config

type Bedrock struct {
	Region  string `koanf:"region"`
	Profile string `koanf:"profile"`
}

type Checkout struct {
	Mode         string `koanf:"mode"` // clone | path | root
	Path         string `koanf:"path"`
	Root         string `koanf:"root"`
	Transport    string `koanf:"transport"` // https | ssh
	CacheDir     string `koanf:"cache_dir"`
	CacheMaxMB   int    `koanf:"cache_max_mb"`
	Keep         bool   `koanf:"keep"`
	CloneMissing bool   `koanf:"clone_missing"`
	// LocalOverlay globs select untracked files in the local clone (path
	// and root modes) that are copied into the review worktree — team
	// standards kept out of the repo, e.g. via .git/info/exclude.
	LocalOverlay []string `koanf:"local_overlay"`
}

type Config struct {
	GitLab   GitLab   `koanf:"gitlab"`
	Review   Review   `koanf:"review"`
	Bedrock  Bedrock  `koanf:"bedrock"`
	Checkout Checkout `koanf:"checkout"`
	Publish  Publish  `koanf:"publish"`
	Gate     Gate     `koanf:"gate"`
	UI       UI       `koanf:"ui"`
	Log      Log      `koanf:"log"`
}

type Gate struct {
	// MinSeverity marks findings at or above it as blocking; empty disables
	// the gate entirely.
	MinSeverity string `koanf:"min_severity"`
	// Approvals is what approving from the tool does while blocking findings
	// remain: off (ignore the gate), warn (ask for confirmation), or block
	// (refuse). Only consulted when min_severity is set.
	Approvals string `koanf:"approvals"`
}

type GitLab struct {
	BaseURL  string   `koanf:"base_url"`
	Token    string   `koanf:"token"`
	Projects []string `koanf:"projects"`
	Groups   []string `koanf:"groups"`
	PerPage  int      `koanf:"per_page"`
	// Instances are named GitLab instances to choose between (settings file
	// only). When set, one instance is selected at startup — via --instance,
	// default_instance, or an interactive prompt — and its connection
	// settings replace gitlab.base_url and gitlab.token.
	Instances []Instance `koanf:"instances"`
	// DefaultInstance names the instance to use without prompting; the
	// --instance flag and GITLAB_REVIEWER_GITLAB_DEFAULT_INSTANCE override it.
	DefaultInstance string `koanf:"default_instance"`
}

type Instance struct {
	Name    string `koanf:"name"`
	BaseURL string `koanf:"base_url"`
	// Token is the access token for this instance; empty falls back to
	// gitlab.token (useful when one env-provided token covers an instance).
	Token string `koanf:"token"`
	// TokenEnv names an environment variable holding the token for this
	// instance (e.g. WORK_GITLAB_TOKEN), keeping the secret out of the
	// settings file. Consulted only when token is empty; the variable must
	// be set whenever this instance is selected.
	TokenEnv string `koanf:"token_env"`
}

type Log struct {
	Level string `koanf:"level"`
	File  string `koanf:"file"`
}

type MCPServer struct {
	// Type is stdio, http, or sse; empty infers stdio when command is set
	// and http when url is set.
	Type    string            `koanf:"type"`
	Command string            `koanf:"command"`
	Args    []string          `koanf:"args"`
	Env     map[string]string `koanf:"env"`
	URL     string            `koanf:"url"`
	// Headers are sent with every request to a remote server; values are
	// treated as secrets and redacted from `config show`.
	Headers map[string]string `koanf:"headers"`
	// Tools narrows the allowed tools of this server to the named ones;
	// empty allows all of the server's tools.
	Tools []string `koanf:"tools"`
}

type Options struct {
	// File is an explicit settings file path (--config). Empty = default
	// XDG location, which is allowed to be absent.
	File string
	// Flags is the parsed flag set; nil skips the flag layer.
	Flags *pflag.FlagSet
	// LookupEnv overrides os.LookupEnv in tests.
	LookupEnv func(string) (string, bool)
}

type Publish struct {
	Mode            string `koanf:"mode"` // draft | immediate
	AutoComment     bool   `koanf:"auto_comment"`
	AutoMinSeverity string `koanf:"auto_min_severity"`
	// MinSeverity is the publish floor: findings below it are never posted
	// to GitLab — they stay visible in triage, marked below-threshold. The
	// default (info) publishes everything.
	MinSeverity    string `koanf:"min_severity"`
	FallbackToNote bool   `koanf:"fallback_to_note"`
	Attribution    bool   `koanf:"attribution"`
	// Template is a Go text/template for the comment body with fields
	// severity, category, title, body, file. Empty means the built-in
	// "**[severity · category] title**" layout; set e.g. "{{.body}}" for
	// comments with no machine-looking header.
	Template string `koanf:"template"`
}

type Result struct {
	Config Config
	// FilePath is the settings file that was read, "" if none existed.
	FilePath string
	// contains filtered or unexported fields
}

type Review struct {
	Provider string `koanf:"provider"` // anthropic | bedrock
	Model    string `koanf:"model"`
	// Models is the list offered by the `models` command and --model shell
	// completion. Empty falls back to a curated list of common Claude
	// models for the selected provider. Suggestions only: review.model
	// accepts any string the claude CLI understands.
	Models       []string      `koanf:"models"`
	ClaudePath   string        `koanf:"claude_path"`
	Timeout      time.Duration `koanf:"timeout"`
	MaxBudgetUSD float64       `koanf:"max_budget_usd"`
	// Agents is the default agent selection for a review: builtin agent
	// names (the category names) plus any custom agents by name. Empty
	// falls back to the deprecated categories key, which defaults to all
	// builtins.
	Agents []string `koanf:"agents"`
	// AgentConcurrency caps how many agent passes run at once.
	AgentConcurrency int `koanf:"agent_concurrency"`
	// Categories is deprecated: builtin agents subsumed it. It is kept as
	// an alias for agents (each category name is a builtin agent).
	Categories       []string `koanf:"categories"`
	Instructions     string   `koanf:"instructions"`
	InstructionsFile string   `koanf:"instructions_file"`
	MaxDiffKB        int      `koanf:"max_diff_kb"`
	Exclude          []string `koanf:"exclude"`
	Bare             bool     `koanf:"bare"`
	// UseAgents lets the reviewer delegate to Claude Code subagents
	// (project .claude/agents plus user-level ones). Write/exec tools
	// stay denied for the whole session, subagents included.
	UseAgents bool              `koanf:"use_agents"`
	Env       map[string]string `koanf:"env"`
	// MCPServers grants the review session named MCP servers, keyed by
	// server name (settings file only — no flag or env form; per-project
	// sections may add servers for just that project). Off by default:
	// a server that reaches the network reopens the exfiltration channel
	// the review sandbox exists to close, so grant only servers whose
	// egress you trust and keep the grant per-project where possible.
	MCPServers map[string]MCPServer `koanf:"mcp_servers"`
}

type UI struct {
	// DiffView is the diff layout in the MR detail screen: unified or
	// split (side-by-side). Toggleable per session with `v`.
	DiffView string `koanf:"diff_view"`
	// FileExplorer is the initial state of the changed-files tree in the
	// MR detail screen: open or closed. Toggleable per session with `e`.
	FileExplorer string `koanf:"file_explorer"`
}