report

type AuditReport struct {
	SchemaVersion  string               `json:"schema_version"`
	CodefitVersion string               `json:"codefit_version"`
	Timestamp      time.Time            `json:"timestamp"`
	Project        string               `json:"project"`
	Language       string               `json:"language"`
	Commit         string               `json:"commit,omitempty"`
	Score          scoring.ScoreSummary `json:"score"`
	Blocked        bool                 `json:"blocked"`
	BlockReason    string               `json:"block_reason,omitempty"`
	Baseline       *BaselineSummary     `json:"baseline,omitempty"`
	Findings       []findings.Finding   `json:"findings"`
	// Surface is the auditable structural surface the agent must reason about
	// (PRD section 10), aggregated across sensors.
	Surface []findings.SurfaceItem `json:"surface,omitempty"`
	// Endpoints is the synthesis view (codefit-scan-all): the deterministic
	// findings and the surface grouped by the handler they belong to, each
	// endpoint's concerns ordered by certainty (deterministic → confirmed →
	// frontier). It is the complete picture per endpoint for the agent to reason;
	// the flat Findings/Surface remain for traceability.
	Endpoints []EndpointReport `json:"endpoints,omitempty"`
	// CoverageNote states which classes of problems were not audited (derived
	// from the coverage manifest), so the report always informs its own limits
	// (PRD section 21). Populated once the coverage manifest exists (Fase C).
	CoverageNote   string                  `json:"coverage_note,omitempty"`
	RegressionRisk *RegressionRisk         `json:"regression_risk,omitempty"`
	SensorResults  []findings.SensorResult `json:"sensor_results"`
}

type BaselineSummary struct {
	Active            bool `json:"active"`
	NewFindings       int  `json:"new_findings"`
	BaselinedFindings int  `json:"baselined_findings"`
}

type CertaintyLevel string

type Concern struct {
	Certainty     CertaintyLevel `json:"certainty"`
	Affirms       bool           `json:"affirms"` // true: codefit asserts a fact; false: codefit asks the agent
	Source        string         `json:"source"`  // "rule" | "surface"
	ID            string         `json:"id"`
	Category      string         `json:"category"` // security | idor | authz | overfetch
	Title         string         `json:"title"`
	Description   string         `json:"description,omitempty"` // deterministic finding description
	Signals       []string       `json:"signals,omitempty"`     // surface structural_signals (facts)
	Question      string         `json:"question,omitempty"`    // surface reason_to_review
	Line          int            `json:"line"`
	Confidence    float64        `json:"confidence"`
	Probabilistic bool           `json:"probabilistic"`
	// RefinesAuthz marks an IDOR concern whose endpoint also has an authz concern:
	// IDOR is the structural refinement of authz (the sensitive handler also
	// receives a client id). A fact about structure, not a judgment.
	RefinesAuthz bool `json:"refines_authz,omitempty"`
	// Actionable is true when the concern is a missing/broken control codefit
	// detected (an affirmed finding, no authz/ownership check, or no field limit).
	Actionable bool `json:"actionable"`
	// Gap names the KIND of missing control, hardest first: "affirmed" (a
	// deterministic finding), "access" (no authz/ownership on a sensitive
	// handler), "exposure" (a serialization with no select/omit). Empty when the
	// concern is not an actionable gap (e.g. a checked handler, or the frontier).
	Gap string `json:"gap,omitempty"`
	// Fingerprint is the concern's baseline content identity (findings.Fingerprint).
	// The agent passes it to codefit-baseline-accept / -prune.
	Fingerprint string `json:"fingerprint,omitempty"`
	// Baseline is the concern's delta vs the previous baseline, set by the scan-all
	// handler: "new" | "changed" | "known" | "acknowledged" (empty when no baseline).
	Baseline string `json:"baseline,omitempty"`
}

type EndpointReport struct {
	File            string    `json:"file"`
	Line            int       `json:"line"`             // handler anchor line (0 = module scope)
	Method          string    `json:"method,omitempty"` // GET/POST/... when known
	Actionable      int       `json:"actionable"`       // count of missing/broken-control concerns
	CertainConcerns int       `json:"certain_concerns"` // deterministic + surface_confirmed
	Concerns        []Concern `json:"concerns"`
}

type FrontierEndpoint struct {
	File       string   `json:"file"`
	Line       int      `json:"line,omitempty"`
	Method     string   `json:"method,omitempty"`
	Categories []string `json:"categories"`
}

type JSONRenderer struct{}

type RegressionItem struct {
	Symbol    string   `json:"symbol"`
	File      string   `json:"file"`
	Callsites []string `json:"callsites,omitempty"`
	Reason    string   `json:"reason,omitempty"`
}

type RegressionRisk struct {
	High   []RegressionItem `json:"high,omitempty"`
	Medium []RegressionItem `json:"medium,omitempty"`
}

type Renderer interface {
	Render(w io.Writer, r AuditReport) error
}

type ResolvedCleanEndpoint struct {
	File         string `json:"file"`
	Line         int    `json:"line,omitempty"`
	Method       string `json:"method,omitempty"`
	Verification string `json:"verification"`
}