mcpriskscan

type ApprovalGate interface {
	// HoldCall lets the call through when an approval covers it. Otherwise it
	// records or refreshes the call's approval request and returns its token
	// and the instructions the agent needs.
	HoldCall(ctx context.Context, call approval.HoldInput) (approval.HoldOutcome, error)
}

type Decision struct {
	Disposition   Disposition
	PolicyID      string
	PolicyName    string
	RuleID        string
	Description   string
	UserMessage   string
	Indeterminate bool

	// ApprovalToken is set when a require_approval policy holds the call. The
	// deny is then an instruction to the agent, not a refusal: seams that can
	// return a tool result return UserMessage as an isError result so the agent
	// requests approval and retries.
	ApprovalToken string
}

type Disposition string

type Evaluator struct {
	// contains filtered or unexported fields
}

type Event struct {
	Surface        string
	Method         string
	OrganizationID string
	ProjectID      string
	ServerID       string
	MetaServerID   string
	ToolsetID      string
	ToolName       string
	ResourceURI    string
	PromptName     string
	ChatID         string
	// ToolAnnotations contains trusted annotations from a code-owned tool descriptor.
	ToolAnnotations *gentypes.ToolAnnotations
	// contains filtered or unexported fields
}

type FailMode string

type MCPFindingEvidenceWriter interface {
	Store(context.Context, risk.MCPFindingEvidenceBatch) error
}

type Observer interface {
	Observe(ctx context.Context, subject Subject)
}

type ObserverFunc func(context.Context, Subject)

type Payload struct {
	// contains filtered or unexported fields
}

type PayloadAvailability string

type PayloadStorageCheck = func(ctx context.Context, organizationID string) (bool, error)

type PolicyConfig struct {
	// Deadline bounds lookup, block scanning, and each detached flag lane.
	Deadline time.Duration

	// FailMode resolves incomplete block policy evaluation.
	FailMode FailMode

	// FlagConcurrency bounds detached flag evaluation goroutines.
	FlagConcurrency int
}

type PolicyDetector interface {
	ScanMCPPolicy(ctx context.Context, policy policycore.Policy, request risk.MCPScanRequest) ([]scanners.Finding, error)
}

type PolicyEvaluatorOption func(*policyEvaluator)

type PolicyLookup interface {
	ListEnabledForMCP(ctx context.Context, organizationID string, projectID uuid.UUID, target policycore.MCPTarget) ([]policycore.Policy, error)
}

type Subject struct {
	Event   Event
	Payload Payload `json:"-"`
	// contains filtered or unexported fields
}