permissions

type Action string

type ApprovalPolicy struct {
	Name          string
	Tools         []string
	RiskLevel     string
	AutoApprove   bool
	RequireReason bool
	Timeout       time.Duration
	MaxPending    int
}

type ApprovalRequest struct {
	ID          string
	Tool        string
	Args        map[string]interface{}
	Risk        string
	Description string
	CreatedAt   time.Time
	Status      string // "pending", "approved", "denied", "expired"
	ExpiresAt   time.Time
	Reason      string
}

type ApprovalWorkflow struct {
	Policies []ApprovalPolicy
	Pending  []*ApprovalRequest
	History  []*ApprovalRequest
	PromptFn func(*ApprovalRequest) (bool, string)
	// contains filtered or unexported fields
}

type AskRecord struct {
	ToolName string
	Summary  string
	Allowed  bool
	Count    int
}

type AutoModeState struct {
	// contains filtered or unexported fields
}

type BoundaryChecker struct {
	ProjectRoot     string
	AllowedPaths    []string
	BlockedPaths    []string
	AllowedCommands []string
	BlockedCommands []string
	MaxFileSize     int64
	MaxFiles        int
	FilesModified   int
	// contains filtered or unexported fields
}

type BoundaryViolation struct {
	Type        string // "path", "command", "size", "count", "network", "env"
	Description string
	Attempted   string
	Allowed     string
	Severity    string // "LOW", "MEDIUM", "HIGH", "CRITICAL"
}

type BypassKillswitch struct {
	// contains filtered or unexported fields
}

type Canonicalizer struct{}

type CheckResult struct {
	Package        string
	Safe           bool
	Advisories     []string
	Severity       string
	Recommendation string
	CheckedAt      time.Time
}

type Classifier struct {
	// contains filtered or unexported fields
}

type ContentSource string

type Destination struct {
	Host       string
	Port       int
	Protocol   string
	Source     string
	Suspicious bool
}

type EgressAttempt struct {
	Command      string
	Destinations []Destination
	Allowed      bool
	Reason       string
}

type EgressInspector struct {
	AllowedDomains   []string
	BlockedDomains   []string
	AllowedProtocols []string
	// contains filtered or unexported fields
}

type Guardian struct {
	Enabled               bool
	Provider              string
	Model                 string
	Timeout               time.Duration
	MaxConsecutiveDenials int

	ChatFn func(ctx context.Context, prompt string) (string, error)
	// contains filtered or unexported fields
}

type GuardianDecision = contracts.GuardianDecision

type GuardianRequest struct {
	ToolName            string
	Arguments           map[string]interface{}
	ConversationContext string
	ProjectDescription  string
}

type InjectionPattern struct {
	Name     string
	Pattern  *regexp.Regexp
	Severity string // "critical", "high", "medium", "low"
	Category string // "system_override", "data_exfil", "role_hijack", "instruction_leak"
}

type InjectionScanner struct {
	Patterns  []*InjectionPattern
	Threshold float64
	// contains filtered or unexported fields
}

type InputSanitizer struct {
	MaxLength        int
	StripInvisible   bool
	NormalizeUnicode bool
	// contains filtered or unexported fields
}

type MalwareEntry struct {
	Package     string
	Ecosystem   string // "npm", "pypi", "go", "crates"
	Advisory    string
	Severity    string // "CRITICAL", "HIGH", "MEDIUM", "LOW"
	Description string
	DateAdded   time.Time
}

type OSVChecker struct {
	KnownMalware map[string]*MalwareEntry
	Cache        map[string]*CheckResult
	CacheTTL     time.Duration
	// contains filtered or unexported fields
}

type PermissionVerdict = contracts.PermissionVerdict

type Risk = contracts.Risk

type Rule struct {
	Tool    string `json:"tool"`    // tool name or "*" for all
	Pattern string `json:"pattern"` // glob pattern for arguments (e.g., "/tmp/*", "*.go", "go test*")
	Action  Action `json:"action"`
	Reason  string `json:"reason,omitempty"` // optional explanation
}

type RuleSet struct {
	Rules []Rule
	// contains filtered or unexported fields
}

type SanitizeChange struct {
	Type        string // "stripped", "normalized", "truncated", "escaped"
	Position    int
	Original    string
	Replacement string
}

type SanitizeResult struct {
	Clean       string
	Original    string
	Changes     []SanitizeChange
	WasModified bool
}

type ScanResult struct {
	IsSafe         bool
	Threats        []Threat
	Score          float64
	Recommendation string
}

type ShadowedRuleDetector struct{}

type Threat struct {
	Pattern  string
	Category string
	Severity string
	Match    string
	Position int
}

type WrapOptions struct {
	Source         ContentSource
	Sender         string
	Subject        string
	IncludeWarning bool
}