service

type ACMEService struct {
	// contains filtered or unexported fields
}

type AttestRequest struct {
	Nonce    string
	Secret   []byte
	QuoteB64 string
	ClientIP net.IP
}

type AttestResponse struct {
	DeviceID       uuid.UUID `json:"device_id"`
	Hostname       string    `json:"hostname"`
	IdentityClass  string    `json:"identity_class"`
	NexusEndpoints []string  `json:"nexus_endpoints"`
	Reenrolled     bool      `json:"reenrolled,omitempty"`
}

type CreateChallengeRequest struct {
	DeviceID uuid.UUID
	Digest   string
	Hostname string // optional: defaults to canonical hostname
}

type CreateChallengeResponse struct {
	ID   uuid.UUID `json:"id"`
	FQDN string    `json:"fqdn"`
}

type DeviceService struct {
	// contains filtered or unexported fields
}

type EnrollRequest struct {
	EKCertDER []byte
	AKParams  []byte
	ClientIP  net.IP
}

type EnrollResponse struct {
	Nonce         string `json:"nonce"`
	EncCredential []byte `json:"enc_credential"`
}

type ErrValidation struct {
	Message string
}

type IssueTokenRequest struct {
	DeviceID     uuid.UUID
	Stage        int
	SessionNonce string
}

type NexusService struct {
	// contains filtered or unexported fields
}

type PendingEnrollment struct {
	EKPubKey         crypto.PublicKey
	AKPubKeyDER      []byte
	AKName           []byte
	ChallengeSecret  []byte
	IdentityClass    string
	EKFingerprint    string
	ClientIP         net.IP
	ExpiresAt        time.Time
	ExistingDeviceID *uuid.UUID // non-nil for re-enrollment of active devices
}

type RegisterNexusRequest struct {
	Hostname string
	Region   *string
}

type RegisterNexusResponse struct {
	HeartbeatInterval int `json:"heartbeat_interval"`
}

type TokenService struct {
	// contains filtered or unexported fields
}

type VerifyResult struct {
	Valid  bool               `json:"valid"`
	Claims *token.NexusClaims `json:"claims"`
	Error  string             `json:"error"`
}