store

type BoltStore struct {
	// contains filtered or unexported fields
}

type TokenRecord struct {
	ID        int64
	TokenHash string
	Policy    *policy.Policy
	PolicyRaw string
	CreatedAt string
	ExpiresAt string // RFC3339 timestamp or empty for no expiration
}

type TokenStore interface {
	// Init initializes the store (create tables, load cache, etc.)
	Init() error

	// Create stores a new token hash → policy mapping with optional expiration.
	Create(tokenHash string, policyJSON string, expiresAt string) error

	// Get retrieves a single token record by hash. Returns nil if not found.
	Get(tokenHash string) (*TokenRecord, error)

	// Update replaces the policy and/or expiration for an existing token.
	Update(tokenHash string, policyJSON string, expiresAt string) error

	// Delete removes a token by its hash.
	Delete(tokenHash string) error

	// Lookup retrieves a policy by token hash. Returns nil if not found or expired.
	Lookup(tokenHash string) (*policy.Policy, error)

	// List returns all token records.
	List() ([]TokenRecord, error)

	// Reload refreshes the in-memory cache from the database.
	Reload() error

	// Close cleans up resources.
	Close() error
}