config

type ACPConfig struct {
	Peers          []ACPPeerConfig `toml:"peers"`
	Listen         string          `toml:"listen"`
	Token          string          `toml:"token"`
	AllowedOrigins []string        `toml:"allowed_origins"`
	Enabled        bool            `toml:"enabled"`
}

type ACPPeerConfig struct {
	Name      string `toml:"name"`
	URL       string `toml:"url"`
	TokenFile string `toml:"token_file"`
}

type AdvancedSettings struct {
	SystemPrompt PromptOverride                `yaml:"system_prompt,omitempty"`
	Tools        map[string]ToolUserConfig     `yaml:"tools,omitempty"`
	Scanners     ScannerToggles                `yaml:"scanners,omitempty"`
	Compaction   CompactionUserConfig          `yaml:"compaction,omitempty"`
	MCPServers   []MCPServerUserConfig         `yaml:"mcp_servers,omitempty"`
	Skills       SkillsUserConfig              `yaml:"skills,omitempty"`
	Hooks        HooksUserConfig               `yaml:"hooks,omitempty"`
	Memory       MemoryUserConfig              `yaml:"memory,omitempty"`
	Providers    map[string]ProviderUserConfig `yaml:"providers,omitempty"`
	Persona      PersonaUserConfig             `yaml:"persona,omitempty"`
	Telemetry    TelemetryUserConfig           `yaml:"telemetry,omitempty"`
	Permissions  PermissionsUserConfig         `yaml:"permissions,omitempty"`
	Board        BoardUserConfig               `yaml:"board,omitempty"`
}

type AgentConfig struct {
	Instructions          instructions.Config `toml:"instructions"`
	Name                  string              `toml:"name"`
	DefaultProvider       string              `toml:"default_provider"`
	DefaultModel          string              `toml:"default_model"`
	MaxTurns              int                 `toml:"max_turns"`
	MaxOutputTokens       int                 `toml:"max_output_tokens"`
	SpecDriven            bool                `toml:"spec_driven"`
	SystemPromptOverrides map[string]string   `toml:"system_prompt_overrides"`
	// SystemPrompt is a user-editable base system prompt. When non-empty,
	// it's prepended to the personality-generated prompt. Changing it
	// mid-session triggers context compaction + a fresh conversation.
	SystemPrompt string `toml:"system_prompt"`
}

type AutoMemoryConfig struct {
	Enabled        bool `toml:"enabled"`
	MinNewMessages int  `toml:"min_new_messages"`
}

type BasicSettings struct {
	Model              string          `yaml:"model,omitempty"`
	ContextBudget      float64         `yaml:"context_budget,omitempty"` // 0.0-1.0 fraction of the model's window
	Tools              map[string]bool `yaml:"tools,omitempty"`          // name → enabled
	Theme              string          `yaml:"theme,omitempty"`
	VimMode            *bool           `yaml:"vim_mode,omitempty"`
	CostCapMonthly     float64         `yaml:"cost_cap_monthly,omitempty"` // USD; 0 = no cap (just track)
	AutoCompactPercent float64         `yaml:"auto_compact_percent,omitempty"`
	ConfirmWrites      *bool           `yaml:"confirm_writes,omitempty"`
}

type BoardOvenAction struct {
	Kind     string         `yaml:"kind"`
	AutoFire bool           `yaml:"auto_fire,omitempty"`
	Args     map[string]any `yaml:"args,omitempty"`
}

type BoardPipelineStep struct {
	Subagent    string         `yaml:"subagent"`
	BlockOnFail bool           `yaml:"block_on_fail"`
	Args        map[string]any `yaml:"args,omitempty"`
}

type BoardUserConfig struct {
	Enabled         *bool               `yaml:"enabled,omitempty"`
	AutoDispatch    *bool               `yaml:"auto_dispatch,omitempty"`
	MaxConcurrent   int                 `yaml:"max_concurrent,omitempty"`
	DefaultEffort   string              `yaml:"default_effort,omitempty"`
	DefaultPriority string              `yaml:"default_priority,omitempty"`
	ReviewPipeline  []BoardPipelineStep `yaml:"review_pipeline,omitempty"`
	OvenActions     []BoardOvenAction   `yaml:"oven_actions,omitempty"`
}

type BridgeConfig struct {
	Workspace string `toml:"workspace"` // canonical server-side workspace; defaults to startup cwd
	Enabled   bool   `toml:"enabled"`
	Listen    string `toml:"listen"` // default 127.0.0.1:7799
	Token     string `toml:"token"`  // shared secret; empty disables auth
}

type BrowserConfig struct {
	Enabled      bool          `toml:"enabled"`
	Headless     bool          `toml:"headless"`
	ChromePath   string        `toml:"chrome_path"`
	UserAgent    string        `toml:"user_agent"`
	AllowedHosts []string      `toml:"allowed_hosts"`
	BlockedHosts []string      `toml:"blocked_hosts"`
	Timeout      time.Duration `toml:"timeout"`
}

type Category string

type CompactionConfig struct {
	// Strategy is auto (durable Seahorse with PostgreSQL, otherwise LCM),
	// seahorse, lcm or legacy. UseLCM=false retains the legacy kill switch.
	Strategy string `toml:"strategy,omitempty"`

	SoftTriggerPercent int `toml:"soft_trigger_percent"`
	HardTriggerPercent int `toml:"hard_trigger_percent"`
	PreserveMessages   int `toml:"preserve_messages"`
	MaxSummaryTokens   int `toml:"max_summary_tokens"`
	// Model overrides the model used for the summarisation LLM call.
	// Empty falls back to the same provider's cheapest listed model at runtime.
	Model string `toml:"model,omitempty"`
	// UseLCM enables the selected compactor strategy. When false, manual
	// compaction retains the legacy single-call path and automatic strategy
	// compaction is disabled. Defaults to true for compatibility.
	UseLCM bool `toml:"use_lcm"`
	// PromptCompress, when true, runs the assembled system prompt through
	// the LLMLingua-style compressor on high-utilization turns (≥0.7).
	// Off by default — adds a per-turn LLM round-trip when triggered.
	PromptCompress bool `toml:"prompt_compress"`
}

type CompactionUserConfig struct {
	Enabled       *bool   `yaml:"enabled,omitempty"`
	Model         string  `yaml:"model,omitempty"`
	SoftThreshold float64 `yaml:"soft_threshold,omitempty"`
	HardThreshold float64 `yaml:"hard_threshold,omitempty"`
	PreserveLast  int     `yaml:"preserve_last,omitempty"`
	Strategy      string  `yaml:"strategy,omitempty"` // lcm | summarize-and-truncate | aggressive
}

type Config struct {
	AutoMemory  AutoMemoryConfig  `toml:"auto_memory"`
	Version     int               `toml:"version"`
	Agent       AgentConfig       `toml:"agent"`
	Thinking    ThinkingConfig    `toml:"thinking"`
	Providers   []ProviderConfig  `toml:"providers"`
	TTS         TTSConfig         `toml:"tts"`
	Personality PersonalityConfig `toml:"personality"`
	Security    SecurityConfig    `toml:"security"`
	Session     SessionConfig     `toml:"session"`
	Cost        CostConfig        `toml:"cost"`
	Compaction  CompactionConfig  `toml:"compaction"`
	MCP         MCPConfig         `toml:"mcp"`
	LSP         LSPConfig         `toml:"lsp"`
	Skills      SkillsConfig      `toml:"skills"`
	UI          UIConfig          `toml:"ui"`
	Sync        SyncConfig        `toml:"sync"`
	Share       ShareConfig       `toml:"share"`
	ACP         ACPConfig         `toml:"acp"`
	Plugins     PluginsConfig     `toml:"plugins"`
	Slack       SlackConfig       `toml:"slack"`
	Gateways    GatewayConfig     `toml:"gateways"`
	Cron        CronConfig        `toml:"cron"`
	Vision      VisionConfig      `toml:"vision"`
	Browser     BrowserConfig     `toml:"browser"`
	Rewriter    RewriterConfig    `toml:"rewriter"`
	Ouroboros   OuroborosConfig   `toml:"ouroboros"`
	RedTeam     RedTeamConfig     `toml:"red_team"`
	ImageGen    ImageGenConfig    `toml:"image_gen"`

	// DatabaseURL is the PostgreSQL connection string for persistent stores
	// (learning corrections, etc.). Falls back to DATABASE_URL env var.
	// Example: "postgres://user:***@localhost:5432/overkill?sslmode=disable"
	DatabaseURL   string              `toml:"database_url"`
	LocalDatabase LocalDatabaseConfig `toml:"local_database"`
	// contains filtered or unexported fields
}

type Configurable interface {
	// ConfigSchema returns the descriptor the Settings UI renders.
	// Returning nil opts the implementer out of the rich-card flow
	// (the basic on/off toggle still works).
	ConfigSchema() *Schema

	// ApplyConfig is called when the user saves the settings card.
	// Implementations validate + apply atomically. Returning an
	// error keeps the prior in-memory state and surfaces the
	// message to the user.
	ApplyConfig(raw map[string]any) error
}

type CostConfig struct {
	DailyLimitUSD   float64 `toml:"daily_limit_usd"`
	PerTaskLimitUSD float64 `toml:"per_task_limit_usd"`
	// RollingWindowHrs is the look-back window for RollingLimitUSD.
	// Default 5 hours per master plan §4.5. Ignored when
	// RollingLimitUSD is 0.
	RollingWindowHrs int `toml:"rolling_window_hrs"`
	// RollingLimitUSD caps total spend over the last RollingWindowHrs.
	// 0 disables the rolling cap entirely. Exceeding the limit sets
	// BudgetStatus.ShouldAbort; crossing WarnAtPercent of it sets
	// ShouldWarn. Caps daily-spike protection independently of the
	// daily limit (different bucket: 5h vs 24h).
	RollingLimitUSD float64 `toml:"rolling_limit_usd"`
	WarnAtPercent   int     `toml:"warn_at_percent"`
}

type CronConfig struct {
	// IdleWindowSec is how long (in seconds) the agent must be idle before
	// buffered cron outputs are flushed through the gateway.
	// Default 300 (5 minutes).
	IdleWindowSec int `toml:"idle_window_sec"`
}

type DiscordConfig struct {
	Enabled         bool     `toml:"enabled"`
	BotToken        string   `toml:"bot_token"`
	AllowedGuilds   []string `toml:"allowed_guilds"`   // empty = any
	AllowedChannels []string `toml:"allowed_channels"` // empty = any
	// RequireMention, when true, makes the bot ignore guild messages
	// that don't @mention it. DMs always work regardless. Default true
	// (set explicitly in config if you want the bot to react to every
	// channel message — usually a bad idea).
	RequireMention bool `toml:"require_mention"`
	// NotifyChannelID is the channel the gateway pushes unsolicited
	// notifications to (§7.1 Layer 6). Empty = no Discord push
	// delivery.
	NotifyChannelID string `toml:"notify_channel_id"`
	// CutoffSec is the sliding window for Discord edit rate limiting
	// in seconds. Default 5.
	CutoffSec int `toml:"cutoff_sec"`
	// CleanupSec is the interval in seconds for cleaning up stale
	// edit rate limit entries. Default 600 (10 minutes).
	CleanupSec int `toml:"cleanup_sec"`
}

type Field struct {
	Key         string    `json:"key"`
	Label       string    `json:"label"`
	Kind        FieldKind `json:"kind"`
	Description string    `json:"description,omitempty"`
	Default     any       `json:"default,omitempty"`
	Options     []string  `json:"options,omitempty"` // for Kind=enum
	// Min / Max apply to int / float fields. Zero means "no bound."
	Min float64 `json:"min,omitempty"`
	Max float64 `json:"max,omitempty"`
	// Required: an empty value on save returns a validation error.
	Required bool `json:"required,omitempty"`
}

type FieldKind string

type GatewayConfig struct {
	Telegram   TelegramConfig   `toml:"telegram"`
	Discord    DiscordConfig    `toml:"discord"`
	Slack      SlackConfig      `toml:"slack"`
	WhatsApp   WhatsAppConfig   `toml:"whatsapp"`
	Bridge     BridgeConfig     `toml:"bridge"`
	Signal     SignalConfig     `toml:"signal"`
	Matrix     MatrixConfig     `toml:"matrix"`
	Mattermost MattermostConfig `toml:"mattermost"`

	// MaxTextLen caps the text per inbound message to prevent OOM from
	// huge pastes. Default 100000.
	MaxTextLen int `toml:"max_text_len"`
	// MaxImageBytes caps total image bytes per message. Default 20000000.
	MaxImageBytes int `toml:"max_image_bytes"`
	// RateLimitPerMin is the rate limit per sender per minute. Default 10.
	RateLimitPerMin int `toml:"rate_limit_per_min"`
	// UpdateEveryMs is the batch reply edit interval in milliseconds. Default 750ms.
	UpdateEveryMs int `toml:"update_every_ms"`
	// BackoffInitialSec is the initial backoff in seconds for gateway hub
	// restarts. Default 1.
	BackoffInitialSec int `toml:"backoff_initial_sec"`
	// BackoffMaxSec is the maximum backoff cap in seconds for gateway hub
	// restarts. Default 30.
	BackoffMaxSec int `toml:"backoff_max_sec"`
}

type HookEntry struct {
	Matcher     string `yaml:"matcher,omitempty"`
	Command     string `yaml:"command"`
	Description string `yaml:"description,omitempty"`
}

type HooksUserConfig struct {
	PreToolUse  []HookEntry `yaml:"pre_tool_use,omitempty"`
	PostToolUse []HookEntry `yaml:"post_tool_use,omitempty"`
	OnError     []HookEntry `yaml:"on_error,omitempty"`
	OnStop      []HookEntry `yaml:"on_stop,omitempty"`
}

type ImageGenConfig struct {
	Provider       string `toml:"provider"`        // "openai" | "stability" | "replicate"
	OpenAIKey      string `toml:"openai_key"`      // falls back to OPENAI_API_KEY
	StabilityKey   string `toml:"stability_key"`   // falls back to STABILITY_API_KEY
	ReplicateToken string `toml:"replicate_token"` // falls back to REPLICATE_API_TOKEN
}

type LSPConfig struct {
	Servers []LSPServer `toml:"servers"`

	// MaxMessageBytes caps the maximum size of an LSP message in bytes.
	// Messages exceeding this cap are rejected to prevent OOM.
	// Default 33554432 (32 MiB).
	MaxMessageBytes int `toml:"max_message_bytes"`
}

type LSPServer struct {
	Language  string   `toml:"language"`
	Command   string   `toml:"command"`
	Args      []string `toml:"args"`
	Filetypes []string `toml:"filetypes"`
}

type LayerSources struct {
	SystemFile    string
	UserFile      string
	WorkspaceFile string
	EnforcedFile  string
}

type LocalDatabaseConfig struct {
	Enabled bool   `toml:"enabled"`
	BinDir  string `toml:"bin_dir"`
	DataDir string `toml:"data_dir"`
}

type MCPConfig struct {
	Servers []MCPServer `toml:"servers"`
}

type MCPServer struct {
	Name    string            `toml:"name"`
	Command string            `toml:"command"`
	Args    []string          `toml:"args"`
	Env     map[string]string `toml:"env"`
	Enabled *bool             `toml:"enabled,omitempty"` // nil preserves legacy default-on; explicit false disables launch.
	// mcpshield capability — empty/zero means "trusted, no caps"
	// (legacy default). Explicit tool lists apply even with trusted=true.
	// Paths require an explicit local workspace and per-tool argument bindings.
	// Users locking down a server set one or more
	// of these to opt into the policy gate.
	PathWorkspace        string              `toml:"path_workspace,omitempty"`         // Local child cwd/base for declared path arguments.
	PathArgumentBindings map[string][]string `toml:"path_argument_bindings,omitempty"` // Tool -> RFC6901 pointers; empty list explicitly means no path inputs.
	AllowedTools         []string            `toml:"allowed_tools,omitempty"`
	AllowedPathPrefixes  []string            `toml:"allowed_path_prefixes,omitempty"`
	MaxBytesPerCall      int                 `toml:"max_bytes_per_call,omitempty"`
	Trusted              *bool               `toml:"trusted,omitempty"` // nil = default trusted
}

type MCPServerUserConfig struct {
	Name                string   `yaml:"name"`
	Enabled             *bool    `yaml:"enabled,omitempty"`
	AllowedTools        []string `yaml:"allowed_tools,omitempty"`
	AllowedPathPrefixes []string `yaml:"allowed_path_prefixes,omitempty"`
	MaxBytesPerCall     int      `yaml:"max_bytes_per_call,omitempty"`
	Trusted             *bool    `yaml:"trusted,omitempty"`
}

type MatrixConfig struct {
	Enabled       bool   `toml:"enabled"`
	HomeserverURL string `toml:"homeserver_url"` // default https://matrix.org
	UserID        string `toml:"user_id"`        // @user:homeserver
	AccessToken   string `toml:"access_token"`   // env: MATRIX_ACCESS_TOKEN
	Password      string `toml:"password"`       // for auto-login if no token
	// NotifyRoomID is the Matrix room ID (e.g. "!abc123:homeserver")
	// the gateway pushes unsolicited notifications to (§7.1 Layer 6).
	// Empty = no Matrix push delivery.
	NotifyRoomID string `toml:"notify_room_id"`
	// SeenTTLSec caps how long (in seconds) a seen event ID is
	// remembered for deduplication. Default 600 (10 minutes).
	SeenTTLSec int `toml:"seen_ttl_sec"`
	// MemberCountTTLSec expires cached member counts so routing decisions
	// don't stay permanently stale after membership changes.
	// Default 300 (5 minutes).
	MemberCountTTLSec int `toml:"member_count_ttl_sec"`
}

type MattermostConfig struct {
	Enabled   bool   `toml:"enabled"`
	ServerURL string `toml:"server_url"` // e.g. https://mattermost.example.com
	BotToken  string `toml:"bot_token"`  // env: MATTERMOST_BOT_TOKEN
	TeamName  string `toml:"team_name"`  // team the bot joins
	// NotifyChannelID is the Mattermost channel ID the gateway pushes
	// unsolicited notifications to (§7.1 Layer 6). Empty = no Mattermost push delivery.
	NotifyChannelID string `toml:"notify_channel_id"`
}

type MemoryUserConfig struct {
	Enabled        *bool  `yaml:"enabled,omitempty"`
	MaxEntries     int    `yaml:"max_entries,omitempty"`
	TTLDays        int    `yaml:"ttl_days,omitempty"`
	EmbeddingModel string `yaml:"embedding_model,omitempty"`
}

type ModelConfig struct {
	ID              string  `toml:"id"`
	Name            string  `toml:"name"`
	MaxTokens       int     `toml:"max_tokens"`        // Legacy context capacity; never an output limit.
	ContextWindow   int     `toml:"context_window"`    // Takes precedence over max_tokens.
	MaxOutputTokens int     `toml:"max_output_tokens"` // Independent completion ceiling; zero uses provider defaults.
	CostIn          float64 `toml:"cost_in"`
	CostOut         float64 `toml:"cost_out"`
	CostCacheIn     float64 `toml:"cost_cache_in"`
	CostCacheOut    float64 `toml:"cost_cache_out"`
}

type OuroborosConfig struct {
	Enabled    bool   `toml:"enabled"`
	Provider   string `toml:"provider"`    // e.g. "openai", "anthropic"
	Model      string `toml:"model"`       // model id on the review provider
	APIKey     string `toml:"api_key"`     // falls back to <PROVIDER>_API_KEY
	BaseURL    string `toml:"base_url"`    // optional override
	StrictMode bool   `toml:"strict_mode"` // when true, warnings also block
	// SystemPrompt overrides the default adversarial reviewer prompt.
	// When empty, the built-in prompt is used.
	SystemPrompt string `toml:"system_prompt"`
}

type PermissionsUserConfig struct {
	AutoApproveAll         *bool `yaml:"auto_approve_all,omitempty"`
	SkipDestructiveConfirm *bool `yaml:"skip_destructive_confirm,omitempty"`
	// RequireApprovalTools lists tool names that must always prompt for
	// operator approval even when AutoApproveAll is false. Used by the
	// "remote" profile to gate shell, patch, and git-push variants.
	RequireApprovalTools []string `yaml:"require_approval_tools,omitempty"`
	// DeniedTools lists tool names that are unconditionally blocked.
	DeniedTools []string `yaml:"denied_tools,omitempty"`
	// AllowedWebDomains restricts web-fetch calls to this domain list.
	// An empty slice means no restriction (fetch anything). The "remote"
	// profile leaves this empty by default; operators fill it in.
	AllowedWebDomains []string `yaml:"allowed_web_domains,omitempty"`
}

type PersonaUserConfig struct {
	Tone      string `yaml:"tone,omitempty"`      // terse | normal | verbose
	Style     string `yaml:"style,omitempty"`     // senior | pair | tutor | brutal
	Directive string `yaml:"directive,omitempty"` // appended to system prompt
}

type PersonalityConfig struct {
	Level    string `toml:"level"`
	Language string `toml:"language"`
}

type PluginsConfig struct {
	Disabled []string `toml:"disabled"`
	Dir      string   `toml:"dir"`
}

type PromptOverride struct {
	Mode      string            `yaml:"mode,omitempty"`      // "default" | "patch" | "replace"
	Patch     string            `yaml:"patch,omitempty"`     // unified diff over the baseline
	Replace   string            `yaml:"replace,omitempty"`   // full override (Go text/template)
	Variables map[string]string `yaml:"variables,omitempty"` // template vars exposed to Replace
}

type ProviderConfig struct {
	Name     string            `json:"name,omitempty" toml:"name"`
	Type     string            `json:"type,omitempty" toml:"type"`
	APIKey   string            `json:"apiKey,omitempty" toml:"api_key"`
	AuthType string            `json:"authType,omitempty" toml:"auth_type"`
	BaseURL  string            `json:"baseUrl,omitempty" toml:"base_url"`
	Models   []ModelConfig     `json:"models,omitempty" toml:"models"`
	Headers  map[string]string `json:"headers,omitempty" toml:"headers"`
}

type ProviderSetup struct {
	Name         string
	APIKeyEnv    string
	DefaultBase  string
	AltEndpoints []string
	Models       []string
}

type ProviderUserConfig struct {
	APIKeyRef string         `yaml:"api_key,omitempty"` // "${secret:openai_key}" or literal
	BaseURL   string         `yaml:"base_url,omitempty"`
	Models    map[string]any `yaml:"models,omitempty"`
}

type QuickSetup struct {
	Provider       string `json:"provider"`
	Model          string `json:"model"`
	Gateway        string `json:"gateway"`
	TTS            string `json:"tts"`
	Database       string `json:"database"`
	ReviewProvider string `json:"review_provider"`
	ReviewModel    string `json:"review_model"`
}

type Rating int

type RedTeamConfig struct {
	Enabled  bool   `toml:"enabled"`
	Provider string `toml:"provider"`  // e.g. "deepseek", "openai"
	Model    string `toml:"model"`     // model id on the test-gen provider
	APIKey   string `toml:"api_key"`   // falls back to <PROVIDER>_API_KEY
	BaseURL  string `toml:"base_url"`  // optional override
	MaxTests int    `toml:"max_tests"` // max tests per changed file (default 5)
	// SystemPrompt overrides the default adversarial test generator prompt.
	// When empty, the built-in prompt is used.
	SystemPrompt string `toml:"system_prompt"`
}

type RewriterConfig struct {
	Enabled          bool   `toml:"enabled"`
	StripSycophancy  bool   `toml:"strip_sycophancy"`
	AntiPatternGuard bool   `toml:"anti_pattern_guard"`
	LLMRewrite       bool   `toml:"llm_rewrite"`
	Model            string `toml:"model"`
}

type ScannerOnOff struct {
	Enabled *bool `yaml:"enabled"`
}

type ScannerToggles struct {
	Command             ScannerOnOff `yaml:"command,omitempty"`
	Injection           ScannerOnOff `yaml:"injection,omitempty"`
	PromptInjectBrowser ScannerOnOff `yaml:"prompt_inject_browser,omitempty"`
}

type Schema struct {
	Name        string  `json:"name"`
	Description string  `json:"description,omitempty"`
	Fields      []Field `json:"fields"`
	// Category groups multiple Configurables in the Advanced tab
	// (e.g. "scanners", "tools", "memory"). Empty falls back to
	// "tools".
	Category string `json:"category,omitempty"`
}

type SecurityConfig struct {
	AutonomyLevel  string   `toml:"autonomy_level"`
	DenyPatterns   []string `toml:"deny_patterns"`
	ForbiddenPaths []string `toml:"forbidden_paths"`
	MaxCommandLen  int      `toml:"max_command_len"`
	// SandboxEnabled is retained for config compatibility; true is unsupported.
	SandboxEnabled bool `toml:"sandbox_enabled"`
}

type SessionConfig struct {
	AutoTitle   bool   `toml:"auto_title"`
	MaxSessions int    `toml:"max_sessions"`
	DataDir     string `toml:"data_dir"`
}

type SetupStep struct {
	ID       string
	Prompt   string
	Options  []string
	Default  string
	Validate func(string) error
}

type SetupWizard struct {
	// contains filtered or unexported fields
}

type ShareConfig struct {
	Backend     string `toml:"backend"`      // "gist" | "transfer-sh"
	GitHubToken string `toml:"github_token"` // PAT with gist scope
}

type SignalConfig struct {
	Enabled    bool   `toml:"enabled"`
	RestAPIURL string `toml:"rest_api_url"` // default http://localhost:8080
	Account    string `toml:"account"`      // E.164 phone number
	AuthToken  string `toml:"auth_token"`   // Bearer token for signal-cli auth
	// NotifyNumber is the E.164 phone number the gateway pushes
	// unsolicited notifications to (§7.1 Layer 6). Empty = no Signal push delivery.
	NotifyNumber string `toml:"notify_number"`
	// SeenTTLSec caps how long (in seconds) a seen message hash is
	// remembered for deduplication. Default 600 (10 minutes).
	SeenTTLSec int `toml:"seen_ttl_sec"`
}

type SkillsConfig struct {
	Enabled []string `toml:"enabled"`
}

type SkillsUserConfig struct {
	CustomPath string          `yaml:"custom_path,omitempty"`
	AutoLoad   *bool           `yaml:"auto_load,omitempty"`
	Active     map[string]bool `yaml:"active,omitempty"`
}

type SlackConfig struct {
	Enabled         bool     `toml:"enabled"`
	AppToken        string   `toml:"app_token"`        // xapp-... (Socket Mode)
	BotToken        string   `toml:"bot_token"`        // xoxb-... (Web API)
	AllowedUsers    []string `toml:"allowed_users"`    // empty = all users allowed
	AllowedChannels []string `toml:"allowed_channels"` // empty = all where invited
	// NotifyChannelID is the channel the gateway pushes unsolicited
	// notifications to (§7.1 Layer 6). Empty = no Slack push delivery.
	NotifyChannelID string `toml:"notify_channel_id"`
}

type SyncConfig struct {
	Backend  string         `toml:"backend"`
	AutoPush bool           `toml:"auto_push"`
	S3       SyncS3Config   `toml:"s3"`
	Git      SyncGitConfig  `toml:"git"`
	File     SyncFileConfig `toml:"file"`
	// PushTimeoutSec is the timeout in seconds for auto-push sync operations.
	// Default 30.
	PushTimeoutSec int `toml:"push_timeout_sec"`
}

type SyncFileConfig struct {
	Path string `toml:"path"`
}

type SyncGitConfig struct {
	RemoteURL string `toml:"remote_url"`
	Branch    string `toml:"branch"`
	LocalDir  string `toml:"local_dir"`
}

type SyncS3Config struct {
	Endpoint  string `toml:"endpoint"`
	Bucket    string `toml:"bucket"`
	Region    string `toml:"region"`
	AccessKey string `toml:"access_key"`
	SecretKey string `toml:"secret_key"`
	Prefix    string `toml:"prefix"`
	UseSSL    bool   `toml:"use_ssl"`
}

type TTSConfig struct {
	Provider      string `toml:"provider"`       // default provider: "edge"|"kittentts"|"openai"|"elevenlabs"
	OpenAIKey     string `toml:"openai_key"`     // falls back to OPENAI_API_KEY
	ElevenLabsKey string `toml:"elevenlabs_key"` // falls back to ELEVENLABS_API_KEY
	Voice         string `toml:"voice"`          // default voice for the provider
}

type TelegramConfig struct {
	Enabled      bool    `toml:"enabled"`
	BotToken     string  `toml:"bot_token"`
	AllowedChats []int64 `toml:"allowed_chats"` // empty = any chat the bot is in
	// NotifyChatID is the chat the gateway pushes unsolicited
	// notifications to (§7.1 Layer 6 task-completion alerts). When
	// zero, Telegram is not used for push delivery even if the
	// gateway is otherwise enabled.
	NotifyChatID int64 `toml:"notify_chat_id"`
}

type TelemetryUserConfig struct {
	EventLog       *bool `yaml:"event_log,omitempty"`
	FlightRecorder *bool `yaml:"flight_recorder,omitempty"`
	RetentionDays  int   `yaml:"retention_days,omitempty"`
	VerifyOnBoot   *bool `yaml:"verify_on_boot,omitempty"`
}

type ThinkingConfig struct {
	// Level sets the thinking budget. Supported values:
	// off, minimal, low, medium, high, x-high.
	// Default is "off" (no thinking tokens surfaced).
	Level ThinkingLevel `toml:"level"`
}

type ThinkingLevel string

type ToolUserConfig struct {
	Enabled bool           `yaml:"enabled"`
	Config  map[string]any `yaml:"config,omitempty"`
}

type UIConfig struct {
	Animations bool   `toml:"animations"`
	Theme      string `toml:"theme"`
}

type UserOverrides struct {
	SchemaVersion int              `yaml:"schema_version"`
	Profile       string           `yaml:"profile,omitempty"` // yolo|default|paranoid|enterprise (see ApplyProfile)
	Basic         BasicSettings    `yaml:"basic"`
	Advanced      AdvancedSettings `yaml:"advanced"`
}

type VisionConfig struct {
	Enabled  bool   `toml:"enabled"`
	Provider string `toml:"provider"` // "anthropic"
	APIKey   string `toml:"api_key"`  // falls back to ANTHROPIC_API_KEY
	Model    string `toml:"model"`    // e.g. claude-sonnet-4-5-20250929
}

type Warning string

type WhatsAppCloudConfig struct {
	PhoneNumberID string `toml:"phone_number_id"`
	AccessToken   string `toml:"access_token"` // env: WHATSAPP_CLOUD_ACCESS_TOKEN
	AppSecret     string `toml:"app_secret"`   // env: WHATSAPP_CLOUD_APP_SECRET
	VerifyToken   string `toml:"verify_token"` // env: WHATSAPP_CLOUD_VERIFY_TOKEN
	// Listen is the HTTP bind address for the webhook server. Place
	// behind a reverse proxy that terminates HTTPS — Meta only
	// delivers webhooks to HTTPS endpoints. Default from config.DefaultWhatsAppCloudAddr.
	Listen string `toml:"listen"`
	// SeenTTLSec caps how long (in seconds) a seen message ID is
	// remembered for deduplication. Default 600 (10 minutes).
	SeenTTLSec int `toml:"seen_ttl_sec"`
}

type WhatsAppConfig struct {
	Enabled bool   `toml:"enabled"`
	Backend string `toml:"backend"` // "whatsmeow" | "cloud"

	// AllowedFrom restricts which sender phone numbers the bot
	// responds to (E.164 form, no leading +). Empty = any.
	AllowedFrom []string `toml:"allowed_from"`

	// Whatsmeow sub-config — only consulted when Backend = "whatsmeow".
	Whatsmeow WhatsAppWhatsmeowConfig `toml:"whatsmeow"`
	// Cloud sub-config — only consulted when Backend = "cloud".
	Cloud WhatsAppCloudConfig `toml:"cloud"`
	// NotifyJID is the WhatsApp JID (e.g. "1234567890@s.whatsapp.net")
	// the gateway pushes unsolicited notifications to (§7.1 Layer 6).
	// Empty = no WhatsApp push delivery.
	NotifyJID string `toml:"notify_jid"`
}

type WhatsAppWhatsmeowConfig struct {
	// StorePath is the SQLite file holding the device keys. Created
	// by `overkill whatsapp pair`. Default: ~/.overkill/whatsapp.db
	StorePath string `toml:"store_path"`
}

type WizardCatalog struct {
	Providers []WizardOption `json:"providers"`
	Gateways  []WizardOption `json:"gateways"`
	TTS       []WizardOption `json:"tts"`
	Databases []WizardOption `json:"databases"`
	Review    []WizardOption `json:"review"`
}

type WizardOption struct {
	ID          string   `json:"id"`
	Name        string   `json:"name"`
	Description string   `json:"description"`
	Rating      Rating   `json:"rating"`
	Stars       string   `json:"stars"` // pre-rendered for TUI
	Category    Category `json:"category"`
	APIKeyEnv   string   `json:"api_key_env,omitempty"`
	DefaultBase string   `json:"default_base,omitempty"`
	Models      []string `json:"models,omitempty"`
	RequiresKey bool     `json:"requires_key"`
	Tags        []string `json:"tags,omitempty"` // "free", "local", "cloud", "recommended"
}