security

type AuditTrail struct {
	// contains filtered or unexported fields
}

type Block struct {
	// ID is a unique identifier for taint tracking.
	ID string `json:"id"`

	// Trust indicates who created the content.
	Trust TrustLevel `json:"trust"`

	// Type indicates how to interpret the content.
	Type BlockType `json:"type"`

	// Mutable indicates whether later content can override this block.
	// Immutable blocks have precedence immunity.
	Mutable bool `json:"mutable"`

	// Content is the actual text content.
	Content string `json:"content"`

	// ContentHash is SHA256 hash of content for de-duplication.
	ContentHash string `json:"content_hash,omitempty"`

	// Source describes where the content came from (for debugging).
	Source string `json:"source,omitempty"`

	// AgentContext identifies which agent/sub-agent created this block.
	// Used to filter blocks during security checks in multi-agent scenarios.
	AgentContext string `json:"agent_context,omitempty"`

	// TaintedBy lists IDs of blocks that influenced this block.
	TaintedBy []string `json:"tainted_by,omitempty"`

	// CreatedAtSeq is the session event sequence when this block was created.
	// Used to correlate blocks with session events in forensic analysis.
	CreatedAtSeq uint64 `json:"created_at_seq,omitempty"`

	// DedupeHit indicates this block was reused from a previous identical content.
	DedupeHit bool `json:"dedupe_hit,omitempty"`
}

type BlockType string

type Config struct {
	// Mode is the security mode (default, paranoid, or research).
	Mode Mode

	// ResearchScope describes the authorized scope for research mode.
	// Required when Mode is ModeResearch.
	ResearchScope string

	// UserTrust is the trust level for user messages.
	UserTrust TrustLevel

	// TriageProvider is the LLM provider for Tier 2 triage (cheap/fast model).
	TriageProvider llm.Provider

	// SupervisorProvider is the LLM provider for Tier 3 supervision (capable model).
	SupervisorProvider llm.Provider

	// Logger for security events.
	Logger *logging.Logger
}

type EncodingDetection struct {
	Detected bool
	Type     EncodingType
	Segment  string
	Entropy  float64
}

type EncodingType string

type KeywordMatch struct {
	Keyword string
}

type Mode string

type PatternMatch struct {
	Name    string
	Pattern string
	Match   string
}

type SecurityRecord struct {
	BlockID     string    `json:"block_id"`
	SessionID   string    `json:"session_id"`
	Timestamp   time.Time `json:"timestamp"`
	ContentHash string    `json:"content_hash"`
	Trust       string    `json:"trust"`
	Type        string    `json:"type"`
	Tier1Result string    `json:"tier1_result"`
	Tier2Result string    `json:"tier2_result"`
	Tier3Result string    `json:"tier3_result"`
	Signature   string    `json:"signature,omitempty"`
}

type SecuritySupervisor struct {
	// contains filtered or unexported fields
}

type SessionLog struct {
	SessionID       string            `json:"session_id"`
	StartedAt       time.Time         `json:"started_at"`
	PublicKey       string            `json:"public_key"`
	SecurityMode    string            `json:"security_mode"`
	SecurityRecords []*SecurityRecord `json:"security_records"`
}

type SupervisionRequest struct {
	ToolName        string
	ToolArgs        map[string]interface{}
	UntrustedBlocks []*Block
	OriginalGoal    string
	Tier1Flags      []string
	Tier2Reason     string
}

type SupervisionResult struct {
	Verdict      Verdict
	Reason       string
	Correction   string
	LatencyMs    int64 // Time taken for supervisor LLM call
	InputTokens  int   // Input tokens used
	OutputTokens int   // Output tokens used
}

type SuspiciousPattern struct {
	Name    string
	Pattern *regexp.Regexp
}

type TaintLineageNode struct {
	BlockID   string              `json:"block_id"`
	Trust     TrustLevel          `json:"trust"`
	Source    string              `json:"source"`
	EventSeq  uint64              `json:"event_seq,omitempty"`
	Depth     int                 `json:"depth,omitempty"`
	TaintedBy []*TaintLineageNode `json:"tainted_by,omitempty"`
}

type Tier1Result struct {
	Pass          bool
	Reasons       []string
	SkipReason    string   // Why escalation was skipped (for forensic clarity)
	Block         *Block   // The primary untrusted block that triggered escalation
	RelatedBlocks []*Block // All blocks whose content is used in this tool call
}

type Triage struct {
	// contains filtered or unexported fields
}

type TriageRequest struct {
	ToolName       string
	ToolArgs       map[string]interface{}
	UntrustedBlock *Block
}

type TriageResult struct {
	Suspicious   bool
	Reason       string
	LatencyMs    int64 // Time taken for triage LLM call
	InputTokens  int   // Input tokens used
	OutputTokens int   // Output tokens used
}

type TrustLevel string

type Verdict string

type VerificationResult struct {
	Allowed      bool
	ToolName     string
	DenyReason   string
	Modification string
	Tier1        *Tier1Result
	Tier2        *TriageResult
	Tier3        *SupervisionResult
	TaintLineage []*TaintLineageNode // Taint dependency tree for related blocks
}

type Verifier struct {
	// contains filtered or unexported fields
}