q792602257/agentic-coding-workflow
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(mcp): sqlc queries for mcp_tokens (CRUD + revoke + reaper + purge)

Browse Source
This commit is contained in:
Jerry Yan
2026-05-08 07:07:47 +08:00
parent 6e43792bd6
commit 39f57df882
4 changed files with 715 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/mcp/queries/mcp_tokens.sql
+82
View File
@@ -0,0 +1,82 @@
-- name: CreateMcpToken :one
INSERT INTO mcp_tokens (
id, token_hash, user_id, name, issuer, scope,
acp_session_id, expires_at, created_by
) VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9)
RETURNING id, token_hash, user_id, name, issuer, scope,
acp_session_id, expires_at, last_used_at, revoked_at,
created_by, created_at;
-- name: GetMcpTokenByHash :one
SELECT id, token_hash, user_id, name, issuer, scope,
acp_session_id, expires_at, last_used_at, revoked_at,
created_by, created_at
FROM mcp_tokens
WHERE token_hash = $1;
-- name: GetMcpTokenByID :one
SELECT id, token_hash, user_id, name, issuer, scope,
acp_session_id, expires_at, last_used_at, revoked_at,
created_by, created_at
FROM mcp_tokens
WHERE id = $1;
-- name: ListMcpTokens :many
-- ListMcpTokens：admin 看全部；普通 user 看自己持有的 admin-issued。
-- callerUserID 为 NULL 表示 admin（不过滤）；非空表示按 (user_id=$1 AND issuer='admin') 过滤。
-- activeOnly=true 时排除已撤销 / 已过期。
SELECT id, token_hash, user_id, name, issuer, scope,
acp_session_id, expires_at, last_used_at, revoked_at,
created_by, created_at
FROM mcp_tokens
WHERE
(sqlc.narg('caller_user_id')::uuid IS NULL
OR (user_id = sqlc.narg('caller_user_id')::uuid AND issuer = 'admin'))
AND
(NOT sqlc.arg('active_only')::boolean
OR (revoked_at IS NULL AND (expires_at IS NULL OR expires_at > now())))
ORDER BY created_at DESC;
-- name: UpdateMcpTokenLastUsed :exec
UPDATE mcp_tokens
SET last_used_at = now()
WHERE id = $1;
-- name: RevokeMcpToken :one
UPDATE mcp_tokens
SET revoked_at = now()
WHERE id = $1 AND revoked_at IS NULL
RETURNING id;
-- name: RevokeMcpTokensBySession :many
-- 给定一个 ACP session 的 ID，把所有引用该 session 的 system token 一次性撤销。
-- 返回已撤销的 token id 列表（用于 audit 写入逐条）。
UPDATE mcp_tokens
SET revoked_at = now()
WHERE acp_session_id = $1
AND issuer = 'system'
AND revoked_at IS NULL
RETURNING id;
-- name: ReapStaleSystemTokens :many
-- 启动期 reaper：所有 system token 中，关联的 acp_sessions 已经是 crashed/exited 的，全部撤销。
-- ACP 自身的 reaper 必须先把 starting/running 残留转为 crashed，本 query 才能命中。
UPDATE mcp_tokens t
SET revoked_at = now()
FROM acp_sessions s
WHERE t.acp_session_id = s.id
AND t.issuer = 'system'
AND t.revoked_at IS NULL
AND s.status IN ('crashed','exited')
RETURNING t.id;
-- name: PurgeMcpTokensExpired :execrows
-- 后台 jobs runner 用：删 expires_at + retention 之前 / revoked_at + retention 之前的 row。
-- 单条 query 用 OR 条件，retention 同一份。
DELETE FROM mcp_tokens
WHERE (expires_at IS NOT NULL AND expires_at < $1)
OR (revoked_at IS NOT NULL AND revoked_at < $1);
-- name: DeleteMcpTokenByID :exec
-- 仅供测试用（生产不允许直接物理删；走撤销）。
DELETE FROM mcp_tokens WHERE id = $1;
internal/mcp/sqlc/db.go
+32
View File
@@ -0,0 +1,32 @@
// Code generated by sqlc. DO NOT EDIT.
// versions:
// sqlc v1.31.1
package mcpsqlc
import (
"context"
"github.com/jackc/pgx/v5"
"github.com/jackc/pgx/v5/pgconn"
)
type DBTX interface {
Exec(context.Context, string, ...interface{}) (pgconn.CommandTag, error)
Query(context.Context, string, ...interface{}) (pgx.Rows, error)
QueryRow(context.Context, string, ...interface{}) pgx.Row
}
func New(db DBTX) *Queries {
return &Queries{db: db}
}
type Queries struct {
db DBTX
}
func (q *Queries) WithTx(tx pgx.Tx) *Queries {
return &Queries{
db: tx,
}
}
internal/mcp/sqlc/mcp_tokens.sql.go
+290
View File
@@ -0,0 +1,290 @@
// Code generated by sqlc. DO NOT EDIT.
// versions:
// sqlc v1.31.1
// source: mcp_tokens.sql
package mcpsqlc
import (
"context"
"github.com/jackc/pgx/v5/pgtype"
)
const createMcpToken = `-- name: CreateMcpToken :one
INSERT INTO mcp_tokens (
id, token_hash, user_id, name, issuer, scope,
acp_session_id, expires_at, created_by
) VALUES ($1, $2, $3, $4, $5, $6, $7, $8, $9)
RETURNING id, token_hash, user_id, name, issuer, scope,
acp_session_id, expires_at, last_used_at, revoked_at,
created_by, created_at
`
type CreateMcpTokenParams struct {
ID pgtype.UUID `json:"id"`
TokenHash []byte `json:"token_hash"`
UserID pgtype.UUID `json:"user_id"`
Name string `json:"name"`
Issuer string `json:"issuer"`
Scope []byte `json:"scope"`
AcpSessionID pgtype.UUID `json:"acp_session_id"`
ExpiresAt pgtype.Timestamptz `json:"expires_at"`
CreatedBy pgtype.UUID `json:"created_by"`
}
func (q *Queries) CreateMcpToken(ctx context.Context, arg CreateMcpTokenParams) (McpToken, error) {
row := q.db.QueryRow(ctx, createMcpToken,
arg.ID,
arg.TokenHash,
arg.UserID,
arg.Name,
arg.Issuer,
arg.Scope,
arg.AcpSessionID,
arg.ExpiresAt,
arg.CreatedBy,
)
var i McpToken
err := row.Scan(
&i.ID,
&i.TokenHash,
&i.UserID,
&i.Name,
&i.Issuer,
&i.Scope,
&i.AcpSessionID,
&i.ExpiresAt,
&i.LastUsedAt,
&i.RevokedAt,
&i.CreatedBy,
&i.CreatedAt,
)
return i, err
}
const deleteMcpTokenByID = `-- name: DeleteMcpTokenByID :exec
DELETE FROM mcp_tokens WHERE id = $1
`
// 仅供测试用（生产不允许直接物理删；走撤销）。
func (q *Queries) DeleteMcpTokenByID(ctx context.Context, id pgtype.UUID) error {
_, err := q.db.Exec(ctx, deleteMcpTokenByID, id)
return err
}
const getMcpTokenByHash = `-- name: GetMcpTokenByHash :one
SELECT id, token_hash, user_id, name, issuer, scope,
acp_session_id, expires_at, last_used_at, revoked_at,
created_by, created_at
FROM mcp_tokens
WHERE token_hash = $1
`
func (q *Queries) GetMcpTokenByHash(ctx context.Context, tokenHash []byte) (McpToken, error) {
row := q.db.QueryRow(ctx, getMcpTokenByHash, tokenHash)
var i McpToken
err := row.Scan(
&i.ID,
&i.TokenHash,
&i.UserID,
&i.Name,
&i.Issuer,
&i.Scope,
&i.AcpSessionID,
&i.ExpiresAt,
&i.LastUsedAt,
&i.RevokedAt,
&i.CreatedBy,
&i.CreatedAt,
)
return i, err
}
const getMcpTokenByID = `-- name: GetMcpTokenByID :one
SELECT id, token_hash, user_id, name, issuer, scope,
acp_session_id, expires_at, last_used_at, revoked_at,
created_by, created_at
FROM mcp_tokens
WHERE id = $1
`
func (q *Queries) GetMcpTokenByID(ctx context.Context, id pgtype.UUID) (McpToken, error) {
row := q.db.QueryRow(ctx, getMcpTokenByID, id)
var i McpToken
err := row.Scan(
&i.ID,
&i.TokenHash,
&i.UserID,
&i.Name,
&i.Issuer,
&i.Scope,
&i.AcpSessionID,
&i.ExpiresAt,
&i.LastUsedAt,
&i.RevokedAt,
&i.CreatedBy,
&i.CreatedAt,
)
return i, err
}
const listMcpTokens = `-- name: ListMcpTokens :many
SELECT id, token_hash, user_id, name, issuer, scope,
acp_session_id, expires_at, last_used_at, revoked_at,
created_by, created_at
FROM mcp_tokens
WHERE
($1::uuid IS NULL
OR (user_id = $1::uuid AND issuer = 'admin'))
AND
(NOT $2::boolean
OR (revoked_at IS NULL AND (expires_at IS NULL OR expires_at > now())))
ORDER BY created_at DESC
`
type ListMcpTokensParams struct {
CallerUserID pgtype.UUID `json:"caller_user_id"`
ActiveOnly bool `json:"active_only"`
}
// ListMcpTokens：admin 看全部；普通 user 看自己持有的 admin-issued。
// callerUserID 为 NULL 表示 admin（不过滤）；非空表示按 (user_id=$1 AND issuer='admin') 过滤。
// activeOnly=true 时排除已撤销 / 已过期。
func (q *Queries) ListMcpTokens(ctx context.Context, arg ListMcpTokensParams) ([]McpToken, error) {
rows, err := q.db.Query(ctx, listMcpTokens, arg.CallerUserID, arg.ActiveOnly)
if err != nil {
return nil, err
}
defer rows.Close()
var items []McpToken
for rows.Next() {
var i McpToken
if err := rows.Scan(
&i.ID,
&i.TokenHash,
&i.UserID,
&i.Name,
&i.Issuer,
&i.Scope,
&i.AcpSessionID,
&i.ExpiresAt,
&i.LastUsedAt,
&i.RevokedAt,
&i.CreatedBy,
&i.CreatedAt,
); err != nil {
return nil, err
}
items = append(items, i)
}
if err := rows.Err(); err != nil {
return nil, err
}
return items, nil
}
const purgeMcpTokensExpired = `-- name: PurgeMcpTokensExpired :execrows
DELETE FROM mcp_tokens
WHERE (expires_at IS NOT NULL AND expires_at < $1)
OR (revoked_at IS NOT NULL AND revoked_at < $1)
`
// 后台 jobs runner 用：删 expires_at + retention 之前 / revoked_at + retention 之前的 row。
// 单条 query 用 OR 条件，retention 同一份。
func (q *Queries) PurgeMcpTokensExpired(ctx context.Context, expiresAt pgtype.Timestamptz) (int64, error) {
result, err := q.db.Exec(ctx, purgeMcpTokensExpired, expiresAt)
if err != nil {
return 0, err
}
return result.RowsAffected(), nil
}
const reapStaleSystemTokens = `-- name: ReapStaleSystemTokens :many
UPDATE mcp_tokens t
SET revoked_at = now()
FROM acp_sessions s
WHERE t.acp_session_id = s.id
AND t.issuer = 'system'
AND t.revoked_at IS NULL
AND s.status IN ('crashed','exited')
RETURNING t.id
`
// 启动期 reaper：所有 system token 中，关联的 acp_sessions 已经是 crashed/exited 的，全部撤销。
// ACP 自身的 reaper 必须先把 starting/running 残留转为 crashed，本 query 才能命中。
func (q *Queries) ReapStaleSystemTokens(ctx context.Context) ([]pgtype.UUID, error) {
rows, err := q.db.Query(ctx, reapStaleSystemTokens)
if err != nil {
return nil, err
}
defer rows.Close()
var items []pgtype.UUID
for rows.Next() {
var id pgtype.UUID
if err := rows.Scan(&id); err != nil {
return nil, err
}
items = append(items, id)
}
if err := rows.Err(); err != nil {
return nil, err
}
return items, nil
}
const revokeMcpToken = `-- name: RevokeMcpToken :one
UPDATE mcp_tokens
SET revoked_at = now()
WHERE id = $1 AND revoked_at IS NULL
RETURNING id
`
func (q *Queries) RevokeMcpToken(ctx context.Context, id pgtype.UUID) (pgtype.UUID, error) {
row := q.db.QueryRow(ctx, revokeMcpToken, id)
var id_2 pgtype.UUID
err := row.Scan(&id_2)
return id_2, err
}
const revokeMcpTokensBySession = `-- name: RevokeMcpTokensBySession :many
UPDATE mcp_tokens
SET revoked_at = now()
WHERE acp_session_id = $1
AND issuer = 'system'
AND revoked_at IS NULL
RETURNING id
`
// 给定一个 ACP session 的 ID，把所有引用该 session 的 system token 一次性撤销。
// 返回已撤销的 token id 列表（用于 audit 写入逐条）。
func (q *Queries) RevokeMcpTokensBySession(ctx context.Context, acpSessionID pgtype.UUID) ([]pgtype.UUID, error) {
rows, err := q.db.Query(ctx, revokeMcpTokensBySession, acpSessionID)
if err != nil {
return nil, err
}
defer rows.Close()
var items []pgtype.UUID
for rows.Next() {
var id pgtype.UUID
if err := rows.Scan(&id); err != nil {
return nil, err
}
items = append(items, id)
}
if err := rows.Err(); err != nil {
return nil, err
}
return items, nil
}
const updateMcpTokenLastUsed = `-- name: UpdateMcpTokenLastUsed :exec
UPDATE mcp_tokens
SET last_used_at = now()
WHERE id = $1
`
func (q *Queries) UpdateMcpTokenLastUsed(ctx context.Context, id pgtype.UUID) error {
_, err := q.db.Exec(ctx, updateMcpTokenLastUsed, id)
return err
}
internal/mcp/sqlc/models.go
+311
View File
@@ -0,0 +1,311 @@
// Code generated by sqlc. DO NOT EDIT.
// versions:
// sqlc v1.31.1
package mcpsqlc
import (
"net/netip"
"github.com/jackc/pgx/v5/pgtype"
)
type AcpAgentKind struct {
ID pgtype.UUID `json:"id"`
Name string `json:"name"`
DisplayName string `json:"display_name"`
Description string `json:"description"`
BinaryPath string `json:"binary_path"`
Args []string `json:"args"`
EncryptedEnv []byte `json:"encrypted_env"`
Enabled bool `json:"enabled"`
CreatedBy pgtype.UUID `json:"created_by"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
}
type AcpEvent struct {
ID int64 `json:"id"`
SessionID pgtype.UUID `json:"session_id"`
Direction string `json:"direction"`
RpcKind string `json:"rpc_kind"`
Method *string `json:"method"`
Payload []byte `json:"payload"`
PayloadSize int32 `json:"payload_size"`
Truncated bool `json:"truncated"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
}
type AcpSession struct {
ID pgtype.UUID `json:"id"`
WorkspaceID pgtype.UUID `json:"workspace_id"`
ProjectID pgtype.UUID `json:"project_id"`
AgentKindID pgtype.UUID `json:"agent_kind_id"`
UserID pgtype.UUID `json:"user_id"`
IssueID pgtype.UUID `json:"issue_id"`
RequirementID pgtype.UUID `json:"requirement_id"`
AgentSessionID *string `json:"agent_session_id"`
Branch string `json:"branch"`
CwdPath string `json:"cwd_path"`
IsMainWorktree bool `json:"is_main_worktree"`
Status string `json:"status"`
Pid *int32 `json:"pid"`
ExitCode *int32 `json:"exit_code"`
LastError *string `json:"last_error"`
StartedAt pgtype.Timestamptz `json:"started_at"`
EndedAt pgtype.Timestamptz `json:"ended_at"`
}
type AuditLog struct {
ID int64 `json:"id"`
UserID pgtype.UUID `json:"user_id"`
Action string `json:"action"`
TargetType *string `json:"target_type"`
TargetID *string `json:"target_id"`
Ip *netip.Addr `json:"ip"`
Metadata []byte `json:"metadata"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
}
type Conversation struct {
ID pgtype.UUID `json:"id"`
UserID pgtype.UUID `json:"user_id"`
ProjectID pgtype.UUID `json:"project_id"`
WorkspaceID pgtype.UUID `json:"workspace_id"`
IssueID pgtype.UUID `json:"issue_id"`
ModelID pgtype.UUID `json:"model_id"`
SystemPrompt string `json:"system_prompt"`
Title *string `json:"title"`
TitleGeneratedAt pgtype.Timestamptz `json:"title_generated_at"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
DeletedAt pgtype.Timestamptz `json:"deleted_at"`
}
type GitCredential struct {
ID pgtype.UUID `json:"id"`
WorkspaceID pgtype.UUID `json:"workspace_id"`
Kind string `json:"kind"`
Username *string `json:"username"`
EncryptedSecret []byte `json:"encrypted_secret"`
Fingerprint *string `json:"fingerprint"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
}
type Issue struct {
ID pgtype.UUID `json:"id"`
ProjectID pgtype.UUID `json:"project_id"`
RequirementID pgtype.UUID `json:"requirement_id"`
Number int32 `json:"number"`
Title string `json:"title"`
Description string `json:"description"`
Status string `json:"status"`
AssigneeID pgtype.UUID `json:"assignee_id"`
CreatedBy pgtype.UUID `json:"created_by"`
ClosedAt pgtype.Timestamptz `json:"closed_at"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
WorkspaceID pgtype.UUID `json:"workspace_id"`
}
type Job struct {
ID pgtype.UUID `json:"id"`
Type string `json:"type"`
Payload []byte `json:"payload"`
Status string `json:"status"`
ScheduledAt pgtype.Timestamptz `json:"scheduled_at"`
Attempts int32 `json:"attempts"`
MaxAttempts int32 `json:"max_attempts"`
LeasedAt pgtype.Timestamptz `json:"leased_at"`
LeasedBy *string `json:"leased_by"`
LastError *string `json:"last_error"`
CompletedAt pgtype.Timestamptz `json:"completed_at"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
}
type LlmEndpoint struct {
ID pgtype.UUID `json:"id"`
Provider string `json:"provider"`
DisplayName string `json:"display_name"`
BaseUrl string `json:"base_url"`
ApiKeyEncrypted []byte `json:"api_key_encrypted"`
CreatedBy pgtype.UUID `json:"created_by"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
}
type LlmModel struct {
ID pgtype.UUID `json:"id"`
EndpointID pgtype.UUID `json:"endpoint_id"`
ModelID string `json:"model_id"`
DisplayName string `json:"display_name"`
Capabilities []byte `json:"capabilities"`
ContextWindow int32 `json:"context_window"`
MaxOutputTokens int32 `json:"max_output_tokens"`
PromptPricePerMillionUsd pgtype.Numeric `json:"prompt_price_per_million_usd"`
CompletionPricePerMillionUsd pgtype.Numeric `json:"completion_price_per_million_usd"`
ThinkingPricePerMillionUsd pgtype.Numeric `json:"thinking_price_per_million_usd"`
IsTitleGenerator bool `json:"is_title_generator"`
Enabled bool `json:"enabled"`
SortOrder int32 `json:"sort_order"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
}
type LlmUsage struct {
ID int64 `json:"id"`
ConversationID pgtype.UUID `json:"conversation_id"`
MessageID int64 `json:"message_id"`
UserID pgtype.UUID `json:"user_id"`
EndpointID pgtype.UUID `json:"endpoint_id"`
ModelID pgtype.UUID `json:"model_id"`
PromptTokens int32 `json:"prompt_tokens"`
CompletionTokens int32 `json:"completion_tokens"`
ThinkingTokens int32 `json:"thinking_tokens"`
CostUsd pgtype.Numeric `json:"cost_usd"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
}
type McpToken struct {
ID pgtype.UUID `json:"id"`
TokenHash []byte `json:"token_hash"`
UserID pgtype.UUID `json:"user_id"`
Name string `json:"name"`
Issuer string `json:"issuer"`
Scope []byte `json:"scope"`
AcpSessionID pgtype.UUID `json:"acp_session_id"`
ExpiresAt pgtype.Timestamptz `json:"expires_at"`
LastUsedAt pgtype.Timestamptz `json:"last_used_at"`
RevokedAt pgtype.Timestamptz `json:"revoked_at"`
CreatedBy pgtype.UUID `json:"created_by"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
}
type Message struct {
ID int64 `json:"id"`
ConversationID pgtype.UUID `json:"conversation_id"`
Role string `json:"role"`
Content string `json:"content"`
Thinking *string `json:"thinking"`
ToolCalls []byte `json:"tool_calls"`
Status string `json:"status"`
ErrorMessage *string `json:"error_message"`
PromptTokens *int32 `json:"prompt_tokens"`
CompletionTokens *int32 `json:"completion_tokens"`
ThinkingTokens *int32 `json:"thinking_tokens"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
}
type MessageAttachment struct {
ID pgtype.UUID `json:"id"`
UserID pgtype.UUID `json:"user_id"`
MessageID *int64 `json:"message_id"`
Filename string `json:"filename"`
MimeType string `json:"mime_type"`
SizeBytes int64 `json:"size_bytes"`
Sha256 string `json:"sha256"`
StoragePath string `json:"storage_path"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
}
type Notification struct {
ID pgtype.UUID `json:"id"`
UserID pgtype.UUID `json:"user_id"`
Topic string `json:"topic"`
Severity string `json:"severity"`
Title string `json:"title"`
Body string `json:"body"`
Link *string `json:"link"`
Metadata []byte `json:"metadata"`
ReadAt pgtype.Timestamptz `json:"read_at"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
}
type Project struct {
ID pgtype.UUID `json:"id"`
Slug string `json:"slug"`
Name string `json:"name"`
Description string `json:"description"`
Visibility string `json:"visibility"`
OwnerID pgtype.UUID `json:"owner_id"`
ArchivedAt pgtype.Timestamptz `json:"archived_at"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
}
type PromptTemplate struct {
ID pgtype.UUID `json:"id"`
Name string `json:"name"`
Content string `json:"content"`
Scope string `json:"scope"`
OwnerID pgtype.UUID `json:"owner_id"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
}
type Requirement struct {
ID pgtype.UUID `json:"id"`
ProjectID pgtype.UUID `json:"project_id"`
Number int32 `json:"number"`
Title string `json:"title"`
Description string `json:"description"`
Phase string `json:"phase"`
Status string `json:"status"`
OwnerID pgtype.UUID `json:"owner_id"`
ClosedAt pgtype.Timestamptz `json:"closed_at"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
WorkspaceID pgtype.UUID `json:"workspace_id"`
}
type User struct {
ID pgtype.UUID `json:"id"`
Email string `json:"email"`
PasswordHash string `json:"password_hash"`
DisplayName string `json:"display_name"`
IsAdmin bool `json:"is_admin"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
}
type UserSession struct {
ID pgtype.UUID `json:"id"`
UserID pgtype.UUID `json:"user_id"`
TokenHash []byte `json:"token_hash"`
ExpiresAt pgtype.Timestamptz `json:"expires_at"`
LastSeenAt pgtype.Timestamptz `json:"last_seen_at"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
}
type Workspace struct {
ID pgtype.UUID `json:"id"`
ProjectID pgtype.UUID `json:"project_id"`
Slug string `json:"slug"`
Name string `json:"name"`
Description string `json:"description"`
GitRemoteUrl string `json:"git_remote_url"`
DefaultBranch string `json:"default_branch"`
MainPath string `json:"main_path"`
SyncStatus string `json:"sync_status"`
LastSyncedAt pgtype.Timestamptz `json:"last_synced_at"`
LastSyncError *string `json:"last_sync_error"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
UpdatedAt pgtype.Timestamptz `json:"updated_at"`
ActiveMainSessionID pgtype.UUID `json:"active_main_session_id"`
}
type WorkspaceWorktree struct {
ID pgtype.UUID `json:"id"`
WorkspaceID pgtype.UUID `json:"workspace_id"`
Branch string `json:"branch"`
Path string `json:"path"`
Status string `json:"status"`
ActiveHolder *string `json:"active_holder"`
AcquiredAt pgtype.Timestamptz `json:"acquired_at"`
LastUsedAt pgtype.Timestamptz `json:"last_used_at"`
CreatedAt pgtype.Timestamptz `json:"created_at"`
PruneWarningAt pgtype.Timestamptz `json:"prune_warning_at"`
}