models

type APIKey struct {
	ID            int64  `gorm:"primaryKey;autoIncrement" json:"id"`
	KeyID         string `gorm:"not null;uniqueIndex;size:32" json:"key_id"`
	HMACSecret    string `gorm:"not null" json:"hmac_secret,omitempty"`
	Name          string `gorm:"not null;default:''" json:"name"`
	Domain        string `gorm:"not null;default:''" json:"domain"`
	MaxNumber     int64  `gorm:"not null;default:100000" json:"max_number"`
	ExpireSeconds int    `gorm:"not null;default:300" json:"expire_seconds"`
	Algorithm     string `gorm:"not null;default:'SHA-256'" json:"algorithm"`
	// RateLimitPerMin caps how many /api/v1 requests this key accepts per minute,
	// aggregated across all clients. 0 means unlimited (only the global per-IP
	// limiter applies).
	RateLimitPerMin int `gorm:"not null;default:0" json:"rate_limit_per_min"`
	// AdaptiveDifficulty, when set, raises the proof-of-work MaxNumber above this
	// key's configured base for clients (by IP) that request challenges at an
	// abusive rate, capped server-side. MaxNumber stays the floor.
	AdaptiveDifficulty bool `gorm:"not null;default:false" json:"adaptive_difficulty"`
	// HISSampling, when set, persists each scored HIS observation for this key
	// (raw aggregates + score) so enforcement thresholds can be calibrated on
	// real traffic. Samples are pruned after the configured retention window.
	HISSampling bool      `gorm:"not null;default:false" json:"his_sampling"`
	Enabled     bool      `gorm:"not null;default:true" json:"enabled"`
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`
}

type AdminUser struct {
	ID           int64     `gorm:"primaryKey;autoIncrement" json:"id"`
	Username     string    `gorm:"not null;uniqueIndex;size:64;default:admin" json:"username"`
	PasswordHash string    `gorm:"not null" json:"-"`
	CreatedAt    time.Time `json:"created_at"`
	UpdatedAt    time.Time `json:"updated_at"`
}

type ConsumedChallenge struct {
	ID         int64     `gorm:"primaryKey;autoIncrement"`
	Challenge  string    `gorm:"not null;uniqueIndex;size:256"`
	APIKeyID   int64     `gorm:"not null;index"`
	ExpiresAt  time.Time `gorm:"not null"`
	ConsumedAt time.Time `gorm:"not null;autoCreateTime"`
}

type CountryStat struct {
	Country           string `json:"country"`
	VerificationsOK   int    `json:"verifications_ok"`
	VerificationsFail int    `json:"verifications_fail"`
	Total             int    `json:"total"`
}

type DailyCountryStat struct {
	ID                int64  `gorm:"primaryKey;autoIncrement" json:"-"`
	APIKeyID          int64  `gorm:"not null;uniqueIndex:idx_key_date_country" json:"api_key_id"`
	Date              string `gorm:"not null;uniqueIndex:idx_key_date_country;size:10" json:"date"`
	Country           string `gorm:"uniqueIndex:idx_key_date_country;size:2" json:"country"`
	VerificationsOK   int    `gorm:"not null;default:0" json:"verifications_ok"`
	VerificationsFail int    `gorm:"not null;default:0" json:"verifications_fail"`
}

type DailyStat struct {
	ID                int64  `gorm:"primaryKey;autoIncrement" json:"-"`
	APIKeyID          int64  `gorm:"not null;uniqueIndex:idx_key_date" json:"api_key_id"`
	Date              string `gorm:"not null;uniqueIndex:idx_key_date;size:10" json:"date"`
	ChallengesIssued  int    `gorm:"not null;default:0" json:"challenges_issued"`
	VerificationsOK   int    `gorm:"not null;default:0" json:"verifications_ok"`
	VerificationsFail int    `gorm:"not null;default:0" json:"verifications_fail"`
	// HIS (Human Interaction Signature) Monitor counters: every scored sample
	// increments HISObservations; samples at/above the suspect threshold also
	// increment HISBotSuspected. Monitor mode only records — it never blocks.
	HISObservations int `gorm:"not null;default:0" json:"his_observations"`
	HISBotSuspected int `gorm:"not null;default:0" json:"his_bot_suspected"`
}

type HISCalibration struct {
	Samples        int              `json:"samples"`
	Suspected      int              `json:"suspected"`
	Threshold      float64          `json:"threshold"`
	ScoreHistogram []HISScoreBucket `json:"score_histogram"`
	AvgDurationMs  float64          `json:"avg_duration_ms"`
	AvgPointer     float64          `json:"avg_pointer_events"`
	NoMotionPct    float64          `json:"no_motion_pct"`
}

type HISSample struct {
	ID           int64     `gorm:"primaryKey;autoIncrement" json:"id"`
	APIKeyID     int64     `gorm:"not null;index:idx_his_sample_key_created" json:"api_key_id"`
	CreatedAt    time.Time `gorm:"index:idx_his_sample_key_created" json:"created_at"`
	Score        float64   `gorm:"not null" json:"score"`
	BotSuspected bool      `gorm:"not null" json:"bot_suspected"`

	DurationMs         int     `json:"duration_ms"`
	TimeToFirstMs      int     `json:"time_to_first_ms"`
	PointerEvents      int     `json:"pointer_events"`
	PointerDistance    float64 `json:"pointer_distance"`
	Scrolls            int     `json:"scrolls"`
	Touches            int     `json:"touches"`
	Keydowns           int     `json:"keydowns"`
	KeyIntervalStdevMs float64 `json:"key_interval_stdev_ms"`
}

type HISScoreBucket struct {
	Lo    float64 `json:"lo"`
	Hi    float64 `json:"hi"`
	Count int     `json:"count"`
}

type KeyStatsSummary struct {
	APIKeyID          int64  `json:"api_key_id"`
	ChallengesIssued  int    `json:"challenges_issued"`
	VerificationsOK   int    `json:"verifications_ok"`
	VerificationsFail int    `json:"verifications_fail"`
	HISObservations   int    `json:"his_observations"`
	HISBotSuspected   int    `json:"his_bot_suspected"`
	LastUsedAt        string `json:"last_used_at"`
}

type Setting struct {
	Key       string    `gorm:"primaryKey;size:64" json:"key"`
	Value     string    `gorm:"not null;default:''" json:"value"`
	UpdatedAt time.Time `json:"updated_at"`
}

type StatsOverview struct {
	TotalChallenges        int           `json:"total_challenges"`
	TotalVerificationsOK   int           `json:"total_verifications_ok"`
	TotalVerificationsFail int           `json:"total_verifications_fail"`
	TotalHISObservations   int           `json:"total_his_observations"`
	TotalHISBotSuspected   int           `json:"total_his_bot_suspected"`
	ActiveKeys             int           `json:"active_keys"`
	Daily                  []DailyStat   `json:"daily"`
	Countries              []CountryStat `json:"countries"`
}

type UpdateAPIKeyParams struct {
	Name               string
	Domain             string
	MaxNumber          int64
	ExpireSeconds      int
	Algorithm          string
	RateLimitPerMin    int
	AdaptiveDifficulty bool
	HISSampling        bool
	Enabled            bool
}