server

type APIKeyCredential struct {
	Name string     `json:"name" yaml:"name"`
	Key  string     `json:"key" yaml:"key"` // pragma: allowlist secret
	Role APIKeyRole `json:"role" yaml:"role"`
}

type APIKeyRole string

type AgentManager struct {
	// contains filtered or unexported fields
}

type AgentPipelineDefinition struct {
	ID           string              `json:"id"`
	Name         string              `json:"name"`
	Nodes        []AgentPipelineNode `json:"nodes"`
	InputSchema  PipelineSchema      `json:"input_schema,omitempty"`
	OutputSchema PipelineSchema      `json:"output_schema,omitempty"`
}

type AgentPipelineNode struct {
	ID      string `json:"id"`
	AgentID string `json:"agent_id"`
	Name    string `json:"name,omitempty"`
}

type AutoServer struct {
	// contains filtered or unexported fields
}

type AutoServerConfig struct {
	Host             string                 `yaml:"host" json:"host"`
	Port             int                    `yaml:"port" json:"port"`
	BasePath         string                 `yaml:"base_path" json:"base_path"`
	EnableWebUI      bool                   `yaml:"enable_web_ui" json:"enable_web_ui"`
	EnablePlayground bool                   `yaml:"enable_playground" json:"enable_playground"`
	EnableSchemaAPI  bool                   `yaml:"enable_schema_api" json:"enable_schema_api"`
	EnableMetricsAPI bool                   `yaml:"enable_metrics_api" json:"enable_metrics_api"`
	EnableCORS       bool                   `yaml:"enable_cors" json:"enable_cors"`
	SchemaValidation bool                   `yaml:"schema_validation" json:"schema_validation"`
	OllamaEndpoint   string                 `yaml:"ollama_endpoint" json:"ollama_endpoint"`
	LLMProviders     map[string]interface{} `yaml:"llm_providers" json:"llm_providers"`
	ServerTimeout    time.Duration          `yaml:"server_timeout" json:"server_timeout"`
	MaxRequestSize   int64                  `yaml:"max_request_size" json:"max_request_size"`
	Middleware       []string               `yaml:"middleware" json:"middleware"`
	// LogLevel controls the auto-server logger (for example, debug, info or
	// warn). An empty value defaults to info for backwards compatibility.
	LogLevel string `yaml:"log_level" json:"log_level"`

	// Security controls authentication, allowed origins and request limits,
	// using the same configuration type as Server. Nil falls back to
	// DefaultSecurityConfig.
	Security *SecurityConfig `yaml:"security" json:"security"`
}

type ExecutionStepView struct {
	NodeID    string                     `json:"node_id"`
	Step      int                        `json:"step"`
	Success   bool                       `json:"success"`
	Error     string                     `json:"error,omitempty"`
	DurationM float64                    `json:"duration_ms"`
	Attempts  int                        `json:"attempts"`
	State     map[string]core.StateValue `json:"state,omitempty"`
}

type GraphEdgeView struct {
	From        string `json:"from"`
	To          string `json:"to"`
	Conditional bool   `json:"conditional"`
	// RouteKey is set for conditional edges and names the routing key that
	// selects this destination.
	RouteKey string `json:"route_key,omitempty"`
}

type GraphManager struct {
	// contains filtered or unexported fields
}

type GraphNodeView struct {
	ID       string                 `json:"id"`
	Name     string                 `json:"name"`
	Type     string                 `json:"type"`
	IsStart  bool                   `json:"is_start"`
	IsEnd    bool                   `json:"is_end"`
	Metadata map[string]interface{} `json:"metadata,omitempty"`
}

type GraphSummaryView struct {
	ID        string   `json:"id"`
	Name      string   `json:"name"`
	StartNode string   `json:"start_node"`
	EndNodes  []string `json:"end_nodes"`
	NodeCount int      `json:"node_count"`
	EdgeCount int      `json:"edge_count"`
	Running   bool     `json:"running"`
}

type GraphTopologyView struct {
	Nodes []GraphNodeView `json:"nodes"`
	Edges []GraphEdgeView `json:"edges"`
}

type PipelineField struct {
	Type        string `json:"type"`
	Required    bool   `json:"required,omitempty"`
	Description string `json:"description,omitempty"`
}

type PipelineSchema map[string]PipelineField

type Principal struct {
	Name string     `json:"name"`
	Role APIKeyRole `json:"role"`
}

type SecurityConfig struct {
	// RequireAuth rejects requests without a valid X-API-Key.
	RequireAuth bool `json:"require_auth" yaml:"require_auth"`
	// APIKeys are the accepted values for the X-API-Key header.
	// Deprecated for production use: legacy keys are granted the admin role.
	// Use APIKeyCredentials to issue named, least-privilege keys instead.
	APIKeys []string `json:"api_keys" yaml:"api_keys"`
	// APIKeyCredentials contains named keys and their least-privilege role.
	// Store Key values in a secret manager or mounted secret, never in source.
	APIKeyCredentials []APIKeyCredential `json:"api_key_credentials" yaml:"api_key_credentials"`
	// AllowedOrigins restricts CORS and WebSocket origins. Empty means any
	// origin is accepted, which is only appropriate for local development.
	AllowedOrigins []string `json:"allowed_origins" yaml:"allowed_origins"`
	// MaxRequestBytes caps request bodies. Zero applies DefaultMaxRequestBytes.
	MaxRequestBytes int64 `json:"max_request_bytes" yaml:"max_request_bytes"`
	// PublicPaths bypass authentication (health checks, readiness probes).
	PublicPaths []string `json:"public_paths" yaml:"public_paths"`
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerConfig struct {
	Host           string        `json:"host"`
	Port           int           `json:"port"`
	ReadTimeout    time.Duration `json:"read_timeout"`
	WriteTimeout   time.Duration `json:"write_timeout"`
	MaxHeaderBytes int           `json:"max_header_bytes"`
	EnableCORS     bool          `json:"enable_cors"`
	StaticDir      string        `json:"static_dir"`
	DevMode        bool          `json:"dev_mode"`
	LogLevel       string        `json:"log_level"`

	// Security controls authentication, allowed origins and request limits.
	// Nil falls back to DefaultSecurityConfig.
	Security *SecurityConfig `json:"security"`
}