client

type AuthInfo struct {
	ExtractorInfo
	LoginPath       string `json:"loginPath,omitempty"`
	LoginTransport  string `json:"loginTransport,omitempty"`
	LoginName       string `json:"loginName,omitempty"`
	LogoutPath      string `json:"logoutPath,omitempty"`
	LogoutTransport string `json:"logoutTransport,omitempty"`
	LogoutName      string `json:"logoutName,omitempty"`
	MePath          string `json:"mePath,omitempty"`
	MeTransport     string `json:"meTransport,omitempty"`
	MeName          string `json:"meName,omitempty"`
}

type Config struct {
	// Enabled gates the entire mount. Default false.
	Enabled bool

	// Path is the URL prefix the SDK routes mount under. Default
	// DefaultPath ("/__nexus/client"). The dashboard at /__nexus/*
	// and the SDK at /__nexus/client/* share an obvious namespace;
	// the runtime files (client.js, vue.js, *.d.ts) are always
	// served unauthenticated since browsers fetch them anonymously
	// before any login. The MANIFEST is gated by the Public flag.
	Path string

	// Public, when true, exposes the FULL manifest (every endpoint,
	// every schema, every named ref, every WS path) on the
	// unauthenticated /manifest.json route — the v0.28.x default.
	//
	// Default false: the public manifest is stripped to the safe
	// minimum (Version, BasePath, Auth section, auth-flagged
	// endpoints only) so an anonymous browser can still complete
	// the login flow without leaking the API surface to scrapers.
	//
	// What works on each setting (runtime, browser-side):
	//
	//	             Public: false (default)   Public: true
	//	nx.auth.*    ✓                          ✓
	//	nx.rest      ✓ (path/args caller-side)  ✓
	//	nx.ws        ✓ (path caller-side)       ✓
	//	nx.query     ✗ (op lookup needs full)   ✓
	//	nx.mutate    ✗                          ✓
	//	nx.crud      ✗                          ✓
	//
	// TypeScript completion is unaffected by this flag — types
	// come from the dumped sdk/client.d.ts (vendored at build
	// time), not the runtime manifest.
	//
	// Recommended pattern for production: leave Public false on
	// public-facing deployments; flip to true only on internal
	// admin/dev listeners (compose with nexus.IfDeployment).
	Public bool

	// Middleware applies to every SDK route. Empty by default. For
	// the manifest specifically, prefer the Public flag — Middleware
	// gates the runtime .js files too, which most apps don't want.
	Middleware []gin.HandlerFunc

	// Manifest overrides the default per-build manifest projection.
	// Most apps leave this nil; the framework's default reads the
	// live registry. Override for multi-tenant filtering or custom
	// type-stripping. Called once on first request, then cached;
	// see Handler.Reload to invalidate.
	Manifest func() Manifest

	// OutDir, when non-empty, makes Mount also dump the SDK files
	// (client.js + client.d.ts, vue.js + vue.d.ts, manifest.json) to
	// disk on startup so a frontend's filesystem-based tooling
	// (TypeScript compiler, Vite, JetBrains, VS Code) can resolve
	// types and runtime imports without a manual `nexus client --out`
	// step. Each .js sits next to its .d.ts so TS auto-pairs them
	// regardless of whether the import uses the runtime URL or a
	// plain relative path.
	//
	// Idempotent: files are byte-compared and skipped when content
	// matches, preserving mtime — file-watcher reloads + IDE
	// re-indexing don't fire on no-op restarts.
	//
	// Recommend leaving empty in production builds. Apps that need
	// it gated to dev only can branch on an env var when building
	// the Config (this field intentionally has no built-in env
	// magic — explicit beats implicit for "writes files to your
	// project tree").
	OutDir string

	// TSConfig, when non-empty, makes Mount merge path mappings
	// (the runtime URL imports → OutDir files) into the named
	// jsconfig.json or tsconfig.json on startup. Existing fields
	// (compilerOptions.target, include, exclude, custom paths)
	// survive untouched. Same idempotent contract as OutDir.
	//
	// Only takes effect when OutDir is also set — the path
	// mappings need a target.
	TSConfig string
}

type EndpointInfo struct {
	Service     string            `json:"service"`
	Module      string            `json:"module,omitempty"`
	Transport   string            `json:"transport"` // "rest" | "graphql" | "websocket"
	Method      string            `json:"method"`
	Path        string            `json:"path"`
	Name        string            `json:"name"`
	Description string            `json:"description,omitempty"`
	Args        *registry.TypeRef `json:"args,omitempty"`
	Return      *registry.TypeRef `json:"return,omitempty"`

	// AuthRequired is true when the endpoint is gated by auth.Required
	// (or any middleware whose name starts with "auth:" — covers
	// Required + Requires).
	AuthRequired bool `json:"authRequired,omitempty"`

	// RequiresPerm is the list of permission strings auth.Requires
	// declared. Empty for unauthed endpoints or auth.Required without
	// specific perms. Derived from middleware names of the form
	// "auth:requires:perm-a,perm-b".
	RequiresPerm []string `json:"requiresPerm,omitempty"`

	// AuthFlow is "login" | "logout" | "me" when the endpoint was
	// marked via nexus.AuthRoute. Empty for normal endpoints.
	AuthFlow string `json:"authFlow,omitempty"`

	Deprecated        bool   `json:"deprecated,omitempty"`
	DeprecationReason string `json:"deprecationReason,omitempty"`
}

type ExtractorInfo struct {
	Strategy   string          `json:"strategy"`
	HeaderName string          `json:"headerName,omitempty"`
	CookieName string          `json:"cookieName,omitempty"`
	Chain      []ExtractorInfo `json:"chain,omitempty"`
}

type Handler struct {
	// contains filtered or unexported fields
}

type Manifest struct {
	Version   string                        `json:"version"`
	BasePath  string                        `json:"basePath"`
	Services  []ServiceInfo                 `json:"services,omitempty"`
	Endpoints []EndpointInfo                `json:"endpoints,omitempty"`
	Resources []ResourceInfo                `json:"resources,omitempty"`
	WS        []WSPathInfo                  `json:"ws,omitempty"`
	Auth      *AuthInfo                     `json:"auth,omitempty"`
	Refs      map[string]registry.NamedType `json:"refs,omitempty"`
}

type ResourceInfo struct {
	Name        string `json:"name"`
	Kind        string `json:"kind"`
	Description string `json:"description,omitempty"`
}

type ServiceInfo struct {
	Name        string `json:"name"`
	Description string `json:"description,omitempty"`
}

type WSMessage struct {
	Type        string            `json:"type"`
	Args        *registry.TypeRef `json:"args,omitempty"`
	Description string            `json:"description,omitempty"`
}

type WSPathInfo struct {
	Path     string      `json:"path"`
	Service  string      `json:"service"`
	Messages []WSMessage `json:"messages"`
}