verify

type CommitmentSummary struct {
	Chain   string
	Network string
}

type JSONReport struct {
	Verifier Verifier `json:"verifier"`

	// Passed is the verdict: no step failed. False for a rejection.
	Passed bool `json:"passed"`

	// Rejection is set, and every other result field is zero, when the
	// bundle was refused before any step ran (E.6).
	Rejection *Rejection `json:"rejection,omitempty"`

	ID     string `json:"id,omitempty"`
	Source string `json:"source,omitempty"`

	// Steps is the complete step record in Appendix E.22's category order,
	// each category's rows in emission order.
	Steps []Step `json:"steps"`

	Temporal *Temporal `json:"temporal,omitempty"`

	PassCount   int `json:"pass_count"`
	FailedCount int `json:"failed_count"`
	WarnCount   int `json:"warn_count"`
	SkipCount   int `json:"skip_count"`
	InfoCount   int `json:"info_count"`

	// HashProvided is the normalized expected hash when one reached a
	// comparison, else null. ExpectedHashProvided and HashMatched are the
	// two facts Appendix E.7 requires to be reportable separately.
	HashProvided         *string `json:"hash_provided"`
	ExpectedHashProvided bool    `json:"expected_hash_provided"`
	HashMatched          bool    `json:"hash_matched"`

	ProofVersion    int    `json:"proof_version"`
	SkippedExternal bool   `json:"skipped_external"`
	GeneratedAt     string `json:"generated_at,omitempty"`

	// SignaturesChecked is false when --skip-signatures left E.16
	// unperformed; `passed` alone cannot say so.
	SignaturesChecked bool `json:"signatures_checked"`

	// Remote is true when the steps were reported by the Truestamp server.
	Remote bool `json:"remote,omitempty"`
}

type Options struct {
	// ExpectedHash is the hash of the file the caller holds, compared
	// against subject.claims.hash for an item subject (E.7). Trimmed and
	// lowercased before use.
	ExpectedHash string

	// ExpectedSubjectType, when non-empty, asserts the bundle's signed
	// `type`. A mismatch is the hard rejection `subject_type_mismatch`.
	ExpectedSubjectType string

	// SkipExternal runs offline: no Horizon, Blockstream, NIST or keyring
	// lookups. Every network-dependent step reports skip.
	SkipExternal bool

	// SkipSignatures leaves E.16's Ed25519 check and the keyring
	// cross-check unperformed; the report discloses it.
	SkipSignatures bool

	// KeyringFile pins a local copy of /.well-known/keyring.json for E.17.
	// It takes precedence over KeyringURL and needs no network.
	KeyringFile string

	// KeyringURL is fetched for E.17 when no file is pinned and the run is
	// online. Empty means no keyring is fetched.
	KeyringURL string
}

type Rejection struct {
	Code   string `json:"code"`
	Detail string `json:"detail"`
	Advice string `json:"advice"`
}

type RemoteOptions struct {
	APIURL       string
	Team         string // team ID, sent as the tenant header
	ExpectedHash string
	SkipExternal bool

	// ExpectedSubjectType is asserted locally against the bundle's signed
	// `type` before anything is posted, as the hard rejection
	// `subject_type_mismatch`, and forwarded to the server when it holds.
	ExpectedSubjectType string
}

type RemoteRejectionError struct {
	StatusCode int
	Reason     string
	Detail     string
}

type Report struct {
	Filename string
	FileSize int64
	Format   string // "json" or "cbor"

	// Bundle facts for the header. VersionLiteral is the `version` value
	// as carried, so a wrong one is shown as it is rather than as 0.
	ProofVersion     int
	VersionLiteral   string
	SubjectType      string
	SubjectID        string
	BlockID          string
	GeneratedAt      string
	WitnessesCarried []string
	Commitments      []CommitmentSummary
	KeyEventCarried  bool

	// KeyringSource says where the E.17 keyring came from: "pinned <file>",
	// "fetched <url>", or "" when none was in hand.
	KeyringSource string

	Steps    []Step
	Temporal Temporal

	// ExpectedHash is the caller's normalized expected hash, "" when none
	// was supplied. Appendix E.7 requires "supplied" to be reportable
	// separately from "matched".
	ExpectedHash string

	SkippedExternal bool
	Remote          bool
}

type Status int

type Step struct {
	Group    string `json:"group"`
	Status   Status `json:"status"`
	Category string `json:"category"`
	Message  string `json:"message"`
}

type StepCounts struct {
	Passed  int
	Failed  int
	Warned  int
	Skipped int
	Info    int
	Total   int
}

type Temporal struct {
	SubmittedAt   string `json:"submitted_at,omitempty"`
	CommittedAt   string `json:"committed_at,omitempty"`
	StellarCommit string `json:"stellar_commit,omitempty"`
	BitcoinCommit string `json:"bitcoin_commit,omitempty"`
}

type Verifier struct {
	Name    string `json:"name"`
	Version string `json:"version"`
}