bundle

type Active struct {
	Bundle *Bundle
	Result Result
	KeyID  string
}

type AlertRule struct {
	Meta          RuleMeta
	File          string
	Group         string
	GroupInterval time.Duration
	Alert         string
	Expr          string
	For           time.Duration
	KeepFiringFor time.Duration
	Labels        map[string]string
	Annotations   map[string]string
}

type Budget struct {
	MaxEvalTime   time.Duration `yaml:"max_eval_time,omitempty"`
	MaxSamples    int           `yaml:"max_samples,omitempty"`
	MaxSeries     int           `yaml:"max_series,omitempty"`
	MaxComplexity int           `yaml:"max_complexity,omitempty"`
	CounterBytes  int           `yaml:"counter_bytes,omitempty"`
}

type Bundle struct {
	Manifest Manifest
	Digest   [32]byte
	State    []StateRule
	PromQL   []AlertRule
	LogQL    []AlertRule
	// Files holds the raw archive members for inspection and persistence.
	Files map[string][]byte
}

type EvidencePolicy struct {
	MaxSamples   int `yaml:"max_samples,omitempty"`
	MaxBytes     int `yaml:"max_bytes,omitempty"`
	ContextLines int `yaml:"context_lines,omitempty"`
}

type KeyManifest struct {
	Sequence       uint64          `json:"sequence"`
	IssuedAt       time.Time       `json:"issued_at"`
	SigningKeys    []ManifestKey   `json:"signing_keys"`
	SuccessorRoots []SuccessorRoot `json:"successor_roots,omitempty"`
}

type Manifest struct {
	Version       string     `yaml:"version"`
	EngineVersion int        `yaml:"engine_version"`
	SchemaVersion int        `yaml:"schema_version"`
	TargetType    string     `yaml:"target_type"`
	CreatedAt     time.Time  `yaml:"created_at"`
	Rules         []RuleMeta `yaml:"rules"`
}

type ManifestKey struct {
	ID        string            `json:"id"`
	PublicKey ed25519.PublicKey `json:"public_key"`
	NotBefore time.Time         `json:"not_before"`
	NotAfter  time.Time         `json:"not_after"`
	RevokedAt *time.Time        `json:"revoked_at,omitempty"`
}

type Policy struct {
	// TargetType, when set, must equal the bundle target type.
	TargetType      string
	DefaultBudget   Budget
	MaxBudget       Budget
	DefaultEvidence EvidencePolicy
	MaxEvidence     EvidencePolicy
	DefaultInterval time.Duration
	MinInterval     time.Duration
	MaxInterval     time.Duration
	MaxFor          time.Duration
	MaxRules        int
}

type ResourceRef struct {
	Kind      string `yaml:"kind"`
	Namespace string `yaml:"namespace,omitempty"`
	Name      string `yaml:"name"`
}

type Result struct {
	Active      []string
	Disabled    []string
	Unsupported map[string]string
	Rejected    map[string]string
}

type RootKey struct {
	ID        string            `json:"id"`
	PublicKey ed25519.PublicKey `json:"public_key"`
}

type Roots struct {
	Threshold int       `json:"threshold,omitempty"`
	Keys      []RootKey `json:"keys"`
}

type RuleMeta struct {
	ID      string `yaml:"id"`
	Version int    `yaml:"version"`
	Class   string `yaml:"class"`
	Target  string `yaml:"target"`
	Scope   string `yaml:"scope"`
	File    string `yaml:"file,omitempty"`
	Group   string `yaml:"group,omitempty"`
	Alert   string `yaml:"alert,omitempty"`
	// Match selects among alerting rules sharing File, Group, and Alert by their static labels.
	Match          map[string]string `yaml:"match,omitempty"`
	Category       string            `yaml:"category"`
	Severity       string            `yaml:"severity"`
	RequiredFields []string          `yaml:"required_fields,omitempty"`
	Capabilities   []string          `yaml:"capabilities"`
	Evidence       EvidencePolicy    `yaml:"evidence,omitempty"`
	DedupKey       string            `yaml:"dedup_key,omitempty"`
	Resolution     string            `yaml:"resolution,omitempty"`
	Budget         Budget            `yaml:"budget,omitempty"`
	MinEngine      int               `yaml:"min_engine,omitempty"`
	Disabled       bool              `yaml:"disabled,omitempty"`
	Summary        string            `yaml:"summary,omitempty"`
	// ResourceLabels maps alert labels to affected resources, for example
	// {kind: Pod, namespace: namespace, name: pod}.
	ResourceLabels *ResourceRef `yaml:"resource_labels,omitempty"`
}

type Signature struct {
	KeyID     string `json:"key_id"`
	Signature []byte `json:"signature"`
}

type SignedManifest struct {
	Manifest   []byte      `json:"manifest"`
	Signatures []Signature `json:"signatures"`
}

type SigningKey struct {
	ID         string             `json:"id"`
	PrivateKey ed25519.PrivateKey `json:"private_key"`
}

type StateRule struct {
	ID            string            `yaml:"id"`
	Version       int               `yaml:"version"`
	Target        string            `yaml:"target"`
	Kinds         []string          `yaml:"kinds"`
	Expr          string            `yaml:"expr"`
	For           time.Duration     `yaml:"for,omitempty"`
	KeepFiringFor time.Duration     `yaml:"keep_firing_for,omitempty"`
	Interval      time.Duration     `yaml:"interval,omitempty"`
	Labels        map[string]string `yaml:"labels,omitempty"`
	Meta          RuleMeta          `yaml:"-"`
}

type Store struct {
	// contains filtered or unexported fields
}

type StoredVersion struct {
	Version  string    `json:"version"`
	Digest   string    `json:"digest"`
	KeyID    string    `json:"key_id"`
	StoredAt time.Time `json:"stored_at"`
	Order    uint64    `json:"order"`
	Current  bool      `json:"-"`
}

type SuccessorRoot struct {
	ID        string            `json:"id"`
	PublicKey ed25519.PublicKey `json:"public_key"`
	NotBefore time.Time         `json:"not_before"`
}

type Validators struct {
	PromQL func(AlertRule) error
	LogQL  func(AlertRule) error
	CEL    func(StateRule) error
}

type Verifier struct {
	// contains filtered or unexported fields
}