security

type Action struct {
	Type string `json:"type"`

	Parameters json.RawMessage `json:"parameters"`
}

type ActiveThreat struct {
	ID          string            `json:"id"`
	Type        string            `json:"type"`
	Source      string            `json:"source"`
	FirstSeen   time.Time         `json:"first_seen"`
	LastSeen    time.Time         `json:"last_seen"`
	EventCount  int64             `json:"event_count"`
	ThreatScore int               `json:"threat_score"`
	Active      bool              `json:"active"`
	Mitigated   bool              `json:"mitigated"`
	Indicators  []ThreatIndicator `json:"indicators"`
	Metadata    json.RawMessage   `json:"metadata"`
}

type AdvancedKeyManager interface {
	GenerateKey(keyType string, bits int) (*StoredKey, error)

	StoreKey(key *StoredKey) error

	RetrieveKey(keyID string) (*StoredKey, error)

	RotateKey(keyID string) (*StoredKey, error)

	DeleteKey(keyID string) error

	GenerateMasterKey(keyType string, bits int) error

	DeriveKey(purpose string, version int) ([]byte, error)

	EscrowKey(keyID string, agents []EscrowAgent, threshold int) error

	SetupThresholdCrypto(keyID string, threshold, total int) error
}

type AlertConfig struct {
	CriticalThreshold int `json:"critical_threshold"` // Number of critical vulns to trigger alert

	HighThreshold int `json:"high_threshold"` // Number of high vulns to trigger alert

	CVSSThreshold float64 `json:"cvss_threshold"` // CVSS score to trigger alert

	TimeToRemediate time.Duration `json:"time_to_remediate"` // SLA for remediation
}

type AnomalyDetectionEngine struct {
	// contains filtered or unexported fields
}

type AuditConfig struct {
	Enabled               bool   `json:"enabled"`
	LogLevel              string `json:"log_level,omitempty"`
	LogSuccessfulRequests bool   `json:"log_successful_requests"`
	LogFailedRequests     bool   `json:"log_failed_requests"`
	RetentionDays         int    `json:"retention_days,omitempty"`
}

type AuditEngine struct {
	// contains filtered or unexported fields
}

type AuditEntry struct {
	Timestamp time.Time

	Level string // Info, Warning, Error, Critical

	Component string

	Message string

	UserAction string

	Result string
}

type AuditEvent struct {
	Timestamp time.Time `json:"timestamp"`

	Level interfaces.AuditLevel `json:"level"`

	Event string `json:"event"`

	Component string `json:"component"`

	UserID string `json:"user_id,omitempty"`

	SessionID string `json:"session_id,omitempty"`

	IPAddress string `json:"ip_address,omitempty"`

	UserAgent string `json:"user_agent,omitempty"`

	Data json.RawMessage `json:"data,omitempty"`

	Result string `json:"result"`

	Error string `json:"error,omitempty"`
}

type AuditLogger struct {
	// contains filtered or unexported fields
}

type AuditSummary struct {
	TotalEndpoints      int      `json:"total_endpoints"`
	SecureEndpoints     int      `json:"secure_endpoints"`
	VulnerableEndpoints int      `json:"vulnerable_endpoints"`
	CriticalIssues      int      `json:"critical_issues"`
	HighIssues          int      `json:"high_issues"`
	MediumIssues        int      `json:"medium_issues"`
	LowIssues           int      `json:"low_issues"`
	ComplianceStatus    string   `json:"compliance_status"` // PASS, FAIL, PARTIAL
	ORANCompliant       bool     `json:"oran_compliant"`
	SecurityPosture     string   `json:"security_posture"` // EXCELLENT, GOOD, FAIR, POOR, CRITICAL
	TopRisks            []string `json:"top_risks"`
}

type AuditorConfig struct {
	Endpoints           []string
	Timeout             time.Duration
	DeepScan            bool
	CheckOCSP           bool
	CheckCRL            bool
	TestWeakCiphers     bool
	TestRenegotiation   bool
	ComplianceStandards []string
	OutputFormat        string // json, html, pdf
}

type AuthConfig struct {
	Enabled        bool                      `json:"enabled"`
	Providers      []string                  `json:"providers,omitempty"`
	OAuthProviders map[string]*OAuthProvider `json:"oauth_providers,omitempty"`
	JWT            *JWTConfig                `json:"jwt,omitempty"`
	LDAP           *LDAPConfig               `json:"ldap,omitempty"`
	DefaultScopes  []string                  `json:"default_scopes,omitempty"`
	TokenTTL       string                    `json:"token_ttl,omitempty"`
	RefreshEnabled bool                      `json:"refresh_enabled"`
	CacheEnabled   bool                      `json:"cache_enabled"`
	CacheTTL       string                    `json:"cache_ttl,omitempty"`
}

type AuthContext struct {
	// SPIFFE identity
	SpiffeID    spiffeid.ID
	TrustDomain string
	ServiceName string

	// JWT claims
	JWTClaims jwt.MapClaims
	Issuer    string
	Audience  []string

	// Request context
	Method     string
	Path       string
	RemoteAddr string
	UserAgent  string

	// Authorization context
	Roles       []string
	Permissions []string
	Attributes  map[string]interface{}

	// Temporal context
	AuthTime       time.Time
	ExpirationTime time.Time
}

type AuthStats struct {
	TotalAuths       int64     `json:"total_auths"`
	SuccessfulAuths  int64     `json:"successful_auths"`
	FailedAuths      int64     `json:"failed_auths"`
	PolicyDenials    int64     `json:"policy_denials"`
	SvidRotations    int64     `json:"svid_rotations"`
	LastAuthTime     time.Time `json:"last_auth_time"`
	LastSvidRotation time.Time `json:"last_svid_rotation"`
}

type AuthenticationEngine struct {
	// contains filtered or unexported fields
}

type AuthorizationEngine struct {
	// contains filtered or unexported fields
}

type AuthzPolicy struct {
	ID          string                `json:"id"`
	Name        string                `json:"name"`
	Description string                `json:"description"`
	Rules       []ZeroTrustPolicyRule `json:"rules"`
	Principals  []string              `json:"principals"`
	Resources   []string              `json:"resources"`
	Actions     []string              `json:"actions"`
	Conditions  map[string]string     `json:"conditions"`
	Effect      PolicyDecision        `json:"effect"`
	Priority    int                   `json:"priority"`
	CreatedAt   time.Time             `json:"created_at"`
	UpdatedAt   time.Time             `json:"updated_at"`
}

type BehaviorPattern struct {
	Name        string            `json:"name"`
	Description string            `json:"description"`
	Indicators  []string          `json:"indicators"`
	Threshold   float64           `json:"threshold"`
	Metadata    map[string]string `json:"metadata"`
}

type BehavioralAnalysisEngine struct {
	// contains filtered or unexported fields
}

type BenchmarkResult struct {
	Name string

	Operations int

	Duration time.Duration

	BytesPerOp int64

	AllocsPerOp int64

	NsPerOp int64
}

type BlockedIP struct {
	IP           string
	BlockedAt    time.Time
	ExpiresAt    time.Time
	Reason       string
	AttackType   string
	RequestCount int64
}

type CORSConfig struct {
	Enabled          bool     `json:"enabled"`
	AllowedOrigins   []string `json:"allowed_origins,omitempty"`
	AllowedMethods   []string `json:"allowed_methods,omitempty"`
	AllowedHeaders   []string `json:"allowed_headers,omitempty"`
	ExposedHeaders   []string `json:"exposed_headers,omitempty"`
	AllowCredentials bool     `json:"allow_credentials"`
	MaxAge           int      `json:"max_age,omitempty"`
}

type CRLCache struct {
	// contains filtered or unexported fields
}

type CRLManager struct {
	// contains filtered or unexported fields
}

type CSRFMiddleware struct {
	// contains filtered or unexported fields
}

type CTSubmitter struct {
	// contains filtered or unexported fields
}

type CVERecord struct {
	ID string `json:"id"`

	Summary string `json:"summary"`

	Description string `json:"description"`

	CVSS float64 `json:"cvss"`

	Severity string `json:"severity"`

	PublishedDate time.Time `json:"published_date"`

	ModifiedDate time.Time `json:"modified_date"`

	References []string `json:"references"`

	CWE []string `json:"cwe"`

	AffectedProducts []Product `json:"affected_products"`

	Remediation *Remediation `json:"remediation,omitempty"`
}

type CachedCRL struct {
	// contains filtered or unexported fields
}

type CachedOCSPResponse struct {
	// contains filtered or unexported fields
}

type CertAlert struct {
	Type string

	Severity string

	Name string

	Message string

	Timestamp time.Time
}

type CertManager struct {
	// contains filtered or unexported fields
}

type CertManagerInterface struct {
	// contains filtered or unexported fields
}

type CertMonitor struct {
	// contains filtered or unexported fields
}

type CertRotationConfig struct {
	// Rotation policies
	AutoRotationEnabled bool          `json:"auto_rotation_enabled" yaml:"auto_rotation_enabled"`
	RotationThreshold   time.Duration `json:"rotation_threshold" yaml:"rotation_threshold"`
	CheckInterval       time.Duration `json:"check_interval" yaml:"check_interval"`
	EmergencyThreshold  time.Duration `json:"emergency_threshold" yaml:"emergency_threshold"`

	// Renewal configuration
	RenewalRetryAttempts int           `json:"renewal_retry_attempts" yaml:"renewal_retry_attempts"`
	RenewalRetryInterval time.Duration `json:"renewal_retry_interval" yaml:"renewal_retry_interval"`
	RenewalTimeout       time.Duration `json:"renewal_timeout" yaml:"renewal_timeout"`

	// Backup and rollback
	BackupEnabled         bool          `json:"backup_enabled" yaml:"backup_enabled"`
	BackupRetentionPeriod time.Duration `json:"backup_retention_period" yaml:"backup_retention_period"`
	AutoRollbackEnabled   bool          `json:"auto_rollback_enabled" yaml:"auto_rollback_enabled"`

	// Integration settings
	CertManagerEnabled   bool   `json:"cert_manager_enabled" yaml:"cert_manager_enabled"`
	CertManagerNamespace string `json:"cert_manager_namespace" yaml:"cert_manager_namespace"`
	ExternalCAEnabled    bool   `json:"external_ca_enabled" yaml:"external_ca_enabled"`
	ExternalCAEndpoint   string `json:"external_ca_endpoint" yaml:"external_ca_endpoint"`

	// Notification configuration
	SlackWebhookURL      string   `json:"slack_webhook_url" yaml:"slack_webhook_url"`
	EmailNotifications   []string `json:"email_notifications" yaml:"email_notifications"`
	WebhookNotifications []string `json:"webhook_notifications" yaml:"webhook_notifications"`
}

type CertRotationManager struct {
	// contains filtered or unexported fields
}

type CertRotationScheduler struct {
	// contains filtered or unexported fields
}

type CertificateFinding struct {
	Subject         string    `json:"subject"`
	Issuer          string    `json:"issuer"`
	SerialNumber    string    `json:"serial_number"`
	NotBefore       time.Time `json:"not_before"`
	NotAfter        time.Time `json:"not_after"`
	DaysToExpiry    int       `json:"days_to_expiry"`
	KeyAlgorithm    string    `json:"key_algorithm"`
	KeySize         int       `json:"key_size"`
	SignatureAlgo   string    `json:"signature_algorithm"`
	Issues          []string  `json:"issues"`
	Severity        string    `json:"severity"`
	ValidationError string    `json:"validation_error,omitempty"`
	ChainValid      bool      `json:"chain_valid"`
	OCSPStatus      string    `json:"ocsp_status"`
	CRLStatus       string    `json:"crl_status"`
}

type CertificateMetrics struct {
	RotationCount   int64         `json:"rotation_count"`
	LastRotation    time.Time     `json:"last_rotation"`
	AverageLifetime time.Duration `json:"average_lifetime"`
	FailureCount    int           `json:"failure_count"`
	LastFailure     time.Time     `json:"last_failure"`
}

type CertificatePaths struct {
	CertFile string `json:"cert_file"`
	KeyFile  string `json:"key_file"`
	CAFile   string `json:"ca_file,omitempty"`
}

type CertificateStatus string

type CertificateStore interface {
	Get(ctx context.Context, name string) (*tls.Certificate, error)

	Put(ctx context.Context, name string, cert *tls.Certificate) error

	Delete(ctx context.Context, name string) error

	List(ctx context.Context) ([]string, error)
}

type CertificateTracker struct {
	Name              string            `json:"name"`
	Namespace         string            `json:"namespace"`
	Type              CertificateType   `json:"type"`
	Certificate       *x509.Certificate `json:"-"`
	SecretName        string            `json:"secret_name"`
	LastRotation      time.Time         `json:"last_rotation"`
	RotationCount     int64             `json:"rotation_count"`
	Status            CertificateStatus `json:"status"`
	NextCheckTime     time.Time         `json:"next_check_time"`
	BackupSecretNames []string          `json:"backup_secret_names"`

	// Health monitoring
	HealthStatus    string    `json:"health_status"`
	LastHealthCheck time.Time `json:"last_health_check"`
	FailureCount    int       `json:"failure_count"`
	LastError       string    `json:"last_error,omitempty"`
}

type CertificateType string

type ChainedSignature struct {
	SignerID string

	Signature []byte

	PreviousHash []byte

	Timestamp time.Time

	Algorithm string
}

type Challenge struct {
	ID        string
	IP        string
	Type      string
	CreatedAt time.Time
	ExpiresAt time.Time
	Attempts  int
	Solved    bool
	Token     string
}

type ChannelConfig struct {
	CipherSuite string

	KeySize int

	MACAlgorithm string

	EnablePFS bool

	DHGroup string

	ReplayWindow uint32

	SessionTimeout time.Duration

	HeartbeatInterval time.Duration

	EnableMulticast bool

	MulticastTTL int
}

type CipherFinding struct {
	CipherSuite    string   `json:"cipher_suite"`
	TLSVersion     string   `json:"tls_version"`
	Strength       string   `json:"strength"` // STRONG, MEDIUM, WEAK
	KeyExchange    string   `json:"key_exchange"`
	Authentication string   `json:"authentication"`
	Encryption     string   `json:"encryption"`
	MAC            string   `json:"mac"`
	ForwardSecrecy bool     `json:"forward_secrecy"`
	Issues         []string `json:"issues"`
	Recommendation string   `json:"recommendation"`
	ORANApproved   bool     `json:"oran_approved"`
}

type CodeIssue struct {
	ID string `json:"id"`

	Type string `json:"type"` // hardcoded_secret, weak_crypto, etc.

	Severity string `json:"severity"`

	File string `json:"file"`

	Line int `json:"line"`

	Description string `json:"description"`

	Rule string `json:"rule"`

	FoundAt time.Time `json:"found_at"`
}

type CommonSecurityConfig struct {
	// TLS Configuration
	TLS *TLSConfig `json:"tls,omitempty"`

	// Security Headers Configuration
	SecurityHeaders *SecurityHeadersConfig `json:"security_headers,omitempty"`

	// Enable security features
	Enabled bool `json:"enabled"`

	// Security mode (strict, moderate, permissive)
	Mode string `json:"mode"`
}

type ComplianceCheck struct {
	ID          string `json:"id"`
	Title       string `json:"title"`
	Description string `json:"description"`
	Status      string `json:"status"`
	Severity    string `json:"severity"`
	Rationale   string `json:"rationale"`
	Remediation string `json:"remediation"`
}

type ComplianceCheckFunc func(nodeID string, context map[string]interface{}) (bool, []string, error)

type ComplianceConfig struct {
	// Trust domain configuration
	TrustDomain          string `json:"trust_domain"`
	SPIFFEEndpointSocket string `json:"spiffe_endpoint_socket"`

	// Security policies
	SecurityPolicies []ORANSecurityPolicy `json:"security_policies"`

	// Authentication settings
	AuthenticationMethod string        `json:"authentication_method"` // "mTLS", "JWT", "OAuth2"
	CertificateLifetime  time.Duration `json:"certificate_lifetime"`

	// Encryption requirements
	EncryptionAlgorithm string `json:"encryption_algorithm"`
	MinKeyLength        int    `json:"min_key_length"`

	// Audit settings
	AuditLogLevel      string `json:"audit_log_level"`
	AuditRetentionDays int    `json:"audit_retention_days"`

	// Threat detection
	ThreatDetectionEnabled bool    `json:"threat_detection_enabled"`
	AnomalyThreshold       float64 `json:"anomaly_threshold"`

	// Compliance intervals
	ComplianceCheckInterval time.Duration `json:"compliance_check_interval"`
	CertificateRenewalTime  time.Duration `json:"certificate_renewal_time"`
}

type ComplianceDetails struct {
	Standard     string              `json:"standard"`
	Version      string              `json:"version"`
	Status       string              `json:"status"` // COMPLIANT, NON_COMPLIANT, PARTIAL
	Score        float64             `json:"score"`  // 0-100
	PassedChecks int                 `json:"passed_checks"`
	FailedChecks int                 `json:"failed_checks"`
	TotalChecks  int                 `json:"total_checks"`
	FailedRules  []TLSComplianceRule `json:"failed_rules"`
	Exemptions   []string            `json:"exemptions,omitempty"`
}

type ComplianceFramework string

type ComplianceManager struct {
	// contains filtered or unexported fields
}

type ComplianceMonitor struct {
	// contains filtered or unexported fields
}

type ComplianceReport struct {
	Timestamp metav1.Time

	Namespace string

	Framework ComplianceFramework

	Version string

	OverallCompliance float64 // Percentage 0-100

	Requirements []ComplianceRequirement

	VulnerabilityScan VulnerabilityScanResult

	AuditLog []AuditEntry

	Recommendations []string

	NextAuditDate time.Time
}

type ComplianceRequirement struct {
	ID string

	Category string

	Description string

	Status ComplianceStatus

	Evidence []string

	Remediation string

	Severity string
}

type ComplianceResult struct {
	Framework    string            `json:"framework"`
	Version      string            `json:"version"`
	Score        float64           `json:"score"`
	PassedChecks int               `json:"passed_checks"`
	FailedChecks int               `json:"failed_checks"`
	Results      []ComplianceCheck `json:"results"`
	Summary      json.RawMessage   `json:"summary"`
}

type ComplianceRule struct {
	RuleID         string         `json:"rule_id"`
	RuleName       string         `json:"rule_name"`
	RuleType       string         `json:"rule_type"` // "policy", "technical", "procedural"
	Condition      string         `json:"condition"`
	ExpectedResult interface{}    `json:"expected_result"`
	ValidationFunc ValidationFunc `json:"-"`
	Severity       string         `json:"severity"` // "low", "medium", "high", "critical"
}

type ComplianceStatus string

type ComplianceTest struct {
	Name string

	Standard string

	Category string

	Validator func() error

	Required bool
}

type ComplianceViolation struct {
	ViolationID      string          `json:"violation_id"`
	ViolationType    string          `json:"violation_type"`
	Severity         string          `json:"severity"`
	Description      string          `json:"description"`
	DetectedAt       time.Time       `json:"detected_at"`
	AffectedResource string          `json:"affected_resource"`
	RemediationSteps []string        `json:"remediation_steps"`
	Context          json.RawMessage `json:"context"`
}

type Condition struct {
	Field string `json:"field"`

	Operator string `json:"operator"`

	Value interface{} `json:"value"`
}

type ConnectionPool struct {
	// contains filtered or unexported fields
}

type ConstantTimeOps struct{}

type ContainerScanner interface {
	ScanImage(ctx context.Context, image string) (*ScanResult, error)
	GetScannerInfo() ScannerInfo
	UpdateDatabase(ctx context.Context) error
	Health(ctx context.Context) error
}

type ContainerSecurityConfig struct {
	// Scanning configuration
	EnableContainerScanning bool          `json:"enable_container_scanning"`
	ScanningTools           []string      `json:"scanning_tools"` // trivy, clair, anchore
	ScanInterval            time.Duration `json:"scan_interval"`
	ScanTimeout             time.Duration `json:"scan_timeout"`
	MaxConcurrentScans      int           `json:"max_concurrent_scans"`

	// Vulnerability thresholds
	BlockCriticalVulns bool `json:"block_critical_vulns"`
	BlockHighVulns     bool `json:"block_high_vulns"`
	MaxCriticalVulns   int  `json:"max_critical_vulns"`
	MaxHighVulns       int  `json:"max_high_vulns"`
	MaxMediumVulns     int  `json:"max_medium_vulns"`

	// RBAC configuration
	EnableRBACEnforcement   bool     `json:"enable_rbac_enforcement"`
	StrictRBACMode          bool     `json:"strict_rbac_mode"`
	MinimumPrivileges       bool     `json:"minimum_privileges"`
	ForbiddenCapabilities   []string `json:"forbidden_capabilities"`
	RequiredSecurityContext bool     `json:"required_security_context"`

	// Policy enforcement
	EnablePolicyEnforcement bool     `json:"enable_policy_enforcement"`
	PolicyEngine            string   `json:"policy_engine"` // opa, gatekeeper, falco
	PolicySets              []string `json:"policy_sets"`
	EnforcementAction       string   `json:"enforcement_action"` // warn, block, audit

	// Image security
	TrustedRegistries   []string `json:"trusted_registries"`
	RequireSignedImages bool     `json:"require_signed_images"`
	AllowedBaseImages   []string `json:"allowed_base_images"`
	ForbiddenPackages   []string `json:"forbidden_packages"`

	// Runtime security
	EnableRuntimeMonitoring bool     `json:"enable_runtime_monitoring"`
	RuntimeSecurityTools    []string `json:"runtime_security_tools"` // falco, sysdig
	AnomalyDetection        bool     `json:"anomaly_detection"`

	// Compliance frameworks
	ComplianceFrameworks []string `json:"compliance_frameworks"` // pci, sox, hipaa
	AuditLogging         bool     `json:"audit_logging"`
	ComplianceReports    bool     `json:"compliance_reports"`
}

type ContainerSecurityManager struct {
	// contains filtered or unexported fields
}

type ContainerSecurityStats struct {
	TotalScans           int64     `json:"total_scans"`
	SuccessfulScans      int64     `json:"successful_scans"`
	FailedScans          int64     `json:"failed_scans"`
	CriticalVulns        int64     `json:"critical_vulns"`
	HighVulns            int64     `json:"high_vulns"`
	MediumVulns          int64     `json:"medium_vulns"`
	LowVulns             int64     `json:"low_vulns"`
	PolicyViolations     int64     `json:"policy_violations"`
	BlockedDeployments   int64     `json:"blocked_deployments"`
	LastScanTime         time.Time `json:"last_scan_time"`
	AverageSecurityScore float64   `json:"average_security_score"`
	ComplianceScore      float64   `json:"compliance_score"`
}

type ContainerVulnerability struct {
	ID            string            `json:"id"`
	Title         string            `json:"title"`
	Description   string            `json:"description"`
	Severity      string            `json:"severity"`
	CVSS          float64           `json:"cvss"`
	CVE           string            `json:"cve"`
	Package       string            `json:"package"`
	Version       string            `json:"version"`
	FixedVersion  string            `json:"fixed_version"`
	References    []string          `json:"references"`
	PrimaryURL    string            `json:"primary_url"`
	PublishedDate time.Time         `json:"published_date"`
	LastModified  time.Time         `json:"last_modified"`
	Exploitable   bool              `json:"exploitable"`
	InProduction  bool              `json:"in_production"`
	Metadata      map[string]string `json:"metadata"`
}

type CreateIncidentRequest struct {
	Title string `json:"title"`

	Description string `json:"description"`

	Severity string `json:"severity"`

	Category string `json:"category"`

	Source string `json:"source"`

	Tags []string `json:"tags"`

	Impact *ImpactAssessment `json:"impact"`

	Evidence []*Evidence `json:"evidence,omitempty"`
}

type Credential struct {
	Username string `json:"username"`
	Password string `json:"password"`
}

type CryptoConfig struct {
	// RSA key size - minimum 3072 bits, recommended 4096 bits for O-RAN compliance
	RSAKeySize int `json:"rsa_key_size" yaml:"rsa_key_size"`

	// Certificate validity periods
	CertValidityPeriod time.Duration `json:"cert_validity_period" yaml:"cert_validity_period"`
	CAValidityPeriod   time.Duration `json:"ca_validity_period" yaml:"ca_validity_period"`

	// TLS configuration
	EnforceTLS13Only             bool     `json:"enforce_tls13_only" yaml:"enforce_tls13_only"`
	AllowedCipherSuites          []string `json:"allowed_cipher_suites" yaml:"allowed_cipher_suites"`
	RequirePerfectForwardSecrecy bool     `json:"require_perfect_forward_secrecy" yaml:"require_perfect_forward_secrecy"`

	// mTLS settings
	MTLSRequired         bool `json:"mtls_required" yaml:"mtls_required"`
	ClientCertValidation bool `json:"client_cert_validation" yaml:"client_cert_validation"`

	// Certificate rotation
	AutoRotateBeforeExpiry time.Duration `json:"auto_rotate_before_expiry" yaml:"auto_rotate_before_expiry"`

	// Random number generation
	UseHardwareRNG bool `json:"use_hardware_rng" yaml:"use_hardware_rng"`
}

type CryptoModern struct {
	// contains filtered or unexported fields
}

type CryptoUtils struct {
	// contains filtered or unexported fields
}

type DDoSProtectionConfig struct {
	// Rate limiting tiers
	GlobalRateLimit int           `json:"global_rate_limit"` // Requests per second globally
	PerIPRateLimit  int           `json:"per_ip_rate_limit"` // Requests per second per IP
	BurstSize       int           `json:"burst_size"`        // Burst capacity
	WindowSize      time.Duration `json:"window_size"`       // Time window for rate limiting

	// Connection limits
	MaxConcurrentConns int           `json:"max_concurrent_conns"` // Maximum concurrent connections
	MaxConnsPerIP      int           `json:"max_conns_per_ip"`     // Maximum connections per IP
	ConnectionTimeout  time.Duration `json:"connection_timeout"`   // Connection timeout

	// Detection thresholds
	SuspiciousThreshold int           `json:"suspicious_threshold"` // Requests to trigger suspicious behavior
	AttackThreshold     int           `json:"attack_threshold"`     // Requests to trigger attack detection
	DetectionWindow     time.Duration `json:"detection_window"`     // Time window for attack detection

	// Blocking and mitigation
	BlockDuration   time.Duration `json:"block_duration"`    // How long to block attacking IPs
	TempBanDuration time.Duration `json:"temp_ban_duration"` // Temporary ban duration
	MaxBlockedIPs   int           `json:"max_blocked_ips"`   // Maximum number of IPs to block

	// Whitelist and blacklist
	WhitelistIPs   []string `json:"whitelist_ips"`   // Always allowed IPs
	WhitelistCIDRs []string `json:"whitelist_cidrs"` // Always allowed CIDR ranges
	BlacklistIPs   []string `json:"blacklist_ips"`   // Always blocked IPs
	BlacklistCIDRs []string `json:"blacklist_cidrs"` // Always blocked CIDR ranges

	// Geolocation filtering
	EnableGeoFiltering bool     `json:"enable_geo_filtering"` // Enable geolocation-based filtering
	AllowedCountries   []string `json:"allowed_countries"`    // Allowed country codes
	BlockedCountries   []string `json:"blocked_countries"`    // Blocked country codes

	// Challenge mechanisms
	EnableCaptcha      bool `json:"enable_captcha"`      // Enable CAPTCHA challenges
	EnableRateProof    bool `json:"enable_rate_proof"`   // Enable proof-of-work challenges
	ChallengeThreshold int  `json:"challenge_threshold"` // Requests to trigger challenge

	// Monitoring and alerting
	EnableAlerts     bool          `json:"enable_alerts"`     // Enable security alerts
	AlertWebhook     string        `json:"alert_webhook"`     // Webhook URL for alerts
	MetricsRetention time.Duration `json:"metrics_retention"` // How long to keep metrics
}

type DDoSProtector struct {
	// contains filtered or unexported fields
}

type DDoSStats struct {
	TotalRequests      int64     `json:"total_requests"`
	BlockedRequests    int64     `json:"blocked_requests"`
	SuspiciousRequests int64     `json:"suspicious_requests"`
	AttacksDetected    int64     `json:"attacks_detected"`
	IPsBlocked         int64     `json:"ips_blocked"`
	ActiveBlocks       int64     `json:"active_blocks"`
	ChallengesSent     int64     `json:"challenges_sent"`
	ChallengesSolved   int64     `json:"challenges_solved"`
	LastAttack         time.Time `json:"last_attack"`
	LastBlock          time.Time `json:"last_block"`
}

type DefaultAdvancedKeyManager struct {
	// contains filtered or unexported fields
}

type DefaultKeyManager struct {
	// contains filtered or unexported fields
}

type Dependency struct {
	Name string `json:"name"`

	Version string `json:"version"`

	Type string `json:"type"` // go, npm, pip, maven, etc.

	Vulnerabilities []string `json:"vulnerabilities"` // CVE IDs

	LicenseIssues []LicenseIssue `json:"license_issues"`

	LastChecked time.Time `json:"last_checked"`
}

type DetailedStoredKey struct {
	ID string `json:"id"`

	Version int `json:"version"`

	Key []byte `json:"key"`

	Metadata map[string]string `json:"metadata,omitempty"`

	Created time.Time `json:"created"`

	Updated time.Time `json:"updated,omitempty"`
}

type Ed25519KeyPair struct {
	PublicKey ed25519.PublicKey

	PrivateKey ed25519.PrivateKey

	Created time.Time

	ID string
}

type EmailConfig struct {
	SMTPHost string `json:"smtp_host"`

	SMTPPort int `json:"smtp_port"`

	SMTPUsername string `json:"smtp_username"`

	SMTPPassword string `json:"smtp_password"`

	FromEmail string `json:"from_email"`

	ToEmails []string `json:"to_emails"`

	Subject string `json:"subject"`

	UseTLS bool `json:"use_tls"`
}

type EncryptedData struct {
	Algorithm string `json:"algorithm"`

	Ciphertext []byte `json:"ciphertext"`

	Nonce []byte `json:"nonce"`

	AAD []byte `json:"aad,omitempty"`

	Salt []byte `json:"salt,omitempty"`

	Tag []byte `json:"tag,omitempty"`

	Created time.Time `json:"created"`

	Version int `json:"version"`
}

type EncryptedItem struct {
	ID string

	Ciphertext []byte

	Nonce []byte

	Tag []byte

	Algorithm string

	Created time.Time

	Accessed time.Time
}

type EncryptedSecret struct {
	// Core identification and metadata
	ID      string `json:"id"`
	Name    string `json:"name"` // ADDED: Secret name field
	Type    string `json:"type"` // ADDED: Secret type field
	Version int    `json:"version"`

	// Encryption details
	Algorithm  string `json:"algorithm"`
	KeyID      string `json:"key_id"`
	KeyVersion int    `json:"key_version"` // For vault integration

	// Encrypted data and cryptographic components
	Data          []byte `json:"data,omitempty"` // Legacy field for compatibility
	IV            []byte `json:"iv,omitempty"`   // Legacy field for compatibility
	EncryptedData []byte `json:"encrypted_data"`
	Ciphertext    []byte `json:"ciphertext"` // ADDED: Ciphertext field
	Nonce         []byte `json:"nonce,omitempty"`
	Salt          []byte `json:"salt"` // ADDED: Salt field for key derivation

	// Timestamps
	CreatedAt time.Time  `json:"created_at"`
	UpdatedAt time.Time  `json:"updated_at"`
	ExpiresAt *time.Time `json:"expires_at,omitempty"`

	// Access tracking
	AccessCount  int64     `json:"access_count"`  // ADDED: Access count field
	LastAccessed time.Time `json:"last_accessed"` // ADDED: Last access time field

	// Metadata
	Metadata map[string]string `json:"metadata,omitempty"`
}

type EncryptedStorage struct {
	// contains filtered or unexported fields
}

type EncryptionCache struct {
	// contains filtered or unexported fields
}

type EncryptionConfig struct {
	Enabled           bool     `json:"enabled"`
	Algorithm         string   `json:"algorithm,omitempty"`
	KeySize           int      `json:"key_size,omitempty"`
	EncryptionKey     string   `json:"encryption_key,omitempty"`
	EncryptionKeyPath string   `json:"encryption_key_path,omitempty"`
	SupportedCiphers  []string `json:"supported_ciphers,omitempty"`
}

type EncryptionContext struct {
	Algorithm string

	Key []byte

	Nonce []byte

	AAD []byte // Additional Authenticated Data

	Created time.Time
}

type EncryptionEngine struct {
	// contains filtered or unexported fields
}

type EntropyPool struct {
	// contains filtered or unexported fields
}

type ErrorSanitizer struct {
	// contains filtered or unexported fields
}

type EscalationEngine struct {
	// contains filtered or unexported fields
}

type EscalationRule struct {
	ID string `json:"id"`

	Conditions []*Condition `json:"conditions"`

	Actions []*Action `json:"actions"`

	Timeout time.Duration `json:"timeout"`

	Enabled bool `json:"enabled"`
}

type EscrowAgent struct {
	ID string `json:"id"`

	Active bool `json:"active"`
}

type Evidence struct {
	ID string `json:"id"`

	Type string `json:"type"` // log, file, network, memory

	Source string `json:"source"`

	Timestamp time.Time `json:"timestamp"`

	Description string `json:"description"`

	Data json.RawMessage `json:"data"`

	Hash string `json:"hash"`

	Collected bool `json:"collected"`
}

type EvidenceStorage struct {
	// contains filtered or unexported fields
}

type ExecutionContext struct {
	ID        string            `json:"id"`
	UserID    string            `json:"user_id"`
	SessionID string            `json:"session_id"`
	Resource  string            `json:"resource"`
	Action    string            `json:"action"`
	Timestamp time.Time         `json:"timestamp"`
	Metadata  map[string]string `json:"metadata,omitempty"`
}

type ExecutionPolicyRule struct {
	ID         string            `json:"id"`
	Type       string            `json:"type"`
	Action     string            `json:"action"`
	Conditions []string          `json:"conditions"`
	Priority   int               `json:"priority"`
	Enabled    bool              `json:"enabled"`
	Metadata   map[string]string `json:"metadata,omitempty"`
}

type ExecutionSecurityPolicy struct {
	ID        string                `json:"id"`
	Name      string                `json:"name"`
	Version   string                `json:"version"`
	Rules     []ExecutionPolicyRule `json:"rules"`
	Metadata  json.RawMessage       `json:"metadata"`
	CreatedAt time.Time             `json:"created_at"`
	UpdatedAt time.Time             `json:"updated_at"`
	// contains filtered or unexported fields
}

type ExtendedSecurityConfig struct {
	// Embed the common config from interfaces
	*CommonSecurityConfig

	// Authentication Configuration
	Auth *AuthConfig `json:"auth,omitempty"`

	// RBAC Configuration
	RBAC *RBACConfig `json:"rbac,omitempty"`

	// Rate Limiting Configuration
	RateLimit *RateLimitConfig `json:"rate_limit,omitempty"`

	// CORS Configuration
	CORS *CORSConfig `json:"cors,omitempty"`

	// Input Validation Configuration
	InputValidation *InputValidationConfig `json:"input_validation,omitempty"`

	// Audit Configuration
	Audit *AuditConfig `json:"audit,omitempty"`

	// Encryption Configuration
	Encryption *EncryptionConfig `json:"encryption,omitempty"`
}

type FileBackend struct {
	// contains filtered or unexported fields
}

type ForensicsCollector struct {
	// contains filtered or unexported fields
}

type GeolocationFilter struct {
	// contains filtered or unexported fields
}

type GroupMember struct {
	ID string

	PublicKey []byte

	Address string

	Joined time.Time

	Active bool
}

type HTMLValidator struct {
	// contains filtered or unexported fields
}

type HashFunction string

type HashiCorpVaultBackend struct {
	// contains filtered or unexported fields
}

type HeaderFinding struct {
	Header string `json:"header"`

	Issue string `json:"issue"`

	Severity string `json:"severity"`

	Description string `json:"description"`

	Recommendation string `json:"recommendation"`

	Present bool `json:"present"`

	Value string `json:"value,omitempty"`
}

type IPLimiter struct {
	// contains filtered or unexported fields
}

type IRIntegrationConfig struct {
	SIEM *SIEMConfig `json:"siem,omitempty"`

	SOAR *SOARConfig `json:"soar,omitempty"`

	Ticketing *TicketingConfig `json:"ticketing,omitempty"`
}

type ImageSignature struct {
	Image     string            `json:"image"`
	Signature string            `json:"signature"`
	Issuer    string            `json:"issuer"`
	Valid     bool              `json:"valid"`
	Metadata  map[string]string `json:"metadata"`
	Timestamp time.Time         `json:"timestamp"`
}

type ImageVerifier struct {
	// contains filtered or unexported fields
}

type ImageVuln struct {
	Image string `json:"image"`

	Tag string `json:"tag"`

	Digest string `json:"digest"`

	Vulnerabilities []string `json:"vulnerabilities"`

	LastScanned time.Time `json:"last_scanned"`

	ScanTool string `json:"scan_tool"`
}

type ImpactAssessment struct {
	Confidentiality string `json:"confidentiality"` // None, Low, Medium, High

	Integrity string `json:"integrity"`

	Availability string `json:"availability"`

	BusinessImpact string `json:"business_impact"`

	AffectedSystems []string `json:"affected_systems"`

	AffectedUsers int `json:"affected_users"`

	EstimatedCost float64 `json:"estimated_cost"`
}

type IncidentConfig struct {
	EnableAutoResponse bool `json:"enable_auto_response"`

	AutoResponseThreshold string `json:"auto_response_threshold"` // Critical, High, Medium

	MaxAutoActions int `json:"max_auto_actions"`

	IncidentRetention time.Duration `json:"incident_retention"`

	EscalationTimeout time.Duration `json:"escalation_timeout"`

	ForensicsEnabled bool `json:"forensics_enabled"`

	NotificationConfig *NotificationConfig `json:"notification_config"`

	IntegrationConfig *IRIntegrationConfig `json:"integration_config"`

	WebhookSecret string `json:"webhook_secret"`
}

type IncidentFilter struct {
	Severity string `json:"severity,omitempty"`

	Status string `json:"status,omitempty"`

	Category string `json:"category,omitempty"`

	Assignee string `json:"assignee,omitempty"`

	Source string `json:"source,omitempty"`

	FromDate time.Time `json:"from_date,omitempty"`

	ToDate time.Time `json:"to_date,omitempty"`

	Tags []string `json:"tags,omitempty"`

	Limit int `json:"limit,omitempty"`
}

type IncidentMetrics struct {
	TotalIncidents int64 `json:"total_incidents"`

	OpenIncidents int64 `json:"open_incidents"`

	ResolvedIncidents int64 `json:"resolved_incidents"`

	IncidentsBySeverity map[string]int64 `json:"incidents_by_severity"`

	IncidentsByCategory map[string]int64 `json:"incidents_by_category"`

	MTTR time.Duration `json:"mttr"` // Mean Time To Resolution

	MTTA time.Duration `json:"mtta"` // Mean Time To Acknowledgment

	AutomatedActions int64 `json:"automated_actions"`

	EscalatedIncidents int64 `json:"escalated_incidents"`

	LastIncidentTime time.Time `json:"last_incident_time"`
	// contains filtered or unexported fields
}

type IncidentResponse struct {
	// contains filtered or unexported fields
}

type IncidentUpdate struct {
	Status string `json:"status,omitempty"`

	Assignee string `json:"assignee,omitempty"`

	Severity string `json:"severity,omitempty"`

	Tags []string `json:"tags,omitempty"`

	UpdatedBy string `json:"updated_by"`
}

type InjectionFinding struct {
	Type string `json:"type"` // SQL, XSS, Command, etc.

	URL string `json:"url"`

	Parameter string `json:"parameter,omitempty"`

	Payload string `json:"payload"`

	Method string `json:"method"`

	Severity string `json:"severity"`

	Description string `json:"description"`

	Evidence string `json:"evidence,omitempty"`
}

type InputSanitizer struct {
	// contains filtered or unexported fields
}