fixes

pkg/metadata/interface.go

@@ -0,0 +1,170 @@
+package metadata
+
+import (
+	"context"
+	"time"
+)
+
+// Store is an alias for MetadataStore for convenience
+type Store = MetadataStore
+
+// MetadataStore defines the interface for package metadata storage
+type MetadataStore interface {
+	// SavePackage saves package metadata
+	SavePackage(ctx context.Context, pkg *Package) error
+
+	// GetPackage retrieves package metadata
+	GetPackage(ctx context.Context, registry, name, version string) (*Package, error)
+
+	// DeletePackage deletes package metadata
+	DeletePackage(ctx context.Context, registry, name, version string) error
+
+	// ListPackages lists packages with optional filtering
+	ListPackages(ctx context.Context, opts *ListOptions) ([]*Package, error)
+
+	// UpdateDownloadCount increments download counter
+	UpdateDownloadCount(ctx context.Context, registry, name, version string) error
+
+	// GetStats returns statistics
+	GetStats(ctx context.Context, registry string) (*Stats, error)
+
+	// SaveScanResult saves security scan result
+	SaveScanResult(ctx context.Context, result *ScanResult) error
+
+	// GetScanResult retrieves security scan result
+	GetScanResult(ctx context.Context, registry, name, version string) (*ScanResult, error)
+
+	// SaveCVEBypass saves a CVE bypass (admin only)
+	SaveCVEBypass(ctx context.Context, bypass *CVEBypass) error
+
+	// GetActiveCVEBypasses retrieves all active (non-expired) CVE bypasses
+	GetActiveCVEBypasses(ctx context.Context) ([]*CVEBypass, error)
+
+	// ListCVEBypasses lists all CVE bypasses (including expired)
+	ListCVEBypasses(ctx context.Context, opts *BypassListOptions) ([]*CVEBypass, error)
+
+	// DeleteCVEBypass deletes a CVE bypass by ID
+	DeleteCVEBypass(ctx context.Context, id string) error
+
+	// CleanupExpiredBypasses removes expired bypasses
+	CleanupExpiredBypasses(ctx context.Context) (int, error)
+
+	// Count returns total number of packages
+	Count(ctx context.Context) (int, error)
+
+	// Health checks metadata store health
+	Health(ctx context.Context) error
+
+	// Close closes the metadata store
+	Close() error
+}
+
+// Package represents package metadata
+type Package struct {
+	ID              string            `json:"id"`
+	Registry        string            `json:"registry"`         // npm, pypi, go
+	Name            string            `json:"name"`             // Package name
+	Version         string            `json:"version"`          // Package version
+	StorageKey      string            `json:"storage_key"`      // Key in storage backend
+	Size            int64             `json:"size"`             // Package size in bytes
+	ChecksumMD5     string            `json:"checksum_md5"`     // MD5 checksum
+	ChecksumSHA256  string            `json:"checksum_sha256"`  // SHA256 checksum
+	UpstreamURL     string            `json:"upstream_url"`     // Original upstream URL
+	CachedAt        time.Time         `json:"cached_at"`        // When cached
+	LastAccessed    time.Time         `json:"last_accessed"`    // Last access time
+	ExpiresAt       *time.Time        `json:"expires_at"`       // Expiration time (nil = never)
+	DownloadCount   int64             `json:"download_count"`   // Download counter
+	Metadata        map[string]string `json:"metadata"`         // Additional metadata
+	SecurityScanned bool              `json:"security_scanned"` // Has been scanned
+}
+
+// ScanResult represents a security scan result
+type ScanResult struct {
+	ID                 string                 `json:"id"`
+	Registry           string                 `json:"registry"`
+	PackageName        string                 `json:"package_name"`
+	PackageVersion     string                 `json:"package_version"`
+	Scanner            string                 `json:"scanner"` // trivy, osv, etc.
+	ScannedAt          time.Time              `json:"scanned_at"`
+	Status             ScanStatus             `json:"status"` // clean, vulnerable, error
+	VulnerabilityCount int                    `json:"vulnerability_count"`
+	Vulnerabilities    []Vulnerability        `json:"vulnerabilities"`
+	Details            map[string]interface{} `json:"details"` // Scanner-specific details
+}
+
+// Vulnerability represents a security vulnerability
+type Vulnerability struct {
+	ID          string   `json:"id"`       // CVE-xxx, GHSA-xxx, etc.
+	Severity    string   `json:"severity"` // critical, high, medium, low
+	Title       string   `json:"title"`
+	Description string   `json:"description"`
+	References  []string `json:"references"`
+	FixedIn     string   `json:"fixed_in"` // Version where fixed
+	DetectedBy  []string `json:"detected_by,omitempty"` // List of scanners that detected this vulnerability
+}
+
+// ScanStatus represents scan result status
+type ScanStatus string
+
+const (
+	ScanStatusClean      ScanStatus = "clean"
+	ScanStatusVulnerable ScanStatus = "vulnerable"
+	ScanStatusError      ScanStatus = "error"
+	ScanStatusPending    ScanStatus = "pending"
+)
+
+// Stats represents metadata statistics
+type Stats struct {
+	Registry           string    `json:"registry"`
+	TotalPackages      int64     `json:"total_packages"`
+	TotalSize          int64     `json:"total_size"`
+	TotalDownloads     int64     `json:"total_downloads"`
+	ScannedPackages    int64     `json:"scanned_packages"`
+	VulnerablePackages int64     `json:"vulnerable_packages"`
+	LastUpdated        time.Time `json:"last_updated"`
+}
+
+// CVEBypass represents a temporary bypass for a CVE or package
+type CVEBypass struct {
+	ID             string     `json:"id"`                        // Unique bypass ID
+	Type           BypassType `json:"type"`                      // cve, package
+	Target         string     `json:"target"`                    // CVE ID (e.g., "CVE-2021-23337") or package (e.g., "npm/lodash@4.17.20")
+	Reason         string     `json:"reason"`                    // Why this bypass was created
+	CreatedBy      string     `json:"created_by"`                // Admin user who created it
+	CreatedAt      time.Time  `json:"created_at"`                // When created
+	ExpiresAt      time.Time  `json:"expires_at"`                // When it expires
+	AppliesTo      string     `json:"applies_to,omitempty"`      // Optional: limit to specific package (for CVE bypasses)
+	NotifyOnExpiry bool       `json:"notify_on_expiry"`          // Send notification when expired
+	Active         bool       `json:"active"`                    // Can be deactivated without deletion
+}
+
+// BypassType represents the type of bypass
+type BypassType string
+
+const (
+	BypassTypeCVE     BypassType = "cve"     // Bypass specific CVE
+	BypassTypePackage BypassType = "package" // Bypass entire package
+)
+
+// BypassListOptions contains options for listing CVE bypasses
+type BypassListOptions struct {
+	Type          BypassType // Filter by type
+	IncludeExpired bool       // Include expired bypasses
+	ActiveOnly    bool       // Only active bypasses
+	Limit         int        // Max results
+	Offset        int        // Pagination offset
+}
+
+// ListOptions contains options for listing packages
+type ListOptions struct {
+	Registry    string    // Filter by registry
+	NamePrefix  string    // Filter by name prefix
+	MinSize     int64     // Minimum package size
+	MaxSize     int64     // Maximum package size
+	ScannedOnly bool      // Only scanned packages
+	SinceDate   time.Time // Packages cached since date
+	Limit       int       // Max results
+	Offset      int       // Pagination offset
+	SortBy      string    // Sort field (name, size, cached_at, download_count)
+	SortDesc    bool      // Sort descending
+}