config

type Config struct {
	GitLabURL         string
	GitLabToken       string
	SkipTLSVerify     bool
	DisableRetries    bool // Disable GitLab client retries for unit tests.
	MetaTools         bool
	ToolSurface       string
	CapabilitySurface string

	// Tier is the resolved GitLab licensing tier for this configuration.
	// When TierExplicit is false it holds the conservative default
	// (edition.Free); callers detect the real tier from the instance license.
	Tier edition.Tier
	// TierExplicit reports whether the tier was set explicitly via GITLAB_TIER
	// (stdio) or --tier (HTTP). When true, no instance license check is
	// performed and Tier is used verbatim. When false, the tier is detected
	// per instance, falling back to edition.Free.
	TierExplicit bool

	ReadOnly bool
	SafeMode bool

	EmbeddedResources bool // Append EmbeddedResource content blocks to get_* tool results (default true)

	UploadMaxFileSize int64

	MaxHTTPClients     int           // Maximum unique tokens in the server pool (HTTP mode only)
	SessionTimeout     time.Duration // Idle MCP session timeout (HTTP mode only)
	RevalidateInterval time.Duration // Token re-validation interval (HTTP mode only)

	AutoUpdate         string        // Auto-update mode: "true" (auto), "check" (log-only), "false" (disabled)
	AutoUpdateRepo     string        // GitLab project path for update checks
	AutoUpdateInterval time.Duration // How often to check for updates (HTTP mode)
	AutoUpdateTimeout  time.Duration // Timeout for startup/background update checks

	AuthMode      string        // Auth mode for HTTP: "legacy" (default) or "oauth"
	OAuthCacheTTL time.Duration // OAuth token cache TTL (HTTP mode, oauth auth mode)

	TrustedProxyHeader string   // HTTP header with real client IP (e.g. X-Forwarded-For, X-Real-IP)
	ExcludeTools       []string // Tool names to exclude from registration (comma-separated via EXCLUDE_TOOLS)
	IgnoreScopes       bool     // When true, skip PAT scope detection and register all tools

	RateLimitRPS   float64 // Per-server tools/call rate limit in requests/second (0 = disabled)
	RateLimitBurst int     // Token-bucket burst size when RateLimitRPS > 0

	// MetaParamSchema controls how meta-tool input schemas advertise the
	// shape of the `params` object. Allowed values: "opaque" (default),
	// "compact", "full". See [DefaultMetaParamSchema] and constants.
	MetaParamSchema string
}

type ServerConfig struct {
	GitLabURL         string
	MetaTools         bool
	ToolSurface       string
	CapabilitySurface string
	// Tier is the resolved GitLab licensing tier for this pool entry. When the
	// owning Config did not set the tier explicitly, the pool detects it per
	// instance before building the server.
	Tier edition.Tier
	// TierExplicit mirrors Config.TierExplicit: when true the tier is used
	// verbatim and the pool performs no per-instance license detection.
	TierExplicit    bool
	ReadOnly        bool
	SafeMode        bool
	ExcludeTools    []string
	TokenScopes     []string
	RateLimitRPS    float64
	RateLimitBurst  int
	MetaParamSchema string
}