auth

type AuthServiceSecretManager interface {
	GetPublicKeys(ctx context.Context) ([]DistributedKey, error)
	StoreEncrypted(ctx context.Context, secretID string, encryptedKey []byte, encryptedData []byte, nonce []byte, distributedKeyID string) error
	GetEncrypted(ctx context.Context, secretID string) (*EncryptedSecretInfo, error)
	GetDecryptionShares(ctx context.Context, encryptedSecret []byte, distributedKeyID string) ([][]byte, error)
	Delete(ctx context.Context, secretID string) error
	Exists(ctx context.Context, secretID string) (bool, error)
	List(ctx context.Context) ([]string, error)
	CheckAndTriggerDKG(ctx context.Context, trigger TriggerReason) error
	AttachStreams(authService peerService.CommandService)
	Close() error
}

type BitbucketHook struct {
	Id string
}

type Client interface {
	InjectStaticCertificate(domain string, data []byte) error
	GetCertificate(domain string) (*tls.Certificate, error)
	GetStaticCertificate(domain string) (*tls.Certificate, error)
	GetRawCertificate(domain string) ([]byte, error)
	GetRawStaticCertificate(domain string) ([]byte, error)
	RegisterDomain(fqdn, projectID string) (*DomainRegistration, error)
	Hooks() Hooks
	Projects() Projects
	Repositories() Repositories
	Secrets() Secrets
	Stats() Stats // TODO: rename State
	Peers(...peerCore.ID) Client
	Close()
}

type DistributedKey interface {
	KeyID() string
	PublicKey() []byte
	Members() []peer.ID
	Threshold() int
	MemberCount() int
	CreatedAt() time.Time
}

type DomainRegistration struct {
	Token string `json:"token"`
	Entry string `json:"entry"`
	Type  string `json:"type"`
}

type EncryptedSecretInfo struct {
	SecretID         string
	EncryptedData    []byte
	Nonce            []byte
	DistributedKeyID string
	Members          []peer.ID
	Threshold        int
	PublicKey        []byte
}

type GithubHook struct {
	Id       string
	GithubId int
	Secret   string
}

type GithubRepositories interface {
	New(obj map[string]interface{}) (GithubRepository, error)
	Get(id int) (GithubRepository, error)
	List() ([]string, error)
	Register(repoID string) (string, error)
}

type GithubRepository interface {
	Repository
	PrivateKey() string
	Project() string
}

type Hook interface {
	Github() (*GithubHook, error)
	Bitbucket() (*BitbucketHook, error)
}

type Hooks interface {
	Get(hook_id string) (Hook, error)
	New(obj map[string]interface{}) (Hook, error)
	List() ([]string, error)
}

type Project struct {
	Client
	Id       string
	Name     string
	Provider string
	Git      struct {
		Config Repository
		Code   Repository
	}
}

type Projects interface {
	New(obj map[string]interface{}) *Project
	Get(project_id string) *Project
	List() ([]string, error)
	Create(name, configRepoID, codeRepoID string) error
}

type PublicKeyOption func(*PublicKeyOptions)

type PublicKeyOptions struct {
	Limit int
}

type Repositories interface {
	Github() GithubRepositories
}

type Repository interface {
	PrivateKey() string
	Id() int
}

type Secrets interface {
	Store(ctx context.Context, secretID string, plaintext []byte) error
	Retrieve(ctx context.Context, secretID string) ([]byte, error)
	Delete(ctx context.Context, secretID string) error
	Exists(ctx context.Context, secretID string) (bool, error)
	List(ctx context.Context) ([]string, error)
	PublicKeys(ctx context.Context, opts ...PublicKeyOption) ([]DistributedKey, error)
}

type Service interface {
	services.DBService
	services.GitHubAuth
}

type ServiceStreamClient interface {
	New(cmd string, opts ...client.Option[client.Request]) *client.Request
}

type Stats interface {
	Database() (kvdb.Stats, error)
}

type StreamClient interface {
	New(cmd string, opts ...client.Option[client.Request]) *client.Request
}

type TriggerReason int