localui

type BindSpec struct {
	// contains filtered or unexported fields
}

type CertificateImport struct {
	CertificatePEM string `json:"certificate_pem"`
	PrivateKeyPEM  string `json:"private_key_pem"`
}

type DeviceCAStatus struct {
	Identity    string `json:"identity"`
	Trust       string `json:"trust"`
	NotAfter    string `json:"not_after,omitempty"`
	CertPath    string `json:"certificate_path,omitempty"`
	Remedy      string `json:"remedy,omitempty"`
	Kind        string `json:"certificate_kind,omitempty"`
	Fingerprint string `json:"fingerprint,omitempty"`
}

type LocalAuthorizationKeyRotationResult struct {
	PreviousVersion int `json:"previous_version"`
	CurrentVersion  int `json:"current_version"`
	RetainedKeys    int `json:"retained_keys"`
}

type Options struct {
	Logger   *slog.Logger
	Bind     BindSpec
	Protocol string

	DisableSelfUpgrade     bool
	EffectiveRunMode       string
	RemoteEnabled          bool
	ControlplaneBaseURL    string
	ControlplaneProviderID string
	EnvPublicID            string

	// AppServer is the Env App local API and proxy handler mounted under /_redeven_proxy/*.
	AppServer *appserver.Server

	// Agent serves direct sessions (RPC/streams) after a successful E2EE handshake.
	Agent *agent.Agent

	// ConfigPath is the absolute path to the runtime config file.
	// It is used to compute the local permission cap and to render Settings consistently.
	ConfigPath string
	StateRoot  string

	RuntimeControlSocketPath string

	// Version is the runtime build version (used by /api/local/agent/version/latest).
	Version string

	// Diagnostics stores structured debug-only request timing events.
	Diagnostics *diagnostics.Store

	// AccessGate protects the local browser entry when password mode is enabled.
	AccessGate *accessgate.Gate
	// contains filtered or unexported fields
}

type RuntimeAccessUpdate struct {
	Bind         string `json:"local_ui_bind"`
	Protocol     string `json:"local_ui_protocol"`
	PasswordMode string `json:"local_ui_password_mode"`
	Password     string `json:"local_ui_password"`
}

type Server struct {
	// contains filtered or unexported fields
}