audit

type Action string

type AuditLogger struct {
	// contains filtered or unexported fields
}

type AuditStatistics struct {
	TotalEvents   int64     `json:"total_events"`
	TotalFiles    int       `json:"total_files"`
	TotalSize     int64     `json:"total_size_bytes"`
	BytesWritten  int64     `json:"bytes_written"`
	CurrentFile   string    `json:"current_file"`
	LastRotation  time.Time `json:"last_rotation"`
	RetentionDays int       `json:"retention_days"`
}

type Event struct {
	ID           string         `json:"id"`
	Timestamp    time.Time      `json:"timestamp"`
	TenantID     string         `json:"tenant_id,omitempty"` // Multi-tenancy: empty defaults to "default"
	UserID       string         `json:"user_id,omitempty"`
	Username     string         `json:"username,omitempty"`
	Action       Action         `json:"action"`
	ResourceType ResourceType   `json:"resource_type"`
	ResourceID   string         `json:"resource_id,omitempty"`
	Status       Status         `json:"status"`
	ErrorMessage string         `json:"error_message,omitempty"`
	IPAddress    string         `json:"ip_address,omitempty"`
	UserAgent    string         `json:"user_agent,omitempty"`
	Metadata     map[string]any `json:"metadata,omitempty"`
}

type ExportFormat string

type ExportOptions struct {
	Format       ExportFormat
	StartTime    *time.Time
	EndTime      *time.Time
	Severity     Severity
	Action       Action
	Username     string
	ResourceType ResourceType
	Limit        int  // Maximum number of events to export (0 = unlimited)
	Pretty       bool // Pretty-print JSON output
}

type Exporter struct {
	// contains filtered or unexported fields
}

type Filter struct {
	TenantID     string // Filter by tenant (empty = all tenants)
	UserID       string
	Username     string
	Action       Action
	ResourceType ResourceType
	ResourceID   string
	Status       Status
	StartTime    *time.Time
	EndTime      *time.Time
}

type Logger interface {
	// Log records an audit event
	Log(event *Event) error

	// GetEventCount returns the number of events logged
	GetEventCount() int64
}

type PersistentAuditConfig struct {
	LogDir        string        // Directory to store audit logs
	RotationSize  int64         // Rotate log file when it exceeds this size (bytes)
	RotationTime  time.Duration // Rotate log file after this duration
	Compress      bool          // Compress rotated log files
	RetentionDays int           // Delete logs older than this many days
}

type PersistentAuditLogger struct {
	// contains filtered or unexported fields
}

type PersistentEvent struct {
	*Event
	Severity     Severity `json:"severity"`
	PreviousHash string   `json:"previous_hash,omitempty"` // For tamper detection
	EventHash    string   `json:"event_hash"`              // Hash of this event
}

type ReportStatistics struct {
	TotalEvents  int
	BySeverity   map[Severity]int
	ByAction     map[Action]int
	ByStatus     map[Status]int
	TopUsers     []UserStat
	TopResources []ResourceStat
}

type ResourceStat struct {
	ResourceType ResourceType
	ResourceID   string
	Count        int
}

type ResourceType string

type Severity string

type Status string

type UserStat struct {
	Username string
	Count    int
}