config

type APIKeyGetter interface {
	Get(provider string) (string, bool, error)
}

type APIKeySetter interface {
	Set(provider, key string) error
}

type EnsuredProvider struct {
	Name    string
	Created bool
	Active  string
}

type FileConfig struct {
	ActiveProvider string             `json:"activeProvider,omitempty"`
	Providers      []ProviderProfile  `json:"providers,omitempty"`
	MaxTurns       int                `json:"maxTurns,omitempty"`
	MCP            MCPConfig          `json:"mcp,omitempty"`
	Sandbox        SandboxConfig      `json:"sandbox,omitempty"`
	Notify         NotifyConfig       `json:"notify,omitempty"`
	Tools          ToolsConfig        `json:"tools,omitempty"`
	Swarm          SwarmConfig        `json:"swarm,omitempty"`
	Preferences    PreferencesConfig  `json:"preferences,omitempty"`
	KeyBindings    KeyBindingsConfig  `json:"keybindings,omitempty"`
	LocalControl   LocalControlConfig `json:"localControl,omitempty"`
	STT            STTConfig          `json:"stt,omitempty"`
}

type Issue struct {
	FieldPath string `json:"fieldPath,omitempty"`
	Message   string `json:"message"`
}

type KeyBindingDef string

type KeyBindingsConfig struct {
	// ToggleDetailed toggles the detailed transcript view (default: ctrl+o).
	ToggleDetailed KeyBindingDef `json:"toggleDetailed,omitempty"`
	// ToggleMouse toggles mouse capture release (default: ctrl+e).
	ToggleMouse KeyBindingDef `json:"toggleMouse,omitempty"`
	// CycleReasoning cycles through reasoning effort levels (default: ctrl+t).
	CycleReasoning KeyBindingDef `json:"cycleReasoning,omitempty"`
	// TogglePlan toggles the plan panel expansion (default: ctrl+p).
	TogglePlan KeyBindingDef `json:"togglePlan,omitempty"`
	// ToggleSidebar toggles the right context sidebar (default: ctrl+b).
	ToggleSidebar KeyBindingDef `json:"toggleSidebar,omitempty"`
}

type LocalControlConfig struct {
	Enabled      bool                     `json:"enabled,omitempty"`
	Browser      LocalControlDriverConfig `json:"browser,omitempty"`
	Desktop      LocalControlDriverConfig `json:"desktop,omitempty"`
	Terminal     LocalControlDriverConfig `json:"terminal,omitempty"`
	ArtifactsDir string                   `json:"artifactsDir,omitempty"`
	// contains filtered or unexported fields
}

type LocalControlDriverConfig struct {
	Enabled    bool   `json:"enabled,omitempty"`
	HelperPath string `json:"helperPath,omitempty"`
	Driver     string `json:"driver,omitempty"`
	// contains filtered or unexported fields
}

type MCPConfig struct {
	Servers map[string]MCPServerConfig `json:"servers,omitempty"`
}

type MCPOAuthConfig struct {
	ClientID              string   `json:"clientID,omitempty"`
	ClientSecret          string   `json:"clientSecret,omitempty"`
	Scopes                []string `json:"scopes,omitempty"`
	AuthorizationEndpoint string   `json:"authorizationEndpoint,omitempty"`
	TokenEndpoint         string   `json:"tokenEndpoint,omitempty"`
	RegistrationEndpoint  string   `json:"registrationEndpoint,omitempty"`
	IssuerURL             string   `json:"issuerURL,omitempty"`
}

type MCPServerConfig struct {
	Type     string            `json:"type,omitempty"`
	Command  string            `json:"command,omitempty"`
	Args     []string          `json:"args,omitempty"`
	Env      map[string]string `json:"env,omitempty"`
	URL      string            `json:"url,omitempty"`
	Headers  map[string]string `json:"headers,omitempty"`
	Auth     string            `json:"auth,omitempty"`
	OAuth    *MCPOAuthConfig   `json:"oauth,omitempty"`
	Disabled bool              `json:"disabled,omitempty"`
	// contains filtered or unexported fields
}

type NotifyConfig struct {
	Mode      string `json:"mode,omitempty"`
	FocusMode string `json:"focusMode,omitempty"`
}

type Overrides struct {
	ActiveProvider string
	Providers      []ProviderProfile
	Provider       ProviderProfile
	MaxTurns       int
	MCP            MCPConfig
	Sandbox        SandboxConfig
	Notify         NotifyConfig
	Tools          ToolsConfig
	KeyBindings    KeyBindingsConfig
	LocalControl   LocalControlConfig
	STT            STTConfig
}

type PreferencesConfig struct {
	FavoriteModels []string `json:"favoriteModels,omitempty"`
	// RecentModels is the short automatic history of provider+model pairs the
	// user has switched to via /model, newest first. Unlike FavoriteModels
	// (manual pins), this list is maintained automatically on every switch and
	// capped to MaxRecentModels entries. See RecentModelEntry.
	RecentModels []RecentModelEntry `json:"recentModels,omitempty"`
	// Theme is the persisted TUI palette preference — "auto" or a registered theme
	// name (e.g. "dracula"). Applied at startup below the --theme flag and
	// ZERO_THEME, so a /theme choice survives restart. Empty = unset (defaults auto).
	Theme string `json:"theme,omitempty"`
	// Recaps is a tri-state: nil (unset) defaults to ON; an explicit false means
	// the user turned post-turn recaps off. A *bool is its own tri-state, so no
	// custom unmarshal is needed (unlike ToolsConfig.DeferThreshold's int).
	Recaps *bool `json:"recaps,omitempty"`
}

type ProviderEdit struct {
	Name         string
	NewName      string
	BaseURL      string
	Model        string
	APIKey       string
	APIKeyStored bool
	Description  string
}

type ProviderKind string

type ProviderProfile struct {
	Name         string       `json:"name"`
	Provider     string       `json:"provider,omitempty"`
	ProviderKind ProviderKind `json:"provider_kind,omitempty"`
	CatalogID    string       `json:"catalogID,omitempty"`
	BaseURL      string       `json:"baseURL,omitempty"`
	APIKey       string       `json:"apiKey,omitempty"`
	APIKeyEnv    string       `json:"apiKeyEnv,omitempty"`
	// APIKeyStored marks that this provider's API key lives in the encrypted
	// credential store (internal/credstore), not inline in APIKey. The effective
	// key is loaded from the store at provider-build time; config.json holds only
	// this marker, never the secret.
	APIKeyStored    bool              `json:"apiKeyStored,omitempty"`
	APIFormat       string            `json:"apiFormat,omitempty"`
	AuthHeader      string            `json:"authHeader,omitempty"`
	AuthScheme      string            `json:"authScheme,omitempty"`
	AuthHeaderValue string            `json:"authHeaderValue,omitempty"`
	CustomHeaders   map[string]string `json:"customHeaders,omitempty"`
	Model           string            `json:"model,omitempty"`
	ParseThinkTags  *bool             `json:"parseThinkTags,omitempty"`
	Description     string            `json:"description,omitempty"`
}

type RecentModelEntry struct {
	Provider string `json:"provider"`
	Model    string `json:"model"`
}

type ResolveOptions struct {
	UserConfigPath    string
	ProjectConfigPath string
	ProviderCommand   string
	Env               map[string]string
	Overrides         Overrides
	// ExcludeProject drops the project config layer (ProjectConfigPath) from MCP
	// resolution when the workspace is untrusted, so a cloned repo's ./.zero/config.json
	// cannot spawn stdio MCP servers. It is fail-closed: only a trusted workspace sets
	// it false. Mirrors the ExcludeProject option hooks and plugins already honor.
	ExcludeProject bool
}

type ResolvedConfig struct {
	ActiveProvider string
	Providers      []ProviderProfile
	Provider       ProviderProfile
	MaxTurns       int
	MCP            MCPConfig
	Sandbox        SandboxConfig
	Notify         NotifyConfig
	Tools          ToolsConfig
	Swarm          SwarmConfig
	Preferences    PreferencesConfig
	KeyBindings    KeyBindingsConfig
	LocalControl   LocalControlConfig
	STT            STTConfig
}

type STTConfig struct {
	// Provider is the batch transcription backend: "local" (sherpa-onnx-offline,
	// the default), "groq", or "openai". Termux and the fallback everywhere use
	// this path.
	Provider STTProviderKind `json:"provider,omitempty"`
	// StreamProvider is the streaming backend on desktop: "local" (sherpa-onnx
	// websocket server, default), "deepgram", or "openai" (Realtime).
	StreamProvider STTProviderKind `json:"streamProvider,omitempty"`
	// Streaming enables the live-transcript pipeline on platforms that support
	// it (desktop). Defaults to on; set false to always use the batch pipeline.
	Streaming *bool `json:"streaming,omitempty"`
	// Model overrides the cloud batch model (e.g. "whisper-large-v3-turbo" for
	// Groq, "whisper-1" for OpenAI). Empty uses the provider default.
	Model string `json:"model,omitempty"`
	// StreamModel overrides the cloud streaming model (Deepgram/OpenAI Realtime).
	StreamModel string `json:"streamModel,omitempty"`
	// LocalModelPath is the sherpa-onnx model directory for local transcription
	// (batch and streaming). Required to use a local provider.
	LocalModelPath string `json:"localModelPath,omitempty"`
	// LocalBinary overrides the offline binary name/path (default
	// "sherpa-onnx-offline"); LocalServerBinary overrides the streaming server
	// (default "sherpa-onnx-online-websocket-server"). Both looked up on PATH.
	LocalBinary       string `json:"localBinary,omitempty"`
	LocalServerBinary string `json:"localServerBinary,omitempty"`
	// LocalServerPort is the localhost port for the sherpa-onnx websocket server
	// (default 6006).
	LocalServerPort int `json:"localServerPort,omitempty"`
	// EngineVersion selects the sherpa-onnx release the auto-download fetches
	// ("" → a pinned known-good default; "latest" or any release tag also works,
	// so a newer engine needs no Zero update). Verified against the release's
	// published SHA256 digest either way.
	EngineVersion string `json:"engineVersion,omitempty"`
	// NumThreads sets the local engine's thread count (0 = engine default).
	NumThreads int `json:"numThreads,omitempty"`
	// Language optionally constrains recognition (ISO-639-1, e.g. "en"). Empty =
	// auto-detect.
	Language string `json:"language,omitempty"`
	// MaxDurationSeconds is the hard runaway-recording cap on every platform
	// (0 = default 300s).
	MaxDurationSeconds int `json:"maxDurationSeconds,omitempty"`
	// SilenceAutoStop ends a recording ~2s after the signal goes quiet, as a
	// backstop for a forgotten manual stop (not VAD-triggered start). Defaults on.
	SilenceAutoStop *bool `json:"silenceAutoStop,omitempty"`
	// AutoSubmit fires the transcript at the agent instead of inserting it for
	// review. Defaults OFF — insert-for-review is the safety net for a misheard
	// prompt (§3).
	AutoSubmit *bool `json:"autoSubmit,omitempty"`
	// WindowsAudioDevice names the dshow capture device (auto-detected when empty).
	WindowsAudioDevice string `json:"windowsAudioDevice,omitempty"`
}

type STTProviderKind string

type SandboxConfig struct {
	// Network controls whether shell commands classified as network-touching
	// (curl, git push, package installs, …) are allowed: "allow" or "deny".
	// Empty keeps the built-in default (deny). Without this knob the engine's
	// hard-coded NetworkDeny was unreachable from any config surface.
	Network string `json:"network,omitempty"`
	// AdditionalWriteRoots lists directories outside the workspace the sandbox
	// allows writes in. Each entry must be an existing directory; entries are
	// normalized (~-expanded, absolutized, symlink-resolved) at startup and an
	// invalid entry fails the run. Honored from the GLOBAL user config and CLI
	// flags only — deliberately not project config, so a cloned repo cannot
	// grant itself write access. Session-only grants use /add-dir instead.
	AdditionalWriteRoots []string `json:"additionalWriteRoots,omitempty"`
	// BlockUnixSockets, when true, asks the Linux sandbox helper to install a
	// best-effort seccomp filter that denies AF_UNIX socket creation inside the
	// sandboxed command. Off by default; ignored on non-Linux backends.
	BlockUnixSockets bool `json:"blockUnixSockets,omitempty"`
	// MonitorDenials, when true on macOS, tails the unified log for this run's
	// sandbox denials and appends them to a command's stderr so blocked operations
	// are visible to the agent. Off by default. No-op on platforms/OS versions that
	// do not deliver seatbelt denials to the queryable log.
	MonitorDenials bool `json:"monitorDenials,omitempty"`
}

type SwarmConfig struct {
	MaxTeamSize int `json:"maxTeamSize,omitempty"`
}

type ToolsConfig struct {
	DeferThreshold int `json:"deferThreshold,omitempty"`
	// contains filtered or unexported fields
}