module

type ActivityItem struct {
	Type        string
	Title       string
	Description string
	Timestamp   time.Time
}

type AssetStatsData struct {
	Total            int
	ByType           map[string]int
	BySubType        map[string]int
	ByStatus         map[string]int
	AverageRiskScore float64
}

type CreateReportScheduleInput struct {
	TenantID       string
	Name           string
	ReportType     string
	Format         string
	CronExpression string
	Timezone       string
	Recipients     []reportscheduledom.Recipient
	Options        map[string]any
	ActorID        string
}

type DashboardAllStats struct {
	Assets   AssetStatsData
	Findings FindingStatsData
	Repos    RepositoryStatsData
	Activity []ActivityItem
}

type DashboardService struct {
	// contains filtered or unexported fields
}

type DashboardStats struct {
	// Asset stats
	AssetCount       int
	AssetsByType     map[string]int
	AssetsBySubType  map[string]int
	AssetsByStatus   map[string]int
	AverageRiskScore float64

	// Finding stats
	FindingCount       int
	FindingsBySeverity map[string]int
	FindingsByStatus   map[string]int
	OverdueFindings    int
	AverageCVSS        float64

	// Repository stats (repositories are assets with type 'repository')
	RepositoryCount          int
	RepositoriesWithFindings int

	// Recent activity
	RecentActivity []ActivityItem

	// Finding trend (monthly breakdown by severity)
	FindingTrend []FindingTrendPoint
}

type DashboardStatsRepository interface {
	// GetAssetStats returns asset statistics for a tenant
	GetAssetStats(ctx context.Context, tenantID shared.ID) (AssetStatsData, error)
	// GetFindingStats returns finding statistics for a tenant
	GetFindingStats(ctx context.Context, tenantID shared.ID) (FindingStatsData, error)
	// GetRepositoryStats returns repository statistics for a tenant
	GetRepositoryStats(ctx context.Context, tenantID shared.ID) (RepositoryStatsData, error)
	// GetRecentActivity returns recent activity for a tenant
	GetRecentActivity(ctx context.Context, tenantID shared.ID, limit int) ([]ActivityItem, error)
	// GetFindingTrend returns monthly finding counts by severity for a tenant
	GetFindingTrend(ctx context.Context, tenantID shared.ID, months int) ([]FindingTrendPoint, error)
	// GetAllStats returns all dashboard stats in 2 optimized queries (replaces 10+ individual calls)
	GetAllStats(ctx context.Context, tenantID shared.ID) (*DashboardAllStats, error)

	// Global stats (not tenant-scoped) - deprecated, use filtered versions
	GetGlobalAssetStats(ctx context.Context) (AssetStatsData, error)
	GetGlobalFindingStats(ctx context.Context) (FindingStatsData, error)
	GetGlobalRepositoryStats(ctx context.Context) (RepositoryStatsData, error)
	GetGlobalRecentActivity(ctx context.Context, limit int) ([]ActivityItem, error)

	// MTTR & Trending
	GetMTTRMetrics(ctx context.Context, tenantID shared.ID) (map[string]float64, error)
	GetRiskVelocity(ctx context.Context, tenantID shared.ID, weeks int) ([]RiskVelocityPoint, error)

	// Filtered stats (by accessible tenant IDs) - for multi-tenant authorization
	GetFilteredAssetStats(ctx context.Context, tenantIDs []string) (AssetStatsData, error)
	GetFilteredFindingStats(ctx context.Context, tenantIDs []string) (FindingStatsData, error)
	GetFilteredRepositoryStats(ctx context.Context, tenantIDs []string) (RepositoryStatsData, error)
	GetFilteredRecentActivity(ctx context.Context, tenantIDs []string, limit int) ([]ActivityItem, error)

	// Data Quality Scorecard (RFC-005)
	GetDataQualityScorecard(ctx context.Context, tenantID shared.ID) (*DataQualityScorecard, error)
	// Risk Trend (RFC-005 Gap 4)
	GetRiskTrend(ctx context.Context, tenantID shared.ID, days int) ([]RiskTrendPoint, error)

	// Executive Summary (Phase 2)
	GetExecutiveSummary(ctx context.Context, tenantID shared.ID, days int) (*ExecutiveSummary, error)
	// MTTR Analytics (Phase 2)
	GetMTTRAnalytics(ctx context.Context, tenantID shared.ID, days int) (*MTTRAnalytics, error)
	// Process Metrics (Phase 2)
	GetProcessMetrics(ctx context.Context, tenantID shared.ID, days int) (*ProcessMetrics, error)
}

type DataQualityScorecard struct {
	AssetOwnershipPct  float64 `json:"asset_ownership_pct"`
	FindingEvidencePct float64 `json:"finding_evidence_pct"`
	MedianLastSeenDays float64 `json:"median_last_seen_days"`
	DeduplicationRate  float64 `json:"deduplication_rate"`
	TotalAssets        int     `json:"total_assets"`
	TotalFindings      int     `json:"total_findings"`
}

type DependencyEdgeOutput struct {
	From   string `json:"from"`             // Module that depends on the target.
	To     string `json:"to"`               // Target module required by From.
	Type   string `json:"type"`             // "hard" or "soft".
	Reason string `json:"reason,omitempty"` // Human-readable explanation.
}

type DependencyGraphOutput struct {
	Edges []DependencyEdgeOutput `json:"edges"`
}

type ExecutiveSummary struct {
	Period            string    `json:"period"`
	RiskScoreCurrent  float64   `json:"risk_score_current"`
	RiskScoreChange   float64   `json:"risk_score_change"`
	FindingsTotal     int       `json:"findings_total"`
	FindingsResolved  int       `json:"findings_resolved_period"`
	FindingsNew       int       `json:"findings_new_period"`
	P0Open            int       `json:"p0_open"`
	P0Resolved        int       `json:"p0_resolved_period"`
	P1Open            int       `json:"p1_open"`
	P1Resolved        int       `json:"p1_resolved_period"`
	SLACompliancePct  float64   `json:"sla_compliance_pct"`
	SLABreached       int       `json:"sla_breached"`
	MTTRCriticalHrs   float64   `json:"mttr_critical_hours"`
	MTTRHighHrs       float64   `json:"mttr_high_hours"`
	CrownJewelsAtRisk int       `json:"crown_jewels_at_risk"`
	RegressionCount   int       `json:"regression_count"`
	RegressionRatePct float64   `json:"regression_rate_pct"`
	TopRisks          []TopRisk `json:"top_risks"`
}

type FindingStatsData struct {
	Total       int
	BySeverity  map[string]int
	ByStatus    map[string]int
	Overdue     int
	AverageCVSS float64
}

type FindingTrendPoint struct {
	Date     string // "Jan", "Feb", etc.
	Critical int
	High     int
	Medium   int
	Low      int
	Info     int
}

type GetTenantEnabledModulesOutput struct {
	ModuleIDs  []string
	Modules    []*moduledom.Module
	SubModules map[string][]*moduledom.Module
}

type MTTRAnalytics struct {
	BySeverity      map[string]float64 `json:"by_severity"`
	ByPriorityClass map[string]float64 `json:"by_priority_class"`
	Overall         float64            `json:"overall_hours"`
	SampleSize      int                `json:"sample_size"`
}

type ModulePresetOutput struct {
	ID             string   `json:"id"`
	Name           string   `json:"name"`
	Description    string   `json:"description"`
	TargetPersona  string   `json:"target_persona"`
	Icon           string   `json:"icon"`
	KeyOutcomes    []string `json:"key_outcomes"`
	RecommendedFor []string `json:"recommended_for"`
	ModuleCount    int      `json:"module_count"` // resolved count incl. core + transitive
}

type ModuleRefOutput struct {
	ModuleID string `json:"module_id"`
	Name     string `json:"name"`
}

type ModuleRepository interface {
	ListAllModules(ctx context.Context) ([]*moduledom.Module, error)
	ListActiveModules(ctx context.Context) ([]*moduledom.Module, error)
	GetModuleByID(ctx context.Context, id string) (*moduledom.Module, error)
	GetSubModules(ctx context.Context, parentModuleID string) ([]*moduledom.Module, error)
	ListAllSubModules(ctx context.Context) (map[string][]*moduledom.Module, error)
}

type ModuleService struct {
	// contains filtered or unexported fields
}

type PresetDiffOutput struct {
	PresetID    string            `json:"preset_id"`
	PresetName  string            `json:"preset_name"`
	ToEnable    []ModuleRefOutput `json:"to_enable"`
	ToDisable   []ModuleRefOutput `json:"to_disable"`
	Unchanged   int               `json:"unchanged"`
	TotalAfter  int               `json:"total_after"`
	AuditNotice string            `json:"audit_notice,omitempty"`
}

type ProcessMetrics struct {
	ApprovalAvgHours     float64 `json:"approval_avg_hours"`
	ApprovalCount        int     `json:"approval_count"`
	RetestAvgHours       float64 `json:"retest_avg_hours"`
	RetestCount          int     `json:"retest_count"`
	StaleAssets          int     `json:"stale_assets"`
	StaleAssetsPct       float64 `json:"stale_assets_pct"`
	FindingsWithoutOwner int     `json:"findings_without_owner"`
	AvgTimeToAssignHours float64 `json:"avg_time_to_assign_hours"`
}

type ReportScheduleService struct {
	// contains filtered or unexported fields
}

type RepositoryStatsData struct {
	Total        int
	WithFindings int
}

type RiskTrendPoint struct {
	Date             string  `json:"date"`
	RiskScoreAvg     float64 `json:"risk_score_avg"`
	FindingsOpen     int     `json:"findings_open"`
	SLACompliancePct float64 `json:"sla_compliance_pct"`
	P0Open           int     `json:"p0_open"`
	P1Open           int     `json:"p1_open"`
	P2Open           int     `json:"p2_open"`
	P3Open           int     `json:"p3_open"`
}

type RiskVelocityPoint struct {
	Week          time.Time `json:"week"`
	NewCount      int       `json:"new_count"`
	ResolvedCount int       `json:"resolved_count"`
	Velocity      int       `json:"velocity"` // new - resolved (positive = losing ground)
}

type SubModuleInfo struct {
	Module    *moduledom.Module
	IsEnabled bool
}

type TenantModuleConfigOutput struct {
	Modules []*TenantModuleInfo
	Summary TenantModuleSummary
	// Warnings is a best-effort list of soft-dependency degradations
	// introduced by the MOST RECENT toggle. On GET the field is empty;
	// on PATCH it carries the warnings the service decided not to
	// escalate to a blocker. Handlers render these as toast/banner on
	// the Settings → Modules page.
	Warnings []ToggleIssue
}

type TenantModuleInfo struct {
	Module     *moduledom.Module
	IsEnabled  bool
	SubModules []*SubModuleInfo
}

type TenantModuleRepository interface {
	ListByTenant(ctx context.Context, tenantID shared.ID) ([]*moduledom.TenantModuleOverride, error)
	UpsertBatch(ctx context.Context, tenantID shared.ID, updates []moduledom.TenantModuleUpdate, updatedBy *shared.ID) error
	DeleteByTenant(ctx context.Context, tenantID shared.ID) error
}

type TenantModuleSummary struct {
	Total    int
	Enabled  int
	Disabled int
	Core     int
}

type ToggleError struct {
	// ModuleID is the one the caller tried to toggle.
	ModuleID string `json:"module_id"`
	// ModuleName is the display name (used in the top-level message).
	ModuleName string `json:"module_name"`
	// Action is "enable" or "disable" — tells the UI which flow the
	// error came from so it can phrase the dialog correctly.
	Action string `json:"action"`
	// Blockers are hard-dependent modules that stop the toggle. Each
	// entry is suitable for a bullet list in the UI.
	Blockers []ToggleIssue `json:"blockers,omitempty"`
	// Required is the inverse — when enabling, these modules must be
	// enabled first.
	Required []ToggleIssue `json:"required,omitempty"`
}

type ToggleIssue struct {
	// ModuleID is the dependent module (the one that would be broken
	// by the toggle). For blockers this is the module that stops the
	// toggle; for warnings this is the module that will degrade.
	ModuleID string `json:"module_id"`
	// Name is the human-readable display name from the modules row.
	Name string `json:"name"`
	// Reason is the short sentence from the dependency spec explaining
	// why the edge exists.
	Reason string `json:"reason"`
}

type TopRisk struct {
	FindingTitle  string   `json:"title"`
	Severity      string   `json:"severity"`
	PriorityClass string   `json:"priority_class"`
	AssetName     string   `json:"asset_name"`
	EPSSScore     *float64 `json:"epss_score"`
	IsInKEV       bool     `json:"is_in_kev"`
}

type ValidationIssues struct {
	// Blockers — HARD-dependent modules still enabled. Non-empty
	// means the toggle is rejected.
	Blockers []ToggleIssue `json:"blockers,omitempty"`
	// Warnings — SOFT-dependent modules still enabled. Non-empty
	// means the toggle proceeds but the UI should confirm with the
	// user first.
	Warnings []ToggleIssue `json:"warnings,omitempty"`
	// Required — when enabling, modules that must be enabled first.
	Required []ToggleIssue `json:"required,omitempty"`
}

type VersionService struct {
	// contains filtered or unexported fields
}

type WSBroadcaster interface {
	Broadcast(channel string, event any)
}