# Test/dev-only fake "Skills Marketplace" double for manual local verification of the
# ai-control-service skill-catalog integration (see docker-compose.local-marketplace.yml).
#
# This is NOT a production artifact. It implements the invented placeholder contract only:
#   GET /skills  ->  200 application/json  (skills.json)          when Authorization matches
#                    401                                           otherwise
#
# The dev API key below is a fixed, obviously-fake, local-only credential. It is never a
# real secret and must never be reused outside this fixture.

worker_processes 1;

events {
  worker_connections 128;
}

http {
  include       mime.types;
  default_type  application/octet-stream;

  # Deterministic, stateless authorization check: exactly one accepted header value.
  map $http_authorization $skills_marketplace_authorized {
    default                             0;
    "Bearer dev-mock-marketplace-key"   1;
  }

  server {
    listen 80;
    server_name mock-skills-marketplace;

    location = /skills {
      if ($skills_marketplace_authorized = 0) {
        return 401;
      }

      default_type application/json;
      alias /usr/share/nginx/html/skills.json;
    }

    location / {
      return 404;
    }
  }
}