externalmcp

type AuthRejectedError struct {
	RemoteURL       string
	StatusCode      int
	WWWAuthenticate string
}

type CachedListServers struct {
	Key     string
	Servers []*types.ExternalMCPServerEntry
}

type CachedServerDetailsResponse struct {
	Key     string
	Details *ServerDetails
}

type CallToolResult struct {
	Content []json.RawMessage
	IsError bool
}

type CatalogService struct {
	// contains filtered or unexported fields
}

type CatalogSource struct {
	Registry             Registry
	SourceType           string
	AuthProfile          string
	CertificationVersion string
	Priority             int32
	SourceKey            string
	Legacy               bool
}

type Client struct {
	// contains filtered or unexported fields
}

type ClientOptions struct {
	// Metrics optionally injects recovery instruments; nil uses the process OTel provider.
	Metrics *Metrics
	// Authorization is the value for the Authorization header (e.g., "Bearer token").
	// If empty, no Authorization header is sent.
	Authorization string
	// Headers contains additional HTTP headers to send with each request.
	// Keys are header names, values are header values.
	Headers map[string]string
	// DisableRetries skips both the HTTP-transport retry layer and the MCP
	// transport's own connection retries. The two compound (up to 4 HTTP
	// attempts per MCP-level retry, each with its own backoff), which is
	// fine for the resilient gateway proxy path but defeats a caller-imposed
	// context deadline meant to bound a one-shot interactive probe — without
	// this, an unreachable server can take minutes to report as such instead
	// of the ~10s the probe intends.
	DisableRetries bool
	// MaxResponseBytes caps each HTTP response when greater than zero. It is
	// intended for short-lived, untrusted probes; the long-lived gateway path
	// leaves this at zero.
	MaxResponseBytes int64
}

type ExternalMCPOAuthConfig struct {
	// RemoteURL is the parsed URL of the external MCP server
	RemoteURL *url.URL
	// RegistryID is the ID of the MCP registry the server belongs to
	RegistryID string
	// Slug is the tool prefix slug (e.g., "github")
	Slug string
	// Name is the reverse-DNS server name (e.g., "ai.exa/exa")
	Name string

	// OAuth metadata from the external server
	OAuthVersion          string   // "2.1", "2.0", or "none"
	AuthorizationEndpoint string   // OAuth authorization endpoint URL
	TokenEndpoint         string   // OAuth token endpoint URL
	RegistrationEndpoint  string   // OAuth dynamic client registration endpoint URL
	ScopesSupported       []string // OAuth scopes supported by the server
}

type HeaderDefinition struct {
	Name       string // Prefixed environment variable name (e.g., "SLACK_X_API_KEY")
	HeaderName string // HTTP header to send (e.g., "X-Api-Key")
}

type ListServersParams struct {
	Search *string
}

type ListServersResult struct {
	Servers []*types.ExternalMCPServerEntry
}

type Metrics struct {
	// contains filtered or unexported fields
}

type OAuthDiscoveryResult struct {
	Version               string // "2.1", "2.0", or "none"
	Issuer                string // Authorization server issuer from RFC 8414 metadata.
	AuthorizationEndpoint string
	TokenEndpoint         string
	RegistrationEndpoint  string
	ScopesSupported       []string

	// ClientIDMetadataDocumentSupported reports whether the authorization
	// server advertises client_id_metadata_document_supported (OAuth CIMD
	// draft). When true, a client may send a metadata-document URL as
	// client_id instead of dynamically registering.
	ClientIDMetadataDocumentSupported bool

	// TokenEndpointAuthMethodsSupported is the authorization server's
	// advertised token_endpoint_auth_methods_supported. Empty means the
	// document omitted the field; CIMD public clients require "none" only
	// when the server enumerated methods.
	TokenEndpointAuthMethodsSupported []string

	// ProbeIncomplete reports that at least one discovery request failed
	// without the server cleanly saying the document is not there (only a
	// 404 or 410 says that): unreachable host, TLS failure, auth or
	// rate-limit refusal, 5xx, or invalid published metadata. A Version of
	// "none" with ProbeIncomplete set means discovery could not run to
	// completion — callers that treat "none" as "publishes no OAuth
	// metadata" must keep that case distinct.
	ProbeIncomplete bool
}

type OfficialRegistryAdapter struct {
	// contains filtered or unexported fields
}

type PlanResolver func(ctx context.Context, toolURN urn.Tool, projectID uuid.UUID) (*ToolCallPlan, error)

type ProxyToolEntry struct {
	SourceSlug string   // e.g., "slack" - used for matching
	URN        urn.Tool // URN of the proxy tool (e.g., tools:ext-mcp:slack:proxy)
}

type ProxyToolExecutor struct {
	// contains filtered or unexported fields
}

type PulseBackend struct {
	// contains filtered or unexported fields
}

type Registry struct {
	ID  uuid.UUID
	URL string
}

type RegistryBackend interface {
	Match(req *http.Request) bool
	Authorize(req *http.Request) error
}

type RegistryClient struct {
	// contains filtered or unexported fields
}

type RegistryReader interface {
	ListServers(ctx context.Context, registry Registry, params ListServersParams) (ListServersResult, error)
	GetServerDetails(ctx context.Context, registry Registry, serverName string, allowedRemoteURLs []string) (*ServerDetails, error)
}

type RemoteHeader struct {
	Name        string  `json:"name"`
	IsSecret    bool    `json:"isSecret"`
	IsRequired  bool    `json:"isRequired"`
	Description *string `json:"description,omitempty"`
	Placeholder *string `json:"placeholder,omitempty"`
}

type RemoteVariable struct {
	Description *string  `json:"description,omitempty"`
	IsSecret    bool     `json:"isSecret"`
	IsRequired  bool     `json:"isRequired"`
	Default     *string  `json:"default,omitempty"`
	Choices     []string `json:"choices,omitempty"`
}

type ServerDetails struct {
	Name          string
	Description   string
	Version       string
	RemoteURL     string
	TransportType externalmcptypes.TransportType
	Tools         []serverTool
	Headers       []RemoteHeader
	Variables     map[string]RemoteVariable
}

type Service struct {
	// contains filtered or unexported fields
}

type SystemEnvLoader func(ctx context.Context, toolURN urn.Tool) (*toolconfig.CaseInsensitiveEnv, error)

type Tool struct {
	Name        string
	Description string
	Schema      json.RawMessage
	Annotations *ToolAnnotations
}

type ToolAnnotations struct {
	Title           string `json:"title,omitempty"`
	ReadOnlyHint    *bool  `json:"readOnlyHint,omitempty"`
	DestructiveHint *bool  `json:"destructiveHint,omitempty"`
	IdempotentHint  *bool  `json:"idempotentHint,omitempty"`
	OpenWorldHint   *bool  `json:"openWorldHint,omitempty"`
}

type ToolCallEnv = toolconfig.ToolCallEnv

type ToolCallPlan struct {
	RemoteURL         string
	ToolName          string          // The tool name to call on the MCP server
	InputSchema       json.RawMessage // Original upstream schema; nil for a proxy placeholder
	Slug              string
	RequiresOAuth     bool
	TransportType     externalmcptypes.TransportType
	HeaderDefinitions []HeaderDefinition
}

type ToolExtractor struct {
	// contains filtered or unexported fields
}

type ToolExtractorTask struct {
	OrgSlug      string
	ProjectSlug  string
	ProjectID    uuid.UUID
	DeploymentID uuid.UUID
	MCP          ToolExtractorTaskMCPServer
}

type ToolExtractorTaskMCPServer struct {
	AttachmentID            uuid.UUID
	RegistryID              uuid.NullUUID
	Name                    string
	Slug                    string
	RegistryServerSpecifier string
	SelectedRemotes         []string
}