security

type AccessControl struct {
	DenyFiles   []string `yaml:"deny_files"`
	DenyDomains []string `yaml:"deny_domains"`
}

type AllowlistPatterns struct {
	FilePaths []string `yaml:"file_paths"`
	Domains   []string `yaml:"domains"`
	Commands  []string `yaml:"commands"`
}

type ArgumentType string

type Cache struct {
	// contains filtered or unexported fields
}

type CacheEntry struct {
	Result  *SecurityResult
	Created time.Time
}

type CommandArgument struct {
	Value           string       `json:"value"`
	Type            ArgumentType `json:"type"`
	EntropyScore    float64      `json:"entropy_score"`
	ContainsSecrets bool         `json:"contains_secrets"`
	IsVariable      bool         `json:"is_variable"`
	TrustScore      float64      `json:"trust_score"`
}

type ContainsMatcher struct {
	// contains filtered or unexported fields
}

type DenyListChecker struct {
	// contains filtered or unexported fields
}

type Destination struct {
	URL             string              `json:"url"`
	Host            string              `json:"host"`
	IPAddress       string              `json:"ip_address,omitempty"`
	ReputationScore float64             `json:"reputation_score"`
	Category        DestinationCategory `json:"category"`
}

type DestinationCategory string

type EntropyMatcher struct {
	// contains filtered or unexported fields
}

type FilePathMatcher struct {
	// contains filtered or unexported fields
}

type FileWatcher struct {
}

type GlobMatcher struct {
	// contains filtered or unexported fields
}

type LiteralMatcher struct {
	// contains filtered or unexported fields
}

type Operations struct {
	// contains filtered or unexported fields
}

type OverrideConfig struct {
	Version   string                      `yaml:"version"`
	Metadata  OverrideMetadata            `yaml:"metadata"`
	Overrides map[string]SecurityOverride `yaml:"overrides"`
	Allowlist AllowlistPatterns           `yaml:"allowlist_patterns"`
}

type OverrideManager struct {
	// contains filtered or unexported fields
}

type OverrideMetadata struct {
	Description string `yaml:"description"`
	Note        string `yaml:"note"`
}

type ParsedCommand struct {
	Raw         string            `json:"raw"`
	Executable  string            `json:"executable"`
	Arguments   []CommandArgument `json:"arguments"`
	Destination *Destination      `json:"destination,omitempty"`
	Pipes       []PipeOperation   `json:"pipes,omitempty"`
}

type PatternConfig struct {
	// Simple patterns (no escaping needed)
	Literal    string `yaml:"literal,omitempty"`     // Exact match
	Contains   string `yaml:"contains,omitempty"`    // Contains substring
	StartsWith string `yaml:"starts_with,omitempty"` // Prefix match
	EndsWith   string `yaml:"ends_with,omitempty"`   // Suffix match

	// Special semantic patterns
	FilePath string  `yaml:"file_path,omitempty"` // File path patterns
	URL      string  `yaml:"url,omitempty"`       // URL patterns
	Entropy  float64 `yaml:"entropy,omitempty"`   // Entropy threshold

	// Advanced patterns
	Regex string `yaml:"regex,omitempty"` // Raw regex
	Glob  string `yaml:"glob,omitempty"`  // Glob patterns
}

type PatternLibrary struct {
	Patterns map[string]string `yaml:"patterns"`
}

type PatternMatcher interface {
	Match(content string) bool
	String() string
}

type PipeOperation struct {
	Source      string `json:"source"`
	Target      string `json:"target"`
	IsShell     bool   `json:"is_shell"`
	IsDangerous bool   `json:"is_dangerous"`
}

type PrefixMatcher struct {
	// contains filtered or unexported fields
}

type RegexMatcher struct {
	// contains filtered or unexported fields
}

type Rule struct {
	Description string          `yaml:"description"`
	Patterns    []PatternConfig `yaml:"patterns"`
	Action      string          `yaml:"action"` // "block", "warn_high", "warn", "notify", "ignore"
	Severity    string          `yaml:"severity,omitempty"`
	Exceptions  []string        `yaml:"exceptions,omitempty"`
	Logic       string          `yaml:"logic,omitempty"` // "any" or "all"
	Options     map[string]any  `yaml:"options,omitempty"`
}

type RuleInfo struct {
	Name     string
	Rule     Rule
	Priority int
}

type RuleMetadata struct {
	Description string `yaml:"description"`
	Created     string `yaml:"created"`
	Note        string `yaml:"note"`
}

type SafeFileContent struct {
	Content        []byte          // EXACT file bytes - never modified
	Path           string          // Resolved path
	Info           os.FileInfo     // Original file info
	SecurityResult *SecurityResult // nil if safe, populated if warn
}

type SafeHTTPResponse struct {
	Content        []byte          // EXACT original bytes - never modified
	ContentType    string          // Original content type
	StatusCode     int             // Original status code
	Headers        http.Header     // Original headers
	SecurityResult *SecurityResult // nil if safe, populated if warn
}

type SecurityAdvisor struct {
	// contains filtered or unexported fields
}

type SecurityConfig struct {
	Enabled                bool          `json:"enabled"`
	RulesPath              string        `json:"rules_path"`
	LogPath                string        `json:"log_path"`
	AutoReload             bool          `json:"auto_reload"`
	MaxScanSize            int           `json:"max_scan_size"`
	ThreatThreshold        float64       `json:"threat_threshold"`
	EnableDestinationCheck bool          `json:"enable_destination_check"`
	EnableSecretDetection  bool          `json:"enable_secret_detection"`
	CacheEnabled           bool          `json:"cache_enabled"`
	CacheMaxAge            time.Duration `json:"cache_max_age"`
	CacheMaxSize           int           `json:"cache_max_size"`
	EnableNotifications    bool          `json:"enable_notifications"`
	EnableBase64Scanning   bool          `json:"enable_base64_scanning"`
	MaxBase64DecodedSize   int           `json:"max_base64_decoded_size"`
	TrustedDomains         []string      `json:"trusted_domains"`
	SuspiciousDomains      []string      `json:"suspicious_domains"`
	DenyFiles              []string      `json:"deny_files"`
	DenyDomains            []string      `json:"deny_domains"`
}

type SecurityError struct {
	ID      string
	Message string
	Action  string
}

type SecurityLogEntry struct {
	ID        string          `json:"id"`
	Timestamp string          `json:"timestamp"`
	Tool      string          `json:"tool"`
	Source    string          `json:"source"`
	Type      string          `json:"type"`
	Action    string          `json:"action"`
	Analysis  *ThreatAnalysis `json:"analysis"`
}

type SecurityManager struct {
	// contains filtered or unexported fields
}

type SecurityOverride struct {
	Type            string    `yaml:"type"`   // "warn", "block", etc.
	Action          string    `yaml:"action"` // "bypass", "allowlist"
	Justification   string    `yaml:"justification"`
	CreatedAt       time.Time `yaml:"created_at"`
	CreatedBy       string    `yaml:"created_by"`
	OriginalPattern string    `yaml:"original_pattern"`
	OriginalSource  string    `yaml:"original_source"`
}

type SecurityResult struct {
	Safe      bool            `json:"safe"`
	Action    string          `json:"action"` // "allow", "warn", "block"
	Message   string          `json:"message"`
	ID        string          `json:"id"`
	Analysis  *ThreatAnalysis `json:"analysis,omitempty"`
	Timestamp time.Time       `json:"timestamp"`
}

type SecurityRules struct {
	Version        string          `yaml:"version"`
	Metadata       RuleMetadata    `yaml:"metadata"`
	Settings       Settings        `yaml:"settings"`
	TrustedDomains []string        `yaml:"trusted_domains"`
	AccessControl  AccessControl   `yaml:"access_control"`
	Rules          map[string]Rule `yaml:"rules"`
	AdvancedRules  map[string]Rule `yaml:"advanced_rules,omitempty"`
}

type Settings struct {
	Enabled               bool    `yaml:"enabled"`
	DefaultAction         string  `yaml:"default_action"`
	AutoReload            bool    `yaml:"auto_reload"`
	CaseSensitive         bool    `yaml:"case_sensitive"`
	EnableNotifications   bool    `yaml:"enable_notifications"`
	MaxContentSize        int     `yaml:"max_content_size"`        // Maximum content size to scan (KB)
	MaxEntropySize        int     `yaml:"max_entropy_size"`        // Maximum content size for entropy analysis (KB)
	SizeExceededBehaviour string  `yaml:"size_exceeded_behaviour"` // Behaviour when size limits exceeded: "allow", "warn", "block"
	LogPath               string  `yaml:"log_path"`                // Custom log file path
	MaxScanSize           int     `yaml:"max_scan_size"`           // Maximum content size to scan (KB)
	ThreatThreshold       float64 `yaml:"threat_threshold"`        // Threat detection threshold
	CacheEnabled          bool    `yaml:"cache_enabled"`           // Enable security result caching
	CacheMaxAge           string  `yaml:"cache_max_age"`           // Maximum cache age (duration string)
	CacheMaxSize          int     `yaml:"cache_max_size"`          // Maximum cache entries
	EnableBase64Scanning  bool    `yaml:"enable_base64_scanning"`  // Enable base64 content decoding and analysis
	MaxBase64DecodedSize  int     `yaml:"max_base64_decoded_size"` // Maximum size of decoded base64 content (KB)
}

type ShellParser struct {
}

type SourceContext struct {
	URL         string `json:"url"`
	Domain      string `json:"domain"`
	ContentType string `json:"content_type"`
	Tool        string `json:"tool"`
}

type SourceTrust struct {
	// contains filtered or unexported fields
}

type SuffixMatcher struct {
	// contains filtered or unexported fields
}

type ThreatAnalyser struct {
	// contains filtered or unexported fields
}

type ThreatAnalysis struct {
	Commands    []ParsedCommand `json:"commands"`
	SourceTrust float64         `json:"source_trust"`
	RiskScore   float64         `json:"risk_score"`
	Context     string          `json:"context"`
	RiskFactors []string        `json:"risk_factors"`
}

type URLMatcher struct {
	// contains filtered or unexported fields
}

type YAMLRuleEngine struct {
	// contains filtered or unexported fields
}