persona

type ChainedRoleMapper struct {
	Mappers []RoleMapper
}

type OIDCRoleMapper struct {
	// ClaimPath is the dot-separated path to roles in claims.
	ClaimPath string

	// RolePrefix filters roles to those starting with this prefix.
	RolePrefix string

	// PersonaMapping maps roles to persona names.
	PersonaMapping map[string]string

	// Registry is the persona registry.
	Registry *Registry
}

type Persona struct {
	// Name is the unique identifier for this persona.
	Name string `json:"name" yaml:"name"`

	// DisplayName is the human-readable name.
	DisplayName string `json:"display_name" yaml:"display_name"`

	// Description describes this persona.
	Description string `json:"description,omitempty" yaml:"description,omitempty"`

	// Roles are the roles that map to this persona.
	Roles []string `json:"roles" yaml:"roles"`

	// Tools defines tool access rules.
	Tools ToolRules `json:"tools" yaml:"tools"`

	// Prompts defines prompt customizations.
	Prompts PromptConfig `json:"prompts" yaml:"prompts"`

	// Hints provides tool-specific hints for the AI.
	Hints map[string]string `json:"hints,omitempty" yaml:"hints,omitempty"`

	// Priority determines which persona takes precedence.
	// Higher values have higher priority.
	Priority int `json:"priority,omitempty" yaml:"priority,omitempty"`
}

type PersonaAuthorizer struct {
	// contains filtered or unexported fields
}

type PersonaConfig struct {
	DisplayName string            `yaml:"display_name"`
	Description string            `yaml:"description,omitempty"`
	Roles       []string          `yaml:"roles"`
	Tools       ToolRulesConfig   `yaml:"tools"`
	Prompts     PromptConfigYAML  `yaml:"prompts"`
	Hints       map[string]string `yaml:"hints,omitempty"`
	Priority    int               `yaml:"priority,omitempty"`
}

type PromptConfig struct {
	// SystemPrefix is prepended to system prompts.
	SystemPrefix string `json:"system_prefix,omitempty" yaml:"system_prefix,omitempty"`

	// SystemSuffix is appended to system prompts.
	SystemSuffix string `json:"system_suffix,omitempty" yaml:"system_suffix,omitempty"`

	// Instructions are additional instructions for this persona.
	Instructions string `json:"instructions,omitempty" yaml:"instructions,omitempty"`
}

type PromptConfigYAML struct {
	SystemPrefix string `yaml:"system_prefix,omitempty"`
	SystemSuffix string `yaml:"system_suffix,omitempty"`
	Instructions string `yaml:"instructions,omitempty"`
}

type Registry struct {
	// contains filtered or unexported fields
}

type RoleMapper interface {
	// MapToRoles extracts roles from claims.
	MapToRoles(claims map[string]any) ([]string, error)

	// MapToPersona maps roles to a persona.
	MapToPersona(ctx context.Context, roles []string) (*Persona, error)
}

type StaticRoleMapper struct {
	// UserPersonas maps user IDs/emails to persona names.
	UserPersonas map[string]string

	// GroupPersonas maps groups to persona names.
	GroupPersonas map[string]string

	// DefaultPersonaName is the fallback persona.
	DefaultPersonaName string

	// Registry is the persona registry.
	Registry *Registry
}

type ToolFilter struct {
	// contains filtered or unexported fields
}

type ToolRules struct {
	// Allow patterns for allowed tools (supports wildcards like "trino_*").
	Allow []string `json:"allow" yaml:"allow"`

	// Deny patterns for denied tools (takes precedence over Allow).
	Deny []string `json:"deny" yaml:"deny"`
}

type ToolRulesConfig struct {
	Allow []string `yaml:"allow"`
	Deny  []string `yaml:"deny"`
}