catalog

type Reconciler struct {
	// contains filtered or unexported fields
}

type ReconcilerDeps struct {
	Store    store.Store
	Provider provider.Runtime
	Logger   *slog.Logger
	// Derive returns the deterministic per-(ns, name) SigV4 keypair (ADR-0085), derived over the
	// PROVIDER identity (ns, cs.Name). nil ⇒ no S3 keypair injected. Same shape the Function
	// reconciler's S3GatewayInjection.Derive carries.
	Derive func(ns, name string) (access, secret string)
	// Secrets resolves spec.secrets → env (the Quack token, ADR-0057). nil ⇒ a service declaring
	// spec.secrets fails closed.
	Secrets SecretResolver
	// DeveloperFor returns the PDP identity the secret reads are authorized as (ADR-0057). Defaulted
	// to the namespace-scoped developer identity when Secrets is set and this is nil.
	DeveloperFor func(ns v1.NamespaceName) auth.Identity
	// S3Endpoint is the sandbox-facing S3 URL injected as AWS_ENDPOINT_URL_S3 (ADR-0085). Empty ⇒
	// the var is unset.
	S3Endpoint string
	// ImageFor maps a curated runtime name → the engine image ref (ADR-0054). nil ⇒ a deterministic
	// fallback "funcd/runtime-<runtime>" is used.
	ImageFor func(runtime string) string
	// Proxy runs the per-CatalogService node-private catalog PEP proxy (ADR-0137): on the Ready
	// branch the reconciler Ensures a proxy fronting the engine and publishes ITS url as
	// Status.Endpoint (internal functions inject the proxy, not the engine), and Removes it on
	// teardown. nil ⇒ no internal PEP proxy (the engine address is published directly, the
	// pre-ADR-0137 posture) — kept nil-safe for the in-memory/unit path.
	Proxy *cataloggw.Manager
	// Routes contributes this catalog's OPT-IN external ingress entry (source "catalog/<ns>/<name>")
	// to the shared edge-router aggregator (ADR-0138). When spec.ingress is set and the catalog is
	// Ready, the reconciler programs an edge entry whose Upstream is the PEP PROXY (never the engine);
	// cleared on not-Ready / delete. nil ⇒ no external exposure (the in-memory/dev path).
	Routes router.EntrySetter

	// SupervisionPeriod is the requeue of a Ready CatalogService (ADR-0142); 0 ⇒ controller.SupervisionPeriod.
	SupervisionPeriod time.Duration
}

type SecretResolver interface {
	ResolveEnv(ctx context.Context, id auth.Identity, ns v1.NamespaceName, names []string) (map[string]string, error)
}