@type action() ::
  :command_executed
  | :file_accessed
  | :network_connection
  | :privilege_escalation
  | :terminal_resized
  | :session_shared

@type t() :: %Raxol.Audit.Events.TerminalAuditEvent{
  action: action(),
  command: String.t() | nil,
  duration_ms: integer() | nil,
  environment_variables: map() | nil,
  event_id: String.t(),
  exit_code: integer() | nil,
  ip_address: String.t() | nil,
  metadata: map(),
  output_captured: boolean(),
  session_id: String.t() | nil,
  terminal_id: String.t(),
  timestamp: integer(),
  user_id: String.t(),
  working_directory: String.t() | nil
}