Update allows overriding fields `UPDATE` values. See the MaintenanceOperationCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the MaintenanceOperationCreateBulk.OnConflict documentation for more info.

--------------------------------------------------------------------------- Test store setup ---------------------------------------------------------

getWithQuery performs an HTTP GET request with query parameters and fallback.

newNFSTestK8sRuntime creates a KubernetesRuntime backed by a fake clientset for unit testing buildPod and related methods.

newTestBrokerV2 creates a fully wired TelegramBrokerV2 for testing. It uses a real SQLite store (temp file) and a fake Telegram API server.

DispatchAgentCreate creates and starts an agent on the runtime broker. Returns the updated agent info after creation/start.

FieldCleared returns a boolean indicating if a field with the given name was cleared in this mutation.

GetAgentHomePath returns the correct home directory path for an agent. For git projects with split storage (project-id file exists), this returns the

GetSettingsPath returns the path to the settings file in a directory, preferring YAML over JSON. Returns empty string if no settings file exists.

Key returns the value of the "key" field in the mutation.

List returns environment variables for the specified scope.

LoadGlobalConfig loads global configuration using Koanf with priority: 1. Embedded defaults 2. Global config: settings.yaml (server key) OR server.yam

LoadSettingsKoanf loads settings using Koanf with provider priority: 1. Embedded defaults (YAML) with OS-specific runtime adjustment 2. Global setting

Post performs an HTTP POST request with JSON body.

ProjectAgents cache

Shutdown flushes and shuts down all providers.

Tick performs a single lock-loop iteration. Exported for testing.

Update allows overriding fields `UPDATE` values. See the GCPServiceAccountCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the GCPServiceAccountCreateBulk.OnConflict documentation for more info.

computeContentHash computes the aggregate content hash for a set of resource files. It is a thin adapter over transfer.ComputeContentHash — the single

statusln prints an informational/progress line to stderr. See statusf for details.

Agents returns the agent operations interface.

BootstrapSource imports a resource from a ResourceSource into the Hub's storage backend and database. It applies the OverwritePolicy to decide whether

DeleteOneID returns a builder for deleting the given entity by its id.

DisplayStatus returns a single human-readable status string for backward compatibility and simple display. When phase is running and an activity is se

ExpiresAt returns the value of the "expires_at" field in the mutation.

GetHarnessConfig retrieves a harness config by ID. Returns ErrNotFound if the harness config doesn't exist.

GetProjectProvider returns a specific provider by project and broker ID. Returns ErrNotFound if the provider relationship doesn't exist.

LoadProjectState reads project state from state.yaml in the given project path. Returns an empty ProjectState if the file doesn't exist.

New opens (or creates) the SQLite database at dbPath and runs schema migrations.

NewFSResourceSource returns a ResourceSource backed by a BundledResource.

Read reads data from the stream.

RuntimeBrokers returns the runtime broker operations interface.

SetDisplayName sets the "display_name" field.

Subscribe registers a handler for messages matching a topic pattern.

Update allows overriding fields `UPDATE` values. See the EnvVarCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the EnvVarCreateBulk.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the ScheduledEventCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the ScheduledEventCreateBulk.OnConflict documentation for more info.

authzTestSetup creates a test server with the authz service and pre-populated data.

--------------------------------------------------------------------------- Helpers ------------------------------------------------------------------

mockCloudHandler is a test double for CloudHandler that doesn't require a real Cloud Logging connection.

seedTask creates and registers a task in both the store and the bridge's activeTasks map, mimicking what SendMessage does for non-blocking sends.

Active reports whether the lock is currently held.

ComputeCapabilities evaluates which actions the identity can perform on a single resource.

GetNotificationSubscriptions returns all agent-scoped subscriptions for a watched agent.

HashBytes computes the SHA-256 hash of a byte slice. Returns the hash in format "sha256:<hex>".

InjectionMode returns the value of the "injection_mode" field in the mutation.

IsHubEnabled returns true if Hub integration is enabled. Hub is considered enabled when: 1. Hub credentials (token or apiKey) AND an endpoint are pres

NewMessageBrokerProxy creates a new MessageBrokerProxy.

NewStore creates a new credential store at the given path. If path is empty, DefaultPath() is used.

Query returns a query builder for User.

Serve starts the go-plugin RPC server on the given address. The Hub's plugin manager connects to this server as a self-managed plugin. We use goplugi

SetAffinityLookup injects the affinity hint used by route(). Wired by the server to a store-backed lookup (StoreAffinityLookup).

Update allows overriding fields `UPDATE` values. See the ApiKeyCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the ApiKeyCreateBulk.OnConflict documentation for more info.

WorktreePath returns the canonical worktree path for a given agent within a shared base checkout: <hostPath>/worktrees/<agentID>.

WriteProjectID writes a project-id file to a git project's .scion directory.

doRequestWithAgentToken performs an HTTP request with an agent JWT token.

mockRuntimeDetection sets up mock functions for lookPathFunc and runCheckFunc so that only the specified runtime is reported as available. Call in tes

newTestBrokerV2WithHub creates a v2 broker with a custom hub client injected.

templateStore returns a ResourceStore for templates.

testBundledResource creates a BundledResource for testing.

Conflict writes a 409 Conflict response.

CreateBrokerSecret creates a new broker secret record. Returns ErrAlreadyExists if a secret for this broker already exists.

CreateGCPServiceAccount registers a new GCP service account. Returns ErrAlreadyExists if a SA with the same email+scope+scopeID exists.

CreateGitHubInstallation creates a new GitHub App installation record. Uses installation_id as the natural key — creating an existing one is idempoten

GetGroup retrieves a group by ID. Returns ErrNotFound if the group doesn't exist.

GetGroupMembership returns a specific membership record. Returns ErrNotFound if the membership doesn't exist.

Label prefixes log messages (e.g. "template bootstrap").

ListEnvVars returns environment variables matching the filter criteria.

LoadVersionedSettings loads settings using Koanf into VersionedSettings. Provider priority: 1. Embedded defaults (YAML) with OS-specific runtime adjus

LogAttrs returns slog attributes for structured logging of this message.

New creates a new metadata server.

NewClaudeDialect creates a new Claude dialect parser.

NewClient creates a new Hub client from environment variables. Reads SCION_HUB_ENDPOINT first, falling back to SCION_HUB_URL for legacy compat. The to

NewInProcessEventBus creates a new in-process event bus.

RegisterSharer adds agentID to the sharer list for the given branch worktree. The call is idempotent: re-registering an already-present agent is a no-

RunDomain runs every applicable test category for a single domain against stores produced by factory. Each category obtains its own fresh store.

Update allows overriding fields `UPDATE` values. See the UserAccessTokenCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the UserAccessTokenCreateBulk.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the UserCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the UserCreateBulk.OnConflict documentation for more info.