store

type AIConversationStore interface {
	Create(ctx context.Context, c *models.AIConversation) error
	Get(ctx context.Context, id string) (models.AIConversation, error)
	List(ctx context.Context, ownerID, connectionID string) ([]models.AIConversation, error)
	Update(ctx context.Context, c *models.AIConversation) error
	Delete(ctx context.Context, id string) error
}

type AIMessageStore interface {
	Append(ctx context.Context, m *models.AIMessage) error
	List(ctx context.Context, conversationID string) ([]models.AIMessage, error)
	// Recent returns the newest limit messages, ordered oldest→newest.
	Recent(ctx context.Context, conversationID string, limit int) ([]models.AIMessage, error)
	// Range returns messages [offset, offset+limit) ordered oldest→newest.
	Range(ctx context.Context, conversationID string, offset, limit int) ([]models.AIMessage, error)
	Count(ctx context.Context, conversationID string) (int, error)
	DeleteByConversation(ctx context.Context, conversationID string) error
}

type AIProviderStore interface {
	Create(ctx context.Context, c *models.AIProviderConfig) error
	Get(ctx context.Context, id string) (models.AIProviderConfig, error)
	ListByOwner(ctx context.Context, ownerID string) ([]models.AIProviderConfig, error)
	Update(ctx context.Context, c *models.AIProviderConfig) error
	Delete(ctx context.Context, id string) error
}

type AuditFilter struct {
	UserID       string
	ConnectionID string
	Limit        int
	Offset       int
}

type AuditStore interface {
	Append(ctx context.Context, e *models.AuditEntry) error
	List(ctx context.Context, f AuditFilter) ([]models.AuditEntry, error)
	// Count returns the number of entries matching the filter (Limit/Offset ignored).
	Count(ctx context.Context, f AuditFilter) (int64, error)
	DeleteBefore(ctx context.Context, before time.Time) (int64, error)
}

type Config struct {
	Driver Driver
	// DSN is the connection string. For SQLite this is a file path (or
	// "file::memory:?cache=shared" for tests).
	DSN string
	// LogSQL enables GORM's SQL logger at info level.
	LogSQL bool
}

type ConnectionFolderStore interface {
	Create(ctx context.Context, f *models.ConnectionFolder) error
	Get(ctx context.Context, id string) (models.ConnectionFolder, error)
	ListByUser(ctx context.Context, userID string) ([]models.ConnectionFolder, error)
	Update(ctx context.Context, f *models.ConnectionFolder) error
	Delete(ctx context.Context, id string) error
}

type ConnectionPlacementStore interface {
	ListByUser(ctx context.Context, userID string) ([]models.ConnectionPlacement, error)
	Set(ctx context.Context, p *models.ConnectionPlacement) error
	Delete(ctx context.Context, userID, connectionID string) error
	DeleteByConnection(ctx context.Context, connectionID string) error
	ClearFolder(ctx context.Context, userID, folderID string) error
	MoveFolder(ctx context.Context, userID, folderID, targetFolderID string) error
}

type ConnectionStore interface {
	Create(ctx context.Context, c *models.Connection) error
	Get(ctx context.Context, id string) (models.Connection, error)
	ListByOwner(ctx context.Context, ownerID string) ([]models.Connection, error)
	List(ctx context.Context) ([]models.Connection, error)
	Update(ctx context.Context, c *models.Connection) error
	Delete(ctx context.Context, id string) error
}

type CredentialGrantStore interface {
	Create(ctx context.Context, g *models.CredentialGrant) error
	Delete(ctx context.Context, id string) error
	Has(ctx context.Context, credentialID, subjectID string) (bool, error)
	ListByCredential(ctx context.Context, credentialID string) ([]models.CredentialGrant, error)
	ListBySubject(ctx context.Context, subjectID string) ([]models.CredentialGrant, error)
}

type CredentialStore interface {
	Create(ctx context.Context, c *models.Credential) error
	Get(ctx context.Context, id string) (models.Credential, error)
	ListByOwner(ctx context.Context, ownerID string) ([]models.Credential, error)
	Update(ctx context.Context, c *models.Credential) error
	Delete(ctx context.Context, id string) error
}

type Driver string

type EnrollmentStore interface {
	Create(ctx context.Context, e *models.AgentEnrollment) error
	Get(ctx context.Context, id string) (models.AgentEnrollment, error)
	GetByTokenHash(ctx context.Context, tokenHash string) (models.AgentEnrollment, error)
	ListByConnection(ctx context.Context, connectionID string) ([]models.AgentEnrollment, error)
	UpdateStatus(ctx context.Context, id string, status models.AgentEnrollmentStatus) error
	// UpdateToken sets the redeemable token hash and resets the install window.
	// Used by URL-delivered artifacts, which mint the real token only when the
	// artifact body is fetched (the record is created with a placeholder hash).
	UpdateToken(ctx context.Context, id, tokenHash string, expiresAt time.Time) error
	// Consume atomically transitions an install token to online. Pending tokens
	// must be unexpired; already enrolled offline/online tokens may reconnect.
	Consume(ctx context.Context, id string, now time.Time) (bool, error)
}

type GrantStore interface {
	Create(ctx context.Context, g *models.Grant) error
	Delete(ctx context.Context, id string) error
	Get(ctx context.Context, connectionID, subjectID string) (models.Grant, error)
	ListByConnection(ctx context.Context, connectionID string) ([]models.Grant, error)
	ListBySubject(ctx context.Context, subjectID string) ([]models.Grant, error)
}

type InvitationStore interface {
	Create(ctx context.Context, i *models.Invitation) error
	Get(ctx context.Context, id string) (models.Invitation, error)
	GetByTokenHash(ctx context.Context, tokenHash string) (models.Invitation, error)
	List(ctx context.Context) ([]models.Invitation, error)
	Update(ctx context.Context, i *models.Invitation) error
	Consume(ctx context.Context, id string, acceptedAt time.Time) (bool, error)
	Delete(ctx context.Context, id string) error
}

type PolicyStore interface {
	Create(ctx context.Context, p *models.PolicyRule) error
	Delete(ctx context.Context, id string) error
	List(ctx context.Context) ([]models.PolicyRule, error)
}

type PreferenceStore interface {
	Get(ctx context.Context, userID, key string) (models.Preference, error)
	Set(ctx context.Context, p *models.Preference) error
	Delete(ctx context.Context, userID, key string) error
}

type RecordingFilter struct {
	UserID       string
	ConnectionID string
	Protocol     string
	Class        string
	Format       string
	Status       string
	Since        time.Time
	Until        time.Time
	// ExpiredBefore selects recordings whose ExpiresAt is set and at/before it
	// (used by retention cleanup). Ignored when zero.
	ExpiredBefore time.Time
	Limit         int
}

type RecordingStore interface {
	Create(ctx context.Context, r *models.Recording) error
	Get(ctx context.Context, id string) (models.Recording, error)
	Update(ctx context.Context, r *models.Recording) error
	Delete(ctx context.Context, id string) error
	List(ctx context.Context, f RecordingFilter) ([]models.Recording, error)
}

type SnippetStore interface {
	Create(ctx context.Context, s *models.Snippet) error
	Get(ctx context.Context, id string) (models.Snippet, error)
	ListByOwner(ctx context.Context, ownerID, protocol string) ([]models.Snippet, error)
	Update(ctx context.Context, s *models.Snippet) error
	Delete(ctx context.Context, id string) error
}

type Store struct {
	Users                UserStore
	Connections          ConnectionStore
	ConnectionFolders    ConnectionFolderStore
	ConnectionPlacements ConnectionPlacementStore
	Credentials          CredentialStore
	Grants               GrantStore
	CredentialGrants     CredentialGrantStore
	Audit                AuditStore
	Snippets             SnippetStore
	Preferences          PreferenceStore
	Enrollments          EnrollmentStore
	Policies             PolicyStore
	Invitations          InvitationStore
	Recordings           RecordingStore
	AIProviders          AIProviderStore
	AIConversations      AIConversationStore
	AIMessages           AIMessageStore
	// contains filtered or unexported fields
}

type UserStore interface {
	Create(ctx context.Context, u *models.User, passwordHash string) error
	GetByID(ctx context.Context, id string) (models.User, error)
	GetByUsername(ctx context.Context, username string) (models.User, error)
	GetByEmail(ctx context.Context, email string) (models.User, error)
	GetPasswordHash(ctx context.Context, userID string) (string, error)
	SetPasswordHash(ctx context.Context, userID, hash string) error
	List(ctx context.Context) ([]models.User, error)
	Update(ctx context.Context, u *models.User) error
	Delete(ctx context.Context, id string) error
	Count(ctx context.Context) (int64, error)

	// SetTwoFactor persists the user's TOTP enrollment state atomically: the
	// encrypted secret, the enabled flag, and the hashed recovery codes.
	SetTwoFactor(ctx context.Context, userID string, secret []byte, enabled bool, recoveryHashes []string) error
	// SetMFARemindedAt records when the user was last nudged to enable 2FA.
	SetMFARemindedAt(ctx context.Context, userID string, at *time.Time) error
}