worker

type Config struct {
	Listen        string        `toml:"listen"`         // gRPC listen addr for incoming Compile RPCs
	MetricsListen string        `toml:"metrics_listen"` // optional: HTTP /metrics scrape addr (e.g. ":9192"). Empty disables.
	WorkerID      string        `toml:"worker_id"`      // empty → auto-generate at startup
	PublicAddr    string        `toml:"public_addr"`    // address advertised to the scheduler; clients dial this
	Paranoid      bool          `toml:"paranoid"`       // mirror of scheduler-side paranoid mode (§4.13)
	TLS           TLSConfig     `toml:"tls"`
	Scheduler     SchedulerLink `toml:"scheduler"`
	Runtime       RuntimeConfig `toml:"runtime"`
	VM            VMConfig      `toml:"vm"`
	Pool          PoolConfig    `toml:"pool"`
	Image         ImageConfig   `toml:"image"`

	// Caches is the worker-side cache backends. In paranoid mode (§4.13)
	// the worker is the only process that reads/writes the cache; in the
	// default mode this can be empty and clients carry their own caches.
	// Schema is shared with the client config (config.CacheConfig).
	Caches []config.CacheConfig `toml:"cache"`
}

type FirecrackerConfig struct {
	FirecrackerBin string `toml:"firecracker_bin"`
	JailerBin      string `toml:"jailer_bin"`
	KernelImage    string `toml:"kernel_image"`
	RootfsDir      string `toml:"rootfs_dir"`
	RunDir         string `toml:"run_dir"`
	UID            int    `toml:"uid"`
	GID            int    `toml:"gid"`
	BootArgs       string `toml:"boot_args"`
}

type HcsshimConfig struct {
	Address     string `toml:"address"`
	Namespace   string `toml:"namespace"`
	RunDir      string `toml:"run_dir"`
	Runtime     string `toml:"runtime"`
	Snapshotter string `toml:"snapshotter"`
	Isolation   string `toml:"isolation"`
}

type ImageConfig struct {
	PauseLinuxAmd64   string `toml:"pause_linux_amd64"`
	PauseLinuxArm64   string `toml:"pause_linux_arm64"`
	PauseWindowsAmd64 string `toml:"pause_windows_amd64"`
	// AgentWindowsAmd64 is the host path to hpcc-agent.exe used when
	// runtime.handler = runhcs-wcow-hypervisor AND
	// runtime.hcsshim.isolation = "hyperv". The agent is bind-mounted
	// into the container alongside pause.exe (under C:\.hpcc) and
	// becomes the OCI entrypoint, so the host can stream compile
	// inputs/outputs over an HvSocket gRPC channel instead of
	// copyTree-ing every Exec. Required only for the Hyper-V isolated
	// path; process-isolation containers stick with pause.exe + the
	// Task.Exec copy-in/copy-out flow (see HcsshimOptions.Isolation
	// for the why).
	AgentWindowsAmd64 string `toml:"agent_windows_amd64"`
	// AgentLinuxAmd64 / AgentLinuxArm64 are the host paths to the
	// per-arch hpcc-agent binaries the rootfs.Store injects at
	// /.hpcc/agent inside each prepared squashfs image. Required when
	// runtime.handler = firecracker — one path per arch the worker
	// will pull images for. Empty for an arch the worker never pulls
	// for is fine; PullImage fails fast at request time rather than
	// at startup.
	AgentLinuxAmd64   string   `toml:"agent_linux_amd64"`
	AgentLinuxArm64   string   `toml:"agent_linux_arm64"`
	AdvertisedDigests []string `toml:"advertised_digests"`
	IdleTimeout       string   `toml:"idle_timeout"` // e.g. "24h"; empty disables eviction
}

type PoolConfig struct {
	MaxActive int `toml:"max_active"` // upper bound on concurrent per-tenant VMs
}

type RuntimeConfig struct {
	// Handler selects the worker runtime backend.
	//   "firecracker"             — raw Firecracker driver (Linux).
	//   "runhcs-wcow-hypervisor"  — containerd + hcsshim Hyper-V (Windows).
	//   "really_really_dangerous" — host-exec; dev only.
	Handler string `toml:"handler"`

	Firecracker FirecrackerConfig `toml:"firecracker"`
	Hcsshim     HcsshimConfig     `toml:"hcsshim"`
}

type SchedulerLink struct {
	URL         string `toml:"url"`          // e.g. "scheduler.internal:9091"
	WorkerToken string `toml:"worker_token"` // shared static token; matches scheduler.auth.worker_token
	CAFile      string `toml:"ca_file"`      // optional: pin the scheduler's CA cert
}

type TLSConfig struct {
	CertFile string `toml:"cert_file"`
	KeyFile  string `toml:"key_file"`
	CertRef  string `toml:"cert_ref"`
	KeyRef   string `toml:"key_ref"`
}

type VMConfig struct {
	Memory         string `toml:"memory"` // e.g. "2GB"
	VCPUs          int32  `toml:"vcpus"`
	IdleTimeout    string `toml:"idle_timeout"`    // e.g. "10m"
	SessionTimeout string `toml:"session_timeout"` // e.g. "8h"
}

type Worker struct {
	Config Config
	// Images is the local image catalog: digest → *imageEntry. The
	// presence of an entry means "the prepared image for this digest
	// is locally available." Pulls add entries on success; advertised
	// and previously-prepared digests pre-populate at bootstrap.
	Images sync.Map
	// ImageStore prepares per-tenant images for the runtime. nil means
	// "no image store" — the dev-mode dangerous runtime takes that
	// path: ensureImage records every digest as locally-present
	// without I/O, and the eviction loop only drops catalogue
	// entries. Real deployments wire either a cdimage.Store
	// (containerd, Windows under hcsshim) or a rootfs.Store
	// (Linux under raw Firecracker).
	ImageStore image.Store
	Containers sync.Map // containerID -> runtime.Container

	// CertPEM is the serving certificate's PEM bytes. cmd/worker sets
	// this after secret.LoadTLSCertificate resolves cert_file or
	// cert_ref. bootstrap falls back to reading cfg.TLS.CertFile when
	// nil, which keeps tests that construct Worker directly with a
	// cert path on disk working.
	CertPEM []byte

	gen.UnimplementedWorkerServiceServer
	// contains filtered or unexported fields
}