cmd

type AuditCmd struct {
	Linux    LinuxAuditCmd   `cmd:"" help:"Audit Linux packages"`
	Windows  WindowsAuditCmd `cmd:"" help:"Audit Windows KB updates"`
	Host     HostAuditCmd    `cmd:"" help:"Audit host packages (v4 API)"`
	Winaudit WinFullAuditCmd `cmd:"" name:"winaudit" help:"Full Windows audit (KBs + software)"`
}

type CLI struct {
	// Global flags
	Output  string   `help:"Output format (json, table, sarif, html, cyclonedx)" enum:"json,table,sarif,html,cyclonedx" default:"json"`
	Quiet   bool     `help:"Suppress non-error output" short:"q"`
	Verbose bool     `help:"Enable verbose/debug output" short:"v"`
	Offline bool     `help:"Use offline database only"`
	FailOn  string   `help:"Fail with exit code 1 if findings at or above severity (low, medium, high, critical)" default:""`
	Ignore  []string `help:"CVE IDs to ignore"`
	VEX     string   `help:"Path to OpenVEX document for suppression"`

	// Commands
	Version  VersionCmd `cmd:"" help:"Print version information"`
	Search   SearchCmd  `cmd:"" help:"Search Vulners database"`
	CVE      CVECmd     `cmd:"" name:"cve" help:"Look up a CVE by ID"`
	CPE      CPECmd     `cmd:"" name:"cpe" help:"Search by CPE"`
	Audit    AuditCmd   `cmd:"" help:"Audit OS packages"`
	Scan     ScanCmd    `cmd:"" help:"Scan targets for vulnerabilities"`
	Offline_ OfflineCmd `cmd:"" name:"offline" help:"Manage offline database"`
	STIX     StixCmd    `cmd:"" name:"stix" help:"Export STIX bundle for a bulletin or CVE"`
}

type CPECmd struct {
	Product string `arg:"" help:"Product name to search"`
	Vendor  string `help:"Vendor name" default:""`
	Limit   int    `help:"Maximum results to return" default:"10"`
}

type CVECmd struct {
	ID         string `arg:"" help:"CVE identifier (e.g. CVE-2021-44228)"`
	References bool   `help:"Include external references"`
	History    bool   `help:"Include change history"`
}

type CVEOutput struct {
	Bulletin   *vulners.Bulletin      `json:"bulletin"`
	References []string               `json:"references,omitempty"`
	History    []vulners.HistoryEntry `json:"history,omitempty"`
}

type Deps struct {
	Intel intel.Client
}

type HostAuditCmd struct {
	OS       string   `help:"Operating system name (e.g. ubuntu, centos)" required:""`
	Version  string   `help:"OS version (e.g. 22.04, 8)" required:""`
	Packages []string `help:"Packages in 'name version' format" required:""`
}

type LinuxAuditCmd struct {
	Distro  string   `help:"Linux distribution name (e.g. ubuntu, debian, centos)" required:""`
	Version string   `help:"Distribution version (e.g. 22.04)" required:""`
	Pkg     []string `help:"Package names with versions (e.g. openssl=3.0.2)" required:""`
}

type OfflineCmd struct {
	Sync   OfflineSyncCmd   `cmd:"" help:"Sync vulnerability data for offline use"`
	Status OfflineStatusCmd `cmd:"" help:"Show offline database status"`
	Purge  OfflinePurgeCmd  `cmd:"" help:"Purge offline database"`
}

type OfflinePurgeCmd struct{}

type OfflineStatusCmd struct{}

type OfflineSyncCmd struct {
	Collections []string `help:"Collections to sync (e.g. cve,exploit,debian)" default:"cve"`
	Full        bool     `help:"Force full sync even if recent data exists"`
}

type ScanCmd struct {
	Repo  ScanRepoCmd  `cmd:"" help:"Scan a repository for vulnerabilities"`
	SBOM  ScanSBOMCmd  `cmd:"" name:"sbom" help:"Scan an SBOM file"`
	Image ScanImageCmd `cmd:"" help:"Scan a container image (requires syft)"`
	Dir   ScanDirCmd   `cmd:"" help:"Scan a directory for package manifests"`
}

type ScanDirCmd struct {
	Path string `arg:"" help:"Directory path to scan" default:"."`
}

type ScanImageCmd struct {
	Image string `arg:"" help:"Image reference (e.g. alpine:3.18, ./image.tar)"`
}

type ScanOutput struct {
	SchemaVersion string            `json:"schemaVersion"`
	Target        string            `json:"target"`
	Components    []model.Component `json:"components"`
	Findings      []model.Finding   `json:"findings"`
	Summary       ScanSummary       `json:"summary"`
}

type ScanRepoCmd struct {
	Path string `arg:"" help:"Path to repository" default:"."`
}

type ScanSBOMCmd struct {
	File   string `arg:"" help:"Path to SBOM file"`
	Format string `help:"SBOM format (cyclonedx, spdx)" enum:"cyclonedx,spdx" default:"cyclonedx"`
}

type ScanSummary struct {
	ComponentCount int `json:"componentCount"`
	FindingCount   int `json:"findingCount"`
	Critical       int `json:"critical"`
	High           int `json:"high"`
	Medium         int `json:"medium"`
	Low            int `json:"low"`
	ExploitedCount int `json:"exploitedCount,omitempty"`
	HighEPSSCount  int `json:"highEpssCount,omitempty"`
}

type SearchCmd struct {
	Query    string `arg:"" help:"Lucene search query"`
	Limit    int    `help:"Maximum results to return" default:"10"`
	Offset   int    `help:"Result offset for pagination" default:"0"`
	Exploits bool   `help:"Search exploits only"`
}

type StixCmd struct {
	ID    string `arg:"" help:"Bulletin or CVE identifier"`
	ByCVE bool   `help:"Look up by CVE ID instead of bulletin ID"`
}

type VersionCmd struct{}

type VersionInfo struct {
	Version   string `json:"version"`
	Commit    string `json:"commit"`
	Date      string `json:"date"`
	GoVersion string `json:"goVersion"`
}

type WinFullAuditCmd struct {
	OS       string   `help:"Windows version (e.g. 'Windows 10')" required:""`
	Version  string   `help:"OS build version" required:""`
	KB       []string `help:"Installed KB numbers"`
	Software []string `help:"Installed software in 'name version' format"`
}

type WindowsAuditCmd struct {
	OS string   `help:"Windows OS version (e.g. 'Windows 10')" default:"Windows 10"`
	KB []string `help:"Installed KB identifiers" required:""`
}