mcp

type Client struct {
	*nmcp.Client
	// contains filtered or unexported fields
}

type ComponentServer struct {
	Name  string               `json:"name"`
	URL   string               `json:"url"`
	Tools []types.ToolOverride `json:"tools"`

	ToolPrefix string `json:"toolPrefix"`
	// contains filtered or unexported fields
}

type CompositeValidator struct{}

type Config struct {
	MCPServers map[string]ServerConfig `json:"mcpServers"`
}

type ContainerizedValidator struct{}

type ErrNotSupportedByBackend struct {
	Feature, Backend string
}

type File struct {
	Data    string `json:"data"`
	EnvKey  string `json:"envKey"`
	Dynamic bool   `json:"dynamic"`
}

type GlobalTokenStore interface {
	ForUserAndMCP(userID, mcpID string) nmcp.TokenStorage
}

type MissingSecretBinding struct {
	Kind    string
	Header  types.MCPHeader
	Binding *types.MCPSecretBinding
}

type NPXValidator struct{}

type Options struct {
	MCPBaseImage                      string   `usage:"The base image to use for MCP containers" default:"ghcr.io/obot-platform/mcp-images/stdio-wrapper:v0.24.2"`
	MCPHTTPWebhookBaseImage           string   `` /* 145-byte string literal not displayed */
	MCPNamespace                      string   `usage:"The namespace to use for MCP containers" default:"obot-mcp"`
	MCPClusterDomain                  string   `usage:"The cluster domain to use for MCP containers" default:"cluster.local"`
	DisallowLocalhostMCP              bool     `usage:"Disallow MCP containers from connecting to localhost" default:"true"`
	DisallowPrivateIPMCP              bool     `usage:"Disallow MCP containers from connecting to private IPs" default:"true"`
	DisallowLinkLocalMCP              bool     `usage:"Disallow MCP containers from connecting to link-local addresses" default:"true"`
	MCPRuntimeBackend                 string   `usage:"The runtime backend to use for running MCP servers: docker, kubernetes, or k8s. Defaults to docker" default:"docker"`
	MCPSecretBindingAllowedLabel      string   `` /* 148-byte string literal not displayed */
	MCPImagePullSecrets               []string `usage:"The name of the image pull secret to use for pulling MCP images"`
	SingleUserIdleServerShutdownHours int      `` /* 150-byte string literal not displayed */
	MultiUserIdleServerShutdownHours  int      `usage:"The interval in hours to check for idle multi-user MCP servers and shut them down, set to -1 to disable" default:"168"`
	IdleAgentShutdownHours            int      `usage:"The interval in hours to check for idle agents and shut them down, set to -1 to disable" default:"72"`

	// Kubernetes settings from Helm
	MCPK8sSettingsAffinity              string `usage:"Affinity rules for MCP server pods (JSON)"`
	MCPK8sSettingsTolerations           string `usage:"Tolerations for MCP server pods (JSON)"`
	MCPK8sSettingsResources             string `usage:"Resource requests/limits for MCP server pods (JSON)"`
	MCPK8sSettingsNanobotAgentResources string `usage:"Resource requests/limits for NanobotAgent pods (JSON)"`
	MCPK8sSettingsRuntimeClassName      string `usage:"RuntimeClass name for MCP server pods (e.g., gvisor, kata)"`
	MCPK8sSettingsStorageClassName      string `usage:"StorageClass name for nanobot workspace volumes"`
	MCPK8sSettingsNanobotWorkspaceSize  string `usage:"Nanobot workspace size for MCP server pods (e.g., 1Gi)"`
	MCPK8sMaxCPURequest                 string `usage:"Maximum CPU request allowed for normal MCP server pods"`
	MCPK8sMaxCPULimit                   string `usage:"Maximum CPU limit allowed for normal MCP server pods"`
	MCPK8sMaxMemoryRequest              string `usage:"Maximum memory request allowed for normal MCP server pods"`
	MCPK8sMaxMemoryLimit                string `usage:"Maximum memory limit allowed for normal MCP server pods"`

	// Obot service configuration for constructing internal service FQDN
	ServiceName      string `usage:"The Kubernetes service name for the obot server"`
	ServiceNamespace string `usage:"The Kubernetes namespace where the obot server runs"`

	// Auto-populated by the Helm chart - used for network policy provider deployment
	ServiceAccountName string `usage:"The Kubernetes service account name for the obot server"`

	// Audit log configuration
	MCPAuditLogPersistIntervalSeconds int `usage:"The interval in seconds to persist MCP audit logs to the database" default:"5"`
	MCPAuditLogsPersistBatchSize      int `usage:"The number of MCP audit logs to persist in a single batch" default:"1000"`
	MCPAuditLogRetentionDays          int `usage:"The number of days to retain MCP audit logs (0 to disable cleanup)" default:"90"`

	// Pod Security Admission configuration for MCP namespace
	MCPPodSecurityEnabled        bool   `usage:"Enable Pod Security Admission labels on the MCP namespace" default:"true"`
	MCPPodSecurityEnforce        string `usage:"Pod Security Standards level to enforce (privileged, baseline, or restricted)" default:"restricted"`
	MCPPodSecurityEnforceVersion string `usage:"Kubernetes version for the enforce policy" default:"latest"`
	MCPPodSecurityAudit          string `usage:"Pod Security Standards level to audit (privileged, baseline, or restricted)" default:"restricted"`
	MCPPodSecurityAuditVersion   string `usage:"Kubernetes version for the audit policy" default:"latest"`
	MCPPodSecurityWarn           string `usage:"Pod Security Standards level to warn about (privileged, baseline, or restricted)" default:"restricted"`
	MCPPodSecurityWarnVersion    string `usage:"Kubernetes version for the warn policy" default:"latest"`
}

type PSAEnforceLevel string

type RemoteMCPURLValidationConfig struct {
	AllowLocalhostMCP bool
	AllowPrivateIPMCP bool
	AllowLinkLocalMCP bool
}

type RemoteValidator struct {
	AllowMissingURL              bool
	RemoteMCPURLValidationConfig RemoteMCPURLValidationConfig
}

type ResourceMaximumExceededError struct {
	Field   string
	Actual  resource.Quantity
	Maximum resource.Quantity
}

type ResourceMaximums struct {
	CPURequest    *resource.Quantity
	CPULimit      *resource.Quantity
	MemoryRequest *resource.Quantity
	MemoryLimit   *resource.Quantity
}

type RuntimeValidator interface {
	ValidateConfig(ctx context.Context, manifest types.MCPServerManifest) error
	ValidateCatalogConfig(ctx context.Context, manifest types.MCPServerCatalogEntryManifest) error
	ValidateSystemConfig(ctx context.Context, manifest types.SystemMCPServerManifest) error
}

type RuntimeValidators map[types.Runtime]RuntimeValidator

type ServerConfig struct {
	Runtime types.Runtime `json:"runtime"`

	// uvx/npx based configuration.
	Command string   `json:"command"`
	Args    []string `json:"args"`
	Env     []string `json:"env"`
	Files   []File   `json:"files"`

	// Remote configuration.
	URL                     string   `json:"url"`
	TunnelName              string   `json:"tunnelName,omitempty"`
	Headers                 []string `json:"headers"`
	PassthroughHeaderNames  []string `json:"passthroughHeaderNames"`
	PassthroughHeaderValues []string `json:"passthroughHeaderValues"`

	// Containerized configuration.
	ContainerImage string `json:"containerImage"`
	ContainerPort  int    `json:"containerPort"`
	ContainerPath  string `json:"containerPath"`
	HealthzPath    string `json:"healthzPath,omitempty"`

	// Composite configuration.
	Components []ComponentServer `json:"components"`

	Scope                string `json:"scope"`
	UserID               string `json:"userID"`
	OwnerUserID          string `json:"ownerUserID"`
	MCPServerNamespace   string `json:"mcpServerNamespace"`
	MCPServerName        string `json:"mcpServerName"`
	MCPCatalogName       string `json:"mcpCatalogName"`
	MCPCatalogEntryName  string `json:"mcpCatalogEntryName"`
	MCPServerDisplayName string `json:"mcpServerDisplayName"`
	NanobotAgentName     string `json:"nanobotAgentName"`
	ComponentMCPServer   bool   `json:"componentMCPServer"`
	SystemMCPServer      bool   `json:"systemMCPServer"`

	Audiences []string `json:"audiences"`

	TokenExchangeClientID     string `json:"tokenExchangeClientID"`
	TokenExchangeClientSecret string `json:"tokenExchangeClientSecret"`

	AuditLogMetadata map[string]string `json:"auditLogMetadata"`

	StartupTimeout time.Duration                `json:"startupTimeout,omitempty"`
	Resources      *corev1.ResourceRequirements `json:"resources,omitempty"`
	Webhooks       []Webhook                    `json:"webhooks,omitempty"`
}

type SessionManager struct {
	// contains filtered or unexported fields
}

type UVXValidator struct{}

type ValidationOptions struct {
	AllowMissingURL              bool
	RemoteMCPURLValidationConfig RemoteMCPURLValidationConfig
	ResourceMaximums             ResourceMaximums
}

type Webhook struct {
	Name, DisplayName string
	URL               string
	ToolName          string
	Definitions       types.MCPSelectors
	MutateAllowed     bool
}

type WebhookHelper struct {
	// contains filtered or unexported fields
}