store

type ActivityBucket struct {
	Date  string
	Count int
}

type AuditLogEntry struct {
	ID        int64
	TableName string
	Operation string // INSERT, UPDATE, DELETE
	OldData   []byte // raw JSONB; nil for INSERT
	NewData   []byte // raw JSONB; nil for DELETE
	ChangedAt time.Time
}

type AuditLogFilter struct {
	TableName string    // optional
	Operation string    // optional: INSERT, UPDATE, DELETE
	Since     time.Time // optional: only entries after this time
	Limit     int       // 0 → default 100; capped at 500
}

type AuthCode struct {
	Sub                string // internal user UUID (JWT sub)
	GitHubID           int64  // GitHub numeric ID (for logging)
	Email              string
	Scope              string
	CodeChallenge      string
	RedirectURI        string
	ClientID           string
	RefreshAllowed     bool
	AccessToken        string
	RefreshToken       string
	AccessTokenExpiry  time.Time
	RefreshTokenExpiry time.Time
}

type AuthorizationConfirmation struct {
	AuthCode
	ClientName  string
	ClientState string
}

type AuthorizationConfirmationResult struct {
	RedirectURI string
	ClientState string
}

type CountBucket struct {
	Name  string
	Count int
}

type DeleteInsightParams struct {
	OrgID            uuid.UUID
	InsightID        uuid.UUID
	ChangedBy        uuid.UUID
	ExpectedRevision *int
}

type Encryptor struct {
	// contains filtered or unexported fields
}

type GetInsightParams struct {
	ProjectID     uuid.UUID
	InsightID     uuid.UUID
	Key           string
	RelationLimit int
}

type GitHubProfile struct {
	GitHubID    int64
	Email       string
	Login       string
	DisplayName string
	AvatarURL   string
	ProfileURL  string
	Bio         string
}

type Grant struct {
	JTI                string
	UserID             uuid.UUID
	OurRefreshToken    string
	ClientID           string
	Scope              string
	AccessToken        string
	RefreshToken       string
	AccessTokenExpiry  time.Time
	RefreshTokenExpiry time.Time
	JWTExpiry          time.Time
	UpdatedAt          time.Time
}

type Insight struct {
	ID             uuid.UUID
	ProjectID      uuid.UUID
	Key            string // empty string when no key
	Content        string
	Tags           []string
	Category       string
	Source         string
	CreatedBy      uuid.UUID
	CreatedAt      time.Time
	UpdatedAt      time.Time
	Revision       int
	ContentChanged bool
	LinkWarnings   []InsightLinkWarning
}

type InsightBacklink struct {
	ID        uuid.UUID
	Key       string
	Category  string
	UpdatedAt time.Time
}

type InsightDetail struct {
	Insight            *Insight
	Links              []InsightLinkReference
	Backlinks          []InsightBacklink
	LinkCount          int
	BacklinkCount      int
	LinksTruncated     bool
	BacklinksTruncated bool
}

type InsightHistoryCursor struct {
	Revision int
}

type InsightHistoryPage struct {
	InsightID       uuid.UUID
	Key             string
	CurrentRevision int
	DeletedAt       *time.Time
	Revisions       []*InsightRevision
	NextCursor      *InsightHistoryCursor
}

type InsightLinkReference struct {
	TargetKey string
	Resolved  bool
	ID        uuid.UUID
	Category  string
	UpdatedAt time.Time
}

type InsightLinkWarning struct {
	Code      string
	TargetKey string
}

type InsightListCursor struct {
	UpdatedAt time.Time
	ID        uuid.UUID
}

type InsightPage struct {
	Insights   []*Insight
	NextCursor *InsightListCursor
}

type InsightRevision struct {
	InsightID uuid.UUID
	Revision  int
	Operation string
	Key       string
	Content   string
	Tags      []string
	Category  string
	Source    string
	DeletedAt *time.Time
	ChangedBy *uuid.UUID
	ChangedAt time.Time
}

type InsightSearchCursor struct {
	Rank      float32
	UpdatedAt time.Time
	ID        uuid.UUID
}

type InsightSearchHit struct {
	Insight *Insight
	Snippet string
}

type InsightSearchPage struct {
	Hits       []*InsightSearchHit
	NextCursor *InsightSearchCursor
}

type InsightSearchProjection uint8

type ListInsightHistoryParams struct {
	ProjectID uuid.UUID
	InsightID uuid.UUID
	Limit     int
	After     *InsightHistoryCursor
}

type ListInsightsParams struct {
	ProjectID uuid.UUID
	Tag       string
	Limit     int
	After     *InsightListCursor
}

type OAuthClient struct {
	ClientID                string
	ClientName              string
	RedirectURIs            []string
	GrantTypes              []string
	ResponseTypes           []string
	TokenEndpointAuthMethod string
	Scope                   string
	IssuedAt                time.Time
	LastUsedAt              time.Time
	ExpiresAt               *time.Time
}

type OAuthClientKind string

type Org struct {
	ID        uuid.UUID
	Slug      string
	Name      string
	Kind      string // "personal" or "shared"
	CreatedAt time.Time
}

type PendingAuth struct {
	ClientID             string
	ClientName           string
	ClientKind           OAuthClientKind
	ClientLogoPNG        []byte
	RedirectURI          string
	Scope                string
	CodeChallenge        string
	ClientState          string
	RefreshAllowed       bool
	ConfirmationRequired bool
}

type Project struct {
	ID        uuid.UUID
	OrgID     uuid.UUID
	CreatedBy uuid.UUID
	Slug      string
	Name      string
	CreatedAt time.Time
}

type ProjectDashboard struct {
	TotalInsights  int
	CategoryCounts []CountBucket
	SourceCounts   []CountBucket
	TopTags        []CountBucket
	RecentActivity []ActivityBucket
	RecentInsights []*Insight
}

type RestoreInsightParams struct {
	ProjectID        uuid.UUID
	InsightID        uuid.UUID
	TargetRevision   int
	ExpectedRevision int
	ChangedBy        uuid.UUID
}

type RetiredRefreshToken struct {
	TokenHash      []byte
	Reason         string
	UserID         uuid.UUID
	ClientID       string
	OldJTI         string
	ReplacementJTI string
	GraceExpiresAt time.Time
	RetainedUntil  time.Time
	CreatedAt      time.Time
}

type RevisionConflictError struct {
	Expected int
	Current  int
}

type SearchInsightsParams struct {
	ProjectID  uuid.UUID
	Query      string
	QueryMode  SearchQueryMode
	Tags       []string
	TagMode    SearchTagMode
	Limit      int
	After      *InsightSearchCursor
	ExcludeIDs []uuid.UUID
	Projection InsightSearchProjection
}

type SearchQueryMode string

type SearchTagMode string

type Store interface {
	Ping(ctx context.Context) error
	Migrate(ctx context.Context, logger *slog.Logger) error
	Close()

	UpsertUser(ctx context.Context, profile GitHubProfile) (*User, error)
	GetUserByGitHubID(ctx context.Context, githubID int64) (*User, error)
	GetUserByID(ctx context.Context, id uuid.UUID) (*User, error)
	CreateWebSession(ctx context.Context, session WebSession) (*WebSession, error)
	GetWebSessionByTokenHash(ctx context.Context, tokenHash []byte) (*WebSession, error)
	TouchWebSession(ctx context.Context, id uuid.UUID, lastSeenAt, idleExpiresAt time.Time) error
	RevokeWebSessionByTokenHash(ctx context.Context, tokenHash []byte) error

	GetPersonalOrgByUserID(ctx context.Context, userID uuid.UUID) (*Org, error)
	ListOrgs(ctx context.Context) ([]*Org, error)

	EnsureProject(ctx context.Context, orgID, createdBy uuid.UUID, slug, name string) (*Project, error)
	ListProjects(ctx context.Context, orgID uuid.UUID) ([]*Project, error)
	GetProjectBySlug(ctx context.Context, orgID uuid.UUID, slug string) (*Project, error)

	UpsertGrant(ctx context.Context, g Grant) error
	GetGrant(ctx context.Context, jti string) (*Grant, error)
	GetGrantByRefreshToken(ctx context.Context, token string) (*Grant, error)
	GetRetiredRefreshToken(ctx context.Context, tokenHash []byte) (*RetiredRefreshToken, error)
	RotateGrant(ctx context.Context, oldToken, oldJTI string, oldJWTExpiry time.Time, g Grant, retired *RetiredRefreshToken) (*Grant, error)
	DeleteGrant(ctx context.Context, jti string, retired *RetiredRefreshToken) error

	StorePendingAuth(ctx context.Context, state string, p PendingAuth) error
	ConsumePendingAuth(ctx context.Context, state string) (*PendingAuth, error)
	StoreAuthorizationConfirmation(ctx context.Context, tokenHash []byte, c AuthorizationConfirmation) error
	CompleteAuthorizationConfirmation(ctx context.Context, tokenHash []byte, approve bool, code string) (*AuthorizationConfirmationResult, error)
	StoreAuthCode(ctx context.Context, code string, c AuthCode) error
	ConsumeAuthCode(ctx context.Context, code string) (*AuthCode, error)

	RevokeToken(ctx context.Context, jti string, expiresAt time.Time) error
	IsTokenRevoked(ctx context.Context, jti string) (bool, error)

	WriteInsight(ctx context.Context, p WriteInsightParams) (*Insight, error)
	GetInsight(ctx context.Context, p GetInsightParams) (*InsightDetail, error)
	UpdateInsight(ctx context.Context, p UpdateInsightParams) (*Insight, error)
	DeleteInsight(ctx context.Context, p DeleteInsightParams) (int, error)
	RestoreInsight(ctx context.Context, p RestoreInsightParams) (*Insight, error)
	ListInsightHistory(ctx context.Context, p ListInsightHistoryParams) (*InsightHistoryPage, error)
	SearchInsights(ctx context.Context, p SearchInsightsParams) (*InsightSearchPage, error)
	ListInsights(ctx context.Context, p ListInsightsParams) (*InsightPage, error)
	ListTags(ctx context.Context, projectID uuid.UUID, limit int) ([]TagCount, error)
	GetProjectDashboard(ctx context.Context, projectID uuid.UUID) (*ProjectDashboard, error)

	SaveClient(ctx context.Context, c OAuthClient) error
	UpsertClient(ctx context.Context, c OAuthClient) error
	GetClient(ctx context.Context, clientID string) (*OAuthClient, error)
	TouchClient(ctx context.Context, clientID string) error

	ListAuditLog(ctx context.Context, filter AuditLogFilter) ([]*AuditLogEntry, error)
}

type TagCount struct {
	Name  string
	Count int
}

type UpdateInsightParams struct {
	OrgID            uuid.UUID
	InsightID        uuid.UUID
	Content          string
	Tags             []string
	ChangedBy        uuid.UUID
	ExpectedRevision *int
}

type User struct {
	ID               uuid.UUID
	GitHubID         int64
	Email            string
	Login            string
	DisplayName      string
	AvatarURL        string
	ProfileURL       string
	Bio              string
	ProfileUpdatedAt time.Time
	CreatedAt        time.Time
	UpdatedAt        time.Time
}

type WebSession struct {
	ID            uuid.UUID
	TokenHash     []byte
	UserID        uuid.UUID
	CreatedAt     time.Time
	LastSeenAt    time.Time
	IdleExpiresAt time.Time
	ExpiresAt     time.Time
	RevokedAt     time.Time
}

type WriteInsightParams struct {
	ProjectID uuid.UUID
	Key       string // empty = no stable key
	Content   string
	Tags      []string
	Category  string
	Source    string
	CreatedBy uuid.UUID
	// ExpectedRevision distinguishes an omitted last-write-wins mutation from an explicit precondition.
	ExpectedRevision *int
}