{
  "apiVersion": "v1",
  "kind": "ConfigMap",
  "metadata": {
    "name": "hwlab-dev-health-contract",
    "namespace": "hwlab-dev",
    "labels": {
      "app.kubernetes.io/name": "hwlab-dev-health-contract",
      "hwlab.pikastech.local/profile": "dev"
    }
  },
  "data": {
    "endpoint": "http://74.48.78.17:16667",
    "cloud-api": "GET /health/live via hwlab-edge-proxy then hwlab-cloud-api:6667",
    "cloud-api-db": "DEV DB config gate requires HWLAB_CLOUD_DB_URL from Secret hwlab-cloud-api-dev-db/database-url and HWLAB_CLOUD_DB_SSL_MODE=disable. Runtime readiness dials the redacted host parsed from the Secret URL and reports endpointSource=secret-url-host. cloud-api-db is an optional desired alias only until this repo owns Service plus Endpoint or EndpointSlice manifests and rollout/apply contract; health reports env presence, env injection, redacted connection attempt/result, and liveConnected without exposing secret values",
    "cloud-web": "GET /health/live on hwlab-cloud-web:8080; consumes cloud-api only",
    "agent": "hwlab-cloud-api authorizes Code Agent sessions and dispatches execution to AgentRun v0.1; no HWLAB-owned agent manager/worker service is deployed",
    "edge-proxy": "hwlab-edge-proxy:6667 exposes /health/live and proxies DEV endpoint traffic to hwlab-cloud-api",
    "runtime-substitute-policy": "Do not replace HWLAB runtime with UniDesk backend, provider-gateway, or microservice proxy"
  }
}