sensorstate

type FileCredentialStore struct {
	Path string
}

type KeyChoice struct {
	// APIKey is the key to use.
	APIKey string
	// ExpiresAt is its expiry when known (pass it to
	// KeyRenewConfig.CurrentKeyExpiresAt).
	ExpiresAt *time.Time
	// NeverExpires is true when the server said the key has no expiry (pass
	// it to KeyRenewConfig.CurrentKeyNeverExpires). False when unknown.
	NeverExpires bool
	// FromStateFile is true when the key is a renewed key read from the
	// credentials file rather than the configured one.
	FromStateFile bool
	// Reason explains the choice, for the sensor's log.
	Reason string
}

type KeyRenewConfig struct {
	// RenewFraction is the fraction of the key lifetime at which to renew
	// (0 < f < 1). Default 0.5.
	RenewFraction float64

	// MinInterval floors the computed schedule. Default 1m.
	MinInterval time.Duration

	// RetryInterval is the wait before retrying a failed renewal. Default 30s.
	RetryInterval time.Duration

	// OnRotated is called after a successful key swap so the caller can persist
	// the new key (e.g. FileCredentialStore.Save) for the next restart.
	//
	// A non-nil error is treated as a failure, not a warning: the server has
	// already invalidated the previous key, so an unpersisted new key means
	// the next restart comes up with a dead credential. The manager reports
	// the error (stderr + OnPersistError), keeps the running client on the new
	// key, and retries the persist every RetryInterval. It does NOT rotate
	// again until the persist succeeds — rotating on top of an unsaved key
	// would only widen the gap.
	OnRotated func(newKey string, expiresAt *time.Time) error

	// OnPersistError, if set, is called each time OnRotated fails. Use it to
	// surface the condition (metrics, health check, alert).
	OnPersistError func(err error)

	// CurrentKeyExpiresAt is the expiry of the key the client starts with,
	// when the caller knows it (e.g. stored next to the key). When set, the
	// first renewal is scheduled from it instead of rotating immediately.
	CurrentKeyExpiresAt *time.Time

	// CurrentKeyNeverExpires tells the manager the server issued the current
	// key without a TTL. The manager then does nothing: there is nothing to
	// renew, and the discovery rotation would replace a working key for no
	// benefit. Leave false when unknown — the manager then performs one
	// discovery renewal to learn the server's TTL posture.
	CurrentKeyNeverExpires bool

	// Verbose enables debug logging.
	Verbose bool
}

type KeyRenewManager struct {
	// contains filtered or unexported fields
}

type KeyRenewer interface {
	RenewKey(ctx context.Context) (*RenewKeyResponse, error)
	SetAPIKey(key string)
}

type RenewClient struct {
	// contains filtered or unexported fields
}

type RenewError struct{ StatusCode int }

type RenewKeyResponse struct {
	APIKey    string     `json:"api_key"`
	ExpiresAt *time.Time `json:"expires_at,omitempty"`
}

type SensorCredentials struct {
	SensorID  string `json:"sensor_id"`
	APIKey    string `json:"api_key"`
	APIPrefix string `json:"api_prefix"`
	// ExpiresAt is the key's expiry when known (from a key renewal). Pass it
	// to KeyRenewConfig.CurrentKeyExpiresAt on startup so the renewer does
	// not rotate a still-valid key immediately.
	ExpiresAt *time.Time `json:"expires_at,omitempty"`
	// ConfiguredKeyFingerprint is the salted PBKDF2 fingerprint
	// (KeyFingerprint) of the configured key APIKey was renewed from. When
	// the configured key no longer matches it, an administrator issued a new
	// key and the operator configured it: ChooseAPIKey then uses the
	// configured key. Empty in files written before it existed.
	ConfiguredKeyFingerprint string `json:"configured_key_fingerprint,omitempty"`
	// NeverExpires records that the server issued APIKey without an expiry
	// (its key TTL is off), as opposed to an expiry that is not known. Pass it
	// to KeyRenewConfig.CurrentKeyNeverExpires so a restart does not rotate
	// the key again just to learn that.
	NeverExpires bool `json:"never_expires,omitempty"`
}

type StatePersistence struct {
	Persistent bool
	// Reason explains the verdict, for the sensor's log.
	Reason string
}