consolecall

type Caller struct {
	// Actor is who to write down: the address, else the subject.
	Actor string `json:"actor"`
	// Roles are the installation-wide roles held (the role and the roles it
	// implies are not expanded: [access.Role.Implies] does that).
	Roles []string `json:"roles,omitempty"`
	// Workspaces are the roles held over one directory workspace each.
	Workspaces map[string]string `json:"workspaces,omitempty"`
	// Source says how the actor was established, so the trail names a workload
	// or a recovery as what it is: "person" for an address, "workload", or
	// "recovery"; empty for anyone else.
	Source string `json:"source,omitempty"`
	// Origin is the console's own address, where the provider sends the browser
	// back (the redirect of an install). The console asserts it like the rest
	// of the snapshot; a method that needs none ignores it.
	Origin string `json:"origin,omitempty"`
}

type Callers struct {
	GitHub, Slack, Google modcall.Caller
}

type Directory struct {
	ID      string   `json:"id"`
	Primary string   `json:"primary,omitempty"`
	Served  []string `json:"served,omitempty"`
	// Authoritative is the served domains the directory answers for with
	// confidence, sorted: what an owner is labelled with.
	Authoritative []string `json:"authoritative,omitempty"`
}

type DirectoryFacts struct {
	// Directories are every connected directory: for choosing and showing an
	// owner.
	Directories []Directory `json:"directories,omitempty"`
	// Sources are the directories' groups as a picker lists them, with
	// SourcesError saying why they could not be read.
	Sources      []SourceDirectory `json:"sources,omitempty"`
	SourcesError string            `json:"sources_error,omitempty"`
	// Groups and Users are, by lowercase address, what the call's own addresses
	// are: whether a source is a group of a connected directory, and whether a
	// listed person is an active user of one.
	Groups map[string]GroupFact `json:"groups,omitempty"`
	Users  map[string]UserFact  `json:"users,omitempty"`
}

type Envelope struct {
	Caller Caller          `json:"caller"`
	Msg    json.RawMessage `json:"msg,omitempty"`
	// Directory is what the console resolved of the connected directories for
	// this call ([DirectoryFacts]); nil when the method needs none.
	Directory *DirectoryFacts `json:"directory,omitempty"`
}

type GroupFact struct {
	Found     bool   `json:"found,omitempty"`
	Workspace string `json:"workspace,omitempty"`
	Err       string `json:"err,omitempty"`
}

type Problem struct {
	// Code is the Connect code the console answers with, by its name
	// ("failed_precondition"); empty is a failed precondition.
	Code string `json:"code,omitempty"`
	// Status is the HTTP status of the page the console renders for a provider
	// callback that cannot finish. Zero is 409.
	Status int `json:"status,omitempty"`
	// Summary is one line.
	Summary string `json:"summary"`
	// Detail is what went wrong, safe to show the signed-in person.
	Detail string `json:"detail,omitempty"`
	// Hints are what to try.
	Hints []string `json:"hints,omitempty"`
}

type Reply struct {
	Msg     json.RawMessage `json:"msg,omitempty"`
	Problem *Problem        `json:"problem,omitempty"`
}

type SourceDirectory struct {
	Workspace string        `json:"workspace"`
	Domains   []string      `json:"domains,omitempty"`
	Groups    []SourceGroup `json:"groups,omitempty"`
}

type SourceGroup struct {
	Email   string `json:"email"`
	Members int    `json:"members,omitempty"`
}

type UserFact struct {
	InDomain      bool   `json:"in_domain,omitempty"`
	Authoritative bool   `json:"authoritative,omitempty"`
	Found         bool   `json:"found,omitempty"`
	Suspended     bool   `json:"suspended,omitempty"`
	Workspace     string `json:"workspace,omitempty"`
	Err           string `json:"err,omitempty"`
}