install

type CLIPlan struct {
	ConfigPath string `json:"configPath"`
	TenantRef  string `json:"tenantRef"`
	SubjectRef string `json:"subjectRef"`
}

type CandidateReleaseMaterializer struct {
	Directory  string
	Output     io.Writer
	Diagnostic io.Writer
}

type CapacityPlan struct {
	MaxSandboxes           int64            `json:"maxSandboxes"`
	MaxCPUMillis           int64            `json:"maxCpuMillis"`
	MaxMemoryBytes         int64            `json:"maxMemoryBytes"`
	MaxWorkspaceBytes      int64            `json:"maxWorkspaceBytes"`
	ConcurrentStarts       int64            `json:"concurrentStarts"`
	ConcurrentOperations   int64            `json:"concurrentOperations"`
	StoragePressurePercent int64            `json:"storagePressurePercent"`
	SubjectQuotas          map[string]int64 `json:"subjectQuotas"`
}

type ClockProbe interface{ Now() time.Time }

type CommandResult struct {
	Stdout string
	Stderr string
}

type ComputePlan struct {
	FirecrackerCPUTemplate string `json:"firecrackerCpuTemplate"`
}

type CreatedResource struct {
	ID       string       `json:"id"`
	Kind     ResourceKind `json:"kind"`
	Path     string       `json:"path,omitempty"`
	Class    PathClass    `json:"class,omitempty"`
	Stage    Stage        `json:"stage"`
	Mode     uint32       `json:"mode,omitempty"`
	OwnerUID int64        `json:"ownerUid,omitempty"`
	OwnerGID int64        `json:"ownerGid,omitempty"`
	Digest   string       `json:"digest,omitempty"`
	Identity string       `json:"identity,omitempty"`
}

type DeviceFact struct {
	Path             string `json:"path"`
	Identity         string `json:"identity"`
	Filesystem       string `json:"filesystem,omitempty"`
	SizeBytes        int64  `json:"sizeBytes"`
	AvailableBytes   int64  `json:"availableBytes"`
	Mountpoint       string `json:"mountpoint,omitempty"`
	JailerCompatible bool   `json:"jailerCompatible"`
}

type FailureClass string

type FilesystemProbe interface {
	ReadFile(string) ([]byte, error)
	Lstat(string) (fs.FileInfo, error)
	StatFS(string) (available, total int64, err error)
	OpenReadWrite(string) error
}

type Finding struct {
	ID      string       `json:"id"`
	Class   FindingClass `json:"class"`
	Summary string       `json:"summary"`
	Detail  string       `json:"detail,omitempty"`
	Remedy  string       `json:"remedy,omitempty"`
}

type FindingClass string

type HostApplyDependencies struct {
	Executor       HostApplyExecutor
	PersistReceipt func(InstallReceipt) error
	Now            func() time.Time
}

type HostApplyExecutor interface {
	EffectiveUID() int
	Revalidate(context.Context, InstallPlan, InstallReceipt) error
	CreateDirectory(PlannedPath) error
	AllocateFilesystemImage(PlannedPath, int64) error
	FormatBtrfs(context.Context, string, string) error
	WriteMountUnit(PlannedPath, string) error
	EnableMountUnit(context.Context, string) error
	SecureDirectory(PlannedPath) error
	ProveReflinkTopology(string, string, string) (string, error)
	RemoveEmpty(CreatedResource) (bool, error)
}

type HostFacts struct {
	SchemaVersion        string            `json:"schemaVersion"`
	ObservedAt           time.Time         `json:"observedAt"`
	HostIdentity         string            `json:"hostIdentity"`
	OS                   string            `json:"os"`
	Architecture         string            `json:"architecture"`
	InvokingUID          int64             `json:"invokingUid"`
	InvokingGID          int64             `json:"invokingGid"`
	KernelVersion        string            `json:"kernelVersion"`
	SystemdVersion       string            `json:"systemdVersion,omitempty"`
	DockerVersion        string            `json:"dockerVersion,omitempty"`
	ComposeVersion       string            `json:"composeVersion,omitempty"`
	CgroupVersion        int               `json:"cgroupVersion"`
	CgroupControllers    []string          `json:"cgroupControllers"`
	CPUCount             int               `json:"cpuCount"`
	MemoryBytes          int64             `json:"memoryBytes"`
	Virtualization       string            `json:"virtualization,omitempty"`
	BtrfsSupported       bool              `json:"btrfsSupported"`
	KVMAccessible        bool              `json:"kvmAccessible"`
	TUNAccessible        bool              `json:"tunAccessible"`
	Devices              []DeviceFact      `json:"devices"`
	ListeningPorts       []PortFact        `json:"listeningPorts"`
	Routes               []RouteFact       `json:"routes"`
	DockerNetworkSubnets []string          `json:"dockerNetworkSubnets,omitempty"`
	DNSUpstreams         []string          `json:"dnsUpstreams"`
	AssignedUIDs         []int64           `json:"assignedUIDs"`
	ReservedIDRanges     []UIDRange        `json:"reservedIdRanges"`
	CandidateUIDRanges   []UIDRange        `json:"candidateUIDRanges"`
	Utilities            map[string]string `json:"utilities"`
	Findings             []Finding         `json:"findings"`
}

type HostTeardownVerifier interface {
	EffectiveUID() int
	RevalidateTeardown(context.Context, InstallPlan, InstallReceipt) error
}

type InstallPlan struct {
	SchemaVersion                string         `json:"schemaVersion"`
	OperationID                  string         `json:"operationId"`
	CreatedAt                    time.Time      `json:"createdAt"`
	HostFacts                    HostFacts      `json:"hostFacts"`
	HostFactsDigest              string         `json:"hostFactsDigest"`
	Release                      ReleasePlan    `json:"release"`
	Storage                      StoragePlan    `json:"storage"`
	Capacity                     CapacityPlan   `json:"capacity"`
	Compute                      ComputePlan    `json:"compute"`
	Network                      NetworkPlan    `json:"network"`
	CLI                          CLIPlan        `json:"cli"`
	Paths                        []PlannedPath  `json:"paths"`
	SecretTargets                []SecretTarget `json:"secretTargets"`
	GeneratedAuthorityCategories []string       `json:"generatedAuthorityCategories"`
	StandardBundles              []string       `json:"standardBundles"`
	RetentionSeconds             int64          `json:"retentionSeconds"`
	PrivilegedActions            []string       `json:"privilegedActions"`
}

type InstallReceipt struct {
	SchemaVersion       string            `json:"schemaVersion"`
	OperationID         string            `json:"operationId"`
	PlanDigest          string            `json:"planDigest"`
	HostIdentity        string            `json:"hostIdentity"`
	Status              OperationStatus   `json:"status"`
	FailureClass        FailureClass      `json:"failureClass,omitempty"`
	FailureStage        Stage             `json:"failureStage,omitempty"`
	CompletedStages     []StageRecord     `json:"completedStages"`
	CreatedResources    []CreatedResource `json:"createdResources"`
	PendingResourceIDs  []string          `json:"pendingResourceIds"`
	RemovedResourceIDs  []string          `json:"removedResourceIds"`
	CompletedPurgeSteps []string          `json:"completedPurgeSteps"`
	UpdatedAt           time.Time         `json:"updatedAt"`
}

type NetworkOverrides struct {
	APIPort                int
	RunnerPort             int
	DataPlanePort          int
	DatabasePort           int
	ObjectStorePort        int
	ObjectStoreConsolePort int
	GuestCIDR              string
	ComposeCIDR            string
	TAPPrefix              string
	CgroupParent           string
	DNSUpstream            string
	JailerUID              UIDRange
}

type NetworkPlan struct {
	APIAddress                string            `json:"apiAddress"`
	RunnerAddress             string            `json:"runnerAddress"`
	DataPlaneAddress          string            `json:"dataPlaneAddress"`
	DatabaseAddress           string            `json:"databaseAddress"`
	ObjectStoreAddress        string            `json:"objectStoreAddress"`
	ObjectStoreConsoleAddress string            `json:"objectStoreConsoleAddress"`
	GuestBridgeCIDR           string            `json:"guestBridgeCidr"`
	ComposeBackendCIDR        string            `json:"composeBackendCidr,omitempty"`
	TAPPrefix                 string            `json:"tapPrefix"`
	CgroupParent              string            `json:"cgroupParent"`
	JailerUIDRange            UIDRange          `json:"jailerUidRange"`
	DNSUpstream               string            `json:"dnsUpstream"`
	Gateways                  map[string]string `json:"gateways"`
}

type NetworkProbe interface {
	LookupHost(context.Context, string) ([]string, error)
	Head(context.Context, string) (int, error)
}

type OperationLock struct {
	// contains filtered or unexported fields
}

type OperationStatus string

type PathClass string

type PlannedPath struct {
	Name         string       `json:"name"`
	Path         string       `json:"path"`
	Class        PathClass    `json:"class"`
	Kind         ResourceKind `json:"kind"`
	Mode         uint32       `json:"mode"`
	OwnerUID     int64        `json:"ownerUid"`
	OwnerGID     int64        `json:"ownerGid"`
	RequiresSudo bool         `json:"requiresSudo"`
	Create       bool         `json:"create"`
}

type PortFact struct {
	Address  string `json:"address"`
	Port     int    `json:"port"`
	Protocol string `json:"protocol"`
	Process  string `json:"process,omitempty"`
}

type PreflightProbes struct {
	Filesystem   FilesystemProbe
	Process      ProcessProbe
	Network      NetworkProbe
	Clock        ClockProbe
	Users        UserProbe
	LookupEnv    func(string) (string, bool)
	OS           string
	Architecture string
	CPUCount     int
	InvokingUID  int64
	InvokingGID  int64
}

type ProcessProbe interface {
	Run(context.Context, string, ...string) (CommandResult, error)
	LookPath(string) (string, error)
}

type ProposalInput struct {
	OperationID              string
	CreatedAt                time.Time
	DeploymentDirectory      string
	BinaryDirectory          string
	CLIConfigPath            string
	CLITenantRef             string
	CLISubjectRef            string
	BackingAvailableBytes    int64
	DeploymentAvailableBytes int64
	Release                  ReleasePlan
	StorageChoice            StorageChoice
	ExistingMountpoint       string
	FilesystemImageBytes     int64
	NetworkOverrides         NetworkOverrides
	StandardBundles          []string
	RetentionSeconds         int64
}

type ReleaseMaterializeDependencies struct {
	Executor                  ReleaseMaterializeExecutor
	PersistReceipt            func(InstallReceipt) error
	Now                       func() time.Time
	ValidateBinaryReplacement func(PlannedPath, string) error
}

type ReleaseMaterializeExecutor interface {
	PullImage(context.Context, string) error
	ExtractMicroVMImage(context.Context, string, string) error
	Fetch(context.Context, string) ([]byte, error)
}

type ReleasePlan struct {
	Version                string            `json:"version"`
	ArtifactManifestURL    string            `json:"artifactManifestUrl"`
	ArtifactManifestDigest string            `json:"artifactManifestDigest"`
	SigningKeyFingerprint  string            `json:"signingKeyFingerprint"`
	Images                 map[string]string `json:"images"`
	BinaryDigests          map[string]string `json:"binaryDigests"`
	ExpectedDownloadBytes  int64             `json:"expectedDownloadBytes"`
}

type ResourceKind string

type RouteFact struct {
	Destination string `json:"destination"`
	Interface   string `json:"interface"`
	Gateway     string `json:"gateway,omitempty"`
}

type SecretTarget struct {
	Category string `json:"category"`
	Path     string `json:"path"`
}

type Stage string

type StageRecord struct {
	Stage       Stage             `json:"stage"`
	CompletedAt time.Time         `json:"completedAt"`
	Evidence    map[string]string `json:"evidence"`
}

type StorageChoice string

type StorageOption struct {
	Choice         StorageChoice
	Label          string
	Mountpoint     string
	DeviceIdentity string
	Filesystem     string
	AvailableBytes int64
}

type StoragePlan struct {
	Choice                 StorageChoice `json:"choice"`
	WorkspacePath          string        `json:"workspacePath"`
	ExistingDeviceIdentity string        `json:"existingDeviceIdentity,omitempty"`
	FilesystemImagePath    string        `json:"filesystemImagePath,omitempty"`
	ImageSizeBytes         int64         `json:"imageSizeBytes,omitempty"`
	MountUnitPath          string        `json:"mountUnitPath,omitempty"`
}

type SystemHostApplyExecutor struct{ CallerUID int }

type SystemReleaseMaterializer struct {
	Output     io.Writer
	Diagnostic io.Writer
	HTTPClient *http.Client
}

type UIDRange struct {
	Start int64 `json:"start"`
	Count int64 `json:"count"`
}

type UserProbe interface {
	AssignedUIDs() (map[int64]bool, error)
}

type UserRangeProbe interface {
	ReservedIDRanges() ([]UIDRange, error)
}

type VerifiedArtifact struct {
	SigningPublicKeyPEM []byte
	SigningKeyID        string
	ManifestDigest      string
}