api

type Config struct {
	GRPCAddr    string   // gRPC listen address
	HTTPAddr    string   // REST gateway listen address
	MaxRecvSize int      // largest request message, bytes
	MaxSendSize int      // largest response message, bytes
	CORSOrigins []string // origins allowed to call the REST API from a browser; "*" allows any
	Docs        bool     // serve /openapi.yaml and the /docs page
	Reflection  bool     // gRPC server reflection, for grpcurl and similar tools

	// RateLimit per client address; zero rates turn it off.
	RateLimit RateLimit

	// Idempotency: how long a finished call is remembered, and how long a running one
	// holds its key before a repeat may take over.
	IdempotencyRetention time.Duration
	IdempotencyLock      time.Duration

	AccessLog       bool // log every HTTP request, as taply does
	LogBodies       bool // put the bodies of failed requests into the access log
	SecurityHeaders bool // taply's security response headers

	// TrustedProxies are the networks whose X-Forwarded-For is believed. A request from
	// anywhere else is identified by its connection address, so a client reaching the
	// service directly cannot pose as another address. Empty means the private networks
	// and loopback, where a reverse proxy normally runs.
	TrustedProxies []netip.Prefix
}

type IdempotencyRecord struct {
	ID          int64
	User        string
	Method      string
	Key         string
	Fingerprint string
	Status      string
	Code        int32
	Message     string
	Response    []byte
	ExpiresAt   time.Time
}

type IdempotencyStore interface {
	// Begin inserts an in_progress record, or returns the existing one with created false.
	Begin(ctx context.Context, rec IdempotencyRecord) (IdempotencyRecord, bool, error)
	// Retake moves a retry record, or an in_progress one whose lock expired, back to
	// in_progress. It reports false when another call took it first.
	Retake(ctx context.Context, id int64, lockUntil time.Time) (bool, error)
	// Finish stores the outcome.
	Finish(ctx context.Context, rec IdempotencyRecord) error
	// DeleteExpired removes records past their expiry.
	DeleteExpired(ctx context.Context, now time.Time) (int, error)
}

type MemoryIdempotencyStore struct {
	// contains filtered or unexported fields
}

type Module struct {
	// contains filtered or unexported fields
}

type Option func(*Module)

type RateLimit struct {
	RPS, PublicRPS     float64
	Burst, PublicBurst int
}

type Registry struct {
	// contains filtered or unexported fields
}

type RetryableError interface{ IsRetryable() bool }

type Service struct {
	GRPC    func(*grpc.Server)
	Gateway func(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error
}