kb

type CIConfig struct {
	Format     string            `toml:"format"`
	Files      []CIFilePattern   `toml:"files"`
	MatrixKeys map[string]string `toml:"matrix_keys"` // maps our key name to the CI matrix key
}

type CIConfigDef struct {
	CI CIConfig `toml:"ci"`
}

type CIFilePattern struct {
	Pattern string `toml:"pattern"`
}

type CommandInfo struct {
	Run          string   `toml:"run"`
	Alternatives []string `toml:"alternatives"`
}

type ConfigInfo struct {
	Files    []string `toml:"files"`
	Lockfile string   `toml:"lockfile"`
}

type DetectInfo struct {
	Files           []string            `toml:"files"`
	Dependencies    []string            `toml:"dependencies"`
	DevDependencies []string            `toml:"dev_dependencies"`
	FileContains    map[string][]string `toml:"file_contains"`
	KeyExists       map[string][]string `toml:"key_exists"`
	Ecosystems      []string            `toml:"ecosystems"`
}

type KnowledgeBase struct {
	Tools          []*ToolDef
	ByName         map[string]*ToolDef
	ByCategory     map[string][]*ToolDef
	Ecosystems     map[string][]*ToolDef
	ScriptSources  []ScriptSourceDef
	Resources      []ResourceDef
	Layouts        *LayoutDef
	StyleConfig    *StyleConfigDef
	Runtimes       []RuntimeVersionDef
	ManifestFiles  []string
	CIConfig       *CIConfigDef
	Threats        map[string]ThreatDef // threat ID -> definition
	ThreatMappings []ThreatMapping
}

type LayoutDef struct {
	Layout LayoutRules `toml:"layout"`
}

type LayoutRules struct {
	SourceDirs []string `toml:"source_dirs"` // directories that indicate source
	TestDirs   []string `toml:"test_dirs"`   // directories that indicate tests
}

type ManifestFileDef struct {
	Manifests ManifestInfo `toml:"manifests"`
}

type ManifestInfo struct {
	Files []string `toml:"files"`
}

type ResourceDef struct {
	Resource ResourceInfo `toml:"resource"`
}

type ResourceInfo struct {
	Name     string   `toml:"name"`
	Field    string   `toml:"field"`    // JSON field name in output
	Group    string   `toml:"group"`    // optional group: legal, community, security, metadata
	Patterns []string `toml:"patterns"` // file patterns to match
	Dirs     []string `toml:"dirs"`     // additional subdirectories to search (root is always searched first)
}

type RuntimeInfo struct {
	Name  string   `toml:"name"`  // e.g. "Ruby", "Node"
	Files []string `toml:"files"` // e.g. [".ruby-version", ".tool-versions"]
}

type RuntimeVersionDef struct {
	Runtime RuntimeInfo `toml:"runtime"`
}

type ScriptSourceDef struct {
	Source SourceInfo `toml:"source"`
}

type SecurityInfo struct {
	Threats []string `toml:"threats"` // explicit threat IDs beyond what taxonomy implies
	Sinks   []Sink   `toml:"sinks"`
}

type Sink struct {
	Symbol string `toml:"symbol"` // method/function name, e.g. "html_safe"
	Threat string `toml:"threat"` // threat ID from _threats.toml registry
	CWE    string `toml:"cwe"`    // optional, defaults from threat registry
	Note   string `toml:"note"`
}

type SourceInfo struct {
	Name    string `toml:"name"`
	File    string `toml:"file"`
	Format  string `toml:"format"`  // "makefile", "json_scripts", "targets"
	Command string `toml:"command"` // prefix for run commands (e.g. "make", "just")
}

type StyleConfigDef struct {
	Style StyleRules `toml:"style"`
}

type StyleConfigFile struct {
	File       string `toml:"file"`
	Provides   string `toml:"provides"` // what it configures: "indentation", "all", etc.
	SourceName string `toml:"source_name"`
}

type StyleRules struct {
	ConfigFiles []StyleConfigFile `toml:"config_files"`
	SampleExts  []string          `toml:"sample_extensions"` // extensions to sample for inference
	SampleLimit int               `toml:"sample_limit"`
}

type Taxonomy struct {
	Role       []string `toml:"role"`
	Function   []string `toml:"function"`
	Layer      []string `toml:"layer"`
	Domain     []string `toml:"domain"`
	Audience   []string `toml:"audience"`
	Technology []string `toml:"technology"`
}

type ThreatDef struct {
	ID    string `toml:"id"`
	CWE   string `toml:"cwe"`
	OWASP string `toml:"owasp"`
	Title string `toml:"title"`
}

type ThreatMapping struct {
	Match   []string `toml:"match"`   // facet:term tags, all must be present
	Threats []string `toml:"threats"` // threat IDs that apply when matched
	Note    string   `toml:"note"`
}

type ToolDef struct {
	Tool     ToolInfo     `toml:"tool"`
	Detect   DetectInfo   `toml:"detect"`
	Commands CommandInfo  `toml:"commands"`
	Config   ConfigInfo   `toml:"config"`
	Taxonomy Taxonomy     `toml:"taxonomy"`
	Security SecurityInfo `toml:"security"`
	Source   string       `toml:"-"` // filesystem path this was loaded from
}

type ToolInfo struct {
	Name        string `toml:"name"`
	Category    string `toml:"category"`
	Homepage    string `toml:"homepage"`
	Docs        string `toml:"docs"`
	Repo        string `toml:"repo"`
	Description string `toml:"description"`
	Default     bool   `toml:"default"` // preferred suggestion for this category in the ecosystem
}