pack

type AdvisoryFinding struct {
	ID         string   `json:"id"`
	Package    string   `json:"package"`
	Version    string   `json:"version"`
	Severity   string   `json:"severity"`
	Summary    string   `json:"summary"`
	FixedIn    string   `json:"fixed_in,omitempty"`
	References []string `json:"references,omitempty"`
}

type AdvisoryReport struct {
	Total     int               `json:"total"`
	Critical  int               `json:"critical"`
	High      int               `json:"high"`
	Medium    int               `json:"medium"`
	Low       int               `json:"low"`
	Findings  []AdvisoryFinding `json:"findings"`
	Scanned   bool              `json:"scanned"`
	RawOutput string            `json:"raw_output,omitempty"`
}

type AgentLock struct {
	// SBOM is the generated SPDX document retained for bundle export. It is
	// deployed as a sidecar and intentionally excluded from signed JSON.
	SBOM []byte `json:"-"`
	// SchemaVersion is the agent.lock schema version (currently 1).
	SchemaVersion int `json:"schema_version"`
	// AgentName is the agent name from agent.yaml.
	AgentName string `json:"agent_name"`
	// AgentVersion is the agent version from agent.yaml.
	AgentVersion string `json:"agent_version"`
	// Runtime is the detected/explicit runtime type (python, langgraph, crewai).
	Runtime string `json:"runtime"`
	// Platform is the target platform (e.g. "linux/arm64").
	Platform string `json:"platform"`
	// BaseImageDigest is the digest-pinned distroless base image.
	BaseImageDigest string `json:"base_image_digest"`
	// HarnessVersion is the version of the harness binary embedded as PID 1.
	HarnessVersion string `json:"harness_version"`
	// BuildInputDigest is the SHA-256 over the canonical build context.
	BuildInputDigest string `json:"build_input_digest"`
	// ImageDigest is the SHA-256 digest of the built OCI image.
	ImageDigest string `json:"image_digest"`
	// SBOMDigest is the SHA-256 digest of the SBOM (SPDX-json).
	SBOMDigest string `json:"sbom_digest"`
	// PolicyDigest is the SHA-256 digest of the policy.yaml.
	// Computed at pack time from the project's policy.yaml.
	PolicyDigest string `json:"policy_digest"`
	// PolicyYAML is the raw policy.yaml content. Stored in the deployed directory
	// as a separate file (NOT in the signed lockfile JSON — it would change the
	// canonical signature map). Used at run time to compile the gateway config.
	// NOT included in lockCanonicalMap — it is deployed as a sidecar file.
	PolicyYAML []byte `json:"policy_yaml,omitempty"`
	// PackageAID is the Agent Identity Document - the public key PEM.
	PackageAID string `json:"package_aid"`
	// PublicKeyFingerprint is the SHA-256 fingerprint of the public key.
	PublicKeyFingerprint string `json:"public_key_fingerprint"`
	// SBOMReferrer is the OCI referrer path for the SBOM artifact.
	SBOMReferrer string `json:"sbom_referrer,omitempty"`
	// SignatureReferrer is the OCI referrer path for the cosign signature.
	SignatureReferrer string `json:"signature_referrer,omitempty"`
	// Reproducibility holds build reproducibility metadata.
	Reproducibility ReproducibilityMeta `json:"reproducibility"`
	// LockfileSignature is the ECDSA signature over the canonical JSON
	// of this struct (with LockfileSignature omitted). Base64-encoded.
	LockfileSignature string `json:"lockfile_signature"`
	// CreatedAt is the wall-clock time the lockfile was created.
	// For reproducibility, this is set to SOURCE_DATE_EPOCH, not time.Now().
	CreatedAt time.Time `json:"created_at"`
	// AgentYAML is the parsed agent.yaml (including LLM config). Stored as part
	// of the lockfile for runtime LLM credential resolution. nil when absent.
	AgentYAML *AgentYAML `json:"agent_yaml,omitempty"`
	// Publisher holds the publisher identity block (schema v2+). nil when
	// the pack was performed without a publisher identity (local-only pack).
	Publisher *PublisherInfo `json:"publisher,omitempty"`
	// PublisherSignature is the ECDSA signature over the canonical JSON
	// of the lock (excluding both lockfile_signature and publisher_signature),
	// signed by the publisher identity key. Base64-encoded. Empty when no
	// publisher identity is configured.
	PublisherSignature string `json:"publisher_signature,omitempty"`
	// Provenance is the ordered list of provenance entries recording the
	// full lifecycle of this lockfile (created, updated, etc.). Empty for
	// local-only packs or pre-v2 schema. Each entry carries its own
	// signature from the publisher that created it.
	Provenance []ProvenanceEntry `json:"provenance,omitempty"`
}

type AgentYAML struct {
	Name        string    `yaml:"name"`
	Version     string    `yaml:"version"`
	Runtime     string    `yaml:"runtime"`
	Entry       string    `yaml:"entry"`
	Description string    `yaml:"description"`
	LLM         LLMConfig `yaml:"llm"`
	Metadata    struct {
		Name        string `yaml:"name"`
		Version     string `yaml:"version"`
		Description string `yaml:"description"`
	} `yaml:"metadata"`
	Spec struct {
		Runtime    string `yaml:"runtime"`
		Entrypoint string `yaml:"entrypoint"`
		Entry      string `yaml:"entry"`
	} `yaml:"spec"`
}

type AuditAppender = audit.AuditAppender

type BuildConfig struct {
	// ProjectDir is the agent project directory to build.
	ProjectDir string
	// Runtime is the detected/explicit runtime type.
	Runtime RuntimeType
	// BaseImage is the distroless base image ref (digest-pinned).
	// Default: "gcr.io/distroless/python3-debian12@sha256:2fdb05402a2cf21cf78fdb3ba4c5db167241e9e498140f5bf689d7efb773731f"
	BaseImage string
	// BuilderImage is the image used to install Python deps in a multi-stage build.
	// Default: "python:3.11-slim"
	BuilderImage string
	// HarnessPath is the path to the pre-built harness binary to embed as PID 1.
	// If empty, uses the standard harness binary location.
	HarnessPath string
	// SDKDir is the path to the Python SDK directory to embed. If empty, uses the standard location.
	SDKDir string
	// SourceDateEpoch is the fixed timestamp for reproducible builds.
	// Default: time.Unix(0, 0) (epoch).
	SourceDateEpoch time.Time
	// NonRootUID is the uid for the non-root user. Default: 64000.
	NonRootUID int
	// ImageTag is the tag for the built image (e.g. "agentpaas/myagent:0.1.0").
	ImageTag string
}

type BuildFile struct {
	RelPath string
	AbsPath string
	Info    fs.FileInfo
}

type BuildResult struct {
	ImageDigest string    `json:"image_digest"`
	ImageRef    string    `json:"image_ref"`
	BuildTime   time.Time `json:"build_time"`
	// BuildInputDigest is the SHA-256 over the canonical build context
	// (sorted file list + file contents). Same input -> same digest -> same image.
	BuildInputDigest string `json:"build_input_digest"`
	// DepsLocked is the resolved/locked dependency list from uv.
	DepsLocked []string `json:"deps_locked"`
}

type DeployedAgent struct {
	AgentName    string    `json:"agent_name"`
	ImageDigest  string    `json:"image_digest"`
	SourceDigest string    `json:"source_digest"`
	LockfileSig  string    `json:"lockfile_signature"`
	DeployedAt   time.Time `json:"deployed_at"`
}

type DetectionResult struct {
	Runtime         RuntimeType `json:"runtime"`
	HasAgentYAML    bool        `json:"has_agent_yaml"`
	ProjectDir      string      `json:"project_dir"`
	ExplicitRuntime bool        `json:"explicit_runtime"`
}

type IgnoreMatcher struct {
	// contains filtered or unexported fields
}

type LLMConfig struct {
	Provider   string `yaml:"provider"`   // openai|anthropic|xai
	Model      string `yaml:"model"`      // e.g. "gpt-4o", "claude-sonnet-4", "grok-beta"
	Credential string `yaml:"credential"` // Keychain secret name (e.g. "openai-key")
}

type LineageFile struct {
	Version  int           `json:"version"`
	Parent   LineageParent `json:"parent"`
	ForkedAt string        `json:"forked_at"`
}

type LineageParent struct {
	AgentName            string            `json:"agent_name"`
	AgentVersion         string            `json:"agent_version"`
	PublisherFingerprint string            `json:"publisher_fingerprint"`
	PublisherName        string            `json:"publisher_name"`
	LockDigest           string            `json:"lock_digest"`
	BundleDigest         string            `json:"bundle_digest"`
	PolicyDigest         string            `json:"policy_digest"`
	PolicyYAMLB64        string            `json:"policy_yaml_b64"`
	Provenance           []ProvenanceEntry `json:"provenance"`
}

type LockConfig struct {
	// BuildResult is the result from BuildImage (T02).
	BuildResult *BuildResult
	// ScanResult is the result from ScanSecrets (T03).
	ScanResult *ScanResult
	// AgentYAML is the parsed agent.yaml.
	AgentYAML *AgentYAML
	// Runtime is the detected runtime type.
	Runtime RuntimeType
	// BaseImageDigest is the digest-pinned base image.
	BaseImageDigest string
	// HarnessVersion is the harness binary version.
	HarnessVersion string
	// Platform is the target platform.
	Platform string
	// SourceDateEpoch is the fixed timestamp.
	SourceDateEpoch time.Time
	// KeyStore is the identity keystore for package identity key signing.
	KeyStore identityKeyStore
	// KeyID is the package identity key ID to use for signing.
	KeyID string
	// PolicyYAML is the raw policy.yaml file contents. If nil/empty (no policy.yaml
	// in the project), the lockfile's PolicyDigest is left empty for backward compat.
	PolicyYAML []byte
	// PublisherKeyStore is the identity keystore for publisher identity
	// operations (signing the publisher block and provenance entries). If nil,
	// the lock is produced without a publisher block (local-only pack).
	// This may be the same underlying store as KeyStore since the identity
	// keystore holds all key types.
	PublisherKeyStore identity.KeyStore
	// ProjectDir is the agent project directory; used to detect lineage.json
	// for fork-aware provenance chain append.
	ProjectDir string
}

type OCILayoutError struct {
	Path   string
	Reason string
	Hint   string
	Cause  error
}

type PolicyDelta struct {
	// EgressAdded is the list of egress destinations added.
	EgressAdded []string `json:"egress_added,omitempty"`
	// EgressRemoved is the list of egress destinations removed.
	EgressRemoved []string `json:"egress_removed,omitempty"`
	// CredentialsAdded is the list of credential names added.
	CredentialsAdded []string `json:"credentials_added,omitempty"`
	// CredentialsRemoved is the list of credential names removed.
	CredentialsRemoved []string `json:"credentials_removed,omitempty"`
	// MCPToolsAdded is the list of MCP tools added.
	MCPToolsAdded []string `json:"mcp_tools_added,omitempty"`
	// MCPToolsRemoved is the list of MCP tools removed.
	MCPToolsRemoved []string `json:"mcp_tools_removed,omitempty"`
}

type ProvenanceEntry struct {
	// Action is the lifecycle action (e.g. "created", "updated").
	Action string `json:"action"`
	// PublisherFingerprint is the fingerprint of the publisher that
	// performed the action.
	PublisherFingerprint string `json:"publisher_fingerprint"`
	// PublisherName is the display name of the publisher.
	PublisherName string `json:"publisher_name"`
	// PublisherPublicKeyPEM is the public key PEM of the publisher.
	PublisherPublicKeyPEM string `json:"publisher_public_key_pem"`
	// AgentName is the agent name at the time of the action.
	AgentName string `json:"agent_name"`
	// AgentVersion is the agent version at the time of the action.
	AgentVersion string `json:"agent_version"`
	// ParentLockDigest is the LockDigest of the parent lock this entry
	// was built on top of. Empty for the initial "created" action.
	ParentLockDigest string `json:"parent_lock_digest"`
	// ParentBundleDigest is the SHA-256 of the parent shared bundle.
	// Empty for the initial "created" action.
	ParentBundleDigest string `json:"parent_bundle_digest"`
	// ParentPolicyDigest is the policy digest of the parent lock.
	// Empty for the initial "created" action.
	ParentPolicyDigest string `json:"parent_policy_digest"`
	// PolicyDelta records changes to policy between parent and child.
	// nil when there is no change or for the initial "created" action.
	PolicyDelta *PolicyDelta `json:"policy_delta,omitempty"`
	// Timestamp is the wall-clock time the action was performed.
	Timestamp time.Time `json:"timestamp"`
	// EntrySignature is the ECDSA signature over the canonical
	// representation of this entry (excluding entry_signature), signed by
	// the publisher that performed the action. Base64-encoded.
	EntrySignature string `json:"entry_signature"`
}

type ProvenanceEntrySummary struct {
	Index                int          `json:"index"`
	Action               string       `json:"action"`
	PublisherName        string       `json:"publisher_name"`
	PublisherFingerprint string       `json:"publisher_fingerprint"`
	AgentName            string       `json:"agent_name"`
	AgentVersion         string       `json:"agent_version"`
	Timestamp            time.Time    `json:"timestamp"`
	PolicyDelta          *PolicyDelta `json:"policy_delta,omitempty"`
	// ParentLockDigest is the parent lock digest for forked entries (local verification).
	ParentLockDigest string `json:"parent_lock_digest,omitempty"`
}

type ProvenanceReport struct {
	// Verified is true when all structural and cryptographic rules pass.
	Verified bool `json:"verified"`
	// Warnings holds non-fatal issues (e.g. clock skew).
	Warnings []string `json:"warnings,omitempty"`
	// Entries is the list of provenance entry summaries.
	Entries []ProvenanceEntrySummary `json:"entries"`
	// ChainSemantics is a fixed string explaining what provenance entries mean.
	ChainSemantics string `json:"chain_semantics"`
}

type PublisherInfo struct {
	// Name is the display label (GitHub-style slug).
	Name string `json:"name"`
	// Fingerprint is the hex-encoded SHA-256 of the DER-encoded SPKI of
	// the publisher's ECDSA P-256 public key.
	Fingerprint string `json:"fingerprint"`
	// PublicKeyPEM is the PEM-encoded SPKI public key.
	PublicKeyPEM string `json:"public_key_pem"`
	// SignedAt is the wall-clock time the publisher signature was created.
	SignedAt time.Time `json:"signed_at"`
}

type ReproducibilityMeta struct {
	// SourceDateEpoch is the fixed timestamp used for the build.
	SourceDateEpoch time.Time `json:"source_date_epoch"`
	// BaseImagePinned is true if the base image is digest-pinned.
	BaseImagePinned bool `json:"base_image_pinned"`
	// DepsLocked is true if dependencies were locked via uv.
	DepsLocked bool `json:"deps_locked"`
	// TarOrder is "sorted" for deterministic tar order.
	TarOrder string `json:"tar_order"`
}

type RuntimeType string

type ScanConfig struct {
	// ProjectDir is the agent project directory to scan.
	ProjectDir string
	// Ignore is the .agentpaasignore matcher (from T01).
	Ignore *IgnoreMatcher
	// AllowPatterns are regex patterns for secrets that are explicitly allowed.
	// Each requires a successful audit append (see AuditAppend below).
	AllowPatterns []string
	// AuditAppend is called to record an allow-pattern justification.
	// If nil, --allow-secret-pattern aborts with an error.
	AuditAppend AuditAppender
}

type ScanResult struct {
	// Findings from source tree scan.
	SourceFindings []SecretFinding `json:"source_findings"`
	// Findings from build context scan (after .agentpaasignore applied).
	ContextFindings []SecretFinding `json:"context_findings"`
	// ContextSize is the total build context size in bytes.
	ContextSize int64 `json:"context_size"`
	// ContextSizeWarning is true if ContextSize > 100MB.
	ContextSizeWarning bool `json:"context_size_warning"`
}

type SecretFinding struct {
	// File is the relative path from ProjectDir.
	File string `json:"file"`
	// Line is the 1-based line number.
	Line int `json:"line"`
	// Rule is the gitleaks rule ID that matched.
	Rule string `json:"rule"`
	// Secret is the masked secret value (first 4 chars + *** + last 4 chars).
	Secret string `json:"secret"`
	// contains filtered or unexported fields
}

type VerificationResult struct {
	SDKPresent     bool
	HarnessInImage bool
	EntryInImage   bool
	SDKInImage     bool
	HarnessFresh   bool
	HealthzOK      bool
	ReadyzOK       bool
}