dto

type CapabilityDiagnostics struct {
	// Required capabilities by plugin
	Required map[string]*sdkEntities.GrantSet

	// Granted capabilities by plugin
	Granted map[string]*sdkEntities.GrantSet
}

type CheckOptions struct {
	PluginDir            string
	SystemConfigPath     string
	TrustPlugins         bool
	SkipSchemaValidation bool
	WarnUnusedVars       bool // Enable warnings for unused CLI variables (enabled by default when CLI vars are set)
}

type CheckProfileRequest struct {
	CLIVariables  map[string]interface{}
	ProfilePath   string
	Metadata      RequestMetadata
	Options       CheckOptions
	Filters       FilterOptions
	Execution     ExecutionOptions
	RemoteOptions RemoteProfileOptions
}

type CheckProfileResponse struct {
	Diagnostics     Diagnostics
	ExecutionResult *execution.ExecutionResult
	Metadata        ResponseMetadata
}

type CollectCapabilitiesRequest struct {
	ProfilePath  string
	PluginDir    string
	TrustPlugins bool
}

type CollectCapabilitiesResponse struct {
	// Required capabilities by plugin name
	Required map[string]*sdkEntities.GrantSet

	// Granted capabilities by plugin name
	Granted map[string]*sdkEntities.GrantSet
}

type Diagnostics struct {
	Capabilities CapabilityDiagnostics
	Warnings     []string
}

type ExecuteProfileRequest struct {
	GrantedCapabilities  map[string]*sdkEntities.GrantSet
	ProfilePath          string
	Filters              FilterOptions
	Execution            ExecutionOptions
	SkipSchemaValidation bool
}

type ExecuteProfileResponse struct {
	// ExecutionResult is the domain execution result
	ExecutionResult *execution.ExecutionResult
}

type ExecutionOptions struct {
	// Parallel enables parallel execution of controls
	Parallel bool

	// MaxConcurrentControls limits parallel control execution (0 = no limit)
	MaxConcurrentControls int

	// MaxConcurrentObservations limits parallel observation execution (0 = no limit)
	MaxConcurrentObservations int
}

type FilterOptions struct {
	FilterExpression    string
	IncludeTags         []string
	IncludeSeverities   []string
	IncludeControlIDs   []string
	ExcludeTags         []string
	ExcludeControlIDs   []string
	IncludeDependencies bool
}

type LoadProfileRequest struct {
	ProfilePath string
}

type LoadProfileResponse struct {
	// Profile is the loaded and validated profile
	// Note: We don't expose the profile entity directly in DTO,
	// but for now we'll keep it simple. In a strict hexagonal architecture,
	// this would be a separate DTO.
	ProfilePath string
	Success     bool
}

type PlanProfileRequest struct {
	ProfilePath string
	Metadata    RequestMetadata
	Filters     FilterOptions
}

type PlanProfileResponse struct {
	// Plan is the dry-run execution plan
	Plan *entities.ExecutionPlan

	// Metadata contains response metadata
	Metadata ResponseMetadata
}

type PluginArtifactDTO struct {
	Plugin *entities.Plugin
	WASM   io.ReadCloser // Plugin binary stream
}

type PluginSpecDTO struct {
	Name   string // Plugin name or OCI reference
	Digest string // Expected digest (from lockfile, optional)
}

type RemoteProfileOptions struct {
	// Timeout overrides the default fetch timeout.
	Timeout time.Duration

	// Refresh forces a cache bypass and re-fetch.
	Refresh bool

	// AllowPrivateNetwork permits fetching from private IP addresses.
	AllowPrivateNetwork bool

	// Insecure skips TLS certificate validation (not recommended).
	Insecure bool

	// TrustSource bypasses interactive trust prompt for remote profiles.
	TrustSource bool
}

type RequestMetadata struct {
	// RequestID uniquely identifies this request
	RequestID string
}

type ResponseMetadata struct {
	ProcessedAt time.Time
	RequestID   string
	Duration    time.Duration
}

type ValidateProfileRequest struct {
	ProfilePath          string
	Metadata             RequestMetadata
	SkipSchemaValidation bool
	SkipExpectValidation bool
}

type ValidateProfileResponse struct {
	ProfileName string
	Version     string
	Metadata    ResponseMetadata
	Errors      []ValidationError
	Warnings    []string
	Stats       ValidationStats
	Valid       bool
}

type ValidationError struct {
	Type    string // "structural", "schema", "dependency", "expect"
	Path    string // e.g., "controls[0].observations[1].expect[2]"
	Message string // human-readable error description
}

type ValidationStats struct {
	PluginsUsed      []string
	ControlCount     int
	ObservationCount int
	ExpectCount      int
}