api

type A2AConfig struct {
	PublicBaseURL          string
	ProtocolVersion        string
	StreamingEnabled       bool
	AuthSchemes            []string
	Registry               *a2a.Registry
	RateLimitRPM           int
	MaxConcurrentSubscribe int
}

type AuthIdentity struct {
	Name            string // token name (bearer) or username (session)
	Role            string
	Method          string // "bearer", "session", "none"
	A2AAgentSystems []string
	AuthDisabled    bool // true when no auth is configured instance-wide
}

type AuthMode string

type IdentityAuthorizer interface {
	RequestAuthorizer
	AuthorizeWithIdentity(r *http.Request, requiredRole string) (allowed bool, statusCode int, message string, identity AuthIdentity)
}

type RequestAuthorizer interface {
	Authorize(r *http.Request, requiredRole string) (allowed bool, statusCode int, message string)
}

type ResourceAuthorizer interface {
	AuthorizeResource(r *http.Request, method, resourceType, namespace, name string) (allowed bool, statusCode int, message string)
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerOptions struct {
	Authorizer               RequestAuthorizer
	ResourceAuthorizer       ResourceAuthorizer // optional authorization hook
	Extensions               agentruntime.Extensions
	AuthMode                 AuthMode
	SessionTTL               time.Duration
	UIBasePath               string // URL path prefix for the web console (default "/")
	TrustedProxies           string // comma-separated CIDRs whose forwarding headers are trusted
	ContainerResourceCeiling resources.ContainerResourceCeiling
	CRDConflictPolicy        string // "off", "warn" (default), or "reject"
}

type Stores struct {
	Agents          *store.AgentStore
	AgentSystems    *store.AgentSystemStore
	ModelEPs        *store.ModelEndpointStore
	Tools           *store.ToolStore
	Secrets         *store.SecretStore
	SealedSecrets   *store.SealedSecretStore
	SealingKeys     *store.SealingKeyStore
	Memories        *store.MemoryStore
	ContextAdapters *store.ContextAdapterStore
	Policies        *store.AgentPolicyStore
	AgentRoles      *store.AgentRoleStore
	ToolPerms       *store.ToolPermissionStore
	ToolApprovals   *store.ToolApprovalStore
	TaskApprovals   *store.TaskApprovalStore
	Tasks           *store.TaskStore
	TaskSchedules   *store.TaskScheduleStore
	TaskWebhooks    *store.TaskWebhookStore
	WebhookDedupe   *store.WebhookDedupeStore
	Workers         *store.WorkerStore
	McpServers      *store.McpServerStore
	EvalDatasets    *store.EvalDatasetStore
	EvalRuns        *store.EvalRunStore
	LocalAdmins     *store.LocalAdminStore
	APITokens       *store.APITokenStore
	AuthSessions    *store.AuthSessionStore
}