// Copyright 2025 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef COMPONENTS_PRIVATE_AI_CRYPTO_SECURE_SESSION_IMPL_H_
#define COMPONENTS_PRIVATE_AI_CRYPTO_SECURE_SESSION_IMPL_H_

#include <stdint.h>

#include <memory>
#include <optional>
#include <vector>

#include "components/private_ai/crypto/crypter.h"
#include "components/private_ai/crypto/handshake_message.h"
#include "components/private_ai/crypto/noise.h"
#include "third_party/boringssl/src/include/openssl/ec.h"

namespace private_ai {

class SecureSessionImpl {
 public:
  SecureSessionImpl();
  ~SecureSessionImpl();

  HandshakeMessage GetHandshakeMessage();

  bool ProcessHandshakeResponse(const HandshakeMessage& response);

  std::optional<std::vector<uint8_t>> Encrypt(
      const std::vector<uint8_t>& input);

  std::optional<std::vector<uint8_t>> Decrypt(
      const std::vector<uint8_t>& input);

  void set_crypter_for_testing(std::unique_ptr<Crypter> crypter);

 private:
  std::optional<Noise> noise_;
  bssl::UniquePtr<EC_KEY> ephemeral_key_;
  std::unique_ptr<Crypter> crypter_;
};

}  // namespace private_ai

#endif  // COMPONENTS_PRIVATE_AI_CRYPTO_SECURE_SESSION_IMPL_H_