pub struct Authorization {
  role : String
  keyids : Array[String]
  threshold : Int
  satisfied_count : Int
  authorized_keyids : Array[String]
  outcome : AuthorizationOutcome
}

pub enum AuthorizationOutcome {
  Satisfied
  Unsatisfied
  Undecidable
}

pub struct DateTime {
  epoch_seconds : Int64
  form : DateTimeForm
  offset_minutes : Int
}

pub enum DateTimeForm {
  Exact
  Fractional
  Offset
}

pub struct Delegation {
  name : String
  keyids : Array[String]
  threshold : Int
  paths : Array[String]
  path_hash_prefixes : Array[String]
  terminating : Bool
  well_formed : Bool
}

pub struct Finding {
  severity : Severity
  code : String
  location : String
}

pub struct Report {
  findings : Array[Finding]
  role : String
  version : Int?
}

pub struct Semver {
  major : Int
  minor : Int
  patch : Int
  suffix : String
}

pub enum Severity {
  Error
  Warning
}

fn any_path_matches(patterns : Array[String], path : String) -> Bool

fn authorization_findings(authorization : Authorization, document : String, findings : Array[Finding]) -> Unit

fn authorized_keyids(root : String, role : String) -> Array[String]?

fn chain_signers(chain : ArrayView[String]) -> Array[Array[String]]

fn chain_versions(chain : ArrayView[String]) -> Array[Int?]

fn check_authorization(root : String, document : String, role : String) -> Authorization

fn check_delegation_tree(documents : Map[String, String], findings : Array[Finding]) -> Unit

fn check_delegations(targets : String, findings : Array[Finding]) -> Unit

fn check_root_chain(chain : ArrayView[String], findings : Array[Finding]) -> Unit

fn check_snapshot_coverage(snapshot : String, targets_versions : Map[String, Int], findings : Array[Finding]) -> Unit

fn compare_date_time(left : DateTime, right : DateTime) -> Int

fn compare_ordinal(left : StringView, right : StringView) -> Int

fn contains_keyid(keyids : Array[String], keyid : String) -> Bool

fn count_authorized(signature_keyids : Array[String], authorized_keyids : Array[String]) -> Int

fn days_from_civil(year : Int, month : Int, day : Int) -> Int64

fn days_in_month(year : Int, month : Int) -> Int

fn delegation_edges(targets : String) -> Map[String, Array[String]]

fn distinct(keyids : Array[String]) -> Array[String]

fn empty_findings() -> Array[Finding]

fn finding_codes() -> Array[String]

fn is_compatible_spec_version(candidate : Semver, expected : Semver) -> Bool

fn is_date_time(value : String) -> Bool

fn is_hex_prefix(prefix : String, digest : String) -> Bool

fn is_leap_year(year : Int) -> Bool

fn is_sorted_ordinal(values : ArrayView[String]) -> Bool

fn parse_date_time(value : String) -> DateTime?

fn parse_delegations(targets : String) -> Array[Delegation]?

fn parse_semver(value : String) -> Semver?

fn path_matches(pattern : String, path : String) -> Bool

fn preflight(input : String, role : String) -> Array[String]

fn preflight_at(input : String, role : String, now : String) -> Array[String]

fn preflight_at_report(input : String, role : String, now : String) -> Report

fn preflight_bundle(timestamp : String, snapshot : String, targets : String, now : String) -> Array[String]

fn preflight_bundle_report(timestamp : String, snapshot : String, targets : String, now : String) -> Report

fn preflight_delegations(targets : String) -> Array[String]

fn preflight_report(input : String, role : String) -> Report

fn preflight_root_chain(chain : ArrayView[String]) -> Array[String]

fn preflight_snapshot_coverage(snapshot : String, targets_versions : Map[String, Int]) -> Array[String]

fn reachable_roles(root_role : String, edges : Map[String, Array[String]]) -> Array[String]

fn role_threshold(root : String, role : String) -> Int?

fn seconds_between(from : DateTime, to : DateTime) -> Int64

fn signature_keyids(input : String) -> Array[String]

fn signature_values(input : String) -> Array[String]

fn unexpected_signers(signature_keyids : Array[String], authorized_keyids : Array[String], own_keyids : Array[String]) -> Array[String]