approval

type ApprovalCallback interface {
	OnApproval(result *ApprovalResult, req *ApprovalRequest)
	OnApprovalTimeout(req *ApprovalRequest)
}

type ApprovalConfig struct {
	Strategy          Strategy `mapstructure:"strategy"`
	TrustThreshold    int      `mapstructure:"trust_threshold"`
	DenylistThreshold int      `mapstructure:"denylist_threshold"`
	EnableLearning    bool     `mapstructure:"enable_learning"`
	EnableWhitelist   bool     `mapstructure:"enable_whitelist"`
	EnableCLIConfirm  bool     `mapstructure:"enable_cli_confirm"`
	GatewayEnabled    bool     `mapstructure:"gateway_enabled"`
	GatewayURL        string   `mapstructure:"gateway_url"`
	DangerousPatterns []string `mapstructure:"dangerous_patterns"`
	AllowedPatterns   []string `mapstructure:"allowed_patterns"`
	ApprovalTimeout   int      `mapstructure:"approval_timeout"`
	LearnFromSameUser bool     `mapstructure:"learn_from_same_user"`
}

type ApprovalRecord struct {
	ID         string    `json:"id"`
	Command    string    `json:"command"`
	Normalized string    `json:"normalized"`
	RiskLevel  RiskLevel `json:"risk_level"`
	RiskScore  float64   `json:"risk_score"`
	Category   string    `json:"category"` // risk category
	Decision   string    `json:"decision"` // approved, denied, auto_approved, timeout
	Strategy   Strategy  `json:"strategy"`
	Reason     string    `json:"reason"`
	SessionID  string    `json:"session_id"`
	WorkingDir string    `json:"working_dir"`
	Duration   int64     `json:"duration_ms"` // 审批耗时
	Timestamp  time.Time `json:"timestamp"`
}

type ApprovalRequest struct {
	Command    string
	Args       []string
	WorkingDir string
	Env        map[string]string
	SessionID  string
	UserID     string
	RiskLevel  RiskLevel
	Category   string // risk category from assessment
	Reason     string
	Timestamp  time.Time
}

type ApprovalResult struct {
	Approved  bool
	Strategy  Strategy
	Reason    string
	Trusted   bool
	AskUser   bool
	RiskLevel RiskLevel
	Pattern   *CommandPattern
}

type ApprovalStats struct {
	TotalRequests   int               `json:"total_requests"`
	AutoApproved    int               `json:"auto_approved"`
	UserApproved    int               `json:"user_approved"`
	UserDenied      int               `json:"user_denied"`
	TimedOut        int               `json:"timed_out"`
	TrustedPatterns int               `json:"trusted_patterns"`
	DeniedPatterns  int               `json:"denied_patterns"`
	ByRiskLevel     map[RiskLevel]int `json:"by_risk_level"`
	ByCategory      map[string]int    `json:"by_category"`
	TopCommands     []CommandStat     `json:"top_commands"`
	AvgResponseTime float64           `json:"avg_response_time_ms"`
}

type CommandPattern struct {
	Pattern     string    `json:"pattern"`
	PatternHash string    `json:"pattern_hash"`
	Action      string    `json:"action"` // approved, denied
	Count       int       `json:"count"`
	RiskLevel   RiskLevel `json:"risk_level"`
	LastSeen    time.Time `json:"last_seen"`
	SessionIDs  []string  `json:"session_ids"`
	Trusted     bool      `json:"trusted"`
}

type CommandStat struct {
	Pattern   string    `json:"pattern"`
	Count     int       `json:"count"`
	Approved  int       `json:"approved"`
	Denied    int       `json:"denied"`
	RiskLevel RiskLevel `json:"risk_level"`
	LastSeen  time.Time `json:"last_seen"`
}

type Manager struct {
	// contains filtered or unexported fields
}

type ParsedCommand struct {
	Binary        string            // 命令二进制名 (如 "npm", "git")
	SubCommand    string            // 子命令 (如 "install", "push")
	Flags         map[string]string // 标志参数
	Args          []string          // 位置参数
	RawArgs       string            // 原始参数字符串
	HasPipe       bool              // 是否包含管道
	HasChain      bool              // 是否包含链式操作 (&&, ||, ;)
	PipeSegments  []string          // 管道分段
	ChainSegments []string          // 链式分段
}

type PatternMatchResult struct {
	Matched   bool
	Pattern   string
	Variables map[string]string
}

type PendingApproval struct {
	ID        string
	Request   *ApprovalRequest
	Result    chan *ApprovalResult
	CreatedAt time.Time
	ExpiresAt time.Time
}

type RiskAssessment struct {
	Level         RiskLevel // 最终风险等级
	Category      string    // "file_destruct", "network", "privilege_esc", "data_access", "system", "package_mgmt"
	Factors       []string  // 具体风险因素
	BypassAttempt bool      // 检测到绕过尝试
	BypassType    string    // 绕过类型 (encoding, variable, path_traversal)
	Score         float64   // 0-100 风险评分
}

type RiskLevel int

type SessionApprovalContext struct {
	SessionID    string
	RecentCmds   []string    // 最近执行的命令（归一化后）
	ApprovedHash map[int]int // riskLevel -> 同类批准次数
	CreatedAt    time.Time
}

type Strategy string

type WebApprovalCallback struct {
	// contains filtered or unexported fields
}