attack

type AssetChange struct {
	Type      string    `json:"type"` // added, removed, changed
	AssetName string    `json:"asset_name"`
	AssetType string    `json:"asset_type"`
	Timestamp time.Time `json:"timestamp"`
}

type AssetPathScore struct {
	// AssetID is the UUID of the asset.
	AssetID string `json:"asset_id"`
	// Name is the human-readable name of the asset.
	Name string `json:"name"`
	// AssetType is the type of the asset (e.g., "host", "application").
	AssetType string `json:"asset_type"`
	// Exposure is the asset's configured exposure level.
	Exposure string `json:"exposure"`
	// Criticality is the asset's criticality level.
	Criticality string `json:"criticality"`
	// RiskScore is the asset-level risk score (1-10).
	RiskScore int `json:"risk_score"`
	// IsCrownJewel marks high-value target assets.
	IsCrownJewel bool `json:"is_crown_jewel"`
	// FindingCount is the number of open findings on this asset.
	FindingCount int `json:"finding_count"`

	// ReachableFrom is the count of distinct public entry points that can
	// reach this asset following attack-path relationship types.
	ReachableFrom int `json:"reachable_from"`
	// PathScore is the composite attack path score:
	//   (reachable_from * impact_weight) where impact_weight = risk_score * criticality_multiplier
	// Higher = more urgent to remediate.
	PathScore float64 `json:"path_score"`
	// IsEntryPoint is true when this asset is itself a public entry point.
	IsEntryPoint bool `json:"is_entry_point"`
	// IsProtected is true when the asset has at least one "protected_by" or "monitors" relationship.
	IsProtected bool `json:"is_protected"`
}

type AssetTypeBreakdown struct {
	Type    string `json:"type"`
	Total   int    `json:"total"`
	Exposed int    `json:"exposed"`
}

type ExposedService struct {
	ID           string    `json:"id"`
	Name         string    `json:"name"`
	Type         string    `json:"type"`
	Port         int       `json:"port,omitempty"`
	Exposure     string    `json:"exposure"`
	Criticality  string    `json:"criticality"`
	FindingCount int       `json:"finding_count"`
	LastSeen     time.Time `json:"last_seen"`
}

type PathScoringResult struct {
	Summary PathSummary `json:"summary"`
	// TopAssets is the ranked list of assets by PathScore (descending), limited to 50.
	TopAssets []AssetPathScore `json:"top_assets"`
}

type PathSummary struct {
	// TotalPaths is the total number of directed attack paths discovered
	// (entry point → reachable asset pairs).
	TotalPaths int `json:"total_paths"`
	// EntryPoints is the count of public-exposure assets that act as entry points.
	EntryPoints int `json:"entry_points"`
	// ReachableAssets is the count of non-public assets reachable from at least one entry point.
	ReachableAssets int `json:"reachable_assets"`
	// MaxDepth is the longest BFS chain found.
	MaxDepth int `json:"max_depth"`
	// CriticalReachable is the count of critical/high assets reachable from entry points.
	CriticalReachable int `json:"critical_reachable"`
	// CrownJewelsAtRisk is the count of crown-jewel assets reachable from entry points.
	CrownJewelsAtRisk int `json:"crown_jewels_at_risk"`
	// HasRelationshipData indicates whether the tenant has any relationship data at all.
	HasRelationshipData bool `json:"has_relationship_data"`
}

type SurfaceRepository interface {
	// GetStats returns attack surface statistics for a tenant
	GetStats(ctx context.Context, tenantID shared.ID) (*SurfaceStatsData, error)
	// GetExposedServices returns top exposed services/assets
	GetExposedServices(ctx context.Context, tenantID shared.ID, limit int) ([]ExposedService, error)
	// GetRecentChanges returns recent asset changes
	GetRecentChanges(ctx context.Context, tenantID shared.ID, limit int) ([]AssetChange, error)
	// GetStatsWithTrends returns stats with week-over-week comparison
	GetStatsWithTrends(ctx context.Context, tenantID shared.ID) (*SurfaceStatsData, error)
}

type SurfaceService struct {
	// contains filtered or unexported fields
}

type SurfaceStats struct {
	// Summary stats
	TotalAssets       int     `json:"total_assets"`
	ExposedServices   int     `json:"exposed_services"`
	CriticalExposures int     `json:"critical_exposures"`
	RiskScore         float64 `json:"risk_score"`

	// Trends (week-over-week)
	TotalAssetsChange       int `json:"total_assets_change"`
	ExposedServicesChange   int `json:"exposed_services_change"`
	CriticalExposuresChange int `json:"critical_exposures_change"`

	// Asset breakdown by type with exposed count
	AssetBreakdown []AssetTypeBreakdown `json:"asset_breakdown"`

	// Top exposed services
	ExposedServicesList []ExposedService `json:"exposed_services_list"`

	// Recent changes
	RecentChanges []AssetChange `json:"recent_changes"`
}

type SurfaceStatsData struct {
	TotalAssets             int
	ExposedServices         int
	CriticalExposures       int
	AverageRiskScore        float64
	TotalAssetsChange       int
	ExposedServicesChange   int
	CriticalExposuresChange int
	ByType                  map[string]int
	ExposedByType           map[string]int
}