refactor: Use shared Cerebro Go API SDK

go.mod

@@ -9,6 +9,7 @@ require (
 	github.com/go-pdf/fpdf v0.9.0
 	github.com/jackc/pgx/v5 v5.10.0
 	github.com/nats-io/nats.go v1.52.0
+	github.com/writer/cerebro/sdk/go/cerebroapi v0.0.0-20260617165858-b79a38afb59c
 	golang.org/x/crypto v0.53.0
 	google.golang.org/protobuf v1.36.11
 )

go.sum

@@ -30,6 +30,8 @@ github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UV
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U=
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
+github.com/writer/cerebro/sdk/go/cerebroapi v0.0.0-20260617165858-b79a38afb59c h1:Q4lzmWx5TNGG6wVyXFkc50QYk55wfzr4CZeC10m6XsE=
+github.com/writer/cerebro/sdk/go/cerebroapi v0.0.0-20260617165858-b79a38afb59c/go.mod h1:Pj6RePoAtQMzYIZuYdS02A0RZInNozjLDKmEig8JlZM=
 golang.org/x/crypto v0.53.0 h1:QZ4Muo8THX6CizN2vPPd5fBGHyogrdK9fG4wLPFUsto=
 golang.org/x/crypto v0.53.0/go.mod h1:DNLU434OwVakk9PzuwV8w62mAJpRJL3vsgcfp4Qnsio=
 golang.org/x/sync v0.21.0 h1:HLII4xRRTtCRkxYp4HNFF0Js/Og6q2i++KXbg0gHCwM=

internal/cerebroclaims/builder.go

@@ -11,6 +11,7 @@ import (
 
 	cerebrov1 "github.com/writer/aperio/gen/cerebro/v1"
 	"github.com/writer/aperio/internal/cerebroclient"
+	sdkclaims "github.com/writer/cerebro/sdk/go/cerebroapi/claims"
 )
 
 type Payload struct {
@@ -75,21 +76,21 @@ func Build(input BuildInput) ([]cerebroclient.Claim, error) {
 		}
 	}
 	claims := []cerebroclient.Claim{
-		existsClaim(finding, input.Payload, attributes),
-		existsClaim(target, input.Payload, map[string]string{"provider": provider}),
-		existsClaim(integration, input.Payload, map[string]string{"provider": provider}),
-		relationClaim(finding, "affects", target, input.Payload),
-		relationClaim(finding, "observed_by", integration, input.Payload),
-		attributeClaim(finding, "title", title, input.Payload),
-		attributeClaim(finding, "provider", provider, input.Payload),
+		sdkclaims.Exists(finding, claimSource(input.Payload, attributes)),
+		sdkclaims.Exists(target, claimSource(input.Payload, map[string]string{"provider": provider})),
+		sdkclaims.Exists(integration, claimSource(input.Payload, map[string]string{"provider": provider})),
+		sdkclaims.Relation(finding, "affects", target, claimSource(input.Payload, nil)),
+		sdkclaims.Relation(finding, "observed_by", integration, claimSource(input.Payload, nil)),
+		sdkclaims.Attribute(finding, "title", title, claimSource(input.Payload, nil)),
+		sdkclaims.Attribute(finding, "provider", provider, claimSource(input.Payload, nil)),
 	}
 	for _, key := range []string{"severity", "riskScore", "status", "ruleId"} {
 		if value := firstString(input.Payload.Record[key]); value != "" {
-			claims = append(claims, attributeClaim(finding, key, value, input.Payload))
+			claims = append(claims, sdkclaims.Attribute(finding, key, value, claimSource(input.Payload, nil)))
 		}
 	}
 	if description := firstString(input.Payload.Record["description"]); description != "" {
-		claims = append(claims, attributeClaim(finding, "description", description, input.Payload))
+		claims = append(claims, sdkclaims.Attribute(finding, "description", description, claimSource(input.Payload, nil)))
 	}
 	return claims, nil
 }
@@ -142,45 +143,14 @@ func EncodeExternalID(value string) string {
 	return builder.String()
 }
 
-func claimBase(payload Payload, attributes map[string]string) cerebroclient.Claim {
-	return cerebroclient.Claim{
-		Status:        "asserted",
+func claimSource(payload Payload, attributes map[string]string) sdkclaims.Source {
+	return sdkclaims.Source{
 		SourceEventID: firstString(payload.Record["sourceEventId"]),
 		ObservedAt:    payload.OccurredAt,
 		Attributes:    attributes,
 	}
 }
 
-func existsClaim(subject cerebroclient.EntityRef, payload Payload, attributes map[string]string) cerebroclient.Claim {
-	claim := claimBase(payload, attributes)
-	claim.SubjectURN = subject.URN
-	claim.SubjectRef = subject
-	claim.Predicate = "exists"
-	claim.ClaimType = "existence"
-	return claim
-}
-
-func attributeClaim(subject cerebroclient.EntityRef, predicate string, value string, payload Payload) cerebroclient.Claim {
-	claim := claimBase(payload, nil)
-	claim.SubjectURN = subject.URN
-	claim.SubjectRef = subject
-	claim.Predicate = predicate
-	claim.ObjectValue = value
-	claim.ClaimType = "attribute"
-	return claim
-}
-
-func relationClaim(subject cerebroclient.EntityRef, predicate string, object cerebroclient.EntityRef, payload Payload) cerebroclient.Claim {
-	claim := claimBase(payload, nil)
-	claim.SubjectURN = subject.URN
-	claim.SubjectRef = subject
-	claim.Predicate = predicate
-	claim.ObjectURN = object.URN
-	claim.ObjectRef = &object
-	claim.ClaimType = "relation"
-	return claim
-}
-
 func firstString(values ...any) string {
 	for _, value := range values {
 		switch typed := value.(type) {