store

type AccountLink struct {
	Login    string    `json:"login"`
	Host     string    `json:"host,omitempty"`
	LinkedAt time.Time `json:"linked_at"`
}

type Budget struct {
	Credits      float64 `json:"credits,omitempty"`
	From         float64 `json:"from,omitempty"`
	QuotaPercent float64 `json:"quota_percent,omitempty"`
	Reached      bool    `json:"reached,omitempty"`
	WrapUp       bool    `json:"wrap_up,omitempty"`
}

type Config struct {
	SchemaVersion  int                      `json:"schema_version"`
	DefaultAgent   string                   `json:"default_agent"`
	DefaultProfile string                   `json:"default_profile"`
	Profiles       map[string]Profile       `json:"profiles"`
	Sessions       map[string]SessionRecord `json:"sessions"`
	UI             UISettings               `json:"ui"`
	// WebProjects holds the web interface's Projects, keyed by Project ID.
	WebProjects map[string]WebProject `json:"web_projects,omitempty"`
	// WebSettings are the web interface's settings, shared by every browser.
	WebSettings WebSettings `json:"web_settings,omitzero"`
	// WebRoutines holds the web interface's routines, keyed by routine ID.
	WebRoutines map[string]WebRoutine `json:"web_routines,omitempty"`
	// WebAccountLinks holds the one account each provider is linked to,
	// keyed by provider name. Only the service sets it; no settings PATCH.
	WebAccountLinks map[string]AccountLink `json:"web_account_links,omitempty"`
	// WebForks reserves native fork requests before their RPC. Only unresolved
	// requests stay here; registered Tasks carry their own exact receipt.
	WebForks map[string]WebFork `json:"web_forks,omitempty"`
	// WebGitLab records commits made by Tasks and the investigation reserved
	// for each pipeline. Receipts remain after an investigation Task is deleted.
	WebGitLab map[string]WebGitLabCommit `json:"web_gitlab,omitempty"`

	// ReadOnly is set when the on-disk file declares a SchemaVersion newer than
	// this binary understands. The app must not write such a config (doing so
	// would drop fields it does not model), so Save/Update refuse it (F33). It
	// is in-memory only and never serialized.
	ReadOnly bool
	// contains filtered or unexported fields
}

type ForkLineage struct {
	SourceTaskID string `json:"source_task_id"`
	UserItemID   string `json:"user_item_id"`
	UserEventID  string `json:"user_event_id"`
	ToEventID    string `json:"to_event_id,omitempty"`
	RequestID    string `json:"request_id"`
	Model        string `json:"model"`
}

type Mode string

type MousePolicy string

type PRRecord struct {
	URL         string    `json:"url"`
	Number      int       `json:"number"`
	LastStatus  string    `json:"last_status"`
	LastChecked time.Time `json:"last_checked"`
}

type Profile struct {
	Provider        *string      `json:"provider,omitempty"`
	Mode            *Mode        `json:"mode,omitempty"`
	CommandAlias    *string      `json:"command_alias,omitempty"`
	Mouse           *MousePolicy `json:"mouse,omitempty"`
	ControlPrefix   *string      `json:"control_prefix,omitempty"`
	BackDetach      *bool        `json:"back_detach,omitempty"`
	ScrollbackLines *int         `json:"scrollback_lines,omitempty"`
	// contains filtered or unexported fields
}

type RoutineSchedule struct {
	Kind    string `json:"kind"`
	Time    string `json:"time,omitempty"`
	Hours   int    `json:"hours,omitempty"`
	Weekday int    `json:"weekday"`
}

type SessionExit struct {
	SessionName       string
	ProviderSessionID string
	ExitCode          int
	UAMInitiated      bool
}

type SessionProfileOverrides struct {
	Mode            *Mode        `json:"mode,omitempty"`
	CommandAlias    *string      `json:"command_alias,omitempty"`
	Mouse           *MousePolicy `json:"mouse,omitempty"`
	ControlPrefix   *string      `json:"control_prefix,omitempty"`
	BackDetach      *bool        `json:"back_detach,omitempty"`
	ScrollbackLines *int         `json:"scrollback_lines,omitempty"`
	// contains filtered or unexported fields
}

type SessionRecord struct {
	ID           string `json:"id"`
	Agent        string `json:"agent"`
	CommandAlias string `json:"command_alias,omitempty"`
	Name         string `json:"name"`
	Prompt       string `json:"prompt,omitempty"`
	Mode         Mode   `json:"mode"`
	Workdir      string `json:"workdir"`
	// SessionName is the backend session name ("uam-<agent>-<id>"). The JSON
	// key keeps its historical "tmux_session" spelling so configs written by
	// tmux-backed releases load unchanged.
	SessionName string    `json:"tmux_session"`
	CreatedAt   time.Time `json:"created_at"`
	LastSeenAt  time.Time `json:"last_seen_at"`
	Pinned      bool      `json:"pinned"`
	Group       string    `json:"group"`
	SortIndex   int       `json:"sort_index"`
	Status      Status    `json:"status,omitempty"`
	// ProviderSessionID is the agent CLI's own session id, recorded when the
	// provider lets uam seed it at dispatch (e.g. claude --session-id). A
	// resume can then target the exact provider session instead of the
	// provider's "most recent" heuristic.
	ProviderSessionID string `json:"provider_session_id,omitempty"`
	// LastExitCode records the agent process's exit status from the most
	// recent close (-1 when it died on a signal). Pointer so records from
	// older schemas stay distinguishable from a real exit 0.
	LastExitCode     *int                     `json:"last_exit_code,omitempty"`
	PR               *PRRecord                `json:"pr,omitempty"`
	Profile          string                   `json:"profile,omitempty"`
	ProfileOverrides *SessionProfileOverrides `json:"profile_overrides,omitempty"`
	// Surface names the owner of a record. Empty means a terminal session host;
	// SurfaceWeb means the web service. Terminal commands never list, attach,
	// resume or prune records with a non-empty Surface, and the web service
	// only opens its own, so neither takes over the other's conversations.
	Surface string `json:"surface,omitempty"`
	// Web is the web service's durable state for a SurfaceWeb record.
	Web *WebState `json:"web,omitempty"`
	// contains filtered or unexported fields
}

type Status string

type Store struct {
	// contains filtered or unexported fields
}

type TodoCounts struct {
	Done       int `json:"done,omitempty"`
	Total      int `json:"total,omitempty"`
	Blocked    int `json:"blocked,omitempty"`
	InProgress int `json:"in_progress,omitempty"`
	Pending    int `json:"pending,omitempty"`
	Open       int `json:"open,omitempty"`
	Omitted    int `json:"omitted,omitempty"`
}

type TurnChangeCounts struct {
	Status    string `json:"status"`
	EventID   string `json:"event_id,omitempty"`
	Files     int64  `json:"files,omitempty"`
	Additions int64  `json:"additions,omitempty"`
	Deletions int64  `json:"deletions,omitempty"`
	Omitted   int64  `json:"omitted,omitempty"`
}

type TurnTiming struct {
	ID         string    `json:"id"`
	UserItemID string    `json:"user_item_id,omitempty"`
	StartedAt  time.Time `json:"started_at"`
	EndedAt    time.Time `json:"ended_at,omitzero"`
	PausedAt   time.Time `json:"paused_at,omitzero"`
	PausedMS   int64     `json:"paused_ms,omitempty"`
	State      string    `json:"state"`
	// Token usage the provider reported for the turn's model calls (the main
	// agent and its subagents), summed as the calls report: tokens in and out,
	// and the calls' own duration, so a reader can tell generation speed from
	// wall time spent in tools or waiting.
	InputTokens     int64   `json:"input_tokens,omitempty"`
	OutputTokens    int64   `json:"output_tokens,omitempty"`
	GenerationMS    int64   `json:"generation_ms,omitempty"`
	Model           string  `json:"model,omitempty"`
	CacheReadTokens int64   `json:"cache_read_tokens,omitempty"`
	Calls           int     `json:"calls,omitempty"`
	NanoAIU         int64   `json:"nano_aiu,omitempty"`
	PremiumCost     float64 `json:"premium_cost,omitempty"`
	// Todo counts the todo list as the turn left it, for a turn that
	// changed it; its rows are kept beside the Task's uploads.
	Todo TodoCounts `json:"todo,omitzero"`
	// Native captured changes as this finalized owner turn left them.
	Changes *TurnChangeCounts `json:"changes,omitempty"`
}

type UISettings struct {
	GroupByDir bool `json:"group_by_dir"`
	// Sort and PeekWidth are retained schema-v3 compatibility fields. They are
	// normalized and round-tripped even when the TUI exposes no direct control.
	Sort      string `json:"sort"`
	PeekWidth int    `json:"peek_width"`
}

type WebBadge struct {
	Text  string `json:"text"`
	Color string `json:"color"`
}

type WebChart struct {
	ID       string    `json:"id"`
	Title    string    `json:"title"`
	Kind     string    `json:"kind"`
	XLabel   string    `json:"x_label,omitempty"`
	YLabel   string    `json:"y_label,omitempty"`
	Command  string    `json:"command,omitempty"`
	Format   string    `json:"format,omitempty"`
	X        string    `json:"x"`
	Y        []string  `json:"y"`
	PinnedAt time.Time `json:"pinned_at"`
	// TaskID and CallID name the Task's chart it was pinned from.
	TaskID string `json:"task_id,omitempty"`
	CallID string `json:"call_id,omitempty"`
}

type WebCoAuthor struct {
	Enabled bool   `json:"enabled,omitempty"`
	Name    string `json:"name,omitempty"`
}

type WebContext struct {
	Used   int64 `json:"used"`
	Limit  int64 `json:"limit"`
	Prompt int64 `json:"prompt,omitempty"`
	Cached int64 `json:"cached,omitempty"`
}

type WebCustomModel struct {
	Name        string `json:"name"`
	DisplayName string `json:"display_name,omitempty"`
	BaseURL     string `json:"base_url"`
	ModelID     string `json:"model_id"`
	Vision      bool   `json:"vision,omitempty"`
	// WireAPI is "", "completions" (the default) or "responses".
	WireAPI   string `json:"wire_api,omitempty"`
	APIKeyEnv string `json:"api_key_env"`
	// APIKey is the saved key in clear; the state file holds it encrypted
	// (sealed_keys.go). After a load, SealedKey keeps a stored key this
	// process could not decrypt, so a save does not drop it, and KeyError
	// says why it is not available.
	APIKey    string `json:"api_key,omitempty"`
	SealedKey string `json:"-"`
	KeyError  string `json:"-"`
}

type WebDrawIO struct {
	Origin  string `json:"origin,omitempty"`
	Enabled bool   `json:"enabled,omitempty"`
}

type WebFork struct {
	ID                   string      `json:"id"`
	Provider             string      `json:"provider"`
	SourceConversationID string      `json:"source_conversation_id"`
	ProviderSessionID    string      `json:"provider_session_id,omitempty"`
	ProjectID            string      `json:"project_id"`
	Workdir              string      `json:"workdir"`
	Effort               string      `json:"effort,omitempty"`
	ContextSize          string      `json:"context_size"`
	Agent                string      `json:"agent,omitempty"`
	Mode                 Mode        `json:"mode"`
	CreatedAt            time.Time   `json:"created_at"`
	TailEventID          string      `json:"tail_event_id"`
	Lineage              ForkLineage `json:"lineage"`
}

type WebGitLabCommit struct {
	TaskID         string                            `json:"task_id"`
	ProjectID      string                            `json:"project_id"`
	Host           string                            `json:"host"`
	Path           string                            `json:"path"`
	SHA            string                            `json:"sha"`
	Branch         string                            `json:"branch"`
	CreatedAt      time.Time                         `json:"created_at"`
	Investigations map[string]WebGitLabInvestigation `json:"investigations,omitempty"`
	// Failures holds what each failed job of the commit's pipelines failed
	// on, keyed by job ID, so each job log is read once. An empty Kind means
	// the log was read and nothing was recognised.
	Failures map[int64]WebGitLabFailure `json:"failures,omitempty"`
}

type WebGitLabFailure struct {
	Kind   string `json:"kind,omitempty"`
	Detail string `json:"detail,omitempty"`
}

type WebGitLabInvestigation struct {
	TaskID     string `json:"task_id"`
	Registered bool   `json:"registered,omitempty"`
}

type WebHandoff struct {
	At      time.Time `json:"at"`
	ReplyID string    `json:"reply_id,omitempty"`
	NoReply string    `json:"no_reply,omitempty"`
	Facts   string    `json:"facts"`
}

type WebPlace struct {
	Mode     string `json:"mode"`
	Branch   string `json:"branch"`
	Base     string `json:"base,omitempty"`
	Worktree string `json:"worktree,omitempty"`
	Named    bool   `json:"named,omitempty"`
}

type WebProject struct {
	ID        string    `json:"id"`
	Name      string    `json:"name"`
	Dir       string    `json:"dir"`
	CreatedAt time.Time `json:"created_at"`
	// LegacyDefaults are the per-Project Task defaults of versions before
	// WebSettings.TaskDefaults. Load reads them once, adopts the newest valid
	// ones as the setting when it is unset, and clears them, so the next save
	// drops the key. Nothing writes them.
	LegacyDefaults WebTaskDefaults `json:"defaults,omitzero"`
	// Badge is zero until the web service assigns one; it also replaces an
	// invalid one on load.
	Badge WebBadge `json:"badge,omitzero"`
	// Charts are the charts the owner pinned to the Project, oldest first.
	// The web service shows, and counts, only the ones it can check, and
	// keeps their rows elsewhere.
	Charts []WebChart `json:"charts,omitempty"`
	// BranchLink is the Project's branch link: absent until detected or
	// set, empty once the owner cleared it.
	BranchLink *string `json:"branch_link,omitempty"`
	// contains filtered or unexported fields
}

type WebRewind struct {
	RequestID   string          `json:"request_id"`
	UserItemID  string          `json:"user_item_id"`
	UserEventID string          `json:"user_event_id"`
	Mode        string          `json:"mode"`
	State       string          `json:"state"`
	Discarded   []string        `json:"discarded,omitempty"`
	Result      json.RawMessage `json:"result,omitempty"`
	// ReconcileFailed marks a reconcile that could not reread the record;
	// only then may the owner release the hold. Released records that the
	// hold was cleared without knowing what the rewind did.
	ReconcileFailed bool      `json:"reconcile_failed,omitempty"`
	Released        bool      `json:"released,omitempty"`
	CreatedAt       time.Time `json:"created_at"`
}

type WebRoutine struct {
	ID            string          `json:"id"`
	ProjectID     string          `json:"project_id"`
	Name          string          `json:"name"`
	Prompt        string          `json:"prompt"`
	Provider      string          `json:"provider"`
	Model         string          `json:"model"`
	Schedule      RoutineSchedule `json:"schedule"`
	Enabled       bool            `json:"enabled"`
	Mode          Mode            `json:"mode"`
	Autopilot     bool            `json:"autopilot,omitempty"`
	MaxRunsPerDay int             `json:"max_runs_per_day"`
	MaxMinutes    int             `json:"max_minutes"`
	CreatedAt     time.Time       `json:"created_at"`
	NextRun       time.Time       `json:"next_run,omitzero"`
	Runs          []WebRoutineRun `json:"runs,omitempty"`
	// contains filtered or unexported fields
}

type WebRoutineRun struct {
	ID      string    `json:"id"`
	At      time.Time `json:"at"`
	Trigger string    `json:"trigger"`
	TaskID  string    `json:"task_id,omitempty"`
	Outcome string    `json:"outcome"`
	Reason  string    `json:"reason,omitempty"`
	EndedAt time.Time `json:"ended_at,omitzero"`
}

type WebSettings struct {
	TokenPrices map[string]map[string]WebTokenPrice `json:"token_prices,omitempty"`
	// SendDefault is what Enter does while a turn runs: WebSendSteer or
	// WebSendQueue. Empty or unrecognised values mean steer at runtime.
	SendDefault string `json:"send_default,omitempty"`
	// DefaultProjectDir is where project folder browsing starts on this instance. Empty uses home.
	DefaultProjectDir string `json:"default_project_dir,omitempty"`
	// Terminal turns on the web terminal: a shell as the service user for
	// anyone signed in. Off when absent.
	Terminal bool `json:"terminal,omitempty"`
	// HiddenModels lists, by provider, the model IDs the browser does not
	// offer: sorted, without duplicates, at most MaxHiddenModels each. It is
	// a display preference, never a check on requests.
	HiddenModels map[string][]string `json:"hidden_models,omitempty"`
	// SubagentModels lists, by provider, the model IDs its subagents may use,
	// the fallback first: without duplicates, valid as hidden model IDs are,
	// at most MaxHiddenModels each. A provider without an entry is not limited.
	SubagentModels map[string][]string `json:"subagent_models,omitempty"`
	// TitleModel maps a provider to its Utility model: the model UAM uses for
	// its own small AI jobs, such as titling new Tasks. The key keeps its
	// first name, title_model. A provider without an entry uses its cheapest
	// priced model; WebTitleModelNone opts it out (it keeps its own title).
	TitleModel map[string]string `json:"title_model,omitempty"`
	// CustomModels are the OpenAI-compatible models the owner brought
	// (BYOM), valid as ValidCustomModels checks. Direct keys are kept in this
	// private store, encrypted with the key file beside it; environment-backed
	// keys store only the variable name.
	CustomModels []WebCustomModel `json:"custom_models,omitempty"`
	// TaskDefaults are the settings a new Task starts with; zero when unset.
	TaskDefaults WebTaskDefaults `json:"task_defaults,omitzero"`
	// UtilityDailyLimit is how many Utility model calls UAM makes a day, 0
	// to make none; nil means DefaultUtilityDailyLimit.
	UtilityDailyLimit *int `json:"utility_daily_limit,omitempty"`
	// UtilityUnlimited lifts the daily limit: Utility calls are not counted
	// against UtilityDailyLimit, which is kept for when it is turned off.
	UtilityUnlimited bool `json:"utility_unlimited,omitempty"`
	// SuggestReplies, when false, stops suggesting replies after a turn;
	// absent means on.
	SuggestReplies *bool `json:"suggest_replies,omitempty"`
	// CompactionThreshold is the share of the context, in percent, at which
	// a Task's conversation starts compacting, MinCompactionThreshold to
	// MaxCompactionThreshold; nil means the provider default
	// (DefaultCompactionThreshold).
	CompactionThreshold *int `json:"compact_threshold,omitempty"`
	// GitHubMCP lets Tasks start the provider's built-in GitHub MCP server.
	// Off when absent.
	GitHubMCP bool `json:"github_mcp,omitempty"`
	// GitLabAutoInvestigate starts an investigation when a Task's own
	// GitLab pipeline fails. Off when absent.
	GitLabAutoInvestigate bool `json:"gitlab_auto_investigate,omitempty"`
	// GitLabMRPrompt is the instructions for pull and merge requests, which
	// also write GitLab merge request descriptions; the built-in ones when
	// empty.
	GitLabMRPrompt string `json:"gitlab_mr_prompt,omitempty"`
	// CommitPrompt is the instructions for commit messages; the built-in
	// ones when empty.
	CommitPrompt string `json:"commit_prompt,omitempty"`
	// CoAuthor is the co-author trailer of agents' commits. Off when absent.
	CoAuthor WebCoAuthor `json:"coauthor,omitzero"`
	// WorktreesDir is the absolute folder new Thread worktrees go in;
	// ~/.uam/worktrees when empty.
	WorktreesDir string `json:"worktrees_dir,omitempty"`
	// WorktreeRoots are the folders new worktrees went in before
	// WorktreesDir last changed; the worktrees left there are still listed.
	WorktreeRoots []string `json:"worktree_roots,omitempty"`
	// DrawIO is the opt-in draw.io editor: its origin and whether it is
	// enabled. Unset when absent.
	DrawIO WebDrawIO `json:"drawio,omitzero"`
	// contains filtered or unexported fields
}

type WebState struct {
	// NativeChanges records capture requested before this Task's first turn.
	// It is not inferred when an older/imported conversation is resumed.
	NativeChanges bool `json:"native_changes,omitempty"`
	// Turn is the last known session state (for example "working" or
	// "completed").
	Turn        string       `json:"turn,omitempty"`
	TurnTimings []TurnTiming `json:"turn_timings,omitempty"`
	// RequestID is the client-generated ID of the last prompt submission.
	RequestID string `json:"request_id,omitempty"`
	// RequestStatus is that submission's outcome: accepted, rejected or
	// uncertain.
	RequestStatus      string          `json:"request_status,omitempty"`
	CommandResult      json.RawMessage `json:"command_result,omitempty"`
	CommandSubmissions json.RawMessage `json:"command_submissions,omitempty"`
	UpdatedAt          time.Time       `json:"updated_at"`
	// Detail is a sanitized, short explanation of the state (usually an error).
	Detail string `json:"detail,omitempty"`
	// ProjectID is the WebProject the session (a Task) belongs to.
	ProjectID string `json:"project_id,omitempty"`
	// Model is the selected model ID; empty means the provider default.
	Model       string `json:"model,omitempty"`
	Effort      string `json:"effort,omitempty"`
	ContextSize string `json:"context_size,omitempty"`
	// Agent is the ID of the selected custom agent; empty means the
	// provider's default agent.
	Agent string `json:"agent,omitempty"`
	// Title is the provider-generated conversation title, sanitized and
	// bounded.
	Title string `json:"title,omitempty"`
	// Stage is the Task's lifecycle stage: "" (active), "settled" or
	// "archived". Records written before stages existed are active.
	Stage string `json:"stage,omitempty"`
	// SettledAt is when the Task was settled; zero unless it is settled, or
	// was settled before it was archived.
	SettledAt time.Time `json:"settled_at,omitzero"`
	// SettledBy is "auto" when the Task settled itself after a quiet week,
	// "reviewed" when an older version settled it once the owner saw a reply
	// checked done; empty when the owner settled it.
	SettledBy string `json:"settled_by,omitempty"`
	// ArchivedAt is when the Task was archived.
	ArchivedAt time.Time `json:"archived_at,omitzero"`
	// TerminalSession is the ID of the terminal session record tied to the
	// same provider conversation when the Task was imported. That record
	// stays the terminal's.
	TerminalSession string `json:"terminal_session,omitempty"`
	// Imported marks a conversation created outside this web service.
	Imported bool `json:"imported,omitempty"`
	// SpawnedBy is the ID of the Task whose uam_create_task call created
	// this one; empty for a Task the owner created or imported.
	SpawnedBy string `json:"spawned_by,omitempty"`
	// RoutineID is the routine whose run created this Task; empty
	// otherwise.
	RoutineID string `json:"routine_id,omitempty"`
	// RerunOf is the ID of the Task whose last message this one runs again
	// (Run again, Try with another model); empty otherwise.
	RerunOf string `json:"rerun_of,omitempty"`
	// Fork records a native prefix branch separately from a last-message rerun.
	Fork *ForkLineage `json:"fork,omitempty"`
	// Rewind is the latest native history rewind receipt.
	Rewind *WebRewind `json:"rewind,omitempty"`
	// Outcome is the one-line summary of the last completed turn.
	Outcome string `json:"outcome,omitempty"`
	// Suggestions are the replies suggested after the last completed turn.
	Suggestions *WebSuggestions `json:"suggestions,omitempty"`
	// UnseenEnd marks a Task that failed or was interrupted while no page
	// showed it, and that no page has opened since.
	UnseenEnd bool `json:"unseen_end,omitempty"`
	// StopReason says why the last turn was cancelled (owner, time_limit,
	// credit_limit, budget, remote or mcp); empty otherwise.
	StopReason string `json:"stop_reason,omitempty"`
	// Budget is the owner's spending limit for the Thread; nil without one.
	Budget *Budget `json:"budget,omitempty"`
	// Handoff is what the Thread left for whoever continues its work when it
	// reached its budget; nil without one, and cleared by its next turn.
	Handoff *WebHandoff `json:"handoff,omitempty"`
	// Place is the branch or worktree the Thread was started in; nil for a
	// Thread on its Project's current branch.
	Place *WebPlace `json:"place,omitempty"`
	// Context is the conversation's last context usage report, kept so a
	// reopened Thread shows it until the next one; nil before the first.
	Context *WebContext `json:"context,omitempty"`
	// contains filtered or unexported fields
}

type WebSuggestions struct {
	ItemID  string   `json:"item_id"`
	Replies []string `json:"replies"`
}

type WebTaskDefaults struct {
	Provider    string `json:"provider"`
	Model       string `json:"model"`
	Effort      string `json:"effort"`
	ContextSize string `json:"context_size"`
	Mode        string `json:"mode"`
}

type WebTokenPrice struct {
	Input      *float64 `json:"input"`
	Output     *float64 `json:"output"`
	CacheRead  *float64 `json:"cache_read,omitempty"`
	CacheWrite *float64 `json:"cache_write,omitempty"`
}