#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
#[serde(rename_all = "camelCase", deny_unknown_fields)]
pub struct TrustAnchor {
/// Root DID authorized by this anchor.

pub did: String,
/// Authorized verification method on the root document.

pub verification_method: String,
/// Authorized Ed25519 public key in multibase format.

pub public_key_multibase: String,
/// Optional commitment to the exact trusted root document state.

pub document_digest: Option<String>
}

pub fn new(
        did: impl Into<String>,
        verification_method: impl Into<String>,
        public_key_multibase: impl Into<String>,
    ) -> Self;

#[must_use]
pub fn with_document_digest(mut self, digest: impl Into<String>) -> Self;

use oas_lineage::config::VerifyConfig;

// Use defaults from the specification
let config = VerifyConfig::default();
assert_eq!(config.max_generation, 16);

// Or customize
let config = VerifyConfig::new()
    .with_max_generation(8)
    .with_total_timeout(std::time::Duration::from_secs(15));
assert_eq!(config.max_generation, 8);

#[derive(Debug, Clone)]
pub struct VerifyConfig {
/// Maximum generation depth allowed.

///

/// Per OAS Spec §8.3 rule 6: RECOMMENDED default is 16.

/// Entities exceeding this depth MAY be rejected.

pub max_generation: u32,
/// Per-hop resolution timeout.

///

/// Per OAS Spec §8.3 rule 7: RECOMMENDED 5 seconds.

/// Applied to each parent document resolution individually.

pub per_hop_timeout: Duration,
/// Total timeout for the entire chain verification.

///

/// Per OAS Spec §8.3 rule 7: RECOMMENDED 30 seconds.

/// If the total elapsed time exceeds this, verification

/// reports `unverifiable` (not `invalid`).

pub total_timeout: Duration,
/// Whether to verify document signatures for each parent.

///

/// Defaults to `true`. Set to `false` only when parent documents

/// have already been verified by the resolver.

pub verify_document_signatures: bool,
/// Verifier-controlled root trust anchors.

pub trust_anchors: Vec<TrustAnchor>
}

pub fn new() -> Self;

pub fn with_max_generation(mut self, depth: u32) -> Self;

pub fn with_per_hop_timeout(mut self, timeout: Duration) -> Self;

pub fn with_total_timeout(mut self, timeout: Duration) -> Self;

pub fn with_verify_signatures(mut self, verify: bool) -> Self;

#[must_use]
pub fn with_trust_anchor(mut self, anchor: TrustAnchor) -> Self;