agentupgrades

type AgentUpgradeAttempt struct {
	// Server-minted attempt identifier
	AttemptID     string
	Namespace     string
	WorkspaceName string
	WorkspaceUID  string
	// Controller-owned VM UID the reservation is bound to
	VMUID string
	// UID of the administrator that admitted the attempt
	ActorID string
	// Attempt lifecycle state
	State                            string
	TargetID                         string
	TargetManifestSha256             string
	ExpectedInstalledInventorySha256 string
	// Whether the admitted attempt may run the bounded reboot sequence
	AllowReboot bool
	// An administrator requested safe-boundary cancellation
	CancelRequested bool
	// Linked execution admission record (recording authorization)
	ExecutionID string
	// Protected attempt recording
	RecordingID string
	// Independently authorized recording link
	RecordingURL string
	// Canonical status URL for this attempt
	StatusURL string
	// Last reconciled guest journal sequence
	JournalSequence uint64
	// Pinned rollback predecessor target
	PredecessorTargetID *string
	// Pinned rollback predecessor manifest digest
	PredecessorManifestSha256 *string
	// Bounded machine-readable failure code
	ErrorCode *string
	// RFC3339 admission timestamp
	AdmittedAt          string
	StagingAt           *string
	PreparedAt          *string
	InstallingAt        *string
	AwaitingRebootAt    *string
	VerifyingAt         *string
	RollbackRequestedAt *string
	RollingBackAt       *string
	TerminalAt          *string
	UpdatedAt           string
}

type AgentUpgradeAvailability struct {
	// Platform policy admits agent upgrades
	PolicyEnabled bool
	// Durable attempt/recording storage is ready
	StorageAvailable bool
	// Workspace resolves as an eligible running Windows VM
	WorkspaceEligible bool
	// Fresh authenticated guest inventory is available (guest integration)
	InventoryAvailable bool
	// A start request would be admitted right now
	Admissible bool
	// Why start would be denied; empty when admissible
	DenyReason string
	// Reservation-holding attempt for this VM, when present
	ActiveAttemptID *string
	// Resolved controller-owned VM UID, when eligible
	VMUID *string
}

type AgentUpgradeStartPayload struct {
	Namespace string
	Name      string
	// Operator-approved immutable target
	TargetID string
	// Expected signed manifest digest for the target
	TargetManifestSha256 string
	// Client-observed VM UID; must match the current controller-owned UID
	ExpectedVMUID string
	// Client-observed execution revocation epoch
	ExpectedRevocationEpoch uint64
	// Client-observed installed inventory digest (re-verified before install)
	ExpectedInstalledInventorySha256 string
	// Client-chosen key; an identical replay returns the original attempt
	IdempotencyKey string
	// Permit the recorded bounded reboot sequence
	AllowReboot bool
}

type AvailabilityPayload struct {
	Namespace string
	Name      string
}

type CancelPayload struct {
	Namespace string
	Name      string
	AttemptID string
}

type Client struct {
	AvailabilityEndpoint goa.Endpoint
	StartEndpoint        goa.Endpoint
	StatusEndpoint       goa.Endpoint
	CancelEndpoint       goa.Endpoint
	RollbackEndpoint     goa.Endpoint
}

type Conflict string

type Endpoints struct {
	Availability goa.Endpoint
	Start        goa.Endpoint
	Status       goa.Endpoint
	Cancel       goa.Endpoint
	Rollback     goa.Endpoint
}

type Forbidden string

type Invalid string

type NotFound string

type RollbackPayload struct {
	Namespace string
	Name      string
	AttemptID string
}

type Service interface {
	// Fresh availability for one workspace; administrative access required
	Availability(context.Context, *AvailabilityPayload) (res *AgentUpgradeAvailability, err error)
	// Admit a single explicit upgrade; returns 202 with the durable attempt
	// identity
	Start(context.Context, *AgentUpgradeStartPayload) (res *AgentUpgradeAttempt, err error)
	// Protected attempt metadata/progress/outcome and independently authorized
	// recording links
	Status(context.Context, *StatusPayload) (res *AgentUpgradeAttempt, err error)
	// Request safe cancellation; never promises to kill an active MSI transaction
	Cancel(context.Context, *CancelPayload) (res *AgentUpgradeAttempt, err error)
	// Admit a separate, explicit rollback to that attempt's pinned previous payload
	Rollback(context.Context, *RollbackPayload) (res *AgentUpgradeAttempt, err error)
}

type StatusPayload struct {
	Namespace string
	Name      string
	AttemptID string
}

type Unauthorized string

type Unavailable string