model

type AutoTimeModel struct {
	CreatedAt time.Time `gorm:"not null"`
	UpdatedAt time.Time `gorm:"not null"`
}

type BaseLabel struct {
	ID         uuid.UUID `gorm:"type:uuid;primaryKey"`
	Key        string    `gorm:"type:varchar(255);not null"`
	Value      string    `gorm:"type:varchar(255)"`
	ResourceID uuid.UUID `gorm:"type:uuid;not null"`
}

type Certificate struct {
	ID             uuid.UUID          `gorm:"type:uuid;primaryKey"`
	Fingerprint    string             `gorm:"type:text;not null"`
	CommonName     string             `gorm:"type:varchar(64);not null"`
	State          CertificateState   `gorm:"type:varchar(255)"`
	Purpose        CertificatePurpose `gorm:"type:varchar(255)"`
	CreationDate   time.Time          `gorm:"not null"`
	ExpirationDate time.Time          `gorm:"not null"`
	CertPEM        string             `gorm:"type:text"` // Base64 encoded PEM certificate
	PrivateKeyPEM  string             `gorm:"type:text"` // Base64 encoded PEM private key
	AutoRotate     bool               `gorm:"not null;default:true"`
	SupersedesID   *uuid.UUID         `gorm:"foreignKey:CertificateID"`
}

type CertificatePurpose string

type CertificateState string

type Event struct {
	AutoTimeModel

	Identifier string            `gorm:"type:varchar(255);primaryKey"`
	Type       string            `gorm:"type:varchar(255);not null"`
	Data       json.RawMessage   `gorm:"type:jsonb;not null"`
	Status     orbital.JobStatus `gorm:"type:varchar(255);not null"`

	// PreviousItemStatus represents the state an item was before the event was sent
	// This is used for cancel actions to recover an item to it's previous state
	PreviousItemStatus string `gorm:"type:varchar(255)"`
}

type Group struct {
	ID            uuid.UUID      `gorm:"type:uuid;primaryKey"`
	Name          string         `gorm:"type:varchar(64);not null;unique"`
	Description   string         `gorm:"type:text"`
	Role          constants.Role `gorm:"type:varchar(255);not null"`
	IAMIdentifier string         `gorm:"type:varchar(128);not null;unique"`
}

type ImportParams struct {
	AutoTimeModel

	KeyID              uuid.UUID `gorm:"type:uuid;primaryKey"`
	WrappingAlg        string    `gorm:"type:varchar(50);not null"`
	HashFunction       string    `gorm:"type:varchar(50);not null"`
	PublicKeyPEM       string    `gorm:"type:text;not null"`
	Expires            *time.Time
	ProviderParameters json.RawMessage `gorm:"type:jsonb"`
}

type JoinSystem struct {
	System

	Key   string `gorm:"type:varchar(255);primaryKey"`
	Value string `gorm:"type:varchar(255)"`
}

type Key struct {
	AutoTimeModel

	ID                   uuid.UUID     `gorm:"type:uuid;primaryKey"`
	KeyConfigurationID   uuid.UUID     `gorm:"type:uuid;not null;uniqueindex:keyname,priority:1"`
	Name                 string        `gorm:"type:varchar(255);not null;uniqueindex:keyname,priority:2"`
	KeyType              string        `gorm:"type:varchar(50);not null"`
	Description          string        `gorm:"type:text"`
	Algorithm            string        `gorm:"type:varchar(50);not null"`
	Provider             string        `gorm:"type:varchar(50);not null"`
	Region               string        `gorm:"type:varchar(50);not null"`
	State                string        `gorm:"type:varchar(50);not null;default:'ENABLED'"`
	KeyVersions          []KeyVersion  `gorm:"foreignKey:KeyID"`
	ImportParams         *ImportParams `gorm:"foreignKey:KeyID;references:ID;constraint:OnDelete:CASCADE"`
	NativeID             *string       `gorm:"type:varchar(255)"`
	KeyLabels            []KeyLabel    `gorm:"foreignKey:ResourceID"`
	LastUsed             *time.Time
	ManagementAccessData json.RawMessage `gorm:"type:jsonb"`
	CryptoAccessData     json.RawMessage `gorm:"type:jsonb"`
	IsPrimary            bool            `gorm:"type:bool"`
}

type KeyAccessData map[string]map[string]any // Map of regions and their properties

type KeyConfiguration struct {
	AutoTimeModel

	ID           uuid.UUID `gorm:"type:uuid;primaryKey"`
	Name         string    `gorm:"type:varchar(255);not null;unique"`
	Description  string    `gorm:"type:text"`
	AdminGroupID uuid.UUID `gorm:"type:uuid;not null"`
	AdminGroup   Group     `gorm:"foreignKey:AdminGroupID"`
	CreatorID    string    `gorm:"type:varchar(255);not null"`
	CreatorName  string    `gorm:"type:varchar(255);not null"`
	PrimaryKeyID *uuid.UUID
	TotalKeys    int `gorm:"->;-:migration"`
	TotalSystems int `gorm:"->;-:migration"`
}

type KeyLabel struct {
	BaseLabel
	AutoTimeModel

	CryptoKey Key `gorm:"foreignKey:ResourceID"`
}

type KeyVersion struct {
	AutoTimeModel

	ExternalID string    `gorm:"type:varchar(255);primaryKey"`
	NativeID   *string   `gorm:"type:varchar(255)"`
	KeyID      uuid.UUID `gorm:"type:uuid;not null;uniqueindex:key_version,priority:1"`
	Key        Key       `gorm:"foreignKey:KeyID;association_foreignkey:ID"`
	Version    int       `gorm:"not null;default:0;uniqueindex:key_version,priority:2"`
	IsPrimary  bool      `gorm:"not null;default:false"`
}

type Keystore struct {
	AutoTimeModel

	ID       uuid.UUID       `gorm:"type:uuid;primaryKey"`
	Provider string          `gorm:"type:varchar(50);not null"`
	Config   json.RawMessage `gorm:"type:jsonb;not null;unique"`
}

type KeystoreAccessData map[string]any

type KeystoreConfig struct {
	LocalityID           string             `yaml:"localityId" json:"localityId"`
	CommonName           string             `yaml:"commonName" json:"commonName"`
	ManagementAccessData KeystoreAccessData `yaml:"managementAccessData" json:"managementAccessData"`
	SupportedRegions     []config.Region    `yaml:"supportedRegions" json:"supportedRegions"`
	// contains filtered or unexported fields
}

type RequestCertArgs struct {
	CertPurpose CertificatePurpose
	Supersedes  *uuid.UUID
	CommonName  string
	Locality    []string
}

type System struct {
	ID uuid.UUID `gorm:"type:uuid;primaryKey"`

	Identifier string `gorm:"type:varchar(255);not null;uniqueindex:region_sys,priority:2"`

	Region               string            `gorm:"type:varchar(50);not null;uniqueindex:region_sys,priority:1"`
	Type                 string            `gorm:"type:varchar(50);not null"`
	KeyConfigurationID   *uuid.UUID        `gorm:"type:uuid"`
	KeyConfigurationName *string           `gorm:"->;-:migration"`
	Properties           map[string]string `gorm:"-:all"`

	// Status can be 'CONNECTED', 'DISCONNECTED', 'FAILED', or 'PROCESSING'
	Status cmkapi.SystemStatus `gorm:"type:varchar(50);default:'DISCONNECTED'"`
}

type SystemProperty struct {
	ID    uuid.UUID `gorm:"type:uuid;primaryKey"`
	Key   string    `gorm:"type:varchar(255);primaryKey"`
	Value string    `gorm:"type:varchar(255)"`
}

type Tag struct {
	ID     uuid.UUID       `gorm:"type:uuid;primaryKey"` // ID of the Item
	Values json.RawMessage `gorm:"type:jsonb"`
}

type Tenant struct {
	multitenancy.TenantModel

	ID        string       `gorm:"type:varchar(255);not null;unique"`
	Region    string       `gorm:"type:varchar(50);not null"`
	Status    TenantStatus `gorm:"type:varchar(50);not null"`
	OwnerType string       `gorm:"type:varchar(50);not null;default:''"`
	OwnerID   string       `gorm:"type:varchar(255);not null;default:''"`
	IssuerURL string       `gorm:"type:varchar(255);not null;default:''"`
	Role      TenantRole   `gorm:"type:varchar(50);not null;default:''"`
}

type TenantConfig struct {
	Key   string          `gorm:"type:varchar(255);primaryKey"`
	Value json.RawMessage `gorm:"type:jsonb;not null"`
}

type TenantRole string

type TenantStatus string

type Validator interface {
	Validate() error
}

type Workflow struct {
	AutoTimeModel

	ID                     uuid.UUID          `gorm:"type:uuid;primaryKey"`
	State                  string             `gorm:"type:varchar(50);not null"`
	InitiatorID            string             `gorm:"type:varchar(255);not null"`
	InitiatorName          string             `gorm:"type:varchar(255);not null"`
	Approvers              []WorkflowApprover `gorm:"foreignKey:WorkflowID"`
	ApproverGroupIDs       json.RawMessage    `gorm:"type:jsonb"`
	ArtifactType           string             `gorm:"type:varchar(50);not null"`
	ArtifactID             uuid.UUID          `gorm:"type:uuid;not null"`
	ArtifactName           *string            `gorm:"type:varchar(255)"` // Currently a snapshot at time of creation
	ActionType             string             `gorm:"type:varchar(50);not null"`
	Parameters             string             `gorm:"type:text"`
	ParametersResourceName *string            `gorm:"type:varchar(255)"`
	ParametersResourceType *string            `gorm:"type:varchar(50)"`
	FailureReason          string             `gorm:"type:text"`
	ExpiryDate             *time.Time
}

type WorkflowApprover struct {
	WorkflowID uuid.UUID `gorm:"type:uuid;primaryKey"`
	UserID     string    `gorm:"type:varchar(255);primaryKey"`
	UserName   string    `gorm:"type:varchar(255);not null"`

	Workflow Workflow     `gorm:"foreignKey:WorkflowID"`
	Approved sql.NullBool `gorm:"default:null"`
}

type WorkflowConfig struct {
	// Enabled determines if workflows are enabled in controllers
	Enabled bool

	// MinimumApprovals is the minimum number of approvals required for a workflow
	MinimumApprovals int

	// RetentionPeriodDays is the number of days to retain workflow data
	RetentionPeriodDays int

	// DefaultExpiryPeriodDays is the default number of days after which pending workflows will expire
	DefaultExpiryPeriodDays int

	// MaxExpiryPeriodDays is the maximum settable value for the expiry period
	MaxExpiryPeriodDays int
}