daemon

type Config struct {
	// Gateway is the Lantern gateway URL used for state-tree backfill +
	// chain-head bootstrap. Defaults to https://gateway.lantern.reiers.io.
	Gateway string

	// DataDir is the directory the daemon reads + writes (header store,
	// JWT secret, tokens). REQUIRED.
	DataDir string

	// Wallet is the keystore-backed wallet used to sign messages. REQUIRED.
	// Callers that don't need signing (read-only embedding) can pass a
	// wallet with no keys.
	Wallet *wallet.Wallet

	// Passphrase is the keystore decryption passphrase. Optional when
	// Wallet was constructed already-unlocked.
	Passphrase string

	// RPCListen is the JSON-RPC server bind address. Default 127.0.0.1:1234.
	RPCListen string

	// MetricsListen is the optional Prometheus + dashboard bind address.
	// Default empty (no metrics endpoint).
	MetricsListen string

	// P2PListen is comma-separated libp2p listen multiaddrs. Default
	// "/ip4/0.0.0.0/tcp/0,/ip4/0.0.0.0/udp/0/quic-v1". Set to "" to
	// disable the libp2p host entirely (RPC stays up, Net* RPCs return
	// empty data).
	P2PListen string

	// NoHeaderStore disables the persistent header store. Useful for
	// short-lived embedded uses where ChainNotify history isn't needed.
	NoHeaderStore bool

	// HeaderStorePath overrides the default Badger location ($DataDir/headerstore).
	HeaderStorePath string

	// SyncInterval is the header-store poll cadence. Default 6s.
	SyncInterval time.Duration

	// DevnetHeadPollInterval, when > 0, overrides the header-store poll
	// cadence on devnet only. Zero (default) means auto: use
	// build.GetDevnetConfig().BlockDelaySecs (persisted by
	// `lantern devnet-init`), or 4s if unavailable. Fixes lantern#123
	// findings 8+9: a single-node docker devnet can't form a gossipsub
	// mesh, so head arrives ONLY via RPC polling; the mainnet-oriented
	// 30s cadence lags a 4s-epoch devnet by ~7x block time. Ignored on
	// mainnet + calibration (SyncInterval / gossip logic is unchanged
	// there).
	DevnetHeadPollInterval time.Duration

	// PersistentCache enables the on-disk (Badger) block cache instead of
	// the in-memory MemBlockStore. This is the PDP / mid-node tier: the warm
	// contract subtrees (PDP/payments/registry/USDFC) SURVIVE restart, so a
	// restarted node doesn't cold-fetch its whole warm set from the gateway
	// on the first head advance (which for a PDP node could stall inside a
	// proving window). The light node leaves this false and stays
	// memory-cached. Cache lives at <DataDir>/<network>/blockcache.
	PersistentCache bool

	// PersistentCacheBytes is the soft byte budget for the persistent block
	// cache (only used when PersistentCache=true). 0 => default 3 GiB (the
	// middle of the 2-5 GB PDP-tier target). Eviction is sampled-LRU over
	// unpinned blocks; pinned warm-set subtrees are never evicted.
	PersistentCacheBytes int64

	// FullValidation enables the Full-tier per-block consensus pipeline
	// (chain/fullvalidate, #90): signature / VRF / win-count re-verified
	// against resident F3-anchored state on every ingested block. Light/PDP
	// leave this false. Requires an accessor-backed ChainAPI.
	FullValidation bool

	// FullValidationFatal decides whether a FullValidation failure rejects
	// the tipset (true) or is only logged (false = observe mode). Defaults
	// to observe so a Full node can be brought up + watched on calibration
	// before the pipeline is trusted to gate ingest.
	FullValidationFatal bool

	// WinningPoStVerify enables pure-Go WinningPoSt SNARK verification on
	// every ingested Full-tier block (#87 + #88). Only takes effect when
	// FullValidation=true. Observe mode by default (respects
	// FullValidationFatal). Requires WinningPoStParamsDir to hold the
	// Filecoin proof-parameter verifying keys for the sector-size range
	// the network uses.
	WinningPoStVerify bool

	// WinningPoStParamsDir is the directory holding the Filecoin proof-
	// parameters (specifically the WinningPoSt verifying keys). Empty =>
	// the daemon uses its default (<DataDir>/proof-params). Ignored when
	// WinningPoStVerify=false.
	WinningPoStParamsDir string

	// HeadCorroborationPeers (#80 part 2) is the number of distinct gossip
	// peers that must forward a block before the ingestor adopts it as the
	// new head. A trusted floor peer (protected bootstrap/beacon/direct
	// peer) counts as a super-vote, and the requirement clamps to the
	// connected-peer count so a small node never wedges. 0 disables (the
	// Light/PDP default; their head safety comes from the divergence
	// monitor + heaviest-weight fork choice).
	HeadCorroborationPeers int

	// StaleResetThreshold is the number of epochs behind live head past
	// which a persisted header store re-anchors near live head instead of
	// trying (and failing) to backfill an un-connectable gap (#51). This is
	// the "down for a maintenance window / crash / long proving gap"
	// auto-heal: without it, an embedded node that falls further than
	// MaxBacktrack (~900 epochs) behind wedges its head forever and needs a
	// manual `lantern reset --chain-state`. Chain-state pointers only are
	// discarded on re-anchor; keys/wallets/tokens live in separate files and
	// are never touched. 0 = use the default; a negative value disables.
	// Default (when 0): 2880 epochs (~1 day at 30s blocks), matching the
	// standalone cmd/lantern daemon.
	StaleResetThreshold abi.ChainEpoch

	// NotifyBufSize is the ChainNotify per-subscriber buffer. Default 64.
	NotifyBufSize int

	// NoLibp2p disables libp2p host startup. Equivalent to P2PListen="".
	NoLibp2p bool

	// BitswapEnabled inserts Bitswap between cache and HTTP gateway.
	// Default true.
	BitswapEnabled bool

	// BitswapFastDeadline is the preferred-peer Bitswap stage deadline.
	// Default 1.5s.
	BitswapFastDeadline time.Duration

	// BitswapFullDeadline is the swarm-broadcast Bitswap stage deadline.
	// Default 5s.
	BitswapFullDeadline time.Duration

	// BitswapPeers is a comma-separated multiaddr list of always-keep-
	// connected Bitswap providers (beacon nodes typically).
	BitswapPeers string

	// FallbackRPC overrides the Lotus-compatible RPC URL used as the
	// polling Sync head source and the cold state-block fallback. Empty
	// uses the built-in Glif URL for the active network (the historical
	// default). Point this at your own Forest/Lotus node to remove the
	// Glif dependency without going fully bridge-off (lantern#50 part 3).
	FallbackRPC string

	// HeadCheckRPCs is an optional list of Lotus-compatible JSON-RPC URLs
	// used by the running-head divergence monitor (chain/headcheck,
	// #85) to CORROBORATE the gossip-derived head. These are never
	// the source of truth for the head - they only raise an eclipse/fork
	// alarm when a diversity of independent observers disagrees with our
	// head beyond the 3-block lookback. Empty disables the monitor.
	HeadCheckRPCs []string

	// NoFallbackRPC, when true, wires NO upstream RPC as the Sync head
	// source or cold-block fallback - the node relies purely on gossipsub
	// for the head and Bitswap for cold blocks (lantern#50 part 3). This
	// makes the bridge-off trust posture EXPLICIT: under the old default a
	// bridge-off node silently fell back to Glif whenever gossip stalled,
	// a hidden third-party dependency. With this set, a gossip stall
	// surfaces as a stalled head (observable) instead of a silent Glif
	// fetch. Intended for operators who have a healthy swarm/beacon set
	// and want a provably-Glif-free node. Overrides FallbackRPC.
	NoFallbackRPC bool

	// VMBridgeRPC is an upstream Forest/Lotus JSON-RPC URL for the VM
	// bridge (needed for AllowBlockSubmit=true). Empty disables bridge.
	VMBridgeRPC string

	// VMBridgeToken is the optional Bearer token for the bridge.
	VMBridgeToken string

	// VMBridgeTimeout caps each bridge call. Default 30s.
	VMBridgeTimeout time.Duration

	// AllowBlockSubmit lifts the SyncSubmitBlock gate. Requires VMBridgeRPC.
	AllowBlockSubmit bool

	// Network selects the Filecoin network the embedded daemon syncs.
	// Accepted values: "mainnet" (default), "calibration". Drives the
	// gateway URL, Glif fallback URL, bootstrap peers, network name,
	// genesis CID, F3 manifest, and the Filecoin.Version label.
	Network string

	// EmbeddedMode is set by callers (e.g. Curio Core) that want to
	// suppress some CLI-shaped stdout/stderr noise. Functionally no-op
	// otherwise.
	EmbeddedMode bool

	// FEVMPrefetchAddrs is the optional list of EVM contract addresses
	// (20-byte hex, 0x-prefixed or bare) whose state subtrees should be
	// warmed into the local blockstore cache on every head advance, so
	// later eth_calls hit the cache instead of falling back to the VM
	// bridge or returning "block not found" (lantern#44).
	//
	// Embedded callers should set this to the proxy + impl addresses of
	// the contracts they read (PDPVerifier, FWSS, ServiceProviderRegistry,
	// USDFC, ...). The standalone daemon leaves this empty by default;
	// curio-core will wire defaults from its pdp/contract/addresses.go.
	FEVMPrefetchAddrs []string

	// FEVMPrefetchMaxBlocksPerAddr caps the BFS node-count per address
	// per head advance. Default 256.
	FEVMPrefetchMaxBlocksPerAddr int

	// FEVMPrefetchPerAddrTimeout bounds one address's walk. Default 20s.
	FEVMPrefetchPerAddrTimeout time.Duration

	// FEVMPrefetchMinInterval coalesces rapid head advances: each
	// address is walked at most once per MinInterval. Default 60s.
	FEVMPrefetchMinInterval time.Duration

	// FEVMFetchRetries / FEVMFetchTimeout control the retry-on-miss
	// wrapper used by the eth_call backend for bytecode + KAMT storage
	// reads (lantern#44). Zero values pick sensible defaults
	// (2 retries / 8s total). Set FEVMFetchRetries < 0 to disable.
	FEVMFetchRetries int
	FEVMFetchTimeout time.Duration

	// MpoolPersistDisabled turns OFF the durable pending-message store
	// (#119). Zero value = enabled: user pushed messages survive daemon
	// restart, and the sender's next nonce stays consistent because
	// MpoolGetNonce reads the restored pending set. Set to true only for
	// stateless embedded uses (CI, ephemeral tests) that don't want the
	// per-network mpool directory.
	MpoolPersistDisabled bool

	// MpoolPersistPath overrides the default persist journal path
	// (<DataDir>/<Network>/mpool/pending.jsonl). Empty uses the default.
	MpoolPersistPath string
}

type Daemon struct {
	// contains filtered or unexported fields
}