manifest

type Flag struct {
	Flag          string   `yaml:"flag"`
	Description   string   `yaml:"description"`
	TakesValue    bool     `yaml:"takes_value"`
	PatternValue  bool     `yaml:"pattern_value"`
	AllowedValues []string `yaml:"allowed_values"`
	Deny          bool     `yaml:"deny"`
	Reason        string   `yaml:"reason"`
}

type Manifest struct {
	Name             string   `yaml:"name"`
	Description      string   `yaml:"description"`
	Category         string   `yaml:"category"`
	Timeout          int      `yaml:"timeout"`
	Deny             bool     `yaml:"deny"`
	Reason           string   `yaml:"reason"`
	Flags            []Flag   `yaml:"flags"`
	AllowsPathArgs   bool     `yaml:"allows_path_args"`
	RestrictedPaths  []string `yaml:"restricted_paths"`
	Stdin            bool     `yaml:"stdin"`
	Stdout           bool     `yaml:"stdout"`
	RegexArgPosition *int     `yaml:"regex_arg_position"`
	Shell            string   `yaml:"shell"` // "powershell" or "" (bash)
	RequiresOneOf    []string `yaml:"requires_one_of"`
	// PositionalAllowlist constrains one positional argument to a fixed set of
	// values. Flag validation cannot reach tools that dispatch on a positional
	// word rather than a flag -- jcmd's diagnostic command sits at positional 1
	// (after the pid), and jcmd GC.run, VM.set_flag, and JVMTI.agent_load all
	// change the target JVM. Without this, such a tool is all-or-nothing.
	PositionalAllowlist *PositionalAllowlist `yaml:"positional_allowlist"`
	// AllowsFlagBundling re-enables POSIX-style short-flag bundling for a
	// manifest that declares shell: powershell. Native Windows executables
	// (netstat, tracert, ping) run on a Windows host but use DOS-style bundled
	// switches — `netstat -ano` is -a -n -o — whereas PowerShell cmdlets do not
	// bundle at all and must not be split (`-Match` is one parameter, never
	// -M -a -t -c -h). `shell: powershell` conflates "runs on Windows" with
	// "uses PowerShell parameter conventions"; this field separates them.
	AllowsFlagBundling bool `yaml:"allows_flag_bundling"`
	// contains filtered or unexported fields
}

type ManifestError struct {
	Message string
}

type PositionalAllowlist struct {
	Index  int      `yaml:"index"`
	Values []string `yaml:"values"`
}