config

type AgentActivity struct {
	RetainRawPayloads bool
}

type AtlassianCredentialRefs struct {
	EmailEnv        string
	EmailFile       string
	APITokenEnv     string
	APITokenFile    string
	CredentialsFile string
}

type Automation struct {
	Enabled                           bool
	RunnerEnabled                     bool
	RequireCodexWhenAvailable         bool
	AllowManualRunner                 bool
	RunnerExecution                   string
	QueueDepth                        int
	PollInterval                      time.Duration
	GlobalWorkerCount                 int
	PerProjectWorkerLimit             int
	PerAgentWorkerLimit               int
	MaxParallelTasks                  int
	DefaultMaxRuntime                 time.Duration
	ExternalRunLeaseTTL               time.Duration
	DefaultMaxRetries                 int
	RecoveryMaxReplacementRunsPerTask int
	ReworkBudgetPerTask               int
	// ClaimFullReconcileCooldown bounds how often a runner performs a full
	// reconciliation sweep during claim for a given project. Defaults to 30s.
	ClaimFullReconcileCooldown time.Duration
	// ClaimBroadReconcileTaskBatchLimit bounds project-wide ready/promotion work
	// performed by the broad claim reconcile pass. Defaults to 32.
	ClaimBroadReconcileTaskBatchLimit int
	// ReviewGateTimeout is the max duration a task may stay in needs_review
	// without a review ref before auto-exemption (when it has impl evidence).
	// Default 0 = disabled.
	ReviewGateTimeout time.Duration
	// MaxFindingsPerAudit bounds confirmed high-confidence findings remediated
	// per area-bug-audit run. Default defaultMaxFindingsPerAudit (10). The MCP
	// max_findings override is clamped to MaxFindingsPerAuditCeiling (50).
	MaxFindingsPerAudit            int
	ChainGitOpsRecoveryMaxAttempts int
	ReconcilerGitOpsResets         int
	// ChainGitOpsAdvisoryProceedEnabled, when true (default), converts a
	// verifier failure that has persisted through the full reconciler reset
	// budget into an advisory proceed (draft PR with a verifier warning) instead
	// of permanently terminal-blocking. Per policy, workflow gates are advisory
	// by default; set false to require the verifier to pass (legacy hard-block).
	ChainGitOpsAdvisoryProceedEnabled bool
	CodexBinaryPath                   string
	DefaultHarness                    string
	Harnesses                         []HarnessConfig
	Agents                            []AutomationAgent
	WorkPlanStatusTrigger             WorkPlanStatusTrigger
}

type AutomationAgent struct {
	ID              string
	DisplayName     string
	Purpose         string
	Enabled         bool
	AllowedSkills   []string
	AllowedTools    []string
	AllowedCommands []AutomationCommand
	DeniedCommands  []string
	WorkspaceMode   string
	NetworkPolicy   string
	SecretPolicy    string
	LogPolicy       string
	MaxRuntime      time.Duration
	MaxRetries      int
}

type AutomationCommand struct {
	Command string
	Args    []string
}

type Config struct {
	ConfigPath        string
	CPUCount          int
	HTTPAddr          string
	StorageEngine     string
	LadybugPath       string
	SQLitePath        string
	SQLite            SQLite
	Debug             Debug
	Logging           Logging
	MaxRequestBytes   int64
	RequestTimeout    time.Duration
	ReadHeaderTimeout time.Duration
	ShutdownTimeout   time.Duration
	Ingestion         Ingestion
	Workspace         Workspace
	Workflows         Workflows
	DurableWorkflows  DurableWorkflows
	AgentActivity     AgentActivity
	Automation        Automation
	GitOperations     GitOperations
	Verification      Verification
	Projects          []Project
}

type ConfluenceIntegration struct {
	Enabled            bool
	SiteURL            string
	CloudID            string
	AuthMode           string
	CredentialRefs     AtlassianCredentialRefs
	ReadTimeout        time.Duration
	MaxResults         int
	Polling            IntegrationPolling
	SpaceKeys          []string
	BodyRepresentation string
	IncludeBody        bool
	IncludeComments    bool
	IncludeLabels      bool
	IncludeProperties  bool
	RootPageIDs        []string
	CQLExtraFilter     string
}

type Debug struct {
	Enabled               bool
	PprofEnabled          bool
	ExpvarEnabled         bool
	RuntimeMetricsEnabled bool
}

type DirtyScopeRecovery struct {
	AllowedSupportPathspecs []string
}

type DurableWorkflows struct {
	Enabled         bool
	ShadowMode      bool
	Backend         string
	SQLitePath      string
	WorkerEnabled   bool
	MaxParallelRuns int
}

type GeneratedArtifactVerification struct {
	Paths            []string
	Command          string
	RequiredBeforePR bool
}

type GitOperations struct {
	Enabled          bool
	CommitAfterTask  bool
	PushAfterTask    bool
	DraftPRAfterPush bool
	// MarkPRAfterFinalize defaults to true: flip the draft PR to "ready for
	// review" (gh pr ready) after finalization creates it.
	MarkPRAfterFinalize          bool
	RequireCleanBeforeTask       bool
	CleanupWorktreeAfterPlanDone bool
	RemoteName                   string
	// DefaultBranch is the project's default branch (main, master, develop, ...).
	// Empty (the default) means resolve at runtime from the remote HEAD
	// symbolic-ref, falling back to "main". When set, this wins over runtime
	// resolution and is used as the fetch+rebase base before push (MASS-3997).
	DefaultBranch         string
	BranchPrefix          string
	BranchNamePattern     string
	CommitAuthorName      string
	CommitAuthorEmailEnv  string
	CommitAuthorEmailFile string
	SignCommits           bool
	SSHPrivateKeyPath     string
	SSHPublicKeyPath      string
	SSHKnownHostsPath     string
	GitHubTokenEnv        string
	GitHubTokenFile       string
	GitHubCLIPath         string
	GitHubAuthPreflight   bool
	// WhitespaceWarningOnDiffCheck converts `git diff --cached --check` failures
	// (trailing whitespace, missing/extra final newline, blank lines at EOF) into
	// soft warning evidence instead of a terminal block. Per the automation
	// pipeline policy this whitespace/newline drift is a forbidden soft blocker.
	// Defaults to true; opt out with `whitespace_warning_on_diff_check = false`.
	WhitespaceWarningOnDiffCheck bool
	// PushMaxAttempts bounds in-function retries for `git push` on transient
	// network errors (5xx/timeout/rate-limit) before the failure surfaces to the
	// chain-level retry budget. Defaults to 3; set to 1 to disable in-function retry.
	PushMaxAttempts int
	// PushBackoffBase is the base delay (exponential) for push transient retry.
	// Defaults to 5s.
	PushBackoffBase time.Duration
	// PRCreateMaxAttempts bounds in-function retries for `gh pr create` on
	// transient network errors. Defaults to 3; set to 1 to disable.
	PRCreateMaxAttempts int
	// PRCreateBackoffBase is the base delay (exponential) for pr-create retry.
	// Defaults to 5s.
	PRCreateBackoffBase time.Duration
	// BypassRepoCommitHooks appends --no-verify to every automation git commit.
	// Opt-in via MIVIA_GIT_OPS_BYPASS_REPO_COMMIT_HOOKS or TOML
	// bypass_repo_commit_hooks. Default false. Enable for repos whose pre-commit
	// hook breaks automation on internals (e.g. mass-monorepo Husky with
	// set -euo pipefail running lint-staged that fails on pnpm warnings). The
	// pipeline runs its own verifiers via runPostCommitVerification, so the repo
	// hook is redundant double-validation when enabled.
	BypassRepoCommitHooks bool
	Conventions           GitOpsConventions
	DirtyScopeRecovery    DirtyScopeRecovery
	PostPRChecks          PostPRChecks
}

type GitOpsConventions struct {
	CommitType               string
	CommitScope              string
	BranchTemplate           string
	RequireTicketRef         bool
	TicketRefPattern         string
	TicketURLTemplate        string
	AllowedTypes             []string
	DefaultChangeType        string
	CommitSummaryTemplate    string
	PullRequestTitleTemplate string
	PullRequestBodyTemplate  string
	WhatChangedTemplate      string
	HowVerifiedTemplate      string
	TestsTemplate            string
}

type HarnessConfig struct {
	Name         string
	Adapter      string
	BinaryPath   string
	DefaultModel string
	Provider     string
}

type Ingestion struct {
	ContentGraphEnabled      bool
	LiveUpdatesEnabled       bool
	ASTExtractionEnabled     bool
	ExtractorCacheEnabled    bool
	DebounceInterval         time.Duration
	MaxFileBytes             int64
	MaxChunkBytes            int
	QueueDepth               int
	WorkerCount              int
	GlobalWorkerCount        int
	PerProjectWorkerLimit    int
	LivePathPriority         bool
	MaxWatchedDirectoryCount int
	TaskWarnAfter            time.Duration
	FullScanBatchSize        int
	InitialScanOnStart       bool
	RestartRecoveryScan      bool
	SensitiveMarkerPolicy    string
}

type IntegrationConfig struct {
	Jira       *JiraIntegration
	Confluence *ConfluenceIntegration
}

type IntegrationPolling struct {
	IngestionEnabled    bool
	InitialFullSync     string
	IncrementalInterval time.Duration
	EmptyPollSleep      time.Duration
	MaxIdleSleep        time.Duration
	OverlapWindow       time.Duration
	InitialPageSize     int
	IncrementalPageSize int
}

type JiraIntegration struct {
	Enabled           bool
	SiteURL           string
	CloudID           string
	AuthMode          string
	CredentialRefs    AtlassianCredentialRefs
	ReadTimeout       time.Duration
	MaxResults        int
	Polling           IntegrationPolling
	ProjectKeys       []string
	DefaultFields     []string
	AllowedFields     []string
	IncludeRichFields bool
	IncludeComments   bool
	JQLExtraFilter    string
}

type Logging struct {
	FileEnabled bool
	FilePath    string
}

type PostPRChecks struct {
	Enabled         bool
	RequiredOnly    bool
	Watch           bool
	FailFast        bool
	IntervalSeconds int
}

type Project struct {
	ID          string
	Aliases     []string
	DisplayName string
	Description string
	RootPath    string
	Enabled     bool
	// WorkflowsLocalEnabled controls whether the server imports the project's
	// local workflow TOML files at startup. Default true: project-local
	// workflow files are the single source of truth for that project's workflow
	// definitions, mirroring the .agentic/skills/ and .agentic/policies/
	// convention. Set false to force a project to use only the global
	// [workflows] seed.
	WorkflowsLocalEnabled bool
	// WorkflowsLocalDir is the project-relative directory scanned for local
	// workflow definitions. Default ".agentic/workflows". Override per-project
	// when a repo stores its workflow TOMLs elsewhere.
	WorkflowsLocalDir string
	// WorkflowsLocalGlob is the filename glob applied inside WorkflowsLocalDir.
	// Default "governed-*.toml". An empty glob skips the project (safe default;
	// importing arbitrary *.toml is opt-in, never implicit).
	WorkflowsLocalGlob    string
	Classification        string
	GraphNamespace        string
	GraphStorage          string
	DigestMode            string
	UpdatePolicy          string
	WorkspaceMode         string
	Include               []string
	Exclude               []string
	FollowSymlinks        bool
	MaxFileBytes          int64
	MaxChunkBytes         int
	SensitiveMarkerPolicy string
	Integrations          IntegrationConfig
	GitOperations         *GitOperations
	Verification          *Verification
	WorkflowChains        []WorkflowChain
}

type SQLite struct {
	WALEnabled               bool
	BusyTimeout              time.Duration
	Synchronous              string
	CheckpointAfterIngestion bool
}

type Verification struct {
	BootstrapCommands  []string
	AlwaysBeforePR     []string
	AutofixCommands    []string
	GeneratedArtifacts []GeneratedArtifactVerification
	Env                map[string]string
}

type WorkPlanStatusTrigger struct {
	Enabled  bool
	Statuses []string
}

type WorkflowChain struct {
	ChainRef               string
	Enabled                bool
	InputKind              string
	InputPattern           string
	ContextProvider        string
	ContextMode            string
	RequireCompleteContext bool
	DefaultTitleTemplate   string
	GitOpsMode             string
	Stages                 []WorkflowChainStage
}

type WorkflowChainStage struct {
	StageRef                 string
	WorkflowRef              string
	Trigger                  string
	DependsOn                []string
	AutomationRefTemplate    string
	RequiredStatusBeforeNext string
}

type Workflows struct {
	Enabled         bool
	DefinitionPaths []string
}

type Workspace struct {
	Enabled bool
}