agent

type Agent struct {

	// Random returns a value in [0,1); tests inject stable independent streams.
	Random func() float64

	// Version, OS, Arch and PackageFormat are reported to the server.
	Version, OS, Arch string
	PackageFormat     string
	// StandaloneAddr is where challenge: standalone listens (":80").
	StandaloneAddr string
	// Now and Sleep: the clock and the wait; tests replace them.
	Now   func() time.Time
	Sleep func(ctx context.Context, d time.Duration) error
	// contains filtered or unexported fields
}

type Config struct {
	// Server is agent.base_url of the server, e.g. https://pki.homelab.lan:8444.
	Server string `yaml:"server"`
	// CABundle is the trust anchor (PEM) for the agent listener and ACME.
	CABundle string `yaml:"ca_bundle"`
	// Hostname is the FQDN the agent proves at enrollment; "" = the host's name.
	Hostname string `yaml:"hostname"`
	// ACMEDirectory is the directory URL of any ACME CA.
	ACMEDirectory string `yaml:"acme_directory"`
	// Proxy is an http(s) proxy for both connections; environment variables
	// (HTTPS_PROXY, HTTP_PROXY, NO_PROXY) are never used (owner 2026-10-24).
	Proxy string `yaml:"proxy"`
	// StateDir holds the agent's key, certificate and enrollment.
	StateDir string `yaml:"state_dir"`
	// LogLevel: debug, info, warn, error.
	LogLevel string `yaml:"log_level"`

	Enrollment  Enrollment          `yaml:"enrollment"`
	Hooks       map[string][]string `yaml:"hooks"`
	Paths       []string            `yaml:"paths"`
	Deployments []Deployment        `yaml:"deployments"`
}

type Deployment struct {
	Name       string   `yaml:"name"`
	Profile    string   `yaml:"profile"`
	Names      []string `yaml:"names"`
	Challenge  string   `yaml:"challenge"`
	Webroot    string   `yaml:"webroot"`
	Dir        string   `yaml:"dir"`
	Files      Files    `yaml:"files"`
	Owner      string   `yaml:"owner"`
	Group      string   `yaml:"group"`
	KeyMode    string   `yaml:"key_mode"`
	TestHook   string   `yaml:"test_hook"`
	ReloadHook string   `yaml:"reload_hook"`
	Check      string   `yaml:"check"`
}

type DeploymentResult struct {
	Name                  string    `json:"name"`
	State                 string    `json:"state"`
	Serial                string    `json:"serial,omitempty"`
	NotAfter              time.Time `json:"not_after,omitempty"`
	Fingerprint           string    `json:"fingerprint,omitempty"`
	WrittenFingerprint    string    `json:"written_fingerprint,omitempty"`
	CheckConfigured       bool      `json:"check_configured"`
	DeployedAt            time.Time `json:"deployed_at,omitempty"`
	LastError             string    `json:"last_error,omitempty"`
	AttemptedAt           time.Time `json:"attempted_at,omitempty"`
	Failures              int       `json:"failures,omitempty"`
	NextAttempt           time.Time `json:"next_attempt,omitempty"`
	HandledRenewalVersion int64     `json:"handled_renewal_version,omitempty"`
}

type Enrollment struct {
	Challenge string `yaml:"challenge"`
	Webroot   string `yaml:"webroot"`
}

type Files struct {
	Certificate string `yaml:"certificate"`
	Chain       string `yaml:"chain"`
	Fullchain   string `yaml:"fullchain"`
	Key         string `yaml:"key"`
}

type Material struct {
	Certificate []byte            `json:"-"`
	Chain       []byte            `json:"-"`
	Fullchain   []byte            `json:"-"`
	Key         []byte            `json:"-"`
	Leaf        *x509.Certificate `json:"-"`
}

type Result struct {
	State   agentv1.EnrollState
	Message string
	AgentID string
}

type SetupOptions struct {
	Server        string
	CABundle      string
	RootSHA256    string
	TokenFile     string
	Webroot       string
	LowPorts      bool
	Hostname      string
	ConfigPath    string
	StateDir      string
	UnitPath      string
	DropinDir     string
	ExampleDir    string
	Version       string
	PackageFormat string
	Stdout        io.Writer
	Stderr        io.Writer
}

type Status struct {
	Hostname    string
	AgentID     string
	Enrolled    bool
	NotAfter    time.Time
	Serial      string
	Enrollment  string // the open enrollment's last message
	Deployments []DeploymentResult
}