config

type Config struct {
	GitLabURL         string
	GitLabToken       string
	SkipTLSVerify     bool
	DisableRetries    bool // Disable GitLab client retries for unit tests.
	MetaTools         bool
	ToolSurface       string
	CapabilitySurface string

	// Tier is the resolved GitLab licensing tier for this configuration.
	// When TierExplicit is false it holds the conservative default
	// (edition.Free); callers detect the real tier from the instance license.
	Tier edition.Tier
	// TierExplicit reports whether the tier was set explicitly via GITLAB_TIER
	// (stdio) or --tier (HTTP). When true, no instance license check is
	// performed and Tier is used verbatim. When false, the tier is detected
	// per instance, falling back to edition.Free.
	TierExplicit bool

	ReadOnly bool
	SafeMode bool

	EmbeddedResources bool // Append EmbeddedResource content blocks to get_* tool results (default true)

	UploadMaxFileSize int64

	MaxHTTPClients     int           // Maximum unique tokens in the server pool (HTTP mode only)
	SessionTimeout     time.Duration // Idle MCP session timeout (HTTP mode only)
	RevalidateInterval time.Duration // Token re-validation interval (HTTP mode only)
	// PoolIdleTimeout is how long a pooled per-token-and-URL server entry may go unused
	// before it is reclaimed; 0 keeps entries until the pool's size bound
	// evicts them (HTTP mode only).
	PoolIdleTimeout time.Duration

	// Stateless enables sessionless streamable HTTP (SEP-2567, protocol
	// 2026-07-28): the server neither reads nor sets Mcp-Session-Id, every
	// POST is self-contained, and GET/DELETE return 405 (HTTP mode only).
	Stateless bool
	// JSONResponse returns application/json bodies instead of
	// text/event-stream (SSE) for streamable responses (HTTP mode only).
	JSONResponse bool
	// MaxRequestBodyBytes caps the size of incoming streamable HTTP request
	// bodies. 0 uses the SDK default (4 MiB); negatives are rejected at
	// validation (HTTP mode only).
	MaxRequestBodyBytes int64

	AutoUpdate         string        // Auto-update mode: "true" (auto), "check" (log-only), "false" (disabled)
	AutoUpdateRepo     string        // GitLab project path for update checks
	AutoUpdateInterval time.Duration // How often to check for updates (HTTP mode)
	AutoUpdateTimeout  time.Duration // Timeout for startup/background update checks

	AuthMode      string        // Auth mode for HTTP: "legacy" (default) or "oauth"
	OAuthCacheTTL time.Duration // OAuth token cache TTL (HTTP mode, oauth auth mode)
	// PublicURL is the externally reachable origin of this deployment
	// (scheme://host[:port][/path], no trailing slash). Required in oauth
	// mode: RFC 9728 defines the protected-resource identifier as an https
	// URL, and deriving it from the bind address produces host-less or
	// wrong-origin identifiers behind any TLS-terminating proxy.
	PublicURL string

	TrustedProxyHeader string // HTTP header with real client IP (e.g. X-Forwarded-For, X-Real-IP)
	// TrustedOrigins are absolute origins (scheme://host[:port]) allowed to
	// make cross-origin browser requests. Empty by default: the server
	// refuses every cross-origin browser POST, and only a listed origin (or
	// the PublicURL origin, seeded automatically) is exempted. A trusted
	// origin is validation, not a bypass — the DNS-rebinding MUST is still
	// met for every origin not on the list.
	TrustedOrigins []string
	ExcludeTools   []string // Tool names to exclude from registration (comma-separated via EXCLUDE_TOOLS)
	IgnoreScopes   bool     // When true, skip PAT scope detection and register all tools

	RateLimitRPS   float64 // Per-server tools/call rate limit in requests/second (0 = disabled)
	RateLimitBurst int     // Token-bucket burst size when RateLimitRPS > 0

	// MetaParamSchema controls how meta-tool input schemas advertise the
	// shape of the `params` object. Allowed values: "opaque" (default),
	// "compact", "full". See [DefaultMetaParamSchema] and constants.
	MetaParamSchema string
}

type HTTPEnvOverlay struct {
	GitLabURL         *string
	SkipTLSVerify     *bool
	ToolSurface       *string
	MetaTools         *bool
	CapabilitySurface *string
	MetaParamSchema   *string

	Tier         *edition.Tier
	TierExplicit bool

	ReadOnly          *bool
	SafeMode          *bool
	EmbeddedResources *bool
	IgnoreScopes      *bool
	ExcludeTools      *string

	MaxHTTPClients     *int
	SessionTimeout     *time.Duration
	PoolIdleTimeout    *time.Duration
	RevalidateInterval *time.Duration

	AuthMode       *string
	PublicURL      *string
	TrustedOrigins *string
	OAuthCacheTTL  *time.Duration

	RateLimitRPS   *float64
	RateLimitBurst *int

	AutoUpdate         *string
	AutoUpdateRepo     *string
	AutoUpdateInterval *time.Duration
	AutoUpdateTimeout  *time.Duration
}

type ServerConfig struct {
	GitLabURL         string
	MetaTools         bool
	ToolSurface       string
	CapabilitySurface string
	// Tier is the resolved GitLab licensing tier for this pool entry. When the
	// owning Config did not set the tier explicitly, the pool detects it per
	// instance before building the server.
	Tier edition.Tier
	// TierExplicit mirrors Config.TierExplicit: when true the tier is used
	// verbatim and the pool performs no per-instance license detection.
	TierExplicit    bool
	ReadOnly        bool
	SafeMode        bool
	ExcludeTools    []string
	TokenScopes     []string
	RateLimitRPS    float64
	RateLimitBurst  int
	MetaParamSchema string
	// Stateless mirrors Config.Stateless. It reaches the server because a
	// sessionless transport cannot carry a server-initiated notification
	// outside an open request, which decides whether the legacy
	// resources/subscribe path can be honored at all.
	Stateless bool
}