CB-111: multi-profile workers — named backends selectable at spawn

The bridge was hard-wired to one worker profile. Config now takes a 'workers'
map keyed by profile name plus 'defaultWorker'; WorkerService holds the map and
gains spawn(profile) (spawn() uses the default). Selection threads through the
surfaces: REST POST /workers ?profile= / {"profile":…} + GET /profiles; MCP
bridge_spawn {profile?} + new bridge_profiles. Each profile's base_url is
guard-checked independently, so gx10 and ollama can run side by side and you
address each worker by its returned sessionId. Backward-compatible: the legacy
singular 'worker:' block still loads as a one-entry profile map.

bridged/src/test/java/dev/ltms/bridged/config/BridgedConfigTest.java

@@ -5,6 +5,7 @@ import org.junit.jupiter.api.io.TempDir;
 
 import java.nio.file.Files;
 import java.nio.file.Path;
+import java.util.Set;
 
 import static org.junit.jupiter.api.Assertions.*;
 
@@ -46,6 +47,43 @@ class BridgedConfigTest {
         assertTrue(cfg.guard().offSubscriptionHosts().isEmpty());
     }
 
+    @Test
+    void singleWorkerBecomesAOneEntryProfileMapWithItselfAsDefault(@TempDir Path dir) throws Exception {
+        Path f = dir.resolve("single.yaml");
+        Files.writeString(f, """
+                worker:
+                  profile: ltms-local
+                  baseUrl: http://gx00.gw:8000
+                """);
+
+        BridgedConfig cfg = BridgedConfig.load(f);
+        assertEquals(Set.of("ltms-local"), cfg.workerProfiles().keySet(), "legacy worker → one profile");
+        assertEquals("ltms-local", cfg.defaultProfile());
+    }
+
+    @Test
+    void loadsMultipleWorkerProfilesWithADefault(@TempDir Path dir) throws Exception {
+        Path f = dir.resolve("multi.yaml");
+        Files.writeString(f, """
+                workers:
+                  gx10:
+                    baseUrl: http://gx10.gw:8000
+                    argv: ["ccs", "gx10"]
+                  ollama:
+                    baseUrl: http://ollama.ltms.dev
+                    argv: ["ccs", "ollama"]
+                defaultWorker: gx10
+                guard:
+                  offSubscriptionHosts: [gx10.gw, ollama.ltms.dev]
+                """);
+
+        BridgedConfig cfg = BridgedConfig.load(f);
+        assertEquals(Set.of("gx10", "ollama"), cfg.workerProfiles().keySet());
+        assertEquals("gx10", cfg.defaultProfile());
+        assertEquals("ollama", cfg.workerProfiles().get("ollama").profile(), "profile defaults to its map key");
+        assertEquals("http://gx10.gw:8000", cfg.workerProfiles().get("gx10").baseUrl());
+    }
+
     @Test
     void ignoresUnknownKeys(@TempDir Path dir) throws Exception {
         Path f = dir.resolve("future.yaml");

bridged/src/test/java/dev/ltms/bridged/mcp/BridgeMcpTest.java

@@ -12,6 +12,7 @@ import dev.ltms.bridged.worker.WorkerService;
 import io.modelcontextprotocol.spec.McpSchema;
 import org.junit.jupiter.api.Test;
 
+import java.util.Map;
 import java.util.Set;
 import java.util.concurrent.CompletableFuture;
 import java.util.concurrent.TimeUnit;
@@ -39,7 +40,7 @@ class BridgeMcpTest {
                 "ltms-local", baseUrl, "coder", null, "BRIDGED_WORKER_TOKEN", null,
                 "tab", "bridged-workers", "worker: {profile} #{n}", null);
         return new WorkerService(new AgentControl(h), new WorkspaceControl(h),
-                new SubscriptionGuard(allow), cfg, _ -> "tok");
+                new SubscriptionGuard(allow), Map.of(cfg.profile(), cfg), cfg.profile(), _ -> "tok");
     }
 
     @Test
@@ -122,7 +123,7 @@ class BridgeMcpTest {
     @Test
     void spawnReturnsTheNewWorkersSessionAndPane() {
         FakeHerdr h = new FakeHerdr();
-        McpSchema.CallToolResult res = BridgeMcp.spawn(workerService(h, "http://gx00.gw:8000", Set.of("gx00.gw")));
+        McpSchema.CallToolResult res = BridgeMcp.spawn(workerService(h, "http://gx00.gw:8000", Set.of("gx00.gw")), null);
         assertNotEquals(Boolean.TRUE, res.isError());
         String out = textOf(res);
         assertTrue(out.contains("\"sessionId\":\"term_new\""), out);
@@ -132,12 +133,32 @@ class BridgeMcpTest {
     @Test
     void spawnRejectsAnOffAllowlistProfileWithoutTouchingHerdr() {
         FakeHerdr h = new FakeHerdr();
-        McpSchema.CallToolResult res = BridgeMcp.spawn(workerService(h, "https://api.anthropic.com", Set.of("gx00.gw")));
+        McpSchema.CallToolResult res =
+                BridgeMcp.spawn(workerService(h, "https://api.anthropic.com", Set.of("gx00.gw")), null);
         assertTrue(res.isError());
         assertTrue(textOf(res).contains("subscription boundary"));
         assertFalse(h.called("agent.start"), "the guard must block before any spawn");
     }
 
+    @Test
+    void spawnRejectsAnUnknownProfileAsAnError() {
+        FakeHerdr h = new FakeHerdr();
+        McpSchema.CallToolResult res =
+                BridgeMcp.spawn(workerService(h, "http://gx00.gw:8000", Set.of("gx00.gw")), "nope");
+        assertTrue(res.isError());
+        assertTrue(textOf(res).contains("unknown worker profile"), textOf(res));
+    }
+
+    @Test
+    void profilesListsConfiguredProfilesAndDefault() {
+        FakeHerdr h = new FakeHerdr();
+        McpSchema.CallToolResult res = BridgeMcp.profiles(workerService(h, "http://gx00.gw:8000", Set.of("gx00.gw")));
+        assertNotEquals(Boolean.TRUE, res.isError());
+        String out = textOf(res);
+        assertTrue(out.contains("ltms-local"), out);
+        assertTrue(out.contains("\"default\":\"ltms-local\""), out);
+    }
+
     @Test
     void listReportsTrackedWorkers() {
         FakeHerdr h = new FakeHerdr();

bridged/src/test/java/dev/ltms/bridged/rest/BridgedAppTest.java

@@ -55,7 +55,8 @@ class BridgedAppTest {
                 placement, "bridged-workers", "worker: {profile} #{n}", null);
         AgentControl agents = new AgentControl(herdr);
         WorkerService workers = new WorkerService(
-                agents, new WorkspaceControl(herdr), new SubscriptionGuard(allow), wcfg,
+                agents, new WorkspaceControl(herdr), new SubscriptionGuard(allow),
+                Map.of(wcfg.profile(), wcfg), wcfg.profile(),
                 k -> "BRIDGED_WORKER_TOKEN".equals(k) ? "tok-abc" : null);
         Injector injector = new Injector(agents);
         poller = new StatusPoller(agents, injector, 5); // delivers when the fake reports idle
@@ -162,6 +163,24 @@ class BridgedAppTest {
                 "tab label carries the worker number so siblings stay distinct");
     }
 
+    @Test
+    void profilesEndpointListsConfiguredProfilesAndDefault() throws Exception {
+        int port = startHealthy();
+        JsonNode body = mapper.readTree(req(port, "GET", "/profiles").body());
+        assertEquals("ltms-local", body.get("default").asText());
+        assertEquals("ltms-local", body.get("profiles").get(0).asText());
+    }
+
+    @Test
+    void spawnWithAnUnknownProfileIs400() throws Exception {
+        FakeHerdr herdr = new FakeHerdr();
+        int port = start(herdr, "http://gx00.gw:8000", Set.of("gx00.gw"));
+        HttpResponse<String> res = req(port, "POST", "/workers?profile=nope");
+        assertEquals(400, res.statusCode());
+        assertEquals("unknown_profile", mapper.readTree(res.body()).get("error").asText());
+        assertFalse(herdr.called("agent.start"), "an unknown profile must not spawn anything");
+    }
+
     @Test
     void spawnWorkerReusesExistingWorkerSpace() throws Exception {
         // A space labelled "bridged-workers" already exists → no second workspace.create.

bridged/src/test/java/dev/ltms/bridged/worker/WorkerServiceTest.java

@@ -21,7 +21,7 @@ class WorkerServiceTest {
                 "ltms-local", "http://gx00.gw:8000", "coder", null, "BRIDGED_WORKER_TOKEN",
                 argv, "tab", "bridged-workers", "worker: {profile} #{n}", mcpUrl);
         return new WorkerService(new AgentControl(herdr), new WorkspaceControl(herdr),
-                new SubscriptionGuard(Set.of("gx00.gw")), cfg, _ -> null);
+                new SubscriptionGuard(Set.of("gx00.gw")), Map.of(cfg.profile(), cfg), cfg.profile(), _ -> null);
     }
 
     @SuppressWarnings("unchecked")
@@ -49,4 +49,32 @@ class WorkerServiceTest {
         service(herdr, List.of("bash", "-c", "sleep 1"), null).spawn();
         assertEquals(List.of("bash", "-c", "sleep 1"), spawnedArgv(herdr), "argv untouched without mcpUrl");
     }
+
+    private WorkerService multiProfile(FakeHerdr herdr) {
+        BridgedConfig.Worker gx10 = new BridgedConfig.Worker("gx10", "http://gx10.gw:8000", "coder",
+                null, "BRIDGED_WORKER_TOKEN", List.of("ccs", "gx10"), "tab", "bridged-workers", "w #{n}", null);
+        BridgedConfig.Worker ollama = new BridgedConfig.Worker("ollama", "http://ollama.ltms.dev", null,
+                null, "BRIDGED_WORKER_TOKEN", List.of("ccs", "ollama"), "tab", "bridged-workers", "w #{n}", null);
+        return new WorkerService(new AgentControl(herdr), new WorkspaceControl(herdr),
+                new SubscriptionGuard(Set.of("gx10.gw", "ollama.ltms.dev")),
+                Map.of("gx10", gx10, "ollama", ollama), "gx10", _ -> "tok");
+    }
+
+    @Test
+    @SuppressWarnings("unchecked")
+    void spawnPicksTheNamedProfilesBaseUrlAndArgv() {
+        FakeHerdr herdr = new FakeHerdr();
+        multiProfile(herdr).spawn("ollama");
+
+        Map<String, Object> start = (Map<String, Object>) herdr.lastCall("agent.start").params();
+        Map<String, String> env = (Map<String, String>) start.get("env");
+        assertEquals("http://ollama.ltms.dev", env.get("ANTHROPIC_BASE_URL"), "the named profile's base_url");
+        assertEquals(List.of("ccs", "ollama"), start.get("argv"), "the named profile's launch command");
+    }
+
+    @Test
+    void spawnRejectsAnUnknownProfile() {
+        FakeHerdr herdr = new FakeHerdr();
+        assertThrows(IllegalArgumentException.class, () -> multiProfile(herdr).spawn("nope"));
+    }
 }