policyeval

type ErrorResponse struct {
	Errors []EvalError `json:"errors"`
}

type EvalError struct {
	Code    string `json:"code"`
	Message string `json:"message"`
	File    string `json:"file,omitempty"`
	Row     int    `json:"row,omitempty"`
	Col     int    `json:"col,omitempty"`
}

type EvalErrors struct {
	Errors []EvalError
}

type EvalOutput struct {
	Title               *string            `mapstructure:"title,omitempty"`
	Description         *string            `mapstructure:"description,omitempty"`
	Remarks             *string            `mapstructure:"remarks,omitempty"`
	SkipReason          *string            `mapstructure:"skip_reason,omitempty"`
	Labels              *map[string]string `mapstructure:"labels,omitempty"`
	Violations          []Violation
	AdditionalVariables map[string]interface{}
}

type EvaluateModulesRequest struct {
	// Modules maps each module's file name to its source.
	Modules map[string]string
	// Input is bound to `input`.
	Input any
	// Data is merged into data.* exactly as the agent merges policy data.
	Data map[string]any
	// EvaluatedAt pins time.now_ns(). Defaults to now.
	EvaluatedAt *time.Time
}

type EvaluateRequest struct {
	// Policy is the Rego source of the policy under test, stored as module policy.rego.
	Policy string `json:"policy"`
	// Modules holds extra Rego modules the policy imports, keyed by file name.
	Modules map[string]string `json:"modules,omitempty"`
	// Input is bound to `input`. Any JSON value.
	Input any `json:"input"`
	// Data is merged into data.* exactly as the agent merges policy data.
	Data map[string]any `json:"data,omitempty"`
	// EvaluatedAt pins time.now_ns(). Defaults to now.
	EvaluatedAt *time.Time `json:"evaluatedAt,omitempty"`
}

type EvaluateResponse struct {
	Results    []EvaluateResult `json:"results"`
	Prints     []string         `json:"prints"`
	DurationMs int64            `json:"durationMs"`
}

type EvaluateResult struct {
	Package             string            `json:"package"`
	File                string            `json:"file"`
	Status              string            `json:"status"`
	Title               *string           `json:"title"`
	Description         *string           `json:"description"`
	Remarks             *string           `json:"remarks"`
	SkipReason          *string           `json:"skipReason"`
	Labels              map[string]string `json:"labels"`
	Violations          []Violation       `json:"violations"`
	AdditionalVariables map[string]any    `json:"additionalVariables"`
	Raw                 map[string]any    `json:"raw"`
	// Error explains why the agent would not turn this result into evidence.
	Error string `json:"error,omitempty"`
}

type Evaluator struct {
	// contains filtered or unexported fields
}

type Options struct {
	// Capabilities restricts the builtins and features policies may use. Nil means all.
	Capabilities *ast.Capabilities
	// Time pins time.now_ns() for every evaluation. Zero means the wall clock.
	Time time.Time
	// PrintHook receives print() output. Nil disables print statements.
	PrintHook print.Hook
}

type Package string

type Policy struct {
	File        string
	Package     Package
	Annotations []*ast.Annotations
}

type Result struct {
	Policy Policy
	*EvalOutput
	// Raw is the package's full value as returned by OPA, before decoding.
	Raw map[string]interface{}
}

type RuleLocation struct {
	File      string `json:"file"`
	StartLine int    `json:"startLine"`
	EndLine   int    `json:"endLine"`
}

type Violation struct {
	ID          *string `json:"id,omitempty" mapstructure:"id"`
	Title       *string `json:"title,omitempty" mapstructure:"title"`
	Description *string `json:"description,omitempty" mapstructure:"description"`
	Remarks     *string `json:"remarks,omitempty" mapstructure:"remarks"`
}

type ViolationRule struct {
	Location   RuleLocation
	Violations []Violation
}