hub

type ContainResolver struct {
	// Host is the host the workspaces' serves are published on (loopback in
	// the one-container-per-agent shape).
	Host string
	// List enumerates contain workspace definitions.
	List func() ([]contain.ListEntry, error)
	// Read resolves a workspace's web config from its .env.
	Read func(name string) (contain.WebConfig, error)
	// Workspace resolves a workspace's in-container workspace path (the
	// compose x-term-llm workspace hint). A non-empty result becomes the
	// node's delegation workdir, opting the workspace in to accepting
	// hub-mediated delegations; an empty result leaves the node unable to
	// accept (default deny).
	Workspace func(name string) string
}

type Delegation struct {
	ID         string `json:"id"`
	OriginNode string `json:"origin_node"`
	TargetNode string `json:"target_node"`
	AgentName  string `json:"agent_name,omitempty"`
	// Prompt is stored truncated (see delegationPromptLimit) for audit; the
	// full prompt only travels to the target job's instructions.
	Prompt string `json:"prompt,omitempty"`
	Model  string `json:"model,omitempty"`
	Cwd    string `json:"cwd,omitempty"`
	// JobID/RunID identify the jobs-v2 job and run on the TARGET node.
	JobID  string `json:"job_id,omitempty"`
	RunID  string `json:"run_id,omitempty"`
	Status string `json:"status"`
	// Depth is 1 for a direct delegation and parent depth+1 for delegations
	// created with parent_delegation_id. Chain lists the node ids involved
	// from the root origin through this delegation's target, used to refuse
	// delegation loops.
	Depth    int      `json:"depth"`
	Chain    []string `json:"chain,omitempty"`
	ParentID string   `json:"parent_delegation_id,omitempty"`
	// Response holds the target run's final response (truncated) once the
	// delegation reaches a terminal status.
	Response  string    `json:"response,omitempty"`
	Error     string    `json:"error,omitempty"`
	CreatedAt time.Time `json:"created_at"`
	UpdatedAt time.Time `json:"updated_at"`
}

type DelegationPolicy struct {
	Enabled     bool     `json:"enabled,omitempty" yaml:"enabled"`
	To          []string `json:"to,omitempty" yaml:"to"`
	AcceptFrom  []string `json:"accept_from,omitempty" yaml:"accept_from"`
	Workdir     string   `json:"workdir,omitempty" yaml:"workdir"`
	MaxInFlight int      `json:"max_in_flight,omitempty" yaml:"max_in_flight"`
	// AllowedAgents lists agent names origins may request on this node.
	// Empty means only DefaultDelegationAgent; "*" allows any plain agent
	// name, but path-like names (containing a separator or "..") always
	// require an exact entry.
	AllowedAgents []string `json:"allowed_agents,omitempty" yaml:"allowed_agents"`
	// AllowedModels lists model overrides origins may request. Empty means no
	// override is accepted (the target's own default is used); "*" allows any.
	AllowedModels []string `json:"allowed_models,omitempty" yaml:"allowed_models"`
}

type DelegationStore struct {
	// contains filtered or unexported fields
}

type Node struct {
	// ID uniquely identifies the node within the hub and is used as the
	// proxy path segment (/node/<id>/...). Restricted to a path-safe charset.
	ID string `json:"id" yaml:"id"`
	// Name is the human-facing label shown on the dashboard.
	Name string `json:"name" yaml:"name"`
	// Source is the resolver that produced this node (config/contain/local).
	Source string `json:"source" yaml:"-"`
	// Connection is how the Hub reaches this node. Empty/"direct" means the Hub
	// dials URL. "reverse" means the node must dial the Hub and keep a websocket
	// open; useful for private nodes behind NAT/firewalls.
	Connection string `json:"connection,omitempty" yaml:"connection"`
	// URL is the backend origin, e.g. "http://127.0.0.1:8081". Never sent to
	// hub clients together with Token.
	URL string `json:"url" yaml:"url"`
	// BasePath is the URL prefix the node's serve is mounted under, e.g.
	// "/chat". Always rooted, no trailing slash; root-mounted serves are not
	// supported by Hub v1 because path-based proxying needs a stable prefix.
	BasePath string `json:"base_path,omitempty" yaml:"base_path"`
	// Token is the node's web bearer token. It is injected server-side by the
	// hub proxy and MUST never be marshalled into any client-facing response;
	// API handlers convert Node to a public view first.
	Token string `json:"token,omitempty" yaml:"token"`
	// Delegation is the node's cross-node delegation policy. Nil or disabled
	// means the node cannot originate or accept delegations.
	Delegation *DelegationPolicy `json:"delegation,omitempty" yaml:"delegation"`
}

type Prober struct {
	Client *http.Client
}

type Registry struct {
	// contains filtered or unexported fields
}

type Resolver interface {
	// Source returns the stable label stamped onto nodes from this resolver.
	Source() string
	// Nodes returns the current nodes for this source.
	Nodes() ([]Node, error)
}

type StaticResolver struct {
	Path string
}

type Status struct {
	// Reachable reports whether the node answered its health endpoint.
	Reachable bool `json:"reachable"`
	// State is "ok" when reachable, otherwise a short failure label
	// ("unreachable", "error <code>").
	State string `json:"state"`
	// LatencyMS is the health round-trip in milliseconds (reachable only).
	LatencyMS int64 `json:"latency_ms"`
	// Version/Agent/Capabilities are best-effort, reported by nodes whose
	// healthz includes them (newer term-llm serves, when the probe carries a
	// valid bearer token).
	Version      string   `json:"version,omitempty"`
	Agent        string   `json:"agent,omitempty"`
	Capabilities []string `json:"capabilities,omitempty"`
	// Details carries small transport-specific facts such as reverse connection
	// timestamps. It is diagnostic only and never carries credentials.
	Details map[string]string `json:"details,omitempty"`
	// Error holds the failure detail for unreachable nodes.
	Error string `json:"error,omitempty"`
}

type Store struct {
	// contains filtered or unexported fields
}