tsp

type CTL struct {
	Data []byte
}

type Digest struct {
	Alg   DigestAlg
	Value [32]byte
}

type DigestAlg uint8

type EncKeyType uint8

type Endpoint struct {
	// contains filtered or unexported fields
}

type EndpointOption func(*Endpoint)

type Envelope struct {
	Version          Version
	Sender, Receiver string
	// Confidential reports whether the payload is encrypted.
	Confidential bool
	// SealedBox reports a sealed-box ciphertext (code C) rather than HPKE
	// (code F). Whether an HPKE message uses the post-quantum KEM is not
	// visible on the wire.
	SealedBox bool
}

type Error struct {
	Kind ErrorKind
	Msg  string
	Err  error // underlying cause, if any
}

type ErrorKind uint8

type Event struct {
	Kind EventKind
	// From is the remote (envelope sender) VID, To the local VID.
	From, To string
	// Data is the application data of an EventMessage or EventControl.
	Data []byte
	// Digest is the invite digest (invite, accept) or the named digest (cancel).
	Digest *Digest
	// ReplyDigest is the accept's own digest.
	ReplyDigest *Digest
	// Message is the opened message.
	Message *Message
}

type EventKind uint8

type HOP struct {
	Hops  []string
	Inner []byte
}

type Identity struct {
	// VID is the verifiable identifier, e.g. a DID or URN.
	VID string
	// SigKeyType and SigningKey are the VID's public signature key: 32 bytes
	// for Ed25519, 1952 for ML-DSA-65.
	SigKeyType SigKeyType
	SigningKey []byte
	// EncKeyType and EncryptionKey are the VID's public encryption key: 32
	// bytes for X25519, 1216 for MLKEM768-X25519. May be empty for a VID that
	// only signs.
	EncKeyType    EncKeyType
	EncryptionKey []byte
}

type MemoryStore struct {
	// contains filtered or unexported fields
}

type Message struct {
	Version Version
	// Sender and Receiver are the envelope VIDs. Receiver is "" when the
	// envelope names the NULL VID.
	Sender, Receiver string
	// Scheme is how the payload was protected.
	Scheme Scheme
	// PayloadSender is the ESSR VID_sndr field inside the payload; "" for the
	// NULL VID. When present it has been checked against Sender.
	PayloadSender string
	// Padding is the content of the Padding_Field.
	Padding []byte
	// Payload is the decoded payload. A *HOP's Inner message is not opened.
	Payload Payload
}

type PAD struct {
	// Nonce is 16 bytes. On Pack a nil Nonce is filled from the random source.
	Nonce []byte
}

type PackOptions struct {
	// Scheme selects the payload protection. SchemeAuto picks HPKE by the
	// receiver's encryption key type.
	Scheme Scheme
	// Padding is the content of the payload's Padding_Field. The receiver
	// discards it; it exists to hide the payload's size.
	Padding []byte
	// PayloadSender selects the ESSR sender field.
	PayloadSender SenderField
	// DigestAlg is the algorithm of the SAID an RFI or RFA carries.
	// DigestDefault uses Blake2b-256 under the sealed box, SHA2-256 otherwise.
	DigestAlg DigestAlg
	// ReferralSigner is the introduced VID, used to produce Signature_new when
	// an RFI carries a Referral without a Signature.
	ReferralSigner *PrivateIdentity
	// Rand is the source of nonces, ephemeral keys and signature randomness.
	// Defaults to crypto/rand.
	Rand io.Reader
	// Ephemeral pins the encryption's ephemeral key material, making the
	// output reproducible: the HPKE DeriveKeyPair input ikmE under HPKE-Base,
	// the ephemeral X25519 secret under the sealed box. It exists to reproduce
	// published test vectors. Never set it otherwise: reusing ephemeral key
	// material destroys confidentiality. Not supported for HPKE-PQ.
	Ephemeral []byte
}

type Packed struct {
	// Message is the binary-domain (qb2) wire encoding.
	Message []byte
	// Digest is the SAID the message carries: an RFI's Digest or an RFA's
	// Reply_Digest. Nil for other payload types.
	Digest *Digest
}

type Payload interface {
	Type() PayloadType
	// contains filtered or unexported methods
}

type PayloadType uint8

type PrivateIdentity struct {
	Identity
	// SigningPrivateKey is the Ed25519 seed (32 bytes, or 64 bytes seed||pk),
	// or the ML-DSA-65 private key as a 32-byte seed or the 4032-byte expanded
	// encoding.
	SigningPrivateKey []byte
	// DecryptionPrivateKey is the raw X25519 private key (32 bytes) or the
	// MLKEM768-X25519 private key seed (32 bytes).
	DecryptionPrivateKey []byte
}

type RFA struct {
	// InviteDigest is the Digest of the invite being accepted, echoed verbatim.
	InviteDigest Digest
	// ReplyDigest is the accept's own SAID. Computed by Pack and verified by
	// Open; ignored on input.
	ReplyDigest Digest
}

type RFD struct {
	// Digest names the relationship: the invite's Digest or the accept's
	// Reply_Digest. A DigestDefault algorithm on input means SHA2-256.
	Digest Digest
}

type RFI struct {
	// Nonce is 16 bytes. On Pack a nil Nonce is filled from the random source.
	Nonce []byte
	// ReplyPath is the route for the accept; empty for a direct reply.
	ReplyPath []string
	// Referral, when non-nil, introduces a new VID (parallel relationship
	// forming).
	Referral *Referral
	// Digest is the invite's own SAID. Computed by Pack and verified by Open;
	// ignored on input.
	Digest Digest
}

type Referral struct {
	VID string
	// Signature is a 64-byte Ed25519 or 3309-byte ML-DSA-65 signature. On Pack,
	// a nil Signature is produced with PackOptions.ReferralSigner.
	Signature []byte
}

type Relationship struct {
	State RelationshipState
	// Digest is the invite's Digest, which identifies the inviter's direction
	// of the relationship (and is the thread identifier).
	Digest *Digest
	// ReplyDigest is the accept's Reply_Digest, identifying the accepter's
	// direction. Set once bidirectional.
	ReplyDigest *Digest
	// Initiator reports whether the local VID sent the invite.
	Initiator bool
}

type RelationshipState uint8

type SCS struct {
	// Data is the application bytes, carried as exactly one CESR Bytes
	// primitive inside the -A## stream. Its format is the upper layer's; Open
	// rejects a stream holding anything else (spec issue #77).
	Data []byte
}

type Scheme uint8

type SenderField uint8

type SigKeyType uint8

type StaticResolver struct {
	// contains filtered or unexported fields
}

type Store interface {
	// Relationship returns the relationship, or a zero Relationship (StateNone)
	// if there is none.
	Relationship(ctx context.Context, local, remote string) (Relationship, error)
	// SetRelationship stores the relationship.
	SetRelationship(ctx context.Context, local, remote string, r Relationship) error
	// DeleteRelationship removes the relationship if it exists.
	DeleteRelationship(ctx context.Context, local, remote string) error
}

type Version struct {
	Major, Minor int
}

type VidResolver interface {
	Resolve(ctx context.Context, vid string) (*Identity, error)
}