site

type Repository interface {
	// Create inserts a new site into all Cassandra tables
	Create(ctx context.Context, site *Site) error

	// GetByID retrieves a site by tenant_id and site_id
	GetByID(ctx context.Context, tenantID, siteID gocql.UUID) (*Site, error)

	// GetByDomain retrieves a site by domain name
	GetByDomain(ctx context.Context, domain string) (*Site, error)

	// GetByAPIKeyHash retrieves a site by API key hash (for authentication)
	GetByAPIKeyHash(ctx context.Context, apiKeyHash string) (*Site, error)

	// ListByTenant retrieves all sites for a tenant (paginated)
	ListByTenant(ctx context.Context, tenantID gocql.UUID, pageSize int, pageState []byte) ([]*Site, []byte, error)

	// Update updates a site in all Cassandra tables
	Update(ctx context.Context, site *Site) error

	// UpdateAPIKey updates the API key for a site (handles sites_by_apikey table correctly)
	// Must provide both old and new API key hashes to properly delete old entry and insert new one
	UpdateAPIKey(ctx context.Context, site *Site, oldAPIKeyHash string) error

	// Delete removes a site from all Cassandra tables
	Delete(ctx context.Context, tenantID, siteID gocql.UUID) error

	// DomainExists checks if a domain is already registered
	DomainExists(ctx context.Context, domain string) (bool, error)

	// UpdateUsage updates only usage tracking fields (optimized for frequent updates)
	UpdateUsage(ctx context.Context, site *Site) error

	// GetAllSitesForUsageReset retrieves all sites for monthly usage counter reset
	// This uses ALLOW FILTERING and should only be used for administrative tasks
	GetAllSitesForUsageReset(ctx context.Context, pageSize int, pageState []byte) ([]*Site, []byte, error)
}

type Site struct {
	// Core Identity
	ID       gocql.UUID `json:"id"`
	TenantID gocql.UUID `json:"tenant_id"`

	// Site Information
	SiteURL string `json:"site_url"` // Full URL: https://example.com
	Domain  string `json:"domain"`   // Extracted: example.com

	// Authentication
	APIKeyHash     string `json:"-"`                 // SHA-256 hash, never exposed in JSON
	APIKeyPrefix   string `json:"api_key_prefix"`    // "live_sk_a1b2" for display
	APIKeyLastFour string `json:"api_key_last_four"` // Last 4 chars for display

	// Status & Verification
	Status            string `json:"status"` // active, inactive, pending, suspended, archived
	IsVerified        bool   `json:"is_verified"`
	VerificationToken string `json:"-"` // Never exposed

	// Search & Indexing
	SearchIndexName   string    `json:"search_index_name"`
	TotalPagesIndexed int64     `json:"total_pages_indexed"` // All-time total for stats
	LastIndexedAt     time.Time `json:"last_indexed_at,omitempty"`

	// Plugin Info
	PluginVersion string `json:"plugin_version,omitempty"`

	// Usage Tracking (for billing) - no quotas/limits
	StorageUsedBytes    int64     `json:"storage_used_bytes"`    // Current storage usage
	SearchRequestsCount int64     `json:"search_requests_count"` // Monthly search count
	MonthlyPagesIndexed int64     `json:"monthly_pages_indexed"` // Monthly indexing count
	LastResetAt         time.Time `json:"last_reset_at"`         // Last monthly reset

	// Metadata (optional fields)
	Language string `json:"language,omitempty"` // ISO 639-1
	Timezone string `json:"timezone,omitempty"` // IANA timezone
	Notes    string `json:"notes,omitempty"`

	// Audit
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`

	// CWE-359: IP address tracking for GDPR compliance (90-day expiration)
	CreatedFromIPAddress    string    `json:"-"` // Encrypted IP address, never exposed in JSON
	CreatedFromIPTimestamp  time.Time `json:"-"` // For 90-day expiration tracking
	ModifiedFromIPAddress   string    `json:"-"` // Encrypted IP address, never exposed in JSON
	ModifiedFromIPTimestamp time.Time `json:"-"` // For 90-day expiration tracking
}