audit

type ActorInfo struct {
	ID          string
	Type        string
	DisplayName string
	Email       string
	Subject     string
	ClientID    string
	Realm       string
}

type AuditEvent struct {
	EventID      string
	EventType    EventType
	EventVersion string
	OccurredAt   time.Time

	Service   string
	Operation string

	Actor  ActorInfo
	Target TargetInfo
	Result ResultInfo

	TraceID   string
	RequestID string

	Detail any
}

type AuditMiddlewareOption func(*auditMiddlewareConfig)

type AuthnDetail struct {
	Method        string
	Success       bool
	FailureReason string
}

type AuthzDecision string

type AuthzDetail struct {
	Relation    string
	ObjectType  string
	ObjectID    string
	Decision    AuthzDecision
	ErrorReason string
}

type BrokerEmitter struct {
	// contains filtered or unexported fields
}

type Emitter interface {
	// Emit sends the event to the backend. Errors are non-fatal (audit must not break business flow).
	Emit(ctx context.Context, event *AuditEvent) error
	// Close releases any resources held by the emitter.
	Close() error
}

type EventType string

type LogEmitter struct {
	// contains filtered or unexported fields
}

type NoopEmitter struct{}

type Recorder struct {
	// contains filtered or unexported fields
}

type ResourceMutationDetail struct {
	MutationType ResourceMutationType
	ResourceType string
	ResourceID   string
}

type ResourceMutationType string

type ResultInfo struct {
	Success      bool
	ErrorCode    string
	ErrorMessage string
}

type Rule struct {
	// EventType is the audit event type to emit.
	EventType EventType
	// Operation override (defaults to the gRPC operation path).
	Operation string
	// TargetType is the resource type being operated on (e.g. "user").
	TargetType string
	// MutationType specifies the mutation kind (create/update/delete) for
	// EventTypeResourceMutation rules. Defaults to ResourceMutationUpdate if unset.
	MutationType ResourceMutationType
	// RecordOnError controls whether to emit events even when the handler fails.
	RecordOnError bool
	// TargetIDFunc extracts the target resource ID from the request/response.
	// Generated by protoc-gen-servora-audit for rules with target_id_field set.
	// Called after handler returns; req is the original request, resp is the handler response.
	TargetIDFunc func(req, resp any) string
}

type TargetInfo struct {
	Type string
	ID   string
	Name string
}

type TupleChange struct {
	User     string
	Relation string
	Object   string
}

type TupleMutationDetail struct {
	MutationType TupleMutationType
	Tuples       []TupleChange
}

type TupleMutationType string