detection

type ASTContext struct {
	// File-level information
	Language     string `json:"language"`
	FileType     string `json:"file_type"`  // e.g., "test", "config", "model", "controller"
	RiskZone     string `json:"risk_zone"`  // e.g., "customer_data", "payment_processing"
	RiskLevel    string `json:"risk_level"` // Critical, High, Medium, Low
	IsTestFile   bool   `json:"is_test_file"`
	IsConfigFile bool   `json:"is_config_file"`

	// Code structure
	Classes      []string `json:"classes,omitempty"`      // Class/type names defined in file
	Methods      []string `json:"methods,omitempty"`      // Method/function names
	Imports      []string `json:"imports,omitempty"`      // Import statements
	Dependencies []string `json:"dependencies,omitempty"` // External dependencies

	// Banking domain context
	BankingDomainIndicators []string `json:"banking_indicators,omitempty"` // e.g., "handles_customer_data", "processes_payments"
	SecurityPatterns        []string `json:"security_patterns,omitempty"`  // e.g., "uses_encryption", "has_authentication"

	// Surrounding code context
	EnclosingClass  string `json:"enclosing_class,omitempty"`  // Class containing the finding
	EnclosingMethod string `json:"enclosing_method,omitempty"` // Method containing the finding
	NearbyComments  string `json:"nearby_comments,omitempty"`  // Relevant comments near the finding
}

type Config struct {
	// Pattern matching
	EnableRegex    bool     `yaml:"enable_regex"`
	EnableGitleaks bool     `yaml:"enable_gitleaks"`
	CustomPatterns []string `yaml:"custom_patterns"`

	// Validation
	EnableValidation        bool `yaml:"enable_validation"`
	ValidateChecksums       bool `yaml:"validate_checksums"`
	EnableContextValidation bool `yaml:"enable_context_validation"`

	// Context analysis
	TestPathPatterns []string `yaml:"test_path_patterns"`
	MockPathPatterns []string `yaml:"mock_path_patterns"`
	ExcludePaths     []string `yaml:"exclude_paths"`

	// Confidence thresholds
	MinConfidenceThreshold float32 `yaml:"min_confidence_threshold"`
	ContextConfidenceBoost float32 `yaml:"context_confidence_boost"`

	// Risk scoring
	RiskWeights     map[PIType]int `yaml:"risk_weights"`
	ProximityWindow int            `yaml:"proximity_window"`

	// Performance
	MaxFileSize   int64 `yaml:"max_file_size"`
	MaxWorkers    int   `yaml:"max_workers"`
	EnableCaching bool  `yaml:"enable_cache"`

	// LLM Validation
	EnableLLMValidation bool        `yaml:"enable_llm_validation"`
	LLMProvider         string      `yaml:"llm_provider"`
	LLMEndpoint         string      `yaml:"llm_endpoint"`
	LLMModel            string      `yaml:"llm_model"`
	LLMAPIKey           string      `yaml:"llm_api_key"`
	LLMMaxTokens        int         `yaml:"llm_max_tokens"`
	LLMTemperature      float32     `yaml:"llm_temperature"`
	LLMValidateRisks    []RiskLevel `yaml:"llm_validate_risks"`
}

type ConfigLoader struct {
	// contains filtered or unexported fields
}

type Detector interface {
	// Detect analyzes content and returns findings
	Detect(ctx context.Context, content []byte, filename string) ([]Finding, error)

	// Name returns the detector name
	Name() string
}

type Finding struct {
	// Core fields
	Type   PIType `json:"type"`
	Match  string `json:"match"`
	File   string `json:"file"`
	Line   int    `json:"line"`
	Column int    `json:"column"`

	// Context
	Context       string `json:"context"`
	ContextBefore string `json:"context_before"`
	ContextAfter  string `json:"context_after"`

	// Risk assessment
	RiskLevel       RiskLevel `json:"risk_level"`
	Confidence      float32   `json:"confidence"`
	ContextModifier float32   `json:"context_modifier"`

	// Validation
	Validated       bool   `json:"validated"`
	ValidationError string `json:"validation_error,omitempty"`

	// LLM Validation
	LLMValidated   bool      `json:"llm_validated,omitempty"`
	LLMRisk        RiskLevel `json:"llm_risk,omitempty"`
	LLMExplanation string    `json:"llm_explanation,omitempty"`
	LLMConfidence  float64   `json:"llm_confidence,omitempty"`

	// Metadata
	DetectedAt   time.Time `json:"detected_at"`
	DetectorName string    `json:"detector_name"`

	// AST Context
	ASTContext *ASTContext `json:"ast_context,omitempty"`
}

type LLMEnhancedConfig struct {
	Enabled            bool        `yaml:"enabled"`
	ValidateRiskLevels []RiskLevel `yaml:"validate_risk_levels"`
	MaxConcurrency     int         `yaml:"max_concurrency"`
	SkipTestFiles      bool        `yaml:"skip_test_files"`
	ContextLinesBefore int         `yaml:"context_lines_before"`
	ContextLinesAfter  int         `yaml:"context_lines_after"`
}

type LLMEnhancedDetector struct {
	// contains filtered or unexported fields
}

type LLMValidationRequest struct {
	Finding       Finding     `json:"finding"`
	Context       string      `json:"context"`
	FilePath      string      `json:"file_path"`
	FileType      string      `json:"file_type"`
	IsTestFile    bool        `json:"is_test_file"`
	SurroundingPI []Finding   `json:"surrounding_pi,omitempty"`
	ASTContext    *ASTContext `json:"ast_context,omitempty"`
}

type LLMValidationResult struct {
	Risk        RiskLevel `json:"risk"`
	Explanation string    `json:"explanation"`
	Confidence  float64   `json:"confidence"`
	Timestamp   time.Time `json:"timestamp"`
}

type LLMValidator interface {
	ValidateFinding(ctx context.Context, req LLMValidationRequest) (*LLMValidationResult, error)
	HealthCheck(ctx context.Context) error
}

type PIType string

type PatternMatch struct {
	Value            string
	StartIndex       int
	EndIndex         int
	Groups           map[string]string
	ValidationPassed bool // Whether pattern-specific validation passed
}

type PatternMatcher interface {
	// Match finds all pattern matches in content
	Match(content []byte) []PatternMatch

	// Type returns the PI type this matcher detects
	Type() PIType
}

type RiskLevel string

type ScanError struct {
	File  string    `json:"file"`
	Error string    `json:"error"`
	Time  time.Time `json:"time"`
}

type ScanResult struct {
	Repository string      `json:"repository"`
	StartTime  time.Time   `json:"start_time"`
	EndTime    time.Time   `json:"end_time"`
	Findings   []Finding   `json:"findings"`
	Summary    ScanSummary `json:"summary"`
	Errors     []ScanError `json:"errors,omitempty"`
}

type ScanSummary struct {
	TotalFiles    int               `json:"total_files"`
	ScannedFiles  int               `json:"scanned_files"`
	SkippedFiles  int               `json:"skipped_files"`
	TotalFindings int               `json:"total_findings"`
	ByRiskLevel   map[RiskLevel]int `json:"by_risk_level"`
	ByType        map[PIType]int    `json:"by_type"`
	Duration      time.Duration     `json:"duration"`
}

type ValidationProgress struct {
	// contains filtered or unexported fields
}

type Validator interface {
	// Validate checks if the value is valid for this PI type
	Validate(value string) (bool, error)

	// Type returns the PI type this validator handles
	Type() PIType

	// Normalize returns a normalized version of the value
	Normalize(value string) string
}