protocol

type APIError struct {
	Status  int
	Code    string
	Message string
}

type AppendLogRequest struct {
	Entries []LogEntry `json:"entries"`
}

type AppendLogResponse struct {
	Accepted int `json:"accepted"`
}

type Client struct {
	BaseURL string
	Token   string
	HTTP    *http.Client
	UA      string
}

type CreateVaultRequest struct {
	Name string `json:"name"`
}

type Device struct {
	ID   string `json:"id"`
	Name string `json:"name"`
}

type DeviceCodeRequest struct {
	DeviceName string `json:"device_name"`
	PublicKey  string `json:"public_key,omitempty"`
}

type DeviceCodeResponse struct {
	DeviceCode              string `json:"device_code"`
	UserCode                string `json:"user_code"`
	VerificationURI         string `json:"verification_uri"`
	VerificationURIComplete string `json:"verification_uri_complete"`
	ExpiresIn               int    `json:"expires_in"`
	Interval                int    `json:"interval"`
}

type DeviceTokenRequest struct {
	DeviceCode string `json:"device_code"`
}

type DeviceTokenResponse struct {
	AccessToken string `json:"access_token"`
	TokenType   string `json:"token_type"`
	Device      Device `json:"device"`
}

type EntryPayload struct {
	V         int    `json:"v"`
	Path      string `json:"path"`    // "~/Projects/app/.env" (home-relative when possible)
	Project   string `json:"project"` // display name
	Size      int    `json:"size"`
	Source    string `json:"source"` // protect | snapshot | restore
	Device    string `json:"device"` // human device name
	CreatedAt int64  `json:"created_at"`
}

type ErrorBody struct {
	Error struct {
		Code    string `json:"code"`
		Message string `json:"message"`
	} `json:"error"`
}

type LogEntry struct {
	DeviceSeq  int64  `json:"device_seq"`
	ObjectID   string `json:"object_id"`
	Payload    []byte `json:"payload"`     // sealed EntryPayload (base64 in JSON)
	DeviceKey  []byte `json:"device_key"`  // ed25519 public key
	DeviceCert []byte `json:"device_cert"` // HMAC(vault cert key, DeviceKey)
	Signature  []byte `json:"signature"`   // ed25519 over SigningMessage
}

type Me struct {
	User   User    `json:"user"`
	Device *Device `json:"device"`
}

type ReadLogResponse struct {
	Entries []StoredEntry `json:"entries"`
	Next    int64         `json:"next"` // pass as ?since= to continue
	More    bool          `json:"more"`
}

type StoredEntry struct {
	ID         int64  `json:"id"` // global cursor, strictly increasing per vault
	DeviceID   string `json:"device_id"`
	DeviceSeq  int64  `json:"device_seq"`
	ObjectID   string `json:"object_id"`
	Payload    []byte `json:"payload"`
	DeviceKey  []byte `json:"device_key"`
	DeviceCert []byte `json:"device_cert"`
	Signature  []byte `json:"signature"`
	CreatedAt  int64  `json:"created_at"`
}

type User struct {
	ID    string `json:"id"`
	Email string `json:"email"`
}

type Vault struct {
	ID string `json:"id"`
	// Fingerprint of the vault's public recipient, once a keyring is uploaded.
	// Lets a new device find "its" vault without decrypting anything.
	Fingerprint string `json:"fingerprint,omitempty"`
	CreatedAt   int64  `json:"created_at"`
}

type VaultList struct {
	Vaults []Vault `json:"vaults"`
}