setup

type Instance struct {
	Initialized   bool
	Demo          bool
	InitializedAt string
}

type LineInput struct {
	// contains filtered or unexported fields
}

type Mode int

type Options struct {
	Config          config.Config
	Mode            Mode
	AdminUser       string // Stdin and Demo; Interactive asks
	RecoveryKeyFile string // Stdin: required for a new key
	OTPAuthFile     string // Stdin: required for a new user
	DemoSecretsFile string // Demo: "" = <data_dir>/init-demo-secrets.txt
	WithCA          bool   // create the test CA without asking
	CABaseURL       string
	Hostname        string      // O of the test CA; "" = os.Hostname
	Clock           clock.Clock // nil = clock.System
	Rand            io.Reader   // nil = crypto/rand
	Who             keys.Who    // the console operator

	// TestKDF uses the weak Argon2id parameters of tests for the key ring and
	// the passwords (keys.TestKDF, auth.TestParams). Test binaries only: Run
	// fails otherwise, and no flag or configuration key sets it.
	TestKDF bool
	// contains filtered or unexported fields
}

type Result struct {
	Resumed               bool
	CheckpointFingerprint string
	CAs                   []string // created now
	Warnings              []string
	DemoSecretsFile       string
	// Enrollment of the new user (interactive): the recovery codes to show
	// at the end. nil when no user was created.
	Enrollment *auth.Enrollment
}

type UI interface {
	// Printf writes a message.
	Printf(format string, args ...any)
	// ReadLine asks for a visible answer.
	ReadLine(prompt string) (string, error)
	// ReadSecret asks for a hidden answer (in Stdin mode: the next line).
	ReadSecret(prompt string) ([]byte, error)
}