Struct PoolStatus 

pub struct PoolStatus {
    pub phase: PoolPhase,
    pub phase_since: Option<DateTime<Utc>>,
    pub ready_count: u32,
    pub allocated_count: u32,
    pub spawning_count: u32,
    pub returning_count: u32,
    pub members: Vec<PoolMember>,
    pub message: Option<String>,
    pub conditions: Vec<PoolCondition>,
}

EphemeralPool.status — observed pool population state.

Fields

phase: PoolPhase

Pool lifecycle phase.

phase_since: Option<DateTime<Utc>>

When the pool entered the current phase.

ready_count: u32

Number of members currently in Free state (ready for allocation).

allocated_count: u32

Number of members currently Allocated.

spawning_count: u32

Number of members currently Spawning (not yet Attested).

returning_count: u32

Number of members currently Returning (reset or replace in progress).

members: Vec<PoolMember>

Member ledger — one entry per pool slot.

message: Option<String>

Operator-visible message (e.g., “scaled down to floor”).

conditions: Vec<PoolCondition>

Standard Kubernetes Conditions.

Implementations

impl PoolStatus

pub fn observed( phase: PoolPhase, members: Vec<PoolMember>, now: DateTime<Utc>, ) -> Self

Substrate constructor for the observed PoolStatus seed: composes the (phase, phase_since, ready/allocated/spawning /returning counts, members, message, conditions) 9-slot record every pool-reconciler status-patch site restated by hand pre- lift. The four counters ride a SINGLE closed-set-driven fold over the members list (one pass rather than four independent filter-and-count passes); the message + conditions slots stay at their invariant None / vec![] defaults every pre- lift caller stamped verbatim, and phase_since is derived from the caller-supplied now timestamp so the constructor stays clock-injectable rather than implicitly reading wall time.

Pre-lift the 11-line

PoolStatus {
    phase,
    phase_since: Some(Utc::now()),
    ready_count: count_state(&members, MemberState::Free),
    allocated_count: count_state(&members, MemberState::Allocated),
    spawning_count: count_state(&members, MemberState::Spawning),
    returning_count: count_state(&members, MemberState::Returning),
    members: members.clone(),
    message: None,
    conditions: vec![],
}

incantation was hand-authored at TWO sites past the ★★ PRIME- DIRECTIVE ≥ 2 duplication threshold in tatara-pool-reconciler::controller_pool::reconcile_inner, both restating the same 4-slot count fanout + defaults:

• The desired > 0 path — status patch after the convergence-action loop when the operator drives the pool through the R11 desired-count invariant.
• The legacy allocation-driven path (desired == 0) — status patch after the [crate::pool::PoolDecision] apply loop.

Both sites walked the SAME 4-slot count fanout on the SAME four MemberState variants (Free/Allocated/Spawning/Returning) and stamped the SAME defaults (message: None, conditions: vec![]), even though the four counters walked the members list four independent times pre-lift when a single pass suffices. Post-lift both callers write PoolStatus::observed(phase, members, Utc::now()) and share ONE substrate owner; a future counter slot (e.g., a warming_count for a MemberState::Warming variant between Spawning and Free) plugs into the fold at ONE match arm and both status-patch sites inherit the new slot mechanically.

The Failed variant is deliberately absent from the fold — no PoolStatus slot counts failed members (they surface via pool_phase_from_members’s PoolPhase::Degraded transition instead), and the closed-set match on MemberState pins that a future variant which SHOULD count toward one of the four buckets triggers the compiler’s exhaustiveness check at this fold rather than silently sinking into Failed’s no-op arm.

Theory anchor: THEORY.md §VI.1 (generation over composition — the 11-line status-seed incantation recurred at two hand- authored sites past the ★★ PRIME-DIRECTIVE ≥ 2 duplication trigger, and is lifted to ONE owner here). THEORY.md §II.1 invariant 5 (composition preserves proofs — the pins bind the 4-slot count fanout + the closed-set exhaustiveness on MemberState + the invariant defaults, so a regression that dropped a counter slot or swapped a variant surfaces at tests::pool_status_observed_* rather than as silent operator- facing skew between the two status-patch sites on the SAME pool).

pub fn observed_now(phase: PoolPhase, members: Vec<PoolMember>) -> Self

Wall-clock-anchored peer of Self::observed — the ONE substrate owner of the 4-arg PoolStatus::observed(phase, members, Utc::now()) composition every pool-reconciler status-patch site that reads the wall clock at tick-time hand-authored pre-lift.

Why it exists

Pre-lift the 4-arg PoolStatus::observed(phase, members.clone(), chrono::Utc::now()) chain was hand-authored at TWO sites past the ★★ PRIME-DIRECTIVE ≥ 2 duplication threshold in tatara-pool-reconciler::controller_pool::reconcile_inner, each pairing the 3-arg Self::observed composer with a chrono::Utc::now() third argument at the status-patch stamp:

• The desired > 0 path — status patch after the convergence-action loop when the operator drives the pool through the R11 desired-count invariant.
• The legacy allocation-driven path (desired == 0) — status patch after the [crate::pool::PoolDecision] apply loop.

Both sites walked the SAME 4-arg call with the SAME chrono::Utc::now() third argument — the wall-clock projection had no per-callsite variation. Post-lift both consumers share ONE substrate owner for the wall-clock-at-tick projection; a future clock swap (a monotonic clock cross-check, a per-reconciler injected time source, a test-only override at the production callsite via feature flag) lands at ONE substrate function and every pool-reconciler status-patch site inherits the upgrade mechanically.

The 3-arg Self::observed peer stays load-bearing for test callers — the injected-now shape is what unit tests use to drive the clock deterministically (every PoolStatus::observed(phase, members, seeded_now) in this module’s own test suite reads that surface). This peer is production-only: pinning the wall-clock at the substrate site means no test can accidentally consume it without the deterministic-clock injection that makes the test meaningful.

Sibling of crate::lifetime_clock::evaluate_now on the (typed pure-fn, wall-clock-anchored peer) axis — both primitives own the “read the wall clock at tick-time” projection on a peer clock-injectable primitive so the workspace’s timed-decision family stays uniform across EphemeralLifetime TTL expiry and PoolStatus observed-state stamp.

Invariants

• Same shape: returns the SAME PoolStatus the 3-arg Self::observed returns when passed chrono::Utc::now() as the third argument. This is a delegation, not a re-implementation.
• Wall-clock read once: Utc::now() is called exactly ONCE per invocation, at the primitive’s body, so a future consumer that chains two observed_now calls back-to-back still sees monotonic now reads (each call reads a fresh instant, not a cached one) — matches the pre-lift shape where each of the two status-patch sites computed its own chrono::Utc::now() at its own line.

#[must_use]

Every consumer feeds the returned PoolStatus into tatara_process::patch::merge_status(&pool_api, &name, &<status>) or a peer status-patch call. Dropping the return means the observation composed for no observable reason — the attribute surfaces that as a warning at every call site.

Theory anchor: THEORY.md §VI.1 (generation over composition — the 4-arg call with chrono::Utc::now() as the third argument recurred at 2 hand-authored sites past the ★★ PRIME-DIRECTIVE ≥ 2 duplication trigger, lifted onto the ONE workspace-wide substrate owner here). THEORY.md §II.1 invariant 5 (composition preserves proofs — the wall-clock projection lives at ONE site so a future clock swap reaches both consumers through one edit).

pub fn observed_from(pool: &EphemeralPool, members: Vec<PoolMember>) -> Self

Compound composer peer of Self::observed_now that derives the PoolPhase from (pool, members) via the typed projection crate::pool::EphemeralPool::observed_phase_from — the ONE substrate owner of the (phase-compute + observed_now wall-clock stamp) 2-link chain every pool-reconciler status- patch site walked pre-lift.

Why it exists

Pre-lift the 2-link let phase = pool_phase_from_members(&pool, &members); PoolStatus::observed_now(phase, members.clone()) chain was hand-authored at TWO sites past the ★★ PRIME- DIRECTIVE ≥ 2 duplication threshold in tatara-pool-reconciler::controller_pool::reconcile_inner, both keyed against the same (pool, members) observations:

• The desired > 0 path — status patch after the apply_convergence_actions walk when the operator drives the pool through the R11 desired-count invariant.
• The legacy allocation-driven path (desired == 0) — status patch after the [crate::pool::PoolDecision] apply loop.

Both sites walked the SAME 2-link chain — compute the observed phase from the (tombstone-first, empty, floor, supply-vs- desired) gate ladder against the borrowed (pool, members) pair, then hand the produced phase + owned members clone to the wall-clock-anchored Self::observed_now composer. Both keyed the SAME projection through a repo-internal free function (pool_phase_from_members) that shadowed the natural substrate owner. Post-lift each callsite reads PoolStatus::observed_from(&pool, members.clone()) and the compose+dispatch sink lives at ONE substrate owner — crate::pool::EphemeralPool::observed_phase_from + Self::observed_now compose here, at the exact substrate site where the pool + status types both live.

Invariants

• Same shape: returns the SAME PoolStatus the 2-link chain observed_now(pool.observed_phase_from(&members), members) returns. This is a delegation, not a re- implementation — the underlying wall-clock stamp still lives at Self::observed_now and the phase projection still lives at crate::pool::EphemeralPool::observed_phase_from.
• Members ride through by owned value: the members Vec is consumed by Self::observed_now verbatim (no defensive .clone() at the composer boundary); the phase projection borrows the same slice through &members[..] inside the delegation so the underlying single-pass fold in crate::pool::MemberState::counts_toward_supply-family composers still gets the same borrowed view it did pre-lift.
• Wall-clock read once: Utc::now() is called exactly ONCE per invocation (inherited from Self::observed_now), preserving the pre-lift shape where each of the two status- patch sites computed its own chrono::Utc::now() at its own line.

#[must_use]

Every consumer feeds the returned PoolStatus into tatara_process::patch::merge_status(&pool_api, &name, &<status>) or a peer status-patch call. Dropping the return means the observation composed for no observable reason — the attribute surfaces that as a warning at every call site.

Sibling of Self::observed_now on the (pure phase argument, pool-derived phase) axis pair: both compose atop the 3-arg Self::observed primitive, differing only in whether the caller has already computed the phase (observed_now) or hands the pool + members observations to the composer to derive the phase in one shot (observed_from). Peer of crate::pool::EphemeralPool::observed_phase_from on the (pure typed projection, compound-composer) axis.

Theory anchor: THEORY.md §VI.1 (generation over composition — the 2-link pool_phase_from_members + observed_now chain recurred at 2 hand-authored sites past the ★★ PRIME-DIRECTIVE ≥ 2 duplication trigger, and is lifted to ONE substrate owner here). THEORY.md §II.1 invariant 5 (composition preserves proofs — the compound composer inherits the two component composers’ invariants mechanically, so a regression at either component surfaces at the pinned tests here rather than as silent skew at either status-patch site).

Trait Implementations

impl Clone for PoolStatus

fn clone(&self) -> PoolStatus

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PoolStatus

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PoolStatus

fn default() -> PoolStatus

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for PoolStatus

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for PoolStatus

fn schema_name() -> String

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn is_referenceable() -> bool

Whether JSON Schemas generated for this type should be re-used where possible using the $ref keyword.

impl Serialize for PoolStatus

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.