spec

type BindingEntry struct {
	Source     string         `yaml:"source"`
	SlotParams map[string]any `yaml:"slot_params"`
}

type CIConfig struct {
	FailOnViolation *bool         `yaml:"fail_on_violation"`
	FailSeverity    core.Severity `yaml:"fail_severity"`
}

type CloudConfig struct {
	Enabled *bool  `yaml:"enabled"`
	BaseURL string `yaml:"base_url"`
}

type ControlSpec struct {
	ID               string        `yaml:"id"`
	Name             string        `yaml:"name"`
	Description      string        `yaml:"description"`
	Category         string        `yaml:"category"`
	BaselineSeverity core.Severity `yaml:"baseline_severity"`
}

type CustomPeriod struct {
	ID    string `yaml:"id"`
	Start string `yaml:"start"`
	End   string `yaml:"end"`
}

type ExceptionConfig struct {
	Policy     string         `yaml:"policy"`
	Scope      ExceptionScope `yaml:"scope"`
	State      string         `yaml:"state"`
	Reason     string         `yaml:"reason"`
	ApprovedBy string         `yaml:"approved_by"`
	ApprovedAt string         `yaml:"approved_at"`
	ExpiresAt  string         `yaml:"expires_at"`
}

type ExceptionScope struct {
	ResourceID      string `yaml:"resource_id"`
	ResourcePattern string `yaml:"resource_pattern"`
}

type ExtensionsConfig struct {
	Path string `yaml:"path"`
}

type FiscalCalendarConfig struct {
	Type    string         `yaml:"type"`
	Starts  string         `yaml:"starts"`
	Periods []CustomPeriod `yaml:"periods"`
}

type FrameworkSpec struct {
	SchemaVersion string          `yaml:"schema_version"`
	IDValue       string          `yaml:"id"`
	VersionValue  string          `yaml:"version"`
	DisplayName   string          `yaml:"display_name"`
	Description   string          `yaml:"description"`
	ControlsList  []ControlSpec   `yaml:"controls"`
	PoliciesList  []PolicyRefSpec `yaml:"policies"`
}

type OutputConfig struct {
	Format   string `yaml:"format"`
	JSONPath string `yaml:"json_path"`
	Verbose  bool   `yaml:"verbose"`
}

type PeriodConfig struct {
	FiscalCalendar FiscalCalendarConfig `yaml:"fiscal_calendar"`
	TimeBasis      string               `yaml:"time_basis"`
}

type PluginConfigField struct {
	Type        string `yaml:"type"`
	Required    bool   `yaml:"required"`
	Default     any    `yaml:"default"`
	Enum        []any  `yaml:"enum"`
	Description string `yaml:"description"`
}

type PluginCredentialRequirement struct {
	Source string `yaml:"source"`
	EnvVar string `yaml:"env_var,omitempty"`
}

type PluginManifest struct {
	SchemaVersion       string                        `yaml:"schema_version"`
	ID                  string                        `yaml:"id"`
	DisplayName         string                        `yaml:"display_name"`
	Version             string                        `yaml:"version"`
	Description         string                        `yaml:"description"`
	Emits               []string                      `yaml:"emits"`
	Singleton           bool                          `yaml:"singleton"`
	ConfigSchema        map[string]PluginConfigField  `yaml:"config_schema"`
	RequiresCredentials []PluginCredentialRequirement `yaml:"requires_credentials"`
}

type PolicyOverride struct {
	EvidenceMode string `yaml:"evidence_mode"`
	CatalogEntry string `yaml:"catalog_entry"`
}

type PolicyRefSpec struct {
	ID string `yaml:"id"`
}

type ProjectConfig struct {
	SchemaVersion    string                               `yaml:"schema_version"`
	Framework        string                               `yaml:"framework"`
	Period           PeriodConfig                         `yaml:"period"`
	Vault            VaultConfig                          `yaml:"vault"`
	Sources          map[string]map[string]any            `yaml:"sources"`
	Bindings         map[string]map[string][]BindingEntry `yaml:"bindings"`
	PolicyParameters map[string]map[string]any            `yaml:"policy_parameters"`
	PolicyCadences   map[string]string                    `yaml:"policy_cadences"`
	PolicyOverrides  map[string]PolicyOverride            `yaml:"policy_overrides"`
	Exceptions       []ExceptionConfig                    `yaml:"exceptions"`
	Cloud            CloudConfig                          `yaml:"cloud"`
	CIEnvironment    map[string]any                       `yaml:"ci_environment"`
	Output           OutputConfig                         `yaml:"output"`
	CI               CIConfig                             `yaml:"ci"`
	Extensions       ExtensionsConfig                     `yaml:"extensions"`

	// ProjectLocalPolicies are PolicyRefs for policies discovered under
	// .sigcomply/policies/*/policy.yaml at bootstrap and registered into
	// the policy registry. The planner unions these with the active
	// framework's own Policies() so a customer-authored YAML policy is
	// actually planned and evaluated. yaml:"-" — populated by the
	// orchestrator's project-local loader, never decoded from the file.
	ProjectLocalPolicies []core.PolicyRef `yaml:"-"`
}

type VaultConfig struct {
	Backend        string `yaml:"backend"`
	Bucket         string `yaml:"bucket"`
	Region         string `yaml:"region"`
	Prefix         string `yaml:"prefix"`
	Endpoint       string `yaml:"endpoint"`
	ForcePathStyle bool   `yaml:"force_path_style"`
	Profile        string `yaml:"profile"`
	RoleARN        string `yaml:"role_arn"`
	Path           string `yaml:"path"`
	Account        string `yaml:"account"`
	Container      string `yaml:"container"`
}