webops

type Auth interface {
	// Middleware wraps the protected handler. Implementations may also
	// mount their own auth endpoints onto the inner mux (registration,
	// login) by routing through pattern matching on r.URL.Path before
	// delegating to inner.
	Middleware(inner http.Handler) http.Handler
}

type DangerouslyAllowAllAuth struct{}

type Field struct {
	Name        string
	Type        string // "text" "number" "checkbox"
	Required    bool
	Description string
	Default     string
	Enum        []string
}

type MCPTarget struct {
	// Command launches an MCP server as a subprocess and speaks stdio.
	// Path-style: ["myapp", "--mcp-mode"] (first element is the binary).
	Command []string

	// Env is appended to the subprocess environment if Command is set.
	Env []string

	// HTTP is reserved for the planned HTTP/SSE transport. Setting it
	// currently returns an error.
	HTTP string
}

type Options struct {
	// Addr is the TCP address to bind. Required.
	Addr string

	// Auth is the authentication backend. Required. Stub:
	// DangerouslyAllowAllAuth{} (never deploy with that).
	Auth Auth

	// DangerouslySkipTailscale bypasses the Tailscale-interface bind gate.
	// The listen address must still resolve to a loopback (127.0.0.1, ::1)
	// when this is set; webops refuses to bind anywhere else even with
	// the gate off. For development on a machine that has Tailscale
	// installed but is not currently logged in, or in CI.
	//
	// Naming: the cli-web-ops convention follows OpenClaw - any flag that
	// turns a load-bearing safety property off carries the `Dangerously`
	// prefix so call sites read as the alarm they are.
	DangerouslySkipTailscale bool

	// DangerouslyBindAnywhere additionally bypasses the loopback check
	// that DangerouslySkipTailscale leaves in place. Setting this lets
	// webops bind 0.0.0.0 or any routable interface. There is no
	// legitimate reason to set this in production; it exists so an
	// integration test can bind a non-loopback inside an isolated
	// network namespace.
	DangerouslyBindAnywhere bool

	// ShowAllTools exposes every tool, not just webops.favorite ones, on
	// the home screen.
	ShowAllTools bool

	// CommandTimeout caps how long a single tool call may take before the
	// SSE stream is closed and the upstream call is cancelled.
	CommandTimeout time.Duration

	// TailscaleInterface overrides the interface name(s) considered
	// Tailscale-managed.
	TailscaleInterface []string

	// MCPClientName / MCPClientVersion identify webops to the MCP server.
	// Sensible defaults are used when empty.
	MCPClientName    string
	MCPClientVersion string
}

type Server struct {
	// contains filtered or unexported fields
}