config

type APIConfig struct {
	Prefix string
	// DocsEnabled serves the FastAPI-style UI at /docs.
	// Default() (development) leaves this true. Changing Environment on a
	// Default() value does not flip it — use DefaultFor(env) or set this
	// field. LoadFromEnv uses DefaultDocsEnabled when GOMBIT_DOCS_ENABLED
	// is unset.
	DocsEnabled bool
}

type AuthConfig struct {
	// JWTSecret is the HMAC key for access tokens and, in cookie mode, the
	// CSRF double-submit token signature. It is never a VITE_* value.
	// Empty disables framework-owned auth routes outside production.
	JWTSecret string
	// AccessTokenTTL is the signed access-token lifetime.
	AccessTokenTTL time.Duration
	// RefreshTokenTTL is the refresh-token lifetime.
	RefreshTokenTTL time.Duration
	// BcryptCost is the bcrypt cost for password hashes. Zero means
	// bcrypt.DefaultCost. Tests may set a lower cost.
	BcryptCost int
	// Mode selects the mounted auth surface. Empty behaves as AuthModeJWT.
	Mode AuthMode
	// CookieSecure sets the Secure attribute on cookie-mode session and CSRF
	// cookies. Production requires true (Appendix C); development may set
	// false only for plain-HTTP localhost testing.
	CookieSecure bool
	// CookieSameSite sets the SameSite attribute on cookie-mode session and
	// CSRF cookies. Empty behaves as CookieSameSiteLax.
	CookieSameSite CookieSameSite
}

type AuthMode string

type CacheConfig struct {
	Driver    CacheDriver
	Namespace string
	Redis     RedisConfig
}

type CacheDriver string

type Config struct {
	AppName     string
	Environment Environment
	HTTP        HTTPConfig
	API         APIConfig
	Database    DatabaseConfig
	Cache       CacheConfig
	Logging     LoggingConfig
	Auth        AuthConfig
}

type CookieSameSite string

type DatabaseConfig struct {
	Driver DatabaseDriver
	// Required declares whether the application needs a database to function —
	// the signal a deployment host uses to decide whether to provision one
	// (surfaced in the HOST-1 application contract). Defaults to true because a
	// Gombit app is database-backed by default; set it false for an app that
	// runs without one. It does not itself force a database at startup.
	Required        bool
	DSN             string
	MaxOpenConns    int
	MaxIdleConns    int
	ConnMaxLifetime time.Duration
}

type DatabaseDriver string

type EnvLookup func(key string) (value string, ok bool)

type Environment string

type FieldError struct {
	Field   string
	Env     string
	Value   string
	Message string
}

type FieldErrors []FieldError

type HTTPConfig struct {
	Addr           string
	TrustedProxies []string
	RequestTimeout time.Duration
}

type LogLevel string

type LogSink string

type LoggingConfig struct {
	Level LogLevel
	Sink  LogSink
}

type RedisConfig struct {
	Addr         string
	Username     string
	Password     string
	DB           int
	DialTimeout  time.Duration
	ReadTimeout  time.Duration
	WriteTimeout time.Duration
	TLS          bool
	TLSInsecure  bool
}