app

type Deps struct {
	Config   *config.Config
	Logger   *zap.Logger
	Signer   jwt.Signer
	Repo     service.Repository
	DB       service.DB
	Passkeys *passkeys.WebAuthnService
	TOTPKey  []byte

	// TenantAdmin is the cross-tenant admin handle backing the
	// `mode=multi` OrganizationSignup RPC. Required when
	// Config.IdentityMode == "multi"; ignored in single mode. The
	// production binary wires repo.NewTenantAdmin(entdbClient);
	// integration tests pass a fake.
	TenantAdmin service.TenantAdmin

	// RepositoryForTenant is the factory OrganizationSignup uses to
	// obtain a Repository scoped to the freshly-created tenant. When
	// nil, the handler treats `mode=multi` as not yet wired and
	// returns CodeUnimplemented. The production binary wires a closure
	// over the entdb client; tests pass a closure returning an
	// in-memory Repo keyed on tenant id.
	RepositoryForTenant service.RepositoryForTenant

	// TOTPRecoveryPepper is the HMAC-SHA-256 key used to hash and
	// verify recovery codes. Must be >= totp.MinRecoveryPepperBytes
	// bytes long; the binary refuses to start otherwise.
	TOTPRecoveryPepper []byte

	// EmailTransport delivers outbound mail. If nil, New constructs a
	// transport from cfg via buildEmailTransport (so production code
	// only needs to populate this when a test wants a custom recorder).
	EmailTransport email.Transport

	// OAuthRegistry holds the per-provider Exchangers used for OAuth
	// login. May be nil — in that case OAuthLogin returns
	// ErrOAuthDisabled. When nil, New builds a registry from the
	// config's GATEWAY_*_CLIENT_ID/SECRET env vars (only providers
	// with both credentials set are registered).
	OAuthRegistry *oauth.Registry

	// IDVProvider drives identity-verification (document + selfie).
	// May be nil — in that case BeginIdentityVerification returns
	// CodeUnimplemented. Production deployments wire an Azure or
	// other real provider; tests typically pass an idv.StubProvider.
	IDVProvider idv.Provider

	// MetricsRegistry is the Prometheus registry the server records
	// RED metrics into. May be nil — in that case the default
	// registry is used (which is what production wants). Tests pass an
	// isolated registry so they can read counters without colliding
	// with other tests in the same process.
	MetricsRegistry prometheus.Registerer
}