from enum import StrEnum


class AuditAction(StrEnum):
    AI_ASK = "ai.ask"
    AI_PROVIDER_HEALTH = "ai.provider_health"
    OPENCLAW_TOOLS_INVOKE = "openclaw.tools.invoke"
    GENERATE_EVENTS = "generate_events"
    FEISHU_WEBHOOK_EVENT = "webhook_event"
    FEISHU_LONG_CONNECTION_EVENT = "long_connection_event"
    FEISHU_SEND_TEXT = "send_text"
    FEISHU_SEND_CARD = "send_card"
    FEISHU_UPLOAD_IMAGE = "upload_image"
    LEGACY_SYNC_PROJECTS = "sync_projects"
    LEGACY_SYNC_TASKS = "sync_tasks"
    RISK_EVENT_ACTION = "risk_event_action"
    REPORT_PUSH = "report_push"
    AI_MEMORY_RECALL = "ai.memory_recall"
    AI_MEMORY_WRITE = "ai.memory_write"
    AI_RULE_CREATE = "ai.rule_create"
    AI_RULE_UPDATE = "ai.rule_update"
    ENTERPRISE_ANALYTICS = "enterprise_analytics"
    EVENT_DISPATCH = "event.dispatch"
    HEARTBEAT = "heartbeat"
    MARKET_SYNC = "market.sync"
    MARKET_WATCHLIST_UPDATE = "market.watchlist.update"


class AuditRiskLevel(StrEnum):
    LOW = "low"
    MEDIUM = "medium"
    HIGH = "high"


class AuditSource(StrEnum):
    API = "api"
    OPENCLAW = "openclaw"
    RISK = "risk"
    FEISHU = "feishu"
    LEGACY_MYSQL = "legacy_mysql"
    REPORTS = "reports"
    EVENTS = "events"
    AI_MEMORY = "ai_memory"
    OBSERVABILITY = "observability"
    MARKET = "market"


class AuditTargetType(StrEnum):
    AI = "ai"
    OPENCLAW_TOOL = "openclaw_tool"
    RISK_EVENTS = "risk-events"
    WORK_REPORTS = "work-reports"
    ENTERPRISE_ANALYTICS = "enterprise-analytics"
    AI_MEMORY = "ai-memory"
    DOMAIN_EVENT = "domain-event"
    HEARTBEAT = "heartbeat"
    MARKET = "market"


class AuditStatus(StrEnum):
    SUCCESS = "success"


AUDIT_REDACTED_VALUE = "[REDACTED]"
AUDIT_SENSITIVE_KEYS = frozenset(
    {
        "authorization",
        "api_key",
        "apikey",
        "access_token",
        "tenant_access_token",
        "token",
        "secret",
        "password",
        "openclaw_gateway_token",
        "hermes_api_key",
        "direct_llm_api_key",
        "market_data_token",
        "feishu_app_secret",
        "feishu_verification_token",
    }
)