bundle

type Bound int

type Config struct {
	SchemaVersion int          `json:"schemaVersion"`
	Format        Format       `json:"format"`
	TreeDigest    string       `json:"treeDigest"`
	FileCount     int64        `json:"fileCount"`
	TotalSize     int64        `json:"totalSize"`
	Files         []ConfigFile `json:"files"`
}

type ConfigFile struct {
	Path   string `json:"path"`
	Mode   uint32 `json:"mode"`
	Size   int64  `json:"size"`
	Digest string `json:"digest"`
}

type Digest [DigestSize]byte

type Effective struct {
	Bound  Bound
	Name   string
	Value  int64
	Origin Origin
}

type FileRecord struct {
	// Path is the canonical bundle-relative path.
	Path Path
	// Mode is the normalized mode: ModeFile or ModeExecutable.
	Mode uint32
	// Size is the file's length in bytes.
	Size int64
	// Digest is the SHA-256 of the file's exact content bytes.
	Digest Digest
}

type Format string

type Input struct {
	Origin Origin
	Limits Limits
}

type Limits struct {
	// MaxFiles bounds the number of files in a bundle.
	MaxFiles int64 `json:"maxFiles,omitempty" yaml:"maxFiles,omitempty"`
	// MaxFileBytes bounds any single file's size.
	MaxFileBytes int64 `json:"maxFileBytes,omitempty" yaml:"maxFileBytes,omitempty"`
	// MaxExpandedBytes bounds the total uncompressed payload.
	MaxExpandedBytes int64 `json:"maxExpandedBytes,omitempty" yaml:"maxExpandedBytes,omitempty"`
	// MaxCompressedBytes bounds the compressed layer.
	MaxCompressedBytes int64 `json:"maxCompressedBytes,omitempty" yaml:"maxCompressedBytes,omitempty"`
	// MaxCompressionRatio bounds expanded bytes divided by compressed bytes.
	MaxCompressionRatio int64 `json:"maxCompressionRatio,omitempty" yaml:"maxCompressionRatio,omitempty"`
	// MaxPathBytes bounds a canonical path's UTF-8 length.
	MaxPathBytes int64 `json:"maxPathBytes,omitempty" yaml:"maxPathBytes,omitempty"`
	// MaxPathSegmentBytes bounds one path segment's UTF-8 length.
	MaxPathSegmentBytes int64 `json:"maxPathSegmentBytes,omitempty" yaml:"maxPathSegmentBytes,omitempty"`
	// MaxPathDepth bounds a canonical path's segment count.
	MaxPathDepth int64 `json:"maxPathDepth,omitempty" yaml:"maxPathDepth,omitempty"`
	// MaxConfigBytes bounds the DevProof config blob.
	MaxConfigBytes int64 `json:"maxConfigBytes,omitempty" yaml:"maxConfigBytes,omitempty"`
	// MaxManifestBytes bounds the OCI manifest.
	MaxManifestBytes int64 `json:"maxManifestBytes,omitempty" yaml:"maxManifestBytes,omitempty"`
	// MaxSpecBytes bounds a manifest document.
	MaxSpecBytes int64 `json:"maxSpecBytes,omitempty" yaml:"maxSpecBytes,omitempty"`
	// MaxLockBytes bounds a lock document.
	MaxLockBytes int64 `json:"maxLockBytes,omitempty" yaml:"maxLockBytes,omitempty"`
	// MaxReferrers bounds how many referrer descriptors are enumerated.
	MaxReferrers int64 `json:"maxReferrers,omitempty" yaml:"maxReferrers,omitempty"`
	// MaxEvidenceBytes bounds one evidence object.
	MaxEvidenceBytes int64 `json:"maxEvidenceBytes,omitempty" yaml:"maxEvidenceBytes,omitempty"`
	// MaxParallelSources bounds concurrent source resolution.
	MaxParallelSources int64 `json:"maxParallelSources,omitempty" yaml:"maxParallelSources,omitempty"`
}

type Lock struct {
	APIVersion string `json:"apiVersion"`
	Kind       string `json:"kind"`

	// ManifestDigest binds this lock to one manifest. A manifest edit that
	// changes meaning invalidates the lock.
	ManifestDigest string `json:"manifestDigest"`
	// Format is the bundle format the lock was produced for.
	Format Format `json:"format"`

	Sources []LockedSource `json:"sources"`
	Files   []LockedFile   `json:"files"`

	// TreeDigest is the canonical payload identity the lock commits to.
	TreeDigest string `json:"treeDigest"`
}

type LockedFile struct {
	Path string `json:"path"`
	// Source names the single owner of this path. Every final path has
	// exactly one (DP-011).
	Source     string `json:"source"`
	SourcePath string `json:"sourcePath"`
	Mode       uint32 `json:"mode"`
	Size       int64  `json:"size"`
	Digest     string `json:"digest"`
}

type LockedSource struct {
	Name string `json:"name"`
	Type string `json:"type"`
	// Resolver identifies the implementation that produced this resolution.
	Resolver string `json:"resolver"`
	// ResolverVersion is that implementation's version.
	//
	// Recorded separately because the point of naming a resolver is that one
	// whose behavior changed cannot silently satisfy a lock an earlier one
	// made -- and the name alone does not change when the behavior does. It
	// was being verified during resolution and then dropped on the way to the
	// lock, which left the comment above describing something nothing stored.
	ResolverVersion string `json:"resolverVersion,omitempty"`

	// Requested is what the manifest asked for, which may be mutable.
	Requested map[string]any `json:"requested,omitempty"`
	// Resolved is what it resolved to, which must not be.
	Resolved map[string]any `json:"resolved,omitempty"`

	// TreeDigest is the canonical digest of this source's filtered
	// contribution, before its mount path is applied. It is the common
	// identity across source types: a Git commit and a local directory that
	// hold the same files have the same value here.
	TreeDigest string `json:"treeDigest"`

	MountPath string   `json:"mountPath,omitempty"`
	Include   []string `json:"include,omitempty"`
	Exclude   []string `json:"exclude,omitempty"`
}

type Origin string

type Path string

type Pattern struct {
	// contains filtered or unexported fields
}

type PatternSet struct {
	// contains filtered or unexported fields
}

type Resolved struct {
	Limits Limits
	// contains filtered or unexported fields
}

type SourceSpec struct {
	Name      string `json:"name" yaml:"name"`
	Type      string `json:"type" yaml:"type"`
	MountPath string `json:"mountPath,omitempty" yaml:"mountPath,omitempty"`

	Include []string `json:"include,omitempty" yaml:"include,omitempty"`
	Exclude []string `json:"exclude,omitempty" yaml:"exclude,omitempty"`

	// Config is resolver-specific.
	//
	// It is held untyped until a registered resolver decodes it, so an
	// unknown field in a resolver's config is that resolver's error to
	// report rather than something the loader must know about in advance.
	// A map rather than raw bytes because the manifest digest is computed
	// over canonical JSON of the typed model, and raw YAML has no canonical
	// form.
	Config map[string]any `json:"config,omitempty" yaml:"config,omitempty"`
}

type Spec struct {
	APIVersion string       `json:"apiVersion" yaml:"apiVersion"`
	Kind       string       `json:"kind" yaml:"kind"`
	Metadata   SpecMetadata `json:"metadata" yaml:"metadata"`
	Spec       SpecBody     `json:"spec" yaml:"spec"`
}

type SpecBody struct {
	Sources []SourceSpec `json:"sources" yaml:"sources"`
}

type SpecMetadata struct {
	// Name is a label for diagnostics and evidence. It does not affect
	// payload or subject identity: two bundles with the same content and
	// different names have the same digest (DP-002).
	Name string `json:"name" yaml:"name"`
}