memory

type Config struct {
	// Backend is "memory" or "sqlite". Empty defaults to "sqlite".
	Backend string
	// ProjectPath is the project memory database file. Required for sqlite.
	// A repo owner may point it at a tracked path and commit memories with
	// the repository.
	ProjectPath string
	// OrgPath is the user-level org memory database file. Optional; without
	// it org scope is unavailable.
	OrgPath string
	// OrgID is the user-owned org identity. Empty means org scope is
	// unavailable. It must come from the user config, never from a workspace
	// file: a workspace config is repo-controlled and must not name the org
	// store its agents write into.
	OrgID string
	// MaxEntryBytes caps one rendered entry. Default 8192.
	MaxEntryBytes int
	// MaxEntries caps the row count per store file. Default 500.
	MaxEntries int
	// MaxSearchResults caps search results. Default 8.
	MaxSearchResults int
	// BlockPatterns are regexes; matching content is refused at save.
	BlockPatterns []string
	// ReadOnly opens the store without writing the database file: open skips
	// the journal_mode(WAL) switch, the schema CREATE, and the FTS5 rebuild
	// backfill; Close skips the WAL checkpoint; Save is refused. Search
	// works via the LIKE fallback with identical results; the file must
	// already exist with the schema. Zero value false = read-write.
	ReadOnly bool
	// HardenTempStore marks ProjectPath as an ad-hoc, OS-temp-dir-backed store
	// (config.TempStorePath) rather than an operator-managed project path.
	// When true, openSQLiteStore chmods the project database file to 0600 and
	// its parent directory to 0700, failing closed on error, the same way the
	// org store is always hardened: an ad-hoc temp-dir store has no project
	// directory whose permissions an operator manages, so mivia must protect
	// it itself.
	HardenTempStore bool
}

type Entry struct {
	Title      string
	Scope      Scope
	Verdict    Verdict
	Tags       []string
	Created    string // YYYY-MM-DD; empty means "today" at save time
	Summary    string
	Good       string
	Bad        string
	Why        string
	References []string
}

type Limits struct {
	// MaxEntryBytes caps the rendered entry size. Default 8192.
	MaxEntryBytes int
	// BlockPatterns are regexes; content matching any of them is refused.
	// Configuration-only, like the privacy redaction patterns: nothing is
	// compiled into the binary.
	BlockPatterns []string
}

type Query struct {
	Text       string
	Scope      Scope // ScopeProject, ScopeOrg, or ScopeAll
	MaxResults int   // 0 uses the store default
}

type Result struct {
	ID      string
	Scope   Scope
	Org     string
	Title   string
	Verdict Verdict
	Tags    []string
	Created string
	Snippet string
}

type Scope string

type Store interface {
	// Save validates and stores one entry. An identical re-save is
	// idempotent: it returns the existing result and stores no duplicate.
	// Save never sets tier: every entry it writes lands as "archive" (the
	// schema default). Promotion to "core" is a separate, operator-facing
	// action (PromoteToCore) - not reachable from Save, by design (D1a).
	Save(ctx context.Context, e Entry) (Result, error)
	// Search returns up to the configured limit ranked matches. ScopeAll
	// merges project and org results. Org scope without a configured org
	// identity returns an empty result, never an error.
	Search(ctx context.Context, q Query) ([]Result, error)
	// Count returns the number of stored entries for one scope.
	Count(ctx context.Context, scope Scope) (int, error)
	// PromoteToCore marks one existing entry (by id) as tier "core", subject
	// to CoreTierCap per (scope, org). Promoting an already-core entry is a
	// no-op. Returns ErrEntryNotFound if no entry with that id exists, or
	// ErrCoreTierFull if the bucket is already at CoreTierCap.
	PromoteToCore(ctx context.Context, id string) error
	// CoreEntries returns up to CoreTierCap "core"-tier entries for scope,
	// ordered by created DESC, title ASC, id ASC (the same tie-break Search
	// uses). Not a search - no query text, just the current core set. Used
	// to build the auto-injected system-prompt block (D1).
	CoreEntries(ctx context.Context, scope Scope) ([]Result, error)
	// Delete removes one entry (by id) from whichever store this Store has
	// access to (project, then org). Returns ErrEntryNotFound if no entry
	// with that id exists in any store. Refused on a read-only store.
	Delete(ctx context.Context, id string) error
	Close() error
}

type Verdict string