discovery

type CarrierMap struct {
	CodebasePath string         `json:"codebase_path"`
	DiscoveredAt time.Time      `json:"discovered_at"`
	PHPVersion   string         `json:"php_version,omitempty"`
	Framework    string         `json:"framework,omitempty"`
	Carriers     []InputCarrier `json:"carriers"`
	Statistics   CarrierStats   `json:"statistics"`
}

type CarrierStats struct {
	TotalSuperglobalUsages int            `json:"total_superglobal_usages"`
	UniqueCarriers         int            `json:"unique_carriers"`
	TotalTaintFlows        int            `json:"total_taint_flows"`
	ClassesAnalyzed        int            `json:"classes_analyzed"`
	BySourceType           map[string]int `json:"by_source_type"`
	ByClassName            map[string]int `json:"by_class_name"`
}

type ClassInfo struct {
	Name        string
	FilePath    string
	Properties  map[string]*PropertyInfo
	Methods     map[string]*MethodInfo
	Constructor *MethodInfo
	ParentClass string
	Implements  []string
}

type InputCarrier struct {
	ClassName     string   `json:"class_name"`
	PropertyName  string   `json:"property_name,omitempty"` // Empty if method-based
	MethodName    string   `json:"method_name,omitempty"`   // Empty if property-based
	SourceTypes   []string `json:"source_types"`            // ["$_GET", "$_POST"]
	AccessPattern string   `json:"access_pattern"`          // "array", "method", "direct"
	PopulatedIn   string   `json:"populated_in"`            // Constructor or method name that populates it
	FilePath      string   `json:"file_path"`
	Line          int      `json:"line"`
}

type MethodInfo struct {
	Name           string
	IsPublic       bool
	IsProtected    bool
	IsPrivate      bool
	IsStatic       bool
	Line           int
	Parameters     []string
	ReturnsTainted bool
	TaintSources   []string // Superglobals that can flow through this method
	BodySource     string   // Only populated for methods that need deep analysis
	// contains filtered or unexported fields
}

type PropertyInfo struct {
	Name         string
	IsPublic     bool
	IsProtected  bool
	IsPrivate    bool
	IsStatic     bool
	DefaultValue string
	Line         int
	TaintSources []string // Superglobals that flow into this property
}

type SuperglobalFinder struct {
	// contains filtered or unexported fields
}

type SuperglobalUsage struct {
	Superglobal  string `json:"superglobal"` // "$_GET", "$_POST", etc.
	Key          string `json:"key"`         // The accessed key, e.g., "id" from $_GET['id'], or "*" for all keys
	FilePath     string `json:"file_path"`
	Line         int    `json:"line"`
	Column       int    `json:"column"`
	AssignedTo   string `json:"assigned_to"`    // Variable or property it's assigned to
	Context      string `json:"context"`        // "assignment", "function_arg", "method_arg", "return", "foreach", "direct"
	ClassName    string `json:"class_name"`     // If inside a class method
	MethodName   string `json:"method_name"`    // If inside a method/function
	CalledMethod string `json:"called_method"`  // Method being called when context is "function_arg" (e.g., "parse_incoming")
	CodeSnippet  string `json:"code_snippet"`   // The actual code line
	IsLoopVar    bool   `json:"is_loop_var"`    // True if used as foreach source
	LoopKeyVar   string `json:"loop_key_var"`   // The key variable in foreach
	LoopValVar   string `json:"loop_value_var"` // The value variable in foreach
}

type TaintFlow struct {
	Source   TaintSource `json:"source"`
	Sink     TaintSink   `json:"sink"`
	FilePath string      `json:"file_path"`
	Line     int         `json:"line"`
	FlowType string      `json:"flow_type"` // "direct_assignment", "foreach_population", "method_return", "parameter_pass"
}

type TaintPropagator struct {
	// contains filtered or unexported fields
}

type TaintSink struct {
	Type         string `json:"type"`          // "property", "method", "variable", "function", "array_element"
	ClassName    string `json:"class_name"`    // For properties/methods
	Name         string `json:"name"`          // Property name or method name
	IsPublic     bool   `json:"is_public"`     // Can be accessed externally
	AccessMethod string `json:"access_method"` // "array" for $obj->prop['key'], "method" for $obj->method('key'), "direct" for $obj->prop
}

type TaintSource struct {
	Type     string   `json:"type"` // "superglobal", "function_return", "property"
	Name     string   `json:"name"` // "$_GET", "$_POST", etc.
	Keys     []string `json:"keys"` // Keys accessed, or ["*"] for all keys
	FilePath string   `json:"file_path"`
	Line     int      `json:"line"`
}