// Our diff terminology uses UpdateOpeartion A and UpdateOperation B as arguments.
// A is always the base and B is the update being applied over A.

// UpdateOperation is a unique update to the vulnstore by an Updater.
type UpdateOperation struct {
	ID          string
	Updater     string
	Fingerprint Fingerprint
	Date        time.Time
}

// UpdateDiff represents added or removed vulnerabilities between update operations
type UpdateDiff struct {
	A       UpdateOperation
	B       UpdateOperation
	Added   []*claircore.Vulnerability
	Removed []*claircore.Vulnerability
}

CREATE TABLE IF NOT EXISTS update_operation
(
    id			text PRIMARY KEY,
    updater		text,
    fingerprint text,
    date		timestamp with time zone
);
CREATE INDEX IF NOT EXISTS uo_updater_idx ON update_operation (updater);

CREATE TABLE IF NOT EXISTS vuln
(
    id                     BIGSERIAL PRIMARY KEY,
    uo_id                  text REFERENCES update_operation ON DELETE CASCADE,
    hash                   text,
    name                   text,
    description            text,
    links                  text,
    severity               text,
    package_name           text,
    package_version        text,
    package_kind           text,
    dist_id                text,
    dist_name              text,
    dist_version           text,
    dist_version_code_name text,
    dist_version_id        text,
    dist_arch              text,
    dist_cpe               text,
    dist_pretty_name       text,
    repo_name              text,
    repo_key               text,
    repo_uri               text,
    fixed_in_version       text,
    active				   boolean
);
CREATE INDEX IF NOT EXISTS vuln_lookup_idx on vuln (active, package_name, dist_version_code_name, dist_pretty_name, dist_name,
                                                    dist_version_id, dist_version, dist_arch, dist_cpe);
CREATE UNIQUE INDEX IF NOT EXISTS unique_vulnerability_id ON vuln (uo_id, hash);
`

// Updater is an interface exporting the necessary methods
// for updating a vulnerability database
type Updater interface {
	// UpdateVulnerabilities creates a new UpdateOperation, inserts the provided vulnerabilities, and ensures vulnerabilities from previous updates
	// are not queried by clients.
	UpdateVulnerabilities(ctx context.Context, updater string, UOID string, fingerprint driver.Fingerprint, vulns []*claircore.Vulnerability) error
	// GetUpdateOperations returns a list of UpdateOperations in date descending order for the given updaters.
	// Returned map is keyed by Updater implementations unique names.
	// If updater slice is nil or empty all UpdateOperations are returned.
	GetUpdateOperations(ctx context.Context, updater []string) (map[string][]*driver.UpdateOperation, error)
	// DeleteUpdateOperations removes an UpdateOperation and the associated vulnerabilities from the vulnstore.
	DeleteUpdateOperations(ctx context.Context, UOID []string) error
	// GetUpdateOperationDiff returns the vulnerabilities added and removed when UpdaterOperation B is applied to UpdateOperation A.
	// Implementations decide if appling diffs between non-sequential updates is an error.
	GetUpdateOperationDiff(ctx context.Context, UOID_A, UOID_B string) (*driver.UpdateDiff, error)
}

func (l *libvuln) GetUpdateOperations
func (l *libvuln) DeleteUpdateOperations
func (l *libvuln) GetUpdateOperationDiff

    --- ManifestIndex
	--- A searchable index mapping coalesced container contents to their manifest hash
	CREATE TABLE IF NOT EXISTS manifest_index (
		id BIGSERIAL PRIMARY KEY,
		package_id bigint REFERENCES package(id),
		dist_id bigint REFERENCES dist(id),
		repo_id bigint REFERENCES repo(id),
		manifest_hash text
	);
	CREATE UNIQUE INDEX IF NOT EXISTS manifest_index_unique_idx ON manifest_index (package_id, dist_id, repo_id, manifest_hash);
	CREATE INDEX IF NOT EXISTS manifest_index_lookup_idx ON manifest_index (package_id, dist_id, repo_id);