statestore

type SQLiteStore struct {
	// contains filtered or unexported fields
}

type ScanFilter struct {
	Repository   string
	PolicyPassed *bool
	Limit        int
	Offset       int
}

type ScanRecord struct {
	Digest            string
	Repository        string
	Tag               string
	ScannedAt         time.Time
	CriticalVulnCount int
	HighVulnCount     int
	MediumVulnCount   int
	LowVulnCount      int
	PolicyPassed      bool
	Signed            bool
	SBOMAttested      bool
	VulnAttested      bool
	Vulnerabilities   []types.VulnerabilityRecord // Using canonical type
	ToleratedCVEs     []types.ToleratedCVE        // Using canonical type
	ErrorMessage      string
}

type StateStore interface {
	// RecordScan saves scan results with full vulnerability details
	RecordScan(ctx context.Context, record *ScanRecord) error

	// GetLastScan retrieves the most recent scan for a digest with vulnerabilities
	GetLastScan(ctx context.Context, digest string) (*ScanRecord, error)
}

type StateStoreQuery interface {
	StateStore

	// GetScanHistory returns scan history for a digest with full details
	GetScanHistory(ctx context.Context, digest string, limit int) ([]*ScanRecord, error)

	// QueryVulnerabilities searches vulnerabilities across all scans
	QueryVulnerabilities(ctx context.Context, filter VulnFilter) ([]*types.VulnerabilityRecord, error)

	// GetImagesByCVE returns all images affected by a specific CVE
	GetImagesByCVE(ctx context.Context, cveID string) ([]*ScanRecord, error)

	// ListScans returns scan records with optional filters
	ListScans(ctx context.Context, filter ScanFilter) ([]*ScanRecord, error)

	// ListTolerations returns tolerated CVEs with optional filters
	ListTolerations(ctx context.Context, filter TolerationFilter) ([]*types.TolerationInfo, error)
}

type TolerationFilter struct {
	CVEID        string
	Repository   string
	Expired      *bool
	ExpiringSoon *bool // Within 7 days
	Limit        int
}

type VulnFilter struct {
	CVEID       string
	Severity    string
	PackageName string
	Repository  string
	Limit       int
}