auditing

type AdmissionInput struct {
	RunName     string
	Namespace   string
	TemplateRef string
	Reason      string
	When        time.Time
	// OwnerRef, when non-nil, is set on the AuditEvent's
	// metadata.ownerReferences. Use for ValidateUpdate (where the run
	// already exists) or ValidateCreate's admit path once the apiserver
	// assigns a UID. Leave nil for ValidateCreate.
	OwnerRef *metav1.OwnerReference
}

type BrokerCredsTamperedInput struct {
	RunName    string
	Namespace  string
	PrunedKeys []string
	When       time.Time
}

type CAMisconfiguredInput struct {
	Name      string // Workspace name (will be prefixed seed- by the caller per F-52).
	Namespace string
	Reason    string
	When      time.Time
}

type CAProjectionInput struct {
	RunName    string
	Namespace  string
	SecretName string
	Reason     string
	When       time.Time
}

type CredentialDeniedInput struct {
	RunName        string
	Namespace      string
	CredentialName string
	Provider       string
	MatchedPolicy  string
	Reason         string
	When           time.Time
}

type CredentialIssuedInput struct {
	RunName        string
	Namespace      string
	CredentialName string
	Provider       string
	MatchedPolicy  string
	Reason         string
	When           time.Time
	// Count, when > 0, is set on Spec.Count and signals a summary
	// (controller's "credentials projected to this run" rollup).
	Count int32
}

type CredentialRenewalFailedInput struct {
	RunName   string
	Namespace string
	Provider  string
	LeaseID   string
	Error     string
	When      time.Time
}

type CredentialRenewedInput struct {
	RunName   string
	Namespace string
	Provider  string
	LeaseID   string
	ExpiresAt time.Time // RFC3339 in Detail; zero means "no expiry"
	When      time.Time // for nowOr; tests inject deterministic time
}

type CredentialRevokedInput struct {
	RunName        string
	Namespace      string
	CredentialName string
	Provider       string
	MatchedPolicy  string
	Reason         string
	When           time.Time
}

type EgressInput struct {
	RunName       string
	Namespace     string
	Host          string
	Port          int
	Decision      paddockv1alpha1.AuditDecision
	MatchedPolicy string
	Reason        string
	When          time.Time
	// Kind, when set, overrides the kind that NewEgress* would otherwise
	// pick. Used by callers that need to emit egress-discovery-allow on
	// the allow path.
	Kind paddockv1alpha1.AuditKind
}

type InteractiveRunTerminatedInput struct {
	RunName   string
	Namespace string
	Reason    string
	Decision  paddockv1alpha1.AuditDecision
	When      time.Time
}

type InterceptionInput struct {
	RunName       string
	Namespace     string
	MatchedPolicy string
	Reason        string
	When          time.Time
}

type KubeSink struct {
	Client    client.Client
	Component string
}

type NetworkPolicyEnforcementWithdrawnInput struct {
	RunName   string
	Namespace string
	Reason    string
	When      time.Time
}

type NoopSink struct{}

type PromptAuditInput struct {
	RunName      string
	Namespace    string
	SubmitterSA  string
	PromptHash   string
	PromptLength int
	TurnSeq      int32
	When         time.Time
}

type PromptCompletedInput struct {
	RunName    string
	Namespace  string
	TurnSeq    int32
	DurationMs int64
	EventCount int32
	Outcome    string // "ok" | "error" | "interrupted"
	When       time.Time
}

type RunDecisionInput struct {
	RunName   string
	Namespace string
	Reason    string
	Decision  paddockv1alpha1.AuditDecision
	When      time.Time
}

type ShellClosedInput struct {
	RunName    string
	Namespace  string
	SessionID  string
	DurationMs int64
	ByteCount  int64
	When       time.Time
}

type ShellOpenedInput struct {
	RunName     string
	Namespace   string
	SessionID   string
	SubmitterSA string
	Target      string
	Command     []string
	When        time.Time
}

type Sink interface {
	Write(ctx context.Context, ae *paddockv1alpha1.AuditEvent) error
}