node

type Config struct {
	// Server is the control plane base URL, PODIUM_NODE_SERVER.
	Server string `yaml:"server"`
	// Transport is PODIUM_NODE_TRANSPORT: dev only in MVP-0.
	Transport string `yaml:"transport"`
	// DataDir holds the node identity and each task's state, PODIUM_NODE_DATA_DIR.
	DataDir string `yaml:"data_dir"`
	// Labels are advertised at enrollment and used for scheduling, PODIUM_NODE_LABELS
	// (comma-separated).
	Labels []string `yaml:"labels"`
	// MaxTasks is the concurrency budget the scheduler assigns against,
	// PODIUM_NODE_MAX_TASKS. Zero would mean this node never gets work.
	MaxTasks int `yaml:"max_tasks"`
	// EnrollToken is consumed on the first run only, PODIUM_NODE_ENROLL_TOKEN.
	EnrollToken string `yaml:"enroll_token"`
	// LocalToken is the shared bearer token of the local transport, PODIUM_NODE_LOCAL_TOKEN.
	LocalToken string `yaml:"local_token"`
	// TSAuthKey is the *Tailscale* auth key, PODIUM_NODE_TS_AUTHKEY or TS_AUTHKEY: reusable,
	// pre-approved, tagged tag:podium-node. It is read on the first run only, and it is a
	// different thing from EnrollToken, which is Podium's own single-use secret.
	// SENSITIVE: never log it.
	TSAuthKey string `yaml:"ts_auth_key"`
	// TSHostname overrides the Tailscale device name, PODIUM_NODE_TS_HOSTNAME. Empty derives
	// it from the machine's hostname.
	TSHostname string `yaml:"ts_hostname"`
	// ImageCachePrune turns on the LRU image cache prune, PODIUM_NODE_IMAGE_CACHE_PRUNE.
	// It is off by default and must be turned on deliberately: a developer running a node
	// on a laptop shares that Docker engine with the rest of their work, and no amount of
	// disk pressure justifies deleting an image out from under it. See docs/node-setup.md.
	ImageCachePrune bool `yaml:"image_cache_prune"`
	// ImageCacheHighWatermark is the disk-usage fraction above which pruning starts, when
	// pruning is enabled at all: PODIUM_NODE_IMAGE_CACHE_HIGH_WATERMARK.
	ImageCacheHighWatermark float64 `yaml:"image_cache_high_watermark"`
	// MetricsListen serves /healthz, /readyz and /metrics, PODIUM_NODE_METRICS_LISTEN.
	MetricsListen string `yaml:"metrics_listen"`
	// DockerHost overrides the engine endpoint, PODIUM_NODE_DOCKER_HOST. Empty means
	// the usual DOCKER_HOST / docker context / default socket resolution.
	DockerHost string `yaml:"docker_host"`
	// ExitOnDrain makes the daemon exit 0 once a drain has been requested and the last
	// running task has finished, PODIUM_NODE_EXIT_ON_DRAIN or --exit-on-drain. It is the
	// upgrade path: a supervisor restarts the process on the new binary. Without it a
	// drained node stays connected and idle, which is what an operator taking a machine
	// out of service for maintenance wants.
	ExitOnDrain bool `yaml:"exit_on_drain"`
	// AllowPrivilegedSidecars honours a spec's `privileged: true` on a sidecar,
	// PODIUM_NODE_ALLOW_PRIVILEGED_SIDECARS or --allow-privileged-sidecars. It is off by
	// default because such a container is root on this machine's kernel: none of the
	// sandbox every other task runs under applies to it, and a spec author must not be
	// able to opt into that from a YAML file. It is what a docker-in-docker sidecar
	// needs. Turn it on only on a machine dedicated to that, and pair it with a label
	// (--labels privileged) so the specs that need it are the only ones that land here.
	// See docs/security.md.
	AllowPrivilegedSidecars bool `yaml:"allow_privileged_sidecars"`
}

type HostFacts struct {
	Hostname      string
	CPUCores      int32
	MemoryMB      int64
	DockerVersion string
}

type Identity struct {
	NodeID string `json:"node_id"`
	// SENSITIVE: never log. The server stores only its SHA-256.
	NodeKey string `json:"node_key"`
}

type Node struct {
	// contains filtered or unexported fields
}

type UpgradeOptions struct {
	// Version is the release tag, "v0.3.1". The leading v is optional.
	Version string
	// BaseURL defaults to DefaultReleaseBaseURL. A test — or an air-gapped mirror — points
	// it somewhere else.
	BaseURL string
	// GOOS and GOARCH default to this process's.
	GOOS, GOARCH string
	// HTTPClient defaults to http.DefaultClient.
	HTTPClient *http.Client
}