config

type Context struct {
	ServerAddress    string   `yaml:"server_address"`
	TlsSkipVerify    bool     `yaml:"tls_skip_verify"`
	TlsCertFile      string   `yaml:"tls_cert_file"`
	TlsKeyFile       string   `yaml:"tls_key_file"`
	TlsCAFile        string   `yaml:"tls_ca_file"`
	SpiffeSocketPath string   `yaml:"spiffe_socket_path"`
	SpiffeToken      string   `yaml:"spiffe_token"`
	AuthMode         string   `yaml:"auth_mode"`
	JWTAudience      string   `yaml:"jwt_audience"`
	OIDCIssuer       string   `yaml:"oidc_issuer"`
	OIDCClientID     string   `yaml:"oidc_client_id"`
	OIDCScopes       []string `yaml:"oidc_scopes"`
	OIDCAudience     string   `yaml:"oidc_audience"`
	AuthToken        string   `yaml:"auth_token"`
	Doctor           Doctor   `yaml:"doctor"`
	Sigstore         Sigstore `yaml:"sigstore,omitempty"`
}

type ContextSummary struct {
	Name    string
	Current bool
}

type ContextValidation struct {
	Name  string
	Error error
}

type Doctor struct {
	BootstrapPeers []string `yaml:"bootstrap_peers"`
}

type Extractor struct {
	OASFURL  string `yaml:"oasf_url"`
	AssetDir string `yaml:"asset_dir"`
	// RemoteAddr is an optional gRPC OASF-SDK server address. When set,
	// consumers resolve the remote extractor backend instead of loading the
	// in-process assets under AssetDir.
	RemoteAddr string `yaml:"remote_addr,omitempty"`
}

type File struct {
	CurrentContext string             `yaml:"current_context"`
	Contexts       map[string]Context `yaml:"contexts"`
	Extractor      *Extractor         `yaml:"extractor,omitempty"`
	// contains filtered or unexported fields
}

type LoadOptions struct {
	// AllowUnknownFields permits forward-compatible parsing for callers that only
	// need known client fields from a config that may include command extensions.
	AllowUnknownFields bool
}

type ResolveOptions struct {
	// Path is the config file path. If empty, DefaultPath is used.
	Path string

	// Context is an explicit context name override.
	Context string

	// EnvPrefix is the client environment variable prefix. If empty,
	// DefaultEnvPrefix is used.
	EnvPrefix string

	// Overrides contains explicit values, typically from CLI flags.
	Overrides *dirclient.Config

	// OverrideFields lists schema field names from Overrides that should be
	// applied, including zero values. If empty, non-zero override values are
	// applied.
	OverrideFields []string

	// SkipValidation skips required-field validation for callers that only need
	// a subset of client config, such as auth token cache commands.
	SkipValidation bool

	// AllowUnknownFields permits forward-compatible parsing for callers that only
	// need known client fields from a config that may include command extensions.
	AllowUnknownFields bool
}

type ResolvedContext struct {
	Name   string
	Source string
	Path   string
}

type ResolvedSigstore struct {
	Sigstore

	// Sources maps the key of every set setting (for example "ignore_tlog") to
	// where its value came from: `context "corp"`, or the name of the
	// environment variable. Unset settings have no entry.
	Sources map[string]string
}

type Sigstore struct {
	// Signing.
	FulcioURL       string `yaml:"fulcio_url,omitempty"`
	RekorURL        string `yaml:"rekor_url,omitempty"`
	TimestampURL    string `yaml:"timestamp_url,omitempty"`
	SkipTlog        bool   `yaml:"skip_tlog,omitempty"`
	OIDCProviderURL string `yaml:"oidc_provider_url,omitempty"`
	// OIDCClientID is the client used to obtain a Fulcio certificate. It is a
	// different client from the context's top-level oidc_client_id, which
	// dirctl auth login uses.
	OIDCClientID string `yaml:"oidc_client_id,omitempty"`

	// Verification.
	TufMirrorURL    string `yaml:"tuf_mirror_url,omitempty"`
	TrustedRootPath string `yaml:"trusted_root_path,omitempty"`
	IgnoreTlog      bool   `yaml:"ignore_tlog,omitempty"`
	IgnoreTsa       bool   `yaml:"ignore_tsa,omitempty"`
	IgnoreSct       bool   `yaml:"ignore_sct,omitempty"`
}