app

func IsRuntimeLLMFacadeRequest ¶

func IsRuntimeLLMFacadeRequest(r *http.Request) bool

func NewAgentExecutor ¶

func NewAgentExecutor(di do.Injector) (*adapters.AgentExecutor, error)

func NewAgentRunner ¶

func NewAgentRunner(di do.Injector) (*adapters.AgentRunner, error)

func NewCacheController ¶

func NewCacheController(di do.Injector) (*cache.Controller, error)

func NewCapProxyServer ¶

func NewCapProxyServer(di do.Injector) (*capproxy.Server, error)

func NewCapabilityProvider ¶

func NewCapabilityProvider(di do.Injector) (capabilities.Provider, error)

func NewCapabilitySandboxResolver ¶

func NewCapabilitySandboxResolver(di do.Injector) (*adapters.CapabilitySandboxResolver, error)

func NewCellExecutor ¶

func NewCellExecutor(di do.Injector) (*adapters.CellExecutor, error)

func NewCleanupRunner ¶

func NewCleanupRunner(di do.Injector) (*cleanup.Runner, error)

func NewConfigStore ¶

func NewConfigStore(di do.Injector) (*configstore.ConfigStore, error)

func NewDashboardOverviewAggregator ¶

func NewDashboardOverviewAggregator(di do.Injector) (*dashboard.Aggregator, error)

func NewDashboardOverviewHub ¶

func NewDashboardOverviewHub(di do.Injector) (*dashboard.Hub, error)

func NewDatabase ¶

func NewDatabase(di do.Injector) (*storagesqlite.Database, error)

func NewDeletionRecovery ¶

func NewDeletionRecovery(di do.Injector) (*sandboxes.DeletionRecovery, error)

func NewEgressProxy ¶

func NewEgressProxy(di do.Injector) (*proxy.EgressProxy, error)

NewEgressProxy builds the daemon's forward proxy: the enforcement point that makes a declared sandbox network policy real on a driver that has no enforcement surface of its own. The mediation is both its authorizer (which sandbox does this credential belong to) and its policy source (what does that sandbox's project declare now).

func NewEngineCapabilitySnapshot ¶

func NewEngineCapabilitySnapshot(di do.Injector) (capmatrix.Snapshot, error)

NewEngineCapabilitySnapshot freezes the engine capability matrix once, when the daemon composes its routes. It reads static driver declarations and the provider facts selected from configuration, so it never probes a runtime.

func NewEventDispatcher ¶

func NewEventDispatcher(di do.Injector) (*events.Dispatcher, error)

func NewImageBackends ¶

func NewImageBackends(di do.Injector) (*adapters.ImageBackends, error)

func NewLLMClient ¶

func NewLLMClient(di do.Injector) (*adapters.LLMClient, error)

func NewLLMUpstreamProber ¶

func NewLLMUpstreamProber(di do.Injector) (*adapters.LLMUpstreamProber, error)

NewLLMUpstreamProber builds the shared upstream protocol prober used by the startup sweep and by the LLM service after a provider write.

func NewProjectController ¶

func NewProjectController(di do.Injector) (*projects.Controller, error)

func NewProjectOctoBusTargetResolver ¶

func NewProjectOctoBusTargetResolver(di do.Injector) (*adapters.ProjectOctoBusTargetResolver, error)

func NewResourceLocator ¶

func NewResourceLocator(di do.Injector) (*resources.Locator, error)

func NewRunCompletionManager ¶

func NewRunCompletionManager(di do.Injector) (*runs.CompletionManager, error)

func NewRunController ¶

func NewRunController(di do.Injector) (*runs.Controller, error)

func NewRunLogHub ¶

func NewRunLogHub(do.Injector) (*runs.RunLogHub, error)

func NewRuntimeProvider ¶

func NewRuntimeProvider(di do.Injector) (adapters.RuntimeProvider, error)

func NewSandboxDriver ¶

func NewSandboxDriver(di do.Injector) (*adapters.SandboxDriver, error)

func NewSandboxEgressMediation ¶

func NewSandboxEgressMediation(di do.Injector) (*adapters.SandboxEgressProxy, error)

NewSandboxEgressMediation builds the one mediation value the daemon shares: the proxy uses it as its authorizer and policy source, the creation seam uses it to decide whether a sandbox is given the proxy, and the admission report uses it to name the mechanism that will apply a declaration. One value means the three cannot disagree about whether the engine mediates.

func NewSandboxRPCBridge ¶

func NewSandboxRPCBridge(di do.Injector) (*adapters.SandboxRPCBridge, error)

func NewSandboxRemovalCoordinator ¶

func NewSandboxRemovalCoordinator(di do.Injector) (*sandboxes.RemovalCoordinator, error)

func NewSandboxRunTargetResolver ¶

func NewSandboxRunTargetResolver(di do.Injector) (*runs.SandboxRunTargetResolver, error)

func NewSandboxStore ¶

func NewSandboxStore(di do.Injector) (*sandboxstore.Store, error)

func NewSchedulerCommandExecutor ¶

func NewSchedulerCommandExecutor(di do.Injector) (*adapters.SchedulerCommandExecutor, error)

func NewSchedulerController ¶

func NewSchedulerController(di do.Injector) (*schedulers.Controller, error)

func NewSchedulerSandboxRunner ¶

func NewSchedulerSandboxRunner(di do.Injector) (*adapters.SchedulerSandboxRunner, error)

func NewTelemetryProvider ¶

func NewTelemetryProvider(di do.Injector) (*telemetry.Provider, error)

NewTelemetryProvider builds the daemon trace provider from the same OTLP endpoint and headers that configure native provider export in the guest. An unset endpoint yields a disabled provider, so a daemon without telemetry configuration exports nothing and opens no new connection.

func NewTelemetryRecorder ¶

func NewTelemetryRecorder(di do.Injector) (*telemetry.Recorder, error)

NewTelemetryRecorder exposes the daemon recorder to the components that start spans and record metrics. It is a no-op recorder while the provider is disabled.

func NewVolumeManager ¶

func NewVolumeManager(di do.Injector) (*volumes.Manager, error)

func NewWorkspaceProvisioner ¶

func NewWorkspaceProvisioner(di do.Injector) (*workspaces.Provisioner, error)

func Register ¶

func Register(di do.Injector)

func RegisterDependencies ¶

func RegisterDependencies(di do.Injector)

func RegisterRoutes ¶

func RegisterRoutes(di do.Injector)

func Setup ¶

func Setup(di do.Injector)

func StartBackground ¶

func StartBackground(di do.Injector) error

func StopBackground ¶

func StopBackground(ctx context.Context, di do.Injector) error