ai

type AISummary struct {
	TotalAnalyzed        int `json:"total_analyzed"`
	SuccessfullyAnalyzed int `json:"successfully_analyzed"`
	AnalysisErrors       int `json:"analysis_errors"`
	LikelyFalsePositives int `json:"likely_false_positives"`
	LikelyTruePositives  int `json:"likely_true_positives"`
	HighConfidence       int `json:"high_confidence"`   // >= 0.8
	MediumConfidence     int `json:"medium_confidence"` // >= 0.6 && < 0.8
	LowConfidence        int `json:"low_confidence"`    // < 0.6
	SkippedByFilter      int `json:"skipped_by_filter"`
}

type Analyzer struct {
	// contains filtered or unexported fields
}

type BatchVerificationResult struct {
	Index  int                 `json:"index"`
	Result *VerificationResult `json:"result,omitempty"`
	Error  string              `json:"error,omitempty"`
}

type ClaudeClient struct {
	// contains filtered or unexported fields
}

type Client interface {
	// VerifyFinding analyzes a security finding and determines if it's likely a false positive
	VerifyFinding(ctx context.Context, finding rules.Finding) (*VerificationResult, error)

	// VerifyBatch analyses up to 5 findings of the same class in one API call.
	VerifyBatch(ctx context.Context, class string, findings []ContextualFinding) ([]BatchVerificationResult, error)

	// GetProvider returns the provider name
	GetProvider() Provider

	// Close cleans up any resources
	Close() error
}

type Config struct {
	Provider Provider `yaml:"provider"`
	APIKey   string   `yaml:"api_key"`
	BaseURL  string   `yaml:"base_url,omitempty"` // Custom endpoint for self-hosted models
	Model    string   `yaml:"model,omitempty"`    // Specific model to use

	// Request configuration
	MaxTokens   int     `yaml:"max_tokens,omitempty"`
	Temperature float64 `yaml:"temperature,omitempty"`
	Timeout     int     `yaml:"timeout,omitempty"` // seconds
}

type ContextProvider struct {
	// contains filtered or unexported fields
}

type ContextualFinding struct {
	Finding rules.Finding
	Context FindingContext
}

type EnhancedFinding struct {
	rules.Finding
	AIVerification *VerificationResult `json:"ai_verification,omitempty"`
	AIError        string              `json:"ai_error,omitempty"`
	AISkipped      bool                `json:"ai_skipped,omitempty"`
	AISkipReason   string              `json:"ai_skip_reason,omitempty"`
}

type FindingContext struct {
	// Snippet is the workflow source around the finding, with line numbers.
	Snippet string
	// WorkflowTriggers lists the events that can start this workflow, which
	// determines whether an untrusted actor can reach the finding at all.
	WorkflowTriggers []string
	// WorkflowPermissions and JobPermissions describe the credentials in scope.
	// "not set" and "default" are meaningfully different, so both are rendered
	// explicitly rather than left empty.
	WorkflowPermissions string
	JobPermissions      string
	// JobNeeds records upstream jobs, since data can arrive through them.
	JobNeeds []string
	// JobRunsOn distinguishes hosted from self-hosted runners.
	JobRunsOn string
	// StepUses and StepRun are the full step definition, not the truncated
	// evidence fragment.
	StepUses string
	StepRun  string
}

type GeminiClient struct {
	// contains filtered or unexported fields
}

type GrokClient struct {
	// contains filtered or unexported fields
}

type OpenAIClient struct {
	// contains filtered or unexported fields
}

type Options struct {
	// RequestTimeout bounds a single provider request. Defaults to 30s.
	RequestTimeout time.Duration
	// TotalTimeout optionally bounds the whole analysis. Zero means unbounded.
	TotalTimeout time.Duration
	// Workers is the number of batches dispatched concurrently. Defaults to 4,
	// which keeps throughput high without tripping provider rate limits.
	Workers int
	// Contexts supplies workflow evidence for each finding. May be nil, in
	// which case findings are sent without surrounding context.
	Contexts *ContextProvider
}

type PerplexityClient struct {
	// contains filtered or unexported fields
}

type Provider string

type VerificationResult struct {
	IsLikelyFalsePositive bool    `json:"is_likely_false_positive"`
	Confidence            float64 `json:"confidence"` // 0.0 to 1.0
	Reasoning             string  `json:"reasoning"`
	Severity              string  `json:"suggested_severity,omitempty"`
	Remediation           string  `json:"remediation,omitempty"`
}