audit

type AlertChannel struct {
	// Type of alert channel (email, sms, webhook, etc.)
	Type string `json:"type"`

	// Configuration for the alert channel
	Config map[string]interface{} `json:"config"`
}

type AlertRule struct {
	// Unique identifier for the rule
	ID string `json:"id"`

	// Human-readable name for the rule
	Name string `json:"name"`

	// Description of the rule
	Description string `json:"description"`

	// Minimum severity level to trigger the alert
	MinSeverity common.AuditSeverity `json:"min_severity"`

	// Actions that should trigger the alert
	Actions []common.AuditAction `json:"actions"`

	// Resources that should trigger the alert
	Resources []string `json:"resources"`

	// Alert notification channels
	Channels []AlertChannel `json:"channels"`

	// Whether the rule is enabled
	Enabled bool `json:"enabled"`

	// Cooldown period between alerts in seconds
	CooldownSeconds int `json:"cooldown_seconds"`
	// contains filtered or unexported fields
}

type AuditConfig struct {
	// Whether to enable audit logging
	Enabled bool `json:"enabled"`

	// Minimum severity level to log
	MinSeverity common.AuditSeverity `json:"min_severity"`

	// File path for audit logs
	LogFilePath string `json:"log_file_path"`

	// Whether to log to syslog
	EnableSyslog bool `json:"enable_syslog"`

	// Whether to log to database
	EnableDatabase bool `json:"enable_database"`

	// Database connection string
	DatabaseURL string `json:"database_url"`

	// Log retention period in days
	RetentionDays int `json:"retention_days"`

	// Whether to enable real-time alerting
	EnableAlerts bool `json:"enable_alerts"`

	// Whether to encrypt audit logs
	EncryptLogs bool `json:"encrypt_logs"`

	// Encryption key for audit logs (if encryption is enabled)
	EncryptionKey string `json:"encryption_key,omitempty"`

	// Whether to sign audit logs for integrity verification
	SignLogs bool `json:"sign_logs"`

	// Signing key ID for audit logs (if signing is enabled)
	SigningKeyID string `json:"signing_key_id,omitempty"`

	// Whether to include sensitive data in audit logs
	IncludeSensitiveData bool `json:"include_sensitive_data"`

	// List of fields to redact from audit logs
	RedactFields []string `json:"redact_fields"`

	// Whether to compress audit logs
	CompressLogs bool `json:"compress_logs"`

	// Maximum size of a single audit log file in MB
	MaxLogFileSize int `json:"max_log_file_size"`

	// Maximum number of audit log files to keep
	MaxLogFiles int `json:"max_log_files"`
}

type AuditEvent struct {
	// Unique identifier for the audit event
	ID string `json:"id"`

	// Time when the event occurred
	Timestamp time.Time `json:"timestamp"`

	// User who performed the action
	UserID string `json:"user_id,omitempty"`

	// Username of the user who performed the action
	Username string `json:"username,omitempty"`

	// Type of action performed
	Action common.AuditAction `json:"action"`

	// Resource type that was acted upon
	Resource string `json:"resource"`

	// Specific resource identifier
	ResourceID string `json:"resource_id,omitempty"`

	// Human-readable description of the event
	Description string `json:"description"`

	// IP address where the action originated
	IPAddress string `json:"ip_address,omitempty"`

	// User agent of the client
	UserAgent string `json:"user_agent,omitempty"`

	// Severity level of the event
	Severity common.AuditSeverity `json:"severity"`

	// Status of the action (success, failure, etc.)
	Status string `json:"status"`

	// Session identifier
	SessionID string `json:"session_id,omitempty"`

	// Additional metadata about the event
	Metadata map[string]interface{} `json:"metadata,omitempty"`

	// Changes made during the event (for update operations)
	Changes map[string]interface{} `json:"changes,omitempty"`

	// Request ID for correlating multiple events in a single request
	RequestID string `json:"request_id,omitempty"`

	// Duration of the operation in milliseconds
	DurationMs int64 `json:"duration_ms,omitempty"`

	// Whether the event was generated by the system
	SystemGenerated bool `json:"system_generated,omitempty"`

	// Tags for categorizing and filtering events
	Tags []string `json:"tags,omitempty"`
}

type AuditLogger interface {
	// LogAudit logs an audit event
	LogAudit(ctx context.Context, event *AuditEvent) error

	// QueryAuditLogs queries audit logs based on filters
	QueryAuditLogs(ctx context.Context, filter *AuditQueryFilter) ([]*AuditEvent, error)

	// GetAuditLog retrieves a specific audit log by ID
	GetAuditLog(ctx context.Context, id string) (*AuditEvent, error)
}

type AuditManager struct {
	// contains filtered or unexported fields
}

type AuditQueryFilter struct {
	// User ID to filter by
	UserID string `json:"user_id,omitempty"`

	// Username to filter by
	Username string `json:"username,omitempty"`

	// Action to filter by
	Action common.AuditAction `json:"action,omitempty"`

	// Resource type to filter by
	Resource string `json:"resource,omitempty"`

	// Resource ID to filter by
	ResourceID string `json:"resource_id,omitempty"`

	// IP address to filter by
	IPAddress string `json:"ip_address,omitempty"`

	// Minimum severity level to include
	MinSeverity common.AuditSeverity `json:"min_severity,omitempty"`

	// Maximum severity level to include
	MaxSeverity common.AuditSeverity `json:"max_severity,omitempty"`

	// Status to filter by
	Status string `json:"status,omitempty"`

	// Session ID to filter by
	SessionID string `json:"session_id,omitempty"`

	// Start time for the query range
	StartTime time.Time `json:"start_time,omitempty"`

	// End time for the query range
	EndTime time.Time `json:"end_time,omitempty"`

	// Maximum number of results to return
	Limit int `json:"limit,omitempty"`

	// Number of results to skip
	Offset int `json:"offset,omitempty"`

	// Field to sort by
	SortBy string `json:"sort_by,omitempty"`

	// Sort order (asc or desc)
	SortOrder string `json:"sort_order,omitempty"`

	// Tags to filter by (must match all)
	Tags []string `json:"tags,omitempty"`

	// Request ID to filter by
	RequestID string `json:"request_id,omitempty"`

	// Whether to include system-generated events
	IncludeSystemGenerated bool `json:"include_system_generated,omitempty"`

	// Full-text search query
	Query string `json:"query,omitempty"`
}

type DatabaseAuditLogger struct {
	// contains filtered or unexported fields
}

type FileAuditLogger struct {
	// contains filtered or unexported fields
}

type InMemoryAuditLogger struct {
	// contains filtered or unexported fields
}

type SyslogAuditLogger struct {
	// contains filtered or unexported fields
}