Add probo-agent CLI and deviceagent library

Introduce the standalone device agent binary and shared library for enrollment, posture checks, self-update, and OS service integration. Include build targets, module deps, and release workflow so the agent can ship independently of server changes. Signed-off-by: Bryan Frimin <bryan@probo.com>
2026-05-26 09:01:08 -07:00
parent e643a3259c
commit 22e50b3f11
56 changed files with 7410 additions and 127 deletions
--- a/pkg/deviceagent/posture_queue.go
+++ b/pkg/deviceagent/posture_queue.go
@@ -0,0 +1,144 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package deviceagent
+
+import (
+	"encoding/json"
+	"errors"
+	"fmt"
+	"os"
+	"path/filepath"
+	"time"
+)
+
+const (
+	pendingPosturesFileName  = "pending-postures.json"
+	maxPendingPostureBatches = 96
+)
+
+type pendingPostureBatch struct {
+	QueuedAt time.Time              `json:"queued_at"`
+	Results  []PostureResultPayload `json:"results"`
+}
+
+func pendingPosturesPath(dir string) string {
+	if dir == "" {
+		dir = DefaultConfigDir()
+	}
+
+	return filepath.Join(dir, pendingPosturesFileName)
+}
+
+func loadPendingPostureBatches(dir string) ([]pendingPostureBatch, error) {
+	data, err := os.ReadFile(pendingPosturesPath(dir))
+	if err != nil {
+		if errors.Is(err, os.ErrNotExist) {
+			return nil, nil
+		}
+
+		return nil, fmt.Errorf("cannot read pending postures: %w", err)
+	}
+
+	var batches []pendingPostureBatch
+	if err := json.Unmarshal(data, &batches); err != nil {
+		return nil, fmt.Errorf("cannot decode pending postures: %w", err)
+	}
+
+	filtered := make([]pendingPostureBatch, 0, len(batches))
+	for _, batch := range batches {
+		if len(batch.Results) == 0 {
+			continue
+		}
+		filtered = append(filtered, batch)
+	}
+
+	return filtered, nil
+}
+
+func savePendingPostureBatches(dir string, batches []pendingPostureBatch) error {
+	if dir == "" {
+		dir = DefaultConfigDir()
+	}
+
+	path := pendingPosturesPath(dir)
+	if len(batches) == 0 {
+		if err := os.Remove(path); err != nil && !errors.Is(err, os.ErrNotExist) {
+			return fmt.Errorf("cannot delete pending postures: %w", err)
+		}
+		return nil
+	}
+
+	if err := os.MkdirAll(dir, 0o700); err != nil {
+		return fmt.Errorf("cannot create pending posture dir: %w", err)
+	}
+
+	data, err := json.MarshalIndent(batches, "", "  ")
+	if err != nil {
+		return fmt.Errorf("cannot encode pending postures: %w", err)
+	}
+
+	tmp := path + ".tmp"
+	if err := os.WriteFile(tmp, data, 0o600); err != nil {
+		return fmt.Errorf("cannot write pending postures: %w", err)
+	}
+
+	if err := os.Rename(tmp, path); err != nil {
+		return fmt.Errorf("cannot atomically replace pending postures: %w", err)
+	}
+
+	return nil
+}
+
+func enqueuePendingPostureBatch(
+	dir string,
+	results []PostureResultPayload,
+	queuedAt time.Time,
+) (int, error) {
+	if len(results) == 0 {
+		return 0, nil
+	}
+
+	batches, err := loadPendingPostureBatches(dir)
+	if err != nil {
+		return 0, err
+	}
+
+	clonedResults := make([]PostureResultPayload, len(results))
+	copy(clonedResults, results)
+
+	batches = append(
+		batches,
+		pendingPostureBatch{
+			QueuedAt: queuedAt.UTC(),
+			Results:  clonedResults,
+		},
+	)
+
+	dropped := 0
+	if len(batches) > maxPendingPostureBatches {
+		dropped = len(batches) - maxPendingPostureBatches
+		batches = batches[dropped:]
+	}
+
+	if err := savePendingPostureBatches(dir, batches); err != nil {
+		return 0, err
+	}
+
+	return dropped, nil
+}
+
+func clearPendingPostureBatches(dir string) error {
+	return savePendingPostureBatches(dir, nil)
+}