policy

type Contents map[string]string

type EnrichPolicyResult struct {
	Prompts []EnrichTask `json:"prompts"`
}

type EnrichResult struct {
	ID     string `json:"id"`
	Prompt string `json:"prompt"` // Actual prompt text used
	Result any    `json:"result"` // Task execution result
}

type EnrichResults []EnrichResult

type EnrichTask struct {
	ID       string                   `json:"id"`
	Template string                   `json:"template,omitempty"` // Template file path
	Params   map[string]any           `json:"params,omitempty"`   // Template parameters
	Inline   string                   `json:"inline,omitempty"`   // Inline prompt
	Format   types.GenAIContentFormat `json:"format"`             // "text" or "json"
}

type QueryFunc func(ctx context.Context, query string, data any, result any, queryOptions ...opaq.QueryOption) error

type TestData struct {
	// Metafiles is the metadata (README) of the test data that is generated by the AI.
	Metafiles map[types.AlertSchema]map[string]string
	// Data is the test data that is from the original alert or modified.
	Data map[types.AlertSchema]map[string]any
}

type TestDataSet struct {
	Detect *TestData `json:"detect"`
	Ignore *TestData `json:"ignore"`
}

type TriagePolicyAlert struct {
	ID       types.AlertID     `json:"id"`
	Schema   types.AlertSchema `json:"schema"`
	Metadata alert.Metadata    `json:"metadata"`
	Data     any               `json:"data"`
}

type TriagePolicyInput struct {
	Alert  TriagePolicyAlert `json:"alert"`
	Enrich EnrichResults     `json:"enrich"`
}

type TriagePolicyResult struct {
	Title       string               `json:"title,omitempty"`
	Description string               `json:"description,omitempty"`
	Channel     string               `json:"channel,omitempty"`
	Attr        []alert.Attribute    `json:"attr,omitempty"`
	Publish     types.PublishType    `json:"publish,omitempty"`
	Topic       types.KnowledgeTopic `json:"topic,omitempty"`
}