server

type CSRFTokenKeyType struct{}

type Deps struct {
	DB  *sql.DB
	Cfg *config.Config

	// Stores — embedded so modules can access deps.LogStore directly.
	store.Stores

	// Infrastructure
	Registry     *connector.Registry
	Queue        *jobs.Queue
	WatchMetrics *watcher.WatchMetrics

	// ToolCatalog provides the MCP tool catalog for the tools page/API.
	// Typed as interface to avoid importing internal/mcp.
	ToolCatalog ToolCatalogProvider

	// PageRouter is the top-level router group for page routes (with auth
	// and onboarding-redirect middleware already applied). Modules that
	// need to register HTML page handlers use this instead of the API
	// sub-router passed to Mount.
	PageRouter chi.Router

	// AdminPageRouter is the top-level router group for admin-only page
	// routes (with auth, onboarding-redirect, and RequireAdmin middleware
	// already applied). Modules that need admin HTML pages use this.
	AdminPageRouter chi.Router

	// APIRouter is the top-level /api router (with decompression and CORS
	// but no session auth). Modules use this to register routes that need
	// API key auth instead of session auth (webhooks, agent endpoints).
	APIRouter chi.Router

	// APIKeyAuth is middleware that validates requests using the configured
	// API key. Modules apply this on webhook/ingestion routes that accept
	// machine-to-machine traffic instead of browser sessions.
	APIKeyAuth func(http.Handler) http.Handler

	// APIRateLimiter is rate-limiting middleware for API endpoints.
	APIRateLimiter func(http.Handler) http.Handler

	// RootRouter is the top-level chi.Router (before any auth middleware
	// groups). Modules that need to register unauthenticated routes
	// (e.g. login, register, onboarding) use this.
	RootRouter chi.Router

	// LoginLimiter is rate-limiting middleware for login/register endpoints.
	LoginLimiter func(http.Handler) http.Handler

	// StartedAt records when the server process started (for uptime calculation).
	StartedAt time.Time
}

type Module struct {
	// Name is a human-readable identifier (e.g., "errors", "watches").
	Name string

	// Mount registers the domain's routes on the given router.
	Mount func(r chi.Router, deps *Deps)
}

type ToolCatalogCategory struct {
	Name        string
	Description string
	Tools       []ToolCatalogEntry
}

type ToolCatalogEntry struct {
	Name        string
	Description string
	Access      string
	Requires    string
}

type ToolCatalogProvider interface {
	CategoriesForDisplay() []ToolCatalogCategory
}