store

type Backend = legacy.Backend

type Config struct {
	Adapter string
	// Release prefixes the objects' names and the Valkey keys.
	Release string
	Kube    KubeNeed
	// Blob replaces the port of the same name; nil keeps what Adapter brings.
	Blob *config.PortsBlob
	// DynamoDB is the table of the `dynamodb` adapter.
	DynamoDB dynamoport.Config

	// Secrets delivers the secrets the document names (the Valkey password):
	// the composition root sets it after FromServe. Nil delivers none.
	Secrets secrets.Source
	// SecretsRoot is the serve document's `secrets.root` when its source is
	// ssm: the root the `ssm` Secrets adapter takes.
	SecretsRoot string
	// SecretsKMSKey is the serve document's `secrets.kmsKeyId` when its source
	// is ssm: the key the `ssm` Secrets adapter encrypts what it writes with.
	SecretsKMSKey string
	// Secrets layout (ADR 0041): the serve document's `secrets.layout`,
	// `.region`, `.endpoint` and `.grace` when its source is ssm. The layout
	// is v3 (the default) unless it is "transition" or "v4"; those put the
	// Secrets port over layout v4 (internal/secretstore).
	SecretsLayout   string
	SecretsRegion   string
	SecretsEndpoint string
	SecretsGrace    time.Duration
	// OpenState opens the backend of the v4 stores (storage/state/ssm over the
	// service's retryer, openSSMState).
	// Nil is that backend.
	OpenState secretstore.Opener

	// Cloudflare and Instance are the service document's `cloudflare` section
	// and the instance name; the Blob mints its own R2 credentials from a
	// preset of it (`ports.blob.s3.credentials.preset`). Nil when the blob uses
	// a static document, which needs neither.
	Cloudflare *config.Cloudflare
	Instance   string
	// CloudflareDial opens a Cloudflare account; nil is the real client.
	CloudflareDial minter.Dialer

	// Converted is a document converted from v1: an `ssm` secrets adapter
	// that names no root keeps v1's layout, /sluis.
	Converted bool
	// contains filtered or unexported fields
}

type KubeNeed int

type Stores struct {
	// Ports is every port, over the chosen adapter.
	Ports port.Set
	// Backend is today's storage as it was opened: what the `legacy` adapter
	// is made of, and, with any adapter, the cluster's own objects that stay the
	// cluster's (the token review, the declared OAuth client). The domain stores
	// (a connected workspace and its credential, an organisation, a person's
	// link, the Slack records) are on Ports for every adapter but `legacy`
	// (internal/portstore), and in the ConfigMaps and Secrets this reaches for
	// `legacy`. It is nil with the memory adapter, which has none.
	Backend *Backend
	// Adapter is the state adapter's name.
	Adapter string
	// Plan is the resolved adapter per concern, for the packages that wire a
	// concern this package does not.
	Plan port.Table
	// Secrets delivers the secrets the document names, by name: what the
	// composition root put in Config.Secrets. Nil delivers none.
	Secrets secrets.Source
	// V4 is the installation's secrets on layout v4: Internal and External
	// over one state store. Nil on layout v3, the default.
	V4 *secretstore.Stores
	// Shared is true when the state is one every replica sees: a Valkey.
	Shared bool
	// Usable is whether the State, Index and snapshot Blob ports work at all:
	// the memory adapter, and the legacy one with a Valkey. Without them a
	// caller keeps its own process-local store, as it always has.
	Usable bool
	// contains filtered or unexported fields
}