api

type AgentConfigItem struct {
	Name                 string              `json:"name"`
	Model                models.ModelID      `json:"model"`
	MaxTokens            int64               `json:"maxTokens"`
	ResolvedMaxTokens    int64               `json:"resolvedMaxTokens,omitempty"` // effective value after auto-budget resolution
	ReasoningEffort      string              `json:"reasoningEffort"`
	ThinkingMode         config.ThinkingMode `json:"thinkingMode,omitempty"`
	AutoCompact          bool                `json:"autoCompact"`
	AutoCompactThreshold float64             `json:"autoCompactThreshold"`
	// ContextControls reports whether the token-budget / auto-compaction knobs
	// above are meaningful for this agent (see config.AgentExposesContextControls).
	// The web-UI hides them when false; the values are still returned so a TOML
	// override remains inspectable, and PUT ignores them for those agents.
	ContextControls bool `json:"contextControls"`
	// UseDecisionModel is only meaningful for the persona-selector agent: when
	// true the persona is picked by a model-auto-mode decision model and the
	// agent's own model is the fallback. Only reported for persona-selector; on
	// PUT it is ignored for any other agent, and an omitted value keeps the
	// stored one.
	UseDecisionModel *bool `json:"useDecisionModel,omitempty"`
}

type BackgroundSessionManager struct {
	// contains filtered or unexported fields
}

type BasicAuthStatusResponse struct {
	Enabled bool                    `json:"enabled"`
	Users   []BasicAuthUserResponse `json:"users"`
	// Enforced reports whether credentials are actually being demanded right now.
	// Basic auth is inert while the server is bound to a loopback address.
	Enforced bool `json:"enforced"`
	// BindHost is the address the server is listening on, so the panel can explain
	// why the setting is inert.
	BindHost string `json:"bindHost"`
}

type BasicAuthUserResponse struct {
	Username string `json:"username"`
}

type BrowserInstallInfo struct {
	Type        string `json:"type"`
	Label       string `json:"label"`
	Executable  string `json:"executable"`
	UserDataDir string `json:"userDataDir,omitempty"`
}

type ChatRequest struct {
	SessionID string `json:"sessionId"`
	Prompt    string `json:"prompt"`
	Model     string `json:"model,omitempty"`
}

type ChatResponse struct {
	SessionID string `json:"sessionId"`
	MessageID string `json:"messageId"`
	Response  string `json:"response"`
}

type CreateCronJobRequest struct {
	Name     string   `json:"name"`
	Schedule string   `json:"schedule"`
	Prompt   string   `json:"prompt"`
	Enabled  bool     `json:"enabled"`
	Engine   string   `json:"engine,omitempty"`
	Model    string   `json:"model,omitempty"`
	WorkDir  string   `json:"workDir,omitempty"`
	Tags     []string `json:"tags,omitempty"`
	Timeout  string   `json:"timeout,omitempty"`
}

type CreateTaskRequest struct {
	Prompt       string   `json:"prompt"`
	WorkDir      string   `json:"work_dir,omitempty"`
	Model        string   `json:"model,omitempty"`
	Engine       string   `json:"engine,omitempty"`
	Tags         []string `json:"tags,omitempty"`
	Dependencies []string `json:"dependencies,omitempty"`
	Background   bool     `json:"background"`
}

type CronJobResponse struct {
	Name     string    `json:"name"`
	Schedule string    `json:"schedule"`
	Enabled  bool      `json:"enabled"`
	Prompt   string    `json:"prompt,omitempty"`
	Engine   string    `json:"engine,omitempty"`
	Model    string    `json:"model,omitempty"`
	WorkDir  string    `json:"workDir,omitempty"`
	Tags     []string  `json:"tags,omitempty"`
	Timeout  string    `json:"timeout,omitempty"`
	NextRun  time.Time `json:"nextRun,omitempty"`
}

type DecisionModelResponse struct {
	Router    DecisionRouterResponse `json:"router"`
	TimeoutMs int                    `json:"timeoutMs"`
	Warnings  []string               `json:"warnings"`
}

type DecisionRouterResponse = ModelAutoRouterResponse

type DesignArtifactResponse struct {
	design.Artifact
	// URL, BridgeURL and FileURL come from the presentation; they are empty
	// when the entry document is missing (a half-deleted artifact directory).
	URL       string `json:"url,omitempty"`
	BridgeURL string `json:"bridge_url,omitempty"`
	FileURL   string `json:"file_url,omitempty"`
	Slides    int    `json:"slides,omitempty"`
	Entry     string `json:"entry,omitempty"`
}

type DesignCanvasResponse struct {
	URL string `json:"url"`
	// Artboards is how many artifacts the canvas currently holds, so a caller
	// can tell an empty canvas from a full one before opening a window.
	Artboards int `json:"artboards"`
}

type DesignStatusResponse struct {
	Enabled bool `json:"enabled"`
	// Preview reports that artifacts can be served over HTTP. It is false when
	// the guard refuses (an exposed listener with no basic auth), which is a
	// different failure from the subsystem being off.
	Preview bool `json:"preview"`
	// PreviewReason explains a false Preview so the UI can say why instead of
	// showing an empty frame.
	PreviewReason string `json:"preview_reason,omitempty"`
	// Renderer reports that a headless browser was found, without which render,
	// screenshot and export do nothing.
	Renderer  bool     `json:"renderer"`
	Kinds     []string `json:"kinds"`
	OutputDir string   `json:"output_dir,omitempty"`
}

type DesignSystemResponse struct {
	System design.DesignSystem `json:"system"`
	// Exists is false when the project has never committed a system and the
	// values shown are the defaults.
	Exists     bool   `json:"exists"`
	Tokens     string `json:"tokens_path"`
	Stylesheet string `json:"stylesheet_path"`
	Contract   string `json:"contract_path"`
}

type EvaluateSessionResponse struct {
	SessionID       string  `json:"session_id"`
	Skipped         string  `json:"skipped,omitempty"`
	Reward          float64 `json:"reward"`
	SuccessScore    float64 `json:"success_score"`
	EfficiencyScore float64 `json:"efficiency_score"`
	UserCorrections int     `json:"user_corrections"`
	MessageCount    int64   `json:"message_count"`
	Judged          bool    `json:"judged"`
}

type EvaluatorMetrics struct {
	TotalSessions  int64   `json:"total_sessions"`
	TotalTemplates int64   `json:"total_templates"`
	AvgReward      float64 `json:"avg_reward"`
	ActiveSkills   int64   `json:"active_skills"`
	IsEnabled      bool    `json:"is_enabled"`
	// Daily is evaluations, mean reward and judge usage per local day for the
	// last 14 days, oldest first. Task type is not stored with a score, so the
	// mean reward is per day rather than per task type.
	Daily []evaluator.DailyMetric `json:"daily"`
	// JudgeCalls / JudgePromptTokens / JudgeCompletionTokens are totals over Daily.
	JudgeCalls            int64 `json:"judge_calls"`
	JudgePromptTokens     int64 `json:"judge_prompt_tokens"`
	JudgeCompletionTokens int64 `json:"judge_completion_tokens"`
	// Problem is the one-line doctor warning; empty when healthy.
	Problem string `json:"problem,omitempty"`
}

type EvaluatorSessionResponse struct {
	ID              string  `json:"id"`
	SessionID       string  `json:"session_id"`
	TemplateID      string  `json:"template_id,omitempty"`
	Reward          float64 `json:"reward"`
	SuccessScore    float64 `json:"success_score"`
	EfficiencyScore float64 `json:"efficiency_score"`
	MessageCount    int64   `json:"message_count"`
	EvaluatedAt     int64   `json:"evaluated_at"`
	// Components is the persisted reward decomposition (per-signal scores,
	// weights, correction pattern hits, explicit feedback).
	Components json.RawMessage `json:"components"`
	// Title is the session title.
	Title string `json:"title,omitempty"`
	// Corrections is the number of user turns flagged as corrections; PatternHits
	// lists them (pattern, snippet).
	Corrections  int                    `json:"corrections"`
	PatternHits  []evaluator.PatternHit `json:"pattern_hits"`
	Feedback     string                 `json:"feedback,omitempty"`
	FeedbackNote string                 `json:"feedback_note,omitempty"`
	// Variants are the prompt variants the session ran with; Skills the learned
	// skills injected into it.
	Variants []evaluator.SessionVariant  `json:"variants"`
	Skills   []evaluator.SessionSkillRef `json:"skills"`
	// JudgeAnalysis is the stored LLM judge output (reasoning, key points,
	// skill proposal); null when the judge did not run for this session.
	JudgeAnalysis         json.RawMessage `json:"judge_analysis"`
	JudgeModel            string          `json:"judge_model,omitempty"`
	JudgePromptTokens     int64           `json:"judge_prompt_tokens"`
	JudgeCompletionTokens int64           `json:"judge_completion_tokens"`
}

type ExecRequest struct {
	Command   string `json:"command"`
	Dir       string `json:"dir,omitempty"`
	SessionID string `json:"session_id,omitempty"`
}

type ExecResponse struct {
	Output    string `json:"output"`
	Error     string `json:"error,omitempty"`
	ExitCode  int    `json:"exit_code"`
	SessionID string `json:"session_id,omitempty"`
	Shell     string `json:"shell,omitempty"`
	Dir       string `json:"dir,omitempty"`
}

type ExtensionsConfigResponse struct {
	Skills        config.SkillsConfig        `json:"skills"`
	SkillsCatalog config.SkillsCatalogConfig `json:"skillsCatalog"`
	Lua           config.LuaConfig           `json:"lua"`
}

type ExtensionsLicenseResponse struct {
	// Gated is true when a license provider is compiled into this build. When
	// false, nothing here is gated and the rest of the fields are empty.
	Gated bool `json:"gated"`
	// Status is the provider's report. Absent when Gated is false.
	Status *extension.LicenseStatus `json:"status,omitempty"`
	// Unlicensed lists the extensions the gate refused, with the reason.
	Unlicensed []UnlicensedExtension `json:"unlicensed"`
}

type ExternalAccessStatus struct {
	// Enabled reports that the listener is bound to a non-loopback address.
	Enabled bool `json:"enabled"`
	// BindHost is the address currently bound.
	BindHost string `json:"bindHost"`
	// Port is the port the listener uses; it never changes when toggling.
	Port int `json:"port"`
	// CanToggle is false when the startup mode owns no HTTP surface, or when the
	// process was started already exposed (e.g. `pando serve --host 0.0.0.0`):
	// the bind is then the operator's choice and the UI must not take it away.
	CanToggle bool `json:"canToggle"`
	// BasicAuthReady reports that credentials exist and are enabled, which is
	// required before the agent may be exposed to the network.
	BasicAuthReady bool `json:"basicAuthReady"`
	// URLs lists the reachable addresses of this instance, for sharing.
	URLs []string `json:"urls"`
}

type InstalledSkillResponse struct {
	Name        string `json:"name"`
	Description string `json:"description"`
	Version     string `json:"version"`
	Source      string `json:"source"`  // "owner/repo" from lock, or "(local)"
	Scope       string `json:"scope"`   // "global", "project", or "(local)"
	Active      bool   `json:"active"`  // loaded in SkillManager
	SkillID     string `json:"skillId"` // from lock, may be empty
}

type LSPConfigItem struct {
	Language  string   `json:"language"`
	Disabled  bool     `json:"disabled"`
	Command   string   `json:"command"`
	Args      []string `json:"args"`
	Languages []string `json:"languages"`
	// Filenames are base names handled regardless of extension (Dockerfile).
	Filenames []string `json:"filenames,omitempty"`
	Autostart bool     `json:"autostart"`
}

type LogEntry struct {
	ID        string `json:"id"`
	Timestamp string `json:"timestamp"`
	Level     string `json:"level"`
	Source    string `json:"source"`
	Message   string `json:"message"`
	Details   string `json:"details,omitempty"`
}

type MCPServerAuthItem struct {
	Type        string              `json:"type,omitempty"`
	Token       string              `json:"token,omitempty"` // write-only
	HasToken    bool                `json:"hasToken"`
	Username    string              `json:"username,omitempty"`
	Password    string              `json:"password,omitempty"` // write-only
	HasPassword bool                `json:"hasPassword"`
	HeaderName  string              `json:"headerName,omitempty"`
	OAuth       *MCPServerOAuthItem `json:"oauth,omitempty"`
}

type MCPServerAuthStatusItem struct {
	Type                  string     `json:"type"`
	HasTokens             bool       `json:"hasTokens"`
	Expired               bool       `json:"expired"`
	ExpiresAt             *time.Time `json:"expiresAt,omitempty"`
	ClientID              string     `json:"clientID,omitempty"`
	DynamicallyRegistered bool       `json:"dynamicallyRegistered"`
}

type MCPServerConfigItem struct {
	Name    string            `json:"name"`
	Command string            `json:"command"`
	Args    []string          `json:"args"`
	Env     []string          `json:"env"`
	Type    config.MCPType    `json:"type"`
	URL     string            `json:"url"`
	Headers map[string]string `json:"headers"`
	Running bool              `json:"running"`
	Tools   []MCPToolInfo     `json:"tools"`
	// Auth describes the authentication mechanism configured for this server.
	// Secret fields (Token, Password, OAuth.ClientSecret) are write-only: GET
	// responses never populate them, only the corresponding HasXxx booleans.
	Auth *MCPServerAuthItem `json:"auth,omitempty"`
	// AuthStatus is a computed, read-only snapshot of the current OAuth state
	// (populated only for Auth.Type == "oauth"); nil for other auth types.
	AuthStatus *MCPServerAuthStatusItem `json:"authStatus,omitempty"`
}

type MCPServerOAuthItem struct {
	ClientID              string   `json:"clientID,omitempty"`
	ClientSecret          string   `json:"clientSecret,omitempty"` // write-only; empty means "keep existing"
	HasClientSecret       bool     `json:"hasClientSecret"`
	Scopes                []string `json:"scopes,omitempty"`
	RedirectURI           string   `json:"redirectURI,omitempty"`
	CallbackPort          int      `json:"callbackPort,omitempty"`
	AuthServerMetadataURL string   `json:"authServerMetadataURL,omitempty"`
}

type MCPToolInfo struct {
	Name        string `json:"name"`
	Description string `json:"description"`
}

type ModelAutoModeResponse struct {
	Enabled        bool                    `json:"enabled"`
	DefaultAuto    bool                    `json:"defaultAuto"`
	Selected       *bool                   `json:"selected,omitempty"`
	AutoSelected   bool                    `json:"autoSelected"`
	Router         ModelAutoRouterResponse `json:"router"`
	Threshold      float64                 `json:"threshold"`
	MinConfidence  float64                 `json:"minConfidence"`
	TimeoutMs      int                     `json:"timeoutMs"`
	HistoryPrompts int                     `json:"historyPrompts"`
	Routes         []config.ModelAutoRoute `json:"routes"`
	Warnings       []string                `json:"warnings"`
}

type ModelAutoRouterResponse struct {
	Provider         config.DecisionProviderKind `json:"provider"`
	BaseURL          string                      `json:"baseURL"`
	EffectiveBaseURL string                      `json:"effectiveBaseURL"`
	Model            string                      `json:"model"`
	KeepAlive        string                      `json:"keepAlive,omitempty"`
	Headers          map[string]string           `json:"headers,omitempty"`
	APIKeySet        bool                        `json:"apiKeySet"`
	APIKeyMasked     string                      `json:"apiKeyMasked"`
}

type ModelInfo struct {
	ID                      string   `json:"id"`
	Name                    string   `json:"name"`
	Provider                string   `json:"provider"`
	AccountID               string   `json:"accountId,omitempty"`
	Description             string   `json:"description"`
	Badges                  []string `json:"badges"`
	CanReason               bool     `json:"canReason"`
	SupportsReasoningEffort bool     `json:"supportsReasoningEffort"`
	SupportsAttachments     bool     `json:"supportsAttachments"`
	ContextWindow           int64    `json:"contextWindow,omitempty"`
	MaxOutputTokens         int64    `json:"maxOutputTokens,omitempty"`
	CostPer1MIn             float64  `json:"costPer1MIn,omitempty"`
	CostPer1MOut            float64  `json:"costPer1MOut,omitempty"`
	Knowledge               string   `json:"knowledge,omitempty"`
	ReleaseDate             string   `json:"releaseDate,omitempty"`

	// Set only on the synthetic "auto" entry.
	RouterProvider string   `json:"routerProvider,omitempty"`
	RouterModel    string   `json:"routerModel,omitempty"`
	RouterHealthy  bool     `json:"routerHealthy,omitempty"`
	RouterProblems []string `json:"routerProblems,omitempty"`
}

type PlaygroundDecision struct {
	RouteID        string             `json:"routeId"`
	Matched        bool               `json:"matched"`
	Probability    float64            `json:"probability"`
	Confidence     float64            `json:"confidence"`
	Probabilities  map[string]float64 `json:"probabilities"`
	Candidates     []string           `json:"candidates"`
	Reason         string             `json:"reason"`
	ErrClass       string             `json:"errClass,omitempty"`
	Error          string             `json:"error,omitempty"`
	RouterProvider string             `json:"routerProvider"`
	RouterModel    string             `json:"routerModel"`
	LatencyMs      int64              `json:"latencyMs"`
	CostUSD        *float64           `json:"costUsd,omitempty"`
	InputTokens    int                `json:"inputTokens,omitempty"`
}

type PlaygroundRequest struct {
	Prompt          string   `json:"prompt"`
	History         []string `json:"history,omitempty"`
	AttachmentNames []string `json:"attachmentNames,omitempty"`
	HasAttachments  bool     `json:"hasAttachments,omitempty"`
	// Config is an optional unsaved draft of the whole block. Absent means the saved block.
	Config *config.ModelAutoModeConfig `json:"config,omitempty"`
	// Decision is an optional unsaved draft of the shared decision model.
	Decision *config.DecisionModelConfig `json:"decision,omitempty"`
}

type ProviderConfigItem struct {
	Name     string `json:"name"`
	APIKey   string `json:"apiKey"` // masked in GET responses
	BaseURL  string `json:"baseUrl"`
	Disabled bool   `json:"disabled"`
}

type ProviderConfigUpdateRequest struct {
	Providers []ProviderConfigItem `json:"providers"`
}

type ProviderStatus struct {
	Name      string `json:"name"`
	Enabled   bool   `json:"enabled"`
	HasAPIKey bool   `json:"has_api_key"`
	BaseURL   string `json:"base_url,omitempty"`
}

type ProviderTypeInfo struct {
	Type                 string `json:"type"`
	DisplayName          string `json:"displayName"`
	RequiresAPIKey       bool   `json:"requiresAPIKey"`
	RequiresBaseURL      bool   `json:"requiresBaseUrl"`
	SupportsOAuth        bool   `json:"supportsOAuth"`
	SupportsExtraHeaders bool   `json:"supportsExtraHeaders"`
}

type SandboxConfigResponse struct {
	// Config is the editable section: the global file's values with every
	// locked field showing its enforced value (config.SandboxSettingsView).
	// A PUT sends this shape back.
	Config config.SandboxConfig `json:"config"`
	// Effective is the in-memory section after project-local tightening and
	// overlays: what Resolve reads.
	Effective  config.SandboxConfig  `json:"effective"`
	Capability sandbox.Capability    `json:"capability"`
	Status     SandboxStatusResponse `json:"status"`
	Policy     SandboxPolicyResponse `json:"policy"`
	// Locked lists the locked sandbox field paths ("sandbox.mode", ...).
	Locked []string `json:"locked"`
	// Platform is runtime.GOOS, so the UI can scope Linux-only knobs.
	Platform string `json:"platform"`
	// EnvOverride is the PANDO_SANDBOX value when set: it overrides the
	// configured mode for this process (unless the mode is locked).
	EnvOverride string `json:"envOverride,omitempty"`
}

type SandboxPolicyResponse struct {
	Workspace      string   `json:"workspace"`
	WritableRoots  []string `json:"writableRoots"`
	ReadableRoots  []string `json:"readableRoots"`
	ProtectedPaths []string `json:"protectedPaths"`
	DenyPaths      []string `json:"denyPaths"`
	ExtendTo       []string `json:"extendTo"`
	AutoAllowBash  bool     `json:"autoAllowBash"`
	UseBwrap       string   `json:"useBwrap"`
	// GuardedPorts are Pando's own TCP ports confined commands cannot
	// connect to (Policy.DenyConnectPorts).
	GuardedPorts []int `json:"guardedPorts"`
}

type SandboxStatusResponse struct {
	// Label is sandbox.Status.Label(), e.g. "workspace-write (landlock+seccomp v5)".
	Label string `json:"label"`
	// Active: the policy is enabled AND the backend enforces it here.
	Active bool `json:"active"`
	// Full: Active with no gaps (sandbox.Guarantees). A partial sandbox
	// keeps the bash permission prompt; Gaps says why.
	Full bool     `json:"full"`
	Gaps []string `json:"gaps"`
	// Enabled: the policy is on, whether or not the OS can enforce it.
	Enabled bool   `json:"enabled"`
	Mode    string `json:"mode"`
	Network string `json:"network"`
	// Source is where the mode came from: default, config, env or lock.
	Source string `json:"source"`
	Hash   string `json:"hash"`
}

type Server struct {
	// contains filtered or unexported fields
}

type ServerConfig struct {
	Host    string
	Port    int
	Version string
	DB      *sql.DB
	// Querier overrides the db.Querier passed to app.New. When non-nil it is
	// used instead of db.New(cfg.DB). Secondary instances supply a DBProxy here
	// so all writes are forwarded to the primary via ZMQ RPC.
	Querier          db.Querier
	CWD              string
	StaticFS         fs.FS
	OpenUI           bool
	UIBaseURL        string
	TLSCertFile      string
	TLSKeyFile       string
	StartupMode      string
	ParentInstanceID string
	ProjectID        string
	ProjectName      string
	PublicBasePath   string
	// APIToken, when set, is used as the API token instead of a generated one.
	// A project child receives it from its parent so only the parent knows it.
	APIToken            string
	WebChildTLSCertFile string
	WebChildTLSKeyFile  string
	WebChildTLSDataDir  string

	// IPC identity fields populated by Bootstrap so the /api/ipc/status
	// endpoint can report them without re-reading the lock file.
	InstanceID string
	Role       string
	PubPort    int
	RPCPort    int
}

type ServicesConfigResponse struct {
	Mesnada      config.MesnadaConfig      `json:"mesnada"`
	Remembrances config.RemembrancesConfig `json:"remembrances"`
	Snapshots    config.SnapshotsConfig    `json:"snapshots"`
	Server       config.APIServerConfig    `json:"server"`
}

type SessionFeedbackRequest struct {
	Rating string `json:"rating"` // "good" | "bad"
	Note   string `json:"note,omitempty"`
}

type SettingsResponse struct {
	HomeDirectory    string `json:"home_directory"`
	WorkingDirectory string `json:"working_directory"`
	DefaultModel     string `json:"default_model"`
	DefaultProvider  string `json:"default_provider"`
	Theme            string `json:"theme"`
	Debug            bool   `json:"debug"`
	LogFile          string `json:"log_file,omitempty"`
	AutoCompact      bool   `json:"auto_compact"`
	SkillsEnabled    bool   `json:"skills_enabled"`
	DataDirectory    string `json:"data_directory"`
	ShowHiddenFiles  bool   `json:"show_hidden_files"`
	NerdFonts        bool   `json:"nerd_fonts"`
	LLMCacheEnabled  bool   `json:"llm_cache_enabled"`
	// ModelsDevEnabled controls the models.dev catalog that completes model
	// pricing/limits the providers do not report.
	ModelsDevEnabled bool `json:"models_dev_enabled"`
	// ImageAutoResize toggles the image resize/recompress pipeline before send.
	ImageAutoResize bool `json:"image_auto_resize"`
	// ImageUseFilesAPI opts into the Anthropic beta Messages API + Files API
	// (uploads images once, references by file_id across turns).
	ImageUseFilesAPI bool   `json:"image_use_files_api"`
	EvaluatorEnabled bool   `json:"evaluator_enabled"`
	JudgeModel       string `json:"judge_model"`
	// OutputFilterEnabled is the inverse of Bash.OutputFilterDisabled: RTK-style
	// command-output compression. True means compression is on (the default).
	OutputFilterEnabled bool `json:"output_filter_enabled"`
	// CavemanDefaultMode is the global output-brevity default ("" = off, or
	// lite|full|ultra). Sessions that ran /caveman keep their own choice.
	CavemanDefaultMode string `json:"caveman_default_mode"`

	// Telemetry: opt-in remote logs/diagnostics shipping to Better Stack. Off
	// by default and GLOBAL-only (see internal/config.TelemetryConfig).
	TelemetryEnabled bool `json:"telemetry_enabled"`
	// TelemetryDebugID is the anonymous debug id in display format
	// ("1234-5678-9012-3456"), or "" if telemetry was never enabled.
	TelemetryDebugID  string `json:"telemetry_debug_id,omitempty"`
	TelemetryMinLevel string `json:"telemetry_min_level"`
	// TelemetryAvailable reports whether this build carries a Better Stack
	// ingest token (internal/telemetry.Available()). The UI keeps the toggle
	// disabled when this is false, regardless of TelemetryEnabled.
	TelemetryAvailable bool `json:"telemetry_available"`

	ToolDiscoveryEnabled        bool   `json:"tool_discovery_enabled"`
	ToolDiscoveryMode           string `json:"tool_discovery_mode"`
	ToolDiscoveryMaxDirectTools int    `json:"tool_discovery_max_direct_tools"`
	ToolDiscoverySearchLimit    int    `json:"tool_discovery_search_limit"`
	ProjectsMaxWebInstances     int    `json:"projects_max_web_instances"`
	ProjectsWebStartupTimeout   string `json:"projects_web_startup_timeout"`

	// Delegation (mesnada delegated-task conclusions + agent-loop resurrection).
	DelegationEnabled                  bool   `json:"delegation_enabled"`
	DelegationInjectIntoLiveLoop       bool   `json:"delegation_inject_into_live_loop"`
	DelegationResurrectIdleLoop        bool   `json:"delegation_resurrect_idle_loop"`
	DelegationSynthesizeFallback       bool   `json:"delegation_synthesize_fallback"`
	DelegationMaxResurrections         int    `json:"delegation_max_resurrections"`
	DelegationMaxDepth                 int    `json:"delegation_max_depth"`
	DelegationMaxConcurrent            int    `json:"delegation_max_concurrent"`
	DelegationResurrectionTimeout      string `json:"delegation_resurrection_timeout"`
	DelegationReuseWarmInstances       bool   `json:"delegation_reuse_warm_instances"`
	DelegationAutoStartWarm            bool   `json:"delegation_auto_start_warm"`
	DelegationWarmIdleTimeout          string `json:"delegation_warm_idle_timeout"`
	DelegationWarmQueueDepth           int    `json:"delegation_warm_queue_depth"`
	DelegationAllowExternalWarmTargets bool   `json:"delegation_allow_external_warm_targets"`
	DelegationAcceptDelegations        bool   `json:"delegation_accept_delegations"`
	// Integrity gate + anti-thrash breaker. Exposed as positive "enabled" flags
	// for the UI even though the config stores them inverted (…Disabled).
	DelegationConclusionGate      bool   `json:"delegation_conclusion_gate"`
	DelegationBreaker             bool   `json:"delegation_breaker"`
	DelegationMaxTaskRetries      int    `json:"delegation_max_task_retries"`
	DelegationRateLimitCooldown   string `json:"delegation_rate_limit_cooldown"`
	DelegationRecentSuccessWindow string `json:"delegation_recent_success_window"`
	// Durable delegation event log, also exposed as a positive flag.
	DelegationEventLog           bool `json:"delegation_event_log"`
	DelegationEventLogMaxEntries int  `json:"delegation_event_log_max_entries"`
	// Claim-lease dispatcher (orchestrator scheduling).
	OrchestratorMaxParallel      int    `json:"orchestrator_max_parallel"`
	OrchestratorMaxPerEngine     int    `json:"orchestrator_max_per_engine"`
	OrchestratorClaimTTL         string `json:"orchestrator_claim_ttl"`
	OrchestratorDispatchInterval string `json:"orchestrator_dispatch_interval"`
}

type SettingsUpdateRequest struct {
	DefaultModel        *string `json:"default_model,omitempty"`
	DefaultProvider     *string `json:"default_provider,omitempty"`
	Theme               *string `json:"theme,omitempty"`
	Debug               *bool   `json:"debug,omitempty"`
	AutoCompact         *bool   `json:"auto_compact,omitempty"`
	SkillsEnabled       *bool   `json:"skills_enabled,omitempty"`
	ShowHiddenFiles     *bool   `json:"show_hidden_files,omitempty"`
	NerdFonts           *bool   `json:"nerd_fonts,omitempty"`
	LLMCacheEnabled     *bool   `json:"llm_cache_enabled,omitempty"`
	ModelsDevEnabled    *bool   `json:"models_dev_enabled,omitempty"`
	ImageAutoResize     *bool   `json:"image_auto_resize,omitempty"`
	ImageUseFilesAPI    *bool   `json:"image_use_files_api,omitempty"`
	EvaluatorEnabled    *bool   `json:"evaluator_enabled,omitempty"`
	JudgeModel          *string `json:"judge_model,omitempty"`
	OutputFilterEnabled *bool   `json:"output_filter_enabled,omitempty"`
	CavemanDefaultMode  *string `json:"caveman_default_mode,omitempty"`

	// TelemetryEnabled toggles opt-in remote logs/diagnostics shipping.
	// Rejected (config untouched) when internal/telemetry.Available() is
	// false, i.e. this build carries no Better Stack ingest token.
	TelemetryEnabled *bool `json:"telemetry_enabled,omitempty"`
	// TelemetryRegenerateID, when true, replaces the current debug id with a
	// freshly generated one. Request-only: never echoed back by GET/PUT, so
	// the client must not persist it in its local draft state.
	TelemetryRegenerateID *bool   `json:"telemetry_regenerate_id,omitempty"`
	TelemetryMinLevel     *string `json:"telemetry_min_level,omitempty"`

	ToolDiscoveryEnabled        *bool   `json:"tool_discovery_enabled,omitempty"`
	ToolDiscoveryMode           *string `json:"tool_discovery_mode,omitempty"`
	ToolDiscoveryMaxDirectTools *int    `json:"tool_discovery_max_direct_tools,omitempty"`
	ToolDiscoverySearchLimit    *int    `json:"tool_discovery_search_limit,omitempty"`
	ProjectsMaxWebInstances     *int    `json:"projects_max_web_instances,omitempty"`
	ProjectsWebStartupTimeout   *string `json:"projects_web_startup_timeout,omitempty"`

	DelegationEnabled                  *bool   `json:"delegation_enabled,omitempty"`
	DelegationInjectIntoLiveLoop       *bool   `json:"delegation_inject_into_live_loop,omitempty"`
	DelegationResurrectIdleLoop        *bool   `json:"delegation_resurrect_idle_loop,omitempty"`
	DelegationSynthesizeFallback       *bool   `json:"delegation_synthesize_fallback,omitempty"`
	DelegationMaxResurrections         *int    `json:"delegation_max_resurrections,omitempty"`
	DelegationMaxDepth                 *int    `json:"delegation_max_depth,omitempty"`
	DelegationMaxConcurrent            *int    `json:"delegation_max_concurrent,omitempty"`
	DelegationResurrectionTimeout      *string `json:"delegation_resurrection_timeout,omitempty"`
	DelegationReuseWarmInstances       *bool   `json:"delegation_reuse_warm_instances,omitempty"`
	DelegationAutoStartWarm            *bool   `json:"delegation_auto_start_warm,omitempty"`
	DelegationWarmIdleTimeout          *string `json:"delegation_warm_idle_timeout,omitempty"`
	DelegationWarmQueueDepth           *int    `json:"delegation_warm_queue_depth,omitempty"`
	DelegationAllowExternalWarmTargets *bool   `json:"delegation_allow_external_warm_targets,omitempty"`
	DelegationAcceptDelegations        *bool   `json:"delegation_accept_delegations,omitempty"`
	DelegationConclusionGate           *bool   `json:"delegation_conclusion_gate,omitempty"`
	DelegationBreaker                  *bool   `json:"delegation_breaker,omitempty"`
	DelegationMaxTaskRetries           *int    `json:"delegation_max_task_retries,omitempty"`
	DelegationRateLimitCooldown        *string `json:"delegation_rate_limit_cooldown,omitempty"`
	DelegationRecentSuccessWindow      *string `json:"delegation_recent_success_window,omitempty"`
	DelegationEventLog                 *bool   `json:"delegation_event_log,omitempty"`
	DelegationEventLogMaxEntries       *int    `json:"delegation_event_log_max_entries,omitempty"`

	OrchestratorMaxParallel      *int    `json:"orchestrator_max_parallel,omitempty"`
	OrchestratorMaxPerEngine     *int    `json:"orchestrator_max_per_engine,omitempty"`
	OrchestratorClaimTTL         *string `json:"orchestrator_claim_ttl,omitempty"`
	OrchestratorDispatchInterval *string `json:"orchestrator_dispatch_interval,omitempty"`
}

type SkillResponse struct {
	ID          string `json:"id"`
	Name        string `json:"name"`
	Description string `json:"description"`
	TaskType    string `json:"task_type"`
	// Confidence is the judge's confidence when it proposed the skill.
	Confidence float64 `json:"confidence"`
	Uses       int64   `json:"uses"`
	// Status is the review state: pending, approved or rejected. Only approved
	// skills are injected into prompts.
	Status string `json:"status"`
	// SuccessRate is the mean reward of the EvalCount evaluated sessions the
	// skill was injected in.
	SuccessRate   float64 `json:"success_rate"`
	EvalCount     int64   `json:"eval_count"`
	JudgeModel    string  `json:"judge_model,omitempty"`
	SourceSession string  `json:"source_session,omitempty"`
	Created       int64   `json:"created,omitempty"`
}

type SnapshotResponse struct {
	ID         string    `json:"id"`
	ShortID    string    `json:"short_id"`
	Name       string    `json:"name"`
	SessionID  string    `json:"session_id"`
	ParentID   string    `json:"parent_id,omitempty"`
	Type       string    `json:"type"`
	Status     string    `json:"status"`
	CreatedAt  time.Time `json:"created_at"`
	Size       int64     `json:"size"`
	FilesCount int       `json:"files_count"`
	TreeSize   int64     `json:"tree_size"`
	TreeFiles  int       `json:"tree_files"`
	IsBaseline bool      `json:"is_baseline"`
}

type SteerRequest struct {
	Prompt string `json:"prompt"`
}

type TaskResponse struct {
	ID          string                    `json:"id"`
	Name        string                    `json:"name"`
	Prompt      string                    `json:"prompt"`
	Agent       string                    `json:"agent"`
	Model       string                    `json:"model"`
	Persona     string                    `json:"persona,omitempty"`
	Status      string                    `json:"status"`
	Progress    int                       `json:"progress"`
	Tokens      int                       `json:"tokens"`
	Output      string                    `json:"output,omitempty"`
	CurrentTool string                    `json:"current_tool,omitempty"`
	ToolCalls   []*mesnadaModels.ToolCall `json:"tool_calls,omitempty"`
	CreatedAt   time.Time                 `json:"created_at"`
	UpdatedAt   time.Time                 `json:"updated_at"`
}

type TemplateSectionResponse struct {
	Section  string                    `json:"section"`
	Variants []TemplateVariantResponse `json:"variants"`
}

type TemplateVariantResponse struct {
	ID        string `json:"id"`
	Name      string `json:"name"`
	Path      string `json:"path,omitempty"`
	IsDefault bool   `json:"is_default"`
	// Missing marks a variant that has statistics but no file any more.
	Missing   bool    `json:"missing,omitempty"`
	TimesUsed int64   `json:"times_used"`
	AvgReward float64 `json:"avg_reward"`
	UCBScore  float64 `json:"ucb_score"`
}

type TokenOptimizationConfigResponse struct {
	config.TokenOptimizationConfig
	OutputFilterEnabled bool     `json:"outputFilterEnabled"`
	OutputFilterPaths   []string `json:"outputFilterPaths,omitempty"`
}

type ToolsConfigResponse struct {
	FetchEnabled   bool `json:"fetchEnabled"`
	FetchMaxSizeMB int  `json:"fetchMaxSizeMB"`

	GoogleSearchEnabled  bool   `json:"googleSearchEnabled"`
	GoogleAPIKey         string `json:"googleApiKey"` // masked
	GoogleSearchEngineID string `json:"googleSearchEngineId"`

	BraveSearchEnabled bool   `json:"braveSearchEnabled"`
	BraveAPIKey        string `json:"braveApiKey"` // masked

	PerplexitySearchEnabled bool   `json:"perplexitySearchEnabled"`
	PerplexityAPIKey        string `json:"perplexityApiKey"` // masked

	ExaSearchEnabled bool   `json:"exaSearchEnabled"`
	ExaAPIKey        string `json:"exaApiKey"` // masked

	SourcegraphEnabled bool   `json:"sourcegraphEnabled"`
	SourcegraphToken   string `json:"sourcegraphToken"` // masked

	Context7Enabled bool `json:"context7Enabled"`

	BrowserType        string `json:"browserType"`
	BrowserExecutable  string `json:"browserExecutable"`
	BrowserEnabled     bool   `json:"browserEnabled"`
	BrowserHeadless    bool   `json:"browserHeadless"`
	BrowserTimeout     int    `json:"browserTimeout"`
	BrowserUserDataDir string `json:"browserUserDataDir"`
	BrowserMaxSessions int    `json:"browserMaxSessions"`

	DesktopEnabled            bool     `json:"desktopEnabled"`
	DesktopBackend            string   `json:"desktopBackend"`
	DesktopAllowPhysicalInput bool     `json:"desktopAllowPhysicalInput"`
	DesktopMaxNodes           int      `json:"desktopMaxNodes"`
	DesktopDefaultDepth       int      `json:"desktopDefaultDepth"`
	DesktopActionTimeout      int      `json:"desktopActionTimeout"`
	DesktopSnapshotTTL        int      `json:"desktopSnapshotTTL"`
	DesktopScreenshotScale    float64  `json:"desktopScreenshotScale"`
	DesktopAllowedApps        []string `json:"desktopAllowedApps"`
	DesktopDeniedApps         []string `json:"desktopDeniedApps"`
}

type UIManifestResponse struct {
	// Panels is never nil in the response, so the shell can iterate without a
	// null check on the standard build, where it is simply empty.
	Panels []extensions.Panel `json:"panels"`
}

type UIPolicyBannerResponse struct {
	Text string `json:"text"`
	Link string `json:"link"`
}

type UIPolicyResponse struct {
	HiddenSections   []string               `json:"hiddenSections"`
	ReadOnlySections []string               `json:"readOnlySections"`
	ReadOnlyLabel    string                 `json:"readOnlyLabel"`
	Banner           UIPolicyBannerResponse `json:"banner"`
}

type UIPrefs struct {
	// ChatMode is "simple" or "advanced"; empty means "never chosen".
	ChatMode string `json:"chatMode"`
	// Language is the UI (i18n) language code, e.g. "en" or "es"; empty means
	// "never chosen".
	Language string `json:"language"`
}

type UnlicensedExtension struct {
	ID     string `json:"id"`
	Name   string `json:"name,omitempty"`
	Reason string `json:"reason"`
}

type UpdateCronJobRequest struct {
	Enabled  *bool    `json:"enabled,omitempty"`
	Prompt   *string  `json:"prompt,omitempty"`
	Schedule *string  `json:"schedule,omitempty"`
	Engine   *string  `json:"engine,omitempty"`
	Model    *string  `json:"model,omitempty"`
	WorkDir  *string  `json:"workDir,omitempty"`
	Tags     []string `json:"tags,omitempty"`
	Timeout  *string  `json:"timeout,omitempty"`
}