config

type Collection struct {
	Interval          time.Duration `yaml:"interval"`
	Timeout           time.Duration `yaml:"timeout"`
	Lookback          time.Duration `yaml:"lookback"`
	AssetAgeThreshold time.Duration `yaml:"assetAgeThreshold"`
	PerJobActivities  bool          `yaml:"perJobActivities"`
}

type Compliance struct {
	Grace     time.Duration        `yaml:"grace"`
	Defaults  ComplianceTarget     `yaml:"defaults"`
	Overrides []ComplianceOverride `yaml:"overrides"`
}

type ComplianceOverride struct {
	Tenant           string `yaml:"tenant"`
	AssetType        string `yaml:"assetType"`
	PolicyName       string `yaml:"policyName"`
	ComplianceTarget `yaml:",inline"`
}

type ComplianceTarget struct {
	RPOHours      int `yaml:"rpoHours"`
	RetentionDays int `yaml:"retentionDays"`
	MinCopies     int `yaml:"minCopies"`
}

type Config struct {
	Server     ServerHTTP `yaml:"server"`
	Collection Collection `yaml:"collection"`
	OTel       OTel       `yaml:"otel"`
	Servers    []Server   `yaml:"servers"`
}

type OTel struct {
	Enabled  bool   `yaml:"enabled"`
	Endpoint string `yaml:"endpoint"`
	Insecure bool   `yaml:"insecure"`
	Interval string `yaml:"interval"`
}

type ReportConfig struct {
	Database struct {
		DSN string `yaml:"dsn"`
	} `yaml:"database"`
	Capture struct {
		Interval      time.Duration `yaml:"interval"`
		Timeout       time.Duration `yaml:"timeout"`
		RetentionDays int           `yaml:"retentionDays"`
	} `yaml:"capture"`
	Servers    []ReportServer `yaml:"servers"`
	Compliance Compliance     `yaml:"compliance"`
	Report     ReportOutput   `yaml:"report"`
}

type ReportOutput struct {
	Listen    string `yaml:"listen"`    // empty = CLI-only (no HTTP endpoint)
	AuthToken string `yaml:"authToken"` // optional bearer; empty = no auth (localhost posture)
	BrandName string `yaml:"brandName"`
}

type ReportServer struct {
	Name               string `yaml:"name"`
	Tenant             string `yaml:"tenant"`
	Host               string `yaml:"host"`
	Port               int    `yaml:"port"` // defaults to 8443
	Username           string `yaml:"username"`
	Password           string `yaml:"password"`
	PasswordFile       string `yaml:"passwordFile"`
	InsecureSkipVerify bool   `yaml:"insecureSkipVerify"`
}

type Server struct {
	Name               string `yaml:"name"`
	Host               string `yaml:"host"`
	Port               int    `yaml:"port"` // defaults to 8443
	Username           string `yaml:"username"`
	Password           string `yaml:"password"`
	PasswordFile       string `yaml:"passwordFile"`
	InsecureSkipVerify bool   `yaml:"insecureSkipVerify"`
}

type ServerHTTP struct {
	Host    string `yaml:"host"`
	Port    string `yaml:"port"`
	URI     string `yaml:"uri"`
	LogName string `yaml:"logName"`
}

type Watcher struct {
	// contains filtered or unexported fields
}