model

type AllowedEmail struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`
	Email     string    `db:"email"`
}

type AuthProvider struct {
	ID uuid.UUID `db:"id"`

	UserID   uuid.UUID `db:"user_id"`
	Provider string    `db:"provider"`

	ProviderUserID *string `db:"provider_user_id"`
	PasswordHash   *string `db:"password_hash"`

	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`
}

type Challenge struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`

	Purpose string `db:"purpose"`
	Email   string `db:"email"`

	ExpiresAt    time.Time  `db:"expires_at"`
	ConsumedAt   *time.Time `db:"consumed_at"`
	AttemptCount int        `db:"attempt_count"`
	MaxAttempts  int        `db:"max_attempts"`

	ResendCount int        `db:"resend_count"`
	MaxResends  int        `db:"max_resends"`
	LastSentAt  *time.Time `db:"last_sent_at"`
}

type EmailJob struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`

	ChallengeID  *uuid.UUID `db:"challenge_id"`
	ToEmail      string     `db:"to_email"`
	Template     string     `db:"template"`
	TemplateData []byte     `db:"template_data"`
	Status       string     `db:"status"`

	AttemptCount        int        `db:"attempt_count"`
	NextAttemptAt       time.Time  `db:"next_attempt_at"`
	ProcessingStartedAt *time.Time `db:"processing_started_at"`
	LastError           *string    `db:"last_error"`
	SentAt              *time.Time `db:"sent_at"`
}

type Organization struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`

	Name            string     `db:"name"`
	Kind            string     `db:"kind"`
	CreatedByUserID *uuid.UUID `db:"created_by_user_id"`
}

type OrganizationInvitation struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`

	OrganizationID  uuid.UUID  `db:"organization_id"`
	Email           string     `db:"email"`
	Role            string     `db:"role"`
	TokenHash       string     `db:"token_hash"`
	InvitedByUserID *uuid.UUID `db:"invited_by_user_id"`

	ExpiresAt time.Time `db:"expires_at"`

	AcceptedAt       *time.Time `db:"accepted_at"`
	AcceptedByUserID *uuid.UUID `db:"accepted_by_user_id"`
	RevokedAt        *time.Time `db:"revoked_at"`
	RevokedByUserID  *uuid.UUID `db:"revoked_by_user_id"`
}

type OrganizationMembership struct {
	OrganizationID uuid.UUID `db:"organization_id"`
	UserID         uuid.UUID `db:"user_id"`

	Role string `db:"role"`

	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`
}

type Passkey struct {
	ID        uuid.UUID
	UserID    uuid.UUID
	CreatedAt time.Time
	UpdatedAt time.Time

	CredentialID      []byte
	PublicKey         []byte
	AttestationType   string
	AttestationFormat string
	Transport         string
	AAGUID            *uuid.UUID
	SignCount         int64
	CloneWarning      bool
	Name              string
	LastUsedAt        *time.Time

	UserPresent    bool
	UserVerified   bool
	BackupEligible bool
	BackupState    bool
}

type PendingEmailChange struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`

	ChallengeID uuid.UUID `db:"challenge_id"`
	UserID      uuid.UUID `db:"user_id"`

	OldEmail string `db:"old_email"`
	NewEmail string `db:"new_email"`
}

type PendingPasswordReset struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`

	ChallengeID  uuid.UUID `db:"challenge_id"`
	UserID       uuid.UUID `db:"user_id"`
	PasswordHash string    `db:"password_hash"`
}

type PendingProviderLink struct {
	ID uuid.UUID `db:"id"`

	UserID      uuid.UUID  `db:"user_id"`
	SessionID   *uuid.UUID `db:"session_id"`
	ChallengeID *uuid.UUID `db:"challenge_id"`
	Provider    string     `db:"provider"`

	ProviderUserID        *string `db:"provider_user_id"`
	ProviderEmail         *string `db:"provider_email"`
	ProviderEmailVerified bool    `db:"provider_email_verified"`
	Purpose               string  `db:"purpose"`

	ExpiresAt  time.Time  `db:"expires_at"`
	ConsumedAt *time.Time `db:"consumed_at"`

	CreatedAt time.Time `db:"created_at"`
}

type PendingSignupAction struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`

	ChallengeID  uuid.UUID  `db:"challenge_id"`
	Email        string     `db:"email"`
	Username     string     `db:"username"`
	PasswordHash string     `db:"password_hash"`
	InvitationID *uuid.UUID `db:"invitation_id"`
}

type RefreshToken struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`

	SessionID      uuid.UUID `db:"session_id"`
	OrganizationID uuid.UUID `db:"organization_id"`

	TokenHash string `db:"token_hash"`

	ExpiresAt  time.Time  `db:"expires_at"`
	ConsumedAt *time.Time `db:"consumed_at"`
}

type Role struct {
	ID        uuid.UUID `db:"id"`
	Name      string    `db:"name"`
	CreatedAt time.Time `db:"created_at"`
}

type Session struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`

	UserID               uuid.UUID `db:"user_id"`
	ActiveOrganizationID uuid.UUID `db:"active_organization_id"`

	ExpiresAt time.Time  `db:"expires_at"`
	RevokedAt *time.Time `db:"revoked_at"`

	UserAgent string `db:"user_agent"`
}

type User struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`
	UpdatedAt time.Time `db:"updated_at"`

	DisabledAt *time.Time `db:"disabled_at"`

	Username           string `db:"username"`
	UsernameNormalized string `db:"username_normalized"`
	Email              string `db:"email"`
}

type UserRole struct {
	UserID uuid.UUID `db:"user_id"`
	RoleID uuid.UUID `db:"role_id"`

	CreatedAt time.Time `db:"created_at"`
}

type VerificationCode struct {
	ID        uuid.UUID `db:"id"`
	CreatedAt time.Time `db:"created_at"`

	ChallengeID uuid.UUID `db:"challenge_id"`
	CodeHash    string    `db:"code_hash"`
	ExpiresAt   time.Time `db:"expires_at"`
}

type WebAuthnChallenge struct {
	ID        uuid.UUID
	CreatedAt time.Time

	UserID      *uuid.UUID
	Purpose     string
	Challenge   string
	SessionData []byte
	ExpiresAt   time.Time
	ConsumedAt  *time.Time
}