// Copyright (c) 2025-2026 Probo Inc . // // Permission is hereby granted, free of charge, to any person obtaining a copy // of this software and associated documentation files (the "Software"), to deal // in the Software without restriction, including without limitation the rights // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell // copies of the Software, and to permit persons to whom the Software is // furnished to do so, subject to the following conditions: // // The above copyright notice and this permission notice shall be included in // all copies or substantial portions of the Software. // // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR // IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, // FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE // AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER // LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, // OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE // SOFTWARE. package coredata import ( "context" "errors" "fmt" "maps" "time" "github.com/jackc/pgx/v5" "github.com/jackc/pgx/v5/pgconn" "go.gearno.de/kit/pg" "go.probo.inc/probo/pkg/gid" ) type ( ControlDocument struct { ControlID gid.GID `db:"control_id"` DocumentID gid.GID `db:"document_id"` OrganizationID gid.GID `db:"organization_id"` TenantID gid.TenantID `db:"tenant_id"` CreatedAt time.Time `db:"created_at"` } ControlDocuments []*ControlDocument ) func (cp ControlDocument) Insert( ctx context.Context, conn pg.Tx, scope Scoper, ) error { q := ` INSERT INTO controls_documents ( control_id, document_id, organization_id, tenant_id, created_at ) VALUES ( @control_id, @document_id, @organization_id, @tenant_id, @created_at ); ` args := pgx.StrictNamedArgs{ "control_id": cp.ControlID, "document_id": cp.DocumentID, "organization_id": cp.OrganizationID, "tenant_id": scope.GetTenantID(), "created_at": cp.CreatedAt, } _, err := conn.Exec(ctx, q, args) if err != nil { if pgErr, ok := errors.AsType[*pgconn.PgError](err); ok { if pgErr.Code == "23505" && pgErr.ConstraintName == "controls_policies_pkey" { return ErrResourceAlreadyExists } } return fmt.Errorf("cannot insert control document: %w", err) } return nil } func (cp ControlDocument) Delete( ctx context.Context, conn pg.Tx, scope Scoper, controlID gid.GID, documentID gid.GID, ) error { q := ` DELETE FROM controls_documents WHERE %s AND control_id = @control_id AND document_id = @document_id; ` args := pgx.StrictNamedArgs{ "control_id": controlID, "document_id": documentID, } maps.Copy(args, scope.SQLArguments()) q = fmt.Sprintf(q, scope.SQLFragment()) _, err := conn.Exec(ctx, q, args) return err } func (cp ControlDocument) DeleteByDocumentIDs( ctx context.Context, conn pg.Tx, scope Scoper, documentIDs []gid.GID, ) error { q := ` DELETE FROM controls_documents WHERE %s AND document_id = ANY(@document_ids); ` args := pgx.StrictNamedArgs{ "document_ids": documentIDs, } maps.Copy(args, scope.SQLArguments()) q = fmt.Sprintf(q, scope.SQLFragment()) if _, err := conn.Exec(ctx, q, args); err != nil { return fmt.Errorf("cannot delete control document mappings by document ids: %w", err) } return nil }