managedagent

const (
	LabelManagedBy = "agentbox.navix.sh/managed-by"
	LabelAgent     = "agentbox.navix.sh/managed-agent"

	// AnnotationOwnerAgent records the agent an env was derived for. Cross-
	// cluster ownerReferences do not exist, so this is the only link back, and
	// it is also how an orphan is found: an env carrying LabelAgent whose named
	// agent no longer exists has outlived its owner.
	//
	// A derived env is never deleted with its agent, and nothing marks it at
	// deletion time. Marking would need a finalizer, which would block deleting
	// an agent whenever its worker cluster is unreachable — trading a tidy
	// annotation for an object that cannot be removed during an outage. The env
	// also holds warm pods that someone may still be using. Reclaiming one is
	// therefore a human decision, made against this label.
	AnnotationOwnerAgent = "agentbox.navix.sh/owner-managed-agent"
)

const (
	// NamePrefix prefixes every object a ManagedAgent owns, so a Brain is
	// never mistaken for a hand-rolled Deployment of the same agent name.
	NamePrefix = "agentbox-brain-"

	// DefaultGatewayPort is the agent gateway: the one port callers use.
	DefaultGatewayPort int32 = 4099
	// DefaultWorkspaceFSPort serves attachment staging and the workspace file
	// browser. It is a separate process from the gateway, and the file panel
	// and attachment upload both stop working if it is not exposed.
	DefaultWorkspaceFSPort int32 = 8766
	// DefaultOpenCodePort is the loopback port for `opencode serve`.
	DefaultOpenCodePort int32 = 4096

	// StateRoot is where the Brain keeps everything a restart must not lose:
	// the thread map, the Claude Code transcripts and the OpenCode session DB.
	//
	// It is mounted at exactly one path, at the volume root. The runtime treats
	// a volume without its layout marker as one to convert, and converting
	// clears the root — a marker written under one subPath is invisible to the
	// others, so per-owner subPath mounts would make every restart look like a
	// fresh volume and discard the history.
	StateRoot = "/home/opencode/.local/share/opencode"
	// ClaudeConfigDir holds one JSONL transcript per session.
	ClaudeConfigDir = "/home/opencode/.local/share/claude"
	// ThreadStorePath is the gateway's thread map. Every harness builds its
	// history list from this file, so losing it loses the history even when the
	// transcripts survive.
	ThreadStorePath = ClaudeConfigDir + "/gateway/threads.json"

	// OpenCodeConfigPath is where the OpenCode harness reads its runtime
	// config. The filename is fixed by the harness.
	OpenCodeConfigPath = "/home/opencode/.config/opencode/opencode.json"

	// ManagedByValue marks every object this controller owns. The Hands
	// reconciler refuses to update a SandboxEnv that does not carry it, so a
	// user who takes manual ownership of an object keeps it.
	ManagedByValue = "agentbox-managedagent"

	// ConfigChecksumAnnotation carries a hash of everything that is NOT part of
	// the pod spec but still changes the Brain's behaviour — the referenced
	// Secrets and ConfigMaps. Without it a credential rotation leaves the old
	// value live in a running pod with nothing to indicate it.
	ConfigChecksumAnnotation = "agentbox.navix.sh/config-checksum"
)

const DefaultProviderID = "platform"