Module refresh 

Plane-worker refresh coordination.

Watchers only enqueue invalidated paths. Plane workers receive prepared byte payloads, deduplicate them by complete blob key, perform expensive work once, and fan the result out to every affected path.

Structs

FailureTracker

Records per-key deterministic failures and per-family, per-plane transient breaker input. This is intentionally state-only: the BlobStore performs the durable quarantine write after Quarantined is returned.

FanoutWork

One expensive operation and every path that consumes its result.

PreparedWork

A prepared path is created by a plane worker after it has made a stable read and derived that plane’s full key. Watchers never construct blob payloads.

ProcessedFanout

WorkerFailure

Enums

DedupError

FailureClass

WorkDisposition

Constants

DETERMINISTIC_FAILURE_QUARANTINE_THRESHOLD

Two deterministic failures of one full key quarantine that key.

TRANSIENT_RETRY_LIMIT

A transient failure is retried three times with exponential backoff, then increments the family-and-plane failure count that can trip its circuit breaker.

Functions

apply_path_status

Applies plane-worker outcomes to the derived table. A publish removes the annotation; retryable work remains pending, and exhausted or deterministic failures remain failed while the last complete generation stays current.

deduplicate_full_keys

Groups byte-identical full keys before expensive extraction, embedding, or blob insertion. The returned paths are bytewise ordered for deterministic manifest assembly and telemetry correlation.

execute_plane_batch

Runs a plane-worker operation once per full key and fans its disposition out to all paths sharing the key. operation is where the worker hashes, puts, derives, and publishes; this coordinator never runs on a watcher thread.

preserve_pending_after_unstable_read

Records a persistent stable-read mismatch without publishing the path. The next watcher event simply puts the path back through collection and can clear this row after a later plane-worker publication.

transient_backoff

The retry number is one-based. The values are deliberately small enough for worker scheduling tests while still providing a strict exponential sequence.