-- lab_hosts — correction D: the abstraction that keeps Docker connectivity out of code.
-- See docs/LAB_ARCHITECTURE.md §3/§4 and docs/PHASE1_PLATFORM_FOUNDATION.md §2.

CREATE TABLE IF NOT EXISTS lab_hosts (
  lab_host_id    TEXT PRIMARY KEY,
  display_name   TEXT NOT NULL,
  endpoint       TEXT NOT NULL,        -- 'unix:///var/run/docker.sock' (dev) or
                                        -- 'tcp://10.x.x.x:2376' (prod, TLS-verified)
  tls_ca_path    TEXT,                 -- null for the local-socket dev case
  tls_cert_path  TEXT,
  tls_key_path   TEXT,
  enabled        BOOLEAN NOT NULL DEFAULT true,
  created_at     TIMESTAMPTZ NOT NULL DEFAULT now()
  -- Future (not Phase 1): capacity/status columns for real scheduling once there's more
  -- than one host. Phase 1 selects "the one enabled row" — no scheduler.
);