ecosystem

type AffectedResult struct {
	Status     version.VulnerabilityStatus `json:"status"`
	Message    string                      `json:"message"`
	VulnID     string                      `json:"vuln_id,omitempty"`
	FixVersion string                      `json:"fix_version,omitempty"`
	Severity   string                      `json:"severity,omitempty"`
}

type Finding struct {
	Package         Package         `json:"package"`
	Vulnerabilities []Vulnerability `json:"vulnerabilities"`
}

type FixAction struct {
	Type          string `json:"type"`                     // "upgrade", "patch", "remove", "workaround"
	Command       string `json:"command,omitempty"`        // Shell command to execute
	Description   string `json:"description,omitempty"`    // Human-readable explanation
	TargetVersion string `json:"target_version,omitempty"` // Version to upgrade to
	Breaking      bool   `json:"breaking,omitempty"`       // Potentially breaking change?
}

type OSVClient struct {
	// contains filtered or unexported fields
}

type Package struct {
	Name      string `json:"name"`
	Version   string `json:"version"`
	Ecosystem string `json:"ecosystem"`

	// Optional metadata
	Source   string `json:"source,omitempty"`   // Lock file path, system package db, etc.
	Direct   bool   `json:"direct,omitempty"`   // Direct vs transitive dependency
	Checksum string `json:"checksum,omitempty"` // For integrity verification
}

type Plugin interface {
	// Info returns metadata about the plugin.
	Info() PluginInfo

	// Detect checks if this plugin can handle the given path.
	// Returns true if lock files, manifests, or other indicators are found.
	Detect(ctx context.Context, path string) bool

	// Scan enumerates packages and checks for vulnerabilities.
	Scan(ctx context.Context, path string) (*ScanResult, error)

	// GetFix returns remediation actions for a specific vulnerability.
	// The package parameter provides context (current version, ecosystem).
	GetFix(ctx context.Context, pkg Package, vuln Vulnerability) (*FixAction, error)
}

type PluginInfo struct {
	// Name is the ecosystem identifier (e.g., "npm", "go", "debian").
	Name string

	// DisplayName is human-readable (e.g., "Node.js (npm)").
	DisplayName string

	// Description explains what this plugin handles.
	Description string

	// FilePatterns lists files this plugin looks for (e.g., "package-lock.json").
	FilePatterns []string

	// Priority determines order when multiple plugins match (higher = first).
	Priority int
}

type PluginWithAdvisorySource interface {
	Plugin

	// AdvisorySources returns the advisory databases this plugin uses.
	AdvisorySources() []string

	// CheckAdvisory queries a specific advisory database for a package.
	CheckAdvisory(ctx context.Context, source string, pkg Package) ([]Vulnerability, error)
}

type PluginWithNativeAudit interface {
	Plugin

	// NativeAudit runs the ecosystem's native audit command.
	// Returns findings directly from the native tool.
	NativeAudit(ctx context.Context, path string) (*ScanResult, error)
}

type Registry struct {
	// contains filtered or unexported fields
}

type ScanResult struct {
	Ecosystem       string     `json:"ecosystem"`
	PackagesScanned int        `json:"packages_scanned"`
	Findings        []Finding  `json:"findings"`
	Errors          []string   `json:"errors,omitempty"`
	Status          ScanStatus `json:"status"`
}

type ScanStatus string

type Vulnerability struct {
	ID         string   `json:"id"`                    // CVE-2021-23337, GHSA-xxx, etc.
	Aliases    []string `json:"aliases,omitempty"`     // Alternative IDs
	Severity   string   `json:"severity"`              // CRITICAL, HIGH, MEDIUM, LOW
	CVSSScore  *float64 `json:"cvss_score,omitempty"`  // Numeric score if available
	Summary    string   `json:"summary"`               // Short description
	Details    string   `json:"details,omitempty"`     // Full description
	FixVersion string   `json:"fix_version,omitempty"` // Version that fixes this
	References []string `json:"references,omitempty"`  // URLs for more info
}