Enum OperatorEvent 

pub enum OperatorEvent {
    ReplicationBroken {
        peer: String,
        reason: String,
    },
    Divergence {
        peer: String,
        leader_lsn: u64,
        follower_lsn: u64,
    },
    WalFsyncFailed {
        path: String,
        error: String,
    },
    DiskSpaceCritical {
        path: String,
        available_bytes: u64,
        threshold_bytes: u64,
    },
    AuthBypass {
        principal: String,
        resource: String,
        detail: String,
    },
    AdminCapabilityGranted {
        granted_to: String,
        capability: String,
        granted_by: String,
    },
    SecretRotationFailed {
        secret_ref: String,
        error: String,
    },
    ConfigChanged {
        key: String,
        old_value: String,
        new_value: String,
        changed_by: String,
    },
    StartupFailed {
        phase: String,
        error: String,
    },
    ShutdownForced {
        reason: String,
    },
    SchemaCorruption {
        collection: String,
        detail: String,
    },
    CheckpointFailed {
        lsn: u64,
        error: String,
    },
    DanglingAdminIntent {
        id: Uuid,
        op: IntentOp,
        started_at_ms: u64,
        last_phase: IntentPhase,
    },
    ConfigChangeRequiresRestart {
        fields_changed: String,
    },
    SubscriptionSchemaChange {
        collection: String,
        subscription_names: String,
        fields_added: String,
        fields_removed: String,
        lsn: u64,
    },
    OutboxDlqActivated {
        queue: String,
        dlq: String,
        reason: String,
    },
}

High-severity system conditions that require operator attention.

Every variant carries typed crate::runtime::audit_log::AuditValue fields so adversarial bytes (CRLF, NUL, quote, non-UTF-8) are escape-safe at the audit boundary (ADR 0010).

Variants

ReplicationBroken

A replication stream to a follower/replica broke unexpectedly.

Fields

peer: String

reason: String

Divergence

Replication state diverged: the follower’s committed LSN or checksum disagrees with the leader.

Fields

peer: String

leader_lsn: u64

follower_lsn: u64

WalFsyncFailed

The WAL fsync call failed. Data may be at risk on the current host.

Fields

path: String

error: String

DiskSpaceCritical

Available disk space fell below the configured critical threshold.

Fields

path: String

available_bytes: u64

threshold_bytes: u64

AuthBypass

An authentication bypass was detected (e.g. auth gate returned allow for a request that should have been rejected).

Fields

principal: String

resource: String

detail: String

AdminCapabilityGranted

An admin capability was granted to a principal at runtime.

Fields

granted_to: String

capability: String

granted_by: String

SecretRotationFailed

Secret rotation failed; the current secret may be stale.

Fields

secret_ref: String

error: String

ConfigChanged

A runtime configuration change was applied to a live instance.

Fields

key: String

old_value: String

new_value: String

changed_by: String

StartupFailed

The server process failed to start cleanly.

Fields

phase: String

error: String

ShutdownForced

The server process was forced to shut down (e.g. OOM killer, SIGKILL, unrecoverable error).

Fields

reason: String

SchemaCorruption

On-disk schema metadata is corrupt or inconsistent.

Fields

collection: String

detail: String

CheckpointFailed

A scheduled or triggered checkpoint failed to complete.

Fields

lsn: u64

error: String

DanglingAdminIntent

An admin intent that was started but never reached a terminal phase (completed or aborted). Emitted by super::admin_intent_log::AdminIntentLog::scan_and_report at startup so operators can investigate interrupted operations.

Fields

id: Uuid

op: IntentOp

started_at_ms: u64

Unix milliseconds when the intent was started.

last_phase: IntentPhase

ConfigChangeRequiresRestart

A config-file change was detected but one or more changed fields require a full server restart to take effect. The change was NOT applied; the operator must restart to pick it up.

Fields

fields_changed: String

SubscriptionSchemaChange

An ALTER TABLE on a collection with active event subscriptions added or removed columns. Downstream consumers may see a different payload shape starting at lsn.

Fields

collection: String

subscription_names: String

Comma-separated subscription names affected.

fields_added: String

Comma-separated columns added (empty string if none).

fields_removed: String

Comma-separated columns removed (empty string if none).

lsn: u64

OutboxDlqActivated

An event could not be delivered to its target queue after all retry attempts, and was routed to the dead-letter queue instead.

Fields

queue: String

dlq: String

reason: String

Implementations

impl OperatorEvent

pub fn all_variant_names() -> &'static [&'static str]

All variant names as CamelCase strings, in declaration order.

pub fn emit_global(self)

Emit the event.

Execution order (per issue #202):

1. Persist to audit — tamper-evident, durable.
2. tracing::warn! breadcrumb — lands in red.log / stderr.
3. eprintln! fallback — fires only if the audit write fails, ensuring the event is never silently lost.

Emit the event using the process-wide sink installed by the runtime at startup. When no sink is installed (early boot, tests without an audit logger), the tracing breadcrumb and eprintln fallback still fire so the event is never silently lost.

pub fn emit(self, audit: &AuditLogger)

Trait Implementations

impl Debug for OperatorEvent

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.