ingest

type Evaluator interface {
	// EvaluateFilter evaluates a CEL filter expression and returns a boolean
	EvaluateFilter(ctx context.Context, expression string, vars map[string]any) (bool, error)
	// EvaluateMap evaluates a CEL expression and returns a JSON object map
	EvaluateMap(ctx context.Context, expression string, vars map[string]any) (map[string]any, error)
}

type MappingEvaluator struct {
	// contains filtered or unexported fields
}

type MappingVars struct {
	// Payload holds the raw provider payload for mapping
	Payload map[string]any
	// Resource identifies the upstream resource associated with the payload
	Resource string
	// AlertType identifies the alert type for the payload
	AlertType string
	// Provider identifies the integration provider
	Provider integrationtypes.ProviderType
	// Operation identifies the operation that produced the payload
	Operation integrationtypes.OperationName
	// OrgID identifies the organization that owns the integration
	OrgID string
	// IntegrationID identifies the integration record
	IntegrationID string
	// Config holds operation configuration values
	Config map[string]any
	// IntegrationConfig holds integration-level configuration values
	IntegrationConfig map[string]any
	// ProviderState holds provider state captured during activation
	ProviderState map[string]any
}

type RequestedPayload struct {
	// IntegrationID identifies the integration that owns the payload.
	IntegrationID string `json:"integration_id"`
	// Schema identifies the ingest mapping schema (vulnerability, asset, etc).
	Schema string `json:"schema"`
	// Envelopes holds provider alert payloads for ingestion.
	Envelopes []types.AlertEnvelope `json:"envelopes"`
}

type VulnerabilityIngestRequest struct {
	// OrgID identifies the organization that owns the vulnerabilities
	OrgID string
	// IntegrationID identifies the integration record
	IntegrationID string
	// Provider identifies the integration provider
	Provider integrationtypes.ProviderType
	// Operation identifies the operation that produced the alerts
	Operation integrationtypes.OperationName
	// IntegrationConfig supplies integration-level configuration for mapping
	IntegrationConfig openapi.IntegrationConfig
	// ProviderState carries provider-specific state for mapping
	ProviderState any
	// OperationConfig supplies operation-level configuration for mapping
	OperationConfig map[string]any
	// Envelopes holds the alert payloads to ingest
	Envelopes []integrationtypes.AlertEnvelope
	// DB provides access to the persistence layer
	DB *generated.Client
}

type VulnerabilityIngestResult struct {
	// Summary aggregates ingestion totals
	Summary VulnerabilityIngestSummary
	// Errors captures per-alert error messages
	Errors []string
}

type VulnerabilityIngestSummary struct {
	// Total counts total alerts processed
	Total int
	// Mapped counts alerts that produced mapped output
	Mapped int
	// Persisted counts alerts that were persisted
	Persisted int
	// Skipped counts alerts filtered out by mapping
	Skipped int
	// Failed counts alerts that failed mapping or persistence
	Failed int
	// Created counts new vulnerabilities created
	Created int
	// Updated counts existing vulnerabilities updated
	Updated int
}