webhook

type AttributeCondition struct {
	// Attribute key
	Key string
	// Operator (eq, ne, contains, regex, gt, lt, gte, lte, exists)
	Operator string
	// Value to compare
	Value interface{}
	// Case sensitive matching
	CaseSensitive bool
}

type AttributeFilter struct {
	// Conditions for attribute matching
	Conditions []AttributeCondition
}

type Authentication struct {
	// Type of authentication
	Type AuthenticationType `json:"type"`
	// Username for basic auth
	Username string `json:"username,omitempty"`
	// Password for basic auth
	Password string `json:"password,omitempty"`
	// Token for bearer auth
	Token string `json:"token,omitempty"`
	// API key for api_key auth
	APIKey string `json:"api_key,omitempty"`
	// Header name for API key (default: X-API-Key)
	APIKeyHeader string `json:"api_key_header,omitempty"`
	// HMAC configuration for hmac auth
	HMAC *HMACConfig `json:"hmac,omitempty"`
	// OAuth2 configuration
	OAuth2 *OAuth2Config `json:"oauth2,omitempty"`
}

type AuthenticationType string

type BatchDeliveryConfig struct {
	// Enable batch delivery
	Enabled bool `json:"enabled"`
	// Maximum batch size (number of events)
	MaxSize int `json:"max_size"`
	// Maximum batch wait time
	MaxWait time.Duration `json:"max_wait"`
	// Maximum batch size in bytes
	MaxBytes int `json:"max_bytes"`
	// Batch events by webhook
	BatchByWebhook bool `json:"batch_by_webhook"`
}

type BatchPayload struct {
	// Batch ID
	ID string `json:"id"`
	// Timestamp
	Timestamp time.Time `json:"timestamp"`
	// Webhook ID
	WebhookID string `json:"webhook_id"`
	// Events in this batch
	Events []*WebhookPayload `json:"events"`
	// Batch size in bytes
	Size int `json:"size"`
	// Signature for the batch
	Signature string `json:"signature,omitempty"`
}

type CategoryFilter struct {
	// Categories to include (empty = all)
	IncludeCategories []siem.EventCategory
	// Categories to exclude
	ExcludeCategories []siem.EventCategory
}

type CompositeFilter struct {
	// contains filtered or unexported fields
}

type DeliveryAttempt struct {
	// Attempt number
	Attempt int `json:"attempt"`
	// Timestamp of the attempt
	Timestamp time.Time `json:"timestamp"`
	// HTTP status code received
	StatusCode int `json:"status_code,omitempty"`
	// Response body (truncated if too long)
	ResponseBody string `json:"response_body,omitempty"`
	// Response headers
	ResponseHeaders map[string]string `json:"response_headers,omitempty"`
	// Error message if failed
	Error string `json:"error,omitempty"`
	// Duration of the attempt
	Duration time.Duration `json:"duration"`
	// Whether this was the final successful attempt
	Success bool `json:"success"`
	// Whether a retry is pending
	RetryPending bool `json:"retry_pending"`
	// Next retry time if retry pending
	NextRetry time.Time `json:"next_retry,omitempty"`
}

type DeliveryResponse struct {
	StatusCode  int               `json:"status_code"`
	Headers     map[string]string `json:"headers"`
	Body        string            `json:"body,omitempty"`
	ContentType string            `json:"content_type,omitempty"`
}

type DeliveryStatus struct {
	// Webhook ID
	WebhookID string `json:"webhook_id"`
	// Payload ID
	PayloadID string `json:"payload_id"`
	// Current status
	Status WebhookStatus `json:"status"`
	// All delivery attempts
	Attempts []DeliveryAttempt `json:"attempts"`
	// Total attempts made
	TotalAttempts int `json:"total_attempts"`
	// Last attempt timestamp
	LastAttempt time.Time `json:"last_attempt,omitempty"`
	// Last successful delivery
	LastSuccess time.Time `json:"last_success,omitempty"`
	// Created timestamp
	CreatedAt time.Time `json:"created_at"`
	// Final response (after success or max retries)
	FinalResponse *DeliveryResponse `json:"final_response,omitempty"`
}

type Error struct {
	WebhookID string    `json:"webhook_id"`
	Operation string    `json:"operation"`
	Message   string    `json:"message"`
	Retryable bool      `json:"retryable"`
	Cause     error     `json:"cause,omitempty"`
	Timestamp time.Time `json:"timestamp"`
}

type EventMatcher struct {
	// contains filtered or unexported fields
}

type EventTypeFilter struct {
	// Event types to include (empty = all)
	IncludeTypes []string
	// Event types to exclude
	ExcludeTypes []string
	// Use regex for matching
	UseRegex bool
	// Case sensitive matching
	CaseSensitive bool
}

type Filter interface {
	// Allow determines if an event should be allowed through
	Allow(event *siem.Event) bool
	// Match determines if an event matches the filter criteria
	Match(event *siem.Event) bool
}

type FilterBuilder struct {
	// contains filtered or unexported fields
}

type HMACConfig struct {
	// Secret key for signing
	Secret string `json:"secret"`
	// Algorithm (sha256, sha384, sha512)
	Algorithm string `json:"algorithm"`
	// Header name for signature (default: X-Signature)
	Header string `json:"header"`
	// Include timestamp in signature
	IncludeTimestamp bool `json:"include_timestamp"`
	// Timestamp header name (default: X-Timestamp)
	TimestampHeader string `json:"timestamp_header"`
	// Signature prefix (e.g., "sha256=")
	SignaturePrefix string `json:"signature_prefix"`
}

type HTTPClient struct {
	*http.Client
	// contains filtered or unexported fields
}

type HTTPClientConfig struct {
	// TLS configuration
	TLS *TLSConfig
	// Request timeout
	Timeout time.Duration
	// Maximum idle connections
	MaxIdleConns int
	// Maximum idle connections per host
	MaxIdleConnsPerHost int
	// Idle connection timeout
	IdleConnTimeout time.Duration
	// Response header timeout
	ResponseHeaderTimeout time.Duration
	// Expect continue timeout
	ExpectContinueTimeout time.Duration
	// Disable keep-alive
	DisableKeepAlives bool
	// Disable compression
	DisableCompression bool
}

type HTTPSender struct {
	// contains filtered or unexported fields
}

type Manager struct {
	// contains filtered or unexported fields
}

type ManagerConfig struct {
	// HTTP client configuration
	HTTPClient *HTTPClientConfig
	// Worker pool configuration
	WorkerPool WorkerPoolConfig
	// Batch delivery configuration
	Batch BatchDeliveryConfig
	// Default retry configuration
	DefaultRetry RetryConfig
	// Enable metrics collection
	EnableMetrics bool
	// Maximum delivery history per webhook
	MaxHistorySize int
}

type ManagerStats struct {

	// Total webhooks registered
	TotalWebhooks int `json:"total_webhooks"`
	// Enabled webhooks
	EnabledWebhooks int `json:"enabled_webhooks"`
	// Total deliveries across all webhooks
	TotalDeliveries int64 `json:"total_deliveries"`
	// Successful deliveries
	SuccessCount int64 `json:"success_count"`
	// Failed deliveries
	FailureCount int64 `json:"failure_count"`
	// Events filtered out
	EventsFiltered int64 `json:"events_filtered"`
	// Per-webhook statistics
	WebhookStats map[string]*WebhookStats `json:"webhook_stats"`
	// contains filtered or unexported fields
}

type MatchCondition struct {
	// Field to match against
	Field string `json:"field"`
	// Operator (eq, ne, contains, regex, gt, lt, gte, lte)
	Operator string `json:"operator"`
	// Value to compare
	Value interface{} `json:"value"`
	// Case-sensitive matching
	CaseSensitive bool `json:"case_sensitive"`
}

type OAuth2Config struct {
	// Token endpoint URL
	TokenURL string `json:"token_url"`
	// Client ID
	ClientID string `json:"client_id"`
	// Client secret
	ClientSecret string `json:"client_secret"`
	// OAuth scopes
	Scopes []string `json:"scopes,omitempty"`
	// Cached access token
	AccessToken string `json:"-"`
	// Token expiration
	TokenExpiry time.Time `json:"-"`
}

type Payload interface {
	// ToJSON returns the JSON representation
	ToJSON() ([]byte, error)
	// GetID returns the payload ID
	GetID() string
	// GetTimestamp returns the payload timestamp
	GetTimestamp() time.Time
}

type RateLimitConfig struct {
	// Maximum number of triggers per window
	MaxTriggers int `json:"max_triggers"`
	// Time window for rate limiting
	Window time.Duration `json:"window"`
	// Burst allowance
	Burst int `json:"burst"`
}

type RequestBuilder struct {
	// contains filtered or unexported fields
}

type RetryConfig struct {
	// Enable retry on failure
	Enabled bool `json:"enabled"`
	// Maximum retry attempts
	MaxAttempts int `json:"max_attempts"`
	// Initial backoff duration
	InitialBackoff time.Duration `json:"initial_backoff"`
	// Maximum backoff duration
	MaxBackoff time.Duration `json:"max_backoff"`
	// Backoff multiplier (default: 2.0)
	BackoffMultiplier float64 `json:"backoff_multiplier"`
	// Add jitter to backoff
	Jitter bool `json:"jitter"`
	// Retry on these HTTP status codes
	RetryOnStatusCodes []int `json:"retry_on_status_codes,omitempty"`
	// Retry on network errors
	RetryOnNetworkError bool `json:"retry_on_network_error"`
	// Retry on timeout
	RetryOnTimeout bool `json:"retry_on_timeout"`
	// Maximum total retry duration
	MaxTotalDuration time.Duration `json:"max_total_duration"`
}

type Sender interface {
	// Send sends a webhook payload
	Send(ctx context.Context, config *WebhookConfig, payload Payload) (*DeliveryResponse, error)
	// SendWithRetry sends with custom retry settings
	SendWithRetry(ctx context.Context, config *WebhookConfig, payload Payload, retry RetryConfig) (*DeliveryResponse, error)
}

type SeverityFilter struct {
	// Minimum severity required
	MinSeverity siem.Severity
	// Severities to include (empty = all above min)
	IncludeSeverities []siem.Severity
	// Severities to exclude
	ExcludeSeverities []siem.Severity
}

type SourceFilter struct {
	// Sources to include (empty = all)
	IncludeSources []string
	// Sources to exclude
	ExcludeSources []string
	// Use regex for matching
	UseRegex bool
	// Case sensitive matching
	CaseSensitive bool
}

type StatusTracker struct {
	// contains filtered or unexported fields
}

type TLSConfig struct {
	// Enable TLS (default: true for HTTPS URLs)
	Enabled bool `json:"enabled"`
	// Skip certificate verification (insecure)
	InsecureSkipVerify bool `json:"insecure_skip_verify"`
	// CA certificate file path
	CAFile string `json:"ca_file,omitempty"`
	// CA certificate PEM data
	CAData []byte `json:"ca_data,omitempty"`
	// Client certificate file path
	CertFile string `json:"cert_file,omitempty"`
	// Client certificate PEM data
	CertData []byte `json:"cert_data,omitempty"`
	// Client key file path
	KeyFile string `json:"key_file,omitempty"`
	// Client key PEM data
	KeyData []byte `json:"key_data,omitempty"`
	// Server name for SNI
	ServerName string `json:"server_name,omitempty"`
	// Minimum TLS version (1.2, 1.3)
	MinVersion string `json:"min_version,omitempty"`
	// Maximum TLS version
	MaxVersion string `json:"max_version,omitempty"`
	// Cipher suites (nil for default)
	CipherSuites []string `json:"cipher_suites,omitempty"`
}

type TriggerCondition struct {
	// Minimum severity level to trigger
	MinSeverity siem.Severity `json:"min_severity,omitempty"`
	// Event categories to trigger on (empty = all)
	Categories []siem.EventCategory `json:"categories,omitempty"`
	// Event sources to trigger on (empty = all)
	Sources []string `json:"sources,omitempty"`
	// Event types to trigger on (empty = all)
	EventTypes []string `json:"event_types,omitempty"`
	// Custom filter expression
	CustomFilter string `json:"custom_filter,omitempty"`
	// Exclude these severities
	ExcludeSeverities []siem.Severity `json:"exclude_severities,omitempty"`
	// Exclude these categories
	ExcludeCategories []siem.EventCategory `json:"exclude_categories,omitempty"`
	// Exclude these sources
	ExcludeSources []string `json:"exclude_sources,omitempty"`
	// Exclude these event types
	ExcludeEventTypes []string `json:"exclude_event_types,omitempty"`
	// Time window for triggering (rate limiting)
	RateLimit *RateLimitConfig `json:"rate_limit,omitempty"`
}

type Webhook struct {
	ID          string             `json:"id"`
	Name        string             `json:"name"`
	Description string             `json:"description"`
	URL         string             `json:"url"`
	Method      string             `json:"method"`
	Enabled     bool               `json:"enabled"`
	Auth        Authentication     `json:"auth"`
	TLS         TLSConfig          `json:"tls"`
	Triggers    []TriggerCondition `json:"triggers"`
	CreatedAt   time.Time          `json:"created_at"`
	UpdatedAt   time.Time          `json:"updated_at"`
}

type WebhookConfig struct {
	// Unique identifier for this webhook
	ID string `json:"id"`
	// Human-readable name
	Name string `json:"name"`
	// Description of the webhook
	Description string `json:"description,omitempty"`
	// Webhook endpoint URL
	URL string `json:"url"`
	// HTTP method (POST, PUT, PATCH)
	Method string `json:"method"`
	// Custom headers to include in requests
	Headers map[string]string `json:"headers,omitempty"`
	// Authentication configuration
	Auth Authentication `json:"auth"`
	// TLS configuration
	TLS TLSConfig `json:"tls"`
	// Request timeout
	Timeout time.Duration `json:"timeout"`
	// Retry configuration
	Retry RetryConfig `json:"retry"`
	// Trigger conditions for when to send webhooks
	Triggers []TriggerCondition `json:"triggers,omitempty"`
	// Enable/disable this webhook
	Enabled bool `json:"enabled"`
	// Maximum concurrent deliveries
	MaxConcurrency int `json:"max_concurrency"`
	// Content type for request body
	ContentType string `json:"content_type"`
	// Custom template for payload formatting
	PayloadTemplate string `json:"payload_template,omitempty"`
	// Include full event details in payload
	IncludeEventDetails bool `json:"include_event_details"`
	// Created timestamp
	CreatedAt time.Time `json:"created_at"`
	// Last updated timestamp
	UpdatedAt time.Time `json:"updated_at"`
	// Tags for organization
	Tags []string `json:"tags,omitempty"`
}

type WebhookPayload struct {
	// Unique identifier for this payload
	ID string `json:"id"`
	// Timestamp when the payload was created
	Timestamp time.Time `json:"timestamp"`
	// Webhook that generated this payload
	WebhookID string `json:"webhook_id"`
	// Event type that triggered this webhook
	EventType string `json:"event_type"`
	// Event severity
	Severity siem.Severity `json:"severity"`
	// Event category
	Category siem.EventCategory `json:"category"`
	// Event source
	Source string `json:"source"`
	// Human-readable message
	Message string `json:"message"`
	// The original event data
	Event *siem.Event `json:"event,omitempty"`
	// Custom data payload
	Data map[string]interface{} `json:"data,omitempty"`
	// HMAC signature (if configured)
	Signature string `json:"signature,omitempty"`
	// Signature timestamp
	SignatureTimestamp time.Time `json:"signature_timestamp,omitempty"`
	// Additional metadata
	Metadata map[string]string `json:"metadata,omitempty"`
}

type WebhookStats struct {
	// Total deliveries attempted
	TotalDeliveries int64 `json:"total_deliveries"`
	// Successful deliveries
	SuccessCount int64 `json:"success_count"`
	// Failed deliveries
	FailureCount int64 `json:"failure_count"`
	// Currently pending deliveries
	PendingCount int64 `json:"pending_count"`
	// Average delivery time
	AvgDeliveryTime time.Duration `json:"avg_delivery_time"`
	// Last successful delivery
	LastSuccess time.Time `json:"last_success,omitempty"`
	// Last failed delivery
	LastFailure time.Time `json:"last_failure,omitempty"`
	// Consecutive failures
	ConsecutiveFailures int `json:"consecutive_failures"`
	// Last error message
	LastError string `json:"last_error,omitempty"`
	// Events sent (events delivered)
	EventsSent int64 `json:"events_sent"`
	// Events dropped (due to filtering or errors)
	EventsDropped int64 `json:"events_dropped"`
}

type WebhookStatus string

type WorkerPoolConfig struct {
	// Number of workers
	Workers int `json:"workers"`
	// Queue size for pending deliveries
	QueueSize int `json:"queue_size"`
	// Shutdown timeout
	ShutdownTimeout time.Duration `json:"shutdown_timeout"`
}