trail

type AuditLog struct {
	// Unique identifier for the audit log
	ID string `json:"id"`

	// Time when the event occurred
	Timestamp time.Time `json:"timestamp"`

	// User who performed the action
	UserID string `json:"user_id,omitempty"`

	// Username of the user who performed the action
	Username string `json:"username,omitempty"`

	// Type of operation performed
	Operation string `json:"operation"`

	// Resource type that was acted upon
	ResourceType string `json:"resource_type"`

	// Specific resource identifier
	ResourceID string `json:"resource_id,omitempty"`

	// Human-readable description of the event
	Description string `json:"description"`

	// IP address where the action originated
	IPAddress string `json:"ip_address,omitempty"`

	// Status of the operation (success, failure, etc.)
	Status string `json:"status"`

	// Additional details about the operation
	Details map[string]interface{} `json:"details,omitempty"`

	// Previous state of the resource (for update operations)
	PreviousState map[string]interface{} `json:"previous_state,omitempty"`

	// New state of the resource (for update operations)
	NewState map[string]interface{} `json:"new_state,omitempty"`

	// Changes made during the operation
	Changes map[string]interface{} `json:"changes,omitempty"`

	// Verification information (for verification operations)
	Verification *VerificationInfo `json:"verification,omitempty"`

	// Compliance metadata
	Compliance *ComplianceInfo `json:"compliance,omitempty"`

	// Digital signature for tamper evidence
	Signature string `json:"signature,omitempty"`

	// Hash of the previous log entry (for chain of custody)
	PreviousHash string `json:"previous_hash,omitempty"`
}

type AuditLogFilter func(*AuditLog) bool

type AuditTrailConfig struct {
	// Whether to enable the audit trail
	Enabled bool `json:"enabled"`

	// Directory where audit logs are stored
	LogDirectory string `json:"log_directory"`

	// Whether to sign audit logs for tamper evidence
	SignLogs bool `json:"sign_logs"`

	// Secret key for signing logs
	SigningKey string `json:"signing_key,omitempty"`

	// Whether to maintain a hash chain for logs
	EnableHashChain bool `json:"enable_hash_chain"`

	// Whether to compress log files
	CompressLogs bool `json:"compress_logs"`

	// Maximum size of a single log file in MB
	MaxLogFileSize int `json:"max_log_file_size"`

	// Maximum number of log files to keep
	MaxLogFiles int `json:"max_log_files"`

	// Log retention period in days
	RetentionDays int `json:"retention_days"`

	// Fields to redact from logs
	RedactFields []string `json:"redact_fields"`

	// Whether to include previous and new state in logs
	IncludeState bool `json:"include_state"`

	// Whether to include compliance information
	IncludeCompliance bool `json:"include_compliance"`
}

type AuditTrailManager struct {
	// contains filtered or unexported fields
}

type ComplianceInfo struct {
	// Compliance frameworks applicable to this operation
	Frameworks []string `json:"frameworks,omitempty"`

	// Specific compliance controls addressed
	Controls []string `json:"controls,omitempty"`

	// Retention period for this log entry
	RetentionPeriod string `json:"retention_period,omitempty"`

	// Classification of the data involved
	DataClassification string `json:"data_classification,omitempty"`

	// Whether this operation requires approval
	RequiresApproval bool `json:"requires_approval,omitempty"`

	// Approval status if approval is required
	ApprovalStatus string `json:"approval_status,omitempty"`

	// Entity that approved the operation
	ApprovedBy string `json:"approved_by,omitempty"`

	// Time when the operation was approved
	ApprovedAt time.Time `json:"approved_at,omitempty"`
}

type FileLogger struct {
	// contains filtered or unexported fields
}

type InMemoryLogger struct {
	// contains filtered or unexported fields
}

type LineScanner struct {
	// contains filtered or unexported fields
}

type LogPurger interface {
	// PurgeLogs purges logs older than the specified time
	PurgeLogs(ctx context.Context, olderThan time.Time) error
}

type Logger interface {
	// Log logs an audit log entry
	Log(ctx context.Context, log *AuditLog) error

	// Query queries audit logs based on filters
	Query(ctx context.Context, filters map[string]interface{}, startTime, endTime time.Time) ([]*AuditLog, error)

	// GetLog retrieves a specific audit log by ID
	GetLog(ctx context.Context, id string) (*AuditLog, error)
}

type SyslogLogger struct {
	// contains filtered or unexported fields
}

type VerificationInfo struct {
	// Type of verification performed
	VerificationType string `json:"verification_type"`

	// Entity that performed the verification
	VerifiedBy string `json:"verified_by"`

	// Time when the verification was performed
	VerifiedAt time.Time `json:"verified_at"`

	// Result of the verification
	Result string `json:"result"`

	// Additional verification metadata
	Metadata map[string]interface{} `json:"metadata,omitempty"`
}