validate

type ASTScanner struct {
	// contains filtered or unexported fields
}

type DangerousPattern struct {
	// Name is the pattern identifier.
	Name string

	// Language is the language this pattern applies to ("" for all).
	Language string

	// NodeType is the AST node type to match (for AST-based detection).
	NodeType string

	// FuncNames are function names that trigger this pattern.
	FuncNames []string

	// Severity is the severity level.
	Severity Severity

	// Message describes the issue.
	Message string

	// Suggestion describes how to fix the issue.
	Suggestion string

	// Blocking indicates if this pattern should block patches.
	Blocking bool

	// WarnType is the warning type category.
	WarnType WarnType
}

type ErrorType string

type PatchStats struct {
	// LinesAdded is the number of lines added.
	LinesAdded int `json:"lines_added"`

	// LinesRemoved is the number of lines removed.
	LinesRemoved int `json:"lines_removed"`

	// FilesAffected is the number of files affected.
	FilesAffected int `json:"files_affected"`
}

type PatchValidator struct {
	// contains filtered or unexported fields
}

type PermissionIssue struct {
	// File is the file path.
	File string `json:"file"`

	// Issue describes the permission problem.
	Issue string `json:"issue"`
}

type SecretPattern struct {
	// Name is the pattern identifier.
	Name string

	// Pattern is the regex pattern.
	Pattern string

	// MinEntropy overrides the default minimum entropy.
	MinEntropy float64

	// Keywords are context keywords that must appear nearby.
	Keywords []string

	// Severity is the severity level.
	Severity Severity

	// Message describes the issue.
	Message string
}

type SecretScanner struct {
	// contains filtered or unexported fields
}

type Severity string

type ValidationError struct {
	// Type is the error type.
	Type ErrorType `json:"type"`

	// Message is a human-readable error message.
	Message string `json:"message"`

	// File is the file where the error occurred.
	File string `json:"file,omitempty"`

	// Line is the line number where the error occurred.
	Line int `json:"line,omitempty"`
}

type ValidationResult struct {
	// Valid indicates whether the patch passed validation.
	Valid bool `json:"valid"`

	// Errors contains blocking validation errors.
	Errors []ValidationError `json:"errors,omitempty"`

	// Warnings contains non-blocking warnings.
	Warnings []ValidationWarning `json:"warnings,omitempty"`

	// Permissions contains file permission issues.
	Permissions []PermissionIssue `json:"permissions,omitempty"`

	// Stats contains patch statistics.
	Stats PatchStats `json:"stats"`

	// PatternVersion is the version of the pattern database used.
	PatternVersion string `json:"pattern_version"`

	// ValidatedAt is when validation occurred (Unix milliseconds UTC).
	ValidatedAt int64 `json:"validated_at"`
}

type ValidationWarning struct {
	// Type is the warning type.
	Type WarnType `json:"type"`

	// Pattern is the dangerous pattern that was matched.
	Pattern string `json:"pattern"`

	// File is the file where the pattern was found.
	File string `json:"file"`

	// Line is the line number where the pattern was found.
	Line int `json:"line"`

	// Severity is the severity level.
	Severity Severity `json:"severity"`

	// Message is a human-readable warning message.
	Message string `json:"message"`

	// Suggestion is a suggestion for fixing the issue.
	Suggestion string `json:"suggestion,omitempty"`

	// Blocking indicates if this warning should block the patch.
	Blocking bool `json:"blocking"`
}

type ValidatorConfig struct {
	// MaxLines is the maximum number of lines allowed in a patch.
	MaxLines int

	// BlockDangerous determines if dangerous patterns block validation.
	BlockDangerous bool

	// WarnOnly makes all patterns warnings instead of blockers.
	WarnOnly bool

	// MinPatternVersion is the minimum required pattern version.
	MinPatternVersion string

	// AllowlistPaths are path patterns to skip for secret scanning.
	AllowlistPaths []string

	// MinSecretEntropy is the minimum entropy for secret detection.
	MinSecretEntropy float64

	// EnableLinter enables the linter integration.
	// When enabled, linting is performed on patched files.
	EnableLinter bool

	// BlockOnLintErrors blocks patches that have linter errors.
	// Only applies when EnableLinter is true.
	BlockOnLintErrors bool
}

type WarnType string