fleet

func Diff ¶

func Diff(pinnedImgs []pinned.PinnedImage, runtimeImgs []RuntimeImage) []ImageDiff

Diff computes per-image diffs between pinned (source) and runtime (probe) sets.

Matching: by Image string (registry+repo, no tag, no digest). Case-sensitive.

Semantics per image group:

• Pinned only, no Runtime → DiffOnlySource (Pinned set, Runtime nil)
• Runtime only, no Pinned → DiffOnlyRuntime (Pinned nil, Runtime set)
• Pinned.Unresolved != "" → DiffUnresolved (Pinned set, Runtime set if available)
• Both present, same Tag, same Digest (or both Digest=="") → DiffMatch
• Both present, same Tag, different Digest (both non-empty) → DiffDigestDrift
• Both present, different Tag → DiffTagDrift

One-side-has-digest, other-does-not: treated as DiffMatch (no evidence of drift; runtime probes may not surface digests).

When the same Image appears multiple times in either input (e.g. two compose services referencing nginx), items are sorted within each Image group before pairing:

• Pinned: by Service, then Source, then Line
• Runtime: by Container, then StartedAt

Surplus on either side gets OnlySource / OnlyRuntime rows.

Output is sorted: by Status priority (TagDrift > DigestDrift > Unresolved > OnlySource > OnlyRuntime > Match), then by Image asc, then by Pinned.Service / Runtime.Container — deterministic.

func NewRegistry ¶

func NewRegistry() *Registry

NewRegistry creates an empty Registry.

func SiblingDiff ¶

func SiblingDiff(reports []TargetReportLike) []SiblingDriftRow

SiblingDiff returns one SiblingDriftRow per Image that appears with a differing (Tag, Digest) tuple across two or more targets.

Inputs: the per-target reports produced by per-host Diff(). Output: deterministic order — by Image asc, then by Variant.Target asc. Empty result (nil slice) when fewer than 2 targets, or when no Image shows cross-host drift.

Rules:

• For each Image observed in any target's Diffs[].Runtime (regardless of Status — Match, OnlyRuntime, TagDrift, etc.), collect (Target, Tag, Digest, ...).
• If two or more variants for the same Image differ in (Tag, Digest), emit one row.
• Variants WITHOUT a Runtime (e.g. OnlySource rows) are skipped — only actually-running containers count for sibling-drift purposes.
• When Digest is empty on one side and non-empty on the other, treat as drift only if Tag also differs. (Same-tag/empty-digest-vs-real-digest is the "we don't have full info" case, not actionable drift.)
• When the same Image appears multiple times in one target (multiple containers), one representative variant is chosen (first by Container name ascending).

func ParseTarget ¶

func ParseTarget(raw string) (Target, error)

ParseTarget normalises a target URL into a Target.

Accepted forms:

""                            → {Scheme:"local"}
"local://"                    → {Scheme:"local"}
"docker://"                   → {Scheme:"docker"}
"ssh://<host>"                → {Scheme:"ssh", Host:"<host>"}
"ssh://<user>@<host>"         → {Scheme:"ssh", User:"<user>", Host:"<host>"}
"ssh://<host>:<port>"         → {Scheme:"ssh", Host:"<host>", Port:<port>}
"ssh://<user>@<host>:<port>"

Anything else returns an error wrapping ErrInvalidTarget.

Rules:

• Host MUST be non-empty for ssh.
• Host MUST be empty for local/docker (MVP: docker is local-socket only).
• Port MUST be in 1..65535 if specified.
• Scheme is case-folded to lowercase in the result.

Target.Raw is always set to the original input.