verify

type BlockchainCommitment struct {
	Network             string `json:"network"`
	Ledger              int    `json:"ledger,omitempty"`
	BlockHeight         int    `json:"block_height,omitempty"`
	Timestamp           string `json:"timestamp,omitempty"`
	TxHash              string `json:"tx_hash"`
	CommittedHashHex    string `json:"committed_hash_hex"`
	CommittedHashBase64 string `json:"committed_hash_base64"`
	ExternalCheck       string `json:"external_check"` // "confirmed" | "skipped" | "failed"
	ExternallyVerified  bool   `json:"externally_verified"`
}

type Claims struct {
	Hash            string          `json:"hash"`
	HashType        string          `json:"hash_type"`
	Name            string          `json:"name"`
	Description     string          `json:"description,omitempty"`
	Timestamp       string          `json:"timestamp,omitempty"`
	URL             string          `json:"url,omitempty"`
	Location        *LatLong        `json:"location,omitempty"`
	HasMetadata     bool            `json:"-"`
	RawMetadata     json.RawMessage `json:"-"`
	TimestampStatus TimestampStatus `json:"-"`
	TimestampNote   string          `json:"-"`
}

type CommitmentInfo struct {
	Method        string         `json:"method"`               // "stellar" or "bitcoin"
	Network       string         `json:"network"`              // "testnet", "public", "mainnet", "regtest"
	Ledger        int            `json:"ledger"`               // Stellar ledger (0 if bitcoin)
	Height        int            `json:"height"`               // Bitcoin block height (0 if stellar)
	TxHash        string         `json:"tx_hash"`              // Transaction hash (full, for explorer lookup)
	CommittedHash string         `json:"committed_hash"`       // The value committed on-chain (memo_hash or op_return)
	BlockHash     string         `json:"block_hash,omitempty"` // Bitcoin block header hash (for explorer lookup)
	Timestamp     string         `json:"timestamp"`            // Public blockchain timestamp (ISO 8601)
	ExternalCheck ExternalStatus `json:"external_check"`       // outcome of the public-chain lookup
}

type EntropySubject struct {
	RawSource  string // lowercase identifier emitted by ptype.Name (e.g. "entropy_nist")
	Source     string // humanized: "NIST Beacon"
	CapturedAt string // from entropy data timestamp (source-specific)

	// NIST Beacon fields
	PulseIndex  int    // pulse index number
	ChainIndex  int    // chain index
	Version     string // beacon version
	OutputValue string // pulse output value (hex)

	// Bitcoin Block fields
	BlockHash   string // block hash
	BlockHeight int    // block height
	BlockTime   int64  // block time (unix epoch)

	// Stellar Ledger fields
	LedgerHash     string // ledger hash
	LedgerSequence int    // ledger sequence number
	LedgerClosedAt string // ledger close timestamp
}

type ExternalCommit = proof.ExternalCommit

type ExternalStatus int

type HashComparison struct {
	Supplied bool   `json:"supplied"`
	Matched  bool   `json:"matched"`
	Provided string `json:"provided,omitempty"` // the caller's expected hash
	Found    string `json:"found,omitempty"`    // the hash carried in the proof
}

type JSONCommitments struct {
	Truestamp *TruestampCommitment  `json:"truestamp,omitempty"`
	Stellar   *BlockchainCommitment `json:"stellar,omitempty"`
	Bitcoin   *BlockchainCommitment `json:"bitcoin,omitempty"`
}

type JSONIssue struct {
	Severity string `json:"severity"` // "error", "warning", "skipped"
	Category string `json:"category"`
	Message  string `json:"message"`
	Detail   string `json:"detail,omitempty"`
}

type JSONNote struct {
	Severity string `json:"severity"` // "warning" | "info"
	Message  string `json:"message"`
}

type JSONOutput struct {
	Result      string `json:"result"`
	SubjectType string `json:"subject_type"`
	SubjectID   string `json:"subject_id"`

	// SignaturesChecked is the machine-readable form of the verdict
	// line's --skip-signatures disclosure. E.25 does not list E.16 among
	// the steps a verifier MAY skip and still call a run verified, so
	// `result` alone is not enough: it reads "verified" whether the
	// Ed25519 signature was confirmed or never looked at.
	SignaturesChecked bool `json:"signatures_checked"`

	Subject        any              `json:"subject"`
	HashComparison HashComparison   `json:"hash_comparison"`
	Timeline       *JSONTimeline    `json:"timeline,omitempty"`
	Commitments    *JSONCommitments `json:"commitments,omitempty"`

	// Steps is the complete step record, in Appendix E.22's category
	// order. It precedes the two filtered views below because those
	// drop rows: `issues` keeps only failures and warnings, and
	// `verification_notes` only one group, so every skip and info row —
	// including three of Appendix D.4's fourteen (Key Binding, Stellar
	// Commitment, Bitcoin Commitment) — used to survive --json as
	// nothing but a count. Appendix E.25 requires that no step D.4
	// reports be absent from a verifier's output.
	Steps []Step `json:"steps"`

	VerificationNotes []JSONNote  `json:"verification_notes,omitempty"`
	Issues            []JSONIssue `json:"issues,omitempty"`
	Summary           JSONSummary `json:"summary"`
}

type JSONSummary struct {
	Passed   int `json:"passed"`
	Failed   int `json:"failed"`
	Warnings int `json:"warnings"`
	Skipped  int `json:"skipped"`
	Info     int `json:"info"`
	Total    int `json:"total"`
}

type JSONTimeline struct {
	ClaimedAt   string `json:"claimed_at,omitempty"`
	SubmittedAt string `json:"submitted_at,omitempty"`
	CapturedAt  string `json:"inserted_at,omitempty"`
	CommittedAt string `json:"committed_at,omitempty"`
}

type LatLong struct {
	Latitude  float64 `json:"latitude"`
	Longitude float64 `json:"longitude"`
}

type Options struct {
	KeyringURL     string
	APIURL         string // optional; populates Report.APIURL so the presenter can emit subject-detail + verify web links
	SkipExternal   bool
	SkipSignatures bool
	ExpectedHash   string // hex hash to compare against claims.hash

	// ExpectedSubjectType, when non-empty, asserts that the parsed
	// bundle's subject type name (ptype.Name) matches. A mismatch
	// surfaces as a StatusFail step in the "Subject Type" group —
	// crypto steps still run, the report still renders, and the
	// mismatch appears in the Issues section. Mirrors --type in the
	// download command so users can guard against verifying the wrong
	// file. Must be one of: item, entropy_nist, entropy_stellar,
	// entropy_bitcoin, block, beacon.
	ExpectedSubjectType string
}

type RemoteOptions struct {
	APIURL       string
	Team         string // team ID, sent as tenant header
	ExpectedHash string // hex hash to compare against claims.hash

	// ExpectedSubjectType, when non-empty, is sent to the server as
	// `data.type` on /proof/verify. The server then asserts the posted
	// bundle's `t` matches; a mismatch returns a structured 422 with
	// meta.code == "subject_type_mismatch" (see PROOF_FORMAT_IMPLEMENTERS_GUIDE
	// §12). Mirrors Options.ExpectedSubjectType for the local path.
	ExpectedSubjectType string
}

type Report struct {
	Filename        string
	FileSize        int64
	ProofVersion    int
	SubjectID       string
	SubjectType     string // ptype.Name(bundle.T): "item" | "entropy_nist" | "entropy_stellar" | "entropy_bitcoin" | "block" | "beacon"
	APIURL          string // the resolved API base URL, used by the presenter to emit subject-detail + verify web links
	GeneratedAt     string
	Source          string // raw entropy source identifier
	Temporal        TemporalSummary
	Claims          Claims
	Steps           []Step
	Remote          bool
	HashProvided    string // non-empty if --hash was used
	SkippedExternal bool
	ChainLength     int

	// SigningKeyID names the key that actually signed this bundle: the
	// key id DERIVED from `pk` (E.9), which is what fills the kid slot
	// of E.16's signature payload. E.9 blesses key rotation, under which
	// it differs from the stored `b.kid`.
	SigningKeyID string

	// BlockSigningKeyID is the block's own `b.kid` field, verbatim. It
	// is an input to E.14's 0x32 preimage, not a statement about who
	// signed, so it is reported wherever a surface is describing the
	// block rather than the signature. Empty when the caller did not
	// populate it, in which case display sites fall back to
	// SigningKeyID — the two agree on every bundle whose key has not
	// rotated.
	BlockSigningKeyID string

	CommitmentInfos []CommitmentInfo
	EntropySubject  EntropySubject
}

type Status int

type Step struct {
	Group    string `json:"group"`
	Category string `json:"category"`
	Status   Status `json:"status"`
	Message  string `json:"message"`
}

type StepCounts struct {
	Passed  int
	Failed  int
	Warned  int
	Info    int
	Skipped int
	Total   int
}

type TemporalSummary struct {
	ClaimedAt   string `json:"claimed_at,omitempty"`
	SubmittedAt string `json:"submitted_at,omitempty"`
	CapturedAt  string `json:"inserted_at,omitempty"`
	CommittedAt string `json:"committed_at,omitempty"`
}

type TimestampStatus int

type TruestampCommitment struct {
	ChainLength  int    `json:"chain_length"`
	SigningKeyID string `json:"signing_key_id"`
}

type Verdict int