webops

type Auth interface {
	// Middleware wraps the protected handler.
	// Drivers may mount their own auth endpoints on inner before delegating.
	Middleware(inner http.Handler) http.Handler
}

type DangerouslyAllowAllAuth struct{}

type Field struct {
	Name        string
	Type        string // "text" "number" "checkbox"
	Required    bool
	Description string
	Default     string
	Enum        []string
}

type MCPTarget struct {
	// Command launches an MCP server as a subprocess and speaks stdio.
	// Path-style: ["myapp", "--mcp-mode"] (first element is the binary).
	Command []string

	// Env is appended to the subprocess environment if Command is set.
	Env []string

	// HTTP is reserved for the planned HTTP/SSE transport. Setting it
	// currently returns an error.
	HTTP string
}

type Options struct {
	// Addr is the TCP address to bind. Required.
	Addr string

	// Auth is the authentication backend. Required. Stub:
	// DangerouslyAllowAllAuth{} (never deploy with that).
	Auth Auth

	// DangerouslySkipTailscale bypasses the Tailscale-interface bind gate.
	// Listen addr must still be loopback. See docs/webops-package.md.
	DangerouslySkipTailscale bool

	// DangerouslyBindAnywhere also bypasses the loopback check.
	// Test-only; never set in production. See docs/webops-package.md.
	DangerouslyBindAnywhere bool

	// ShowAllTools exposes every tool, not just webops.favorite ones, on
	// the home screen.
	ShowAllTools bool

	// CommandTimeout caps how long a single tool call may take before the
	// SSE stream is closed and the upstream call is cancelled.
	CommandTimeout time.Duration

	// TailscaleInterface overrides the interface name(s) considered
	// Tailscale-managed.
	TailscaleInterface []string

	// MCPClientName / MCPClientVersion identify webops to the MCP server.
	// Sensible defaults are used when empty.
	MCPClientName    string
	MCPClientVersion string
}

type Server struct {
	// contains filtered or unexported fields
}