broken.go RawHistoryFolder

1package recovery
2
3import (
4	"context"
5	"errors"
6	"fmt"
7
8	"github.com/bnema/vev/internal/domain"
9)
10
11// MarkBroken records a restoration failure only when name still identifies the
12// incarnation that failed. It is fenced with Discard so a late restore cannot
13// degrade the replacement incarnation.
14func (c *Coordinator) MarkBroken(ctx context.Context, name string, expected domain.IncarnationID, reason string) (domain.CatalogueRecord, bool, error) {
15	if c == nil || c.catalogue == nil || c.locks == nil {
16		return domain.CatalogueRecord{}, false, errors.New("recovery: incomplete broken-session dependencies")
17	}
18	if err := ctx.Err(); err != nil {
19		return domain.CatalogueRecord{}, false, err
20	}
21	if reason == "" {
22		return domain.CatalogueRecord{}, false, errors.New("recovery: empty broken-session reason")
23	}
24	c.mutationMu.Lock()
25	defer c.mutationMu.Unlock()
26	unlock := c.locks.Lock([]string{name})
27	defer unlock()
28
29	record, ok, err := c.catalogue.Record(name)
30	if err != nil {
31		return domain.CatalogueRecord{}, false, err
32	}
33	if !ok || record.IncarnationID != expected {
34		return domain.CatalogueRecord{}, false, nil
35	}
36	if record.DegradedReason == reason {
37		return record, true, nil
38	}
39	record.DegradedReason = reason
40	if err := record.Validate(); err != nil {
41		return domain.CatalogueRecord{}, false, fmt.Errorf("recovery: invalid broken-session transition: %w", err)
42	}
43	if err := c.catalogue.Replace(name, record); err != nil {
44		return domain.CatalogueRecord{}, false, err
45	}
46	return record, true, nil
47}