// fleet-agent — the on-host steady-state control-plane client (telemetry v1).
//
// Runs in the BOOTED system (post switch-root), NOT the initramfs. It reuses the
// host's TPM identity (signing key at 0x81000100 + cert in NV 0x01800100) as an
// mTLS client cert, opens the long-lived FleetAgent.Session bidi stream to the
// fleet-manager, sends Hello + periodic HealthSnapshot, and (v1) logs but does not
// act on the desired-state/commands it receives. See docs/fleet-management-design.md.
//
// Unlike fleet-hostapi (stdlib-only) this needs gRPC + go-tpm; like fleet-enrol it
// is a static CGO_ENABLED=0 binary whose deps are proxy-fetched, go.sum-PINNED, and
// built out-of-VM in CI (never enters the reproducible image build's toolchain).
// Dep versions track serving/fleet-manager/go.mod (the peer of this wire contract).
module fleet-agent

go 1.26

require (
	github.com/google/go-tpm v0.9.8
	google.golang.org/grpc v1.82.0
	google.golang.org/protobuf v1.36.11
)

require (
	golang.org/x/net v0.53.0 // indirect
	golang.org/x/sys v0.43.0 // indirect
	golang.org/x/text v0.36.0 // indirect
	google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 // indirect
)