selftest

type Delivery struct {
	Headers http.Header
	Body    []byte
}

type HTTPSink struct {
	// contains filtered or unexported fields
}

type Probe struct {
	HTTPBaseURL          string        // e.g. http://e2a:8080 — API + /api/health
	APIKey               string        // probe agent's API key (Bearer)
	AgentEmail           string        // the synthetic probe agent address
	SMTPAddr             string        // host:port of the inbound SMTP listener
	WebhookSecret        string        // signing secret of the probe webhook (HMAC verify)
	MCPBaseURL           string        // deployed streamable-HTTP MCP endpoint, e.g. http://mcp-server:3000/mcp; empty ⇒ mcp scenario skips
	RequireMCP           bool          // when true, an empty MCPBaseURL FAILS the mcp scenario instead of skipping — set on stacks where MCP must be probed (prod)
	DelegatedTokenURL    string        // trusted endpoint that vends one short-lived delegated token; empty ⇒ delegated scenario skips
	DelegatedTokenSecret string        // dedicated Bearer credential for DelegatedTokenURL; never logged
	RequireDelegatedAuth bool          // when true, incomplete delegated config FAILS instead of skipping
	Sink                 *HTTPSink     // receives the webhook callback for the round-trip
	HTTP                 *http.Client  // nil → defaultHTTPClient
	Timeout              time.Duration // round-trip await timeout; 0 → defaultRoundTripTimeout
}

type Result struct {
	Name       string `json:"name"`
	Status     Status `json:"status"`
	DurationMS int64  `json:"duration_ms"`
	Detail     string `json:"detail,omitempty"` // human-readable; never contains secrets
}

type Scenario struct {
	Name      string
	SmokeSafe bool
	Run       func(ctx context.Context, p *Probe) Result
}

type Status string

type SweepResult struct {
	Trashed int `json:"trashed"`
	Purged  int `json:"purged"`
}