api

type Options struct {
	Config     *config.Config
	ConfigPath string
	Store      storage.Store
	// SessionValidator is the session lifetime bound to this router. Production
	// composition supplies the same durable management store used by approval
	// and migration; embedded/test callers retain Store as the compatibility
	// default.
	SessionValidator                    middleware.SessionValidator
	Sink                                storage.LogSink
	Hub                                 *realtime.Hub
	Secret                              string
	SetupToken                          string
	SetupTokenSource                    setup.TokenSource
	OnSitesChanged                      func([]config.SiteConfig) error
	OnEdgeChanged                       func(config.EdgeConfig) error
	OnProtectionChanged                 func(config.ProtectionConfig) error
	OnCAPTCHAProvidersChanged           func(config.CAPTCHAProvidersConfig) error
	ProtectionPolicyCoordinator         handler.ProtectionPolicyCoordinatorConsumer
	RequireProtectionPolicyCoordinator  bool
	OnAPISecChanged                     func(config.APISecConfig) error
	OnBlockPageChanged                  func(config.BlockPageConfig) error
	OnTimeSyncChanged                   func(config.TimeSyncConfig) error
	OnConfigChanged                     func(*config.Config) error
	ACMEIssuer                          acme.Issuer
	AuthState                           *handler.AuthState
	AssistantApprovals                  *ai.ApprovalStore
	ClusterIdentity                     *identity.MemoryIdentityService
	ClusterHeartbeats                   *cluster.HeartbeatRegistry
	CAPTCHAAssets                       captchaassets.Store
	Clock                               timekeeper.Clock
	TimeSync                            handler.TimeSyncService
	OTAClient                           handler.OTAClient
	OTAState                            handler.OTAStateReader
	TemporaryHTTPExecutor               netlease.TemporaryHTTPExecutor
	CWEDPDownload                       consumer.Executor
	CRPActivation                       handler.CRPActivationExecutor
	ManagementTokenConfirmationVerifier handler.ManagementTokenConfirmationVerifier
	// AssistantGateApproval is the same durable high-risk boundary used by AI
	// destructive tools. The composition root must provide it in production.
	AssistantGateApproval *ai.GateApprovalAdapter
	// ApprovalHTTP is an optional, fully configured high-risk ApprovalGate
	// transport. It is mounted only inside the authenticated management API
	// group; leaving it nil keeps the route absent rather than exposing an
	// incomplete approval implementation.
	ApprovalHTTP *handler.ApprovalHTTPHandler
	// ManagementTokenCleanupContext enables the service-owned, single cleanup
	// worker. Leave nil for embedded/test routers that manage cleanup explicitly.
	ManagementTokenCleanupContext context.Context
	// IsolateConfig makes the router own a deep-cloned configuration graph.
	// The serve command enables it so background readers never alias API writes.
	IsolateConfig bool
}