config

type CORSConfig struct {
	// AllowedOrigins is the list of origins allowed to make credentialed
	// (cookie-based) requests to the API. Cookie auth (session_token) only
	// works cross-origin for origins listed here — an empty list leaves CORS
	// wide open ("*") but without credentials, so browser clients can't send
	// the session cookie at all.
	AllowedOrigins []string `toml:"allowed_origins"`
}

type ConfiguredFile struct {
	Field, Path string
}

type DatabaseConfig struct {
	Path string `toml:"path"`
}

type DispatcherConfig struct {
	Server      ServerConfig      `toml:"server"`
	Logging     LoggingConfig     `toml:"logging"`
	Scheduler   SchedulerConfig   `toml:"scheduler"`
	TLS         TLSConfig         `toml:"tls"`
	Database    DatabaseConfig    `toml:"database"`
	Sui         SuiConfig         `toml:"sui"`
	CORS        CORSConfig        `toml:"cors"`
	GitHubOAuth GitHubOAuthConfig `toml:"github_oauth"`
}

type GitHubOAuthConfig struct {
	Enabled     bool   `toml:"enabled"`
	CallbackURL string `toml:"callback_url"`
	SuccessURL  string `toml:"success_url"`
}

type LoggingConfig struct {
	LogLevel string `toml:"log_level"`
	JSONLogs bool   `toml:"json_logs"`
}

type SchedulerConfig struct {
	// ExecutorTimeout is the negotiated control lease in seconds, from 1 to 300.
	// Heartbeat telemetry is separate from lease renewal.
	ExecutorTimeout int `toml:"executor_timeout"`
	// SchedulerGranularityMs is the scheduler granularity in milliseconds for time-range capacity tracking.
	SchedulerGranularityMs int64 `toml:"scheduler_granularity_ms"`
}

type ServerConfig struct {
	BindHost string `toml:"bind_host"`
	Version  string `toml:"version"`
	GRPCPort int    `toml:"grpc_port"`
	HTTPPort int    `toml:"http_port"`
	// LocalDevelopment asks the HTTP API for its local development profile, in
	// which a request that presents no credential at all is served as the
	// dispatcher's own local operator. It is an explicit opt-in and is never
	// inferred: the daemon additionally requires the environment it describes
	// (blockchain payments off, TLS listener off, both listeners on loopback)
	// and refuses to start when the key is set without it. Omitted or false
	// keeps authentication and authorization enforced.
	LocalDevelopment bool `toml:"local_development"`
	// BehindTLSTerminator states that a TLS terminator stands in front of this
	// dispatcher, so the session cookie is marked Secure although the daemon
	// itself serves cleartext. It is configuration because a request cannot be
	// trusted to describe its own scheme: X-Forwarded-Proto and its relatives
	// are set by whoever sent the request.
	BehindTLSTerminator bool `toml:"behind_tls_terminator"`
}

type ServerTLS struct {
	Combined *tls.Config
	Direct   *tls.Config
	// RequireClientIdentity reports whether an executor must present a
	// certificate issued by tls.ca_file on both control channels.
	RequireClientIdentity bool
}

type SuiConfig struct {
	Network           string `toml:"network"`       //testnet or mainnet
	GRPCEndpoint      string `toml:"grpc_endpoint"` // host:port, e.g. fullnode.testnet.sui.io:443
	GraphQLURL        string `toml:"graphql_url"`   // Sui GraphQL RPC, used to catch up on PaymentReceipt events by type
	Address           string `toml:"address"`
	PaymentRegistryId string `toml:"payment_registry_id"`
	PaymentKitPackage string `toml:"payment_kit_package"`
	KeystorePath      string `toml:"keystore_path"`
	// Disabled switches blockchain payments off explicitly. When true, the
	// dispatcher constructs neither the Sui client/listener nor the payout
	// ticker and rejects USDC/SUI payment actions; TEST payments keep working.
	// The other Sui fields are ignored in that mode. Omitted or false keeps
	// the enabled semantics unchanged; nothing is inferred from empty fields.
	Disabled bool `toml:"disabled"`
}

type TLSConfig struct {
	Disable  bool   `toml:"disable"`
	CertFile string `toml:"cert_file"`
	KeyFile  string `toml:"key_file"`
	CAFile   string `toml:"ca_file,omitempty"` // optional for client cert validation
	// RequireClientCert makes an executor present a certificate issued by
	// CAFile on both control channels: the direct gRPC listener refuses a
	// missing identity during the handshake, and the reverse control stream
	// on the combined listener is refused after it. The HTTP API shares that
	// listener and keeps working without a client certificate.
	RequireClientCert bool `toml:"require_client_cert"`
}