mcp

type AuthConfig struct {
	// GoogleOAuth authenticates via Application Default Credentials.
	GoogleOAuth *GoogleOAuthConfig `json:"google_oauth,omitempty"`
}

type Catalog struct {
	Version int                     `json:"version"`
	Servers map[string]ServerConfig `json:"servers"`

	// CommandAllowlist, when non-empty, bounds which executables the stdio
	// servers in this catalog may launch: every stdio server's resolved
	// command (after ${VAR} expansion) must appear in this list or the
	// catalog fails validation. Allowlist entries are themselves expanded
	// before comparison, so both sides are matched post-expansion. Empty
	// (the default) imposes no restriction. Defense-in-depth for
	// deployments that want to cap the set of local processes mast can
	// spawn even when the catalog file itself is trusted.
	CommandAllowlist []string `json:"command_allowlist,omitempty"`
}

type GKEConfig struct {
	// Endpoint is the MCP server URL. Defaults to DefaultGKEEndpoint.
	Endpoint string

	// Scopes is the list of OAuth 2.0 scopes to request on the
	// access token. Defaults to []string{DefaultGKEScope}.
	Scopes []string

	// ToolFilter, when non-nil, restricts which of the server's tools
	// are exposed to the agent. Applied at first-fetch time by
	// mcptoolset.
	ToolFilter tool.Predicate

	// Name is a diagnostic label for the toolset. Defaults to "gke".
	Name string
}

type GoogleOAuthConfig struct {
	// Scopes are the OAuth 2.0 scopes to request. Empty defaults to
	// DefaultGKEScope.
	Scopes []string `json:"scopes,omitempty"`
}

type ServerConfig struct {
	// Transport is the wire mechanism: TransportHTTP or TransportStdio.
	Transport string `json:"transport"`

	// URL is the streamable-HTTP endpoint (TransportHTTP only).
	URL string `json:"url,omitempty"`
	// Auth describes how to authenticate to an HTTP server. nil means
	// the endpoint needs no credentials.
	Auth *AuthConfig `json:"auth,omitempty"`

	// Command is the executable to launch (TransportStdio only). May be a
	// bare name resolved on PATH or an absolute path. Expanded like Args.
	Command string `json:"command,omitempty"`
	// Args are the command's arguments (TransportStdio only). ${VAR}
	// references are expanded against the daemon environment via
	// os.ExpandEnv, so bare $name expands too and there is no escape for a
	// literal $ (see ServerConfig.ResolvedCommand).
	Args []string `json:"args,omitempty"`
	// Env sets environment variables for the child process (TransportStdio
	// only). Values are expanded the same way as Args; a value needing a
	// literal $ should come from the inherited daemon environment instead.
	// How Env combines with the daemon environment depends on EnvMode.
	Env map[string]string `json:"env,omitempty"`

	// EnvMode controls how the child's environment is built (TransportStdio
	// only): "" or "inherit" (default) gives the child the daemon's full
	// environment with Env layered on top; "clean" starts the child from an
	// empty environment so it sees only EnvPassthrough plus Env. Use "clean"
	// to keep unrelated daemon secrets out of a local MCP server — but then
	// list the vars it genuinely needs (e.g. PATH, HOME) in EnvPassthrough.
	EnvMode string `json:"env_mode,omitempty"`
	// EnvPassthrough lists daemon environment variable names to copy into
	// the child verbatim when EnvMode is "clean" (TransportStdio only). It
	// is rejected under inherit mode — where the child already inherits
	// everything, a passthrough list would give a false sense of scoping.
	EnvPassthrough []string `json:"env_passthrough,omitempty"`
}