analysis

type ACMatch struct {
	Signature *SecretSignature
	EndIndex  int
	Snippet   string
}

type AhoCorasickMatcher struct {
	// contains filtered or unexported fields
}

type AhoCorasickNode struct {
	// contains filtered or unexported fields
}

type AhoCorasickSecretsRule struct {
	// contains filtered or unexported fields
}

type AnalysisWorkerPool struct {
	// contains filtered or unexported fields
}

type BlocklistEntry struct {
	CIDR        string
	Category    string
	Description string
	Severity    string
}

type CORSRule struct{}

type CookieSecurityRule struct{}

type CustomRule struct {
	// contains filtered or unexported fields
}

type CustomRuleConfig struct {
	Name        string `yaml:"name"`
	Category    string `yaml:"category"`
	Severity    string `yaml:"severity"`
	Regex       string `yaml:"regex"`
	Description string `yaml:"description"`
	Remediation string `yaml:"remediation"`
	Location    string `yaml:"location"` // "all", "request_body", "response_body", "headers", "url"
}

type CustomRulesDocument struct {
	Rules []CustomRuleConfig `yaml:"rules"`
}

type Finding struct {
	ID          string    `json:"id"`
	RequestID   string    `json:"request_id"`
	Timestamp   time.Time `json:"timestamp"`
	Severity    string    `json:"severity"`
	Category    string    `json:"category"`
	RuleName    string    `json:"rule_name"`
	Title       string    `json:"title"`
	Description string    `json:"description"`
	Evidence    string    `json:"evidence"`
	Location    string    `json:"location"` // e.g. "Response Header: Set-Cookie", "Request Body", etc.
	Remediation string    `json:"remediation"`
	URL         string    `json:"url"`
	Method      string    `json:"method"`
}

type GraphQLRule struct{}

type IPBlocklistRule struct {
	// contains filtered or unexported fields
}

type InsecureAuthRule struct{}

type JWTDetails struct {
	Raw       string                 `json:"raw"`
	Header    map[string]interface{} `json:"header"`
	Payload   map[string]interface{} `json:"payload"`
	Signature string                 `json:"signature"`
	Algorithm string                 `json:"algorithm"`
	Type      string                 `json:"type"`
	Subject   string                 `json:"subject,omitempty"`
	Issuer    string                 `json:"issuer,omitempty"`
	ExpiresAt *time.Time             `json:"expires_at,omitempty"`
	IssuedAt  *time.Time             `json:"issued_at,omitempty"`
	IsExpired bool                   `json:"is_expired"`
	Findings  []*Finding             `json:"findings"`
}

type JWTSecurityRule struct{}

type LLMCallTelemetry struct {
	Provider         LLMProvider `json:"provider"`
	Model            string      `json:"model"`
	PromptTokens     int         `json:"prompt_tokens"`
	CompletionTokens int         `json:"completion_tokens"`
	TotalTokens      int         `json:"total_tokens"`
	EstimatedCostUSD float64     `json:"estimated_cost_usd"`
	IsStreaming      bool        `json:"is_streaming"`
	IsLocal          bool        `json:"is_local"`
}

type LLMProvider string

type LLMRule struct {
	// contains filtered or unexported fields
}

type PIIRule struct{}

type RadixNode struct {
	// contains filtered or unexported fields
}

type RadixTrie struct {
	// contains filtered or unexported fields
}

type ResultHandler interface {
	HandleResult(event *ringbuffer.TrafficEvent, findings []*Finding)
}

type Rule interface {
	Name() string
	Evaluate(event *ringbuffer.TrafficEvent) []*Finding
}

type SecretSignature struct {
	ID          string `json:"id"`
	Pattern     string `json:"pattern"`
	Category    string `json:"category"`
	Severity    string `json:"severity"`
	Description string `json:"description"`
	Remediation string `json:"remediation"`
}

type SecretsRule struct {
	// contains filtered or unexported fields
}

type SecurityHeadersRule struct{}

type SecurityRulesEngine struct {
	// contains filtered or unexported fields
}

type StackTraceRule struct {
	// contains filtered or unexported fields
}