config

type AgentConfig struct {
	Description     string         `yaml:"description" json:"description"`
	Prompt          string         `yaml:"prompt" json:"prompt"`
	Tools           []string       `yaml:"tools,omitempty" json:"tools,omitempty"`
	DisallowedTools []string       `yaml:"disallowedTools,omitempty" json:"disallowedTools,omitempty"`
	Model           string         `yaml:"model,omitempty" json:"model,omitempty"`
	PermissionMode  string         `yaml:"permissionMode,omitempty" json:"permissionMode,omitempty"`
	MaxTurns        int            `yaml:"maxTurns,omitempty" json:"maxTurns,omitempty"`
	Skills          []string       `yaml:"skills,omitempty" json:"skills,omitempty"`
	McpServers      map[string]any `yaml:"mcpServers,omitempty" json:"mcpServers,omitempty"`
	Hooks           map[string]any `yaml:"hooks,omitempty" json:"hooks,omitempty"`
	Memory          string         `yaml:"memory,omitempty" json:"memory,omitempty"`
}

type AgentFile struct {
	// Content is the raw markdown content for the agent file.
	Content string `yaml:"content"`
}

type ClaudeConfig struct {
	// Model is the Claude model (e.g. "sonnet", "opus", "claude-sonnet-4-20250514").
	Model string `yaml:"model,omitempty"`
	// SystemPrompt overrides the default system prompt.
	SystemPrompt string `yaml:"systemPrompt,omitempty"`
	// AppendSystemPrompt appends to the default system prompt.
	AppendSystemPrompt string `yaml:"appendSystemPrompt,omitempty"`
	// MaxTurns limits agentic turns per prompt; 0 means unlimited.
	MaxTurns int `yaml:"maxTurns,omitempty"`
	// PermissionMode controls tool permissions: "default", "acceptEdits",
	// "bypassPermissions", "dontAsk", "plan", "delegate".
	PermissionMode string `yaml:"permissionMode,omitempty"`
	// MaxBudgetUSD caps the maximum dollar spend per invocation; 0 means no limit.
	MaxBudgetUSD float64 `yaml:"maxBudgetUsd,omitempty"`
	// Effort controls effort level: "low", "medium", "high".
	Effort string `yaml:"effort,omitempty"`
	// FallbackModel specifies a model to use when the primary is overloaded.
	FallbackModel string `yaml:"fallbackModel,omitempty"`
	// Tools controls the base set of built-in tools.
	Tools []string `yaml:"tools,omitempty"`
	// AllowedTools restricts tool access with patterns.
	AllowedTools []string `yaml:"allowedTools,omitempty"`
	// DisallowedTools blocks specific tools.
	DisallowedTools []string `yaml:"disallowedTools,omitempty"`
	// StrictMcpConfig when true only uses MCP servers from config.
	StrictMcpConfig bool `yaml:"strictMcpConfig,omitempty"`
	// McpTimeout sets the MCP call timeout in milliseconds.
	McpTimeout int `yaml:"mcpTimeout,omitempty"`
	// MaxMcpOutputTokens limits MCP server output token count.
	MaxMcpOutputTokens int `yaml:"maxMcpOutputTokens,omitempty"`
	// ActiveAgent selects which agent runs as the top-level agent.
	ActiveAgent string `yaml:"activeAgent,omitempty"`
	// Mode selects the operating mode: "agent" (default) for autonomous coding
	// with a new process per prompt and no session persistence, or "chat" for
	// interactive conversation with a persistent process and saved sessions.
	Mode string `yaml:"mode,omitempty"`
	// IncludePartialMessages enables streaming of partial messages.
	IncludePartialMessages bool `yaml:"includePartialMessages,omitempty"`
	// JsonSchema provides a JSON schema for structured output.
	JsonSchema string `yaml:"jsonSchema,omitempty"`
	// SettingsFile is an alternative to inline hooks -- a path to a settings.json.
	// Mutually exclusive with Hooks.
	SettingsFile string `yaml:"settingsFile,omitempty"`
	// SettingSources controls setting source precedence.
	SettingSources string `yaml:"settingSources,omitempty"`
	// LoadAdditionalDirsMemory enables loading CLAUDE.md memory files from
	// additional directories. Defaults to true, matching the Helm chart default.
	LoadAdditionalDirsMemory *bool `yaml:"loadAdditionalDirsMemory,omitempty"`
	// AddDirs are additional directories for skills and agents.
	AddDirs []string `yaml:"addDirs,omitempty"`
	// PluginDirs are directories to load plugins from.
	PluginDirs []string `yaml:"pluginDirs,omitempty"`
}

type Config struct {
	// Runtime is the container runtime: "docker" or "podman".
	// Auto-detected if empty.
	Runtime string `yaml:"runtime,omitempty"`

	// Personality is an OCI reference to a personality artifact that defines
	// the AI's identity (SOUL.md) and a curated set of plugins. Instance-level
	// config (image, plugins) composes with and can override personality values.
	Personality string `yaml:"personality,omitempty"`

	// Image is the klaus container image reference.
	Image string `yaml:"image"`

	// Toolchain is the configured toolchain reference used to resolve Image.
	// This preserves the user's intent in per-instance config metadata.
	Toolchain string `yaml:"toolchain,omitempty"`

	// Workspace is the host directory to mount into the container at /workspace.
	Workspace string `yaml:"workspace"`

	// WorktreePath is the path to the local git clone created for this instance.
	// When set, this path is bind-mounted instead of Workspace, and Workspace
	// stores the original repository path for clone lifecycle management.
	WorktreePath string `yaml:"worktreePath,omitempty"`

	// Port is the host port mapped to the container's MCP endpoint (8080).
	Port int `yaml:"port"`

	// Claude contains Claude Code agent configuration.
	Claude ClaudeConfig `yaml:"claude,omitempty"`

	// Skills defines inline skills rendered as SKILL.md files.
	Skills map[string]Skill `yaml:"skills,omitempty"`

	// AgentFiles defines markdown-format subagent definitions rendered as .claude/agents/<name>.md.
	AgentFiles map[string]AgentFile `yaml:"agentFiles,omitempty"`

	// Agents defines JSON-format subagents passed via CLAUDE_AGENTS env var (highest priority).
	Agents map[string]AgentConfig `yaml:"agents,omitempty"`

	// Hooks defines lifecycle hooks rendered to settings.json.
	Hooks map[string][]HookMatcher `yaml:"hooks,omitempty"`

	// HookScripts defines hook script contents mounted at /etc/klaus/hooks/<name>.
	HookScripts map[string]string `yaml:"hookScripts,omitempty"`

	// McpServers defines MCP server entries rendered to .mcp.json format.
	McpServers map[string]any `yaml:"mcpServers,omitempty"`

	// Plugins references OCI plugins pulled before container start.
	Plugins []Plugin `yaml:"plugins,omitempty"`

	// EnvForward lists host environment variable names to forward to the container.
	// ANTHROPIC_API_KEY is always forwarded if set.
	EnvForward []string `yaml:"envForward,omitempty"`

	// EnvVars sets explicit environment variable key-value pairs in the container.
	EnvVars map[string]string `yaml:"envVars,omitempty"`

	// SecretEnvVars maps container env var names to secret store names.
	// At start time each secret is resolved and injected as an env var.
	SecretEnvVars map[string]string `yaml:"secretEnvVars,omitempty"`

	// SecretFiles maps container file paths to secret store names.
	// At start time each secret is resolved, written to rendered/secrets/,
	// and mounted read-only into the container at the specified path.
	SecretFiles map[string]string `yaml:"secretFiles,omitempty"`

	// Git configures git identity, credential helper, and URL rewriting
	// inside the container. When set, the corresponding environment variables
	// and/or a container-local gitconfig are injected at start time.
	Git GitConfig `yaml:"git,omitempty"`

	// McpServerRefs lists managed MCP server names to include.
	// At start time each reference is resolved from the global mcpservers.yaml
	// and merged into McpServers with a Bearer token header.
	McpServerRefs []string `yaml:"mcpServerRefs,omitempty"`
	// contains filtered or unexported fields
}

type CreateOptions struct {
	Name        string
	Workspace   string
	Personality string
	Toolchain   string
	Plugins     []string
	Port        int

	// Mode selects the operating mode: "agent" (default) for autonomous
	// coding or "chat" for interactive conversation.
	Mode string

	// NoIsolate disables git worktree creation even when the workspace is a
	// git repository. When false (the default), a worktree is created
	// automatically for git-backed workspaces.
	NoIsolate bool

	// NoFetch skips the "git fetch origin" step before cloning the
	// workspace. When false (the default), origin is fetched to ensure
	// agents work against up-to-date code.
	NoFetch bool

	// Git identity and auth overrides.
	GitAuthorName        string
	GitAuthorEmail       string
	GitCredentialHelper  string
	GitHTTPSInsteadOfSSH bool

	// Override fields applied after personality resolution.
	EnvVars        map[string]string
	EnvForward     []string
	McpServers     map[string]any
	SecretEnvVars  map[string]string
	SecretFiles    map[string]string
	McpServerRefs  []string
	MaxBudgetUSD   *float64
	PermissionMode string
	Model          string
	SystemPrompt   string

	// SourceResolver provides multi-source artifact resolution.
	// When nil, the default built-in source is used.
	SourceResolver *SourceResolver

	// Context and Output are passed to ResolvePersonality when provided.
	Context context.Context
	Output  io.Writer

	// ResolvePersonality optionally resolves and pulls a personality reference.
	// Keeping this as a callback avoids package cycles while allowing
	// GenerateInstanceConfig to encapsulate create-time merge behavior.
	ResolvePersonality func(ctx context.Context, ref string, w io.Writer) (*ResolvedPersonality, error)
}

type GitConfig struct {
	// AuthorName sets GIT_AUTHOR_NAME and GIT_COMMITTER_NAME.
	AuthorName string `yaml:"authorName,omitempty"`
	// AuthorEmail sets GIT_AUTHOR_EMAIL and GIT_COMMITTER_EMAIL.
	AuthorEmail string `yaml:"authorEmail,omitempty"`
	// CredentialHelper configures the git credential helper. Currently
	// only "gh" is supported, which configures git to call
	// "gh auth git-credential" as the credential helper for
	// github.com and gist.github.com.
	CredentialHelper string `yaml:"credentialHelper,omitempty"`
	// HTTPSInsteadOfSSH when true adds url.<https>.insteadOf rules to a
	// container-local gitconfig so that SSH-style GitHub URLs
	// (git@github.com:...) are rewritten to HTTPS without modifying
	// the workspace .git/config.
	HTTPSInsteadOfSSH bool `yaml:"httpsInsteadOfSsh,omitempty"`
}

type Hook struct {
	Type    string `yaml:"type" json:"type"`
	Command string `yaml:"command" json:"command"`
	Timeout int    `yaml:"timeout,omitempty" json:"timeout,omitempty"`
}

type HookMatcher struct {
	Matcher string `yaml:"matcher" json:"matcher"`
	Hooks   []Hook `yaml:"hooks" json:"hooks"`
}

type Paths struct {
	// ConfigDir is the base config directory (~/.config/klausctl).
	ConfigDir string
	// ConfigFile is the path to the config file.
	ConfigFile string
	// InstancesDir is the directory containing all named instances.
	InstancesDir string
	// InstanceDir is the directory for the selected instance.
	InstanceDir string
	// RenderedDir is where rendered config files are written.
	RenderedDir string
	// ExtensionsDir is the rendered extensions directory (skills, agents).
	ExtensionsDir string
	// PluginsDir is where OCI plugins are stored.
	PluginsDir string
	// PersonalitiesDir is where OCI personalities are stored.
	PersonalitiesDir string
	// InstanceFile is the path to the instance state file.
	InstanceFile string
	// ArchivesDir is the directory for archived instance transcripts.
	ArchivesDir string
	// SecretsFile is the path to the secrets store (~/.config/klausctl/secrets.yaml).
	SecretsFile string
	// TokensDir is the directory for stored OAuth tokens (~/.config/klausctl/tokens/).
	TokensDir string
	// McpServersFile is the path to the managed MCP servers file (~/.config/klausctl/mcpservers.yaml).
	McpServersFile string
	// SourcesFile is the path to the sources configuration file (~/.config/klausctl/sources.yaml).
	SourcesFile string
	// MusterConfigDir is the muster config root (~/.config/klausctl/muster/).
	// Contains muster's own config.yaml and the mcpservers/ subdirectory.
	MusterConfigDir string
	// MusterMCPServersDir is where muster-native MCPServerSpec YAML files live
	// (~/.config/klausctl/muster/mcpservers/).
	MusterMCPServersDir string
	// MusterPIDFile tracks the PID of the managed muster process.
	MusterPIDFile string
	// MusterPortFile tracks the port of the managed muster process.
	MusterPortFile string
	// ReposDir is the managed repo cache directory (~/.config/klausctl/repos/).
	ReposDir string
	// WorkspacesFile is the path to the workspace registry (~/.config/klausctl/workspaces.yaml).
	WorkspacesFile string
}

type Plugin struct {
	Repository string `yaml:"repository"`
	Tag        string `yaml:"tag,omitempty"`
	Digest     string `yaml:"digest,omitempty"`
}

type ResolvedPersonality struct {
	Plugins []Plugin
	Image   string
}

type Skill struct {
	// Description is a short description of the skill.
	Description string `yaml:"description,omitempty"`
	// Content is the skill's markdown body.
	Content string `yaml:"content"`
	// DisableModelInvocation prevents the model from invoking this skill automatically.
	DisableModelInvocation bool `yaml:"disableModelInvocation,omitempty"`
	// UserInvocable marks the skill as invocable by the user.
	UserInvocable bool `yaml:"userInvocable,omitempty"`
	// AllowedTools restricts which tools the skill can use.
	AllowedTools string `yaml:"allowedTools,omitempty"`
	// Model overrides the model for this skill.
	Model string `yaml:"model,omitempty"`
	// Context provides additional context for the skill.
	Context any `yaml:"context,omitempty"`
	// Agent associates the skill with a specific agent.
	Agent string `yaml:"agent,omitempty"`
	// ArgumentHint provides a hint for the skill's argument.
	ArgumentHint string `yaml:"argumentHint,omitempty"`
}

type Source struct {
	Name          string `yaml:"name"`
	Registry      string `yaml:"registry"`
	Default       bool   `yaml:"default,omitempty"`
	Toolchains    string `yaml:"toolchains,omitempty"`
	Personalities string `yaml:"personalities,omitempty"`
	Plugins       string `yaml:"plugins,omitempty"`
}

type SourceConfig struct {
	Sources []Source `yaml:"sources"`
	// contains filtered or unexported fields
}

type SourceRegistry struct {
	Source   string
	Registry string
}

type SourceResolver struct {
	// contains filtered or unexported fields
}