store

type APIKeyMeta struct {
	ID         string   `json:"id"`               // SHA-256 hash of the raw key (also used as Valkey key suffix)
	Label      string   `json:"label"`            // Human-readable label
	Prefix     string   `json:"prefix"`           // First 8 characters of the raw key for display
	CreatedBy  string   `json:"created_by"`       // User or system that created the key
	CreatedAt  string   `json:"created_at"`       // RFC-3339 timestamp
	LastUsedAt string   `json:"last_used_at"`     // RFC-3339 timestamp, empty if never used
	Scopes     []string `json:"scopes,omitempty"` // Optional allow-list; empty preserves legacy full access
}

type AgentTokenMeta struct {
	AgentID      string `json:"agent_id"`
	SubjectID    string `json:"subject_id,omitempty"`
	CredentialID string `json:"credential_id,omitempty"`
	Token        string `json:"token"`
	CreatedAt    string `json:"created_at"`
	LastSeen     string `json:"last_seen"`
}

type AtomicValueUpdater interface {
	CompareAndSwapValues(ctx context.Context, expected map[string]*string, updates map[string]*string) (bool, error)
}

type HostEntry struct {
	ID       string   `json:"id"`
	IP       string   `json:"ip"`
	Hostname string   `json:"hostname,omitempty"`
	Aliases  []string `json:"aliases,omitempty"`
	Sources  []string `json:"sources,omitempty"`
}

type HostVulnerabilityStat struct {
	HostIP        string `json:"host_ip"`
	Hostname      string `json:"hostname,omitempty"`
	Total         int    `json:"total"`
	Critical      int    `json:"critical"`
	High          int    `json:"high"`
	Medium        int    `json:"medium"`
	Low           int    `json:"low"`
	Informational int    `json:"informational"`
}

type KVStore interface {
	// SetValue sets the given key to the specified value.
	SetValue(ctx context.Context, key, value string) error
	// SetValueWithTTL sets the given key to the specified value with a TTL in seconds.
	SetValueWithTTL(ctx context.Context, key, value string, ttlSeconds int) error
	// GetValue retrieves the value associated with the given key.
	// Missing keys must return an error wrapping ErrKeyNotFound.
	GetValue(ctx context.Context, key string) (ValkeyResponse, error)
	// GetTTL retrieves the remaining TTL in seconds for the given key.
	GetTTL(ctx context.Context, key string) (int, error)
	// SetExpire sets the TTL for an existing key in seconds.
	SetExpire(ctx context.Context, key string, ttlSeconds int) error
	// ListKeys retrieves all keys matching the given pattern.
	ListKeys(ctx context.Context, pattern string) ([]string, error)
	// DeleteValue removes the value associated with the given key.
	DeleteValue(ctx context.Context, key string) error
	// Close shuts down the underlying connection.
	Close() error
}

type ScanResult struct {
	ID              string                 `json:"id"`
	Status          string                 `json:"status"`
	Targets         []string               `json:"targets"`
	Hosts           []HostEntry            `json:"hosts"`
	HostsCompleted  int                    `json:"hosts_completed"`
	Vulnerabilities []VulnerabilitySummary `json:"vulnerabilities"`
	StartTime       string                 `json:"start_time"`
	EndTime         string                 `json:"end_time,omitempty"`
	SubScans        map[string]SubScan     `json:"sub_scans,omitempty"`
}

type SnapshotMetadata struct {
	TotalHosts               int     `json:"total_hosts"`
	HostsWithVulnerabilities int     `json:"hosts_with_vulnerabilities"`
	ScanCoveragePercent      float64 `json:"scan_coverage_percent"`
	SnapshotDurationMs       int64   `json:"snapshot_duration_ms"`
}

type SubScan struct {
	Type     string          `json:"type"`
	Enabled  bool            `json:"enabled"`
	Status   string          `json:"status"`
	Progress SubScanProgress `json:"progress"`
	Metadata json.RawMessage `json:"metadata,omitempty"`
}

type SubScanProgress struct {
	Completed int    `json:"completed"`
	Total     int    `json:"total"`
	Label     string `json:"label,omitempty"`
}

type ValkeyResponse struct {
	Message ValkeyValue `json:"Message"`
	Type    string      `json:"Type"`
}

type ValkeyValue struct {
	Value string `json:"Value"`
}

type ValueCompareAndSetter interface {
	CompareAndSetValue(ctx context.Context, key, expected, value string) (bool, error)
}

type ValueCreator interface {
	SetValueIfAbsent(ctx context.Context, key, value string) (bool, error)
}

type VulnerabilityCounts struct {
	Total         int `json:"total"`
	Critical      int `json:"critical"`
	High          int `json:"high"`
	Medium        int `json:"medium"`
	Low           int `json:"low"`
	Informational int `json:"informational"`
}

type VulnerabilitySnapshot struct {
	SnapshotID string                  `json:"snapshot_id"` // YYYY-MM-DD format
	Timestamp  time.Time               `json:"timestamp"`
	Counts     VulnerabilityCounts     `json:"counts"`
	ByHost     []HostVulnerabilityStat `json:"by_host"`
	Metadata   SnapshotMetadata        `json:"metadata"`
}

type VulnerabilitySummary struct {
	ID          string  `json:"id"`
	Severity    string  `json:"severity"`
	Title       string  `json:"title"`
	Description string  `json:"description"`
	CVSSScore   float64 `json:"cvss_score,omitempty"`
	RiskScore   float64 `json:"risk_score,omitempty"`
	ScanSource  string  `json:"scan_source,omitempty"`
	HostID      string  `json:"host_id,omitempty"`
	AgentID     string  `json:"agent_id,omitempty"`
}