migration

type ConversionPreview struct {
	Original      *RBACPolicy `json:"original"`
	Success       bool        `json:"success"`
	CELExpression string      `json:"celExpression,omitempty"`
	ResourceType  string      `json:"resourceType,omitempty"`
	ResourceID    string      `json:"resourceId,omitempty"`
	PolicyName    string      `json:"policyName,omitempty"`
	Error         string      `json:"error,omitempty"`
}

type Logger interface {
	Info(msg string, fields ...interface{})
	Warn(msg string, fields ...interface{})
	Error(msg string, fields ...interface{})
}

type MigrationConfig struct {
	// BatchSize for processing policies
	BatchSize int

	// DryRun mode - log but don't persist
	DryRun bool

	// PreserveOriginal keeps RBAC policies after migration
	PreserveOriginal bool

	// DefaultNamespace for migrated policies
	DefaultNamespace string

	// DefaultPriority for migrated policies
	DefaultPriority int
}

type MigrationError struct {
	PolicyIndex int    `json:"policyIndex"`
	Subject     string `json:"subject"`
	Resource    string `json:"resource"`
	Error       string `json:"error"`
}

type MigrationPolicyRepoAdapter struct {
	// contains filtered or unexported fields
}

type MigrationResult struct {
	TotalPolicies     int              `json:"totalPolicies"`
	MigratedPolicies  int              `json:"migratedPolicies"`
	SkippedPolicies   int              `json:"skippedPolicies"`
	FailedPolicies    int              `json:"failedPolicies"`
	Errors            []MigrationError `json:"errors,omitempty"`
	ConvertedPolicies []*core.Policy   `json:"convertedPolicies,omitempty"`
	StartedAt         time.Time        `json:"startedAt"`
	CompletedAt       time.Time        `json:"completedAt"`
	DryRun            bool             `json:"dryRun"`
}

type NoOpLogger struct{}

type PolicyRepository interface {
	CreatePolicy(ctx context.Context, policy *core.Policy) error
	GetPoliciesByResourceType(ctx context.Context, appID, envID xid.ID, userOrgID *xid.ID, resourceType string) ([]*core.Policy, error)
}

type RBACAdapterConfig struct {
	RBACService    *rbac.Service
	RoleRepo       rbac.RoleRepository
	PermissionRepo rbac.PermissionRepository
	RolePermRepo   rbac.RolePermissionRepository
	PolicyRepo     rbac.PolicyRepository
}

type RBACMigrationService struct {
	// contains filtered or unexported fields
}

type RBACPolicy struct {
	Subject   string   `json:"subject"`   // e.g., "user", "role:admin"
	Actions   []string `json:"actions"`   // e.g., ["read", "write"]
	Resource  string   `json:"resource"`  // e.g., "project:*", "document:123"
	Condition string   `json:"condition"` // e.g., "owner = true"
}

type RBACService interface {
	// GetAllPolicies returns all RBAC policies
	GetAllPolicies(ctx context.Context) ([]*RBACPolicy, error)

	// GetRoles returns all roles for an app and environment
	GetRoles(ctx context.Context, appID, envID xid.ID) ([]*schema.Role, error)

	// GetRolePermissions returns permissions for a role
	GetRolePermissions(ctx context.Context, roleID xid.ID) ([]*schema.Permission, error)
}

type RBACServiceAdapter struct {
	// contains filtered or unexported fields
}

type UserRoleAdapter struct {
	// contains filtered or unexported fields
}