runtimeconfig

type CloudflaredConfig struct {
	Runtime     Config
	Cloudflared CloudflaredSettings
}

type CloudflaredSettings struct {
	// Token is the pre-provisioned remotely managed Cloudflare Tunnel token.
	// It is kept in memory only and is passed to cloudflared through its
	// TUNNEL_TOKEN environment variable, never argv.
	Token string
	// Managed fetches the remotely managed Cloudflare Tunnel runtime token from
	// tunnel-service during startup. A configured Token takes precedence so
	// existing pre-provisioned deployments remain unchanged.
	Managed bool
	// Path overrides sibling-binary discovery for source builds and tests.
	Path string
	// ReadyTimeout bounds startup while waiting for cloudflared /ready.
	ReadyTimeout time.Duration
}

type Config struct {
	ControlPlane ControlPlaneConfig
	Logging      LoggingConfig
	Health       HealthConfig
	Process      ProcessConfig
	MCP          MCPConfig
	Harpoon      HarpoonConfig
	TLS          *tlsconfig.Bundle
	Runtime      RuntimeConfig
}

type ConfigSource struct {
	Path        string
	ProfileName string
	ProfilePath string
	ProfileDir  string
	ProfileFile bool
}

type ControlPlaneConfig struct {
	BaseURL               *url.URL
	UnixSocketPath        string
	URLPath               string
	TunnelID              types.TunnelID
	OrganizationID        string
	APIKey                string
	MaxInFlightRequests   int
	PollTimeout           time.Duration
	PollDeadlineGuardrail time.Duration
	// PollChannels is an explicit, sorted allowlist of channels to drain. When
	// PollChannelsConfigured is false, polling remains wire-compatible with
	// older clients and sends no channel query parameters.
	PollChannels           []types.Channel
	PollChannelsConfigured bool
	// PollBackoffMin/PollBackoffMax allow overriding the poller's retry window.
	// Zero values fall back to the internal defaults.
	PollBackoffMin    time.Duration
	PollBackoffMax    time.Duration
	ClientCertificate *tlsconfig.ClientCertificate
	ExtraHeaders      map[string]string
	// MCPServerInfoHeader returns metadata generated from effective MCP channel
	// bindings and sent as a protected control-plane header. It is not
	// operator-configurable.
	MCPServerInfoHeader func() (string, error)
	HTTPProxy           *url.URL
	HTTPProxySource     ProxySource
}

type Flavor string

type HarpoonConfig struct {
	AllowPlaintextHTTP   bool
	MaxResponseBytes     int
	MaxRedirects         int
	AdditionalTransports []HarpoonTransportKind
	Targets              []HarpoonTarget
	HostClassifier       HarpoonHostClassifierConfig
	HTTPProxy            *url.URL
	HTTPProxySource      ProxySource
}

type HarpoonHostClassifierConfig struct {
	IncludeSuffix   []string
	IncludeRegex    []string
	IncludeLoopback bool
	IncludePrivate  bool
}

type HarpoonTarget struct {
	Label          string
	Description    string
	BaseURL        *url.URL
	UnixSocketPath string
}

type HarpoonTransportKind string

type HealthConfig struct {
	ListenAddr string
	UnixSocket string
	URLFile    string
}

type LoadContext struct {
	LookupEnv func(string) (string, bool)
	Source    ConfigSource
	RawConfig []byte
}

type LogFormat int

type LoggingConfig struct {
	Level         slog.Level
	Format        LogFormat
	File          string
	HTTPRawUnsafe bool
}

type MCPChannelBinding struct {
	Channel           types.Channel
	TransportKind     MCPTransportKind
	ServerURL         *url.URL
	UnixSocketPath    string
	Command           string
	CommandArgs       []string
	ClientCertificate *tlsconfig.ClientCertificate
	HTTPProxy         *url.URL
	HTTPProxySource   ProxySource
}

type MCPConfig struct {
	ServerURL         *url.URL
	UnixSocketPath    string
	Command           string
	CommandArgs       []string
	TransportKind     MCPTransportKind
	ClientCertificate *tlsconfig.ClientCertificate
	ChannelBindings   []MCPChannelBinding
	// AllowNoMain is set only for an explicit poll allowlist that excludes main.
	// It keeps zero-value MCPConfig compatibility for older callers.
	AllowNoMain bool
	// StartupWaitTimeout enables an opt-in startup gate for the main
	// HTTP-streamable MCP listener. Zero preserves legacy behavior.
	StartupWaitTimeout time.Duration
	// StdioSendInitializedNotification opts stdio bindings into completing the
	// MCP lifecycle when an older caller omits notifications/initialized. False
	// preserves the legacy verbatim-forwarding behavior for existing servers.
	StdioSendInitializedNotification bool
	ConnectionMaxTTL                 time.Duration
	MaxConcurrentRequests            int
	ExtraHeaders                     map[string]string
	DiscoveryExtraHeaders            map[string]string
	HTTPProxy                        *url.URL
	HTTPProxySource                  ProxySource
}

type MCPTransportKind string

type ProcessConfig struct {
	PIDFile string
}

type ProxySource string

type RuntimeConfig struct {
	ConfigFile         string
	ConfigFileContents []byte
	ProfileName        string
	ProfilePath        string
	ProfileDir         string
	ProfileFile        bool
}