NeedsRenewal returns true if the certificate should be renewed.

============================================================================ Factory =================================================================

============================================================================ Factory =================================================================

============================================================================ Factory — creates event bus from configuration ==========================

NewAdmissionChain creates a new admission control chain

NewDefaultScorePlugin creates the default scorer.

NewDeviceDiscovery creates a new mDNS device discovery manager

NewElasticInferenceManager creates a new elastic inference manager

NewManager creates a new disaster recovery manager.

NewMemoryTSDB creates an in-memory time-series database.

NewOTAManager creates a new OTA upgrade manager

NewPolicyEngine creates a new policy engine

NewRateLimiter creates a new RateLimiter and starts a background cleanup goroutine.

NewTopologyAwareScorePlugin creates the topology scorer.

NewTopologyDiscoverer creates a new GPU topology discoverer

NewVectorClock creates a new vector clock.

NotReadyCondition creates a Ready=False condition.

PendingSync returns decisions not yet synced to cloud.

PerformHealthCheck evaluates node health against thresholds.

Health Check

PredefinedConstraintTemplates returns built-in policy templates

PruneStale marks devices as not alive if not seen within TTL

Publish sends a message to all subscribers of a channel.

Put stores an entry in the cache, evicting if necessary

QueryInstant returns the most recent value for matching series.

RateTicket records customer satisfaction rating

RecordAPIRequest records an API request metric

RegisterCRD registers a new custom resource definition

RegisterCluster registers a cluster in the federation

RegisterExistingRI registers currently owned reserved instances.

RegisterHealthProbe adds a health probe.

RegisterIndex registers an Elasticsearch index for lifecycle tracking.

Remove removes an element (observed-remove: only removes seen adds)

ReportViolation records a PSS violation.

Reset clears the bloom filter.

ResolveEndpoint selects the best endpoint for a global service based on the configured load balancing policy.

SelectCluster chooses the best cluster(s) for a workload using multi-factor scoring

SelectOptimalPricing chooses the best pricing strategy for a workload

SetRegister sets a LWW register value

StandardEdgeProfiles returns hardware profiles for common edge platforms.

Start begins periodic resource collection.

StartAll starts all registered agents

States returns the state of all circuit breakers at all levels.

============================================================================ Accessors ===============================================================

Stop halts the collection loop.

StopAll stops all agents

String returns the policy level name.

Subscribe returns a channel that receives messages for the given topic. The returned channel is closed when Unsubscribe is called or context is cancel

SupportedToolchains returns all supported language toolchains

TriggerFailover initiates a failover for a DR plan.

UnregisterWebhook removes an admission webhook by name

UpdateIncidentStatus transitions an incident to a new status.

UpdateStatus transitions a workload to a new status.

UtilizationPercent returns the current usage as a percentage of hard limit.

ValidateDNSName checks if a string is a valid DNS subdomain name.

ValidateGPURequest validates GPU resource request fields.

WithMetadata adds a key-value pair to the event metadata.

WithRequestID injects a request ID into the context.

============================================================================ Context Helpers — inject trace correlation fields into context ==========

Wrap converts any error to an *AppError. If the error is already an *AppError, it is returned as-is. Otherwise, it is wrapped as an internal error.

Check if value falls outside IQR bounds.

Detect sudden rate changes in recent data.

Attempt JSON parse, return None on failure (no exception raised).

Calculate Z-score for the current value.

Analyze costs with dynamic calculation and LLM insights.

buildClient is the internal constructor shared by all NewClient* functions.

calculateBufferSize estimates total buffered size in bytes

calculateReportScore calculates pass/fail/warn counts and score for a report.

Send chat completion request to best available LLM. Returns the assistant message text, or None if all providers fail.

Build prompt for conversational AI operations assistant.

============================================================================ DB <-> Domain Conversion ================================================

collect performs one metrics collection cycle

============================================================================ Phase 2: Commit =========================================================

============================================================================ corev1 -> domain type converters (anti-corruption layer) ================

convertPod converts an official corev1.Pod to our domain Pod type

ensureTable creates the migrations tracking table if it doesn't exist.

generateDevSecret generates a random hex secret for development use

getApplied returns all applied migrations from the database.

getJWKS retrieves JWKS for a provider, using cache with TTL rotation.

Return recent incident analyses.

Get current trace_id from context (for log injection).