record

type AgentChainHop struct {
	Identity string `json:"identity"`
	Role     string `json:"role"`

	Extra map[string]json.RawMessage `json:"-"`
}

type AgentLineageHop struct {
	AgentID            string `json:"agent_id"`
	DelegatedBy        string `json:"delegated_by,omitempty"`
	DelegationRecordID string `json:"delegation_record_id,omitempty"`

	Extra map[string]json.RawMessage `json:"-"`
}

type ControlContainmentTelemetry = ControlContainmentTelemetryProfile

type ControlContainmentTelemetryProfile struct {
	ProfileVersion     string             `json:"profile_version"`
	EventRef           *RelationshipRef   `json:"event_ref,omitempty"`
	ActionRef          *RelationshipRef   `json:"action_ref,omitempty"`
	ContractRef        *RelationshipRef   `json:"contract_ref,omitempty"`
	RunRef             *RelationshipRef   `json:"run_ref,omitempty"`
	SessionRef         *RelationshipRef   `json:"session_ref,omitempty"`
	PolicyRef          *RelationshipRef   `json:"policy_ref,omitempty"`
	DecisionRef        *RelationshipRef   `json:"decision_ref,omitempty"`
	ProofRef           *RelationshipRef   `json:"proof_ref,omitempty"`
	CausalRef          *RelationshipRef   `json:"causal_ref,omitempty"`
	ContainmentRef     *RelationshipRef   `json:"containment_ref,omitempty"`
	BoundaryRef        *RelationshipRef   `json:"boundary_ref,omitempty"`
	RevocationRef      *RelationshipRef   `json:"revocation_ref,omitempty"`
	AcknowledgementRef *RelationshipRef   `json:"acknowledgement_ref,omitempty"`
	TraceID            string             `json:"trace_id,omitempty"`
	SpanID             string             `json:"span_id,omitempty"`
	ParentSpanID       string             `json:"parent_span_id,omitempty"`
	ContentDigest      string             `json:"content_digest,omitempty"`
	Redaction          *RedactionMetadata `json:"redaction,omitempty"`
	RedactionMetadata  *RedactionMetadata `json:"redaction_metadata,omitempty"`
	BindingMode        string             `json:"binding_mode"`
}

type ControlContainmentTelemetryRef = RelationshipRef

type Controls struct {
	PermissionsEnforced bool              `json:"permissions_enforced"`
	ApprovedScope       string            `json:"approved_scope,omitempty"`
	WithinScope         *bool             `json:"within_scope,omitempty"`
	GuardrailsActive    []GuardrailStatus `json:"guardrails_active,omitempty"`
	HumanOversight      *HumanOversight   `json:"human_oversight,omitempty"`
}

type CorrelationRef = RelationshipRef

type GuardrailStatus struct {
	Name      string `json:"name"`
	Status    string `json:"status"`
	Triggered bool   `json:"triggered"`
}

type HumanOversight struct {
	ApprovalRequired bool   `json:"approval_required"`
	LastReview       string `json:"last_review,omitempty"`
	Reviewer         string `json:"reviewer,omitempty"`
}

type Integrity struct {
	RecordHash         string `json:"record_hash"`
	PreviousRecordHash string `json:"previous_record_hash,omitempty"`
	SigningKeyID       string `json:"signing_key_id,omitempty"`
	Signature          string `json:"signature,omitempty"`
}

type PolicyRef struct {
	PolicyID       string   `json:"policy_id,omitempty"`
	PolicyVersion  string   `json:"policy_version,omitempty"`
	PolicyDigest   string   `json:"policy_digest,omitempty"`
	MatchedRuleIDs []string `json:"matched_rule_ids,omitempty"`

	Extra map[string]json.RawMessage `json:"-"`
}

type Record struct {
	RecordID      string         `json:"record_id"`
	RecordVersion string         `json:"record_version"`
	Timestamp     time.Time      `json:"timestamp"`
	Source        string         `json:"source"`
	SourceProduct string         `json:"source_product"`
	AgentID       string         `json:"agent_id,omitempty"`
	RecordType    string         `json:"record_type"`
	Event         map[string]any `json:"event"`
	Controls      Controls       `json:"controls"`
	Metadata      map[string]any `json:"metadata,omitempty"`
	Relationship  *Relationship  `json:"relationship,omitempty"`
	// Deprecated: use relationship. Kept for backward compatibility.
	Relations *Relations `json:"relations,omitempty"`
	Integrity Integrity  `json:"integrity"`
}

type RecordOpts struct {
	RecordVersion string
	Timestamp     time.Time
	Source        string
	SourceProduct string
	AgentID       string
	Type          string
	Event         map[string]any
	Controls      Controls
	Metadata      map[string]any
	Relationship  *Relationship
	// Deprecated: use Relationship. Kept for backward compatibility.
	Relations *Relations
}

type RedactionMetadata struct {
	Applied bool     `json:"applied"`
	Fields  []string `json:"fields,omitempty"`
	Reason  string   `json:"reason,omitempty"`
	Method  string   `json:"method,omitempty"`
}

type Relations = Relationship

type Relationship struct {
	ParentRef  *RelationshipRef   `json:"parent_ref,omitempty"`
	EntityRefs []RelationshipRef  `json:"entity_refs,omitempty"`
	PolicyRef  *PolicyRef         `json:"policy_ref,omitempty"`
	AgentChain []AgentChainHop    `json:"agent_chain,omitempty"`
	Edges      []RelationshipEdge `json:"edges,omitempty"`

	// Legacy v1.x compatibility fields (accepted in both relationship and relations).
	ParentRecordID   string            `json:"parent_record_id,omitempty"`
	RelatedRecordIDs []string          `json:"related_record_ids,omitempty"`
	RelatedEntityIDs []string          `json:"related_entity_ids,omitempty"`
	AgentLineage     []AgentLineageHop `json:"agent_lineage,omitempty"`

	// Extra preserves additive fields so they remain hash/signature covered.
	Extra map[string]json.RawMessage `json:"-"`
}

type RelationshipEdge struct {
	Kind string          `json:"kind"`
	From RelationshipRef `json:"from"`
	To   RelationshipRef `json:"to"`

	Extra map[string]json.RawMessage `json:"-"`
}

type RelationshipRef struct {
	Kind          string `json:"kind"`
	ID            string `json:"id"`
	Digest        string `json:"digest,omitempty"`
	SchemaID      string `json:"schema_id,omitempty"`
	SchemaVersion string `json:"schema_version,omitempty"`
	SourceProduct string `json:"source_product,omitempty"`

	Extra map[string]json.RawMessage `json:"-"`
}