/* Opt-in observed-build declarations, not a universal Windows CI SDK.
 * Observed: ci.dll 10.0.26100.8328, x64, SHA-256 documented in docs/mincrypt-contracts.md.
 * Include after ntddk.h. Uses distinct names and function-pointer types so
 * including this file does not change the default layouts or add static imports.
 * Verify the actual CI build/architecture before use; Size alone cannot prove
 * layout identity. See docs/mincrypt-contracts.md for provenance and limits.
 * Field/parameter names are descriptive analyst names unless stated otherwise.
 */
#pragma once

#if !defined(_M_AMD64) && !defined(__x86_64__)
#error This research layout is validated only for x64.
#endif

#pragma pack(push, 8)

typedef struct _DOMITO_CI26100_BLOB
{
    ULONG Size;
    UCHAR* Data;
} DOMITO_CI26100_BLOB;

typedef struct _DOMITO_CI26100_NAME_BLOB
{
    UCHAR* Data;         /* Borrowed, length-delimited encoded bytes. */
    USHORT Size;         /* Bytes, not characters. */
    UCHAR Asn1StringTag; /* Observed: 0x0c UTF8String, 0x1e BMPString. */
} DOMITO_CI26100_NAME_BLOB;

typedef struct _DOMITO_CI26100_CHAIN_ELEMENT
{
    ULONG HashAlgId;
    ULONG HashSize;
    UCHAR Hash[64];
    DOMITO_CI26100_NAME_BLOB Subject;
    DOMITO_CI26100_NAME_BLOB Issuer;
    DOMITO_CI26100_BLOB Certificate;
} DOMITO_CI26100_CHAIN_ELEMENT;

typedef struct _DOMITO_CI26100_CHAIN_INFO
{
    ULONG Size; /* Entire allocation, including trailing data. */
    DOMITO_CI26100_BLOB* PublicKeys;
    ULONG NumberOfPublicKeys;
    DOMITO_CI26100_BLOB* EKUs;
    ULONG NumberOfEKUs;
    DOMITO_CI26100_CHAIN_ELEMENT* ChainElements;
    ULONG NumberOfChainElements;
    ULONG RootId; /* Opaque classification, NOT policy bits. */
    DOMITO_CI26100_BLOB AuthenticodeAttributes;
    UCHAR PlatformManifestBinaryId[32]; /* NOT a file or certificate hash. */
} DOMITO_CI26100_CHAIN_INFO;

typedef struct _DOMITO_CI26100_POLICY_INFO
{
    ULONG Size;
    NTSTATUS VerificationStatus; /* Does not replace the API return status. */
    ULONG PolicyBits;
    DOMITO_CI26100_CHAIN_INFO* ChainInfo;
    LARGE_INTEGER RevocationTime;
    LARGE_INTEGER NotBefore;
    LARGE_INTEGER NotAfter;
} DOMITO_CI26100_POLICY_INFO, *PDOMITO_CI26100_POLICY_INFO;

#pragma pack(pop)

C_ASSERT(sizeof(DOMITO_CI26100_BLOB) == 16);
C_ASSERT(sizeof(DOMITO_CI26100_NAME_BLOB) == 16);
C_ASSERT(
    FIELD_OFFSET(
        DOMITO_CI26100_NAME_BLOB,
        Asn1StringTag
    ) == 10
);
C_ASSERT(sizeof(DOMITO_CI26100_CHAIN_ELEMENT) == 120);
C_ASSERT(
    FIELD_OFFSET(
        DOMITO_CI26100_CHAIN_ELEMENT,
        Certificate
    ) == 104
);
C_ASSERT(
    FIELD_OFFSET(
        DOMITO_CI26100_CHAIN_INFO,
        RootId
    ) == 52
);
C_ASSERT(
    FIELD_OFFSET(
        DOMITO_CI26100_CHAIN_INFO,
        AuthenticodeAttributes
    ) == 56
);
C_ASSERT(
    FIELD_OFFSET(
        DOMITO_CI26100_CHAIN_INFO,
        PlatformManifestBinaryId
    ) == 72
);
C_ASSERT(sizeof(DOMITO_CI26100_CHAIN_INFO) == 104);
C_ASSERT(
    FIELD_OFFSET(
        DOMITO_CI26100_POLICY_INFO,
        ChainInfo
    ) == 16
);
C_ASSERT(
    FIELD_OFFSET(
        DOMITO_CI26100_POLICY_INFO,
        RevocationTime
    ) == 24
);
C_ASSERT(
    FIELD_OFFSET(
        DOMITO_CI26100_POLICY_INFO,
        NotBefore
    ) == 32
);
C_ASSERT(
    FIELD_OFFSET(
        DOMITO_CI26100_POLICY_INFO,
        NotAfter
    ) == 40
);
C_ASSERT(sizeof(DOMITO_CI26100_POLICY_INFO) == 48);

/* Zero-initialize policies before first use. Free existing owned chains before
 * reuse. Never copy these structs as independently owned objects with memcpy.
 * Size is an output/initialization marker here, not runtime ABI negotiation.
 */
typedef VOID(NTAPI* DOMITO_CI26100_FREE_POLICY_INFO)(DOMITO_CI26100_POLICY_INFO* PolicyInfo);

typedef NTSTATUS(NTAPI* DOMITO_CI26100_VALIDATE_FILE_OBJECT)(
    PFILE_OBJECT FileObject,
    ULONG ValidationFlags,
    UCHAR RequestedSigningLevel,
    DOMITO_CI26100_POLICY_INFO* PolicyInfo,
    DOMITO_CI26100_POLICY_INFO* TimeStampPolicyInfo,
    LARGE_INTEGER* SigningTime,
    UCHAR* Hash,     /* Provide 64-byte capacity, even for SHA-1. */
    ULONG* HashSize, /* In: capacity >=64. Out success: actual size. */
    ULONG* HashAlgId
);

typedef NTSTATUS(NTAPI* DOMITO_CI26100_CHECK_SIGNED_FILE)(
    PVOID Hash,
    ULONG HashSize,
    ULONG HashAlgId,
    PVOID WinCertificate, /* WIN_CERTIFICATE header, not bCertificate. */
    ULONG SizeOfSecurityDirectory,
    DOMITO_CI26100_POLICY_INFO* PolicyInfo,
    LARGE_INTEGER* SigningTime,
    DOMITO_CI26100_POLICY_INFO* TimeStampPolicyInfo
);

/* The existing BOOLEAN reload parameter ABI was not independently resolved
 * beyond the full-width use in this build; retain Domito's declaration until
 * cross-architecture call-site evidence settles its formal type.
 * Fifth argument nonzero filters on the catalog TRUSTED marker.
 * Sixth argument requires ANY overlap with catalog PolicyInfo.PolicyBits.
 */
typedef NTSTATUS(NTAPI* DOMITO_CI26100_VERIFY_HASH_IN_CATALOG)(
    PVOID Hash,
    ULONG HashSize,
    ULONG HashAlgId,
    BOOLEAN ReloadCatalogs,
    ULONG RequireTrustedCatalog,
    ULONG AcceptedCatalogPolicyBits,
    DOMITO_CI26100_POLICY_INFO* PolicyInfo,
    UNICODE_STRING* CatalogName, /* Optional; separate RtlFreeUnicodeString. */
    LARGE_INTEGER* SigningTime,
    DOMITO_CI26100_POLICY_INFO* TimeStampPolicyInfo
);

typedef PVOID(NTAPI* DOMITO_CI26100_ALLOCATE)(SIZE_T ByteSize);
typedef NTSTATUS(NTAPI* DOMITO_CI26100_GET_CERT_PUBLISHER_NAME)(
    DOMITO_CI26100_BLOB* Certificate,
    DOMITO_CI26100_ALLOCATE AllocateRoutine,
    UNICODE_STRING* PublisherName
); /* Free with callback's allocator pair. */

/* Proposed descriptive diagnostic names. Not official Microsoft names, not
 * an exhaustive dictionary, and not accepted-input validation flags.
 * See the report for narrower branch conditions and composite values.
 */
#define DOMITO_CI26100_POLICY_SELF_ISSUED_TERMINAL 0x00000001UL
// Also present on rgbMicrosoftRoot4 together with bit 0x800.
#define DOMITO_CI26100_POLICY_MICROSOFT_ROOT_0_1_2 0x00000002UL
#define DOMITO_CI26100_POLICY_TEST_ROOT 0x00000004UL
#define DOMITO_CI26100_POLICY_MICROSOFT_ROOT_3 0x00000008UL
#define DOMITO_CI26100_POLICY_DMD_ROOT 0x00000020UL
#define DOMITO_CI26100_POLICY_DMD_TEST_ROOT 0x00000040UL
#define DOMITO_CI26100_POLICY_MICROSOFT_ROOT_5 0x00000080UL
#define DOMITO_CI26100_POLICY_FLIGHT_ROOT 0x00000400UL
#define DOMITO_CI26100_POLICY_MARKETPLACE_ROOT 0x00002000UL
#define DOMITO_CI26100_POLICY_SUPPLIED_CERT_OR_KEY 0x00004000UL
#define DOMITO_CI26100_POLICY_IDENTITY_ROOT_2020 0x00008000UL
#define DOMITO_CI26100_POLICY_PARTIAL_CHAIN 0x00000010UL
#define DOMITO_CI26100_POLICY_CHAIN_FAILURE 0x00020000UL
#define DOMITO_CI26100_POLICY_CRYPTO_FAILURE 0x00040000UL
#define DOMITO_CI26100_POLICY_EKU_FAILURE 0x00080000UL
#define DOMITO_CI26100_POLICY_PAGE_HASH_FAILURE 0x00100000UL
#define DOMITO_CI26100_POLICY_CERT_REVOKED 0x00200000UL
#define DOMITO_CI26100_POLICY_CERT_VALIDITY_FAILURE 0x00400000UL
#define DOMITO_CI26100_POLICY_PATH_LENGTH_FAILURE 0x08000000UL
#define DOMITO_CI26100_POLICY_GENERIC_FAILURE 0x10000000UL
#define DOMITO_CI26100_POLICY_CA_CONSTRAINT_FAILURE 0x20000000UL

/* Narrow branch observation: no usable timestamp during revoked-cert recovery;
 * not a universal flag for all signatures without a timestamp.
 */
#define DOMITO_CI26100_POLICY_REVOCATION_NO_TIMESTAMP 0x04000000UL