embed

type PerfConfig struct {
	// Enabled turns the whole perf surface on. The zero value (false) means no
	// telemetry, no admin listener, no flight recorder, no watchdog.
	Enabled bool
	// Addr is the loopback HTTP listen address for the admin mux. Empty defaults
	// to DefaultPerfAddr (a fixed loopback port). The bound address (with the
	// resolved port) is logged and exposed via Server.AdminAddr.
	Addr string
	// MCP mounts the read-only perf MCP server (internal/adapter/mcpperf) at /mcp on
	// the embedded admin mux, so an agent can introspect THIS process's
	// runtime/latency/profile state over MCP. Only meaningful with Enabled. The
	// admin listener is loopback by construction (DefaultPerfAddr / a loopback Addr),
	// and setupPerf FAILS CLOSED if a non-loopback Addr is configured with MCP set:
	// the surface is UNAUTHENTICATED and can embed goroutine-derived names/timing
	// (decision 6 / CWE-306). When set, a slow-turn ring buffer is wired into the
	// embedded engine's sink so list_slow_turns sees real turns.
	MCP bool
	// GoroutineWarnThreshold arms the live goroutine-leak watchdog (decision 10):
	// a background sampler logs slog.Warn whenever runtime.NumGoroutine() exceeds
	// this count. 0 (default) disables the alarm; the runtime collector still
	// exports the goroutine count as a /metrics series regardless.
	GoroutineWarnThreshold int
	// GoroutineWarnInterval is how often the watchdog samples NumGoroutine. <= 0
	// falls back to the watchdog's own 30s default.
	GoroutineWarnInterval time.Duration
	// Logger receives the perf-surface startup/teardown lines and the watchdog
	// alarms. Nil falls back to slog.Default().
	Logger *slog.Logger
}

type Server struct {
	// contains filtered or unexported fields
}