mcpserver

type Dependencies struct {
	// Sandbox is the sandbox lifecycle service consumed by sandbox.* handlers.
	Sandbox sandboxService

	// Instance is the guest service consumed by instance.* handlers.
	Instance instanceService

	// Network is the network service consumed by net.* handlers.
	Network networkService

	// Image is the catalog service consumed by image.list and instance.create.
	Image imageService

	// Desktop proxies the guest Driver and publishes screenshot URLs.
	Desktop desktopService
}

type Options struct {
	// Version is the release version reported in the server implementation info.
	Version string

	// Deps carries the shared services the server's capabilities need.
	Deps Dependencies

	// Logger receives server diagnostics. Nil selects a text handler writing
	// to [os.Stderr].
	//
	// WARNING: a logger must never write to [os.Stdout]. The stdio transport
	// reserves stdout for the JSON-RPC message stream, so a single log line
	// there corrupts the protocol. Writing to stderr (the default) is safe for
	// every transport.
	Logger *slog.Logger

	// Resolver resolves the trusted invocation subject from host-owned context.
	// There is no default. The stdio command supplies a process-owned
	// [hostmcp.StaticSubject]; the http command supplies [hostmcp.ContextSubject]
	// and installs identity on each request.
	Resolver hostmcp.InvocationResolver

	// Runtime configures the CodeMode catalog, authorizer, and execution
	// budgets. There is no default authorizer: the CLI supplies
	// [github.com/meigma/codemode/authz.AllowAll]. Zero MaxExecutionTime and
	// MaxNativeCalls receive slice-1 defaults (15m / 1000) before Build; other
	// zero-valued limit fields receive CodeMode defaults at Build.
	Runtime codemode.Options
}