Stage-1 walking skeleton: bridged Java daemon (herdr client + REST + guard)

Maven/Java 25 module under bridged/. End-to-end verified against live herdr 0.7.0 (protocol 14): GET /healthz and GET /sessions serve real workspace data through the socket client. - herdr client (CB-101): Unix-socket JSON-RPC via UnixDomainSocketAddress. Two contract facts pinned by tests against the real daemon: ids MUST be strings, and herdr is one-shot per connection (connection-per-call, which also makes the client lock-free). - subscription guard: worker base_url must be on the off-subscription allowlist (gx00.gw, ollama.ltms.dev); primary env must carry no base_url. - config (CB-106): Jackson YAML + Logback; example grounded in ltms-local. - REST app (CB-104 start): injectable HerdrClient so acceptance tests run on an ephemeral port with a fake herdr, no daemon/Claude in the loop. - tests: 17 unit/acceptance (mvn test) + 3 contract (mvn test -Pcontract).
2026-07-12 20:00:02 +02:00
parent b415003245
commit 93cfdb640f
18 changed files with 1035 additions and 0 deletions
@@ -0,0 +1,83 @@
+package dev.ltms.bridged.config;
+
+import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import com.fasterxml.jackson.dataformat.yaml.YAMLFactory;
+
+import java.io.IOException;
+import java.io.UncheckedIOException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.List;
+import java.util.Set;
+
+/**
+ * {@code bridged} configuration, loaded from a YAML file (see
+ * {@code bridged.example.yaml}). Unknown keys are ignored so config can grow ahead
+ * of the code.
+ *
+ * @param bind         REST/MCP listen host:port
+ * @param herdrSocket  path to herdr's Unix socket ({@code null} → client default)
+ * @param worker       worker-spawn settings
+ * @param guard        subscription-boundary allowlist
+ */
+@JsonIgnoreProperties(ignoreUnknown = true)
+public record BridgedConfig(
+        Bind bind,
+        String herdrSocket,
+        Worker worker,
+        Guard guard) {
+
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public record Bind(String host, int port) {
+        public Bind {
+            if (host == null || host.isBlank()) host = "127.0.0.1";
+            if (port <= 0) port = 8080;
+        }
+    }
+
+    /**
+     * @param profile      ccs profile a worker is spawned under (Stage-1: {@code ltms-local})
+     * @param baseUrl      the off-subscription endpoint the worker's launch line sets
+     * @param model        model alias to request from that endpoint
+     */
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public record Worker(String profile, String baseUrl, String model) {
+    }
+
+    /**
+     * Subscription boundary. Only these hosts may back a worker's
+     * {@code ANTHROPIC_BASE_URL}; the primary must carry none.
+     *
+     * @param offSubscriptionHosts hostnames allowed for worker base_urls
+     */
+    @JsonIgnoreProperties(ignoreUnknown = true)
+    public record Guard(List<String> offSubscriptionHosts) {
+        public Guard {
+            offSubscriptionHosts = offSubscriptionHosts == null ? List.of() : List.copyOf(offSubscriptionHosts);
+        }
+
+        public Set<String> hostSet() {
+            return Set.copyOf(offSubscriptionHosts);
+        }
+    }
+
+    private static final ObjectMapper YAML = new ObjectMapper(new YAMLFactory());
+
+    /** Load and validate config from {@code path}. */
+    public static BridgedConfig load(Path path) {
+        try {
+            BridgedConfig cfg = YAML.readValue(Files.readString(path), BridgedConfig.class);
+            return cfg.withDefaults();
+        } catch (IOException e) {
+            throw new UncheckedIOException("cannot read bridged config at " + path, e);
+        }
+    }
+
+    /** Fill in nested defaults so callers never see nulls for structural fields. */
+    public BridgedConfig withDefaults() {
+        Bind b = bind != null ? bind : new Bind(null, 0);
+        Guard g = guard != null ? guard : new Guard(List.of());
+        return new BridgedConfig(b, herdrSocket, worker, g);
+    }
+}