agent

type Agent struct {

	// Random returns a value in [0,1); tests inject stable independent streams.
	Random func() float64

	// Version, OS and Arch are reported at enrollment.
	Version, OS, Arch string
	// StandaloneAddr is where challenge: standalone listens (":80").
	StandaloneAddr string
	// Now and Sleep: the clock and the wait; tests replace them.
	Now   func() time.Time
	Sleep func(ctx context.Context, d time.Duration) error
	// contains filtered or unexported fields
}

type Config struct {
	// Server is agent.base_url of the server, e.g. https://pki.homelab.lan:8444.
	Server string `yaml:"server"`
	// CABundle is the trust anchor (PEM) for the agent listener and ACME.
	CABundle string `yaml:"ca_bundle"`
	// Hostname is the FQDN the agent proves at enrollment; "" = the host's name.
	Hostname string `yaml:"hostname"`
	// ACMEDirectory is the directory URL of any ACME CA.
	ACMEDirectory string `yaml:"acme_directory"`
	// Proxy is an http(s) proxy for both connections; environment variables
	// (HTTPS_PROXY, HTTP_PROXY, NO_PROXY) are never used (owner 2026-10-24).
	Proxy string `yaml:"proxy"`
	// StateDir holds the agent's key, certificate and enrollment.
	StateDir string `yaml:"state_dir"`
	// LogLevel: debug, info, warn, error.
	LogLevel string `yaml:"log_level"`

	Enrollment  Enrollment          `yaml:"enrollment"`
	Hooks       map[string][]string `yaml:"hooks"`
	Paths       []string            `yaml:"paths"`
	Deployments []Deployment        `yaml:"deployments"`
}

type Deployment struct {
	Name       string   `yaml:"name"`
	Profile    string   `yaml:"profile"`
	Names      []string `yaml:"names"`
	Challenge  string   `yaml:"challenge"`
	Webroot    string   `yaml:"webroot"`
	Dir        string   `yaml:"dir"`
	Files      Files    `yaml:"files"`
	Owner      string   `yaml:"owner"`
	Group      string   `yaml:"group"`
	KeyMode    string   `yaml:"key_mode"`
	TestHook   string   `yaml:"test_hook"`
	ReloadHook string   `yaml:"reload_hook"`
	Check      string   `yaml:"check"`
}

type DeploymentResult struct {
	Name                  string    `json:"name"`
	State                 string    `json:"state"`
	Serial                string    `json:"serial,omitempty"`
	NotAfter              time.Time `json:"not_after,omitempty"`
	Fingerprint           string    `json:"fingerprint,omitempty"`
	DeployedAt            time.Time `json:"deployed_at,omitempty"`
	LastError             string    `json:"last_error,omitempty"`
	AttemptedAt           time.Time `json:"attempted_at,omitempty"`
	Failures              int       `json:"failures,omitempty"`
	NextAttempt           time.Time `json:"next_attempt,omitempty"`
	HandledRenewalVersion int64     `json:"handled_renewal_version,omitempty"`
}

type Enrollment struct {
	Challenge string `yaml:"challenge"`
	Webroot   string `yaml:"webroot"`
}

type Files struct {
	Certificate string `yaml:"certificate"`
	Chain       string `yaml:"chain"`
	Fullchain   string `yaml:"fullchain"`
	Key         string `yaml:"key"`
}

type Material struct {
	Certificate []byte            `json:"-"`
	Chain       []byte            `json:"-"`
	Fullchain   []byte            `json:"-"`
	Key         []byte            `json:"-"`
	Leaf        *x509.Certificate `json:"-"`
}

type Result struct {
	State   agentv1.EnrollState
	Message string
	AgentID string
}

type Status struct {
	Hostname    string
	AgentID     string
	Enrolled    bool
	NotAfter    time.Time
	Serial      string
	Enrollment  string // the open enrollment's last message
	Deployments []DeploymentResult
}