nodeagent

type Agent struct {
	// contains filtered or unexported fields
}

type ArtifactBundleEntry struct {
	SourcePath  string
	ArchivePath string
}

type BuildGateOptions struct {
	Disabled bool
	Images   []contracts.BuildGateImageRule
	Pre      *contracts.BuildGatePhaseConfig
	Post     *contracts.BuildGatePhaseConfig
}

type ClaimManager struct {
	// contains filtered or unexported fields
}

type ClaimResponse struct {
	RunID         types.RunID                 `json:"id"` // Run ID (KSUID identifying the parent run)
	Name          *string                     `json:"name,omitempty"`
	RepoID        types.MigRepoID             `json:"repo_id"`   // Repo ID (NanoID identifying the repo execution)
	JobID         types.JobID                 `json:"job_id"`    // Claimed job ID
	JobName       string                      `json:"job_name"`  // Job name (e.g., "pre-gate", "mig-0")
	JobType       types.JobType               `json:"job_type"`  // Job phase: pre_gate, mig, post_gate
	JobImage      string                      `json:"job_image"` // Container image for mig jobs
	NextID        *types.JobID                `json:"next_id"`
	RepoURL       types.RepoURL               `json:"repo_url"`
	Status        string                      `json:"status"`
	NodeID        types.NodeID                `json:"node_id"`
	BaseRef       types.GitRef                `json:"base_ref"`
	CommitSha     *types.CommitSHA            `json:"commit_sha,omitempty"`
	RepoShaIn     *types.CommitSHA            `json:"repo_sha_in,omitempty"`
	StartedAt     string                      `json:"started_at"`
	CreatedAt     string                      `json:"created_at"`
	Spec          json.RawMessage             `json:"spec,omitempty"`
	MigContext    *contracts.MigClaimContext  `json:"mig_context,omitempty"`
	GateContext   *contracts.GateClaimContext `json:"gate_context,omitempty"`
	DetectedStack *contracts.StackExpectation `json:"detected_stack,omitempty"`
}

type Config struct {
	// HTTP configuration for the node agent API server.
	HTTP HTTPConfig `yaml:"http"`

	// Server URL for the control-plane server.
	ServerURL string `yaml:"server_url"`

	// NodeID identifies this node (NanoID-backed).
	NodeID domaintypes.NodeID `yaml:"node_id"`

	// Concurrency defines the maximum number of concurrent runs.
	Concurrency int `yaml:"concurrency"`

	// Heartbeat configuration.
	Heartbeat HeartbeatConfig `yaml:"heartbeat"`
}

type ContainerSpec struct {
	Image   contracts.JobImage
	Command contracts.CommandSpec
	Env     map[string]string
	Options map[string]any

	// Hydra resource entries for staged materialization and mount planning.
	In   []string // canonical read-only input entries (shortHash:/in/dst)
	Out  []string // canonical read-write output entries (shortHash:/out/dst)
	Home []string // canonical home-relative entries (shortHash:dst{:ro})
	Tmp  []string // canonical writable temporary entries (shortHash:/tmp/dst)
}

type HTTPConfig struct {
	// Listen address (e.g., ":8444").
	Listen string `yaml:"listen"`

	// TLS configuration.
	TLS TLSConfig `yaml:"tls"`

	// Timeouts.
	ReadTimeout  time.Duration `yaml:"read_timeout"`
	WriteTimeout time.Duration `yaml:"write_timeout"`
	IdleTimeout  time.Duration `yaml:"idle_timeout"`
}

type HeartbeatConfig struct {
	// Interval between heartbeats.
	Interval time.Duration `yaml:"interval"`

	// Timeout for heartbeat requests.
	Timeout time.Duration `yaml:"timeout"`
}

type HeartbeatManager struct {
	// contains filtered or unexported fields
}

type HeartbeatPayload struct {
	CPUFreeMillis  int32  `json:"cpu_free_millis"`
	CPUTotalMillis int32  `json:"cpu_total_millis"`
	MemFreeBytes   int64  `json:"mem_free_bytes"`
	MemTotalBytes  int64  `json:"mem_total_bytes"`
	DiskFreeBytes  int64  `json:"disk_free_bytes"`
	DiskTotalBytes int64  `json:"disk_total_bytes"`
	Version        string `json:"version,omitempty"`
}

type LogHook func(p []byte) ([]byte, error)

type LogStreamer struct {
	// contains filtered or unexported fields
}

type RunController interface {
	StartRun(ctx context.Context, req StartRunRequest) error
	StopRun(ctx context.Context, req StopRunRequest) error

	// AcquireSlot blocks until a concurrency slot is available or the context
	// is canceled. Returns nil when a slot is acquired, or ctx.Err() if the
	// context was canceled while waiting.
	//
	// Slot ownership:
	//   - On StartRun success (nil error), the controller is responsible for
	//     releasing the slot when the job completes.
	//   - On StartRun failure (non-nil error), the caller must ReleaseSlot()
	//     before returning.
	AcquireSlot(ctx context.Context) error

	// ReleaseSlot frees a previously acquired concurrency slot.
	// Must be called exactly once for each successful AcquireSlot call.
	ReleaseSlot()
}

type RunOptions struct {
	BuildGate      BuildGateOptions
	Execution      ContainerSpec
	ServerMetadata ServerMetadataOptions
	Steps          []StepOptions
	StackGate      *contracts.StepGateStackSpec

	// BundleMap maps content hashes to spec bundle download identifiers.
	// Populated from MigSpec.BundleMap during spec-to-run-options conversion.
	BundleMap map[string]string
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerMetadataOptions struct {
	JobID domaintypes.JobID
}

type StartRunRequest struct {
	RunID   types.RunID     `json:"run_id,omitempty"`
	JobID   types.JobID     `json:"job_id,omitempty"`   // Job ID for artifact/diff uploads
	RepoID  types.MigRepoID `json:"repo_id,omitempty"`  // Repo ID (NanoID) for run artifacts (diffs/logs)
	RepoURL types.RepoURL   `json:"repo_url,omitempty"` // Repository URL for this run
	// Name is an optional human-friendly run name provided by the control plane.
	// When set (e.g., for runs), it can be used for branch naming.
	Name      string          `json:"name,omitempty"`
	BaseRef   types.GitRef    `json:"base_ref,omitempty"`
	CommitSHA types.CommitSHA `json:"commit_sha,omitempty"`
	RepoSHAIn types.CommitSHA `json:"repo_sha_in,omitempty"`
	JobType   types.JobType   `json:"job_type,omitempty"`  // Job type: pre_gate, mig, post_gate
	JobImage  string          `json:"job_image,omitempty"` // Container image for this job
	NextID    *types.JobID    `json:"next_id,omitempty"`   // Linked successor in run chain
	JobName   string          `json:"job_name,omitempty"`  // Deprecated: kept for wire compatibility during context rollout.
	// MigContext carries concrete mig step routing.
	MigContext *contracts.MigClaimContext `json:"mig_context,omitempty"`
	// GateContext carries concrete gate cycle routing.
	GateContext *contracts.GateClaimContext `json:"gate_context,omitempty"`
	// DetectedStack carries the canonical gate-detected stack tuple for this job.
	DetectedStack *contracts.StackExpectation `json:"detected_stack,omitempty"`
	// TypedOptions contains strongly-typed run configuration. This is the canonical
	// source of truth for all option keys understood by the nodeagent. Execution,
	// manifest building, and artifact upload paths all consume TypedOptions
	// directly rather than parsing raw maps.
	TypedOptions RunOptions        `json:"-"`   // Not serialized; populated by claimer_loop from parsed spec
	Env          map[string]string `json:"env"` // Environment variables merged from spec
	ServerURL    string            `json:"server_url,omitempty"`
}

type StartRunResponse struct {
	RunID  types.RunID `json:"run_id"`
	Status string      `json:"status"`
}

type StepOptions struct {
	ContainerSpec
	Stack *contracts.StackGateSpec
}

type StopRunRequest struct {
	RunID  types.RunID `json:"run_id"`
	Reason string      `json:"reason"`
}

type StopRunResponse struct {
	RunID  types.RunID `json:"run_id"`
	Status string      `json:"status"`
}

type TLSConfig struct {
	// Enabled indicates whether mTLS is enabled.
	Enabled bool `yaml:"enabled"`

	// CertPath is the path to the node certificate.
	CertPath string `yaml:"cert_path"`

	// KeyPath is the path to the node private key.
	KeyPath string `yaml:"key_path"`

	// CAPath is the path to the CA certificate.
	CAPath string `yaml:"ca_path"`

	// BootstrapCAPath is the path to the CA certificate used to verify
	// the server during bootstrap (before mTLS certificates are obtained).
	// If empty, the CA at CAPath is used if it exists; otherwise
	// system roots are used (for public PKI scenarios).
	BootstrapCAPath string `yaml:"bootstrap_ca_path"`
}