wasm

type HashChain struct {
	// contains filtered or unexported fields
}

type HashEntry struct {
	Version      string `json:"version"`
	Hash         string `json:"hash"`
	PreviousHash string `json:"previous_hash"`
	Timestamp    int64  `json:"timestamp"`
}

type HashVerifier struct {
	// contains filtered or unexported fields
}

type SecurityPolicy struct {
	RequireHashVerification bool
	RequireSignature        bool
	AllowedHashes           []string
	MaxModuleSize           int64
}

type SignatureEntry struct {
	Signature string    `json:"signature"` // Base64 encoded
	SignerID  string    `json:"signer_id"`
	Timestamp time.Time `json:"timestamp"`
	Algorithm string    `json:"algorithm"` // Always "Ed25519"
}

type SignatureManifest struct {
	ModuleHash  string            `json:"module_hash"`
	Signatures  []SignatureEntry  `json:"signatures"`
	TrustedKeys []TrustedKeyEntry `json:"trusted_keys"`
	CreatedAt   time.Time         `json:"created_at"`
	ExpiresAt   *time.Time        `json:"expires_at,omitempty"`
}

type SignatureVerifier struct {
	// contains filtered or unexported fields
}

type SignedModule struct {
	Module    []byte    `json:"-"`         // WASM bytecode (excluded from JSON)
	Hash      string    `json:"hash"`      // SHA256 hash of module
	Signature []byte    `json:"signature"` // Ed25519 signature
	SignerID  string    `json:"signer_id"` // ID of signing key
	Timestamp time.Time `json:"timestamp"` // Signing timestamp
	Version   string    `json:"version"`   // Module version
}

type Signer struct {
	// contains filtered or unexported fields
}

type TrustedKeyEntry struct {
	KeyID     string     `json:"key_id"`
	PublicKey string     `json:"public_key"` // Base64 encoded
	AddedAt   time.Time  `json:"added_at"`
	ExpiresAt *time.Time `json:"expires_at,omitempty"`
	Purpose   string     `json:"purpose"` // e.g., "code-signing"
}

type VerificationError struct {
	Module       string
	ExpectedHash string
	ActualHash   string
	Reason       string
}