GetHarnessConfigBySlug retrieves a harness config by its slug and scope. Returns ErrNotFound if the harness config doesn't exist.

GetMeta retrieves secret metadata without the value.

GetProjectProviders returns all providers to a project.

HealthCheck retrieves health status.

Labels returns the value of the "labels" field in the mutation.

ListAgents returns agents in a project.

ListSecrets returns secret metadata matching the filter criteria. Note: EncryptedValue is NOT populated in the returned secrets.

loadSingleFileVersioned loads a single settings file from dir into a VersionedSettings struct. Unlike LoadVersionedSettings, this does NOT merge defau

NewControlChannelManager creates a new control channel manager.

NewHeartbeatService creates a new heartbeat service. The client must be an authenticated hubclient.RuntimeBrokerService. The manager is used to gather

NewHubHandler creates a new hub handler. Returns nil if the Hub client is not configured.

OwnerID returns the value of the "owner_id" field in the mutation.

Parse converts a harness event payload into a normalized Event using the mapping spec. Common fields (prompt, tool_name, message, etc.) are always ext

Put stores template files in the cache under their content hash. files maps relative file paths to their content. It returns the path to the stored di

ReadProjectMarker reads and parses a .scion marker file.

Revoked returns the value of the "revoked" field in the mutation.

ScopeType returns the value of the "scope_type" field in the mutation.

Update allows overriding fields `UPDATE` values. See the ProjectSyncStateCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the ProjectSyncStateCreateBulk.OnConflict documentation for more info.

UpdateTaskState updates a task's state and updated_at timestamp. Terminal states (completed, failed, canceled, rejected) are protected: once a task re

UpdatedBy returns the value of the "updated_by" field in the mutation.

Version returns the value of the "version" field in the mutation.

WriteJSON marshals v to JSON and writes it to the WebSocket connection. This method is thread-safe.

gcpSecretName builds a sanitized GCP SM secret ID from the scion secret identity. Format: scion-{scope}-{sha256(hubID:scopeID)[:12]}-{name} The hubID

getEvent returns an event by ID (test helper, no error).

makeTestJWT builds a minimal JWT with the given expiry for testing.

============================================================================= JSON helpers Several columns are stored as raw JSON strings (matching t

methodURL constructs the full URL for a Telegram Bot API method.

--- Test helpers --- newFollowUpTestBridge creates a Bridge wired to a mock hub client and real SQLite store.

newStore returns a CompositeStore backed by a fresh, isolated Postgres schema with a pool large enough that the suite's concurrent writers genuinely o

newTestAgentStore returns a fresh Ent-backed AgentStore with a single project seeded to satisfy the required project FK. MaxOpenConns is pinned to 1 s

resolveTargetAgents determines which agents a message should be routed to. Returns a deduplicated list of agent slugs and whether @all was used. Thre

route decides how to deliver a dispatch for brokerID. Stateless local broker identities represent a shared, replica-independent runtime capability and

sessionString is a helper to safely extract a string from session values.

setupIntegrationTest creates a test environment with: - An in-memory SQLite store with migrations applied - A Hub test server with dev auth - A Channe

stripMentions removes @botUsername and @agentSlug mentions from text, returning clean content. Uses regex-based matching to preserve all whitespace an

validHTTPHook returns a minimal valid http hook for test setup.

writeError writes a JSON error response.

Annotations of the Skill.

ApplyAuth adds HMAC authentication headers to the request.

BootstrapHarnessConfigsFromDir imports or updates local harness configs from a directory into the Hub's database and storage. On first run it imports

BootstrapTemplatesFromDir imports or updates local templates from a directory into the Hub's database and storage. On first run it imports all templat

ClaimRuntimeBrokerConnection records this hub instance as the owner of the broker's live control-channel socket. The newest connection wins (unconditi

DefaultControlChannelConfig returns the default control channel configuration.

EventType returns the value of the "event_type" field in the mutation.

GetGitProjectExternalAgentsDir returns the external agents directory for a git project. Git projects store agent homes externally at ~/.scion/project-

Integration returns the value of the "integration" field in the mutation.

IsSharedWorkspace returns true if this is a git project configured to use a single shared workspace clone instead of per-agent clones.

IsValid reports whether p is one of the defined Phase constants.

KeyHash returns the value of the "key_hash" field in the mutation.

ListSharers returns the current sharer agent IDs and worktreePath for a branch. If no marker exists, sharers is nil and worktreePath is "".

Middleware returns an HTTP middleware handler that validates HMAC signatures.

New creates a new Supervisor with the given configuration.

NewAPIClient creates a new Telegram API client. The baseURL parameter allows overriding the API URL for testing.

NewAgentTokenService creates a new agent token service. If signingKey is empty, a random key is generated (suitable for development).

NewOAuthService creates a new OAuth service.

Resolve takes a batch of skill references and returns resolved skills. Errors for individual skills are returned per-skill, not as a single error, so

ResolveHarnessConfigName determines which harness-config to use for an agent. Resolution priority chain (first non-empty wins): 1. CLIFlag (--harness-

ResourceStoragePath returns the storage path for a file-based resource of the given kind, organized by scope. This is the single source of truth for t

Save writes credentials to a named file in the store directory. It enforces the dev-auth limit: only one dev-auth connection is allowed at a time.

PendingAskUser

Signal sends a signal to the child process.

Skills returns the skill operations interface.

Start subscribes to agent status events and spawns a goroutine to process them. It is safe to call multiple times; only the first call has an effect.

Status returns a snapshot of the scheduler's current state.

SubscriberID returns the value of the "subscriber_id" field in the mutation.

ToQuery adds pagination parameters to a URL query.

TriggerActivities returns the value of the "trigger_activities" field in the mutation.

Update allows overriding fields `UPDATE` values. See the MaintenanceOperationRunCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the MaintenanceOperationRunCreateBulk.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the IntegrationUpdateCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the IntegrationUpdateCreateBulk.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the NotificationSubscriptionCreate.OnConflict documentation for more info.

Update allows overriding fields `UPDATE` values. See the NotificationSubscriptionCreateBulk.OnConflict documentation for more info.

UpdateTime returns the value of the "update_time" field in the mutation.

UpdatedAt returns the value of the "updated_at" field in the mutation.

ValidateAgentToken validates a JWT and returns the claims if valid.

ValidateUserToken validates a JWT and returns the claims if valid.

agentKey returns a composite key for project-scoped agent isolation.

buildCreateRequest builds a RemoteCreateAgentRequest from the agent's store record. This is shared between DispatchAgentCreate and DispatchAgentProvis

createProjectMembersGroupAndPolicy creates an explicit members group for a project and a policy allowing members to create agents. Best-effort; failur

createTestTemplate creates a template in the store with the given files pre-populated in storage.

defaultResolver returns a resolver with a single verified hub SA.

doBootstrapRequest performs an authenticated HTTP request for bootstrap tests.

groveChannel builds the Postgres channel name for a grove id, hashing the id if the resulting identifier would exceed the Postgres length limit.

handleGroupMessage processes a group message through @-mention routing.

hasNonBotUserMention returns true if the message starts with (offset=0) a mention or text_mention entity pointing to a Telegram user who is neither th

interactionUserID extracts the Discord user ID from an interaction, handling both guild (Member) and DM (User) contexts.

isPartialMentionEntity checks whether a Telegram mention entity covers only part of a longer token in the message text. This happens when agent names