client

type AttestationResponse struct {
	KeyVersion string `json:"key_version"`
	PubKeyHex  string `json:"pubkey_hex"`
	PubKeyHash string `json:"pubkey_hash"`
	Quote      string `json:"quote,omitempty"`
	MRENCLAVE  string `json:"mrenclave,omitempty"`
	MRSIGNER   string `json:"mrsigner,omitempty"`
	ProdID     uint16 `json:"prod_id,omitempty"`
	ISVSVN     uint16 `json:"isvsvn,omitempty"`
	Timestamp  string `json:"timestamp"`
	Simulated  bool   `json:"simulated"`
}

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	BaseURL string
	// ServiceID identifies the caller. In strict identity mode this is redundant
	// (caller identity is enforced by MarbleRun mTLS), but it's still useful for
	// local development and debugging.
	ServiceID string
	Timeout   time.Duration
	// HTTPClient optionally overrides the client used to execute requests.
	// For MarbleRun mesh calls, prefer using `marble.Marble.HTTPClient()` so
	// requests are sent over verified mTLS.
	HTTPClient *http.Client
	// MaxBodyBytes caps responses to prevent memory exhaustion.
	MaxBodyBytes int64
}

type DeriveRequest struct {
	Domain     string `json:"domain"`
	Path       string `json:"path"`
	KeyVersion string `json:"key_version,omitempty"`
}

type DeriveResponse struct {
	PubKeyHex  string `json:"pubkey_hex"`
	KeyVersion string `json:"key_version"`
}

type KeyVersion struct {
	Version       string     `json:"version"`
	Status        string     `json:"status"`
	PubKeyHex     string     `json:"pubkey_hex"`
	PubKeyHash    string     `json:"pubkey_hash"`
	CreatedAt     time.Time  `json:"created_at"`
	ActivatedAt   *time.Time `json:"activated_at,omitempty"`
	OverlapEndsAt *time.Time `json:"overlap_ends_at,omitempty"`
}

type SignRawRequest struct {
	Data       string `json:"data"` // hex-encoded
	KeyVersion string `json:"key_version,omitempty"`
}

type SignRequest struct {
	Domain     string `json:"domain"`
	Data       string `json:"data"` // hex-encoded
	KeyVersion string `json:"key_version,omitempty"`
}

type SignResponse struct {
	Signature  string `json:"signature"` // hex-encoded
	KeyVersion string `json:"key_version"`
	PubKeyHex  string `json:"pubkey_hex"`
}