auth

type AddTokenToTeamRequest struct {
	TeamID int64 `json:"team_id"`
}

type AuthManager struct {
	// contains filtered or unexported fields
}

type CreateMeasurementPermissionRequest struct {
	MeasurementPattern string   `json:"measurement_pattern"`
	Permissions        []string `json:"permissions"`
}

type CreateOrganizationRequest struct {
	Name        string `json:"name"`
	Description string `json:"description,omitempty"`
}

type CreateRoleRequest struct {
	DatabasePattern string   `json:"database_pattern"`
	Permissions     []string `json:"permissions"`
}

type CreateTeamRequest struct {
	Name        string `json:"name"`
	Description string `json:"description,omitempty"`
}

type EffectivePermission struct {
	Database    string   `json:"database"`
	Measurement string   `json:"measurement,omitempty"`
	Permissions []string `json:"permissions"`
	Source      string   `json:"source"` // "token" (OSS) or "rbac" (Enterprise)
}

type MeasurementPermission struct {
	ID                 int64     `json:"id"`
	RoleID             int64     `json:"role_id"`
	MeasurementPattern string    `json:"measurement_pattern"` // e.g., "metrics_*", "events_*"
	Permissions        []string  `json:"permissions"`
	CreatedAt          time.Time `json:"created_at"`
}

type MiddlewareConfig struct {
	// AuthManager instance
	AuthManager *AuthManager

	// Routes that don't require authentication
	PublicRoutes []string

	// Route prefixes that don't require authentication
	PublicPrefixes []string

	// Required permission for protected routes (empty means any valid token)
	RequiredPermission string

	// Skip authentication entirely (for development/testing)
	Skip bool
}

type Organization struct {
	ID          int64     `json:"id"`
	Name        string    `json:"name"`
	Description string    `json:"description,omitempty"`
	CreatedAt   time.Time `json:"created_at"`
	UpdatedAt   time.Time `json:"updated_at"`
	Enabled     bool      `json:"enabled"`
	Teams       []Team    `json:"teams,omitempty"` // Populated on request
}

type PermissionCheckRequest struct {
	TokenInfo   *TokenInfo
	Database    string
	Measurement string
	Permission  string // "read", "write", "delete", "admin"
}

type PermissionCheckResult struct {
	Allowed bool   `json:"allowed"`
	Source  string `json:"source"` // "token", "rbac", or "denied"
	Reason  string `json:"reason,omitempty"`
}

type RBACManager struct {
	// contains filtered or unexported fields
}

type RBACManagerConfig struct {
	DB            *sql.DB
	LicenseClient *license.Client
	Logger        zerolog.Logger
	CacheTTL      time.Duration // TTL for permission cache (default: 30s)
	MaxCacheSize  int           // Max entries per cache (default: 10000)
}

type Role struct {
	ID                     int64                   `json:"id"`
	TeamID                 int64                   `json:"team_id"`
	DatabasePattern        string                  `json:"database_pattern"` // e.g., "production", "*", "analytics_*"
	Permissions            []string                `json:"permissions"`      // ["read", "write", "delete"]
	CreatedAt              time.Time               `json:"created_at"`
	MeasurementPermissions []MeasurementPermission `json:"measurement_permissions,omitempty"` // Populated on request
}

type Team struct {
	ID             int64     `json:"id"`
	OrganizationID int64     `json:"organization_id"`
	Name           string    `json:"name"`
	Description    string    `json:"description,omitempty"`
	CreatedAt      time.Time `json:"created_at"`
	UpdatedAt      time.Time `json:"updated_at"`
	Enabled        bool      `json:"enabled"`
	Roles          []Role    `json:"roles,omitempty"` // Populated on request
}

type TokenInfo struct {
	ID          int64      `json:"id"`
	Name        string     `json:"name"`
	Description string     `json:"description,omitempty"`
	Permissions []string   `json:"permissions"`
	CreatedAt   time.Time  `json:"created_at"`
	LastUsedAt  time.Time  `json:"last_used_at,omitempty"`
	Enabled     bool       `json:"enabled"`
	ExpiresAt   *time.Time `json:"expires_at"`
}

type TokenMembership struct {
	ID        int64     `json:"id"`
	TokenID   int64     `json:"token_id"`
	TeamID    int64     `json:"team_id"`
	CreatedAt time.Time `json:"created_at"`
}

type UpdateOrganizationRequest struct {
	Name        *string `json:"name,omitempty"`
	Description *string `json:"description,omitempty"`
	Enabled     *bool   `json:"enabled,omitempty"`
}

type UpdateRoleRequest struct {
	DatabasePattern *string  `json:"database_pattern,omitempty"`
	Permissions     []string `json:"permissions,omitempty"`
}

type UpdateTeamRequest struct {
	Name        *string `json:"name,omitempty"`
	Description *string `json:"description,omitempty"`
	Enabled     *bool   `json:"enabled,omitempty"`
}