sandbox

type Alert struct {
	// Timestamp is the time of the alert
	Timestamp time.Time
	// Level is the alert level
	Level AlertLevel
	// Message is the alert message
	Message string
	// TemplateID is the ID of the template that triggered the alert
	TemplateID string
	// Issues are the security issues that triggered the alert
	Issues []*security.SecurityIssue
}

type AlertLevel string

type AllowList struct {
	// Functions is a list of allowed functions
	Functions []string
	// Packages is a list of allowed packages
	Packages []string
	// FilePatterns is a list of allowed file patterns
	FilePatterns []string
	// NetworkDomains is a list of allowed network domains
	NetworkDomains []string
	// EnvironmentVariables is a list of allowed environment variables
	EnvironmentVariables []string
}

type ApprovalStatus string

type ApprovalWorkflow struct {
	// contains filtered or unexported fields
}

type ComplexityFactor struct {
	// contains filtered or unexported fields
}

type ContainerSandbox struct {
	DefaultSandbox
	// contains filtered or unexported fields
}

type ContainerSandboxOptions struct {
	ContainerEngine string   // "docker" or "podman"
	ImageName       string   // Container image to use
	NetworkMode     string   // Network mode (none, host, bridge)
	VolumeBinds     []string // Volume bindings
	CleanupTimeout  time.Duration
}

type DefaultSandbox struct {
	// contains filtered or unexported fields
}

type DisallowedFunctionsFactor struct {
	// contains filtered or unexported fields
}

type ExecutionMode string

type ExecutionResult struct {
	// Success indicates if the execution was successful
	Success bool
	// Output is the output of the execution
	Output string
	// Error is the error message if execution failed
	Error string
	// ExecutionTime is the execution time
	ExecutionTime time.Duration
	// ResourceUsage contains information about resource usage
	ResourceUsage ResourceUsage
	// SecurityIssues contains security issues found during execution
	SecurityIssues []*security.SecurityIssue
}

type FileSystemAccessFactor struct {
	// contains filtered or unexported fields
}

type FrameworkOptions struct {
	// ValidationOptions are the validation options
	ValidationOptions *ValidationOptions
	// SandboxOptions are the sandbox options
	SandboxOptions *SandboxOptions
	// WorkflowStorageDir is the directory for storing workflow data
	WorkflowStorageDir string
	// EnableContainerSandbox enables the container-based sandbox
	EnableContainerSandbox bool
	// ContainerOptions are the container sandbox options
	ContainerOptions *ContainerSandboxOptions
	// EnableLogging enables logging
	EnableLogging bool
	// LogDirectory is the directory for logs
	LogDirectory string
	// EnableMetrics enables metrics collection
	EnableMetrics bool
}

type InputValidationFactor struct {
	// contains filtered or unexported fields
}

type MetricsCollector struct {
	// contains filtered or unexported fields
}

type ResourceLimits struct {
	// MaxCPUTime is the maximum CPU time in seconds
	MaxCPUTime float64
	// MaxMemory is the maximum memory in MB
	MaxMemory int64
	// MaxExecutionTime is the maximum execution time
	MaxExecutionTime time.Duration
	// MaxFileSize is the maximum file size in bytes
	MaxFileSize int64
	// MaxOpenFiles is the maximum number of open files
	MaxOpenFiles int
	// MaxProcesses is the maximum number of processes
	MaxProcesses int
	// NetworkAccess determines if network access is allowed
	NetworkAccess bool
	// FileSystemAccess determines if file system access is allowed
	FileSystemAccess bool
}

type ResourceUsage struct {
	// CPUTime is the CPU time used in seconds
	CPUTime float64
	// MemoryUsage is the memory used in MB
	MemoryUsage int64
	// ExecutionTime is the execution time
	ExecutionTime time.Duration
	// FileOperations is the number of file operations
	FileOperations int
	// NetworkOperations is the number of network operations
	NetworkOperations int
}

type RiskCategory string

type RiskFactor struct {
	// Name is the name of the factor
	Name string
	// Description is a description of the factor
	Description string
	// Score is the score contribution of this factor
	Score float64
	// Weight is the weight of this factor in the overall score
	Weight float64
}

type RiskFactorEvaluator interface {
	// Name returns the name of the risk factor
	Name() string
	// Description returns a description of the risk factor
	Description() string
	// Weight returns the weight of the risk factor
	Weight() float64
	// Evaluate evaluates the risk factor for a template
	Evaluate(template *format.Template, issues []*security.SecurityIssue) float64
}

type RiskScore struct {
	// Score is the numerical risk score (0-100)
	Score float64
	// Category is the risk category
	Category RiskCategory
	// Factors contains the factors that contributed to the score
	Factors []RiskFactor
}

type SandboxOptions struct {
	// Mode is the execution mode
	Mode ExecutionMode
	// ResourceLimits defines resource limits for template execution
	ResourceLimits ResourceLimits
	// AllowedFunctions is a list of allowed functions
	AllowedFunctions []string
	// AllowedPackages is a list of allowed packages
	AllowedPackages []string
	// DisallowedFunctions is a list of disallowed functions
	DisallowedFunctions []string
	// DisallowedPackages is a list of disallowed packages
	DisallowedPackages []string
	// TimeoutDuration is the timeout duration for template execution
	TimeoutDuration time.Duration
	// EnableLogging enables logging of template execution
	EnableLogging bool
	// LogDirectory is the directory for logs
	LogDirectory string
	// ValidationOptions are the options for template validation
	ValidationOptions *security.VerificationOptions
}

type SecurityFramework struct {
	// contains filtered or unexported fields
}

type SecurityIssuesFactor struct {
	// contains filtered or unexported fields
}

type TemplateSandbox interface {
	// Execute executes a template in the sandbox
	Execute(ctx context.Context, template *format.Template, options *SandboxOptions) (*ExecutionResult, error)

	// ExecuteFile executes a template file in the sandbox
	ExecuteFile(ctx context.Context, templatePath string, options *SandboxOptions) (*ExecutionResult, error)

	// Validate validates a template against security rules
	Validate(ctx context.Context, template *format.Template, options *SandboxOptions) ([]*security.SecurityIssue, error)

	// ValidateFile validates a template file against security rules
	ValidateFile(ctx context.Context, templatePath string, options *SandboxOptions) ([]*security.SecurityIssue, error)

	// GetAllowList returns the allow list for template execution
	GetAllowList() *AllowList

	// SetAllowList sets the allow list for template execution
	SetAllowList(allowList *AllowList)
}

type TemplateScorer struct {
	// contains filtered or unexported fields
}

type TemplateValidator struct {
	// contains filtered or unexported fields
}

type TemplateVersion struct {
	// ID is the version ID
	ID string
	// TemplateID is the ID of the template
	TemplateID string
	// Version is the version number
	Version string
	// Content is the template content
	Content string
	// Status is the approval status
	Status ApprovalStatus
	// CreatedAt is the creation time
	CreatedAt time.Time
	// UpdatedAt is the last update time
	UpdatedAt time.Time
	// ApprovedBy is the user who approved the template
	ApprovedBy string
	// ApprovedAt is the approval time
	ApprovedAt time.Time
	// RiskScore is the risk score
	RiskScore *RiskScore
	// SecurityIssues are the security issues found in the template
	SecurityIssues []*security.SecurityIssue
	// Comments are comments on the template
	Comments []string
}

type ValidationLevel string

type ValidationOptions struct {
	// Level is the validation level
	Level ValidationLevel
	// CustomChecks is a list of custom checks to perform
	CustomChecks []security.SecurityCheck
	// IgnorePatterns is a list of patterns to ignore
	IgnorePatterns []*regexp.Regexp
	// AllowedFunctions is a list of allowed functions
	AllowedFunctions []string
	// AllowedPackages is a list of allowed packages
	AllowedPackages []string
	// DisallowedFunctions is a list of disallowed functions
	DisallowedFunctions []string
	// DisallowedPackages is a list of disallowed packages
	DisallowedPackages []string
	// MaxComplexity is the maximum allowed complexity
	MaxComplexity int
	// MaxLineLength is the maximum allowed line length
	MaxLineLength int
	// RequireComments determines if comments are required
	RequireComments bool
	// RequireValidation determines if input validation is required
	RequireValidation bool
	// SecurityOptions are the security verification options
	SecurityOptions *security.VerificationOptions
}

type ValidationResult struct {
	// Template is the validated template
	Template *format.Template
	// Issues are the security issues found
	Issues []*security.SecurityIssue
	// RiskScore is the risk score
	RiskScore *RiskScore
	// ValidationTime is the time taken for validation
	ValidationTime time.Duration
	// Timestamp is the time of validation
	Timestamp time.Time
}