//! network status documents: shared between votes, consensuses and md consensuses

use super::*;

use crate::doc::{self, authcert};

use crate::types;

use authcert::{AuthCert as DirAuthKeyCert, AuthCertKeyIds};

pub use doc::netstatus::Signature as NdiDirectorySignature;

use doc::netstatus::{

    ConsensusAuthoritySection, DirectorySignaturesHashesAccu, VoteAuthoritySection,

};

mod ns_per_flavour_macros;

pub use ns_per_flavour_macros::*;

ns_per_flavour_macros::ns_export_flavoured_types! {

    NetworkStatus, NetworkStatusUnverified, Router,

}

/// `network-status-version` version value

#[derive(Debug, Clone, Copy, Eq, PartialEq, strum::EnumString, strum::Display)]

#[non_exhaustive]

pub enum NdaNetworkStatusVersion {

    /// The currently supported version, `3`

    #[strum(serialize = "3")]

    V3,

}

impl NormalItemArgument for NdaNetworkStatusVersion {}

/// `params` value

#[derive(Clone, Debug, Default, Deftly)]

#[derive_deftly(ItemValueParseable)]

#[non_exhaustive]

pub struct NdiParams {

    // Not implemented.

}

/// `r` sub-document

#[derive(Deftly, Clone, Debug)]

#[derive_deftly(ItemValueParseable)]

#[non_exhaustive]

pub struct NdiR {

    /// nickname

    pub nickname: types::Nickname,

    /// identity

    pub identity: String, // In non-demo, use a better type

}

/// Unsupported `vote-status` value

///

/// This message is not normally actually shown since our `ErrorProblem` doesn't contain it.

#[derive(Clone, Debug, Error)]

#[non_exhaustive]

#[error("invalid value for vote-status in network status document")]

pub struct InvalidNetworkStatusVoteStatus {}

/// Meat of the verification functions for network documents

///

/// Checks that at least `threshold` members of `trusted`

/// have signed this document (in `signatures`),

/// via some cert(s) in `certs`.

///

/// Does not check validity time.

        let NdiDirectorySignature {

            key_ids:

                AuthCertKeyIds {

                },

            }) else {

                // unknown kp_auth_id_rsa, ignore it

            };

            }) else {

                // no cert for this kp_auth_sign_rsa, ignore it

            };

    }