safety

type ChangeMetadata struct {
	// Reason explains why this change is being made.
	Reason string `json:"reason,omitempty"`

	// ToolName is the tool that initiated this change.
	ToolName string `json:"tool_name,omitempty"`

	// InvocationID links to the tool invocation.
	InvocationID string `json:"invocation_id,omitempty"`

	// OldContent is the previous content (for modifications).
	OldContent string `json:"old_content,omitempty"`

	// LineRange specifies the affected lines (for partial edits).
	LineRange *LineRange `json:"line_range,omitempty"`

	// Permissions are the requested file permissions (for creates).
	Permissions string `json:"permissions,omitempty"`
}

type Checker interface {
	// Name returns the checker name.
	Name() string

	// Check runs the safety check.
	Check(ctx context.Context, change *ProposedChange) []Issue
}

type CommandChecker struct {
	// contains filtered or unexported fields
}

type DefaultGate struct {
	// contains filtered or unexported fields
}

type FileSizeChecker struct {
	// contains filtered or unexported fields
}

type Gate interface {
	// Check validates the proposed changes.
	//
	// Inputs:
	//   ctx - Context for cancellation.
	//   changes - The changes to validate.
	//
	// Outputs:
	//   *Result - The check result.
	//   error - Non-nil if the check itself fails.
	Check(ctx context.Context, changes []ProposedChange) (*Result, error)

	// ShouldBlock determines if the result should block execution.
	//
	// Inputs:
	//   result - The check result.
	//
	// Outputs:
	//   bool - True if execution should be blocked.
	ShouldBlock(result *Result) bool

	// GenerateWarnings creates human-readable warnings from issues.
	//
	// Inputs:
	//   result - The check result.
	//
	// Outputs:
	//   []string - Warning messages.
	GenerateWarnings(result *Result) []string
}

type GateConfig struct {
	// Enabled determines if safety checks are enabled.
	Enabled bool

	// BlockOnCritical determines if critical issues block execution.
	BlockOnCritical bool

	// BlockOnWarning determines if warnings also block execution.
	BlockOnWarning bool

	// AllowedPaths are paths that are always allowed to be modified.
	AllowedPaths []string

	// BlockedPaths are paths that are never allowed to be modified.
	BlockedPaths []string

	// AllowedCommands are shell commands that are always allowed.
	AllowedCommands []string

	// BlockedCommands are shell commands that are never allowed.
	BlockedCommands []string

	// MaxFileSize is the maximum allowed file size for writes.
	MaxFileSize int64

	// AllowPackageInstall permits package installation commands when true.
	// When false (default), commands like "npm install", "pip install",
	// "cargo install", etc. are blocked to prevent supply chain attacks.
	// Set to true only when explicitly requested by user (e.g., --allow-install flag).
	AllowPackageInstall bool
}

type Issue struct {
	// Severity indicates how serious the issue is.
	Severity Severity `json:"severity"`

	// Code is a machine-readable issue code.
	Code string `json:"code"`

	// Message is a human-readable description.
	Message string `json:"message"`

	// Change is the change that triggered this issue.
	Change *ProposedChange `json:"change,omitempty"`

	// Suggestion is an optional suggested fix.
	Suggestion string `json:"suggestion,omitempty"`
}

type LineRange struct {
	Start int `json:"start"`
	End   int `json:"end"`
}

type MockGate struct {

	// CheckFunc overrides Check behavior.
	CheckFunc func(ctx context.Context, changes []ProposedChange) (*Result, error)

	// ShouldBlockFunc overrides ShouldBlock behavior.
	ShouldBlockFunc func(result *Result) bool

	// Calls records all Check calls.
	Calls [][]ProposedChange
	// contains filtered or unexported fields
}

type PathChecker struct {
	// contains filtered or unexported fields
}

type ProposedChange struct {
	// Type is the kind of change (e.g., "file_write", "file_delete", "shell_command").
	Type string `json:"type"`

	// Target is the target of the change (e.g., file path, command).
	Target string `json:"target"`

	// Content is the proposed content (for writes).
	Content string `json:"content,omitempty"`

	// Metadata contains additional typed information about the change.
	Metadata *ChangeMetadata `json:"metadata,omitempty"`
}

type Result struct {
	// Passed is true if no blocking issues were found.
	Passed bool `json:"passed"`

	// Issues contains all issues found during checking.
	Issues []Issue `json:"issues,omitempty"`

	// CriticalCount is the number of critical issues.
	CriticalCount int `json:"critical_count"`

	// WarningCount is the number of warnings.
	WarningCount int `json:"warning_count"`

	// ChecksRun is the number of safety checks that were executed.
	ChecksRun int `json:"checks_run"`
}

type SafetyConstraint struct {
	// IssueCode is the safety issue code (e.g., "SUPPLY_CHAIN_INSTALL").
	IssueCode string

	// Pattern describes what triggered the violation.
	Pattern string

	// ConflictingNodes are the MCTS nodes involved in the violation.
	ConflictingNodes []string

	// Reason explains why this is blocked.
	Reason string
}

type Severity string

type SupplyChainChecker struct {
	// contains filtered or unexported fields
}