gate

type ActorClaims struct {
	SubjectID string
	TenantID  string
	OrgID     string
	Roles     []string
	Perms     []string
}

type ActorRef struct {
	ID   string
	Type string
	Name string
}

type ClaimsProvider interface {
	ClaimsFromContext(ctx context.Context) (ActorClaims, error)
}

type DefaultTrace struct {
	Set   bool
	Value bool
	Error error
}

type FeatureGate interface {
	Enabled(ctx context.Context, key string, opts ...ResolveOption) (bool, error)
}

type MutableFeatureGate interface {
	FeatureGate
	Set(ctx context.Context, key string, scope ScopeRef, enabled bool, actor ActorRef) error
	Unset(ctx context.Context, key string, scope ScopeRef, actor ActorRef) error
}

type OverrideMatchTrace struct {
	Scope ScopeRef
	State OverrideState
	Value *bool
}

type OverrideState string

type OverrideTrace struct {
	State   OverrideState
	Value   *bool
	Error   error
	Match   ScopeRef
	Matches []OverrideMatchTrace
}

type PermissionProvider interface {
	Permissions(ctx context.Context, claims ActorClaims) ([]string, error)
}

type ResolveEvent struct {
	Key           string
	NormalizedKey string
	Chain         ScopeChain
	Value         bool
	Source        ResolveSource
	Error         error
	Trace         ResolveTrace
}

type ResolveHook interface {
	OnResolve(ctx context.Context, event ResolveEvent)
}

type ResolveHookFunc func(context.Context, ResolveEvent)

type ResolveOption func(*ResolveRequest)

type ResolveRequest struct {
	ScopeChain *ScopeChain
}

type ResolveSource string

type ResolveTrace struct {
	Key               string
	NormalizedKey     string
	Chain             ScopeChain
	Value             bool
	Source            ResolveSource
	Override          OverrideTrace
	Default           DefaultTrace
	CacheHit          bool
	Strategy          string
	ClaimsFailureMode string
}

type ScopeChain []ScopeRef

type ScopeKind uint8

type ScopeRef struct {
	Kind     ScopeKind
	ID       string
	TenantID string
	OrgID    string
}

type TraceableFeatureGate interface {
	FeatureGate
	ResolveWithTrace(ctx context.Context, key string, opts ...ResolveOption) (bool, ResolveTrace, error)
}