storage

type AttributeProvider interface {
	// GetUserAttributes fetches user attributes (roles, department, metadata)
	GetUserAttributes(ctx context.Context, userID xid.ID) (map[string]interface{}, error)

	// GetResourceAttributes fetches resource attributes (owner, tags, metadata)
	GetResourceAttributes(ctx context.Context, resourceType string, resourceID xid.ID) (map[string]interface{}, error)

	// GetRequestAttributes fetches request context (IP, time, geo)
	GetRequestAttributes(ctx context.Context) (map[string]interface{}, error)
}

type AuditFilters struct {
	ActorID      *xid.ID
	Action       *string
	ResourceType *string
	StartTime    *time.Time
	EndTime      *time.Time
	Limit        int
	Offset       int
}

type Cache interface {
	// Get retrieves a compiled policy from cache
	Get(ctx context.Context, key string) (*engine.CompiledPolicy, error)

	// Set stores a compiled policy in cache
	Set(ctx context.Context, key string, policy *engine.CompiledPolicy, ttl time.Duration) error

	// Delete removes a policy from cache
	Delete(ctx context.Context, key string) error

	// DeleteByApp removes all policies for an app
	DeleteByApp(ctx context.Context, appID xid.ID) error

	// DeleteByEnvironment removes all policies for an environment
	DeleteByEnvironment(ctx context.Context, appID, envID xid.ID) error

	// DeleteByOrganization removes all policies for a user-created organization
	DeleteByOrganization(ctx context.Context, appID, envID, userOrgID xid.ID) error

	// GetMulti retrieves multiple policies
	GetMulti(ctx context.Context, keys []string) (map[string]*engine.CompiledPolicy, error)

	// SetMulti stores multiple policies
	SetMulti(ctx context.Context, policies map[string]*engine.CompiledPolicy, ttl time.Duration) error

	// Stats returns cache statistics
	Stats() CacheStats
}

type CacheConfig struct {
	MaxSize    int           `json:"maxSize" yaml:"maxSize"`
	DefaultTTL time.Duration `json:"defaultTtl" yaml:"defaultTtl"`
	Backend    string        `json:"backend" yaml:"backend"` // memory, redis, hybrid
}

type CacheStats struct {
	Hits        int64
	Misses      int64
	Evictions   int64
	Size        int64
	HitRate     float64
	LastUpdated time.Time
}

type EvaluationStats struct {
	TotalEvaluations int64
	AllowedCount     int64
	DeniedCount      int64
	AvgLatencyMs     float64
	CacheHits        int64
	CacheMisses      int64
}

type HybridCache struct {
	// contains filtered or unexported fields
}

type MemoryCache struct {
	// contains filtered or unexported fields
}

type PolicyFilters struct {
	ResourceType *string
	Actions      []string
	Enabled      *bool
	NamespaceID  *xid.ID
	Limit        int
	Offset       int
}

type RedisCache struct {
	// contains filtered or unexported fields
}

type Repository interface {
	// Policy operations
	CreatePolicy(ctx context.Context, policy *core.Policy) error
	GetPolicy(ctx context.Context, id xid.ID) (*core.Policy, error)
	ListPolicies(ctx context.Context, appID, envID xid.ID, userOrgID *xid.ID, filters PolicyFilters) ([]*core.Policy, error)
	UpdatePolicy(ctx context.Context, policy *core.Policy) error
	DeletePolicy(ctx context.Context, id xid.ID) error
	GetPoliciesByResourceType(ctx context.Context, appID, envID xid.ID, userOrgID *xid.ID, resourceType string) ([]*core.Policy, error)
	GetActivePolicies(ctx context.Context, appID, envID xid.ID, userOrgID *xid.ID) ([]*core.Policy, error)

	// Namespace operations
	CreateNamespace(ctx context.Context, ns *core.Namespace) error
	GetNamespace(ctx context.Context, id xid.ID) (*core.Namespace, error)
	GetNamespaceByScope(ctx context.Context, appID, envID xid.ID, userOrgID *xid.ID) (*core.Namespace, error)
	ListNamespaces(ctx context.Context, appID, envID xid.ID, userOrgID *xid.ID) ([]*core.Namespace, error)
	UpdateNamespace(ctx context.Context, ns *core.Namespace) error
	DeleteNamespace(ctx context.Context, id xid.ID) error

	// Resource definition operations
	CreateResourceDefinition(ctx context.Context, res *core.ResourceDefinition) error
	GetResourceDefinition(ctx context.Context, id xid.ID) (*core.ResourceDefinition, error)
	ListResourceDefinitions(ctx context.Context, namespaceID xid.ID) ([]*core.ResourceDefinition, error)
	DeleteResourceDefinition(ctx context.Context, id xid.ID) error

	// Action definition operations
	CreateActionDefinition(ctx context.Context, action *core.ActionDefinition) error
	GetActionDefinition(ctx context.Context, id xid.ID) (*core.ActionDefinition, error)
	ListActionDefinitions(ctx context.Context, namespaceID xid.ID) ([]*core.ActionDefinition, error)
	DeleteActionDefinition(ctx context.Context, id xid.ID) error

	// Audit operations
	CreateAuditEvent(ctx context.Context, event *core.AuditEvent) error
	ListAuditEvents(ctx context.Context, appID, envID xid.ID, userOrgID *xid.ID, filters AuditFilters) ([]*core.AuditEvent, error)

	// Analytics operations
	GetEvaluationStats(ctx context.Context, appID, envID xid.ID, userOrgID *xid.ID, timeRange map[string]interface{}) (*EvaluationStats, error)
}