tool_call_validation

type Config struct {
	Scope    string          `mapstructure:"scope"`
	Semantic *SemanticConfig `mapstructure:"semantic"`
	Rules    []RuleConfig    `mapstructure:"rules"`
}

type Plugin struct {
	// contains filtered or unexported fields
}

type RuleConfig struct {
	Tool         string   `mapstructure:"tool"`
	Validator    string   `mapstructure:"validator"`
	ArgumentPath string   `mapstructure:"argument_path"`
	Pattern      string   `mapstructure:"pattern"`
	Denylist     []string `mapstructure:"denylist"`
	Behavior     string   `mapstructure:"behavior"`
	RedactWith   string   `mapstructure:"redact_with"`
}

type SemanticConfig struct {
	Provider string `mapstructure:"provider"`
	APIKey   string `mapstructure:"api_key"` // #nosec G101 -- config field name, not a credential
	Model    string `mapstructure:"model"`
}

type ToolCallValidationData struct {
	Validator         string `json:"validator,omitempty"`
	Action            string `json:"action,omitempty"`
	ToolName          string `json:"tool_name,omitempty"`
	SemanticReasoning string `json:"semantic_reasoning,omitempty"`
	Degraded          bool   `json:"degraded,omitempty"`
	DegradedReason    string `json:"degraded_reason,omitempty"`
}

type Validator interface {
	Evaluate(in validatorInput) (violation, error)
}