provision

type Acquired struct {
	// Runtime is the runtime this is, matching inference.Runtime.Name.
	Runtime string
	// Version is the gate-approved version that was acquired.
	Version inference.Version
	// Binary is the server executable path for a binary-archive runtime; empty for a
	// container runtime.
	Binary string
	// Image is the digest-pinned image for a container runtime; its zero value means this
	// is a binary runtime.
	Image AcquiredImage
	// FromCache is true when the runtime was already present and nothing was downloaded or
	// pulled.
	FromCache bool
}

type AcquiredImage struct {
	// Ref is the image reference without the digest, e.g. "vllm/vllm-openai:v0.11.1".
	Ref string
	// Digest is the content digest the image is pinned to, "sha256:" then 64 hex chars.
	Digest string
}

type ArchiveKind = acquire.ArchiveKind

type ArchiveProvisioner struct {
	// Release is the pinned build to install.
	Release Release
	// DestDir is where installed builds live.
	DestDir string
	// Downloader is the verified fetch path the archive is downloaded through.
	Downloader *fetch.Downloader
}

type ContainerProvisioner struct {
	// RuntimeName is the runtime this image is, e.g. "vllm".
	RuntimeName string
	// Version is the runtime version the pinned digest corresponds to. Blessing a digest
	// asserts which version it is; that version is gated against the advisory floor, so a
	// digest for a known-vulnerable build is refused before it is pulled.
	Version inference.Version
	// Ref and Digest pin the image. Digest is required and must be a well-formed sha256.
	Ref    string
	Digest string
	// Pull ensures the image is present; nil treats the image as already present.
	Pull ImagePuller
}

type DetectProvisioner struct {
	// RuntimeName is the runtime to detect, matching inference.Runtime.Name; its known
	// version format is used to parse the located runtime's version output.
	RuntimeName string
	// Locate finds the present runtime and reports its raw version output.
	Locate Locator
}

type ImagePuller func(ctx context.Context, ref, digest string) error

type Installed struct {
	// BinPath is the absolute path to the runnable server executable.
	BinPath string
	// Version is the build's version.
	Version inference.Version
	// FromCache is true when the build was already installed and was reused.
	FromCache bool
}

type Locator func(ctx context.Context) (binPath, rawVersion string, ok bool)

type ModelFile struct {
	// Name is the file's path within the model directory, for example "model.safetensors" or
	// "tokenizer.json". It is relative and must not escape the directory.
	Name string
	// URL is the https source of the file.
	URL string
	// SHA256 is the pinned digest the file is verified against. Empty pins on fetch (the
	// computed digest is recorded but nothing pre-pinned was checked), the lower-trust path
	// the single-file fetch also allows.
	SHA256 string
	// SizeBytes is the file's known size, used as the per-file download cap. 0 uses the
	// downloader's default ceiling.
	SizeBytes int64
}

type Provisioner interface {
	// Runtime is the inference runtime this provisions, matching inference.Runtime.Name.
	Runtime() string
	// Acquire obtains the runtime and returns the handle launch consumes. It reuses an
	// already-present build or image rather than re-fetching where it can.
	Acquire(ctx context.Context) (Acquired, error)
}

type Release struct {
	// Runtime is the inference runtime this build is, matching inference.Runtime.Name.
	Runtime string
	// Version is the build's version, used to gate it and to name its install dir.
	Version inference.Version
	// GOOS and GOARCH are the platform this build targets (Go's runtime.GOOS/GOARCH).
	GOOS, GOARCH string
	// URL is the https source of the release archive.
	URL string
	// SHA256 is the pinned digest the downloaded archive must match.
	SHA256 string
	// SizeBytes is the archive's known size, used as the download cap.
	SizeBytes int64
	// Archive is the archive's container format.
	Archive ArchiveKind
	// BinName is the server executable to locate inside the extracted archive (for
	// example "llama-server" or "llama-server.exe"). Its sibling libraries are extracted
	// alongside it, so the located binary is runnable in place.
	BinName string
}

type VLLMRelease struct {
	// Ref is the image reference without the digest, for diagnostics and the pull.
	Ref string
	// Digest is the content digest the image is pinned to ("sha256:" + 64 hex).
	Digest string
	// Version is the vLLM version this digest is, gated against the inference floor.
	Version inference.Version
}