user

type AdminUpdateParams struct {
	Email       *string
	FirstName   *string
	LastName    *string
	DisplayName *string
	IsAdmin     *bool
	Disabled    *bool
}

type CreateParams struct {
	Username    string
	Email       string
	FirstName   string
	LastName    string
	DisplayName string
	IsAdmin     bool
}

type CredentialAdminPort interface {
	// CredentialsForUser lists the user's registered credentials.
	CredentialsForUser(ctx context.Context, userID UserID) ([]CredentialView, error)
	// RenameCredential updates one credential's display name;
	// unknown IDs surface ErrNotFound.
	RenameCredential(ctx context.Context, userID UserID, credentialID, name string) (*CredentialView, error)
	// DeleteCredential removes one credential; unknown IDs surface
	// ErrNotFound.
	DeleteCredential(ctx context.Context, userID UserID, credentialID string) error
}

type CredentialView struct {
	ID              string
	Name            string
	CredentialID    string // base64url of the raw credential id
	AttestationType string
	Transport       []string
	BackupEligible  bool
	BackupState     bool
	CreatedAt       string
	LastUsedAt      *string
}

type DefaultPictureFunc func(ctx context.Context) (reader io.ReadCloser, size int64, mime string, ok bool)

type GroupBinding struct {
	ID          string
	Name        string
	DisplayName string
	CreatedAt   string
	UpdatedAt   *string
}

type GroupBindingPort interface {
	// GroupsForUser lists the groups the user belongs to.
	GroupsForUser(ctx context.Context, userID UserID) ([]GroupBinding, error)
	// ReplaceGroupsForUser atomically rebinds the user to exactly
	// the named group IDs.
	ReplaceGroupsForUser(ctx context.Context, userID UserID, groupIDs []string) error
}

type ImageStore interface {
	Save(ctx context.Context, path string, data io.Reader) error
	Open(ctx context.Context, path string) (io.ReadCloser, int64, error)
	Delete(ctx context.Context, path string) error
}

type ListParams struct {
	Query string // matches username, email, display name (ILIKE)
	Page
}

type Page struct {
	Page  int
	Limit int
}

type PostgresStore struct {
	// contains filtered or unexported fields
}

type Service struct {
	// contains filtered or unexported fields
}

type ServiceOption func(*Service)

type Store interface {
	List(ctx context.Context, params ListParams) ([]User, int, error)
	// HasAnyUser reports whether any account exists; the setup
	// contract counts every user, not only admins.
	HasAnyUser(ctx context.Context) (bool, error)
	Create(ctx context.Context, params CreateParams) (User, error)
	GetByID(ctx context.Context, id UserID) (User, error)
	UpdateAdmin(ctx context.Context, id UserID, params AdminUpdateParams) (User, error)
	UpdateProfile(ctx context.Context, id UserID, params UpdateProfileParams) (User, error)
	// SetProfilePicturePath stores or clears (nil) the blob path of the user's profile picture.
	SetProfilePicturePath(ctx context.Context, id UserID, path *string) error
	MarkLogin(ctx context.Context, id UserID) error
	MarkEmailVerified(ctx context.Context, id UserID) error
	Delete(ctx context.Context, id UserID) error
}

type UpdateProfileParams struct {
	FirstName   *string
	LastName    *string
	DisplayName *string
	AvatarURL   *string
	Locale      *string
}

type User struct {
	ID        UserID  `json:"id"`
	Username  string  `json:"username"`
	Email     string  `json:"email"`
	FirstName *string `json:"first_name,omitzero"`
	LastName  *string `json:"last_name,omitzero"`
	AvatarURL *string `json:"avatar_url,omitzero"`
	Locale    *string `json:"locale,omitzero"`

	DisplayName string `json:"display_name"`
	IsAdmin     bool   `json:"is_admin"`
	Disabled    bool   `json:"disabled"`

	EmailVerifiedAt *time.Time `json:"email_verified_at,omitzero"`
	CreatedAt       time.Time  `json:"created_at"`
	UpdatedAt       *time.Time `json:"updated_at,omitzero"`
	LastLoginAt     *time.Time `json:"last_login_at,omitzero"`

	// ProfilePicturePath is the blob-store path of the custom picture;
	// nil falls back to the bundled default.
	// Internal: never serialized (the .png route serves bytes).
	ProfilePicturePath *string `json:"-"`
}

type UserID = typeid.TypeID[userPrefix]

type UserPhoneID = typeid.TypeID[userPhonePrefix]