Function NewAPI

internal/agent/api.go:520–543

(store *identity.Store, sender *outbound.Sender, smtpRelay *outbound.SMTPRelay, userAuth *auth.UserAuth, usage usage.UsageTracker, smtpDomain, fromDomain, sharedDomain, publicURL string, production bool)

}

func NewAPI(store *identity.Store, sender *outbound.Sender, smtpRelay *outbound.SMTPRelay, userAuth *auth.UserAuth, usage usage.UsageTracker, smtpDomain, fromDomain, sharedDomain, publicURL string, production bool) *API {
	return &API{
		store:         store,
		sender:        sender,
		screen:        piguard.NewEngine(piguard.EngineConfig{}, piguard.NewHeuristicsDetector()),
		smtpRelay:     smtpRelay,
		userAuth:      userAuth,
		usage:         usage,
		smtpDomain:    smtpDomain,
		fromDomain:    fromDomain,
		sharedDomain:  sharedDomain,
		publicURL:     publicURL,
		// Default the API/issuer URL to the web URL; SetAPIURL overrides it
		// for split web/API-host deployments.
		apiURL:        publicURL,
		production:    production,
		sendLimit:     ratelimit.New(1*time.Minute, 60), // 60 sends per agent per minute
		regLimit:      ratelimit.New(1*time.Hour, 200),  // 200 registrations per IP per hour
		pollLimit:     ratelimit.New(1*time.Minute, 60), // 60 poll requests per user per minute
		feedbackLimit: ratelimit.New(1*time.Hour, 10),   // 10 feedback submissions per IP per hour
		dcrLimit:      ratelimit.New(1*time.Hour, 10),   // 10 OAuth client registrations per IP per hour
		downloadLimit: ratelimit.New(1*time.Minute, 120), // 120 attachment downloads per IP per minute
	}
}

// SetAPIURL overrides the API/issuer base URL (default: publicURL). Set it
// when the programmatic API + MCP are served on a different host than the web