api

type AdminInvite struct {
	ID          string `json:"id"`
	Username    string `json:"username"`
	DisplayName string `json:"displayName"`
	ExpiresAt   string `json:"expiresAt"`
}

type AdminInviteCreateResponse struct {
	Token       string `json:"token"`
	Username    string `json:"username"`
	DisplayName string `json:"displayName"`
	ExpiresAt   string `json:"expiresAt"`
}

type AdminRequestLogEntry struct {
	LoggedAt   string               `json:"loggedAt"`
	Forge      string               `json:"forge"`
	Account    string               `json:"account,omitempty"`
	Method     string               `json:"method"`
	Endpoint   string               `json:"endpoint"`
	StatusCode int                  `json:"statusCode,omitempty"`
	Outcome    string               `json:"outcome"`
	RateLimit  *dashboard.RateLimit `json:"rateLimit,omitempty"`
}

type AdminUser struct {
	Username    string `json:"username"`
	DisplayName string `json:"displayName"`
	IsAdmin     bool   `json:"isAdmin"`
	CreatedAt   string `json:"createdAt"`
}

type CredentialInfo struct {
	ID        string    `json:"id"`
	Label     string    `json:"label"`
	CreatedAt time.Time `json:"createdAt"`
}

type DatabasePinger interface {
	PingContext(ctx context.Context) error
}

type Deps struct {
	// Version is the release tag this binary was built from ("dev" for a
	// build outside the release pipeline) — see cmd/forge-dashboard's own
	// version var for how it's set.
	Version string

	AuthService *auth.Service
	AuthStore   *auth.Store

	SettingsStore *settings.Store
	SharingStore  *sharing.Store

	// Database and Dashboard back GET /readyz. Either may be nil, in which
	// case that check is skipped.
	Database  DatabasePinger
	Dashboard FirstRefreshGate

	// ReadyProbeTimeout bounds the database ping and ReadyCacheTTL is how
	// long its result is reused; zero means the defaults (2s and 3s).
	ReadyProbeTimeout time.Duration
	ReadyCacheTTL     time.Duration
	// Drain, once started, makes /readyz answer 503 so a router stops
	// sending traffic before shutdown. Nil never drains.
	Drain *Drain

	// Manager holds each signed-in user's own Aggregator, built from
	// their saved Credentials via BuildSources.
	Manager *dashboard.Manager
	// BuildSources takes the signed-in user's own ID (#482: threaded
	// through so the forge clients it builds can record outbound
	// requests under the right account) alongside their saved
	// Credentials.
	BuildSources func(userID []byte, c settings.Credentials) []dashboard.Source

	// RequestLog is the admin-only outbound-request log's own read path
	// — every account's forge clients record into the same underlying
	// store (see cmd/forge-dashboard's buildSourcesForUser), so this one
	// instance, with no account bound to it, is enough to list or export
	// across all of them.
	RequestLog *requestlog.SQLiteRecorder

	// PublicOrigin is this instance's own externally-reachable origin
	// (RP_ORIGIN — the same value WebAuthn's relying-party config
	// already requires be set correctly, reused rather than adding a
	// second "what's my own address" env var). handleWebhookEnsure uses
	// it to build the exact URL a webhook it creates should target;
	// nothing else here needs it, since matching an existing hook
	// (dashboard.WebhookTargetsPath) only ever compares by path.
	PublicOrigin string

	// GitHubAppConfigured is whether this deployment has a GitHub App set
	// up at all (#620) — server-wide GITHUB_APP_ID/
	// GITHUB_APP_PRIVATE_KEY_BASE64, read once at startup, never a
	// per-user setting. handleSettingsGet/handleSettingsPut use it to
	// explain and enforce why a saved githubAppInstallationId can't work
	// on a server with no App configured.
	GitHubAppConfigured bool

	// AppContext is the process's own long-lived context (canceled on
	// shutdown), not any one request's — a handler that starts a
	// Manager-owned background refresh goroutine has to root it here, not
	// in the *http.Request context that dies the moment that handler
	// returns.
	AppContext context.Context
}

type Drain struct {
	// contains filtered or unexported fields
}

type FirstRefreshGate interface {
	FirstRefreshComplete() bool
}

type Health struct {
	Status string `json:"status"`
}

type Ready struct {
	Status     string `json:"status"`
	Goroutines int    `json:"goroutines"`
	// Threads is left out where the process can't count its own, which is
	// anywhere without /proc.
	Threads int `json:"threads,omitempty"`
}

type SessionUser struct {
	Username    string `json:"username"`
	DisplayName string `json:"displayName"`
	IsAdmin     bool   `json:"isAdmin"`
}

type SettingsResponse struct {
	GitHubUsername string `json:"githubUsername"`
	GitHubTokenSet bool   `json:"githubTokenSet"`
	// GitHubAppInstallationID and GitHubAppConfigured (#620) — see their
	// SettingsResponse doc comments in api/openapi.yaml for the full
	// precedence/validation story.
	GitHubAppInstallationID int64  `json:"githubAppInstallationId"`
	GitHubAppConfigured     bool   `json:"githubAppConfigured"`
	ForgejoURL              string `json:"forgejoUrl"`
	ForgejoUsername         string `json:"forgejoUsername"`
	ForgejoTokenSet         bool   `json:"forgejoTokenSet"`
	// WebhookToken and WebhookSecret, unlike the forge tokens above, are
	// ours to hand back in the clear — the user has to paste them into
	// the forge's own webhook setup, so a "set" flag alone wouldn't do.
	WebhookToken  string `json:"webhookToken"`
	WebhookSecret string `json:"webhookSecret"`
	// RenovateRebaseLabel — see settings.Credentials' own doc comment;
	// round-trips as a plain value, unlike the forge tokens above, since
	// it isn't a secret.
	RenovateRebaseLabel string `json:"renovateRebaseLabel"`
	// RenovateAuthors — see settings.Credentials' own doc comment. Always a
	// list on the wire, never null.
	RenovateAuthors []string `json:"renovateAuthors"`
	// Theme — see settings.Credentials' own doc comment. Round-tripped
	// here too so the Settings page's own save confirms what it just set,
	// even though the lightweight GET /api/settings/theme below is what
	// every other page actually polls on load.
	Theme string `json:"theme"`
	// Timezone — see settings.Credentials' own doc comment. Round-tripped
	// here so the Settings page shows what is saved; every other page reads
	// the lightweight GET /api/settings/timezone.
	Timezone string `json:"timezone"`
}

type SharedUser struct {
	Username    string `json:"username"`
	DisplayName string `json:"displayName"`
}

type SharingResponse struct {
	SharedWith   []SharedUser `json:"sharedWith"`
	SharedWithMe []SharedUser `json:"sharedWithMe"`
}

type ThemeResponse struct {
	Theme string `json:"theme"`
}

type TimezoneResponse struct {
	Timezone string `json:"timezone"`
}

type Token struct {
	ID         string     `json:"id"`
	Label      string     `json:"label"`
	CreatedAt  time.Time  `json:"createdAt"`
	ExpiresAt  time.Time  `json:"expiresAt"`
	LastUsedAt *time.Time `json:"lastUsedAt,omitempty"`
}

type Version struct {
	Version string `json:"version"`
}