taint

type ActiveProbe struct {
	Type      schemas.ProbeType
	Key       string // The name/key used for injection (e.g., URL parameter name).
	Value     string // The full payload after template substitution.
	Canary    string // The unique identifier for this probe instance.
	Source    schemas.TaintSource
	CreatedAt time.Time
}

type Analyzer struct {
	// contains filtered or unexported fields
}

type Config struct {
	TaskID      string                    `json:"task_id" yaml:"task_id"`
	Target      *url.URL                  `json:"target" yaml:"target"`
	Probes      []ProbeDefinition         `json:"probes" yaml:"probes"`
	Sinks       []SinkDefinition          `json:"sinks" yaml:"sinks"` // Uses the alias to core.SinkDefinition
	Interaction schemas.InteractionConfig `json:"interaction" yaml:"interaction"`

	// AnalysisTimeout is the total maximum duration for the entire analysis task.
	AnalysisTimeout time.Duration `json:"analysis_timeout" yaml:"analysis_timeout"`

	// -- Performance & Concurrency Tuning --
	CorrelationWorkers      int           `json:"correlation_workers" yaml:"correlation_workers"`
	EventChannelBuffer      int           `json:"event_channel_buffer" yaml:"event_channel_buffer"`
	FinalizationGracePeriod time.Duration `json:"finalization_grace_period" yaml:"finalization_grace_period"`
	ProbeExpirationDuration time.Duration `json:"probe_expiration_duration" yaml:"probe_expiration_duration"`
	CleanupInterval         time.Duration `json:"cleanup_interval" yaml:"cleanup_interval"`
	OASTPollingInterval     time.Duration `json:"oast_polling_interval" yaml:"oast_polling_interval"`
}

type CorrelatedFinding struct {
	TaskID    string
	TargetURL string // The initial target URL of the analysis task.

	// FIX: Add the URL and Title of the page where the sink/execution actually occurred.
	OccurrenceURL   string
	OccurrenceTitle string

	Sink              schemas.TaintSink
	Origin            schemas.TaintSource
	Value             string // The value observed at the sink.
	Canary            string
	Probe             ActiveProbe
	Detail            string
	IsConfirmed       bool // True if confirmed by execution proof or OAST.
	SanitizationLevel SanitizationLevel
	StackTrace        string
	OASTDetails       *OASTInteraction // Details if confirmed via OAST.

	// Step 5: Unified Reporting (Correlated Findings)
	// Confirmation flags
	ConfirmedStatic  bool // Found via AST analysis (SAST)
	ConfirmedDynamic bool // Found via Shim/Execution Proof (IAST/DAST)

	// Link to the static finding if correlated.
	StaticFinding *javascript.StaticFinding
}

type Event interface {
	// contains filtered or unexported methods
}

type ExecutionProofEvent struct {
	Canary     string `json:"canary"`
	StackTrace string `json:"stack"`
	// FIX: Add context about the page where the event occurred for FP reduction.
	PageURL   string `json:"page_url"`
	PageTitle string `json:"page_title"`
}

type HumanoidProvider interface {
	GetHumanoid() *humanoid.Humanoid
}

type OASTInteraction struct {
	schemas.OASTInteraction
}

type OASTProvider schemas.OASTProvider

type PANScanner struct {
	// contains filtered or unexported fields
}

type ProbeDefinition struct {
	Type        schemas.ProbeType `json:"type" yaml:"type"`
	Payload     string            `json:"payload" yaml:"payload"`
	Context     string            `json:"context" yaml:"context"`
	Description string            `json:"description" yaml:"description"`
}

type ResultsReporter interface {
	Report(finding CorrelatedFinding)
}

type SanitizationLevel int

type SessionContext schemas.SessionContext

type ShimErrorEvent struct {
	Error      string `json:"error"`
	Location   string `json:"location"`
	StackTrace string `json:"stack"`
}

type SinkDefinition = core.SinkDefinition

type SinkEvent struct {
	Type       schemas.TaintSink `json:"type"`   // The type of sink that was triggered.
	Value      string            `json:"value"`  // The tainted value observed at the sink.
	Detail     string            `json:"detail"` // Additional context, like the property name.
	StackTrace string            `json:"stack"`  // The JavaScript stack trace.
	// FIX: Add context about the page where the event occurred for FP reduction.
	PageURL   string `json:"page_url"`   // The URL of the document at the time of the event.
	PageTitle string `json:"page_title"` // The title of the document at the time of the event.
}

type TaintFlowPath struct {
	ProbeType schemas.ProbeType
	SinkType  schemas.TaintSink
}