admin

type AdminAuth interface {
	Authenticate(r *http.Request) (*auth.User, error)
	Authorize(user *auth.User, model string, action string) bool
	LoginHandler() http.Handler
}

type AuditEntry struct {
	ID        uint           `json:"id"`
	UserID    string         `json:"user_id"`
	Username  string         `json:"username"`
	Action    string         `json:"action"`
	ModelName string         `json:"model_name"` // Model or surface affected (e.g. "User", "rbac", "feature_flag")
	RecordID  string         `json:"record_id"`  // ID of the affected record (or key / name of the affected object)
	OldValue  map[string]any `json:"old_value"`  // Previous state (updates, deletes, removals) — redacted
	NewValue  map[string]any `json:"new_value"`  // New state or outcome (creates, updates, management actions) — redacted
	IP        string         `json:"ip"`
	UserAgent string         `json:"user_agent"`
	CreatedAt time.Time      `json:"created_at"`
}

type BootstrapAdminConfig struct {
	Username string
	Email    string
	Password string

	// System is the database dialect of the target connection, as
	// reported by `db.DB.System()` ("sqlite", "postgresql", "mysql",
	// "mssql", "oracle"). It selects the dialect-appropriate
	// CREATE-TABLE form for the admin users table. An empty System
	// falls back to the portable `CREATE TABLE IF NOT EXISTS` form
	// (accepted by SQLite, PostgreSQL, and MySQL) — preserving the
	// pre-dialect-aware behaviour for any caller that does not set it.
	System string
}

type BootstrapAdminResult struct {
	Created           bool
	Username          string
	Password          string
	PasswordGenerated bool
}

type DatabaseAdminAuth struct {
	// contains filtered or unexported fields
}

type DatabaseRuntimeInfo struct {
	Alias     string `json:"alias"`
	Engine    string `json:"engine"`
	Dialect   string `json:"dialect"`
	IsDefault bool   `json:"is_default"`
}

type DjangoFixtureRecord struct {
	Model  string                 `json:"model"`
	PK     interface{}            `json:"pk"`
	Fields map[string]interface{} `json:"fields"`
}

type DumpdataConfig struct {
	Models   []string `json:"models"`    // Models to export (empty = all)
	Database string   `json:"database"`  // Source database alias
	TenantID string   `json:"tenant_id"` // Tenant scope (empty = all)
}

type ExportConfig struct {
	Models   []string          `json:"models"`    // Models to export (empty = all registered)
	Database string            `json:"database"`  // Source database alias
	TenantID string            `json:"tenant_id"` // Tenant scope (empty = all)
	Format   ExportFormat      `json:"format"`    // csv | json | sql
	Filters  map[string]string `json:"filters"`   // Additional filters (model.field=value)
}

type ExportFormat string

type ExportResult struct {
	ID         string    `json:"id"`
	Status     string    `json:"status"` // completed, processing, failed
	Format     string    `json:"format"`
	Tenant     string    `json:"tenant,omitempty"` // tenant the export was confined to ("" = every tenant)
	Filename   string    `json:"filename"`
	StorageKey string    `json:"storage_key"` // Key in storage for download
	Size       int64     `json:"size"`
	Records    int       `json:"records"`
	Error      string    `json:"error,omitempty"`
	CreatedAt  time.Time `json:"created_at"`
	URL        string    `json:"url,omitempty"` // Download URL when available
}

type ImportConfig struct {
	Database   string `json:"database"`    // Target database alias
	TenantID   string `json:"tenant_id"`   // Target tenant (for tenant field injection)
	Model      string `json:"model"`       // Target model
	Format     string `json:"format"`      // csv | json
	OnConflict string `json:"on_conflict"` // skip | update | error
	DryRun     bool   `json:"dry_run"`     // Validate only, no changes
	BatchSize  int    `json:"batch_size"`  // Records per batch (default 100)
}

type ImportError struct {
	Row     int    `json:"row"`
	Field   string `json:"field,omitempty"`
	Message string `json:"message"`
}

type ImportReport struct {
	Total    int           `json:"total"`
	Imported int           `json:"imported"`
	Skipped  int           `json:"skipped"`
	Updated  int           `json:"updated"`
	Failed   int           `json:"failed"`
	Errors   []ImportError `json:"errors"`
	DryRun   bool          `json:"dry_run"`
}

type LoaddataConfig struct {
	StorageKey string `json:"key"`         // Storage key of the fixture file
	OnConflict string `json:"on_conflict"` // "skip" (default) or "update"
	Database   string `json:"database"`    // Target database alias
	TenantID   string `json:"tenant_id"`   // Tenant ID for auto-injection
}

type Panel struct {
	// contains filtered or unexported fields
}

type PanelConfig struct {
	Prefix              string // URL prefix (default "/admin")
	Title               string // Site title shown in the UI
	Environment         string
	OTLPEndpoint        string          // optional OTLP endpoint configured by the host app
	RedisURL            string          // optional Redis URL for background jobs runtime snapshot
	TaskInspector       tasks.Inspector // optional configured queue inspector
	LiveExcludePatterns []string        // optional path patterns excluded from live HTTP capture
	LiveClusterEnabled  bool            // when true, publish/subscribe live telemetry through Redis
	LiveClusterRedisURL string          // optional Redis URL for live cluster relay (falls back to RedisURL)
	LiveClusterChannel  string          // optional pub/sub channel (default nucleus:admin:live:v1)
	LiveClusterNodeID   string          // optional explicit node id (defaults to runtime identity)
	LiveClusterToken    string          // optional shared token to reject untrusted relay messages
	TraceURLTemplate    string          // optional trace explorer URL template (supports {trace_id})
	Databases           []DatabaseRuntimeInfo
	DatabaseHandles     map[string]*db.DB // optional alias->db handle mapping for runtime stats
	EnvironmentSnapshot []string          // optional env snapshot (defaults to os.Environ at startup)
	FeatureFlags        map[string]bool   // optional initial in-memory feature flags
	MailDriver          string
	MailFrom            string
	SMTPHost            string
	Auth                AdminAuth
	Session             *auth.SessionManager // optional session manager for admin telemetry
	SessionStore        string               // configured session store label (memory|sql|redis)
	SessionRuntime      auth.SessionRuntimeIdentity

	// Multi-tenant configuration. When enabled, Data Studio is confined to
	// the tenant of each request — list, get, create, update, delete, bulk,
	// CSV export, exports (and their job list, status and download),
	// imports and fixtures — resolved by TenantResolver (the host
	// application's request scope) and falling back to MultiTenantDefault.
	// A request that resolves no tenant is refused (403) unless its operator
	// may switch tenants; it does not fall back to every tenant. Only a
	// superuser, or a subject granted the tenant_switch RBAC action on
	// admin:*, may switch the request to another tenant or to all of them
	// with ?tenant=; every switch is audited. The confinement trusts the
	// resolver: a tenant read from a header the client controls is the
	// client's choice, not the host's.
	MultiTenantEnabled    bool     // whether multi-tenant mode is active
	MultiTenantDefault    string   // default tenant ID when none resolved
	MultiTenantAutoFilter bool     // confine Data Studio to the request's tenant (default true when multi-tenant enabled)
	MultiTenantField      string   // override tenant field name (empty = auto-detect from model)
	MultiTenantIDs        []string // known tenant IDs for the selector UI (empty = discover from scope)
	// TenantResolver returns the tenant the host application resolved for the
	// request (nucleus resolves it from the subdomain or a header before the
	// panel runs). Nil means no host resolution: the default tenant applies.
	TenantResolver   func(*http.Request) (tenant string, ok bool)
	MultiSiteEnabled bool     // whether multi-site mode is active
	MultiSiteDefault string   // default site name
	MultiSiteNames   []string // known site names for the selector UI

	// RBAC configuration
	RBACEnforcer *authz.Enforcer // optional Casbin enforcer for fine-grained authorization

	// Audit logging configuration
	AuditEnabled bool // whether audit logging is enabled
	AuditMaxSize int  // max audit entries in memory (default 10000)

	// Migrations path
	MigrationsPath string // path to migration files directory

	// Storage for exports/imports
	Store storage.Store

	// SchemaRegistry is an optional Nucleus model registry used ONLY by the
	// runtime field-metadata editor (handleUpdateFieldMeta), which mutates model
	// metadata and has no equivalent in the neutral datasource contract. Data
	// Studio CRUD does not use it — it speaks datasource.DataSource (ADR-001).
	SchemaRegistry *model.Registry
}

type TenantContext struct {
	Enabled     bool   // Whether multi-tenant is enabled
	TenantID    string // Current tenant ID (empty = global/all tenants)
	TenantField string // The column name for tenant isolation
	AutoFilter  bool   // Whether Data Studio is confined to TenantID
	Overridden  bool   // TenantID came from ?tenant= (superuser / tenant_switch)
}