tokenstore

type Entry struct {
	ID               model.ID[Entry]
	Scope            string
	FamilyID         model.ID[Family]
	Generation       uint32
	AccessHash       string
	RefreshHash      value.Nullable[string]
	IssuedAt         temporal.DateTime
	LastSeenAt       temporal.DateTime
	AccessExpiresAt  temporal.DateTime
	RefreshExpiresAt value.Nullable[temporal.DateTime]
}

type EntryTable struct {
	// Table provides Entry queries and writes. Example: Entries.Query().Limit(10).
	orm.Table[Entry, model.ID[Entry]]
	// ID binds the persisted Entry.ID column.
	// Example: orm.KeyEq(Entries.ID, id).
	ID orm.Key[Entry, model.ID[Entry]]
	// Scope binds the persisted Entry.Scope column.
	// Example: orm.TextSet(Entries.Scope, scope).
	Scope orm.Text[Entry, string]
	// FamilyID binds the persisted Entry.FamilyID column.
	// Example: orm.ColumnSet(Entries.FamilyID, familyID).
	FamilyID orm.Column[Entry, model.ID[Family]]
	// Generation binds the persisted Entry.Generation column.
	// Example: orm.NumberSet(Entries.Generation, generation).
	Generation orm.Number[Entry, uint32]
	// AccessHash binds the persisted Entry.AccessHash column.
	// Example: orm.TextSet(Entries.AccessHash, accessHash).
	AccessHash orm.Text[Entry, string]
	// RefreshHash binds the persisted Entry.RefreshHash column.
	// Example: orm.NullableTextSetNull(Entries.RefreshHash).
	RefreshHash orm.NullableText[Entry, string]
	// IssuedAt binds the persisted Entry.IssuedAt column.
	// Example: orm.TimeSet(Entries.IssuedAt, issuedAt).
	IssuedAt orm.Time[Entry, temporal.DateTime]
	// LastSeenAt binds the persisted Entry.LastSeenAt column.
	// Example: orm.TimeSet(Entries.LastSeenAt, lastSeenAt).
	LastSeenAt orm.Time[Entry, temporal.DateTime]
	// AccessExpiresAt binds the persisted Entry.AccessExpiresAt column.
	// Example: orm.TimeSet(Entries.AccessExpiresAt, accessExpiresAt).
	AccessExpiresAt orm.Time[Entry, temporal.DateTime]
	// RefreshExpiresAt binds the persisted Entry.RefreshExpiresAt column.
	// Example: orm.NullableTimeSetNull(Entries.RefreshExpiresAt).
	RefreshExpiresAt orm.NullableTime[Entry, temporal.DateTime]
}

type Family struct {
	ID               model.ID[Family]
	Scope            string
	SubjectKey       string
	Name             string
	Scopes           value.JSON[[]auth.AccessScopeName]
	Mode             uint8
	Assurance        uint8
	AccessNanos      int64
	RefreshIdleNanos int64
	RotationLimit    uint32
	Generation       uint32
	CreatedAt        temporal.DateTime
	ExpiresAt        temporal.DateTime
	// ClientIP and UserAgent are display-only device metadata from issuance.
	ClientIP  value.Nullable[string]
	UserAgent value.Nullable[string]
}

type FamilyTable struct {
	// Table provides Family queries and writes. Example: Families.Query().Limit(10).
	orm.Table[Family, model.ID[Family]]
	// ID binds the persisted Family.ID column.
	// Example: orm.KeyEq(Families.ID, id).
	ID orm.Key[Family, model.ID[Family]]
	// Scope binds the persisted Family.Scope column.
	// Example: orm.TextSet(Families.Scope, scope).
	Scope orm.Text[Family, string]
	// SubjectKey binds the persisted Family.SubjectKey column.
	// Example: orm.TextSet(Families.SubjectKey, subjectKey).
	SubjectKey orm.Text[Family, string]
	// Name binds the persisted Family.Name column.
	// Example: orm.TextSet(Families.Name, name).
	Name orm.Text[Family, string]
	// Scopes binds the persisted Family.Scopes column.
	// Example: encoded, err := value.NewJSON(scopes); if err == nil { _ = orm.JSONSet(Families.Scopes, encoded) }.
	Scopes orm.JSON[Family, []auth.AccessScopeName]
	// Mode binds the persisted Family.Mode column.
	// Example: orm.NumberSet(Families.Mode, mode).
	Mode orm.Number[Family, uint8]
	// Assurance binds the persisted Family.Assurance column.
	// Example: orm.NumberSet(Families.Assurance, assurance).
	Assurance orm.Number[Family, uint8]
	// AccessNanos binds the persisted Family.AccessNanos column.
	// Example: orm.NumberSet(Families.AccessNanos, accessNanos).
	AccessNanos orm.Number[Family, int64]
	// RefreshIdleNanos binds the persisted Family.RefreshIdleNanos column.
	// Example: orm.NumberSet(Families.RefreshIdleNanos, refreshIdleNanos).
	RefreshIdleNanos orm.Number[Family, int64]
	// RotationLimit binds the persisted Family.RotationLimit column.
	// Example: orm.NumberSet(Families.RotationLimit, rotationLimit).
	RotationLimit orm.Number[Family, uint32]
	// Generation binds the persisted Family.Generation column.
	// Example: orm.NumberSet(Families.Generation, generation).
	Generation orm.Number[Family, uint32]
	// CreatedAt binds the caller-supplied creation time; the ORM does not automatically populate or refresh it.
	// Example: orm.TimeSet(Families.CreatedAt, createdAt).
	CreatedAt orm.Time[Family, temporal.DateTime]
	// ExpiresAt binds the persisted Family.ExpiresAt column.
	// Example: orm.TimeSet(Families.ExpiresAt, expiresAt).
	ExpiresAt orm.Time[Family, temporal.DateTime]
	// ClientIP binds the persisted Family.ClientIP column.
	// Example: orm.NullableTextSetNull(Families.ClientIP).
	ClientIP orm.NullableText[Family, string]
	// UserAgent binds the persisted Family.UserAgent column.
	// Example: orm.NullableTextSetNull(Families.UserAgent).
	UserAgent orm.NullableText[Family, string]
}

type Subject struct {
	Key      string
	Scope    string
	Identity value.JSON[model.Identity]
}

type SubjectTable struct {
	// Table provides Subject queries and writes. Example: Subjects.Query().Limit(10).
	orm.Table[Subject, string]
	// Scope binds the persisted Subject.Scope column.
	// Example: orm.TextSet(Subjects.Scope, scope).
	Scope orm.Text[Subject, string]
	// Identity binds the persisted Subject.Identity column.
	// Example: encoded, err := value.NewJSON(identity); if err == nil { _ = orm.JSONSet(Subjects.Identity, encoded) }.
	Identity orm.JSON[Subject, model.Identity]
}