security

type AuditEvent struct {
	Timestamp  time.Time         `json:"timestamp"`
	EventType  AuditEventType    `json:"event_type"`
	Agent      string            `json:"agent,omitempty"`
	TaskID     string            `json:"task_id,omitempty"`
	Project    string            `json:"project,omitempty"`
	Target     string            `json:"target,omitempty"`
	Action     string            `json:"action,omitempty"`
	Result     string            `json:"result,omitempty"`
	Duration   time.Duration     `json:"duration,omitempty"`
	TokensUsed int               `json:"tokens_used,omitempty"`
	Error      string            `json:"error,omitempty"`
	Metadata   map[string]string `json:"metadata,omitempty"`
	RequestID  string            `json:"request_id,omitempty"`
	SessionID  string            `json:"session_id,omitempty"`
}

type AuditEventType string

type AuditLogger struct {
	// contains filtered or unexported fields
}

type Config struct {
	Mode              SafetyMode // Operating mode
	EnableWrites      bool       // Allow write operations
	MaxBudgetPercent  int        // Max budget per run (default 75%)
	AllowGitPush      bool       // Allow pushing to remote repos
	AllowNetworkAgent bool       // Allow network access for agents
	AuditLogPath      string     // Path for audit logs
	FirstRunFile      string     // File to track first run state
}

type CredentialError struct {
	Credential string
	Message    string
}

type CredentialManager struct {
	// contains filtered or unexported fields
}

type CredentialStatus struct {
	Name    string
	EnvVar  string
	Present bool
	Masked  string // Masked value for display (e.g., "sk-...abc")
}

type ExecResult struct {
	Stdout   string
	Stderr   string
	ExitCode int
	Duration time.Duration
	Error    string
}

type Manager struct {
	// contains filtered or unexported fields
}

type Operation struct {
	Type        OperationType
	Target      string            // File path, git repo, URL, etc.
	Agent       string            // Agent performing the operation
	TaskID      string            // Associated task ID
	Description string            // Human-readable description
	Metadata    map[string]string // Additional context
}

type OperationType string

type SafetyMode string

type Sandbox struct {
	// contains filtered or unexported fields
}

type SandboxConfig struct {
	// WorkDir is the working directory for the sandboxed process.
	WorkDir string
	// TempDir is the temporary directory for working files.
	TempDir string
	// AllowNetwork enables network access (default false).
	AllowNetwork bool
	// AllowedPaths are paths the process can access.
	AllowedPaths []string
	// DeniedPaths are paths explicitly blocked.
	DeniedPaths []string
	// MaxDuration is the maximum execution time.
	MaxDuration time.Duration
	// MaxMemoryMB is the max memory in megabytes (0 = unlimited).
	MaxMemoryMB int
	// Environment variables to pass through.
	Environment map[string]string
	// Cleanup removes temp files after execution (default true).
	Cleanup bool
}

type SandboxedAgent struct {
	// contains filtered or unexported fields
}