factory

Sep 27, 2026

Changes in this version

type ClientLinkLimits

+ MaxMessageBytes int

type Option

+ func WithRouteLimits(l RouteLimits) Option

+ type RouteLimits = httpapi.RouteLimits

+ func DefaultRouteLimits() RouteLimits

type Server

+ func (s *Server) RouteLimits() RouteLimits

Sep 26, 2026

Changes in this version

type ClientLinkLimits

+ OwnershipPollInterval time.Duration

type ReconcileLimits

+ PassTimeout time.Duration

Sep 25, 2026

Changes in this version

+ type AuditAuthorizer interface

+ AuthorizeAuditRead func(context.Context, identity.Principal, sessionwire.SessionID) error

type Option

+ func WithPrincipalStamping() Option

type TenantAuthorizer

+ func (TenantAuthorizer) AuthorizeAuditRead(ctx context.Context, principal identity.Principal, ...) error

Sep 23, 2026

Changes in this version

+ var ErrConflictingObjectResolvers = errors.New(...)

type Option

+ func WithSessionObjectStoreResolver(r SessionObjectStoreResolver) Option

+ type SessionObjectStoreResolver func(ctx context.Context, tenant sessionwire.TenantID, ...) (ObjectReader, error)

Sep 23, 2026

Changes in this version

+ var ErrConflictingJournalResolvers = errors.New(...)

type Option

+ func WithSessionJournalResolver(r SessionJournalResolver) Option

+ type SessionJournalResolver func(ctx context.Context, tenant sessionwire.TenantID, ...) (JournalReader, error)

Sep 23, 2026

Changes in this version

+ var ErrHostSessionsWithoutJournalResolver = errors.New(...)

+ type JournalReader interface

+ ReadPublicJournal func(ctx context.Context, req sessionstore.ReadPublicJournalRequest) (sessionwire.JournalPage, error)

+ type JournalResolver func(ctx context.Context, tenant sessionwire.TenantID, ...) (JournalReader, error)

type Option

+ func WithJournalResolver(r JournalResolver) Option

Sep 20, 2026

Changes in this version

+ var ErrServerQuiesced = errors.New("factory: server is quiesced")

type Server

+ func (s *Server) Quiesce(ctx context.Context) error

Sep 20, 2026

Changes in this version

+ func UIRoutePrincipal(r *http.Request) (identity.Principal, bool)

type Option

+ func WithUIRoutes(h http.Handler, authorize UIRouteAuthorizer) Option

+ type UIRouteAuthorizer func(context.Context, identity.Principal, string, string) error

+ type WorkloadEndpointDiscovery interface

+ WorkloadEndpoint func(ctx context.Context, intent sessionstore.PlacementIntent) (sessionwire.HostID, uint64, sessionwire.InternalEndpoint, bool, error)

Sep 19, 2026

Changes in this version

type Commands

+ AdmitDispositionCommand func(ctx context.Context, req sessionstore.AdmitDispositionCommandRequest) (sessionstore.DispositionInboxEntry, bool, error)

+ GetDispositionCommand func(ctx context.Context, req sessionstore.GetDispositionCommandRequest) (sessionstore.DispositionInboxEntry, error)

+ ListDueDispositionCommands func(ctx context.Context, req sessionstore.ListDueDispositionCommandsRequest) (sessionstore.DispositionDueCommandPage, error)

+ PutCommandPayload func(ctx context.Context, req sessionstore.PutCommandPayloadRequest) (sessionwire.ObjectMetadata, error)

+ RejectDispositionCommand func(ctx context.Context, req sessionstore.RejectDispositionCommandRequest) (sessionstore.DispositionInboxEntry, bool, error)

type Option

+ func WithLogger(l *slog.Logger) Option

+ func WithPendingCommands(p PendingCommands) Option

+ type PendingCommands interface

+ ControlShards func() int

+ ListDueDispositionCommands func(ctx context.Context, req sessionstore.ListDueDispositionCommandsRequest) (sessionstore.DispositionDueCommandPage, error)

Sep 18, 2026

Changes in this version

+ var ErrInvalidDirectoryLimits = routing.ErrInvalidConfig

type Directory

+ func NewStoreDirectory(store DirectoryStore, limits DirectoryLimits) (Directory, error)

+ type DirectoryLimits = routing.Limits

+ func DefaultDirectoryLimits() DirectoryLimits

+ type DirectoryStore interface

+ GetHostRegistration func(context.Context, sessionstore.GetHostRegistrationRequest) (sessionstore.HostRegistrationEntry, error)

+ ListCompatibleHosts func(context.Context, sessionstore.ListCompatibleHostsRequest) (sessionstore.HostTargetPage, error)

+ ReconcileHostTargets func(context.Context, sessionstore.ReconcileHostTargetsRequest) (sessionstore.HostTargetReconcileResult, error)

+ type TenantAuthorizer struct

+ func (TenantAuthorizer) AuthorizeControl(ctx context.Context, principal identity.Principal, ...) error

+ func (TenantAuthorizer) AuthorizeObjectRead(ctx context.Context, principal identity.Principal, ...) error

+ func (TenantAuthorizer) AuthorizeServiceSweep(ctx context.Context, principal identity.Principal) error

+ func (TenantAuthorizer) AuthorizeSessionList(ctx context.Context, principal identity.Principal) error

+ func (TenantAuthorizer) AuthorizeSessionRead(ctx context.Context, principal identity.Principal, ...) error

+ func (TenantAuthorizer) AuthorizeSubscribe(ctx context.Context, principal identity.Principal, channel string) error

type WorkloadController

+ DeleteWorkload func(ctx context.Context, intent sessionstore.PlacementIntent) error

+ ObserveWorkload func(ctx context.Context, intent sessionstore.PlacementIntent) (sessionwire.HostLinkRegistryObservation, bool, error)

+ RequestDrain func(ctx context.Context, intent sessionstore.PlacementIntent) (sessionwire.HostLinkDrainObservation, error)

Sep 15, 2026

Changes in this version

+ const DefaultVersion

+ const MinClientLinkPingInterval

+ var ErrAlreadyServing = errors.New("factory: server is already serving")

+ var ErrAlreadyStarted = errors.New("factory: server is already started")

+ var ErrConflictingUI = errors.New("factory: WithUIHandler and WithUIFS are mutually exclusive")

+ var ErrCreatePlaneIncomplete = errors.New(...)

+ var ErrDuplicateOption = errors.New("factory: option supplied more than once")

+ var ErrEmptyReplicaID = errors.New("factory: the replica identifier is empty")

+ var ErrEmptyVersion = errors.New("factory: the build version is empty")

+ var ErrIncompleteSessionBinding = errors.New("factory: the session binding names no storage binding or no version")

+ var ErrInvalidLaunchTemplate = errors.New("factory: invalid launch template")

+ var ErrInvalidLimits = errors.New("factory: invalid limits")

+ var ErrMissingDependency = errors.New("factory: required seam is missing")

+ var ErrNilDependency = errors.New("factory: nil dependency")

+ var ErrNilOption = errors.New("factory: nil option")

+ var ErrNoEntropy = errors.New("factory: random source failed")

+ var ErrNoHintPublisher = errors.New("factory: this replica composes no journal-tip hint publisher")

+ var ErrNotAServiceIdentity = errors.New("factory: the sweep identity is not a service principal")

+ var ErrObjectPolicyWithoutResolver = errors.New("factory: WithObjectPolicy requires WithObjectStoreResolver")

+ var ErrServerStopped = errors.New("factory: server is stopped")

+ var ErrSessionBindingWithoutResolver = errors.New("factory: WithSessionBinding requires WithObjectStoreResolver")

+ type Authorizer interface

+ AuthorizeControl func(ctx context.Context, principal identity.Principal, ...) error

+ AuthorizeObjectRead func(ctx context.Context, principal identity.Principal, ...) error

+ AuthorizeServiceSweep func(ctx context.Context, principal identity.Principal) error

+ AuthorizeSessionList func(ctx context.Context, principal identity.Principal) error

+ AuthorizeSessionRead func(ctx context.Context, principal identity.Principal, ...) error

+ AuthorizeSubscribe func(ctx context.Context, principal identity.Principal, channel string) error

+ type Catalog interface

+ CreateCatalogEntry func(ctx context.Context, req sessionstore.CreateCatalogEntryRequest) (sessionstore.CatalogEntry, bool, error)

+ GetCatalogEntry func(ctx context.Context, req sessionstore.GetCatalogEntryRequest) (sessionstore.CatalogEntry, error)

+ UpdateCatalogDesiredState func(ctx context.Context, req sessionstore.UpdateCatalogDesiredStateRequest) (sessionstore.CatalogEntry, error)

+ type ClientLinkLimits struct

+ CommandTimeout time.Duration

+ DemandReleaseDebounce time.Duration

+ DemandTimeout time.Duration

+ MaxChannelsPerConnection int

+ MaxConnections int

+ PerConnectionQueueBytes int

+ PingInterval time.Duration

+ PongTimeout time.Duration

+ WriteTimeout time.Duration

+ func DefaultClientLinkLimits() ClientLinkLimits

+ func (l ClientLinkLimits) Validate() error

+ type Clock interface

+ AfterFunc func(d time.Duration, f func()) (stop func() bool)

+ Now func() time.Time

+ func SystemClock() Clock

+ type Commands interface

+ AcquireReconciliationClaim func(ctx context.Context, req sessionstore.AcquireReconciliationClaimRequest) (sessionstore.ReconciliationClaimEntry, error)

+ AdmitCommand func(ctx context.Context, req sessionstore.AdmitCommandRequest) (sessionstore.InboxEntry, bool, error)

+ ControlShards func() int

+ GetCommand func(ctx context.Context, req sessionstore.GetCommandRequest) (sessionstore.InboxEntry, error)

+ ListDueCommands func(ctx context.Context, req sessionstore.ListDueCommandsRequest) (sessionstore.DueCommandPage, error)

+ RejectCommand func(ctx context.Context, req sessionstore.RejectCommandRequest) (sessionstore.InboxEntry, error)

+ ReleaseReconciliationClaim func(ctx context.Context, req sessionstore.ReleaseReconciliationClaimRequest) (sessionstore.ReconciliationClaimEntry, error)

+ type Directory interface

+ Candidates func(ctx context.Context, req sessionstore.ListCompatibleHostsRequest) (sessionstore.HostTargetPage, error)

+ Owner func(ctx context.Context, tenant sessionwire.TenantID, ...) (sessionwire.HostLinkRegistryObservation, bool, error)

+ type Gates interface

+ ControlShards func() int

+ ListDueGates func(ctx context.Context, req sessionstore.ListDueGatesRequest) (sessionstore.DueGatePage, error)

+ RetireGateDeadlineIntent func(ctx context.Context, req sessionstore.RetireGateDeadlineIntentRequest) error

+ type HTTPLimits struct

+ IdleTimeout time.Duration

+ MaxHeaderBytes int

+ ReadHeaderTimeout time.Duration

+ func DefaultHTTPLimits() HTTPLimits

+ func (l HTTPLimits) Validate() error

+ type HostLinkCredential interface

+ ServiceToken func(ctx context.Context) (string, error)

+ type HostLinkLimits struct

+ DialTimeout time.Duration

+ IdleTimeout time.Duration

+ MaxLinks int

+ ReconnectMax time.Duration

+ ReconnectMin time.Duration

+ func DefaultHostLinkLimits() HostLinkLimits

+ func (l HostLinkLimits) Validate() error

+ type HostTargets interface

+ ReconcileHostTargets func(ctx context.Context, req sessionstore.ReconcileHostTargetsRequest) (sessionstore.HostTargetReconcileResult, error)

+ type LaunchTemplate struct

+ Capabilities []string

+ Key sessionstore.HostTargetKey

+ Workload sessionstore.DesiredWorkload

+ func (t LaunchTemplate) Validate() error

+ type MissingSeamsError struct

+ Options []string

+ func (e *MissingSeamsError) Error() string

+ func (e *MissingSeamsError) Unwrap() error

+ type ObjectLimits = httpapi.ObjectLimits

+ func DefaultObjectLimits() ObjectLimits

+ type ObjectPolicy = httpapi.ObjectPolicy

+ type ObjectReader = httpapi.ObjectReader

+ type ObjectStoreResolver func(ctx context.Context, binding sessionstore.SessionBinding) (ObjectReader, error)

+ type Option struct

+ func WithAuthorizer(a Authorizer) Option

+ func WithCSRF(cfg identity.CSRFConfig) Option

+ func WithCatalog(c Catalog) Option

+ func WithClientLinkLimits(l ClientLinkLimits) Option

+ func WithClock(clock Clock) Option

+ func WithCommands(cmds Commands) Option

+ func WithCredentialVerifier(v identity.Verifier) Option

+ func WithDefaultTenant(tenant sessionwire.TenantID) Option

+ func WithDepartment(templates ...LaunchTemplate) Option

+ func WithDirectory(d Directory) Option

+ func WithGates(g Gates) Option

+ func WithHTTPLimits(l HTTPLimits) Option

+ func WithHostLinkCredential(c HostLinkCredential) Option

+ func WithHostLinkLimits(l HostLinkLimits) Option

+ func WithHostTargets(t HostTargets) Option

+ func WithObjectLimits(l ObjectLimits) Option

+ func WithObjectPolicy(p ObjectPolicy) Option

+ func WithObjectStoreResolver(r ObjectStoreResolver) Option

+ func WithPlacementController(p PlacementController) Option

+ func WithPublicCreates(p PublicCreates) Option

+ func WithReconcileLimits(l ReconcileLimits) Option

+ func WithReplicaID(id string) Option

+ func WithServiceIdentity(p identity.Principal) Option

+ func WithSessionBinding(storageBindingID, bindingVersion string) Option

+ func WithSessionCookieName(name string) Option

+ func WithSessionReader(r SessionReader) Option

+ func WithUIFS(dir fs.FS) Option

+ func WithUIHandler(h http.Handler) Option

+ func WithUUIDSource(u UUIDSource) Option

+ func WithVersion(v string) Option

+ func WithWorkloadController(w WorkloadController) Option

+ type OptionError struct

+ Err error

+ Option string

+ func (e *OptionError) Error() string

+ func (e *OptionError) Unwrap() error

+ type PlacementController interface

+ EnsurePlacement func(ctx context.Context, desired sessionstore.DesiredWorkload) error

+ ReleasePlacement func(ctx context.Context, tenant sessionwire.TenantID, ...) error

+ type PublicCreates = admission.PublicCreateStore

+ type ReconcileLimits struct

+ ApplyDeadline time.Duration

+ ClaimTTL time.Duration

+ Interval time.Duration

+ MaxConcurrent int

+ MaxDuePerSweep int

+ func DefaultReconcileLimits() ReconcileLimits

+ func (l ReconcileLimits) Validate() error

+ type Server struct

+ func New(opts ...Option) (*Server, error)

+ func (s *Server) CSRF() identity.CSRFConfig

+ func (s *Server) ClientLinkLimits() ClientLinkLimits

+ func (s *Server) HTTPLimits() HTTPLimits

+ func (s *Server) Handler() http.Handler

+ func (s *Server) HostLinkLimits() HostLinkLimits

+ func (s *Server) ReconcileLimits() ReconcileLimits

+ func (s *Server) Serve(ln net.Listener) error

+ func (s *Server) Start(ctx context.Context) error

+ func (s *Server) Stop(ctx context.Context) error

+ func (s *Server) UI() (http.Handler, bool)

+ type SessionBindingTemplate = admission.SessionBindingTemplate

+ type SessionReader interface

+ GetCatalogEntry func(ctx context.Context, req sessionstore.GetCatalogEntryRequest) (sessionstore.CatalogEntry, error)

+ GetObject func(ctx context.Context, req sessionstore.GetObjectRequest) (io.ReadCloser, error)

+ GetObjectMetadata func(ctx context.Context, req sessionstore.GetObjectMetadataRequest) (sessionwire.ObjectMetadata, error)

+ ListSessions func(ctx context.Context, req sessionstore.ListSessionsRequest) (sessionstore.SessionPage, error)

+ ReadGates func(ctx context.Context, req sessionstore.ReadGatesRequest) (sessionwire.GatePage, error)

+ ReadPublicJournal func(ctx context.Context, req sessionstore.ReadPublicJournalRequest) (sessionwire.JournalPage, error)

+ type Target struct

+ Agent sessionwire.AgentID

+ Host sessionwire.HostID

+ Session sessionwire.SessionID

+ Tenant sessionwire.TenantID

+ func TargetFor(tenant sessionwire.TenantID, session sessionwire.SessionID, ...) Target

+ type UUIDSource interface

+ NewUUID func() (string, error)

+ func CryptoUUIDSource() UUIDSource

+ type WorkloadController interface

+ EnsureWorkload func(ctx context.Context, intent sessionstore.PlacementIntent) error