webapi

May 5, 2026

Changes in this version

+ type ChatConfig struct

+ APIKeySecret string

+ CopilotPrefix string

+ Enabled bool

+ MaxTokens int

+ MaxTurns int

+ Model string

+ Provider string

type Deps

+ Chat ChatConfig

+ Clock *scheduler.TickClock

+ GitHubAppSlug string

+ SkillRepoClient SkillRepoClient

+ SweepInterval time.Duration

+ YamlEditAppendSchedule YamlAppendScheduleFunc

+ type SkillRepoClient interface

+ CreateBranch func(ctx context.Context, installID int64, owner, repo, branch, fromSHA string) error

+ CreatePR func(ctx context.Context, installID int64, req skillrepo.PRRequest) (*skillrepo.PRResult, error)

+ GetFile func(ctx context.Context, installID int64, owner, repo, path, ref string) (*skillrepo.FileContents, error)

+ PutFile func(ctx context.Context, installID int64, ...) error

+ type YamlAppendScheduleFunc func(yamlBytes []byte, skillPath string, sched *config.Schedule) ([]byte, error)

May 3, 2026

Changes in this version

+ var ErrCopilotReauthRequired = errors.New("copilot: oauth re-auth required")

May 2, 2026

Changes in this version

+ const CSRFCookieName

+ const CSRFHeaderName

+ const CopilotClientID

+ func CSRF(cfg CSRFConfig) func(http.Handler) http.Handler

+ func ClearCSRFCookie(w http.ResponseWriter)

+ func NewCSRFToken() (string, error)

+ func NewTestSessionCookie(masterKey []byte, login, role string) (*http.Cookie, error)

+ func RegisterRoutes(mux *http.ServeMux, deps Deps)

+ func RequireRole(masterKey []byte, role string, next http.Handler) http.Handler

+ func RequireSession(masterKey []byte, next http.Handler) http.Handler

+ func ResolveCopilotToken(ctx context.Context, store server.SecretStore, prefix string, ...) (string, time.Time, error)

+ func SetCSRFCookie(w http.ResponseWriter, token string, maxAge int, host string)

+ func SignOAuthState(key []byte, ttl time.Duration) (string, error)

+ func SignSession(claims SessionClaims, key []byte, ttl time.Duration) (string, error)

+ type CSRFConfig struct

+ AllowedOrigin string

+ type CopilotTokenRefsJSON struct

+ Prefix string

+ type Deps struct

+ APIBaseURL string

+ AdminLogins []string

+ GitHubAPIBase string

+ MasterKey []byte

+ OAuthClientID string

+ OAuthClientSecret string

+ PublicBaseURL string

+ Queries *dbgen.Queries

+ RateLimit RateLimiterConfig

+ Secrets server.SecretStore

+ Syncer RepoSyncer

+ ViewerLogins []string

+ WebhookSecret []byte

+ type RateLimiter struct

+ func NewRateLimiter(cfg RateLimiterConfig) (*RateLimiter, error)

+ func (rl *RateLimiter) Group(name string, next http.Handler) http.Handler

+ func (rl *RateLimiter) SSE(next http.Handler) http.Handler

+ type RateLimiterConfig struct

+ APIRPM int

+ Disabled bool

+ LRUSize int

+ OAuthRPM int

+ SSEMaxConcurrent int

+ TrustProxy bool

+ WebhookRPM int

+ type RepoSyncer interface

+ SyncOne func(ctx context.Context, connID pgtype.UUID) error

+ type SessionClaims struct

+ Exp int64

+ Login string

+ Role string

+ func SessionClaimsFromContext(ctx context.Context) SessionClaims

+ func VerifySession(cookie string, key []byte) (SessionClaims, error)

+ type UIOverrides struct

+ Cron *string

+ Enabled *bool

+ TimeoutSec *int32

+ Timezone *string