models

type EmailVerification struct {
	ID        string    `gorm:"type:uuid;primaryKey;default:gen_random_uuid()" json:"id"`
	UserID    string    `gorm:"not null;index" json:"user_id"`
	Token     string    `gorm:"uniqueIndex;not null" json:"token"`
	Email     string    `gorm:"not null" json:"email"`
	IsUsed    bool      `gorm:"default:false" json:"is_used"`
	ExpiresAt time.Time `json:"expires_at"`
	CreatedAt time.Time `json:"created_at"`

	// Relationships
	User User `gorm:"foreignKey:UserID" json:"user,omitempty"`
}

type OTPVerification struct {
	ID        string    `gorm:"type:uuid;primaryKey;default:gen_random_uuid()" json:"id"`
	UserID    string    `gorm:"not null;index" json:"user_id"`
	Phone     string    `gorm:"not null" json:"phone"`
	Code      string    `gorm:"not null" json:"code"`
	IsUsed    bool      `gorm:"default:false" json:"is_used"`
	ExpiresAt time.Time `json:"expires_at"`
	CreatedAt time.Time `json:"created_at"`

	// Relationships
	User User `gorm:"foreignKey:UserID" json:"user,omitempty"`
}

type PasswordReset struct {
	ID        string    `gorm:"type:uuid;primaryKey;default:gen_random_uuid()" json:"id"`
	UserID    string    `gorm:"not null;index" json:"user_id"`
	Token     string    `gorm:"uniqueIndex;not null" json:"token"`
	Email     string    `gorm:"not null" json:"email"`
	IsUsed    bool      `gorm:"default:false" json:"is_used"`
	ExpiresAt time.Time `json:"expires_at"`
	CreatedAt time.Time `json:"created_at"`

	// Relationships
	User User `gorm:"foreignKey:UserID" json:"user,omitempty"`
}

type Permission struct {
	ID          uuid.UUID      `gorm:"type:uuid;primaryKey" json:"id"`
	Name        string         `gorm:"size:100;not null" json:"name"`
	Slug        string         `gorm:"size:100;not null;unique;index" json:"slug"`
	Description string         `gorm:"type:text" json:"description"`
	Resource    string         `gorm:"size:100;index" json:"resource"` // e.g., "users", "posts"
	Action      string         `gorm:"size:50;index" json:"action"`    // e.g., "create", "read", "update", "delete"
	IsSystem    bool           `gorm:"default:false" json:"is_system"` // System permissions can't be deleted
	CreatedAt   time.Time      `gorm:"autoCreateTime" json:"created_at"`
	UpdatedAt   time.Time      `gorm:"autoUpdateTime" json:"updated_at"`
	DeletedAt   gorm.DeletedAt `gorm:"index" json:"-"`

	// Relationships
	Roles []*Role `gorm:"many2many:role_permissions;" json:"roles,omitempty"`
}

type Role struct {
	ID          uuid.UUID      `gorm:"type:uuid;primaryKey" json:"id"`
	Name        string         `gorm:"size:100;not null;unique;index" json:"name"`
	Slug        string         `gorm:"size:100;not null;unique;index" json:"slug"`
	Description string         `gorm:"type:text" json:"description"`
	IsSystem    bool           `gorm:"default:false" json:"is_system"` // System roles can't be deleted
	CreatedAt   time.Time      `gorm:"autoCreateTime" json:"created_at"`
	UpdatedAt   time.Time      `gorm:"autoUpdateTime" json:"updated_at"`
	DeletedAt   gorm.DeletedAt `gorm:"index" json:"-"`

	// Relationships
	Permissions []*Permission `gorm:"many2many:role_permissions;" json:"permissions,omitempty"`
	Users       []*User       `gorm:"many2many:user_roles;" json:"users,omitempty"`
}

type Session struct {
	ID           string    `gorm:"type:uuid;primaryKey;default:gen_random_uuid()" json:"id"`
	UserID       string    `gorm:"not null;index" json:"user_id"`
	Token        string    `gorm:"uniqueIndex;not null" json:"token"`
	RefreshToken string    `gorm:"uniqueIndex" json:"refresh_token"`
	UserAgent    string    `json:"user_agent"`
	IPAddress    string    `json:"ip_address"`
	IsActive     bool      `gorm:"default:true" json:"is_active"`
	ExpiresAt    time.Time `json:"expires_at"`
	LastUsedAt   time.Time `json:"last_used_at"`
	CreatedAt    time.Time `json:"created_at"`
	UpdatedAt    time.Time `json:"updated_at"`

	// Relationships
	User User `gorm:"foreignKey:UserID" json:"user,omitempty"`
}

type User struct {
	ID              uuid.UUID      `gorm:"type:uuid;primaryKey" json:"id"`
	Email           string         `gorm:"uniqueIndex;not null" json:"email" validate:"required,email"`
	Phone           string         `gorm:"uniqueIndex" json:"phone" validate:"omitempty,phone"`
	Password        string         `gorm:"not null" json:"-" validate:"required,password"`
	FirstName       string         `gorm:"not null" json:"first_name" validate:"required,min=2,max=50"`
	LastName        string         `gorm:"not null" json:"last_name" validate:"required,min=2,max=50"`
	IsActive        bool           `gorm:"default:true" json:"is_active"`
	IsEmailVerified bool           `gorm:"default:false" json:"is_email_verified"`
	IsPhoneVerified bool           `gorm:"default:false" json:"is_phone_verified"`
	Is2FAEnabled    bool           `gorm:"default:false" json:"is_2fa_enabled"`
	TwoFactorSecret string         `gorm:"-" json:"-"` // Not stored in DB for security
	LastLoginAt     *time.Time     `json:"last_login_at"`
	EmailVerifiedAt *time.Time     `json:"email_verified_at"`
	PhoneVerifiedAt *time.Time     `json:"phone_verified_at"`
	CreatedAt       time.Time      `json:"created_at"`
	UpdatedAt       time.Time      `json:"updated_at"`
	DeletedAt       gorm.DeletedAt `gorm:"index" json:"-"`

	// Relationships
	Roles       []*Role       `gorm:"many2many:user_roles;" json:"roles,omitempty"`
	Permissions []*Permission `gorm:"many2many:user_permissions;" json:"permissions,omitempty"`
	Sessions    []Session     `json:"sessions,omitempty"`
}