open Hash
module Taler_signatures = Include.Taler_signatures

module Aliases = struct
  module Timestamp = struct
    type t = Time.Timestamp.t

    let bin = Time.Timestamp.bin
  end

  module TimestampNBO = struct
    type t = Time.Timestamp.t

    let bin = Time.Timestamp.bin_nbo
  end

  module TimeRelative = struct
    type t = Time.Relative.t

    let bin = Time.Relative.bin
  end

  module TimeRelativeNBO = struct
    type t = Time.Relative.t

    let bin = Time.Relative.bin_nbo
  end

  module AmountNBO = struct
    type t = Amount.t

    let bin = Amount.bin_nbo
  end

  (* - Keys - *)

  (* TODO keep this?
     some of those are actuall ecdhe, or union of eddsa|ecdhe *)
  open Crypto
  module PursePublicKey = EddsaPublicKey
  module AuditorPublicKeyP = EddsaPublicKey
  module ReservePublicKeyP = EddsaPublicKey
  module MerchantPublicKeyP = EddsaPublicKey
  module TransferPublicKeyP = EddsaPublicKey
  module AmlOfficerPublicKeyP = EddsaPublicKey
  module ExchangePublicKeyP = EddsaPublicKey
  module MasterPublicKeyP = EddsaPublicKey
  module CoinSpendPublicKeyP = EddsaPublicKey
  module TokenPublicKeyP = EddsaPublicKey
  module ReservePrivateKeyP = EddsaPrivateKey
  module MerchantPrivateKeyP = EddsaPrivateKey
  module TransferPrivateKeyP = EddsaPrivateKey
  module AmlOfficerPrivateKeyP = EddsaPrivateKey
  module ExchangePrivateKeyP = EddsaPrivateKey
  module MasterPrivateKeyP = EddsaPrivateKey
  module CoinSpendPrivateKeyP = EddsaPrivateKey
  module MasterSignatureP = EddsaSignature
  module ReserveSignatureP = EddsaSignature
  module ExchangeSignatureP = EddsaSignature
  module CoinSpendSignatureP = EddsaSignature
end

open Aliases

let int32_size = 4
let int64_size = 8

module Bytes32 = struct
  type t = string

  let bin = Bin.bytes 32
end

module Bytes64 = struct
  type t = string

  let bin = Bin.bytes 64
end

module TransferSecretP = Bytes64
module LinkSecretP = Bytes64
module EncryptedLinkSecretP = Bytes64
module BlindingMasterSeed = Bytes32
module BlindingMasterSecret = Bytes32
module WireTransferIdentifierRawP = Bytes32
module PublicRefreshCoinNonceP = Bytes64
module DenominationBlindingKeyP = Bytes32
module RefreshCommitmentP = Bytes64

module UUID = struct
  type t = string

  let size = 4 * int32_size
  let bin = Bin.bytes size
end

module WadId = struct
  type t = string

  let size = 6 * int32_size
  let bin = Bin.bytes size
end

module AgeMask = struct
  type t = int32

  let bin = Bin.beint32
end

(* --- *)

(* EccSignaturePurpose *)
module Purpose = struct
  type t = {
    size: int32;
    purpose: int32;
  }

  let bin =
    let open Bin in
    record (fun size purpose -> { size; purpose })
    |+ field beint32 (fun t -> t.size)
    |+ field beint32 (fun t -> t.purpose)
    |> sealr

  let make ~size purpose = { size= Int32.of_int size; purpose }
  let dummy = make ~size:0 0_l

  (* helper function to make ['signature Bin.t]
     to compute [t.size], we first build a bin with a dummy purpose *)
  let make_bin =
    let get_size f =
      let open Bin in
      match Size.of_value (Size.size_of (f dummy)) with
      | Dynamic _ | Unknown ->
          Fmt.failwith "size_of failure: size is not Static"
      | Static n -> n
    in
    fun code f -> make ~size:(get_size f) code |> f

  let field purpose = Bin.field bin (fun _t -> purpose)
end

(* --- Packed Signatures --- *)

module MK (R : sig
  type r

  val bin : r Bin.t
end) : sig
  open Crypto

  type r = R.r
  type t

  val sign_f : f:(string -> eddsa_sig) -> r -> t

  val verify_f :
    f:(eddsa_sig -> msg:string -> (unit, string) result) ->
    t ->
    r ->
    (unit, string) result

  val jsont : t Jsont.t
  val caqti : t Caqti_type.t

  (* TODO rm *)
  (* escape hatch, only needed for /keys `exchange_sig` (signature over contatentation of all of the master_sigs) *)
  val to_octets : t -> string
end = struct
  open Crypto

  type r = R.r
  type t = EddsaSignature.t

  let sign_f ~f r = f (Bin.to_string R.bin r)
  let verify_f ~f t r = f t ~msg:(Bin.to_string R.bin r)
  let jsont = EddsaSignature.jsont
  let caqti : EddsaSignature.t Caqti_type.t = EddsaSignature.caqti
  let to_octets t = EddsaSignature.to_octets t
end

module DenominationKeyAnnouncement = struct
  module R = struct
    (* TODO taler_signatures purpose
     we use TALER_SIGNATURE_SM_RSA_DENOMINATION_KEY instead here *)
    (* purpose.purpose = TALER_SIGNATURE_SM_DENOMINATION_KEY *)
    type r = {
      h_denom_pub: DenominationHash.t;
      h_section_name: Hash.Cstring.H64.t;
      anchor_time: TimestampNBO.t;
      duration_withdraw: TimeRelativeNBO.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.sm_rsa_denomination_key
      @@ fun purpose ->
      record
        (fun
          _purpose h_denom_pub h_section_name anchor_time duration_withdraw ->
          { h_denom_pub; h_section_name; anchor_time; duration_withdraw })
      |+ Purpose.field purpose
      |+ field DenominationHash.bin (fun t -> t.h_denom_pub)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_section_name)
      |+ field TimestampNBO.bin (fun t -> t.anchor_time)
      |+ field TimeRelativeNBO.bin (fun t -> t.duration_withdraw)
      |> sealr
  end

  include R
  include MK (R)
end

module SigningKeyAnnouncement = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_SM_SIGNING_KEY *)
    type r = {
      exchange_pub: ExchangePublicKeyP.t;
      anchor_time: TimestampNBO.t;
      duration: TimeRelativeNBO.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.sm_signing_key @@ fun purpose ->
      record (fun _purpose exchange_pub anchor_time duration ->
          { exchange_pub; anchor_time; duration })
      |+ Purpose.field purpose
      |+ field ExchangePublicKeyP.bin (fun t -> t.exchange_pub)
      |+ field TimestampNBO.bin (fun t -> t.anchor_time)
      |+ field TimeRelativeNBO.bin (fun t -> t.duration)
      |> sealr
  end

  include R
  include MK (R)
end

module DenominationKeyValidity = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_DENOMINATION_KEY_VALIDITY *)
    type r = {
      master: MasterPublicKeyP.t;
      start: TimestampNBO.t;
      expire_withdraw: TimestampNBO.t;
      expire_spend: TimestampNBO.t;
      expire_legal: TimestampNBO.t;
      value: AmountNBO.t;
      fee_withdraw: AmountNBO.t;
      fee_deposit: AmountNBO.t;
      fee_refresh: AmountNBO.t;
      denom_hash: DenominationHash.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_denomination_key_validity
      @@ fun purpose ->
      record
        (fun
          _purpose
          master
          start
          expire_withdraw
          expire_spend
          expire_legal
          value
          fee_withdraw
          fee_deposit
          fee_refresh
          denom_hash
        ->
          {
            master;
            start;
            expire_withdraw;
            expire_spend;
            expire_legal;
            value;
            fee_withdraw;
            fee_deposit;
            fee_refresh;
            denom_hash;
          })
      |+ Purpose.field purpose
      |+ field MasterPublicKeyP.bin (fun t -> t.master)
      |+ field TimestampNBO.bin (fun t -> t.start)
      |+ field TimestampNBO.bin (fun t -> t.expire_withdraw)
      |+ field TimestampNBO.bin (fun t -> t.expire_spend)
      |+ field TimestampNBO.bin (fun t -> t.expire_legal)
      |+ field AmountNBO.bin (fun t -> t.value)
      |+ field AmountNBO.bin (fun t -> t.fee_withdraw)
      |+ field AmountNBO.bin (fun t -> t.fee_deposit)
      |+ field AmountNBO.bin (fun t -> t.fee_refresh)
      |+ field DenominationHash.bin (fun t -> t.denom_hash)
      |> sealr
  end

  include R
  include MK (R)
end

module ExchangeSigningKeyValidity = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_SIGNING_KEY_VALIDITY *)
    type r = {
      start: TimestampNBO.t;
      expire: TimestampNBO.t;
      end_: TimestampNBO.t;
      signkey_pub: ExchangePublicKeyP.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_signing_key_validity
      @@ fun purpose ->
      record (fun _purpose start expire end_ signkey_pub ->
          { start; expire; end_; signkey_pub })
      |+ Purpose.field purpose
      |+ field TimestampNBO.bin (fun t -> t.start)
      |+ field TimestampNBO.bin (fun t -> t.expire)
      |+ field TimestampNBO.bin (fun t -> t.end_)
      |+ field ExchangePublicKeyP.bin (fun t -> t.signkey_pub)
      |> sealr
  end

  include R
  include MK (R)
end

module MasterDenominationKeyRevocation = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_DENOMINATION_KEY_REVOKED. *)
    type r = { h_denom_pub: DenominationHash.t }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_denomination_key_revoked
      @@ fun purpose ->
      record (fun _purpose h_denom_pub -> { h_denom_pub })
      |+ Purpose.field purpose
      |+ field DenominationHash.bin (fun t -> t.h_denom_pub)
      |> sealr
  end

  include R
  include MK (R)
end

module MasterSigningKeyRevocation = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_SIGNING_KEY_REVOKED *)
    type r = { exchange_pub: ExchangePublicKeyP.t }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_signing_key_revoked
      @@ fun purpose ->
      record (fun _purpose exchange_pub -> { exchange_pub })
      |+ Purpose.field purpose
      |+ field ExchangePublicKeyP.bin (fun t -> t.exchange_pub)
      |> sealr
  end

  include R
  include MK (R)
end

module MasterAddAuditor = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_ADD_AUDITOR *)
    type r = {
      start_date: TimestampNBO.t;
      auditor_pub: AuditorPublicKeyP.t;
      h_auditor_url: Hash.Cstring.H64.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_add_auditor @@ fun purpose ->
      record (fun _purpose start_date auditor_pub h_auditor_url ->
          { start_date; auditor_pub; h_auditor_url })
      |+ Purpose.field purpose
      |+ field TimestampNBO.bin (fun t -> t.start_date)
      |+ field AuditorPublicKeyP.bin (fun t -> t.auditor_pub)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_auditor_url)
      |> sealr
  end

  include R
  include MK (R)
end

module MasterDelAuditor = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_DEL_AUDITOR *)
    type r = {
      end_date: TimestampNBO.t;
      auditor_pub: AuditorPublicKeyP.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_del_auditor @@ fun purpose ->
      record (fun _purpose end_date auditor_pub -> { end_date; auditor_pub })
      |+ Purpose.field purpose
      |+ field TimestampNBO.bin (fun t -> t.end_date)
      |+ field AuditorPublicKeyP.bin (fun t -> t.auditor_pub)
      |> sealr
  end

  include R
  include MK (R)
end

module GlobalFees = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_GLOBAL_FEES *)
    type r = {
      start_date: TimestampNBO.t;
      end_date: TimestampNBO.t;
      purse_timeout: TimeRelativeNBO.t;
      kyc_timeout: TimeRelativeNBO.t;
      history_expiration: TimeRelativeNBO.t;
      history_fee: AmountNBO.t;
      kyc_fee: AmountNBO.t;
      account_fee: AmountNBO.t;
      purse_fee: AmountNBO.t;
      purse_account_limit: int32;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_global_fees @@ fun purpose ->
      record
        (fun
          _purpose
          start_date
          end_date
          purse_timeout
          kyc_timeout
          history_expiration
          history_fee
          kyc_fee
          account_fee
          purse_fee
          purse_account_limit
        ->
          {
            start_date;
            end_date;
            purse_timeout;
            kyc_timeout;
            history_expiration;
            history_fee;
            kyc_fee;
            account_fee;
            purse_fee;
            purse_account_limit;
          })
      |+ Purpose.field purpose
      |+ field TimestampNBO.bin (fun t -> t.start_date)
      |+ field TimestampNBO.bin (fun t -> t.end_date)
      |+ field TimeRelativeNBO.bin (fun t -> t.purse_timeout)
      |+ field TimeRelativeNBO.bin (fun t -> t.kyc_timeout)
      |+ field TimeRelativeNBO.bin (fun t -> t.history_expiration)
      |+ field AmountNBO.bin (fun t -> t.history_fee)
      |+ field AmountNBO.bin (fun t -> t.kyc_fee)
      |+ field AmountNBO.bin (fun t -> t.account_fee)
      |+ field AmountNBO.bin (fun t -> t.purse_fee)
      |+ field beint32 (fun t -> t.purse_account_limit)
      |> sealr
  end

  include R
  include MK (R)
end

module MasterWireDetails = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_WIRE_DETAILS *)
    type r = {
      h_wire_details: FullPaytoHash.t;
      h_conversion_url: Hash.Cstring.H64.t;
      h_credit_restrictions: Hash.Cstring.H64.t;
      h_debit_restrictions: Hash.Cstring.H64.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_wire_details @@ fun purpose ->
      record
        (fun
          _purpose
          h_wire_details
          h_conversion_url
          h_credit_restrictions
          h_debit_restrictions
        ->
          {
            h_wire_details;
            h_conversion_url;
            h_credit_restrictions;
            h_debit_restrictions;
          })
      |+ Purpose.field purpose
      |+ field FullPaytoHash.bin (fun t -> t.h_wire_details)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_conversion_url)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_credit_restrictions)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_debit_restrictions)
      |> sealr
  end

  include R
  include MK (R)
end

module MasterAddWire = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_ADD_WIRE *)
    type r = {
      start_date: TimestampNBO.t;
      h_wire: FullPaytoHash.t;
      h_conversion_url: Hash.Cstring.H64.t;
      h_credit_restrictions: Hash.Cstring.H64.t;
      h_debit_restrictions: Hash.Cstring.H64.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_add_wire @@ fun _purpose ->
      record
        (fun
          _purpose
          start_date
          h_wire
          h_conversion_url
          h_credit_restrictions
          h_debit_restrictions
        ->
          {
            start_date;
            h_wire;
            h_conversion_url;
            h_credit_restrictions;
            h_debit_restrictions;
          })
      |+ Purpose.field _purpose
      |+ field TimestampNBO.bin (fun t -> t.start_date)
      |+ field FullPaytoHash.bin (fun t -> t.h_wire)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_conversion_url)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_credit_restrictions)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_debit_restrictions)
      |> sealr
  end

  include R
  include MK (R)
end

module MasterDelWire = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_DEL_WIRE *)
    type r = {
      end_date: TimestampNBO.t;
      h_wire: FullPaytoHash.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_del_wire @@ fun _purpose ->
      record (fun _purpose end_date h_wire -> { end_date; h_wire })
      |+ Purpose.field _purpose
      |+ field TimestampNBO.bin (fun t -> t.end_date)
      |+ field FullPaytoHash.bin (fun t -> t.h_wire)
      |> sealr
  end

  include R
  include MK (R)
end

module MasterDrainProfit = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_DRAIN_PROFITS *)
    type r = {
      wtid: WireTransferIdentifierRawP.t;
      date: TimestampNBO.t;
      amount: AmountNBO.t;
      h_section: Hash.Cstring.H64.t;
      h_payto: FullPaytoHash.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_drain_profit @@ fun _purpose ->
      record (fun _purpose wtid date amount h_section h_payto ->
          { wtid; date; amount; h_section; h_payto })
      |+ Purpose.field _purpose
      |+ field WireTransferIdentifierRawP.bin (fun t -> t.wtid)
      |+ field TimestampNBO.bin (fun t -> t.date)
      |+ field AmountNBO.bin (fun t -> t.amount)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_section)
      |+ field FullPaytoHash.bin (fun t -> t.h_payto)
      |> sealr
  end

  include R
  include MK (R)
end

module MasterAmlOfficerStatus = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_AML_KEY *)
    type r = {
      change_date: TimestampNBO.t;
      officer_pub: AmlOfficerPublicKeyP.t;
      h_officer_name: Hash.Cstring.H64.t;
      is_active: int32;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_aml_key @@ fun _purpose ->
      record (fun _purpose change_date officer_pub h_officer_name is_active ->
          { change_date; officer_pub; h_officer_name; is_active })
      |+ Purpose.field _purpose
      |+ field TimestampNBO.bin (fun t -> t.change_date)
      |+ field AmlOfficerPublicKeyP.bin (fun t -> t.officer_pub)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_officer_name)
      |+ field beint32 (fun t -> t.is_active)
      |> sealr
  end

  include R
  include MK (R)
end

module PartnerConfiguration = struct
  module R = struct
    (* TODO purpose
       this purpose is used 2 times!? *)
    (* purpose.purpose = TALER_SIGNATURE_MASTER_PARNTER_DETAILS *)
    type r = {
      partner_pub: MasterPublicKeyP.t;
      start_date: TimestampNBO.t;
      end_date: TimestampNBO.t;
      wad_frequency: TimeRelativeNBO.t;
      wad_fee: AmountNBO.t;
      h_url: Hash.Cstring.H64.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_partner_details
      @@ fun _purpose ->
      record
        (fun
          _purpose
          partner_pub
          start_date
          end_date
          wad_frequency
          wad_fee
          h_url
        -> { partner_pub; start_date; end_date; wad_frequency; wad_fee; h_url })
      |+ Purpose.field _purpose
      |+ field MasterPublicKeyP.bin (fun t -> t.partner_pub)
      |+ field TimestampNBO.bin (fun t -> t.start_date)
      |+ field TimestampNBO.bin (fun t -> t.end_date)
      |+ field TimeRelativeNBO.bin (fun t -> t.wad_frequency)
      |+ field AmountNBO.bin (fun t -> t.wad_fee)
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_url)
      |> sealr
  end

  include R
  include MK (R)
end

module WadPartnerSignature = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_PARTNER_DETAILS *)
    type r = {
      h_partner_base_url: Hash.Cstring.H64.t;
      master_public_key: MasterPublicKeyP.t;
      start_date: TimestampNBO.t;
      end_date: TimestampNBO.t;
      wad_fee: AmountNBO.t;
      wad_frequency: TimeRelativeNBO.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_partner_details
      @@ fun _purpose ->
      record
        (fun
          _purpose
          h_partner_base_url
          master_public_key
          start_date
          end_date
          wad_fee
          wad_frequency
        ->
          {
            h_partner_base_url;
            master_public_key;
            start_date;
            end_date;
            wad_fee;
            wad_frequency;
          })
      |+ Purpose.field _purpose
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_partner_base_url)
      |+ field MasterPublicKeyP.bin (fun t -> t.master_public_key)
      |+ field TimestampNBO.bin (fun t -> t.start_date)
      |+ field TimestampNBO.bin (fun t -> t.end_date)
      |+ field AmountNBO.bin (fun t -> t.wad_fee)
      |+ field TimeRelativeNBO.bin (fun t -> t.wad_frequency)
      |> sealr
  end

  include R
  include MK (R)
end

module MasterWireFee = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_MASTER_WIRE_FEES *)
    type r = {
      h_wire_method: Hash.Cstring.H64.t;
      start_date: TimestampNBO.t;
      end_date: TimestampNBO.t;
      wire_fee: AmountNBO.t;
      closing_fee: AmountNBO.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.master_wire_fees @@ fun _purpose ->
      record
        (fun _purpose h_wire_method start_date end_date wire_fee closing_fee ->
          { h_wire_method; start_date; end_date; wire_fee; closing_fee })
      |+ Purpose.field _purpose
      |+ field Hash.Cstring.H64.bin (fun t -> t.h_wire_method)
      |+ field TimestampNBO.bin (fun t -> t.start_date)
      |+ field TimestampNBO.bin (fun t -> t.end_date)
      |+ field AmountNBO.bin (fun t -> t.wire_fee)
      |+ field AmountNBO.bin (fun t -> t.closing_fee)
      |> sealr
  end

  include R
  include MK (R)
end

module ExchangeKeyValidity = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_AUDITOR_EXCHANGE_KEYS *)
    type r = {
      auditor_url_hash: Hash.Cstring.H64.t;
      master: MasterPublicKeyP.t;
      start: TimestampNBO.t;
      expire_withdraw: TimestampNBO.t;
      expire_spend: TimestampNBO.t;
      expire_legal: TimestampNBO.t;
      value: AmountNBO.t;
      fee_withdraw: AmountNBO.t;
      fee_deposit: AmountNBO.t;
      fee_refresh: AmountNBO.t;
      denom_hash: DenominationHash.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.auditor_exchange_keys @@ fun _purpose ->
      record
        (fun
          _purpose
          auditor_url_hash
          master
          start
          expire_withdraw
          expire_spend
          expire_legal
          value
          fee_withdraw
          fee_deposit
          fee_refresh
          denom_hash
        ->
          {
            auditor_url_hash;
            master;
            start;
            expire_withdraw;
            expire_spend;
            expire_legal;
            value;
            fee_withdraw;
            fee_deposit;
            fee_refresh;
            denom_hash;
          })
      |+ Purpose.field _purpose
      |+ field Hash.Cstring.H64.bin (fun t -> t.auditor_url_hash)
      |+ field MasterPublicKeyP.bin (fun t -> t.master)
      |+ field TimestampNBO.bin (fun t -> t.start)
      |+ field TimestampNBO.bin (fun t -> t.expire_withdraw)
      |+ field TimestampNBO.bin (fun t -> t.expire_spend)
      |+ field TimestampNBO.bin (fun t -> t.expire_legal)
      |+ field AmountNBO.bin (fun t -> t.value)
      |+ field AmountNBO.bin (fun t -> t.fee_withdraw)
      |+ field AmountNBO.bin (fun t -> t.fee_deposit)
      |+ field AmountNBO.bin (fun t -> t.fee_refresh)
      |+ field DenominationHash.bin (fun t -> t.denom_hash)
      |> sealr
  end

  include R
  include MK (R)
end

module ExchangeKeySet = struct
  module R = struct
    (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_KEY_SET *)
    type r = {
      list_issue_date: TimestampNBO.t;
      (* hash over a concatenation of master_sigs *)
      hc: H64.t;
    }

    let bin =
      let open Bin in
      Purpose.make_bin Taler_signatures.exchange_key_set @@ fun _purpose ->
      record (fun _purpose list_issue_date hc -> { list_issue_date; hc })
      |+ Purpose.field _purpose
      |+ field TimestampNBO.bin (fun t -> t.list_issue_date)
      |+ field H64.bin (fun t -> t.hc)
      |> sealr
  end

  include R
  include MK (R)
end

(* ### BIN IMPL END ### *)

module WithdrawRequest = struct
  (* Purpose is #TALER_SIGNATURE_WALLET_RESERVE_WITHDRAW *)
  type t = {
    amount: Amount.t;
    fee: Amount.t;
    h_planchets: HashPlanchetsP.t;
    blinding_seed: BlindingMasterSecret.t;
    max_age_group: int32;
    mask: AgeMask.t;
  }

  let bin =
    let open Bin in
    Purpose.make_bin Taler_signatures.wallet_reserve_withdraw @@ fun purpose ->
    record
      (fun _purpose amount fee h_planchets blinding_seed max_age_group mask ->
        { amount; fee; h_planchets; blinding_seed; max_age_group; mask })
    |+ Purpose.field purpose
    |+ field Amount.bin (fun t -> t.amount)
    |+ field Amount.bin (fun t -> t.fee)
    |+ field HashPlanchetsP.bin (fun t -> t.h_planchets)
    |+ field BlindingMasterSecret.bin (fun t -> t.blinding_seed)
    |+ field beint32 (fun t -> t.max_age_group)
    |+ field AgeMask.bin (fun t -> t.mask)
    |> sealr
end

module WithdrawConfirmation = struct
  (* Purpose is #TALER_SIGNATURE_EXCHANGE_CONFIRM_WITHDRAW.
     Signed by a `struct TALER_ExchangePrivateKeyP` using EdDSA. *)
  type t = {
    (* TODO TALER doc
       missing TALER_HashBlindedPlanchetsP*)
    h_planchets: HashPlanchetsP.t;
    noreveal_index: int32;
  }

  let bin =
    let open Bin in
    Purpose.make_bin Taler_signatures.exchange_confirm_withdraw
    @@ fun purpose ->
    record (fun _purpose h_planchets noreveal_index ->
        { h_planchets; noreveal_index })
    |+ Purpose.field purpose
    |+ field HashPlanchetsP.bin (fun t -> t.h_planchets)
    |+ field beint32 (fun t -> t.noreveal_index)
    |> sealr
end

module SingleWithdrawRequest = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_RESERVE_WITHDRAW *)
  type t = {
    amount_with_fee: AmountNBO.t;
    h_denomination_pub: DenominationHash.t;
    h_coin_envelope: BlindedCoinHash.t;
  }
end

module DepositRequest = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_COIN_DEPOSIT *)
  type t = {
    h_contract_terms: PrivateContractHash.t;
    h_age_commitment: AgeCommitmentHash.t;
    h_policy: ExtensionsPolicyHash.t;
    h_wire: MerchantWireHash.t;
    h_denom_pub: DenominationHash.t;
    timestamp: TimestampNBO.t;
    refund_deadline: TimestampNBO.t;
    amount_with_fee: AmountNBO.t;
    deposit_fee: AmountNBO.t;
    merchant: MerchantPublicKeyP.t;
    wallet_data_hash: Hash.Cstring.H64.t;
  }
end

module DepositConfirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_CONFIRM_DEPOSIT *)
  type t = {
    h_contract_terms: PrivateContractHash.t;
    h_wire: MerchantWireHash.t;
    h_policy: ExtensionsPolicyHash.t;
    timestamp: TimestampNBO.t;
    refund_deadline: TimestampNBO.t;
    amount_without_fee: AmountNBO.t;
    coin_pub: CoinSpendPublicKeyP.t;
    merchant: MerchantPublicKeyP.t;
  }
end

module RefreshMeltCoinAffirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_COIN_MELT *)
  type t = {
    session_hash: RefreshCommitmentP.t;
    h_denom_pub: DenominationHash.t;
    h_age_commitment: AgeCommitmentHash.t;
    amount_with_fee: AmountNBO.t;
    melt_fee: AmountNBO.t;
  }
end

module RefreshMeltConfirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_CONFIRM_MELT *)
  type t = {
    session_hash: RefreshCommitmentP.t;
    noreveal_index: int; (* uint16_t mapped to OCaml int *)
  }
end

module DepositTrack = struct
  (* purpose.purpose = TALER_SIGNATURE_MERCHANT_TRACK_TRANSACTION *)
  type t = {
    h_contract_terms: PrivateContractHash.t;
    h_wire: MerchantWireHash.t;
    coin_pub: CoinSpendPublicKeyP.t;
  }
end

module WireDepositDetailP = struct
  type t = {
    h_contract_terms: PrivateContractHash.t;
    execution_time: TimestampNBO.t;
    coin_pub: CoinSpendPublicKeyP.t;
    deposit_value: AmountNBO.t;
    deposit_fee: AmountNBO.t;
  }
end

module WireDepositData = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_CONFIRM_WIRE_DEPOSIT *)
  type t = {
    total: AmountNBO.t;
    wire_fee: AmountNBO.t;
    merchant_pub: MerchantPublicKeyP.t;
    h_wire: MerchantWireHash.t;
    h_details: Hash.Cstring.H64.t;
  }
end

module PaymentResponse = struct
  (* purpose.purpose = TALER_SIGNATURE_MERCHANT_PAYMENT_OK *)
  type t = { h_contract_terms: PrivateContractHash.t }
end

module Contract = struct
  (* purpose.purpose = TALER_SIGNATURE_MERCHANT_CONTRACT *)
  type t = { h_contract_terms: PrivateContractHash.t }
end

module ConfirmWire = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_CONFIRM_WIRE *)
  type t = {
    h_wire: MerchantWireHash.t;
    h_contract_terms: PrivateContractHash.t;
    wtid: WireTransferIdentifierRawP.t;
    coin_pub: CoinSpendPublicKeyP.t;
    execution_time: TimestampNBO.t;
    coin_contribution: AmountNBO.t;
  }
end

module RefundConfirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_CONFIRM_REFUND *)
  type t = {
    h_contract_terms: PrivateContractHash.t;
    coin_pub: CoinSpendPublicKeyP.t;
    merchant: MerchantPublicKeyP.t;
    rtransaction_id: int64;
    refund_amount: AmountNBO.t;
  }
end

module DepositTrackPS2 = struct
  (* purpose.purpose = TALER_SIGNATURE_MERCHANT_TRACK_TRANSACTION *)
  type t = {
    h_contract_terms: PrivateContractHash.t;
    h_wire: MerchantWireHash.t;
    merchant: MerchantPublicKeyP.t;
    coin_pub: CoinSpendPublicKeyP.t;
  }
end

module RefundRequest = struct
  (* purpose.purpose = TALER_SIGNATURE_MERCHANT_REFUND *)
  type t = {
    h_contract_terms: PrivateContractHash.t;
    coin_pub: CoinSpendPublicKeyP.t;
    rtransaction_id: int64;
    refund_amount: AmountNBO.t;
    refund_fee: AmountNBO.t;
  }
end

module MerchantRefundConfirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_MERCHANT_REFUND_OK *)
  (* Hash of the order ID (a string), hashed without the 0-termination. *)
  type t = { h_order_id: Hash.Cstring.H64.t }
end

module RecoupRequest = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_COIN_RECOUP or TALER_SIGNATURE_WALLET_COIN_RECOUP_REFRESH *)
  type t = {
    h_denom_pub: DenominationHash.t;
    coin_blind: DenominationBlindingKeyP.t;
  }
end

module RecoupRefreshConfirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_CONFIRM_RECOUP_REFRESH *)
  type t = {
    timestamp: TimestampNBO.t;
    recoup_amount: AmountNBO.t;
    coin_pub: CoinSpendPublicKeyP.t;
    old_coin_pub: CoinSpendPublicKeyP.t;
  }
end

module RecoupConfirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_CONFIRM_RECOUP *)
  type t = {
    timestamp: TimestampNBO.t;
    recoup_amount: AmountNBO.t;
    coin_pub: CoinSpendPublicKeyP.t;
    reserve_pub: ReservePublicKeyP.t;
  }
end

module DenominationUnknownAffirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_AFFIRM_DENOM_UNKNOWN *)
  type t = {
    timestamp: TimestampNBO.t;
    h_denom_pub: DenominationHash.t;
  }
end

module DenominationExpiredAffirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_GENERIC_DENOMINATIN_EXPIRED *)
  type t = {
    timestamp: TimestampNBO.t;
    operation: string; (* char[8] → string *)
    h_denom_pub: DenominationHash.t;
  }
end

module ReserveCloseConfirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_RESERVE_CLOSED *)
  type t = {
    timestamp: TimestampNBO.t;
    closing_amount: AmountNBO.t;
    reserve_pub: ReservePublicKeyP.t;
    h_wire: FullPaytoHash.t;
  }
end

module CoinLinkSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_COIN_LINK *)
  type t = {
    h_denom_pub: DenominationHash.t;
    old_coin_pub: CoinSpendPublicKeyP.t;
    transfer_pub: TransferPublicKeyP.t;
    coin_envelope_hash: BlindedCoinHash.t;
  }
end

module RefreshNonceSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_COIN_LINK *)
  type t = { nonce: PublicRefreshCoinNonceP.t }
end

module ReserveStatusRequestSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_RESERVE_STATUS_REQUEST *)
  type t = { request_timestamp: TimestampNBO.t }
end

module ReserveHistoryRequestSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_RESERVE_HISTORY_REQUEST *)
  type t = {
    history_fee: AmountNBO.t;
    request_timestamp: TimestampNBO.t;
  }
end

module PurseStatusRequestSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_PURSE_STATUS_REQUEST *)
  type t = unit
end

module PurseStatusResponseSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_PURSE_STATUS_RESPONSE *)
  type t = {
    total_purse_amount: AmountNBO.t;
    total_deposit_amount: AmountNBO.t;
    max_deposit_fees: AmountNBO.t;
    purse_expiration: TimestampNBO.t;
    status_timestamp: TimestampNBO.t;
    h_contract_terms: PrivateContractHash.t;
  }
end

module ReserveCloseRequestSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_RESERVE_CLOSE *)
  type t = unit
end

module PurseRequestSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_PURSE_CREATE *)
  type t = {
    purse_expiration: TimestampNBO.t;
    merge_value_after_fees: AmountNBO.t;
    h_contract_terms: PrivateContractHash.t;
    min_age: int;
  }
end

module PurseDepositSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_PURSE_DEPOSIT *)
  type t = {
    coin_contribution: AmountNBO.t;
    h_denom_pub: DenominationHash.t;
    h_age_commitment: AgeCommitmentHash.t;
    purse_pub: PursePublicKey.t;
    h_exchange_base_url: Hash.Cstring.H64.t;
  }
end

module PurseDepositSignaturePS2 = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_RESERVE_OPEN_DEPOSIT *)
  type t = {
    reserve_sig: ReserveSignatureP.t;
    coin_contribution: AmountNBO.t;
  }
end

module PurseDepositConfirmedSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_PURSE_DEPOSIT_CONFIRMED *)
  type t = {
    total_purse_amount: AmountNBO.t;
    total_deposit_fees: AmountNBO.t;
    purse_pub: PursePublicKey.t;
    purse_expiration: TimestampNBO.t;
    h_contract_terms: PrivateContractHash.t;
  }
end

module PurseMergeSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_PURSE_MERGE *)
  type t = {
    merge_timestamp: TimestampNBO.t;
    h_wire: NormalizedPaytoHash.t;
  }
end

module AccountMergeSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_ACCOUNT_MERGE *)
  type t = {
    reserve_pub: ReservePublicKeyP.t;
    purse_pub: PursePublicKey.t;
    merge_amount_after_fees: AmountNBO.t;
    merge_timestamp: TimestampNBO.t;
    purse_expiration: TimestampNBO.t;
    h_contract_terms: PrivateContractHash.t;
    min_age: int;
  }
end

module AccountSetupRequestSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_ACCOUNT_SETUP *)
  type t = { threshold: AmountNBO.t }
end

module PurseMergeSuccessSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_PURSE_MERGE_SUCCESS *)
  type t = {
    reserve_pub: ReservePublicKeyP.t;
    purse_pub: PursePublicKey.t;
    merge_amount_after_fees: AmountNBO.t;
    contract_time: TimestampNBO.t;
    h_contract_terms: PrivateContractHash.t;
    h_wire: NormalizedPaytoHash.t;
    min_age: int;
  }
end

module WadDataSignature = struct
  (* purpose.purpose = TALER_SIGNATURE_WAD_DATA *)
  type t = {
    wad_execution_time: TimestampNBO.t;
    total_amount: AmountNBO.t;
    h_items: Hash.Cstring.H64.t;
    wad_id: WadId.t;
  }
end

module P2PFees = struct
  (* purpose.purpose = TALER_SIGNATURE_P2P_FEES *)
  type t = {
    start_date: TimestampNBO.t;
    end_date: TimestampNBO.t;
    kyc_fee: AmountNBO.t;
    purse_fee: AmountNBO.t;
    account_history_fee: AmountNBO.t;
    account_annual_fee: AmountNBO.t;
    account_kyc_timeout: TimeRelativeNBO.t;
    purse_timeout: TimeRelativeNBO.t;
    purse_account_limit: int;
  }
end

module CoinPurseRefundConfirmation = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_CONFIRM_PURSE_REFUND *)
  type t = {
    purse_pub: PursePublicKey.t;
    coin_pub: CoinSpendPublicKeyP.t;
    refunded_amount: AmountNBO.t;
    refund_fee: AmountNBO.t;
  }
end

module AmlDecision = struct
  (* purpose.purpose = TALER_SIGNATURE_AML_DECISION *)
  type t = {
    h_justification: Hash.Cstring.H64.t;
    decision_time: TimestampNBO.t;
    new_threshold: AmountNBO.t;
    h_payto: NormalizedPaytoHash.t;
    h_kyc_requirements: Hash.Cstring.H64.t;
    new_state: int;
  }
end

module ReserveOpen = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_RESERVE_OPEN *)
  type t = {
    reserve_payment: AmountNBO.t;
    request_timestamp: TimestampNBO.t;
    reserve_expiration: TimestampNBO.t;
    purse_limit: int;
  }
end

module ReserveClose = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_RESERVE_CLOSE *)
  type t = {
    request_timestamp: TimestampNBO.t;
    target_account_h_payto: FullPaytoHash.t;
  }
end

module ReserveAttestRequest = struct
  (* purpose.purpose = TALER_SIGNATURE_WALLET_ATTEST_REQUEST *)
  type t = {
    request_timestamp: TimestampNBO.t;
    h_details: Hash.Cstring.H64.t;
  }
end

module ExchangeAttest = struct
  (* purpose.purpose = TALER_SIGNATURE_EXCHANGE_RESERVE_ATTEST_DETAILS *)
  type t = {
    attest_timestamp: TimestampNBO.t;
    expiration_time: TimestampNBO.t;
    reserve_pub: ReservePublicKeyP.t;
    h_attributes: Hash.Cstring.H64.t;
  }
end