controller

type Controller struct {
	Org     func() (*policy.Org, error) // e.g. policy.Load of the served policy dir
	Metrics promote.MetricSource
	Writer  Writer     // nil: no PRs (logged)
	Kill    KillSwitch // nil: rollbacks are not enforced until the PR merges (logged, notified)
	// KillCaveat, when set, is why a successful Kill is not known to be
	// enforced by gateways (e.g. `halo controller run` without
	// --killswitch-served); messages report it instead of claiming enforcement.
	KillCaveat string
	// Kills is read each tick: a killed running experiment is not evaluated
	// (its evidence is all-control) and humans are told once. nil = no check.
	Kills        *KillStore
	Notifier     Notifier // nil: none
	State        *StateLog
	VerdictsPath string // "" = do not persist verdicts
	Clock        func() time.Time
	Log          *slog.Logger
	TickTimeout  time.Duration // default 2m; bounds one whole tick

	// RolloutStateDir holds one hash-chained state file per Rollout ("" =
	// rollouts are not driven); PolicyDir is where step scorecards are read.
	RolloutStateDir, PolicyDir string
	// contains filtered or unexported fields
}

type Event struct {
	// Rollout is set for rollout events; Experiment is then its backing experiment.
	Rollout     string          `json:"rollout,omitempty"`
	Experiment  string          `json:"experiment"`
	Axis        string          `json:"axis,omitempty"`
	Verdict     promote.Verdict `json:"verdict"`
	Reason      string          `json:"reason"`
	Killed      bool            `json:"killed"` // traffic-plane kill switch is active for the experiment
	KillOutcome KillOutcome     `json:"killOutcome,omitempty"`
	KillError   string          `json:"killError,omitempty"` // detail for every non-enforced outcome
	PRURL       string          `json:"prURL,omitempty"`
	PRError     string          `json:"prError,omitempty"`
	Report      promote.Report  `json:"report"`
	At          time.Time       `json:"at"`
}

type GitWriter struct {
	RepoDir string // git checkout (or any dir inside one)
	Subdir  string // policy root inside RepoDir
	Base    string // PR base branch; "" = repo default
	Opener  promote.PROpener
}

type KillFunc func(ctx context.Context, experiment, by, reason string) (bool, error)

type KillOutcome string

type KillRecord struct {
	Experiment string    `json:"experiment"`
	Killed     bool      `json:"killed"`
	By         string    `json:"by"`
	Reason     string    `json:"reason,omitempty"`
	At         time.Time `json:"at"`
}

type KillStore struct {
	Now func() time.Time
	// contains filtered or unexported fields
}

type KillSwitch interface {
	// Kill marks experiment killed; changed is false when it already was.
	Kill(ctx context.Context, experiment, by, reason string) (changed bool, err error)
}

type Named interface {
	Name() string
}

type Notifier interface {
	Notify(ctx context.Context, e Event) error
}

type Notifiers []Notifier

type RolloutWriter interface {
	ProposeRollout(ctx context.Context, plan func(dir string) (*promote.Change, error), branch, title string, body func(patch string) string) (prURL string, err error)
}

type Slack struct {
	URL    string
	Client *http.Client
}

type StateLog struct {
	// contains filtered or unexported fields
}

type Webhook struct {
	URL    string
	Secret []byte
	Client *http.Client
	Now    func() time.Time // default time.Now
}

type Writer interface {
	ProposeStatus(ctx context.Context, experiment, status, title, body string) (prURL string, err error)
}