelatedRisks        []Risk        `gorm:"many2many:poam_item_related_risks;" json:"-"`
	// OSCAL compatibility - JSON fields for import/export
	RelatedFindingUUIDs     datatypes.JSONSlice[RelatedFinding]     `json:"related-findings"`
	RelatedObservationUUIDs datatypes.JSONSlice[RelatedObservation] `json:"related-observations"`
	RelatedRiskUUIDs        datatypes.JSONSlice[AssociatedRisk]     `json:"related-risks"`
	Remarks                 *string                                 `json:"remarks"`
}

type PoamItemOrigin oscalTypes_1_1_3.PoamItemOrigin

type Profile struct {
	UUIDModel
	Metadata   Metadata    `json:"metadata" gorm:"Polymorphic:Parent"`
	BackMatter *BackMatter `json:"back-matter" gorm:"Polymorphic:Parent"`
	Imports    []Import    `json:"imports"`
	Merge      *Merge      `json:"merge"`
	Modify     *Modify     `json:"modify"`
	Controls   []Control   `json:"controls" gorm:"many2many:profile_controls;"`
}

type Prop oscaltypes113.Property

type Protocol oscaltypes113.Protocol

type ProvidedControlImplementation struct {
	UUIDModel
	Description      string                    `json:"description"`
	Links            datatypes.JSONSlice[Link] `json:"links"`
	Props            datatypes.JSONSlice[Prop] `json:"props"`
	Remarks          string                    `json:"remarks"`
	ResponsibleRoles []ResponsibleRole         `json:"responsible-roles" gorm:"polymorphic:Parent;"`

	ExportId uuid.UUID
}

type RelatedFinding oscalTypes_1_1_3.RelatedFinding

type RelatedObservation oscalTypes_1_1_3.RelatedObservation

type RelatedTask struct {
	UUIDModel
	Task               Task
	TaskID             uuid.UUID
	Remarks            *string
	Props              datatypes.JSONSlice[Prop]
	Links              datatypes.JSONSlice[Link]
	ResponsibleParties []ResponsibleParty  `gorm:"many2many:related_task_responsible_parties;"`
	Subjects           []AssessmentSubject `gorm:"many2many:related_task_subjects;"`
	IdentifiedSubject  *IdentifiedSubject

	ParentType string
	ParentID   uuid.UUID
}

type RelevantEvidence oscalTypes_1_1_3.RelevantEvidence

type Removal oscalTypes_1_1_3.Removal

type ResourceLink struct {
	Href      string `json:"href"` // required
	MediaType string `json:"media-type"`
	Hashes    []Hash `json:"hashes"`
}

type Response oscalTypes_1_1_3.Response

type ResponsibleParty struct {
	UUIDModel
	Props   datatypes.JSONSlice[Prop] `json:"props"`
	Links   datatypes.JSONSlice[Link] `json:"links"`
	Remarks string                    `json:"remarks"`

	RoleID  string `json:"role-id"` // required
	Role    Role
	Parties []ResponsiblePartyParties

	// Polymorphic relationship - allows ResponsibleParty to belong to different parent types
	ParentID   *uuid.UUID
	ParentType string
}

type ResponsiblePartyParties struct {
	ResponsiblePartyID *uuid.UUID `gorm:"primaryKey"`
	PartyID            *uuid.UUID `gorm:"primaryKey"`
}

type ResponsibleRole struct {
	UUIDModel
	RoleID  string                    `json:"role-id"` // required
	Props   datatypes.JSONSlice[Prop] `json:"props"`
	Links   datatypes.JSONSlice[Link] `json:"links"`
	Remarks string                    `json:"remarks"`

	Parties []Party `gorm:"many2many:responsible_role_parties;"`
	Role    Role

	ParentID   *uuid.UUID
	ParentType string
}

type Result struct {
	UUIDModel
	AssessmentResultID uuid.UUID
	Title              string // required
	Description        string // required
	Remarks            *string
	Start              *time.Time
	End                *time.Time
	Props              datatypes.JSONSlice[Prop]
	Links              datatypes.JSONSlice[Link]
	LocalDefinitionsID uuid.UUID
	LocalDefinitions   LocalDefinitions
	ReviewedControlsID uuid.UUID
	ReviewedControls   ReviewedControls
	Attestations       []Attestation
	AssessmentLogID    *uuid.UUID
	AssessmentLog      *AssessmentLog

	// Shared entities now using polymorphic associations
	Observations []Observation `gorm:"many2many:result_observations;"`
	Findings     []Finding     `gorm:"many2many:result_findings;"`
	Risks        []Risk        `gorm:"many2many:result_risks;"`
}

type ReviewedControls struct {
	UUIDModel
	Description                *string
	Remarks                    *string
	Props                      datatypes.JSONSlice[Prop]
	Links                      datatypes.JSONSlice[Link]
	ControlSelections          []ControlSelection // required
	ControlObjectiveSelections []ControlObjectiveSelection
}

type Revision struct {
	// Only version is required
	UUIDModel

	// Revision only exist on a metadata object. We'll link them straight there with a BelongsTo relationship
	MetadataID uuid.UUID `json:"metadata-id"`

	Title        *string                   `json:"title"`
	Published    *time.Time                `json:"published"`
	LastModified *time.Time                `json:"last-modified"`
	Version      string                    `json:"version"` // required
	OscalVersion *string                   `json:"oscal-version"`
	Props        datatypes.JSONSlice[Prop] `json:"props"`
	Links        datatypes.JSONSlice[Link] `json:"links"`
	Remarks      *string                   `json:"remarks"`
}

type Risk struct {
	UUIDModel                                                        // required
	Title               string                                       `json:"title"`               // required
	Description         string                                       `json:"description"`         // required
	Statement           string                                       `json:"statement"`           // required
	Status              string                                       `json:"status" gorm:"index"` // required, indexed
	Props               datatypes.JSONSlice[Prop]                    `json:"props"`
	Links               datatypes.JSONSlice[Link]                    `json:"links"`
	Origins             datatypes.JSONSlice[Origin]                  `json:"origins"`
	ThreatIds           datatypes.JSONSlice[ThreatId]                `json:"threat-ids"`
	Characterizations   datatypes.JSONSlice[Characterization]        `json:"characterizations"`
	MitigatingFactors   datatypes.JSONSlice[MitigatingFactor]        `json:"mitigating-factors"`
	Deadline            *time.Time                                   `json:"deadline" gorm:"index"` // Indexed for date queries
	Remediations        datatypes.JSONSlice[Response]                `json:"remediations"`
	RiskLog             datatypes.JSONType[oscalTypes_1_1_3.RiskLog] `json:"risk-log"`
	RelatedObservations datatypes.JSONSlice[RelatedObservation]      `json:"related-observations"`
}

type RiskLog oscalTypes_1_1_3.RiskLog

type Risks = []Risk

type Role struct {
	ID          string                    `json:"id" gorm:"primary_key;"`
	Title       string                    `json:"title"`
	ShortName   *string                   `json:"short-name"`
	Description *string                   `json:"description"`
	Props       datatypes.JSONSlice[Prop] `json:"props"`
	Links       datatypes.JSONSlice[Link] `json:"links"`
	Remarks     *string                   `json:"remarks"`
}

type SSOGroupMapping struct {
	UUIDModel

	CreatedAt time.Time `json:"createdAt"`
	UpdatedAt time.Time `json:"updatedAt"`

	Provider      string `json:"provider" gorm:"not null;uniqueIndex:idx_ccf_sso_group_mappings_provider_group,priority:1"`
	ExternalGroup string `json:"externalGroup" gorm:"not null;uniqueIndex:idx_ccf_sso_group_mappings_provider_group,priority:2"`
	GroupID       string `json:"groupId" gorm:"not null;index"`

	// Source records who owns the mapping: MappingSourceConfig (declared in a provider's
	// group_mapping and reconciled by boot provisioning) or MappingSourceManual (added at runtime via
	// the admin API). It defaults to config so pre-attribution rows — all of which came from config
	// provisioning — are reconciled declaratively: provisioning prunes config rows the config no
	// longer declares, while manual rows are never auto-removed.
	Source string `json:"source" gorm:"not null;default:config"`

	Group UserGroup `json:"group,omitempty" gorm:"foreignKey:GroupID;references:ID"`
}

type SSOUserLink struct {
	UUIDModel

	CreatedAt time.Time      `json:"createdAt"`
	UpdatedAt time.Time      `json:"updatedAt"`
	DeletedAt gorm.DeletedAt `json:"deletedAt" gorm:"index"`

	UserID     string    `json:"userId" gorm:"not null;index"`
	Provider   string    `json:"provider" gorm:"not null;index"`
	ExternalID string    `json:"externalId" gorm:"not null"`
	Email      string    `json:"email"`
	Groups     string    `json:"groups"`
	LastSync   time.Time `json:"lastSync"`

	User User `json:"user,omitempty" gorm:"foreignKey:UserID;references:ID"`
}

type SSPProfile struct {
	SystemSecurityPlanID uuid.UUID `gorm:"primaryKey;type:uuid" json:"system_security_plan_id"`
	ProfileID            uuid.UUID `gorm:"primaryKey;type:uuid;index" json:"profile_id"`
}

type SatisfiedControlImplementationResponsibility struct {
	UUIDModel
	ResponsibilityUuid uuid.UUID                 `json:"responsibility-uuid"`
	Description        string                    `json:"description"`
	Props              datatypes.JSONSlice[Prop] `json:"props"`
	Links              datatypes.JSONSlice[Link] `json:"links"`
	ResponsibleRoles   []ResponsibleRole         `json:"responsible-roles" gorm:"polymorphic:Parent"`
	Remarks            string                    `json:"remarks"`

	ByComponentId uuid.UUID `json:"by-component-id"`
}

type SecurityImpactLevel oscalTypes_1_1_3.SecurityImpactLevel

type SelectControlById struct {
	UUIDModel
	WithChildControls string                        `json:"with-child-controls"`
	WithIds           datatypes.JSONSlice[string]   `json:"with-ids"`
	Matching          datatypes.JSONSlice[Matching] `json:"matching"`

	ParentID   uuid.UUID
	ParentType string
}

type SelectObjectiveById struct {
	UUIDModel
	Objective string // required

	ParentID   uuid.UUID
	ParentType string
}

type SelectSubjectById struct {
	UUIDModel
	AssessmentSubjectID uuid.UUID

	// SubjectUUID technically represents a UUID of a component, party, location, user, or inventory item.
	// It will likely be updated once we can map it correctly
	SubjectUUID uuid.UUID
	Remarks     *string
	Props       datatypes.JSONSlice[Prop]
	Links       datatypes.JSONSlice[Link]
}

type SetParameter oscaltypes113.SetParameter