api

type AuthConfig struct {
	Handler      *auth.Handler
	SessionStore auth.Store
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerConfig struct {
	// BindAddr is the host/IP to listen on. Empty means "all interfaces".
	// apps/server picks a safe default (127.0.0.1) and switches to the
	// public-facing form when PORT or STACKIT_PUBLIC is set.
	BindAddr    string
	Port        int
	CORSOrigins []string
	APIPrefixes []string
	StaticFS    fs.FS
	Registry    *registry.Registry

	// Auth bundles the OAuth handler, session store, and surrounding state
	// needed to gate /api/* routes behind GitHub login. When nil the server
	// runs without authentication; that mode is only safe on a private
	// network (localhost dev, tunneled access). apps/server refuses to
	// start unauthenticated when STACKIT_PUBLIC or $PORT are set unless
	// -auth-disabled is passed explicitly.
	Auth *AuthConfig
}