jacquard-api 0.10.2

// @generated by jacquard-lexicon. DO NOT EDIT.
//
// Lexicon: io.atcr.hold.scan
//
// This file was automatically generated from Lexicon schemas.
// Any manual changes will be overwritten on the next regeneration.

/// Vulnerability scan results for a container manifest. Stored in the hold's embedded PDS. Record key is deterministic: the manifest digest hex without the 'sha256:' prefix, so re-scans upsert the existing record.
#[jacquard_derive::lexicon]
#[derive(
    serde::Serialize,
    serde::Deserialize,
    Debug,
    Clone,
    PartialEq,
    Eq,
    jacquard_derive::IntoStatic
)]
#[serde(rename_all = "camelCase")]
pub struct Scan<'a> {
    ///Count of critical severity vulnerabilities
    pub critical: i64,
    ///Count of high severity vulnerabilities
    pub high: i64,
    ///Count of low severity vulnerabilities
    pub low: i64,
    ///AT-URI of the scanned manifest (e.g., at://did:plc:xyz/io.atcr.manifest/abc123...)
    #[serde(borrow)]
    pub manifest: jacquard_common::types::string::AtUri<'a>,
    ///Count of medium severity vulnerabilities
    pub medium: i64,
    ///Repository name (e.g., myapp)
    #[serde(borrow)]
    pub repository: jacquard_common::CowStr<'a>,
    ///SBOM blob (SPDX JSON format) uploaded to the hold's blob storage
    #[serde(skip_serializing_if = "std::option::Option::is_none")]
    #[serde(borrow)]
    pub sbom_blob: std::option::Option<jacquard_common::types::blob::BlobRef<'a>>,
    ///RFC3339 timestamp of when the scan completed
    pub scanned_at: jacquard_common::types::string::Datetime,
    ///Version of the scanner that produced this result (e.g., atcr-scanner-v1.0.0)
    #[serde(borrow)]
    pub scanner_version: jacquard_common::CowStr<'a>,
    ///Total vulnerability count
    pub total: i64,
    ///DID of the image owner
    #[serde(borrow)]
    pub user_did: jacquard_common::types::string::Did<'a>,
    ///Grype vulnerability report blob (JSON) with full CVE details
    #[serde(skip_serializing_if = "std::option::Option::is_none")]
    #[serde(borrow)]
    pub vuln_report_blob: std::option::Option<jacquard_common::types::blob::BlobRef<'a>>,
}

pub mod scan_state {

    pub use crate::builder_types::{Set, Unset, IsSet, IsUnset};
    #[allow(unused)]
    use ::core::marker::PhantomData;
    mod sealed {
        pub trait Sealed {}
    }
    /// State trait tracking which required fields have been set
    pub trait State: sealed::Sealed {
        type Critical;
        type Low;
        type UserDid;
        type Manifest;
        type High;
        type Repository;
        type Total;
        type ScannerVersion;
        type ScannedAt;
        type Medium;
    }
    /// Empty state - all required fields are unset
    pub struct Empty(());
    impl sealed::Sealed for Empty {}
    impl State for Empty {
        type Critical = Unset;
        type Low = Unset;
        type UserDid = Unset;
        type Manifest = Unset;
        type High = Unset;
        type Repository = Unset;
        type Total = Unset;
        type ScannerVersion = Unset;
        type ScannedAt = Unset;
        type Medium = Unset;
    }
    ///State transition - sets the `critical` field to Set
    pub struct SetCritical<S: State = Empty>(PhantomData<fn() -> S>);
    impl<S: State> sealed::Sealed for SetCritical<S> {}
    impl<S: State> State for SetCritical<S> {
        type Critical = Set<members::critical>;
        type Low = S::Low;
        type UserDid = S::UserDid;
        type Manifest = S::Manifest;
        type High = S::High;
        type Repository = S::Repository;
        type Total = S::Total;
        type ScannerVersion = S::ScannerVersion;
        type ScannedAt = S::ScannedAt;
        type Medium = S::Medium;
    }
    ///State transition - sets the `low` field to Set
    pub struct SetLow<S: State = Empty>(PhantomData<fn() -> S>);
    impl<S: State> sealed::Sealed for SetLow<S> {}
    impl<S: State> State for SetLow<S> {
        type Critical = S::Critical;
        type Low = Set<members::low>;
        type UserDid = S::UserDid;
        type Manifest = S::Manifest;
        type High = S::High;
        type Repository = S::Repository;
        type Total = S::Total;
        type ScannerVersion = S::ScannerVersion;
        type ScannedAt = S::ScannedAt;
        type Medium = S::Medium;
    }
    ///State transition - sets the `user_did` field to Set
    pub struct SetUserDid<S: State = Empty>(PhantomData<fn() -> S>);
    impl<S: State> sealed::Sealed for SetUserDid<S> {}
    impl<S: State> State for SetUserDid<S> {
        type Critical = S::Critical;
        type Low = S::Low;
        type UserDid = Set<members::user_did>;
        type Manifest = S::Manifest;
        type High = S::High;
        type Repository = S::Repository;
        type Total = S::Total;
        type ScannerVersion = S::ScannerVersion;
        type ScannedAt = S::ScannedAt;
        type Medium = S::Medium;
    }
    ///State transition - sets the `manifest` field to Set
    pub struct SetManifest<S: State = Empty>(PhantomData<fn() -> S>);
    impl<S: State> sealed::Sealed for SetManifest<S> {}
    impl<S: State> State for SetManifest<S> {
        type Critical = S::Critical;
        type Low = S::Low;
        type UserDid = S::UserDid;
        type Manifest = Set<members::manifest>;
        type High = S::High;
        type Repository = S::Repository;
        type Total = S::Total;
        type ScannerVersion = S::ScannerVersion;
        type ScannedAt = S::ScannedAt;
        type Medium = S::Medium;
    }
    ///State transition - sets the `high` field to Set
    pub struct SetHigh<S: State = Empty>(PhantomData<fn() -> S>);
    impl<S: State> sealed::Sealed for SetHigh<S> {}
    impl<S: State> State for SetHigh<S> {
        type Critical = S::Critical;
        type Low = S::Low;
        type UserDid = S::UserDid;
        type Manifest = S::Manifest;
        type High = Set<members::high>;
        type Repository = S::Repository;
        type Total = S::Total;
        type ScannerVersion = S::ScannerVersion;
        type ScannedAt = S::ScannedAt;
        type Medium = S::Medium;
    }
    ///State transition - sets the `repository` field to Set
    pub struct SetRepository<S: State = Empty>(PhantomData<fn() -> S>);
    impl<S: State> sealed::Sealed for SetRepository<S> {}
    impl<S: State> State for SetRepository<S> {
        type Critical = S::Critical;
        type Low = S::Low;
        type UserDid = S::UserDid;
        type Manifest = S::Manifest;
        type High = S::High;
        type Repository = Set<members::repository>;
        type Total = S::Total;
        type ScannerVersion = S::ScannerVersion;
        type ScannedAt = S::ScannedAt;
        type Medium = S::Medium;
    }
    ///State transition - sets the `total` field to Set
    pub struct SetTotal<S: State = Empty>(PhantomData<fn() -> S>);
    impl<S: State> sealed::Sealed for SetTotal<S> {}
    impl<S: State> State for SetTotal<S> {
        type Critical = S::Critical;
        type Low = S::Low;
        type UserDid = S::UserDid;
        type Manifest = S::Manifest;
        type High = S::High;
        type Repository = S::Repository;
        type Total = Set<members::total>;
        type ScannerVersion = S::ScannerVersion;
        type ScannedAt = S::ScannedAt;
        type Medium = S::Medium;
    }
    ///State transition - sets the `scanner_version` field to Set
    pub struct SetScannerVersion<S: State = Empty>(PhantomData<fn() -> S>);
    impl<S: State> sealed::Sealed for SetScannerVersion<S> {}
    impl<S: State> State for SetScannerVersion<S> {
        type Critical = S::Critical;
        type Low = S::Low;
        type UserDid = S::UserDid;
        type Manifest = S::Manifest;
        type High = S::High;
        type Repository = S::Repository;
        type Total = S::Total;
        type ScannerVersion = Set<members::scanner_version>;
        type ScannedAt = S::ScannedAt;
        type Medium = S::Medium;
    }
    ///State transition - sets the `scanned_at` field to Set
    pub struct SetScannedAt<S: State = Empty>(PhantomData<fn() -> S>);
    impl<S: State> sealed::Sealed for SetScannedAt<S> {}
    impl<S: State> State for SetScannedAt<S> {
        type Critical = S::Critical;
        type Low = S::Low;
        type UserDid = S::UserDid;
        type Manifest = S::Manifest;
        type High = S::High;
        type Repository = S::Repository;
        type Total = S::Total;
        type ScannerVersion = S::ScannerVersion;
        type ScannedAt = Set<members::scanned_at>;
        type Medium = S::Medium;
    }
    ///State transition - sets the `medium` field to Set
    pub struct SetMedium<S: State = Empty>(PhantomData<fn() -> S>);
    impl<S: State> sealed::Sealed for SetMedium<S> {}
    impl<S: State> State for SetMedium<S> {
        type Critical = S::Critical;
        type Low = S::Low;
        type UserDid = S::UserDid;
        type Manifest = S::Manifest;
        type High = S::High;
        type Repository = S::Repository;
        type Total = S::Total;
        type ScannerVersion = S::ScannerVersion;
        type ScannedAt = S::ScannedAt;
        type Medium = Set<members::medium>;
    }
    /// Marker types for field names
    #[allow(non_camel_case_types)]
    pub mod members {
        ///Marker type for the `critical` field
        pub struct critical(());
        ///Marker type for the `low` field
        pub struct low(());
        ///Marker type for the `user_did` field
        pub struct user_did(());
        ///Marker type for the `manifest` field
        pub struct manifest(());
        ///Marker type for the `high` field
        pub struct high(());
        ///Marker type for the `repository` field
        pub struct repository(());
        ///Marker type for the `total` field
        pub struct total(());
        ///Marker type for the `scanner_version` field
        pub struct scanner_version(());
        ///Marker type for the `scanned_at` field
        pub struct scanned_at(());
        ///Marker type for the `medium` field
        pub struct medium(());
    }
}

/// Builder for constructing an instance of this type
pub struct ScanBuilder<'a, S: scan_state::State> {
    _phantom_state: ::core::marker::PhantomData<fn() -> S>,
    __unsafe_private_named: (
        ::core::option::Option<i64>,
        ::core::option::Option<i64>,
        ::core::option::Option<i64>,
        ::core::option::Option<jacquard_common::types::string::AtUri<'a>>,
        ::core::option::Option<i64>,
        ::core::option::Option<jacquard_common::CowStr<'a>>,
        ::core::option::Option<jacquard_common::types::blob::BlobRef<'a>>,
        ::core::option::Option<jacquard_common::types::string::Datetime>,
        ::core::option::Option<jacquard_common::CowStr<'a>>,
        ::core::option::Option<i64>,
        ::core::option::Option<jacquard_common::types::string::Did<'a>>,
        ::core::option::Option<jacquard_common::types::blob::BlobRef<'a>>,
    ),
    _phantom: ::core::marker::PhantomData<&'a ()>,
}

impl<'a> Scan<'a> {
    /// Create a new builder for this type
    pub fn new() -> ScanBuilder<'a, scan_state::Empty> {
        ScanBuilder::new()
    }
}

impl<'a> ScanBuilder<'a, scan_state::Empty> {
    /// Create a new builder with all fields unset
    pub fn new() -> Self {
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: (
                None,
                None,
                None,
                None,
                None,
                None,
                None,
                None,
                None,
                None,
                None,
                None,
            ),
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::Critical: scan_state::IsUnset,
{
    /// Set the `critical` field (required)
    pub fn critical(
        mut self,
        value: impl Into<i64>,
    ) -> ScanBuilder<'a, scan_state::SetCritical<S>> {
        self.__unsafe_private_named.0 = ::core::option::Option::Some(value.into());
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: self.__unsafe_private_named,
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::High: scan_state::IsUnset,
{
    /// Set the `high` field (required)
    pub fn high(
        mut self,
        value: impl Into<i64>,
    ) -> ScanBuilder<'a, scan_state::SetHigh<S>> {
        self.__unsafe_private_named.1 = ::core::option::Option::Some(value.into());
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: self.__unsafe_private_named,
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::Low: scan_state::IsUnset,
{
    /// Set the `low` field (required)
    pub fn low(
        mut self,
        value: impl Into<i64>,
    ) -> ScanBuilder<'a, scan_state::SetLow<S>> {
        self.__unsafe_private_named.2 = ::core::option::Option::Some(value.into());
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: self.__unsafe_private_named,
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::Manifest: scan_state::IsUnset,
{
    /// Set the `manifest` field (required)
    pub fn manifest(
        mut self,
        value: impl Into<jacquard_common::types::string::AtUri<'a>>,
    ) -> ScanBuilder<'a, scan_state::SetManifest<S>> {
        self.__unsafe_private_named.3 = ::core::option::Option::Some(value.into());
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: self.__unsafe_private_named,
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::Medium: scan_state::IsUnset,
{
    /// Set the `medium` field (required)
    pub fn medium(
        mut self,
        value: impl Into<i64>,
    ) -> ScanBuilder<'a, scan_state::SetMedium<S>> {
        self.__unsafe_private_named.4 = ::core::option::Option::Some(value.into());
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: self.__unsafe_private_named,
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::Repository: scan_state::IsUnset,
{
    /// Set the `repository` field (required)
    pub fn repository(
        mut self,
        value: impl Into<jacquard_common::CowStr<'a>>,
    ) -> ScanBuilder<'a, scan_state::SetRepository<S>> {
        self.__unsafe_private_named.5 = ::core::option::Option::Some(value.into());
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: self.__unsafe_private_named,
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S: scan_state::State> ScanBuilder<'a, S> {
    /// Set the `sbomBlob` field (optional)
    pub fn sbom_blob(
        mut self,
        value: impl Into<Option<jacquard_common::types::blob::BlobRef<'a>>>,
    ) -> Self {
        self.__unsafe_private_named.6 = value.into();
        self
    }
    /// Set the `sbomBlob` field to an Option value (optional)
    pub fn maybe_sbom_blob(
        mut self,
        value: Option<jacquard_common::types::blob::BlobRef<'a>>,
    ) -> Self {
        self.__unsafe_private_named.6 = value;
        self
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::ScannedAt: scan_state::IsUnset,
{
    /// Set the `scannedAt` field (required)
    pub fn scanned_at(
        mut self,
        value: impl Into<jacquard_common::types::string::Datetime>,
    ) -> ScanBuilder<'a, scan_state::SetScannedAt<S>> {
        self.__unsafe_private_named.7 = ::core::option::Option::Some(value.into());
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: self.__unsafe_private_named,
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::ScannerVersion: scan_state::IsUnset,
{
    /// Set the `scannerVersion` field (required)
    pub fn scanner_version(
        mut self,
        value: impl Into<jacquard_common::CowStr<'a>>,
    ) -> ScanBuilder<'a, scan_state::SetScannerVersion<S>> {
        self.__unsafe_private_named.8 = ::core::option::Option::Some(value.into());
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: self.__unsafe_private_named,
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::Total: scan_state::IsUnset,
{
    /// Set the `total` field (required)
    pub fn total(
        mut self,
        value: impl Into<i64>,
    ) -> ScanBuilder<'a, scan_state::SetTotal<S>> {
        self.__unsafe_private_named.9 = ::core::option::Option::Some(value.into());
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: self.__unsafe_private_named,
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::UserDid: scan_state::IsUnset,
{
    /// Set the `userDid` field (required)
    pub fn user_did(
        mut self,
        value: impl Into<jacquard_common::types::string::Did<'a>>,
    ) -> ScanBuilder<'a, scan_state::SetUserDid<S>> {
        self.__unsafe_private_named.10 = ::core::option::Option::Some(value.into());
        ScanBuilder {
            _phantom_state: ::core::marker::PhantomData,
            __unsafe_private_named: self.__unsafe_private_named,
            _phantom: ::core::marker::PhantomData,
        }
    }
}

impl<'a, S: scan_state::State> ScanBuilder<'a, S> {
    /// Set the `vulnReportBlob` field (optional)
    pub fn vuln_report_blob(
        mut self,
        value: impl Into<Option<jacquard_common::types::blob::BlobRef<'a>>>,
    ) -> Self {
        self.__unsafe_private_named.11 = value.into();
        self
    }
    /// Set the `vulnReportBlob` field to an Option value (optional)
    pub fn maybe_vuln_report_blob(
        mut self,
        value: Option<jacquard_common::types::blob::BlobRef<'a>>,
    ) -> Self {
        self.__unsafe_private_named.11 = value;
        self
    }
}

impl<'a, S> ScanBuilder<'a, S>
where
    S: scan_state::State,
    S::Critical: scan_state::IsSet,
    S::Low: scan_state::IsSet,
    S::UserDid: scan_state::IsSet,
    S::Manifest: scan_state::IsSet,
    S::High: scan_state::IsSet,
    S::Repository: scan_state::IsSet,
    S::Total: scan_state::IsSet,
    S::ScannerVersion: scan_state::IsSet,
    S::ScannedAt: scan_state::IsSet,
    S::Medium: scan_state::IsSet,
{
    /// Build the final struct
    pub fn build(self) -> Scan<'a> {
        Scan {
            critical: self.__unsafe_private_named.0.unwrap(),
            high: self.__unsafe_private_named.1.unwrap(),
            low: self.__unsafe_private_named.2.unwrap(),
            manifest: self.__unsafe_private_named.3.unwrap(),
            medium: self.__unsafe_private_named.4.unwrap(),
            repository: self.__unsafe_private_named.5.unwrap(),
            sbom_blob: self.__unsafe_private_named.6,
            scanned_at: self.__unsafe_private_named.7.unwrap(),
            scanner_version: self.__unsafe_private_named.8.unwrap(),
            total: self.__unsafe_private_named.9.unwrap(),
            user_did: self.__unsafe_private_named.10.unwrap(),
            vuln_report_blob: self.__unsafe_private_named.11,
            extra_data: Default::default(),
        }
    }
    /// Build the final struct with custom extra_data
    pub fn build_with_data(
        self,
        extra_data: std::collections::BTreeMap<
            jacquard_common::deps::smol_str::SmolStr,
            jacquard_common::types::value::Data<'a>,
        >,
    ) -> Scan<'a> {
        Scan {
            critical: self.__unsafe_private_named.0.unwrap(),
            high: self.__unsafe_private_named.1.unwrap(),
            low: self.__unsafe_private_named.2.unwrap(),
            manifest: self.__unsafe_private_named.3.unwrap(),
            medium: self.__unsafe_private_named.4.unwrap(),
            repository: self.__unsafe_private_named.5.unwrap(),
            sbom_blob: self.__unsafe_private_named.6,
            scanned_at: self.__unsafe_private_named.7.unwrap(),
            scanner_version: self.__unsafe_private_named.8.unwrap(),
            total: self.__unsafe_private_named.9.unwrap(),
            user_did: self.__unsafe_private_named.10.unwrap(),
            vuln_report_blob: self.__unsafe_private_named.11,
            extra_data: Some(extra_data),
        }
    }
}

impl<'a> Scan<'a> {
    pub fn uri(
        uri: impl Into<jacquard_common::CowStr<'a>>,
    ) -> Result<
        jacquard_common::types::uri::RecordUri<'a, ScanRecord>,
        jacquard_common::types::uri::UriError,
    > {
        jacquard_common::types::uri::RecordUri::try_from_uri(
            jacquard_common::types::string::AtUri::new_cow(uri.into())?,
        )
    }
}

/// Typed wrapper for GetRecord response with this collection's record type.
#[derive(
    serde::Serialize,
    serde::Deserialize,
    Debug,
    Clone,
    PartialEq,
    Eq,
    jacquard_derive::IntoStatic
)]
#[serde(rename_all = "camelCase")]
pub struct ScanGetRecordOutput<'a> {
    #[serde(skip_serializing_if = "std::option::Option::is_none")]
    #[serde(borrow)]
    pub cid: std::option::Option<jacquard_common::types::string::Cid<'a>>,
    #[serde(borrow)]
    pub uri: jacquard_common::types::string::AtUri<'a>,
    #[serde(borrow)]
    pub value: Scan<'a>,
}

impl From<ScanGetRecordOutput<'_>> for Scan<'_> {
    fn from(output: ScanGetRecordOutput<'_>) -> Self {
        use jacquard_common::IntoStatic;
        output.value.into_static()
    }
}

impl jacquard_common::types::collection::Collection for Scan<'_> {
    const NSID: &'static str = "io.atcr.hold.scan";
    type Record = ScanRecord;
}

/// Marker type for deserializing records from this collection.
#[derive(Debug, serde::Serialize, serde::Deserialize)]
pub struct ScanRecord;
impl jacquard_common::xrpc::XrpcResp for ScanRecord {
    const NSID: &'static str = "io.atcr.hold.scan";
    const ENCODING: &'static str = "application/json";
    type Output<'de> = ScanGetRecordOutput<'de>;
    type Err<'de> = jacquard_common::types::collection::RecordError<'de>;
}

impl jacquard_common::types::collection::Collection for ScanRecord {
    const NSID: &'static str = "io.atcr.hold.scan";
    type Record = ScanRecord;
}

impl<'a> ::jacquard_lexicon::schema::LexiconSchema for Scan<'a> {
    fn nsid() -> &'static str {
        "io.atcr.hold.scan"
    }
    fn def_name() -> &'static str {
        "main"
    }
    fn lexicon_doc() -> ::jacquard_lexicon::lexicon::LexiconDoc<'static> {
        lexicon_doc_io_atcr_hold_scan()
    }
    fn validate(
        &self,
    ) -> ::core::result::Result<(), ::jacquard_lexicon::validation::ConstraintError> {
        {
            let value = &self.critical;
            if *value < 0i64 {
                return Err(::jacquard_lexicon::validation::ConstraintError::Minimum {
                    path: ::jacquard_lexicon::validation::ValidationPath::from_field(
                        "critical",
                    ),
                    min: 0i64,
                    actual: *value,
                });
            }
        }
        {
            let value = &self.high;
            if *value < 0i64 {
                return Err(::jacquard_lexicon::validation::ConstraintError::Minimum {
                    path: ::jacquard_lexicon::validation::ValidationPath::from_field(
                        "high",
                    ),
                    min: 0i64,
                    actual: *value,
                });
            }
        }
        {
            let value = &self.low;
            if *value < 0i64 {
                return Err(::jacquard_lexicon::validation::ConstraintError::Minimum {
                    path: ::jacquard_lexicon::validation::ValidationPath::from_field(
                        "low",
                    ),
                    min: 0i64,
                    actual: *value,
                });
            }
        }
        {
            let value = &self.medium;
            if *value < 0i64 {
                return Err(::jacquard_lexicon::validation::ConstraintError::Minimum {
                    path: ::jacquard_lexicon::validation::ValidationPath::from_field(
                        "medium",
                    ),
                    min: 0i64,
                    actual: *value,
                });
            }
        }
        {
            let value = &self.repository;
            #[allow(unused_comparisons)]
            if <str>::len(value.as_ref()) > 256usize {
                return Err(::jacquard_lexicon::validation::ConstraintError::MaxLength {
                    path: ::jacquard_lexicon::validation::ValidationPath::from_field(
                        "repository",
                    ),
                    max: 256usize,
                    actual: <str>::len(value.as_ref()),
                });
            }
        }
        if let Some(ref value) = self.sbom_blob {
            {
                let mime = value.blob().mime_type.as_str();
                let accepted: &[&str] = &["application/spdx+json"];
                let matched = accepted
                    .iter()
                    .any(|pattern| {
                        if *pattern == "*/*" {
                            true
                        } else if pattern.ends_with("/*") {
                            let prefix = &pattern[..pattern.len() - 2];
                            mime.starts_with(prefix)
                                && mime.as_bytes().get(prefix.len()) == Some(&b'/')
                        } else {
                            mime == *pattern
                        }
                    });
                if !matched {
                    return Err(::jacquard_lexicon::validation::ConstraintError::BlobMimeTypeNotAccepted {
                        path: ::jacquard_lexicon::validation::ValidationPath::from_field(
                            "sbom_blob",
                        ),
                        accepted: vec!["application/spdx+json".to_string()],
                        actual: mime.to_string(),
                    });
                }
            }
        }
        {
            let value = &self.scanner_version;
            #[allow(unused_comparisons)]
            if <str>::len(value.as_ref()) > 64usize {
                return Err(::jacquard_lexicon::validation::ConstraintError::MaxLength {
                    path: ::jacquard_lexicon::validation::ValidationPath::from_field(
                        "scanner_version",
                    ),
                    max: 64usize,
                    actual: <str>::len(value.as_ref()),
                });
            }
        }
        {
            let value = &self.total;
            if *value < 0i64 {
                return Err(::jacquard_lexicon::validation::ConstraintError::Minimum {
                    path: ::jacquard_lexicon::validation::ValidationPath::from_field(
                        "total",
                    ),
                    min: 0i64,
                    actual: *value,
                });
            }
        }
        if let Some(ref value) = self.vuln_report_blob {
            {
                let mime = value.blob().mime_type.as_str();
                let accepted: &[&str] = &["application/vnd.atcr.vulnerabilities+json"];
                let matched = accepted
                    .iter()
                    .any(|pattern| {
                        if *pattern == "*/*" {
                            true
                        } else if pattern.ends_with("/*") {
                            let prefix = &pattern[..pattern.len() - 2];
                            mime.starts_with(prefix)
                                && mime.as_bytes().get(prefix.len()) == Some(&b'/')
                        } else {
                            mime == *pattern
                        }
                    });
                if !matched {
                    return Err(::jacquard_lexicon::validation::ConstraintError::BlobMimeTypeNotAccepted {
                        path: ::jacquard_lexicon::validation::ValidationPath::from_field(
                            "vuln_report_blob",
                        ),
                        accepted: vec![
                            "application/vnd.atcr.vulnerabilities+json".to_string()
                        ],
                        actual: mime.to_string(),
                    });
                }
            }
        }
        Ok(())
    }
}

fn lexicon_doc_io_atcr_hold_scan() -> ::jacquard_lexicon::lexicon::LexiconDoc<'static> {
    ::jacquard_lexicon::lexicon::LexiconDoc {
        lexicon: ::jacquard_lexicon::lexicon::Lexicon::Lexicon1,
        id: ::jacquard_common::CowStr::new_static("io.atcr.hold.scan"),
        revision: None,
        description: None,
        defs: {
            let mut map = ::alloc::collections::BTreeMap::new();
            map.insert(
                ::jacquard_common::deps::smol_str::SmolStr::new_static("main"),
                ::jacquard_lexicon::lexicon::LexUserType::Record(::jacquard_lexicon::lexicon::LexRecord {
                    description: Some(
                        ::jacquard_common::CowStr::new_static(
                            "Vulnerability scan results for a container manifest. Stored in the hold's embedded PDS. Record key is deterministic: the manifest digest hex without the 'sha256:' prefix, so re-scans upsert the existing record.",
                        ),
                    ),
                    key: Some(::jacquard_common::CowStr::new_static("any")),
                    record: ::jacquard_lexicon::lexicon::LexRecordRecord::Object(::jacquard_lexicon::lexicon::LexObject {
                        description: None,
                        required: Some(
                            vec![
                                ::jacquard_common::deps::smol_str::SmolStr::new_static("manifest"),
                                ::jacquard_common::deps::smol_str::SmolStr::new_static("repository"),
                                ::jacquard_common::deps::smol_str::SmolStr::new_static("userDid"),
                                ::jacquard_common::deps::smol_str::SmolStr::new_static("critical"),
                                ::jacquard_common::deps::smol_str::SmolStr::new_static("high"),
                                ::jacquard_common::deps::smol_str::SmolStr::new_static("medium"),
                                ::jacquard_common::deps::smol_str::SmolStr::new_static("low"),
                                ::jacquard_common::deps::smol_str::SmolStr::new_static("total"),
                                ::jacquard_common::deps::smol_str::SmolStr::new_static("scannerVersion"),
                                ::jacquard_common::deps::smol_str::SmolStr::new_static("scannedAt")
                            ],
                        ),
                        nullable: None,
                        properties: {
                            #[allow(unused_mut)]
                            let mut map = ::alloc::collections::BTreeMap::new();
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "critical",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::Integer(::jacquard_lexicon::lexicon::LexInteger {
                                    description: None,
                                    default: None,
                                    minimum: Some(0i64),
                                    maximum: None,
                                    r#enum: None,
                                    r#const: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "high",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::Integer(::jacquard_lexicon::lexicon::LexInteger {
                                    description: None,
                                    default: None,
                                    minimum: Some(0i64),
                                    maximum: None,
                                    r#enum: None,
                                    r#const: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "low",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::Integer(::jacquard_lexicon::lexicon::LexInteger {
                                    description: None,
                                    default: None,
                                    minimum: Some(0i64),
                                    maximum: None,
                                    r#enum: None,
                                    r#const: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "manifest",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::String(::jacquard_lexicon::lexicon::LexString {
                                    description: Some(
                                        ::jacquard_common::CowStr::new_static(
                                            "AT-URI of the scanned manifest (e.g., at://did:plc:xyz/io.atcr.manifest/abc123...)",
                                        ),
                                    ),
                                    format: Some(
                                        ::jacquard_lexicon::lexicon::LexStringFormat::AtUri,
                                    ),
                                    default: None,
                                    min_length: None,
                                    max_length: None,
                                    min_graphemes: None,
                                    max_graphemes: None,
                                    r#enum: None,
                                    r#const: None,
                                    known_values: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "medium",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::Integer(::jacquard_lexicon::lexicon::LexInteger {
                                    description: None,
                                    default: None,
                                    minimum: Some(0i64),
                                    maximum: None,
                                    r#enum: None,
                                    r#const: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "repository",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::String(::jacquard_lexicon::lexicon::LexString {
                                    description: Some(
                                        ::jacquard_common::CowStr::new_static(
                                            "Repository name (e.g., myapp)",
                                        ),
                                    ),
                                    format: None,
                                    default: None,
                                    min_length: None,
                                    max_length: Some(256usize),
                                    min_graphemes: None,
                                    max_graphemes: None,
                                    r#enum: None,
                                    r#const: None,
                                    known_values: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "sbomBlob",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::Blob(::jacquard_lexicon::lexicon::LexBlob {
                                    description: None,
                                    accept: None,
                                    max_size: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "scannedAt",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::String(::jacquard_lexicon::lexicon::LexString {
                                    description: Some(
                                        ::jacquard_common::CowStr::new_static(
                                            "RFC3339 timestamp of when the scan completed",
                                        ),
                                    ),
                                    format: Some(
                                        ::jacquard_lexicon::lexicon::LexStringFormat::Datetime,
                                    ),
                                    default: None,
                                    min_length: None,
                                    max_length: None,
                                    min_graphemes: None,
                                    max_graphemes: None,
                                    r#enum: None,
                                    r#const: None,
                                    known_values: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "scannerVersion",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::String(::jacquard_lexicon::lexicon::LexString {
                                    description: Some(
                                        ::jacquard_common::CowStr::new_static(
                                            "Version of the scanner that produced this result (e.g., atcr-scanner-v1.0.0)",
                                        ),
                                    ),
                                    format: None,
                                    default: None,
                                    min_length: None,
                                    max_length: Some(64usize),
                                    min_graphemes: None,
                                    max_graphemes: None,
                                    r#enum: None,
                                    r#const: None,
                                    known_values: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "total",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::Integer(::jacquard_lexicon::lexicon::LexInteger {
                                    description: None,
                                    default: None,
                                    minimum: Some(0i64),
                                    maximum: None,
                                    r#enum: None,
                                    r#const: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "userDid",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::String(::jacquard_lexicon::lexicon::LexString {
                                    description: Some(
                                        ::jacquard_common::CowStr::new_static(
                                            "DID of the image owner",
                                        ),
                                    ),
                                    format: Some(
                                        ::jacquard_lexicon::lexicon::LexStringFormat::Did,
                                    ),
                                    default: None,
                                    min_length: None,
                                    max_length: None,
                                    min_graphemes: None,
                                    max_graphemes: None,
                                    r#enum: None,
                                    r#const: None,
                                    known_values: None,
                                }),
                            );
                            map.insert(
                                ::jacquard_common::deps::smol_str::SmolStr::new_static(
                                    "vulnReportBlob",
                                ),
                                ::jacquard_lexicon::lexicon::LexObjectProperty::Blob(::jacquard_lexicon::lexicon::LexBlob {
                                    description: None,
                                    accept: None,
                                    max_size: None,
                                }),
                            );
                            map
                        },
                    }),
                }),
            );
            map
        },
    }
}