controller

type ModuleInstanceReconciler struct {
	client.Client
	// APIReader is an uncached reader (manager.GetAPIReader()) used for one-off
	// reads that must not provision a cache informer.
	APIReader       client.Reader
	Scheme          *runtime.Scheme
	RestConfig      *rest.Config
	ResourceManager *fluxssa.ResourceManager
	EventRecorder   events.EventRecorder
	Renderer        render.ModuleRenderer
	// DefaultServiceAccount is the fallback SA name used when a
	// ModuleInstance has an empty spec.serviceAccountName. Resolved in the
	// instance's own namespace. Empty disables the default.
	DefaultServiceAccount string
	// Kernel is the shared, long-lived library Kernel constructed once at
	// manager startup. It is the injection seam later enhancement-0001 slices
	// consume to drive the render path; this slice wires it but does not read
	// it on any reconcile path.
	Kernel *kernel.Kernel

	// MaxConcurrentRenders bounds how many ModuleInstances reconcile (and so
	// render) at once: the manager's --max-concurrent-renders, applied as
	// MaxConcurrentReconciles. Zero or negative keeps controller-runtime's
	// default of one.
	MaxConcurrentRenders int
	// contains filtered or unexported fields
}

type ModulePackageReconciler struct {
	client.Client
	// APIReader is an uncached reader (manager.GetAPIReader()) used for one-off
	// reads that must not provision a cache informer.
	APIReader       client.Reader
	Scheme          *runtime.Scheme
	RestConfig      *rest.Config
	ResourceManager *fluxssa.ResourceManager
	EventRecorder   events.EventRecorder

	// Fetcher downloads Flux source artifacts. Injected for testability.
	Fetcher opmsource.Fetcher

	// Renderer loads and renders the CUE package from the extracted
	// artifact directory. Injected for testability.
	Renderer render.PackageRenderer

	// DefaultServiceAccount is the fallback SA name used when a ModulePackage has
	// an empty spec.serviceAccountName. Resolved in the ModulePackage's own
	// namespace. Empty disables the default.
	DefaultServiceAccount string

	// Kernel is the shared, long-lived library Kernel constructed once at
	// manager startup. It is the injection seam later enhancement-0001 slices
	// consume to drive the render path; this slice wires it but does not read
	// it on any reconcile path.
	Kernel *kernel.Kernel

	// MaxConcurrentRenders bounds how many ModulePackages reconcile (and so
	// render) at once: the manager's --max-concurrent-renders, applied as
	// MaxConcurrentReconciles. Zero or negative keeps controller-runtime's
	// default of one.
	MaxConcurrentRenders int
	// contains filtered or unexported fields
}

type PlatformReconciler struct {
	client.Client
	Scheme        *runtime.Scheme
	EventRecorder events.EventRecorder

	// Kernel is the shared, long-lived library Kernel constructed once at
	// manager startup. The platform build runs on it.
	Kernel *kernel.Kernel

	// Store holds the current generated platform. Written here, read by the
	// render path.
	Store *platformstore.Store

	// Registry is the CUE registry mapping (the manager's --registry value)
	// the closure derivation resolves through; the build resolves through
	// the mapping Kernel was constructed with. Empty falls back to the
	// process CUE_REGISTRY.
	Registry string

	// Layout owns the module directories under the manager's --platform-dir.
	Layout platformstore.Layout

	// ModFiles serves published module files for the closure derivation.
	// Nil constructs one from Registry on first use; a test may inject a
	// fixture graph.
	ModFiles platformmodule.ModFileSource
}