protocol

type CreateKeyRequest struct {
	Namespace   string `json:"namespace"`
	User        string `json:"user"`
	Team        string `json:"team"`
	Role        string `json:"role"`
	Description string `json:"description"`
	ExpiresAt   string `json:"expiresAt,omitempty"`
	// Import/promote mode: when TokenHash + HashPrefix are set, the ws-proxy
	// stores the existing hash instead of generating a new token.
	TokenHash  string `json:"tokenHash,omitempty"`
	HashPrefix string `json:"hashPrefix,omitempty"`
	IssuedAt   string `json:"issuedAt,omitempty"`
	QuotaURL   string `json:"quotaURL,omitempty"`
	// RawToken carries the plaintext token for promote operations so that
	// other Workers can also store the recoverable key value.
	RawToken string `json:"rawToken,omitempty"`
}

type CreateKeyResponse struct {
	RawToken   string
	KeyID      string
	TokenHash  string
	HashPrefix string
	IssuedAt   string
}

type Frame struct {
	// ── Routing ──────────────────────────────────────────────────────────────
	ID   string    `json:"id,omitempty"` // correlation ID for request/response pairing
	Type FrameType `json:"type"`

	// ── API Key metadata (key_sync / key_snapshot item) ───────────────────────
	TokenHash   string `json:"tokenHash,omitempty"`
	HashPrefix  string `json:"hashPrefix,omitempty"`
	Name        string `json:"name,omitempty"` // secret name (delete / sync)
	Namespace   string `json:"namespace,omitempty"`
	Role        string `json:"role,omitempty"`
	User        string `json:"user,omitempty"`
	Team        string `json:"team,omitempty"`
	QuotaURL    string `json:"quotaURL,omitempty"`
	Description string `json:"description,omitempty"`
	IssuedAt    string `json:"issuedAt,omitempty"`  // RFC3339
	ExpiresAt   string `json:"expiresAt,omitempty"` // RFC3339

	// ── Snapshot batch (key_snapshot / template_snapshot) ────────────────────
	Items []Frame `json:"items,omitempty"`

	// ── Response fields (ws-proxy → Worker) ──────────────────────────────────
	OK         bool   `json:"ok,omitempty"`
	RawToken   string `json:"rawToken,omitempty"`
	KeyID      string `json:"keyId,omitempty"`
	Error      string `json:"error,omitempty"`
	HTTPStatus int    `json:"httpStatus,omitempty"`

	// ── SandboxTemplate fields ────────────────────────────────────────────────
	// TemplateFull carries the complete serialised SandboxTemplate object
	// (ObjectMeta + Spec). It is used in all directions: create/update requests
	// (Worker → ws-proxy), sync push (ws-proxy → Worker), and snapshots.
	// Delete frames reuse the top-level Name field for the template name.
	TemplateFull json.RawMessage `json:"templateFull,omitempty"`

	// ── ClusterConfig fields ──────────────────────────────────────────────────
	// ConfigSnapshot carries the full serialised ClusterConfig snapshot
	// (clusters + hostAliases + any future top-level fields) for
	// cluster_config_sync and cluster_config_snapshot frames.
	//
	// Using an opaque json.RawMessage here keeps the protocol layer free from
	// importing the cluster package and lets the Manager add new top-level
	// fields without bumping this struct. The Worker unmarshals it into
	// cluster.ClusterConfig on receipt.
	//
	// Workers MUST treat a zero-length ConfigSnapshot as a no-op (do not
	// clear config) so a transient empty push cannot erase a populated
	// ConfigMap on disk.
	ConfigSnapshot json.RawMessage `json:"configSnapshot,omitempty"`
}

type FrameType string

type HTTPError struct {
	Status  int
	Message string
}