config

type AdminConfig struct {
	Username string `toml:"username"`
	Password string `toml:"password" json:"-"`
	Email    string `toml:"email"`
}

type AgentConfig struct {
	ToolOutputMaxBytes  int    `toml:"tool_output_max_bytes"`
	ToolOutputMaxLines  int    `toml:"tool_output_max_lines"`
	SystemFilesMaxBytes int    `toml:"system_files_max_bytes"`
	ContextLoopReselect string `toml:"context_loop_reselect"`
	// ContextAbsoluteMaxTokens is the server-wide context admission cap
	// (CM-ADM-001): the effective per-turn budget is
	// min(model context window − reserve, this cap), and the cap alone when
	// the model has no configured window. Zero or negative selects the
	// built-in default; the cap can be raised but never disabled.
	ContextAbsoluteMaxTokens int `toml:"context_absolute_max_tokens"`
	// SyncCompaction gates the pre-turn synchronous compaction backstop on
	// the discuss and pipeline-chat paths (CM-CMP-001/003): "shadow"
	// (default) logs would-have-fired decisions without blocking, "active"
	// compacts synchronously before the model call at the hard threshold,
	// "off" disables the backstop. The legacy history chat path keeps its
	// existing always-on synchronous backstop regardless of this setting.
	SyncCompaction string `toml:"sync_compaction"`
}

type AppleConfig struct {
	SocketPath string `toml:"socket_path"`
	BinaryPath string `toml:"binary_path"`
}

type AuthConfig struct {
	JWTSecret                     string `toml:"jwt_secret"                       json:"-"`
	JWTExpiresIn                  string `toml:"jwt_expires_in"`
	AgentCredentialsEncryptionKey string `toml:"agent_credentials_encryption_key" json:"-"`
}

type BridgeTLSConfig struct {
	Mode       string `toml:"mode"`
	ServerDir  string `toml:"server_dir"`
	BridgeDir  string `toml:"bridge_dir"`
	ServerName string `toml:"server_name"`
}

type ChannelConfig struct {
	Addr          string `toml:"addr"`
	RPCListenAddr string `toml:"rpc_listen_addr"`
}

type Config struct {
	Log                   LogConfig                   `toml:"log"`
	Server                ServerConfig                `toml:"server"`
	Channel               ChannelConfig               `toml:"channel"`
	InternalRPC           InternalRPCConfig           `toml:"internal_rpc"`
	Admin                 AdminConfig                 `toml:"admin"`
	Auth                  AuthConfig                  `toml:"auth"`
	Agent                 AgentConfig                 `toml:"agent"`
	Timezone              string                      `toml:"timezone"`
	Database              DatabaseConfig              `toml:"database"`
	Container             ContainerConfig             `toml:"container"`
	Containerd            ContainerdConfig            `toml:"containerd"`
	Docker                DockerConfig                `toml:"docker"`
	Apple                 AppleConfig                 `toml:"apple"`
	Workspace             WorkspaceConfig             `toml:"workspace"`
	Postgres              PostgresConfig              `toml:"postgres"`
	PGVector              PGVectorConfig              `toml:"pgvector"`
	Registry              RegistryConfig              `toml:"registry"`
	Supermarket           SupermarketConfig           `toml:"supermarket"`
	WorkspaceDependencies WorkspaceDependenciesConfig `toml:"workspace_dependencies"`
	OAuthClients          OAuthClientsConfig          `toml:"oauth_clients"`
	SessionRuntime        SessionRuntimeConfig        `toml:"session_runtime"`
	InstanceID            string                      `toml:"instance_id"`
	BridgeTLS             BridgeTLSConfig             `toml:"bridge_tls"`
	WebhookTunnel         WebhookTunnelConfig         `toml:"webhook_tunnel"`
	ConnectIt             ConnectItConfig             `toml:"connect_it"`
	Telemetry             TelemetryConfig             `toml:"telemetry"`
}

type ConnectItConfig struct {
	BaseURL  string `toml:"base_url"`
	APIToken string `toml:"api_token" json:"-"`
}

type ContainerConfig struct {
	Backend string `toml:"backend"`
	WorkspaceConfig
}

type ContainerdConfig struct {
	SocketPath string `toml:"socket_path"`
	Namespace  string `toml:"namespace"`
}

type DatabaseConfig struct {
	Driver string `toml:"driver"`
}

type DockerConfig struct {
	Host            string `toml:"host"`
	Network         string `toml:"network"`
	ServerContainer string `toml:"server_container"`
}

type InternalRPCConfig struct {
	ServerTarget  string `toml:"server_target"`
	ChannelTarget string `toml:"channel_target"`
	SharedSecret  string `toml:"shared_secret" json:"-"`
}

type LogConfig struct {
	Level  string `toml:"level"`
	Format string `toml:"format"`
}

type OAuthClientsConfig struct {
	ConfigPath string `toml:"config_path"`
}

type PGVectorConfig struct {
	Enabled  bool   `toml:"enabled"`
	Host     string `toml:"host"`
	Port     int    `toml:"port"`
	User     string `toml:"user"`
	Password string `toml:"password" json:"-"`
	Database string `toml:"database"`
	SSLMode  string `toml:"sslmode"`
}

type PostgresConfig struct {
	Host     string `toml:"host"`
	Port     int    `toml:"port"`
	User     string `toml:"user"`
	Password string `toml:"password" json:"-"`
	Database string `toml:"database"`
	SSLMode  string `toml:"sslmode"`
}

type RegistryConfig struct {
	ProvidersDir string `toml:"providers_dir"`
}

type ServerConfig struct {
	PublicURL     string `toml:"public_url"`
	Addr          string `toml:"addr"`
	RPCListenAddr string `toml:"rpc_listen_addr"`
}

type SessionRuntimeConfig struct {
	Backend string `toml:"backend"`
	// Cluster declares that more than one server instance shares this
	// deployment. It is a topology statement rather than a tuning value: no
	// process can infer how many peers it has, and SR-DEP-001 requires
	// refusing multi-instance mode without a shared live backend.
	Cluster       bool   `toml:"cluster"`
	StateTTL      string `toml:"state_ttl"`
	OwnerLeaseTTL string `toml:"owner_lease_ttl"`
	// BackendLossGrace is how long to wait after observing a new live backend
	// generation before the fail-closed sweep marks stale runs lost. This is
	// the budget for a Redis restart or failover, which varies by deployment
	// and cannot be derived from anything the server knows. Empty derives
	// SessionRuntimeBackendLossGraceFactor x OwnerLeaseTTL.
	BackendLossGrace string                    `toml:"backend_loss_grace"`
	Redis            SessionRuntimeRedisConfig `toml:"redis"`
}

type SessionRuntimeRedisConfig struct {
	URL       string `toml:"url"`
	KeyPrefix string `toml:"key_prefix"`
}

type SupermarketConfig struct {
	BaseURL string `toml:"base_url"`
}

type TelemetryConfig struct {
	// Endpoint is an OTLP collector address: host:port for grpc, or a URL for
	// http. Empty disables export.
	Endpoint string `toml:"endpoint"`
	// Protocol is "grpc" (default) or "http".
	Protocol string `toml:"protocol"`
	// Insecure sends over plaintext. Required for an http:// endpoint or a
	// grpc collector without TLS.
	Insecure bool `toml:"insecure"`
	// Headers are sent with every export, for collectors that authenticate.
	Headers map[string]string `toml:"headers"`
	// SampleRatio is the fraction of traces started here that are recorded,
	// between 0 and 1; 1 records every trace. A sampling decision already made
	// upstream is always respected, so this applies to traces this process
	// starts. Defaults to 1: a self-hosted deployment small enough to need no
	// collector tuning should not have to discover why its traces are missing.
	SampleRatio float64 `toml:"sample_ratio"`
	// ServiceName overrides the reported service.name. Empty uses the name the
	// binary registers at startup.
	ServiceName string `toml:"service_name"`
}

type WebhookTunnelConfig struct {
	Mode            string `toml:"mode"`
	PublicBaseURL   string `toml:"public_base_url"`
	ListenAddr      string `toml:"listen_addr"`
	CloudflaredPath string `toml:"cloudflared_path"`
	TargetURL       string `toml:"target_url"`
	MetricsAddr     string `toml:"metrics_addr"`
	MetricsURL      string `toml:"metrics_url"`
}

type WorkspaceConfig struct {
	Registry        string `toml:"registry"`
	DefaultImage    string `toml:"default_image"`
	ImagePullPolicy string `toml:"image_pull_policy"`
	Snapshotter     string `toml:"snapshotter"`
	DataRoot        string `toml:"data_root"`
	CNIBinaryDir    string `toml:"cni_bin_dir"`
	CNIConfigDir    string `toml:"cni_conf_dir"`
	BridgePath      string `toml:"bridge_path"`
	// RuntimeDir is accepted for one compatibility release. New deployments
	// should configure bridge_path because the Server no longer owns a toolkit
	// or workspace templates directory.
	RuntimeDir string `toml:"runtime_dir"`
}

type WorkspaceDependenciesConfig struct {
	Offline                       bool `toml:"offline"`
	CatalogRefreshIntervalSeconds int  `toml:"catalog_refresh_interval_seconds"`
	UpdateCheckIntervalSeconds    int  `toml:"update_check_interval_seconds"`
	ReapIntervalSeconds           int  `toml:"reap_interval_seconds"`
	DiscoveryCacheTTLSeconds      int  `toml:"discovery_cache_ttl_seconds"`
	// ScriptEnv overrides recipe download mirrors. Only NODEJS_MIRROR,
	// UV_RELEASES_URL, NPM_MIRROR, and UV_PYTHON_INSTALL_MIRROR are accepted.
	ScriptEnv map[string]string `toml:"script_env"`
}