barndoor

type AgentToken struct {
	// AgentToken is the agent access token.
	AgentToken string `json:"agent_token"`
	// ExpiresIn is the token lifetime in seconds.
	ExpiresIn int `json:"expires_in"`
}

type AlertTypeOption struct {
	// Value is what to send as a subscription's AlertType.
	Value string `json:"value"`
	// Label is a human-readable label for display.
	Label string `json:"label"`
	// Category is the type's category. Intrinsic to the type, not configurable.
	Category string `json:"category"`
	// Severity is the type's severity ("info", "warning", "critical"). Also intrinsic.
	Severity string `json:"severity"`
}

type AuthEnvironmentConfig struct {
	Issuer   string
	Audience string
	BaseURL  string
}

type AuthenticationError struct {
	BarndoorError
	ErrorCode string
}

type AuthorizationURLParams struct {
	Domain      string // deprecated: use Issuer
	ClientID    string
	RedirectURI string
	Audience    string
	Scope       string
	Issuer      string
}

type BarndoorConfig struct {
	AuthIssuer     string
	ClientID       string
	ClientSecret   string // #nosec G117 -- OAuth client secret config field
	APIAudience    string
	BaseURL        string
	Environment    string
	PromptForLogin bool
	SkipLoginLocal bool
}

type BarndoorConfigOptions struct {
	AuthIssuer     string
	AuthDomain     string // deprecated: use AuthIssuer
	ClientID       string
	ClientSecret   string // #nosec G117 -- OAuth client secret config field
	APIAudience    string
	BaseURL        string
	Environment    string
	PromptForLogin bool
	SkipLoginLocal bool
}

type BarndoorError struct {
	Message string
}

type BarndoorSDK struct {
	// Base is the base URL of the Barndoor API.
	Base string
	// contains filtered or unexported fields
}

type Channel struct {
	// ID is the server-assigned channel id.
	ID string `json:"id"`
	// Type is the kind of destination.
	Type ChannelType `json:"type"`
	// Enabled reports whether the channel currently delivers.
	Enabled bool `json:"enabled"`
	// UserID is the owning user for a personal channel; nil for organization-wide types.
	UserID *string `json:"user_id,omitempty"`
	// EmailAddress is the destination for ChannelTypeEmail.
	EmailAddress *string `json:"email_address,omitempty"`
	// URL is the destination for ChannelTypeWebhook.
	URL *string `json:"url,omitempty"`
	// Label is a human-readable name, set for slack and teams channels.
	Label *string `json:"label,omitempty"`
	// SlackChannelID is the Slack channel id for ChannelTypeSlack.
	SlackChannelID *string `json:"slack_channel_id,omitempty"`
	// Subscriptions are the alert types this channel delivers. Empty means it
	// delivers nothing.
	Subscriptions []ChannelSubscription `json:"subscriptions"`
	CreatedAt     string                `json:"created_at,omitempty"`
	UpdatedAt     string                `json:"updated_at,omitempty"`
	// HasSigningSecret reports whether a webhook channel has a stored signing secret.
	// The secret itself is never readable back.
	HasSigningSecret bool `json:"has_signing_secret"`
	// HasWorkflowURL reports whether a teams channel has a stored Workflows URL
	// (itself a secret, never returned).
	HasWorkflowURL bool `json:"has_workflow_url"`
	// SigningSecret is the one-time reveal of a newly generated webhook signing
	// secret. Populated ONLY on the response that created it, and nil on every later
	// read — store it when you receive it, or rotate with RegenerateChannelSecret.
	SigningSecret *string `json:"signing_secret,omitempty"`
}

type ChannelOptions struct {
	// AlertTypes is every alert type this organization may subscribe a channel to.
	AlertTypes []AlertTypeOption `json:"alert_types"`
	// Categories is the full category vocabulary, unfiltered.
	Categories []LabeledOption `json:"categories"`
	// Severities is the full severity vocabulary, unfiltered.
	Severities []LabeledOption `json:"severities"`
}

type ChannelSubscription struct {
	// AlertType is the alert type delivered to the channel (e.g. "break_glass_used").
	// Read the live vocabulary from GetChannelOptions rather than hardcoding it — the
	// set grows over time and is gated per organization.
	AlertType string `json:"alert_type"`
}

type ChannelTestResult struct {
	// OK reports whether the test message reached the destination transport.
	OK bool `json:"ok"`
	// Error is why delivery failed, when OK is false.
	Error *string `json:"error,omitempty"`
}

type ChannelType string

type ConfigurationError struct {
	BarndoorError
}

type ConnectionError struct {
	BarndoorError
	URL           string
	OriginalError error
}

type ConnectionStatus string

type FileTokenStorage struct {
	// contains filtered or unexported fields
}

type HTTPError struct {
	BarndoorError
	StatusCode   int
	ResponseBody string
}

type JWTVerificationResult int

type LabeledOption struct {
	Value string `json:"value"`
	Label string `json:"label"`
}

type Logger interface {
	Debug(message string, args ...any)
	Info(message string, args ...any)
	Warn(message string, args ...any)
	Error(message string, args ...any)
}

type LoginInteractiveOptions struct {
	// AuthIssuer is the OIDC issuer URL.
	AuthIssuer string
	// AuthDomain is deprecated; use AuthIssuer.
	AuthDomain string
	// ClientID is the OAuth client ID.
	ClientID string
	// ClientSecret is the OAuth client secret.
	ClientSecret string // #nosec G117 -- OAuth client secret config field
	// Audience is the API audience identifier.
	Audience string
	// BaseURL is the base URL of the Barndoor API.
	BaseURL string
	// Port is the local port for OAuth callback (default: 52765).
	Port int
	// TokenPath is an optional file path for storing the auth token.
	// Useful when authenticating multiple agents concurrently.
	// If empty, defaults to ~/.barndoor/token.json.
	TokenPath string
}

type MCPConnectionParams struct {
	URL       string            `json:"url"`
	Transport string            `json:"transport"`
	Headers   map[string]string `json:"headers"`
}

type OAuthError struct {
	AuthenticationError
}

type OidcConfig struct {
	Issuer                string `json:"issuer"`
	TokenEndpoint         string `json:"token_endpoint"`
	AuthorizationEndpoint string `json:"authorization_endpoint"`
	UserinfoEndpoint      string `json:"userinfo_endpoint"`
	JWKSURI               string `json:"jwks_uri"`
}

type OrganizationExtractionResult struct {
	OrganizationID  string
	HasOrganization bool
	Error           string
}

type PKCEManager struct {
	// contains filtered or unexported fields
}

type SDKOptions struct {
	// Token is the user JWT token (optional - can be set later via Authenticate).
	Token string
	// ValidateTokenOnInit controls whether the token is validated on initialization.
	ValidateTokenOnInit bool
	// Timeout is the request timeout in seconds (default: 30).
	Timeout float64
	// MaxRetries is the maximum number of retries (default: 3).
	MaxRetries int
}

type ServerDetail struct {
	ServerSummary
	// URL is the MCP base URL from the server directory.
	URL *string `json:"url,omitempty"`
}

type ServerNotFoundError struct {
	BarndoorError
	ServerIdentifier string
	AvailableServers []string
}

type ServerSummary struct {
	// ID is the unique identifier (UUID) for the server.
	ID string `json:"id"`
	// Name is the human-readable name of the server.
	Name string `json:"name"`
	// Slug is the URL-friendly identifier used in API paths.
	Slug string `json:"slug"`
	// Provider is the third-party provider name (e.g., "github", "slack").
	Provider *string `json:"provider,omitempty"`
	// ConnectionStatus is the current connection status.
	ConnectionStatus ConnectionStatus `json:"connection_status"`
}

type TimeoutError struct {
	BarndoorError
}

type TokenData struct {
	AccessToken  string `json:"access_token"`            // #nosec G117 -- OAuth token field
	RefreshToken string `json:"refresh_token,omitempty"` // #nosec G117 -- OAuth token field
	TokenType    string `json:"token_type,omitempty"`
	ExpiresIn    int    `json:"expires_in,omitempty"`
	Scope        string `json:"scope,omitempty"`
}

type TokenError struct {
	AuthenticationError
	HelpText string
}

type TokenExchangeParams struct {
	Domain       string // deprecated: use Issuer
	ClientID     string
	Code         string
	RedirectURI  string
	ClientSecret string // #nosec G117 -- OAuth client secret param
	Issuer       string
}

type TokenExpiredError struct {
	TokenError
}

type TokenManager struct {
	// contains filtered or unexported fields
}

type TokenStorage interface {
	LoadToken() (*TokenData, error)
	SaveToken(tokenData *TokenData) error
	ClearToken() error
}

type TokenValidationError struct {
	TokenError
}

type UpsertChannelInput struct {
	// Type is the kind of destination. Required.
	Type ChannelType
	// ChannelID is an existing channel to edit authoritatively. Empty means
	// create-or-dedup on the type's natural identity. When set and unknown — or owned
	// by another organization — the call returns an *HTTPError with status 404.
	ChannelID string
	// Enabled controls whether the channel delivers. Nil defaults to true. Setting it
	// to false suspends delivery while keeping the channel and its subscriptions —
	// the reversible alternative to deleting it.
	Enabled *bool
	// EmailAddress is the destination for ChannelTypeEmail.
	EmailAddress string
	// URL is the destination for ChannelTypeWebhook. Must be https and resolve to a
	// public address.
	URL string
	// Label is a human-readable name. Required for slack and teams.
	Label string
	// SlackChannelID is the Slack channel id (not its name) for ChannelTypeSlack.
	SlackChannelID string
	// TeamsWorkflowURL is the Teams Workflows URL for ChannelTypeTeams. Write-only:
	// never returned by any endpoint. Required on create, optional when editing by ID
	// (omit to keep the stored URL).
	TeamsWorkflowURL string
	// Subscriptions is the complete set of alert types to deliver. It REPLACES the
	// channel's existing set — a nil or empty slice unsubscribes it from everything.
	// At most one entry per alert type.
	Subscriptions []string
}

type WebhookSecret struct {
	// SigningSecret is a Standard Webhooks secret ("whsec_" + base64), shown exactly
	// once. Rotating invalidates the previous secret immediately, so deploy this value
	// before the next alert fires.
	SigningSecret string `json:"signing_secret"`
}