schemeadmin

type Approval struct {
	PackageDigest    string `json:"package_digest"`
	TransitionDigest string `json:"transition_digest"`
	Approver         string `json:"approver"`
	Signature        []byte `json:"signature,omitempty"`
}

type Confirmation struct {
	Package    Package
	Transition Transition

	// Definition and Declaration are the exact payload bytes the package
	// digests pin.
	Definition  []byte
	Declaration []byte

	// TransitionBytes/TransitionSignature are the exact signed transition
	// artifact.  ConfirmSigned supplies them so a revoke can persist a tombstone
	// signature in state.
	TransitionBytes     []byte
	TransitionSignature []byte

	// PublisherCert is the certificate recovered from the detached PKCS#7
	// signature over the package bytes.  Roots are the trust anchors the
	// certificate chain must reach.
	PublisherCert *x509.Certificate
	Roots         []*x509.Certificate

	State  RegistryState
	Policy TrustPolicy
	// contains filtered or unexported fields
}

type ConfirmationResult struct {
	Verdict    string `json:"verdict"`
	Reason     string `json:"reason,omitempty"`
	Detail     string `json:"detail,omitempty"`
	Action     string `json:"action"`
	Scheme     string `json:"scheme"`
	Namespace  string `json:"namespace"`
	Generation int64  `json:"generation"`

	PackageDigest              string `json:"package_digest"`
	TransitionDigest           string `json:"transition_digest"`
	ManagementOperationDigest  string `json:"management_operation_digest,omitempty"`
	ApprovalOperationDigest    string `json:"approval_operation_digest,omitempty"`
	PublisherCertificateDigest string `json:"publisher_certificate_digest,omitempty"`
	PublisherKeyID             string `json:"publisher_key_id,omitempty"`
	TrustPolicyDigest          string `json:"trust_policy_digest,omitempty"`
	RegistryStateDigest        string `json:"registry_state_digest,omitempty"`
	InputsDigest               string `json:"inputs_digest,omitempty"`

	RevokedPackageDigest    string `json:"revoked_package_digest,omitempty"`
	RevocationReason        string `json:"revocation_reason,omitempty"`
	RevocationEffectiveTime string `json:"revocation_effective_time,omitempty"`
	ReplacementDigest       string `json:"replacement_digest,omitempty"`
	TombstoneGeneration     int64  `json:"tombstone_generation,omitempty"`
	// contains filtered or unexported fields
}

type Delegation struct {
	// Delegator is optional in the pure relation, but a signed delegation must
	// name the principal whose AIC key signed it.
	Delegator string          `json:"delegator,omitempty"`
	Grantee   string          `json:"grantee"`
	Parent    semantics.Grant `json:"parent"`
	Child     semantics.Grant `json:"child"`
}

type Error struct {
	Code   string
	Detail string
}

type Package struct {
	Version               string `json:"@version"`
	Scheme                string `json:"scheme"`
	Revision              string `json:"revision"`
	DefinitionDigest      string `json:"definition_digest"`
	DeclarationDigest     string `json:"declaration_digest"`
	CLCRevision           string `json:"clc_revision"`
	ChangeClass           string `json:"change_class"`
	PreviousPackageDigest string `json:"previous_package_digest,omitempty"`
	Publisher             string `json:"publisher"`
	Generation            int64  `json:"generation"`
	IssuedAt              string `json:"issued_at,omitempty"`
	ValidUntil            string `json:"valid_until,omitempty"`
}

type RegistryEntry struct {
	Generation    int64  `json:"generation"`
	PackageDigest string `json:"package_digest"`
}

type RegistryState struct {
	Scheme        string          `json:"scheme"`
	Revision      string          `json:"revision,omitempty"`
	Generation    int64           `json:"generation"`
	PackageDigest string          `json:"package_digest"`
	History       []RegistryEntry `json:"history,omitempty"`
	Revoked       []Revocation    `json:"revoked,omitempty"`
	Approvals     []Approval      `json:"approvals,omitempty"`
}

type Revocation struct {
	PackageDigest     string `json:"package_digest"`
	Generation        int64  `json:"generation"`
	EffectiveTime     string `json:"effective_time"`
	Reason            string `json:"reason"`
	ReplacementDigest string `json:"replacement_digest,omitempty"`

	// Tombstone is the exact signed revocation transition and Signature is the
	// detached PKCS#7 over it.  A state file cannot invent a revocation without
	// a trusted signature.
	Tombstone []byte `json:"tombstone,omitempty"`
	Signature []byte `json:"signature,omitempty"`
}

type SignedConfirmation struct {
	PackageBytes         []byte
	Signatures           [][]byte
	TransitionBytes      []byte
	TransitionSignatures [][]byte

	Definition  []byte
	Declaration []byte

	Roots  []*x509.Certificate
	State  RegistryState
	Policy TrustPolicy
}

type Transition struct {
	Version           string `json:"@version"`
	Action            string `json:"action"`
	Scheme            string `json:"scheme"`
	Namespace         string `json:"namespace"`
	FromGeneration    *int64 `json:"from_generation,omitempty"`
	ToGeneration      int64  `json:"to_generation"`
	FromDigest        string `json:"from_digest,omitempty"`
	ToDigest          string `json:"to_digest"`
	ChangeClass       string `json:"change_class"`
	TargetCLCRevision string `json:"target_clc_revision"`

	// revoke / tombstone
	RevocationReason        string `json:"revocation_reason,omitempty"`
	RevocationEffectiveTime string `json:"revocation_effective_time,omitempty"`
	ReplacementDigest       string `json:"replacement_digest,omitempty"`
	TombstoneGeneration     *int64 `json:"tombstone_generation,omitempty"`

	// root-rotate
	NextRootPackageDigest string   `json:"next_root_package_digest,omitempty"`
	NextRootKeys          []string `json:"next_root_keys,omitempty"`
	NextRootThreshold     int      `json:"next_root_threshold,omitempty"`
}

type TrustPolicy struct {
	RootPackageDigest string            `json:"root_package_digest"`
	RootKeys          []string          `json:"root_keys"`
	RootThreshold     int               `json:"root_threshold"`
	RootGrants        []semantics.Grant `json:"root_grants"`

	SupportedCLCRevisions []string `json:"supported_clc_revisions"`
	NamespacePrefixes     []string `json:"namespace_prefixes"`
	MaxMajor              int      `json:"max_major"`

	// AdministrationDeclaration is the pinned CLC-SCHEME-v1 declaration of the
	// administration scheme itself.  It is what gives `namespace` its
	// path-prefix domain and `change_class`/`clc_revision` their enum domains;
	// without it CLC would fall back to shape inference and path containment
	// would become exact equality.
	AdministrationDeclaration json.RawMessage `json:"administration_declaration"`

	// ObservedAt is the deployer's clock input, never "now()" read inside the
	// library.  Freshness decisions must be replayable.
	ObservedAt          string `json:"observed_at"`
	MaxStalenessSeconds int64  `json:"max_staleness_seconds,omitempty"`
	ApprovalThreshold   int    `json:"approval_threshold,omitempty"`

	// Separately configured next root.  A rotation is accepted only when the
	// current root authorizes it and this next-root threshold is met.
	NextRootPackageDigest string   `json:"next_root_package_digest,omitempty"`
	NextRootKeys          []string `json:"next_root_keys,omitempty"`
	NextRootThreshold     int      `json:"next_root_threshold,omitempty"`
}