agents

type Agent struct {
	ID              string
	Hostname        string
	Status          string // active | disabled | revoked
	EnrollmentMode  string
	Proof           string // JSON
	CertificateID   string
	CertSerial      string
	OS, Arch        string
	Version         string
	PackageFormat   string
	LastSeenAt      time.Time
	CreatedAt       time.Time
	ApprovedAt      time.Time
	ApprovedBy      string
	Predecessor     *predecessor.Policy
	EffectivePolicy predecessor.Policy
	Names           []Name
	Deployments     []Deployment
}

type Caller struct {
	Agent pkidb.Agent
	Who   keys.Who
}

type Checker interface {
	Check(ctx context.Context, host, token, want, policy string) error
}

type Deployment struct {
	Name, Profile                                                   string
	Names                                                           []string
	Challenge, State, Serial, CertificateID, Fingerprint, LastError string
	NotAfter, DeployedAt, LastReportAt, RenewRequestedAt            time.Time
	RenewRequestedBy                                                string
	RenewalVersion                                                  int64
	Removed                                                         bool
	Predecessor                                                     *predecessor.Policy
	EffectivePolicy                                                 predecessor.Policy
	RevocationPlannedAt                                             *time.Time
}

type DeploymentReport struct {
	Name, Profile                                                          string
	Names                                                                  []string
	Challenge, State, Serial, NotAfter, Fingerprint, DeployedAt, LastError string
	WrittenFingerprint                                                     string
	CheckConfigured                                                        bool
	HandledRenewalVersion                                                  int64
}

type DesiredDeployment struct {
	Name, RequestedAt string
	RenewalVersion    int64
}

type DesiredState struct {
	Version      int64
	Changed      bool
	AllowedNames []string
	Deployments  []DesiredDeployment
}

type EnrollInput struct {
	Hostname, Token, Method, OS, Arch, Version, SourceIP string
	CSRDER                                               []byte
}

type EnrollOutput struct {
	ID, Handle, CheckToken string
}

type Enrollment struct {
	ID, Hostname, State         string
	AgentID                     string // set when admitted, and for a known agent
	CheckMethod, CheckState     string
	CheckError                  string
	TokenValid                  bool
	TokenProblem                string
	KnownAgent                  bool
	OS, Arch, Version, SourceIP string
	CreatedAt, ExpiresAt        time.Time
	DecidedAt                   time.Time // zero = open
	DecidedBy                   string
}

type InstallFacts struct {
	ServerURL     string
	ACMEDirectory string // "" = ACME is off
	Version       string // the agent release that matches this server
	Root          Trust
	Packages      []Package
}

type InstallSource struct {
	Dist      *agentdist.Store
	BaseURL   string // agent.base_url
	TLSIssuer string // agent.tls_issuer
	// ACMEDirectory returns the directory URL of the ACME server, "" while ACME is off.
	ACMEDirectory func() string
	Clock         clock.Clock
	// contains filtered or unexported fields
}

type JoinToken struct {
	ID        string
	Label     string
	Kind      string // KindToken | KindPass
	Patterns  []string
	MaxUses   int
	UseCount  int
	ExpiresAt time.Time
	UsedAt    time.Time // the last use was taken; zero = uses left
	UsedBy    string    // the enrollment of the last use
	RevokedAt time.Time
	RevokedBy string
	CreatedBy string
	CreatedAt time.Time
	// Hosts are the enrollments a pass admitted or queued, oldest first
	// (ListJoinTokens fills them for passes only).
	Hosts []PassHost
}

type Name struct {
	Pattern string
	Source  string // hostname | token | admin
	AddedBy string
	AddedAt time.Time
}

type NewToken struct {
	Kind     string // "" = KindToken
	Label    string
	Patterns []string
	TTL      time.Duration // 0 = the default of the kind
	MaxUses  int           // pass only; 0 = DefaultPassUses
}

type Package struct {
	Name, Format, Arch string // Format "checksums" for checksums.txt
	Size               int64
	SHA256             string // hex
	URL                string
}

type PassHost struct {
	Enrollment string
	Hostname   string
	State      string // the enrollment state
	AgentID    string // set once admitted
	At         time.Time
}

type ReportInput struct {
	Version, OS, Arch string
	PackageFormat     string
	Deployments       []DeploymentReport
}

type Service struct {
	PKI    *sql.DB // pki.db writer
	Tenant string  // the tenant these agents belong to
	Engine *ca.Engine
	// CA is agent.ca: the CA that signs the agents' certificates.
	CA string
	// Mode returns the tenant's enrollment mode (tenant.Store).
	Mode func(ctx context.Context) (string, error)
	// AgentPredecessor returns the tenant default for agent deployments.
	AgentPredecessor func(ctx context.Context) (predecessor.Policy, error)
	Checker          Checker
	// Install serves the install facts (InstallFacts); nil = no agent distribution.
	Install *InstallSource
	Clock   clock.Clock
	Log     *slog.Logger
	Wake    func()
	Rand    io.Reader                                  // nil = crypto/rand
	Sleep   func(context.Context, time.Duration) error // nil = clock.Sleep
	// contains filtered or unexported fields
}

type Status struct {
	State       string
	Message     string
	AgentID     string
	TokenValid  bool
	CheckPassed bool
	CertDER     []byte
	Chain       [][]byte // issuing CA first, without the root
}

type StatusInput struct {
	ID, Handle, SourceIP string
	CheckReady           bool
}

type TokenState string

type Trust struct {
	SHA256, SHA1, URL string
}