coord

type ChairHTTPClient struct {
	// contains filtered or unexported fields
}

type ChairHTTPOptions struct {
	// Port is the chair listener port, shared by convention across the cluster
	// the same way the transfer port is.
	Port int

	// Timeout bounds a single call. Zero uses 5s.
	Timeout time.Duration

	// MaxDigestsPerRequest caps a batch. Zero uses DefaultMaxDigestsPerPleasePull.
	MaxDigestsPerRequest int

	Logger *slog.Logger
}

type ChairValidator interface {
	ValidateChair(ctx context.Context, assignment ifaces.ChairAssignment) bool
}

type Client struct {
	// contains filtered or unexported fields
}

type ClientOption func(*Client)

type MetricsHooks struct {
	// OnPullIntentServed fires once per pull_intent_query handled.
	OnPullIntentServed func()
	// OnPullIntentStorageUnavailable fires once per pull_intent_query
	// (wire or local) whose has_cached=false answer was caused by the
	// primary or secondary storage backend returning ifaces.ErrUnavailable
	// rather than a definitive miss. Operators use this to distinguish
	// "DHT routes around us because we genuinely lack the blob" from
	// "DHT routes around us because containerd is unreachable on this
	// node" - the latter should also be caught by readiness, but the
	// metric makes transient storage flaps observable independently of
	// the readyz signal.
	OnPullIntentStorageUnavailable func()
	// OnPleasePullServed fires once per please_pull *request* handled
	// (not per digest in the batch).
	OnPleasePullServed func()
	// OnPleasePullStarted is called once per digest the server
	// transitions into in_flight from a please_pull batch.
	OnPleasePullStarted func()
	// OnPleasePullDeclined fires once per digest the server declines to
	// start (PumpDeclined): the puller-pump refused the work because the
	// node is shutting down, the requesting stream is already gone, or the
	// admission bound is full. The digest is reported to the requester as
	// OUTCOME_UNSPECIFIED, so reason is the only way to tell those apart.
	// This is the load-shedding signal operators watch during large
	// rollouts; a sustained nonzero rate means designated pullers are
	// saturated and requesters are falling through to direct-origin
	// fallback (NF5).
	OnPleasePullDeclined func(reason string)
	// OnStreamError fires once per inbound stream that is dropped without a
	// normal reply: a malformed or oversized envelope, read/decode/deadline
	// failures, the concurrent-stream limit, dispatch and serve errors, and
	// response marshal/write failures.
	OnStreamError func()
}

type NegativeCache interface {
	Lookup(d digest.Digest) (entry NegativeEntry, ok bool)
}

type NegativeEntry struct {
	CooldownUntil time.Time
	Class         ifaces.FailureClass
}

type Option func(*Server)

type PullerPump func(ctx context.Context, registry, repository string, d digest.Digest, kind ifaces.OriginRefKind) PumpResult

type PumpResult struct {
	Status        PumpStatus
	StartedAt     time.Time
	CooldownUntil time.Time
	FailureClass  ifaces.FailureClass
	// DeclineReason distinguishes the PumpDeclined paths, which the wire
	// outcome cannot: OUTCOME_UNSPECIFIED is reported for all of them.
	DeclineReason string
}

type PumpStatus int

type Server struct {
	// contains filtered or unexported fields
}