compliance

type App struct {
	ID   string
	Name string
}

type AppService interface {
	Get(ctx context.Context, id string) (*App, error)
}

type AppServiceAdapter struct {
	// contains filtered or unexported fields
}

type AuditConfig struct {
	// Minimum retention days (enforced for all orgs)
	MinRetentionDays int `json:"minRetentionDays" yaml:"minRetentionDays"`

	// Maximum retention days
	MaxRetentionDays int `json:"maxRetentionDays" yaml:"maxRetentionDays"`

	// Detailed audit trail (log all field changes)
	DetailedTrail bool `json:"detailedTrail" yaml:"detailedTrail"`

	// Immutable audit logs (cannot be deleted/modified)
	Immutable bool `json:"immutable" yaml:"immutable"`

	// Audit log export format
	ExportFormat string `json:"exportFormat" yaml:"exportFormat"` // json, csv, pdf

	// Enable audit log signing (for tamper detection)
	SignLogs bool `json:"signLogs" yaml:"signLogs"`
}

type AuditEvent struct {
	Action     string
	AppID      string
	ResourceID string
	Metadata   map[string]interface{}
}

type AuditLog struct {
	CreatedAt time.Time
}

type AuditService interface {
	LogEvent(ctx context.Context, event *AuditEvent) error
	GetOldestLog(ctx context.Context, appID string) (*AuditLog, error)
}

type AuditServiceAdapter struct {
	// contains filtered or unexported fields
}

type AutomatedChecksConfig struct {
	Enabled       bool          `json:"enabled" yaml:"enabled"`
	CheckInterval time.Duration `json:"checkInterval" yaml:"checkInterval"` // e.g., 24h

	// Specific checks
	MFACoverage        bool `json:"mfaCoverage" yaml:"mfaCoverage"`
	PasswordPolicy     bool `json:"passwordPolicy" yaml:"passwordPolicy"`
	SessionPolicy      bool `json:"sessionPolicy" yaml:"sessionPolicy"`
	AccessReview       bool `json:"accessReview" yaml:"accessReview"`
	InactiveUsers      bool `json:"inactiveUsers" yaml:"inactiveUsers"`
	SuspiciousActivity bool `json:"suspiciousActivity" yaml:"suspiciousActivity"`
	DataRetention      bool `json:"dataRetention" yaml:"dataRetention"`
}

type BunRepository struct {
	// contains filtered or unexported fields
}

type CompleteTrainingRequest struct {
	Score int `json:"score"`
}

type ComplianceCheck struct {
	ID            string                 `json:"id" bun:"id,pk,type:uuid,default:gen_random_uuid()"`
	ProfileID     string                 `json:"profileId" bun:"profile_id,notnull"`
	AppID         string                 `json:"appId" bun:"organization_id,notnull"` // Maps to organization_id column in DB
	CheckType     string                 `json:"checkType" bun:"check_type,notnull"`  // mfa_coverage, password_policy, etc.
	Status        string                 `json:"status" bun:"status,notnull"`         // passed, failed, warning
	Result        map[string]interface{} `json:"result" bun:"result,type:jsonb"`
	Evidence      []string               `json:"evidence" bun:"evidence,array"`
	LastCheckedAt time.Time              `json:"lastCheckedAt" bun:"last_checked_at,notnull"`
	NextCheckAt   time.Time              `json:"nextCheckAt" bun:"next_check_at,notnull"`
	CreatedAt     time.Time              `json:"createdAt" bun:"created_at,notnull,default:now()"`
}

type ComplianceCheckResponse struct {
	ID string `json:"id" example:"check_123"`
}

type ComplianceChecksResponse struct {
	Checks []interface{} `json:"checks"`
}

type ComplianceDashboardResponse struct {
	Metrics interface{} `json:"metrics"`
}

type ComplianceEvidence struct {
	ID           string                 `json:"id" bun:"id,pk,type:uuid,default:gen_random_uuid()"`
	ProfileID    string                 `json:"profileId" bun:"profile_id,notnull"`
	AppID        string                 `json:"appId" bun:"organization_id,notnull"`      // Maps to organization_id column in DB
	EvidenceType string                 `json:"evidenceType" bun:"evidence_type,notnull"` // audit_log, policy_doc, etc.
	Standard     ComplianceStandard     `json:"standard" bun:"standard"`
	ControlID    string                 `json:"controlId" bun:"control_id"` // e.g., SOC2-CC6.1
	Title        string                 `json:"title" bun:"title,notnull"`
	Description  string                 `json:"description" bun:"description"`
	FileURL      string                 `json:"fileUrl" bun:"file_url"`
	FileHash     string                 `json:"fileHash" bun:"file_hash"` // SHA256 for integrity
	CollectedBy  string                 `json:"collectedBy" bun:"collected_by"`
	Metadata     map[string]interface{} `json:"metadata" bun:"metadata,type:jsonb"`
	CreatedAt    time.Time              `json:"createdAt" bun:"created_at,notnull,default:now()"`
}

type ComplianceEvidenceResponse struct {
	ID string `json:"id" example:"evidence_123"`
}

type ComplianceEvidencesResponse struct {
	Evidence []interface{} `json:"evidence"`
}

type CompliancePoliciesResponse struct {
	Policies []interface{} `json:"policies"`
}

type CompliancePolicy struct {
	ID            string                 `json:"id" bun:"id,pk,type:uuid,default:gen_random_uuid()"`
	ProfileID     string                 `json:"profileId" bun:"profile_id,notnull"`
	AppID         string                 `json:"appId" bun:"organization_id,notnull"`  // Maps to organization_id column in DB
	PolicyType    string                 `json:"policyType" bun:"policy_type,notnull"` // password, access, data_retention
	Standard      ComplianceStandard     `json:"standard" bun:"standard"`
	Title         string                 `json:"title" bun:"title,notnull"`
	Version       string                 `json:"version" bun:"version,notnull"`
	Content       string                 `json:"content" bun:"content,notnull"`
	Status        string                 `json:"status" bun:"status,notnull"` // draft, active, deprecated
	ApprovedBy    string                 `json:"approvedBy" bun:"approved_by"`
	ApprovedAt    *time.Time             `json:"approvedAt" bun:"approved_at"`
	EffectiveDate time.Time              `json:"effectiveDate" bun:"effective_date,notnull"`
	ReviewDate    time.Time              `json:"reviewDate" bun:"review_date,notnull"`
	Metadata      map[string]interface{} `json:"metadata" bun:"metadata,type:jsonb"`
	CreatedAt     time.Time              `json:"createdAt" bun:"created_at,notnull,default:now()"`
	UpdatedAt     time.Time              `json:"updatedAt" bun:"updated_at,notnull,default:now()"`
}

type CompliancePolicyResponse struct {
	ID string `json:"id" example:"policy_123"`
}

type ComplianceProfile struct {
	ID        string               `json:"id" bun:"id,pk,type:uuid,default:gen_random_uuid()"`
	AppID     string               `json:"appId" bun:"organization_id,notnull"` // Maps to organization_id column in DB
	Name      string               `json:"name" bun:"name,notnull"`
	Standards []ComplianceStandard `json:"standards" bun:"standards,array"`
	Status    string               `json:"status" bun:"status,notnull"` // active, suspended, audit

	// Security Requirements
	MFARequired           bool `json:"mfaRequired" bun:"mfa_required"`
	PasswordMinLength     int  `json:"passwordMinLength" bun:"password_min_length"`
	PasswordRequireUpper  bool `json:"passwordRequireUpper" bun:"password_require_upper"`
	PasswordRequireLower  bool `json:"passwordRequireLower" bun:"password_require_lower"`
	PasswordRequireNumber bool `json:"passwordRequireNumber" bun:"password_require_number"`
	PasswordRequireSymbol bool `json:"passwordRequireSymbol" bun:"password_require_symbol"`
	PasswordExpiryDays    int  `json:"passwordExpiryDays" bun:"password_expiry_days"` // 0 = never

	// Session Requirements
	SessionMaxAge      int  `json:"sessionMaxAge" bun:"session_max_age"`           // seconds
	SessionIdleTimeout int  `json:"sessionIdleTimeout" bun:"session_idle_timeout"` // seconds
	SessionIPBinding   bool `json:"sessionIpBinding" bun:"session_ip_binding"`

	// Audit Requirements
	RetentionDays      int  `json:"retentionDays" bun:"retention_days"`
	AuditLogExport     bool `json:"auditLogExport" bun:"audit_log_export"`
	DetailedAuditTrail bool `json:"detailedAuditTrail" bun:"detailed_audit_trail"`

	// Data Requirements
	DataResidency       string `json:"dataResidency" bun:"data_residency"` // US, EU, APAC
	EncryptionAtRest    bool   `json:"encryptionAtRest" bun:"encryption_at_rest"`
	EncryptionInTransit bool   `json:"encryptionInTransit" bun:"encryption_in_transit"`

	// Access Control
	RBACRequired        bool `json:"rbacRequired" bun:"rbac_required"`
	LeastPrivilege      bool `json:"leastPrivilege" bun:"least_privilege"`
	RegularAccessReview bool `json:"regularAccessReview" bun:"regular_access_review"`

	// Contact
	ComplianceContact string `json:"complianceContact" bun:"compliance_contact"`
	DPOContact        string `json:"dpoContact" bun:"dpo_contact"` // Data Protection Officer

	// Metadata
	Metadata  map[string]interface{} `json:"metadata" bun:"metadata,type:jsonb"`
	CreatedAt time.Time              `json:"createdAt" bun:"created_at,notnull,default:now()"`
	UpdatedAt time.Time              `json:"updatedAt" bun:"updated_at,notnull,default:now()"`
}

type ComplianceProfileResponse struct {
	ID string `json:"id" example:"profile_123"`
}

type ComplianceReport struct {
	ID          string                 `json:"id" bun:"id,pk,type:uuid,default:gen_random_uuid()"`
	ProfileID   string                 `json:"profileId" bun:"profile_id,notnull"`
	AppID       string                 `json:"appId" bun:"organization_id,notnull"`  // Maps to organization_id column in DB
	ReportType  string                 `json:"reportType" bun:"report_type,notnull"` // soc2, hipaa, audit_export
	Standard    ComplianceStandard     `json:"standard" bun:"standard"`
	Period      string                 `json:"period" bun:"period,notnull"` // 2025-Q1, 2025-11
	Format      string                 `json:"format" bun:"format,notnull"` // pdf, json, csv
	Status      string                 `json:"status" bun:"status,notnull"` // generating, ready, failed
	FileURL     string                 `json:"fileUrl" bun:"file_url"`
	FileSize    int64                  `json:"fileSize" bun:"file_size"`
	Summary     map[string]interface{} `json:"summary" bun:"summary,type:jsonb"`
	GeneratedBy string                 `json:"generatedBy" bun:"generated_by"`
	CreatedAt   time.Time              `json:"createdAt" bun:"created_at,notnull,default:now()"`
	ExpiresAt   time.Time              `json:"expiresAt" bun:"expires_at"`
}

type ComplianceReportFileResponse struct {
	ContentType string `json:"content_type" example:"application/pdf"`
	Data        []byte `json:"data"`
}

type ComplianceReportResponse struct {
	ID string `json:"id" example:"report_123"`
}

type ComplianceReportsResponse struct {
	Reports []interface{} `json:"reports"`
}

type ComplianceStandard string

type ComplianceStatus struct {
	ProfileID     string             `json:"profileId"`
	AppID         string             `json:"appId"`
	Standard      ComplianceStandard `json:"standard"`
	OverallStatus string             `json:"overallStatus"` // compliant, non_compliant, in_progress
	Score         int                `json:"score"`         // 0-100
	ChecksPassed  int                `json:"checksPassed"`
	ChecksFailed  int                `json:"checksFailed"`
	ChecksWarning int                `json:"checksWarning"`
	Violations    int                `json:"violations"`
	LastChecked   time.Time          `json:"lastChecked"`
	NextAudit     time.Time          `json:"nextAudit"`
}

type ComplianceStatusDetailsResponse struct {
	Status string `json:"status" example:"compliant"`
}

type ComplianceStatusResponse struct {
	Status string `json:"status" example:"success"`
}

type ComplianceTemplate struct {
	Standard           ComplianceStandard `json:"standard"`
	Name               string             `json:"name"`
	Description        string             `json:"description"`
	MFARequired        bool               `json:"mfaRequired"`
	PasswordMinLength  int                `json:"passwordMinLength"`
	SessionMaxAge      int                `json:"sessionMaxAge"`
	RetentionDays      int                `json:"retentionDays"`
	DataResidency      string             `json:"dataResidency"`
	RequiredPolicies   []string           `json:"requiredPolicies"`
	RequiredTraining   []string           `json:"requiredTraining"`
	AuditFrequencyDays int                `json:"auditFrequencyDays"`
}

type ComplianceTemplateResponse struct {
	Standard string `json:"standard" example:"GDPR"`
}

type ComplianceTemplatesResponse struct {
	Templates []interface{} `json:"templates"`
}

type ComplianceTraining struct {
	ID           string                 `json:"id" bun:"id,pk,type:uuid,default:gen_random_uuid()"`
	ProfileID    string                 `json:"profileId" bun:"profile_id,notnull"`
	AppID        string                 `json:"appId" bun:"organization_id,notnull"` // Maps to organization_id column in DB
	UserID       string                 `json:"userId" bun:"user_id,notnull"`
	TrainingType string                 `json:"trainingType" bun:"training_type,notnull"` // security_awareness, hipaa_basics
	Standard     ComplianceStandard     `json:"standard" bun:"standard"`
	Status       string                 `json:"status" bun:"status,notnull"` // required, in_progress, completed
	CompletedAt  *time.Time             `json:"completedAt" bun:"completed_at"`
	ExpiresAt    *time.Time             `json:"expiresAt" bun:"expires_at"`
	Score        int                    `json:"score" bun:"score"` // percentage
	Metadata     map[string]interface{} `json:"metadata" bun:"metadata,type:jsonb"`
	CreatedAt    time.Time              `json:"createdAt" bun:"created_at,notnull,default:now()"`
}

type ComplianceTrainingResponse struct {
	ID string `json:"id" example:"training_123"`
}

type ComplianceTrainingsResponse struct {
	Training []interface{} `json:"training"`
}

type ComplianceUserTrainingResponse struct {
	UserID string `json:"user_id" example:"user_123"`
}

type ComplianceViolation struct {
	ID            string                 `json:"id" bun:"id,pk,type:uuid,default:gen_random_uuid()"`
	ProfileID     string                 `json:"profileId" bun:"profile_id,notnull"`
	AppID         string                 `json:"appId" bun:"organization_id,notnull"` // Maps to organization_id column in DB
	UserID        string                 `json:"userId" bun:"user_id"`
	ViolationType string                 `json:"violationType" bun:"violation_type,notnull"` // mfa_not_enabled, weak_password, etc.
	Severity      string                 `json:"severity" bun:"severity,notnull"`            // low, medium, high, critical
	Description   string                 `json:"description" bun:"description,notnull"`
	Status        string                 `json:"status" bun:"status,notnull"` // open, resolved, acknowledged
	ResolvedAt    *time.Time             `json:"resolvedAt" bun:"resolved_at"`
	ResolvedBy    string                 `json:"resolvedBy" bun:"resolved_by"`
	Metadata      map[string]interface{} `json:"metadata" bun:"metadata,type:jsonb"`
	CreatedAt     time.Time              `json:"createdAt" bun:"created_at,notnull,default:now()"`
}

type ComplianceViolationResponse struct {
	ID string `json:"id" example:"violation_123"`
}

type ComplianceViolationsResponse struct {
	Violations []interface{} `json:"violations"`
}

type Config struct {
	// Enable compliance plugin
	Enabled bool `json:"enabled" yaml:"enabled"`

	// Default compliance standard for new organizations
	DefaultStandard ComplianceStandard `json:"defaultStandard" yaml:"defaultStandard"`

	// Automated checks configuration
	AutomatedChecks AutomatedChecksConfig `json:"automatedChecks" yaml:"automatedChecks"`

	// Audit configuration
	Audit AuditConfig `json:"audit" yaml:"audit"`

	// Report configuration
	Reports ReportsConfig `json:"reports" yaml:"reports"`

	// Retention configuration
	Retention RetentionConfig `json:"retention" yaml:"retention"`

	// Notifications
	Notifications NotificationsConfig `json:"notifications" yaml:"notifications"`

	// Dashboard configuration
	Dashboard DashboardConfig `json:"dashboard" yaml:"dashboard"`
}

type CreateEvidenceRequest struct {
	EvidenceType string             `json:"evidenceType" validate:"required"`
	Standard     ComplianceStandard `json:"standard"`
	ControlID    string             `json:"controlId"`
	Title        string             `json:"title" validate:"required"`
	Description  string             `json:"description"`
	FileURL      string             `json:"fileUrl"`
}

type CreatePolicyRequest struct {
	PolicyType string             `json:"policyType" validate:"required"`
	Standard   ComplianceStandard `json:"standard"`
	Title      string             `json:"title" validate:"required"`
	Version    string             `json:"version" validate:"required"`
	Content    string             `json:"content" validate:"required"`
}

type CreateProfileFromTemplateRequest struct {
	Standard ComplianceStandard `json:"standard" validate:"required"`
}

type CreateProfileRequest struct {
	AppID                 string                 `json:"appId"`
	Name                  string                 `json:"name" validate:"required"`
	Standards             []ComplianceStandard   `json:"standards"`
	MFARequired           bool                   `json:"mfaRequired"`
	PasswordMinLength     int                    `json:"passwordMinLength"`
	PasswordRequireUpper  bool                   `json:"passwordRequireUpper"`
	PasswordRequireLower  bool                   `json:"passwordRequireLower"`
	PasswordRequireNumber bool                   `json:"passwordRequireNumber"`
	PasswordRequireSymbol bool                   `json:"passwordRequireSymbol"`
	PasswordExpiryDays    int                    `json:"passwordExpiryDays"`
	SessionMaxAge         int                    `json:"sessionMaxAge"`
	SessionIdleTimeout    int                    `json:"sessionIdleTimeout"`
	SessionIPBinding      bool                   `json:"sessionIpBinding"`
	RetentionDays         int                    `json:"retentionDays"`
	AuditLogExport        bool                   `json:"auditLogExport"`
	DetailedAuditTrail    bool                   `json:"detailedAuditTrail"`
	DataResidency         string                 `json:"dataResidency"`
	EncryptionAtRest      bool                   `json:"encryptionAtRest"`
	EncryptionInTransit   bool                   `json:"encryptionInTransit"`
	RBACRequired          bool                   `json:"rbacRequired"`
	LeastPrivilege        bool                   `json:"leastPrivilege"`
	RegularAccessReview   bool                   `json:"regularAccessReview"`
	ComplianceContact     string                 `json:"complianceContact"`
	DPOContact            string                 `json:"dpoContact"`
	Metadata              map[string]interface{} `json:"metadata"`
}

type CreateTrainingRequest struct {
	UserID       string             `json:"userId" validate:"required"`
	TrainingType string             `json:"trainingType" validate:"required"`
	Standard     ComplianceStandard `json:"standard"`
}

type DashboardConfig struct {
	// Enable compliance dashboard
	Enabled bool `json:"enabled" yaml:"enabled"`

	// Dashboard path
	Path string `json:"path" yaml:"path"` // e.g., /auth/compliance

	// Show overall compliance score
	ShowScore bool `json:"showScore" yaml:"showScore"`

	// Show violations
	ShowViolations bool `json:"showViolations" yaml:"showViolations"`

	// Show recent checks
	ShowRecentChecks bool `json:"showRecentChecks" yaml:"showRecentChecks"`

	// Show reports
	ShowReports bool `json:"showReports" yaml:"showReports"`
}

type Email struct {
	To      string
	Subject string
	Body    string
}

type EmailService interface {
	SendEmail(ctx context.Context, email *Email) error
}

type EmailServiceAdapter struct {
	// contains filtered or unexported fields
}

type ErrorResponse = responses.ErrorResponse

type GenerateReportRequest struct {
	ReportType string             `json:"reportType" validate:"required"`
	Standard   ComplianceStandard `json:"standard"`
	Period     string             `json:"period" validate:"required"`
	Format     string             `json:"format" validate:"required"`
}

type Handler struct {
	// contains filtered or unexported fields
}

type ListChecksFilter struct {
	pagination.PaginationParams

	ProfileID   *string    `json:"profileId,omitempty" query:"profile_id"`
	AppID       *string    `json:"appId,omitempty" query:"app_id"`
	CheckType   *string    `json:"checkType,omitempty" query:"check_type"`
	Status      *string    `json:"status,omitempty" query:"status"`
	SinceBefore *time.Time `json:"sinceBefore,omitempty" query:"since_before"`
}

type ListEvidenceFilter struct {
	pagination.PaginationParams

	AppID        *string             `json:"appId,omitempty" query:"app_id"`
	ProfileID    *string             `json:"profileId,omitempty" query:"profile_id"`
	EvidenceType *string             `json:"evidenceType,omitempty" query:"evidence_type"`
	Standard     *ComplianceStandard `json:"standard,omitempty" query:"standard"`
	ControlID    *string             `json:"controlId,omitempty" query:"control_id"`
}

type ListPoliciesFilter struct {
	pagination.PaginationParams

	AppID      *string             `json:"appId,omitempty" query:"app_id"`
	ProfileID  *string             `json:"profileId,omitempty" query:"profile_id"`
	PolicyType *string             `json:"policyType,omitempty" query:"policy_type"`
	Standard   *ComplianceStandard `json:"standard,omitempty" query:"standard"`
	Status     *string             `json:"status,omitempty" query:"status"`
}

type ListProfilesFilter struct {
	pagination.PaginationParams

	AppID    *string             `json:"appId,omitempty" query:"app_id"`
	Status   *string             `json:"status,omitempty" query:"status"`
	Standard *ComplianceStandard `json:"standard,omitempty" query:"standard"`
}

type ListReportsFilter struct {
	pagination.PaginationParams

	AppID      *string             `json:"appId,omitempty" query:"app_id"`
	ProfileID  *string             `json:"profileId,omitempty" query:"profile_id"`
	ReportType *string             `json:"reportType,omitempty" query:"report_type"`
	Standard   *ComplianceStandard `json:"standard,omitempty" query:"standard"`
	Status     *string             `json:"status,omitempty" query:"status"`
	Format     *string             `json:"format,omitempty" query:"format"`
}

type ListTrainingFilter struct {
	pagination.PaginationParams

	AppID        *string             `json:"appId,omitempty" query:"app_id"`
	ProfileID    *string             `json:"profileId,omitempty" query:"profile_id"`
	UserID       *string             `json:"userId,omitempty" query:"user_id"`
	TrainingType *string             `json:"trainingType,omitempty" query:"training_type"`
	Standard     *ComplianceStandard `json:"standard,omitempty" query:"standard"`
	Status       *string             `json:"status,omitempty" query:"status"`
}

type ListViolationsFilter struct {
	pagination.PaginationParams

	AppID         *string `json:"appId,omitempty" query:"app_id"`
	ProfileID     *string `json:"profileId,omitempty" query:"profile_id"`
	UserID        *string `json:"userId,omitempty" query:"user_id"`
	ViolationType *string `json:"violationType,omitempty" query:"violation_type"`
	Severity      *string `json:"severity,omitempty" query:"severity"`
	Status        *string `json:"status,omitempty" query:"status"`
}

type MessageResponse = responses.MessageResponse

type NotificationChannels struct {
	Email   bool `json:"email" yaml:"email"`
	Slack   bool `json:"slack" yaml:"slack"`
	Webhook bool `json:"webhook" yaml:"webhook"`
}

type NotificationsConfig struct {
	// Enable notifications
	Enabled bool `json:"enabled" yaml:"enabled"`

	// Notify on violations
	Violations bool `json:"violations" yaml:"violations"`

	// Notify on failed checks
	FailedChecks bool `json:"failedChecks" yaml:"failedChecks"`

	// Notify before audit
	AuditReminders bool `json:"auditReminders" yaml:"auditReminders"`

	// Notify compliance contact
	NotifyComplianceContact bool `json:"notifyComplianceContact" yaml:"notifyComplianceContact"`

	// Notify organization owners
	NotifyOwners bool `json:"notifyOwners" yaml:"notifyOwners"`

	// Notification channels
	Channels NotificationChannels `json:"channels" yaml:"channels"`
}

type Plugin struct {
	// contains filtered or unexported fields
}

type PolicyEngine struct {
	// contains filtered or unexported fields
}

type ReportsConfig struct {
	// Enable automated report generation
	Enabled bool `json:"enabled" yaml:"enabled"`

	// Report generation schedule
	Schedule string `json:"schedule" yaml:"schedule"` // cron format

	// Report formats
	Formats []string `json:"formats" yaml:"formats"` // pdf, json, csv

	// Report storage location
	StoragePath string `json:"storagePath" yaml:"storagePath"`

	// Report retention days
	RetentionDays int `json:"retentionDays" yaml:"retentionDays"`

	// Include evidence in reports
	IncludeEvidence bool `json:"includeEvidence" yaml:"includeEvidence"`
}

type Repository interface {
	// Compliance Profiles
	CreateProfile(ctx context.Context, profile *ComplianceProfile) error
	GetProfile(ctx context.Context, id string) (*ComplianceProfile, error)
	GetProfileByApp(ctx context.Context, appID string) (*ComplianceProfile, error)
	UpdateProfile(ctx context.Context, profile *ComplianceProfile) error
	DeleteProfile(ctx context.Context, id string) error
	ListProfiles(ctx context.Context, filter *ListProfilesFilter) (*pagination.PageResponse[*ComplianceProfile], error)

	// Compliance Checks
	CreateCheck(ctx context.Context, check *ComplianceCheck) error
	GetCheck(ctx context.Context, id string) (*ComplianceCheck, error)
	ListChecks(ctx context.Context, filter *ListChecksFilter) (*pagination.PageResponse[*ComplianceCheck], error)
	UpdateCheck(ctx context.Context, check *ComplianceCheck) error
	GetDueChecks(ctx context.Context) ([]*ComplianceCheck, error)

	// Violations
	CreateViolation(ctx context.Context, violation *ComplianceViolation) error
	GetViolation(ctx context.Context, id string) (*ComplianceViolation, error)
	ListViolations(ctx context.Context, filter *ListViolationsFilter) (*pagination.PageResponse[*ComplianceViolation], error)
	UpdateViolation(ctx context.Context, violation *ComplianceViolation) error
	ResolveViolation(ctx context.Context, id, resolvedBy string) error
	CountViolations(ctx context.Context, appID string, status string) (int, error)

	// Reports
	CreateReport(ctx context.Context, report *ComplianceReport) error
	GetReport(ctx context.Context, id string) (*ComplianceReport, error)
	ListReports(ctx context.Context, filter *ListReportsFilter) (*pagination.PageResponse[*ComplianceReport], error)
	UpdateReport(ctx context.Context, report *ComplianceReport) error
	DeleteReport(ctx context.Context, id string) error

	// Evidence
	CreateEvidence(ctx context.Context, evidence *ComplianceEvidence) error
	GetEvidence(ctx context.Context, id string) (*ComplianceEvidence, error)
	ListEvidence(ctx context.Context, filter *ListEvidenceFilter) (*pagination.PageResponse[*ComplianceEvidence], error)
	DeleteEvidence(ctx context.Context, id string) error

	// Policies
	CreatePolicy(ctx context.Context, policy *CompliancePolicy) error
	GetPolicy(ctx context.Context, id string) (*CompliancePolicy, error)
	GetActivePolicies(ctx context.Context, appID string) ([]*CompliancePolicy, error)
	ListPolicies(ctx context.Context, filter *ListPoliciesFilter) (*pagination.PageResponse[*CompliancePolicy], error)
	UpdatePolicy(ctx context.Context, policy *CompliancePolicy) error
	DeletePolicy(ctx context.Context, id string) error

	// Training
	CreateTraining(ctx context.Context, training *ComplianceTraining) error
	GetTraining(ctx context.Context, id string) (*ComplianceTraining, error)
	ListTraining(ctx context.Context, filter *ListTrainingFilter) (*pagination.PageResponse[*ComplianceTraining], error)
	UpdateTraining(ctx context.Context, training *ComplianceTraining) error
	GetUserTrainingStatus(ctx context.Context, userID string) ([]*ComplianceTraining, error)
	GetOverdueTraining(ctx context.Context, appID string) ([]*ComplianceTraining, error)
}

type ResolveViolationRequest struct {
	Resolution string `json:"resolution"`
	Notes      string `json:"notes"`
}

type RetentionConfig struct {
	// Enable automated data retention
	Enabled bool `json:"enabled" yaml:"enabled"`

	// Purge schedule (cron format)
	PurgeSchedule string `json:"purgeSchedule" yaml:"purgeSchedule"`

	// Grace period before purging (days)
	GracePeriodDays int `json:"gracePeriodDays" yaml:"gracePeriodDays"`

	// Archive before purging
	ArchiveBeforePurge bool `json:"archiveBeforePurge" yaml:"archiveBeforePurge"`

	// Archive location
	ArchivePath string `json:"archivePath" yaml:"archivePath"`
}

type RunCheckRequest struct {
	CheckType string `json:"checkType" validate:"required"`
}

type Service struct {
	// contains filtered or unexported fields
}

type Session struct {
	ID             string
	UserID         string
	CreatedAt      time.Time
	LastActivityAt time.Time
	CreatedIP      string
	CurrentIP      string
}

type StatusResponse = responses.StatusResponse

type SuccessResponse = responses.SuccessResponse

type UpdatePolicyRequest struct {
	Title   *string `json:"title"`
	Version *string `json:"version"`
	Content *string `json:"content"`
	Status  *string `json:"status"`
}

type UpdateProfileRequest struct {
	Name          *string `json:"name"`
	Status        *string `json:"status"`
	MFARequired   *bool   `json:"mfaRequired"`
	RetentionDays *int    `json:"retentionDays"`
}

type User struct {
	ID                string
	MFAEnabled        bool
	PasswordChangedAt time.Time
	LastLoginAt       time.Time
}

type UserService interface {
	ListByApp(ctx context.Context, appID string) ([]*User, error)
}

type UserServiceAdapter struct {
	// contains filtered or unexported fields
}