config

type Collection struct {
	Interval          time.Duration `yaml:"interval"`
	Timeout           time.Duration `yaml:"timeout"`
	Lookback          time.Duration `yaml:"lookback"`
	AssetAgeThreshold time.Duration `yaml:"assetAgeThreshold"`
	PerJobActivities  bool          `yaml:"perJobActivities"`
}

type Compliance struct {
	Grace     time.Duration        `yaml:"grace"`
	Defaults  ComplianceTarget     `yaml:"defaults"`
	Overrides []ComplianceOverride `yaml:"overrides"`
}

type ComplianceOverride struct {
	Tenant           string `yaml:"tenant"`
	AssetType        string `yaml:"assetType"`
	PolicyName       string `yaml:"policyName"`
	ComplianceTarget `yaml:",inline"`
}

type ComplianceTarget struct {
	RPOHours      int `yaml:"rpoHours"`
	RetentionDays int `yaml:"retentionDays"`
	MinCopies     int `yaml:"minCopies"`
}

type Config struct {
	Server     ServerHTTP `yaml:"server"`
	Collection Collection `yaml:"collection"`
	OTel       OTel       `yaml:"otel"`
	Servers    []Server   `yaml:"servers"`
}

type OTel struct {
	Enabled  bool   `yaml:"enabled"`
	Endpoint string `yaml:"endpoint"`
	Insecure bool   `yaml:"insecure"`
	Interval string `yaml:"interval"`
}

type ReportConfig struct {
	Database struct {
		DSN string `yaml:"dsn"`
	} `yaml:"database"`
	Capture struct {
		Interval      time.Duration `yaml:"interval"`
		Timeout       time.Duration `yaml:"timeout"`
		RetentionDays int           `yaml:"retentionDays"`
	} `yaml:"capture"`
	Servers    []ReportServer `yaml:"servers"`
	Compliance Compliance     `yaml:"compliance"`
	Retention  Retention      `yaml:"retention"`
	Report     ReportOutput   `yaml:"report"`
	SMTP       SMTP           `yaml:"smtp"`
	Schedules  []Schedule     `yaml:"schedules"`
}

type ReportOutput struct {
	Listen    string        `yaml:"listen"`    // empty = CLI-only (no HTTP endpoint)
	AuthToken string        `yaml:"authToken"` // optional bearer; empty = no auth (localhost posture)
	BrandName string        `yaml:"brandName"`
	Tokens    []ReportToken `yaml:"tokens"`
}

type ReportServer struct {
	Name               string `yaml:"name"`
	Tenant             string `yaml:"tenant"`
	Host               string `yaml:"host"`
	Port               int    `yaml:"port"` // defaults to 8443
	Username           string `yaml:"username"`
	Password           string `yaml:"password"`
	PasswordFile       string `yaml:"passwordFile"`
	InsecureSkipVerify bool   `yaml:"insecureSkipVerify"`
}

type ReportToken struct {
	Token   string   `yaml:"token"`
	Tenants []string `yaml:"tenants"`
}

type Retention struct {
	DefaultDays int                 `yaml:"defaultDays"`
	Overrides   []RetentionOverride `yaml:"overrides"`
}

type RetentionOverride struct {
	Tenant string `yaml:"tenant"`
	Days   int    `yaml:"days"`
}

type SMTP struct {
	Host     string `yaml:"host"`
	Port     int    `yaml:"port"` // defaults to 587
	From     string `yaml:"from"`
	Username string `yaml:"username"`
	Password string `yaml:"password"`
	StartTLS bool   `yaml:"starttls"`
}

type Schedule struct {
	Tenant     string   `yaml:"tenant"`
	Cadence    string   `yaml:"cadence"` // daily | weekly | monthly
	Weekday    string   `yaml:"weekday"` // weekly only (Mon..Sun)
	Day        int      `yaml:"day"`     // monthly only (1..31, clamped to month length)
	Hour       int      `yaml:"hour"`    // 0..23
	Recipients []string `yaml:"recipients"`
}

type Server struct {
	Name               string `yaml:"name"`
	Host               string `yaml:"host"`
	Port               int    `yaml:"port"` // defaults to 8443
	Username           string `yaml:"username"`
	Password           string `yaml:"password"`
	PasswordFile       string `yaml:"passwordFile"`
	InsecureSkipVerify bool   `yaml:"insecureSkipVerify"`
}

type ServerHTTP struct {
	Host    string `yaml:"host"`
	Port    string `yaml:"port"`
	URI     string `yaml:"uri"`
	LogName string `yaml:"logName"`
}

type Watcher struct {
	// contains filtered or unexported fields
}