config

type Config struct {
	HTTP         HTTPConfig         `toml:"http"`
	MQTT         MQTTConfig         `toml:"mqtt"`
	Database     DatabaseConfig     `toml:"database"`
	Engine       EngineConfig       `toml:"engine"`
	Pairing      PairingConfig      `toml:"pairing"`
	Housekeeping HousekeepingConfig `toml:"housekeeping"`
	Storage      StorageConfig      `toml:"storage"`
	Security     SecurityConfig     `toml:"security"`
	Realm        RealmConfig        `toml:"realm"`
	Log          LogConfig          `toml:"log"`
	Triggers     TriggersConfig     `toml:"triggers"`
}

type DatabaseConfig struct {
	DSN string `toml:"dsn"`
}

type Duration time.Duration

type EngineConfig struct {
	Shards          int      `toml:"shards"`
	ShardQueue      int      `toml:"shard_queue"`
	BatchMaxRows    int      `toml:"batch_max_rows"`
	BatchMaxWait    Duration `toml:"batch_max_wait"`
	MaxPayloadBytes int      `toml:"max_payload_bytes"`
}

type ForwardConfig struct {
	Kind          string            `toml:"kind"`
	URL           string            `toml:"url"`
	Method        string            `toml:"method"`
	StaticHeaders map[string]string `toml:"static_headers"`
	// Subject is the NATS subject every custom action is published to.
	// Required when Kind is "nats"; unused otherwise.
	Subject string `toml:"subject"`
}

type HTTPConfig struct {
	Addr               string   `toml:"addr"`
	TLSCertFile        string   `toml:"tls_cert_file"`
	TLSKeyFile         string   `toml:"tls_key_file"`
	CORSAllowedOrigins []string `toml:"cors_allowed_origins"`
}

type HousekeepingConfig struct {
	JWTPublicKeys     []string `toml:"jwt_public_keys"`
	JWTPublicKeyFiles []string `toml:"jwt_public_key_files"`
	// DefaultDatastreamMaximumStorageRetention is the realm-level datastream
	// storage ceiling (seconds) injected at realm creation when the caller
	// omits the field (#73). When unset (nil) no default is injected and
	// existing deployments behave exactly as before.
	DefaultDatastreamMaximumStorageRetention *int64 `toml:"default_datastream_maximum_storage_retention"`
	// RealmDeletionDisabled gates DELETE /housekeeping/v1/realms/{realm}
	// (#75): when true, deletion answers upstream's 405 "Realm deletion
	// disabled". Opt-in — unset (false) keeps the historical
	// always-delete behavior.
	RealmDeletionDisabled bool `toml:"realm_deletion_disabled"`
}

type LogConfig struct {
	Level  string `toml:"level"`
	Format string `toml:"format"`
}

type MQTTConfig struct {
	Addr             string `toml:"addr"`
	TLSCertFile      string `toml:"tls_cert_file"`
	TLSKeyFile       string `toml:"tls_key_file"`
	InsecureDevMode  bool   `toml:"insecure_dev_mode"`
	DevAddr          string `toml:"dev_addr"`
	SessionStorePath string `toml:"session_store_path"`
	// AdvertisedURL is the broker URL handed to devices by the pairing info
	// endpoint. Empty derives "mqtts://<Addr>" (fine for localhost; set it
	// explicitly when devices reach the broker by a different host).
	AdvertisedURL  string `toml:"advertised_url"`
	MaxPacketBytes uint32 `toml:"max_packet_bytes"`
}

type PairingConfig struct {
	CertTTL           Duration `toml:"cert_ttl"`
	EnforceLatestCert bool     `toml:"enforce_latest_cert"`
	RegisterRate      float64  `toml:"register_rate"`
	RegisterBurst     int      `toml:"register_burst"`
	CredentialsRate   float64  `toml:"credentials_rate"`
	CredentialsBurst  int      `toml:"credentials_burst"`
	BcryptCost        int      `toml:"bcrypt_cost"`
}

type RealmConfig struct {
	Name                    string `toml:"name"`
	JWTPublicKey            string `toml:"jwt_public_key"`
	JWTPublicKeyFile        string `toml:"jwt_public_key_file"`
	DeviceRegistrationLimit *int32 `toml:"device_registration_limit"`
}

type SecurityConfig struct {
	MasterKeyFile string `toml:"master_key_file"`
}

type StorageConfig struct {
	Retention Duration `toml:"retention"`
}

type TriggersConfig struct {
	Forward ForwardConfig `toml:"forward"`
}