audit

type QueryOptions struct {
	// Time range
	StartTime *time.Time
	EndTime   *time.Time

	// Filters
	AgentID   string
	SessionID string
	Method    string
	Tool      string
	Allowed   *bool

	// Pagination
	Limit  int
	Offset int

	// Ordering
	OrderBy   string // "timestamp", "agent_id", etc.
	OrderDesc bool
}

type Record struct {
	// Identifiers
	ID        int64  `json:"id"`
	RequestID string `json:"request_id"`
	SessionID string `json:"session_id"`

	// Timing
	Timestamp time.Time `json:"timestamp"`
	Latency   float64   `json:"latency_ms"`

	// Agent info
	AgentID      string `json:"agent_id"`
	AgentName    string `json:"agent_name,omitempty"`
	Capabilities string `json:"capabilities,omitempty"` // JSON array as string

	// Request info
	Method      string `json:"method"`
	Tool        string `json:"tool,omitempty"`
	ResourceURI string `json:"resource_uri,omitempty"`
	Arguments   string `json:"arguments,omitempty"` // JSON as string

	// Identity info
	IdentityVerified bool   `json:"identity_verified"`
	DID              string `json:"did,omitempty"`

	// Policy decision
	Allowed     bool   `json:"allowed"`
	MatchedRule string `json:"matched_rule,omitempty"`
	Violations  string `json:"violations,omitempty"` // JSON array as string
	PolicyMode  string `json:"policy_mode"`

	// Environment
	SourceIP    string `json:"source_ip,omitempty"`
	Environment string `json:"environment,omitempty"`
}

type RecordBuilder struct {
	// contains filtered or unexported fields
}

type Stats struct {
	TotalRequests   int64   `json:"total_requests"`
	AllowedRequests int64   `json:"allowed_requests"`
	DeniedRequests  int64   `json:"denied_requests"`
	UniqueAgents    int64   `json:"unique_agents"`
	UniqueSessions  int64   `json:"unique_sessions"`
	AvgLatencyMs    float64 `json:"avg_latency_ms"`
}

type Store struct {
	// contains filtered or unexported fields
}

type StoreConfig struct {
	DBPath string // Path to SQLite file, ":memory:" for in-memory
}

type Writer struct {
	// contains filtered or unexported fields
}

type WriterConfig struct {
	BufferSize    int           // Max records to buffer before flush
	FlushInterval time.Duration // How often to flush
}

type WriterStats struct {
	Written    int64
	Dropped    int64
	Flushes    int64
	BufferSize int
}