auditv1

type AnchorRecord struct {

	// provider is the anchor provider name (e.g. "opentimestamps", "git").
	Provider string `protobuf:"bytes,1,opt,name=provider,proto3" json:"provider,omitempty"`
	// external_id is the provider-specific anchor reference (e.g. Bitcoin tx hash).
	ExternalId string `protobuf:"bytes,2,opt,name=external_id,json=externalId,proto3" json:"external_id,omitempty"`
	// confirmation is the current confirmation state: "pending", "confirmed", or "finalized".
	Confirmation string `protobuf:"bytes,3,opt,name=confirmation,proto3" json:"confirmation,omitempty"`
	// anchored_at is the timestamp when the anchor was submitted (RFC3339).
	AnchoredAt string `protobuf:"bytes,4,opt,name=anchored_at,json=anchoredAt,proto3" json:"anchored_at,omitempty"`
	// contains filtered or unexported fields
}

type AnchorRequest struct {

	// ledger is the partition key.
	Ledger string `protobuf:"bytes,1,opt,name=ledger,proto3" json:"ledger,omitempty"`
	// start_sequence is the first entry covered by the anchor range (inclusive).
	StartSequence int64 `protobuf:"varint,2,opt,name=start_sequence,json=startSequence,proto3" json:"start_sequence,omitempty"`
	// end_sequence is the last entry covered by the anchor range (inclusive). 0 = latest.
	EndSequence int64 `protobuf:"varint,3,opt,name=end_sequence,json=endSequence,proto3" json:"end_sequence,omitempty"`
	// providers lists which anchor providers to use; empty = all configured providers.
	Providers []string `protobuf:"bytes,4,rep,name=providers,proto3" json:"providers,omitempty"`
	// contains filtered or unexported fields
}

type AnchorResponse struct {

	// anchors contains one record per provider that was anchored.
	Anchors []*AnchorRecord `protobuf:"bytes,1,rep,name=anchors,proto3" json:"anchors,omitempty"`
	// contains filtered or unexported fields
}

type AppendRequest struct {

	// ledger is the partition key identifying which ledger to append to.
	Ledger string `protobuf:"bytes,1,opt,name=ledger,proto3" json:"ledger,omitempty"`
	// event_type is the application-defined event classification.
	EventType string `protobuf:"bytes,2,opt,name=event_type,json=eventType,proto3" json:"event_type,omitempty"`
	// payload is the canonical JSON (RFC 8785) bytes of the event data.
	Payload []byte `protobuf:"bytes,3,opt,name=payload,proto3" json:"payload,omitempty"`
	// actor is the application-defined identifier of who/what triggered the event.
	Actor string `protobuf:"bytes,4,opt,name=actor,proto3" json:"actor,omitempty"`
	// metadata is optional canonical JSON (RFC 8785) bytes for non-payload metadata.
	Metadata []byte `protobuf:"bytes,5,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// contains filtered or unexported fields
}

type AppendResponse struct {

	// sequence is the monotonic sequence number assigned to the new entry.
	Sequence int64 `protobuf:"varint,1,opt,name=sequence,proto3" json:"sequence,omitempty"`
	// entry_hash is the SHA256 hash of the new entry (hex-encoded).
	EntryHash string `protobuf:"bytes,2,opt,name=entry_hash,json=entryHash,proto3" json:"entry_hash,omitempty"`
	// created_at is the timestamp when the entry was appended (RFC3339).
	CreatedAt string `protobuf:"bytes,3,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// contains filtered or unexported fields
}

type Entry struct {

	// sequence is the monotonic sequence number.
	Sequence int64 `protobuf:"varint,1,opt,name=sequence,proto3" json:"sequence,omitempty"`
	// ledger is the partition key.
	Ledger string `protobuf:"bytes,2,opt,name=ledger,proto3" json:"ledger,omitempty"`
	// event_type is the application-defined event classification.
	EventType string `protobuf:"bytes,3,opt,name=event_type,json=eventType,proto3" json:"event_type,omitempty"`
	// payload is the canonical JSON (RFC 8785) bytes of the event data.
	Payload []byte `protobuf:"bytes,4,opt,name=payload,proto3" json:"payload,omitempty"`
	// entry_hash is the SHA256 hash of this entry (hex-encoded).
	// Preimage: SHA256 of the RFC-8785 canonical JSON of the object
	//
	//	{ "sequence": <int64>, "ledger": <string>, "event_type": <string>,
	//	  "payload_hash": <hex-SHA256(canonical(payload))>,
	//	  "prev_entry_hash": <string>, "created_at": <RFC3339> }
	//
	// Keys sorted lexicographically, no whitespace. actor and metadata are NOT
	// included in the entry_hash preimage (they are stored but are not load-bearing
	// for chain integrity).
	EntryHash string `protobuf:"bytes,5,opt,name=entry_hash,json=entryHash,proto3" json:"entry_hash,omitempty"`
	// prev_entry_hash is the entry_hash of the preceding entry; empty string for the
	// genesis entry (sequence 1).
	PrevEntryHash string `protobuf:"bytes,6,opt,name=prev_entry_hash,json=prevEntryHash,proto3" json:"prev_entry_hash,omitempty"`
	// created_at is when this entry was appended (RFC3339).
	CreatedAt string `protobuf:"bytes,7,opt,name=created_at,json=createdAt,proto3" json:"created_at,omitempty"`
	// actor is the application-defined identifier of who/what triggered the event.
	// Stored for audit purposes; not included in the entry_hash preimage.
	Actor string `protobuf:"bytes,8,opt,name=actor,proto3" json:"actor,omitempty"`
	// metadata is the canonical JSON (RFC 8785) bytes for non-payload metadata;
	// empty if not set. Not included in the entry_hash preimage.
	Metadata []byte `protobuf:"bytes,9,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// contains filtered or unexported fields
}

type GitAnchorProviderConfig struct {

	// remote is the git remote URL (file path, https, git+ssh, etc.). Required.
	Remote string `protobuf:"bytes,1,opt,name=remote,proto3" json:"remote,omitempty"`
	// branch is the branch to push anchors to. Defaults to "main".
	Branch string `protobuf:"bytes,2,opt,name=branch,proto3" json:"branch,omitempty"`
	// commit_template is a Go text/template string for the commit message.
	// Defaults to "anchor: {{.MerkleRoot}}".
	CommitTemplate string `protobuf:"bytes,3,opt,name=commit_template,json=commitTemplate,proto3" json:"commit_template,omitempty"`
	// author_name is the git commit author name. Defaults to "audit-chain-bot".
	AuthorName string `protobuf:"bytes,4,opt,name=author_name,json=authorName,proto3" json:"author_name,omitempty"`
	// author_email is the git commit author email. Defaults to "audit-chain-bot@localhost".
	AuthorEmail string `protobuf:"bytes,5,opt,name=author_email,json=authorEmail,proto3" json:"author_email,omitempty"`
	// use_ssh_agent uses the system SSH agent for authentication.
	UseSshAgent bool `protobuf:"varint,6,opt,name=use_ssh_agent,json=useSshAgent,proto3" json:"use_ssh_agent,omitempty"`
	// ssh_key_path is the path to a PEM-encoded private key file.
	SshKeyPath string `protobuf:"bytes,7,opt,name=ssh_key_path,json=sshKeyPath,proto3" json:"ssh_key_path,omitempty"`
	// ssh_key_password is the passphrase for the PEM key at ssh_key_path.
	SshKeyPassword string `protobuf:"bytes,8,opt,name=ssh_key_password,json=sshKeyPassword,proto3" json:"ssh_key_password,omitempty"`
	// http_username provides HTTP Basic Auth credentials for HTTPS remotes.
	HttpUsername string `protobuf:"bytes,9,opt,name=http_username,json=httpUsername,proto3" json:"http_username,omitempty"`
	// http_password provides HTTP Basic Auth credentials (or PAT) for HTTPS remotes.
	HttpPassword string `protobuf:"bytes,10,opt,name=http_password,json=httpPassword,proto3" json:"http_password,omitempty"`
	// contains filtered or unexported fields
}

type LedgerConfig struct {

	// name is the partition key (e.g. "bmw-financial").
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// description is a human-readable description of the ledger's purpose.
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	// anchor_providers lists the names of active anchor providers for this ledger.
	AnchorProviders []string `protobuf:"bytes,3,rep,name=anchor_providers,json=anchorProviders,proto3" json:"anchor_providers,omitempty"`
	// anchor_schedule is a cron expression controlling when Merkle roots are anchored.
	AnchorSchedule string `protobuf:"bytes,4,opt,name=anchor_schedule,json=anchorSchedule,proto3" json:"anchor_schedule,omitempty"`
	// anchor_min_entries is the minimum number of new entries required before anchoring.
	AnchorMinEntries int32 `protobuf:"varint,5,opt,name=anchor_min_entries,json=anchorMinEntries,proto3" json:"anchor_min_entries,omitempty"`
	// payload_schema is an optional JSON Schema (bytes) for payload validation at append time.
	PayloadSchema []byte `protobuf:"bytes,6,opt,name=payload_schema,json=payloadSchema,proto3" json:"payload_schema,omitempty"`
	// dsn is the PostgreSQL connection string for the backing store
	// (e.g. "postgres://user:pass@host/db?sslmode=disable").
	Dsn string `protobuf:"bytes,7,opt,name=dsn,proto3" json:"dsn,omitempty"`
	// contains filtered or unexported fields
}

type MerkleRootRequest struct {

	// ledger is the partition key.
	Ledger string `protobuf:"bytes,1,opt,name=ledger,proto3" json:"ledger,omitempty"`
	// start_sequence is the first entry to include in the tree (inclusive).
	StartSequence int64 `protobuf:"varint,2,opt,name=start_sequence,json=startSequence,proto3" json:"start_sequence,omitempty"`
	// end_sequence is the last entry to include in the tree (inclusive). 0 = latest.
	EndSequence int64 `protobuf:"varint,3,opt,name=end_sequence,json=endSequence,proto3" json:"end_sequence,omitempty"`
	// contains filtered or unexported fields
}

type MerkleRootResponse struct {

	// root is the hex-encoded Merkle root hash over entry_hashes in the range.
	Root string `protobuf:"bytes,1,opt,name=root,proto3" json:"root,omitempty"`
	// entries_included is the count of entries included in the tree.
	EntriesIncluded int64 `protobuf:"varint,2,opt,name=entries_included,json=entriesIncluded,proto3" json:"entries_included,omitempty"`
	// start_sequence is the first sequence included in the tree (echoed from request).
	StartSequence int64 `protobuf:"varint,3,opt,name=start_sequence,json=startSequence,proto3" json:"start_sequence,omitempty"`
	// end_sequence is the last sequence included in the tree (the resolved value; useful
	// when the request used 0 = latest).
	EndSequence int64 `protobuf:"varint,4,opt,name=end_sequence,json=endSequence,proto3" json:"end_sequence,omitempty"`
	// contains filtered or unexported fields
}

type OpenTimestampsProviderConfig struct {

	// calendar_servers lists the OTS calendar server base URLs to submit to.
	// At least one is required.
	CalendarServers []string `protobuf:"bytes,1,rep,name=calendar_servers,json=calendarServers,proto3" json:"calendar_servers,omitempty"`
	// http_timeout_ms is the per-request HTTP timeout in milliseconds.
	// 0 means use the default (30 000 ms).
	HttpTimeoutMs int64 `protobuf:"varint,2,opt,name=http_timeout_ms,json=httpTimeoutMs,proto3" json:"http_timeout_ms,omitempty"`
	// contains filtered or unexported fields
}

type PollAnchorConfirmationConfig struct {

	// anchor_id is the audit_anchors.id (BIGSERIAL, passed as string) of the pending anchor row.
	AnchorId string `protobuf:"bytes,1,opt,name=anchor_id,json=anchorId,proto3" json:"anchor_id,omitempty"`
	// provider is the anchor provider name stored in audit_anchors.provider.
	Provider string `protobuf:"bytes,2,opt,name=provider,proto3" json:"provider,omitempty"`
	// external_id is the provider's anchor reference stored in audit_anchors.external_id.
	ExternalId string `protobuf:"bytes,3,opt,name=external_id,json=externalId,proto3" json:"external_id,omitempty"`
	// proof_data is the opaque provider-specific proof bytes stored in audit_anchors.proof_data.
	//
	// Declared as string (not bytes) because BMW-style YAML pipelines populate
	// this field via a Go template (`"{{ .item.proof_data }}"`) that renders as
	// a raw string. proto3 JSON encoding requires `bytes` fields to be
	// base64-encoded; BMW does not base64-encode, so a `bytes` field would be
	// rejected at the strict-proto boundary (v0.51.5 regression discovered by
	// BMW local smoke). The handler is responsible for decoding from string to
	// bytes if a provider requires raw proof bytes — current providers treat
	// proof_data as an opaque pass-through so no decoding is applied.
	ProofData string `protobuf:"bytes,4,opt,name=proof_data,json=proofData,proto3" json:"proof_data,omitempty"`
	// ledger identifies which ledger's DB handle to use when updating
	// audit_anchors.confirmation after a status change.
	Ledger string `protobuf:"bytes,5,opt,name=ledger,proto3" json:"ledger,omitempty"`
	// contains filtered or unexported fields
}

type PollAnchorConfirmationRequest struct {

	// anchor_id is the audit_anchors.id (BIGSERIAL, passed as string) of the pending anchor row.
	AnchorId string `protobuf:"bytes,1,opt,name=anchor_id,json=anchorId,proto3" json:"anchor_id,omitempty"`
	// provider is the anchor provider name stored in audit_anchors.provider.
	Provider string `protobuf:"bytes,2,opt,name=provider,proto3" json:"provider,omitempty"`
	// external_id is the provider's anchor reference stored in audit_anchors.external_id.
	ExternalId string `protobuf:"bytes,3,opt,name=external_id,json=externalId,proto3" json:"external_id,omitempty"`
	// proof_data is the opaque provider-specific proof bytes stored in audit_anchors.proof_data.
	ProofData []byte `protobuf:"bytes,4,opt,name=proof_data,json=proofData,proto3" json:"proof_data,omitempty"`
	// ledger identifies which ledger's DB handle to use when updating
	// audit_anchors.confirmation after a status change.
	Ledger string `protobuf:"bytes,5,opt,name=ledger,proto3" json:"ledger,omitempty"`
	// contains filtered or unexported fields
}

type PollAnchorConfirmationResponse struct {

	// previous_confirmation is the confirmation state before this poll.
	PreviousConfirmation string `protobuf:"bytes,1,opt,name=previous_confirmation,json=previousConfirmation,proto3" json:"previous_confirmation,omitempty"`
	// current_confirmation is the confirmation state after this poll.
	CurrentConfirmation string `protobuf:"bytes,2,opt,name=current_confirmation,json=currentConfirmation,proto3" json:"current_confirmation,omitempty"`
	// transitioned is true if the confirmation level advanced during this poll.
	Transitioned bool `protobuf:"varint,3,opt,name=transitioned,proto3" json:"transitioned,omitempty"`
	// updated_at is the timestamp of the poll (RFC3339).
	UpdatedAt string `protobuf:"bytes,4,opt,name=updated_at,json=updatedAt,proto3" json:"updated_at,omitempty"`
	// swallowed is true when a transient error was encountered but suppressed.
	Swallowed bool `protobuf:"varint,5,opt,name=swallowed,proto3" json:"swallowed,omitempty"`
	// error_message is populated when swallowed = true, describing the transient error.
	ErrorMessage string `protobuf:"bytes,6,opt,name=error_message,json=errorMessage,proto3" json:"error_message,omitempty"`
	// contains filtered or unexported fields
}

type ProofRequest struct {

	// ledger is the partition key.
	Ledger string `protobuf:"bytes,1,opt,name=ledger,proto3" json:"ledger,omitempty"`
	// sequence is the entry sequence number for which to generate the proof.
	Sequence int64 `protobuf:"varint,2,opt,name=sequence,proto3" json:"sequence,omitempty"`
	// contains filtered or unexported fields
}

type ProofResponse struct {

	// entry is the full audit log entry at the requested sequence.
	Entry *Entry `protobuf:"bytes,1,opt,name=entry,proto3" json:"entry,omitempty"`
	// merkle_path is the Merkle inclusion proof (list of hex-encoded sibling hashes).
	MerklePath []string `protobuf:"bytes,2,rep,name=merkle_path,json=merklePath,proto3" json:"merkle_path,omitempty"`
	// merkle_root is the hex-encoded Merkle root of the tree that contains this entry.
	MerkleRoot string `protobuf:"bytes,3,opt,name=merkle_root,json=merkleRoot,proto3" json:"merkle_root,omitempty"`
	// anchors lists all anchor records whose range covers this entry's sequence.
	Anchors []*AnchorRecord `protobuf:"bytes,4,rep,name=anchors,proto3" json:"anchors,omitempty"`
	// contains filtered or unexported fields
}

type PublicReceiptConfig struct {

	// ledger is the partition key.
	Ledger string `protobuf:"bytes,1,opt,name=ledger,proto3" json:"ledger,omitempty"`
	// sequence is the entry sequence number for which to generate the public receipt.
	//
	// Declared as string (not int64) because BMW-style YAML pipelines populate
	// this field via a Go template (`"{{ .item.audit_sequence }}"`) that renders
	// as a raw string. Even with the engine's scalar-coerce in workflow v0.51.5,
	// the strict-proto decoder rejects string→int64 coercion at the typed-config
	// boundary (regression discovered by BMW local smoke). The handler parses
	// this string to int64 internally for DB lookup.
	Sequence string `protobuf:"bytes,2,opt,name=sequence,proto3" json:"sequence,omitempty"`
	// redact_fields lists JSON paths in payload to redact with stable per-receipt
	// pseudonyms (e.g. ["contributor_user_id"]). The redacted-payload + pseudonym
	// mapping is included in the receipt; the entry_hash remains verifiable.
	RedactFields []string `protobuf:"bytes,3,rep,name=redact_fields,json=redactFields,proto3" json:"redact_fields,omitempty"`
	// contains filtered or unexported fields
}

type PublicReceiptRequest struct {

	// ledger is the partition key.
	Ledger string `protobuf:"bytes,1,opt,name=ledger,proto3" json:"ledger,omitempty"`
	// sequence is the entry sequence number for which to generate the public receipt.
	Sequence int64 `protobuf:"varint,2,opt,name=sequence,proto3" json:"sequence,omitempty"`
	// redact_fields lists JSON paths in payload to redact with stable per-receipt
	// pseudonyms (e.g. ["contributor_user_id"]). The redacted-payload + pseudonym
	// mapping is included in the receipt; the entry_hash remains verifiable.
	RedactFields []string `protobuf:"bytes,3,rep,name=redact_fields,json=redactFields,proto3" json:"redact_fields,omitempty"`
	// contains filtered or unexported fields
}

type PublicReceiptResponse struct {

	// receipt_url is the canonical URL where the receipt JSON is served.
	ReceiptUrl string `protobuf:"bytes,1,opt,name=receipt_url,json=receiptUrl,proto3" json:"receipt_url,omitempty"`
	// receipt_json is the full verifiable receipt JSON string (entry + proof + anchors + pseudonym map).
	ReceiptJson string `protobuf:"bytes,2,opt,name=receipt_json,json=receiptJson,proto3" json:"receipt_json,omitempty"`
	// receipt_hash is the SHA256 hash of receipt_json (hex-encoded).
	ReceiptHash string `protobuf:"bytes,3,opt,name=receipt_hash,json=receiptHash,proto3" json:"receipt_hash,omitempty"`
	// contains filtered or unexported fields
}

type SigstoreProviderConfig struct {

	// rekor_url is the base URL of the Rekor instance.
	// Defaults to "https://rekor.sigstore.dev" when empty.
	RekorUrl string `protobuf:"bytes,1,opt,name=rekor_url,json=rekorUrl,proto3" json:"rekor_url,omitempty"`
	// contains filtered or unexported fields
}

type VerifyRequest struct {

	// ledger is the partition key to verify.
	Ledger string `protobuf:"bytes,1,opt,name=ledger,proto3" json:"ledger,omitempty"`
	// start_sequence is the first sequence number to verify (inclusive).
	StartSequence int64 `protobuf:"varint,2,opt,name=start_sequence,json=startSequence,proto3" json:"start_sequence,omitempty"`
	// end_sequence is the last sequence number to verify (inclusive). 0 = latest.
	EndSequence int64 `protobuf:"varint,3,opt,name=end_sequence,json=endSequence,proto3" json:"end_sequence,omitempty"`
	// contains filtered or unexported fields
}

type VerifyResponse struct {

	// valid is true if the chain is intact over the verified range.
	Valid bool `protobuf:"varint,1,opt,name=valid,proto3" json:"valid,omitempty"`
	// first_invalid_sequence is the sequence number of the first broken entry; 0 if valid.
	FirstInvalidSequence int64 `protobuf:"varint,2,opt,name=first_invalid_sequence,json=firstInvalidSequence,proto3" json:"first_invalid_sequence,omitempty"`
	// failure_reason describes why the chain is broken; empty if valid.
	FailureReason string `protobuf:"bytes,3,opt,name=failure_reason,json=failureReason,proto3" json:"failure_reason,omitempty"`
	// entries_verified is the number of entries that were checked.
	EntriesVerified int64 `protobuf:"varint,4,opt,name=entries_verified,json=entriesVerified,proto3" json:"entries_verified,omitempty"`
	// contains filtered or unexported fields
}