audit

type Attestation struct {
	Sequence  uint64    `json:"seq"`        // Entry sequence at checkpoint
	RootHash  string    `json:"root_hash"`  // Hash of last entry at this point
	Timestamp time.Time `json:"timestamp"`  // When attestation was created
	Signature []byte    `json:"signature"`  // Ed25519 signature of root hash
	PublicKey []byte    `json:"public_key"` // Signer's public key
}

type Auditor struct {
	// contains filtered or unexported fields
}

type Collector struct {
	// contains filtered or unexported fields
}

type CollectorMessage struct {
	Type string `json:"type"`
	Data any    `json:"data"`
}

type ConsoleData struct {
	Line string `json:"line"`
}

type ContainerData struct {
	Action     string `json:"action"`               // "created", "started", "stopped"
	Privileged bool   `json:"privileged,omitempty"` // true if container runs in privileged mode
	Reason     string `json:"reason,omitempty"`     // e.g., "docker:dind" for why privileged

	// BuildKit sidecar info (dind mode only)
	BuildKitEnabled     bool   `json:"buildkit_enabled,omitempty"`
	BuildKitContainerID string `json:"buildkit_container_id,omitempty"`
	BuildKitNetworkID   string `json:"buildkit_network_id,omitempty"`
}

type CredentialData struct {
	Name   string `json:"name"`   // e.g., "github"
	Action string `json:"action"` // e.g., "injected", "used", "revoked"
	Host   string `json:"host"`   // e.g., "api.github.com"
}

type DeviceData struct {
	Name       string `json:"name"`
	Path       string `json:"path,omitempty"`
	VID        string `json:"vid,omitempty"`
	PID        string `json:"pid,omitempty"`
	Serial     string `json:"serial,omitempty"`
	Action     string `json:"action"` // attach, detach, error, conflict
	Detail     string `json:"detail,omitempty"`
	TxBytes    int64  `json:"tx_bytes,omitempty"`
	RxBytes    int64  `json:"rx_bytes,omitempty"`
	RecordMode string `json:"record_mode,omitempty"` // "full" when payloads were captured
}

type Entry struct {
	Sequence  uint64    `json:"seq"`
	Timestamp time.Time `json:"ts"`
	Type      EntryType `json:"type"`
	PrevHash  string    `json:"prev"`
	// Data must be JSON-serializable. Non-serializable values (e.g., channels,
	// functions, cycles) will marshal as null, which may cause hash collisions.
	Data any    `json:"data"`
	Hash string `json:"hash"`
	// contains filtered or unexported fields
}

type EntryType string

type ExecData struct {
	Command  []string `json:"command"`
	HasStdin bool     `json:"has_stdin"`
	ExitCode int      `json:"exit_code"`
}

type NetworkData struct {
	Method         string `json:"method"`
	URL            string `json:"url"`
	StatusCode     int    `json:"status_code"`
	DurationMs     int64  `json:"duration_ms"`
	CredentialUsed string `json:"credential_used,omitempty"`
	Error          string `json:"error,omitempty"`
}

type PolicyDecisionData struct {
	Scope     string `json:"scope"`
	Operation string `json:"operation"`
	Decision  string `json:"decision"`
	Rule      string `json:"rule,omitempty"`
	Message   string `json:"message,omitempty"`
}

type ProofBundle struct {
	Version      int            `json:"version"`
	CreatedAt    time.Time      `json:"created_at"`
	LastHash     string         `json:"last_hash"`
	Entries      []*Entry       `json:"entries"`
	Attestations []*Attestation `json:"attestations,omitempty"`
	RekorProofs  []*RekorProof  `json:"rekor_proofs,omitempty"`
}

type RekorClient struct {
	// contains filtered or unexported fields
}

type RekorProof struct {
	LogIndex  int64     `json:"log_index"`
	LogID     string    `json:"log_id"`
	TreeSize  int64     `json:"tree_size"`
	RootHash  string    `json:"root_hash"`
	Hashes    []string  `json:"hashes"`
	Timestamp time.Time `json:"timestamp"`
	EntryUUID string    `json:"entry_uuid"`
}

type Result struct {
	Valid              bool   `json:"valid"`
	HashChainValid     bool   `json:"hash_chain_valid"`
	AttestationsValid  bool   `json:"attestations_valid"`
	RekorProofsPresent bool   `json:"rekor_proofs_present"` // Presence only; verification requires network
	EntryCount         uint64 `json:"entry_count"`
	AttestationCount   int    `json:"attestation_count"`
	RekorProofCount    int    `json:"rekor_proof_count"`
	Error              string `json:"error,omitempty"`
}

type SSHData struct {
	Action      string `json:"action"`                // "list", "sign_allowed", "sign_denied"
	Host        string `json:"host,omitempty"`        // target host (for sign operations)
	Fingerprint string `json:"fingerprint,omitempty"` // key fingerprint (for sign operations)
	Error       string `json:"error,omitempty"`       // error message (for denied operations)
}

type SecretData struct {
	Name    string `json:"name"`    // env var name, e.g., "OPENAI_API_KEY"
	Backend string `json:"backend"` // e.g., "1password", "ssm"

}

type Signer struct {
	// contains filtered or unexported fields
}

type Store struct {
	// contains filtered or unexported fields
}

type VerifyResult struct {
	Valid           bool
	EntryCount      uint64
	FirstInvalidSeq uint64
	Error           string
}