mcp

type ApprovalStore interface {
	CreateApproval(ctx context.Context, a agent.Approval) (agent.Approval, error)
}

type AuditEvent struct {
	Tool      string
	ViewerID  int64
	Scopes    []string
	Status    string // ok, proposal, secret_request, error, denied
	Error     string // mapped message only
	Duration  time.Duration
	RequestID string
}

type Options struct {
	Catalogue *tools.Catalogue
	// Approvals receives write proposals. Nil means write tools answer
	// with an error result instead of a pending approval.
	Approvals ApprovalStore
	// OnApproval is called after a write proposal is stored, so the app
	// can notify the console stream (admin.StreamAgentApproval).
	OnApproval func(ctx context.Context, a agent.Approval)
	// Authenticate resolves a bearer token to a principal (surface "mcp").
	Authenticate func(ctx context.Context, token string) (tools.Principal, error)
	Resources    []Resource
	Version      string
	Logger       *slog.Logger
	// AllowedHosts and AllowedOrigins extend the boundary allowlists.
	AllowedHosts   []string
	AllowedOrigins []string
	Audit          func(ctx context.Context, e AuditEvent)
	ToolTimeout    time.Duration // default 30s
	Now            func() time.Time
}

type Pairing struct {
	// contains filtered or unexported fields
}

type PairingOptions struct {
	DB     *sql.DB
	Grants *identity.Grants
	// Authorize returns the owner viewer id for a console request. The app
	// implements it from the admin API's owner check.
	Authorize    func(ctx context.Context) (int64, error)
	Logger       *slog.Logger
	AllowedHosts []string
	Now          func() time.Time
}

type Resource struct {
	URI         string
	Name        string
	Description string
	MIMEType    string
	Text        string
}

type Server struct {
	// contains filtered or unexported fields
}