codexappgateway

type ExecGatewayClient struct {
	// contains filtered or unexported fields
}

type S3Config struct {
	Endpoint        string
	Region          string
	Bucket          string
	AccessKeyID     string
	SecretAccessKey string
	PathStyle       bool
}

type ServeConfig struct {
	InboundHMACSecret         []byte
	S3                        S3Config
	TmpRoot                   string
	IdleShutdown              time.Duration
	ExecGatewayWSURL          string
	ExecGatewayInternalURL    string
	ExecGatewayInternalSecret string
	CapTokenHMACSecret        []byte
	CapTokenTTL               time.Duration
	LogLevel                  slog.Level

	// Model provider config — written verbatim into each per-thread
	// config.toml. The codex subprocess reads ModelProviderEnvKey from its
	// own env (forwarded from CodexAPIKey here) to authenticate to the
	// LLM gateway (typically llmproxy in-cluster).
	ModelProvider        string
	Model                string
	ModelProviderBaseURL string
	ModelProviderEnvKey  string
	ModelProviderWireAPI string
	CodexAPIKey          string

	// ProjectTrustedPaths is the list of paths marked `trust_level = "trusted"`
	// in config.toml. Without at least one, codex refuses to run shell-side
	// operations on the project root.
	ProjectTrustedPaths []string

	// AgentserverInternalURL is the http base for codex token verification
	// (e.g. "http://release-agentserver.namespace.svc:8080"). Required when
	// the gateway uses RemoteVerifier (production default).
	AgentserverInternalURL string

	// AgentserverInternalSecret matches the agentserver's INTERNAL_API_SECRET
	// env. Sent in every verify request as X-Internal-Secret.
	AgentserverInternalSecret string

	// ListenAddr is the gateway's HTTP listen address (e.g. ":8086"). Used
	// to derive the loopback URL env-mcp uses for /internal/connected.
	// Set by main.go before NewServer; tests may leave it empty (codexhome
	// then emits no AppGatewayInternalURL and env-mcp won't be able to
	// list environments, which is fine for tests that don't exercise
	// list_environments).
	ListenAddr string

	// OperationLog endpoint + auth. When OperationLogURL is empty, the
	// /notebook/ws Interceptor is constructed but oplog Submit is a no-op
	// (Client is nil and the Interceptor guards check nil).
	OperationLogURL    string
	OperationLogSecret string // X-Internal-Secret header value
	OperationLogChan   int    // bounded channel capacity, default 1024
}

type Server struct {
	// contains filtered or unexported fields
}

type WorkspaceTokenClient struct {
	// contains filtered or unexported fields
}