bootstrap

type BindingContext struct {
	Type     string
	ID       string
	Snapshot map[string]any
	Secret   map[string]any
}

type BindingRequest struct {
	Slot       string `json:"slot"`
	Type       string `json:"type"`        // "device" | "channel" | "cert"
	ResourceID string `json:"resource_id"` // ID of the resource in its owning service
}

type BindingResolver interface {
	Resolve(ctx context.Context, req ResolveRequest) ([]BindingSnapshot, error)
}

type BindingSlot struct {
	Name     string   `json:"name"`
	Type     string   `json:"type"`
	Required bool     `json:"required"`
	Fields   []string `json:"fields,omitempty"`
}

type BindingSnapshot struct {
	ConfigID       string         `json:"config_id"`
	Slot           string         `json:"slot"`
	Type           string         `json:"type"`
	ResourceID     string         `json:"resource_id"`
	Snapshot       map[string]any `json:"snapshot,omitempty"`
	SecretSnapshot map[string]any `json:"secret_snapshot,omitempty"` // encrypted at rest
	UpdatedAt      time.Time      `json:"updated_at,omitempty"`
}

type BindingStore interface {
	// Save upserts all given snapshots for the config.
	Save(ctx context.Context, configID string, bindings []BindingSnapshot) error

	// Retrieve returns all snapshots for the given config.
	Retrieve(ctx context.Context, configID string) ([]BindingSnapshot, error)

	// Delete removes the snapshot for a specific slot of a config.
	Delete(ctx context.Context, configID, slot string) error
}

type BootstrapChallenge struct {
	ID          string
	ConfigID    string
	KeyVersion  uint64
	ServerNonce []byte
	CreatedAt   time.Time
	ExpiresAt   time.Time
	ConsumedAt  *time.Time
}

type BootstrapChallengeRepository interface {
	Create(ctx context.Context, challenge BootstrapChallenge) error
	Retrieve(ctx context.Context, challengeID, configID string) (BootstrapChallenge, error)
	Consume(ctx context.Context, challengeID, configID string, now time.Time) error
}

type BootstrapChallengeResponse struct {
	ChallengeID string    `json:"challenge_id"`
	ServerNonce string    `json:"server_nonce"`
	ExpiresAt   time.Time `json:"expires_at"`
	KeyVersion  uint64    `json:"key_version"`
}

type Config struct {
	ID                  string         `json:"id"`
	WorkspaceID         string         `json:"workspace_id,omitempty"`
	Name                string         `json:"name,omitempty"`
	ClientCert          string         `json:"client_cert,omitempty"`
	ClientKey           string         `json:"client_key,omitempty"`
	CACert              string         `json:"ca_cert,omitempty"`
	ExternalID          string         `json:"external_id"`
	ExternalKey         string         `json:"external_key"`
	BootstrapKeyVersion uint64         `json:"bootstrap_key_version"`
	Content             string         `json:"content,omitempty"`
	ContentType         ContentType    `json:"content_type,omitempty"`
	Status              Status         `json:"status"`
	ProfileID           string         `json:"profile_id,omitempty"`
	RenderContext       map[string]any `json:"render_context,omitempty"`

	BootstrapRootKey     []byte `json:"-"`
	BootstrapChallengeID string `json:"-"`
	BootstrapServerNonce string `json:"-"`
	BootstrapDeviceNonce string `json:"-"`
}

type ConfigReader interface {
	ReadConfig(Config) (any, error)
}

type ConfigRepository interface {
	// Save persists the Config. Successful operation is indicated by non-nil
	// error response.
	Save(ctx context.Context, cfg Config) (string, error)

	// RetrieveByID retrieves the Config having the provided identifier, that is owned
	// by the specified user.
	RetrieveByID(ctx context.Context, workspaceID, id string) (Config, error)

	// RetrieveAll retrieves a subset of Configs that belong to the given
	// workspace, with given filter parameters. A non-nil error is returned
	// to indicate operation failure, so that a lookup failure is never
	// mistaken for an empty workspace.
	RetrieveAll(ctx context.Context, workspaceID string, filter Filter, offset, limit uint64) (ConfigsPage, error)

	// RetrieveByExternalID returns Config for given external ID.
	RetrieveByExternalID(ctx context.Context, externalID string) (Config, error)

	// Update updates an existing Config. A non-nil error is returned
	// to indicate operation failure.
	Update(ctx context.Context, cfg Config) error

	// AssignProfile sets the profile reference for the given Config.
	AssignProfile(ctx context.Context, workspaceID, id, profileID string) error

	// UpdateCerts updates and returns an existing Config certificate and workspaceID.
	// A non-nil error is returned to indicate operation failure.
	UpdateCert(ctx context.Context, workspaceID, id, clientCert, clientKey, caCert string) (Config, error)

	// Remove removes the Config having the provided identifier, that is owned
	// by the specified user.
	Remove(ctx context.Context, workspaceID, id string) error

	// ChangeStatus changes the Status of the Config owned by the specific user.
	ChangeStatus(ctx context.Context, workspaceID, id string, status Status) error
}

type ConfigsPage struct {
	Total   uint64   `json:"total"`
	Offset  uint64   `json:"offset"`
	Limit   uint64   `json:"limit"`
	Configs []Config `json:"configs"`
}

type ContentFormat string

type ContentType string

type DeviceBootstrapProof struct {
	ChallengeID string `json:"challenge_id"`
	DeviceNonce string `json:"device_nonce"`
	Proof       string `json:"proof"`
}

type DeviceContext struct {
	ID          string
	ExternalID  string
	WorkspaceID string
}

type EncryptedBootstrapConfig struct {
	Version     string `json:"version"`
	KeyVersion  uint64 `json:"key_version"`
	ChallengeID string `json:"challenge_id"`
	Nonce       string `json:"nonce"`
	Ciphertext  string `json:"ciphertext"`
}

type Filter struct {
	FullMatch    map[string]string
	PartialMatch map[string]string
}

type PreviousKey struct {
	ID  string
	Key []byte
}

type Profile struct {
	ID              string         `json:"id"`
	WorkspaceID     string         `json:"workspace_id,omitempty"`
	Name            string         `json:"name"`
	Description     string         `json:"description,omitempty"`
	ContentFormat   ContentFormat  `json:"content_format"`
	ContentType     ContentType    `json:"content_type"`
	ContentTemplate string         `json:"content_template,omitempty"`
	Defaults        map[string]any `json:"defaults,omitempty"`
	BindingSlots    []BindingSlot  `json:"binding_slots,omitempty"`
	Version         int            `json:"version,omitempty"`
	CreatedAt       time.Time      `json:"created_at,omitempty"`
	UpdatedAt       time.Time      `json:"updated_at,omitempty"`
}

type ProfileRepository interface {
	// Save persists a new Profile and returns it with server-assigned fields set.
	Save(ctx context.Context, p Profile) (Profile, error)

	// RetrieveByID returns the Profile with the given ID inside the given workspace.
	RetrieveByID(ctx context.Context, workspaceID, id string) (Profile, error)

	// RetrieveAll returns a page of Profiles belonging to the given workspace, optionally filtered by name.
	RetrieveAll(ctx context.Context, workspaceID string, offset, limit uint64, name string) (ProfilesPage, error)

	// Update updates editable fields of the given Profile and returns the updated Profile.
	Update(ctx context.Context, p Profile) (Profile, error)

	// Delete removes the Profile with the given ID from the given workspace.
	Delete(ctx context.Context, workspaceID, id string) error
}

type ProfilesPage struct {
	Total    uint64    `json:"total"`
	Offset   uint64    `json:"offset"`
	Limit    uint64    `json:"limit"`
	Profiles []Profile `json:"profiles"`
}

type RenderContext struct {
	Device   DeviceContext
	Vars     map[string]any
	Bindings map[string]BindingContext
}

type Renderer interface {
	Render(profile Profile, enrollment Config, bindings []BindingSnapshot) ([]byte, error)
}

type ResolveRequest struct {
	Enrollment Config
	Token      string
	Requested  []BindingRequest
}

type SecretCipher struct {
	// contains filtered or unexported fields
}

type Service interface {
	// Add adds new Device Config to the user identified by the provided token.
	Add(ctx context.Context, session smqauthn.Session, token string, cfg Config) (Config, error)

	// View returns Device Config with given ID belonging to the user identified by the given token.
	View(ctx context.Context, session smqauthn.Session, id string) (Config, error)

	// Update updates editable fields of the provided Config.
	Update(ctx context.Context, session smqauthn.Session, cfg Config) error

	// UpdateCert updates an existing Config certificate and token.
	// A non-nil error is returned to indicate operation failure.
	UpdateCert(ctx context.Context, session smqauthn.Session, id, clientCert, clientKey, caCert string) (Config, error)

	// List returns subset of Configs with given search params that belong to the
	// user identified by the given token.
	List(ctx context.Context, session smqauthn.Session, filter Filter, offset, limit uint64) (ConfigsPage, error)

	// Remove removes Config with specified token that belongs to the user identified by the given token.
	Remove(ctx context.Context, session smqauthn.Session, id string) error

	// IssueBootstrapChallenge creates a short-lived challenge for an enrollment.
	IssueBootstrapChallenge(ctx context.Context, externalID string) (BootstrapChallengeResponse, error)

	// Bootstrap authenticates a device proof and returns its rendered Config.
	Bootstrap(ctx context.Context, externalID string, proof DeviceBootstrapProof) (Config, error)

	// EnableConfig enables the Config so its device can successfully bootstrap.
	EnableConfig(ctx context.Context, session smqauthn.Session, id string) (Config, error)

	// DisableConfig disables the Config, preventing its device from bootstrapping.
	DisableConfig(ctx context.Context, session smqauthn.Session, id string) (Config, error)

	// CreateProfile persists a new device Profile.
	CreateProfile(ctx context.Context, session smqauthn.Session, p Profile) (Profile, error)

	// ViewProfile returns the Profile with the given ID.
	ViewProfile(ctx context.Context, session smqauthn.Session, profileID string) (Profile, error)

	// UpdateProfile updates editable fields of the given Profile and returns the updated Profile.
	UpdateProfile(ctx context.Context, session smqauthn.Session, p Profile) (Profile, error)

	// ListProfiles returns a page of Profiles belonging to the workspace.
	ListProfiles(ctx context.Context, session smqauthn.Session, offset, limit uint64, name string) (ProfilesPage, error)

	// DeleteProfile removes the Profile with the given ID.
	DeleteProfile(ctx context.Context, session smqauthn.Session, profileID string) error

	// AssignProfile sets the ProfileID on an existing enrollment (Config).
	AssignProfile(ctx context.Context, session smqauthn.Session, configID, profileID string) error

	// BindResources resolves the requested bindings through their owning services,
	// stores snapshots, and marks the enrollment renderable when all required slots
	// are satisfied.
	BindResources(ctx context.Context, session smqauthn.Session, token, configID string, bindings []BindingRequest) error

	// ListBindings returns all stored binding snapshots for an enrollment.
	ListBindings(ctx context.Context, session smqauthn.Session, configID string) ([]BindingSnapshot, error)

	// RefreshBindings re-resolves all existing bindings for an enrollment and
	// updates the stored snapshots.
	RefreshBindings(ctx context.Context, session smqauthn.Session, token, configID string) error
}

type Status uint8