httpx

type AsyncRunHTTPHandlerConfig struct {
	Queue        asyncpkg.Queue
	RunState     runstate.Repository
	Policy       security.Policy
	Audit        audit.Sink
	IDGenerator  func() string
	Now          func() time.Time
	MaxBodyBytes int64
	// InsecureAllowNoAuth explicitly opens the async endpoints when Policy is
	// nil. It is intended only for loopback development and tests.
	InsecureAllowNoAuth bool
}

type CheckpointHTTPHandlerConfig struct {
	Framework    *agentflow.Framework
	MaxBodyBytes int64
	// Policy authorizes requests: reads as run.read, writes (resume-from-step,
	// resume-from-checkpoint, fork) as hitl.resume / run.submit, with the
	// caller's tenant bound to the resource. When Policy is nil every endpoint
	// defaults to 403 auth_required because reads expose run data and writes
	// can mint fresh execution.
	Policy security.Policy
	// Audit receives policy-denied records when configured.
	Audit audit.Sink
	// InsecureAllowNoAuth disables the default-deny protection when Policy is
	// nil. Only set it behind an authenticating
	// reverse proxy or in tests.
	InsecureAllowNoAuth bool
}

type HumanHTTPHandlerConfig struct {
	Framework    *agentflow.Framework
	MaxBodyBytes int64
}

type KnowledgeRegistry struct {
	Embedder llm.Embedder
	Store    knowledge.VectorStore
	Reranker knowledge.Reranker
}

type MCPRegistry struct {
	Clients    map[string]mcp.Client
	HTTPClient *http.Client
}

type ObservabilityHTTPHandlerConfig struct {
	Store          observability.EventStore
	Hub            *observability.EventHub
	AuthMiddleware func(http.Handler) http.Handler
	// Framework enables Studio graph export, step listing, and resume-from-step.
	Framework *agentflow.Framework
	// StudioSavePath enables POST /observability/api/studio/save for the configured scenario file.
	StudioSavePath string
	// TraceExploreURL is an optional trace UI link template, e.g. https://jaeger.example.com/trace/{trace_id}.
	TraceExploreURL string
	// InsecureAllowNoAuth disables the default-deny guard on the dashboard
	// and every API endpoint when AuthMiddleware is nil. Only set it behind
	// an authenticating reverse proxy or in local tests and demos.
	InsecureAllowNoAuth bool
	// Logger receives the one-time construction warning emitted when
	// AuthMiddleware is nil; nil discards it.
	Logger log.Logger
}

type ProductionHTTPHandlerConfig struct {
	Queue          asyncpkg.Queue
	Policy         security.Policy
	Audit          audit.Sink
	AuthMiddleware func(http.Handler) http.Handler
	// MetricsHandler is mounted outside AuthMiddleware for infrastructure
	// scrapers. Bind it to an internal listener/network or wrap it before use.
	MetricsHandler http.Handler
	IDGenerator    func() string
	Now            func() time.Time
	MaxBodyBytes   int64
	Version        string
	// Framework enables sync /v1/events and /v1/hitl/resume when set.
	Framework *agentflow.Framework
	// StudioSavePath enables POST /v1/studio/save for the configured scenario file.
	StudioSavePath string
	// VerifyWebhookSignature validates the raw /v1/events request body before
	// event decoding, in addition to the shared AuthMiddleware.
	VerifyWebhookSignature func(r *http.Request, body []byte) error
	// InsecureAllowNoAuth explicitly opens production routes without
	// AuthMiddleware and Policy. Only use it for loopback development/tests.
	InsecureAllowNoAuth bool
}

type RetentionHTTPHandlerConfig struct {
	Framework    *agentflow.Framework
	Policy       security.Policy
	Audit        audit.Sink
	MaxBodyBytes int64
	// InsecureAllowNoAuth disables the default-deny guard on the purge
	// endpoints when Policy is nil. Only set it behind an authenticating
	// reverse proxy or in tests.
	InsecureAllowNoAuth bool
}

type StudioHTTPHandlerConfig struct {
	Framework      *agentflow.Framework
	StudioSavePath string
	MaxBodyBytes   int64
	// Policy authorizes the mutating endpoints: studio run as run.submit and
	// studio save as admin.configure. When Policy is nil those endpoints
	// default-deny with 403 auth_required — studio run executes agents and
	// studio save rewrites the scenario file, so mounting them open was a
	// privilege-escalation hole. The pure-transform endpoints
	// (validate/codegen/yaml/import-yaml) stay open.
	Policy security.Policy
	// Audit receives policy-denied records when configured.
	Audit audit.Sink
	// InsecureAllowNoAuth disables the default-deny protection on the
	// mutating endpoints when Policy is nil. Only set it behind an
	// authenticating reverse proxy or in tests.
	InsecureAllowNoAuth bool
}

type WebhookHTTPHandlerConfig struct {
	Framework    *agentflow.Framework
	MaxBodyBytes int64
	// VerifySignature, when set, validates the raw webhook body before the
	// event is decoded (e.g. an HMAC signature from the event source); a
	// non-nil error rejects the request with 401. Webhooks are
	// unauthenticated ingress — production deployments should set this or
	// wrap the handler in an authenticating middleware.
	VerifySignature func(r *http.Request, body []byte) error
}