ui

type CheckpointInfo struct {
	ID            string // opaque id passed back to RestoreCheckpoint
	PromptPreview string // first ~200 chars of the turn's user prompt
	CreatedAt     int64  // unix nano; picker renders a relative age
	FileCount     int    // files whose before-image this checkpoint captured
	// ChatRestoreOK is false when a full compaction since this checkpoint
	// invalidated its conversation cut-point — the picker then offers code
	// restore only (rewind PRD §5.2).
	ChatRestoreOK bool
}

type Controller interface {
	// Run drives the agent for a single user turn. The UI typically
	// launches this in a goroutine so its main loop stays responsive,
	// and ctx-cancels to honor user interrupts.
	Run(ctx context.Context, prompt string) (string, error)

	// Continue resumes an iter-limit-paused run without appending a new
	// user message.
	Continue(ctx context.Context) (string, error)

	// Messages returns the live conversation transcript. The UI replays
	// these to rebuild its visible scrollback on resume.
	Messages() []llm.Message

	// Usage returns the cumulative token usage for the session — the
	// status bar's running total.
	Usage() llm.Usage

	// LastTurnInputTokens returns the input-token count of the most recent
	// turn: the "how full is the prompt right now" gauge the context meter
	// reads. Prefer this over Usage().Total for context-pressure display.
	LastTurnInputTokens() int

	// TodoStore exposes the agent's todo backing store so the UI can
	// render the todo panel (List) and clear it on auto-fold (Clear).
	// Never nil.
	TodoStore() *todo.TodoStore

	// DaemonState exposes the unified daemon store (subagents, background
	// bash tasks, monitors) so the UI can render the chip strips via
	// SnapshotByKind. Returns nil until the first daemon is registered —
	// callers must nil-check.
	DaemonState() *daemon.DaemonState

	// WorkflowTasks exposes the dynamic-workflow board so the UI can
	// render the board panel. Returns nil when the feature is off
	// (enable_dynamic_workflow) — callers must nil-check.
	WorkflowTasks() *workflow.Store

	// EnqueueUserPrompt hands the agent a prompt the user typed mid-run.
	// The agent drains the queue at the next iteration boundary instead of
	// starting a second concurrent Run.
	EnqueueUserPrompt(prompt string)

	// Logger exposes the agent's structured logger so the UI can emit
	// records that share its context.
	Logger() *slog.Logger

	// Model returns the model id the agent is currently bound to.
	// Used by the TUI's status header; falls back to "-" when empty.
	Model() string

	// AgentID returns the controller's agent identifier so the UI can
	// surface it in headers / banners. Cheap accessor; safe to call
	// every render.
	AgentID() string

	// MaxIterations / SetMaxIterations exposes the loop cap so the
	// /config form can mutate it mid-session. Reads are cheap (atomic
	// load); writes take effect at the next iteration boundary.
	MaxIterations() int
	SetMaxIterations(int)

	// SwitchLLM rebuilds the agent's llm.Client with a new
	// (provider, model) pair and clears the conversation history.
	// Caller (the TUI's /model form) must ensure no Run is in flight
	// before calling — see Agent.SwitchLLM for the running guard.
	SwitchLLM(provider constant.LLMProvider, model constant.Model) error

	// SwitchProfile reconstructs the agent under a new persona — fresh
	// system prompt, fresh active/deferred tool list, fresh session.
	// Caller (the /profile picker) is responsible for ensuring no Run
	// is in flight. Persists the new persona name to evva-config.yml.
	SwitchProfile(name string) error

	// ProfileName returns the active persona's wire identity ("evva",
	// "nono", ...). Used by the TUI status bar's dynamic agent label.
	ProfileName() string

	// ListMainProfiles enumerates the personas the /profile picker
	// should surface — every agent definition with `as: ["main", ...]`
	// in the agent registry.
	ListMainProfiles() []ProfileChoice

	// ListOutputStyles enumerates the styles the /output-style picker
	// should surface: built-ins plus disk styles (user + project tiers),
	// default first.
	ListOutputStyles() []OutputStyleChoice

	// OutputStyleName returns the style the active profile resolves —
	// the persona-declared pin when the persona carries one, else the
	// configured output_style ("default" when unset).
	OutputStyleName() string

	// SwitchOutputStyle persists the style choice and rebuilds the
	// active persona's profile so the new voice applies immediately.
	// Same contract as SwitchProfile: caller ensures no Run is in
	// flight, and the conversation resets (the system prompt changed).
	SwitchOutputStyle(name string) error

	// Effort returns the current effort level name ("low"|"medium"|"high"|"ultra").
	Effort() string

	// SetEffort updates the effort level at runtime. Validates the name;
	// returns an error for unknown levels. Persists to config and applies
	// to the LLM client on the next completion.
	SetEffort(level string) error

	// LLMTemperature / LLMTopK / LLMTopP return the current session-level
	// sampling parameters. nil means "provider default".
	LLMTemperature() *float64
	LLMTopK() *int
	LLMTopP() *float64

	// SetLLMTemperature / SetLLMTopK / SetLLMTopP update the session-only
	// sampling parameters. nil unsets (reverts to provider default).
	// Applies to the live LLM client immediately. Never persisted to disk.
	SetLLMTemperature(v *float64) error
	SetLLMTopK(v *int) error
	SetLLMTopP(v *float64) error

	// Skills returns the merged catalog of user-installed skills (home
	// and workdir, with workdir overrides applied). The TUI's slash
	// suggestion panel surfaces each entry as `/<name>` with the
	// description; the agent decides if/when to invoke them via the
	// SKILL tool. Returns nil when no skills are installed.
	Skills() []Skill

	// MCPServers returns a snapshot of every configured MCP server and its
	// live connection status, for the read-only /mcp panel. Includes
	// disabled servers. Returns nil when no MCP servers are configured (or
	// no manager is installed) — callers render an empty state.
	MCPServers() []MCPServerInfo

	// Compact forces an immediate compaction of the current session.
	// kind is "micro" (elide older tool results, no LLM call) or
	// "full" (one LLM call producing a summary brief). Returns
	// ErrRunInProgress when a Run is currently driving the loop —
	// the TUI surfaces that as a hint rather than retrying.
	Compact(ctx context.Context, kind string) error

	// PermissionModeName returns the agent's current permission stance
	// as a string ("default", "accept_edits", "plan", "bypass", "auto").
	// Named verbosely to avoid collision with the typed Agent.PermissionMode()
	// accessor that returns the internal Mode enum.
	PermissionModeName() string

	// CyclePermissionMode advances the mode in Shift+Tab order and
	// returns the new mode name. Wraps around at the end of the cycle.
	CyclePermissionMode() string

	// SetPermissionModeName sets the permission stance directly by wire
	// name ("default", "accept_edits", "plan", "bypass") — the random-access
	// complement of CyclePermissionMode for callers that present modes as a
	// picker (the swarm web's per-member switch). Errors on unknown names.
	// Safe to call mid-run: the gate reads the mode per tool call.
	SetPermissionModeName(name string) error

	// RespondPermission delivers the user's approval/denial back to
	// the blocked tool goroutine. id is the RequestID from the
	// KindApprovalNeeded event payload. Returns an error only when
	// the id is unknown (already responded / cancelled).
	RespondPermission(id string, decision PermissionDecision) error

	// RespondQuestion delivers the user's answers back to the blocked
	// AskUserQuestion tool goroutine. id is the RequestID from the
	// KindQuestionNeeded event payload.
	RespondQuestion(id string, resp QuestionResponse) error

	// ClearSession starts a fresh conversation under the same persona,
	// LLM, and tools: empty history, zeroed usage, cleared todos, and a
	// new session id. The old session's snapshot stays on disk and
	// remains loadable via ResumeSession. Returns ErrRunInProgress (via
	// the agent layer) when a Run is in flight — the TUI's /clear
	// surfaces that as a hint rather than retrying.
	ClearSession() error

	// ListSessions enumerates persisted sessions scoped to the agent's
	// current workdir, sorted by last-write time descending. The
	// /resume picker calls this to populate its rows. Warnings carries
	// any corrupt-file messages the store collected — the UI may
	// surface them as hints or ignore them.
	ListSessions() ([]SessionInfo, []string)

	// ResumeSession swaps the live agent's state with the session
	// identified by id. Returns ErrRunInProgress (via the agent layer)
	// when a Run is in flight, or an error when the file is missing or
	// unreadable. Successful resume invalidates the prior transcript;
	// the TUI re-renders from Session().Messages.
	ResumeSession(id string) error

	// Checkpoints returns the current session's rewind checkpoints (per user
	// turn), newest first, for the /rewind picker. Returns nil when
	// checkpointing is disabled or the controller is a subagent.
	Checkpoints() []CheckpointInfo

	// RestoreCheckpoint rewinds to the checkpoint identified by id. mode is one
	// of "code" (rewrite captured before-images, delete since-created files),
	// "chat" (truncate the conversation to the turn boundary), or "both". It
	// returns a human-readable summary. Errors with ErrRunInProgress when a Run
	// is in flight, or when id/mode is invalid, or when a chat rewind would
	// cross a compaction boundary (CheckpointInfo.ChatRestoreOK was false). The
	// UI re-renders from Messages() after a chat/both restore.
	RestoreCheckpoint(id, mode string) (string, error)
}

type EmitQueue struct {
	// contains filtered or unexported fields
}

type Factory func(evvaHome string) UI

type MCPServerInfo struct {
	Name          string // server name (the mcpServers key)
	Transport     string // "stdio" | "http"
	Status        string // "connected" | "pending" | "failed" | "needs-auth" | "disabled"
	Scope         string // "user" | "project" — which settings.json it came from
	Detail        string // one-line summary: the launch command (stdio) or url (http)
	ToolCount     int    // tools discovered (0 unless connected)
	ResourceCount int    // 1 when the server advertises resources, else 0
	Error         string // connection error, populated for failed / needs-auth
}

type OutputStyleChoice struct {
	Name        string
	Description string
	Source      string
}

type PermissionDecision struct {
	Behavior string // "allow" | "deny"
	Reason   string
	// AddRule is non-nil when the user picked "Allow for this session" —
	// the agent's gate adds it to the in-memory store before falling
	// through to tool.Execute.
	AddRule *PermissionRuleSeed
}

type PermissionRuleSeed struct {
	ToolName string
	Content  string // empty means tool-wide
}

type ProfileChoice struct {
	Name      string
	WhenToUse string
}

type QuestionAnnotation struct {
	Notes   string
	Preview string
}

type QuestionResponse struct {
	// Answers maps question text → answer string. For single-select the value
	// is the chosen option label; for multi-select it is comma-separated
	// labels; for "Other" it is the user-typed free text. Kept for back-compat;
	// prefer MultiAnswers for multi-select fidelity.
	Answers map[string]string
	// MultiAnswers maps question text → the chosen option labels (the native
	// multi-select form: single-select is a one-element slice, "Other" the typed
	// text). Additive in v2.x — when set it is authoritative; Answers stays
	// populated (comma-joined) for callers that still read it. Optional; nil is fine.
	MultiAnswers map[string][]string
	// Annotations is keyed by question text. Present only when the user
	// selected an option that had a preview, or typed "Other" notes.
	Annotations map[string]QuestionAnnotation
}

type SessionInfo struct {
	ID              string // session-id (matches the JSON file basename)
	FirstUserPrompt string // up to 200 chars; picker truncates to 150 for display
	UpdatedAt       int64  // unix nano of last save (file mtime); resume picker sorts desc
	CreatedAt       int64  // unix nano of first save
	Profile         string // persona name at save time
	Provider        string // LLM provider name at save time
	Model           string // LLM model id at save time
	MessageCount    int    // length of Session.Messages — picker shows "<n> msgs"
}

type Skill struct {
	Name        string
	Description string
}

type UI interface {
	event.Sink

	// Attach hands the UI the controller it uses to drive the agent.
	// Called by the host once, between agent construction and Run.
	Attach(Controller)

	// Run starts the UI's input/render loop and blocks until exit.
	Run(ctx context.Context) error
}