catalog

type Reconciler struct {
	// contains filtered or unexported fields
}

type ReconcilerDeps struct {
	Store    store.Store
	Provider provider.Runtime
	Logger   *slog.Logger
	// Derive returns the deterministic per-(kind, ns, name) SigV4 keypair (ADR-0085, ADR-0175), derived
	// over the CatalogService identity (KindCatalogService, ns, cs.Name). nil ⇒ no S3 keypair injected.
	// Same shape the Function reconciler's S3GatewayInjection.Derive carries.
	Derive func(kind v1.Kind, ns, name string) (access, secret string)
	// Secrets resolves spec.secrets → env (the Quack token, ADR-0057). nil ⇒ a service declaring
	// spec.secrets fails closed.
	Secrets SecretResolver
	// DeveloperFor returns the PDP identity the secret reads are authorized as (ADR-0057). Defaulted
	// to the namespace-scoped developer identity when Secrets is set and this is nil.
	DeveloperFor func(ns v1.NamespaceName) auth.Identity
	// S3Endpoint is the sandbox-facing S3 URL injected as AWS_ENDPOINT_URL_S3 (ADR-0085). Empty ⇒
	// the var is unset.
	S3Endpoint string
	// ImageFor maps a curated runtime name → the engine image ref (ADR-0054). nil ⇒ a deterministic
	// fallback "funcd/runtime-<runtime>" is used.
	ImageFor func(runtime string) string
	// Proxy runs the per-CatalogService node-private catalog PEP proxy (ADR-0137, ADR-0162): every pass Listens on
	// the recorded status.proxyPort, the Ready branch Ensures the proxy fronts the engine and publishes ITS url as
	// Status.Endpoint (internal functions inject the proxy, not the engine), a not-Ready pass Suspends it, and a
	// delete Releases it, closing it only once no Function binds the catalog. nil ⇒ no internal PEP proxy (the
	// engine address is published directly, the pre-ADR-0137 posture) — kept nil-safe for the in-memory/unit path.
	Proxy *cataloggw.Manager
	// Routes contributes this catalog's OPT-IN external ingress entry (source "catalog/<ns>/<name>")
	// to the shared edge-router aggregator (ADR-0138). When spec.ingress is set and the catalog is
	// Ready, the reconciler programs an edge entry whose Upstream is the PEP PROXY (never the engine);
	// cleared on not-Ready / delete. nil ⇒ no external exposure (the in-memory/dev path).
	Routes router.EntrySetter

	// SupervisionPeriod is the requeue of a Ready CatalogService (ADR-0142); 0 ⇒ controller.SupervisionPeriod.
	SupervisionPeriod time.Duration
	// ReferentPollInterval re-checks a service waiting for a Bucket or a binding (controller.referentPollInterval,
	// ADR-0163); EnginePollInterval re-checks an engine not answering its probe yet (catalog.enginePollInterval),
	// bounded by SupervisionPeriod. 0 ⇒ 2s.
	ReferentPollInterval time.Duration
	EnginePollInterval   time.Duration
}

type SecretResolver interface {
	ResolveEnv(ctx context.Context, id auth.Identity, ns v1.NamespaceName, names []string) (map[string]string, error)
}