repository

type AgentPromptRepository struct {
	// contains filtered or unexported fields
}

type AgentRunSuspensionRepository struct {
	// contains filtered or unexported fields
}

type DataSourceRepository struct {
	// contains filtered or unexported fields
}

type KnowledgeSpanRepository interface {
	Upsert(ctx context.Context, row *types.KnowledgeProcessingSpan) error
	NextAttempt(ctx context.Context, knowledgeID string) (int, error)
	LatestAttempt(ctx context.Context, knowledgeID string) (int, error)
	ListByAttempt(ctx context.Context, knowledgeID string, attempt int) ([]types.KnowledgeProcessingSpan, error)
	GetSpan(ctx context.Context, knowledgeID string, attempt int, spanID string) (*types.KnowledgeProcessingSpan, error)
	// CancelDescendants marks every descendant of a parent span as
	// "cancelled" with the given reason. Used by the tracker to
	// cascade an upstream failure across a stage's downstream subtree
	// without iterating in Go memory.
	CancelDescendants(ctx context.Context, knowledgeID string, attempt int, parentSpanID, reason string) (int64, error)
	// CancelAllOpenSpans flips every non-terminal (pending/running) span
	// for (knowledgeID, attempt) to "cancelled" in one statement,
	// regardless of tree position. Used by the user-cancel path where
	// fan-out stages (e.g. "多模态识别") flip themselves to done as soon
	// as they finish dispatching, while their async children are still
	// running — a tree walk that stops at terminal parents would miss
	// those orphan leaves.
	CancelAllOpenSpans(ctx context.Context, knowledgeID string, attempt int, errorCode, reason string) (int64, error)
	// CancelOpenSpansBeforeAttempt flips every pending/running span belonging to
	// an attempt strictly older than `attempt` to cancelled. Reparse calls it so a
	// superseded attempt cannot leave a "running" root behind.
	CancelOpenSpansBeforeAttempt(
		ctx context.Context, knowledgeID string, attempt int, errorCode, reason string,
	) (int64, error)
	// CancelOpenSpansByName flips pending/running rows with the given span
	// name for (knowledgeID, attempt). Used before re-opening a subspan
	// after asynq retry or server restart so the trace tree does not
	// accumulate duplicate postprocess.summary / question rows.
	CancelOpenSpansByName(ctx context.Context, knowledgeID string, attempt int, name, errorCode, reason string) (int64, error)
	// LastActivity returns each knowledge's most recent span write, across
	// attempts. Knowledge without spans is absent from the map.
	LastActivity(ctx context.Context, knowledgeIDs []string) (map[string]time.Time, error)
}

type MCPToolApprovalRepository struct {
	// contains filtered or unexported fields
}

type ModelCatalogRepository struct {
	// contains filtered or unexported fields
}

type SyncLogRepository struct {
	// contains filtered or unexported fields
}

type TenantSandboxConfigRepository interface {
	Create(ctx context.Context, e *types.TenantSandboxConfigEntity) error
	GetByID(ctx context.Context, tenantID uint64, id string) (*types.TenantSandboxConfigEntity, error)
	ListByTenant(ctx context.Context, tenantID uint64) ([]*types.TenantSandboxConfigEntity, error)
	// ListAll is the housekeeping scan. Unlike every other method it is not
	// tenant-scoped: the stuck-run reaper and snapshot reconcile have to walk
	// every workspace. Do not use it on a request path.
	ListAll(ctx context.Context) ([]*types.TenantSandboxConfigEntity, error)
	Update(ctx context.Context, e *types.TenantSandboxConfigEntity) error
	SoftDelete(ctx context.Context, tenantID uint64, id string) error
	SetCordon(ctx context.Context, tenantID uint64, id string, at time.Time) error
	// RefreshCordon moves cordoned_at from previous to next only while the
	// row still holds previous. Zero rows means another request owns the cordon.
	RefreshCordon(ctx context.Context, tenantID uint64, id string, previous, next time.Time) error
	ClearCordon(ctx context.Context, tenantID uint64, id string) error
	// ClearCordonIf clears cordoned_at only when it still equals at. Zero
	// rows is success: someone else owns the cordon.
	ClearCordonIf(ctx context.Context, tenantID uint64, id string, at time.Time) error
}

type TenantSkillRepository interface {
	// CreateSkill inserts a metadata projection row before provider-side image work starts.
	CreateSkill(ctx context.Context, e *types.TenantSkillEntity) error
	// GetSkill returns nil (no error) when the skill does not exist or belongs
	// to another workspace/config, so callers can render a 404 directly.
	GetSkill(ctx context.Context, tenantID uint64, configID, skillID string) (*types.TenantSkillEntity, error)
	// GetSkillByName scopes lookup by config because skill names are only unique within a config.
	GetSkillByName(ctx context.Context, tenantID uint64, configID, name string) (*types.TenantSkillEntity, error)
	// ListSkillsByConfig returns the installed skill projection for one sandbox config.
	ListSkillsByConfig(ctx context.Context, tenantID uint64, configID string) ([]*types.TenantSkillEntity, error)
	// ListSkillsByTenant spans every sandbox config of one workspace, for the
	// views that are about the user rather than about a config.
	ListSkillsByTenant(ctx context.Context, tenantID uint64) ([]*types.TenantSkillEntity, error)
	// UpdateSkill writes the mutable projection fields after install/remove
	// state changes. It never touches envs; see the implementation.
	UpdateSkill(ctx context.Context, e *types.TenantSkillEntity) error
	// UpdateSkillEnvs writes the declared environment variables alone.
	UpdateSkillEnvs(
		ctx context.Context, tenantID uint64, configID, skillID string, envs types.SkillEnvVars,
	) error
	// UpdateSkillAdminState writes visibility and declared values together, as
	// one admin request.
	UpdateSkillAdminState(
		ctx context.Context,
		tenantID uint64,
		configID, skillID string,
		enabled bool,
		envs types.SkillEnvVars,
	) error
	// DeleteSkill soft-deletes the metadata row and, in the same transaction,
	// hard-deletes the per-principal env values hanging off it. Image cleanup is
	// represented by snapshots. When the scoped key matches no skill, nothing is
	// deleted and the call succeeds.
	DeleteSkill(ctx context.Context, tenantID uint64, configID, skillID string) error
	// ListStaleInstalling finds abandoned install/remove runs for the reaper.
	ListStaleInstalling(ctx context.Context, olderThan time.Time) ([]*types.TenantSkillEntity, error)

	// CreateSnapshotRow records provider work before creating the billable snapshot.
	CreateSnapshotRow(ctx context.Context, e *types.TenantSkillSnapshotEntity) error
	// MarkSnapshotState updates ledger state and stores the provider snapshot ID once known.
	MarkSnapshotState(ctx context.Context, tenantID uint64, id, state, snapshotID string) error
	// ListSnapshotsByConfig returns the full chain for audit and troubleshooting.
	ListSnapshotsByConfig(ctx context.Context, tenantID uint64, configID string) ([]*types.TenantSkillSnapshotEntity, error)
	// DeleteSnapshotRowsByConfig removes ledger rows only when an entire sandbox
	// config is deleted and its provider-side snapshots are already gone; never
	// call this during an ordinary image switch (old snapshots stay in the ledger).
	DeleteSnapshotRowsByConfig(ctx context.Context, tenantID uint64, configID string) error

	// ListUserEnvVars returns one principal's own values for one scope,
	// decrypted. An empty skillID selects the config-wide variables.
	ListUserEnvVars(
		ctx context.Context, tenantID uint64, p types.Principal, configID, skillID string,
	) ([]*types.TenantUserEnvVar, error)
	// ListUserEnvVarsByConfig returns every scope at once, for the settings
	// page that renders a whole config in one go.
	ListUserEnvVarsByConfig(
		ctx context.Context, tenantID uint64, p types.Principal, configID string,
	) ([]*types.TenantUserEnvVar, error)
	// UpsertUserEnvVar writes a principal's value, replacing any previous one
	// for the same (tenant, principal, config, skill, name).
	UpsertUserEnvVar(ctx context.Context, e *types.TenantUserEnvVar) error
	// DeleteUserEnvVar removes one value, returning types.ErrEnvVarNotFound
	// when there was nothing to remove.
	DeleteUserEnvVar(
		ctx context.Context, tenantID uint64, p types.Principal, configID, skillID, name string,
	) error
	// DeleteUserEnvVarsByConfig removes every principal's values for a config,
	// including the config-wide ones DeleteSkill never sees.
	DeleteUserEnvVarsByConfig(ctx context.Context, tenantID uint64, configID string) error

	// CreateCatalog inserts a tenant-level skill definition.
	CreateCatalog(ctx context.Context, e *types.TenantSkillCatalogEntity) error
	// GetCatalog returns nil when the row is missing or belongs to another workspace.
	GetCatalog(ctx context.Context, tenantID uint64, catalogID string) (*types.TenantSkillCatalogEntity, error)
	// GetCatalogByName scopes lookup by workspace because names are unique per tenant.
	GetCatalogByName(ctx context.Context, tenantID uint64, name string) (*types.TenantSkillCatalogEntity, error)
	// ListCatalogsByTenant returns every live catalog row of one workspace.
	ListCatalogsByTenant(ctx context.Context, tenantID uint64) ([]*types.TenantSkillCatalogEntity, error)
	// UpdateCatalog writes mutable definition fields (bundle, description, version).
	UpdateCatalog(ctx context.Context, e *types.TenantSkillCatalogEntity) error
	// DeleteCatalog soft-deletes a definition. Install rows are not touched.
	DeleteCatalog(ctx context.Context, tenantID uint64, catalogID string) error
	// ListSkillsByCatalog returns installations of one catalog skill.
	ListSkillsByCatalog(ctx context.Context, tenantID uint64, catalogID string) ([]*types.TenantSkillEntity, error)
}