/*
 * Copyright 2025 Hirokazu Kobayashi
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */

package org.idp.server.core.openid.identity.repository;

import org.idp.server.core.openid.identity.User;
import org.idp.server.core.openid.identity.UserIdentifier;
import org.idp.server.platform.multi_tenancy.tenant.Tenant;

public interface UserCommandRepository {
  void register(Tenant tenant, User user);

  void update(Tenant tenant, User user);

  void updateRoles(Tenant tenant, User user);

  void updateTenantAssignments(Tenant tenant, User user);

  void updateOrganizationAssignments(Tenant tenant, User user);

  void updateStatus(Tenant tenant, User user);

  void updatePassword(Tenant tenant, User user);

  /**
   * Partial update of the email columns only (Issue #1416).
   *
   * <p>Deliberately not {@link #update(Tenant, User)}: that writes the whole row, so a caller
   * holding a stale {@link User} silently reverts anything another actor changed in between —
   * including {@code status}. A self-service email confirm knows exactly which three columns it
   * means to change, so it writes only those.
   */
  void updateEmail(Tenant tenant, User user);

  /**
   * Partial update of {@code email_verified} only (Issue #1416).
   *
   * <p>Separate from {@link #updateEmail(Tenant, User)} because proving the current address is
   * reachable must not be able to write {@code email} or {@code preferred_username} — those are
   * what the stronger scope on the change endpoint exists to gate.
   */
  void updateEmailVerified(Tenant tenant, User user);

  /** Partial update of {@code phone_number} + {@code phone_number_verified} (Issue #1416). */
  void updatePhoneNumber(Tenant tenant, User user);

  /** Partial update of {@code phone_number_verified} only (Issue #1416). */
  void updatePhoneNumberVerified(Tenant tenant, User user);

  void delete(Tenant tenant, UserIdentifier userIdentifier);
}