state

type AlertDeliveryAttemptTotals struct {
	Attempts       int `json:"attempts"`
	Confirmed      int `json:"confirmed_pending_outcome"`
	Accepted       int `json:"push_service_accepted"`
	RetryPending   int `json:"retry_pending"`
	Rejected       int `json:"rejected"`
	Interrupted    int `json:"interrupted_uncertain"`
	TargetRetired  int `json:"target_retired"`
	Inactive       int `json:"occurrence_inactive"`
	RetryExhausted int `json:"retry_exhausted"`
	ModeSuppressed int `json:"mode_suppressed"`
}

type AlertDeliveryAttention struct {
	UnreadCount    int                         `json:"unread_count"`
	HighWaterSeq   uint64                      `json:"high_water_seq"`
	ReadThroughSeq uint64                      `json:"read_through_seq"`
	UnreadRefs     []AlertDeliveryAttentionRef `json:"unread_refs"`
}

type AlertDeliveryAttentionRef struct {
	DisplayID string          `json:"display_id"`
	Source    rpc.AlertSource `json:"source"`
	Kind      rpc.AlertKind   `json:"kind"`
}

type AlertDeliveryCompletion string

type AlertDeliveryCompletionDisposition string

type AlertDeliveryCompletionOutcome struct {
	Disposition AlertDeliveryCompletionDisposition `json:"disposition"`
	Class       string                             `json:"class"`
	RetryAt     time.Time                          `json:"retry_at,omitzero"`
}

type AlertDeliveryDueWork struct {
	OccurrenceKey string             `json:"-"`
	Candidate     rpc.AlertCandidate `json:"-"`
	DisplayID     string             `json:"display_id"`
}

type AlertDeliveryHealth struct {
	State          string    `json:"state"`
	Class          string    `json:"class,omitempty"`
	UpdatedAt      time.Time `json:"updated_at"`
	LastAcceptedAt time.Time `json:"last_push_service_acceptance_at,omitzero"`
}

type AlertDeliveryOccurrenceView struct {
	DisplayID        string                    `json:"display_id"`
	Source           rpc.AlertSource           `json:"source"`
	Kind             rpc.AlertKind             `json:"kind"`
	PresentationCode rpc.AlertPresentationCode `json:"presentation_code"`
	State            rpc.AlertEpisodeState     `json:"state"`
	Severity         rpc.AlertSeverity         `json:"severity"`
	EvidenceHealth   rpc.AlertEvidenceHealth   `json:"evidence_health"`
	Destination      rpc.AlertDestination      `json:"destination"`
	EvidenceAsOf     time.Time                 `json:"evidence_as_of"`
	StateChangedAt   time.Time                 `json:"state_changed_at"`
	FirstSeenAt      time.Time                 `json:"first_seen_at"`
	LastSeenAt       time.Time                 `json:"last_seen_at"`
	EndedAt          time.Time                 `json:"ended_at,omitzero"`
	EndReason        string                    `json:"end_reason,omitempty"`
	AttentionSeq     uint64                    `json:"attention_seq"`
	Disposition      string                    `json:"disposition"`
}

type AlertDeliveryReservation struct {
	AttemptID     string    `json:"-"`
	DisplayID     string    `json:"display_id"`
	AttemptNumber int       `json:"attempt_number"`
	ReservedAt    time.Time `json:"reserved_at"`
	RetryAt       time.Time `json:"retry_at,omitzero"`
	// Candidate is populated only by a successful ConfirmAlertTransport.
	// It is the exact current candidate checked under the same store lock as
	// the persisted confirmed-pending-outcome transition. Dispatchers must
	// build transport copy from this value, never from a prior due-work scan.
	Candidate rpc.AlertCandidate `json:"-"`
}

type AlertDeliveryView struct {
	Initialized      bool                          `json:"initialized"`
	Version          string                        `json:"version,omitempty"`
	Generation       uint64                        `json:"generation"`
	AsOf             time.Time                     `json:"as_of,omitzero"`
	CurrentState     rpc.AlertSnapshotState        `json:"current_state,omitempty"`
	Coverage         rpc.AlertCoverage             `json:"coverage,omitzero"`
	Sources          []rpc.AlertSourceCoverage     `json:"sources,omitzero"`
	SourceWatermarks map[rpc.AlertSource]time.Time `json:"-"`
	Occurrences      []AlertDeliveryOccurrenceView `json:"occurrences"`
	Attention        AlertDeliveryAttention        `json:"attention"`
	AttemptTotals    AlertDeliveryAttemptTotals    `json:"-"`
	DeliveryHealth   AlertDeliveryHealth           `json:"delivery_health"`
	// AuthorityScope is private app coordination state. HTTP/SSE DTOs map the
	// view explicitly and JSON must never expose this opaque broker context.
	AuthorityScope string `json:"-"`
}

type AlertRecord struct {
	ID          string    `json:"id"`
	Fingerprint string    `json:"fingerprint"`
	Action      string    `json:"action,omitempty"`
	Severity    string    `json:"severity,omitempty"`
	Account     string    `json:"account,omitempty"`
	Mode        string    `json:"mode,omitempty"`
	Title       string    `json:"title"`
	Body        string    `json:"body"`
	CreatedAt   time.Time `json:"created_at"`
	// LastMatchedAt is refreshed while an observed stress result still matches this
	// record's context (fingerprint for stress-source records, account/mode
	// for all). Previous-context expiry keys on it; records from before the
	// stamp existed fall back to CreatedAt.
	LastMatchedAt time.Time `json:"last_matched_at,omitzero"`
	AttentionSeq  uint64    `json:"attention_seq"`
}

type AlertSettings struct {
	Mode string `json:"mode"`
}

type Attention struct {
	UnreadCount    int            `json:"unread_count"`
	HighWaterSeq   uint64         `json:"high_water_seq"`
	ReadThroughSeq uint64         `json:"read_through_seq"`
	UnreadRefs     []AttentionRef `json:"unread_refs"`
}

type AttentionRef struct {
	Kind string `json:"kind"`
	ID   string `json:"id"`
}

type Data struct {
	Devices           []DeviceGrant       `json:"devices,omitempty"`
	AlertSettings     AlertSettings       `json:"alert_settings"`
	PushSubscriptions []PushSubscription  `json:"push_subscriptions,omitempty"`
	AlertHistory      []AlertRecord       `json:"alert_history,omitempty"`
	VAPID             *VAPIDKeys          `json:"vapid,omitempty"`
	LastPush          *PushAttempt        `json:"last_push,omitempty"`
	ProposalAudit     []ProposalAuditItem `json:"proposal_audit,omitempty"`
	RelayRoute        *RelayRoute         `json:"relay_route,omitempty"`
	// LegacyGovernanceOccurrences decodes the retired governance ledger's
	// occurrence rows for exactly one purpose: compacting their attention
	// sequences out of the shared cursor space at load. It is nilled by that
	// migration and never persisted again.
	LegacyGovernanceOccurrences []legacyGovernanceOccurrence `json:"governance_occurrences,omitempty"`
	DiagnosticStatus            GovernanceDiagnosticStatus   `json:"diagnostic_status"`
	AttentionHighWaterSeq       uint64                       `json:"attention_high_water_seq"`
	AttentionReadThroughSeq     uint64                       `json:"attention_read_through_seq"`
	AlertDelivery               *alertDeliveryData           `json:"alert_delivery,omitempty"`
}

type DeviceGrant struct {
	ID           string `json:"id"`
	Name         string `json:"name,omitempty"`
	PublicKeyJWK string `json:"public_key_jwk,omitempty"`
	// DeviceCookieHashes authenticate the long-lived HttpOnly device
	// cookie. Cookies are the only client storage that provably survives
	// the iOS home-screen web-app container split (localStorage/IndexedDB
	// written by Safari never reach the installed app), so session
	// continuity must not depend on script-visible storage. A capped list,
	// not a single value: Safari and the installed app hold twin copies of
	// the cookie jar, so issuing a fresh cookie to one twin must never
	// invalidate the other.
	DeviceCookieHashes []string  `json:"device_cookie_hashes,omitempty"`
	CreatedAt          time.Time `json:"created_at"`
	LastSeenAt         time.Time `json:"last_seen_at,omitzero"`
	RevokedAt          time.Time `json:"revoked_at,omitzero"`
}

type GovernanceDiagnosticStatus struct {
	State string    `json:"state,omitempty"`
	At    time.Time `json:"at,omitzero"`
}

type ProposalAuditItem struct {
	ID        string          `json:"id"`
	DeviceID  string          `json:"device_id,omitempty"`
	Action    string          `json:"action,omitempty"`
	Payload   json.RawMessage `json:"payload,omitempty"`
	CreatedAt time.Time       `json:"created_at"`
}

type PushAttempt struct {
	At             time.Time `json:"at"`
	SubscriptionID string    `json:"subscription_id,omitempty"`
	AlertID        string    `json:"alert_id,omitempty"`
	OK             bool      `json:"ok"`
	Status         string    `json:"status,omitempty"`
	Error          string    `json:"error,omitempty"`
	Class          string    `json:"class,omitempty"`
}

type PushSubscription struct {
	ID         string    `json:"id"`
	DeviceID   string    `json:"device_id"`
	Endpoint   string    `json:"endpoint"`
	P256DH     string    `json:"p256dh"`
	Auth       string    `json:"auth"`
	CreatedAt  time.Time `json:"created_at"`
	LastSeenAt time.Time `json:"last_seen_at,omitzero"`
}

type RelayRoute struct {
	RemoteURL      string    `json:"remote_url"`
	RouteID        string    `json:"route_id"`
	ConnectorToken string    `json:"connector_token"`
	PublicURL      string    `json:"public_url,omitempty"`
	ConnectorURL   string    `json:"connector_url,omitempty"`
	CreatedAt      time.Time `json:"created_at"`
	UpdatedAt      time.Time `json:"updated_at"`
	ExpiresAt      time.Time `json:"expires_at"`
}

type Store struct {
	// contains filtered or unexported fields
}

type VAPIDKeys struct {
	PublicKey  string    `json:"public_key"`
	PrivateKey string    `json:"private_key"`
	CreatedAt  time.Time `json:"created_at"`
}