config

type CLIVarSource int

type CLIVariable struct {
	// Key is the variable path using dot notation (e.g., "paths.config").
	Key string
	// Value is the typed value (string, int64, float64, or bool).
	Value interface{}
	// RawValue is the original string value from the CLI.
	RawValue string
	// Source indicates where the value came from.
	Source CLIVarSource
}

type Control struct {
	ID            string        `yaml:"id"`
	Name          string        `yaml:"name"`
	Description   string        `yaml:"description,omitempty"`
	Severity      string        `yaml:"severity,omitempty"`
	Owner         string        `yaml:"owner,omitempty"`
	RetryBackoff  string        `yaml:"retry_backoff,omitempty"`
	DependsOn     []string      `yaml:"depends_on,omitempty"`
	Observations  []Observation `yaml:"observations"`
	Tags          []string      `yaml:"tags,omitempty"`
	Timeout       time.Duration `yaml:"timeout,omitempty"`
	Retries       int           `yaml:"retries,omitempty"`
	RetryDelay    time.Duration `yaml:"retry_delay,omitempty"`
	RetryMaxDelay time.Duration `yaml:"retry_max_delay,omitempty"`
}

type Controls struct {
	Defaults *Defaults `yaml:"defaults,omitempty"`
	Items    []Control `yaml:"items"`
}

type Defaults struct {
	Severity      string        `yaml:"severity,omitempty"`
	Owner         string        `yaml:"owner,omitempty"`
	RetryBackoff  string        `yaml:"retry_backoff,omitempty"`
	Tags          []string      `yaml:"tags,omitempty"`
	Timeout       time.Duration `yaml:"timeout,omitempty"`
	Retries       int           `yaml:"retries,omitempty"`
	RetryDelay    time.Duration `yaml:"retry_delay,omitempty"`
	RetryMaxDelay time.Duration `yaml:"retry_max_delay,omitempty"`
}

type LoopConfig struct {
	Items string `yaml:"items"`        // Variable path, e.g., "{{ .vars.services }}"
	As    string `yaml:"as,omitempty"` // Optional custom variable name
}

type Metadata struct {
	Name        string `yaml:"name"`
	Version     string `yaml:"version"`
	Description string `yaml:"description,omitempty"`
}

type Observation struct {
	Loop   *LoopConfig            `yaml:"loop,omitempty"`
	Plugin string                 `yaml:"plugin"`
	Config map[string]interface{} `yaml:"config,omitempty"`
	Expect []string               `yaml:"expect,omitempty"`
}

type ParseCLIVarResult struct {
	Key      string
	Value    interface{}
	RawValue string
}

type Profile struct {
	Metadata Metadata               `yaml:"profile"`
	Plugins  []string               `yaml:"plugins,omitempty"`
	Vars     map[string]interface{} `yaml:"vars,omitempty"`
	Config   *ProfileConfig         `yaml:"config,omitempty"` // NEW: Profile-level configuration
	Controls Controls               `yaml:"controls"`
	Extends  []string               `yaml:"extends,omitempty"`
}

type ProfileConfig struct {
	Limits *system.LimitsConfig `yaml:"limits,omitempty"` // Profile-specific limit overrides
}

type ProfileLoader struct {
	// contains filtered or unexported fields
}

type ProfileLoaderOption func(*ProfileLoader)

type ResolvedLimits struct {
	// Evidence & Data Limits
	MaxEvidenceSize      int
	MaxHTTPResponseSize  int
	MaxCommandOutputSize int
	MaxSARIFArtifactSize int

	// Expression Evaluation Limits
	MaxExpressionLength int
	MaxASTNodes         int

	// Network & HTTP Limits
	MaxHTTPRedirects int
	HTTPTimeout      time.Duration
	HTTPIdleTimeout  time.Duration

	// Concurrency Limits
	MaxConcurrentControls     int
	MaxConcurrentObservations int
}

type RuntimeConfig struct {
	Limits                    *ResolvedLimits
	SecurityLevel             string
	WasmMemoryLimitMB         int
	MaxEvidenceSizeBytes      int
	MaxConcurrentControls     int
	MaxConcurrentObservations int
}

type VariableSubstitutor struct {
	// contains filtered or unexported fields
}