scannertemplate

type Filter struct {
	TenantID     *shared.ID
	TemplateType *TemplateType
	Status       *TemplateStatus
	SourceID     *shared.ID
	Tags         []string
	Search       string
}

type Repository interface {
	// Create creates a new scanner template.
	Create(ctx context.Context, template *ScannerTemplate) error

	// GetByTenantAndID retrieves a scanner template by tenant and ID.
	// This is the primary method for fetching templates as it enforces tenant isolation.
	GetByTenantAndID(ctx context.Context, tenantID, id shared.ID) (*ScannerTemplate, error)

	// GetByTenantAndName retrieves a scanner template by tenant, type, and name.
	GetByTenantAndName(ctx context.Context, tenantID shared.ID, templateType TemplateType, name string) (*ScannerTemplate, error)

	// List lists scanner templates with filters and pagination.
	List(ctx context.Context, filter Filter, page pagination.Pagination) (pagination.Result[*ScannerTemplate], error)

	// ListByIDs retrieves multiple templates by their IDs.
	ListByIDs(ctx context.Context, tenantID shared.ID, ids []shared.ID) ([]*ScannerTemplate, error)

	// Update updates a scanner template.
	Update(ctx context.Context, template *ScannerTemplate) error

	// Delete deletes a scanner template (tenant-scoped).
	Delete(ctx context.Context, tenantID, id shared.ID) error

	// CountByTenant counts the number of templates for a tenant.
	CountByTenant(ctx context.Context, tenantID shared.ID) (int64, error)

	// CountByType counts the number of templates by type for a tenant.
	CountByType(ctx context.Context, tenantID shared.ID, templateType TemplateType) (int64, error)

	// ExistsByName checks if a template with the given name exists.
	ExistsByName(ctx context.Context, tenantID shared.ID, templateType TemplateType, name string) (bool, error)

	// GetUsage returns the current template usage for a tenant.
	GetUsage(ctx context.Context, tenantID shared.ID) (*TemplateUsage, error)
}

type ScannerTemplate struct {
	ID           shared.ID
	TenantID     shared.ID
	SourceID     *shared.ID // Reference to template source (nil = manual upload)
	Name         string
	TemplateType TemplateType
	Version      string

	// Content storage
	Content       []byte  // Raw YAML/TOML content (inline for <1MB)
	ContentURL    *string // S3 URL for large templates
	ContentHash   string  // SHA256(Content)
	SignatureHash string  // HMAC-SHA256 for verification

	// Metadata
	RuleCount   int
	Description string
	Tags        []string
	Metadata    map[string]any // Scanner-specific metadata

	// Status
	Status          TemplateStatus
	ValidationError *string

	// Source tracking (for synced templates)
	SyncSource   SyncSource // How this template was synced (manual, git, s3, http)
	SourcePath   *string    // Path within source (e.g., templates/sqli.yaml)
	SourceCommit *string    // Git commit hash

	// Audit
	CreatedBy *shared.ID
	CreatedAt time.Time
	UpdatedAt time.Time
}

type Signer struct {
	// contains filtered or unexported fields
}

type SyncSource string

type TemplateQuota struct {
	MaxTemplates         int   `json:"max_templates"`           // Max total templates
	MaxTemplatesNuclei   int   `json:"max_templates_nuclei"`    // Max Nuclei templates
	MaxTemplatesSemgrep  int   `json:"max_templates_semgrep"`   // Max Semgrep templates
	MaxTemplatesGitleaks int   `json:"max_templates_gitleaks"`  // Max Gitleaks templates
	MaxTotalStorageBytes int64 `json:"max_total_storage_bytes"` // Max total storage
}

type TemplateStatus string

type TemplateType string

type TemplateUsage struct {
	TotalTemplates    int64 `json:"total_templates"`
	NucleiTemplates   int64 `json:"nuclei_templates"`
	SemgrepTemplates  int64 `json:"semgrep_templates"`
	GitleaksTemplates int64 `json:"gitleaks_templates"`
	TotalStorageBytes int64 `json:"total_storage_bytes"`
}