agent

type Agent struct {
	// contains filtered or unexported fields
}

type Config struct {
	// Server is the control-plane WebSocket URL,
	// e.g. wss://cloop.example.com/api/executors/connect.
	Server string
	// Token is an enrollment token, used only until a credential is issued.
	Token string
	// TokenFile is the file Token was read from, when it came from one.
	//
	// The agent deletes it once the token has been redeemed. An enrollment
	// token is single-use, so after redemption the file holds a dead secret
	// that still looks live: it would be carried into every backup and disk
	// image of the device, and an operator finding it later cannot tell
	// whether it is spent. Removing it makes the credential's lifetime match
	// its usefulness. Set by `cloop executor agent --token-file`, which is
	// how the installed service receives its token without it appearing in
	// ExecStart.
	TokenFile string
	// CredentialPath is where the long-lived credential is persisted.
	// Empty uses DefaultCredentialPath().
	CredentialPath string
	// WorkDirRoot confines every workload. Empty uses ~/.cloop/work.
	WorkDirRoot string
	// MaxConcurrent bounds simultaneous workloads. Zero means NumCPU.
	MaxConcurrent int
	// Labels are operator-supplied scheduler selectors.
	Labels map[string]string
	// RetainBytes overrides DefaultRetainBytes per workload.
	RetainBytes int
	// Pin is the control plane's expected SPKI fingerprint,
	// "sha256:<base64>". Several may be given comma-separated so a key
	// rotation can be staged. Empty means ordinary PKI verification only.
	// Taken from the stored credential when the flag is not passed.
	Pin string
	// RootCAFile adds a PEM bundle to the trusted roots, for a control plane
	// whose certificate the system store does not know — a private CA, or a
	// `cloop hub tls-init` development certificate. This is the supported way
	// to reach such a server; there is deliberately no way to disable
	// verification instead.
	RootCAFile string
	// InsecureTransport permits plaintext ws:// to a non-loopback host.
	// It exists for links already protected some other way (an established
	// mTLS tunnel, a lab with no network). Every connection attempt logs a
	// warning while it is on.
	InsecureTransport bool
	// Logf receives operational messages. Nil discards them.
	Logf func(format string, args ...any)
	// Now overrides the clock for tests.
	Now func() time.Time
	// Dial overrides connection establishment, so tests can drive the agent
	// over an in-memory pipe instead of a real socket.
	Dial func(ctx context.Context, server, token string) (remote.Conn, error)
}

type Credential struct {
	// Server is the control-plane WebSocket URL this credential is valid for.
	// Stored alongside the secret so `cloop executor agent` can be re-run with
	// no flags at all once enrolled.
	Server string `json:"server"`
	// AgentID is the control plane's identifier for this device. It is also
	// the executor ID projects bind to.
	AgentID string `json:"agent_id"`
	// Name is the operator-facing label chosen at enrollment.
	Name string `json:"name,omitempty"`
	// Credential is the long-lived secret. The control plane stores only its
	// hash, so this file is the only copy in existence.
	Credential string `json:"credential"`
	// WorkDirRoot is the filesystem root every workload is confined beneath.
	WorkDirRoot string `json:"workdir_root,omitempty"`
	// Pin is the control plane's SPKI fingerprint ("sha256:<base64>"), or
	// "" when the device was enrolled without one.
	//
	// It is persisted alongside the secret because pinning that only applied
	// to the enrollment connection would protect the least valuable moment
	// and leave every subsequent one — thousands of reconnects carrying a
	// long-lived credential, over years, from a device nobody visits —
	// trusting whatever answers DNS. Storing it makes the pin a property of
	// the device's identity rather than of one command line.
	Pin string `json:"pin,omitempty"`
	// EnrolledAt records when the credential was issued.
	EnrolledAt time.Time `json:"enrolled_at"`
}

type DetectOptions struct {
	// WorkDirRoot is the confinement root to advertise.
	WorkDirRoot string
	// MaxConcurrent is the agent's workload ceiling.
	MaxConcurrent int
	// Labels are operator-supplied scheduler selectors.
	Labels map[string]string
	// LookPath overrides exec.LookPath for tests.
	LookPath func(string) (string, error)
	// MemoryMB overrides memory detection for tests; -1 forces "unknown".
	MemoryMB int
}