types

type Invitation struct {
	ID             string    `json:"id"`             // Unique invitation identifier
	OrganizationID string    `json:"organizationId"` // Target organization ID (FK)
	TeamID         *string   `json:"teamId"`         // Optional team ID (nil = org-level)
	Email          string    `json:"email"`          // Invitee email address
	Role           string    `json:"role"`           // Role on acceptance ("admin" or "member")
	InviterID      string    `json:"inviterId"`      // User who created the invitation (FK)
	TokenHash      string    `json:"-"`              // SHA-256 hash of the raw token (never exposed)
	Status         string    `json:"status"`         // "pending", "accepted", "declined", "expired"
	ExpiresAt      time.Time `json:"expiresAt"`      // When the invitation expires
	CreatedAt      time.Time `json:"createdAt"`      // When the invitation was created
	UpdatedAt      time.Time `json:"updatedAt"`      // Last status update timestamp
}

type Member struct {
	ID             string    `json:"id"`             // Unique membership identifier
	UserID         string    `json:"userId"`         // User ID (foreign key)
	OrganizationID string    `json:"organizationId"` // Organization ID (foreign key)
	Role           string    `json:"role"`           // Member role ("owner", "admin", "member")
	CreatedAt      time.Time `json:"createdAt"`      // When the user joined the organization
	UpdatedAt      time.Time `json:"updatedAt"`      // Last role update timestamp
}

type Organization struct {
	ID        string    `json:"id"`        // Unique organization identifier
	Name      string    `json:"name"`      // Display name (e.g., "Acme Corporation")
	Slug      string    `json:"slug"`      // URL-friendly identifier (e.g., "acme-corp")
	CreatedAt time.Time `json:"createdAt"` // When the organization was created
	UpdatedAt time.Time `json:"updatedAt"` // Last update timestamp
}

type OrganizationStore interface {

	// CreateOrganization creates a new organization.
	//
	// Parameters:
	//   - ctx: Request context
	//   - id: Unique organization ID
	//   - name: Organization display name
	//   - slug: URL-friendly identifier (must be unique)
	//   - createdAt, updatedAt: Timestamps
	//
	// Returns:
	//   - error: Duplicate slug or database error
	CreateOrganization(ctx context.Context, id, name, slug string, createdAt, updatedAt time.Time) error

	// GetOrganization retrieves an organization by ID.
	GetOrganization(ctx context.Context, id string) (Organization, error)

	// GetOrganizationBySlug retrieves an organization by slug.
	// Used for URL routing like /org/acme-corp.
	GetOrganizationBySlug(ctx context.Context, slug string) (Organization, error)

	// UpdateOrganization updates organization name and/or slug.
	UpdateOrganization(ctx context.Context, id, name, slug string, updatedAt time.Time) error

	// DeleteOrganization deletes an organization.
	// Should cascade delete members, teams, and team members.
	DeleteOrganization(ctx context.Context, id string, updatedAt time.Time) error

	// ListUserOrganizations retrieves all organizations a user is a member of.
	ListUserOrganizations(ctx context.Context, userID string, offset, limit int) ([]Organization, error)

	CountUserOrganizations(ctx context.Context, userID string) (int, error)

	// CreateMember adds a user to an organization with a role.
	//
	// Valid roles: "owner", "admin", "member"
	CreateMember(ctx context.Context, id, userID, orgID, role string, createdAt, updatedAt time.Time) error

	// GetMember retrieves a user's membership in an organization.
	GetMember(ctx context.Context, userID, orgID string) (Member, error)

	// Deprecated: Use OrganizationStoreCapabilities.HasOrgRole instead.
	IsOrganizationMember(ctx context.Context, userID, orgID string) (bool, error)

	// Deprecated: Use HasOrgRole instead.
	IsOwnerOrAdmin(ctx context.Context, userID, orgID string) (bool, error)

	// IsOwner checks if a user is the organization owner.
	// Returns true only if role is "owner".
	IsOwner(ctx context.Context, userID, orgID string) (bool, error)

	// UpdateMemberRole changes a member's role.
	// Caller should verify permissions before calling.
	UpdateMemberRole(ctx context.Context, userID, orgID, role string, updatedAt time.Time) error

	// RemoveMember removes a user from an organization.
	// Should also remove from all teams in the organization.
	RemoveMember(ctx context.Context, userID, orgID string) error

	// ListOrganizationMembers retrieves all members of an organization.
	ListOrganizationMembers(ctx context.Context, orgID string, offset, limit int) ([]Member, error)

	CountOrganizationMembers(ctx context.Context, orgID string) (int, error)

	// CreateTeam creates a new team within an organization.
	CreateTeam(ctx context.Context, id, orgID, name, description string, createdAt, updatedAt time.Time) error

	// GetTeam retrieves a team by ID.
	GetTeam(ctx context.Context, id string) (Team, error)

	// ListTeams retrieves all teams in an organization.
	ListTeams(ctx context.Context, orgID string, offset, limit int) ([]Team, error)

	CountTeams(ctx context.Context, orgID string) (int, error)

	// UpdateTeam updates team name and/or description.
	UpdateTeam(ctx context.Context, id, name, description string, updatedAt time.Time) error

	// DeleteTeam deletes a team.
	// Should cascade delete team members.
	DeleteTeam(ctx context.Context, id string) error

	// CreateTeamMember adds a user to a team with a role.
	//
	// Valid roles: "lead", "member"
	// User must be an organization member.
	CreateTeamMember(ctx context.Context, id, teamID, userID, role string, createdAt, updatedAt time.Time) error

	// GetTeamMember retrieves a user's team membership.
	GetTeamMember(ctx context.Context, teamID, userID string) (TeamMember, error)

	// ListTeamMembers retrieves all members of a team.
	ListTeamMembers(ctx context.Context, teamID string, offset, limit int) ([]TeamMember, error)

	CountTeamMembers(ctx context.Context, teamID string) (int, error)

	// UpdateTeamMemberRole changes a team member's role.
	UpdateTeamMemberRole(ctx context.Context, teamID, userID, role string, updatedAt time.Time) error

	// RemoveTeamMember removes a user from a team.
	RemoveTeamMember(ctx context.Context, teamID, userID string) error
}

type OrganizationStoreCapabilities interface {
	// HasOrgRole checks whether the user has any of the given org-level roles.
	HasOrgRole(ctx context.Context, userID, orgID string, roles ...string) (bool, error)

	// HasTeamRole checks whether the user has any of the given team-level roles.
	HasTeamRole(ctx context.Context, userID, teamID string, roles ...string) (bool, error)

	// CanAccessTeam checks whether a user can access a team (org member AND team
	// member, any role in each).
	CanAccessTeam(ctx context.Context, userID, teamID string) (bool, error)

	// CreateInvitation stores a new invitation.
	CreateInvitation(ctx context.Context, inv Invitation) error

	// GetInvitationByID retrieves an invitation by its ID.
	GetInvitationByID(ctx context.Context, id string) (Invitation, error)

	// GetInvitationByTokenHash retrieves an invitation by its token hash.
	GetInvitationByTokenHash(ctx context.Context, tokenHash string) (Invitation, error)

	// ListInvitations returns a paginated list of invitations for an org.
	ListInvitations(ctx context.Context, orgID string, teamID string, offset, limit int) ([]Invitation, error)

	// CountInvitations returns the total number of invitations matching filters.
	CountInvitations(ctx context.Context, orgID string, teamID string) (int, error)

	// UpdateInvitationStatus updates the status of an invitation.
	UpdateInvitationStatus(ctx context.Context, id, status string, updatedAt time.Time) error

	// DeleteInvitation removes an invitation by its ID.
	DeleteInvitation(ctx context.Context, id string) error
}

type Team struct {
	ID             string    `json:"id"`             // Unique team identifier
	OrganizationID string    `json:"organizationId"` // Parent organization ID
	Name           string    `json:"name"`           // Team display name
	Description    string    `json:"description"`    // Team purpose/description
	CreatedAt      time.Time `json:"createdAt"`      // When the team was created
	UpdatedAt      time.Time `json:"updatedAt"`      // Last update timestamp
}

type TeamMember struct {
	ID        string    `json:"id"`        // Unique team membership identifier
	TeamID    string    `json:"teamId"`    // Team ID (foreign key)
	UserID    string    `json:"userId"`    // User ID (foreign key)
	Role      string    `json:"role"`      // Team role ("lead", "member")
	CreatedAt time.Time `json:"createdAt"` // When the user joined the team
	UpdatedAt time.Time `json:"updatedAt"` // Last role update timestamp
}