security

type CGroup struct {
	Name        string
	Path        string
	MemoryLimit int64
	CPULimit    float64
	PIDLimit    int64
	CreatedAt   time.Time
	Active      bool
}

type CacheEntry struct {
	Result    *VerificationResult
	Timestamp time.Time
	Hash      string
}

type CertificateInfo struct {
	Subject      string    `json:"subject"`
	Issuer       string    `json:"issuer"`
	SerialNumber string    `json:"serial_number"`
	NotBefore    time.Time `json:"not_before"`
	NotAfter     time.Time `json:"not_after"`
	Fingerprint  string    `json:"fingerprint"`
	KeyUsage     []string  `json:"key_usage"`
}

type CertificateMetadata struct {
	Fingerprint   string                 `json:"fingerprint"`
	AddedAt       time.Time              `json:"added_at"`
	AddedBy       string                 `json:"added_by"`
	TrustLevel    TrustLevel             `json:"trust_level"`
	Revoked       bool                   `json:"revoked"`
	RevokedAt     *time.Time             `json:"revoked_at,omitempty"`
	RevokedReason string                 `json:"revoked_reason,omitempty"`
	Attributes    map[string]interface{} `json:"attributes"`
}

type CertificateStore interface {
	AddCertificate(cert *x509.Certificate) error
	RemoveCertificate(fingerprint string) error
	GetCertificate(fingerprint string) (*x509.Certificate, error)
	ListCertificates() ([]*x509.Certificate, error)
	VerifyChain(cert *x509.Certificate) error
}

type EnforcementLevel string

type FileCertificateStore struct {
	// contains filtered or unexported fields
}

type FileSecurityAuditLogger struct {
	// contains filtered or unexported fields
}

type PluginVerifier struct {
	// contains filtered or unexported fields
}

type RevocationStatus string

type SandboxConfig struct {
	EnableCGroups      bool     `json:"enable_cgroups"`
	EnableSeccomp      bool     `json:"enable_seccomp"`
	CGroupRoot         string   `json:"cgroup_root"`
	MaxMemoryMB        int64    `json:"max_memory_mb"`
	MaxCPUPercent      float64  `json:"max_cpu_percent"`
	MaxProcesses       int64    `json:"max_processes"`
	AllowedSyscalls    []string `json:"allowed_syscalls"`
	BlockedSyscalls    []string `json:"blocked_syscalls"`
	NetworkIsolation   bool     `json:"network_isolation"`
	FilesystemReadOnly bool     `json:"filesystem_readonly"`
	TempDirPath        string   `json:"temp_dir_path"`
	AllowedDirectories []string `json:"allowed_directories"`
	DeniedDirectories  []string `json:"denied_directories"`
}

type SandboxManager struct {
	// contains filtered or unexported fields
}

type SandboxedProcess struct {
	PID        int
	PluginName string
	CGroupPath string
	StartTime  time.Time
	Command    *exec.Cmd
	Context    context.Context
	Cancel     context.CancelFunc
}

type SeccompProfile struct {
	DefaultAction string        `json:"default_action"`
	Syscalls      []SyscallRule `json:"syscalls"`
	Architectures []string      `json:"architectures"`
	Flags         []string      `json:"flags"`
}

type SecurityAuditEvent struct {
	Timestamp time.Time              `json:"timestamp"`
	EventType string                 `json:"event_type"`
	Source    string                 `json:"source"`
	Actor     string                 `json:"actor,omitempty"`
	Target    string                 `json:"target,omitempty"`
	Result    string                 `json:"result"`
	Details   map[string]interface{} `json:"details"`
	Severity  SeverityLevel          `json:"severity"`
	RequestID string                 `json:"request_id,omitempty"`
	SessionID string                 `json:"session_id,omitempty"`
}

type SecurityAuditLogger interface {
	LogVerification(pluginPath string, result *VerificationResult)
	LogCertificateOperation(operation string, cert *CertificateInfo)
	LogSecurityEvent(event string, details map[string]interface{})
	LogPluginSecurityViolation(pluginName string, violation string, details map[string]interface{})
	LogResourceViolation(pluginName string, resource string, limit interface{}, actual interface{})
	LogFailureRecovery(pluginName string, failureType string, recoveryAction string, success bool)
}

type SecurityCheckResult struct {
	Allowed      bool                `json:"allowed"`
	Reason       string              `json:"reason,omitempty"`
	Verification *VerificationResult `json:"verification,omitempty"`
	Violations   []SecurityViolation `json:"violations,omitempty"`
	Timestamp    time.Time           `json:"timestamp"`
}

type SecurityConfig struct {
	RequireSignature     bool                 `json:"require_signature"`
	EnforcementLevel     EnforcementLevel     `json:"enforcement_level"`
	TrustedCertificates  []string             `json:"trusted_certificates"`
	CertificateStorePath string               `json:"certificate_store_path"`
	AuditLogPath         string               `json:"audit_log_path"`
	VerificationCacheTTL time.Duration        `json:"verification_cache_ttl"`
	AllowSelfSigned      bool                 `json:"allow_self_signed"`
	RequiredKeyUsage     []x509.KeyUsage      `json:"required_key_usage"`
	MinKeySize           int                  `json:"min_key_size"`
	AllowedAlgorithms    []SignatureAlgorithm `json:"allowed_algorithms"`
	SandboxConfig        *SandboxConfig       `json:"sandbox_config"`
}

type SecurityManager struct {
	// contains filtered or unexported fields
}

type SecurityViolation struct {
	Type        string                 `json:"type"`
	Severity    SeverityLevel          `json:"severity"`
	Description string                 `json:"description"`
	Details     map[string]interface{} `json:"details"`
}

type SeverityLevel string

type SignatureAlgorithm string

type SyscallArgument struct {
	Index    int    `json:"index"`
	Value    uint64 `json:"value"`
	ValueTwo uint64 `json:"value_two,omitempty"`
	Op       string `json:"op"`
}

type SyscallRule struct {
	Names  []string          `json:"names"`
	Action string            `json:"action"`
	Args   []SyscallArgument `json:"args,omitempty"`
}

type TrustLevel string

type VerificationCache struct {
	// contains filtered or unexported fields
}

type VerificationResult struct {
	Valid            bool               `json:"valid"`
	Algorithm        SignatureAlgorithm `json:"algorithm"`
	Certificate      *CertificateInfo   `json:"certificate"`
	Timestamp        time.Time          `json:"timestamp"`
	Error            string             `json:"error,omitempty"`
	TrustChain       []*CertificateInfo `json:"trust_chain"`
	RevocationStatus RevocationStatus   `json:"revocation_status"`
}