plugins

type Aegis interface {
	GetAuthService() *core.AuthService                                                      // Returns the auth service for user operations
	GetLogger() config.Logger                                                               // Returns the configured logger (may be nil)
	GetRateLimiter() *core.RateLimiter                                                      // Returns the rate limiter (may be nil)
	DeriveSecret(purpose string) []byte                                                     // Derives a purpose-specific secret from the master secret
	DB() *sql.DB                                                                            // Returns the database connection for schema validation
	ValidateSchemaRequirements(ctx context.Context, requirements []SchemaRequirement) error // Validates schema requirements
	GetPlugin(name string) (Plugin, bool)                                                   // Returns a registered plugin by name (for inter-plugin communication)
}

type Dependency struct {
	Package string // Go package import path
	Version string // Required version (e.g., "v1.2.3" or "latest")
	Purpose string // Why this dependency is needed
}

type Dialect string

type EnrichedUser = core.EnrichedUser

type Migration struct {
	Version     int    // Migration version (e.g., 001, 002)
	Description string // Human-readable description
	Up          string // SQL for applying migration
	Down        string // SQL for reverting migration
}

type Plugin interface {
	// Identity
	Name() string        // Plugin identifier (e.g., "sms", "oauth", "email")
	Version() string     // Plugin version
	Description() string // Human-readable description

	// Lifecycle
	Init(ctx context.Context, a Aegis) error // Initialize plugin with Aegis instance
	GetMigrations() []Migration              // Return plugin-specific migrations
	GetSchemas() []Schema                    // Return plugin-specific schemas for all dialects

	// Routing
	MountRoutes(router router.Router, prefix string) // Register HTTP routes

	// Metadata
	Dependencies() []Dependency    // Informational only
	RequiresTables() []string      // Informational only
	ProvidesAuthMethods() []string // Informational only
}

type PluginData = core.PluginData

type RequestMeta = core.RequestMeta

type Schema struct {
	Dialect Dialect
	SQL     string
	Info    SchemaInfo
}

type SchemaInfo struct {
	Package     string
	Version     int
	Description string
}

type SchemaRequirement = core.SchemaRequirement

type UserEnricher interface {
	// EnrichUser adds plugin-specific data to the enriched user.
	// Called after authentication to populate extension fields.
	// Use simple field names (e.g., "role", not "admin:role").
	EnrichUser(ctx context.Context, user *core.EnrichedUser) error
}