httpapi

type Config struct {
	Log      *slog.Logger
	Registry *registry.Registry
	Store    Store
	// Ready reports whether backd can serve requests (e.g. MongoDB reachable).
	Ready func(ctx context.Context) error
	// Now is the clock for _meta timestamps; defaults to time.Now.
	Now func() time.Time
	// MaxBodyBytes caps request bodies; defaults to DefaultMaxBodyBytes.
	MaxBodyBytes int64
	// MaxUploadBytes caps one file of a proxy upload (BACKD_MAX_UPLOAD_BYTES), apart
	// from MaxBodyBytes, which does not apply to file uploads; defaults to
	// DefaultMaxUploadBytes.
	MaxUploadBytes int64
	// ImageMaxPixels is the instance's limit on an image's pixels
	// (BACKD_IMAGE_MAX_PIXELS); a file field's max_pixels may only be lower. Zero
	// means 40 million.
	ImageMaxPixels int64
	// ImageTimeout and ImageConcurrency bound the workers making image versions
	// (BACKD_IMAGE_TIMEOUT, BACKD_IMAGE_CONCURRENCY); zero is 30 seconds, and a number
	// derived from the container's limits.
	ImageTimeout     time.Duration
	ImageConcurrency int
	// OpTimeout bounds the storage work of each document request;
	// defaults to DefaultOpTimeout.
	OpTimeout time.Duration
	// TrustedProxies are the networks whose X-Forwarded-For header is
	// believed when finding the client's address (for login throttling).
	TrustedProxies []netip.Prefix
	// Users returns the user service of a realm with auth enabled, or nil
	// (unknown realm or auth disabled). Nil Users disables /_auth routes.
	Users func(realm string) *auth.Users
	// ConfigFingerprint identifies the config this instance runs; /readyz
	// reports it so operators can check every instance runs the same one.
	ConfigFingerprint string
	// Functions runs function calls (the executor client); nil: calls get 503.
	Functions FunctionRunner
	// CallbackKey signs the callback tokens functions reach data with; the
	// internal listener verifies them.
	CallbackKey []byte
	// CallbackURL is backd's internal listener as the executor and
	// functions reach it (bundles and callbacks), e.g. http://backd:8081.
	CallbackURL string
	// ExecutorToken authenticates the executor's bundle fetches.
	ExecutorToken string
	// BackdURL is backd's public address, the base of the links in emails
	// (BACKD_URL); a realm's email.public_url overrides it.
	BackdURL string
	// Dev rereads function bundle manifests on every call instead of once
	// (BACKD_DEV), so a background rebuild is served without a restart.
	Dev bool
	// DisableAdminAPI leaves every /v1/{realm}/_admin route out: they answer
	// 404 like any route that doesn't exist (BACKD_ADMIN_API=false).
	DisableAdminAPI bool
	// UI, when set, is served at /_ui/ (the admin web interface).
	UI http.Handler
	// Metrics records what the API does; nil turns it off.
	Metrics *metrics.Metrics
}

type Detail struct {
	Path   string `json:"path"`
	Reason string `json:"reason"`
}

type FunctionRunner interface {
	Invoke(ctx context.Context, req executor.InvokeRequest) (executor.Result, error)
}

type Store interface {
	Repository(c *registry.Collection) storage.Repository
	// Transact runs fn once; every write made through a Repository, using
	// the context fn receives, either all commit or none do (batch writes,
	// roadmap F7). fn may run more than once on a transient conflict, so
	// it must have no side effects beyond the repositories it's given.
	Transact(ctx context.Context, fn func(ctx context.Context) error) error
}

type Worker struct {
	// contains filtered or unexported fields
}