frontier

type Document struct {
	FrontierState string
	ID            string
	Inputs        Inputs
	Items         []Item
	Scope         Scope
	UniverseID    string
}

type Error struct {
	Code string
	// contains filtered or unexported fields
}

type Inputs struct {
	CEMSHA256 string
	LRFSHA256 string
	OCMSHA256 string
	TCQID     string
	TestMode  TestMode
}

type IntentScope struct {
	BlobOID    string
	Path       string
	Span       Span
	SpanSHA256 string
}

type Item struct {
	AuthorityClass  string
	ID              string
	Kind            string
	NextAction      string
	Reasons         []string
	RelatedIDs      []string
	ResolutionClass string
	SubjectID       string
}

type Obligation struct {
	ID          string
	Disposition string
	Reason      string
	HunkIDs     []string
	ClaimIDs    []string
}

type Request struct {
	// CEMBytes and OCMBytes are the exact bounded raw copies that will be
	// verified and then digested into `inputs` (CF-V0-002, CF-V0-019).
	CEMBytes []byte
	OCMBytes []byte
	// ExpectedBase and Target are the two independent revision inputs. Neither
	// may be inferred: CF-V0-001 fails inferred revision authority.
	ExpectedBase string
	Target       string

	// The optional dynamic test bundle is the all-or-none CF-V0-003 tuple.
	Command     []byte
	Observation []byte
	JUnitReport []byte

	// Verifier is the shared OCM-consuming CEM 0.2 verifier whose native
	// precedence CF-V0-021 puts ahead of every later Frontier check.
	Verifier Verifier
	// TCQ recomputes Test Claim Qualification from the verified inputs. A
	// caller-supplied TCQ result is never accepted as authority or as a
	// shortcut (CF-V0-002), which is why this is a recomputer, not a document.
	TCQ TCQRecomputer
}

type Scope struct {
	BaseRevision     string
	IntentBlobOID    string
	IntentPath       string
	IntentSpan       Span
	IntentSpanSHA256 string
	ObjectFormat     string
	PatchSHA256      string
	TargetRevision   string
}

type Span struct {
	Start int64
	End   int64
}

type TCQClaimResult struct {
	ObligationID string
	ClaimID      string
	// Reasons are the TCQ diagnostics Frontier maps to `INTENT_TEST` reasons under
	// the exact CF-V0-016 table. The consumed vocabulary is closed:
	// target-cleanliness-not-attested, command-failed, test-error, test-failed,
	// test-skipped, execution-identity-ambiguous, repeated-test-rows,
	// row-identity-unavailable, test-not-matched, empty-body, unconditional-skip,
	// claim-association-missing, claim-association-ambiguous, python-offset-mismatch,
	// unparseable-test-unit, unsupported-anchor-profile, unsupported-python-grammar.
	// An unrecognised diagnostic is a closed-allowlist failure (CF-V0-022), never a
	// silently dropped reason.
	Reasons []string
	// Relation is the TCQ relation when one was emitted (`test-report-matched-v0`).
	// CF-V0-014 freezes it as non-closing: it maps to CALLER_REPORTED_NONCLOSING and
	// never removes an INTENT_TEST item, whatever the rows or exit status say.
	Relation string
	// AuthorityClass is `CALLER_REPORTED` for every TCQ V0 edge (CF-V0-015). It is
	// carried rather than assumed so a future producer cannot silently upgrade it.
	AuthorityClass string
}

type TCQRecomputer interface {
	Recompute(request TCQRequest) (TCQResult, error)
}

type TCQRequest struct {
	// CEMBytes is the canonical `cem/0.2` artifact the OCM binds. TCQ-V0-001
	// requires it alongside the OCM, and TCQ-V0-002 refuses `cem/0.1`
	// operationally, so the producer cannot source it for itself: an artifact it
	// fetched independently would not be the one this invocation verified.
	CEMBytes       []byte
	OCMBytes       []byte
	BaseRevision   string
	TargetRevision string
	Mode           TestMode
	Command        []byte
	Observation    []byte
	JUnitReport    []byte
}

type TCQResult struct {
	// ID is the `tcq:sha256:` identity recorded in the Frontier `inputs` block
	// (CF-V0-018) and bound in both static and dynamic modes (CF-V0-003).
	ID string
	// Claims holds exactly one result per selected `(obligationId, claimId)` edge
	// (TCQ-V0-003). CF-V0-015 requires every selected edge to be evaluated.
	Claims []TCQClaimResult
}

type TestMode string

type VerifiedUniverse struct {
	CEM *wire.Map
	// Obligations retain the frozen intent requirement order, which is the
	// CF-V0-020 sort order for both intent item kinds.
	Obligations    []Obligation
	BaseRevision   string
	TargetRevision string
	// ObjectFormat is exactly `sha1` or `sha256` (CF-V0-006).
	ObjectFormat string
	PatchSHA256  string
	Intent       IntentScope
	// LRFRequest is the pure post-structural projection the verifier derived
	// from the same verified inputs and target Git objects. Frontier evaluates
	// it itself so the LRF result is recomputed, never accepted (CF-V0-002).
	LRFRequest lrf.Request
}

type Verifier interface {
	Verify(ctx context.Context, request VerifyRequest) (VerifiedUniverse, error)
}

type VerifyRequest struct {
	CEMBytes     []byte
	OCMBytes     []byte
	ExpectedBase string
	Target       string
}