models

type ArtifactIdentity struct {
	// Id Unique identifier for the signature view
	Id     int                    `json:"id"`
	Issuer *string                `json:"issuer,omitempty"`
	Source ArtifactIdentitySource `json:"source"`
	Type   string                 `json:"type"`
	Value  string                 `json:"value"`
}

type ArtifactIdentitySource string

type ArtifactPolicies struct {
	// Artifact The artifact URI
	Artifact     string `json:"artifact"`
	Attestations []struct {
		// IssuedAt Issuance timestamp
		IssuedAt *time.Time `json:"issuedAt,omitempty"`

		// Issuer Issuer of the attestation
		Issuer *string `json:"issuer,omitempty"`

		// Subject Subject of the attestation
		Subject *string `json:"subject,omitempty"`

		// Type Attestation type
		Type *string `json:"type,omitempty"`
	} `json:"attestations"`
	Policies []struct {
		// LastChecked Last time the policy was checked
		LastChecked *time.Time `json:"lastChecked,omitempty"`

		// Name Policy name
		Name *string `json:"name,omitempty"`

		// Status Policy status
		Status *string `json:"status,omitempty"`
	} `json:"policies"`
}

type ArtifactSummaryView struct {
	// AttestationCount Total number of attestations
	AttestationCount int                              `json:"attestationCount"`
	Identities       []ArtifactIdentity               `json:"identities"`
	OverallStatus    ArtifactSummaryViewOverallStatus `json:"overallStatus"`

	// RekorEntryCount Total number of Rekor entries
	RekorEntryCount int `json:"rekorEntryCount"`

	// SignatureCount Total number of signatures
	SignatureCount int                   `json:"signatureCount"`
	TimeCoherence  *TimeCoherenceSummary `json:"timeCoherence,omitempty"`
}

type ArtifactSummaryViewOverallStatus string

type AttestationStatus struct {
	Attestation AttestationStatusAttestation `json:"attestation"`
	Chain       AttestationStatusChain       `json:"chain"`
	Rekor       AttestationStatusRekor       `json:"rekor"`
}

type AttestationStatusAttestation string

type AttestationStatusChain string

type AttestationStatusRekor string

type AttestationView struct {
	AttestationStatus AttestationStatus    `json:"attestationStatus"`
	CertificateChain  *[]ParsedCertificate `json:"certificateChain,omitempty"`
	Digest            string               `json:"digest"`

	// Id Unique identifier for the signature view
	Id                 int                   `json:"id"`
	PayloadType        *string               `json:"payloadType,omitempty"`
	PredicateType      string                `json:"predicateType"`
	RawBundleJson      string                `json:"rawBundleJson"`
	RawStatementJson   string                `json:"rawStatementJson"`
	RekorEntry         *TransparencyLogEntry `json:"rekorEntry,omitempty"`
	SigningCertificate *ParsedCertificate    `json:"signingCertificate,omitempty"`

	// Timestamp ISO-8601 timestamp
	Timestamp *time.Time `json:"timestamp,omitempty"`
	Type      string     `json:"type"`
}

type CertificateInfo struct {
	// Expiration Expiration date and time of the certificate (notAfter).
	Expiration string `json:"expiration"`

	// Issuer Certificate issuer
	Issuer string `json:"issuer"`

	// Pem Certificate in PEM-encoded format.
	Pem string `json:"pem"`

	// Status Status of the target to which the certificate is associated.
	Status string `json:"status"`

	// Subject Certificate subject
	Subject string `json:"subject"`

	// Target The TUF target to which the certificate is associated.
	Target string `json:"target"`

	// Type Target type
	Type string `json:"type"`
}

type CertificateInfoList struct {
	Data []CertificateInfo `json:"data"`
}

type CertificateRole string

type Checkpoint struct {
	Envelope string `json:"envelope"`
}

type ChiServerOptions struct {
	BaseURL          string
	BaseRouter       chi.Router
	Middlewares      []MiddlewareFunc
	ErrorHandlerFunc func(w http.ResponseWriter, r *http.Request, err error)
}

type Error struct {
	// Error Error message
	Error string `json:"error"`
}

type GetApiV1ArtifactsImageParams struct {
	Uri string `form:"uri" json:"uri"`
}

type GetApiV1TrustConfigParams struct {
	TufRepositoryUrl *string `form:"tufRepositoryUrl,omitempty" json:"tufRepositoryUrl,omitempty"`
}

type GetApiV1TrustRootMetadataInfoParams struct {
	TufRepositoryUrl *string `form:"tufRepositoryUrl,omitempty" json:"tufRepositoryUrl,omitempty"`
}

type GetApiV1TrustTargetParams struct {
	TufRepositoryUrl *string `form:"tufRepositoryUrl,omitempty" json:"tufRepositoryUrl,omitempty"`
	Target           string  `form:"target" json:"target"`
}

type GetApiV1TrustTargetsCertificatesParams struct {
	TufRepositoryUrl *string `form:"tufRepositoryUrl,omitempty" json:"tufRepositoryUrl,omitempty"`
}

type GetApiV1TrustTargetsParams struct {
	TufRepositoryUrl *string `form:"tufRepositoryUrl,omitempty" json:"tufRepositoryUrl,omitempty"`
}

type ImageMetadataResponse struct {
	// Digest The container image's digest (e.g., SHA256 hash)
	Digest string `json:"digest"`

	// Image The container image URI
	Image *string `json:"image,omitempty"`

	// Metadata Metadata for a container image
	Metadata Metadata `json:"metadata"`

	// Registry The registry URI of the container image
	Registry string `json:"registry"`
}

type InclusionPromise struct {
	SignedEntryTimestamp []byte `json:"signedEntryTimestamp"`
}

type InclusionProof struct {
	Checkpoint *Checkpoint `json:"checkpoint,omitempty"`

	// Hashes Array of Merkle tree hashes for the inclusion proof
	Hashes [][]byte `json:"hashes"`

	// LogIndex Log index of the entry in the Merkle tree
	LogIndex int64 `json:"logIndex"`

	// RootHash Root hash of the Merkle tree at the time of inclusion
	RootHash []byte `json:"rootHash"`

	// TreeSize Size of the Merkle tree at the time of inclusion
	TreeSize int64 `json:"treeSize"`
}

type InvalidParamFormatError struct {
	ParamName string
	Err       error
}

type KindVersion struct {
	Kind    string `json:"kind"`
	Version string `json:"version"`
}

type LogId struct {
	KeyId []byte `json:"keyId"`
}

type Metadata struct {
	// Created Creation timestamp of the container image (if available)
	Created *time.Time `json:"created"`

	// Labels Key-value labels or annotations associated with the container image
	Labels *map[string]string `json:"labels"`

	// MediaType Media type of the container image (e.g., OCI manifest type)
	MediaType string `json:"mediaType"`

	// Size Size of the container image in bytes
	Size int64 `json:"size"`
}

type MiddlewareFunc func(http.Handler) http.Handler

type ParsedCertificate struct {
	IsCa   bool   `json:"isCa"`
	Issuer string `json:"issuer"`

	// NotAfter ISO date string
	NotAfter time.Time `json:"notAfter"`

	// NotBefore ISO date string
	NotBefore    time.Time       `json:"notBefore"`
	Pem          string          `json:"pem"`
	Role         CertificateRole `json:"role"`
	Sans         []string        `json:"sans"`
	SerialNumber *string         `json:"serialNumber"`
	Subject      string          `json:"subject"`
}

type PostApiV1ArtifactsVerifyJSONRequestBody = VerifyArtifactRequest

type RekorPublicKey struct {
	// PublicKey Rekor public key in PEM format
	PublicKey string `json:"publicKey"`
}

type RequiredHeaderError struct {
	ParamName string
	Err       error
}

type RequiredParamError struct {
	ParamName string
}

type RootMetadataInfo struct {
	// Expires Expiry date of the TUF root metadata
	Expires string `json:"expires"`

	// Status Status of the TUF root metadata
	Status string `json:"status"`

	// Version Version of the TUF root metadata
	Version string `json:"version"`
}

type RootMetadataInfoList struct {
	Data []RootMetadataInfo `json:"data"`

	// RepoUrl URL of the TUF repository
	RepoUrl *string `json:"repo-url,omitempty"`
}

type ServerInterface interface {
	// Retrieve metadata and digest from an OCI-compliant registry
	// (GET /api/v1/artifacts/image)
	GetApiV1ArtifactsImage(w http.ResponseWriter, r *http.Request, params GetApiV1ArtifactsImageParams)
	// Verify an artifact
	// (POST /api/v1/artifacts/verify)
	PostApiV1ArtifactsVerify(w http.ResponseWriter, r *http.Request)
	// Get policies and attestations for an artifact
	// (GET /api/v1/artifacts/{artifact}/policies)
	GetApiV1ArtifactsArtifactPolicies(w http.ResponseWriter, r *http.Request, artifact string)
	// Retrieve Rekor log entry by UUID
	// (GET /api/v1/rekor/entries/{uuid})
	GetApiV1RekorEntriesUuid(w http.ResponseWriter, r *http.Request, uuid string)
	// Get Rekor public key
	// (GET /api/v1/rekor/public-key)
	GetApiV1RekorPublicKey(w http.ResponseWriter, r *http.Request)
	// Get System Health Status
	// (GET /api/v1/system/health)
	GetApiV1SystemHealth(w http.ResponseWriter, r *http.Request)
	// Get Fulcio and Rekor metadata from TUF targets
	// (GET /api/v1/trust/config)
	GetApiV1TrustConfig(w http.ResponseWriter, r *http.Request, params GetApiV1TrustConfigParams)
	// Get Trust Coverage
	// (GET /api/v1/trust/coverage)
	GetApiV1TrustCoverage(w http.ResponseWriter, r *http.Request)
	// Get TUF Root Metadata
	// (GET /api/v1/trust/root-metadata-info)
	GetApiV1TrustRootMetadataInfo(w http.ResponseWriter, r *http.Request, params GetApiV1TrustRootMetadataInfoParams)
	// Get TUF Target File Content
	// (GET /api/v1/trust/target)
	GetApiV1TrustTarget(w http.ResponseWriter, r *http.Request, params GetApiV1TrustTargetParams)
	// Get TUF Targets List
	// (GET /api/v1/trust/targets)
	GetApiV1TrustTargets(w http.ResponseWriter, r *http.Request, params GetApiV1TrustTargetsParams)
	// Get Certificates Information
	// (GET /api/v1/trust/targets/certificates)
	GetApiV1TrustTargetsCertificates(w http.ResponseWriter, r *http.Request, params GetApiV1TrustTargetsCertificatesParams)

	// (GET /healthz)
	GetHealthz(w http.ResponseWriter, r *http.Request)
}

type ServerInterfaceWrapper struct {
	Handler            ServerInterface
	HandlerMiddlewares []MiddlewareFunc
	ErrorHandlerFunc   func(w http.ResponseWriter, r *http.Request, err error)
}

type SignatureStatus struct {
	Chain     SignatureStatusChain     `json:"chain"`
	Rekor     SignatureStatusRekor     `json:"rekor"`
	Signature SignatureStatusSignature `json:"signature"`
}

type SignatureStatusChain string

type SignatureStatusRekor string

type SignatureStatusSignature string

type SignatureView struct {
	CertificateChain []ParsedCertificate `json:"certificateChain"`
	Digest           string              `json:"digest"`

	// Id Unique identifier for the signature view
	Id                 int                   `json:"id"`
	RawBundleJson      string                `json:"rawBundleJson"`
	RekorEntry         *TransparencyLogEntry `json:"rekorEntry,omitempty"`
	SignatureStatus    SignatureStatus       `json:"signatureStatus"`
	SigningCertificate ParsedCertificate     `json:"signingCertificate"`

	// Timestamp ISO-8601 timestamp
	Timestamp *time.Time `json:"timestamp,omitempty"`
}

type SystemHealthResponse struct {
	// RekorStatus Rekor transparency log service health status
	RekorStatus SystemHealthResponseRekorStatus `json:"rekorStatus"`

	// SigstoreServices Sigstore services health status
	SigstoreServices SystemHealthResponseSigstoreServices `json:"sigstoreServices"`

	// TufStatus TUF repository health status
	TufStatus SystemHealthResponseTufStatus `json:"tufStatus"`

	// UpdatedAt Timestamp when the health status was last updated
	UpdatedAt time.Time `json:"updatedAt"`
}

type SystemHealthResponseRekorStatus string

type SystemHealthResponseSigstoreServices string

type SystemHealthResponseTufStatus string

type TargetContent struct {
	Content string `json:"content"`
}

type TargetInfo struct {
	// Content Content of the target.
	Content string `json:"content"`

	// Name Target name
	Name string `json:"name"`

	// Status Status of the target.
	Status string `json:"status"`

	// Type Target type
	Type string `json:"type"`
}

type TargetsList struct {
	Data []TargetInfo `json:"data"`
}

type TimeCoherenceSummary struct {
	MaxIntegratedTime *time.Time                 `json:"maxIntegratedTime"`
	MinIntegratedTime *time.Time                 `json:"minIntegratedTime"`
	Status            TimeCoherenceSummaryStatus `json:"status"`
}

type TimeCoherenceSummaryStatus string

type TooManyValuesForParamError struct {
	ParamName string
	Count     int
}

type TransparencyLogEntry struct {
	CanonicalizedBody []byte            `json:"canonicalizedBody"`
	InclusionPromise  *InclusionPromise `json:"inclusionPromise,omitempty"`

	// InclusionProof Merkle tree inclusion proof for a Rekor entry
	InclusionProof *InclusionProof `json:"inclusionProof"`
	IntegratedTime int64           `json:"integratedTime"`
	KindVersion    *KindVersion    `json:"kindVersion,omitempty"`
	LogId          *LogId          `json:"logId,omitempty"`
	LogIndex       int64           `json:"logIndex"`
}

type TrustConfig struct {
	FulcioCertAuthorities []struct {
		// Pem Certificate in PEM format
		Pem string `json:"pem"`

		// Subject Certificate authority subject
		Subject string `json:"subject"`
	} `json:"fulcioCertAuthorities"`
}

type TrustCoverageResponse struct {
	// AttestedCount Number of attested artifacts
	AttestedCount int `json:"attestedCount"`

	// AttestedPercentage Percentage of artifacts that are attested
	AttestedPercentage float32 `json:"attestedPercentage"`

	// TotalArtifacts Total number of artifacts processed by TAS
	TotalArtifacts int `json:"totalArtifacts"`

	// UpdatedAt Timestamp when the coverage data was last updated
	UpdatedAt time.Time `json:"updatedAt"`

	// VerifiedPercentage Percentage of artifacts that are verified
	VerifiedPercentage float32 `json:"verifiedPercentage"`
}

type UnescapedCookieParamError struct {
	ParamName string
	Err       error
}

type Unimplemented struct{}

type UnmarshalingParamError struct {
	ParamName string
	Err       error
}

type VerifyArtifactRequest struct {
	// ArtifactDigest Hex-encoded digest of the artifact to verify. Used when the artifact reference does not directly include a digest (e.g., separate file verification). Mandatory when using the bundle.
	ArtifactDigest *string `json:"artifactDigest,omitempty"`

	// ArtifactDigestAlgorithm Digest algorithm used to compute the artifact's digest. Common values: sha256, sha512.
	ArtifactDigestAlgorithm *string `json:"artifactDigestAlgorithm,omitempty"`

	// Bundle Optional full Sigstore verification bundle (json). If provided, the verifier will validate this bundle directly instead of fetching an OCI image.
	Bundle *map[string]interface{} `json:"bundle"`

	// ExpectedOIDIssuer Expected OIDC issuer for the signing certificate (Fulcio-based verification).
	ExpectedOIDIssuer *string `json:"expectedOIDIssuer"`

	// ExpectedOIDIssuerRegex Regular expression that the OIDC issuer must match, if exact match is not desired.
	ExpectedOIDIssuerRegex *string `json:"expectedOIDIssuerRegex"`

	// ExpectedSAN Expected identity in the signing certificate's Subject Alternative Name (SAN) extension.
	ExpectedSAN *string `json:"expectedSAN"`

	// ExpectedSANRegex Regular expression that the SAN value must match, allowing pattern-based verification.
	ExpectedSANRegex *string `json:"expectedSANRegex"`

	// MinBundleVersion Minimum acceptable bundle version (e.g., '0.1') for verified signatures.
	MinBundleVersion *string `json:"minBundleVersion"`

	// OciImage The OCI image reference to verify.
	OciImage string `json:"ociImage"`

	// PredicateType The type of the predicate for the attestation.
	PredicateType *string `json:"predicateType,omitempty"`

	// RequireCTLog Require that a Certificate Transparency (CT) log entry exists for the signing certificate.
	RequireCTLog *bool `json:"requireCTLog,omitempty"`

	// RequireTLog Require that an Artifact Transparency (Rekor) log entry exists for the verified artifact.
	RequireTLog *bool `json:"requireTLog,omitempty"`

	// RequireTimestamp Require that either an RFC3161 signed timestamp or a log entry integrated timestamp is present in the signature.
	RequireTimestamp *bool `json:"requireTimestamp,omitempty"`

	// TufRepoUrl URL of a TUF repository containing the trusted root JSON file.
	TufRepoUrl *string `json:"tufRepoUrl,omitempty"`
}

type VerifyArtifactResponse struct {
	Artifact ImageMetadataResponse `json:"artifact"`

	// Attestations List of attestations for the artifact
	Attestations []AttestationView `json:"attestations"`

	// Signatures List of signature verification results
	Signatures []SignatureView     `json:"signatures"`
	Summary    ArtifactSummaryView `json:"summary"`
}