Struct ReplicaControlPlane 

pub struct ReplicaControlPlane {
    pub promote: PromotionRequest,
    pub tip_ready: Arc<AtomicBool>,
    pub journal_tip: AdvertisedJournalTip,
    pub primary_link_up: Arc<AtomicBool>,
    pub primary_ack_policy: Arc<AtomicU8>,
    pub pipeline_healthy: Arc<AtomicBool>,
}

The handles a replica’s receive loop shares with the rest of the node — the admin endpoint and the control-plane raft driver. Bundled (rather than five positional parameters) because they always travel together through the kernel-TCP and DPDK receiver signatures, and a transposition between same-typed flags is exactly the bug a bundle prevents.

Fields

promote: PromotionRequest

Promotion request: polled by the receive loop; filed by the admin PROMOTE command or the raft driver (auto-promotion).

tip_ready: Arc<AtomicBool>

Flipped true once journal recovery has seeded the fence epoch, so the raft driver can trust this node’s advertised tip — see melin_raft::recency::TipSource.

journal_tip: AdvertisedJournalTip

Sequence half of the advertised journal tip — see melin_transport_core::AdvertisedJournalTip.

primary_link_up: Arc<AtomicBool>

true while this replica holds an authenticated replication connection to its primary. The raft driver refuses to auto-promote while set: a live link means the primary is demonstrably alive, and winning a control-plane election (e.g. because a different node’s raft died) must not depose a healthy primary.

primary_ack_policy: Arc<AtomicU8>

The ack policy last advertised by the primary (AckPolicy::as_u8; ACK_POLICY_UNKNOWN until first contact), refreshed by StreamStart and every Heartbeat. The raft driver’s auto-promotion refusal reads this — the policy the primary acked under decides whether an election win proves this replica holds every acked order, not this node’s own (possibly pre-staged) configuration. Falls back to this node’s own policy while unknown, which is exactly the pre-propagation behavior.

pipeline_healthy: Arc<AtomicBool>

Whether the replica’s pipeline is healthy — fed to the replica’s minimal health endpoint (/health OK/ERR and the melin_pipeline_healthy gauge). Process-lifetime (the per-session pipeline is torn down and rebuilt across resyncs, so its own journal_failed latch cannot be handed to the endpoint): true from boot, latched false by the journal stage’s failure wrapper, reset true when a fresh pipeline is built.

Implementations

impl ReplicaControlPlane

pub fn new() -> Self

Fresh handles for a replica boot: nothing requested, tip not trustworthy yet, tip sequence 0, primary link down, pipeline healthy (nothing has failed yet).

Trait Implementations

impl Clone for ReplicaControlPlane

fn clone(&self) -> ReplicaControlPlane

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Default for ReplicaControlPlane

fn default() -> Self

Returns the “default value” for a type.