Module bin_platform 

Which platform an agent binary targets, read from its own bytes — the single source of truth for the agent_releases Object Store key scheme.

Key scheme (backward compatible):

• Windows releases stay at the bare <version> key — agents in the field fetch exactly that today, so any change would be a migration. (Windows aarch64 also maps to the bare key: the fleet is x86_64 in practice, and distinguishing it is a future problem.)
• Linux releases live at <version>-linux-<arch> (x86_64 / aarch64). Semver prerelease dashes are fine because consumers always match the suffix (-linux-x86_64 / -linux-aarch64), never a dash mid-version.

Detection is by magic bytes, not filename: MZ → PE (arch from the COFF header’s Machine field), \x7fELF → ELF (arch from e_machine), Mach-O magics → a clear “unsupported” error (macOS agents are out of scope). Pure byte inspection, no parsing library — the PE path only needs e_lfanew + the COFF Machine field, which pelite (used for VERSIONINFO in exe_version.rs) doesn’t surface as a bare number without dragging in its full header model.

Enums

AgentPlatform

The platform an uploaded agent binary runs on.

Constants

LINUX_SUFFIXES

Both Linux suffixes, for “any Linux key” scans (rollout checks).

LINUX_SUFFIX_AARCH64

Object Store key suffix for Linux aarch64 releases.

LINUX_SUFFIX_X86_64

Object Store key suffix for Linux x86_64 releases.

Functions

base_version_of_key

The rollout-visible version for a store key: the key with any linux platform suffix stripped. A scope’s target_version always names the BASE version (0.46.0, never 0.46.0-linux-x86_64) — the agent’s own platform decides which suffixed binary it fetches — so guards that compare a key against target_version must go through this.

candidate_keys

Every store key a rollout’s existence check should accept for version: the bare (Windows) key plus each linux platform key. A version is rollable-out when ANY of these exists — a Linux-only publish never writes the bare key.

check_release_key

The charset every agent_releases key must fit: the key reaches a quoted Content-Disposition filename, generated PowerShell / batch / shell install scripts, and NATS subjects — restrict the charset (semver-ish) rather than escaping four different formats. Shared by the backend publish endpoint, the CLI publish, and the installer endpoint (which used to carry its own copy).

platform_of_key

The platform label for an existing store key, derived from its suffix: "linux-x86_64" / "linux-aarch64" for suffixed keys, "windows" for anything else (bare keys are Windows by definition of the key scheme). Used by the releases listing, which only has keys to look at.