pod

type BudgetConfig struct {
	LimitUSD    *float64
	MaxRequests *int
	Window      string
	Behavior    string
}

type ChannelContextConfig struct {
	Since    string
	Limit    int
	MaxChars int
	Buffer   int
}

type ChannelMemoryConfig struct {
	Service string
}

type ClawAPIConfig struct {
	Image              string // e.g. ghcr.io/mostlydev/claw-api:latest
	Addr               string // e.g. :8080
	ManifestHostPath   string // host path to pod-manifest.json
	ScheduleHostPath   string // host path to schedule.json
	PrincipalsHostPath string // host path to principals.json
	DockerSockHostPath string // host path to docker socket
	GovernanceHostPath string // host path to .claw-governance/ dir (write plane override files)
	ContextHostDir     string // host path to .claw-runtime/context/
	CllamaAPIURL       string // internal cllama UI/API URL for context snapshots
	CllamaAPIToken     string // CLLAMA_UI_TOKEN for internal cllama snapshot calls
	PodName            string
	Environment        map[string]string // extra env vars (e.g. CLAW_ALERT_* thresholds)
}

type ClawBlock struct {
	Agent        string
	Persona      string
	DescribeFile string
	Cllama       []string
	Models       map[string]string
	CllamaEnv    map[string]string
	CllamaTokens map[string]string // runtime-only: expanded service name -> token
	Count        int
	Handles      map[string]*driver.HandleInfo // platform → contact card
	Feeds        []FeedEntry
	Tools        []ToolPolicyEntry
	ToolPolicy   *ToolPolicyConfig
	Budget       *BudgetConfig
	Memory       *MemoryEntry
	Include      []IncludeEntry
	Surfaces     []driver.ResolvedSurface
	Skills       []string
	Invoke       []InvokeEntry
	Context      *ContextConfig
	ClawAPIMode  string // "self" when claw-api: self is declared; empty otherwise
	MCPStdio     *MCPStdioBlock
	Hermes       *driver.HermesConfig
	Lifecycle    string // "" (long-lived service) or LifecyclePerRun
	Run          *RunLimits
	// ReasoningEffort maps a model slot to the reasoning effort a per-run
	// worker requests for it.
	ReasoningEffort map[string]string
	// ProviderPreferences maps a per-run openrouter/* model slot to the
	// OpenRouter routing preferences its worker sends.
	ProviderPreferences map[string]*driver.OpenRouterPreferences
	// DataPolicy is the region, training and retention policy cllama
	// enforces for this service. Nil means the conservative default.
	DataPolicy *DataPolicyConfig
}

type ClawdashConfig struct {
	Image              string            // e.g. ghcr.io/mostlydev/clawdash:latest
	Addr               string            // e.g. :8082
	HostBind           string            // host publication IP, separate from container Addr
	ManifestHostPath   string            // host path to pod-manifest.json
	DockerSockHostPath string            // host path to docker socket
	CllamaCostsURL     string            // external costs URL for operator browser
	Environment        map[string]string // extra env vars (e.g. schedule client auth)
	PodName            string
}

type CllamaProxyConfig struct {
	ProxyType             string            // e.g. "passthrough", "policy"
	Image                 string            // e.g. ghcr.io/mostlydev/cllama:latest
	ContextHostDir        string            // host path for shared context dir
	AuthHostDir           string            // host path for provider auth state
	SessionHistoryHostDir string            // host path for session history dir (optional)
	GovernanceHostDir     string            // host path for governance override dir (optional, read-only in proxy)
	RevocationHostDir     string            // host path for the proxy-owned durable revocation ledger (rw)
	DashboardPort         string            // host port published to proxy UI :8081 (default "8181")
	DashboardBind         string            // host publication IP; empty preserves Docker default
	Environment           map[string]string // proxy-only env (e.g. CLAW_POD, provider keys)
	PodName               string
}

type ContextBlockConfig struct {
	ID        string
	Kind      string
	Text      string
	Enabled   bool
	Placement string
	MaxChars  int
	Cadence   string
}

type ContextConfig struct {
	Channel *ChannelContextConfig
	Blocks  []ContextBlockConfig
}

type DataPolicyAttestation struct {
	Provider   string
	Endpoint   string
	Guarantees []string
}

type DataPolicyConfig struct {
	Regions        []string
	Training       string // none | allowed
	Retention      string // provider retention: none | provider-default
	LocalRetention string // cllama local content: none | allowed
	Attestations   []DataPolicyAttestation
}

type FeedEntry struct {
	Name        string
	Source      string
	Path        string
	TTL         int
	Description string
	Unresolved  bool
}

type IncludeEntry struct {
	ID          string
	File        string
	Mode        string
	Description string
}

type InvokeEntry struct {
	Schedule string // 5-field cron expression
	Message  string // agent task payload
	Name     string // optional human-readable job name
	To       string // delivery target (name or ID; optional platform prefix "platform:target")
	When     *schedule.When
}

type MCPStdioBlock struct {
	Command string
	Args    []string
}

type MemoryEntry struct {
	Service   string
	TimeoutMS int
}

type ModelSlots map[string]string

type Pod struct {
	Name                  string
	Master                string
	SequentialConformance bool // when true, shared handle IDs across services are allowed (sequential conformance spikes only)
	Services              map[string]*Service
	Compose               map[string]interface{} // preserved top-level compose keys except x-claw and services
	ClawAPI               *ClawAPIConfig
	Clawdash              *ClawdashConfig // runtime-only dashboard sidecar config, injected by claw up
	DisableClawdash       bool            // runtime-only operator opt-out, before principal generation
	// RunNetwork is the runtime-only Docker network name shared by cllama and
	// per-run workers. Set by claw up only when per-run templates exist.
	RunNetwork    string
	Context       *ContextConfig
	ChannelMemory *ChannelMemoryConfig
	Principals    []PodPrincipal
	AlertWebhooks []string // pod-scoped Discord webhook URLs for pool-transition alerts
	AlertMentions []string // pod-scoped @-mention targets for alerts (e.g. "@wojtek", "@infra")
}

type PodPrincipal struct {
	Name            string   `yaml:"name"`
	Verbs           []string `yaml:"verbs"`
	Scope           string   `yaml:"scope,omitempty"`
	Services        []string `yaml:"services,omitempty"`
	ClawIDs         []string `yaml:"claw_ids,omitempty"`
	ComposeServices []string `yaml:"compose_services,omitempty"`
	InjectInto      string   `yaml:"inject-into,omitempty"`
}

type RunLimits struct {
	MaxRuntime     time.Duration
	MaxAuthority   time.Duration
	MaxTaskBytes   int
	MaxResultBytes int
	Memory         string
	Pids           int
}

type Service struct {
	Image       string
	Compose     map[string]interface{} // preserved compose service keys except x-claw
	Claw        *ClawBlock
	Environment map[string]string
	Expose      []string // ports exposed to other containers (from compose expose:)
	Ports       []string // container-side ports from compose ports: (host:container or plain container)
}

type ToolPolicyConfig struct {
	MaxRounds        *int
	TimeoutPerToolMS *int
	TotalTimeoutMS   *int
}

type ToolPolicyEntry struct {
	Service string
	Allow   []string
}