identity

type ActivateResult struct {
	Success     bool
	Email       string
	LoginToken  string // fallback copy-paste token; empty on failure
	Message     string
	RedirectURL string // full URL for post-activation redirect (e.g. http://localhost:3000/user/overview)
}

type ActivationMessage struct {
	ToEmail        string
	ActivationURL  string
	OSPlatform     string    // darwin/linux/windows; empty ⇒ "unknown device"
	SentAt         time.Time // used for Subject variation + Date header; caller sets to time.Now().UTC()
	LoginSessionID string    // used to build an RFC 5322 Message-ID that correlates with server logs
}

type BeginParams struct {
	SessionID  string
	DeviceCode string
	Email      string
	ReferrerID string // optional: account_id of the user who shared the invite link
}

type BeginResult struct {
	MaskedEmail string
}

type CLILoginService struct {
	// contains filtered or unexported fields
}

type DualMailer struct {
	// contains filtered or unexported fields
}

type GlobalAccount struct {
	AccountID     string
	Email         string
	AccountStatus string
	PasswordHash  string // bcrypt; empty for SSO-only accounts
	CreatedAt     time.Time
	LastLoginAt   *time.Time
}

type InitResult struct {
	LoginSessionID      string
	DeviceCode          string
	PollIntervalSeconds int
	ExpiresInSeconds    int
}

type LogMailer struct {
	// contains filtered or unexported fields
}

type LoginParams struct {
	Email    string
	Password string
}

type LoginSession struct {
	LoginSessionID  string
	DeviceCode      string
	ActivationToken string  // embedded in email link; consumed on first valid use
	LoginToken      *string // fallback copy-paste token; nil until activation
	LoginTokenUsed  bool
	Email           string
	ClientName      string
	ClientVersion   string
	OSPlatform      string
	Status          string
	AccountID       *string
	ExpiresAt       time.Time
	CreatedAt       time.Time
	// LastEmailSentAt tracks when the activation email was last (re-)sent.
	// Drives the per-session resend cooldown; nil on freshly-created sessions
	// that have not yet entered pending_email_activation.
	LastEmailSentAt *time.Time
}

type LoginSessionRepository interface {
	Create(ctx context.Context, session *LoginSession) error
	FindByID(ctx context.Context, sessionID string) (*LoginSession, error)
	FindByDeviceCode(ctx context.Context, deviceCode string) (*LoginSession, error)
	FindByActivationToken(ctx context.Context, token string) (*LoginSession, error)
	// SetEmail attaches an email and a fresh activation_token to a pending_email_entry
	// session, transitioning it to pending_email_activation so that the activation
	// email can be sent.  Returns an error (without mutating state) if session_id /
	// device_code do not match or the session is not in pending_email_entry state.
	// Also stamps last_email_sent_at = now so subsequent Begin calls can enforce
	// the resend cooldown.
	SetEmail(ctx context.Context, sessionID, deviceCode, email, activationToken string) error
	// ResendEmail rotates activation_token + email (email may change) on a
	// session that is already in pending_email_activation. Enforces the check
	// at SQL level: the UPDATE only matches when status = pending_email_activation
	// AND session_id/device_code match. Also updates last_email_sent_at = now.
	// Returns a sentinel error (ErrSessionNotInActivation) when no row matches,
	// so the service layer can distinguish "race" from "wrong input".
	ResendEmail(ctx context.Context, sessionID, deviceCode, email, activationToken string) error
	// Approve marks the session approved_pending_claim and records the account_id
	// and the one-time login_token for the copy-paste fallback path.
	Approve(ctx context.Context, sessionID, loginToken, accountID string) error
	// IssueToken marks the session token_issued after OAuth tokens have been sent.
	IssueToken(ctx context.Context, sessionID string) error
	// MarkLoginTokenUsed prevents a login_token from being exchanged a second time.
	MarkLoginTokenUsed(ctx context.Context, sessionID string) error
	// Deny marks the session denied (suspended account, unresolvable conflict, etc.).
	Deny(ctx context.Context, sessionID string) error
}

type Mailer interface {
	SendActivationEmail(ctx context.Context, msg ActivationMessage) error
}

type OAuthTokenResult struct {
	AccessToken  string
	RefreshToken string
	TokenType    string
	ExpiresIn    int
	AccountID    string
	Email        string
}

type PollResult struct {
	Status PollStatus
	Token  *OAuthTokenResult // non-nil only when Status == PollStatusApproved
}

type PollStatus string

type ReferralRecorder interface {
	RecordReferral(ctx context.Context, referrerAccountID, referredEmail string) error
	CompleteReferral(ctx context.Context, referredEmail, referredAccountID string) error
}

type RefreshToken struct {
	TokenID        string
	AccountID      string
	TokenHash      string  // SHA-256 hex of the plaintext token; plaintext is never stored
	LoginSessionID *string // the session that originally issued this token
	Revoked        bool
	ExpiresAt      time.Time
	CreatedAt      time.Time
}

type RefreshTokenRepository interface {
	Create(ctx context.Context, rt *RefreshToken) error
	FindByHash(ctx context.Context, hash string) (*RefreshToken, error)
	Revoke(ctx context.Context, tokenID string) error
}

type RegisterParams struct {
	Email    string
	Password string // plaintext; hashed before storage
}

type Repository interface {
	Create(ctx context.Context, account *GlobalAccount) error
	FindByID(ctx context.Context, accountID string) (*GlobalAccount, error)
	FindByEmail(ctx context.Context, email string) (*GlobalAccount, error)
	UpdateLastLogin(ctx context.Context, accountID string) error
}

type SMTPMailer struct {
	// contains filtered or unexported fields
}

type SeatReconciler interface {
	// ReconcileByEmail idempotently binds all pending_claim seats with
	// invited_email = email to accountID.  Returns seats bound (0 = already done).
	ReconcileByEmail(ctx context.Context, email, accountID string) (int, error)
}

type Service struct {
	// contains filtered or unexported fields
}

type StartParams struct {
	Email         string
	ClientName    string
	ClientVersion string
	OSPlatform    string
}

type StartResult struct {
	LoginSessionID      string
	DeviceCode          string
	MaskedEmail         string
	PollIntervalSeconds int
	ExpiresInSeconds    int
}

type VKShareReconciler interface {
	ReconcileVKShareStatusByEmail(ctx context.Context, email string) (int, error)
}