agents

type Agent struct {
	ID             string
	Hostname       string
	Status         string // active | disabled | revoked
	EnrollmentMode string
	Proof          string // JSON
	CertificateID  string
	CertSerial     string
	OS, Arch       string
	Version        string
	LastSeenAt     time.Time
	CreatedAt      time.Time
	ApprovedAt     time.Time
	ApprovedBy     string
	Names          []Name
	Deployments    []Deployment
}

type Caller struct {
	Agent pkidb.Agent
	Who   keys.Who
}

type Checker interface {
	Check(ctx context.Context, host, token, want, policy string) error
}

type Deployment struct {
	Name, Profile                                                   string
	Names                                                           []string
	Challenge, State, Serial, CertificateID, Fingerprint, LastError string
	NotAfter, DeployedAt, LastReportAt, RenewRequestedAt            time.Time
	RenewRequestedBy                                                string
	RenewalVersion                                                  int64
	Removed                                                         bool
}

type DeploymentReport struct {
	Name, Profile                                                          string
	Names                                                                  []string
	Challenge, State, Serial, NotAfter, Fingerprint, DeployedAt, LastError string
	HandledRenewalVersion                                                  int64
}

type DesiredDeployment struct {
	Name, RequestedAt string
	RenewalVersion    int64
}

type DesiredState struct {
	Version      int64
	Changed      bool
	AllowedNames []string
	Deployments  []DesiredDeployment
}

type EnrollInput struct {
	Hostname, Token, Method, OS, Arch, Version, SourceIP string
	CSRDER                                               []byte
}

type EnrollOutput struct {
	ID, Handle, CheckToken string
}

type Enrollment struct {
	ID, Hostname, State         string
	AgentID                     string // set when admitted, and for a known agent
	CheckMethod, CheckState     string
	CheckError                  string
	TokenValid                  bool
	TokenProblem                string
	KnownAgent                  bool
	OS, Arch, Version, SourceIP string
	CreatedAt, ExpiresAt        time.Time
	DecidedAt                   time.Time // zero = open
	DecidedBy                   string
}

type JoinToken struct {
	ID        string
	Label     string
	Patterns  []string
	ExpiresAt time.Time
	UsedAt    time.Time // zero = unused
	UsedBy    string    // the enrollment
	CreatedBy string
	CreatedAt time.Time
}

type Name struct {
	Pattern string
	Source  string // hostname | token | admin
	AddedBy string
	AddedAt time.Time
}

type ReportInput struct {
	Version, OS, Arch string
	Deployments       []DeploymentReport
}

type Service struct {
	PKI    *sql.DB // pki.db writer
	Tenant string  // the tenant these agents belong to
	Engine *ca.Engine
	// CA is agent.ca: the CA that signs the agents' certificates.
	CA string
	// Mode returns the tenant's enrollment mode (tenant.Store).
	Mode    func(ctx context.Context) (string, error)
	Checker Checker
	Clock   clock.Clock
	Log     *slog.Logger
	Wake    func()
	Rand    io.Reader                                  // nil = crypto/rand
	Sleep   func(context.Context, time.Duration) error // nil = clock.Sleep
	// contains filtered or unexported fields
}

type Status struct {
	State       string
	Message     string
	AgentID     string
	TokenValid  bool
	CheckPassed bool
	CertDER     []byte
	Chain       [][]byte // issuing CA first, without the root
}

type StatusInput struct {
	ID, Handle, SourceIP string
	CheckReady           bool
}