ir

type CSCallGraph struct {
	Nodes        map[string]ContextNode     // key: ContextNode.String()
	Edges        map[string][]ContextNode   // caller → callees
	ReverseEdges map[string][]ContextNode   // callee → callers
	Summaries    map[string]FunctionSummary // key: ContextNode.String()
	SCCs         map[int]*SCC               // SCC ID → SCC
	NodeToSCC    map[string]int             // ContextNode → SCC ID
}

type CallEdge struct {
	Caller    Symbol
	Callee    Symbol
	File      string
	Line      int
	Synthetic bool // true for virtual/inferred edges
}

type Context struct {
	Caller Symbol
}

type ContextNode struct {
	Function Symbol
	Context  Context
}

type FunctionCaps struct {
	Symbol         Symbol
	DirectCaps     capability.CapabilitySet
	TransitiveCaps capability.CapabilitySet
	Depth          int // max hops to nearest capability sink
}

type FunctionSummary struct {
	Node       ContextNode
	Sources    capability.CapabilitySet // Direct sources (env, network, fs:read)
	Sinks      capability.CapabilitySet // Direct sinks (exec, unsafe)
	Sanitizers capability.CapabilitySet // Sanitization (crypto)
	Effects    capability.CapabilitySet // All direct capabilities
	Transitive capability.CapabilitySet // Propagated from callees
	Depth      int                      // Max hops from capability
	Confidence float64                  // Min confidence across chain
	CallStack  []CallEdge               // Path to root capability
	Iteration  int                      // Fixpoint iteration when updated
}

type IRGraph struct {
	Calls     []CallEdge
	Functions map[string]FunctionCaps // Symbol.String() → FunctionCaps
}

type SCC struct {
	ID      int
	Nodes   []ContextNode
	Summary FunctionSummary // Collapsed summary for entire SCC
}

type Symbol struct {
	Package string // fully-qualified import path ("" = current package)
	Name    string // function / method / var / type name
	Kind    string // "func" | "method" | "var" | "type"
}