app

type Built struct {
	Handler        http.Handler
	ConnectHandler *identityconnect.IdentityHandler
	// contains filtered or unexported fields
}

type Deps struct {
	Config   *config.Config
	Logger   *zap.Logger
	Signer   jwt.Signer
	Repo     service.Repository
	DB       service.DB
	Passkeys *passkeys.WebAuthnService
	TOTPKey  []byte

	// TenantAdmin is the cross-tenant admin handle backing the
	// `mode=multi` OrganizationSignup RPC. Required when
	// Config.IdentityMode == "multi"; ignored in single mode. The
	// production binary wires repo.NewTenantAdmin(entdbClient);
	// integration tests pass a fake.
	TenantAdmin service.TenantAdmin

	// RepositoryForTenant is the factory OrganizationSignup uses to
	// obtain a Repository scoped to the freshly-created tenant. When
	// nil, the handler treats `mode=multi` as not yet wired and
	// returns CodeUnimplemented. The production binary wires a closure
	// over the entdb client; tests pass a closure returning an
	// in-memory Repo keyed on tenant id.
	RepositoryForTenant service.RepositoryForTenant

	// ProjectResolver resolves a request's control-plane project from its
	// credential key or Host header (see middleware.NewProjectResolver).
	// Non-nil only for the postgres driver; when nil the project-resolution
	// middleware pins every request to the configured default project. The
	// production binary wires the postgres control-plane store; tests pass
	// a fake or nil.
	ProjectResolver service.ProjectResolver

	// TOTPRecoveryPepper is the HMAC-SHA-256 key used to hash and
	// verify recovery codes. Must be >= totp.MinRecoveryPepperBytes
	// bytes long; the binary refuses to start otherwise.
	TOTPRecoveryPepper []byte

	// EmailTransport delivers outbound mail. If nil, New constructs a
	// transport from cfg via buildEmailTransport (so production code
	// only needs to populate this when a test wants a custom recorder).
	EmailTransport email.Transport

	// SMSSender delivers outbound SMS for phone verification. If nil, New
	// constructs a sender from cfg via buildSMSSender — a log-only sender
	// when GATEWAY_SMS_ENABLED is false, otherwise the configured
	// provider (Twilio / SNS / Azure).
	SMSSender sms.Sender

	// OAuthRegistry holds the per-provider Exchangers used for OAuth
	// login. May be nil — in that case OAuthLogin returns
	// ErrOAuthDisabled. When nil, New builds a registry from the
	// config's GATEWAY_*_CLIENT_ID/SECRET env vars (only providers
	// with both credentials set are registered).
	OAuthRegistry *oauth.Registry

	// IDVProvider drives identity-verification (document + selfie).
	// May be nil — in that case BeginIdentityVerification returns
	// CodeUnimplemented. Production deployments wire an Azure or
	// other real provider; tests typically pass an idv.StubProvider.
	IDVProvider idv.Provider

	// CaptchaVerifier gates the unauthenticated auth endpoints. May be
	// nil — in that case New builds one from Config (the no-op verifier
	// when CAPTCHA is disabled). Tests inject a fake to drive pass/fail
	// without network calls.
	CaptchaVerifier captcha.Verifier

	// MetricsRegistry is the Prometheus registry the server records
	// RED metrics into. May be nil — in that case the default
	// registry is used (which is what production wants). Tests pass an
	// isolated registry so they can read counters without colliding
	// with other tests in the same process.
	MetricsRegistry prometheus.Registerer
}