store

type ApprovalStore interface {
	Create(ctx context.Context, approval *model.Approval) error
	ListByRequestID(ctx context.Context, requestID uuid.UUID) ([]model.Approval, error)
	CountByDecisionAndStage(ctx context.Context, requestID uuid.UUID, decision model.Decision, stageIndex int) (int, error)
	ExistsByCheckerAndStage(ctx context.Context, requestID uuid.UUID, checkerID string, stageIndex int) (bool, error)
}

type AuditStore interface {
	Create(ctx context.Context, log *model.AuditLog) error
	ListByRequestID(ctx context.Context, requestID uuid.UUID) ([]model.AuditLog, error)
}

type OperatorFilter struct {
	Page    int
	PerPage int
}

type OperatorStore interface {
	Create(ctx context.Context, operator *model.Operator) error
	GetByID(ctx context.Context, id uuid.UUID) (*model.Operator, error)
	GetByUsername(ctx context.Context, username string) (*model.Operator, error)
	List(ctx context.Context, filter OperatorFilter) ([]model.Operator, int, error)
	Update(ctx context.Context, operator *model.Operator) error
	Delete(ctx context.Context, id uuid.UUID) error
	Count(ctx context.Context) (int, error)
}

type OutboxFilter struct {
	TenantID  *string
	Status    *string
	Event     *string
	RequestID *uuid.UUID
	Page      int
	PerPage   int
}

type OutboxStore interface {
	CreateBatch(ctx context.Context, entries []model.OutboxEntry) error
	// ClaimBatch atomically selects and locks up to `limit` pending entries for
	// delivery, transitioning their status to 'processing'. This prevents
	// duplicate deliveries across multiple app instances.
	ClaimBatch(ctx context.Context, limit int) ([]model.OutboxEntry, error)
	MarkDelivered(ctx context.Context, id uuid.UUID) error
	MarkRetry(ctx context.Context, id uuid.UUID, attempts int, lastError string, nextRetryAt time.Time) error
	MarkFailed(ctx context.Context, id uuid.UUID, attempts int, lastError string) error
	DeleteDelivered(ctx context.Context, olderThan time.Time) (int64, error)

	// List returns paginated outbox entries filtered by status, request ID, and tenant.
	List(ctx context.Context, filter OutboxFilter) ([]model.OutboxEntry, int, error)
	// CountByStatus returns a count of entries grouped by status, optionally scoped to a tenant.
	// When since is non-nil, only entries created at or after that time are counted.
	CountByStatus(ctx context.Context, tenantID *string, since *time.Time) (map[string]int, error)
	// ResetAllFailed resets all failed outbox entries to pending for re-delivery.
	ResetAllFailed(ctx context.Context, tenantID *string) (int64, error)
	// GetByID fetches a single outbox entry.
	GetByID(ctx context.Context, id uuid.UUID) (*model.OutboxEntry, error)
	// ResetForRetry resets a single failed entry to pending for re-delivery.
	ResetForRetry(ctx context.Context, id uuid.UUID) error
	// ResetAllFailedForRequest resets all failed entries for a given request ID.
	ResetAllFailedForRequest(ctx context.Context, requestID uuid.UUID) (int64, error)
}

type PolicyFilter struct {
	Page    int
	PerPage int
}

type PolicyStore interface {
	Create(ctx context.Context, policy *model.Policy) error
	GetByID(ctx context.Context, id uuid.UUID) (*model.Policy, error)
	GetByRequestType(ctx context.Context, requestType string) (*model.Policy, error)
	List(ctx context.Context, filter PolicyFilter) ([]model.Policy, int, error)
	Update(ctx context.Context, policy *model.Policy) error
	Delete(ctx context.Context, id uuid.UUID) error
	// DistinctRequestTypes returns the unique request_type values across all policies
	// for the current tenant (or all tenants when no tenant context is set).
	DistinctRequestTypes(ctx context.Context) ([]string, error)
}

type RequestFilter struct {
	TenantID *string
	Status   *model.RequestStatus
	Type     *string
	MakerID  *string
	Search   *string
	Page     int
	PerPage  int
}

type RequestStore interface {
	Create(ctx context.Context, req *model.Request) error
	GetByID(ctx context.Context, id uuid.UUID) (*model.Request, error)
	// GetByIDForUpdate acquires a row-level lock on the request, serializing
	// concurrent decision operations within a transaction.
	GetByIDForUpdate(ctx context.Context, id uuid.UUID) (*model.Request, error)
	GetByIdempotencyKey(ctx context.Context, key string) (*model.Request, error)
	FindPendingByFingerprint(ctx context.Context, reqType string, fingerprint string) (*model.Request, error)
	List(ctx context.Context, filter RequestFilter) ([]model.Request, int, error)
	UpdateStatus(ctx context.Context, id uuid.UUID, status model.RequestStatus) error
	UpdateStageAndStatus(ctx context.Context, id uuid.UUID, stage int, status model.RequestStatus) error
	ListExpired(ctx context.Context) ([]model.Request, error)
}

type Stores struct {
	Requests  RequestStore
	Approvals ApprovalStore
	Policies  PolicyStore
	Webhooks  WebhookStore
	Audits    AuditStore
	Operators OperatorStore
	Tenants   TenantStore
	Outbox    OutboxStore
	Close     func()

	// HealthCheckers exposes the underlying dependencies (database, etc.)
	// for component-level health monitoring via the /health endpoint.
	HealthCheckers []health.HealthChecker

	// RunInTx executes fn within a database transaction. The callback receives
	// a Stores instance whose stores are bound to the transaction. If fn returns
	// nil the transaction is committed; otherwise it is rolled back.
	RunInTx func(ctx context.Context, fn func(tx *Stores) error) error
}

type TenantFilter struct {
	Page    int
	PerPage int
}

type TenantStore interface {
	Create(ctx context.Context, tenant *model.Tenant) error
	GetBySlug(ctx context.Context, slug string) (*model.Tenant, error)
	GetByID(ctx context.Context, id uuid.UUID) (*model.Tenant, error)
	List(ctx context.Context, filter TenantFilter) ([]model.Tenant, int, error)
	Delete(ctx context.Context, id uuid.UUID) error
}

type WebhookFilter struct {
	Page    int
	PerPage int
}

type WebhookStore interface {
	Create(ctx context.Context, webhook *model.Webhook) error
	GetByID(ctx context.Context, id uuid.UUID) (*model.Webhook, error)
	List(ctx context.Context, filter WebhookFilter) ([]model.Webhook, int, error)
	ListByEventAndType(ctx context.Context, event string, requestType string) ([]model.Webhook, error)
	Delete(ctx context.Context, id uuid.UUID) error
}