config

type AfricasTalkingConfig struct {
	Username  string
	APIKey    string
	BaseURL   string
	SenderID  string // from AT_SENDER_ID (alphanumeric or shortcode)
	Shortcode string // from AT_SHORTCODE (numeric shortcode)

	// HTTPTimeout bounds a single SMS send attempt. From AT_HTTP_TIMEOUT
	// (seconds); zero when unset, leaving the adapter to apply its default.
	HTTPTimeout time.Duration
}

type AuthConfig struct {
	JWTSecret           string
	JWTExpiration       time.Duration
	JWTRefreshWindow    time.Duration
	ChallengeExpiration time.Duration
	PINLockoutDuration  time.Duration // from PIN_LOCKOUT_SECONDS (default 900 = 15min)
}

type Config struct {
	Postgres  PostgresConfig
	Redis     RedisConfig
	Server    ServerConfig
	Stellar   StellarConfig
	Payments  PaymentsConfig
	Mobile    MobileConfig
	Auth      AuthConfig
	Shortener ShortenerConfig
}

type FonbnkConfig struct {
	ClientID     string
	ClientSecret string
	BaseURL      string
}

type MobileConfig struct {
	AfricasTalking AfricasTalkingConfig
	// SessionTimeout is the Redis TTL for a USSD session, refreshed on each
	// request. From USSD_SESSION_TIMEOUT (seconds); defaults to 5 minutes.
	SessionTimeout time.Duration
}

type MoneyGramConfig struct {
	// SEP-1 / 9 / 10 / 24 — Stellar anchor protocol
	HomeDomain        string // e.g. "stellar.moneygram.com"
	ServerSigningKey  string // pinned from TOML, validated at boot
	NetworkPassphrase string // matches StellarConfig.NetworkPassphrase
	USDCIssuer        string // matches StellarConfig.USDCIssuer
	TransferServerURL string // override, otherwise resolved from TOML

	// REST API — OAuth 2.0 client_credentials (FX rates)
	ClientID     string
	ClientSecret string
	OAuthURL     string // token endpoint
	FXRateURL    string // GET /fx-rate/v1/rates

	// Entry-rate buffers applied by the FX orchestrator, as fractions
	// (0.01 = 1 %). Nil leaves the orchestrator's own defaults in place;
	// an explicit 0 quotes raw source rates with no buffer at all.
	// From MONEYGRAM_FX_ENTRY_BUFFER_PCT and
	// MONEYGRAM_FX_ENTRY_BUFFER_PCT_FALLBACK.
	FXEntryBufferPct         *float64
	FXEntryBufferPctFallback *float64

	// Custodial wallets. AuthSecret co-signs SEP-10; FundsSecret is the SEP-24
	// account and USDC send source. Both default to TREASURY_SECRET_KEY.
	AuthSecret  string
	FundsSecret string

	// Poller cadence. Zero leaves mgpoller.DefaultConfig's value in place
	// rather than config duplicating the defaults.
	PollInterval            time.Duration // MONEYGRAM_POLL_INTERVAL (seconds)
	PollMaxBatch            int           // MONEYGRAM_POLL_MAX_BATCH
	RefundSettleMaxAttempts int           // MONEYGRAM_REFUND_MAX_ATTEMPTS
}

type PaymentsConfig struct {
	YellowCard YellowCardConfig
	Fonbnk     FonbnkConfig
	MoneyGram  MoneyGramConfig

	// EntryFXBufferPct is the flat safety margin the loan adapter applies when
	// it re-quotes the entry rate from a provider's own Quoter, as a fraction
	// (0.02 = 2 %). Nil leaves the adapter's default in place; an explicit 0
	// persists the quoted rate unbuffered. From LOAN_ENTRY_FX_BUFFER_PCT.
	//
	// Distinct from the MoneyGram orchestrator's buffers, which apply on the
	// cascade path and carry their own per-leg settings.
	EntryFXBufferPct *float64
}

type PostgresConfig struct {
	Host     string
	User     string
	Password string
	DBName   string
	Port     string
	SSLMode  string
	TimeZone string
}

type RedisConfig struct {
	Host           string
	Port           string
	Password       string
	DBNumber       int
	IdempotencyTTL time.Duration
}

type ServerConfig struct {
	ServerEnvironment string
	ServerHost        string
	CoreServerPort    string
	CreditServerPort  string
	// PublicBaseURL is the externally-reachable origin used to build SMS
	// short-links (e.g. https://microvault.outray.app). No trailing slash.
	PublicBaseURL string
}

type ShortenerConfig struct {
	// APIKey is the dub workspace API key (from DUB_API_KEY). Presence
	// enables the shortener.
	APIKey string
	// BaseURL is the dub API origin (from DUB_API_URL), set to point at a
	// self-hosted instance. Empty uses the SDK default, https://api.dub.co.
	BaseURL string
	// Domain is the short-link domain links are created under (from
	// DUB_DOMAIN). Optional; empty lets the workspace default apply.
	Domain string
	// PreviewTitle overrides the og:title in dub Custom Link Previews (from
	// DUB_PREVIEW_TITLE). Optional; empty derives it from the destination host.
	PreviewTitle string
	// PreviewDescription overrides the og:description (from
	// DUB_PREVIEW_DESCRIPTION). Optional; empty derives it from the
	// destination host and path.
	PreviewDescription string
	// ImagePreviewURL is the og:image shown in dub Custom Link Previews
	// (from DUB_IMAGE_PREVIEW_URL). Optional.
	ImagePreviewURL string
}

type StellarConfig struct {
	RpcURL string
	// AdminPublicKey is derived from AdminSecretKey at load, not read from the environment.
	AdminPublicKey          string
	AdminSecretKey          string
	TreasurySecretKey       string
	ServerSecretKey         string
	NetworkPassphrase       string
	EnableMultiSig          bool
	MultiSigLowThreshold    uint32
	MultiSigMediumThreshold uint32
	MultiSigHighThreshold   uint32
	USDCIssuer              string
	ContractID              string

	// AccountIndexBase advances account_index_seq at boot so a freshly rebuilt
	// (testnet) database hands out BIP44 derivation indices above any burned
	// on-chain. 0 (the default) leaves the sequence untouched. From
	// ACCOUNT_INDEX_BASE.
	AccountIndexBase int64
}

type YellowCardConfig struct {
	PublicKey    string
	SecretKey    string
	BaseURL      string
	BusinessID   string // Registered business ID with YellowCard
	BusinessName string // Registered business name with YellowCard
}