web

type Config struct {
	Querier    Querier
	Tenant     TenantResolver
	Onboarding OnboardingSource
	Frozen     FrozenFunc
	// KeyAdmin drives the self-serve Setup keys panel. Nil (dev/no-control-plane)
	// hides the panel and 404s the key POSTs.
	KeyAdmin KeyAdmin
	// MemberAdmin drives the self-serve Setup team panel (members + invites). Nil
	// (dev/no-control-plane) hides the panel and 404s its POSTs.
	MemberAdmin MemberAdmin
	// Role resolves the caller's role per request, so the team panel can admin-gate
	// its create/revoke/remove actions. Nil is treated as "not an admin".
	Role RoleResolver
	// CSRFKey signs the Setup form CSRF tokens (HMAC). Required (>= 1 byte) when
	// KeyAdmin or MemberAdmin is set; ignored otherwise. main passes the session key.
	CSRFKey []byte
	Logger  *slog.Logger
	// Sidebar identity chrome (display only). Empty values fall back to
	// sensible defaults so the dashboard renders without a control plane.
	OrgName  string
	UserName string
	UserRole string
	// AccountHref, when non-empty, turns the sidebar user-identity block into a link
	// to that path — a composing build (via app.WithAccountLink) points it at the
	// account page it owns. Empty leaves the block a non-interactive display element.
	AccountHref string
}

type FrozenFunc func(tenant string) bool

type Handler struct {
	// contains filtered or unexported fields
}

type InviteInfo struct {
	ID        string
	Email     string
	Role      string
	CreatedAt time.Time
	ExpiresAt time.Time
}

type KeyAdmin interface {
	IssueKey(ctx context.Context, orgID, label string) (token string, err error)
	ListKeys(ctx context.Context, orgID string) ([]KeyInfo, error)
	RevokeKey(ctx context.Context, orgID, keyID string) error
}

type KeyInfo struct {
	ID        string
	Label     string
	Last4     string
	CreatedAt time.Time
	RevokedAt *time.Time // nil while the key is active
}

type MemberAdmin interface {
	ListMembers(ctx context.Context, orgID string) ([]MemberInfo, error)
	ListInvites(ctx context.Context, orgID string) ([]InviteInfo, error)
	CreateInvite(ctx context.Context, orgID, invitedBy, email, role string) (link string, err error)
	RevokeInvite(ctx context.Context, orgID, inviteID string) error
	RemoveMember(ctx context.Context, orgID, memberID string) error
	SeatUsage(ctx context.Context, orgID string) (used, limit int, err error)
}

type MemberInfo struct {
	ID        string
	Email     string
	Role      string
	CreatedAt time.Time
	IsOwner   bool
}

type OnboardingSource func(ctx context.Context, tenant string) ([]ServiceOnboarding, error)

type Querier interface {
	Tenant(id tenant.ID) ScopedQuery
}

type RoleResolver func(r *http.Request) (role, memberID string, ok bool)

type ScopedQuery interface {
	SeriesOverTime(ctx context.Context, service, method, route string, from, to time.Time, step time.Duration) ([]storage.TimePoint, error)
	Services(ctx context.Context, from, to time.Time) ([]storage.ServiceStat, error)
	Endpoints(ctx context.Context, service string, from, to time.Time) ([]storage.EndpointStat, error)
	EndpointDetail(ctx context.Context, service, method, route string, from, to time.Time) (storage.EndpointDetail, error)
	InstancesForEndpoint(ctx context.Context, service, method, route string, from, to time.Time) ([]storage.InstanceStat, error)
	VersionsForEndpoint(ctx context.Context, service, method, route string, from, to time.Time) ([]storage.VersionStat, error)
	ExemplarsForEndpoint(ctx context.Context, service, method, route string, from, to time.Time) ([]storage.ExemplarRow, error)
	LatencyByStatusClass(ctx context.Context, service, method, route string, from, to time.Time) (map[string]storage.ClassLatency, error)
	ErrorClassesForEndpoint(ctx context.Context, service, method, route string, from, to time.Time) ([]storage.ErrorClassStat, error)
	NoStatusReasonsForEndpoint(ctx context.Context, service, method, route string, from, to time.Time) ([]storage.NoStatusReasonStat, error)
	DownstreamForEndpoint(ctx context.Context, service, method, route string, from, to time.Time) (storage.DownstreamStat, error)
	InstanceResourcesForService(ctx context.Context, service string, from, to time.Time) ([]storage.InstanceResourceStat, error)
	MemoryTrendForService(ctx context.Context, service string, from, to time.Time, step time.Duration) ([]storage.MemoryTrendPoint, error)
	PerformanceStats(ctx context.Context, from, to time.Time) (storage.PerformanceStat, error)
	HasAnySummary(ctx context.Context) (bool, error)
}

type ServiceOnboarding struct {
	Service     string
	Instance    string
	HandshakeAt time.Time
}

type Shell struct {
	Org, User, Role string
	// AccountHref, when non-empty, makes the sidebar user-identity block a link to
	// the composing build's account page. Empty leaves it a display-only element.
	AccountHref  string
	Nav          []navItem
	Crumbs       []crumb
	PageTitle    string
	ShowControls bool
	Windows      []windowOption
	WindowKey    string
	FlushLabel   string
	// KeyMask is the masked last-4 ("····<last4>") of the tenant's newest active
	// ingest key, shown in the sidebar. Empty when there is no control plane or no
	// active key, so the sidebar shows a muted "no active key" instead of a fake.
	KeyMask string
	// Live drives the casual-check auto-refresh: when true the page emits a
	// meta-refresh and the top-bar indicator reads "live". LiveHref is the toggle
	// link (set only on pages that support live refresh — the overview); an empty
	// LiveHref renders the static, non-clickable indicator.
	Live     bool
	LiveHref string
}

type TenantResolver func(r *http.Request) (id tenant.ID, ok bool)