state

package

Go to main page

Versions in this module

v0

v0.17.2

Nov 2, 2026

v0.17.1

Nov 1, 2026

v0.17.0

Oct 29, 2026

Changes in this version

+ const HostRoleApp

+ const HostRoleControl

+ const PendingJoinLifetime

+ var ErrInstallHost = ...(...)

+ func ClusterJoinAddrKey(addr string) string

+ type AppFate struct

+ Deleted bool

+ DiscardStorage bool

type Apps

+ PortRangeEnd int

+ PortRangeStart int

type BackupAttempt

+ LiveVolumes []string

type BundleSource

+ func (b *BundleSource) ServicesForApp(ctx context.Context, appID string) ([]backup.ServiceRef, error)

+ type Cluster struct

+ func NewCluster(db *DB, key []byte) *Cluster

+ func (c *Cluster) AddHost(ctx context.Context, h Host) (Host, error)

+ func (c *Cluster) CertRevoked(ctx context.Context, sha string) (bool, error)

+ func (c *Cluster) CheckJoinToken(ctx context.Context, presented secret.Value) (JoinToken, error)

+ func (c *Cluster) ClearHostLost(ctx context.Context, hostID string) error

+ func (c *Cluster) ConfirmHostCert(ctx context.Context, hostID, current string) (bool, error)

+ func (c *Cluster) ConfirmJoin(ctx context.Context, hostID string) (bool, error)

+ func (c *Cluster) CreateJoinToken(ctx context.Context, roles []string, maxUses int, createdBy string, ...) (IssuedJoinToken, error)

+ func (c *Cluster) Fresh(ctx context.Context) (accounts, apps bool, err error)

+ func (c *Cluster) Host(ctx context.Context, hostID string) (Host, error)

+ func (c *Cluster) HostByCert(ctx context.Context, sha string) (Host, bool, error)

+ func (c *Cluster) Hosts(ctx context.Context) ([]Host, error)

+ func (c *Cluster) Join(ctx context.Context, presented secret.Value, h Host) (JoinToken, Host, error)

+ func (c *Cluster) JoinTokens(ctx context.Context) ([]JoinToken, error)

+ func (c *Cluster) LostHosts(ctx context.Context) (map[string]bool, error)

+ func (c *Cluster) MarkHostLost(ctx context.Context, hostID, by string) (bool, error)

+ func (c *Cluster) OnePerHost(ctx context.Context, job, host string, pass func(context.Context)) (bool, error)

+ func (c *Cluster) RecordFirstHost(ctx context.Context, h Host) (Host, bool, error)

+ func (c *Cluster) RecordHostFence(ctx context.Context, hostID, fenceID string) (bool, error)

+ func (c *Cluster) RedeemJoinToken(ctx context.Context, presented secret.Value) (JoinToken, error)

+ func (c *Cluster) RemoveHost(ctx context.Context, hostID string) (Host, error)

+ func (c *Cluster) RenewHostCert(ctx context.Context, hostID, presented, next string, nextPEM []byte) (Host, bool, error)

+ func (c *Cluster) RevokeJoinToken(ctx context.Context, tokenID string) (JoinToken, error)

+ func (c *Cluster) Revoked(ctx context.Context) (Revoked, error)

+ func (c *Cluster) RotateHostCert(ctx context.Context, hostID, next string) error

+ func (c *Cluster) SetHostFenced(ctx context.Context, hostID string, fenced bool) (bool, error)

+ func (c *Cluster) SetHostPing(ctx context.Context, hostID, address, certSHA256 string) error

+ func (c *Cluster) TouchHost(ctx context.Context, hostID string) error

+ type Hold struct

+ Home string

+ HomeFenced bool

+ HomeLost bool

+ Promoting bool

+ type Host struct

+ Address string

+ CertSHA256 string

+ ID string

+ JoinedAt time.Time

+ JoinedWith string

+ KeySHA256 string

+ LastSeenAt *time.Time

+ Lost bool

+ Name string

+ NextCertPEM []byte

+ Pending bool

+ PingAddress string

+ PingCertSHA256 string

+ Platform string

+ PrevCertSHA256 string

+ Roles []string

+ Version string

+ func (h Host) HoldsCert(sha string) bool

+ func (h Host) Pins() string

+ type IssuedJoinToken struct

+ Secret secret.Value

+ Token JoinToken

+ type JoinToken struct

+ CreatedAt time.Time

+ CreatedBy string

+ ExpiresAt time.Time

+ ID string

+ MaxUses int

+ RevokedAt *time.Time

+ Roles []string

+ Uses int

type Reconciles

+ func (r *Reconciles) ForApp(ctx context.Context, appID string) (Reconcilable, bool, error)

+ type Revoked struct

+ Certs []string

+ Hosts []string

+ type Standby struct

+ AppID string

+ Copies int

+ Home string

+ Host string

+ LastError string

+ LastErrorCode string

+ LastErrorRemedy string

+ Priority int

+ PromotedAt *time.Time

+ PromotingAt *time.Time

+ RuntimeRef string

+ ShippedAt *time.Time

+ SpecID string

+ StaleHost string

+ Unreplicated []string

+ Version int64

+ Volumes int

+ type StandbyApp struct

+ AppID string

+ Deleted bool

+ DesiredState string

+ HomeLost bool

+ PinnedSpecID string

+ Standby *Standby

+ State string

+ type Standbys struct

+ func NewStandbys(db *DB) *Standbys

+ func (s *Standbys) AppState(ctx context.Context, appID string) (string, bool, error)

+ func (s *Standbys) Candidates(ctx context.Context) ([]StandbyApp, error)

+ func (s *Standbys) Delete(ctx context.Context, appID string) error

+ func (s *Standbys) Fate(ctx context.Context, appID string) (AppFate, error)

+ func (s *Standbys) Get(ctx context.Context, appID string) (Standby, bool, error)

+ func (s *Standbys) Held(ctx context.Context, appID string) (Hold, error)

+ func (s *Standbys) HomedOn(ctx context.Context, host string) ([]Standby, error)

+ func (s *Standbys) HostHeld(ctx context.Context, host string) (Hold, error)

+ func (s *Standbys) LeftOn(ctx context.Context, host string) ([]Standby, error)

+ func (s *Standbys) Save(ctx context.Context, sb Standby) error

+ func (s *Standbys) SaveIf(ctx context.Context, sb Standby, prev *Standby) (bool, error)

+ func (s *Standbys) SaveIfLive(ctx context.Context, sb Standby, prev *Standby) (bool, error)

+ type Uploads struct

+ func NewUploads(db *DB) *Uploads

+ func (u *Uploads) AddUpload(ctx context.Context, appID string, r io.Reader) (bool, error)

+ func (u *Uploads) DeleteUpload(ctx context.Context, appID string) error

+ func (u *Uploads) HasUpload(ctx context.Context, appID string) (bool, error)

+ func (u *Uploads) OpenUpload(ctx context.Context, appID string) (io.ReadCloser, bool, error)

+ func (u *Uploads) PutUpload(ctx context.Context, appID string, r io.Reader) error

type Users

+ func (u *Users) CheckSetupToken(ctx context.Context, token secret.Value) error

v0.16.0

Oct 26, 2026

Changes in this version

+ const UnusedOAuthClientLifetime

+ type OAuthClient struct

+ CreatedAt time.Time

+ ID string

+ Name string

+ RedirectURIs []string

+ UsedAt *time.Time

+ type OAuthClients struct

+ func NewOAuthClients(db *DB) *OAuthClients

+ func (c *OAuthClients) ByID(ctx context.Context, id string) (OAuthClient, bool, error)

+ func (c *OAuthClients) Create(ctx context.Context, cl OAuthClient) error

+ type OAuthCode struct

+ ApprovedBy string

+ ClientID string

+ CodeChallenge string

+ CodeHash string

+ CreatedAt time.Time

+ ExpiresAt time.Time

+ RedirectURI string

+ UserID string

+ type OAuthCodes struct

+ func NewOAuthCodes(db *DB) *OAuthCodes

+ func (c *OAuthCodes) Create(ctx context.Context, code OAuthCode) error

+ func (c *OAuthCodes) Take(ctx context.Context, codeHash string) (OAuthCode, bool, error)

v0.15.1

Oct 25, 2026

v0.15.0

Oct 24, 2026

Changes in this version

+ var ErrBuiltinRole = ...("Make a custom role with the permissions you want, and grant that.")

type App

+ NoticeCount int

type Groups

+ func (g *Groups) Rename(ctx context.Context, groupID, name string) (string, error)

+ type NoticeIgnores struct

+ func NewNoticeIgnores(db *DB) *NoticeIgnores

+ func (n *NoticeIgnores) For(ctx context.Context, userID, appID string) (map[string]string, error)

+ func (n *NoticeIgnores) Ignore(ctx context.Context, userID, appID, key, fingerprint string) error

+ func (n *NoticeIgnores) Restore(ctx context.Context, userID, appID, key string) error

+ type RoleChange struct

+ Name *string

+ SetVerbs bool

+ Verbs []authz.Verb

+ type RoleHolder struct

+ GroupID string

+ ID string

+ Kind string

+ Name string

+ Source string

+ SourceName string

+ Username string

+ Via string

type Roles

+ func (r *Roles) AppsGranted(ctx context.Context, roleID string) ([]string, error)

+ func (r *Roles) ByID(ctx context.Context, roleID string) (RoleRow, bool, error)

+ func (r *Roles) Holders(ctx context.Context, roleID string, page Page) ([]RoleHolder, string, int, int, error)

+ func (r *Roles) UpdateCustom(ctx context.Context, roleID string, change RoleChange) (RoleRow, RoleRow, error)

type Subscription

+ LastDeliveryAt *time.Time

type Users

+ func (u *Users) AdapterNames(ctx context.Context, adapterIDs []string) (map[string]string, error)

v0.14.0

Oct 23, 2026

Changes in this version

+ const PendingStale

+ const PendingWait

+ type AttemptLimit struct

+ Key string

+ Max int

+ Window time.Duration

type FailedAttempts

+ func (p *FailedAttempts) Fail(ctx context.Context, res Reservation) error

+ func (p *FailedAttempts) Release(ctx context.Context, res Reservation) error

+ func (p *FailedAttempts) Reserve(ctx context.Context, limits ...AttemptLimit) (Reservation, error)

+ type HeldAttempt struct

+ At time.Time

+ Key string

+ type Reservation struct

+ Held []HeldAttempt

+ Over int

+ Wait time.Duration

+ func (r Reservation) Refused() bool

+ type SessionRevoker struct

+ func NewSessionRevoker(db *DB) *SessionRevoker

+ func (s *SessionRevoker) RevokeAllForUser(ctx context.Context, userID string) error

+ type Started struct

+ Cookie secret.Value

+ Session Session

+ type TokenRevoker struct

+ func NewTokenRevoker(db *DB) *TokenRevoker

+ func (r *TokenRevoker) RevokeAllForUser(ctx context.Context, userID string) (int64, error)

type Tokens

+ func (t *Tokens) RevokeAllForUser(ctx context.Context, userID string) (int64, error)

v0.13.0

Oct 21, 2026

Changes in this version

+ const AppOwnersChannel

type App

+ Orphaned bool

+ StoppedForOrphan bool

+ type CLISignIn struct

+ ApprovedBy string

+ CodeChallenge string

+ CodeHash string

+ CreatedAt time.Time

+ ExpiresAt time.Time

+ TokenName string

+ UserID string

+ type CLISignIns struct

+ func NewCLISignIns(db *DB) *CLISignIns

+ func (c *CLISignIns) Create(ctx context.Context, s CLISignIn) error

+ func (c *CLISignIns) Take(ctx context.Context, codeHash string) (CLISignIn, bool, error)

type Deployment

+ NewerRevision int

+ type OrphanApp struct

+ AppID string

+ Name string

+ OrphanedAt time.Time

+ Stopped bool

+ type Orphans struct

+ func NewOrphans(db *DB) *Orphans

+ func (o *Orphans) Administrators(ctx context.Context) ([]string, error)

+ func (o *Orphans) ClearOwned(ctx context.Context) ([]string, error)

+ func (o *Orphans) MarkAnnounced(ctx context.Context, appIDs []string) error

+ func (o *Orphans) MarkOrphaned(ctx context.Context, appID string, stop bool) (marked, stopped bool, err error)

+ func (o *Orphans) NewlyOrphaned(ctx context.Context) ([]OrphanApp, error)

+ func (o *Orphans) Unannounced(ctx context.Context) ([]OrphanApp, error)

v0.12.0

Oct 20, 2026

v0.11.0

Oct 20, 2026

Changes in this version

type AdapterCredentials

+ func NewNotifyAuthorizations(db *DB, adapter api.SecretsAdapter, adapterRef string) *AdapterCredentials

type Subscription

+ Channel string

type SubscriptionPatch

+ Channel *string

v0.10.0

Oct 19, 2026

Changes in this version

+ func ProviderIDTaken(providerID string) error

type ProviderSettings

+ ID string

v0.9.0

Oct 18, 2026

Changes in this version

+ func SignInCodeKey(userID string) string

type App

+ Access string

+ OwnerName string

type Session

+ IssuedAt time.Time

+ type TwoFactor struct

+ func NewTwoFactor(db *DB, adapter api.SecretsAdapter, adapterRef string) *TwoFactor

+ func (t *TwoFactor) AcceptStep(ctx context.Context, userID string, step int64) (bool, error)

+ func (t *TwoFactor) Disable(ctx context.Context, userID string, reoffer bool) (bool, error)

+ func (t *TwoFactor) Enable(ctx context.Context, userID string, v secret.Value, lastStep int64, ...) error

+ func (t *TwoFactor) MarkOffered(ctx context.Context, userID string) error

+ func (t *TwoFactor) PutPending(ctx context.Context, userID string, v secret.Value) error

+ func (t *TwoFactor) ReplaceRecoveryCodes(ctx context.Context, userID string, digests []string) error

+ func (t *TwoFactor) Secrets(ctx context.Context, userID string) (current, pending secret.Value, err error)

+ func (t *TwoFactor) Status(ctx context.Context, userID string) (TwoFactorStatus, error)

+ func (t *TwoFactor) UseRecoveryCode(ctx context.Context, userID, digest string) (bool, error)

+ type TwoFactorStatus struct

+ EnabledAt *time.Time

+ LastStep int64

+ OfferedAt *time.Time

+ RecoveryCodesLeft int

type User

+ TwoFactorEnabled bool

v0.8.0

Oct 16, 2026

Changes in this version

type Apps

+ ReservedHostnames func(ctx context.Context) []string

type Grants

+ func (g *Grants) InstallRoleOf(ctx context.Context, kind, principalID string) (string, bool, error)

type Profile

+ EmailBySelf bool

v0.7.0

Oct 15, 2026

v0.6.1

Oct 14, 2026

v0.6.0

Oct 14, 2026

Changes in this version

type Adapters

+ func (a *Adapters) Save(ctx context.Context, c AdapterConfig) (Replaced, error)

type Grants

+ func (g *Grants) InstallRolesForUsers(ctx context.Context, userIDs []string) (map[string][]HeldInstallRole, error)

+ type HeldInstallRole struct

+ RoleID string

+ RoleName string

+ Via InstallRoleVia

+ type InstallRoleVia struct

+ GroupID string

+ Kind string

+ Name string

+ Source string

+ SourceName string

type Reconciles

+ func (r *Reconciles) RecoverCurrentDeploy(ctx context.Context, appID string) error

+ type Replaced struct

+ ID string

+ Name string

v0.5.0

Oct 13, 2026

Changes in this version

type App

+ SecurityAwaitingImage bool

type Detections

+ func (d *Detections) Rebuild(ctx context.Context, appID string, body any) (bool, error)

type Scan

+ Image string

v0.4.0

Oct 11, 2026

Changes in this version

+ const AppRole

+ const ArchiverRole

+ const AttemptFailed

+ const AttemptSkipped

+ const AttemptTaken

+ const DecisionApprove

+ const DecisionReject

+ const DefaultPageSize

+ const DeliveryFailed

+ const DeliveryPending

+ const DeliverySucceeded

+ const DeployApplying

+ const DeployAwaitingApproval

+ const DeployBuilding

+ const DeployExpired

+ const DeployFailed

+ const DeployPending

+ const DeployRejected

+ const DeploySucceeded

+ const DeploySuperseded

+ const DestinationNotify

+ const DestinationWebhook

+ const DetectionBlocked

+ const DetectionFailed

+ const DetectionNeedsAnswers

+ const DetectionReady

+ const DetectionRunning

+ const DetectionUnknown

+ const FirstAccountLock

+ const FlowSignIn

+ const FlowTest

+ const HeartbeatInterval

+ const LocalAdapterID

+ const MaxAttempts

+ const MaxPageSize

+ const ReplicaStale

+ const SigningKeyField

+ const SnapshotSuffix

+ const StateArchived

+ const StateDegraded

+ const StateDeploying

+ const StateDraft

+ const StateFailed

+ const StateProposed

+ const StateRunning

+ const StateStopped

+ const SubscriptionsChannel

+ const SuspendedByAdmin

+ const TokenAccount

+ const TokenDelegated

+ const TotalCap

+ const TriggerManual

+ const TriggerRollback

+ const UnlockLifetime

+ var ErrAlreadySetUp = ...("Sign in with an existing account. An administrator can create one for you.")

+ var ErrBadCursor = ...("Leave the cursor out to start from the first page.")

+ var ErrIdentityTaken = ...(...)

+ var ErrSCIMConflict = errs.New(errs.ValidInvalid, ...)

+ var ErrSetupTokenWrong = ...(...)

+ func CanCopyDatabase(ctx context.Context, ownerURL string) error

+ func ConnectArchiver(ctx context.Context, ownerURL string, password secret.Value) (*pgxpool.Pool, error)

+ func DefaultSCIMIdentityAttribute(kind string) string

+ func DropSnapshot(ctx context.Context, ownerURL string) error

+ func HeaderField(name string) string

+ func Migrate(ctx context.Context, ownerURL string) error

+ func Regrant(ctx context.Context, ownerURL string) error

+ func RestoreSnapshot(ctx context.Context, ownerURL string) error

+ func SignInAddrKey(addr string) string

+ func SignInUsernameKey(username string) string

+ func Snapshot(ctx context.Context, ownerURL string) error

+ func SnapshotName(ownerURL string) (string, error)

+ func SuspendedBySCIM(providerID string) string

+ type AIAssignment struct

+ AdapterID string

+ Function string

+ Model string

+ UpdatedAt time.Time

+ UpdatedBy string

+ type AIAssignments struct

+ func NewAIAssignments(db *DB) *AIAssignments

+ func (s *AIAssignments) Delete(ctx context.Context, function string) error

+ func (s *AIAssignments) Get(ctx context.Context, function string) (AIAssignment, bool, error)

+ func (s *AIAssignments) List(ctx context.Context) ([]AIAssignment, error)

+ func (s *AIAssignments) Put(ctx context.Context, a AIAssignment) error

+ type AcmeAccount struct

+ Directory string

+ Email string

+ KeyPEM secret.Value

+ Registration json.RawMessage

+ type Activity struct

+ func NewActivity(db *DB) *Activity

+ func (a *Activity) IdleCandidates(ctx context.Context, d IdleDefaults, now time.Time) ([]IdleApp, error)

+ func (a *Activity) IdleStatus(ctx context.Context, appID string) (IdleStatus, error)

+ func (a *Activity) RecordActivity(ctx context.Context, seen map[string]time.Time) error

+ func (a *Activity) SetIdleNotice(ctx context.Context, appID string, which IdleNotice, at *time.Time) error

+ func (a *Activity) SetIdleSettings(ctx context.Context, appID string, s IdleSettings) error

+ func (a *Activity) StopForIdle(ctx context.Context, appID string) (bool, error)

+ type AdapterConfig struct

+ Category string

+ Config json.RawMessage

+ Enabled bool

+ ID string

+ IsDefault bool

+ Kind string

+ Name string

+ UpdatedAt time.Time

+ type AdapterCredentials struct

+ func NewAdapterCredentials(db *DB, adapter api.SecretsAdapter, adapterRef string) *AdapterCredentials

+ func NewIdentityCredentials(db *DB, adapter api.SecretsAdapter, adapterRef string) *AdapterCredentials

+ func NewRegistryCredentials(db *DB, adapter api.SecretsAdapter, adapterRef string) *AdapterCredentials

+ func NewSourceAuthorizations(db *DB, adapter api.SecretsAdapter, adapterRef string) *AdapterCredentials

+ func (c *AdapterCredentials) Delete(ctx context.Context, adapterID, field string) error

+ func (c *AdapterCredentials) Fields(ctx context.Context) (map[string][]string, error)

+ func (c *AdapterCredentials) Put(ctx context.Context, adapterID, field string, v secret.Value) error

+ func (c *AdapterCredentials) Resolve(ctx context.Context, adapterID string) (map[string]secret.Value, error)

+ type Adapters struct

+ func NewAdapters(db *DB) *Adapters

+ func (a *Adapters) DeleteInCategory(ctx context.Context, id, category string) error

+ func (a *Adapters) List(ctx context.Context) ([]AdapterConfig, error)

+ func (a *Adapters) Upsert(ctx context.Context, c AdapterConfig) error

+ type Allocations struct

+ func NewAllocations(db *DB) *Allocations

+ func (a *Allocations) AllocatedOn(ctx context.Context, adapterRef, excludeAppID string) (planner.Allocation, error)

+ func (a *Allocations) Hold(ctx context.Context, runtimeRef string, fn func(context.Context) error) error

+ type AnonymousGrant struct

+ ID string

+ PasscodeHash string

+ type App struct

+ Address string

+ CanManage bool

+ CreatedAt time.Time

+ DeletedAt *time.Time

+ DesiredState string

+ Detection *DetectionSummary

+ Favorite bool

+ ID string

+ IconUpdatedAt *time.Time

+ Name string

+ OwnerUserID string

+ PinnedSpecID string

+ Routing spec.Routing

+ SectionID string

+ SecurityScanning bool

+ SecurityScore *int

+ SecurityScoreFixable *int

+ SecurityVerdict string

+ Slug string

+ Source spec.Source

+ State string

+ StoppedForDisk bool

+ StoppedForIdle bool

+ UpdatedAt time.Time

+ type AppLimitReached struct

+ Limit int

+ Owned int

+ func (e *AppLimitReached) Error() string

+ type AppLimits struct

+ func NewAppLimits(db *DB) *AppLimits

+ func (l *AppLimits) Facts(ctx context.Context, userID string) (LimitFacts, error)

+ func (l *AppLimits) GroupMaxApps(ctx context.Context, groupID string) (*int, error)

+ func (l *AppLimits) SetGroupMaxApps(ctx context.Context, groupID string, maxApps *int) error

+ func (l *AppLimits) SetUserMaxApps(ctx context.Context, userID string, maxApps *int) error

+ type AppWithStorage struct

+ AppID string

+ Retain int

+ Spec []byte

+ type ApprovalDecision struct

+ Comment string

+ DecidedAt time.Time

+ Decision string

+ PrincipalID string

+ PrincipalName string

+ type ApprovalReason struct

+ Message string

+ Reason string

+ type Apps struct

+ func NewApps(db *DB) *Apps

+ func (a *Apps) Archive(ctx context.Context, appID string) error

+ func (a *Apps) AwaitingTeardown(ctx context.Context, limit int) ([]TeardownTarget, error)

+ func (a *Apps) ByID(ctx context.Context, appID string) (App, bool, error)

+ func (a *Apps) ByPath(ctx context.Context, requestPath string) (App, *spec.AppSpec, string, bool, error)

+ func (a *Apps) ByRouting(ctx context.Context, by, value string) (App, *spec.AppSpec, bool, error)

+ func (a *Apps) CheckAddress(ctx context.Context, appID string, r spec.Routing) error

+ func (a *Apps) ClearIcon(ctx context.Context, appID string) error

+ func (a *Apps) Create(ctx context.Context, name, slug, ownerUserID, createdBy string, ...) (App, error)

+ func (a *Apps) CreateRevision(ctx context.Context, appID string, s *spec.AppSpec, origin spec.Origin, ...) (Revision, error)

+ func (a *Apps) CreateSection(ctx context.Context, userID, name string) (Section, error)

+ func (a *Apps) CreateWithin(ctx context.Context, name, slug, ownerUserID, createdBy string, ...) (App, error)

+ func (a *Apps) DeleteSection(ctx context.Context, userID, sectionID string) (bool, error)

+ func (a *Apps) DiscardStorage(ctx context.Context, appID string) error

+ func (a *Apps) DueForBackup(ctx context.Context, takenSince, triedSince time.Time, limit int) ([]AppWithStorage, error)

+ func (a *Apps) ForgetVolume(ctx context.Context, appID, volumeID string) error

+ func (a *Apps) IconOf(ctx context.Context, appID string) (Icon, bool, error)

+ func (a *Apps) Known(ctx context.Context, appID string) (bool, error)

+ func (a *Apps) ListAll(ctx context.Context) ([]App, error)

+ func (a *Apps) ListAllPage(ctx context.Context, page Page) ([]App, string, int, error)

+ func (a *Apps) ListForPrincipal(ctx context.Context, p authz.Principal) ([]App, error)

+ func (a *Apps) ListForPrincipalPage(ctx context.Context, p authz.Principal, page Page) ([]App, string, int, error)

+ func (a *Apps) ListForUse(ctx context.Context, p authz.Principal, page Page, every bool) ([]App, string, error)

+ func (a *Apps) ListRevisions(ctx context.Context, appID string) ([]Revision, error)

+ func (a *Apps) Live(ctx context.Context, appID string) (bool, error)

+ func (a *Apps) LiveApps(ctx context.Context, f planner.InventoryFilter) ([]planner.InventoryApp, error)

+ func (a *Apps) MarkBundleDestroyed(ctx context.Context, appID string) error

+ func (a *Apps) OrphanedVolumes(ctx context.Context, limit int) ([]OrphanedVolume, error)

+ func (a *Apps) Pin(ctx context.Context, appID, specID, newState, pinnedBy string) error

+ func (a *Apps) PlaceApp(ctx context.Context, userID, sectionID, appID string) (bool, error)

+ func (a *Apps) PruneSpecRevisions(ctx context.Context) (int, error)

+ func (a *Apps) Rename(ctx context.Context, appID, name string) error

+ func (a *Apps) RenameSection(ctx context.Context, userID, sectionID, name string) (Section, bool, error)

+ func (a *Apps) RevisionByID(ctx context.Context, specID string) (Revision, bool, error)

+ func (a *Apps) RevisionByNumber(ctx context.Context, appID string, number int) (Revision, bool, error)

+ func (a *Apps) Sections(ctx context.Context, userID string) ([]Section, error)

+ func (a *Apps) SetDesiredState(ctx context.Context, appID, desired string) error

+ func (a *Apps) SetFavorite(ctx context.Context, userID, appID string, favorite bool) error

+ func (a *Apps) SetIcon(ctx context.Context, appID, contentType string, data []byte) error

+ func (a *Apps) SetSource(ctx context.Context, appID string, src spec.Source) error

+ func (a *Apps) SetState(ctx context.Context, appID, appState string) error

+ func (a *Apps) SetStateIf(ctx context.Context, appID, from, to string) error

+ func (a *Apps) UnplaceApp(ctx context.Context, userID, sectionID, appID string) error

+ func (a *Apps) VolumeCount(ctx context.Context, appID string) (int, error)

+ func (a *Apps) WithAutoDeploy(ctx context.Context) ([]App, error)

+ func (a *Apps) WithStorage(ctx context.Context) ([]AppWithStorage, error)

+ type AuditCursor struct

+ ID int64

+ TxID uint64

+ type AuditSinkState struct

+ AdapterID string

+ Attempts int

+ CursorAt *time.Time

+ CursorID int64

+ CursorTxID uint64

+ DeliveredAt *time.Time

+ DeliveredCount int64

+ DisabledAt *time.Time

+ DisabledReason string

+ FailingSince *time.Time

+ GapFrom *time.Time

+ GapTo *time.Time

+ HasCursor bool

+ LastError string

+ LastErrorAt *time.Time

+ NextAttemptAt *time.Time

+ type AuditSinks struct

+ func NewAuditSinks(db *DB) *AuditSinks

+ func (s *AuditSinks) Backlog(ctx context.Context, st AuditSinkState, limit int) (int, error)

+ func (s *AuditSinks) Delivered(ctx context.Context, adapterID string, txid uint64, id int64, n int, ...) (bool, error)

+ func (s *AuditSinks) Disable(ctx context.Context, adapterID, reason string, at time.Time) (bool, error)

+ func (s *AuditSinks) Failed(ctx context.Context, adapterID, message string, at, next time.Time) (AuditSinkState, error)

+ func (s *AuditSinks) Get(ctx context.Context, adapterID string, start *AuditCursor) (AuditSinkState, error)

+ func (s *AuditSinks) Holds(ctx context.Context, st AuditSinkState, lo, hi time.Time) (bool, error)

+ func (s *AuditSinks) List(ctx context.Context) ([]AuditSinkState, error)

+ func (s *AuditSinks) Resume(ctx context.Context, adapterID string, at time.Time) (AuditSinkState, error)

+ func (s *AuditSinks) Skipped(ctx context.Context, adapterID string, txid uint64, id int64, at time.Time) error

+ type AuthzStore struct

+ func NewAuthzStore(db *DB) *AuthzStore

+ func (s *AuthzStore) AnonymousAccess(ctx context.Context, appID string) (granted, passcode bool, err error)

+ func (s *AuthzStore) ControlGrantsFor(ctx context.Context, appID string, p authz.Principal) ([]authz.Grant, error)

+ func (s *AuthzStore) ControlGrantsForApps(ctx context.Context, appIDs []string, p authz.Principal) (map[string][]authz.Grant, error)

+ func (s *AuthzStore) DataFacts(ctx context.Context, appID string, p authz.Principal, passcodeToken string) (authz.DataFacts, error)

+ func (s *AuthzStore) DeployApprovers(ctx context.Context, appID string) ([]string, error)

+ func (s *AuthzStore) GroupsForUser(ctx context.Context, userID string) ([]string, error)

+ func (s *AuthzStore) HasDataGrant(ctx context.Context, appID string, p authz.Principal) (bool, error)

+ func (s *AuthzStore) InstallGrantsFor(ctx context.Context, p authz.Principal) ([]authz.Grant, error)

+ func (s *AuthzStore) InstallVerbHolders(ctx context.Context, verb authz.Verb) ([]string, error)

+ func (s *AuthzStore) InstallVerbsFor(ctx context.Context, p authz.Principal) ([]string, error)

+ func (s *AuthzStore) IsOwner(ctx context.Context, appID, userID string) (bool, error)

+ func (s *AuthzStore) PasscodeUnlocked(ctx context.Context, appID, token string) (bool, error)

+ func (s *AuthzStore) Role(ctx context.Context, roleID string) (authz.Role, error)

+ func (s *AuthzStore) UserStatus(ctx context.Context, userID string) (string, error)

+ type AutoDeployCheck struct

+ AppID string

+ AttemptedAt *time.Time

+ AttemptedCommit string

+ CheckedAt time.Time

+ DeploymentID string

+ Error string

+ FoundCommit string

+ FoundRef string

+ type AutoDeployChecks struct

+ func NewAutoDeployChecks(db *DB) *AutoDeployChecks

+ func (c *AutoDeployChecks) Attempted(ctx context.Context, appID, ref, commit, deploymentID, message string) error

+ func (c *AutoDeployChecks) ByApp(ctx context.Context, appID string) (AutoDeployCheck, bool, error)

+ func (c *AutoDeployChecks) Checked(ctx context.Context, appID, ref, commit, message string) error

+ type AutoDeploySecrets struct

+ func NewAutoDeploySecrets(db *DB, adapter api.SecretsAdapter, adapterRef string) *AutoDeploySecrets

+ func (k *AutoDeploySecrets) Delete(ctx context.Context, appID string) error

+ func (k *AutoDeploySecrets) Get(ctx context.Context, appID string) (secret.Value, bool, error)

+ func (k *AutoDeploySecrets) Has(ctx context.Context, appID string) (bool, error)

+ func (k *AutoDeploySecrets) Put(ctx context.Context, appID string, v secret.Value) error

+ type AwaitingApproval struct

+ AppName string

+ AppSlug string

+ type AwaitingKey struct

+ ID string

+ StartedAt time.Time

+ func AwaitingKeyFrom(cursor string) (AwaitingKey, error)

+ func (k AwaitingKey) Cursor() string

+ type Backup struct

+ AdapterRef string

+ AppID string

+ CreatedAt time.Time

+ CreatedBy string

+ ID string

+ Kind string

+ Manifest backup.Manifest

+ ObjectName string

+ RetainUntil *time.Time

+ SizeBytes int64

+ type BackupAttempt struct

+ AppID string

+ AppName string

+ AttemptedAt time.Time

+ BackupID string

+ Message string

+ Outcome string

+ Remedy string

+ type Backups struct

+ func NewBackups(db *DB) *Backups

+ func (b *Backups) Attempts(ctx context.Context, appID string, limit int) ([]BackupAttempt, error)

+ func (b *Backups) ByID(ctx context.Context, backupID string) (Backup, bool, error)

+ func (b *Backups) Expired(ctx context.Context, now time.Time) ([]Backup, error)

+ func (b *Backups) Forget(ctx context.Context, backupID string) error

+ func (b *Backups) List(ctx context.Context, appID string, page Page) ([]Backup, string, error)

+ func (b *Backups) NewID() string

+ func (b *Backups) Record(ctx context.Context, rec Backup) error

+ func (b *Backups) RecordAttempt(ctx context.Context, a BackupAttempt) error

+ type BundleSource struct

+ func NewBundleSource(db *DB) *BundleSource

+ func (b *BundleSource) AdapterConfigs(ctx context.Context) ([]byte, error)

+ func (b *BundleSource) Counts(ctx context.Context) (map[string]int, error)

+ func (b *BundleSource) HostPolicy(ctx context.Context) ([]byte, error)

+ func (b *BundleSource) ServicesToSnapshot(ctx context.Context) ([]backup.ServiceRef, error)

+ func (b *BundleSource) VolumesForApp(ctx context.Context, appID string) ([]backup.VolumeRef, error)

+ func (b *BundleSource) VolumesToSnapshot(ctx context.Context) ([]backup.VolumeRef, error)

+ type ConnectOptions struct

+ ConnectTimeout time.Duration

+ MaxConns int32

+ OwnerURL string

+ SkipMigrate bool

+ type DB struct

+ func Connect(ctx context.Context, opts ConnectOptions) (*DB, error)

+ func ConnectCopy(ctx context.Context, ownerURL string, appPassword secret.Value) (*DB, error)

+ func (db *DB) Archiver() *pgxpool.Pool

+ func (db *DB) Close()

+ func (db *DB) Exclusive(ctx context.Context, key int64, fn func() error) error

+ func (db *DB) Listen(ctx context.Context, channel string, changed func(payload string), ...)

+ func (db *DB) Replica() string

+ func (db *DB) SchemaVersion() uint

+ type Deliveries struct

+ func NewDeliveries(db *DB) *Deliveries

+ func (s *Deliveries) Claim(ctx context.Context, now time.Time, lease time.Duration, limit int) ([]Delivery, error)

+ func (s *Deliveries) Drop(ctx context.Context, deliveryID, reason string) error

+ func (s *Deliveries) Get(ctx context.Context, deliveryID string) (Delivery, bool, error)

+ func (s *Deliveries) List(ctx context.Context, subscriptionID, before string, limit int) ([]Delivery, error)

+ func (s *Deliveries) Record(ctx context.Context, deliveryID string, a DeliveryAttempt, status string, ...) error

+ func (s *Deliveries) Redeliver(ctx context.Context, deliveryID, by string) error

+ type Delivery struct

+ AttemptLog []DeliveryAttempt

+ Attempts int

+ CreatedAt time.Time

+ EventID string

+ EventName string

+ ID string

+ LastAttemptAt *time.Time

+ LastError string

+ LastStatusCode *int

+ NextAttemptAt *time.Time

+ RedeliveredBy string

+ RoundBase int

+ Status string

+ SubscriptionID string

+ type DeliveryAttempt struct

+ Attempt int

+ AttemptedAt time.Time

+ DurationMS int

+ Error string

+ StatusCode *int

+ type Deployment struct

+ AppID string

+ ApprovalExpiresAt *time.Time

+ ApprovalReasons []ApprovalReason

+ Approvals []ApprovalDecision

+ ApprovalsRequired int

+ CanDecide bool

+ CreatedBy string

+ ErrorCode string

+ ErrorDetail string

+ FinishedAt *time.Time

+ ID string

+ QueuePosition *int

+ RequestedByName string

+ ResultState string

+ SpecID string

+ SpecRevision int

+ StartedAt time.Time

+ Status string

+ Trigger string

+ type Deployments struct

+ func NewDeployments(db *DB) *Deployments

+ func (d *Deployments) ByID(ctx context.Context, deploymentID string) (Deployment, bool, error)

+ func (d *Deployments) Claim(ctx context.Context, limit int) ([]Deployment, error)

+ func (d *Deployments) Create(ctx context.Context, appID, specID, trigger, createdBy string) (Deployment, error)

+ func (d *Deployments) CreateAwaiting(ctx context.Context, appID, specID, trigger, createdBy string, required int, ...) (Deployment, error)

+ func (d *Deployments) Decide(ctx context.Context, deploymentID, principalID, decision, comment string) error

+ func (d *Deployments) Decisions(ctx context.Context, deploymentIDs []string) (map[string][]ApprovalDecision, error)

+ func (d *Deployments) EndAwaiting(ctx context.Context, deploymentID, status, errorCode, message string) (bool, error)

+ func (d *Deployments) ExpireDue(ctx context.Context, now time.Time) ([]Deployment, error)

+ func (d *Deployments) Finish(ctx context.Context, deploymentID, status, errorCode, message string) error

+ func (d *Deployments) InFlight(ctx context.Context, appID string) (bool, error)

+ func (d *Deployments) LastImage(ctx context.Context, appID string) (string, error)

+ func (d *Deployments) ListAwaiting(ctx context.Context) ([]AwaitingApproval, error)

+ func (d *Deployments) ListAwaitingAfter(ctx context.Context, after AwaitingKey, limit int) ([]AwaitingApproval, error)

+ func (d *Deployments) ListForApp(ctx context.Context, appID string) ([]Deployment, error)

+ func (d *Deployments) PriorState(ctx context.Context, deploymentID string) (string, error)

+ func (d *Deployments) QueueDepth(ctx context.Context) (int, error)

+ func (d *Deployments) QueuePosition(ctx context.Context, deploymentID string) (int, bool, error)

+ func (d *Deployments) QueuePositions(ctx context.Context, deps []Deployment) error

+ func (d *Deployments) RanSuccessfully(ctx context.Context, appID, specID string) (bool, error)

+ func (d *Deployments) RecordPriorState(ctx context.Context, deploymentID, appState string) error

+ func (d *Deployments) RecoverInFlight(ctx context.Context) (int64, error)

+ func (d *Deployments) Release(ctx context.Context, deploymentIDs []string) (int64, error)

+ func (d *Deployments) Runner(ctx context.Context, deploymentID string) (string, error)

+ func (d *Deployments) RunningSpecID(ctx context.Context, appID string) (string, error)

+ func (d *Deployments) SetEgressRules(ctx context.Context, deploymentID string, rules egress.Rules) error

+ func (d *Deployments) SetImageRef(ctx context.Context, deploymentID, imageRef, digest string, ...) error

+ func (d *Deployments) SetResultState(ctx context.Context, deploymentID, appState string) error

+ func (d *Deployments) SetStatus(ctx context.Context, deploymentID, status string) error

+ func (d *Deployments) StartApproved(ctx context.Context, deploymentID string) (bool, error)

+ func (d *Deployments) SupersedeAwaiting(ctx context.Context, appID, exceptID string) ([]string, error)

+ func (d *Deployments) Waiting(ctx context.Context, deploymentID string) (bool, error)

+ type Detection struct

+ Answers map[string]string

+ AppID string

+ Body json.RawMessage

+ Commit string

+ StartedAt time.Time

+ Status string

+ UpdatedAt time.Time

+ type DetectionSummary struct

+ Stage string

+ StartedAt time.Time

+ Status string

+ UpdatedAt time.Time

+ type Detections struct

+ func NewDetections(db *DB) *Detections

+ func (d *Detections) Claim(ctx context.Context, limit int) ([]string, error)

+ func (d *Detections) FailIfRunning(ctx context.Context, appID string, cause error) error

+ func (d *Detections) Get(ctx context.Context, appID string) (Detection, error)

+ func (d *Detections) Queue(ctx context.Context, appID string) (Detection, error)

+ func (d *Detections) RecoverRunning(ctx context.Context) (int64, error)

+ func (d *Detections) Release(ctx context.Context, appIDs []string) (int64, error)

+ func (d *Detections) Save(ctx context.Context, appID, status string, body any, commit string) error

+ func (d *Detections) SaveAnswers(ctx context.Context, appID string, answers map[string]string) error

+ func (d *Detections) Start(ctx context.Context, appID string) error

+ func (d *Detections) Summaries(ctx context.Context, appIDs []string) (map[string]DetectionSummary, error)

+ type Disk struct

+ func NewDisk(db *DB) *Disk

+ func (d *Disk) DiskCandidates(ctx context.Context) ([]DiskApp, error)

+ func (d *Disk) SetDiskMark(ctx context.Context, app DiskApp, which DiskMark, at *time.Time) (bool, error)

+ func (d *Disk) StopForDisk(ctx context.Context, app DiskApp) (bool, error)

+ type DiskApp struct

+ AppID string

+ DiskBytes int64

+ Name string

+ OverAt *time.Time

+ OwnerUserID string

+ RuntimeRef string

+ StartedAt *time.Time

+ WarnedAt *time.Time

+ type DiskMark string

+ const DiskOver

+ const DiskWarned

+ type EdgeCertificate struct

+ AttemptedAt time.Time

+ CertPEM []byte

+ Domains []string

+ KeyPEM secret.Value

+ LastError string

+ Name string

+ NotAfter time.Time

+ type EdgeCertificates struct

+ func NewEdgeCertificates(db *DB, adapter api.SecretsAdapter, adapterRef string) *EdgeCertificates

+ func (e *EdgeCertificates) Account(ctx context.Context, email, directory string) (AcmeAccount, bool, error)

+ func (e *EdgeCertificates) Certificate(ctx context.Context, name string) (EdgeCertificate, bool, error)

+ func (e *EdgeCertificates) Challenge(ctx context.Context, token string) (string, bool, error)

+ func (e *EdgeCertificates) DeleteChallenge(ctx context.Context, token string) error

+ func (e *EdgeCertificates) PutAccount(ctx context.Context, a AcmeAccount) error

+ func (e *EdgeCertificates) PutCertificate(ctx context.Context, c EdgeCertificate) error

+ func (e *EdgeCertificates) PutChallenge(ctx context.Context, token, keyAuthorization, domain string, expires time.Time) error

+ func (e *EdgeCertificates) RecordFailure(ctx context.Context, name string, domains []string, message string, ...) error

+ type ErrAssigned struct

+ Held AIAssignment

+ func (e ErrAssigned) Error() string

+ type Event struct

+ ActorID string

+ ActorKind string

+ AppID string

+ Data map[string]any

+ ID string

+ Name string

+ OccurredAt time.Time

+ OnBehalfOf string

+ RequestID string

+ type Events struct

+ func NewEvents(db *DB) *Events

+ func (s *Events) Emit(ctx context.Context, e Event) (string, error)

+ func (s *Events) EmitRouted(ctx context.Context, e Event, subscriptionID string) (Delivery, error)

+ func (s *Events) ForApp(ctx context.Context, appID, before string, limit int) ([]Event, error)

+ func (s *Events) Get(ctx context.Context, eventID string) (Event, bool, error)

+ func (s *Events) Prune(ctx context.Context, before time.Time, limit int) (int64, error)

+ func (s *Events) Route(ctx context.Context, limit int, before time.Time, ...) ([]Event, error)

+ type Execer interface

+ Exec func(ctx context.Context, sql string, args ...any) (pgconn.CommandTag, error)

+ type FailedAttempts struct

+ func NewFailedAttempts(db *DB) *FailedAttempts

+ func (p *FailedAttempts) Clear(ctx context.Context, key string) error

+ func (p *FailedAttempts) Prune(ctx context.Context, window time.Duration) error

+ func (p *FailedAttempts) Recent(ctx context.Context, key string, window time.Duration) (int, error)

+ func (p *FailedAttempts) Record(ctx context.Context, key string, window time.Duration) error

+ func (p *FailedAttempts) Wait(ctx context.Context, key string, window time.Duration) (time.Duration, error)

+ type GrantRow struct

+ AppID string

+ ID string

+ Passcode bool

+ Plane string

+ PrincipalID string

+ PrincipalKind string

+ PrincipalName string

+ RoleID string

+ RoleName string

+ type Grants struct

+ func NewGrants(db *DB) *Grants

+ func (g *Grants) AnonymousGrantFor(ctx context.Context, appID string) (AnonymousGrant, bool, error)

+ func (g *Grants) Create(ctx context.Context, appID, plane, kind, principalID, roleID, createdBy string) (GrantRow, error)

+ func (g *Grants) Delete(ctx context.Context, appID, grantID string) error

+ func (g *Grants) ForGroup(ctx context.Context, groupID string, page Page) ([]UserAppGrant, string, error)

+ func (g *Grants) ForUser(ctx context.Context, userID string, page Page) ([]UserAppGrant, string, error)

+ func (g *Grants) GrantInstall(ctx context.Context, kind, principalID, roleID, createdBy string) (GrantRow, error)

+ func (g *Grants) InstallRoles(ctx context.Context) ([]authz.Role, error)

+ func (g *Grants) InstallRolesByPrincipal(ctx context.Context) (map[string]string, error)

+ func (g *Grants) ListForApp(ctx context.Context, appID string, page Page) ([]GrantRow, string, error)

+ func (g *Grants) RevokeInstall(ctx context.Context, kind, principalID string) error

+ func (g *Grants) SetPasscode(ctx context.Context, appID, grantID, passcodeHash string) error

+ func (g *Grants) SetRole(ctx context.Context, appID, grantID, roleID string) error

+ func (g *Grants) Unlock(ctx context.Context, appID, grantID string) (string, time.Time, error)

+ type Group struct

+ CreatedAt time.Time

+ ID string

+ LinkedFrom []string

+ LinksTo []string

+ MemberCount *int

+ Members []string

+ Name string

+ Source string

+ SourceName string

+ type GroupFilter struct

+ Member string

+ type GroupLimit struct

+ GroupID string

+ MaxApps int

+ Name string

+ type Groups struct

+ func NewGroups(db *DB) *Groups

+ func (g *Groups) AddMember(ctx context.Context, groupID, userID string) error

+ func (g *Groups) ByID(ctx context.Context, groupID string) (Group, bool, error)

+ func (g *Groups) Create(ctx context.Context, name string) (Group, error)

+ func (g *Groups) Delete(ctx context.Context, groupID string) error

+ func (g *Groups) Exists(ctx context.Context, groupID string) (bool, error)

+ func (g *Groups) Link(ctx context.Context, syncedGroupID, groupID, by string) error

+ func (g *Groups) List(ctx context.Context) ([]Group, error)

+ func (g *Groups) ListPage(ctx context.Context, page Page, f GroupFilter) ([]Group, string, int, error)

+ func (g *Groups) MembersPage(ctx context.Context, groupID string, page Page) ([]User, string, int, error)

+ func (g *Groups) RemoveMember(ctx context.Context, groupID, userID string) error

+ func (g *Groups) Search(ctx context.Context, q string, limit int) ([]Group, error)

+ func (g *Groups) SetMembers(ctx context.Context, groupID string, userIDs []string) error

+ func (g *Groups) SyncMemberships(ctx context.Context, adapterID, userID string, names []string) error

+ func (g *Groups) Unlink(ctx context.Context, syncedGroupID, groupID string) error

+ type Icon struct

+ ContentType string

+ Data []byte

+ UpdatedAt time.Time

+ type Idempotency struct

+ func NewIdempotency(db *DB) *Idempotency

+ func (i *Idempotency) Lookup(ctx context.Context, key, principalID, endpoint string) (Replayed, bool, error)

+ func (i *Idempotency) Remember(ctx context.Context, key, principalID, endpoint string, status int, ...) error

+ type Identities struct

+ func NewIdentities(db *DB) *Identities

+ func (s *Identities) ByVerifiedEmail(ctx context.Context, email string) (User, bool, error)

+ func (s *Identities) CreateExternal(ctx context.Context, n NewExternal) (User, error)

+ func (s *Identities) ForUser(ctx context.Context, userID string) ([]Identity, error)

+ func (s *Identities) Link(ctx context.Context, userID, adapterID, externalID, by string, replace bool) (string, error)

+ func (s *Identities) RecordSignIn(ctx context.Context, adapterID, externalID, userID, email, displayName string) error

+ func (s *Identities) Resolve(ctx context.Context, adapterID, externalID string) (User, bool, error)

+ func (s *Identities) Unlink(ctx context.Context, userID, adapterID, externalID string) error

+ type Identity struct

+ AdapterID string

+ AdapterKind string

+ AdapterName string

+ CreatedAt time.Time

+ CreatedBy string

+ ExternalID string

+ LastSignIn *time.Time

+ Origin bool

+ SCIM bool

+ UserID string

+ type IdentityProvider struct

+ Config json.RawMessage

+ CreatedAt time.Time

+ Enabled bool

+ ID string

+ JITProvisioning bool

+ Kind string

+ LinkByEmail bool

+ Name string

+ SCIMEnabled bool

+ SCIMIdentityAttribute string

+ SCIMTokenCreatedAt *time.Time

+ UpdatedAt time.Time

+ type IdentityProviders struct

+ func NewIdentityProviders(db *DB) *IdentityProviders

+ func (s *IdentityProviders) AnyExternalEnabled(ctx context.Context) (bool, error)

+ func (s *IdentityProviders) ByID(ctx context.Context, providerID string) (IdentityProvider, bool, error)

+ func (s *IdentityProviders) BySCIMToken(ctx context.Context, digest string) (IdentityProvider, bool, error)

+ func (s *IdentityProviders) Create(ctx context.Context, kind string, set ProviderSettings) (IdentityProvider, error)

+ func (s *IdentityProviders) Delete(ctx context.Context, providerID string) error

+ func (s *IdentityProviders) List(ctx context.Context) ([]IdentityProvider, error)

+ func (s *IdentityProviders) SetSCIMToken(ctx context.Context, providerID, digest string) error

+ func (s *IdentityProviders) Update(ctx context.Context, providerID string, set ProviderSettings) (IdentityProvider, error)

+ type IdleApp struct

+ AppID string

+ DeleteDays int

+ DeleteNoticedAt *time.Time

+ DesiredState string

+ LastActivity time.Time

+ Name string

+ OwnerUserID string

+ State string

+ StopDays int

+ StopNoticedAt *time.Time

+ StoppedForIdle bool

+ type IdleDefaults struct

+ DeleteDays int

+ NoticeDays int

+ StopDays int

+ type IdleNotice string

+ const IdleNoticeDelete

+ const IdleNoticeStop

+ type IdleSettings struct

+ DeleteDays *int

+ StopDays *int

+ type IdleStatus struct

+ DeleteNoticedAt *time.Time

+ DesiredState string

+ LastActivity time.Time

+ State string

+ StopNoticedAt *time.Time

+ StoppedForIdle bool

+ type Issued struct

+ Secret secret.Value

+ Token Token

+ type Leadership struct

+ func (l *Leadership) Lost() <-chan struct{}

+ func (l *Leadership) Resign(ctx context.Context)

+ type Lease struct

+ func (l *Lease) Claim(ctx context.Context, now, cutoff time.Time, limit int, lease time.Duration) ([]Reconcilable, error)

+ func (l *Lease) Extend(ctx context.Context, lease time.Duration) (map[string]bool, error)

+ func (l *Lease) Holder() string

+ func (l *Lease) Release(ctx context.Context, appID string, visited *time.Time) error

+ func (l *Lease) ReleaseSettled(ctx context.Context, appID string, visited time.Time, extra time.Duration) error

+ type LimitFacts struct

+ Groups []GroupLimit

+ Owned int

+ UserMaxApps *int

+ type NewExternal struct

+ AdapterID string

+ CreatedBy string

+ DisplayName string

+ Email string

+ ExternalID string

+ SCIMExternalID string

+ SCIMResource []byte

+ SCIMUserName string

+ Suspended bool

+ type Notification struct

+ AppID string

+ AppName string

+ Body string

+ CreatedAt time.Time

+ EventID string

+ ID string

+ Kind string

+ Link string

+ ReadAt *time.Time

+ Subject string

+ UserID string

+ type NotificationPreference struct

+ Channel string

+ Enabled bool

+ Kind string

+ type NotificationPreferences struct

+ func NewNotificationPreferences(db *DB) *NotificationPreferences

+ func (s *NotificationPreferences) List(ctx context.Context, userID string) ([]NotificationPreference, error)

+ func (s *NotificationPreferences) Set(ctx context.Context, userID string, prefs []NotificationPreference) error

+ type Notifications struct

+ func NewNotifications(db *DB) *Notifications

+ func (n *Notifications) ListForUser(ctx context.Context, userID string, unreadOnly bool, before string, limit int) ([]Notification, error)

+ func (n *Notifications) MarkAllRead(ctx context.Context, userID string) error

+ func (n *Notifications) MarkRead(ctx context.Context, userID, notificationID string) error

+ func (n *Notifications) Record(ctx context.Context, msg api.Notification, retainFor time.Duration) error

+ func (n *Notifications) Unread(ctx context.Context, userID string) (int, error)

+ type Nudged struct

+ Due bool

+ Held bool

+ type OrphanedVolume struct

+ AdapterRef string

+ AppID string

+ Handle string

+ VolumeID string

+ type Page struct

+ Cursor string

+ IDs []string

+ Limit int

+ Query string

+ func (p Page) Size() int

+ type Passwords struct

+ App secret.Value

+ Archiver secret.Value

+ func PrepareTemplate(ctx context.Context, ownerURL string) (Passwords, error)

+ type Policy struct

+ func NewPolicy(db *DB) *Policy

+ func (p *Policy) Load(ctx context.Context) (policy.Document, error)

+ func (p *Policy) Save(ctx context.Context, doc policy.Document, updatedBy string) error

+ type Ports struct

+ func NewPorts(db *DB) *Ports

+ func (p *Ports) Allocate(ctx context.Context, adapterRef, appID string, from, to int) (int, error)

+ func (p *Ports) InUse(ctx context.Context) ([]int, error)

+ type Profile struct

+ DisplayName *string

+ Email *string

+ Username *string

+ type ProviderSettings struct

+ Config json.RawMessage

+ Enabled *bool

+ JITProvisioning *bool

+ LinkByEmail *bool

+ Name *string

+ SCIMIdentityAttribute *string

+ type Reconcilable struct

+ AppliedEnvHash string

+ ClaimedAt time.Time

+ ConsecutiveFailures int

+ EgressRules egress.Rules

+ ImageDigest string

+ ImageRef string

+ LastFailureAt *time.Time

+ NextAttemptAt *time.Time

+ UnobservableSince *time.Time

+ WorkloadImages map[string]WorkloadImage

+ type Reconciles struct

+ func NewReconciles(db *DB) *Reconciles

+ func (r *Reconciles) CatchUp(ctx context.Context, runtimeRef string) (int64, error)

+ func (r *Reconciles) ClearFailures(ctx context.Context, appID string) error

+ func (r *Reconciles) ClearUnobservable(ctx context.Context, appID string) error

+ func (r *Reconciles) Cutoff(ctx context.Context, revisit time.Duration) (time.Time, error)

+ func (r *Reconciles) Lease() *Lease

+ func (r *Reconciles) MarkUnobservable(ctx context.Context, appID, reason string) error

+ func (r *Reconciles) Nudge(ctx context.Context, appID string) (Nudged, error)

+ func (r *Reconciles) RecordFailure(ctx context.Context, appID, reason string, window time.Duration, ...) (int, error)

+ func (r *Reconciles) SetAppliedEnvFingerprint(ctx context.Context, appID, fingerprint string) error

+ type Replayed struct

+ Body json.RawMessage

+ StatusCode int

+ type Replica struct

+ AdvertiseURL string

+ AssertionKID string

+ AssertionKey []byte

+ HeartbeatAt time.Time

+ Hostname string

+ ID string

+ StartedAt time.Time

+ StoppedAt *time.Time

+ Version string

+ type Replicas struct

+ func NewReplicas(db *DB) *Replicas

+ func (r *Replicas) ByID(ctx context.Context, replicaID string) (Replica, bool, error)

+ func (r *Replicas) Heartbeat(ctx context.Context, replicaID string) (bool, error)

+ func (r *Replicas) Live(ctx context.Context) ([]Replica, error)

+ func (r *Replicas) Prune(ctx context.Context, olderThan time.Duration) (int64, error)

+ func (r *Replicas) Register(ctx context.Context, rep Replica) error

+ func (r *Replicas) RequestRestart(ctx context.Context) error

+ func (r *Replicas) RestartPending(ctx context.Context, replicaID string) (bool, error)

+ func (r *Replicas) Stop(ctx context.Context, replicaID string) error

+ func (r *Replicas) StopSilent(ctx context.Context) (int64, error)

+ func (r *Replicas) TryLead(ctx context.Context, check time.Duration) (*Leadership, bool, error)

+ func (r *Replicas) VerificationKeys(ctx context.Context, validity time.Duration) ([]Replica, error)

+ type Retention struct

+ func NewRetention(db *DB) *Retention

+ func (r *Retention) DeletedApps(ctx context.Context, before time.Time, limit int) (int64, error)

+ func (r *Retention) Deployments(ctx context.Context, keepPerApp, limit int) (int64, error)

+ func (r *Retention) IdempotencyKeys(ctx context.Context, before time.Time, limit int) (int64, error)

+ func (r *Retention) Notifications(ctx context.Context, now time.Time, limit int) (int64, error)

+ func (r *Retention) SSOFlows(ctx context.Context, before, now time.Time, limit int) (int64, error)

+ func (r *Retention) Scans(ctx context.Context, before time.Time, limit int) (int64, error)

+ func (r *Retention) Sessions(ctx context.Context, before time.Time, limit int) (int64, error)

+ type Revision struct

+ AppID string

+ Body *spec.AppSpec

+ CreatedAt time.Time

+ CreatedBy string

+ EverPinned bool

+ ID string

+ Origin spec.Origin

+ Revision int

+ type RoleRow struct

+ Builtin bool

+ ID string

+ Name string

+ Scope string

+ Verbs []string

+ type Roles struct

+ func NewRoles(db *DB) *Roles

+ func (r *Roles) CreateCustom(ctx context.Context, name, scope string, verbs []authz.Verb) (authz.Role, error)

+ func (r *Roles) DeleteCustom(ctx context.Context, roleID string) error

+ func (r *Roles) List(ctx context.Context) ([]RoleRow, error)

+ type SCIMGroup struct

+ CreatedAt string

+ DisplayName string

+ ExternalID string

+ ID string

+ Members []SCIMMember

+ Resource []byte

+ UpdatedAt string

+ type SCIMGroups struct

+ func NewSCIMGroups(db *DB) *SCIMGroups

+ func (s *SCIMGroups) ByID(ctx context.Context, adapterID, groupID string, members bool) (SCIMGroup, bool, error)

+ func (s *SCIMGroups) ChangeMembers(ctx context.Context, adapterID, groupID string, add, remove []string) error

+ func (s *SCIMGroups) Create(ctx context.Context, adapterID, displayName, externalID string, ...) (string, error)

+ func (s *SCIMGroups) List(ctx context.Context, adapterID, attr, value string, offset, limit int, ...) ([]SCIMGroup, int, error)

+ func (s *SCIMGroups) Update(ctx context.Context, adapterID, groupID string, displayName *string, ...) error

+ func (s *SCIMGroups) UserGroups(ctx context.Context, adapterID, userID string) ([]SCIMMember, error)

+ type SCIMMember struct

+ Display string

+ UserID string

+ type SCIMUser struct

+ CreatedAt time.Time

+ DisplayName string

+ Email string

+ ExternalID string

+ ID string

+ Key string

+ Resource []byte

+ Status string

+ SuspendedBy string

+ UpdatedAt time.Time

+ UserName string

+ func (u SCIMUser) Active() bool

+ type SCIMUserUpdate struct

+ DisplayName string

+ Email string

+ ExternalID string

+ Key string

+ Resource []byte

+ UserName string

+ type SCIMUsers struct

+ func NewSCIMUsers(db *DB) *SCIMUsers

+ func (s *SCIMUsers) ByID(ctx context.Context, adapterID, userID string) (SCIMUser, bool, error)

+ func (s *SCIMUsers) ByKey(ctx context.Context, adapterID, key string) (SCIMUser, bool, error)

+ func (s *SCIMUsers) Forget(ctx context.Context, adapterID, userID string) error

+ func (s *SCIMUsers) List(ctx context.Context, adapterID, attr, value string, offset, limit int) ([]SCIMUser, int, error)

+ func (s *SCIMUsers) Reactivate(ctx context.Context, adapterID, userID string) (bool, error)

+ func (s *SCIMUsers) Write(ctx context.Context, adapterID, userID string, w SCIMUserUpdate) error

+ type SSOFlow struct

+ AdapterID string

+ BindHash string

+ CallbackURL string

+ ConsumedAt *time.Time

+ CreatedAt time.Time

+ EntityID string

+ ExpiresAt time.Time

+ Failed bool

+ Flow []byte

+ ID string

+ InitiatedBy string

+ NextPath string

+ Purpose string

+ Result json.RawMessage

+ ReturnOrigin string

+ UserID string

+ type SSOFlows struct

+ func NewSSOFlows(db *DB) *SSOFlows

+ func (s *SSOFlows) Authenticated(ctx context.Context, flowID, userID, handoffHash string, ...) error

+ func (s *SSOFlows) ByID(ctx context.Context, flowID string) (SSOFlow, bool, error)

+ func (s *SSOFlows) Complete(ctx context.Context, handoffHash string) (SSOFlow, bool, error)

+ func (s *SSOFlows) Create(ctx context.Context, f SSOFlow) error

+ func (s *SSOFlows) CreateUnsolicited(ctx context.Context, f SSOFlow) error

+ func (s *SSOFlows) Fail(ctx context.Context, flowID string, result json.RawMessage) error

+ func (s *SSOFlows) TakeForCallback(ctx context.Context, flowID, adapterID string) (SSOFlow, bool, error)

+ func (s *SSOFlows) UseOnce(ctx context.Context, adapterID, oneTimeID string, until time.Time) (bool, error)

+ type Scan struct

+ AppID string

+ Commit string

+ Error string

+ Findings []api.Finding

+ ID string

+ RanAt time.Time

+ ReusedFrom string

+ Scanner string

+ ScannerRef string

+ Score *int

+ ScoreFixable *int

+ SpecID string

+ func (s Scan) Origin() string

+ type Scans struct

+ func NewScans(db *DB) *Scans

+ func (s *Scans) ClearInsecure(ctx context.Context, appID string) error

+ func (s *Scans) ForSource(ctx context.Context, appID, source, scannerRef string) (Scan, bool, error)

+ func (s *Scans) History(ctx context.Context, appID string, limit int) ([]Scan, error)

+ func (s *Scans) Latest(ctx context.Context, appID, specID string) (Scan, bool, error)

+ func (s *Scans) LiveSecurityState(ctx context.Context, t SecurityThreshold) ([]SecurityState, error)

+ func (s *Scans) MarkInsecure(ctx context.Context, appID string, at time.Time) error

+ func (s *Scans) Record(ctx context.Context, scan Scan) (Scan, error)

+ func (s *Scans) Reuse(ctx context.Context, from Scan, specID string) (Scan, error)

+ func (s *Scans) SecurityStateFor(ctx context.Context, appID string) (SecurityState, bool, error)

+ func (s *Scans) SetStoppedForSecurity(ctx context.Context, appID string, stopped bool) error

+ type SecretKey struct

+ Key string

+ UpdatedAt time.Time

+ Version int

+ type Secrets struct

+ func NewSecrets(db *DB, adapter api.SecretsAdapter, adapterRef string) *Secrets

+ func (s *Secrets) Delete(ctx context.Context, appID, key string) error

+ func (s *Secrets) Get(ctx context.Context, appID, key string) (secret.Value, error)

+ func (s *Secrets) Keys(ctx context.Context, appID string) ([]SecretKey, error)

+ func (s *Secrets) Put(ctx context.Context, appID, key string, v secret.Value) error

+ func (s *Secrets) Resolve(ctx context.Context, appID string) (map[secretKey]secret.Value, error)

+ func (s *Secrets) VerifyKey(ctx context.Context) error

+ func (s *Secrets) Versions(ctx context.Context, appID string) (map[string]int, error)

+ type Section struct

+ CreatedAt time.Time

+ ID string

+ Name string

+ type SecurityState struct

+ AppID string

+ DesiredState string

+ InsecureSince *time.Time

+ Name string

+ OwnerUserID string

+ PinnedSpecID string

+ Score *int

+ ScoreFixable *int

+ State string

+ StoppedForSecurity bool

+ type SecurityThreshold struct

+ IgnoreUnfixable bool

+ MinScore int

+ type ServiceInstance struct

+ AdapterRef string

+ AppID string

+ ConnectionRef string

+ Handle string

+ ID string

+ SlotKey string

+ SlotType spec.SlotType

+ type Services struct

+ func NewServices(db *DB) *Services

+ func (s *Services) ForApp(ctx context.Context, appID string) ([]ServiceInstance, error)

+ func (s *Services) Get(ctx context.Context, appID, slotKey string) (ServiceInstance, bool, error)

+ func (s *Services) NewID() string

+ func (s *Services) Record(ctx context.Context, v ServiceInstance) error

+ func (s *Services) Release(ctx context.Context, id string) error

+ type Session struct

+ AdapterID string

+ ExpiresAt time.Time

+ ID string

+ UserID string

+ type Sessions struct

+ func NewSessions(db *DB) *Sessions

+ func (s *Sessions) Active(ctx context.Context, sessionID string) (Session, bool, error)

+ func (s *Sessions) ActiveWithUser(ctx context.Context, sessionID string) (Session, User, []string, bool, error)

+ func (s *Sessions) Create(ctx context.Context, userID, adapterID string, lifetime time.Duration, ...) (Session, error)

+ func (s *Sessions) Revoke(ctx context.Context, sessionID string) error

+ func (s *Sessions) RevokeAllForUser(ctx context.Context, userID string) error

+ func (s *Sessions) RevokeOthersForUser(ctx context.Context, userID, keepSessionID string) error

+ type Subscription struct

+ AdapterID string

+ AppID string

+ AppName string

+ ConsecutiveFailures int

+ ContentType string

+ CreatedAt time.Time

+ CreatedBy string

+ Description string

+ Destination string

+ DisabledReason string

+ Enabled bool

+ Events []string

+ FailingSince *time.Time

+ HeaderNames []string

+ ID string

+ Method string

+ OwnerID string

+ OwnerName string

+ OwnerTokenID string

+ PayloadTemplate string

+ URL string

+ UpdatedAt time.Time

+ type SubscriptionFilter struct

+ AppID string

+ EnabledOnly bool

+ InstallOnly bool

+ OwnerID string

+ type SubscriptionPatch struct

+ AdapterID *string

+ ContentType *string

+ Description *string

+ Enabled *bool

+ Events *[]string

+ HeaderNames *[]string

+ Method *string

+ PayloadTemplate *string

+ URL *string

+ type SubscriptionSecrets struct

+ func NewSubscriptionSecrets(db *DB, adapter api.SecretsAdapter, adapterRef string) *SubscriptionSecrets

+ func (k *SubscriptionSecrets) All(ctx context.Context, subscriptionID string) (map[string]secret.Value, error)

+ func (k *SubscriptionSecrets) DeleteHeaders(ctx context.Context, subscriptionID string) error

+ func (k *SubscriptionSecrets) Put(ctx context.Context, subscriptionID, field string, v secret.Value) error

+ type Subscriptions struct

+ func NewSubscriptions(db *DB) *Subscriptions

+ func (s *Subscriptions) Create(ctx context.Context, sub Subscription) (Subscription, error)

+ func (s *Subscriptions) Delete(ctx context.Context, subscriptionID string) error

+ func (s *Subscriptions) Disable(ctx context.Context, subscriptionID, reason string) (bool, error)

+ func (s *Subscriptions) Enabled(ctx context.Context) ([]Subscription, time.Time, error)

+ func (s *Subscriptions) Failed(ctx context.Context, subscriptionID string, at time.Time) (time.Time, int, error)

+ func (s *Subscriptions) Get(ctx context.Context, subscriptionID string) (Subscription, bool, error)

+ func (s *Subscriptions) List(ctx context.Context, f SubscriptionFilter) ([]Subscription, error)

+ func (s *Subscriptions) ListPage(ctx context.Context, f SubscriptionFilter, page Page) ([]Subscription, string, error)

+ func (s *Subscriptions) Succeeded(ctx context.Context, subscriptionID string) error

+ func (s *Subscriptions) Update(ctx context.Context, subscriptionID string, p SubscriptionPatch) (Subscription, error)

+ func (s *Subscriptions) Watch(ctx context.Context, changed func(), connected func(bool))

+ type TeardownTarget struct

+ AppID string

+ BuilderRef string

+ DiscardStorage bool

+ RoutingRef string

+ RuntimeRef string

+ type Token struct

+ ExpiresAt *time.Time

+ ID string

+ Kind string

+ LastUsedAt *time.Time

+ Name string

+ OwnerUserID string

+ RevokedAt *time.Time

+ type Tokens struct

+ func NewTokens(db *DB, key []byte) *Tokens

+ func (t *Tokens) Active(ctx context.Context, tokenID string) (Token, bool, error)

+ func (t *Tokens) Authenticate(ctx context.Context, presented secret.Value) (Token, error)

+ func (t *Tokens) Create(ctx context.Context, kind, name, ownerUserID, createdBy string, ...) (Issued, error)

+ func (t *Tokens) ListAccounts(ctx context.Context) ([]Token, error)

+ func (t *Tokens) ListForUser(ctx context.Context, userID string) ([]Token, error)

+ func (t *Tokens) Owner(ctx context.Context, tokenID string) (string, bool, error)

+ func (t *Tokens) Revoke(ctx context.Context, tokenID string) error

+ func (t *Tokens) VerifyKey(ctx context.Context) error

+ type User struct

+ AdapterID string

+ AliasOf string

+ CreatedAt time.Time

+ DisplayName string

+ Email string

+ ExternalID string

+ ID string

+ MustChangePassword bool

+ Status string

+ type UserAppGrant struct

+ AppID string

+ AppName string

+ AppOwner string

+ GrantID string

+ GroupID string

+ GroupName string

+ Plane string

+ RoleID string

+ RoleName string

+ Via string

+ type Users struct

+ func NewUsers(db *DB) *Users

+ func (u *Users) ByExternalID(ctx context.Context, adapterID, externalID string) (User, bool, error)

+ func (u *Users) ByID(ctx context.Context, userID string) (User, bool, error)

+ func (u *Users) ByUsername(ctx context.Context, username string) (local.Record, bool, error)

+ func (u *Users) ClaimFirst(ctx context.Context, setupToken secret.Value, ...) (User, string, error)

+ func (u *Users) ClearSetupToken(ctx context.Context) error

+ func (u *Users) Create(ctx context.Context, ...) (User, error)

+ func (u *Users) Delete(ctx context.Context, userID string) error

+ func (u *Users) EnsureLocalAdapter(ctx context.Context) error

+ func (u *Users) EnsureSetupToken(ctx context.Context) (string, time.Time, error)

+ func (u *Users) List(ctx context.Context) ([]User, error)

+ func (u *Users) ListPage(ctx context.Context, page Page) ([]User, string, int, error)

+ func (u *Users) NeedsSetup(ctx context.Context) (bool, error)

+ func (u *Users) ReplaceSetupToken(ctx context.Context) (string, error)

+ func (u *Users) ResetPassword(ctx context.Context, username, passwordHash string) (string, error)

+ func (u *Users) Search(ctx context.Context, q string, limit int) ([]User, error)

+ func (u *Users) SetPassword(ctx context.Context, userID, passwordHash string) error

+ func (u *Users) SetPasswordFor(ctx context.Context, userID, passwordHash string, mustChange bool) (bool, error)

+ func (u *Users) SetStatus(ctx context.Context, userID, status string) error

+ func (u *Users) SetStatusBy(ctx context.Context, userID, status, by string) error

+ func (u *Users) UpdateProfile(ctx context.Context, userID string, p Profile) error

+ type VolumeRecord struct

+ Handle string

+ Name string

+ VolumeID string

+ type Volumes struct

+ func NewVolumes(db *DB) *Volumes

+ func (v *Volumes) Create(ctx context.Context, appID, name, adapterRef string) (string, error)

+ func (v *Volumes) DeleteForApp(ctx context.Context, appID string) error

+ func (v *Volumes) Handles(ctx context.Context, appID string) (map[string]string, error)

+ func (v *Volumes) RecordFromRuntime(ctx context.Context, appID, adapterRef string, observed []VolumeRecord) error

+ type WorkloadImage struct

+ Digest string

+ Ref string

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL