config

type AgentConfig struct {
	// MaxParallelTools bounds how many tool calls from one assistant message
	// may run at once. 1 disables parallel execution; 0 means unset.
	MaxParallelTools int `mapstructure:"max_parallel_tools" json:"max_parallel_tools,omitempty" yaml:"max_parallel_tools,omitempty"`
	// MaxIterations bounds how many times the agent loop may call the model in
	// one run. 0 means unset.
	MaxIterations int `mapstructure:"max_iterations" json:"max_iterations,omitempty" yaml:"max_iterations,omitempty"`
	// TurnDigest controls the after-the-turn side call. See TurnDigestConfig.
	TurnDigest TurnDigestConfig `mapstructure:"turn_digest" json:"turn_digest" yaml:"turn_digest"`
}

type CacheControl struct {
	Mode string `mapstructure:"mode"`
	TTL  string `mapstructure:"ttl"`
}

type DiscoveredPlugin struct {
	// Dir is the directory name. It is the state key and the only identity a
	// plugin has when its manifest does not parse.
	Dir  string
	Path string

	Manifest plugin.Manifest
	// Findings are this plugin's own problems, including a name collision with
	// another directory, so Loadable can be answered without looking around.
	Findings []plugin.Finding

	State PluginState
	// StateKnown is false when nothing recorded this directory, which is the
	// normal condition of a manual `git clone`.
	StateKnown bool

	// PolicyRefused says the operator's source restriction is what stopped this
	// plugin, so a surface can tell a decision from a defect. The reason is
	// also in Findings, which is what carries it to every surface without each
	// one having to know about policy.
	PolicyRefused bool
}

type EnvVar struct {
	Name        string
	Default     string
	Description string
	// WorkerNeeds marks a variable that a task-run worker reads.
	//
	// A worker executes model-chosen code, so a credential it does not read is
	// exposure with no purpose behind it. Only the marked variables are handed
	// to a worker process or Job pod. internal/bootstrap/worker.go is the
	// authority on what that set is: if a worker starts reading a new variable,
	// mark it here, and it will reach the worker. Nothing else will.
	WorkerNeeds bool
	// DirectLLMOnly narrows WorkerNeeds to deployments whose task runs call a
	// provider themselves. A managed run reaches models through the server and
	// holds no provider credential, so passing one would hand a model-driven
	// process a key it has no use for.
	DirectLLMOnly bool
}

type LLM struct {
	APIKey  string
	BaseURL string
	Model   string
}

type MCPResolution struct {
	// Config is nil when no layer declared a server.
	Config *coremcp.ConfigRoot
	// Shadowed lists plugin servers a higher layer replaced, so a plugin does
	// not appear fully active when part of it never runs.
	Shadowed []plugin.Shadowed
	Findings []plugin.Finding
}

type ModelEntry struct {
	Model         string `mapstructure:"model"`
	Name          string `mapstructure:"name"`
	APIURL        string `mapstructure:"api_url"`
	APIKey        string `mapstructure:"api_key"`
	ContextWindow int    `mapstructure:"context_window"` // 0 = uses DefaultContextWindow
	CallTimeout   int    `mapstructure:"call_timeout"`   // seconds; 0 = uses DefaultCallTimeoutSecs
	// MaxTokens caps one response; 0 = uses the adapter's own default. The
	// Anthropic Messages protocol requires the field, so its adapter substitutes
	// DefaultMaxTokens; the OpenAI protocols send it only when set.
	MaxTokens int `mapstructure:"max_tokens"`
	// Reasoning is how much the model should reason before answering:
	// ReasoningOff (the default), ReasoningLow, ReasoningMedium, or
	// ReasoningHigh. Any level other than off also replays the reasoning on
	// later turns. It has no effect on a protocol that carries none.
	Reasoning string `mapstructure:"reasoning"`
	// Vision says this model accepts image input. When false, an image a tool
	// returns is described in text rather than sent, because a model that
	// cannot read images rejects the request rather than ignoring the image.
	Vision bool `mapstructure:"vision"`
	// CacheControl is this model's prompt-cache policy: which calls ask the
	// provider to cache the stable prefix of a request — the tool definitions
	// and system prompt — and for how long.
	CacheControl *CacheControl `mapstructure:"cache_control"`
	// Pricing is what this model charges. Optional: without it a run reports
	// its cost as unavailable rather than as zero, because BuildMax does not
	// know what any provider charges and guessing would be worse than silence.
	Pricing *ModelPricing `mapstructure:"pricing"`
	// Integration names a qualified OpenAI-compatible gateway, for the cache
	// fields that gateway is known to honour. Empty is the normal case:
	// speaking the protocol is not a promise to implement its cache behaviour,
	// so nothing is sent unless a named profile says the endpoint was tested.
	Integration string `mapstructure:"integration"`
	// KeepAlive is how long a local runtime keeps the model loaded after a
	// call — a duration string, "0" to unload at once, "-1" to stay resident.
	// Only llm.ProviderOllama reads it; on a hosted provider there is no model
	// to keep loaded. Empty means the runtime's own default.
	KeepAlive string `mapstructure:"keep_alive"`
	// Provider is the wire protocol this endpoint speaks: llm.ProviderOpenAICompatible
	// (the default), llm.ProviderOpenAI, llm.ProviderAnthropic, or llm.ProviderOllama.
	Provider string `mapstructure:"provider"`
}

type ModelPricing struct {
	// Currency is the ISO 4217 code the rates are quoted in. Required: rates
	// with no currency price nothing, because nothing can be added to them.
	Currency string `mapstructure:"currency"`
	// InputPerMTok is fresh prompt input, excluding anything cached.
	InputPerMTok string `mapstructure:"input_per_mtok"`
	// CacheReadPerMTok is prompt served from the provider's cache, and
	// CacheWritePerMTok is prompt written into it. Left empty they are zero,
	// which is a real price on a provider that does not charge for one.
	CacheReadPerMTok  string `mapstructure:"cache_read_per_mtok"`
	CacheWritePerMTok string `mapstructure:"cache_write_per_mtok"`
	// OutputPerMTok is generated tokens.
	OutputPerMTok string `mapstructure:"output_per_mtok"`
}

type PermissionEntry struct {
	// Key is the match key, lowercased. Viper lowercases every map key it
	// loads, so a rule written as "Write" arrives as "write" and matching has
	// to be case-insensitive or no rule would ever fire against a tool name.
	Key string
	// Display is the key as the user wrote it, for output.
	Display string
	Action  string
	Source  string
}

type PermissionResolution struct {
	Entries []PermissionEntry
	// Invalid lists keys whose action was not recognised. They are ignored
	// rather than fatal: a typo in one rule must not stop the agent starting.
	Invalid []string
}

type PluginDiscovery struct {
	Dir     string
	Plugins []DiscoveredPlugin

	// Findings belong to the directory rather than to any one plugin.
	Findings []plugin.Finding

	// StateErr is set when .state.json existed but could not be read. Every
	// valid plugin still loads; what is lost is provenance and the disabled
	// flag, and a caller must say so rather than report a clean scan.
	StateErr error

	// Policy is the source restriction this scan applied, so a surface can say
	// that a plugin is missing by decision rather than by accident.
	Policy PluginPolicy
}

type PluginHooks struct {
	Config   corehook.Config
	Findings []plugin.Finding
}

type PluginPolicy struct {
	// AllowedSources lists the source types that may load. Empty means every
	// source loads, which is the state of a deployment that asserted nothing.
	AllowedSources []string `mapstructure:"allowed_sources" json:"allowed_sources,omitempty" yaml:"allowed_sources,omitempty"`
}

type PluginSource string

type PluginState struct {
	Source   PluginSource `json:"source,omitempty"`
	Disabled bool         `json:"disabled,omitempty"`

	// Repository provenance, when the installer knew it. A manual clone has
	// none until something inspects the checkout.
	RepositoryURL string `json:"repository_url,omitempty"`
	LastCommit    string `json:"last_commit,omitempty"`

	// Marketplace provenance, which identifies the exact bytes installed.
	MarketplaceServer string `json:"marketplace_server,omitempty"`
	CatalogID         string `json:"catalog_id,omitempty"`
	ReleaseVersion    string `json:"release_version,omitempty"`
	Digest            string `json:"digest,omitempty"`

	InstalledAt time.Time `json:"installed_at,omitempty"`
	UpdatedAt   time.Time `json:"updated_at,omitempty"`
}

type PluginStates struct {
	Version int                    `json:"version"`
	Plugins map[string]PluginState `json:"plugins"`
}

type PolicyFile struct {
	Sandbox SandboxConfig `mapstructure:"sandbox" json:"sandbox,omitempty" yaml:"sandbox,omitempty"`
	Plugins PluginPolicy  `mapstructure:"plugins" json:"plugins,omitempty" yaml:"plugins,omitempty"`
}

type RedactedDBConfig struct {
	Host string `json:"host,omitempty"`
	Port int    `json:"port,omitempty"`
	User string `json:"user,omitempty"`
	Name string `json:"name,omitempty"`
	// TLS is the effective mode, not the raw setting, so an unset value reads
	// as what the connection actually does.
	TLS      string       `json:"tls"`
	Password SecretStatus `json:"password"`
}

type RedactedLLMConfig struct {
	DefaultModel  string        `json:"default_model,omitempty"`
	ConversationM RedactedModel `json:"conversation_model"`
}

type RedactedModel struct {
	Name        string       `json:"name,omitempty"`
	Model       string       `json:"model,omitempty"`
	APIURL      string       `json:"api_url,omitempty"`
	ModelTarget string       `json:"model_target,omitempty"`
	APIKey      SecretStatus `json:"api_key"`
}

type RedactedServerConfig struct {
	LogLevel             string `json:"log_level,omitempty"`
	Port                 int    `json:"port"`
	AllowSignup          bool   `json:"allow_signup"`
	CORSOrigin           string `json:"cors_origin,omitempty"`
	WorkspacesDir        string `json:"workspaces_dir,omitempty"`
	DefaultQuotaTier     string `json:"default_quota_tier,omitempty"`
	AccessTokenTTL       string `json:"access_token_ttl,omitempty"`
	RefreshTokenTTL      string `json:"refresh_token_ttl,omitempty"`
	RefreshRotationGrace string `json:"refresh_rotation_grace,omitempty"`
	ShutdownGrace        string `json:"shutdown_grace,omitempty"`

	JWTSecret SecretStatus `json:"jwt_secret"`

	Database RedactedDBConfig      `json:"database"`
	Storage  RedactedStorageConfig `json:"storage"`
	Worker   RedactedWorkerConfig  `json:"worker"`
	LLM      RedactedLLMConfig     `json:"llm"`

	// Warnings are configuration states worth an operator's attention. They are
	// not errors — the server is running — and they are computed rather than
	// stored, so the list reflects the process's own view of itself.
	Warnings []string `json:"warnings"`
}

type RedactedStorageConfig struct {
	PersistBackend  string `json:"persist_backend,omitempty"`
	ArtifactBackend string `json:"artifact_backend,omitempty"`
	// MaxArtifactMB is shown because an operator diagnosing a refused upload
	// needs to see the limit that refused it. Zero means the built-in default.
	MaxArtifactMB int `json:"max_artifact_mb,omitempty"`
	// ArtifactPurgeAfterDays is shown for the same reason: an operator asking
	// why a deleted artifact's bytes are still in the bucket is reading for
	// this number. Zero means the next sweep reclaims them.
	ArtifactPurgeAfterDays int          `json:"artifact_purge_after_days,omitempty"`
	MinIOEndpoint          string       `json:"minio_endpoint,omitempty"`
	MinIOBucket            string       `json:"minio_bucket,omitempty"`
	MinIORegion            string       `json:"minio_region,omitempty"`
	MinIOAccessKey         SecretStatus `json:"minio_access_key"`
	MinIOSecretKey         SecretStatus `json:"minio_secret_key"`
}

type RedactedWorkerConfig struct {
	RunMode      string `json:"run_mode,omitempty"`
	ServerURL    string `json:"server_url,omitempty"`
	RunTokenTTL  string `json:"run_token_ttl,omitempty"`
	RunTimeout   string `json:"run_timeout,omitempty"`
	LLMTransport string `json:"llm_transport,omitempty"`
	LLMModel     string `json:"llm_model,omitempty"`
	K8sNamespace string `json:"k8s_namespace,omitempty"`
	K8sImage     string `json:"k8s_image,omitempty"`
}

type SandboxConfig struct {
	// Enabled is the master switch.
	Enabled bool `mapstructure:"enabled" json:"enabled,omitempty" yaml:"enabled,omitempty"`

	// FailIfUnavailable: refuse to start (rather than fall back to
	// unsandboxed) when the OS backend cannot run. Intended for managed
	// deployments that require sandboxing as a hard gate.
	FailIfUnavailable bool `mapstructure:"fail_if_unavailable" json:"fail_if_unavailable,omitempty" yaml:"fail_if_unavailable,omitempty"`

	// AutoAllowBashIfSandboxed: when true and the sandbox wraps the bash
	// call, skip the approval prompt. When false ("regular permissions
	// mode"), sandboxed bash still goes through the regular approval
	// flow.
	AutoAllowBashIfSandboxed *bool `` /* 135-byte string literal not displayed */

	// AllowUnsandboxedCommands: honor the per-call
	// dangerously_disable_sandbox arg. When false ("strict sandbox
	// mode") the arg is ignored.
	AllowUnsandboxedCommands *bool `` /* 129-byte string literal not displayed */

	// ExcludedCommands lists bash patterns that should run outside the
	// sandbox (convenience, not a security boundary).
	ExcludedCommands []string `mapstructure:"excluded_commands" json:"excluded_commands,omitempty" yaml:"excluded_commands,omitempty"`

	Filesystem SandboxFSConfig      `mapstructure:"filesystem" json:"filesystem,omitempty" yaml:"filesystem,omitempty"`
	Network    SandboxNetConfig     `mapstructure:"network"    json:"network,omitempty"    yaml:"network,omitempty"`
	Process    SandboxProcessConfig `mapstructure:"process"   json:"process,omitempty"    yaml:"process,omitempty"`

	// IgnoreViolations: per-tool list of violation kinds to hide from
	// status/trace. Internal counts are still kept.
	IgnoreViolations map[string][]string `mapstructure:"ignore_violations" json:"ignore_violations,omitempty" yaml:"ignore_violations,omitempty"`

	// EnableWeakerNestedSandbox: allow running inside Docker without
	// privileged namespaces by bind-mounting the container's existing
	// /proc instead of mounting a fresh one. Documented as weaker.
	EnableWeakerNestedSandbox bool `` /* 135-byte string literal not displayed */

	// EnableWeakerNetworkIsolation: macOS only; allow access to
	// com.apple.trustd.agent so Go-based CLIs can verify TLS through a
	// MITM proxy. Documented as weaker.
	EnableWeakerNetworkIsolation bool `` /* 144-byte string literal not displayed */
}

type SandboxFSConfig struct {
	AllowWrite []string `mapstructure:"allow_write" json:"allow_write,omitempty" yaml:"allow_write,omitempty"`
	DenyWrite  []string `mapstructure:"deny_write"  json:"deny_write,omitempty"  yaml:"deny_write,omitempty"`
	AllowRead  []string `mapstructure:"allow_read"  json:"allow_read,omitempty"  yaml:"allow_read,omitempty"`
	DenyRead   []string `mapstructure:"deny_read"   json:"deny_read,omitempty"   yaml:"deny_read,omitempty"`

	// AllowManagedReadPathsOnly: policy-only knob. When set in
	// policy.yaml, lower sources' allow_read entries are ignored;
	// deny_read still merges from every source.
	AllowManagedReadPathsOnly bool `` /* 138-byte string literal not displayed */
}

type SandboxFilesystemTier string

type SandboxNetConfig struct {
	AllowedDomains      []string `mapstructure:"allowed_domains"        json:"allowed_domains,omitempty"        yaml:"allowed_domains,omitempty"`
	DeniedDomains       []string `mapstructure:"denied_domains"         json:"denied_domains,omitempty"         yaml:"denied_domains,omitempty"`
	AllowUnixSockets    []string `mapstructure:"allow_unix_sockets"     json:"allow_unix_sockets,omitempty"     yaml:"allow_unix_sockets,omitempty"`
	AllowAllUnixSockets bool     `mapstructure:"allow_all_unix_sockets" json:"allow_all_unix_sockets,omitempty" yaml:"allow_all_unix_sockets,omitempty"`
	AllowLocalBinding   bool     `mapstructure:"allow_local_binding"    json:"allow_local_binding,omitempty"    yaml:"allow_local_binding,omitempty"`
	HTTPProxyPort       int      `mapstructure:"http_proxy_port"        json:"http_proxy_port,omitempty"        yaml:"http_proxy_port,omitempty"`
	SOCKSProxyPort      int      `mapstructure:"socks_proxy_port"       json:"socks_proxy_port,omitempty"       yaml:"socks_proxy_port,omitempty"`

	// AllowManagedDomainsOnly: policy-only knob. When set in
	// policy.yaml, lower sources' allowed_domains are ignored;
	// denied_domains still merges from every source.
	AllowManagedDomainsOnly bool `` /* 129-byte string literal not displayed */
}

type SandboxNetworkTier string

type SandboxProcessConfig struct {
	// MaxCPUSeconds bounds CPU time (ulimit -t).
	MaxCPUSeconds int `mapstructure:"max_cpu_seconds" json:"max_cpu_seconds,omitempty" yaml:"max_cpu_seconds,omitempty"`
	// MaxMemoryMB bounds virtual memory (ulimit -v, in MB). Not enforced on
	// macOS: Darwin's setrlimit does not support RLIMIT_AS the way Linux
	// does, so bash's `ulimit -v` reports an error there rather than
	// applying a limit. Seatbelt has no resource-limit primitive either
	// (docs/design/sandbox-boundaries.md §7.1) -- this field is Linux-only
	// in practice until a macOS-native mechanism exists.
	MaxMemoryMB int `mapstructure:"max_memory_mb" json:"max_memory_mb,omitempty" yaml:"max_memory_mb,omitempty"`
	// MaxProcesses bounds the number of processes/threads the command's
	// user may hold (ulimit -u).
	MaxProcesses int `mapstructure:"max_processes" json:"max_processes,omitempty" yaml:"max_processes,omitempty"`
	// MaxOpenFiles bounds open file descriptors (ulimit -n).
	MaxOpenFiles int `mapstructure:"max_open_files" json:"max_open_files,omitempty" yaml:"max_open_files,omitempty"`
}

type SandboxResolution struct {
	Config SandboxConfig

	// Sources lists every layer that contributed a non-default value, in
	// resolution order: "default", "settings", "env", "run", "policy".
	Sources []string

	// Downgraded reports whether Config is weaker than surface's own
	// baseline on a dimension the worker-hardening promise in
	// docs/design/trust-harness.md §3.2 depends on: enabled, fail-closed on
	// an unavailable backend, or the dangerously_disable_sandbox escape
	// hatch. A layer strengthening the baseline is not a downgrade, only one
	// weakening it — see ResolveSandboxForRun. Runtime fallback (the backend
	// itself turns out to be unavailable) is a second, distinct signal
	// agentapp combines with this one; see sandboxInfo's own comment.
	Downgraded bool
}

type SandboxRunOverride struct {
	Enable                   bool
	AutoAllowBashIfSandboxed *bool
}

type SandboxSharedPaths struct {
	SharedReadPath    string
	ExternalWritePath string
}

type SandboxSurface string

type SecretStatus struct {
	Set bool `json:"set"`
}

type ServerAuditConfig struct {
	// RetentionDays expires audit events older than the window. Zero, the
	// default, keeps them forever.
	//
	// Keeping is the default because the trail is evidence, and a deployment
	// that never chose a retention policy has not decided to discard anything.
	// Setting this is a deliberate act with a cost, which is why the sweep
	// records what it removed: a trail that begins partway through then says
	// that policy shortened it, rather than leaving a reader to guess between
	// policy and loss.
	RetentionDays int `mapstructure:"retention_days"`
}

type ServerConfig struct {
	LogLevel  string `mapstructure:"log_level"`
	Port      int    `mapstructure:"port"`
	JWTSecret string `mapstructure:"jwt_secret"`
	// AccessTokenTTL is how long a signed access token stays valid. It is not
	// stored anywhere, so this is also the window in which a leaked one still
	// works — shortening it costs nothing but refresh traffic.
	AccessTokenTTL time.Duration `mapstructure:"access_token_ttl"`
	// RefreshTokenTTL is how long a login can be renewed without a new login
	// code. Every rotation restarts it, so an active session lives on and an
	// abandoned one expires.
	RefreshTokenTTL time.Duration `mapstructure:"refresh_token_ttl"`
	// RefreshRotationGrace is how long a just-rotated refresh token may be
	// exchanged again before the server treats it as reuse and revokes the
	// session. It absorbs concurrent refreshes from processes sharing one
	// credentials file; it is not a security setting to raise casually.
	RefreshRotationGrace time.Duration `mapstructure:"refresh_rotation_grace"`
	// AllowSignup opens POST /api/otp/request to self-registration. It defaults
	// to false, and the zero value is the safe one on purpose: a server that
	// forgets to configure this is closed, not open.
	AllowSignup bool `mapstructure:"allow_signup"`
	// ShutdownGrace is the whole budget for stopping: draining connections,
	// letting interrupted runs report, and stopping the background loops. The
	// phases are derived from it rather than configured separately, because two
	// knobs that must agree are a way to get them to disagree.
	//
	// It must stay below the orchestrator's own kill deadline —
	// terminationGracePeriodSeconds on Kubernetes, TimeoutStopSec under systemd
	// — or the process is killed partway through an orderly stop. See
	// docs/design/graceful-shutdown.md.
	ShutdownGrace    time.Duration       `mapstructure:"shutdown_grace"`
	CORSOrigin       string              `mapstructure:"cors_origin"`
	WorkspacesDir    string              `mapstructure:"workspaces_dir"`
	DefaultQuotaTier string              `mapstructure:"default_quota_tier"`
	Conversation     ServerConvConfig    `mapstructure:"conversation"`
	LLM              ServerLLMConfig     `mapstructure:"llm"`
	Database         ServerDBConfig      `mapstructure:"database"`
	Webhook          ServerWebhookConfig `mapstructure:"webhook"`
	Worker           ServerWorkerConfig  `mapstructure:"worker"`
	Storage          ServerStorageConfig `mapstructure:"storage"`
	Audit            ServerAuditConfig   `mapstructure:"audit"`
}

type ServerConvConfig struct {
	Model ServerModelEntry `mapstructure:"model"`
	// ModelTarget names a catalog model (an llm_model row) to use for Tier 1
	// inference instead of the model above. It is a catalog ID, not a team
	// alias: the server picks its own model rather than being granted one.
	ModelTarget string `mapstructure:"model_target"`
}

type ServerDBConfig struct {
	Host     string `mapstructure:"host"`
	Port     int    `mapstructure:"port"`
	User     string `mapstructure:"user"`
	Password string `mapstructure:"password"`
	Name     string `mapstructure:"name"`
	// TLS is the go-sql-driver tls parameter. Empty means DefaultDBTLSMode.
	//
	// A deployment pointing at a database it already runs — RDS, Aurora, Cloud
	// SQL — is the case this exists for: most managed MySQL either requires TLS
	// or is reached over a network where the credentials should not travel in
	// the clear.
	//
	// Values: "preferred" (TLS when the server offers it, certificate not
	// verified), "true" (require TLS and verify the certificate against the
	// system roots), "skip-verify" (require TLS, accept any certificate), or
	// "false" (never).
	TLS string `mapstructure:"tls"`
}

type ServerK8sConfig struct {
	Namespace string `mapstructure:"namespace"`
	Image     string `mapstructure:"image"`
	// ConfigMap names a ConfigMap holding a server.yaml key. It is mounted into
	// every worker pod so the worker reads the same configuration the server does.
	// Empty means no config file is mounted and the worker relies on inherited
	// environment variables alone, which is rarely enough.
	ConfigMap string `mapstructure:"config_map"`
	// HomeDir is BUILDMAX_HOME inside a worker pod; server.yaml is mounted there.
	HomeDir string `mapstructure:"home_dir"`
	// Resources bounds a worker pod. Every bound is required in this run mode:
	// the server refuses to start rather than schedule a worker that model-
	// chosen commands could run unbounded.
	Resources ServerK8sResources `mapstructure:"resources"`
}

type ServerK8sResources struct {
	CPURequest    string `mapstructure:"cpu_request"`
	CPULimit      string `mapstructure:"cpu_limit"`
	MemoryRequest string `mapstructure:"memory_request"`
	MemoryLimit   string `mapstructure:"memory_limit"`
}

type ServerLLMConfig struct {
	// DefaultModel names the catalog model a caller gets when it names none.
	// Empty falls back to the first model in the catalog, so a single-model
	// deployment needs no configuration at all.
	DefaultModel string `mapstructure:"default_model"`
}

type ServerMinIOConfig struct {
	Endpoint  string `mapstructure:"endpoint"`
	Region    string `mapstructure:"region"`
	AccessKey string `mapstructure:"access_key"`
	SecretKey string `mapstructure:"secret_key"`
	Bucket    string `mapstructure:"bucket"`
	Prefix    string `mapstructure:"prefix"`
	// PathStyle forces bucket-in-path addressing. Unset derives it from
	// endpoint: set means an S3-compatible store such as MinIO, which needs
	// path style; empty means real AWS S3, which does not. Set it explicitly
	// for a compatible store that uses virtual-host addressing.
	PathStyle *bool `mapstructure:"path_style"`
}

type ServerModelEntry struct {
	Model         string `mapstructure:"model"`
	Name          string `mapstructure:"name"`
	APIURL        string `mapstructure:"api_url"`
	APIKey        string `mapstructure:"api_key"`
	ContextWindow int    `mapstructure:"context_window"`
	CallTimeout   int    `mapstructure:"call_timeout"` // seconds; 0 = uses DefaultCallTimeoutSecs
	MaxTokens     int    `mapstructure:"max_tokens"`   // 0 = the adapter's own default
	// Provider is the wire protocol this model speaks. Empty means
	// LLMProviderOpenAICompatible.
	Provider string `mapstructure:"provider"`
	// Reasoning is the effort level: off (the default), low, medium, or high.
	Reasoning string `mapstructure:"reasoning"`
	// CacheControl is this model's prompt-cache policy.
	CacheControl *CacheControl `mapstructure:"cache_control"`
	// Pricing is what this model charges; without it cost is unavailable.
	Pricing *ModelPricing `mapstructure:"pricing"`
	// Vision says this model accepts image input.
	Vision bool `mapstructure:"vision"`
}

type ServerStorageConfig struct {
	PersistBackend  string            `mapstructure:"persist_backend"`
	ArtifactBackend string            `mapstructure:"artifact_backend"`
	MinIO           ServerMinIOConfig `mapstructure:"minio"`
	// MaxArtifactMB caps one artifact upload. Zero uses the built-in default.
	//
	// It is a per-file limit, not a team storage allowance. The allowance is a
	// stock rather than a rate and lives in the quota tier as
	// max_storage_bytes; this stays the cap on any one request.
	MaxArtifactMB int `mapstructure:"max_artifact_mb"`
	// ArtifactPurgeAfterDays delays reclaiming a deleted artifact's object.
	//
	// Zero, the default, reclaims it on the next retention sweep: deletion has
	// already taken effect at the authorization boundary, so holding the bytes
	// afterwards is cost and exposure rather than safety. A deployment that
	// wants a window in which an operator could still recover the object from
	// the bucket sets a number of days here — BuildMax itself offers no
	// undelete, so the window is for the bucket's own tooling.
	ArtifactPurgeAfterDays int `mapstructure:"artifact_purge_after_days"`
}

type ServerWebhookConfig struct {
	MessagePath string `mapstructure:"message_path"`
	UserID      string `mapstructure:"user_id"`
}

type ServerWorkerConfig struct {
	Binary    string                `mapstructure:"binary"`
	RunMode   string                `mapstructure:"run_mode"`
	ServerURL string                `mapstructure:"server_url"`
	LLM       ServerWorkerLLMConfig `mapstructure:"llm"`
	K8s       ServerK8sConfig       `mapstructure:"k8s"`
	// RunTokenTTL bounds a run token. Zero uses authtoken's default. It has to
	// outlast the longest run: the token is not renewable, so a run that outlives
	// it can no longer report anything, including its own result.
	RunTokenTTL time.Duration `mapstructure:"run_token_ttl"`
	// RunTimeout is how long a run may stay SCHEDULED or RUNNING before the
	// server records it as abandoned. Zero uses the scheduler's default.
	//
	// Only the worker moves a run out of those states, so without this a run
	// whose worker died stays there forever. Keep it at or below RunTokenTTL: a
	// run that outlived its credential cannot report an outcome, so nothing else
	// will ever close it.
	RunTimeout time.Duration `mapstructure:"run_timeout"`
}

type ServerWorkerLLMConfig struct {
	// Transport is TransportDirect or TransportBuildMax. Empty means direct,
	// which is what every existing deployment gets.
	Transport string `mapstructure:"transport"`
	// Model is the catalog model a managed run calls. Empty uses the
	// deployment's llm.default_model.
	Model string `mapstructure:"model"`
	// ContextWindow and CallTimeout describe the alias to the run. The protocol
	// does not report them per call, so they come from configuration or stay
	// unset.
	ContextWindow int `mapstructure:"context_window"`
	CallTimeout   int `mapstructure:"call_timeout"`
}

type Settings struct {
	LogLevel  string       `mapstructure:"log_level"`
	ServerURL string       `mapstructure:"server_url"`
	Models    []ModelEntry `mapstructure:"models"`
	// DefaultModel names the entry in Models a new session starts with, by name
	// or by model id. Empty uses the first entry, so a single-model file needs
	// nothing here. A name matching nothing is reported by `buildmax doctor`
	// rather than silently falling back, because the fallback would answer with
	// a model the file says is not the default.
	//
	// It applies to local mode only: in managed mode the deployment says which
	// of its models is the default. See docs/design/client-modes.md section 7.
	DefaultModel string          `mapstructure:"default_model"`
	Hooks        corehook.Config `mapstructure:"hooks"`
	Sandbox      SandboxConfig   `mapstructure:"sandbox"`
	Tools        ToolsConfig     `mapstructure:"tools"`
	Agent        AgentConfig     `mapstructure:"agent"`
}

type ToolsConfig struct {
	// Permissions maps a tool key to allow, ask, or deny. A key is a tool name
	// ("Write") or a tool name plus the target it dispatches to
	// ("CallMcpTool:github/create_issue"), optionally with a trailing "*".
	Permissions map[string]string `mapstructure:"permissions" json:"permissions,omitempty" yaml:"permissions,omitempty"`
}

type TurnDigestConfig struct {
	// Recap prints a dim summary of the turn under the reply.
	Recap *bool `mapstructure:"recap" json:"recap,omitempty" yaml:"recap,omitempty"`
	// Suggest offers the predicted answer as ghost text in the input box.
	Suggest *bool `mapstructure:"suggest" json:"suggest,omitempty" yaml:"suggest,omitempty"`
}

type WorkspaceStorageConfig struct {
	PersistProvider  string
	ArtifactProvider string
	Endpoint         string
	Region           string
	AccessKey        string
	SecretKey        string
	Bucket           string
	Prefix           string
	// PathStyle forces bucket-in-path addressing on or off. Nil derives it
	// from Endpoint, which is the right answer for both of the cases that
	// actually occur — see bootstrap.BuildS3Client.
	PathStyle *bool
}