Module state 

Shared state + configuration types for the long-running server.

Structs

AppState

ClosureUpstream

IssuancePaths

ServeArgs

Default defaults are bogus on purpose; prod paths fail at first IO if clap parsing is skipped.

VerifiedFleetSnapshot

(fleet, hash, raw_bytes) tuple under one lock prevents readers seeing fresh fleet with stale hash or stale bytes. artifact_bytes + signature_bytes are the canonical signed bytes the cp_manifest_poll worker fetched + verified; the /v1/fleet.resolved route serves them directly so agents see the exact bytes CP verified, not stale closure-embedded content from the --artifact flag.

Constants

DEFAULT_CONFIRM_DEADLINE_SECS

Must exceed agent poll budget (~300s) plus slack to avoid magic-rollback / agent-poll races.