security

type AccessCache struct {
	// contains filtered or unexported fields
}

type AccessControlConfig struct {
	// 会话配置
	SessionTimeout     time.Duration `json:"session_timeout"`
	MaxSessionsPerUser int           `json:"max_sessions_per_user"`
	EnableSessionCache bool          `json:"enable_session_cache"`

	// 权限配置
	EnablePermissionCache  bool          `json:"enable_permission_cache"`
	PermissionCacheTimeout time.Duration `json:"permission_cache_timeout"`

	// 审计配置
	EnableAudit         bool       `json:"enable_audit"`
	AuditLevel          AuditLevel `json:"audit_level"`
	LoginFailureLockout bool       `json:"login_failure_lockout"`
	MaxFailedAttempts   int        `json:"max_failed_attempts"`

	// 安全配置
	PasswordPolicy   *PasswordPolicy   `json:"password_policy"`
	MFAPolicy        *MFAPolicy        `json:"mfa_policy"`
	IPLockdownPolicy *IPLockdownPolicy `json:"ip_lockdown_policy"`
}

type AccessController struct {
	// contains filtered or unexported fields
}

type AccessDecision struct {
	Allowed      bool           `json:"allowed"`
	Effect       PolicyEffect   `json:"effect"`
	Reason       string         `json:"reason"`
	Policies     []string       `json:"policies"`    // 影响决策的策略ID
	Roles        []string       `json:"roles"`       // 相关角色
	Permissions  []string       `json:"permissions"` // 相关权限
	CacheHit     bool           `json:"cache_hit"`
	DecisionTime time.Duration  `json:"decision_time"`
	EvaluatedAt  time.Time      `json:"evaluated_at"`
	Context      map[string]any `json:"context"`
}

type AccessEventStats struct {
	TotalAccessChecks int64 `json:"total_access_checks"`
	AccessGranted     int64 `json:"access_granted"`
	AccessDenied      int64 `json:"access_denied"`
	Unauthorized      int64 `json:"unauthorized"`
	Forbidden         int64 `json:"forbidden"`
}

type AccessPolicy struct {
	ID          string            `json:"id"`
	Name        string            `json:"name"`
	Description string            `json:"description"`
	Type        PolicyType        `json:"type"`       // 策略类型
	Effect      PolicyEffect      `json:"effect"`     // 策略效果
	Principal   string            `json:"principal"`  // 主体
	Resource    string            `json:"resource"`   // 资源
	Action      string            `json:"action"`     // 操作
	Conditions  []PolicyCondition `json:"conditions"` // 策略条件
	Priority    int               `json:"priority"`   // 优先级
	Enabled     bool              `json:"enabled"`
	CreatedAt   time.Time         `json:"created_at"`
	UpdatedAt   time.Time         `json:"updated_at"`
}

type AccessRequest struct {
	UserID      string         `json:"user_id"`
	Username    string         `json:"username"`
	Resource    string         `json:"resource"`
	Action      string         `json:"action"`
	Context     map[string]any `json:"context"`
	IPAddress   string         `json:"ip_address"`
	UserAgent   string         `json:"user_agent"`
	SessionID   string         `json:"session_id"`
	RequestTime time.Time      `json:"request_time"`
}

type ActionStat struct {
	Action     string `json:"action"`
	EventCount int64  `json:"event_count"`
}

type AdaptiveStrategy struct {
	LowStrategy    RedactionStrategy
	MediumStrategy RedactionStrategy
	HighStrategy   RedactionStrategy
}

type AlertType string

type AuditCategory string

type AuditConfiguration struct {
	// 存储配置
	StorageType   StorageType   `json:"storage_type"`
	StoragePath   string        `json:"storage_path,omitempty"`
	MaxFileSize   int64         `json:"max_file_size"`
	MaxFileAge    time.Duration `json:"max_file_age"`
	Compression   bool          `json:"compression"`
	Encryption    bool          `json:"encryption"`
	EncryptionKey string        `json:"encryption_key,omitempty"`

	// 缓存配置
	EnableCache  bool          `json:"enable_cache"`
	CacheSize    int           `json:"cache_size"`
	CacheTimeout time.Duration `json:"cache_timeout"`

	// 索引配置
	EnableIndexing bool     `json:"enable_indexing"`
	IndexFields    []string `json:"index_fields"`

	// 性能配置
	WorkerPoolSize int           `json:"worker_pool_size"`
	BatchSize      int           `json:"batch_size"`
	FlushInterval  time.Duration `json:"flush_interval"`

	// 保留策略
	RetentionPolicy *RetentionPolicy `json:"retention_policy"`

	// 实时监控
	EnableRealTime  bool           `json:"enable_real_time"`
	AlertThresholds map[string]int `json:"alert_thresholds"`

	// 安全配置
	EnableSignature bool   `json:"enable_signature"`
	SignatureKey    string `json:"signature_key,omitempty"`
	EnableHash      bool   `json:"enable_hash"`
	HashAlgorithm   string `json:"hash_algorithm,omitempty"`
}

type AuditEvent struct {
	ID         string         `json:"id"`
	Type       AuditType      `json:"type"`
	Timestamp  time.Time      `json:"timestamp"`
	Severity   AuditSeverity  `json:"severity"`
	Category   AuditCategory  `json:"category"`
	UserID     string         `json:"user_id,omitempty"`
	Username   string         `json:"username,omitempty"`
	AgentID    string         `json:"agent_id,omitempty"`
	SessionID  string         `json:"session_id,omitempty"`
	Resource   string         `json:"resource,omitempty"`
	Action     string         `json:"action,omitempty"`
	ObjectID   string         `json:"object_id,omitempty"`
	ObjectType string         `json:"object_type,omitempty"`
	IPAddress  string         `json:"ip_address,omitempty"`
	UserAgent  string         `json:"user_agent,omitempty"`
	Location   string         `json:"location,omitempty"`
	Result     AuditResult    `json:"result,omitempty"`
	Message    string         `json:"message"`
	Details    string         `json:"details,omitempty"`
	Duration   time.Duration  `json:"duration,omitempty"`
	RequestID  string         `json:"request_id,omitempty"`
	TraceID    string         `json:"trace_id,omitempty"`
	Metadata   map[string]any `json:"metadata,omitempty"`
	RiskScore  float64        `json:"risk_score,omitempty"`
	Tags       []string       `json:"tags,omitempty"`
}

type AuditFilters struct {
	TimeRange  *TimeRange      `json:"time_range,omitempty"`
	Types      []AuditType     `json:"types,omitempty"`
	Users      []string        `json:"users,omitempty"`
	Resources  []string        `json:"resources,omitempty"`
	Severities []AuditSeverity `json:"severities,omitempty"`
}

type AuditLevel string

type AuditLog interface {
	// 基础操作
	LogEvent(event AuditEvent) error
	LogEventAsync(event AuditEvent) error
	LogEvents(events []AuditEvent) error

	// 查询操作
	QueryEvents(ctx context.Context, query *AuditQuery) (*AuditResult, error)
	GetEvent(eventID string) (*AuditEvent, error)
	GetEventsByUser(userID string, limit int) ([]*AuditEvent, error)
	GetEventsByType(eventType AuditType, limit int) ([]*AuditEvent, error)
	GetEventsByTimeRange(start, end time.Time, limit int) ([]*AuditEvent, error)

	// 统计操作
	GetStatistics(ctx context.Context, filters *AuditFilters) (*AuditStatistics, error)
	GetEventSummary(timeRange TimeRange) (*EventSummary, error)

	// 管理操作
	ArchiveEvents(ctx context.Context, before time.Time) (int64, error)
	PurgeEvents(ctx context.Context, before time.Time) (int64, error)
	ExportEvents(ctx context.Context, query *AuditQuery, format ExportFormat) ([]byte, error)

	// 配置和状态
	GetConfiguration() *AuditConfiguration
	UpdateConfiguration(config *AuditConfiguration) error
	GetStatus() *AuditLogStatus
	Close() error
}

type AuditLogStatus struct {
	Status           string         `json:"status"`
	Version          string         `json:"version"`
	Uptime           time.Duration  `json:"uptime"`
	TotalEvents      int64          `json:"total_events"`
	EventsPerSecond  float64        `json:"events_per_second"`
	StorageSize      int64          `json:"storage_size"`
	LastEventTime    time.Time      `json:"last_event_time"`
	ErrorCount       int64          `json:"error_count"`
	LastError        string         `json:"last_error,omitempty"`
	WorkerPoolStatus map[string]any `json:"worker_pool_status"`
	MemoryUsage      map[string]any `json:"memory_usage"`
}

type AuditQuery struct {
	// 时间范围
	TimeRange *TimeRange `json:"time_range,omitempty"`

	// 过滤条件
	Types      []AuditType         `json:"types,omitempty"`
	Severities []AuditSeverity     `json:"severities,omitempty"`
	Categories []AuditCategory     `json:"categories,omitempty"`
	Users      []string            `json:"users,omitempty"`
	Resources  []string            `json:"resources,omitempty"`
	Actions    []string            `json:"actions,omitempty"`
	Results    []AuditResultStatus `json:"results,omitempty"`

	// 文本搜索
	SearchText string `json:"search_text,omitempty"`

	// 分页和排序
	Limit     int    `json:"limit"`
	Offset    int    `json:"offset"`
	OrderBy   string `json:"order_by"`   // 排序字段
	OrderDesc bool   `json:"order_desc"` // 是否降序

	// 元数据过滤
	MetadataFilters map[string]any `json:"metadata_filters,omitempty"`

	// 风险评分范围
	RiskScoreMin *float64 `json:"risk_score_min,omitempty"`
	RiskScoreMax *float64 `json:"risk_score_max,omitempty"`
}

type AuditResult struct {
	Events    []*AuditEvent `json:"events"`
	Total     int64         `json:"total"`
	Offset    int           `json:"offset"`
	Limit     int           `json:"limit"`
	HasMore   bool          `json:"has_more"`
	QueryTime time.Duration `json:"query_time"`
}

type AuditResultStatus string

type AuditSeverity string

type AuditStatistics struct {
	TimeRange      TimeRange           `json:"time_range"`
	TotalEvents    int64               `json:"total_events"`
	EventsByType   map[AuditType]int64 `json:"events_by_type"`
	EventsByUser   map[string]int64    `json:"events_by_user"`
	EventsByHour   map[int]int64       `json:"events_by_hour"` // 小时统计
	EventsByDay    map[string]int64    `json:"events_by_day"`  // 日期统计
	TopUsers       []UserStat          `json:"top_users"`
	TopResources   []ResourceStat      `json:"top_resources"`
	TopActions     []ActionStat        `json:"top_actions"`
	SecurityEvents SecurityEventStats  `json:"security_events"`
	AccessEvents   AccessEventStats    `json:"access_events"`
	GeneratedAt    time.Time           `json:"generated_at"`
}

type AuditType string

type BasicPolicyEngine struct {
	// contains filtered or unexported fields
}

type CacheEntry struct {
	// contains filtered or unexported fields
}

type ChallengeInfo struct {
	Type        string         `json:"type"` // CAPTCHA, MFA, 知识问答等
	Duration    time.Duration  `json:"duration"`
	MaxAttempts int            `json:"max_attempts"`
	Parameters  map[string]any `json:"parameters"`
}

type CompositePIIDetector struct {
	// contains filtered or unexported fields
}

type CompositeRedactor struct {
	// contains filtered or unexported fields
}

type ConditionLogic string

type ConditionOperator string

type ConditionType string

type ConditionalPIIConfig struct {
	Detector  PIIDetector
	Strategy  RedactionStrategy
	Condition func(context.Context, *middleware.ModelRequest) bool // 判断是否需要脱敏
	Priority  int
}

type ConditionalPIIMiddleware struct {
	*middleware.BaseMiddleware
	// contains filtered or unexported fields
}

type ContentRedactor interface {
	Redact(text string) string
}

type EngineConfig struct {
	EnableCaching     bool          `json:"enable_caching"`
	CacheTimeout      time.Duration `json:"cache_timeout"`
	EnableMetrics     bool          `json:"enable_metrics"`
	EnableAudit       bool          `json:"enable_audit"`
	MaxConcurrentEval int           `json:"max_concurrent_eval"`
	DefaultAction     PolicyAction  `json:"default_action"`
}

type EngineStatus struct {
	Status            string         `json:"status"`
	Version           string         `json:"version"`
	Uptime            time.Duration  `json:"uptime"`
	PolicyCount       int            `json:"policy_count"`
	ActivePolicyCount int            `json:"active_policy_count"`
	TotalEvaluations  int64          `json:"total_evaluations"`
	AverageLatency    time.Duration  `json:"average_latency"`
	ErrorRate         float64        `json:"error_rate"`
	LastReload        time.Time      `json:"last_reload"`
	MemoryUsage       map[string]any `json:"memory_usage"`
	CPUUsage          map[string]any `json:"cpu_usage"`
}

type EnvironmentConstraints struct {
	AllowedIPs       []string `json:"allowed_ips,omitempty"`
	BlockedIPs       []string `json:"blocked_ips,omitempty"`
	AllowedCountries []string `json:"allowed_countries,omitempty"`
	BlockedCountries []string `json:"blocked_countries,omitempty"`
	AllowedRegions   []string `json:"allowed_regions,omitempty"`
	BlockedRegions   []string `json:"blocked_regions,omitempty"`
	RequiredEnv      []string `json:"required_env,omitempty"`
	BlockedEnv       []string `json:"blocked_env,omitempty"`
	SecurityLevel    string   `json:"security_level,omitempty"`
}

type EventSummary struct {
	TimeRange       TimeRange       `json:"time_range"`
	TotalEvents     int64           `json:"total_events"`
	KeyMetrics      map[string]any  `json:"key_metrics"`
	Trends          []TrendData     `json:"trends"`
	Alerts          []SecurityAlert `json:"alerts"`
	Recommendations []string        `json:"recommendations"`
}

type ExportFormat string

type HashStrategy struct {
	ShowPrefix   bool   // 是否显示哈希前缀
	PrefixLength int    // 哈希前缀长度
	Salt         string // 盐值（用于增强安全性）
}

type IPLockdownPolicy struct {
	Enabled         bool     `json:"enabled"`
	AllowedIPs      []string `json:"allowed_ips"`
	BlockedIPs      []string `json:"blocked_ips"`
	TrustedNetworks []string `json:"trusted_networks"`
	RequireVPN      bool     `json:"require_vpn"`
}

type InMemoryAuditLog struct {
	// contains filtered or unexported fields
}

type MFAMethod string

type MFAPolicy struct {
	Enabled         bool        `json:"enabled"`
	RequiredRoles   []string    `json:"required_roles"`
	RequiredActions []string    `json:"required_actions"`
	Methods         []MFAMethod `json:"methods"`
	BackupMethods   []MFAMethod `json:"backup_methods"`
}

type MaskStrategy struct {
	MaskChar      rune // 掩码字符（默认 '*'）
	KeepPrefix    int  // 保留前缀长度
	KeepSuffix    int  // 保留后缀长度
	MinMaskLength int  // 最小掩码长度
}

type NoOpStrategy struct{}

type PIIContext struct {
	// Language 文本语言（zh/en等）
	Language string

	// AllowedTypes 允许的 PII 类型（白名单）
	AllowedTypes []PIIType

	// IgnorePatterns 忽略的模式（如公司邮箱域名）
	IgnorePatterns []string

	// MinConfidence 最低置信度阈值
	MinConfidence float64
}

type PIIDetectionResult struct {
	Matches      []PIIMatch
	HasPII       bool
	PIITypes     []PIIType
	HighestRisk  PIISensitivityLevel
	TotalMatches int
}

type PIIDetectionSummary struct {
	AgentID      string
	HasPII       bool
	TotalMatches int
	TypeCounts   map[PIIType]int
	HighestRisk  PIISensitivityLevel
}

type PIIDetector interface {
	// Detect 检测文本中的所有 PII。
	Detect(ctx context.Context, text string) ([]PIIMatch, error)

	// DetectTypes 检测指定类型的 PII。
	DetectTypes(ctx context.Context, text string, types ...PIIType) ([]PIIMatch, error)

	// ContainsPII 快速检查文本是否包含 PII。
	ContainsPII(ctx context.Context, text string) (bool, error)
}

type PIIMatch struct {
	Type       PIIType             // PII 类型
	Value      string              // 原始值
	Start      int                 // 起始位置
	End        int                 // 结束位置
	Confidence float64             // 置信度（0.0-1.0）
	Severity   PIISensitivityLevel // 敏感度级别
}

type PIIMiddlewareConfig struct {
	Detector       PIIDetector       // PII 检测器
	Strategy       RedactionStrategy // 脱敏策略
	EnableTracking bool              // 是否启用 PII 追踪
	Priority       int               // 中间件优先级（默认 200）
}

type PIIPattern struct {
	Type        PIIType
	Description string
	Regex       *regexp.Regexp
	Validator   func(string) bool // 可选的额外验证函数
}

type PIIRedactionMiddleware struct {
	*middleware.BaseMiddleware
	// contains filtered or unexported fields
}

type PIIRedactor struct {
	// contains filtered or unexported fields
}

type PIISensitivityLevel int

type PIIType string

type PasswordPolicy struct {
	MinLength        int           `json:"min_length"`
	RequireUppercase bool          `json:"require_uppercase"`
	RequireLowercase bool          `json:"require_lowercase"`
	RequireNumbers   bool          `json:"require_numbers"`
	RequireSymbols   bool          `json:"require_symbols"`
	MaxAge           time.Duration `json:"max_age"`
	HistoryCount     int           `json:"history_count"`
	PreventReuse     bool          `json:"prevent_reuse"`
}

type Permission struct {
	ID          string                `json:"id"`
	Name        string                `json:"name"`
	Description string                `json:"description"`
	Resource    string                `json:"resource"`   // 资源类型
	Action      string                `json:"action"`     // 操作类型
	Conditions  []PermissionCondition `json:"conditions"` // 权限条件
	Attributes  map[string]any        `json:"attributes"`
	Enabled     bool                  `json:"enabled"`
	CreatedAt   time.Time             `json:"created_at"`
	UpdatedAt   time.Time             `json:"updated_at"`
}

type PermissionCondition struct {
	Type        string `json:"type"`     // 条件类型
	Field       string `json:"field"`    // 字段名
	Operator    string `json:"operator"` // 操作符
	Value       any    `json:"value"`    // 条件值
	Description string `json:"description"`
}

type PolicyAction string

type PolicyAnalysis struct {
	PolicyID         string                 `json:"policy_id"`
	Period           TimeRange              `json:"period"`
	TotalRequests    int64                  `json:"total_requests"`
	AllowedRequests  int64                  `json:"allowed_requests"`
	DeniedRequests   int64                  `json:"denied_requests"`
	AverageScore     float64                `json:"average_score"`
	RiskDistribution map[RiskLevel]int64    `json:"risk_distribution"`
	ActionStats      map[PolicyAction]int64 `json:"action_stats"`
	TopViolators     []string               `json:"top_violators"`
	Recommendations  []string               `json:"recommendations"`
}

type PolicyCondition struct {
	ID          string            `json:"id"`
	Type        ConditionType     `json:"type"`
	Field       string            `json:"field"`
	Operator    ConditionOperator `json:"operator"`
	Value       any               `json:"value"`
	Logic       ConditionLogic    `json:"logic"` // AND, OR, NOT
	Description string            `json:"description"`
	Enabled     bool              `json:"enabled"`
	Metadata    map[string]any    `json:"metadata"`
}

type PolicyEffect string

type PolicyEngine interface {
	// 策略管理
	AddPolicy(policy *SecurityPolicy) error
	UpdatePolicy(policy *SecurityPolicy) error
	DeletePolicy(policyID string) error
	GetPolicy(policyID string) (*SecurityPolicy, error)
	ListPolicies(filters map[string]any) ([]*SecurityPolicy, error)
	EnablePolicy(policyID string) error
	DisablePolicy(policyID string) error

	// 策略评估
	Evaluate(request *PolicyRequest) (*PolicyEvaluation, error)
	EvaluateBatch(requests []*PolicyRequest) ([]*PolicyEvaluation, error)
	EvaluateRealTime(request *PolicyRequest) (*PolicyEvaluation, error)

	// 规则管理
	AddRule(policyID string, rule *PolicyRule) error
	RemoveRule(policyID string, ruleID string) error
	UpdateRule(policyID string, rule *PolicyRule) error

	// 条件管理
	AddCondition(policyID string, condition *PolicyCondition) error
	RemoveCondition(policyID string, conditionID string) error
	UpdateCondition(policyID string, condition *PolicyCondition) error

	// 分析和报告
	AnalyzePolicy(policyID string, timeRange TimeRange) (*PolicyAnalysis, error)
	GenerateReport(reportType ReportType, filters map[string]any) (*PolicyReport, error)

	// 配置和状态
	GetEngineStatus() *EngineStatus
	ReloadPolicies() error
	BackupPolicies() ([]byte, error)
	RestorePolicies(data []byte) error
}

type PolicyEvaluation struct {
	PolicyID            string          `json:"policy_id"`
	PolicyName          string          `json:"policy_name"`
	Allowed             bool            `json:"allowed"`
	Action              PolicyAction    `json:"action"`
	Reason              string          `json:"reason"`
	Score               float64         `json:"score"` // 风险评分 0-100
	RiskLevel           RiskLevel       `json:"risk_level"`
	Duration            time.Duration   `json:"duration"`
	MatchedRules        []string        `json:"matched_rules"`
	TriggeredConditions []string        `json:"triggered_conditions"`
	Response            *PolicyResponse `json:"response,omitempty"`
	Metadata            map[string]any  `json:"metadata"`
	EvaluatedAt         time.Time       `json:"evaluated_at"`
}

type PolicyReport struct {
	ID          string         `json:"id"`
	Type        ReportType     `json:"type"`
	Title       string         `json:"title"`
	Period      TimeRange      `json:"period"`
	GeneratedAt time.Time      `json:"generated_at"`
	GeneratedBy string         `json:"generated_by"`
	Content     map[string]any `json:"content"`
	Format      ReportFormat   `json:"format"`
}

type PolicyRequest struct {
	RequestID   string         `json:"request_id"`
	UserID      string         `json:"user_id,omitempty"`
	AgentID     string         `json:"agent_id,omitempty"`
	Action      string         `json:"action"`
	Resource    string         `json:"resource"`
	Context     map[string]any `json:"context"`
	IPAddress   string         `json:"ip_address,omitempty"`
	UserAgent   string         `json:"user_agent,omitempty"`
	Timestamp   time.Time      `json:"timestamp"`
	Environment string         `json:"environment,omitempty"`
	Location    string         `json:"location,omitempty"`
	Metadata    map[string]any `json:"metadata"`
}

type PolicyResponse struct {
	Message     string            `json:"message"`
	Code        int               `json:"code"`
	Headers     map[string]string `json:"headers,omitempty"`
	RedirectURL string            `json:"redirect_url,omitempty"`
	Challenge   *ChallengeInfo    `json:"challenge,omitempty"`
	Transform   *TransformInfo    `json:"transform,omitempty"`
	Metadata    map[string]any    `json:"metadata"`
}

type PolicyRule struct {
	ID          string         `json:"id"`
	Type        RuleType       `json:"type"`
	Field       string         `json:"field"`
	Operator    RuleOperator   `json:"operator"`
	Value       any            `json:"value"`
	Description string         `json:"description"`
	Enabled     bool           `json:"enabled"`
	Priority    int            `json:"priority"`
	Metadata    map[string]any `json:"metadata"`
}

type PolicyScope string

type PolicyTarget string

type PolicyType string

type RedactionReport struct {
	OriginalLength     int             // 原始文本长度
	RedactedLength     int             // 脱敏后文本长度
	TotalMatches       int             // 总匹配数
	RedactedCharacters int             // 脱敏字符数
	MatchesByType      map[PIIType]int // 每种类型的匹配数
}

type RedactionResult struct {
	OriginalLength int             `json:"original_length"`
	RedactedLength int             `json:"redacted_length"`
	PIIFound       bool            `json:"pii_found"`
	MatchedTypes   map[PIIType]int `json:"matched_types"`
	TotalMatches   int             `json:"total_matches"`
	Matches        []PIIMatch      `json:"matches"`
	Error          string          `json:"error,omitempty"`
}

type RedactionStrategy interface {
	// Redact 脱敏单个 PII 值。
	Redact(match PIIMatch) string

	// Name 返回策略名称。
	Name() string
}

type Redactor struct {
	// contains filtered or unexported fields
}

type RegexPIIDetector struct {
	// contains filtered or unexported fields
}

type ReplaceStrategy struct {
	UseTypeLabel bool               // 是否使用类型标签（如 [PHONE]）
	CustomLabels map[PIIType]string // 自定义标签
}

type ReportFormat string

type ReportType string

type ResourceStat struct {
	Resource   string `json:"resource"`
	EventCount int64  `json:"event_count"`
}

type RetentionPolicy struct {
	EnableAutoArchive bool          `json:"enable_auto_archive"`
	ArchiveAfter      time.Duration `json:"archive_after"`
	EnableAutoPurge   bool          `json:"enable_auto_purge"`
	PurgeAfter        time.Duration `json:"purge_after"`
	MinRetention      time.Duration `json:"min_retention"`
	MaxRetention      time.Duration `json:"max_retention"`
}

type RiskLevel string

type Role struct {
	ID          string         `json:"id"`
	Name        string         `json:"name"`
	Description string         `json:"description"`
	Permissions []string       `json:"permissions"`
	Parents     []string       `json:"parents"` // 父角色，继承权限
	Attributes  map[string]any `json:"attributes"`
	Enabled     bool           `json:"enabled"`
	Priority    int            `json:"priority"`
	CreatedAt   time.Time      `json:"created_at"`
	UpdatedAt   time.Time      `json:"updated_at"`
	CreatedBy   string         `json:"created_by"`
	UpdatedBy   string         `json:"updated_by"`
}

type RuleOperator string

type RuleType string

type SecurityAlert struct {
	ID          string         `json:"id"`
	Type        AlertType      `json:"type"`
	Severity    AuditSeverity  `json:"severity"`
	Message     string         `json:"message"`
	Description string         `json:"description"`
	Events      []string       `json:"events"` // 相关事件ID
	DetectedAt  time.Time      `json:"detected_at"`
	Metadata    map[string]any `json:"metadata,omitempty"`
}

type SecurityEventStats struct {
	TotalAlerts     int64 `json:"total_alerts"`
	TotalViolations int64 `json:"total_violations"`
	TotalAttacks    int64 `json:"total_attacks"`
	HighRiskEvents  int64 `json:"high_risk_events"`
	CriticalEvents  int64 `json:"critical_events"`
}

type SecurityPolicy struct {
	// 基本信息
	ID          string `json:"id"`
	Name        string `json:"name"`
	Description string `json:"description"`
	Version     string `json:"version"`
	Enabled     bool   `json:"enabled"`
	Priority    int    `json:"priority"` // 优先级，数值越高优先级越高

	// 作用域
	Scope     PolicyScope  `json:"scope"`
	Target    PolicyTarget `json:"target"`
	Resources []string     `json:"resources"` // 资源列表

	// 规则
	Rules      []PolicyRule      `json:"rules"`
	Conditions []PolicyCondition `json:"conditions"`

	// 动作
	Allow   []string `json:"allow"`   // 允许的动作
	Deny    []string `json:"deny"`    // 拒绝的动作
	Require []string `json:"require"` // 必需的条件

	// 时间限制
	TimeConstraints *TimeConstraints `json:"time_constraints,omitempty"`

	// 环境限制
	EnvironmentConstraints *EnvironmentConstraints `json:"environment_constraints,omitempty"`

	// 处理方式
	Action   PolicyAction   `json:"action"`
	Response PolicyResponse `json:"response"`

	// 元数据
	Tags     []string       `json:"tags"`
	Metadata map[string]any `json:"metadata"`

	// 审计
	AuditEnabled bool       `json:"audit_enabled"`
	AuditLevel   AuditLevel `json:"audit_level"`

	// 创建和更新信息
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
	CreatedBy string    `json:"created_by"`
	UpdatedBy string    `json:"updated_by"`
}

type Session struct {
	ID           string         `json:"id"`
	UserID       string         `json:"user_id"`
	Username     string         `json:"username"`
	Roles        []string       `json:"roles"`
	Permissions  []string       `json:"permissions"`
	IPAddress    string         `json:"ip_address"`
	UserAgent    string         `json:"user_agent"`
	Attributes   map[string]any `json:"attributes"`
	Status       SessionStatus  `json:"status"`
	CreatedAt    time.Time      `json:"created_at"`
	LastActivity time.Time      `json:"last_activity"`
	ExpiresAt    time.Time      `json:"expires_at"`
}

type SessionStatus string

type StorageType string

type TimeConstraints struct {
	StartDate *time.Time     `json:"start_date,omitempty"`
	EndDate   *time.Time     `json:"end_date,omitempty"`
	StartTime string         `json:"start_time,omitempty"` // HH:MM格式
	EndTime   string         `json:"end_time,omitempty"`   // HH:MM格式
	TimeZone  string         `json:"timezone,omitempty"`
	Weekdays  []int          `json:"weekdays,omitempty"` // 0-6，0为周日
	Duration  *time.Duration `json:"duration,omitempty"` // 最大持续时间
}

type TimeRange struct {
	Start time.Time `json:"start"`
	End   time.Time `json:"end"`
}

type TransformInfo struct {
	Type       string         `json:"type"` // 数据脱敏、格式转换等
	Parameters map[string]any `json:"parameters"`
}

type TrendData struct {
	Timestamp time.Time `json:"timestamp"`
	Value     int64     `json:"value"`
	Label     string    `json:"label,omitempty"`
}

type User struct {
	ID         string         `json:"id"`
	Username   string         `json:"username"`
	Email      string         `json:"email"`
	FullName   string         `json:"full_name"`
	Roles      []string       `json:"roles"`
	Attributes map[string]any `json:"attributes"`
	Status     UserStatus     `json:"status"`
	Enabled    bool           `json:"enabled"`
	LastLogin  *time.Time     `json:"last_login"`
	CreatedAt  time.Time      `json:"created_at"`
	UpdatedAt  time.Time      `json:"updated_at"`
}

type UserStat struct {
	UserID       string    `json:"user_id"`
	Username     string    `json:"username"`
	EventCount   int64     `json:"event_count"`
	LastActivity time.Time `json:"last_activity"`
}

type UserStatus string