apiserver

type Server struct {
	WorkDir string
	Port    int
	Token   string // optional bearer token; empty = no auth

	// RPS and Burst control the per-IP token-bucket rate limiter.
	// Zero values use defaultRPS / defaultBurst.
	RPS   float64
	Burst int

	// MaxRequestBodyBytes caps any incoming POST/PUT/PATCH request body
	// the server will accept. Zero substitutes maxJSONBodyBytes (10 MiB).
	// Oversize requests are rejected with HTTP 413. Set via
	// config.UIConfig.MaxRequestBodyBytes when wired through cmd/serve.go.
	// Task 20102.
	MaxRequestBodyBytes int64

	// TLSCertFile / TLSKeyFile enable native HTTPS. Both must be set or
	// neither; Run refuses to start on a half-configuration rather than
	// silently serving the bearer token over plaintext. TLSMinVersion is
	// "1.2" (default) or "1.3". Set from --tls-cert / --tls-key, or from
	// ui.tls.* in .cloop/config.yaml.
	TLSCertFile   string
	TLSKeyFile    string
	TLSMinVersion string

	// ListenHost is the address Run binds, without the port (--listen).
	// Empty takes the default for this server's authentication: every
	// interface with a Token, 127.0.0.1 without one — because without one
	// POST /run/start starts a run on this host for anyone who reaches it.
	// An address beyond loopback without a Token is refused unless
	// AllowUnauthenticatedNetwork is set (Task 20393; pkg/exposure).
	ListenHost string
	// AllowUnauthenticatedNetwork is ui.allow_unauthenticated_network, read
	// from the same shared ui block as TLS: a server without a Token may bind
	// the address ListenHost names even beyond loopback, and warns at every
	// start that it does.
	AllowUnauthenticatedNetwork bool

	// TrustedProxies is ui.trusted_proxies, from the same shared ui block:
	// the peers whose X-Forwarded-* are believed, loopback always among them
	// (Task 20394).
	TrustedProxies sameorigin.Proxies
	// AllowedHosts is ui.allowed_hosts: names a server without a token
	// answers to besides localhost and IP addresses (originGuard).
	AllowedHosts []string

	// ReadyCheck overrides the readiness check used by /readyz. nil means
	// use defaultReadyCheck (stat state.db, open it, run SELECT 1 bounded
	// by ctx). Tests override this field to simulate degraded states like
	// "closed db handle" or "state store not initialized".
	ReadyCheck func(ctx context.Context) error

	// Log is the structured logger used for lifecycle / error messages
	// emitted by the API server itself (startup, shutdown, panics in
	// background goroutines). Nil means the package picks a sensible
	// default at first-use (text output to stdout, project bound).
	Log logger.Logger
	// contains filtered or unexported fields
}