document

type AccessEvent struct {
	DocumentID  string
	VersionNo   int
	Sensitivity Sensitivity
	ActorID     string
}

type AccessHook func(context.Context, AccessEvent) error

type Class struct {
	Key                string
	Module             string
	DefaultSensitivity Sensitivity   // applied when Create omits sensitivity
	MaxBytes           int64         // 0 = no ceiling
	AllowedMIME        []string      // empty = any sniffed type accepted
	Retention          time.Duration // 0 = keep forever; else retention_until = created_at + Retention
}

type ConfirmInput struct {
	DocumentID       uuid.UUID
	VersionNo        int
	StorageKey       string
	DeclaredSize     int64
	DeclaredChecksum string
	DeclaredMIME     string
}

type CreateInput struct {
	Class       string
	Resource    resource.Ref
	Title       string
	Sensitivity Sensitivity // "" → the class default
}

type Download struct {
	VersionNo int
	MIME      string
	URL       storage.PresignedURL
}

type DownloadInput struct {
	DocumentID uuid.UUID
	VersionNo  int
}

type GrantInput struct {
	DocumentID  uuid.UUID
	GranteeKind string // capacity | role | relationship
	GranteeRef  string
	Access      string // read | write
	ValidTo     *time.Time
}

type Hooks struct {
	// contains filtered or unexported fields
}

type Registry struct {
	// contains filtered or unexported fields
}

type Sensitivity string

type Service struct {
	// contains filtered or unexported fields
}

type UploadEvent struct {
	DocumentID  string
	Class       string
	VersionNo   int
	StorageKey  string
	MIME        string
	SizeBytes   int64
	Sensitivity Sensitivity
}

type UploadHook func(context.Context, UploadEvent) error

type UploadSession struct {
	DocumentID uuid.UUID
	VersionNo  int
	StorageKey string
	Upload     storage.PresignedURL
}