m365

type ArchiveStats struct {
	Name       string `json:"name"`
	Items      int    `json:"items"`
	Bytes      uint64 `json:"bytes"`
	Downloaded uint64 `json:"downloaded"`
	Reused     uint64 `json:"reused"`
}

type Credentials struct {
	TenantID       string `json:"tenant_id"`
	ClientID       string `json:"client_id"`
	AuthMethod     string `json:"auth_method"`
	Secret         string `json:"secret,omitempty"`
	CertificatePEM string `json:"certificate_pem,omitempty"`
	KeyPEM         string `json:"key_pem,omitempty"`
}

type Generator struct {
	Agent    string `json:"agent"`
	Version  string `json:"version"`
	Hostname string `json:"hostname"`
}

type JobInfo struct {
	ID          string `json:"id"`
	Name        string `json:"name,omitempty"`
	RunID       string `json:"run_id"`
	BackupRunID string `json:"backup_run_id"`
	// Group is the job's PBS group (directory archive, prefix of every unit group)
	Group string `json:"group"`
}

type Manifest struct {
	SchemaVersion int               `json:"schema_version"`
	Generator     Generator         `json:"generator"`
	Job           JobInfo           `json:"job"`
	Tenant        TenantInfo        `json:"tenant"`
	StartedAt     time.Time         `json:"started_at"`
	FinishedAt    time.Time         `json:"finished_at"`
	Units         []UnitResult      `json:"units"`
	Spec          *Spec             `json:"spec,omitempty"`
	Warnings      []string          `json:"warnings,omitempty"`
	Restore       map[string]string `json:"restore"`
}

type Organization struct {
	ID          string   `json:"id"`
	DisplayName string   `json:"display_name"`
	Domains     []string `json:"domains"`
}

type Selection struct {
	Include []string `json:"include,omitempty"`
	Exclude []string `json:"exclude,omitempty"`
}

type Spec struct {
	// TenantID is the m365_tenants row the job uses
	TenantID  uuid.UUID     `json:"tenant_id"`
	Workloads Workloads     `json:"workloads"`
	Users     UserSelection `json:"users"`
	Sites     Selection     `json:"sites"`
	Teams     Selection     `json:"teams"`
	// MailFolderExcludes are mail folder display names left out; absent (null) means
	// DefaultMailFolderExcludes, an empty list means none
	MailFolderExcludes []string `json:"mail_folder_excludes"`
	// ExcludeTypes are message classes left out (IPM.Appointment, IPM.Contact, ...)
	ExcludeTypes []string `json:"exclude_types,omitempty"`
	// ExcludePaths are proxmox-backup-client style patterns against the archive paths
	// of the drive archives (/Documents/Recordings/**)
	ExcludePaths []string `json:"exclude_paths,omitempty"`
	// Concurrency is the number of units in flight (default DefaultConcurrency)
	Concurrency int `json:"concurrency,omitempty"`
	// BackupID overrides the job's PBS group, the prefix of every unit group
	// (default m365-<tenant short name>)
	BackupID string `json:"backup_id,omitempty"`
}

type Tenant struct {
	ID uuid.UUID `json:"id"`
	// Name is the administrator's label; SafeName(Name) is the default group prefix
	Name string `json:"name"`
	// TenantID is the directory (tenant) id GUID or a verified domain
	TenantID string `json:"tenant_id"`
	// ClientID is the application (client) id of the app registration
	ClientID   string `json:"client_id"`
	AuthMethod string `json:"auth_method"`
	Secret     string `json:"-"`
	// CertificatePEM is the public certificate uploaded to the app registration;
	// KeyPEM its private key (RSA)
	CertificatePEM string `json:"-"`
	KeyPEM         string `json:"-"`
	// SecretExpires is when the secret or certificate stops working (the health page
	// warns 30 days before). Entered by the administrator for secrets, taken from the
	// certificate otherwise.
	SecretExpires *time.Time `json:"secret_expires,omitempty"`
	CreatedAt     time.Time  `json:"created_at"`
	UpdatedAt     time.Time  `json:"updated_at"`

	// Derived, API-safe
	HasSecret      bool `json:"has_secret"`
	HasCertificate bool `json:"has_certificate"`
	// Jobs is the number of jobs referencing the tenant (filled by the list API)
	Jobs int `json:"jobs"`
	// Labels place the tenant in access scopes (db.Labels; a plain map here because
	// pkg/db imports this package)
	Labels map[string]string `json:"labels"`
}

type TenantInfo struct {
	ID          string `json:"id"`
	DisplayName string `json:"display_name"`
}

type UnitResult struct {
	Kind string `json:"kind"`
	// Name is the UPN, site URL or team display name; ObjectID the Graph id
	Name     string `json:"name"`
	ObjectID string `json:"object_id,omitempty"`
	Group    string `json:"group"`
	// Status: completed | failed | skipped
	Status string `json:"status"`
	Error  string `json:"error,omitempty"`
	// SnapshotTime is the snapshot written for the unit (unix seconds), 0 when none
	SnapshotTime int64 `json:"snapshot_time,omitempty"`
	// Per archive: items in the tree, bytes fetched from Graph this run, bytes reused
	// from the previous snapshot
	Archives []ArchiveStats `json:"archives,omitempty"`
	Resyncs  int            `json:"resyncs,omitempty"`
	Warnings []string       `json:"warnings,omitempty"`
}

type UserSelection struct {
	// Groups restricts the selection to the transitive members of these groups
	// (display names or object ids); empty = every user
	Groups []string `json:"groups,omitempty"`
	// Include / Exclude are UPN globs applied after Groups
	Include []string `json:"include,omitempty"`
	Exclude []string `json:"exclude,omitempty"`
	// Unlicensed also backs up accounts without a licence (default false)
	Unlicensed bool `json:"unlicensed,omitempty"`
	// Shared includes shared mailboxes (default true)
	Shared *bool `json:"shared,omitempty"`
}

type Workloads struct {
	Mailboxes *bool `json:"mailboxes,omitempty"`
	OneDrive  *bool `json:"onedrive,omitempty"`
	Sites     *bool `json:"sites,omitempty"`
	Teams     *bool `json:"teams,omitempty"`
	Entra     *bool `json:"entra,omitempty"`
}