handler

type API struct {
	// contains filtered or unexported fields
}

type DeletePolicyRequest struct {
	PolicyID string `path:"id" description:"Policy ID"`
}

type Dependencies struct {
	AuditStore  audit.Store
	VerifyStore verify.Store

	// StreamStore resolves a stream's owning app and tenant so chain
	// verification can confirm the caller owns the stream it names.
	StreamStore stream.Store

	ErasureStore erasure.Store

	// Erasure performs crypto-erasure: destroying the subject's key as well as
	// recording the request and flagging their events. Without it an erasure only
	// flags events, which is all that is possible when nothing encrypted them.
	Erasure *erasure.Service

	RetentionStore retention.Store
	ReportStore    compliance.ReportStore
	Compliance     *compliance.Engine
	Retention      *retention.Enforcer
	Logger         log.Logger

	// CheckpointStore persists signed checkpoints. Optional: when nil, the
	// checkpoint routes report 503 rather than panicking or 500ing, the same
	// way a nil Compliance engine does for the report routes.
	CheckpointStore checkpoint.Store

	// Checkpointer takes a signed checkpoint on demand for POST
	// /v1/checkpoints. Optional for the same reason as CheckpointStore: a
	// deployment that has not configured checkpointing still gets a working
	// API, just not that one write route.
	Checkpointer *checkpoint.Checkpointer

	// CheckpointSigner is what POST /v1/verify checks a covering
	// checkpoint's signature under. It has to be supplied alongside
	// CheckpointStore for the verify route to report checkpoints at all: a
	// store without a signer proves nothing, since anyone who can write the
	// checkpoint row could write a fabricated one.
	//
	// Optional, like the two above. Leave it nil and verification behaves
	// exactly as it did before checkpoints existed, with coverage topping
	// out at keyed.
	CheckpointSigner checkpoint.Signer

	// HashChain is the chain verification recomputes digests under. A
	// nil value here defaults to a zero-value, unkeyed chain, which is what
	// every deployment gets unless tamper_evidence.digest is "hmac". An HMAC
	// deployment that forgets to set this cannot verify anything at all, so
	// callers that have a keyed chain in hand should always pass it.
	HashChain *hash.Chain

	// Guards authenticate and authorise callers per operation class.
	//
	// A zero value leaves every route open to any caller that carries an app
	// scope, which only protects tenants from each other — it does not stop an
	// authenticated caller from purging their own app's audit history. The
	// extension refuses to mount an unguarded API unless the operator opts in.
	Guards Guards
}

type EventsByUserRequest struct {
	UserID string `path:"userId" description:"User ID"`
	After  string `query:"after" optional:"true" description:"Events after this time (RFC3339)"`
	Before string `query:"before" optional:"true" description:"Events before this time (RFC3339)"`
	Limit  int    `query:"limit" optional:"true" description:"Maximum events to return"`
}

type ExportReportRequest struct {
	ReportID string `path:"id" description:"Report ID"`
	Format   string `path:"format" description:"Export format: json, csv, markdown, html"`
}

type ForceCheckpointRequest struct {
	StreamID string `json:"stream_id" optional:"true" description:"Stream to checkpoint"`
}

type GetCheckpointRequest struct {
	CheckpointID string `path:"id" description:"Checkpoint ID"`
}

type GetErasureRequest struct {
	ErasureID string `path:"id" description:"Erasure record ID"`
}

type GetEventRequest struct {
	EventID string `path:"id" description:"Audit event ID"`
}

type GetReportRequest struct {
	ReportID string `path:"id" description:"Report ID"`
}

type Guard struct {
	// Middleware authenticates the caller and rejects insufficient permissions.
	// Nil means the route class is unprotected.
	Middleware forge.Middleware

	// Provider names the OpenAPI security scheme this guard authenticates with.
	Provider string

	// Scopes are the permissions Middleware enforces, recorded for documentation.
	Scopes []string
}

type Guards struct {
	Read  Guard
	Write Guard
	Admin Guard
}

type ListArchivesRequest struct {
	Limit  int `query:"limit" optional:"true" description:"Maximum results (default: 50)"`
	Offset int `query:"offset" optional:"true" description:"Number of results to skip"`
}

type ListErasuresRequest struct {
	Limit  int `query:"limit" optional:"true" description:"Maximum results (default: 50)"`
	Offset int `query:"offset" optional:"true" description:"Number of results to skip"`
}

type ListEventsRequest struct {
	Category string `query:"category" optional:"true" description:"Filter by category (comma-separated)"`
	Action   string `query:"action" optional:"true" description:"Filter by action (comma-separated)"`
	Severity string `query:"severity" optional:"true" description:"Filter by severity (comma-separated)"`
	Outcome  string `query:"outcome" optional:"true" description:"Filter by outcome (comma-separated)"`
	After    string `query:"after" optional:"true" description:"Events after this time (RFC3339)"`
	Before   string `query:"before" optional:"true" description:"Events before this time (RFC3339)"`
	Limit    int    `query:"limit" optional:"true" description:"Maximum results (default: 50, max: 1000)"`
	Offset   int    `query:"offset" optional:"true" description:"Number of results to skip"`
	Order    string `query:"order" optional:"true" description:"Sort order: asc or desc (default: desc)"`
}

type ListReportsRequest struct {
	Limit  int `query:"limit" optional:"true" description:"Maximum results (default: 50)"`
	Offset int `query:"offset" optional:"true" description:"Number of results to skip"`
}

type RequestErasureRequest struct {
	SubjectID   string `json:"subject_id" description:"Subject ID to erase"`
	Reason      string `json:"reason" description:"Reason for erasure"`
	RequestedBy string `json:"requested_by" description:"Who requested the erasure"`
}

type SavePolicyRequest struct {
	Category string `json:"category" description:"Event category to apply retention to"`
	Duration string `json:"duration" description:"Retention duration (Go duration string, e.g. 720h)"`
	Archive  bool   `json:"archive" description:"Whether to archive events before purging"`
}

type StatsResponse struct {
	TotalEvents  int64                  `json:"total_events"`
	Categories   []audit.AggregateGroup `json:"categories"`
	Severities   []audit.AggregateGroup `json:"severities"`
	Outcomes     []audit.AggregateGroup `json:"outcomes"`
	RecentEvents []*audit.Event         `json:"recent_events"`
}

type VerifyChainRequest struct {
	StreamID string `json:"stream_id" description:"Stream ID to verify"`
	FromSeq  uint64 `json:"from_seq" description:"Starting sequence number"`
	ToSeq    uint64 `json:"to_seq" description:"Ending sequence number"`
}