daemon

type Config struct {
	// Version lands in the session row and in /readyz, so an operator can
	// tell which binary has been running since when.
	Version string

	// StateDir holds the lock file, the database and the logs. It is the only
	// required field.
	StateDir string

	// JobsDir is where job files live. The scheduler reads it from M2-05 on;
	// until then it is accepted and carried.
	JobsDir string

	// ConfigDir is the directory paceq reads configuration files from.
	// Empty means /etc/paceq when running under systemd, or the working
	// directory otherwise.
	ConfigDir string

	// RuntimeDir is where transient runtime files live (the unix socket).
	// Empty means /run/paceq when running under systemd, falling back to
	// the state directory.
	RuntimeDir string

	// SocketPath enables the health endpoints over a unix socket when not
	// empty. Empty means disabled for now: the runtime directory contract
	// arrives with the systemd work, and nothing else should invent paths.
	SocketPath string

	// MetricsListen is the opt-in TCP bind for /metrics (#40). Empty means
	// the endpoint answers on the unix socket only, which is the default
	// the security plan fixes (08 section 6: no TCP listener in the MVP
	// without an explicit operator decision). When set, it is validated to
	// loopback before anything starts; anything else is refused with an
	// explanation, never bound.
	MetricsListen string

	// Workers is how many runs may execute at once. Zero means
	// runtime.NumCPU(). One dispatcher hands work out no matter what; this
	// caps the executors behind it.
	Workers int

	// DrainTimeout bounds phase two of the shutdown: how long executors may
	// keep their process groups while they finish. Zero means 30s.
	DrainTimeout time.Duration

	// KillGrace is the SIGTERM to SIGKILL gap inside every step's process
	// group during the drain. Zero leaves the runner's own default.
	KillGrace time.Duration

	// Shadow turns the whole instance into a recorder (#32): the scheduler
	// still plans, claims fire-times and advances cursors, but no run is
	// ever materialised and nothing executes. The marker is persisted on
	// startup so status and reports in other processes see it too.
	Shadow bool

	// Observe names where observed cron behaviour comes from (#32):
	// none (default), journald or file=<path>. Only read when Shadow is
	// set; observation capture never runs for a normal instance.
	Observe string

	// SensorMaxParallel is the global cap on concurrent sensor evaluations.
	// Zero means four.
	SensorMaxParallel int

	// TickInterval is the safety net period shared by the loops: how often a
	// loop looks at the world without being woken. Zero means 1s.
	TickInterval time.Duration

	// HeartbeatEvery is how often the session row's last_seen_at moves
	// forward. Zero means 10s.
	HeartbeatEvery time.Duration

	// LeaseTTL is the lease an executor claims per run. Zero means sixty
	// seconds, renewed every twenty by the daemon's renewal loop. Tests
	// shorten it; production should not.
	LeaseTTL time.Duration

	// RenewInterval overrides how often held leases renew. Zero means a
	// third of the ttl.
	RenewInterval time.Duration

	// ClockSkewAllowance is how long past the expiry the reaper waits before
	// it takes a run. Zero means ten seconds.
	ClockSkewAllowance time.Duration

	// RequeueBackoff is how long a reaped run waits before it is due again.
	// Zero means thirty seconds.
	RequeueBackoff time.Duration

	// ReapEvery is how often the reaper sweep looks for expired leases.
	// Zero means ten seconds.
	ReapEvery time.Duration

	// ReconcileEvery is the safety-net cadence for periodic reconciliation
	// (issue #62), riding under the reaper's role lease. Zero means thirty
	// seconds.
	ReconcileEvery time.Duration

	// MaxCrashCount is the poison quarantine line for runs that keep dying
	// with their executor. Zero means five.
	MaxCrashCount int

	// Owner names the claim holder in the database. Empty means serve:<pid>.
	Owner string

	// DisableNotifyBus is the --no-notify-bus switch. With it set the loops
	// run on their tickers alone, which is the standing proof that the bus is
	// an optimisation and never a dependency.
	DisableNotifyBus bool

	// Policies carries the retention configuration keys (issue #36). Zero
	// fields fall back to the shipped defaults, so a config that says
	// nothing keeps the documented horizons.
	Policies store.Policies

	// Limits carries the disk-guard's four configuration keys (#44) from
	// config.yaml's limits section. Zero fields fall back to the shipped
	// defaults; the guard applies them.
	Limits obs.DiskLimits

	// NightlyHour is the local hour the maintenance cycle aims for. Zero
	// means 03:00 (07 section 6.5). Tests move it to make a slot due.
	NightlyHour int

	// Signals carries copies of the process signals. When set, the daemon
	// watches it for the second stop request: two signals mean the operator
	// insists, and every process group gets SIGKILL before ExitHardStop. Nil
	// disables the watcher.
	Signals <-chan os.Signal

	// OnHardStop ends the process after the hard kill. Tests record the call;
	// production leaves it nil for os.Exit(ExitHardStop).
	OnHardStop func()

	// Logger receives the structured lines. JSON on stderr is what journald
	// wants (06 section 5); nil means slog's default.
	Logger *slog.Logger
}

type Heart struct {
	// contains filtered or unexported fields
}

type LoopStatus struct {
	Name     string
	Ticks    int64
	LastTick time.Time
}

type NotificationConfig struct {
	Notifiers map[string]*notify.ExecNotifier // type=exec targets
	Stderr    []string                        // names bound to stderr output

	Entries  map[string]notifierFileEntry
	Defaults model.NotifyDefaults

	// Limits carries the disk-guard's four configuration keys (#44) from
	// the same file. Zero values mean the shipped defaults.
	Limits obs.DiskLimits

	// Timeouts mirrors Entries keyed by name, parsed and defaulted.
	Timeouts map[string]time.Duration
}

type Notifications struct {
	Store *store.Store
	Clock clock.Clock
	Log   *slog.Logger

	Config *NotificationConfig

	Host string

	StderrOut io.Writer
	// contains filtered or unexported fields
}

type ScheduleSource interface {
	Tick(ctx context.Context) error
}

type SensorCommitResult struct {
	store.SensorTickCommitResult

	Outcome   string
	Truncated bool
	Dropped   int
}

type SensorCommitter interface {
	CommitSensorTick(ctx context.Context, in store.SensorTickCommitInput) (store.SensorTickCommitResult, error)
}

type SensorEvaluation struct {
	Row    store.SensorSummary
	Begin  store.BeginSensorTickResult
	Result sensor.Result
	Now    time.Time
}

type WatchdogNotifier interface {
	Send(msg string) error
}