templatesource

type GitSourceConfig struct {
	URL      string `json:"url"`                 // https://github.com/org/repo
	Branch   string `json:"branch"`              // main, develop
	Path     string `json:"path,omitempty"`      // templates/nuclei/
	AuthType string `json:"auth_type,omitempty"` // none, ssh, token, oauth
}

type HTTPSourceConfig struct {
	URL      string            `json:"url"`
	AuthType string            `json:"auth_type,omitempty"` // none, bearer, basic, api_key
	Headers  map[string]string `json:"headers,omitempty"`
	Timeout  int               `json:"timeout,omitempty"` // Seconds
}

type ListInput struct {
	TenantID     shared.ID
	SourceType   *SourceType                   // Filter by source type
	TemplateType *scannertemplate.TemplateType // Filter by template type
	Enabled      *bool                         // Filter by enabled status
	Page         int
	PageSize     int
	SortBy       string
	SortOrder    string
}

type ListOutput struct {
	Items      []*TemplateSource
	TotalCount int
}

type Repository interface {
	// Create creates a new template source.
	Create(ctx context.Context, source *TemplateSource) error

	// GetByID retrieves a template source by ID.
	GetByID(ctx context.Context, id shared.ID) (*TemplateSource, error)

	// GetByTenantAndID retrieves a template source by tenant ID and source ID.
	GetByTenantAndID(ctx context.Context, tenantID, sourceID shared.ID) (*TemplateSource, error)

	// GetByTenantAndName retrieves a template source by tenant and name.
	GetByTenantAndName(ctx context.Context, tenantID shared.ID, name string) (*TemplateSource, error)

	// List lists template sources with pagination and filtering.
	List(ctx context.Context, input ListInput) (*ListOutput, error)

	// ListByTenantAndTemplateType lists sources for a tenant and template type.
	ListByTenantAndTemplateType(ctx context.Context, tenantID shared.ID, templateType scannertemplate.TemplateType) ([]*TemplateSource, error)

	// ListEnabledForSync lists enabled sources that need syncing for a tenant.
	ListEnabledForSync(ctx context.Context, tenantID shared.ID) ([]*TemplateSource, error)

	// ListAllNeedingSync lists all enabled sources across all tenants that need syncing.
	// Used by background sync scheduler.
	ListAllNeedingSync(ctx context.Context) ([]*TemplateSource, error)

	// Update updates a template source.
	Update(ctx context.Context, source *TemplateSource) error

	// Delete deletes a template source.
	Delete(ctx context.Context, id shared.ID) error

	// UpdateSyncStatus updates only the sync-related fields.
	UpdateSyncStatus(ctx context.Context, source *TemplateSource) error

	// CountByTenant counts the total sources for a tenant.
	CountByTenant(ctx context.Context, tenantID shared.ID) (int, error)
}

type S3SourceConfig struct {
	Bucket     string `json:"bucket"`
	Region     string `json:"region"`
	Prefix     string `json:"prefix,omitempty"`      // scanner-templates/nuclei/
	Endpoint   string `json:"endpoint,omitempty"`    // For MinIO
	AuthType   string `json:"auth_type,omitempty"`   // keys, sts_role
	RoleArn    string `json:"role_arn,omitempty"`    // For cross-account
	ExternalID string `json:"external_id,omitempty"` // For STS
}

type SourceType string

type SyncStatus string

type TemplateSource struct {
	ID           shared.ID
	TenantID     shared.ID
	Name         string
	SourceType   SourceType
	TemplateType scannertemplate.TemplateType
	Description  string
	Enabled      bool

	// Source-specific configuration (polymorphic)
	GitConfig  *GitSourceConfig  `json:"git_config,omitempty"`
	S3Config   *S3SourceConfig   `json:"s3_config,omitempty"`
	HTTPConfig *HTTPSourceConfig `json:"http_config,omitempty"`

	// Lazy sync settings (NO background polling - sync on scan trigger)
	AutoSyncOnScan  bool // Check for updates when scan triggers
	CacheTTLMinutes int  // Minutes to cache before re-check (default: 60)

	// Last sync info
	LastSyncAt     *time.Time
	LastSyncHash   string // ETag/commit hash for change detection
	LastSyncStatus SyncStatus
	LastSyncError  *string

	// Sync statistics
	TotalTemplates int
	LastSyncCount  int // Templates synced in last sync

	// Credential reference
	CredentialID *shared.ID

	// Audit
	CreatedBy *shared.ID
	CreatedAt time.Time
	UpdatedAt time.Time
}