security

type AuditEvent struct {
	ID         string
	Type       AuditEventType
	Severity   AuditSeverity
	Timestamp  time.Time
	UserID     string
	IP         string
	Action     string
	Resource   string
	ResourceID string
	Status     string // success, failure, denied
	Message    string
	Metadata   map[string]interface{}
	Duration   time.Duration
}

type AuditEventType string

type AuditFilter func(*AuditEvent) bool

type AuditLogger struct {
	// contains filtered or unexported fields
}

type AuditPersistence interface {
	Save(event *AuditEvent) error
	Query(filter *AuditQuery) ([]*AuditEvent, error)
	Delete(before time.Time) error
}

type AuditQuery struct {
	StartTime  time.Time
	EndTime    time.Time
	Types      []AuditEventType
	Severities []AuditSeverity
	UserIDs    []string
	Actions    []string
	Limit      int
	Offset     int
}

type AuditSeverity string

type CertificateInfo struct {
	Subject      pkix.Name
	Issuer       pkix.Name
	SerialNumber *big.Int
	NotBefore    time.Time
	NotAfter     time.Time
	DNSNames     []string
	IPAddresses  []string
	IsCA         bool
}

type CertificateManager struct {
	// contains filtered or unexported fields
}

type ComplianceReport struct {
	ID               string
	GeneratedAt      time.Time
	StartTime        time.Time
	EndTime          time.Time
	TotalEvents      int
	EventsByType     map[AuditEventType]int
	EventsBySeverity map[AuditSeverity]int
	CriticalEvents   []*AuditEvent
	Violations       []string
	Recommendations  []string
}

type Connection struct {
	ID        string
	IP        string
	UserID    string
	StartTime time.Time
	LastSeen  time.Time
	BytesSent int64
	BytesRecv int64
}

type ConnectionLimitConfig struct {
	// MaxConnectionsPerIP limits concurrent connections per IP
	MaxConnectionsPerIP int
	// MaxConnectionsGlobal limits total concurrent connections
	MaxConnectionsGlobal int
	// MaxConnectionRate limits new connections per second
	MaxConnectionRate int
	// BanDuration is how long to ban IPs that exceed limits
	BanDuration time.Duration
}

type ConnectionTracker struct {
	// contains filtered or unexported fields
}

type DataEncryptor struct {
	// contains filtered or unexported fields
}

type EncryptionConfig struct {
	Algorithm string // AES-256-GCM, AES-128-GCM
	KeySize   int    // 16 (AES-128) or 32 (AES-256)
}

type EncryptionKey struct {
	ID        string
	Key       []byte
	Algorithm string
	CreatedAt int64
	ExpiresAt int64 // 0 means no expiration
}

type Firewall struct {
	// contains filtered or unexported fields
}

type ForensicWatermark struct {
	ID        string
	UserID    string
	StreamID  string
	SessionID string
	Timestamp time.Time
	Metadata  map[string]string
}

type IPAction string

type IPRule struct {
	ID        string
	Pattern   string // IP address or CIDR notation
	Action    IPAction
	Reason    string
	CreatedAt time.Time
	ExpiresAt time.Time // Zero value means no expiration
	Priority  int       // Higher priority rules are checked first
}

type InMemoryPersistence struct {
	// contains filtered or unexported fields
}

type KeyManager struct {
	// contains filtered or unexported fields
}

type KeyRotationManager struct {
	// contains filtered or unexported fields
}

type KeyRotationPolicy struct {
	// RotateEvery defines how often to rotate keys
	RotateEvery time.Duration
	// MaxKeyAge is the maximum age before forcing rotation
	MaxKeyAge time.Duration
	// AutoRotate enables automatic key rotation
	AutoRotate bool
	// KeepHistory is how many old keys to keep for grace period
	KeepHistory int
	// GracePeriod allows old keys to work for this duration after rotation
	GracePeriod time.Duration
}

type MultiLevelRateLimiter struct {
	// contains filtered or unexported fields
}

type RateLimitConfig struct {
	// Requests is the number of requests allowed
	Requests int
	// Window is the time window for the rate limit
	Window time.Duration
	// Burst allows burst traffic up to this limit
	Burst int
}

type RateLimitLevel string

type RateLimitResult struct {
	Allowed    bool
	Level      RateLimitLevel
	Limit      int
	Remaining  int
	RetryAfter time.Duration
	ResetTime  time.Time
}

type RateLimiter struct {
	// contains filtered or unexported fields
}

type RotationStats struct {
	TotalKeys        int
	ActiveKeys       int
	ExpiredKeys      int
	AvgRotationCount float64
	NextRotation     time.Time
}

type StreamKey struct {
	ID            string
	StreamID      string
	Key           string
	UserID        string
	CreatedAt     time.Time
	ExpiresAt     time.Time
	IsActive      bool
	RotationCount int
	LastRotation  time.Time
}

type TLSConfig struct {
	// CertFile is the path to the TLS certificate file
	CertFile string
	// KeyFile is the path to the TLS private key file
	KeyFile string
	// MinVersion is the minimum TLS version (default: TLS 1.2)
	MinVersion uint16
	// MaxVersion is the maximum TLS version (default: TLS 1.3)
	MaxVersion uint16
	// CipherSuites is the list of allowed cipher suites
	CipherSuites []uint16
	// InsecureSkipVerify skips certificate verification (for testing only)
	InsecureSkipVerify bool
	// ClientAuth defines the client authentication policy
	ClientAuth tls.ClientAuthType
	// RootCAs is the pool of root CAs for client verification
	RootCAs *x509.CertPool
}

type TokenEncryptor struct {
	// contains filtered or unexported fields
}

type Watermark struct {
	ID        string
	Config    *WatermarkConfig
	CreatedAt time.Time
	UpdatedAt time.Time
}

type WatermarkConfig struct {
	// Type is the type of watermark
	Type WatermarkType
	// Position is where to place the watermark
	Position WatermarkPosition
	// Text is the text for text-based watermarks
	Text string
	// Opacity is the opacity of the watermark (0.0 - 1.0)
	Opacity float64
	// Scale is the scale factor for the watermark (0.0 - 1.0)
	Scale float64
	// OffsetX is the horizontal offset in pixels
	OffsetX int
	// OffsetY is the vertical offset in pixels
	OffsetY int
	// ImageData is the watermark image data
	ImageData []byte
	// EnableForensic enables forensic watermarking (invisible)
	EnableForensic bool
	// ForensicID is the unique ID embedded in forensic watermark
	ForensicID string
}

type WatermarkManager struct {
	// contains filtered or unexported fields
}

type WatermarkPosition string

type WatermarkType string