plans

type Binding struct {
	UID int `json:"uid"`
	// Agent is the requesting agent's label (display only).
	Agent string `json:"agent"`
	// TokenHash is HashToken of the agent's token ("" without one).
	TokenHash string `json:"token_hash"`
	PolicyFP  string `json:"policy_fp"`
	PlanHash  string `json:"plan_hash"`
	// Inputs are the digests of the plan hash's inputs by name
	// (ticket.InputDigests), when the product gives them: a renewal shows
	// which of them moved (ticket.DiffInputs).
	Inputs map[string]string `json:"inputs,omitempty"`
}

type Caller struct {
	UID int
	// Token is the agent's lea token (LEA_AGENT_TOKEN), "" without lea.
	Token string
	// contains filtered or unexported fields
}

type Option func(*Store)

type Plan struct {
	ID      string  `json:"id"`
	State   State   `json:"state"`
	Binding Binding `json:"binding"`
	// Ticket is the hub ticket id, once pending, and SignedTicket the
	// ticket as the lock signed and pushed it: a decision is matched
	// against it (ticket.Decision.Match), never against one rebuilt.
	Ticket       string          `json:"ticket,omitempty"`
	SignedTicket json.RawMessage `json:"signed_ticket,omitempty"`
	// Nonce is the decision nonce consumed when the plan began executing.
	Nonce string `json:"nonce,omitempty"`
	// Reason says why the plan reached its final state (denial reason,
	// failure, what went stale).
	Reason string `json:"reason,omitempty"`
	// Untold: the plan's ticket was withdrawn here (WithdrawAll, a start
	// without the hub) and the hub has not been told yet; the next start
	// in hub mode tells it (hubclient.Client.Sync), then MarkTold.
	Untold  bool       `json:"untold,omitempty"`
	Created time.Time  `json:"created"`
	Updated time.Time  `json:"updated"`
	Expires *time.Time `json:"expires,omitempty"`
	// Body is the product's plan, opaque to the store.
	Body json.RawMessage `json:"body"`
	// Clear is the clear screen of the plan's ticket: it stays in the
	// lock's volume and leaves only sealed (a reveal, a device).
	Clear *ticket.Screen `json:"clear,omitempty"`
	// ApprovedAt is when an approval that aged before the run was given
	// (an Expired plan whose decision came too late to be used).
	ApprovedAt *time.Time `json:"approved_at,omitempty"`
	// Renews is the expired plan this one asks again for; RenewedBy, on
	// an expired plan, the plan that renews it.
	Renews    string `json:"renews,omitempty"`
	RenewedBy string `json:"renewed_by,omitempty"`
	// RenewChecked: a renewal whose binding the lock computed again (its
	// Inputs and hashes are the lock's current view).
	RenewChecked bool `json:"renew_checked,omitempty"`
}

type State string

type Store struct {
	// contains filtered or unexported fields
}