config

type Config struct {
	Server      ServerConfig      `yaml:"server"`
	SOC         SOCConfig         `yaml:"soc"`
	RBAC        RBACConfig        `yaml:"rbac"`
	Webhooks    []WebhookConfig   `yaml:"webhooks"`
	ThreatIntel ThreatIntelConfig `yaml:"threat_intel"`
	Sovereign   SovereignConfig   `yaml:"sovereign"`
	P2P         P2PConfig         `yaml:"p2p"`
	Logging     LoggingConfig     `yaml:"logging"`
}

type FeedConfig struct {
	Name    string `yaml:"name"`
	URL     string `yaml:"url"`
	Format  string `yaml:"format"` // stix, csv, json
	Enabled bool   `yaml:"enabled"`
}

type KeyEntry struct {
	Key  string `yaml:"key"`
	Role string `yaml:"role"`
	Name string `yaml:"name"`
}

type LoggingConfig struct {
	Level      string `yaml:"level"`  // debug, info, warn, error
	Format     string `yaml:"format"` // json, text
	AccessLog  bool   `yaml:"access_log"`
	AuditLog   bool   `yaml:"audit_log"`
	OutputFile string `yaml:"output_file"`
}

type P2PConfig struct {
	Enabled    bool         `yaml:"enabled"`
	ListenAddr string       `yaml:"listen_addr"`
	Peers      []PeerConfig `yaml:"peers"`
}

type PeerConfig struct {
	ID       string `yaml:"id"`
	Name     string `yaml:"name"`
	Endpoint string `yaml:"endpoint"`
	Trust    string `yaml:"trust"` // full, partial, readonly
}

type RBACConfig struct {
	Enabled bool       `yaml:"enabled"`
	Keys    []KeyEntry `yaml:"keys"`
}

type SOCConfig struct {
	DataDir          string  `yaml:"data_dir"`
	MaxEventsPerHour int     `yaml:"max_events_per_hour"`
	ClusterEnabled   bool    `yaml:"cluster_enabled"`
	ClusterEps       float64 `yaml:"cluster_eps"`
	ClusterMinPts    int     `yaml:"cluster_min_pts"`
	KillChainEnabled bool    `yaml:"kill_chain_enabled"`
	SSEBufferSize    int     `yaml:"sse_buffer_size"`
}

type ServerConfig struct {
	Port             int           `yaml:"port"`
	ReadTimeout      time.Duration `yaml:"read_timeout"`
	WriteTimeout     time.Duration `yaml:"write_timeout"`
	RateLimitPerMin  int           `yaml:"rate_limit_per_min"`
	CORSAllowOrigins []string      `yaml:"cors_allow_origins"`
}

type SovereignConfig struct {
	Enabled            bool   `yaml:"enabled"`
	Mode               string `yaml:"mode"` // airgap, restricted, open
	DisableExternalAPI bool   `yaml:"disable_external_api"`
	DisableTelemetry   bool   `yaml:"disable_telemetry"`
	LocalModelsOnly    bool   `yaml:"local_models_only"`
	DataRetentionDays  int    `yaml:"data_retention_days"`
	EncryptAtRest      bool   `yaml:"encrypt_at_rest"`
	AuditAllRequests   bool   `yaml:"audit_all_requests"`
	MaxPeers           int    `yaml:"max_peers"`
}

type ThreatIntelConfig struct {
	Enabled         bool          `yaml:"enabled"`
	RefreshInterval time.Duration `yaml:"refresh_interval"`
	Feeds           []FeedConfig  `yaml:"feeds"`
}

type WebhookConfig struct {
	ID      string            `yaml:"id"`
	URL     string            `yaml:"url"`
	Events  []string          `yaml:"events"`
	Headers map[string]string `yaml:"headers"`
	Active  bool              `yaml:"active"`
	Retries int               `yaml:"retries"`
}