apiserver

type Server struct {
	WorkDir string
	Port    int
	Token   string // optional bearer token; empty = no auth

	// RPS and Burst control the per-IP token-bucket rate limiter.
	// Zero values use defaultRPS / defaultBurst.
	RPS   float64
	Burst int

	// MaxRequestBodyBytes caps any incoming POST/PUT/PATCH request body
	// the server will accept. Zero substitutes maxJSONBodyBytes (10 MiB).
	// Oversize requests are rejected with HTTP 413. Set via
	// config.UIConfig.MaxRequestBodyBytes when wired through cmd/serve.go.
	// Task 20102.
	MaxRequestBodyBytes int64

	// TLSCertFile / TLSKeyFile enable native HTTPS. Both must be set or
	// neither; Run refuses to start on a half-configuration rather than
	// silently serving the bearer token over plaintext. TLSMinVersion is
	// "1.2" (default) or "1.3". Set from --tls-cert / --tls-key, or from
	// ui.tls.* in .cloop/config.yaml.
	TLSCertFile   string
	TLSKeyFile    string
	TLSMinVersion string

	// ReadyCheck overrides the readiness check used by /readyz. nil means
	// use defaultReadyCheck (stat state.db, open it, run SELECT 1 bounded
	// by ctx). Tests override this field to simulate degraded states like
	// "closed db handle" or "state store not initialized".
	ReadyCheck func(ctx context.Context) error

	// Log is the structured logger used for lifecycle / error messages
	// emitted by the API server itself (startup, shutdown, panics in
	// background goroutines). Nil means the package picks a sensible
	// default at first-use (text output to stdout, project bound).
	Log logger.Logger
	// contains filtered or unexported fields
}