mgmt

type Actor struct {
	Email string
	Name  string

	// Synthetic is true when Email was derived from $USER@host instead of
	// a real git config value. Synthetic actors cannot pass mgmt
	// mutations because their identity can be spoofed by flipping $USER;
	// see RequireRealIdentity.
	Synthetic bool

	// Bot is non-empty when the caller is acting as a bot (typically via
	// SX_BOT=<name>). Email is then "bot:<name>" so audit attribution
	// stays unique and never collides with a human email. See IsBot.
	Bot string
}

type ActorUsageCount struct {
	Actor     string
	TotalUses int
}

type AssetUsageCount struct {
	AssetName    string
	AssetType    string
	TotalUses    int
	UniqueActors int
	LastUsed     time.Time
}

type AuditEvent struct {
	Timestamp  time.Time `json:"ts"`
	Actor      string    `json:"actor"`
	Event      string    `json:"event"`
	TargetType string    `json:"target_type"`
	Target     string    `json:"target"`
	// Profile records which sx profile produced the event. Optional —
	// older sx versions did not populate it. Useful for cross-vault
	// correlation when a user runs multiple profiles against the same
	// audit stream.
	Profile string         `json:"profile,omitempty"`
	Data    map[string]any `json:"data,omitempty"`
}

type AuditFilter struct {
	Actor       string
	EventPrefix string
	Target      string
	Since       time.Time
	Until       time.Time
	Limit       int
}

type Bot struct {
	Name        string
	Slug        string
	Description string
	Teams       []string
	// InstalledSkills is the bot's resolved skill set (direct + team
	// + org-wide installs), deduplicated and sorted. IsDirectInstall marks
	// skills attached directly to this bot so callers can edit only those
	// attachments without maintaining a second parallel skill list.
	InstalledSkills []BotSkill
}

type BotApiKey struct {
	ID          string
	Label       string
	MaskedToken string
	CreatedAt   time.Time
}

type BotSkill struct {
	Name            string
	IsDirectInstall bool
}

type Team struct {
	Name         string   `toml:"name"`
	Description  string   `toml:"description,omitempty"`
	Members      []string `toml:"members,omitempty"`
	Admins       []string `toml:"admins,omitempty"`
	Repositories []string `toml:"repositories,omitempty"`
	MemberCount  int      `toml:"-"` // total members (may exceed len(Members) when paginated)
}

type UsageEvent struct {
	Timestamp    time.Time `json:"ts"`
	Actor        string    `json:"actor"`
	AssetName    string    `json:"asset_name"`
	AssetVersion string    `json:"asset_version"`
	AssetType    string    `json:"asset_type"`
}

type UsageFilter struct {
	AssetName string
	AssetType string
	Actor     string
	Since     time.Time
	Until     time.Time
}

type UsageSummary struct {
	TotalEvents int
	PerAsset    []AssetUsageCount
	PerActor    []ActorUsageCount
}