model

type Attachment struct {
	// Name is the filename of the attachment.
	Name string

	// Data is the binary content.
	Data []byte

	// MimeType is the MIME type of the attachment.
	MimeType string
}

type Credential struct {
	// ID is a unique identifier for the credential.
	ID string

	// Type indicates what kind of credential this is.
	Type CredentialType

	// Title is the display name for the credential.
	Title string

	// Username for authentication credentials.
	Username string

	// Password for basic auth credentials.
	Password string

	// URL is the associated website or service URL.
	URL string

	// Notes contains additional text notes.
	Notes string

	// TOTP contains TOTP configuration if Type == TypeTOTP.
	TOTP *TOTPData

	// SSHKey contains SSH key data if Type == TypeSSHKey.
	SSHKey *SSHKeyData

	// CreditCard contains credit card data if Type == TypeCreditCard.
	CreditCard *CreditCardData

	// CustomFields stores additional key-value pairs.
	CustomFields map[string]string

	// Tags for categorization.
	Tags []string

	// FolderPath represents the hierarchical location, "/" separated.
	// Example: "Work/Servers"
	FolderPath string

	// Created is when the credential was first created.
	Created time.Time

	// Modified is when the credential was last modified.
	Modified time.Time

	// Attachments contains binary attachments.
	Attachments []Attachment
}

type CredentialType int

type CreditCardData struct {
	// Number is the card number.
	Number string

	// Holder is the cardholder name.
	Holder string

	// ExpiryMonth is the expiration month (1-12).
	ExpiryMonth int

	// ExpiryYear is the expiration year (4-digit).
	ExpiryYear int

	// CVV is the card verification value.
	CVV string

	// PIN is the card PIN.
	PIN string

	// Brand is the card brand (Visa, Mastercard, etc.).
	Brand string
}

type SSHKeyData struct {
	// PrivateKey is the PEM-encoded private key.
	PrivateKey string

	// PublicKey is the OpenSSH-format public key.
	PublicKey string

	// Fingerprint is the SHA256 fingerprint of the public key.
	Fingerprint string

	// KeyType is the algorithm (ed25519, rsa, ecdsa).
	KeyType SSHKeyType

	// Comment is the key comment (often user@host).
	Comment string

	// Encrypted indicates if the private key is password-protected.
	Encrypted bool
}

type SSHKeyType string

type TOTPAlgorithm string

type TOTPData struct {
	// Secret is the base32-encoded TOTP secret.
	Secret string

	// Algorithm is the hash algorithm (SHA1, SHA256, SHA512).
	Algorithm TOTPAlgorithm

	// Digits is the number of digits in the code (typically 6 or 8).
	Digits int

	// Period is the time step in seconds (typically 30).
	Period int

	// Issuer is the service that issued the TOTP.
	Issuer string

	// AccountName is the account identifier for the TOTP.
	AccountName string
}