action

type APITokenCreate struct {
	// contains filtered or unexported fields
}

type APITokenItem struct {
	ID          string `json:"id"`
	Name        string `json:"name"`
	Description string `json:"description"`
	// JWT is returned only during the creation
	JWT          string        `json:"jwt,omitempty"`
	CreatedAt    *time.Time    `json:"createdAt"`
	RevokedAt    *time.Time    `json:"revokedAt,omitempty"`
	ExpiresAt    *time.Time    `json:"expiresAt,omitempty"`
	LastUsedAt   *time.Time    `json:"lastUsedAt,omitempty"`
	ScopedEntity *ScopedEntity `json:"scopedEntity,omitempty"`
}

type APITokenList struct {
	// contains filtered or unexported fields
}

type APITokenRevoke struct {
	// contains filtered or unexported fields
}

type ActionsOpts struct {
	CPConnection *grpc.ClientConn
	Logger       zerolog.Logger
	AuthTokenRaw string
	OutputFormat string
	CLIVersion   string
}

type Annotation struct {
	Name  string `json:"name"`
	Value string `json:"value"`
}

type Apply struct {
	// contains filtered or unexported fields
}

type ApplyResult struct {
	Kind    string
	Name    string
	Changed bool
}

type ArtifactDownload struct {
	*ActionsOpts
	// contains filtered or unexported fields
}

type ArtifactDownloadOpts struct {
	*ActionsOpts
	ArtifactsCASConn *grpc.ClientConn
	Stdout           io.Writer
}

type ArtifactUpload struct {
	*ActionsOpts
	// contains filtered or unexported fields
}

type ArtifactUploadOpts struct {
	*ActionsOpts
	ArtifactsCASConn *grpc.ClientConn
}

type AttachedIntegrationAdd struct {
	// contains filtered or unexported fields
}

type AttachedIntegrationDelete struct {
	// contains filtered or unexported fields
}

type AttachedIntegrationItem struct {
	ID          string                     `json:"id"`
	CreatedAt   *time.Time                 `json:"createdAt"`
	Config      map[string]interface{}     `json:"config"`
	Integration *RegisteredIntegrationItem `json:"integration"`
	Workflow    *WorkflowItem              `json:"workflow"`
}

type AttachedIntegrationList struct {
	// contains filtered or unexported fields
}

type AttestationAdd struct {
	*ActionsOpts
	// contains filtered or unexported fields
}

type AttestationAddOpts struct {
	*ActionsOpts
	ArtifactsCASConn   *grpc.ClientConn
	CASURI             string
	CASCAPath          string // optional CA certificate for the CAS connection
	ConnectionInsecure bool
	// OCI registry credentials used for CONTAINER_IMAGE material type
	RegistryServer, RegistryUsername, RegistryPassword string
	LocalStatePath                                     string
	// NoStrictValidation skips strict schema validation
	NoStrictValidation bool
	// SkipSecretRedaction uploads evidence that would normally be scrubbed
	// exactly as captured. The bypass is recorded in the attestation.
	SkipSecretRedaction bool
	// MaxExtractEntries limits the number of entries extracted from an archive.
	// Zero defaults to materials.DefaultArchiveLimits().MaxEntries.
	MaxExtractEntries int
	// MaxExtractSize limits the total uncompressed bytes extracted from an archive.
	// Zero defaults to materials.DefaultArchiveLimits().MaxTotalSize.
	MaxExtractSize int64
}

type AttestationExecutor struct {
	// contains filtered or unexported fields
}

type AttestationInit struct {
	*ActionsOpts
	// contains filtered or unexported fields
}

type AttestationInitOpts struct {
	*ActionsOpts
	DryRun bool
	// Force the initialization and override any existing, in-progress ones.
	// Note that this is only useful when local-based attestation state is configured
	// since it's a protection to make sure you don't override the state by mistake
	Force              bool
	UseRemoteState     bool
	LocalStatePath     string
	CASURI             string
	CASCAPath          string // optional CA certificate for the CAS connection
	ConnectionInsecure bool
}

type AttestationInitRunOpts struct {
	ContractRevision             int
	ProjectName                  string
	ProjectVersion               string
	UseLatestVersion             bool
	ProjectVersionMarkAsReleased bool
	RequireExistingVersion       bool
	WorkflowName                 string
	NewWorkflowContractRef       string
	// Collectors is a list of additional collector names to enable (e.g. "aiconfig")
	Collectors   []string
	MarkAsLatest *bool
	// PRMode overrides PR/MR auto-detection.
	// nil  → auto-detect from the CI runner environment.
	// true → force PR mode on.
	// false → force PR mode off.
	PRMode *bool
}

type AttestationPush struct {
	*ActionsOpts
	// contains filtered or unexported fields
}

type AttestationPushOpts struct {
	*ActionsOpts
	KeyPath, CLIVersion, CLIDigest, BundlePath string
	CASURI                                     string
	CASCAPath                                  string
	ConnectionInsecure                         bool
	LocalStatePath                             string
	SignServerOpts                             *SignServerOpts
}

type AttestationReset struct {
	*ActionsOpts
	// contains filtered or unexported fields
}

type AttestationResetOpts struct {
	*ActionsOpts
	LocalStatePath string
}

type AttestationResult struct {
	Digest   string                   `json:"digest"`
	Envelope *dsse.Envelope           `json:"envelope"`
	Status   *AttestationStatusResult `json:"status"`
}

type AttestationResultRunnerContext struct {
	EnvVars            map[string]string
	JobURL, RunnerType string
	RawRunner          crafter.SupportedRunner
}

type AttestationStatus struct {
	*ActionsOpts
	// contains filtered or unexported fields
}

type AttestationStatusMaterial struct {
	*Material
	Set, IsOutput, Required, SkipUpload bool
	// Group is the choke group this material belongs to. Materials sharing a
	// non-empty group form an "at least one of" set.
	Group string `json:"group,omitempty"`
}

type AttestationStatusOpts struct {
	*ActionsOpts
	UseAttestationRemoteState bool

	LocalStatePath string
	// contains filtered or unexported fields
}

type AttestationStatusResult struct {
	AttestationID               string                          `json:"attestationID"`
	InitializedAt               *time.Time                      `json:"initializedAt"`
	WorkflowMeta                *AttestationStatusWorkflowMeta  `json:"workflowMeta"`
	Materials                   []AttestationStatusMaterial     `json:"materials"`
	EnvVars                     map[string]string               `json:"envVars"`
	RunnerContext               *AttestationResultRunnerContext `json:"runnerContext"`
	DryRun                      bool                            `json:"dryRun"`
	Annotations                 []*Annotation                   `json:"annotations"`
	IsPushed                    bool                            `json:"isPushed"`
	PolicyEvaluations           map[string][]*PolicyEvaluation  `json:"policy_evaluations,omitempty"`
	HasPolicyViolations         bool                            `json:"has_policy_violations"`
	MustBlockOnPolicyViolations bool                            `json:"must_block_on_policy_violations"`
	TimestampAuthority          string                          `json:"timestamp_authority"`
	AttestationViewURL          string                          `json:"attestation_view_url"`
	// This might only be set if the attestation is pushed
	Digest string `json:"digest"`
	// This is the human readable output of the attestation status
	TerminalOutput []byte `json:"terminal_output"`
}

type AttestationStatusWorkflowMeta struct {
	WorkflowID, Name, Team, Project, ContractRevision, ContractName, Organization string
	ProjectVersion                                                                *ProjectVersion
}

type AttestationVerifyAction struct {
	// contains filtered or unexported fields
}

type AvailableIntegrationDescribe struct {
	// contains filtered or unexported fields
}

type AvailableIntegrationItem struct {
	Name         string      `json:"name"`
	Version      string      `json:"version"`
	Description  string      `json:"description,omitempty"`
	Registration *JSONSchema `json:"registration"`
	Attachment   *JSONSchema `json:"attachment"`
	// Subscribed inputs (material types)
	SubscribedInputs []string `json:"subscribedInputs"`
}

type AvailableIntegrationList struct {
	// contains filtered or unexported fields
}

type CASArtifact struct {
	Digest string
	// contains filtered or unexported fields
}

type CASBackendAdd struct {
	// contains filtered or unexported fields
}

type CASBackendDelete struct {
	// contains filtered or unexported fields
}

type CASBackendItem struct {
	ID               string            `json:"id"`
	Name             string            `json:"name"`
	Location         string            `json:"location"`
	Description      string            `json:"description"`
	Provider         string            `json:"provider"`
	Default          bool              `json:"default"`
	Fallback         bool              `json:"fallback"`
	Inline           bool              `json:"inline"`
	Limits           *CASBackendLimits `json:"limits"`
	ValidationStatus ValidationStatus  `json:"validationStatus"`
	ValidationError  *string           `json:"validationError,omitempty"`

	CreatedAt   *time.Time `json:"createdAt"`
	ValidatedAt *time.Time `json:"validatedAt"`
}

type CASBackendLimits struct {
	// Max number of bytes allowed to be stored in this backend
	MaxBytes int64
}

type CASBackendList struct {
	// contains filtered or unexported fields
}

type CASBackendUpdate struct {
	// contains filtered or unexported fields
}

type ConfigContextItem struct {
	CurrentUser       *UserItem       `json:"currentUser"`
	CurrentMembership *MembershipItem `json:"currentMembership"`
	CurrentCASBackend *CASBackendItem `json:"currentCASBackend"`
}

type ConfigCurrentContext struct {
	// contains filtered or unexported fields
}

type ContractRawBody struct {
	Body   string `json:"body"`
	Format string `json:"format"`
}

type DeleteAccount struct {
	*ActionsOpts
}

type EnvVar struct {
	Name  string `json:"name"`
	Value string `json:"value"`
}

type ErrRunnerContextNotFound struct {
	RunnerType string
}

type ExecutorOption func(*AttestationExecutor) error

type JSONSchema struct {
	// Show it as raw string so the json output contains it
	Raw string `json:"schema"`
	// Parsed schema so it can be used for validation or other purposes
	// It's not shown in the json output
	Parsed     *jsonschema.Schema      `json:"-"`
	Properties sdk.SchemaPropertiesMap `json:"-"`
}

type ListMembersOpts struct {
	// MembershipID Optional, if provided, filters by a specific membership ID
	MembershipID *string
	// Name is the name of the user to filter by
	Name *string
	// Email is the email of the user to filter by
	Email *string
	// Role is the role of the user to filter by
	Role *string
}

type ListMembershipResult struct {
	Memberships    []*MembershipItem
	PaginationMeta *OffsetPagination
}

type Material struct {
	Name           string        `json:"name"`
	Value          string        `json:"value"`
	RawValue       []byte        `json:"raw_value,omitempty"`
	Hash           string        `json:"hash"`
	Tag            string        `json:"tag"`
	Filename       string        `json:"filename"`
	Type           string        `json:"type"`
	Annotations    []*Annotation `json:"annotations,omitempty"`
	UploadedToCAS  bool          `json:"uploadedToCAS,omitempty"`
	EmbeddedInline bool          `json:"embeddedInline,omitempty"`
}

type MembershipDelete struct {
	// contains filtered or unexported fields
}

type MembershipItem struct {
	ID        string     `json:"id"`
	Default   bool       `json:"current"`
	CreatedAt *time.Time `json:"joinedAt"`
	UpdatedAt *time.Time `json:"updatedAt"`
	Org       *OrgItem   `json:"org"`
	User      *UserItem  `json:"user"`
	Role      Role       `json:"role"`
}

type MembershipLeave struct {
	// contains filtered or unexported fields
}

type MembershipList struct {
	// contains filtered or unexported fields
}

type MembershipSetCurrent struct {
	// contains filtered or unexported fields
}

type MembershipUpdate struct {
	// contains filtered or unexported fields
}

type NewCASBackendAddOpts struct {
	Name        string
	Location    string
	Provider    string
	Description string
	Default     bool
	Fallback    bool
	Credentials map[string]any
	MaxBytes    *int64
}

type NewCASBackendUpdateOpts struct {
	Name        string
	Description *string
	Default     *bool
	Fallback    *bool
	Credentials map[string]any
	MaxBytes    *int64
}

type NewOrgUpdateOpts struct {
	BlockOnPolicyViolation          *bool
	PoliciesAllowedHostnames        *[]string
	PreventImplicitWorkflowCreation *bool
	RestrictContractCreation        *bool
	// APITokenMaxDaysInactive is the maximum number of days a token can be inactive before auto-revocation.
	// 0 means disabled.
	APITokenMaxDaysInactive *int
	// EnableAIAgentCollector enables automatic AI agent config collection during attestation init
	EnableAIAgentCollector *bool
	// BlockAttestationsOnReleasedVersions rejects new attestations pushed to project versions that are already released
	BlockAttestationsOnReleasedVersions *bool
	// SkipRunnerEnvVars opts out of storing the environment variables automatically discovered by the CI runner in the attestation
	SkipRunnerEnvVars *bool
}

type NewWorkflowCreateOpts struct {
	Name, Description, Project, Team, ContractName string
	ContractBytes                                  []byte
	// WorkflowTemplateID optionally binds the workflow to a platform workflow template.
	// The open-source CLI does not set it, it exists so template-aware clients can.
	WorkflowTemplateID string
}

type OffsetPagination struct {
	Page       int `json:"page"`
	PageSize   int `json:"pageSize"`
	TotalPages int `json:"totalPages"`
	TotalCount int `json:"totalCount"`
}

type OrgCreate struct {
	// contains filtered or unexported fields
}

type OrgInvitationCreate struct {
	// contains filtered or unexported fields
}

type OrgInvitationItem struct {
	ID            string     `json:"id"`
	ReceiverEmail string     `json:"receiverEmail"`
	Organization  *OrgItem   `json:"organization"`
	Sender        *UserItem  `json:"sender"`
	Status        string     `json:"status"`
	CreatedAt     *time.Time `json:"createdAt"`
	Role          Role       `json:"role"`
}

type OrgInvitationListSent struct {
	// contains filtered or unexported fields
}

type OrgInvitationRevoke struct {
	// contains filtered or unexported fields
}

type OrgItem struct {
	ID                                  string     `json:"id"`
	Name                                string     `json:"name"`
	CreatedAt                           *time.Time `json:"createdAt"`
	PolicyViolationBlockingStrategy     string     `json:"policyViolationBlockingStrategy"`
	PolicyAllowedHostnames              []string   `json:"policyAllowedHostnames,omitempty"`
	PreventImplicitWorkflowCreation     bool       `json:"preventImplicitWorkflowCreation"`
	APITokenMaxDaysInactive             *string    `json:"apiTokenMaxDaysInactive,omitempty"`
	EnableAIAgentCollector              bool       `json:"enableAiAgentCollector"`
	BlockAttestationsOnReleasedVersions bool       `json:"blockAttestationsOnReleasedVersions"`
	SkipRunnerEnvVars                   bool       `json:"skipRunnerEnvVars"`
}

type OrgUpdate struct {
	// contains filtered or unexported fields
}

type OrganizationDelete struct {
	// contains filtered or unexported fields
}

type PaginatedWorkflowRunItem struct {
	Result         []*WorkflowRunItem
	PaginationMeta *PaginationOpts
}

type PaginationOpts struct {
	Limit      int
	NextCursor string
}

type PluginDescribe struct {
	// contains filtered or unexported fields
}

type PluginDescribeResult struct {
	Plugin *plugins.LoadedPlugin
}

type PluginExec struct {
	// contains filtered or unexported fields
}

type PluginExecResult struct {
	Output   string
	Error    string
	ExitCode int
	Data     map[string]any
}

type PluginInstall struct {
	// contains filtered or unexported fields
}

type PluginInstallOptions struct {
	File     string
	Filename string
	Location string
}

type PluginInstallResult struct {
	FilePath string
}

type PluginList struct {
	// contains filtered or unexported fields
}

type PluginListResult struct {
	Plugins     map[string]*plugins.LoadedPlugin
	CommandsMap map[string]string // Maps command names to plugin names
}

type PolicyEval struct {
	*ActionsOpts
	// contains filtered or unexported fields
}

type PolicyEvalOpts struct {
	MaterialPath       string
	Kind               string
	Annotations        map[string]string
	PolicyPath         string
	Inputs             map[string]string
	AllowedHostnames   []string
	Debug              bool
	ProjectName        string
	ProjectVersionName string
}

type PolicyEvaluation struct {
	Name            string             `json:"name"`
	MaterialName    string             `json:"material_name,omitempty"`
	Body            string             `json:"body,omitempty"`
	Description     string             `json:"description,omitempty"`
	Annotations     map[string]string  `json:"annotations,omitempty"`
	Violations      []*PolicyViolation `json:"violations,omitempty"`
	PolicyReference *PolicyReference   `json:"policy_reference,omitempty"`
	With            map[string]string  `json:"with,omitempty"`
	Type            string             `json:"type"`
	Skipped         bool               `json:"skipped"`
	SkipReasons     []string           `json:"skip_reasons,omitempty"`
	Gate            bool               `json:"gate,omitempty"`
}

type PolicyEvaluationStatus struct {
	Strategy           string `json:"strategy"`
	Bypassed           bool   `json:"bypassed"`
	Blocked            bool   `json:"blocked"`
	HasViolations      bool   `json:"has_violations"`
	HasGatedViolations bool   `json:"has_gated_violations"`
}

type PolicyInit struct {
	*ActionsOpts
	// contains filtered or unexported fields
}

type PolicyInitOpts struct {
	Force       bool
	Embedded    bool
	Name        string
	Description string
	Directory   string
}

type PolicyInput struct {
	// Policy optionally scopes the input to a specific policy (its name or ref).
	// Empty means the input is global and applies to every declaring policy.
	Policy string
	// Input is the destination policy input name (e.g. "min_iterations").
	Input string
	// Value is the literal value to set.
	Value string
}

type PolicyInputFromFile struct {
	// Policy optionally scopes the input to a specific policy (its name or ref).
	// Empty means the input is global and applies to every declaring policy.
	Policy string
	// Input is the destination policy input name (e.g. "ignored_paths").
	Input string
	// Column is the file column/field to extract. Defaults to Input.
	Column string
	// File is the source CSV or JSON file path.
	File string
}

type PolicyLint struct {
	*ActionsOpts
}

type PolicyLintOpts struct {
	PolicyPath  string
	Format      bool
	RegalConfig string
}

type PolicyLintResult struct {
	Valid  bool
	Errors []string
}

type PolicyReference struct {
	Name   string            `json:"name"`
	Digest map[string]string `json:"digest"`
}

type PolicyViolation struct {
	Subject  string `json:"subject"`
	Message  string `json:"message"`
	Suppress bool   `json:"suppress,omitempty"`
	// Mirrors the oneof on the wire — exactly one pointer is set per
	// violation, or none for unstructured policies.
	Vulnerability    *attv1.PolicyVulnerabilityFinding    `json:"vulnerability,omitempty"`
	Sast             *attv1.PolicySASTFinding             `json:"sast,omitempty"`
	LicenseViolation *attv1.PolicyLicenseViolationFinding `json:"license_violation,omitempty"`
}

type ProjectVersion struct {
	ID             string `json:"id"`
	Version        string `json:"version,omitempty"`
	Prerelease     bool   `json:"prerelease"`
	MarkAsReleased bool   `json:"markAsRelease"`
}

type ReferrerDiscover struct {
	// contains filtered or unexported fields
}

type ReferrerDiscoverResult struct {
	Item       *ReferrerItem `json:"result"`
	NextCursor string        `json:"nextCursor,omitempty"`
}

type ReferrerItem struct {
	Digest       string            `json:"digest"`
	Kind         string            `json:"kind"`
	Downloadable bool              `json:"downloadable"`
	CreatedAt    *time.Time        `json:"createdAt"`
	References   []*ReferrerItem   `json:"references"`
	Metadata     map[string]string `json:"metadata,omitempty"`
	Annotations  map[string]string `json:"annotations,omitempty"`
}

type RegisteredIntegrationAdd struct {
	// contains filtered or unexported fields
}

type RegisteredIntegrationDelete struct {
	// contains filtered or unexported fields
}

type RegisteredIntegrationDescribe struct {
	// contains filtered or unexported fields
}

type RegisteredIntegrationItem struct {
	ID string `json:"id"`
	// Registration name used for declarative configuration
	Name string `json:"name"`
	// Integration backend kind, i.e slack, pagerduty, etc
	Kind string `json:"kind"`
	// Integration description for display and differentiation purposes
	Description string                 `json:"description"`
	CreatedAt   *time.Time             `json:"createdAt"`
	Config      map[string]interface{} `json:"config"`
}

type RegisteredIntegrationList struct {
	// contains filtered or unexported fields
}

type Role string

type Roles []Role

type RunTracePushOpts struct {
	// AllowEmpty makes the push attest every recorded session even when
	// no AI-attributed commits exist. Used by `chainloop trace run`,
	// which drives one-shot agent sessions that may produce no commits.
	AllowEmpty bool

	// ProjectName, when set, overrides the projectName read from
	// .chainloop.yml. Lets `trace run` operate without mutating the repo
	// config.
	ProjectName string
	// Organization, when set, overrides the organization read from
	// .chainloop.yml.
	Organization string
	// WorkflowName, when set, overrides the workflowName read from
	// .chainloop.yml.
	WorkflowName string
	// ProjectVersion, when set, targets a specific project version for
	// the attestation. Empty means use the latest version.
	ProjectVersion string
	// IgnoreYAML disables the .chainloop.yml fallback used to fill in
	// identity fields. `trace run` sets this so its attestations depend
	// only on CLI flags. Pre-push hook callers leave it false to keep
	// reading the repo config.
	IgnoreYAML bool

	// ActionOpts is the root command's initialized options, used to build
	// the attestation executor. Required: the push cannot run without it.
	ActionOpts *ActionsOpts
	// CLIVersion is the bare CLI version recorded in the attestation
	// predicate.
	CLIVersion string
}

type ScopedEntity struct {
	Type string `json:"type"`
	ID   string `json:"id"`
	Name string `json:"name"`
}

type SignServerOpts struct {
	// CA certificate for TLS connection
	CAPath string
	// (optional) Client cert and passphrase for mutual TLS authentication
	AuthClientCertPath, AuthClientCertPass string
}

type SubprocessExitError struct {
	Command  string
	ExitCode int
}

type TraceRunOpts struct {
	// Store owns the chainloop-trace state directory, parented by the
	// .git directory inside a repository and otherwise by the out-of-tree
	// directory returned by state.NonGitDir. Outside a repository (IsGit
	// false) the managed git hooks are disabled, since git could never
	// invoke them anyway.
	Store *state.Store
	// RepoRoot is the repository root containing .chainloop.yml, or the
	// working directory when running outside a git repository.
	RepoRoot string
	// Providers is the list of agent provider names (e.g. "claude-code",
	// "cursor") whose info-gathering hooks should be installed.
	Providers []string
	// Command is the wrapped command: Command[0] is the program,
	// Command[1:] are its arguments.
	Command []string
	// ProjectName, Organization, WorkflowName identify the attestation
	// for this run. trace run is isolated from .chainloop.yml, so callers
	// must pass these values directly from CLI flags.
	ProjectName  string
	Organization string
	WorkflowName string
	// ProjectVersion, when set, targets a specific project version.
	// Empty means use the latest version.
	ProjectVersion string

	// ActionOpts is the root command's initialized options, used to build
	// the attestation executor. Required.
	ActionOpts *ActionsOpts
	// CLIVersion is the bare CLI version recorded in the attestation
	// predicate.
	CLIVersion string
}

type UserItem struct {
	ID            string     `json:"id"`
	Email         string     `json:"email"`
	FirstName     string     `json:"firstName"`
	LastName      string     `json:"lastName"`
	CreatedAt     *time.Time `json:"createdAt"`
	InstanceAdmin bool       `json:"instanceAdmin,omitempty"`
}

type ValidationStatus string

type WorkflowContractApply struct {
	// contains filtered or unexported fields
}

type WorkflowContractCreate struct {
	// contains filtered or unexported fields
}

type WorkflowContractDelete struct {
	// contains filtered or unexported fields
}

type WorkflowContractDescribe struct {
	// contains filtered or unexported fields
}

type WorkflowContractItem struct {
	Name                    string         `json:"name"`
	Description             string         `json:"description,omitempty"`
	ID                      string         `json:"id"`
	LatestRevision          int            `json:"latestRevision,omitempty"`
	LatestRevisionCreatedAt *time.Time     `json:"latestRevisionCreatedAt,omitempty"`
	CreatedAt               *time.Time     `json:"createdAt"`
	Workflows               []string       `json:"workflows,omitempty"` // TODO: remove this field after all clients are updated
	WorkflowRefs            []*WorkflowRef `json:"workflowRefs,omitempty"`
	ScopedEntity            *ScopedEntity  `json:"scopedEntity,omitempty"`
	Scope                   string         `json:"scope"`
}

type WorkflowContractList struct {
	// contains filtered or unexported fields
}

type WorkflowContractUpdate struct {
	// contains filtered or unexported fields
}

type WorkflowContractVersionItem struct {
	ID          string                   `json:"id"`
	Revision    int                      `json:"revision"`
	Description string                   `json:"description"`
	CreatedAt   *time.Time               `json:"createdAt"`
	BodyV1      *schemav1.CraftingSchema `json:"bodyV1"`
	RawBody     *ContractRawBody         `json:"rawBody"`
}

type WorkflowContractWithVersionItem struct {
	Contract *WorkflowContractItem        `json:"contract"`
	Revision *WorkflowContractVersionItem `json:"revision"`
}

type WorkflowCreate struct {
	// contains filtered or unexported fields
}

type WorkflowDelete struct {
	// contains filtered or unexported fields
}

type WorkflowDescribe struct {
	// contains filtered or unexported fields
}

type WorkflowItem struct {
	Name                   string           `json:"name"`
	Description            string           `json:"description,omitempty"`
	ID                     string           `json:"id"`
	Team                   string           `json:"team"`
	Project                string           `json:"project,omitempty"`
	CreatedAt              *time.Time       `json:"createdAt"`
	RunsCount              int32            `json:"runsCount"`
	ContractName           string           `json:"contractName,omitempty"`
	ContractRevisionLatest int32            `json:"contractRevisionLatest,omitempty"`
	LastRun                *WorkflowRunItem `json:"lastRun,omitempty"`
	// WorkflowTemplateID is the platform workflow template this workflow is bound to,
	// empty when it is not bound to any
	WorkflowTemplateID string `json:"workflowTemplateId,omitempty"`
}

type WorkflowList struct {
	// contains filtered or unexported fields
}

type WorkflowListResult struct {
	Workflows  []*WorkflowItem   `json:"workflows"`
	Pagination *OffsetPagination `json:"pagination"`
}

type WorkflowRef struct {
	ID          string `json:"id"`
	Name        string `json:"name"`
	ProjectName string `json:"projectName"`
}

type WorkflowRunAttestationItem struct {
	Envelope *dsse.Envelope `json:"envelope"`
	Bundle   []byte         `json:"bundle"`

	Materials   []*Material   `json:"materials,omitempty"`
	EnvVars     []*EnvVar     `json:"envvars,omitempty"`
	Annotations []*Annotation `json:"annotations,omitempty"`
	// Digest in CAS backend
	Digest string `json:"digest"`
	// Policy violations
	PolicyEvaluations map[string][]*PolicyEvaluation `json:"policy_evaluations,omitempty"`
	// Policy evaluation status
	PolicyEvaluationStatus *PolicyEvaluationStatus `json:"policy_evaluation_status,omitempty"`
	// URL to view the attestation in the UI
	AttestationViewURL string `json:"attestation_view_url"`
	// contains filtered or unexported fields
}

type WorkflowRunDescribe struct {
	// contains filtered or unexported fields
}

type WorkflowRunDescribeOpts struct {
	RunID, Digest           string
	Verify                  bool
	PublicKeyRef            string
	CertPath, CertChainPath string
}

type WorkflowRunItem struct {
	ID                     string                       `json:"id"`
	State                  string                       `json:"state"`
	Reason                 string                       `json:"reason,omitempty"`
	CreatedAt              *time.Time                   `json:"createdAt,omitempty"`
	FinishedAt             *time.Time                   `json:"finishedAt,omitempty"`
	Workflow               *WorkflowItem                `json:"workflow,omitempty"`
	RunURL                 string                       `json:"runURL,omitempty"`
	RunnerType             string                       `json:"runnerType,omitempty"`
	ContractVersion        *WorkflowContractVersionItem `json:"contractVersion,omitempty"`
	ContractRevisionUsed   int                          `json:"contractRevisionUsed"`
	ContractRevisionLatest int                          `json:"contractRevisionLatest"`
	ProjectVersion         *ProjectVersion              `json:"projectVersion,omitempty"`
	PolicyStatus           string                       `json:"policyStatus,omitempty"`
}

type WorkflowRunItemFull struct {
	WorkflowRun *WorkflowRunItem            `json:"workflowRun"`
	Workflow    *WorkflowItem               `json:"workflow"`
	Attestation *WorkflowRunAttestationItem `json:"attestation,omitempty"`
	Verified    bool                        `json:"verified"`
}

type WorkflowRunList struct {
	// contains filtered or unexported fields
}

type WorkflowRunListOpts struct {
	WorkflowName, ProjectName string
	// ProjectVersionName filters by project version name (e.g. v1.2.0). It requires
	// ProjectName, since a version name is unique only within a project.
	ProjectVersionName string
	Pagination         *PaginationOpts
	Status             string
	PolicyStatus       string
}

type WorkflowUpdate struct {
	// contains filtered or unexported fields
}

type WorkflowUpdateOpts struct {
	Description, Team, ContractName *string
}

type YAMLDoc struct {
	Kind    string
	Name    string
	RawData []byte
}