engine

type CommonEngineOptions struct {
	AllowedHostnames       []string
	IncludeRawData         bool
	EnablePrint            bool
	ControlPlaneConnection *grpc.ClientConn
}

type EvaluationResult struct {
	Violations []*PolicyViolation `json:"violations"`
	Skipped    bool               `json:"skipped"`
	SkipReason string             `json:"skipReason"`
	Ignore     bool               `json:"ignore"`
	RawData    *RawData           `json:"rawData"`
}

type Option func(*Options)

type Options struct {
	// Common options
	*CommonEngineOptions

	// Rego-specific options
	// OperatingMode defines whether the Rego engine runs in restrictive (0) or permissive (1) mode
	OperatingMode int32

	// WASM-specific options
	ExecutionTimeout time.Duration
	Logger           *zerolog.Logger
}

type Policy struct {
	// the source code for this policy
	Source []byte `json:"module"`
	// The unique policy name
	Name string `json:"name"`
}

type PolicyEngine interface {
	// Verify verifies an input against a policy
	Verify(ctx context.Context, policy *Policy, input []byte, args map[string]any) (*EvaluationResult, error)
	// MatchesParameters evaluates the matches_parameters rule to determine if evaluation parameters match expected parameters
	MatchesParameters(ctx context.Context, policy *Policy, evaluationParams, expectedParams map[string]string) (bool, error)
	// MatchesEvaluation evaluates the matches_evaluation rule using policy violations and expected parameters
	MatchesEvaluation(ctx context.Context, policy *Policy, violations []string, expectedParams map[string]string) (bool, error)
}

type PolicyType string

type PolicyViolation struct {
	Subject   string `json:"subject"`
	Violation string `json:"violation"`
}

type RawData struct {
	Input  json.RawMessage `json:"input"`
	Output json.RawMessage `json:"output"`
}

type ResultFormatError struct {
	Field string
}