fleetreg

type Asset struct {
	Kind    string `json:"kind"`
	Name    string `json:"name"`
	Display string `json:"display,omitempty"`
	Detail  string `json:"detail,omitempty"`
}

type ClusterInfo struct {
	// Placement is one of the constants above.
	Placement string `json:"placement"`
	// Endpoint is the apiserver URL as THIS host reaches it. For a peer-hosted
	// plane that is a loopback address whose port is a local tunnel artifact —
	// meaningful for debugging this host, meaningless as a cluster identity,
	// which is precisely why it is not the identity.
	Endpoint string `json:"endpoint,omitempty"`
	// ControlPlane reports whether this host runs the apiserver.
	ControlPlane bool `json:"control_plane,omitempty"`
	// Nodes are the Kubernetes node names this host registers. One host owns
	// many nodes: one k3s agent plus one per virtual-kubelet backend.
	Nodes []string `json:"nodes,omitempty"`
	// Runtimes are the enabled backends (agent, vk-native, vk-podman, …).
	Runtimes []string `json:"runtimes,omitempty"`

	// HostsControlPlane reports that this host RUNS a control plane. It is a
	// fact about the host, deliberately separate from the row's own cluster:
	// hosting and joining became independent decisions, so a host can run a
	// plane for others while being a node of somebody else's.
	//
	// ControlPlane above stays the narrower claim — "this host hosts THE
	// CLUSTER IN THIS ROW" — because that is what the inventory needs to name
	// a cluster's control-plane member.
	HostsControlPlane bool `json:"hosts_control_plane,omitempty"`
	// ControlPlaneEndpoint is where that hosted plane's tunnel listens, when
	// this host runs one.
	ControlPlaneEndpoint string `json:"control_plane_endpoint,omitempty"`

	// CA is the cluster's TLS CA bundle. Never serialized — it is read only to
	// derive the cluster identity below.
	CA []byte `json:"-"`
	// NodeToken is the k3s join token. Never serialized — it is a CREDENTIAL,
	// read only for the CA hash it embeds.
	NodeToken string `json:"-"`
}

type Config struct {
	// CloudboxURL is the base URL (e.g. https://ai.dhnt.io).
	CloudboxURL string
	// AccessToken is the per-outpost bearer JWT. It must carry
	// fleet:registry — the scope minted for a HOST reporting a fact about
	// itself, not for a user authoring a definition.
	AccessToken string
	// AgentName is the host name cloudbox knows this outpost by.
	AgentName string

	PollInterval      time.Duration
	HeartbeatInterval time.Duration
	HTTP              *http.Client

	// Catalog is indirected for tests. Nil uses the host's real registry.
	Catalog func() *fleet.Catalog
	// Skills lists the skills installed in the host's local store. Nil uses
	// the default reader.
	//
	// It reads directory names rather than importing coreutils/pkg/skills:
	// that package pulls the dhnt skill-CNL runtime, and outpost is the lean
	// mesh supervisor. A name is all the inventory needs — a peer asking
	// "does host-a have the conductor skill" wants a yes, not the procedure.
	Skills func() []string

	// Cluster reports this host's Kubernetes participation, or nil when it
	// joins none. Indirected like Catalog/Skills so the watcher stays free of
	// conf coupling and testable without a config file.
	Cluster func() *ClusterInfo
}

type PushError struct {
	Status int
	Body   string
}

type Watcher struct {
	// contains filtered or unexported fields
}