package store

import (
	"strings"
	"time"
)

const (
	AuditSourceAppBGP      = "bgp"
	AuditTargetAppResource = "app_resource"
	AuditSeverityInfo      = "info"
	AuditSeverityWarning   = "warning"
	AuditSeverityCritical  = "critical"
)

// AuditEntry is a persisted CRUD / settings audit row (local + portal ingest).
type AuditEntry struct {
	ID                string
	TenantID          string
	EventID           string
	SourceApp         string
	Action            string
	Severity          string
	ActorUserID       string
	ActorEmail        string
	ActorName         string
	ActorAPIKeyPrefix string
	TargetType        string
	TargetID          string
	Summary           string
	Details           map[string]any
	IP                string
	CreatedAt         time.Time
	PortalPushedAt    *time.Time
}

// AuditAppendInput is input for AppendAudit.
type AuditAppendInput struct {
	TenantID          string
	Action            string
	Severity          string
	ActorUserID       string
	ActorEmail        string
	ActorName         string
	ActorAPIKeyPrefix string
	TargetType        string
	TargetID          string
	Summary           string
	Details           map[string]any
	IP                string
}

// AuditListFilter optional query filters for ListAudit.
type AuditListFilter struct {
	Action   string
	Severity string
}

// ValidAuditSeverity reports whether s is an allowed severity.
func ValidAuditSeverity(s string) bool {
	switch strings.ToLower(strings.TrimSpace(s)) {
	case AuditSeverityInfo, AuditSeverityWarning, AuditSeverityCritical:
		return true
	default:
		return false
	}
}