profile

type AWSCredentialsProvider struct {
	// contains filtered or unexported fields
}

type BasicPolicyRestrictions struct {
	// Template restrictions
	TemplateWhitelist []string `json:"template_whitelist,omitempty"` // Allowed templates
	TemplateBlacklist []string `json:"template_blacklist,omitempty"` // Forbidden templates

	// Instance constraints
	MaxInstanceTypes []string `json:"max_instance_types,omitempty"` // Max instance size
	ForbiddenRegions []string `json:"forbidden_regions,omitempty"`  // Regional restrictions

	// Basic budget controls
	MaxHourlyCost  float64 `json:"max_hourly_cost,omitempty"`  // Cost ceiling
	MaxDailyBudget float64 `json:"max_daily_budget,omitempty"` // Daily limit
}

type BatchConfigManager struct {
	// contains filtered or unexported fields
}

type BatchDeviceManagementResult struct {
	Successful      []DeviceOperationResult
	Failed          []DeviceOperationResult
	TotalProcessed  int
	TotalSuccessful int
	TotalFailed     int
}

type BatchDeviceManager struct {
	// contains filtered or unexported fields
}

type BatchInvitation struct {
	// Required fields
	Name string
	Type InvitationType

	// Optional fields with defaults
	ValidDays    int  // Default: 30
	CanInvite    bool // Default: false (true for admin)
	Transferable bool // Default: false
	DeviceBound  bool // Default: true
	MaxDevices   int  // Default: 1

	// Internal fields for processing
	S3ConfigPath string
	ParentToken  string

	// Result fields
	Token       string
	EncodedData string
	Error       error
}

type BatchInvitationConfig struct {
	// General settings
	DefaultConcurrency int `json:"defaultConcurrency"`
	DefaultValidDays   int `json:"defaultValidDays"`

	// Security settings
	DefaultDeviceBound  bool `json:"defaultDeviceBound"`
	DefaultMaxDevices   int  `json:"defaultMaxDevices"`
	DefaultCanInvite    bool `json:"defaultCanInvite"`
	DefaultTransferable bool `json:"defaultTransferable"`

	// CSV settings
	DefaultHasHeader       bool   `json:"defaultHasHeader"`
	DefaultDelimiter       string `json:"defaultDelimiter"`
	IncludeEncodedData     bool   `json:"includeEncodedData"`
	DefaultOutputDirectory string `json:"defaultOutputDirectory"`

	// Admin settings
	RequireAdminAuth     bool   `json:"requireAdminAuth"`
	AdminInvitationToken string `json:"adminInvitationToken"`
	NotificationWebhook  string `json:"notificationWebhook"`
	AuditLoggingEnabled  bool   `json:"auditLoggingEnabled"`
	LogDirectory         string `json:"logDirectory"`

	// Performance settings
	BatchSizeLimit       int  `json:"batchSizeLimit"`
	EnableRateLimiting   bool `json:"enableRateLimiting"`
	MaxOperationsPerHour int  `json:"maxOperationsPerHour"`

	// Last updated
	LastUpdated time.Time `json:"lastUpdated"`
}

type BatchInvitationFactory struct {
	// contains filtered or unexported fields
}

type BatchInvitationManager struct {
	// contains filtered or unexported fields
}

type BatchInvitationResult struct {
	Successful      []*BatchInvitation
	Failed          []*BatchInvitation
	TotalProcessed  int
	TotalSuccessful int
	TotalFailed     int
}

type CSVInvitationParser struct {
	// contains filtered or unexported fields
}

type CSVRecord struct {
	Name         string
	Type         string
	ValidDays    string
	CanInvite    string
	Transferable string
	DeviceBound  string
	MaxDevices   string
}

type CredentialProvider interface {
	// GetCredentials retrieves credentials for a profile
	GetCredentials(profileName string) (*Credentials, error)

	// StoreCredentials stores credentials for a profile
	StoreCredentials(profileName string, creds *Credentials) error

	// ClearCredentials removes credentials for a profile
	ClearCredentials(profileName string) error
}

type Credentials struct {
	AccessKeyID     string     `json:"access_key_id"`
	SecretAccessKey string     `json:"secret_access_key"`
	SessionToken    string     `json:"session_token,omitempty"`
	Expiration      *time.Time `json:"expiration,omitempty"`
}

type DeviceOperationResult struct {
	DeviceID    string
	Token       string
	Name        string
	Operation   string // "revoke", "validate", "info"
	Success     bool
	Error       error
	Details     map[string]interface{}
	ProcessedAt time.Time
}

type FieldParser interface {
	ParseFields(invitation *BatchInvitation, record *CSVRecord) (*BatchInvitation, error)
}

type InvitationManager struct {
	// contains filtered or unexported fields
}

type InvitationToken struct {
	// Token is the unique identifier for this invitation
	Token string `json:"token"`

	// OwnerProfile is the profile ID of the creator
	OwnerProfile string `json:"owner_profile"`

	// OwnerAccount is the AWS account ID of the owner
	OwnerAccount string `json:"owner_account"`

	// S3ConfigPath is the optional path to shared config in S3
	S3ConfigPath string `json:"s3_config_path,omitempty"`

	// Type defines the permission level
	Type InvitationType `json:"type"`

	// Name is a human-readable name for this invitation
	Name string `json:"name"`

	// Created is when this invitation was generated
	Created time.Time `json:"created"`

	// Expires is when this invitation will no longer be valid
	Expires time.Time `json:"expires"`

	// Security attributes for enhanced invitations (v0.4.3+)
	CanInvite    bool `json:"can_invite,omitempty"`
	Transferable bool `json:"transferable,omitempty"`
	DeviceBound  bool `json:"device_bound,omitempty"`
	MaxDevices   int  `json:"max_devices,omitempty"`

	// Parentage tracking for invitation chains
	ParentToken string `json:"parent_token,omitempty"`

	// Basic policy restrictions (open source feature)
	PolicyRestrictions *BasicPolicyRestrictions `json:"policy_restrictions,omitempty"`
}

type InvitationType string

type KeyMetadata struct {
	AWSKeyName string    `json:"aws_key_name"`
	Profile    string    `json:"profile"`
	Region     string    `json:"region"`
	CreatedAt  time.Time `json:"created_at"`
	KeyType    string    `json:"type"`
	Instances  []string  `json:"instances"`
	LocalPath  string    `json:"-"` // Not serialized, computed from profile
	PublicKey  string    `json:"-"` // Not serialized, loaded on demand
}

type KeyMetadataStore struct {
	Keys    map[string]*KeyMetadata `json:"keys"`
	Version string                  `json:"version"`
}

type ManagerEnhanced struct {
	// contains filtered or unexported fields
}

type Profile struct {
	// Type is the profile type (personal or invitation)
	Type ProfileType `json:"type"`

	// Name is the display name for the profile
	Name string `json:"name"`

	// AWSProfile is the AWS CLI profile name to use
	AWSProfile string `json:"aws_profile"`

	// Region is the default AWS region for this profile
	Region string `json:"region"`

	// Default indicates if this is the default profile
	Default bool `json:"default"`

	// CreatedAt is when the profile was created
	CreatedAt time.Time `json:"created_at"`

	// UpdatedAt is when the profile was last updated
	UpdatedAt time.Time `json:"updated_at,omitempty"`

	// ExpiresAt is when invitation profiles expire (optional)
	ExpiresAt *time.Time `json:"expires_at,omitempty"`

	// InvitationID is the invitation ID for invitation profiles (optional)
	InvitationID string `json:"invitation_id,omitempty"`

	// OrganizationID is the organization ID for invitation profiles (optional)
	OrganizationID string `json:"organization_id,omitempty"`

	// LastUsed is when the profile was last used
	LastUsed *time.Time `json:"last_used,omitempty"`

	// InvitationToken for invitation profiles
	InvitationToken string `json:"invitation_token,omitempty"`

	// OwnerAccount for invitation profiles
	OwnerAccount string `json:"owner_account,omitempty"`

	// S3ConfigPath for invitation profiles
	S3ConfigPath string `json:"s3_config_path,omitempty"`

	// DeviceBound indicates if the profile is bound to a device
	DeviceBound bool `json:"device_bound,omitempty"`

	// Transferable indicates if the profile can be transferred
	Transferable bool `json:"transferable,omitempty"`

	// BindingRef is a reference to device binding information
	BindingRef string `json:"binding_ref,omitempty"`

	// SSH key configuration
	SSHKeyName    string `json:"ssh_key_name,omitempty"`    // AWS key pair name
	SSHKeyPath    string `json:"ssh_key_path,omitempty"`    // Local private key path
	UseDefaultKey bool   `json:"use_default_key,omitempty"` // Use default SSH key (~/.ssh/id_rsa)

	// Basic policy restrictions inherited from invitation (open source feature)
	PolicyRestrictions *BasicPolicyRestrictions `json:"policy_restrictions,omitempty"`
}

type ProfileType string

type ProfileWithID struct {
	ID      string  `json:"id"`
	Profile Profile `json:"profile"`
}

type Profiles struct {
	// Profiles is a map of profile ID to profile
	Profiles map[string]Profile `json:"profiles"`

	// CurrentProfile is the ID of the currently active profile
	CurrentProfile string `json:"current_profile"`

	// Version is the profiles file format version
	Version int `json:"version"`
}

type SSHKeyManager struct {
	// contains filtered or unexported fields
}

type SSHKeyManagerV2 struct {
	// contains filtered or unexported fields
}

type SecureCredentialProvider struct {
	// contains filtered or unexported fields
}

type SecureInvitationManager struct {
	*InvitationManager
	// contains filtered or unexported fields
}

type StandardFieldParser struct{}

type StandardTypeParser struct{}

type TypeParser interface {
	ParseType(typeStr string) (InvitationType, error)
}