# bridged configuration (example). Copy to bridged.yaml and adjust.
#
# bridged is the sole gateway between primary/worker Claude sessions and herdr.
# It is NOT a Claude process and must never carry ANTHROPIC_BASE_URL.

# REST + MCP listen address. Keep it on loopback — bridged is same-host in Stage-1.
bind:
  host: 127.0.0.1
  port: 8765

# herdr Unix socket. Omit to use the client default
# (${HERDR_SOCKET_PATH:-~/.config/herdr/herdr.sock}).
herdrSocket: ~/.config/herdr/herdr.sock

# How worker sessions are spawned. Define one or more named profiles (backends) under
# `workers`; each key is the profile name (also the ccs profile). `defaultWorker` picks
# which one a no-argument spawn uses (bridge_spawn with no profile / POST /workers).
#
# Shared knobs (placement/workspace/tabLabel) can be repeated per profile; they usually match.
#   placement: tab   → each worker lands in its OWN tab in a dedicated worker space (default).
#                      Use `pane` for the legacy behaviour (split the focused tab).
#   mcpUrl           → bridged mounts the bridge MCP (--mcp-config, inline) + reply charter
#                      (--append-system-prompt) as launch flags; nothing is written to the profile.
#   tokenEnv         → host env var holding the worker's auth token (value never stored in config);
#                      omit for a backend that needs no token (e.g. a local ollama).
#   cwd              → pin this profile's working directory (CB-112). Omit to inherit the primary's
#                      cwd on an MCP spawn, else the daemon's cwd — never $HOME. See
#                      docs/Worker-Startup-and-Trust.md.
# Put `defaultMode: "auto"` in each ccs profile so the worker runs autonomously.
workers:
  gx10:                              # ccs profile name (NOT a hostname)
    baseUrl: http://gx01.gw:8000     # the vLLM host this profile targets (gx00.gw / gx01.gw)
    model: coder
    placement: tab
    workspace: bridged-workers
    tabLabel: "worker: {profile} #{n}"  # {profile}/{model}/{n} substituted; {n} keeps sibling tabs distinct
    mcpUrl: http://127.0.0.1:8765/mcp
    tokenEnv: BRIDGED_WORKER_TOKEN
    argv: ["ccs", "gx10"]
  ollama:
    baseUrl: http://ollama.ltms.dev  # local/self-hosted; usually no token
    placement: tab
    workspace: bridged-workers
    tabLabel: "worker: {profile} #{n}"
    mcpUrl: http://127.0.0.1:8765/mcp
    argv: ["ccs", "ollama"]
defaultWorker: gx10

# Subscription boundary. A worker's base_url host MUST be one of these; the primary
# must carry none. Every profile above must have its host listed here.
guard:
  offSubscriptionHosts:
    - gx00.gw
    - gx01.gw
    - ollama.ltms.dev