agent

type Analyst struct {
	// contains filtered or unexported fields
}

type AnalystResult struct {
	FindingID     string             `json:"finding_id"`
	Title         string             `json:"title"`
	Severity      Severity           `json:"severity"`
	IsExploitable bool               `json:"is_exploitable"`
	Confidence    float64            `json:"confidence"` // 0.0-1.0
	Narrative     string             `json:"narrative"`  // Human-readable analysis narrative
	AttackPath    []AttackStep       `json:"attack_path"`
	Evidence      []EvidenceItem     `json:"evidence"`
	Verification  VerificationResult `json:"verification"`
	CWE           string             `json:"cwe"`
	CVSS          float64            `json:"cvss"`
	FixSuggestion string             `json:"fix_suggestion"`
	References    []string           `json:"references,omitempty"`
	// RawFindings are the original scanner findings that fed this analysis.
	RawFindings []RawFinding `json:"raw_findings,omitempty"`
}

type AttackScenario struct {
	Actor       string
	Path        string
	Impact      string
	IsReal      bool
	Explanation string
}

type AttackStep struct {
	StepNumber  int    `json:"step_number"`
	Description string `json:"description"`
	FileRef     string `json:"file_ref,omitempty"`
	LineRef     int    `json:"line_ref,omitempty"`
}

type ContextProvider interface {
	// GetContext extracts context around a finding at filePath:lineNumber.
	GetContext(filePath string, lineNumber int) (*FileContext, error)

	// SupportedExtensions returns file extensions this provider handles.
	SupportedExtensions() []string

	// Name returns a human-readable provider name.
	Name() string
}

type ContextProviderRegistry struct {
	// contains filtered or unexported fields
}

type DeepSeekClient struct {
	// contains filtered or unexported fields
}

type DefaultReportBuilder struct {
	// IncludeRawFindings controls whether raw scanner output appears in the appendix.
	IncludeRawFindings bool
}

type Engine struct {
	// contains filtered or unexported fields
}

type EngineOption func(*Engine)

type EvidenceItem struct {
	Type        string `json:"type"`        // "code", "config", "dependency", "runtime"
	Description string `json:"description"` // What this evidence shows
	FilePath    string `json:"file_path,omitempty"`
	LineNumber  int    `json:"line_number,omitempty"`
	CodeSnippet string `json:"code_snippet,omitempty"`
	Confidence  string `json:"confidence"` // "certain", "likely", "possible"
}

type FileContext struct {
	FilePath         string    `json:"file_path"`
	Language         string    `json:"language"`
	FindingLine      int       `json:"finding_line"`
	FindingSnippet   string    `json:"finding_snippet"` // The line(s) flagged by the scanner
	EnclosingFunc    *FuncInfo `json:"enclosing_func,omitempty"`
	Imports          []string  `json:"imports,omitempty"`
	Variables        []VarDef  `json:"variables,omitempty"`
	SurroundingLines string    `json:"surrounding_lines"` // ±5 lines around finding
	FileSummary      string    `json:"file_summary"`      // "Package main, 120 lines, 5 functions"
}

type FuncInfo struct {
	Name       string `json:"name"`               // Function name
	Receiver   string `json:"receiver,omitempty"` // Method receiver type (Go)
	Signature  string `json:"signature"`          // Full function signature
	Body       string `json:"body"`               // Complete function body
	StartLine  int    `json:"start_line"`
	EndLine    int    `json:"end_line"`
	IsExported bool   `json:"is_exported"`
}

type GenericContextProvider struct{}

type GoContextProvider struct{}

type InputFinding struct {
	ID             string
	Title          string
	Description    string
	Severity       InputSeverity
	FilePath       string
	LineNumber     int
	CodeSnippet    string
	Category       string
	ToolOutput     string
	AIConfidence   float64
	FixSuggestion  string
	CWE            string
	CVSS           float64
	References     []string
	AttackScenario *AttackScenario // Enriched by Agent Engine analysis
}

type InputSeverity int

type LLMClient interface {
	Chat(ctx context.Context, systemPrompt, userMessage string) (string, error)
}

type OfflineEngine struct {
	// contains filtered or unexported fields
}

type OfflineRule struct {
	Name          string
	Category      string
	TruePatterns  []string
	FalsePatterns []string
	MinConfidence float64
}

type PromptExecutor struct {
	// contains filtered or unexported fields
}

type PythonContextProvider struct {
	// contains filtered or unexported fields
}

type RawFinding struct {
	Source   string `json:"source"`  // "gitleaks", "semgrep", "gosec", etc.
	RuleID   string `json:"rule_id"` // Scanner rule ID
	FilePath string `json:"file_path"`
	Line     int    `json:"line"`
	Snippet  string `json:"snippet"`
}

type ReportBuilder interface {
	// BuildReport generates a complete markdown report from an analysis result.
	BuildReport(result AnalystResult) (string, error)
	// BuildSections returns individual report sections for custom assembly.
	BuildSections(result AnalystResult) ([]ReportSection, error)
}

type ReportSection struct {
	Heading string // Section heading (e.g. "## Executive Summary")
	Content string // Section body in markdown
	Order   int    // Display order
}

type Severity string

type VarDef struct {
	Name       string `json:"name"`
	Type       string `json:"type,omitempty"`  // Go type or Python type annotation
	Value      string `json:"value,omitempty"` // Initial value if constant
	LineNumber int    `json:"line_number"`
	IsExported bool   `json:"is_exported"`
}

type VerificationResult struct {
	Verified    bool   `json:"verified"`               // Was the finding independently verified?
	Method      string `json:"method"`                 // "api-call", "ast-reachability", "regex-match"
	Detail      string `json:"detail"`                 // Human-readable verification detail
	APIEndpoint string `json:"api_endpoint,omitempty"` // Which API was called (for secret verification)
	APIResponse string `json:"api_response,omitempty"` // Truncated response (for secret verification)
	IsReachable bool   `json:"is_reachable,omitempty"` // For AST reachability: can tainted data reach sink?
	ReachPath   string `json:"reach_path,omitempty"`   // Source→Sink data flow path
}

type Verifier struct {
	// contains filtered or unexported fields
}