agents

type Agent struct {
	ID              string
	Hostname        string
	Status          string // active | disabled | revoked
	EnrollmentMode  string
	Proof           string // JSON
	CertificateID   string
	CertSerial      string
	OS, Arch        string
	Version         string
	PackageFormat   string
	LastSeenAt      time.Time
	CreatedAt       time.Time
	ApprovedAt      time.Time
	ApprovedBy      string
	Predecessor     *predecessor.Policy
	EffectivePolicy predecessor.Policy
	Names           []Name
	Deployments     []Deployment
}

type Caller struct {
	Agent pkidb.Agent
	Who   keys.Who
}

type Checker interface {
	Check(ctx context.Context, host, token, want, policy string) error
}

type Deployment struct {
	Name, Profile                                                   string
	Names                                                           []string
	Challenge, State, Serial, CertificateID, Fingerprint, LastError string
	NotAfter, DeployedAt, LastReportAt, RenewRequestedAt            time.Time
	RenewRequestedBy                                                string
	RenewalVersion                                                  int64
	Removed                                                         bool
	Predecessor                                                     *predecessor.Policy
	EffectivePolicy                                                 predecessor.Policy
	RevocationPlannedAt                                             *time.Time
}

type DeploymentReport struct {
	Name, Profile                                                          string
	Names                                                                  []string
	Challenge, State, Serial, NotAfter, Fingerprint, DeployedAt, LastError string
	WrittenFingerprint                                                     string
	CheckConfigured                                                        bool
	HandledRenewalVersion                                                  int64
}

type DesiredDeployment struct {
	Name, RequestedAt string
	RenewalVersion    int64
}

type DesiredState struct {
	Version      int64
	Changed      bool
	AllowedNames []string
	Deployments  []DesiredDeployment
}

type EnrollInput struct {
	Hostname, Token, Method, OS, Arch, Version, SourceIP string
	CSRDER                                               []byte
}

type EnrollOutput struct {
	ID, Handle, CheckToken string
}

type Enrollment struct {
	ID, Hostname, State         string
	AgentID                     string // set when admitted, and for a known agent
	CheckMethod, CheckState     string
	CheckError                  string
	TokenValid                  bool
	TokenProblem                string
	KnownAgent                  bool
	OS, Arch, Version, SourceIP string
	CreatedAt, ExpiresAt        time.Time
	DecidedAt                   time.Time // zero = open
	DecidedBy                   string
}

type JoinToken struct {
	ID        string
	Label     string
	Patterns  []string
	ExpiresAt time.Time
	UsedAt    time.Time // zero = unused
	UsedBy    string    // the enrollment
	CreatedBy string
	CreatedAt time.Time
}

type Name struct {
	Pattern string
	Source  string // hostname | token | admin
	AddedBy string
	AddedAt time.Time
}

type ReportInput struct {
	Version, OS, Arch string
	PackageFormat     string
	Deployments       []DeploymentReport
}

type Service struct {
	PKI    *sql.DB // pki.db writer
	Tenant string  // the tenant these agents belong to
	Engine *ca.Engine
	// CA is agent.ca: the CA that signs the agents' certificates.
	CA string
	// Mode returns the tenant's enrollment mode (tenant.Store).
	Mode func(ctx context.Context) (string, error)
	// AgentPredecessor returns the tenant default for agent deployments.
	AgentPredecessor func(ctx context.Context) (predecessor.Policy, error)
	Checker          Checker
	Clock            clock.Clock
	Log              *slog.Logger
	Wake             func()
	Rand             io.Reader                                  // nil = crypto/rand
	Sleep            func(context.Context, time.Duration) error // nil = clock.Sleep
	// contains filtered or unexported fields
}

type Status struct {
	State       string
	Message     string
	AgentID     string
	TokenValid  bool
	CheckPassed bool
	CertDER     []byte
	Chain       [][]byte // issuing CA first, without the root
}

type StatusInput struct {
	ID, Handle, SourceIP string
	CheckReady           bool
}