server

type AuthConfig struct {
	JWTSecret        string         // Required for login when UserStore is set
	AllowSignup      bool           // Open POST /api/otp/request to self-registration; closed by default
	CORSOrigin       string         // If set, enable CORS with this origin (e.g. "http://localhost:5173")
	QuotaService     *quota.Service // Optional; when set, create chat/run enforce quota and return 429 when exceeded
	DefaultQuotaTier string         // Default quota tier for new users (e.g. signup); used when calling CreateUser
	// Token lifetimes; zero means the default in internal/core/model.
	AccessTokenTTL       time.Duration
	RefreshTokenTTL      time.Duration
	RefreshRotationGrace time.Duration
}

type Config struct {
	Addr     string // Listen address (e.g. ":5678")
	Auth     AuthConfig
	Stores   StoresConfig
	Services ServicesConfig
	Storage  StorageConfig
	Worker   WorkerConfig
	Conv     ConversationConfig
	Webhook  WebhookConfig
	// Audit records sensitive actions. Nil discards them.
	Audit *audit.Recorder
	// Deployment describes this deployment for the admin system status.
	Deployment admin.DeploymentInfo
	// RedactedConfig is the operator-facing view of server.yaml. Nil means the
	// admin configuration route answers 503.
	RedactedConfig any
	// Readiness lists the dependency probes GET /readyz runs. Empty means the
	// endpoint reports ready without verifying anything, and says so by
	// returning an empty check list.
	Readiness []ReadinessCheck
}

type ConversationConfig struct {
	TitleGenerator           llm.TitleGenerator
	ConversationStore        model.ConversationStore
	ConversationMessageStore model.ConversationMessageStore
	ConversationLLMClient    llm.LLMClient
	// LLMGateway serves managed inference to authenticated clients. Nil leaves
	// the /llm routes answering 503.
	LLMGateway *llmgateway.Service
}

type ReadinessCheck struct {
	// Name appears in the response, so it must be safe to show an
	// unauthenticated caller: "database", not a DSN.
	Name  string
	Probe func(ctx context.Context) error
}

type RunOutputLister interface {
	ListRunOutputsByConversation(ctx context.Context, conversationID string, taskID *string) ([]model.ArtifactWithTask, error)
	GetTaskRunOutputFiles(ctx context.Context, taskRunID string) ([]model.TaskRunArtifact, error)
}

type Server struct {
	// contains filtered or unexported fields
}

type ServicesConfig struct {
	// Plugin publishes Marketplace releases and manages catalog entries. Nil
	// is a deployment with no Marketplace, which those routes report rather
	// than serving an empty catalog.
	Plugin *pluginsvc.Service
}

type StorageConfig struct {
	PersistStorage   blob.PersistStorage
	RunOutputStorage blob.RunOutputStorage
	// ArtifactStorage holds artifact content. It is separate from
	// RunOutputStorage because they are different key spaces with different
	// lifetimes, not two names for one bucket.
	ArtifactStorage blob.ArtifactStorage
	// MaxArtifactBytes caps one artifact. Zero uses the service default.
	MaxArtifactBytes int64
	WorkspacesDir    string // Overrides config.WorkspacesDir() for workspace file operations
}

type StoresConfig struct {
	UserStore           model.UserStore
	LoginCodeStore      model.LoginCodeStore
	PasswordStore       model.PasswordStore
	RefreshTokenStore   model.RefreshTokenStore
	TeamStore           model.TeamStore
	WorkflowStore       model.WorkflowStore
	AgentStore          model.AgentStore
	IssueStore          model.IssueStore
	IssueCommentStore   model.IssueCommentStore
	TaskStore           model.TaskStore
	TaskRunStore        model.TaskRunStore
	LLMCallStore        model.LLMCallStore
	RunOutputLister     RunOutputLister
	UserWebhookKeyStore model.UserWebhookKeyStore
	AuditStore          model.AuditStore
	SystemGrantStore    model.SystemGrantStore
	SchemaStore         model.SchemaStore
	LLMModelStore       model.LLMModelStore
	// ArtifactStore records durable files. Nil leaves the artifact routes
	// answering 503, which is what a deployment with no database has.
	ArtifactStore model.ArtifactStore
}

type WebhookConfig struct {
	MessagePath string // JSON path for message in body (default "message")
	UserID      string // CreatedBy for webhook runs (default "webhook")
}

type WorkerConfig struct {
	WorkerToken string // If set, required for /api/worker/*
	// LLM tells a worker how to reach a model. Nil means direct.
	LLM *workerclient.TaskRunLLM
}