projectconfig

type Config struct {
	Gate      GateDefaults      `yaml:"gate"`
	MCPServe  MCPServeDefaults  `yaml:"mcp_serve"`
	Retention RetentionDefaults `yaml:"retention"`
}

type GateDefaults struct {
	Policy                 string `yaml:"policy"`
	Profile                string `yaml:"profile"`
	KeyMode                string `yaml:"key_mode"`
	PrivateKey             string `yaml:"private_key"` // #nosec G117 -- config key name documents expected secret input.
	PrivateKeyEnv          string `yaml:"private_key_env"`
	ApprovalPublicKey      string `yaml:"approval_public_key"`
	ApprovalPublicKeyEnv   string `yaml:"approval_public_key_env"`
	ApprovalPrivateKey     string `yaml:"approval_private_key"`
	ApprovalPrivateKeyEnv  string `yaml:"approval_private_key_env"`
	RateLimitState         string `yaml:"rate_limit_state"`
	CredentialBroker       string `yaml:"credential_broker"`
	CredentialEnvPrefix    string `yaml:"credential_env_prefix"`
	CredentialRef          string `yaml:"credential_ref"`
	CredentialScopes       string `yaml:"credential_scopes"`
	CredentialCommand      string `yaml:"credential_command"`
	CredentialCommandArgs  string `yaml:"credential_command_args"`
	CredentialEvidencePath string `yaml:"credential_evidence_path"`
	TracePath              string `yaml:"trace_path"`
	WrkrInventoryPath      string `yaml:"wrkr_inventory_path"`
}

type MCPServeDefaults struct {
	Enabled                  bool   `yaml:"enabled"`
	Listen                   string `yaml:"listen"`
	AuthMode                 string `yaml:"auth_mode"`
	AuthTokenEnv             string `yaml:"auth_token_env"`
	MaxRequestBytes          int64  `yaml:"max_request_bytes"`
	HTTPVerdictStatus        string `yaml:"http_verdict_status"`
	AllowClientArtifactPaths bool   `yaml:"allow_client_artifact_paths"`
}

type RetentionDefaults struct {
	TraceTTL   string `yaml:"trace_ttl"`
	SessionTTL string `yaml:"session_ttl"`
	ExportTTL  string `yaml:"export_ttl"`
}