inference

type Client struct {
	// GatewayURL is the base URL of the inference gateway (e.g. "http://localhost:8402").
	GatewayURL string

	// HTTP is the underlying transport.  Defaults to http.DefaultTransport.
	HTTP http.RoundTripper
	// contains filtered or unexported fields
}

type ContainerManager struct {
	// contains filtered or unexported fields
}

type Deployment struct {
	// Name is the human-readable identifier for this deployment.
	// Used as the keychain tag suffix and directory name.
	Name string `json:"name"`

	// EnclaveTag is the macOS keychain application tag for the SE key.
	// Derived from Name if not explicitly set:
	//   "com.obol.inference.<name>"
	EnclaveTag string `json:"enclave_tag"`

	// ListenAddr is the gateway listen address (default ":8402").
	ListenAddr string `json:"listen_addr"`

	// UpstreamURL is the inference backend URL (default "http://localhost:11434").
	UpstreamURL string `json:"upstream_url"`

	// WalletAddress is the USDC payment recipient.
	WalletAddress string `json:"wallet_address"`

	// PricePerRequest is the USDC price per inference call (default "0.001").
	PricePerRequest string `json:"price_per_request"`

	// PricePerMTok is the original per-million-token price when request pricing
	// was derived from the temporary phase-1 approximation.
	PricePerMTok string `json:"price_per_mtok,omitempty"`

	// ApproxTokensPerRequest records the fixed approximation used to derive the
	// charged request price from PricePerMTok.
	ApproxTokensPerRequest int `json:"approx_tokens_per_request,omitempty"`

	// Chain is the x402 payment chain name (e.g. "base", "base-sepolia").
	Chain string `json:"chain"`

	// FacilitatorURL is the x402 facilitator URL.
	FacilitatorURL string `json:"facilitator_url"`

	// VMMode enables running the upstream inference engine inside an Apple
	// Containerization Linux micro-VM instead of pointing at an existing
	// Ollama process.  Requires the apple/container CLI to be installed.
	// See: https://github.com/apple/container
	VMMode bool `json:"vm_mode,omitempty"`

	// VMImage is the OCI image to run (default "ollama/ollama:latest").
	VMImage string `json:"vm_image,omitempty"`

	// VMCPUs is the number of vCPUs to allocate to the VM (default 4).
	VMCPUs int `json:"vm_cpus,omitempty"`

	// VMMemoryMB is the RAM to allocate to the VM in MiB (default 8192).
	VMMemoryMB int `json:"vm_memory_mb,omitempty"`

	// VMHostPort is the host-local port mapped to Ollama's 11434 inside the
	// container (default 11435).  Must not conflict with other deployments.
	VMHostPort int `json:"vm_host_port,omitempty"`

	// TEEType is the Linux TEE backend ("tdx", "snp", "nitro", "stub").
	// Empty means macOS Secure Enclave mode.
	// Mutually exclusive with EnclaveTag-based SE mode on macOS.
	TEEType string `json:"tee_type,omitempty"`

	// ModelHash is the hex-encoded SHA-256 of the model being served.
	// Required when TEEType is set. Bound into the TEE attestation user_data.
	ModelHash string `json:"model_hash,omitempty"`

	// NoPaymentGate disables the built-in x402 payment middleware when the
	// gateway runs behind the cluster's x402 verifier to avoid double-gating.
	NoPaymentGate bool `json:"no_payment_gate,omitempty"`

	// Provenance holds optional metadata about how the model was produced
	// (e.g. autoresearch experiment results). Stored alongside the deployment
	// config and passed to the registration document when selling.
	Provenance *Provenance `json:"provenance,omitempty"`

	// CreatedAt is the RFC3339 timestamp of when this deployment was created.
	CreatedAt string `json:"created_at"`

	// UpdatedAt is the RFC3339 timestamp of the most recent update.
	UpdatedAt string `json:"updated_at,omitempty"`
}

type EndpointInfo struct {
	Host       string
	Port       int
	ServerType string
	Models     []ModelInfo
	Healthy    bool
}

type Gateway struct {
	// contains filtered or unexported fields
}

type GatewayConfig struct {
	// ListenAddr is the address to listen on (e.g., ":8402").
	ListenAddr string

	// UpstreamURL is the upstream inference service URL (e.g., "http://localhost:11434").
	UpstreamURL string

	// WalletAddress is the USDC recipient address for payments.
	WalletAddress string

	// PricePerRequest is the USDC amount charged per inference request (e.g., "0.001").
	PricePerRequest string

	// Chain is the x402 chain configuration (e.g., x402pkg.ChainBaseMainnet).
	Chain x402pkg.ChainInfo

	// FacilitatorURL is the x402 facilitator service URL.
	FacilitatorURL string

	// VerifyOnly skips blockchain settlement after successful verification.
	// Useful for testing and staging environments where no real funds are involved.
	VerifyOnly bool

	// EnclaveTag is the macOS Secure Enclave keychain application tag used for
	// request decryption.  When non-empty the gateway enables two additional
	// behaviours:
	//
	//   1. GET /v1/enclave/pubkey — returns the SE public key as JSON so that
	//      clients can encrypt their request bodies.
	//
	//   2. Inference endpoints accept Content-Type: application/x-obol-encrypted
	//      bodies.  The gateway decrypts them via the SE private key before
	//      forwarding to the upstream service.  If the request also contains a
	//      X-Obol-Reply-Pubkey header, the response is re-encrypted to the
	//      client's ephemeral key (end-to-end confidentiality).
	//
	// When empty, all enclave functionality is disabled and the gateway
	// operates in plain x402-only mode.
	EnclaveTag string

	// VMMode enables running the upstream inference engine inside an Apple
	// Containerization Linux micro-VM via the apple/container CLI.
	// When true, the gateway starts the container on Start() and stops it on
	// Stop(), overriding UpstreamURL with the container's mapped local port.
	VMMode bool

	// VMImage is the OCI image to run (default "ollama/ollama:latest").
	VMImage string

	// VMCPUs is the number of vCPUs to allocate (default 4).
	VMCPUs int

	// VMMemoryMB is the RAM to allocate in MiB (default 8192).
	VMMemoryMB int

	// VMHostPort is the host-local port mapped from the container's Ollama
	// port 11434 (default 11435).
	VMHostPort int

	// VMBinary is the path to the container CLI binary.
	// Defaults to "container" (PATH lookup).
	VMBinary string

	// TEEType specifies the Linux TEE backend. When non-empty, the gateway
	// uses internal/tee instead of internal/enclave for key management.
	// Valid values: "tdx", "snp", "nitro", "stub".
	// Mutually exclusive with EnclaveTag.
	TEEType string

	// ModelHash is the hex-encoded SHA-256 of the model being served.
	// Required when TEEType is set. Bound into the TEE attestation user_data
	// so verifiers can confirm the model identity.
	ModelHash string

	// NoPaymentGate disables the built-in x402 payment middleware. Use this
	// when the gateway runs behind the cluster's x402 verifier (via Traefik
	// ForwardAuth) to avoid double-gating requests. Enclave/TEE encryption
	// middleware remains active when enabled.
	NoPaymentGate bool
}

type ModelInfo struct {
	ID      string `json:"id"`
	OwnedBy string `json:"owned_by"`
	Created int64  `json:"created"`
}

type Provenance struct {
	Framework    string `json:"framework,omitempty"`    // e.g. "autoresearch"
	MetricName   string `json:"metricName,omitempty"`   // e.g. "val_bpb"
	MetricValue  string `json:"metricValue,omitempty"`  // e.g. "0.9973"
	ExperimentID string `json:"experimentId,omitempty"` // commit hash or UUID
	TrainHash    string `json:"trainHash,omitempty"`    // e.g. "sha256:..."
	ParamCount   string `json:"paramCount,omitempty"`   // e.g. "50000000"
}

type Store struct {
	// contains filtered or unexported fields
}