bridge

type AESGCMEncryptor struct {
	// contains filtered or unexported fields
}

type AuditEvent struct {
	Action     string            `json:"action"`
	Resource   string            `json:"resource"`
	ResourceID string            `json:"resource_id,omitempty"`
	ActorID    string            `json:"actor_id,omitempty"`
	Tenant     string            `json:"tenant,omitempty"`
	OrgID      string            `json:"org_id,omitempty"`
	Outcome    string            `json:"outcome"`
	Severity   string            `json:"severity"`
	Category   string            `json:"category,omitempty"`
	Metadata   map[string]string `json:"metadata,omitempty"`
	Reason     string            `json:"reason,omitempty"`

	// Request correlation. Populated by the hook bus from the request
	// context; an event recorded outside a request leaves them empty.
	IP        string `json:"ip,omitempty"`
	UserAgent string `json:"user_agent,omitempty"`
	RequestID string `json:"request_id,omitempty"`
	SessionID string `json:"session_id,omitempty"`
}

type Authorizer interface {
	Check(ctx context.Context, req *AuthzRequest) (*AuthzResult, error)
}

type AuthorizerFunc func(ctx context.Context, req *AuthzRequest) (*AuthzResult, error)

type AuthzRequest struct {
	Subject  string `json:"subject"`
	Action   string `json:"action"`
	Resource string `json:"resource"`
	Tenant   string `json:"tenant,omitempty"`
}

type AuthzResult struct {
	Allowed bool   `json:"allowed"`
	Reason  string `json:"reason,omitempty"`
}

type BusChronicle struct {
	// contains filtered or unexported fields
}

type Chronicle interface {
	Record(ctx context.Context, event *AuditEvent) error
}

type ChronicleFunc func(ctx context.Context, event *AuditEvent) error

type CreateKeyInput struct {
	Name        string            `json:"name"`
	Owner       string            `json:"owner"`
	Environment string            `json:"environment,omitempty"`
	Scopes      []string          `json:"scopes,omitempty"`
	Metadata    map[string]string `json:"metadata,omitempty"`
}

type Dispatcher interface {
	// Enqueue submits a background job for immediate processing.
	Enqueue(ctx context.Context, jobName string, payload []byte) error

	// Schedule submits a background job for processing at a future time.
	Schedule(ctx context.Context, jobName string, payload []byte, runAt time.Time) error
}

type EmailMessage struct {
	To      []string `json:"to"`
	From    string   `json:"from,omitempty"`
	Subject string   `json:"subject"`
	HTML    string   `json:"html,omitempty"`
	Text    string   `json:"text,omitempty"`
}

type Encryptor interface {
	Encrypt(plaintext []byte) ([]byte, error)
	Decrypt(ciphertext []byte) ([]byte, error)
}

type EndpointInput struct {
	// TenantID is the Relay tenant the endpoint belongs to. Authsome uses
	// the app id, which is also what it sends events under, so an endpoint
	// only ever receives its own app's events.
	TenantID    string
	URL         string
	Description string
	// Secret signs deliveries. Empty on create lets Relay generate one.
	Secret string
	// EventTypes are the event names (or glob patterns) delivered.
	EventTypes []string
	Metadata   map[string]string
}

type EndpointRelay interface {
	CreateEndpoint(ctx context.Context, in EndpointInput) (string, error)
	UpdateEndpoint(ctx context.Context, endpointID string, in EndpointInput) error
	SetEndpointEnabled(ctx context.Context, endpointID string, enabled bool) error
	// DeleteEndpoint removes the endpoint; an endpoint that is already gone
	// is not an error.
	DeleteEndpoint(ctx context.Context, endpointID string) error
	// RotateEndpointSecret gives the endpoint a fresh secret and returns it.
	RotateEndpointSecret(ctx context.Context, endpointID string) (string, error)
}

type EventRelay interface {
	// Send emits an auth event for webhook delivery.
	Send(ctx context.Context, event *WebhookEvent) error

	// RegisterEventTypes registers authsome's webhook event catalog.
	RegisterEventTypes(ctx context.Context, defs []WebhookDefinition) error
}

type EventRelayFunc func(ctx context.Context, event *WebhookEvent) error

type Herald interface {
	// Send sends a notification via a specific channel.
	Send(ctx context.Context, req *HeraldSendRequest) error
	// Notify sends a notification across multiple channels using a template.
	Notify(ctx context.Context, req *HeraldNotifyRequest) error
}

type HeraldNotifyRequest struct {
	AppID    string            `json:"app_id"`
	EnvID    string            `json:"env_id,omitempty"`
	OrgID    string            `json:"org_id,omitempty"`
	UserID   string            `json:"user_id,omitempty"`
	Template string            `json:"template"`
	Locale   string            `json:"locale,omitempty"`
	To       []string          `json:"to"`
	Data     map[string]any    `json:"data,omitempty"`
	Channels []string          `json:"channels"`
	Async    bool              `json:"async,omitempty"`
	Metadata map[string]string `json:"metadata,omitempty"`
}

type HeraldRenderedContent struct {
	Subject string `json:"subject,omitempty"`
	HTML    string `json:"html,omitempty"`
	Text    string `json:"text,omitempty"`
	Title   string `json:"title,omitempty"`
}

type HeraldSendRequest struct {
	AppID    string            `json:"app_id"`
	EnvID    string            `json:"env_id,omitempty"`
	OrgID    string            `json:"org_id,omitempty"`
	UserID   string            `json:"user_id,omitempty"`
	Channel  string            `json:"channel"`
	Template string            `json:"template"`
	Locale   string            `json:"locale,omitempty"`
	To       []string          `json:"to"`
	Data     map[string]any    `json:"data,omitempty"`
	Async    bool              `json:"async,omitempty"`
	Metadata map[string]string `json:"metadata,omitempty"`
}

type HeraldTemplate struct {
	ID        string                   `json:"id"`
	AppID     string                   `json:"app_id"`
	Slug      string                   `json:"slug"`
	Name      string                   `json:"name"`
	Channel   string                   `json:"channel"`
	Category  string                   `json:"category"`
	Variables []HeraldTemplateVariable `json:"variables,omitempty"`
	Versions  []HeraldTemplateVersion  `json:"versions,omitempty"`
	IsSystem  bool                     `json:"is_system"`
	Enabled   bool                     `json:"enabled"`
	CreatedAt time.Time                `json:"created_at"`
	UpdatedAt time.Time                `json:"updated_at"`
}

type HeraldTemplateManager interface {
	// Template CRUD
	ListTemplates(ctx context.Context, appID string) ([]*HeraldTemplate, error)
	GetTemplate(ctx context.Context, templateID string) (*HeraldTemplate, error)
	CreateTemplate(ctx context.Context, t *HeraldTemplate) error
	UpdateTemplate(ctx context.Context, t *HeraldTemplate) error
	DeleteTemplate(ctx context.Context, templateID string) error

	// Version management
	CreateVersion(ctx context.Context, v *HeraldTemplateVersion) error
	UpdateVersion(ctx context.Context, v *HeraldTemplateVersion) error
	DeleteVersion(ctx context.Context, versionID string) error

	// Preview renders a template with sample data without sending.
	RenderTemplate(ctx context.Context, templateID string, locale string, data map[string]any) (*HeraldRenderedContent, error)

	// TestSend sends a test notification to a recipient.
	TestSend(ctx context.Context, req *HeraldSendRequest) error

	// SeedDefaultTemplates creates default system templates if they don't exist.
	// Existing templates (including customised ones) are left untouched.
	SeedDefaultTemplates(ctx context.Context, appID string) error

	// ResetDefaultTemplates deletes all system templates and re-seeds defaults.
	// Custom (non-system) templates are preserved.
	ResetDefaultTemplates(ctx context.Context, appID string) error
}

type HeraldTemplateVariable struct {
	Name        string `json:"name"`
	Type        string `json:"type"`
	Required    bool   `json:"required"`
	Default     string `json:"default,omitempty"`
	Description string `json:"description,omitempty"`
}

type HeraldTemplateVersion struct {
	ID         string    `json:"id"`
	TemplateID string    `json:"template_id"`
	Locale     string    `json:"locale"`
	Subject    string    `json:"subject,omitempty"`
	HTML       string    `json:"html,omitempty"`
	Text       string    `json:"text,omitempty"`
	Title      string    `json:"title,omitempty"`
	Active     bool      `json:"active"`
	CreatedAt  time.Time `json:"created_at"`
	UpdatedAt  time.Time `json:"updated_at"`
}

type KeyManager interface {
	CreateKey(ctx context.Context, input *CreateKeyInput) (*KeyResult, error)
	ValidateKey(ctx context.Context, rawKey string) (*ValidatedKey, error)
	RevokeKey(ctx context.Context, keyID string) error
}

type KeyResult struct {
	ID     string `json:"id"`
	RawKey string `json:"raw_key"` // Only returned on creation
}

type Keyring struct {
	// contains filtered or unexported fields
}

type Ledger interface {
	// RecordUsage records a usage event for a metered feature.
	RecordUsage(ctx context.Context, featureKey string, quantity int64) error

	// CheckEntitlement checks whether a tenant is entitled to use a feature.
	// Returns allowed=true if the feature is accessible, false otherwise.
	CheckEntitlement(ctx context.Context, featureKey string) (allowed bool, err error)
}

type Mailer interface {
	// SendEmail delivers a transactional email.
	SendEmail(ctx context.Context, msg *EmailMessage) error
}

type MailerFunc func(ctx context.Context, msg *EmailMessage) error

type MemoryChronicle struct {
	// contains filtered or unexported fields
}

type MemoryEndpoint struct {
	Input   EndpointInput
	Enabled bool
}

type MemoryRelay struct {
	// contains filtered or unexported fields
}

type MetricsCollector interface {
	// RecordEvent records an authentication event metric.
	RecordEvent(action, resource, outcome, tenant string, duration time.Duration)

	// IncrementGauge adjusts a named gauge (e.g., active sessions).
	IncrementGauge(name, tenant string, delta int)

	// IncrementCounter adds one to a named counter. Used for operational
	// signals such as audit.record.failed.
	IncrementCounter(name, tenant string)
}

type NoopDispatcher struct{}

type NoopEncryptor struct{}

type NoopHerald struct {
	Logger log.Logger
}

type NoopKeyManager struct{}

type NoopLedger struct{}

type NoopMailer struct {
	Logger log.Logger
}

type NoopRelay struct {
	Logger log.Logger
}

type NoopSMSSender struct{}

type NoopVault struct{}

type SMSMessage struct {
	To   string `json:"to"`
	Body string `json:"body"`
}

type SMSSender interface {
	// SendSMS sends an SMS message to the given phone number.
	SendSMS(ctx context.Context, msg *SMSMessage) error
}

type StrictEncryptor struct {
	Inner Encryptor
}

type ValidatedKey struct {
	ID          string            `json:"id"`
	Name        string            `json:"name"`
	Owner       string            `json:"owner"`
	Environment string            `json:"environment,omitempty"`
	Scopes      []string          `json:"scopes,omitempty"`
	Metadata    map[string]string `json:"metadata,omitempty"`
}

type Vault interface {
	// GetSecret returns a decrypted secret value by key.
	GetSecret(ctx context.Context, key string) ([]byte, error)

	// SetSecret creates or updates an encrypted secret.
	SetSecret(ctx context.Context, key string, value []byte) error

	// IsFeatureEnabled evaluates a boolean feature flag.
	IsFeatureEnabled(ctx context.Context, flag string) bool

	// GetConfig returns a configuration value by key.
	GetConfig(ctx context.Context, key string) (string, error)
}

type VaultFunc func(ctx context.Context, key string) ([]byte, error)

type WebhookDefinition struct {
	Name        string `json:"name"`
	Description string `json:"description"`
	Group       string `json:"group"`
}

type WebhookEvent struct {
	Type           string            `json:"type"`
	TenantID       string            `json:"tenant_id,omitempty"`
	EnvID          string            `json:"env_id,omitempty"`
	Data           map[string]string `json:"data,omitempty"`
	IdempotencyKey string            `json:"idempotency_key,omitempty"`
}