config

type Config struct {
	DataDir string
	// The hosted build's Postgres (MAI-150); all empty = SQLite in DataDir. DatabaseURL is
	// the app role's, WorkerDatabaseURL the worker role's (empty = DatabaseURL), and
	// MigrateDatabaseURL the owner's, read by `mailrules migrate` alone. Never logged.
	DatabaseURL        string
	WorkerDatabaseURL  string
	MigrateDatabaseURL string
	Listen             string
	Mode               string
	MasterKey          string
	MasterKeyFile      string
	// NewMasterKey lets the daemon start although the master key cannot open any stored
	// mailbox password or model key; see ext/daemon's openMasterKey.
	NewMasterKey bool
	// TenantKeyCache is how long a tenant's unwrapped data key stays in memory before the
	// key provider is asked for it again (store.Keyring).
	TenantKeyCache time.Duration
	DryRun         bool

	Decider          string
	DeciderModel     string
	FallbackModel    string
	ComposerModel    string
	EscalateBelow    float64
	MinConfidence    float64
	BodyChars        int
	ModelConcurrency int

	OpenRouterAPIKey    string
	CloudflareAccountID string
	CloudflareAPIToken  string
	AnthropicAPIKey     string
	// AnthropicWorkspaceID names the workspace every Claude request runs in (the
	// anthropic-workspace-id header). Only a key that covers a whole organisation needs it;
	// empty = none sent.
	AnthropicWorkspaceID string
	OpenAIBaseURL        string
	OpenAIAPIKey         string
	OllamaURL            string

	PricesFile string
	LogLevel   string
	// LogRedactAddresses is auto, true or false; see RedactAddresses.
	LogRedactAddresses string

	// CookieSecure is auto, true or false; see SecureCookies.
	CookieSecure string

	// TrustedProxies lists the reverse proxies whose X-Forwarded-For header is believed,
	// as IP addresses or CIDR ranges separated by commas; see TrustedProxyPrefixes.
	TrustedProxies string

	// The outgoing mail server the summary email is sent through. SMTPPort 0 means the
	// usual port for SMTPTLS; SMTPPasswordFile names a file holding the password, like
	// MasterKeyFile. Never logged.
	SMTPHost         string
	SMTPPort         int
	SMTPUser         string
	SMTPPassword     string
	SMTPPasswordFile string
	SMTPFrom         string
	SMTPTLS          string // starttls | implicit | none (none: localhost only)

	// PublicURL is where the web app is reached from the user's mail program: links in the
	// summary email start with it.
	PublicURL string

	// OpenTelemetry export of the metrics and the log (MAI-239): off while OTLPEndpoint is
	// empty. OTLPHeaders holds the receiver's key: never logged, never quoted in an error.
	OTLPEndpoint string
	OTLPHeaders  string
	OTLPProtocol string
	ServiceName  string
	// Environment names the deployment (staging, production): deployment.environment.name.
	Environment string
}

type Setting struct {
	Group   string // the heading it is listed under
	Env     string // the environment variable
	Flag    string // the command-line flag, without the leading --
	Default string // the default as the flag package prints it; empty for none
	Help    string // what it does, for a reader of the reference
}