Initial scaffold: certificate control plane v0.1.0

2026-06-13 19:28:57 +00:00 · 2026-03-14 08:22:17 -04:00
commit d395776a95
57 changed files with 9548 additions and 0 deletions
@@ -0,0 +1,44 @@
+package repository
+
+import "time"
+
+// CertificateFilter defines filtering criteria for certificate queries.
+type CertificateFilter struct {
+	Status      string // e.g., "active", "expiring", "expired", "archived"
+	Environment string // e.g., "production", "staging", "development"
+	OwnerID     string
+	TeamID      string
+	IssuerID    string
+	Page        int // 1-indexed; default 1
+	PerPage     int // default 50, max 500
+}
+
+// JobFilter defines filtering criteria for job queries.
+type JobFilter struct {
+	Status        string // e.g., "pending", "in-progress", "completed", "failed"
+	Type          string // e.g., "renewal", "deployment"
+	CertificateID string
+	Page          int
+	PerPage       int
+}
+
+// AuditFilter defines filtering criteria for audit event queries.
+type AuditFilter struct {
+	Actor        string    // username or service ID
+	ActorType    string    // "user", "agent", "system"
+	ResourceType string    // e.g., "certificate", "policy", "agent"
+	ResourceID   string
+	From         time.Time
+	To           time.Time
+	Page         int
+	PerPage      int
+}
+
+// NotificationFilter defines filtering criteria for notification queries.
+type NotificationFilter struct {
+	CertificateID string // optional: filter by certificate
+	Status        string // e.g., "pending", "sent", "failed"
+	Channel       string // e.g., "email", "slack", "webhook"
+	Page          int
+	PerPage       int
+}
@@ -0,0 +1,162 @@
+package repository
+
+import (
+	"context"
+	"time"
+
+	"github.com/shankar0123/certctl/internal/domain"
+)
+
+// CertificateRepository defines operations for managing certificates.
+type CertificateRepository interface {
+	// List returns a paginated list of certificates matching the filter criteria.
+	List(ctx context.Context, filter *CertificateFilter) ([]*domain.ManagedCertificate, int, error)
+	// Get retrieves a certificate by ID.
+	Get(ctx context.Context, id string) (*domain.ManagedCertificate, error)
+	// Create stores a new certificate.
+	Create(ctx context.Context, cert *domain.ManagedCertificate) error
+	// Update modifies an existing certificate.
+	Update(ctx context.Context, cert *domain.ManagedCertificate) error
+	// Archive marks a certificate as archived.
+	Archive(ctx context.Context, id string) error
+	// ListVersions returns all versions of a certificate.
+	ListVersions(ctx context.Context, certID string) ([]*domain.CertificateVersion, error)
+	// CreateVersion stores a new certificate version.
+	CreateVersion(ctx context.Context, version *domain.CertificateVersion) error
+	// GetExpiringCertificates returns certificates expiring before the given time.
+	GetExpiringCertificates(ctx context.Context, before time.Time) ([]*domain.ManagedCertificate, error)
+}
+
+// IssuerRepository defines operations for managing certificate issuers.
+type IssuerRepository interface {
+	// List returns all issuers, optionally filtered.
+	List(ctx context.Context) ([]*domain.Issuer, error)
+	// Get retrieves an issuer by ID.
+	Get(ctx context.Context, id string) (*domain.Issuer, error)
+	// Create stores a new issuer.
+	Create(ctx context.Context, issuer *domain.Issuer) error
+	// Update modifies an existing issuer.
+	Update(ctx context.Context, issuer *domain.Issuer) error
+	// Delete removes an issuer.
+	Delete(ctx context.Context, id string) error
+}
+
+// TargetRepository defines operations for managing deployment targets.
+type TargetRepository interface {
+	// List returns all targets, optionally filtered.
+	List(ctx context.Context) ([]*domain.DeploymentTarget, error)
+	// Get retrieves a target by ID.
+	Get(ctx context.Context, id string) (*domain.DeploymentTarget, error)
+	// Create stores a new target.
+	Create(ctx context.Context, target *domain.DeploymentTarget) error
+	// Update modifies an existing target.
+	Update(ctx context.Context, target *domain.DeploymentTarget) error
+	// Delete removes a target.
+	Delete(ctx context.Context, id string) error
+	// ListByCertificate returns all targets for a given certificate.
+	ListByCertificate(ctx context.Context, certID string) ([]*domain.DeploymentTarget, error)
+}
+
+// AgentRepository defines operations for managing control plane agents.
+type AgentRepository interface {
+	// List returns all agents.
+	List(ctx context.Context) ([]*domain.Agent, error)
+	// Get retrieves an agent by ID.
+	Get(ctx context.Context, id string) (*domain.Agent, error)
+	// Create stores a new agent.
+	Create(ctx context.Context, agent *domain.Agent) error
+	// Update modifies an existing agent.
+	Update(ctx context.Context, agent *domain.Agent) error
+	// Delete removes an agent.
+	Delete(ctx context.Context, id string) error
+	// UpdateHeartbeat updates the agent's last heartbeat timestamp.
+	UpdateHeartbeat(ctx context.Context, id string) error
+	// GetByAPIKey retrieves an agent by hashed API key.
+	GetByAPIKey(ctx context.Context, keyHash string) (*domain.Agent, error)
+}
+
+// JobRepository defines operations for managing renewal and deployment jobs.
+type JobRepository interface {
+	// List returns all jobs.
+	List(ctx context.Context) ([]*domain.Job, error)
+	// Get retrieves a job by ID.
+	Get(ctx context.Context, id string) (*domain.Job, error)
+	// Create stores a new job.
+	Create(ctx context.Context, job *domain.Job) error
+	// Update modifies an existing job.
+	Update(ctx context.Context, job *domain.Job) error
+	// Delete removes a job.
+	Delete(ctx context.Context, id string) error
+	// ListByStatus returns jobs with a specific status.
+	ListByStatus(ctx context.Context, status domain.JobStatus) ([]*domain.Job, error)
+	// ListByCertificate returns all jobs for a certificate.
+	ListByCertificate(ctx context.Context, certID string) ([]*domain.Job, error)
+	// UpdateStatus updates a job's status and optional error message.
+	UpdateStatus(ctx context.Context, id string, status domain.JobStatus, errMsg string) error
+	// GetPendingJobs returns jobs not yet processed of a specific type.
+	GetPendingJobs(ctx context.Context, jobType domain.JobType) ([]*domain.Job, error)
+}
+
+// PolicyRepository defines operations for managing compliance policies and violations.
+type PolicyRepository interface {
+	// ListRules returns all policy rules.
+	ListRules(ctx context.Context) ([]*domain.PolicyRule, error)
+	// GetRule retrieves a policy rule by ID.
+	GetRule(ctx context.Context, id string) (*domain.PolicyRule, error)
+	// CreateRule stores a new policy rule.
+	CreateRule(ctx context.Context, rule *domain.PolicyRule) error
+	// UpdateRule modifies an existing policy rule.
+	UpdateRule(ctx context.Context, rule *domain.PolicyRule) error
+	// DeleteRule removes a policy rule.
+	DeleteRule(ctx context.Context, id string) error
+	// CreateViolation records a policy violation.
+	CreateViolation(ctx context.Context, violation *domain.PolicyViolation) error
+	// ListViolations returns policy violations, optionally filtered.
+	ListViolations(ctx context.Context, filter *AuditFilter) ([]*domain.PolicyViolation, error)
+}
+
+// AuditRepository defines operations for recording and retrieving audit logs.
+type AuditRepository interface {
+	// Create stores a new audit event.
+	Create(ctx context.Context, event *domain.AuditEvent) error
+	// List returns audit events matching the filter criteria.
+	List(ctx context.Context, filter *AuditFilter) ([]*domain.AuditEvent, error)
+}
+
+// NotificationRepository defines operations for managing notifications.
+type NotificationRepository interface {
+	// Create stores a new notification.
+	Create(ctx context.Context, notif *domain.NotificationEvent) error
+	// List returns notifications matching the filter criteria.
+	List(ctx context.Context, filter *NotificationFilter) ([]*domain.NotificationEvent, error)
+	// UpdateStatus updates a notification's delivery status.
+	UpdateStatus(ctx context.Context, id string, status string, sentAt time.Time) error
+}
+
+// TeamRepository defines operations for managing teams.
+type TeamRepository interface {
+	// List returns all teams.
+	List(ctx context.Context) ([]*domain.Team, error)
+	// Get retrieves a team by ID.
+	Get(ctx context.Context, id string) (*domain.Team, error)
+	// Create stores a new team.
+	Create(ctx context.Context, team *domain.Team) error
+	// Update modifies an existing team.
+	Update(ctx context.Context, team *domain.Team) error
+	// Delete removes a team.
+	Delete(ctx context.Context, id string) error
+}
+
+// OwnerRepository defines operations for managing certificate owners.
+type OwnerRepository interface {
+	// List returns all owners.
+	List(ctx context.Context) ([]*domain.Owner, error)
+	// Get retrieves an owner by ID.
+	Get(ctx context.Context, id string) (*domain.Owner, error)
+	// Create stores a new owner.
+	Create(ctx context.Context, owner *domain.Owner) error
+	// Update modifies an existing owner.
+	Update(ctx context.Context, owner *domain.Owner) error
+	// Delete removes an owner.
+	Delete(ctx context.Context, id string) error
+}