query

type AnalysisPrecision string

type Approval struct {
	Reason    string     `json:"reason"`
	Scope     string     `json:"scope,omitempty"`
	CreatedBy string     `json:"created_by,omitempty"`
	CreatedAt time.Time  `json:"created_at,omitempty"`
	ExpiresAt *time.Time `json:"expires_at,omitempty"`
}

type ColumnRef struct {
	Table      string `json:"table,omitempty"`
	Name       string `json:"name,omitempty"`
	Expression string `json:"expression,omitempty"`
	Raw        bool   `json:"raw,omitempty"`
	Distinct   bool   `json:"distinct,omitempty"`
	Count      bool   `json:"count,omitempty"`
	Function   string `json:"function,omitempty"`
}

type Evidence struct {
	Key   string `json:"key"`
	Value any    `json:"value,omitempty"`
}

type JoinRef struct {
	Type        string `json:"type,omitempty"`
	Table       string `json:"table,omitempty"`
	Alias       string `json:"alias,omitempty"`
	LeftColumn  string `json:"left_column,omitempty"`
	Operator    string `json:"operator,omitempty"`
	RightColumn string `json:"right_column,omitempty"`
	Subquery    bool   `json:"subquery,omitempty"`
}

type OperationType string

type PolicyMode string

type PredicateRef struct {
	Group       int    `json:"group,omitempty"`
	Connector   string `json:"connector,omitempty"`
	Column      string `json:"column,omitempty"`
	Operator    string `json:"operator,omitempty"`
	ValueCount  int    `json:"value_count,omitempty"`
	ValueColumn string `json:"value_column,omitempty"`
	Raw         string `json:"raw,omitempty"`
	Function    string `json:"function,omitempty"`
	Subquery    bool   `json:"subquery,omitempty"`
	Negated     bool   `json:"negated,omitempty"`
}

type Query struct {
	// contains filtered or unexported fields
}

type QueryPlan struct {
	Operation          OperationType     `json:"operation"`
	SQL                string            `json:"sql"`
	Params             []any             `json:"params"`
	Tables             []TableRef        `json:"tables,omitempty"`
	Columns            []ColumnRef       `json:"columns,omitempty"`
	Joins              []JoinRef         `json:"joins,omitempty"`
	Predicates         []PredicateRef    `json:"predicates,omitempty"`
	Limit              *int64            `json:"limit,omitempty"`
	Offset             *int64            `json:"offset,omitempty"`
	EstimatedRows      *int64            `json:"estimated_rows,omitempty"`
	UsesIndex          *bool             `json:"uses_index,omitempty"`
	RiskLevel          RiskLevel         `json:"risk_level"`
	Warnings           []Warning         `json:"warnings,omitempty"`
	SuppressedWarnings []Warning         `json:"suppressed_warnings,omitempty"`
	RequiredApproval   bool              `json:"required_approval"`
	Blocked            bool              `json:"blocked,omitempty"`
	Approval           *Approval         `json:"approval,omitempty"`
	AnalysisPrecision  AnalysisPrecision `json:"analysis_precision"`
	Metadata           map[string]any    `json:"metadata,omitempty"`
}

type RiskConfig struct {
	Environment string                    `json:"environment,omitempty"`
	Rules       map[string]RiskRuleConfig `json:"rules,omitempty"`
}

type RiskEngine interface {
	CheckQuery(plan *QueryPlan) RiskResult
}

type RiskLevel string

type RiskResult struct {
	Level            RiskLevel `json:"level"`
	Warnings         []Warning `json:"warnings,omitempty"`
	RequiredApproval bool      `json:"required_approval"`
	Blocked          bool      `json:"blocked"`
}

type RiskRuleConfig struct {
	Enabled        *bool      `json:"enabled,omitempty"`
	Severity       *RiskLevel `json:"severity,omitempty"`
	Suppressible   *bool      `json:"suppressible,omitempty"`
	RequiresReason *bool      `json:"requires_reason,omitempty"`
}

type SourceLocation struct {
	File   string `json:"file,omitempty"`
	Line   int    `json:"line,omitempty"`
	Column int    `json:"column,omitempty"`
}

type Suppression struct {
	Code      string           `json:"code"`
	Reason    string           `json:"reason"`
	Scope     SuppressionScope `json:"scope"`
	Location  *SourceLocation  `json:"location,omitempty"`
	ExpiresAt *time.Time       `json:"expires_at,omitempty"`
	Owner     string           `json:"owner,omitempty"`
}

type SuppressionOption func(*Suppression)

type SuppressionScope string

type TablePolicy struct {
	Table                 string     `json:"table"`
	TenantColumn          string     `json:"tenant_column,omitempty"`
	TenantMode            PolicyMode `json:"tenant_mode,omitempty"`
	SoftDeleteColumn      string     `json:"soft_delete_column,omitempty"`
	SoftDeleteMode        PolicyMode `json:"soft_delete_mode,omitempty"`
	PIIColumns            []string   `json:"pii_columns,omitempty"`
	PIIMode               PolicyMode `json:"pii_mode,omitempty"`
	RequiredFilterColumns []string   `json:"required_filter_columns,omitempty"`
	RequiredFilterMode    PolicyMode `json:"required_filter_mode,omitempty"`
}

type TableRef struct {
	Name  string `json:"name"`
	Alias string `json:"alias,omitempty"`
}

type Warning struct {
	Code           string          `json:"code"`
	Level          RiskLevel       `json:"level"`
	Message        string          `json:"message"`
	Location       *SourceLocation `json:"location,omitempty"`
	Hint           string          `json:"hint,omitempty"`
	Evidence       []Evidence      `json:"evidence,omitempty"`
	Suppressible   bool            `json:"suppressible"`
	RequiresReason bool            `json:"requires_reason"`
}