identity

type AgentCapabilitySubject struct {
	// ID is the DID of the agent.
	ID string `json:"id"`

	// Capability is the capability being attested.
	Capability string `json:"capability"`

	// Confidence is the confidence level (0.0-1.0).
	Confidence float64 `json:"confidence,omitempty"`

	// Scope limits where the capability applies.
	Scope string `json:"scope,omitempty"`
}

type AgentDelegationSubject struct {
	// ID is the DID of the delegate (agent receiving authority).
	ID string `json:"id"`

	// Delegator is the DID of the delegating agent.
	Delegator string `json:"delegator"`

	// Capabilities are the delegated capabilities.
	Capabilities []string `json:"capabilities"`

	// Scope limits where the delegation applies.
	Scope string `json:"scope,omitempty"`

	// ValidUntil is when the delegation expires.
	ValidUntil *time.Time `json:"validUntil,omitempty"`
}

type AgentIdentity struct {
	// DID is the decentralized identifier for this agent.
	DID DID `json:"did"`

	// DisplayName is a human-readable name for the agent.
	DisplayName string `json:"display_name"`

	// Credentials are verifiable credentials held by this agent.
	Credentials []VerifiableCredential `json:"credentials,omitempty"`

	// InternalRole is the agent's role in the local system (preserved for compatibility).
	// Example values: "architect", "editor", "reviewer"
	InternalRole string `json:"internal_role,omitempty"`

	// Created is when this identity was created.
	Created time.Time `json:"created,omitempty"`

	// Updated is when this identity was last updated.
	Updated time.Time `json:"updated,omitempty"`

	// Metadata contains additional identity metadata.
	Metadata map[string]any `json:"metadata,omitempty"`
}

type CreateIdentityOptions struct {
	// DisplayName is the human-readable name for the agent.
	DisplayName string

	// InternalRole is the agent's role in the local system.
	InternalRole string

	// Method specifies which DID method to use.
	// Defaults to "key" for local provider.
	Method string

	// Metadata contains additional identity metadata.
	Metadata map[string]any

	// InitialCapabilities are capabilities to attest via credentials.
	InitialCapabilities []string
}

type CredentialStatus struct {
	// ID is the URL for checking credential status.
	ID string `json:"id"`

	// Type specifies the status method type.
	Type string `json:"type"`
}

type DID struct {
	// Method identifies the DID method (for example, "web" or "key").
	Method string `json:"method"`

	// ID is the method-specific identifier.
	ID string `json:"id"`

	// Fragment is an optional fragment reference (e.g., key reference).
	Fragment string `json:"fragment,omitempty"`
}

type LocalProvider struct {
	// contains filtered or unexported fields
}

type Proof struct {
	// Type specifies the proof type (e.g., "Ed25519Signature2020").
	Type string `json:"type"`

	// Created is when the proof was created.
	Created time.Time `json:"created"`

	// VerificationMethod is the DID URL of the key used for the proof.
	VerificationMethod string `json:"verificationMethod"`

	// ProofPurpose describes the purpose of the proof.
	ProofPurpose string `json:"proofPurpose"`

	// ProofValue is the actual cryptographic signature.
	ProofValue string `json:"proofValue,omitempty"`

	// JWS is an alternative proof format using JSON Web Signature.
	JWS string `json:"jws,omitempty"`
}

type Provider interface {
	// CreateIdentity creates a new agent identity.
	CreateIdentity(ctx context.Context, opts CreateIdentityOptions) (*AgentIdentity, error)

	// ResolveIdentity resolves a DID to an agent identity.
	ResolveIdentity(ctx context.Context, did DID) (*AgentIdentity, error)

	// IssueCredential issues a verifiable credential for the subject.
	IssueCredential(ctx context.Context, subject DID, credType string, claims any) (*VerifiableCredential, error)

	// VerifyCredential verifies a credential's signature and validity.
	VerifyCredential(ctx context.Context, cred *VerifiableCredential) (bool, error)

	// UpdateIdentity updates an existing identity.
	UpdateIdentity(ctx context.Context, identity *AgentIdentity) error

	// DeleteIdentity removes an identity.
	DeleteIdentity(ctx context.Context, did DID) error
}

type ProviderConfig struct {
	// ProviderType identifies the provider. The core implementation is "local".
	ProviderType string `json:"provider_type"`

	// IssuerDID is the DID used for issuing credentials.
	IssuerDID string `json:"issuer_did,omitempty"`

	// KeyStorePath is the path to store private keys (for local provider).
	KeyStorePath string `json:"key_store_path,omitempty"`
}

type ProviderFactory func(config ProviderConfig) (Provider, error)

type VerifiableCredential struct {
	// Context specifies the JSON-LD context(s).
	Context []string `json:"@context"`

	// ID is the unique identifier for this credential.
	ID string `json:"id"`

	// Type specifies the credential type(s).
	Type []string `json:"type"`

	// Issuer is the DID of the entity that issued this credential.
	Issuer string `json:"issuer"`

	// IssuanceDate is when the credential was issued.
	IssuanceDate time.Time `json:"issuanceDate"`

	// ExpirationDate is when the credential expires (optional).
	ExpirationDate *time.Time `json:"expirationDate,omitempty"`

	// CredentialSubject contains the claims about the subject.
	CredentialSubject json.RawMessage `json:"credentialSubject"`

	// Proof contains the cryptographic proof (optional).
	Proof *Proof `json:"proof,omitempty"`

	// CredentialStatus contains revocation/status information (optional).
	CredentialStatus *CredentialStatus `json:"credentialStatus,omitempty"`
}