config

type ArchConfig struct {
	Enable            bool `yaml:"enable"`              // Enable architecture analysis
	CheckImportCycles bool `yaml:"check_import_cycles"` // Detect circular dependencies
	CheckLayering     bool `yaml:"check_layering"`      // Detect direct cross-layer calls
	CheckGodStructs   bool `yaml:"check_god_structs"`   // Detect structs with too many responsibilities
}

type Config struct {
	Scan         ScanConfig       `yaml:"scan"`
	Rules        RuleConfig       `yaml:"rules"`
	Report       ReportConfig     `yaml:"report"`
	Dependencies DependencyConfig `yaml:"dependencies"`
	Metrics      MetricsConfig    `yaml:"metrics"`
	Architecture ArchConfig       `yaml:"architecture"`
	WebChecks    WebCheckConfig   `yaml:"web_checks"`
}

type DependencyConfig struct {
	CheckVulnerabilities bool     `yaml:"check_vulnerabilities"` // Enable CVE audit
	CheckLicenses        bool     `yaml:"check_licenses"`        // Enable license scan
	AllowLicenses        []string `yaml:"allow_licenses"`        // Allowlisted licenses
	DenyLicenses         []string `yaml:"deny_licenses"`         // Denylisted licenses
}

type MetricsConfig struct {
	Enable            bool `yaml:"enable"`             // Enable code metrics
	MaxFunctionLOC    int  `yaml:"max_function_loc"`   // Max lines of code per function
	MaxFileLOC        int  `yaml:"max_file_loc"`       // Max lines of code per file
	MaxCyclomatic     int  `yaml:"max_cyclomatic"`     // Max cyclomatic complexity
	EnableDuplication bool `yaml:"enable_duplication"` // Enable detection of duplicated code
}

type ReportConfig struct {
	Formats       []string `yaml:"formats"`        // List of output formats: json, sarif, html, markdown
	OutputPath    string   `yaml:"output_path"`    // Directory to write report files
	IncludeIssues bool     `yaml:"include_issues"` // Include individual issues in report
}

type RuleConfig struct {
	Enabled   []string          `yaml:"enabled"`    // List of enabled rule IDs or "*" for all
	Disabled  []string          `yaml:"disabled"`   // List of disabled rule IDs
	Severity  map[string]string `yaml:"severity"`   // Override severity for specific rules
	RulePaths []string          `yaml:"rule_paths"` // Directories where YAML rules are stored
}

type ScanConfig struct {
	IncludeTests        bool     `yaml:"include_tests"`        // Include *_test.go files
	IncludeVendor       bool     `yaml:"include_vendor"`       // Include vendor directory
	IncludeGenerated    bool     `yaml:"include_generated"`    // Include generated files
	ExcludedPaths       []string `yaml:"excluded_paths"`       // Paths to exclude from scanning
	MaxFileSizeBytes    int      `yaml:"max_file_size_bytes"`  // Max size of files to scan
	SupportedExtensions []string `yaml:"supported_extensions"` // File extensions to scan
}

type WebCheckConfig struct {
	EnableCORSCheck     bool `yaml:"enable_cors_check"`     // Check for open CORS
	EnableCSRFCheck     bool `yaml:"enable_csrf_check"`     // Check for CSRF protection
	EnableHeaderChecks  bool `yaml:"enable_header_checks"`  // Check for missing security headers
	EnableAuthChecks    bool `yaml:"enable_auth_checks"`    // Check for auth validations in handlers
	EnableInputValidate bool `yaml:"enable_input_validate"` // Check for unvalidated inputs
}