compliance

type AuditEvent struct {
	// ID is the unique event identifier.
	ID string `json:"id"`

	// Timestamp is when the event occurred.
	Timestamp time.Time `json:"timestamp"`

	// EventType is the type of event.
	EventType AuditEventType `json:"event_type"`

	// Actor is who performed the action.
	Actor string `json:"actor"`

	// TargetSymbol is the symbol involved.
	TargetSymbol string `json:"target_symbol,omitempty"`

	// ProjectRoot is the project identifier.
	ProjectRoot string `json:"project_root,omitempty"`

	// Action is the action performed.
	Action string `json:"action"`

	// Outcome is the result of the action.
	Outcome string `json:"outcome"`

	// RiskLevel is the assessed risk level.
	RiskLevel string `json:"risk_level,omitempty"`

	// Details contains additional event details.
	Details map[string]interface{} `json:"details,omitempty"`

	// Metadata contains additional metadata.
	Metadata map[string]string `json:"metadata,omitempty"`
}

type AuditEventType string

type ComplianceReport struct {
	// GeneratedAt is when the report was generated.
	GeneratedAt time.Time `json:"generated_at"`

	// ReportPeriod is the period covered.
	ReportPeriod ReportPeriod `json:"report_period"`

	// Summary contains summary statistics.
	Summary ReportSummary `json:"summary"`

	// Events contains the audit events.
	Events []AuditEvent `json:"events"`

	// RuleViolations contains rule violations.
	RuleViolations []RuleViolation `json:"rule_violations"`

	// SecurityFindings contains security-related findings.
	SecurityFindings []SecurityFinding `json:"security_findings"`
}

type ComplianceReporter struct {
	// contains filtered or unexported fields
}

type QueryCriteria struct {
	StartTime time.Time
	EndTime   time.Time
	EventType AuditEventType
	Actor     string
	SymbolID  string
	Limit     int
}

type ReportPeriod struct {
	Start time.Time `json:"start"`
	End   time.Time `json:"end"`
}

type ReportSummary struct {
	TotalAnalyses         int            `json:"total_analyses"`
	TotalRuleMatches      int            `json:"total_rule_matches"`
	TotalBlocks           int            `json:"total_blocks"`
	TotalOverrides        int            `json:"total_overrides"`
	RiskDistribution      map[string]int `json:"risk_distribution"`
	TopRiskySymbols       []SymbolRisk   `json:"top_risky_symbols"`
	AverageCallerCount    float64        `json:"average_caller_count"`
	SecurityPathsAffected int            `json:"security_paths_affected"`
}

type ReporterOptions struct {
	// MaxEvents is the maximum number of events to keep in memory.
	// Default: 10000
	MaxEvents int

	// PersistPath is the optional path for JSON persistence.
	// If empty, data is memory-only.
	PersistPath string
}

type RuleViolation struct {
	Timestamp time.Time `json:"timestamp"`
	RuleName  string    `json:"rule_name"`
	SymbolID  string    `json:"symbol_id"`
	Actor     string    `json:"actor"`
	Severity  string    `json:"severity"`
	Outcome   string    `json:"outcome"`
}

type SecurityFinding struct {
	Timestamp    time.Time `json:"timestamp"`
	SymbolID     string    `json:"symbol_id"`
	SecurityPath string    `json:"security_path"`
	RiskLevel    string    `json:"risk_level"`
	Actor        string    `json:"actor"`
	Mitigated    bool      `json:"mitigated"`
}

type SymbolRisk struct {
	SymbolID   string `json:"symbol_id"`
	RiskLevel  string `json:"risk_level"`
	MatchCount int    `json:"match_count"`
}