fleet

type Certificate struct {
	Machine  string
	Build    string
	Hash     string
	Class    string
	Verdict  string
	Evidence string
	At       time.Time
}

type CertifyInput struct {
	Machines  string     // the machines registry
	Only      string     // one machine name; empty with All false is a refusal
	All       bool       // every machine in the registry, under its own roles
	Workloads []Workload // the set to run; nil takes StandardWorkloads
	Certs     string     // the certificates file appended to
	Hash      string     // the standard hash every row carries
	Build     string     // the build every row carries; empty asks each machine its own
	Bin       string     // the install directory the release puts the tools in; "" is $HOME/.local/bin
	Repo      string     // the repository the forge is asked about
	IfStale   bool       // true skips a machine whose every class is current
	MaxAge    time.Duration
	Log       io.Writer // the structured event stream; nil writes none
	Timeout   time.Duration
	DryRun    bool
	Remote    Remote
	Forge     Forge
	Now       func() time.Time
	Stdout    io.Writer
	Stderr    io.Writer
}

type Clock = log.Clock

type Forge interface {
	Runners(repo string) ([]RunnerStatus, error)
}

type Machine struct {
	Name  string   // the bench name every verb's --bench takes
	SSH   string   // the ssh target; an alias in ~/.ssh/config or a host
	OS    string   // linux, darwin, windows
	Arch  string   // x64, amd64, arm64
	Roles []string // sorted, unique, every one from knownRoles
	Seat  string   // the nova-secrets seat on the machine; "" when it carries none
	Cores int      // whole cores, as the machine counts them
	Notes string   // free text; "" when the line said `-`
	Line  int      // the line of the file this came from, for a refusal that can be found
}

type Refusal struct {
	Name   string
	Reason string
	Remedy string
}

type Registry struct {
	// contains filtered or unexported fields
}

type Remote interface {
	Run(ctx context.Context, target, script string) (string, error)
}

type RunnerStatus struct {
	Name   string `json:"name"`
	Status string `json:"status"` // online, offline
}

type Workload struct {
	Class  string         // the name on every line and every row; the file's name
	Roles  []string       // the roles this workload applies to, sorted
	Expect *regexp.Regexp // a pass is this matching the machine's output
	Wall   bool           // true runs the body inside nova-sandbox
	Reads  []string       // the wall's readable roots; `$HOME` is the machine's own
	Forge  string         // ForgeRunners or ForgeRegistry, or "" for a workload the machine runs
	Report bool           // true makes a failure a WARN: measured and never a refusal
	Body   string         // the command run ON the machine
	Source string         // where this workload was read from, for a refusal that can be found
	// contains filtered or unexported fields
}