directory

type Callbacks struct {
	// Save triggers a debounced snapshot write.
	Save func()
	// Audit records an audit log entry.
	Audit func(action string, attrs ...any)
	// RecordWALRegister records a new-node WAL entry.
	RecordWALRegister func(nodeID uint32, owner, pubKeyB64, realAddr, hostname string, lanAddrs []string, version, createdAt string)
	// RecordWALDeregister records a deregistration WAL entry.
	RecordWALDeregister func(nodeID uint32)
	// InvalidateListNodesCache drops the per-network list_nodes cache.
	InvalidateListNodesCache func(netID uint16)
	// InvalidateAdminListNodesCache drops the backbone admin list_nodes cache.
	InvalidateAdminListNodesCache func()
	// PublishMembershipChanged publishes a membership.changed bus event.
	PublishMembershipChanged func(netID uint16)
	// RemoveFromNetworks removes a node from all its networks in the server's
	// network map. The nodeID and its current Networks slice are passed.
	// Caller holds mu.Lock. Returns the networks that lost an owner.
	RemoveFromNetworks func(nodeID uint32, networks []uint16) (lostOwnerNets []uint16)
	// ClearInviteInbox removes all pending invites for the given node.
	ClearInviteInbox func(nodeID uint32)
	// RequireAdminToken validates the admin_token field in a message.
	RequireAdminToken func(msg map[string]interface{}) error
	// RequireAdminTokenLocked is like RequireAdminToken but mu is already held.
	RequireAdminTokenLocked func(msg map[string]interface{}) error
	// AdminToken returns the current admin token.
	AdminToken func() string
	// VerifyNodeSignature verifies an Ed25519 (or admin-token) signature.
	VerifyNodeSignature func(pubKey []byte, adminToken string, msg map[string]interface{}, challenge string) error
	// IsTrusted returns true if nodeA and nodeB have a mutual trust pair.
	IsTrusted func(nodeA, nodeB uint32) bool
	// BeaconAddr returns the current beacon address.
	BeaconAddr func() string
	// IncRegistrations increments the registration counter.
	IncRegistrations func()
	// IncDeregistrations increments the deregistration counter.
	IncDeregistrations func()
	// IncRequestsTotal increments the named request counter.
	IncRequestsTotal func(label string)
	// IncErrorsTotal increments the named error counter.
	IncErrorsTotal func(label string)
	// ObserveRequestDuration records a request duration histogram sample.
	ObserveRequestDuration func(label string, seconds float64)
	// Now returns the current time (injectable for tests).
	Now func() time.Time
	// AddNodeToBackbone adds a node to the backbone (network 0) Members list.
	// Called when a new node is registered or a reaped node is reclaimed.
	// Caller holds mu.Lock.
	AddNodeToBackbone func(nodeID uint32)
	// ScanNetworkMemberships returns the set of non-backbone networkIDs that
	// still list nodeID as a member. Used to restore network memberships after
	// a reaped node reclaims its old identity. Caller holds mu.Lock.
	ScanNetworkMemberships func(nodeID uint32) []uint16
}

type KeyInfo struct {
	CreatedAt   time.Time `json:"created_at"`
	RotatedAt   time.Time `json:"rotated_at,omitempty"`
	RotateCount int       `json:"rotate_count"`
	ExpiresAt   time.Time `json:"expires_at,omitempty"`
}

type ListNodesCacheState struct {
	Mu            sync.Mutex
	FullBody      []byte
	BuiltAt       time.Time
	Building      bool
	Cond          *sync.Cond
	LastBuildErr  error
	CacheHits     uint64
	CacheWaits    uint64
	CacheRebuilds uint64
}

type NetworkMemberView struct {
	Members     []uint32
	MemberRoles map[uint32]string
	MemberTags  map[uint32][]string
}

type NodeInfo struct {
	ID         uint32
	Owner      string
	PublicKey  []byte
	RealAddr   string
	Networks   []uint16
	LastSeen   time.Time
	Public     bool
	Hostname   string
	Tags       []string
	TaskExec   bool
	LANAddrs   []string
	KeyMeta    KeyInfo
	ExternalID string
	Version    string
	RelayOnly  bool

	// LastSeenNano stores time.UnixNano() for lock-free heartbeat updates.
	LastSeenNano atomic.Int64
	// LastVerifiedNano stores the last Ed25519 verify time. Used by verify-skip.
	LastVerifiedNano atomic.Int64
}

type NodeShards = [NumNodeShards]sync.RWMutex

type Store struct {
	// contains filtered or unexported fields
}