certflow

type Badge struct {
	Kind        Kind     `json:"kind"`
	DaysLeft    int      `json:"days_left"`
	LastRenewal *Renewal `json:"last_renewal,omitempty"`
	// NextRetryAt is when the watchdog tries again, set only while a renewal
	// is stuck or failing.
	NextRetryAt *time.Time `json:"next_retry_at,omitempty"`
}

type Candidate struct {
	Domain string
	Reason string
	// Expired certificates are cleared before re-issuing; valid ones are left in place.
	Expired bool
	// Blocked is set while a CA rate limit makes a try pointless.
	Blocked bool
}

type Existing struct {
	Domain  string
	Kind    Kind
	Expired bool
	Stalled bool
}

type Input struct {
	Domain          string
	Email           string
	DefaultEmail    string
	Staging         bool
	TLSUpstream     bool
	Report          domaindoctor.Report
	Existing        []Existing
	History         Snapshot
	Limits          Limits
	LastCAError     string
	LastCAErrorTime time.Time
	Now             time.Time
}

type Item struct {
	Code   string    `json:"code"`
	State  ItemState `json:"state"`
	Detail string    `json:"detail"`
	Fix    string    `json:"fix,omitempty"`
}

type ItemState string

type Kind string

type Ledger struct {
	// contains filtered or unexported fields
}

type Limits struct {
	FailedPerHour    int
	DuplicatePerWeek int
}

type RateLimit struct {
	Blocked bool
	// NextSafeAt is the earliest time another production try is safe.
	NextSafeAt time.Time
	// Reason is "failed_validations", "duplicate_certificates" or "ca_rate_limited".
	Reason string
}

type Renewal struct {
	At     time.Time     `json:"at"`
	Result RenewalResult `json:"result"`
	Error  string        `json:"error,omitempty"`
}

type RenewalResult string

type ReplaceError struct {
	Domain string
	Kind   Kind
}

type Result struct {
	Domain  string `json:"domain"`
	Staging bool   `json:"staging"`
	// Email is the contact that will be used: the typed one or the inferred default.
	Email string `json:"email"`
	// Ready is true when no item failed.
	Ready bool   `json:"ready"`
	Items []Item `json:"items"`
	// NextSafeAt is set when a rate limit is in the way.
	NextSafeAt *time.Time `json:"next_safe_at,omitempty"`
}

type RetryState struct {
	Attempts int
	NextAt   time.Time
	LastErr  string
}

type Snapshot struct {
	Failed []time.Time
	Issued []time.Time
}

type Watchdog struct {
	// contains filtered or unexported fields
}

type WatchdogDeps struct {
	Scan  func(ctx context.Context) ([]Candidate, error)
	Renew func(ctx context.Context, c Candidate) error
	Now   func() time.Time
	Log   *slog.Logger
}