im_server/server/db/mysql/tenant_adapter.go

//go:build mysql
// +build mysql

package mysql

import (
	"context"
	"crypto/sha256"
	"database/sql"
	"fmt"
	"sort"
	"strconv"
	"strings"
	"time"

	"github.com/jmoiron/sqlx"
	"github.com/tinode/chat/server/db/common"
	"github.com/tinode/chat/server/store"
	t "github.com/tinode/chat/server/store/types"
)

func (*adapter) TenantBusinessReady() bool { return true }

func (a *adapter) routedTenantAdapter(id t.TenantID) (*adapter, error) {
	if err := validTenant(id); err != nil {
		return nil, err
	}
	if !a.tenantDBRouting {
		return a, nil
	}
	business, _, err := a.TenantAdapterFor(id)
	if err != nil {
		return nil, err
	}
	tenantAdp, ok := business.(*adapter)
	if !ok {
		return nil, t.ErrUnsupported
	}
	return tenantAdp, nil
}

func stampTenantUser(id t.TenantID, user *t.User) *t.User {
	if user != nil {
		user.TenantID = id
	}
	return user
}

func stampTenantUsers(id t.TenantID, users []t.User) []t.User {
	for i := range users {
		users[i].TenantID = id
	}
	return users
}

func stampTenantTopic(id t.TenantID, topic *t.Topic) *t.Topic {
	if topic != nil {
		topic.TenantID = id
	}
	return topic
}

func stampTenantSubs(id t.TenantID, subs []t.Subscription) []t.Subscription {
	for i := range subs {
		subs[i].TenantID = id
	}
	return subs
}

func stampTenantMessages(id t.TenantID, msgs []t.Message) []t.Message {
	for i := range msgs {
		msgs[i].TenantID = id
	}
	return msgs
}

func stampTenantMessage(id t.TenantID, msg *t.Message) *t.Message {
	if msg != nil {
		msg.TenantID = id
	}
	return msg
}

func stampTenantFile(id t.TenantID, file *t.FileDef) *t.FileDef {
	if file != nil {
		file.TenantID = id
	}
	return file
}

func validTenant(id t.TenantID) error {
	if !id.IsValid() {
		return t.ErrMalformed
	}
	return nil
}

func tenantCacheKey(id t.TenantID, key string) (string, error) {
	if key == "" || strings.Contains(key, "%") {
		return "", t.ErrMalformed
	}
	return "tenant:" + strconv.FormatInt(int64(id), 10) + ":" + key, nil
}

func decodeUID(uid t.Uid) int64 {
	return store.DecodeUid(uid)
}

func encodeUserID(id int64) string {
	return store.EncodeUid(id).String()
}

func scanTenantUser(user *t.User) {
	user.SetUid(common.EncodeUidString(user.Id))
	user.Public = common.FromJSON(user.Public)
	user.Trusted = common.FromJSON(user.Trusted)
}

func scanTenantTopic(topic *t.Topic) {
	topic.Owner = common.EncodeUidString(topic.Owner).String()
	topic.Public = common.FromJSON(topic.Public)
	topic.Trusted = common.FromJSON(topic.Trusted)
}

func (a *adapter) TenantUserCreate(id t.TenantID, user *t.User) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || user == nil || user.TenantID != id {
		return t.ErrMalformed
	}
	return tenantAdp.UserCreate(user)
}

func (a *adapter) TenantUserGet(id t.TenantID, uid t.Uid) (*t.User, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || uid.IsZero() {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		user, err := tenantAdp.UserGet(uid)
		return stampTenantUser(id, user), err
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	var user t.User
	err := a.db.GetContext(ctx, &user, "SELECT * FROM users WHERE tenant_id=? AND id=? AND state!=?",
		id, decodeUID(uid), t.StateDeleted)
	if err == sql.ErrNoRows {
		return nil, nil
	}
	if err != nil {
		return nil, err
	}
	scanTenantUser(&user)
	return &user, nil
}

func (a *adapter) TenantUserGetAll(id t.TenantID, uids ...t.Uid) ([]t.User, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil {
		return nil, err
	}
	if tenantAdp != a {
		users, err := tenantAdp.UserGetAll(uids...)
		return stampTenantUsers(id, users), err
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	return a.tenantUserGetAllTx(ctx, nil, id, uids...)
}

func (a *adapter) tenantUserGetAllTx(ctx context.Context, tx *sqlx.Tx, id t.TenantID, uids ...t.Uid) ([]t.User, error) {
	if len(uids) == 0 {
		return nil, nil
	}
	args := make([]any, 0, len(uids))
	for _, uid := range uids {
		if !uid.IsZero() {
			args = append(args, decodeUID(uid))
		}
	}
	if len(args) == 0 {
		return nil, nil
	}
	q, params, _ := sqlx.In("SELECT * FROM users WHERE tenant_id=? AND id IN (?) AND state!=?", id, args, t.StateDeleted)
	query := a.db.Rebind(q)
	var rows *sqlx.Rows
	var err error
	if tx != nil {
		rows, err = tx.QueryxContext(ctx, query, params...)
	} else {
		rows, err = a.db.QueryxContext(ctx, query, params...)
	}
	if err != nil {
		return nil, err
	}
	defer rows.Close()

	var users []t.User
	for rows.Next() {
		var user t.User
		if err = rows.StructScan(&user); err != nil {
			return nil, err
		}
		scanTenantUser(&user)
		users = append(users, user)
	}
	return users, rows.Err()
}

func (a *adapter) TenantUserDelete(id t.TenantID, uid t.Uid, hard bool) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || uid.IsZero() {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.UserDelete(uid, hard)
	}
	decoded := decodeUID(uid)
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()

	var ownTopics []string
	q := "SELECT name FROM topics WHERE tenant_id=? AND owner=?"
	args := []any{id, decoded}
	if !hard {
		q += " AND state!=?"
		args = append(args, t.StateDeleted)
	}
	if err = tx.Select(&ownTopics, q, args...); err != nil {
		return err
	}
	var ownAll []any
	for _, name := range ownTopics {
		ownAll = append(ownAll, name)
		if chn := t.GrpToChn(name); chn != "" {
			ownAll = append(ownAll, chn)
		}
	}

	now := t.TimeNow()
	if hard {
		if _, err = tx.Exec("DELETE FROM devices WHERE tenant_id=? AND userid=?", id, decoded); err != nil {
			return err
		}
		if err = tenantSubsDelForUser(tx, id, decoded, true); err != nil {
			return err
		}
		if _, err = tx.Exec("DELETE FROM dellog WHERE tenant_id=? AND deletedfor=?", id, decoded); err != nil {
			return err
		}
		if len(ownTopics) > 0 {
			if _, err = tx.Exec("DELETE dl FROM dellog AS dl JOIN topics AS tp ON tp.tenant_id=dl.tenant_id AND tp.name=dl.topic WHERE tp.tenant_id=? AND tp.owner=?", id, decoded); err != nil {
				return err
			}
			if _, err = tx.Exec("DELETE m FROM messages AS m JOIN topics AS tp ON tp.tenant_id=m.tenant_id AND tp.name=m.topic WHERE tp.tenant_id=? AND tp.owner=?", id, decoded); err != nil {
				return err
			}
			sqlq, params, _ := sqlx.In("DELETE FROM subscriptions WHERE tenant_id=? AND topic IN (?)", id, ownAll)
			if _, err = tx.Exec(tx.Rebind(sqlq), params...); err != nil {
				return err
			}
			if _, err = tx.Exec("DELETE tt FROM topictags AS tt JOIN topics AS tp ON tp.tenant_id=tt.tenant_id AND tp.name=tt.topic WHERE tp.tenant_id=? AND tp.owner=?", id, decoded); err != nil {
				return err
			}
			if _, err = tx.Exec("DELETE FROM topics WHERE tenant_id=? AND owner=?", id, decoded); err != nil {
				return err
			}
		}
		if _, err = tx.Exec("DELETE FROM auth WHERE tenant_id=? AND userid=?", id, decoded); err != nil {
			return err
		}
		if _, err = tx.Exec("DELETE FROM credentials WHERE tenant_id=? AND userid=?", id, decoded); err != nil {
			return err
		}
		if _, err = tx.Exec("DELETE FROM usertags WHERE tenant_id=? AND userid=?", id, decoded); err != nil {
			return err
		}
		if _, err = tx.Exec("DELETE FROM users WHERE tenant_id=? AND id=?", id, decoded); err != nil {
			return err
		}
	} else {
		if err = tenantSubsDelForUser(tx, id, decoded, false); err != nil {
			return err
		}
		if len(ownAll) > 0 {
			sqlq, params, _ := sqlx.In("UPDATE subscriptions SET updatedat=?,deletedat=? WHERE tenant_id=? AND topic IN (?)", now, now, id, ownAll)
			if _, err = tx.Exec(tx.Rebind(sqlq), params...); err != nil {
				return err
			}
		}
		if _, err = tx.Exec("UPDATE topics SET updatedat=?,touchedat=?,state=?,stateat=? WHERE tenant_id=? AND owner=?",
			now, now, t.StateDeleted, now, id, decoded); err != nil {
			return err
		}
		if _, err = tx.Exec("UPDATE topics AS tp JOIN subscriptions AS s ON tp.tenant_id=s.tenant_id AND tp.name=s.topic "+
			"SET tp.updatedat=?,tp.touchedat=?,tp.state=?,tp.stateat=? WHERE tp.tenant_id=? AND tp.owner=0 AND s.userid=? AND tp.name LIKE 'p2p%'",
			now, now, t.StateDeleted, now, id, decoded); err != nil {
			return err
		}
		if _, err = tx.Exec("UPDATE subscriptions AS s_one JOIN subscriptions AS s_two ON s_one.tenant_id=s_two.tenant_id AND s_one.topic=s_two.topic "+
			"SET s_two.updatedat=?,s_two.deletedat=? WHERE s_one.tenant_id=? AND s_one.userid=? AND s_one.topic LIKE 'p2p%'",
			now, now, id, decoded); err != nil {
			return err
		}
		if _, err = tx.Exec("UPDATE users SET updatedat=?,state=?,stateat=? WHERE tenant_id=? AND id=?",
			now, t.StateDeleted, now, id, decoded); err != nil {
			return err
		}
	}
	return tx.Commit()
}

func (a *adapter) tenantTopicStateForUser(tx *sqlx.Tx, tenantID t.TenantID, decodedUID int64, now time.Time, state any) error {
	objState, ok := state.(t.ObjState)
	if !ok {
		return t.ErrMalformed
	}
	if now.IsZero() {
		now = t.TimeNow()
	}
	if _, err := tx.Exec("UPDATE topics SET state=?,stateat=? WHERE tenant_id=? AND owner=? AND state!=?",
		objState, now, tenantID, decodedUID, t.StateDeleted); err != nil {
		return err
	}
	_, err := tx.Exec("UPDATE topics AS tp JOIN subscriptions AS s ON tp.tenant_id=s.tenant_id AND tp.name=s.topic "+
		"SET tp.state=?,tp.stateat=? WHERE tp.tenant_id=? AND tp.owner=0 AND s.userid=? AND tp.state!=?",
		objState, now, tenantID, decodedUID, t.StateDeleted)
	return err
}

func (a *adapter) TenantUserUpdate(id t.TenantID, uid t.Uid, update map[string]any) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || uid.IsZero() {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.UserUpdate(uid, update)
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	decoded := decodeUID(uid)
	cols, args := common.UpdateByMap(update)
	args = append(args, id, decoded)
	res, err := tx.Exec("UPDATE users SET "+strings.Join(cols, ",")+" WHERE tenant_id=? AND id=?", args...)
	if err != nil {
		return err
	}
	if count, _ := res.RowsAffected(); count == 0 {
		return t.ErrNotFound
	}
	if state, ok := update["State"]; ok {
		now, _ := update["StateAt"].(time.Time)
		if err = a.tenantTopicStateForUser(tx, id, decoded, now, state); err != nil {
			return err
		}
	}
	if tags := common.ExtractTags(update); tags != nil {
		if _, err = tx.Exec("DELETE FROM usertags WHERE tenant_id=? AND userid=?", id, decoded); err != nil {
			return err
		}
		if err = addTenantTags(tx, id, "usertags", "userid", decoded, tags, false); err != nil {
			return err
		}
	}
	return tx.Commit()
}

func (a *adapter) TenantUserUpdateTags(id t.TenantID, uid t.Uid, add, remove, reset []string) ([]string, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || uid.IsZero() {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.UserUpdateTags(uid, add, remove, reset)
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return nil, err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	decoded := decodeUID(uid)
	if reset != nil {
		if _, err = tx.Exec("DELETE FROM usertags WHERE tenant_id=? AND userid=?", id, decoded); err != nil {
			return nil, err
		}
		add, remove = reset, nil
	}
	if err = addTenantTags(tx, id, "usertags", "userid", decoded, add, reset == nil); err != nil {
		return nil, err
	}
	if len(remove) > 0 {
		q, params, _ := sqlx.In("DELETE FROM usertags WHERE tenant_id=? AND userid=? AND tag IN (?)", id, decoded, remove)
		if _, err = tx.Exec(tx.Rebind(q), params...); err != nil {
			return nil, err
		}
	}
	var allTags []string
	if err = tx.Select(&allTags, "SELECT tag FROM usertags WHERE tenant_id=? AND userid=?", id, decoded); err != nil {
		return nil, err
	}
	if _, err = tx.Exec("UPDATE users SET tags=? WHERE tenant_id=? AND id=?", t.StringSlice(allTags), id, decoded); err != nil {
		return nil, err
	}
	return allTags, tx.Commit()
}

func (a *adapter) TenantUserUnreadCount(id t.TenantID, uids ...t.Uid) (map[t.Uid]int, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil {
		return nil, err
	}
	if tenantAdp != a {
		return tenantAdp.UserUnreadCount(uids...)
	}
	counts := make(map[t.Uid]int, len(uids))
	var decoded []any
	for _, uid := range uids {
		counts[uid] = 0
		if !uid.IsZero() {
			decoded = append(decoded, decodeUID(uid))
		}
	}
	if len(decoded) == 0 {
		return counts, nil
	}
	q, args, _ := sqlx.In("SELECT s.userid,SUM(tp.seqid)-SUM(s.readseqid) AS unreadcount "+
		"FROM topics AS tp JOIN subscriptions AS s ON tp.tenant_id=s.tenant_id AND tp.name=s.topic "+
		"WHERE s.tenant_id=? AND s.userid IN (?) AND s.deletedat IS NULL AND tp.state!=? "+
		"AND INSTR(s.modewant,'R')>0 AND INSTR(s.modegiven,'R')>0 GROUP BY s.userid", id, decoded, t.StateDeleted)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, a.db.Rebind(q), args...)
	if err != nil {
		return counts, err
	}
	defer rows.Close()
	for rows.Next() {
		var uid int64
		var unread int
		if err = rows.Scan(&uid, &unread); err != nil {
			return counts, err
		}
		counts[store.EncodeUid(uid)] = unread
	}
	return counts, rows.Err()
}

func (a *adapter) TenantUserGetUnvalidated(id t.TenantID, before time.Time, limit int) ([]t.Uid, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil {
		return nil, err
	}
	if tenantAdp != a {
		return tenantAdp.UserGetUnvalidated(before, limit)
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx,
		"SELECT u.id,IFNULL(SUM(c.done),0) AS total FROM users AS u "+
			"LEFT JOIN credentials AS c ON u.tenant_id=c.tenant_id AND u.id=c.userid "+
			"WHERE u.tenant_id=? AND u.lastseen IS NULL AND u.updatedat<? "+
			"GROUP BY u.id,u.updatedat HAVING total=0 ORDER BY u.updatedat ASC LIMIT ?", id, before, limit)
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	var uids []t.Uid
	for rows.Next() {
		var userID int64
		var unused int
		if err = rows.Scan(&userID, &unused); err != nil {
			return nil, err
		}
		uids = append(uids, store.EncodeUid(userID))
	}
	return uids, rows.Err()
}

func tenantTopicCreate(tx *sqlx.Tx, topic *t.Topic) error {
	if topic == nil || topic.TenantID.IsZero() {
		return t.ErrMalformed
	}
	_, err := tx.Exec("INSERT INTO topics(tenant_id,createdat,updatedat,touchedat,state,name,usebt,owner,access,public,trusted,tags,aux) "+
		"VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?)",
		topic.TenantID, topic.CreatedAt, topic.UpdatedAt, topic.TouchedAt, topic.State, topic.Id, topic.UseBt,
		decodeUID(t.ParseUid(topic.Owner)), topic.Access, common.ToJSON(topic.Public), common.ToJSON(topic.Trusted),
		topic.Tags, common.ToJSON(topic.Aux))
	if err != nil {
		return err
	}
	return addTenantTags(tx, topic.TenantID, "topictags", "topic", topic.Id, topic.Tags, false)
}

func (a *adapter) TenantTopicCreate(id t.TenantID, topic *t.Topic) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == nil || topic.TenantID != id {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.TopicCreate(topic)
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	if err = tenantTopicCreate(tx, topic); err != nil {
		return err
	}
	return tx.Commit()
}

func (a *adapter) TenantTopicCreateP2P(id t.TenantID, one, two *t.Subscription) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || one == nil || two == nil || one.TenantID != id || two.TenantID != id {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.TopicCreateP2P(one, two)
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	if err = createSubscription(tx, one, false); err != nil {
		return err
	}
	if err = createSubscription(tx, two, true); err != nil {
		return err
	}
	topic := &t.Topic{TenantID: id, ObjHeader: t.ObjHeader{Id: one.Topic}}
	topic.ObjHeader.MergeTimes(&one.ObjHeader)
	topic.TouchedAt = one.GetTouchedAt()
	if err = tenantTopicCreate(tx, topic); err != nil {
		return err
	}
	return tx.Commit()
}

func (a *adapter) TenantTopicGet(id t.TenantID, topic string) (*t.Topic, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		top, err := tenantAdp.TopicGet(topic)
		return stampTenantTopic(id, top), err
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	var top t.Topic
	err := a.db.GetContext(ctx, &top,
		"SELECT tenant_id,createdat,updatedat,state,stateat,touchedat,name AS id,usebt,access,owner,seqid,delid,subcnt,public,trusted,tags,aux "+
			"FROM topics WHERE tenant_id=? AND name=?", id, topic)
	if err == sql.ErrNoRows {
		return nil, nil
	}
	if err != nil {
		return nil, err
	}
	if t.GetTopicCat(topic) == t.TopicCatGrp {
		var subCnt int
		if err = a.db.GetContext(ctx, &subCnt,
			"SELECT COUNT(*) FROM subscriptions WHERE tenant_id=? AND topic IN (?,?) AND deletedat IS NULL",
			id, topic, t.GrpToChn(topic)); err != nil {
			return nil, err
		}
		if subCnt != top.SubCnt {
			top.SubCnt = subCnt
			if _, err = a.db.ExecContext(ctx, "UPDATE topics SET subcnt=? WHERE tenant_id=? AND name=?", subCnt, id, topic); err != nil {
				return nil, err
			}
		}
	}
	scanTenantTopic(&top)
	return &top, nil
}

func (a *adapter) TenantTopicsForUser(id t.TenantID, uid t.Uid, keepDeleted bool, opts *t.QueryOpt) ([]t.Subscription, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || uid.IsZero() {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		subs, err := tenantAdp.TopicsForUser(uid, keepDeleted, opts)
		return stampTenantSubs(id, subs), err
	}
	q := `SELECT tenant_id,createdat,updatedat,deletedat,topic,delid,recvseqid,
		readseqid,modewant,modegiven,private FROM subscriptions WHERE tenant_id=? AND userid=?`
	args := []any{id, decodeUID(uid)}
	if !keepDeleted {
		q += " AND deletedat IS NULL"
	}
	limit := 0
	ims := time.Time{}
	if opts != nil {
		if opts.Topic != "" {
			q += " AND topic=?"
			args = append(args, opts.Topic)
		}
		if opts.IfModifiedSince == nil {
			limit = a.maxResults
			if opts.Limit > 0 && opts.Limit < limit {
				limit = opts.Limit
			}
		} else {
			ims = *opts.IfModifiedSince
		}
	} else {
		limit = a.maxResults
	}
	if limit > 0 {
		q += " LIMIT ?"
		args = append(args, limit)
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, q, args...)
	if err != nil {
		return nil, err
	}
	join := map[string]t.Subscription{}
	var topq, usrq []any
	for rows.Next() {
		var sub t.Subscription
		if err = rows.StructScan(&sub); err != nil {
			rows.Close()
			return nil, err
		}
		tname := sub.Topic
		sub.User = uid.String()
		switch t.GetTopicCat(tname) {
		case t.TopicCatMe, t.TopicCatFnd:
			continue
		case t.TopicCatP2P:
			uid1, uid2, _ := t.ParseP2P(tname)
			if uid1 == uid {
				usrq = append(usrq, decodeUID(uid2))
				sub.SetWith(uid2.UserId())
			} else {
				usrq = append(usrq, decodeUID(uid1))
				sub.SetWith(uid1.UserId())
			}
		case t.TopicCatGrp:
			tname = t.ChnToGrp(tname)
		}
		topq = append(topq, tname)
		sub.Private = common.FromJSON(sub.Private)
		join[tname] = sub
	}
	err = rows.Err()
	rows.Close()
	if err != nil || len(join) == 0 {
		return nil, err
	}
	if len(topq) > 0 {
		q = "SELECT tenant_id,updatedat,state,touchedat,name AS id,usebt,access,seqid,delid,subcnt,public,trusted FROM topics WHERE tenant_id=? AND name IN (?)"
		q, args, _ = sqlx.In(q, id, topq)
		if !keepDeleted {
			q += " AND state!=?"
			args = append(args, t.StateDeleted)
		}
		if !ims.IsZero() {
			q += " AND touchedat>?"
			args = append(args, ims)
			if limit > 0 && limit < len(topq) {
				q += " ORDER BY touchedat LIMIT ?"
				args = append(args, limit)
			}
		}
		rows, err = a.db.QueryxContext(ctx, a.db.Rebind(q), args...)
		if err != nil {
			return nil, err
		}
		for rows.Next() {
			var top t.Topic
			if err = rows.StructScan(&top); err != nil {
				rows.Close()
				return nil, err
			}
			sub := join[top.Id]
			sub.UpdatedAt = common.SelectLatestTime(sub.UpdatedAt, top.UpdatedAt)
			sub.SetState(top.State)
			sub.SetTouchedAt(top.TouchedAt)
			sub.SetSeqId(top.SeqId)
			if t.GetTopicCat(sub.Topic) == t.TopicCatGrp {
				sub.SetSubCnt(top.SubCnt)
				sub.SetPublic(common.FromJSON(top.Public))
				sub.SetTrusted(common.FromJSON(top.Trusted))
			}
			join[top.Id] = sub
		}
		err = rows.Err()
		rows.Close()
		if err != nil {
			return nil, err
		}
	}
	if len(usrq) > 0 {
		q = "SELECT tenant_id,id,updatedat,state,access,lastseen,useragent,public,trusted FROM users WHERE tenant_id=? AND id IN (?)"
		q, args, _ = sqlx.In(q, id, usrq)
		if !keepDeleted {
			q += " AND state!=?"
			args = append(args, t.StateDeleted)
		}
		rows, err = a.db.QueryxContext(ctx, a.db.Rebind(q), args...)
		if err != nil {
			return nil, err
		}
		for rows.Next() {
			var user t.User
			if err = rows.StructScan(&user); err != nil {
				rows.Close()
				return nil, err
			}
			joinOn := uid.P2PName(common.EncodeUidString(user.Id))
			if sub, ok := join[joinOn]; ok {
				sub.UpdatedAt = common.SelectLatestTime(sub.UpdatedAt, user.UpdatedAt)
				sub.SetState(user.State)
				sub.SetPublic(common.FromJSON(user.Public))
				sub.SetTrusted(common.FromJSON(user.Trusted))
				sub.SetDefaultAccess(user.Access.Auth, user.Access.Anon)
				sub.SetLastSeenAndUA(user.LastSeen, user.UserAgent)
				join[joinOn] = sub
			}
		}
		err = rows.Err()
		rows.Close()
		if err != nil {
			return nil, err
		}
	}
	subs := make([]t.Subscription, 0, len(join))
	for _, sub := range join {
		subs = append(subs, sub)
	}
	return common.SelectEarliestUpdatedSubs(subs, opts, a.maxResults), nil
}

func (a *adapter) TenantUsersForTopic(id t.TenantID, topic string, keepDeleted bool, opts *t.QueryOpt) ([]t.Subscription, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		subs, err := tenantAdp.UsersForTopic(topic, keepDeleted, opts)
		return stampTenantSubs(id, subs), err
	}
	tcat := t.GetTopicCat(topic)
	q := `SELECT s.tenant_id,s.createdat,s.updatedat,s.deletedat,s.userid,s.topic,s.delid,s.recvseqid,
		s.readseqid,s.modewant,s.modegiven,u.public,u.trusted,u.lastseen,u.useragent,s.private
		FROM subscriptions AS s JOIN users AS u ON s.tenant_id=u.tenant_id AND s.userid=u.id
		WHERE s.tenant_id=? AND s.topic=?`
	args := []any{id, topic}
	if !keepDeleted {
		q += " AND u.state!=?"
		args = append(args, t.StateDeleted)
		if tcat != t.TopicCatP2P {
			q += " AND s.deletedat IS NULL"
		}
	}
	limit := a.maxResults
	var oneUser t.Uid
	if opts != nil {
		if !opts.User.IsZero() {
			if tcat != t.TopicCatP2P {
				q += " AND s.userid=?"
				args = append(args, decodeUID(opts.User))
			}
			oneUser = opts.User
		}
		if opts.Limit > 0 && opts.Limit < limit {
			limit = opts.Limit
		}
	}
	q += " LIMIT ?"
	args = append(args, limit)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, q, args...)
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	var subs []t.Subscription
	var userAgent string
	for rows.Next() {
		var sub t.Subscription
		var lastSeen sql.NullTime
		var public, trusted any
		if err = rows.Scan(&sub.TenantID, &sub.CreatedAt, &sub.UpdatedAt, &sub.DeletedAt,
			&sub.User, &sub.Topic, &sub.DelId, &sub.RecvSeqId, &sub.ReadSeqId, &sub.ModeWant, &sub.ModeGiven,
			&public, &trusted, &lastSeen, &userAgent, &sub.Private); err != nil {
			return nil, err
		}
		sub.User = common.EncodeUidString(sub.User).String()
		sub.Private = common.FromJSON(sub.Private)
		sub.SetPublic(common.FromJSON(public))
		sub.SetTrusted(common.FromJSON(trusted))
		sub.SetLastSeenAndUA(&lastSeen.Time, userAgent)
		subs = append(subs, sub)
	}
	if err = rows.Err(); err != nil {
		return nil, err
	}
	if tcat == t.TopicCatP2P && len(subs) > 0 {
		if len(subs) == 1 {
			subs[0].SetPublic(nil)
			subs[0].SetTrusted(nil)
			subs[0].SetLastSeenAndUA(nil, "")
		} else {
			pub := subs[0].GetPublic()
			subs[0].SetPublic(subs[1].GetPublic())
			subs[1].SetPublic(pub)
			trusted := subs[0].GetTrusted()
			subs[0].SetTrusted(subs[1].GetTrusted())
			subs[1].SetTrusted(trusted)
			lastSeen := subs[0].GetLastSeen()
			ua := subs[0].GetUserAgent()
			subs[0].SetLastSeenAndUA(subs[1].GetLastSeen(), subs[1].GetUserAgent())
			subs[1].SetLastSeenAndUA(lastSeen, ua)
		}
		if !keepDeleted || !oneUser.IsZero() {
			filtered := subs[:0]
			for i := range subs {
				if (subs[i].DeletedAt != nil && !keepDeleted) || (!oneUser.IsZero() && subs[i].Uid() != oneUser) {
					continue
				}
				filtered = append(filtered, subs[i])
			}
			subs = filtered
		}
	}
	return subs, nil
}

func (a *adapter) tenantTopicNames(query string, args ...any) ([]string, error) {
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, query, args...)
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	var names []string
	for rows.Next() {
		var name string
		if err = rows.Scan(&name); err != nil {
			return nil, err
		}
		names = append(names, name)
	}
	return names, rows.Err()
}

func (a *adapter) TenantOwnTopics(id t.TenantID, uid t.Uid) ([]string, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || uid.IsZero() {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.OwnTopics(uid)
	}
	return a.tenantTopicNames("SELECT name FROM topics WHERE tenant_id=? AND owner=? AND state!=?",
		id, decodeUID(uid), t.StateDeleted)
}

func (a *adapter) TenantChannelsForUser(id t.TenantID, uid t.Uid) ([]string, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || uid.IsZero() {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.ChannelsForUser(uid)
	}
	return a.tenantTopicNames("SELECT topic FROM subscriptions WHERE tenant_id=? AND userid=? AND topic LIKE 'chn%' "+
		"AND INSTR(modewant,'P')>0 AND INSTR(modegiven,'P')>0 AND deletedat IS NULL", id, decodeUID(uid))
}

func (a *adapter) TenantTopicShare(id t.TenantID, topic string, subs []*t.Subscription) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil {
		return err
	}
	for _, sub := range subs {
		if sub == nil || sub.TenantID != id {
			return t.ErrMalformed
		}
	}
	if tenantAdp != a {
		return tenantAdp.TopicShare(topic, subs)
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	for _, sub := range subs {
		if err = createSubscription(tx, sub, true); err != nil {
			return err
		}
	}
	if topic != "" {
		if _, err = tx.Exec("UPDATE topics SET subcnt=subcnt+? WHERE tenant_id=? AND name=?", len(subs), id, topic); err != nil {
			return err
		}
	}
	return tx.Commit()
}

func tenantMessageDeleteList(tx *sqlx.Tx, tenantID t.TenantID, topic string, toDel *t.DelMessage) error {
	if toDel == nil {
		if _, err := tx.Exec("DELETE FROM dellog WHERE tenant_id=? AND topic=?", tenantID, topic); err != nil {
			return err
		}
		_, err := tx.Exec("DELETE FROM messages WHERE tenant_id=? AND topic=?", tenantID, topic)
		return err
	}
	delRanges := toDel.SeqIdRanges
	if toDel.DeletedFor == "" {
		where := "m.tenant_id=? AND m.topic=?"
		args := []any{tenantID, topic}
		if len(delRanges) > 0 {
			rSQL, rArgs := common.RangesToSql(delRanges)
			where += " AND m.seqid " + rSQL
			args = append(args, rArgs...)
		}
		where += " AND m.deletedat IS NULL"
		if newerThan := toDel.GetNewerThan(); newerThan != nil {
			where += " AND m.createdat>?"
			args = append(args, newerThan)
		}
		var seqIDs []int
		if err := tx.Select(&seqIDs, "SELECT seqid FROM messages AS m WHERE "+where, args...); err != nil {
			return err
		}
		if len(seqIDs) == 0 {
			return nil
		}
		sort.Ints(seqIDs)
		delRanges = t.SliceToRanges(seqIDs)
		rSQL, rArgs := common.RangesToSql(delRanges)
		where = "m.tenant_id=? AND m.topic=? AND m.seqid " + rSQL
		args = append([]any{tenantID, topic}, rArgs...)
		if _, err := tx.Exec("DELETE fml.* FROM filemsglinks AS fml INNER JOIN messages AS m ON m.tenant_id=fml.tenant_id AND m.id=fml.msgid WHERE "+where, args...); err != nil {
			return err
		}
		if _, err := tx.Exec("UPDATE messages AS m SET m.deletedat=?,m.delid=?,m.`from`=0,m.head=NULL,m.content=NULL WHERE "+
			where, append([]any{t.TimeNow(), toDel.DelId}, args...)...); err != nil {
			return err
		}
	}
	stmt, err := tx.Prepare("INSERT INTO dellog(tenant_id,topic,deletedfor,delid,low,hi) VALUES(?,?,?,?,?,?)")
	if err != nil {
		return err
	}
	defer stmt.Close()
	forUser := common.DecodeUidString(toDel.DeletedFor)
	for _, rng := range delRanges {
		if rng.Hi == 0 {
			rng.Hi = rng.Low + 1
		}
		if _, err = stmt.Exec(tenantID, topic, forUser, toDel.DelId, rng.Low, rng.Hi); err != nil {
			return err
		}
	}
	return nil
}

func (a *adapter) TenantTopicDelete(id t.TenantID, topic string, isChan, hard bool) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.TopicDelete(topic, isChan, hard)
	}
	topics := []any{topic}
	if isChan {
		topics = append(topics, t.GrpToChn(topic))
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	if hard {
		q, args, _ := sqlx.In("DELETE FROM subscriptions WHERE tenant_id=? AND topic IN (?)", id, topics)
		if _, err = tx.Exec(tx.Rebind(q), args...); err != nil {
			return err
		}
		if err = tenantMessageDeleteList(tx, id, topic, nil); err != nil {
			return err
		}
		if _, err = tx.Exec("DELETE FROM topictags WHERE tenant_id=? AND topic=?", id, topic); err != nil {
			return err
		}
		if _, err = tx.Exec("DELETE FROM topics WHERE tenant_id=? AND name=?", id, topic); err != nil {
			return err
		}
	} else {
		now := t.TimeNow()
		q, args, _ := sqlx.In("UPDATE subscriptions SET updatedat=?,deletedat=? WHERE tenant_id=? AND topic IN (?)", now, now, id, topics)
		if _, err = tx.Exec(tx.Rebind(q), args...); err != nil {
			return err
		}
		if _, err = tx.Exec("UPDATE topics SET updatedat=?,touchedat=?,state=?,stateat=? WHERE tenant_id=? AND name=?",
			now, now, t.StateDeleted, now, id, topic); err != nil {
			return err
		}
	}
	return tx.Commit()
}

func (a *adapter) TenantTopicUpdateOnMessage(id t.TenantID, topic string, msg *t.Message) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || msg == nil || msg.TenantID != id {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.TopicUpdateOnMessage(topic, msg)
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx, "UPDATE topics SET seqid=?,touchedat=? WHERE tenant_id=? AND name=?",
		msg.SeqId, msg.CreatedAt, id, topic)
	return err
}

func (a *adapter) TenantTopicUpdateSubCnt(id t.TenantID, topic string) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.TopicUpdateSubCnt(topic)
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx,
		"UPDATE topics SET subcnt=(SELECT COUNT(*) FROM subscriptions WHERE tenant_id=? AND topic IN (?,?) AND deletedat IS NULL) WHERE tenant_id=? AND name=?",
		id, topic, t.GrpToChn(topic), id, topic)
	return err
}

func (a *adapter) TenantTopicUpdate(id t.TenantID, topic string, update map[string]any) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.TopicUpdate(topic, update)
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	if update["TouchedAt"] == nil && update["UpdatedAt"] != nil {
		update["TouchedAt"] = update["UpdatedAt"]
	}
	cols, args := common.UpdateByMap(update)
	args = append(args, id, topic)
	res, err := tx.Exec("UPDATE topics SET "+strings.Join(cols, ",")+" WHERE tenant_id=? AND name=?", args...)
	if err != nil {
		return err
	}
	if count, _ := res.RowsAffected(); count == 0 {
		return t.ErrNotFound
	}
	if tags := common.ExtractTags(update); tags != nil {
		if _, err = tx.Exec("DELETE FROM topictags WHERE tenant_id=? AND topic=?", id, topic); err != nil {
			return err
		}
		if err = addTenantTags(tx, id, "topictags", "topic", topic, tags, false); err != nil {
			return err
		}
	}
	return tx.Commit()
}

func (a *adapter) TenantTopicOwnerChange(id t.TenantID, topic string, owner t.Uid) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.TopicOwnerChange(topic, owner)
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx, "UPDATE topics SET owner=? WHERE tenant_id=? AND name=?", decodeUID(owner), id, topic)
	return err
}

func (a *adapter) TenantSubscriptionGet(id t.TenantID, topic string, uid t.Uid, keepDeleted bool) (*t.Subscription, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" || uid.IsZero() {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		sub, err := tenantAdp.SubscriptionGet(topic, uid, keepDeleted)
		if sub != nil {
			sub.TenantID = id
		}
		return sub, err
	}
	query := `SELECT tenant_id,createdat,updatedat,deletedat,userid AS user,topic,delid,recvseqid,
		readseqid,modewant,modegiven,private FROM subscriptions WHERE tenant_id=? AND topic=? AND userid=?`
	if !keepDeleted {
		query += " AND deletedat IS NULL"
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	var sub t.Subscription
	err := a.db.GetContext(ctx, &sub, query, id, topic, decodeUID(uid))
	if err == sql.ErrNoRows {
		return nil, nil
	}
	if err != nil {
		return nil, err
	}
	sub.User = uid.String()
	sub.Private = common.FromJSON(sub.Private)
	return &sub, nil
}

func (a *adapter) TenantSubsForUser(id t.TenantID, uid t.Uid) ([]t.Subscription, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || uid.IsZero() {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		subs, err := tenantAdp.SubsForUser(uid)
		return stampTenantSubs(id, subs), err
	}
	rows, err := a.db.Queryx(`SELECT tenant_id,createdat,updatedat,deletedat,userid AS user,topic,delid,recvseqid,
		readseqid,modewant,modegiven FROM subscriptions WHERE tenant_id=? AND userid=? AND deletedat IS NULL`,
		id, decodeUID(uid))
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	var subs []t.Subscription
	for rows.Next() {
		var sub t.Subscription
		if err = rows.StructScan(&sub); err != nil {
			return nil, err
		}
		sub.User = uid.String()
		subs = append(subs, sub)
	}
	return subs, rows.Err()
}

func (a *adapter) TenantSubsForTopic(id t.TenantID, topic string, keepDeleted bool, opts *t.QueryOpt) ([]t.Subscription, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		subs, err := tenantAdp.SubsForTopic(topic, keepDeleted, opts)
		return stampTenantSubs(id, subs), err
	}
	q := `SELECT tenant_id,createdat,updatedat,deletedat,userid AS user,topic,delid,recvseqid,
		readseqid,modewant,modegiven,private FROM subscriptions WHERE tenant_id=? AND topic=?`
	args := []any{id, topic}
	if !keepDeleted {
		q += " AND deletedat IS NULL"
	}
	limit := a.maxResults
	if opts != nil {
		if !opts.User.IsZero() {
			q += " AND userid=?"
			args = append(args, decodeUID(opts.User))
		}
		if opts.Limit > 0 && opts.Limit < limit {
			limit = opts.Limit
		}
	}
	q += " LIMIT ?"
	args = append(args, limit)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, q, args...)
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	var subs []t.Subscription
	for rows.Next() {
		var sub t.Subscription
		if err = rows.StructScan(&sub); err != nil {
			return nil, err
		}
		sub.User = common.EncodeUidString(sub.User).String()
		sub.Private = common.FromJSON(sub.Private)
		subs = append(subs, sub)
	}
	return subs, rows.Err()
}

func (a *adapter) TenantSubsUpdate(id t.TenantID, topic string, uid t.Uid, update map[string]any) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.SubsUpdate(topic, uid, update)
	}
	cols, args := common.UpdateByMap(update)
	q := "UPDATE subscriptions SET " + strings.Join(cols, ",") + " WHERE tenant_id=? AND topic=?"
	args = append(args, id, topic)
	if !uid.IsZero() {
		q += " AND userid=?"
		args = append(args, decodeUID(uid))
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx, q, args...)
	return err
}

func (a *adapter) TenantSubsDelete(id t.TenantID, topic string, uid t.Uid) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" || uid.IsZero() {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.SubsDelete(topic, uid)
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	now := t.TimeNow()
	decoded := decodeUID(uid)
	res, err := tx.Exec("UPDATE subscriptions SET updatedat=?,deletedat=? WHERE tenant_id=? AND topic=? AND userid=? AND deletedat IS NULL",
		now, now, id, topic, decoded)
	if err != nil {
		return err
	}
	if count, _ := res.RowsAffected(); count == 0 {
		return t.ErrNotFound
	}
	if !t.IsChannel(topic) {
		if _, err = tx.Exec("DELETE FROM dellog WHERE tenant_id=? AND topic=? AND deletedfor=?", id, topic, decoded); err != nil {
			return err
		}
	}
	if t.GetTopicCat(topic) == t.TopicCatGrp {
		if _, err = tx.Exec("UPDATE topics SET subcnt=subcnt-1 WHERE tenant_id=? AND name=?", id, t.ChnToGrp(topic)); err != nil {
			return err
		}
	}
	return tx.Commit()
}

func tenantSubsDelForUser(tx *sqlx.Tx, tenantID t.TenantID, decodedUID int64, hard bool) error {
	rows, err := tx.Query("SELECT topic FROM subscriptions WHERE tenant_id=? AND userid=? AND deletedat IS NULL", tenantID, decodedUID)
	if err != nil {
		return err
	}
	var topics []any
	for rows.Next() {
		var name string
		if err = rows.Scan(&name); err != nil {
			rows.Close()
			return err
		}
		if t.IsChannel(name) {
			name = t.ChnToGrp(name)
		}
		topics = append(topics, name)
	}
	err = rows.Err()
	rows.Close()
	if err != nil {
		return err
	}
	if len(topics) > 0 {
		q, args, _ := sqlx.In("UPDATE topics SET subcnt=subcnt-1 WHERE tenant_id=? AND name IN (?)", tenantID, topics)
		if _, err = tx.Exec(tx.Rebind(q), args...); err != nil {
			return err
		}
	}
	if hard {
		_, err = tx.Exec("DELETE FROM subscriptions WHERE tenant_id=? AND userid=?", tenantID, decodedUID)
	} else {
		now := t.TimeNow()
		_, err = tx.Exec("UPDATE subscriptions SET updatedat=?,deletedat=? WHERE tenant_id=? AND userid=? AND deletedat IS NULL",
			now, now, tenantID, decodedUID)
	}
	return err
}

func (a *adapter) TenantFind(id t.TenantID, caller, promoPrefix string, req [][]string, opt []string, activeOnly bool) ([]t.Subscription, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil {
		return nil, err
	}
	if tenantAdp != a {
		subs, err := tenantAdp.Find(caller, promoPrefix, req, opt, activeOnly)
		return stampTenantSubs(id, subs), err
	}
	allReq := t.FlattenDoubleSlice(req)
	allTags := append(append([]string{}, allReq...), opt...)
	if len(allTags) == 0 {
		return nil, nil
	}
	args := []any{id}
	stateConstraint := ""
	if activeOnly {
		args = append(args, t.StateOK)
		stateConstraint = "u.state=? AND "
	}
	index := make(map[string]struct{})
	for _, tag := range allTags {
		args = append(args, tag)
		index[tag] = struct{}{}
	}
	matcher := "COUNT(*)"
	if promoPrefix != "" {
		matcher = "SUM(CASE WHEN LOCATE('" + promoPrefix + "', tg.tag)=1 THEN 20 ELSE 1 END)"
	}
	query := "SELECT u.id,u.createdat,u.updatedat,0,u.access,0 AS subcnt,u.public,u.trusted,u.tags," + matcher + " AS matches " +
		"FROM users AS u JOIN usertags AS tg ON tg.tenant_id=u.tenant_id AND tg.userid=u.id " +
		"WHERE u.tenant_id=? AND " + stateConstraint + "tg.tag IN (?" + strings.Repeat(",?", len(allTags)-1) + ") " +
		"GROUP BY u.id,u.createdat,u.updatedat,u.access,u.public,u.trusted,u.tags "
	if len(allReq) > 0 {
		q, addArgs := common.DisjunctionSql(req, "tg.tag")
		query += q
		args = append(args, addArgs...)
	}
	query += "UNION ALL "
	args = append(args, id)
	if activeOnly {
		args = append(args, t.StateOK)
		stateConstraint = "t.state=? AND "
	} else {
		stateConstraint = ""
	}
	for _, tag := range allTags {
		args = append(args, tag)
	}
	query += "SELECT t.name AS topic,t.createdat,t.updatedat,t.usebt,t.access,t.subcnt,t.public,t.trusted,t.tags," + matcher + " AS matches " +
		"FROM topics AS t JOIN topictags AS tg ON t.tenant_id=tg.tenant_id AND t.name=tg.topic " +
		"WHERE t.tenant_id=? AND " + stateConstraint + "tg.tag IN (?" + strings.Repeat(",?", len(allTags)-1) + ") " +
		"GROUP BY t.name,t.createdat,t.updatedat,t.usebt,t.access,t.subcnt,t.public,t.trusted,t.tags "
	if len(allReq) > 0 {
		q, addArgs := common.DisjunctionSql(req, "tg.tag")
		query += q
		args = append(args, addArgs...)
	}
	query += "ORDER BY matches DESC, subcnt DESC LIMIT ?"
	args = append(args, a.maxResults)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, query, args...)
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	var subs []t.Subscription
	for rows.Next() {
		var sub t.Subscription
		var public, trusted any
		var access t.DefaultAccess
		var subcnt, ignored int
		var setTags t.StringSlice
		var isChan bool
		if err = rows.Scan(&sub.Topic, &sub.CreatedAt, &sub.UpdatedAt, &isChan, &access, &subcnt,
			&public, &trusted, &setTags, &ignored); err != nil {
			return nil, err
		}
		if parsed, err := strconv.ParseInt(sub.Topic, 10, 64); err == nil {
			sub.Topic = store.EncodeUid(parsed).UserId()
			if sub.Topic == caller {
				continue
			}
		}
		if isChan {
			sub.Topic = t.GrpToChn(sub.Topic)
		}
		sub.TenantID = id
		sub.SetSubCnt(subcnt)
		sub.SetPublic(common.FromJSON(public))
		sub.SetTrusted(common.FromJSON(trusted))
		sub.SetDefaultAccess(access.Auth, access.Anon)
		sub.ModeGiven = t.ModeUnset
		sub.ModeWant = t.ModeUnset
		sub.Private = common.FilterFoundTags(setTags, index)
		subs = append(subs, sub)
	}
	return subs, rows.Err()
}

func (a *adapter) TenantFindOne(id t.TenantID, tag string) (string, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || tag == "" {
		return "", t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.FindOne(tag)
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx,
		"SELECT tp.name AS topic FROM topics AS tp LEFT JOIN topictags AS tt ON tp.tenant_id=tt.tenant_id AND tp.name=tt.topic "+
			"WHERE tp.tenant_id=? AND tt.tag=? UNION ALL "+
			"SELECT u.id AS topic FROM users AS u LEFT JOIN usertags AS ut ON u.tenant_id=ut.tenant_id AND ut.userid=u.id "+
			"WHERE u.tenant_id=? AND ut.tag=? LIMIT 1", id, tag, id, tag)
	if err != nil {
		return "", err
	}
	defer rows.Close()
	var found string
	if rows.Next() {
		if err = rows.Scan(&found); err != nil {
			return "", err
		}
		if parsed, err := strconv.ParseInt(found, 10, 64); err == nil {
			found = store.EncodeUid(parsed).UserId()
		}
	}
	return found, rows.Err()
}

func (a *adapter) TenantMessageSave(id t.TenantID, msg *t.Message) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || msg == nil || msg.TenantID != id {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.MessageSave(msg)
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	clientMsgID := sql.NullString{String: msg.ClientMsgID, Valid: msg.ClientMsgID != ""}
	res, err := a.db.ExecContext(ctx,
		"INSERT INTO messages(tenant_id,createdat,updatedat,seqid,topic,`from`,client_msg_id,version,head,content) VALUES(?,?,?,?,?,?,?,?,?,?)",
		id, msg.CreatedAt, msg.UpdatedAt, msg.SeqId, msg.Topic, decodeUID(t.ParseUid(msg.From)), clientMsgID, messageVersion(msg.Version), msg.Head, common.ToJSON(msg.Content))
	if err == nil {
		lastID, _ := res.LastInsertId()
		msg.SetUid(t.Uid(lastID))
	}
	return err
}

func (a *adapter) TenantMessageGetByClientID(id t.TenantID, from t.Uid, clientMsgID string) (*t.Message, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantMessageGetByClientID(id, from, clientMsgID)
		}
	}
	if err := validTenant(id); err != nil || from.IsZero() || clientMsgID == "" {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	var msg t.Message
	err := a.db.QueryRowxContext(ctx,
		"SELECT id,createdat,updatedat,deletedat,delid,seqid,topic,`from`,client_msg_id,version,recalled_at,recalled_by,head,content "+
			"FROM messages WHERE `from`=? AND client_msg_id=?",
		decodeUID(from), clientMsgID).StructScan(&msg)
	if err == sql.ErrNoRows {
		return nil, nil
	}
	if err != nil {
		return nil, err
	}
	msg.From = common.EncodeUidString(msg.From).String()
	msg.Content = common.FromJSON(msg.Content)
	msg.TenantID = id
	return &msg, nil
}

func (a *adapter) TenantMessageGetOne(id t.TenantID, topic string, seq int) (*t.Message, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantMessageGetOne(id, topic, seq)
		}
	}
	if err := validTenant(id); err != nil || topic == "" || seq <= 0 {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	msg, err := tenantMessageGetOne(a.db, ctx, id, topic, seq, "")
	if err == sql.ErrNoRows {
		return nil, t.ErrNotFound
	}
	return msg, err
}

func (a *adapter) TenantMessageRecall(id t.TenantID, topic string, seq int, actor t.Uid, expectedVersion int, recalledAt time.Time) (*t.Message, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantMessageRecall(id, topic, seq, actor, expectedVersion, recalledAt)
		}
	}
	if err := validTenant(id); err != nil || topic == "" || seq <= 0 || actor.IsZero() || expectedVersion <= 0 {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return nil, err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	msg, err := tenantMessageGetOne(tx, ctx, id, topic, seq, " FOR UPDATE")
	if err != nil {
		if err == sql.ErrNoRows {
			return nil, t.ErrNotFound
		}
		return nil, err
	}
	if msg.Version != expectedVersion || msg.RecalledAt != nil || msg.DeletedAt != nil {
		return nil, t.ErrDuplicate
	}
	_, err = tx.ExecContext(ctx,
		"UPDATE messages SET updatedat=?,version=version+1,recalled_at=?,recalled_by=?,head=NULL,content=NULL WHERE topic=? AND seqid=? AND version=?",
		recalledAt, recalledAt, decodeUID(actor), topic, seq, expectedVersion)
	if err != nil {
		return nil, err
	}
	if err = tx.Commit(); err != nil {
		return nil, err
	}
	return a.TenantMessageGetOne(id, topic, seq)
}

func (a *adapter) TenantMessageEdit(id t.TenantID, topic string, seq int, actor t.Uid, expectedVersion int, head t.KVMap, content any, reason string, editedAt time.Time) (*t.Message, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantMessageEdit(id, topic, seq, actor, expectedVersion, head, content, reason, editedAt)
		}
	}
	if err := validTenant(id); err != nil || topic == "" || seq <= 0 || actor.IsZero() || expectedVersion <= 0 {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return nil, err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	msg, err := tenantMessageGetOne(tx, ctx, id, topic, seq, " FOR UPDATE")
	if err != nil {
		if err == sql.ErrNoRows {
			return nil, t.ErrNotFound
		}
		return nil, err
	}
	if msg.Version != expectedVersion || msg.RecalledAt != nil || msg.DeletedAt != nil {
		return nil, t.ErrDuplicate
	}
	if _, err = tx.ExecContext(ctx,
		"INSERT INTO im_message_revisions(createdat,updatedat,topic,seqid,version,actor,head,content,reason) VALUES(?,?,?,?,?,?,?,?,?)",
		editedAt, editedAt, topic, seq, msg.Version, decodeUID(actor), msg.Head, common.ToJSON(msg.Content), strings.TrimSpace(reason)); err != nil {
		return nil, err
	}
	_, err = tx.ExecContext(ctx,
		"UPDATE messages SET updatedat=?,version=version+1,head=?,content=? WHERE topic=? AND seqid=? AND version=?",
		editedAt, head, common.ToJSON(content), topic, seq, expectedVersion)
	if err != nil {
		return nil, err
	}
	if err = tx.Commit(); err != nil {
		return nil, err
	}
	return a.TenantMessageGetOne(id, topic, seq)
}

func (a *adapter) TenantMessageGetAll(id t.TenantID, topic string, uid t.Uid, opts *t.QueryOpt) ([]t.Message, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		msgs, err := tenantAdp.MessageGetAll(topic, uid, opts)
		return stampTenantMessages(id, msgs), err
	}
	limit := a.maxMessageResults
	args := []any{id, topic, id, decodeUID(uid)}
	seq := ""
	if opts != nil {
		seq = "AND m.seqid "
		if len(opts.IdRanges) > 0 {
			constr, addArgs := common.RangesToSql(opts.IdRanges)
			seq += constr
			args = append(args, addArgs...)
		} else {
			seq += "BETWEEN ? AND ?"
			if opts.Since > 0 {
				args = append(args, opts.Since)
			} else {
				args = append(args, 0)
			}
			if opts.Before > 1 {
				args = append(args, opts.Before-1)
			} else {
				args = append(args, 1<<31-1)
			}
		}
		if opts.Limit > 0 && opts.Limit < limit {
			limit = opts.Limit
		}
	}
	args = append(args, limit)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx,
		"SELECT m.tenant_id,m.createdat,m.updatedat,m.deletedat,m.delid,m.seqid,m.topic,m.`from`,m.client_msg_id,m.version,m.recalled_at,m.recalled_by,m.head,m.content "+
			"FROM messages AS m LEFT JOIN dellog AS d ON d.tenant_id=m.tenant_id AND d.topic=m.topic "+
			"AND m.seqid BETWEEN d.low AND d.hi-1 AND d.deletedfor=? WHERE m.tenant_id=? AND m.delid=0 AND m.topic=? "+
			seq+" AND d.deletedfor IS NULL ORDER BY m.seqid DESC LIMIT ?",
		append([]any{decodeUID(uid), id, topic}, args[4:]...)...)
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	msgs := make([]t.Message, 0, limit)
	for rows.Next() {
		var msg t.Message
		if err = rows.StructScan(&msg); err != nil {
			return nil, err
		}
		msg.From = common.EncodeUidString(msg.From).String()
		msg.Content = common.FromJSON(msg.Content)
		msgs = append(msgs, msg)
	}
	return msgs, rows.Err()
}

func (a *adapter) TenantMessageSearch(id t.TenantID, topic string, uid t.Uid, queryText, messageType, cursor string, limit int) ([]t.Message, string, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, "", err
		}
		if tenantAdp != a {
			return tenantAdp.TenantMessageSearch(id, topic, uid, queryText, messageType, cursor, limit)
		}
	}
	if err := validTenant(id); err != nil || topic == "" || uid.IsZero() {
		return nil, "", t.ErrMalformed
	}
	if limit <= 0 || limit > 100 {
		limit = 50
	}
	where := []string{"m.topic=?", "m.delid=0"}
	args := []any{topic}
	if cursor != "" {
		parsed, err := strconv.Atoi(cursor)
		if err != nil || parsed <= 0 {
			return nil, "", t.ErrMalformed
		}
		where = append(where, "m.seqid<?")
		args = append(args, parsed)
	}
	queryText = strings.TrimSpace(queryText)
	if queryText != "" {
		where = append(where, "CAST(m.content AS CHAR) LIKE ?")
		args = append(args, "%"+queryText+"%")
	}
	if messageType != "" && messageType != "all" {
		where = append(where, "(JSON_UNQUOTE(JSON_EXTRACT(m.head,'$.type'))=? OR JSON_UNQUOTE(JSON_EXTRACT(m.head,'$.x-im-type'))=?)")
		args = append(args, messageType, messageType)
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	queryArgs := append([]any{decodeUID(uid)}, args...)
	queryArgs = append(queryArgs, limit+1)
	rows, err := a.db.QueryxContext(ctx,
		"SELECT m.createdat,m.updatedat,m.deletedat,m.delid,m.seqid,m.topic,m.`from`,m.client_msg_id,m.version,m.recalled_at,m.recalled_by,m.head,m.content "+
			"FROM messages AS m LEFT JOIN dellog AS d ON d.topic=m.topic "+
			"AND m.seqid BETWEEN d.low AND d.hi-1 AND d.deletedfor=? WHERE "+strings.Join(where, " AND ")+" AND d.deletedfor IS NULL ORDER BY m.seqid DESC LIMIT ?",
		queryArgs...)
	if err != nil {
		return nil, "", err
	}
	defer rows.Close()
	msgs := make([]t.Message, 0, limit)
	nextCursor := ""
	for rows.Next() {
		var msg t.Message
		if err = rows.StructScan(&msg); err != nil {
			return nil, "", err
		}
		msg.From = common.EncodeUidString(msg.From).String()
		msg.Head = kvMapFromJSON(msg.Head)
		msg.Content = common.FromJSON(msg.Content)
		msg.TenantID = id
		if len(msgs) == limit {
			nextCursor = strconv.Itoa(msg.SeqId)
			continue
		}
		msgs = append(msgs, msg)
	}
	if err = rows.Err(); err != nil {
		return nil, "", err
	}
	return msgs, nextCursor, nil
}

func tenantMessageGetOne(q sqlx.QueryerContext, ctx context.Context, tenantID t.TenantID, topic string, seq int, suffix string) (*t.Message, error) {
	row := struct {
		t.Message
		RecalledBy sql.NullInt64 `db:"recalled_by"`
	}{}
	err := sqlx.GetContext(ctx, q, &row,
		"SELECT id,createdat,updatedat,deletedat,delid,seqid,topic,`from`,client_msg_id,version,recalled_at,recalled_by,head,content "+
			"FROM messages WHERE topic=? AND seqid=?"+suffix,
		topic, seq)
	if err != nil {
		return nil, err
	}
	msg := row.Message
	msg.TenantID = tenantID
	msg.From = common.EncodeUidString(msg.From).String()
	if row.RecalledBy.Valid {
		msg.RecalledBy = common.EncodeUidString(strconv.FormatInt(row.RecalledBy.Int64, 10)).String()
	}
	msg.Content = common.FromJSON(msg.Content)
	return &msg, nil
}

func messageVersion(version int) int {
	if version <= 0 {
		return 1
	}
	return version
}

func kvMapFromJSON(value any) t.KVMap {
	switch parsed := common.FromJSON(value).(type) {
	case map[string]any:
		return t.KVMap(parsed)
	case t.KVMap:
		return parsed
	default:
		return nil
	}
}

func (a *adapter) TenantFavoriteCreate(id t.TenantID, fav *t.FavoriteItem) (*t.FavoriteItem, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFavoriteCreate(id, fav)
		}
	}
	if err := validTenant(id); err != nil || fav == nil || fav.TenantID != id || fav.UserID.IsZero() || fav.FavoriteID == "" {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx,
		`INSERT INTO im_favorites(favorite_id,user_id,item_type,source_topic,source_seq,snapshot,attachment_refs,availability,idempotency_key,collected_at,created_at,updated_at)
		 VALUES(?,?,?,?,?,?,?,?,?,?,?,?)
		 ON DUPLICATE KEY UPDATE updated_at=updated_at`,
		fav.FavoriteID, decodeUID(fav.UserID), fav.ItemType, fav.SourceTopic, fav.SourceSeq, common.ToJSON(fav.Snapshot), common.ToJSON(fav.AttachmentRefs), fav.Availability, fav.IdempotencyKey, fav.CollectedAt, fav.CreatedAt, fav.UpdatedAt)
	if err != nil {
		return nil, err
	}
	return a.TenantFavoriteGet(id, fav.UserID, fav.FavoriteID)
}

func (a *adapter) TenantFavoriteList(id t.TenantID, uid t.Uid, itemType, queryText, cursor string, limit int) ([]t.FavoriteItem, string, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, "", err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFavoriteList(id, uid, itemType, queryText, cursor, limit)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() {
		return nil, "", t.ErrMalformed
	}
	if limit <= 0 || limit > 100 {
		limit = 50
	}
	where := []string{"user_id=?"}
	args := []any{decodeUID(uid)}
	if cursor != "" {
		parsed, err := strconv.ParseInt(cursor, 10, 64)
		if err != nil || parsed <= 0 {
			return nil, "", t.ErrMalformed
		}
		where = append(where, "id<?")
		args = append(args, parsed)
	}
	if itemType != "" && itemType != "all" {
		where = append(where, "item_type=?")
		args = append(args, itemType)
	}
	if queryText = strings.TrimSpace(queryText); queryText != "" {
		where = append(where, "CAST(snapshot AS CHAR) LIKE ?")
		args = append(args, "%"+queryText+"%")
	}
	args = append(args, limit+1)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, "SELECT * FROM im_favorites WHERE "+strings.Join(where, " AND ")+" ORDER BY id DESC LIMIT ?", args...)
	if err != nil {
		return nil, "", err
	}
	defer rows.Close()
	items := make([]t.FavoriteItem, 0, limit)
	nextCursor := ""
	for rows.Next() {
		item, err := scanFavorite(rows)
		if err != nil {
			return nil, "", err
		}
		item.TenantID = id
		if len(items) == limit {
			nextCursor = strconv.FormatInt(item.ID, 10)
			continue
		}
		items = append(items, item)
	}
	if err = rows.Err(); err != nil {
		return nil, "", err
	}
	return items, nextCursor, nil
}

func (a *adapter) TenantFavoriteGet(id t.TenantID, uid t.Uid, favoriteID string) (*t.FavoriteItem, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFavoriteGet(id, uid, favoriteID)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() || favoriteID == "" {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, "SELECT * FROM im_favorites WHERE user_id=? AND favorite_id=?", decodeUID(uid), favoriteID)
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	if !rows.Next() {
		return nil, t.ErrNotFound
	}
	item, err := scanFavorite(rows)
	if err != nil {
		return nil, err
	}
	item.TenantID = id
	return &item, nil
}

func (a *adapter) TenantFavoriteDelete(id t.TenantID, uid t.Uid, favoriteID string) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFavoriteDelete(id, uid, favoriteID)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() || favoriteID == "" {
		return t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	res, err := a.db.ExecContext(ctx, "DELETE FROM im_favorites WHERE user_id=? AND favorite_id=?", decodeUID(uid), favoriteID)
	if err != nil {
		return err
	}
	if affected, err := res.RowsAffected(); err == nil && affected == 0 {
		return t.ErrNotFound
	}
	return nil
}

func scanFavorite(rows *sqlx.Rows) (t.FavoriteItem, error) {
	row := struct {
		t.FavoriteItem
		UserID int64 `db:"user_id"`
	}{}
	if err := rows.StructScan(&row); err != nil {
		return t.FavoriteItem{}, err
	}
	item := row.FavoriteItem
	item.UserID = store.EncodeUid(row.UserID)
	item.Snapshot = common.FromJSON(item.Snapshot)
	item.AttachmentRefs = common.FromJSON(item.AttachmentRefs)
	return item, nil
}

func (a *adapter) TenantMessageDeleteList(id t.TenantID, topic string, del *t.DelMessage) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" || (del != nil && del.TenantID != id) {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.MessageDeleteList(topic, del)
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	if err = tenantMessageDeleteList(tx, id, topic, del); err != nil {
		return err
	}
	return tx.Commit()
}

func (a *adapter) TenantMessageGetDeleted(id t.TenantID, topic string, uid t.Uid, opts *t.QueryOpt) ([]t.DelMessage, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || topic == "" {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		deleted, err := tenantAdp.MessageGetDeleted(topic, uid, opts)
		for i := range deleted {
			deleted[i].TenantID = id
		}
		return deleted, err
	}
	limit, lower, upper := a.maxResults, 0, 1<<31-1
	if opts != nil {
		if opts.Since > 0 {
			lower = opts.Since
		}
		if opts.Before > 1 {
			upper = opts.Before - 1
		}
		if opts.Limit > 0 && opts.Limit < limit {
			limit = opts.Limit
		}
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx,
		"SELECT tenant_id,topic,deletedfor,delid,low,hi FROM dellog WHERE tenant_id=? AND topic=? AND delid BETWEEN ? AND ? "+
			"AND (deletedfor=0 OR deletedfor=?) ORDER BY delid LIMIT ?", id, topic, lower, upper, decodeUID(uid), limit)
	if err != nil {
		return nil, err
	}
	defer rows.Close()
	var dmsgs []t.DelMessage
	var current t.DelMessage
	for rows.Next() {
		var row struct {
			TenantID   t.TenantID `db:"tenant_id"`
			Topic      string
			Deletedfor int64
			Delid      int
			Low        int
			Hi         int
		}
		if err = rows.StructScan(&row); err != nil {
			return nil, err
		}
		if row.Delid != current.DelId {
			if current.DelId > 0 {
				dmsgs = append(dmsgs, current)
			}
			current = t.DelMessage{TenantID: row.TenantID, Topic: row.Topic, DelId: row.Delid}
			if row.Deletedfor > 0 {
				current.DeletedFor = store.EncodeUid(row.Deletedfor).String()
			}
		}
		if row.Hi <= row.Low+1 {
			row.Hi = 0
		}
		current.SeqIdRanges = append(current.SeqIdRanges, t.Range{Low: row.Low, Hi: row.Hi})
	}
	if err = rows.Err(); err != nil {
		return nil, err
	}
	if current.DelId > 0 {
		dmsgs = append(dmsgs, current)
	}
	return dmsgs, nil
}

func (a *adapter) TenantDeviceUpsert(id t.TenantID, uid t.Uid, dev *t.DeviceDef) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || dev == nil || dev.TenantID != id || uid.IsZero() {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.DeviceUpsert(uid, dev)
	}
	if a.tenantScopedDB {
		return a.DeviceUpsert(uid, dev)
	}
	hash := deviceHasher(dev.DeviceId)
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	if _, err = tx.Exec("DELETE FROM devices WHERE tenant_id=? AND hash=?", id, hash); err != nil {
		return err
	}
	if _, err = tx.Exec("INSERT INTO devices(tenant_id,userid,hash,deviceid,platform,lastseen,lang) VALUES(?,?,?,?,?,?,?)",
		id, decodeUID(uid), hash, dev.DeviceId, dev.Platform, dev.LastSeen, dev.Lang); err != nil {
		return err
	}
	return tx.Commit()
}

func (a *adapter) TenantDeviceGetAll(id t.TenantID, uids ...t.Uid) (map[t.Uid][]t.DeviceDef, int, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil {
		return nil, 0, err
	}
	if tenantAdp != a {
		devs, count, err := tenantAdp.DeviceGetAll(uids...)
		for uid := range devs {
			for i := range devs[uid] {
				devs[uid][i].TenantID = id
			}
		}
		return devs, count, err
	}
	if a.tenantScopedDB {
		devs, count, err := a.DeviceGetAll(uids...)
		for uid := range devs {
			for i := range devs[uid] {
				devs[uid][i].TenantID = id
			}
		}
		return devs, count, err
	}
	var decoded []any
	for _, uid := range uids {
		if !uid.IsZero() {
			decoded = append(decoded, decodeUID(uid))
		}
	}
	if len(decoded) == 0 {
		return map[t.Uid][]t.DeviceDef{}, 0, nil
	}
	q, args, _ := sqlx.In("SELECT tenant_id,userid,deviceid,platform,lastseen,lang FROM devices WHERE tenant_id=? AND userid IN (?)", id, decoded)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, a.db.Rebind(q), args...)
	if err != nil {
		return nil, 0, err
	}
	defer rows.Close()
	result := make(map[t.Uid][]t.DeviceDef)
	count := 0
	for rows.Next() {
		var row struct {
			TenantID t.TenantID `db:"tenant_id"`
			Userid   int64
			Deviceid string
			Platform string
			Lastseen time.Time
			Lang     string
		}
		if err = rows.StructScan(&row); err != nil {
			return nil, 0, err
		}
		uid := store.EncodeUid(row.Userid)
		result[uid] = append(result[uid], t.DeviceDef{
			TenantID: row.TenantID, DeviceId: row.Deviceid, Platform: row.Platform, LastSeen: row.Lastseen, Lang: row.Lang,
		})
		count++
	}
	return result, count, rows.Err()
}

func (a *adapter) TenantDeviceDelete(id t.TenantID, uid t.Uid, deviceID string) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || uid.IsZero() {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.DeviceDelete(uid, deviceID)
	}
	if a.tenantScopedDB {
		return a.DeviceDelete(uid, deviceID)
	}
	q := "DELETE FROM devices WHERE tenant_id=? AND userid=?"
	args := []any{id, decodeUID(uid)}
	if deviceID != "" {
		q += " AND hash=?"
		args = append(args, deviceHasher(deviceID))
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	res, err := a.db.ExecContext(ctx, q, args...)
	if err != nil {
		return err
	}
	if count, _ := res.RowsAffected(); count == 0 {
		return t.ErrNotFound
	}
	return nil
}

func (a *adapter) TenantFileStartUpload(id t.TenantID, fd *t.FileDef) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || fd == nil || fd.TenantID != id {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.FileStartUpload(fd)
	}
	if a.tenantScopedDB {
		return a.FileStartUpload(fd)
	}
	var user any = 0
	if fd.User != "" {
		user = decodeUID(t.ParseUid(fd.User))
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx,
		"INSERT INTO fileuploads(tenant_id,id,createdat,updatedat,userid,status,mimetype,size,etag,location) VALUES(?,?,?,?,?,?,?,?,?,?)",
		id, decodeUID(fd.Uid()), fd.CreatedAt, fd.UpdatedAt, user, fd.Status, fd.MimeType, fd.Size, fd.ETag, fd.Location)
	return err
}

func (a *adapter) TenantFileFinishUpload(id t.TenantID, fd *t.FileDef, success bool, size int64) (*t.FileDef, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || fd == nil || fd.TenantID != id {
		return nil, t.ErrMalformed
	}
	if tenantAdp != a {
		file, err := tenantAdp.FileFinishUpload(fd, success, size)
		return stampTenantFile(id, file), err
	}
	if a.tenantScopedDB {
		file, err := a.FileFinishUpload(fd, success, size)
		return stampTenantFile(id, file), err
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return nil, err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	now := t.TimeNow()
	if success {
		_, err = tx.Exec("UPDATE fileuploads SET updatedat=?,status=?,size=?,etag=?,location=? WHERE tenant_id=? AND id=?",
			now, t.UploadCompleted, size, fd.ETag, fd.Location, id, decodeUID(fd.Uid()))
		fd.Status = t.UploadCompleted
		fd.Size = size
	} else {
		_, err = tx.Exec("DELETE FROM fileuploads WHERE tenant_id=? AND id=?", id, decodeUID(fd.Uid()))
		fd.Status = t.UploadFailed
		fd.Size = 0
	}
	if err != nil {
		return nil, err
	}
	fd.UpdatedAt = now
	return fd, tx.Commit()
}

func (a *adapter) TenantFileGet(id t.TenantID, fid string) (*t.FileDef, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil {
		return nil, err
	}
	if tenantAdp != a {
		file, err := tenantAdp.FileGet(fid)
		return stampTenantFile(id, file), err
	}
	if a.tenantScopedDB {
		file, err := a.FileGet(fid)
		return stampTenantFile(id, file), err
	}
	fileID := t.ParseUid(fid)
	if fileID.IsZero() {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	var fd t.FileDef
	err := a.db.GetContext(ctx, &fd,
		"SELECT tenant_id,id,createdat,updatedat,userid AS user,status,mimetype,size,IFNULL(etag,'') AS etag,location "+
			"FROM fileuploads WHERE tenant_id=? AND id=?", id, decodeUID(fileID))
	if err == sql.ErrNoRows {
		return nil, nil
	}
	if err != nil {
		return nil, err
	}
	fd.Id = common.EncodeUidString(fd.Id).String()
	fd.User = common.EncodeUidString(fd.User).String()
	return &fd, nil
}

func (a *adapter) TenantFileDeleteUnused(id t.TenantID, olderThan time.Time, limit int) ([]string, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil {
		return nil, err
	}
	if tenantAdp != a {
		return tenantAdp.FileDeleteUnused(olderThan, limit)
	}
	if a.tenantScopedDB {
		return a.FileDeleteUnused(olderThan, limit)
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return nil, err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	query := "SELECT fu.id,fu.location FROM fileuploads AS fu LEFT JOIN filemsglinks AS fml ON fml.tenant_id=fu.tenant_id AND fml.fileid=fu.id WHERE fu.tenant_id=? AND fml.id IS NULL"
	args := []any{id}
	if !olderThan.IsZero() {
		query += " AND fu.updatedat<?"
		args = append(args, olderThan)
	}
	if limit > 0 {
		query += " LIMIT ?"
		args = append(args, limit)
	}
	rows, err := tx.Query(query, args...)
	if err != nil {
		return nil, err
	}
	var locations []string
	var ids []any
	for rows.Next() {
		var fileID int64
		var location string
		if err = rows.Scan(&fileID, &location); err != nil {
			rows.Close()
			return nil, err
		}
		if location != "" {
			locations = append(locations, location)
		}
		ids = append(ids, fileID)
	}
	err = rows.Err()
	rows.Close()
	if err != nil {
		return nil, err
	}
	if len(ids) > 0 {
		q, args, _ := sqlx.In("DELETE FROM fileuploads WHERE tenant_id=? AND id IN (?)", id, ids)
		if _, err = tx.Exec(tx.Rebind(q), args...); err != nil {
			return nil, err
		}
	}
	return locations, tx.Commit()
}

func (a *adapter) TenantFileLinkAttachments(id t.TenantID, topic string, userID, msgID t.Uid, fids []string) error {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || len(fids) == 0 || (topic == "" && msgID.IsZero() && userID.IsZero()) {
		return t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.FileLinkAttachments(topic, userID, msgID, fids)
	}
	if a.tenantScopedDB {
		return a.FileLinkAttachments(topic, userID, msgID, fids)
	}
	now := t.TimeNow()
	var linkID any
	var linkBy string
	if !msgID.IsZero() {
		linkBy = "msgid"
		linkID = int64(msgID)
	} else if topic != "" {
		linkBy = "topic"
		linkID = topic
		fids = fids[:1]
	} else {
		linkBy = "userid"
		linkID = decodeUID(userID)
		fids = fids[:1]
	}
	var args []any
	for _, fid := range fids {
		fileID := t.ParseUid(fid)
		if fileID.IsZero() {
			return t.ErrMalformed
		}
		args = append(args, id, now, decodeUID(fileID), linkID)
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	if msgID.IsZero() {
		if _, err = tx.Exec("DELETE FROM filemsglinks WHERE tenant_id=? AND "+linkBy+"=?", id, linkID); err != nil {
			return err
		}
	}
	sqlq := "INSERT INTO filemsglinks(tenant_id,createdat,fileid," + linkBy + ") VALUES (?,?,?,?)"
	_, err = tx.Exec(sqlq+strings.Repeat(",(?,?,?,?)", len(fids)-1), args...)
	if err != nil {
		return err
	}
	return tx.Commit()
}

func (a *adapter) TenantFileUserHasAccess(id t.TenantID, fid string, uid t.Uid) (bool, error) {
	tenantAdp, err := a.routedTenantAdapter(id)
	if err != nil || uid.IsZero() {
		return false, t.ErrMalformed
	}
	if tenantAdp != a {
		return tenantAdp.FileUserHasAccess(fid, uid)
	}
	if a.tenantScopedDB {
		return a.FileUserHasAccess(fid, uid)
	}
	fileID := t.ParseUid(fid)
	if fileID.IsZero() {
		return false, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	var allowed int
	err := a.db.GetContext(ctx, &allowed, `
		SELECT COUNT(*) FROM fileuploads AS fu
		WHERE fu.tenant_id=? AND fu.id=? AND fu.status=? AND (
			fu.userid=?
			OR EXISTS (
				SELECT 1 FROM filemsglinks AS fml
				WHERE fml.tenant_id=fu.tenant_id AND fml.fileid=fu.id AND fml.userid=?
			)
			OR EXISTS (
				SELECT 1 FROM filemsglinks AS fml
				INNER JOIN subscriptions AS s
					ON s.tenant_id=fml.tenant_id AND s.topic=fml.topic AND s.userid=?
				WHERE fml.tenant_id=fu.tenant_id AND fml.fileid=fu.id AND fml.topic IS NOT NULL
					AND s.deletedat IS NULL AND INSTR(s.modewant,'R')>0 AND INSTR(s.modegiven,'R')>0
			)
			OR EXISTS (
				SELECT 1 FROM filemsglinks AS fml
				INNER JOIN messages AS m
					ON m.tenant_id=fml.tenant_id AND m.id=fml.msgid
				INNER JOIN subscriptions AS s
					ON s.tenant_id=m.tenant_id AND s.topic=m.topic AND s.userid=?
				WHERE fml.tenant_id=fu.tenant_id AND fml.fileid=fu.id AND fml.msgid IS NOT NULL
					AND m.deletedat IS NULL AND m.recalled_at IS NULL
					AND s.deletedat IS NULL AND INSTR(s.modewant,'R')>0 AND INSTR(s.modegiven,'R')>0
					AND NOT EXISTS (
						SELECT 1 FROM dellog AS d
						WHERE d.tenant_id=m.tenant_id AND d.topic=m.topic AND d.deletedfor=?
							AND d.low<=m.seqid AND (d.hi=0 OR d.hi>m.seqid)
					)
			)
		) LIMIT 1`,
		id, decodeUID(fileID), t.UploadCompleted, decodeUID(uid), decodeUID(uid), decodeUID(uid), decodeUID(uid), decodeUID(uid))
	if err != nil {
		return false, err
	}
	return allowed > 0, nil
}

func (a *adapter) TenantPCacheGet(id t.TenantID, key string) (string, error) {
	if err := validTenant(id); err != nil {
		return "", err
	}
	scoped, err := tenantCacheKey(id, key)
	if err != nil {
		return "", err
	}
	return a.PCacheGet(scoped)
}

func (a *adapter) TenantPCacheUpsert(id t.TenantID, key, value string, fail bool) error {
	if err := validTenant(id); err != nil {
		return err
	}
	scoped, err := tenantCacheKey(id, key)
	if err != nil {
		return err
	}
	return a.PCacheUpsert(scoped, value, fail)
}

func (a *adapter) TenantPCacheDelete(id t.TenantID, key string) error {
	if err := validTenant(id); err != nil {
		return err
	}
	scoped, err := tenantCacheKey(id, key)
	if err != nil {
		return err
	}
	return a.PCacheDelete(scoped)
}

func (a *adapter) TenantPCacheExpire(id t.TenantID, prefix string, before time.Time) error {
	if err := validTenant(id); err != nil {
		return err
	}
	scoped, err := tenantCacheKey(id, prefix)
	if err != nil {
		return err
	}
	return a.PCacheExpire(scoped, before)
}

func (a *adapter) TenantVerificationCreate(id t.TenantID, vc *t.VerificationCode) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantVerificationCreate(id, vc)
		}
	}
	if err := validTenant(id); err != nil || vc == nil || vc.TenantID != id ||
		vc.ChallengeID == "" || vc.Scene == "" || vc.PhoneHash == "" || vc.CodeHash == "" {
		return t.ErrMalformed
	}

	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()

	now := t.TimeNow()
	_, err = tx.ExecContext(ctx,
		`UPDATE im_verification_codes
		 SET state=?,updated_at=?
		 WHERE scene=? AND phone_hash=? AND state=?`,
		t.VerificationStateExpired, now, vc.Scene, vc.PhoneHash, t.VerificationStatePending)
	if err != nil {
		return err
	}

	vc.CreatedAt = now
	vc.UpdatedAt = now
	_, err = tx.ExecContext(ctx,
		`INSERT INTO im_verification_codes
		 (challenge_id,scene,action,phone_hash,phone_mask,target_user,code_hash,state,attempts,max_attempts,
		  expires_at,resend_after,created_at,updated_at)
		 VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,
		vc.ChallengeID, vc.Scene, vc.Action, vc.PhoneHash, vc.PhoneMask, nullableUID(vc.TargetUser), vc.CodeHash, vc.State, vc.Attempts,
		vc.MaxAttempts, vc.ExpiresAt, vc.ResendAfter, vc.CreatedAt, vc.UpdatedAt)
	if isDupe(err) {
		return t.ErrDuplicate
	}
	if err != nil {
		return err
	}
	return tx.Commit()
}

func (a *adapter) TenantVerificationGet(id t.TenantID, challengeID string) (*t.VerificationCode, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantVerificationGet(id, challengeID)
		}
	}
	if err := validTenant(id); err != nil || challengeID == "" {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	var vc t.VerificationCode
	err := a.db.GetContext(ctx, &vc,
		`SELECT id,challenge_id,scene,action,phone_hash,phone_mask,IFNULL(target_user,0) AS target_user,code_hash,verification_token_hash,
		        state,attempts,max_attempts,expires_at,resend_after,verified_at,consumed_at,created_at,updated_at
		 FROM im_verification_codes
		 WHERE challenge_id=? LIMIT 1`, challengeID)
	if err == sql.ErrNoRows {
		return nil, t.ErrNotFound
	}
	if err != nil {
		return nil, err
	}
	vc.TenantID = id
	return &vc, nil
}

func (a *adapter) TenantVerificationGetActive(id t.TenantID, scene, phoneHash string, now time.Time) (*t.VerificationCode, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantVerificationGetActive(id, scene, phoneHash, now)
		}
	}
	if err := validTenant(id); err != nil || scene == "" || phoneHash == "" {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	var vc t.VerificationCode
	err := a.db.GetContext(ctx, &vc,
		`SELECT id,challenge_id,scene,action,phone_hash,phone_mask,IFNULL(target_user,0) AS target_user,code_hash,verification_token_hash,
		        state,attempts,max_attempts,expires_at,resend_after,verified_at,consumed_at,created_at,updated_at
		 FROM im_verification_codes
		 WHERE scene=? AND phone_hash=? AND state=? AND expires_at>?
		 ORDER BY created_at DESC LIMIT 1`, scene, phoneHash, t.VerificationStatePending, now)
	if err == sql.ErrNoRows {
		return nil, t.ErrNotFound
	}
	if err != nil {
		return nil, err
	}
	vc.TenantID = id
	return &vc, nil
}

func (a *adapter) TenantVerificationFail(id t.TenantID, challengeID string, state t.VerificationState) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantVerificationFail(id, challengeID, state)
		}
	}
	if err := validTenant(id); err != nil || challengeID == "" {
		return t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	now := t.TimeNow()
	_, err := a.db.ExecContext(ctx,
		`UPDATE im_verification_codes
		 SET attempts=attempts+1,state=?,updated_at=?
		 WHERE challenge_id=?`,
		state, now, challengeID)
	return err
}

func (a *adapter) TenantVerificationMarkVerified(id t.TenantID, challengeID, tokenHash string, verifiedAt time.Time) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantVerificationMarkVerified(id, challengeID, tokenHash, verifiedAt)
		}
	}
	if err := validTenant(id); err != nil || challengeID == "" || tokenHash == "" {
		return t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx,
		`UPDATE im_verification_codes
		 SET state=?,verification_token_hash=?,verified_at=?,updated_at=?
		 WHERE challenge_id=? AND state=?`,
		t.VerificationStateVerified, tokenHash, verifiedAt, verifiedAt, challengeID, t.VerificationStatePending)
	return err
}

func (a *adapter) TenantVerificationConsume(id t.TenantID, challengeID, tokenHash string, consumedAt time.Time) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantVerificationConsume(id, challengeID, tokenHash, consumedAt)
		}
	}
	if err := validTenant(id); err != nil || challengeID == "" || tokenHash == "" {
		return t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	res, err := a.db.ExecContext(ctx,
		`UPDATE im_verification_codes
		 SET state=?,consumed_at=?,updated_at=?
		 WHERE challenge_id=? AND verification_token_hash=? AND state=? AND expires_at>?`,
		t.VerificationStateConsumed, consumedAt, consumedAt, challengeID, tokenHash,
		t.VerificationStateVerified, consumedAt)
	if err != nil {
		return err
	}
	if rows, _ := res.RowsAffected(); rows == 0 {
		return t.ErrNotFound
	}
	return nil
}

func (a *adapter) TenantUserSecurityGetAuthVersion(id t.TenantID, uid t.Uid) (int, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return 0, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantUserSecurityGetAuthVersion(id, uid)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() {
		return 0, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	decoded := decodeUID(uid)
	now := t.TimeNow()
	_, err := a.db.ExecContext(ctx,
		`INSERT INTO im_user_security(user_id,auth_version,created_at,updated_at)
		 VALUES(?,?,?,?)
		 ON DUPLICATE KEY UPDATE auth_version=auth_version`,
		decoded, 1, now, now)
	if err != nil {
		return 0, err
	}
	var version int
	err = a.db.GetContext(ctx, &version,
		`SELECT auth_version FROM im_user_security WHERE user_id=?`,
		decoded)
	if err == sql.ErrNoRows {
		return 0, t.ErrNotFound
	}
	if err != nil {
		return 0, err
	}
	return version, nil
}

func (a *adapter) TenantUserSecurityBumpAuthVersion(id t.TenantID, uid t.Uid, updatedAt time.Time) (int, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return 0, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantUserSecurityBumpAuthVersion(id, uid, updatedAt)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() {
		return 0, t.ErrMalformed
	}
	if updatedAt.IsZero() {
		updatedAt = t.TimeNow()
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return 0, err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	decoded := decodeUID(uid)
	if _, err = tx.ExecContext(ctx,
		`INSERT INTO im_user_security(user_id,auth_version,password_updated_at,created_at,updated_at)
		 VALUES(?,?,?,?,?)
		 ON DUPLICATE KEY UPDATE
		   auth_version=auth_version+1,
		   password_updated_at=VALUES(password_updated_at),
		   updated_at=VALUES(updated_at)`,
		decoded, 2, updatedAt, updatedAt, updatedAt); err != nil {
		return 0, err
	}
	var version int
	if err = tx.GetContext(ctx, &version,
		`SELECT auth_version FROM im_user_security WHERE user_id=?`,
		decoded); err != nil {
		return 0, err
	}
	if err = tx.Commit(); err != nil {
		return 0, err
	}
	return version, nil
}

func (a *adapter) TenantRealNameGet(id t.TenantID, uid t.Uid) (*t.RealNameVerification, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantRealNameGet(id, uid)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	var rv t.RealNameVerification
	err := a.db.GetContext(ctx, &rv,
		`SELECT id,user_id,submission_id,status,name_cipher,id_type,id_number_cipher,id_number_hash,
		        masked_name,masked_id_number,review_reason,verified_at,created_at,updated_at
		 FROM im_realname_verifications
		 WHERE user_id=?
		 ORDER BY created_at DESC,id DESC LIMIT 1`,
		decodeUID(uid))
	if err == sql.ErrNoRows {
		return nil, t.ErrNotFound
	}
	if err != nil {
		return nil, err
	}
	rv.TenantID = id
	return &rv, nil
}

func (a *adapter) TenantRealNameCreate(id t.TenantID, rv *t.RealNameVerification) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantRealNameCreate(id, rv)
		}
	}
	if err := validTenant(id); err != nil || rv == nil || rv.TenantID != id || rv.UserID.IsZero() ||
		rv.SubmissionID == "" || rv.Status == "" || rv.NameCipher == "" || rv.IDType == "" ||
		rv.IDNumberCipher == "" || rv.IDNumberHash == "" || rv.MaskedName == "" || rv.MaskedIDNumber == "" {
		return t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	now := t.TimeNow()
	rv.CreatedAt = now
	rv.UpdatedAt = now
	_, err := a.db.ExecContext(ctx,
		`INSERT INTO im_realname_verifications
		 (user_id,submission_id,status,name_cipher,id_type,id_number_cipher,id_number_hash,
		  masked_name,masked_id_number,review_reason,verified_at,created_at,updated_at)
		 VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?)`,
		decodeUID(rv.UserID), rv.SubmissionID, rv.Status, rv.NameCipher, rv.IDType, rv.IDNumberCipher, rv.IDNumberHash,
		rv.MaskedName, rv.MaskedIDNumber, rv.ReviewReason, rv.VerifiedAt, rv.CreatedAt, rv.UpdatedAt)
	if isDupe(err) {
		return t.ErrDuplicate
	}
	return err
}

func (a *adapter) TenantActionTokenCreate(id t.TenantID, token *t.ActionToken) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantActionTokenCreate(id, token)
		}
	}
	if err := validTenant(id); err != nil || token == nil || token.TenantID != id || token.UserID.IsZero() ||
		token.TokenID == "" || token.Action == "" || token.TokenHash == "" || token.ExpiresAt.IsZero() {
		return t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	now := t.TimeNow()
	token.CreatedAt = now
	token.UpdatedAt = now
	_, err := a.db.ExecContext(ctx,
		`INSERT INTO im_action_tokens
		 (user_id,token_id,action,target,token_hash,state,expires_at,created_at,updated_at)
		 VALUES(?,?,?,?,?,?,?,?,?)`,
		decodeUID(token.UserID), token.TokenID, token.Action, token.Target, token.TokenHash, token.State,
		token.ExpiresAt, token.CreatedAt, token.UpdatedAt)
	if isDupe(err) {
		return t.ErrDuplicate
	}
	return err
}

func (a *adapter) TenantActionTokenConsume(id t.TenantID, uid t.Uid, token, action, target string, now time.Time) (*t.ActionToken, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantActionTokenConsume(id, uid, token, action, target, now)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() || token == "" || action == "" {
		return nil, t.ErrMalformed
	}
	if now.IsZero() {
		now = t.TimeNow()
	}
	tokenID, secret, ok := strings.Cut(token, ".")
	if !ok || tokenID == "" || secret == "" {
		return nil, t.ErrMalformed
	}
	tokenHash := securityTokenHash(id, uid, action, target, tokenID, secret)
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return nil, err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	var at t.ActionToken
	err = tx.GetContext(ctx, &at,
		`SELECT id,user_id,token_id,action,target,token_hash,state,expires_at,consumed_at,created_at,updated_at
		 FROM im_action_tokens
		 WHERE user_id=? AND token_id=? AND action=? AND target=? LIMIT 1`,
		decodeUID(uid), tokenID, action, target)
	if err == sql.ErrNoRows {
		return nil, t.ErrNotFound
	}
	if err != nil {
		return nil, err
	}
	if at.State != 0 || at.TokenHash != tokenHash || !now.Before(at.ExpiresAt) {
		return nil, t.ErrNotFound
	}
	res, err := tx.ExecContext(ctx,
		`UPDATE im_action_tokens SET state=1,consumed_at=?,updated_at=?
		 WHERE user_id=? AND token_id=? AND action=? AND target=? AND state=0 AND expires_at>?`,
		now, now, decodeUID(uid), tokenID, action, target, now)
	if err != nil {
		return nil, err
	}
	if rows, _ := res.RowsAffected(); rows == 0 {
		return nil, t.ErrNotFound
	}
	if err = tx.Commit(); err != nil {
		return nil, err
	}
	at.TenantID = id
	return &at, nil
}

func (a *adapter) TenantIndependentPasswordGet(id t.TenantID, uid t.Uid, purpose string) (*t.IndependentPassword, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantIndependentPasswordGet(id, uid, purpose)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() || purpose == "" {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	var pass t.IndependentPassword
	err := a.db.GetContext(ctx, &pass,
		`SELECT user_id,purpose,password_hash,failed_attempts,locked_until,created_at,updated_at
		 FROM im_youth_mode_settings
		 WHERE user_id=? AND purpose=?`,
		decodeUID(uid), purpose)
	if err == sql.ErrNoRows {
		return nil, t.ErrNotFound
	}
	if err != nil {
		return nil, err
	}
	pass.TenantID = id
	return &pass, nil
}

func (a *adapter) TenantIndependentPasswordUpsert(id t.TenantID, pass *t.IndependentPassword) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantIndependentPasswordUpsert(id, pass)
		}
	}
	if err := validTenant(id); err != nil || pass == nil || pass.TenantID != id || pass.UserID.IsZero() ||
		pass.Purpose == "" || len(pass.PasswordHash) == 0 {
		return t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	now := t.TimeNow()
	pass.CreatedAt = now
	pass.UpdatedAt = now
	_, err := a.db.ExecContext(ctx,
		`INSERT INTO im_youth_mode_settings
		 (user_id,purpose,password_hash,failed_attempts,locked_until,created_at,updated_at)
		 VALUES(?,?,?,0,NULL,?,?)
		 ON DUPLICATE KEY UPDATE password_hash=VALUES(password_hash),failed_attempts=0,locked_until=NULL,updated_at=VALUES(updated_at)`,
		decodeUID(pass.UserID), pass.Purpose, pass.PasswordHash, pass.CreatedAt, pass.UpdatedAt)
	return err
}

func (a *adapter) TenantIndependentPasswordUpdateAttempts(id t.TenantID, uid t.Uid, purpose string, attempts int, lockedUntil *time.Time, updatedAt time.Time) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantIndependentPasswordUpdateAttempts(id, uid, purpose, attempts, lockedUntil, updatedAt)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() || purpose == "" || attempts < 0 {
		return t.ErrMalformed
	}
	if updatedAt.IsZero() {
		updatedAt = t.TimeNow()
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx,
		`UPDATE im_youth_mode_settings SET failed_attempts=?,locked_until=?,updated_at=?
		 WHERE user_id=? AND purpose=?`,
		attempts, lockedUntil, updatedAt, decodeUID(uid), purpose)
	return err
}

func (a *adapter) TenantSystemNotificationCreate(id t.TenantID, notification *t.SystemNotification) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantSystemNotificationCreate(id, notification)
		}
	}
	if err := validTenant(id); err != nil || notification == nil || notification.TenantID != id ||
		notification.UserID.IsZero() || notification.EventID == "" || notification.EventType == "" ||
		notification.Title == "" {
		return t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	now := t.TimeNow()
	notification.CreatedAt = now
	notification.UpdatedAt = now
	_, err := a.db.ExecContext(ctx,
		`INSERT INTO im_system_notifications
		 (user_id,event_id,event_type,title,summary,action,read_at,created_at,updated_at)
		 VALUES(?,?,?,?,?,?,?,?,?)
		 ON DUPLICATE KEY UPDATE
		   event_type=VALUES(event_type),
		   title=VALUES(title),
		   summary=VALUES(summary),
		   action=VALUES(action),
		   updated_at=VALUES(updated_at)`,
		decodeUID(notification.UserID), notification.EventID, notification.EventType, notification.Title,
		notification.Summary, common.ToJSON(notification.Action), notification.ReadAt, notification.CreatedAt, notification.UpdatedAt)
	return err
}

func (a *adapter) TenantSystemNotificationList(id t.TenantID, uid t.Uid, cursor string, limit int) ([]t.SystemNotification, string, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, "", err
		}
		if tenantAdp != a {
			return tenantAdp.TenantSystemNotificationList(id, uid, cursor, limit)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() {
		return nil, "", t.ErrMalformed
	}
	if limit <= 0 || limit > 100 {
		limit = 20
	}
	lastID := int64(0)
	if cursor != "" {
		parsed, err := strconv.ParseInt(cursor, 10, 64)
		if err != nil || parsed < 0 {
			return nil, "", t.ErrMalformed
		}
		lastID = parsed
	}
	query := `SELECT id,user_id,event_id,event_type,title,summary,action,read_at,created_at,updated_at
		FROM im_system_notifications
		WHERE user_id=?`
	args := []any{decodeUID(uid)}
	if lastID > 0 {
		query += " AND id<?"
		args = append(args, lastID)
	}
	query += " ORDER BY id DESC LIMIT ?"
	args = append(args, limit+1)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, query, args...)
	if err != nil {
		return nil, "", err
	}
	defer rows.Close()
	notifications := make([]t.SystemNotification, 0, limit)
	nextCursor := ""
	for rows.Next() {
		var notification t.SystemNotification
		if err = rows.StructScan(&notification); err != nil {
			return nil, "", err
		}
		if action, ok := common.FromJSON(notification.Action).(map[string]any); ok {
			notification.Action = t.KVMap(action)
		}
		notification.TenantID = id
		if len(notifications) == limit {
			nextCursor = strconv.FormatInt(notification.ID, 10)
			continue
		}
		notifications = append(notifications, notification)
	}
	if err = rows.Err(); err != nil {
		return nil, "", err
	}
	return notifications, nextCursor, nil
}

func (a *adapter) TenantSystemNotificationMarkRead(id t.TenantID, uid t.Uid, eventID string, readAt time.Time) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantSystemNotificationMarkRead(id, uid, eventID, readAt)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() || eventID == "" {
		return t.ErrMalformed
	}
	if readAt.IsZero() {
		readAt = t.TimeNow()
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	res, err := a.db.ExecContext(ctx,
		`UPDATE im_system_notifications
		 SET read_at=COALESCE(read_at,?),updated_at=?
		 WHERE user_id=? AND event_id=?`,
		readAt, readAt, decodeUID(uid), eventID)
	if err != nil {
		return err
	}
	if rows, _ := res.RowsAffected(); rows == 0 {
		return t.ErrNotFound
	}
	return nil
}

func (a *adapter) TenantFriendRequestCreate(id t.TenantID, req *t.FriendRequest) (*t.FriendRequest, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFriendRequestCreate(id, req)
		}
	}
	if err := validTenant(id); err != nil || req == nil || req.TenantID != id || req.ApplicantID.IsZero() || req.TargetID.IsZero() {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx,
		"INSERT INTO im_friend_requests(request_id,applicant_id,target_id,message,source,source_topic,status,idempotency_key,expires_at,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?,?)",
		req.RequestID, decodeUID(req.ApplicantID), decodeUID(req.TargetID), req.Message, req.Source, req.SourceTopic, req.Status, req.IdempotencyKey, req.ExpiresAt, req.CreatedAt, req.UpdatedAt)
	if err != nil {
		if isDupe(err) && req.IdempotencyKey != "" {
			return a.friendRequestByIdempotency(ctx, id, req.ApplicantID, req.IdempotencyKey)
		}
		return nil, err
	}
	return a.friendRequestByRequestID(ctx, id, req.RequestID)
}

func (a *adapter) TenantFriendRequestList(id t.TenantID, uid t.Uid, direction, status, cursor string, limit int) ([]t.FriendRequestListItem, string, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, "", err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFriendRequestList(id, uid, direction, status, cursor, limit)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() {
		return nil, "", t.ErrMalformed
	}
	if limit <= 0 || limit > 100 {
		limit = 20
	}
	where := []string{}
	args := []any{}
	decodedUID := decodeUID(uid)
	switch direction {
	case "", "inbound":
		where = append(where, "fr.target_id=?")
		args = append(args, decodedUID)
	case "outbound":
		where = append(where, "fr.applicant_id=?")
		args = append(args, decodedUID)
	case "all":
		where = append(where, "(fr.applicant_id=? OR fr.target_id=?)")
		args = append(args, decodedUID, decodedUID)
	default:
		return nil, "", t.ErrMalformed
	}
	if status != "" && status != "all" {
		where = append(where, "fr.status=?")
		args = append(args, status)
	}
	if cursor != "" {
		parsed, err := strconv.ParseInt(cursor, 10, 64)
		if err != nil || parsed <= 0 {
			return nil, "", t.ErrMalformed
		}
		where = append(where, "fr.id<?")
		args = append(args, parsed)
	}
	args = append(args, limit+1)
	query := `SELECT fr.*,u.public,u.trusted
		FROM im_friend_requests AS fr
		JOIN users AS u ON u.id=IF(fr.applicant_id=?,fr.target_id,fr.applicant_id)
		WHERE ` + strings.Join(where, " AND ") + `
		ORDER BY fr.id DESC LIMIT ?`
	args = append([]any{decodedUID}, args...)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, query, args...)
	if err != nil {
		return nil, "", err
	}
	defer rows.Close()
	items := make([]t.FriendRequestListItem, 0, limit)
	nextCursor := ""
	for rows.Next() {
		row := struct {
			ID             int64
			RequestID      string `db:"request_id"`
			ApplicantID    int64  `db:"applicant_id"`
			TargetID       int64  `db:"target_id"`
			Message        string
			Source         string
			SourceTopic    string `db:"source_topic"`
			Status         string
			IdempotencyKey string     `db:"idempotency_key"`
			ExpiresAt      time.Time  `db:"expires_at"`
			HandledAt      *time.Time `db:"handled_at"`
			CreatedAt      time.Time  `db:"created_at"`
			UpdatedAt      time.Time  `db:"updated_at"`
			Public         any
			Trusted        any
		}{}
		if err = rows.StructScan(&row); err != nil {
			return nil, "", err
		}
		if len(items) == limit {
			nextCursor = strconv.FormatInt(row.ID, 10)
			continue
		}
		applicant := store.EncodeUid(row.ApplicantID)
		target := store.EncodeUid(row.TargetID)
		peerID := target
		direction := "outbound"
		if target == uid {
			peerID = applicant
			direction = "inbound"
		}
		items = append(items, t.FriendRequestListItem{
			Request: t.FriendRequest{
				ID:             row.ID,
				TenantID:       id,
				RequestID:      row.RequestID,
				ApplicantID:    applicant,
				TargetID:       target,
				Message:        row.Message,
				Source:         row.Source,
				SourceTopic:    row.SourceTopic,
				Status:         row.Status,
				IdempotencyKey: row.IdempotencyKey,
				ExpiresAt:      row.ExpiresAt,
				HandledAt:      row.HandledAt,
				CreatedAt:      row.CreatedAt,
				UpdatedAt:      row.UpdatedAt,
			},
			Peer: &t.User{
				ObjHeader: t.ObjHeader{Id: peerID.String()},
				TenantID:  id,
				Public:    common.FromJSON(row.Public),
				Trusted:   common.FromJSON(row.Trusted),
			},
			Direction: direction,
		})
	}
	if err = rows.Err(); err != nil {
		return nil, "", err
	}
	return items, nextCursor, nil
}

func (a *adapter) TenantFriendRequestLatestBetween(id t.TenantID, uid1, uid2 t.Uid) (*t.FriendRequest, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFriendRequestLatestBetween(id, uid1, uid2)
		}
	}
	if err := validTenant(id); err != nil || uid1.IsZero() || uid2.IsZero() {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	return a.friendRequestByQuery(ctx,
		id,
		"SELECT * FROM im_friend_requests WHERE ((applicant_id=? AND target_id=?) OR (applicant_id=? AND target_id=?)) ORDER BY created_at DESC,id DESC LIMIT 1",
		decodeUID(uid1), decodeUID(uid2), decodeUID(uid2), decodeUID(uid1))
}

func (a *adapter) TenantFriendRequestAccept(id t.TenantID, requestID string, actor t.Uid, handledAt time.Time) (*t.FriendRequest, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFriendRequestAccept(id, requestID, actor, handledAt)
		}
	}
	if err := validTenant(id); err != nil || requestID == "" || actor.IsZero() {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContextForTx()
	if cancel != nil {
		defer cancel()
	}
	tx, err := a.db.BeginTxx(ctx, nil)
	if err != nil {
		return nil, err
	}
	defer func() {
		if err != nil {
			tx.Rollback()
		}
	}()
	row := struct {
		ID             int64
		RequestID      string `db:"request_id"`
		ApplicantID    int64  `db:"applicant_id"`
		TargetID       int64  `db:"target_id"`
		Message        string
		Source         string
		SourceTopic    string `db:"source_topic"`
		Status         string
		IdempotencyKey string     `db:"idempotency_key"`
		ExpiresAt      time.Time  `db:"expires_at"`
		HandledAt      *time.Time `db:"handled_at"`
		CreatedAt      time.Time  `db:"created_at"`
		UpdatedAt      time.Time  `db:"updated_at"`
	}{}
	err = tx.GetContext(ctx, &row, "SELECT * FROM im_friend_requests WHERE request_id=? FOR UPDATE", requestID)
	if err == sql.ErrNoRows {
		return nil, t.ErrNotFound
	}
	if err != nil {
		return nil, err
	}
	if store.EncodeUid(row.TargetID) != actor {
		return nil, t.ErrPermissionDenied
	}
	if row.Status != t.FriendRequestPending && row.Status != t.FriendRequestAccepted {
		return &t.FriendRequest{
			ID:             row.ID,
			TenantID:       id,
			RequestID:      row.RequestID,
			ApplicantID:    store.EncodeUid(row.ApplicantID),
			TargetID:       store.EncodeUid(row.TargetID),
			Message:        row.Message,
			Source:         row.Source,
			SourceTopic:    row.SourceTopic,
			Status:         row.Status,
			IdempotencyKey: row.IdempotencyKey,
			ExpiresAt:      row.ExpiresAt,
			HandledAt:      row.HandledAt,
			CreatedAt:      row.CreatedAt,
			UpdatedAt:      row.UpdatedAt,
		}, nil
	}
	applicant := store.EncodeUid(row.ApplicantID)
	target := store.EncodeUid(row.TargetID)
	topic := applicant.P2PName(target)
	if topic == "" {
		return nil, t.ErrMalformed
	}
	if row.Status == t.FriendRequestPending {
		if _, err = tx.ExecContext(ctx,
			"UPDATE im_friend_requests SET status=?,handled_at=?,updated_at=? WHERE request_id=? AND status=?",
			t.FriendRequestAccepted, handledAt, handledAt, requestID, t.FriendRequestPending); err != nil {
			return nil, err
		}
		row.Status = t.FriendRequestAccepted
		row.HandledAt = &handledAt
		row.UpdatedAt = handledAt
	}
	for _, pair := range [][2]t.Uid{{applicant, target}, {target, applicant}} {
		if _, err = tx.ExecContext(ctx,
			"INSERT INTO im_friendships(user_id,peer_id,status,topic,created_at,updated_at) VALUES(?,?,?,?,?,?) "+
				"ON DUPLICATE KEY UPDATE status=VALUES(status),topic=VALUES(topic),updated_at=VALUES(updated_at)",
			decodeUID(pair[0]), decodeUID(pair[1]), t.RelationshipFriend, topic, handledAt, handledAt); err != nil {
			return nil, err
		}
	}
	users, err := a.tenantUserGetAllTx(ctx, tx, id, applicant, target)
	if err != nil {
		return nil, err
	}
	if len(users) != 2 {
		return nil, t.ErrUserNotFound
	}
	userByID := map[t.Uid]t.User{}
	for _, user := range users {
		userByID[user.Uid()] = user
	}
	applicantUser, ok1 := userByID[applicant]
	targetUser, ok2 := userByID[target]
	if !ok1 || !ok2 {
		return nil, t.ErrUserNotFound
	}
	applicantSub := &t.Subscription{
		ObjHeader: t.ObjHeader{CreatedAt: handledAt, UpdatedAt: handledAt},
		TenantID:  id,
		User:      applicant.String(),
		Topic:     topic,
		ModeWant:  t.ModeCP2P,
		ModeGiven: t.ModeCP2P,
	}
	applicantSub.SetTouchedAt(handledAt)
	applicantSub.SetPublic(targetUser.Public)
	applicantSub.SetTrusted(targetUser.Trusted)
	targetSub := &t.Subscription{
		ObjHeader: t.ObjHeader{CreatedAt: handledAt, UpdatedAt: handledAt},
		TenantID:  id,
		User:      target.String(),
		Topic:     topic,
		ModeWant:  t.ModeCP2P,
		ModeGiven: t.ModeCP2P,
	}
	targetSub.SetTouchedAt(handledAt)
	targetSub.SetPublic(applicantUser.Public)
	targetSub.SetTrusted(applicantUser.Trusted)
	if err = createSubscription(tx, applicantSub, true); err != nil {
		return nil, err
	}
	if err = createSubscription(tx, targetSub, true); err != nil {
		return nil, err
	}
	topicRow := &t.Topic{TenantID: id, ObjHeader: t.ObjHeader{Id: topic, CreatedAt: handledAt, UpdatedAt: handledAt}, TouchedAt: handledAt}
	if err = tenantTopicCreate(tx, topicRow); err != nil {
		if !isDupe(err) {
			return nil, err
		}
		if _, err = tx.ExecContext(ctx, "UPDATE topics SET updatedat=?,touchedat=?,state=? WHERE name=?",
			handledAt, handledAt, t.StateOK, topic); err != nil {
			return nil, err
		}
	}
	if err = tx.Commit(); err != nil {
		return nil, err
	}
	return a.friendRequestByRequestID(ctx, id, requestID)
}

func (a *adapter) TenantFriendRequestResolve(id t.TenantID, requestID string, actor t.Uid, status string, handledAt time.Time) (*t.FriendRequest, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFriendRequestResolve(id, requestID, actor, status, handledAt)
		}
	}
	if err := validTenant(id); err != nil || requestID == "" || actor.IsZero() {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	req, err := a.friendRequestByRequestID(ctx, id, requestID)
	if err != nil || req == nil {
		return req, err
	}
	if req.TargetID != actor {
		return nil, t.ErrPermissionDenied
	}
	if req.Status != t.FriendRequestPending {
		return req, nil
	}
	if _, err = a.db.ExecContext(ctx,
		"UPDATE im_friend_requests SET status=?,handled_at=?,updated_at=? WHERE request_id=? AND status=?",
		status, handledAt, handledAt, requestID, t.FriendRequestPending); err != nil {
		return nil, err
	}
	return a.friendRequestByRequestID(ctx, id, requestID)
}

func (a *adapter) TenantFriendshipUpsertPair(id t.TenantID, uid1, uid2 t.Uid, topic string, now time.Time) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFriendshipUpsertPair(id, uid1, uid2, topic, now)
		}
	}
	if err := validTenant(id); err != nil || uid1.IsZero() || uid2.IsZero() || uid1 == uid2 {
		return t.ErrMalformed
	}
	if topic == "" {
		topic = uid1.P2PName(uid2)
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	for _, pair := range [][2]t.Uid{{uid1, uid2}, {uid2, uid1}} {
		if _, err := a.db.ExecContext(ctx,
			"INSERT INTO im_friendships(user_id,peer_id,status,topic,created_at,updated_at) VALUES(?,?,?,?,?,?) "+
				"ON DUPLICATE KEY UPDATE status=VALUES(status),topic=VALUES(topic),updated_at=VALUES(updated_at)",
			decodeUID(pair[0]), decodeUID(pair[1]), t.RelationshipFriend, topic, now, now); err != nil {
			return err
		}
	}
	return nil
}

func (a *adapter) TenantFriendshipList(id t.TenantID, uid t.Uid, queryText, initial, cursor string, limit int) ([]t.FriendListItem, string, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, "", err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFriendshipList(id, uid, queryText, initial, cursor, limit)
		}
	}
	if err := validTenant(id); err != nil || uid.IsZero() {
		return nil, "", t.ErrMalformed
	}
	if limit <= 0 || limit > 100 {
		limit = 50
	}
	where := []string{"fs.user_id=?", "fs.status=?"}
	args := []any{decodeUID(uid), t.RelationshipFriend}
	if cursor != "" {
		parsed, err := strconv.ParseInt(cursor, 10, 64)
		if err != nil || parsed <= 0 {
			return nil, "", t.ErrMalformed
		}
		where = append(where, "fs.id>?")
		args = append(args, parsed)
	}
	if q := strings.TrimSpace(queryText); q != "" {
		like := "%" + q + "%"
		where = append(where, "(fs.remark LIKE ? OR CAST(u.public AS CHAR) LIKE ? OR CAST(u.tags AS CHAR) LIKE ?)")
		args = append(args, like, like, like)
	}
	if initial = strings.TrimSpace(initial); initial != "" {
		like := initial + "%"
		where = append(where, "(fs.remark LIKE ? OR CAST(u.public AS CHAR) LIKE ?)")
		args = append(args, like, like)
	}
	args = append(args, limit+1)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, `SELECT fs.*,u.public,u.trusted
		FROM im_friendships AS fs
		JOIN users AS u ON u.id=fs.peer_id
		WHERE `+strings.Join(where, " AND ")+`
		ORDER BY fs.id ASC LIMIT ?`, args...)
	if err != nil {
		return nil, "", err
	}
	defer rows.Close()
	items := make([]t.FriendListItem, 0, limit)
	nextCursor := ""
	for rows.Next() {
		row := struct {
			ID        int64
			UserID    int64 `db:"user_id"`
			PeerID    int64 `db:"peer_id"`
			Status    string
			Remark    string
			Topic     string
			CreatedAt time.Time `db:"created_at"`
			UpdatedAt time.Time `db:"updated_at"`
			Public    any
			Trusted   any
		}{}
		if err = rows.StructScan(&row); err != nil {
			return nil, "", err
		}
		if len(items) == limit {
			nextCursor = strconv.FormatInt(row.ID, 10)
			continue
		}
		peerID := store.EncodeUid(row.PeerID)
		items = append(items, t.FriendListItem{
			Friendship: t.Friendship{
				TenantID:  id,
				UserID:    store.EncodeUid(row.UserID),
				PeerID:    peerID,
				Status:    row.Status,
				Remark:    row.Remark,
				Topic:     row.Topic,
				CreatedAt: row.CreatedAt,
				UpdatedAt: row.UpdatedAt,
			},
			Peer: &t.User{
				ObjHeader: t.ObjHeader{Id: peerID.String()},
				TenantID:  id,
				Public:    common.FromJSON(row.Public),
				Trusted:   common.FromJSON(row.Trusted),
			},
		})
	}
	if err = rows.Err(); err != nil {
		return nil, "", err
	}
	return items, nextCursor, nil
}

func (a *adapter) TenantFriendshipGet(id t.TenantID, userID, peerID t.Uid) (*t.Friendship, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFriendshipGet(id, userID, peerID)
		}
	}
	if err := validTenant(id); err != nil || userID.IsZero() || peerID.IsZero() {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	row := struct {
		UserID    int64 `db:"user_id"`
		PeerID    int64 `db:"peer_id"`
		Status    string
		Remark    string
		Topic     string
		CreatedAt time.Time `db:"created_at"`
		UpdatedAt time.Time `db:"updated_at"`
	}{}
	err := a.db.GetContext(ctx, &row, "SELECT * FROM im_friendships WHERE user_id=? AND peer_id=?",
		decodeUID(userID), decodeUID(peerID))
	if err == sql.ErrNoRows {
		return nil, nil
	}
	if err != nil {
		return nil, err
	}
	return &t.Friendship{
		TenantID:  id,
		UserID:    store.EncodeUid(row.UserID),
		PeerID:    store.EncodeUid(row.PeerID),
		Status:    row.Status,
		Remark:    row.Remark,
		Topic:     row.Topic,
		CreatedAt: row.CreatedAt,
		UpdatedAt: row.UpdatedAt,
	}, nil
}

func (a *adapter) TenantFriendshipUpdateRemark(id t.TenantID, userID, peerID t.Uid, remark string, now time.Time) (*t.Friendship, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFriendshipUpdateRemark(id, userID, peerID, remark, now)
		}
	}
	if err := validTenant(id); err != nil || userID.IsZero() || peerID.IsZero() || len([]rune(remark)) > 64 {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	res, err := a.db.ExecContext(ctx,
		"UPDATE im_friendships SET remark=?,updated_at=? WHERE user_id=? AND peer_id=? AND status=?",
		remark, now, decodeUID(userID), decodeUID(peerID), t.RelationshipFriend)
	if err != nil {
		return nil, err
	}
	if affected, err := res.RowsAffected(); err == nil && affected == 0 {
		return nil, t.ErrNotFound
	}
	return a.TenantFriendshipGet(id, userID, peerID)
}

func (a *adapter) TenantFriendshipDeletePair(id t.TenantID, uid1, uid2 t.Uid, now time.Time) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantFriendshipDeletePair(id, uid1, uid2, now)
		}
	}
	if err := validTenant(id); err != nil || uid1.IsZero() || uid2.IsZero() {
		return t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx,
		"UPDATE im_friendships SET status=?,updated_at=? WHERE (user_id=? AND peer_id=?) OR (user_id=? AND peer_id=?)",
		t.RelationshipNone, now, decodeUID(uid1), decodeUID(uid2), decodeUID(uid2), decodeUID(uid1))
	return err
}

func (a *adapter) TenantUserBlockGet(id t.TenantID, blockerID, blockedID t.Uid) (*t.UserBlock, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantUserBlockGet(id, blockerID, blockedID)
		}
	}
	if err := validTenant(id); err != nil || blockerID.IsZero() || blockedID.IsZero() {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	row := struct {
		BlockerID int64     `db:"blocker_id"`
		BlockedID int64     `db:"blocked_id"`
		CreatedAt time.Time `db:"created_at"`
		UpdatedAt time.Time `db:"updated_at"`
	}{}
	err := a.db.GetContext(ctx, &row, "SELECT * FROM im_user_blocks WHERE blocker_id=? AND blocked_id=?",
		decodeUID(blockerID), decodeUID(blockedID))
	if err == sql.ErrNoRows {
		return nil, nil
	}
	if err != nil {
		return nil, err
	}
	return &t.UserBlock{
		TenantID:  id,
		BlockerID: store.EncodeUid(row.BlockerID),
		BlockedID: store.EncodeUid(row.BlockedID),
		CreatedAt: row.CreatedAt,
		UpdatedAt: row.UpdatedAt,
	}, nil
}

func (a *adapter) TenantUserBlockList(id t.TenantID, blockerID t.Uid, cursor string, limit int) ([]t.BlockListItem, string, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, "", err
		}
		if tenantAdp != a {
			return tenantAdp.TenantUserBlockList(id, blockerID, cursor, limit)
		}
	}
	if err := validTenant(id); err != nil || blockerID.IsZero() {
		return nil, "", t.ErrMalformed
	}
	if limit <= 0 || limit > 100 {
		limit = 50
	}
	where := []string{"b.blocker_id=?"}
	args := []any{decodeUID(blockerID)}
	if cursor != "" {
		parsed, err := strconv.ParseInt(cursor, 10, 64)
		if err != nil || parsed <= 0 {
			return nil, "", t.ErrMalformed
		}
		where = append(where, "b.blocked_id<?")
		args = append(args, parsed)
	}
	args = append(args, limit+1)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, `SELECT b.*,u.public,u.trusted
		FROM im_user_blocks AS b
		LEFT JOIN users AS u ON u.id=b.blocked_id
		WHERE `+strings.Join(where, " AND ")+`
		ORDER BY b.blocked_id DESC LIMIT ?`, args...)
	if err != nil {
		return nil, "", err
	}
	defer rows.Close()
	items := make([]t.BlockListItem, 0, limit)
	nextCursor := ""
	for rows.Next() {
		row := struct {
			BlockerID int64     `db:"blocker_id"`
			BlockedID int64     `db:"blocked_id"`
			CreatedAt time.Time `db:"created_at"`
			UpdatedAt time.Time `db:"updated_at"`
			Public    any
			Trusted   any
		}{}
		if err = rows.StructScan(&row); err != nil {
			return nil, "", err
		}
		if len(items) == limit {
			nextCursor = strconv.FormatInt(row.BlockedID, 10)
			continue
		}
		blockedID := store.EncodeUid(row.BlockedID)
		items = append(items, t.BlockListItem{
			Block: t.UserBlock{
				TenantID:  id,
				BlockerID: store.EncodeUid(row.BlockerID),
				BlockedID: blockedID,
				CreatedAt: row.CreatedAt,
				UpdatedAt: row.UpdatedAt,
			},
			User: &t.User{
				ObjHeader: t.ObjHeader{Id: blockedID.String()},
				TenantID:  id,
				Public:    common.FromJSON(row.Public),
				Trusted:   common.FromJSON(row.Trusted),
			},
		})
	}
	if err = rows.Err(); err != nil {
		return nil, "", err
	}
	return items, nextCursor, nil
}

func (a *adapter) TenantUserBlockUpsert(id t.TenantID, blockerID, blockedID t.Uid, now time.Time) (*t.UserBlock, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, err
		}
		if tenantAdp != a {
			return tenantAdp.TenantUserBlockUpsert(id, blockerID, blockedID, now)
		}
	}
	if err := validTenant(id); err != nil || blockerID.IsZero() || blockedID.IsZero() {
		return nil, t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx,
		"INSERT INTO im_user_blocks(blocker_id,blocked_id,created_at,updated_at) VALUES(?,?,?,?) "+
			"ON DUPLICATE KEY UPDATE updated_at=VALUES(updated_at)",
		decodeUID(blockerID), decodeUID(blockedID), now, now)
	if err != nil {
		return nil, err
	}
	return a.TenantUserBlockGet(id, blockerID, blockedID)
}

func (a *adapter) TenantUserBlockDelete(id t.TenantID, blockerID, blockedID t.Uid) error {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return err
		}
		if tenantAdp != a {
			return tenantAdp.TenantUserBlockDelete(id, blockerID, blockedID)
		}
	}
	if err := validTenant(id); err != nil || blockerID.IsZero() || blockedID.IsZero() {
		return t.ErrMalformed
	}
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	_, err := a.db.ExecContext(ctx, "DELETE FROM im_user_blocks WHERE blocker_id=? AND blocked_id=?",
		decodeUID(blockerID), decodeUID(blockedID))
	return err
}

func (a *adapter) TenantUserSearch(id t.TenantID, viewer t.Uid, queryText, searchType, cursor string, limit int) ([]t.User, string, error) {
	if !a.tenantScopedDB {
		tenantAdp, err := a.routedTenantAdapter(id)
		if err != nil {
			return nil, "", err
		}
		if tenantAdp != a {
			return tenantAdp.TenantUserSearch(id, viewer, queryText, searchType, cursor, limit)
		}
	}
	if err := validTenant(id); err != nil || viewer.IsZero() {
		return nil, "", t.ErrMalformed
	}
	queryText = strings.TrimSpace(queryText)
	if queryText == "" {
		return nil, "", t.ErrMalformed
	}
	if limit <= 0 || limit > 50 {
		limit = 20
	}
	where := []string{"u.id<>?", "u.state=?"}
	args := []any{decodeUID(viewer), t.StateOK}
	if cursor != "" {
		parsed, err := strconv.ParseInt(cursor, 10, 64)
		if err != nil || parsed <= 0 {
			return nil, "", t.ErrMalformed
		}
		where = append(where, "u.id>?")
		args = append(args, parsed)
	}
	join := ""
	switch searchType {
	case "", "account":
		like := "%" + queryText + "%"
		join = "LEFT JOIN usertags AS ut ON ut.userid=u.id"
		where = append(where, "(ut.tag LIKE ? OR CAST(u.public AS CHAR) LIKE ? OR u.id=?)")
		args = append(args, like, like, userIDNumericArg(queryText))
	case "exact_account":
		join = "LEFT JOIN usertags AS ut ON ut.userid=u.id"
		where = append(where, "(ut.tag=? OR u.id=?)")
		args = append(args, queryText, userIDNumericArg(queryText))
	case "phone":
		where = append(where, `EXISTS (
			SELECT 1 FROM credentials AS c
			WHERE c.userid=u.id AND c.method='tel' AND c.value=? AND c.done=true
		)`)
		args = append(args, queryText)
	default:
		return nil, "", t.ErrMalformed
	}
	args = append(args, limit+1)
	ctx, cancel := a.getContext()
	if cancel != nil {
		defer cancel()
	}
	rows, err := a.db.QueryxContext(ctx, `SELECT DISTINCT u.* FROM users AS u `+join+`
		WHERE `+strings.Join(where, " AND ")+` ORDER BY u.id ASC LIMIT ?`, args...)
	if err != nil {
		return nil, "", err
	}
	defer rows.Close()
	users := make([]t.User, 0, limit)
	nextCursor := ""
	for rows.Next() {
		var user t.User
		if err = rows.StructScan(&user); err != nil {
			return nil, "", err
		}
		scanTenantUser(&user)
		if len(users) == limit {
			nextCursor = strconv.FormatInt(decodeUID(user.Uid()), 10)
			continue
		}
		users = append(users, user)
	}
	if err = rows.Err(); err != nil {
		return nil, "", err
	}
	return users, nextCursor, nil
}

func userIDNumericArg(value string) int64 {
	if uid := t.ParseUserId(value); !uid.IsZero() {
		return decodeUID(uid)
	}
	return 0
}

func (a *adapter) friendRequestByRequestID(ctx context.Context, tenantID t.TenantID, requestID string) (*t.FriendRequest, error) {
	return a.friendRequestByQuery(ctx, tenantID, "SELECT * FROM im_friend_requests WHERE request_id=?", requestID)
}

func (a *adapter) friendRequestByIdempotency(ctx context.Context, tenantID t.TenantID, applicantID t.Uid, key string) (*t.FriendRequest, error) {
	return a.friendRequestByQuery(ctx, tenantID, "SELECT * FROM im_friend_requests WHERE applicant_id=? AND idempotency_key=?", decodeUID(applicantID), key)
}

func (a *adapter) friendRequestByQuery(ctx context.Context, tenantID t.TenantID, query string, args ...any) (*t.FriendRequest, error) {
	row := struct {
		ID             int64
		RequestID      string `db:"request_id"`
		ApplicantID    int64  `db:"applicant_id"`
		TargetID       int64  `db:"target_id"`
		Message        string
		Source         string
		SourceTopic    string `db:"source_topic"`
		Status         string
		IdempotencyKey string     `db:"idempotency_key"`
		ExpiresAt      time.Time  `db:"expires_at"`
		HandledAt      *time.Time `db:"handled_at"`
		CreatedAt      time.Time  `db:"created_at"`
		UpdatedAt      time.Time  `db:"updated_at"`
	}{}
	err := a.db.GetContext(ctx, &row, query, args...)
	if err == sql.ErrNoRows {
		return nil, nil
	}
	if err != nil {
		return nil, err
	}
	return &t.FriendRequest{
		ID:             row.ID,
		TenantID:       tenantID,
		RequestID:      row.RequestID,
		ApplicantID:    store.EncodeUid(row.ApplicantID),
		TargetID:       store.EncodeUid(row.TargetID),
		Message:        row.Message,
		Source:         row.Source,
		SourceTopic:    row.SourceTopic,
		Status:         row.Status,
		IdempotencyKey: row.IdempotencyKey,
		ExpiresAt:      row.ExpiresAt,
		HandledAt:      row.HandledAt,
		CreatedAt:      row.CreatedAt,
		UpdatedAt:      row.UpdatedAt,
	}, nil
}

func nullableUID(uid t.Uid) any {
	if uid.IsZero() {
		return nil
	}
	return store.DecodeUid(uid)
}

func securityTokenHash(tenantID t.TenantID, uid t.Uid, action, target, tokenID, secret string) string {
	h := sha256.New()
	h.Write([]byte(strconv.FormatInt(int64(tenantID), 10)))
	h.Write([]byte{0})
	h.Write([]byte(strconv.FormatInt(store.DecodeUid(uid), 10)))
	h.Write([]byte{0})
	h.Write([]byte(action))
	h.Write([]byte{0})
	h.Write([]byte(target))
	h.Write([]byte{0})
	h.Write([]byte(tokenID))
	h.Write([]byte{0})
	h.Write([]byte(secret))
	return fmt.Sprintf("%x", h.Sum(nil))
}