gateway

type AgentProcessor interface {
	Process(ctx context.Context, sessionID, content string) (string, error)
}

type AgentSecretStore interface {
	SetAgentSecret(ctx context.Context, agentID uuid.UUID, name, value string) error
	DeleteAgentSecret(ctx context.Context, agentID uuid.UUID, name string) error
	ListAgentSecretNames(ctx context.Context, agentID uuid.UUID) ([]string, error)
}

type AgentsHTTP struct {
	// contains filtered or unexported fields
}

type AgentsHTTPConfig struct {
	Agents *agents.Service
	Logger *slog.Logger
	// Secrets, when non-nil, enables the agent Secrets surface
	// (/api/agents/{id}/secrets). Nil (no secret vault configured) leaves
	// those routes unregistered.
	Secrets AgentSecretStore
	// SkillSecretDecls maps an enabled skill name to the secrets it declares,
	// supplied by the composition root (which owns the skill manager). Nil is
	// treated as "no declarations".
	SkillSecretDecls func(skillName string) []SecretDecl
	// InvalidateAgent evicts an agent's cached runtime instance so a
	// freshly-set secret takes effect on its next turn. Nil is a no-op.
	InvalidateAgent func(agentID uuid.UUID)
}

type AuthMessage struct {
	Token    string `json:"token,omitempty"`
	DeviceID string `json:"device_id,omitempty"`
}

type ChatMessage struct {
	SessionID string `json:"session_id,omitempty"`
	Content   string `json:"content"`
	Channel   string `json:"channel,omitempty"`
	ReplyTo   string `json:"reply_to,omitempty"`
}

type Client struct {
	ID string
	// contains filtered or unexported fields
}

type Config struct {
	Address         string
	ReadTimeout     time.Duration
	WriteTimeout    time.Duration
	PingInterval    time.Duration
	Logger          *slog.Logger
	Agent           AgentProcessor
	WebhookHandlers map[string]http.Handler // Path -> Handler for webhook endpoints
	AllowedOrigins  []string                // Allowed origins for WebSocket connections (empty allows all)
	APIKeys         []string                // Valid API keys for authentication (empty disables auth)
	RequireAuth     bool                    // If true, clients must authenticate before sending messages
	RateLimit       *RateLimitConfig        // Per-sender rate limiting config (nil disables)
	EnableMetrics   bool                    // If true, expose /metrics endpoint for Prometheus
}

type ConnectAuthorizer func(r *http.Request) (userID string, ok bool)

type DefaultMessageHandler struct {
	// contains filtered or unexported fields
}

type EventMessage struct {
	Event   string                 `json:"event"`
	Channel string                 `json:"channel,omitempty"`
	Data    map[string]interface{} `json:"data,omitempty"`
}

type Gateway struct {
	// contains filtered or unexported fields
}

type GlobalSecretBinding struct {
	Name   string `json:"name"`
	Source string `json:"source"`
	Set    bool   `json:"set"`
}

type Message struct {
	ID        string                 `json:"id,omitempty"`
	Type      MessageType            `json:"type"`
	Channel   string                 `json:"channel,omitempty"`
	Content   string                 `json:"content,omitempty"`
	Data      map[string]interface{} `json:"data,omitempty"`
	Error     string                 `json:"error,omitempty"`
	Timestamp time.Time              `json:"timestamp,omitempty"`
}

type MessageHandler func(ctx context.Context, client *Client, msg *Message) (*Message, error)

type MessageType string

type Metrics struct {
	// Connection metrics
	ActiveConnections prometheus.Gauge
	TotalConnections  prometheus.Counter

	// Message metrics
	MessagesReceived  *prometheus.CounterVec
	MessagesSent      *prometheus.CounterVec
	MessageDurationMs *prometheus.HistogramVec
	RateLimitedCount  prometheus.Counter

	// Agent metrics
	AgentRequests   prometheus.Counter
	AgentErrors     prometheus.Counter
	AgentDurationMs prometheus.Histogram

	// Tool metrics
	ToolInvocations *prometheus.CounterVec
	ToolDurationMs  *prometheus.HistogramVec
}

type Observability struct {
	// contains filtered or unexported fields
}

type ObservabilityConfig struct {
	// ServiceName is the name of this gateway service.
	ServiceName string

	// ServiceVersion is the version of this gateway service.
	ServiceVersion string

	// ObservopsProvider is the observops provider for metrics/traces.
	ObservopsProvider observops.Provider

	// AgentopsStore is the agentops store for workflow/task tracking.
	AgentopsStore agentops.Store

	// Logger is the logger for observability events.
	Logger *slog.Logger
}

type PersonalChatHTTP struct {
	// contains filtered or unexported fields
}

type PersonalChatHTTPConfig struct {
	Chats  *chats.Service
	UserID uuid.UUID
	Logger *slog.Logger
}

type RateLimitConfig struct {
	// Rate is the number of messages allowed per second per sender.
	Rate float64
	// Burst is the maximum number of messages that can be sent in a burst.
	Burst int
	// CleanupInterval is how often to clean up stale buckets.
	CleanupInterval time.Duration
}

type RateLimiter struct {
	// contains filtered or unexported fields
}

type SSOProvider interface {
	// AuthURL returns the redirect URL for the provider's consent screen,
	// carrying state (CSRF) and nonce (OIDC replay protection).
	AuthURL(state, nonce string) string
	// Exchange trades an authorization code for the provider's verified
	// subject (a stable per-account id) and verified email. nonce is echoed
	// back for providers that need it (Google); others ignore it.
	Exchange(ctx context.Context, code, nonce string) (subject, verifiedEmail string, err error)
}

type SecretDecl struct {
	Name        string
	Description string
	Env         string
	Required    bool
}

type SessionModelConfigurator interface {
	SetSessionModel(ctx context.Context, sessionID, model string, sticky bool) error
}

type SessionToolConfigurator interface {
	SetSessionToolOverrides(ctx context.Context, sessionID string, overrides *sessions.ToolOverrides) error
}

type TeamChatHTTP struct {
	// contains filtered or unexported fields
}

type TeamChatHTTPConfig struct {
	Chats  *chats.Service
	Logger *slog.Logger
}

type TeamHTTP struct {
	// contains filtered or unexported fields
}

type TeamHTTPConfig struct {
	// CookieSecure sets the Secure attribute and selects the cookie name:
	// __Host-oa_session (secure) or oa_session (dev/plain HTTP).
	CookieSecure bool
	// SessionTTL bounds the cookie Max-Age (mirrors auth.Config.SessionTTL).
	SessionTTL time.Duration
	// BaseURL is the origin verify redirects land on.
	BaseURL string
	Logger  *slog.Logger

	// Personal, when true, serves personal single-account auth
	// (auth.enabled=true, team.enabled=false — TRD §4) instead of full
	// team mode: the admin allowlist endpoint is not registered. It must
	// stay unreachable in this mode because the personal SQLite store has
	// no row-level security — a second allowlisted account would see the
	// sole account's data with no isolation.
	Personal bool

	// GoogleProvider and GitHubProvider are nil-able: nil means that
	// provider is not configured, and its /api/auth/{provider}* routes are
	// not registered at all (mirrors the Personal-mode convention for
	// /api/admin/*).
	GoogleProvider SSOProvider
	GitHubProvider SSOProvider

	// GlobalSecretBindings is a startup snapshot of the single-operator
	// config-level secret bindings (config.Config.Secrets and
	// Skills.Config[name].Secrets) — names and set-state only, never
	// values. Served read-only to superadmins (RMI-OMNIAGENT-213).
	GlobalSecretBindings []GlobalSecretBinding
}

type ToolInfo struct {
	Name        string `json:"name"`
	Description string `json:"description"`
	Parameters  any    `json:"parameters,omitempty"`

	// Source is the tool's origin kind ("mcp", "skill"); empty for tools
	// registered directly.
	Source string `json:"source,omitempty"`

	// MCPServer is the originating MCP server name (MCP tools only).
	MCPServer string `json:"mcp_server,omitempty"`

	// MCPToolName is the tool's original name on its MCP server, before
	// any renaming applied at registration (MCP tools only).
	MCPToolName string `json:"mcp_tool_name,omitempty"`

	// DeniedBySession marks tools excluded for the requested session by
	// its tool overrides. Only populated on session-scoped listings
	// (?session_id=), where denied tools remain listed rather than hidden
	// so a read-only inventory stays complete.
	DeniedBySession bool `json:"denied_by_session,omitempty"`
}

type ToolInvokeRequest struct {
	// Tool is the name of the tool to invoke.
	Tool string `json:"tool"`

	// Arguments are the tool arguments as JSON.
	Arguments json.RawMessage `json:"arguments"`

	// WorkflowID is the optional workflow ID for tracking.
	WorkflowID string `json:"workflow_id,omitempty"`

	// TaskID is the optional task ID for tracking.
	TaskID string `json:"task_id,omitempty"`

	// AgentID is the agent invoking the tool.
	AgentID string `json:"agent_id,omitempty"`

	// TraceID is the optional trace ID for correlation.
	TraceID string `json:"trace_id,omitempty"`

	// Metadata contains optional request metadata.
	Metadata map[string]any `json:"metadata,omitempty"`
}

type ToolInvokeResponse struct {
	// Result is the tool execution result.
	Result string `json:"result,omitempty"`

	// Error is the error message if execution failed.
	Error string `json:"error,omitempty"`

	// ToolName is the name of the tool that was invoked.
	ToolName string `json:"tool_name"`

	// DurationMs is the execution duration in milliseconds.
	DurationMs int64 `json:"duration_ms"`

	// InvocationID is the unique ID for this invocation.
	InvocationID string `json:"invocation_id,omitempty"`

	// TraceID is the trace ID for correlation.
	TraceID string `json:"trace_id,omitempty"`
}

type ToolsListHandler struct {
	// contains filtered or unexported fields
}

type ToolsListResponse struct {
	Tools []ToolInfo `json:"tools"`
}

type ToolsRPCConfig struct {
	// ToolRegistry is the registry of available tools.
	ToolRegistry *agent.ToolRegistry

	// Observability provides tracing and metrics.
	Observability *Observability

	// Logger is the logger for RPC events.
	Logger *slog.Logger

	// MaxRequestSize is the maximum request body size in bytes.
	// Default is 1MB.
	MaxRequestSize int64

	// Timeout is the maximum time for a tool invocation.
	// Default is 30 seconds.
	Timeout time.Duration
}

type ToolsRPCHandler struct {
	// contains filtered or unexported fields
}

type TraceContext struct {
	// contains filtered or unexported fields
}

type TranslateHTTP struct {
	// contains filtered or unexported fields
}

type WebHTTP struct {
	// contains filtered or unexported fields
}

type WebHTTPConfig struct {
	// Capabilities is served at GET /api/capabilities and drives the SPA's
	// capability-aware rendering (TRD §1a/§6).
	Capabilities config.Capabilities
	// Assets is the embedded web/dist directory (index.html, app.js,
	// style.css, ...). No external/CDN assets are ever referenced.
	Assets fs.FS
	Logger *slog.Logger
}