models

type AIConversation struct {
	ID            string `gorm:"primaryKey" json:"id"`
	OwnerID       string `gorm:"index" json:"ownerId"`
	ConnectionID  string `gorm:"index" json:"connectionId"`
	Title         string `json:"title"`
	TitleResolved bool   `json:"titleResolved"`
	// ProviderID is the user provider used (empty = shared/global). Model records
	// which model served the thread.
	ProviderID string `json:"providerId"`
	Model      string `json:"model"`
	// Summary is the rolling compaction of older turns (see internal/ai/memory).
	Summary string `json:"-"`
	// CompactedCount is how many of the oldest messages are already folded into Summary.
	CompactedCount int       `json:"-"`
	CreatedAt      time.Time `json:"createdAt"`
	UpdatedAt      time.Time `json:"updatedAt"`
}

type AIMessage struct {
	ID             string             `gorm:"primaryKey" json:"id"`
	ConversationID string             `gorm:"index;uniqueIndex:idx_ai_messages_conversation_seq" json:"conversationId"`
	Seq            int                `gorm:"index;uniqueIndex:idx_ai_messages_conversation_seq" json:"seq"`
	Role           string             `json:"role"` // user | assistant
	Content        string             `json:"content"`
	ToolCalls      []AIToolCallRecord `gorm:"serializer:json" json:"toolCalls"`
	Reasoning      string             `json:"reasoning,omitempty"`
	Truncated      bool               `json:"truncated,omitempty"`
	CreatedAt      time.Time          `json:"createdAt"`
}

type AIMode string

type AIProviderConfig struct {
	ID      string         `gorm:"primaryKey"`
	OwnerID string         `gorm:"index;uniqueIndex:idx_ai_provider_owner_name"`
	Kind    AIProviderKind `gorm:"index"`
	Name    string         `gorm:"uniqueIndex:idx_ai_provider_owner_name"`
	BaseURL string
	Model   string
	// APIKeyCiphertext is opaque ciphertext; the store never sees the plaintext key.
	APIKeyCiphertext []byte `json:"-"`
	CreatedAt        time.Time
	UpdatedAt        time.Time
}

type AIProviderKind string

type AIProviderSummary struct {
	ID        string         `json:"id"`
	Kind      AIProviderKind `json:"kind"`
	Name      string         `json:"name"`
	BaseURL   string         `json:"baseUrl,omitempty"`
	Model     string         `json:"model"`
	HasKey    bool           `json:"hasKey"`
	CreatedAt time.Time      `json:"createdAt"`
	UpdatedAt time.Time      `json:"updatedAt"`
}

type AIToolCallRecord struct {
	ID     string `json:"id"`
	Name   string `json:"name"`
	Input  any    `json:"input,omitempty"`
	Output any    `json:"output,omitempty"`
	Err    string `json:"err,omitempty"`
}

type Access string

type AgentEnrollment struct {
	ID           string `gorm:"primaryKey"`
	ConnectionID string `gorm:"index"`
	TokenHash    string `gorm:"uniqueIndex"` // never the raw token
	Status       AgentEnrollmentStatus
	ExpiresAt    time.Time
	CreatedAt    time.Time
	UpdatedAt    time.Time
}

type AgentEnrollmentStatus string

type AuditEntry struct {
	ID           string    `gorm:"primaryKey"`
	Time         time.Time `gorm:"index"`
	UserID       string    `gorm:"index"`
	Username     string
	Event        string `gorm:"index"` // route AuditEvent, e.g. "vm.snapshot.list"
	ConnectionID string `gorm:"index"`
	RouteID      string
	Risk         string
	Result       AuditResult
	Params       map[string]string `gorm:"serializer:json"` // secrets already redacted
	Error        string
	RemoteAddr   string
	// Source distinguishes how the operation was initiated: "http" for a direct
	// request, "ai" for an agent tool call. TurnID correlates AI-initiated calls
	// to their conversation/turn.
	Source string `gorm:"index"`
	TurnID string
}

type AuditResult string

type Connection struct {
	ID       string `gorm:"primaryKey"`
	Name     string
	Protocol string `gorm:"index"`
	OwnerID  string `gorm:"index"`
	// Transport is "direct" or "agent".
	Transport string
	Shared    bool

	// Config holds non-secret connection fields (host, port, …).
	Config map[string]any `gorm:"serializer:json"`
	// Secrets holds ciphertext for inline Secret==true fields, keyed by field key.
	// The store only ever sees ciphertext; encryption happens in the service layer.
	Secrets map[string][]byte `gorm:"serializer:json"`

	// Recording is the per-class recording policy (class -> disabled|manual|auto).
	// Absent/empty means recording is off, which is the default.
	Recording map[string]string `gorm:"serializer:json"`
	// RetentionDays caps how long this connection's recordings are kept; 0 = keep.
	RetentionDays int

	AIMode             AIMode
	AIAllowDestructive bool
	AIAutoApprove      bool

	CreatedAt time.Time
	UpdatedAt time.Time
}

type ConnectionFolder struct {
	ID        string `gorm:"primaryKey"`
	UserID    string `gorm:"index"`
	ParentID  string `gorm:"index"`
	Name      string
	Color     string
	SortOrder int
	CreatedAt time.Time
	UpdatedAt time.Time
}

type ConnectionPlacement struct {
	UserID       string `gorm:"primaryKey"`
	ConnectionID string `gorm:"primaryKey"`
	FolderID     string `gorm:"index"`
	SortOrder    int
	UpdatedAt    time.Time
}

type Credential struct {
	ID        string            `gorm:"primaryKey"`
	Name      string            `gorm:"not null"`
	Kind      string            `gorm:"index;not null"`
	OwnerID   string            `gorm:"index;not null"`
	Values    map[string]string `gorm:"serializer:json"`
	Protocols []string          `gorm:"serializer:json"`
	// EncryptedValues is encrypted JSON for secret credential fields.
	EncryptedValues []byte
	CreatedAt       time.Time
	UpdatedAt       time.Time
}

type CredentialGrant struct {
	ID           string `gorm:"primaryKey"`
	CredentialID string `gorm:"index;uniqueIndex:idx_credgrant_cred_subject"`
	SubjectID    string `gorm:"index;uniqueIndex:idx_credgrant_cred_subject"`
	Access       Access // typically AccessView
	CreatedAt    time.Time
}

type CredentialSummary struct {
	ID        string            `json:"id"`
	Name      string            `json:"name"`
	Kind      string            `json:"kind"`
	OwnerID   string            `json:"ownerId,omitempty"`
	OwnerName string            `json:"ownerName,omitempty"`
	Values    map[string]string `json:"values,omitempty"`
	Protocols []string          `json:"protocols,omitempty"`
	UpdatedAt time.Time         `json:"updatedAt,omitzero"`
}

type Grant struct {
	ID           string `gorm:"primaryKey"`
	ConnectionID string `gorm:"index;uniqueIndex:idx_grant_conn_subject"`
	SubjectID    string `gorm:"index;uniqueIndex:idx_grant_conn_subject"`
	Access       Access
	CreatedAt    time.Time
}

type Invitation struct {
	ID         string `gorm:"primaryKey"`
	Email      string `gorm:"index"`
	Role       Role
	TokenHash  string `gorm:"uniqueIndex"`
	Status     InvitationStatus
	InvitedBy  string
	CreatedAt  time.Time
	ExpiresAt  time.Time
	AcceptedAt time.Time
}

type InvitationStatus string

type InvitationSummary struct {
	ID        string           `json:"id"`
	Email     string           `json:"email"`
	Role      Role             `json:"role"`
	Status    InvitationStatus `json:"status"`
	CreatedAt time.Time        `json:"createdAt"`
	ExpiresAt time.Time        `json:"expiresAt"`
}

type LiveStateLease struct {
	Key          string `gorm:"primaryKey;column:lease_key"`
	InstanceID   string `gorm:"index;not null"`
	InternalURL  string
	InternalURLs string
	LeaseID      string    `gorm:"index;not null"`
	ExpiresAt    time.Time `gorm:"index"`
	CreatedAt    time.Time
	UpdatedAt    time.Time
}

type PluginStorageItem struct {
	Collection   string `gorm:"primaryKey;not null;check:plugin_storage_collection_required,collection <> ''"`
	Plugin       string `gorm:"primaryKey;not null;check:plugin_storage_plugin_required,plugin <> ''"`
	ConnectionID string `gorm:"primaryKey;not null;check:plugin_storage_connection_required,connection_id <> ''"`
	OwnerID      string `gorm:"primaryKey;not null;check:plugin_storage_owner_required,owner_id <> ''"`
	ItemKey      string `gorm:"primaryKey;not null;check:plugin_storage_key_required,item_key <> ''"`

	Value       []byte
	ContentType string
	Metadata    map[string]string `gorm:"serializer:json"`
	CreatedAt   time.Time
	UpdatedAt   time.Time
}

type PolicyRule struct {
	ID         string    `gorm:"primaryKey"`
	Role       Role      `gorm:"index:idx_policy_rule,unique"`
	Permission string    `gorm:"index:idx_policy_rule,unique"`
	Risk       string    `gorm:"index:idx_policy_rule,unique"`
	CreatedAt  time.Time `gorm:"index"`
}

type Preference struct {
	UserID    string `gorm:"primaryKey"`
	Key       string `gorm:"primaryKey;column:pref_key"`
	Value     string // JSON-encoded value
	UpdatedAt time.Time
}

type ProtocolAvailability string

type ProtocolSetting struct {
	Protocol     string `gorm:"primaryKey"`
	Availability ProtocolAvailability
	UpdatedAt    time.Time
}

type Recording struct {
	ID             string `gorm:"primaryKey"`
	UserID         string `gorm:"index"`
	Username       string
	ConnectionID   string `gorm:"index"`
	ConnectionName string
	Protocol       string `gorm:"index"`
	RouteID        string
	StreamID       string
	Class          string `gorm:"index"` // terminal | desktop
	Format         string // asciicast_v2 | webm_canvas | ...
	Authoritative  bool
	Status         RecordingStatus `gorm:"index"`
	Title          string
	StartedAt      time.Time
	EndedAt        *time.Time
	DurationMS     int64
	Size           int64
	Checksum       string // sha256 hex of the finalized blob
	StorageKey     string
	Error          string
	ExpiresAt      *time.Time `gorm:"index"` // nil = retained indefinitely
	CreatedAt      time.Time
	UpdatedAt      time.Time
}

type RecordingStatus string

type Role string

type User struct {
	ID           string `gorm:"primaryKey"`
	Username     string `gorm:"uniqueIndex;not null"`
	Email        string
	DisplayName  string
	Roles        []Role `gorm:"serializer:json"`
	PasswordHash string `gorm:"column:password_hash" json:"-"`
	// SessionVersion invalidates existing browser sessions when sensitive
	// account state changes.
	SessionVersion int
	Disabled       bool
	// Protected marks the root admin, which can never be deleted.
	Protected bool

	// Two-factor authentication (TOTP). TOTPSecret holds the encrypted shared
	// secret and never serializes to clients. A non-empty secret with
	// TOTPEnabled=false is an in-progress enrollment awaiting code confirmation.
	TOTPSecret         []byte   `gorm:"column:totp_secret" json:"-"`
	TOTPEnabled        bool     `gorm:"column:totp_enabled"`
	RecoveryCodeHashes []string `gorm:"serializer:json" json:"-"`
	// MFARemindedAt is when the user was last nudged to enable 2FA (nil = never).
	MFARemindedAt *time.Time

	CreatedAt time.Time
	UpdatedAt time.Time
}