@crvouga/dev-fleet 0.0.0-stage → 0.2.0

package/cliproxy/clients/bootstrap.py

@@ -0,0 +1,143 @@
+#!/usr/bin/env python3
+"""Opt-in launchers, preserving all existing native client configuration."""
+
+import hashlib
+import subprocess
+import argparse, getpass, json, os, pathlib, shutil, sys, urllib.request
+
+p = argparse.ArgumentParser()
+p.add_argument("--endpoint")
+p.add_argument("--model")
+p.add_argument("--claude-model")
+p.add_argument("--uninstall", action="store_true")
+p.add_argument("--validate", action="store_true")
+a = p.parse_args()
+launcher = pathlib.Path(__file__).resolve().with_name("launcher.py")
+if not a.validate and not a.uninstall:
+    try:
+        source_repo = launcher.parents[2]
+        tracked = subprocess.run(
+            [
+                "git",
+                "-c",
+                "safe.directory=" + str(source_repo),
+                "-C",
+                str(source_repo),
+                "ls-files",
+                "--error-unmatch",
+                "--",
+                "cliproxy/clients/bootstrap.py",
+                "cliproxy/clients/launcher.py",
+            ],
+            capture_output=True,
+        )
+        if tracked.returncode or not launcher.is_file():
+            raise ValueError("Untracked launcher")
+    except (OSError, IndexError, ValueError):
+        sys.exit(
+            "Run bootstrap from the repository: bootstrap.py and launcher.py must be Git-tracked."
+        )
+home = pathlib.Path.home()
+config = home / ".config/cliproxy-fleet"
+bins = home / ".local/bin"
+if a.uninstall:
+    for name in ["codex-fleet", "claude-fleet", "opencode-fleet"]:
+        f = bins / name
+        if f.exists() and "cliproxy-fleet launcher" in f.read_text():
+            f.unlink()
+    # Keep the credential for deliberate reuse, not accidental credential loss.
+    print(
+        "Removed fleet launchers. Native settings unchanged. Remove ~/.config/cliproxy-fleet when no longer needed."
+    )
+    sys.exit()
+os.umask(0o077)
+config.mkdir(parents=True, exist_ok=True)
+config.chmod(0o700)
+bins.mkdir(parents=True, exist_ok=True)
+if a.validate:
+    settings = json.loads((config / "settings.json").read_text())
+    key = (config / "client-key").read_text().strip()
+    req = urllib.request.Request(
+        settings["endpoint"].rstrip("/") + "/v1/models",
+        headers={"Authorization": "Bearer " + key, "User-Agent": "cliproxy-fleet/1.0"},
+    )
+    with urllib.request.urlopen(req, timeout=20) as r:
+        data = json.load(r)
+    print("Authenticated model listing passed; model IDs:")
+    print("\n".join(m["id"] for m in data.get("data", [])))
+    sys.exit()
+if not a.endpoint or not a.model:
+    p.error("--endpoint and --model are required; choose actual available model IDs")
+if not a.endpoint.startswith("https://"):
+    p.error("Endpoint must use HTTPS")
+previous = (
+    json.loads((config / "settings.json").read_text())
+    if (config / "settings.json").exists()
+    else {}
+)
+generator_sha256 = hashlib.sha256(pathlib.Path(__file__).read_bytes()).hexdigest()
+settings = {
+    "endpoint": a.endpoint.rstrip("/"),
+    "generator_repository": "https://github.com/crvouga/dev-fleet",
+    "generator_sha256": generator_sha256,
+    "model": a.model,
+    "claude_model": a.claude_model or previous.get("claude_model"),
+}
+keyfile = config / "client-key"
+if not keyfile.exists():
+    key = getpass.getpass(
+        "Fleet client API key (hidden; NOT provider OAuth or management key): "
+    )
+    if len(key) < 32:
+        sys.exit("Client key must contain at least 32 characters")
+    keyfile.write_text(key + "\n")
+    keyfile.chmod(0o600)
+(config / "settings.json").write_text(json.dumps(settings, indent=2) + "\n")
+# Use SDK-specific protocols; users select the launcher explicitly.
+opencode = {
+    "$schema": "https://opencode.ai/config.json",
+    "provider": {
+        "fleet-responses": {
+            "npm": "@ai-sdk/openai",
+            "name": "Fleet (Responses)",
+            "options": {
+                "baseURL": settings["endpoint"] + "/v1",
+                "apiKey": "{env:CLIPROXY_API_KEY}",
+            },
+            "models": {a.model: {"name": a.model}},
+        },
+        "fleet-claude": {
+            "npm": "@ai-sdk/anthropic",
+            "name": "Fleet (Claude)",
+            "options": {
+                "baseURL": settings["endpoint"] + "/v1",
+                "apiKey": "{env:CLIPROXY_API_KEY}",
+            },
+            "models": {a.claude_model: {"name": a.claude_model}},
+        },
+    },
+    "model": "fleet-responses/" + a.model,
+}
+if not settings["claude_model"]:
+    opencode["provider"].pop("fleet-claude")
+else:
+    opencode["provider"]["fleet-claude"]["models"] = {
+        settings["claude_model"]: {"name": settings["claude_model"]}
+    }
+(config / "opencode.json").write_text(json.dumps(opencode, indent=2) + "\n")
+launcher = pathlib.Path(__file__).resolve().with_name("launcher.py")
+if not launcher.is_file():
+    sys.exit(
+        "Run bootstrap from the repository checkout; tracked launcher.py is required."
+    )
+
+for name in ["codex-fleet", "claude-fleet", "opencode-fleet"]:
+    f = bins / name
+    if f.exists() and "cliproxy-fleet launcher" not in f.read_text():
+        sys.exit("Refusing to overwrite unrelated launcher: " + str(f))
+    if f.exists() or f.is_symlink():
+        f.unlink()
+    f.symlink_to(launcher)
+print(
+    "Installed opt-in launchers in ~/.local/bin. Native client settings preserved. Run bootstrap.py --validate."
+)

package/cliproxy/clients/launcher.py

@@ -0,0 +1,57 @@
+#!/usr/bin/env python3
+# cliproxy-fleet launcher
+# Tracked source: crvouga/dev-fleet cliproxy/clients/launcher.py
+import json, os, pathlib, sys
+
+r = pathlib.Path.home() / ".config/cliproxy-fleet"
+s = json.loads((r / "settings.json").read_text())
+os.environ["CLIPROXY_API_KEY"] = (r / "client-key").read_text().strip()
+name = pathlib.Path(sys.argv[0]).name
+args = sys.argv[1:]
+if name == "codex-fleet":
+    args = [
+        "codex",
+        "-c",
+        'model_provider="fleet"',
+        "-c",
+        'model_providers.fleet.name="Fleet"',
+        "-c",
+        "model_providers.fleet.base_url=" + json.dumps(s["endpoint"] + "/v1"),
+        "-c",
+        'model_providers.fleet.env_key="CLIPROXY_API_KEY"',
+        "-c",
+        'model_providers.fleet.wire_api="responses"',
+        "-c",
+        "model_providers.fleet.requires_openai_auth=false",
+        "-c",
+        "model_providers.fleet.supports_websockets=false",
+        "-m",
+        s["model"],
+        *args,
+    ]
+elif name == "claude-fleet":
+    if not s.get("claude_model"):
+        sys.exit(
+            "No Claude model configured. Add an authorized Claude account and rerun bootstrap with --claude-model MODEL_ID."
+        )
+    for k in [
+        "ANTHROPIC_API_KEY",
+        "CLAUDE_CODE_USE_BEDROCK",
+        "CLAUDE_CODE_USE_VERTEX",
+        "CLAUDE_CODE_USE_FOUNDRY",
+    ]:
+        os.environ.pop(k, None)
+    os.environ["ANTHROPIC_BASE_URL"] = s["endpoint"]
+    os.environ["ANTHROPIC_AUTH_TOKEN"] = os.environ["CLIPROXY_API_KEY"]
+    # Pin all default model families to the explicit approved model; no cost-changing fallback.
+    for k in [
+        "ANTHROPIC_DEFAULT_OPUS_MODEL",
+        "ANTHROPIC_DEFAULT_SONNET_MODEL",
+        "ANTHROPIC_DEFAULT_HAIKU_MODEL",
+    ]:
+        os.environ[k] = s["claude_model"]
+    args = ["claude", "--model", s["claude_model"], *args]
+else:
+    os.environ["OPENCODE_CONFIG"] = str(r / "opencode.json")
+    args = ["opencode", *args]
+os.execvp(args[0], args)

package/cliproxy/compose.yaml

@@ -0,0 +1,90 @@
+name: cliproxy-fleet
+services:
+  proxy:
+    image: ${CLI_PROXY_IMAGE:?image must be pinned}
+    restart: unless-stopped
+    user: '${CLIPROXY_UID:-1000}:${CLIPROXY_GID:-1000}'
+    working_dir: /state
+    command: ['/CLIProxyAPI/CLIProxyAPI', '-config', '/state/config.yaml']
+    environment:
+      HOME: /state
+      TZ: UTC
+      MANAGEMENT_STATIC_PATH: /state/static
+    ports:
+      - '127.0.0.1:8317:8317'
+    volumes:
+      - ./state/runtime:/state
+      - ./scripts/container-health:/health:ro
+    read_only: true
+    tmpfs:
+      - /tmp:rw,noexec,nosuid,size=64m,mode=1777
+    cap_drop: [ALL]
+    security_opt: [no-new-privileges:true]
+    mem_limit: 2g
+    cpus: 2
+    pids_limit: 256
+    stop_grace_period: 45s
+    healthcheck:
+      test: ['CMD', '/health']
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 30s
+    logging:
+      driver: local
+      options:
+        max-size: '10m'
+        max-file: '3'
+  tailnet:
+    profiles: [portable-endpoint]
+    user: '${CLIPROXY_UID:-1000}:${CLIPROXY_GID:-1000}'
+    image: ${TAILSCALE_IMAGE:?image must be pinned}
+    restart: unless-stopped
+    entrypoint: ['/usr/local/bin/tailscaled']
+    command:
+      [
+        '--tun=userspace-networking',
+        '--state=/var/lib/tailscale/tailscaled.state',
+        '--socket=/tmp/tailscaled.sock',
+      ]
+    volumes:
+      - ./state/tailscale:/var/lib/tailscale
+    cap_drop: [ALL]
+    security_opt: [no-new-privileges:true]
+    mem_limit: 256m
+    cpus: 0.5
+    pids_limit: 128
+    logging:
+      driver: local
+      options:
+        max-size: '5m'
+        max-file: '2'
+  cloudflared:
+    profiles: [public-endpoint]
+    image: ${CLOUDFLARED_IMAGE:?image must be pinned}
+    user: '${CLIPROXY_UID:-1000}:${CLIPROXY_GID:-1000}'
+    restart: unless-stopped
+    command:
+      [
+        'tunnel',
+        '--no-autoupdate',
+        'run',
+        '--token-file',
+        '/run/secrets/tunnel-token',
+      ]
+    volumes:
+      - ./state/secrets/tunnel-token:/run/secrets/tunnel-token:ro
+    depends_on:
+      proxy:
+        condition: service_healthy
+    read_only: true
+    cap_drop: [ALL]
+    security_opt: [no-new-privileges:true]
+    mem_limit: 256m
+    cpus: 0.5
+    pids_limit: 128
+    logging:
+      driver: local
+      options:
+        max-size: '5m'
+        max-file: '2'

package/cliproxy/config.template.yaml

@@ -0,0 +1,70 @@
+config-version: 8
+server:
+  host: '0.0.0.0'
+  port: 8317
+  max-request-body-bytes: 33554432
+  trusted-proxies: []
+  discovery:
+    enabled: false
+management:
+  allow-remote: true
+  secret-key: REPLACE_MANAGEMENT_KEY
+  disable-control-panel: false
+  disable-auto-update-panel: true
+  panel-github-repository: https://github.com/router-for-me/Cli-Proxy-API-Management-Center
+access:
+  api-keys:
+    - REPLACE_CLIENT_KEY
+oauth:
+  auth-dir: /state/auths
+  # Fleet-owned (applied by `ops declared`): the Antigravity CLI sends its
+  # catalog ids; serve them from the Antigravity account's matching models.
+  model-alias:
+    antigravity:
+      - name: gemini-3.8-flash-high
+        alias: gemini-3.8-flash
+        fork: true
+      - name: gemini-3.1-flash-lite
+        alias: gemini-3.1-flash-lite-preview
+        fork: true
+routing:
+  # Fill first: use one account until its quota is exhausted (it then cools down), then the next.
+  # Sessions stay bound to their account while it is available; new sessions start on the first
+  # available account, so usage is not spread across accounts.
+  strategy: fill-first
+  session-affinity: true
+  retry:
+    request-retry: 2
+    # 0 tries every eligible credential, so exhausting several accounts still reaches the next one.
+    max-retry-credentials: 0
+    max-retry-interval: 30
+  cooldown:
+    disable-cooling: false
+    save-cooldown-status: true
+upstream:
+  claude:
+    # Fleet-owned (applied by `ops declared`): the proxy presents itself to
+    # Anthropic as this Claude Code version, and Anthropic refuses newer models
+    # to an older one. fleet-sync replaces the version with the `claude` pin in
+    # mise.toml on every run, so it follows the harness every node runs.
+    header-defaults:
+      user-agent: 'claude-cli/2.1.314 (external, cli)'
+      # T3 runs Claude Code under its own entrypoint label.
+      native-entrypoints: ['t3-code']
+# Legacy compatibility field intentionally retained: never switch model capability/cost.
+quota-exceeded:
+  switch-project: true
+  switch-preview-model: false
+observability:
+  logs:
+    debug: false
+    logging-to-file: false
+    request-log: false
+    logs-max-total-size-mb: 50
+    error-logs-max-files: 2
+  usage:
+    usage-statistics-enabled: true
+  pprof:
+    enable: false
+plugins:
+  enabled: false

package/cliproxy/docs/cloud-adoption.md

@@ -0,0 +1,16 @@
+# Cloud ownership and initial adoption
+
+The initial workstation setup created runtime/cloud state before this package existed. Its operational code is now maintained here; installed copies are generated from committed blobs. The one-off Tailscale API provisioning and Vault secret-writing helpers are retired and removed during first package installation. They must not return as parallel infrastructure controllers.
+
+Existing external resources are retained:
+
+- Tailscale Service `svc:ai-proxy`, endpoint `tcp:443`, stable MagicDNS origin `https://ai-proxy.tail0a1b2c.ts.net`.
+- Dedicated host tag `tag:ai-proxy` and optional client tag `tag:ai-client`, with owner/service approval and private access rules already in the tailnet. The original workstation identity/SSH/service route was preserved.
+- Existing production R2 bucket and prefix `cliproxy-fleet/restic`; bucket and credentials already belong to the OpenTofu platform.
+- Existing Vault `secret/personal/prd` fields `CLIPROXY_FLEET_RESTIC_PASSWORD`, `CLIPROXY_FLEET_CLIENT_API_KEY`, `CLIPROXY_FLEET_MANAGEMENT_KEY`, and operator-added `TAILSCALE_API_TOKEN`.
+
+The new Vault field names still require reconciliation into `packages/infra/tofu/modules/inventory/inventory.tf.json` and the **complete** OpenTofu `vault_inputs` map before a later Vault apply. Preserve their existing values and every unrelated field. Use the established `bun run vault:fix`/`vault:edit` adoption workflow and a reviewed saved plan; never seed secrets directly from this package. The Tailscale admin token is no longer consumed by the runtime package and is not mounted into containers.
+
+Before changing existing Tailscale cloud resources, adopt their identities and full policy through the platform's OpenTofu workflow. Do not replace the tailnet policy wholesale, recreate the Service/TailVIP, retag the workstation, or delete existing grants. Local `tailscale up` authorization and `serve` advertisement of an already defined resource are runtime operations; policy, tag ownership and Service definitions are infrastructure.
+
+These are outstanding cloud-IaC reconciliation items, not hidden local scripts. Provider/authentication state, source-manifest metadata and the dedicated node identity are encrypted in R2 backups; recovery credentials are independently in Vault. Do not put live state, secrets, provider tokens or infrastructure plans into Git.

package/cliproxy/docs/deployment.svg

@@ -0,0 +1,109 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1440" height="1120" viewBox="0 0 1440 1120" role="img" aria-labelledby="title description">
+  <title id="title">CLIProxyAPI deployment and integrations</title>
+  <desc id="description">Clients reach Cloudflare HTTPS with API keys. An outbound tunnel connects to cloudflared and CLIProxyAPI on the workstation. CLIProxyAPI calls the upstream AI provider. GitHub supplies tracked runtime code and OpenTofu cloud configuration. Vault supplies credentials; Restic sends encrypted backups to R2. A private Tailscale endpoint also reaches the proxy.</desc>
+  <defs>
+    <marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse"><path d="M 0 0 L 10 5 L 0 10 z" fill="#667897"/></marker>
+    <marker id="blue-arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse"><path d="M 0 0 L 10 5 L 0 10 z" fill="#2563eb"/></marker>
+    <style>
+      text { font-family: Inter, Arial, sans-serif; fill: #15243b; }
+      .heading { font-size: 32px; font-weight: 700; }
+      .subtitle { font-size: 16px; fill: #53637b; }
+      .label { font-size: 18px; font-weight: 700; }
+      .detail { font-size: 15px; fill: #53637b; }
+      .edge-label { font-size: 14px; fill: #53637b; }
+      .box { fill: white; stroke: #ccd7e6; stroke-width: 1.5; }
+      .traffic { fill: none; stroke: #2563eb; stroke-width: 3; marker-end: url(#blue-arrow); }
+      .control { fill: none; stroke: #667897; stroke-width: 2; stroke-dasharray: 7 6; marker-end: url(#arrow); }
+      .storage { fill: none; stroke: #667897; stroke-width: 2; marker-end: url(#arrow); }
+    </style>
+  </defs>
+  <rect width="1440" height="1120" rx="24" fill="#f5f8fc"/>
+  <text x="54" y="65" class="heading">CLIProxyAPI · deployment &amp; integrations</text>
+  <text x="54" y="96" class="subtitle">Stable public HTTPS · API-key authentication · GitHub-owned configuration</text>
+
+  <rect x="54" y="130" width="1332" height="104" rx="16" class="box"/>
+  <text x="80" y="164" class="label">YOUR CLIENTS</text>
+  <text x="80" y="196" class="detail">Codex CLI · Claude Code · OpenCode · other API clients</text>
+  <text x="900" y="164" class="label">MANAGEMENT DASHBOARD</text>
+  <text x="900" y="196" class="detail">Browser + separate management key</text>
+
+  <path d="M 720 234 V 290" class="traffic"/>
+  <text x="742" y="269" class="edge-label">HTTPS + client API key / management key</text>
+  <rect x="395" y="290" width="650" height="110" rx="16" fill="#eaf1ff" stroke="#9dbaf5" stroke-width="1.5"/>
+  <text x="720" y="328" text-anchor="middle" class="label">cli-proxy.example.com</text>
+  <text x="720" y="359" text-anchor="middle" class="detail">Cloudflare DNS + HTTPS + managed Tunnel</text>
+  <text x="720" y="383" text-anchor="middle" class="detail">API: /v1 · Dashboard: /management.html</text>
+
+  <rect x="330" y="462" width="770" height="392" rx="20" fill="#edf5ff" stroke="#9dbaf5" stroke-width="1.5"/>
+  <text x="356" y="499" class="label">THIS WORKSTATION</text>
+  <text x="356" y="523" class="detail">systemd + Docker Compose · pinned Git code</text>
+
+  <path d="M 720 400 V 560" class="traffic"/>
+  <rect x="550" y="419" width="340" height="27" rx="6" fill="#f5f8fc"/>
+  <text x="720" y="438" text-anchor="middle" class="edge-label">Encrypted tunnel · initiated outbound by host</text>
+  <rect x="550" y="560" width="330" height="82" rx="13" class="box"/>
+  <text x="715" y="592" text-anchor="middle" class="label">cloudflared container</text>
+  <text x="715" y="619" text-anchor="middle" class="detail">Private token file · no added host port</text>
+  <path d="M 715 642 V 686" class="traffic"/>
+  <text x="735" y="669" class="edge-label">Docker network</text>
+  <rect x="550" y="686" width="330" height="85" rx="13" fill="#2563eb"/>
+  <text x="715" y="720" text-anchor="middle" style="fill:white;font-size:21px;font-weight:700">CLIProxyAPI</text>
+  <text x="715" y="748" text-anchor="middle" style="fill:#dbeafe;font-size:15px">Port 8317 · authentication + API routing</text>
+  <rect x="355" y="686" width="161" height="85" rx="13" class="box"/>
+  <text x="435" y="720" text-anchor="middle" class="label">Working cache</text>
+  <text x="435" y="746" text-anchor="middle" class="detail">OAuth + config</text>
+  <path d="M 550 728 H 516" class="storage" marker-start="url(#arrow)"/>
+  <text x="356" y="818" class="detail">Health monitoring · Vault renewal · cloud checkpoint every 15 minutes</text>
+
+  <rect x="1140" y="686" width="246" height="104" rx="15" class="box"/>
+  <text x="1263" y="719" text-anchor="middle" class="label">AI provider</text>
+  <text x="1263" y="746" text-anchor="middle" class="detail">Currently: Codex OAuth</text>
+  <text x="1263" y="771" text-anchor="middle" class="detail">Streaming + tool calls</text>
+  <path d="M 880 729 H 1140" class="traffic" marker-start="url(#blue-arrow)"/>
+  <text x="1008" y="714" text-anchor="middle" class="edge-label">Provider authentication</text>
+
+  <rect x="54" y="540" width="235" height="110" rx="15" class="box"/>
+  <text x="171" y="574" text-anchor="middle" class="label">Vault</text>
+  <text x="171" y="601" text-anchor="middle" class="detail">Tunnel, API + backup keys</text>
+  <text x="171" y="626" text-anchor="middle" class="detail">Current S3 credentials</text>
+  <path d="M 289 580 H 550" class="control"/>
+  <rect x="345" y="557" width="170" height="24" rx="5" fill="#edf5ff"/>
+  <text x="430" y="574" text-anchor="middle" class="edge-label">Token on startup</text>
+
+  <rect x="1140" y="540" width="246" height="110" rx="15" class="box"/>
+  <text x="1263" y="574" text-anchor="middle" class="label">Tailscale endpoint</text>
+  <text x="1263" y="601" text-anchor="middle" class="detail">Existing private alternative</text>
+  <text x="1263" y="626" text-anchor="middle" class="detail">ai-proxy.tail0a1b2c.ts.net</text>
+  <path d="M 1140 600 H 1048 V 704 H 880" class="storage"/>
+
+  <rect x="54" y="903" width="330" height="112" rx="15" class="box"/>
+  <text x="219" y="938" text-anchor="middle" class="label">GitHub · crvouga/dev-fleet</text>
+  <text x="219" y="967" text-anchor="middle" class="detail">Tracked runtime code + OpenTofu</text>
+  <text x="219" y="992" text-anchor="middle" class="detail">Reviewed main-branch CI deployment</text>
+  <path d="M 384 935 H 470 V 854" class="control"/>
+  <text x="488" y="900" class="edge-label">Pinned code install</text>
+  <path d="M 105 903 H 35 V 345 H 395" class="control"/>
+  <text x="122" y="330" class="edge-label">OpenTofu owns DNS + tunnel</text>
+  <path d="M 219 903 V 650" class="control"/>
+  <rect x="129" y="828" width="179" height="43" rx="6" fill="#f5f8fc"/>
+  <text x="219" y="847" text-anchor="middle" class="edge-label">OpenTofu owns</text>
+  <text x="219" y="865" text-anchor="middle" class="edge-label">credential delivery</text>
+
+  <rect x="680" y="903" width="220" height="112" rx="15" class="box"/>
+  <text x="790" y="938" text-anchor="middle" class="label">Restic</text>
+  <text x="790" y="967" text-anchor="middle" class="detail">15-minute checkpoints</text>
+  <text x="790" y="992" text-anchor="middle" class="detail">Runtime state + revision</text>
+  <path d="M 790 854 V 903" class="storage"/>
+  <rect x="1140" y="903" width="246" height="112" rx="15" class="box"/>
+  <text x="1263" y="938" text-anchor="middle" class="label">Cloudflare R2</text>
+  <text x="1263" y="967" text-anchor="middle" class="detail">Durable recovery source</text>
+  <text x="1263" y="992" text-anchor="middle" class="detail">cliproxy-fleet/restic</text>
+  <path d="M 900 959 H 1140" class="storage"/>
+  <text x="1020" y="941" text-anchor="middle" class="edge-label">S3-compatible API</text>
+
+  <path d="M 55 1065 H 107" class="traffic"/>
+  <text x="120" y="1070" class="detail">Inference traffic · responses return along the same path</text>
+  <path d="M 710 1065 H 762" class="control"/>
+  <text x="775" y="1070" class="detail">Configuration / credential delivery</text>
+  <text x="54" y="1100" class="detail">The public URL stays stable when the primary host moves. This workstation must remain online to serve requests.</text>
+</svg>