wire

type Backend interface {
	DaemonStatus(ctx context.Context) (DaemonStatus, error)
	DaemonShutdown(ctx context.Context, gracefulTimeoutSeconds int) error
	ListSessions(ctx context.Context) ([]SessionInfo, error)
	// ListSessionTokens returns the open sessions together with
	// their opaque tokens. It is only used by local CLI callers
	// to auto-bind GPGSMITH_SESSION when exactly one session is
	// open. The tokens are transported via the
	// Gpgsmith-Session-Tokens response header — we intentionally
	// keep them out of SessionInfo/proto so non-local callers
	// (e.g. the web UI shim) never see them by accident.
	ListSessionTokens(ctx context.Context) ([]SessionTokenEntry, error)

	ListVaults(ctx context.Context) (entries []vault.Entry, defaultName string, err error)
	StatusVaults(ctx context.Context) (open []SessionInfo, recoverable []ResumeOption, err error)
	OpenVault(ctx context.Context, name, passphrase string, source gpgsmith.LockSource) (result OpenResult, token string, err error)
	ResumeVault(ctx context.Context, name, passphrase string, source gpgsmith.LockSource, resume bool) (info SessionInfo, token string, err error)
	SealVault(ctx context.Context, token, message string) (vault.Snapshot, error)
	DiscardVault(ctx context.Context, token string) error
	Snapshots(ctx context.Context, name string) ([]vault.Snapshot, error)
	ImportVault(ctx context.Context, sourcePath, passphrase, targetName string) (vault.Snapshot, error)
	CreateVault(ctx context.Context, name, path, passphrase string) (snap vault.Snapshot, session SessionInfo, token string, err error)
	ExportVault(ctx context.Context, name, passphrase, targetDir string) (snapshotName string, err error)
	TrustVault(ctx context.Context, name, fingerprint string) error

	CreateMasterKey(ctx context.Context, token string, opts CreateKeyOpts) (masterFP string, subkeys []gpg.SubKey, err error)
	GenerateSubkeys(ctx context.Context, token string) ([]gpg.SubKey, error)
	ListKeys(ctx context.Context, token string) ([]gpg.SubKey, error)
	RevokeSubkey(ctx context.Context, token, keyID string) error
	ExportKey(ctx context.Context, token string) (target string, err error)
	SSHPubKey(ctx context.Context, token string) (path string, err error)
	KeyStatus(ctx context.Context, token string) (keys []gpg.SubKey, card *gpg.CardInfo, err error)

	ListIdentities(ctx context.Context, token string) ([]gpg.UID, error)
	AddIdentity(ctx context.Context, token, uid string) error
	RevokeIdentity(ctx context.Context, token, uid string) error
	PrimaryIdentity(ctx context.Context, token, uid string) error

	ProvisionCard(ctx context.Context, token string, opts ProvisionCardOpts) (card gpg.YubiKeyEntry, sshPubkeyPath string, err error)
	RotateCard(ctx context.Context, token, label string) (gpg.YubiKeyEntry, error)
	RevokeCard(ctx context.Context, token, label string) error
	CardInventory(ctx context.Context, token string) ([]gpg.YubiKeyEntry, error)
	DiscoverCard(ctx context.Context, token, label, description string) (card gpg.YubiKeyEntry, alreadyKnown bool, err error)

	ListPublishServers(ctx context.Context, token string) ([]gpg.ServerEntry, error)
	AddPublishServer(ctx context.Context, token, alias, url string) error
	RemovePublishServer(ctx context.Context, token, alias string) error
	EnablePublishServer(ctx context.Context, token, alias string) error
	DisablePublishServer(ctx context.Context, token, alias string) error
	Publish(ctx context.Context, token string, aliases []string) ([]PublishResult, error)
	LookupPublished(ctx context.Context, token string) ([]LookupResult, error)

	ShowAudit(ctx context.Context, token string, last int) ([]audit.Entry, error)

	// ===== EventService =====
	//
	// SubscribeEvents returns a channel of events. If token is
	// non-empty and matches an open session, only that vault's events
	// are forwarded; if token is empty, the subscriber receives events
	// for all vaults. The channel is closed when the passed context is
	// canceled. The Backend is responsible for fan-out.
	SubscribeEvents(ctx context.Context, token string) (<-chan Event, error)
}

type Client struct {
	Daemon   gpgsmithv1connect.DaemonServiceClient
	Vault    gpgsmithv1connect.VaultServiceClient
	Key      gpgsmithv1connect.KeyServiceClient
	Identity gpgsmithv1connect.IdentityServiceClient
	Card     gpgsmithv1connect.CardServiceClient
	Server   gpgsmithv1connect.ServerServiceClient
	Audit    gpgsmithv1connect.AuditServiceClient
	Event    gpgsmithv1connect.EventServiceClient
	// contains filtered or unexported fields
}

type CreateKeyOpts struct {
	Name         string
	Email        string
	Algo         string
	Expiry       string
	SubkeyAlgo   string
	SubkeyExpiry string
}

type DaemonStatus struct {
	PID            int
	Version        string
	Commit         string
	SocketPath     string
	StartedAt      time.Time
	ActiveSessions int
}

type Event struct {
	At        time.Time
	VaultName string
	JobID     string
	Kind      EventKind
	Message   string
	Data      map[string]string
}

type EventKind int

type LookupResult struct {
	URL    string
	Status string
}

type OpenResult struct {
	Session         *SessionInfo
	ResumeAvailable *ResumeOption
}

type ProvisionCardOpts struct {
	Label       string
	Description string
	SameKeys    bool
	UniqueKeys  bool
}

type PublishResult struct {
	Alias   string
	Success bool
	Error   string
}

type ResumeOption struct {
	CanonicalBase string
	Hostname      string
	Source        gpgsmith.LockSource
	StartedAt     time.Time
	LastHeartbeat time.Time
	Status        string
	Divergent     bool
}

type Server struct {
	// contains filtered or unexported fields
}

type SessionInfo struct {
	VaultName      string
	VaultPath      string
	Source         gpgsmith.LockSource
	Hostname       string
	StartedAt      time.Time
	LastActiveAt   time.Time
	SourceSnapshot string
	MasterFP       string
	Generation     uint64
	Status         string
}

type SessionTokenEntry struct {
	Token     string
	VaultName string
}