docker

type AdoptRequest struct {
	TaskID  string
	LeaseID string
	// FromSeq is the highest sequence number the previous incarnation of the
	// daemon assigned to this task. Adopt numbers its events from FromSeq+1 so
	// they never collide with rows the server already stored.
	FromSeq uint64
	// SkipStdout and SkipStderr are how many bytes of each stream the server has
	// already acknowledged. Docker replays a container's whole output on every
	// attach, so those bytes are read and discarded rather than sent twice.
	SkipStdout int64
	SkipStderr int64
}

type ArtifactPayload struct {
	ArtifactID  string
	Name        string
	ObjectKey   string
	SizeBytes   int64
	ContentType string
}

type ArtifactStored struct {
	ID        string
	ObjectKey string
	Size      int64
}

type ArtifactUpload struct {
	TaskID      string
	LeaseID     string
	Name        string
	ContentType string
	Size        int64
	Body        io.Reader
}

type ArtifactUploader interface {
	UploadArtifact(ctx context.Context, up ArtifactUpload) (ArtifactStored, error)
}

type EgressPolicy interface {
	Apply(ctx context.Context, taskID, networkID string, allow []string) error
	Revoke(ctx context.Context, taskID, networkID string) error
}

type ErrorPayload struct {
	Message   string
	Retryable bool
	AbortsRun bool
}

type Event struct {
	Seq     uint64
	Kind    string
	TS      time.Time
	Payload any
}

type Executor struct {
	// contains filtered or unexported fields
}

type ExitedPayload struct {
	ExitCode  int
	OOMKilled bool
}

type FinishedPayload struct {
	ExitCode int
	Usage    Usage
}

type ImageCache struct {
	// contains filtered or unexported fields
}

type ImageRecord struct {
	// Ref is what was pulled, exactly as the spec named it.
	Ref string `json:"ref"`
	// ID is the engine's image id, which is what actually gets removed. A ref that has
	// since been retagged elsewhere would otherwise take an unrelated image with it.
	ID string `json:"id"`
	// SizeBytes is what the engine reported at pull time; it is the estimate the prune
	// uses to decide how many images to remove.
	SizeBytes  int64     `json:"size_bytes"`
	PulledAt   time.Time `json:"pulled_at"`
	LastUsedAt time.Time `json:"last_used_at"`
}

type LogPayload struct {
	Stream  string
	Sidecar string
	Bytes   []byte
	// Offset is how many bytes of this source the container had produced by the end
	// of this chunk, counting from the start of the container's life and including
	// anything an adopting run skipped. It is the cursor Docker does not give us:
	// ContainerLogs replays the whole stream on every attach, so a daemon adopting a
	// container has to be told where to resume, and the control plane can only say so
	// in these terms.
	Offset int64
}

type MessagePayload struct {
	Type        string
	Text        string
	Attachments []string
}

type Options struct {
	// DataDir is the node's state directory. It must live on the same host as
	// the Docker daemon; a remote DOCKER_HOST is unsupported.
	DataDir string
	// DockerHost overrides the daemon endpoint. Empty means use the
	// environment (DOCKER_HOST, DOCKER_CONTEXT, then the default socket).
	DockerHost string
	// AllowPrivilegedSidecars honours a spec's privileged sidecar on this engine. Off by
	// default: it hands that container root on the node's kernel, which is a decision
	// about the machine and never a spec author's to make. See internal/node.Config.
	AllowPrivilegedSidecars bool
	// Logger defaults to slog.Default().
	Logger *slog.Logger
}

type OwnedContainer struct {
	ID        string
	Name      string
	TaskID    string
	LeaseID   string
	Role      string
	Image     string
	State     string
	Status    string
	CreatedAt time.Time
}

type PruneRequest struct {
	// DiskUsedFraction is how full the filesystem holding the data dir is, 0..1.
	DiskUsedFraction float64
	// HighWatermark is the fraction above which pruning starts.
	HighWatermark float64
	// TotalBytes is the size of that filesystem, used to turn "how much to free" into
	// bytes. Zero disables the size arithmetic and prunes one image per sweep.
	TotalBytes int64
	// InUse are the image references running tasks need. They are never candidates,
	// whatever the cache says.
	InUse []string
}

type PullingPayload struct {
	Image   string
	Status  string
	LayerID string
	Current int64
	Total   int64
}

type RegistryCredential struct {
	Host     string
	Username string
	Password []byte
}

type Request struct {
	TaskID  string
	LeaseID string
	Spec    spec.TaskSpec
	// Secrets are the resolved values of Spec.Secrets. SENSITIVE: they are plaintext,
	// they are never logged, and Run zeroes them once the container has started.
	Secrets []Secret
	// Registries are the logins for the registries Spec's images are pulled from, as the
	// Assign delivered them. SENSITIVE: plaintext, never logged, zeroed with Secrets.
	Registries []RegistryCredential
	// Artifacts is how files the task produces reach the control plane. A nil one means
	// this node stores no artifacts: the task still runs, and anything it asks to keep
	// becomes a retryable error event.
	Artifacts ArtifactUploader
}

type Result struct {
	ExitCode  int
	OOMKilled bool
	Usage     Usage
}

type Secret struct {
	Name   string
	Target string
	Key    string
	Value  []byte
}

type StepPayload struct {
	Name     string
	Status   string
	ExitCode int
}

type Usage struct {
	CPUSeconds   float64
	PeakMemoryMB int64
	WallMS       int64
}