config

type APIConfig struct {
	ApiURL    string
	ApiSecret string
	Models    []constant.Model
}

type Config struct {
	// OS / runtime
	OS string

	// Logging
	LogLevel  string  // default: "info"
	LogFormat string  // default: "text"
	LogDir    *string // default: nil → stdout only

	// Application
	AppEnv     string // default: "development"
	AppName    string // default: "evva" — the binary / brand name; drives AppHome layout.
	AppVersion string

	// Per-user home dir layout
	AppHome            string
	AppHomeSkillsDir   string
	AppHomeUserProfile string
	AppHomeConfigFile  string // absolute path to <app>-config.yml under AppHome/config/

	AutoCompactThreshold float64

	// Workdir layout
	WorkDir          string
	WorkDirSkillsDir string

	// llm providers(from <app>-config.yml) key: provider name, value: provider APIConfig
	LLMProviderConfig map[string]APIConfig

	// DefaultProvider / DefaultModel are the (provider, model) the agent
	// boots with. Sourced from <app>-config.yml; the /model switch updates
	// them in-memory and persists via SaveFile().
	DefaultProvider constant.LLMProvider
	DefaultModel    constant.Model

	// DefaultEffort is the user-facing effort level name: low|medium|high|ultra.
	// Defaults to "medium". Sourced from <app>-config.yml; /effort updates it.
	DefaultEffort string

	// DefaultProfile is the persona the root agent boots into ("evva", "nono",
	// etc). Sourced from <app>-config.yml; /profile updates it. Empty falls
	// back to "evva" at bootstrap so old configs keep working.
	DefaultProfile string

	// PermissionMode is the startup permission stance: one of
	// default|accept_edits|plan|bypass|auto. The -permission-mode CLI flag
	// overrides this at boot; the TUI's Shift+Tab cycle mutates the
	// in-memory value via SetPermissionMode (not yet persisted).
	PermissionMode string

	// Loaded metadata
	LoadedAt time.Time
	// DefaultMaxIterations is the loop's safety cap. Hitting it emits a
	// KindIterLimit event and pauses the agent; the caller may invoke
	// Continue(ctx) to keep going.
	DefaultMaxIterations int
	// DefaultMaxTokens is the per-completion output-token cap passed to
	// the LLM. 0 → let the provider apply its own default.
	DefaultMaxTokens int

	// UI
	DisplayThinking bool

	// Auto-memory subsystem. When true (default), update_user_profile +
	// update_project_memory tools are registered on Main and the system
	// prompt carries the auto-memory guidance + project-memory index.
	// /config (or hand-edit) flips this; EVVA_AUTO_MEMORY=0 forces off at
	// boot regardless of the YAML.
	EnableAutoMemory bool

	// Web tools
	TavilyAPIKey  string // empty → web_search reports "not configured"
	FetchMaxBytes int    // cap on extracted text returned by web_fetch

	// CustomConfig holds downstream-app-defined settings. Reads/writes go
	// through GetCustom / SetCustom / DeleteCustom under c.mu. Values
	// round-trip through YAML as a `custom:` section; complex types are
	// encoded as whatever gopkg.in/yaml.v3 produces for any (typically a
	// map[string]any tree). Consumers cast at use-site — pkg/config does
	// not know the value shapes.
	//
	// Use this slot for downstream-private secrets/settings that don't fit
	// the typed fields above (e.g. friday's broker URL, a billing token,
	// feature flags). evva itself never reads from CustomConfig.
	CustomConfig map[string]any

	// LLMParamsTemperature / LLMParamsTopP / LLMParamsTopK are session-only
	// sampling knobs the /config form mutates at runtime. nil → provider
	// default (not sent in API request). Reset to nil on every evva start;
	// never persisted to YAML.
	LLMParamsTemperature *float64
	LLMParamsTopP        *float64
	LLMParamsTopK        *int
	// contains filtered or unexported fields
}

type EnvOverride struct {
	Name string
	Fn   func(*Config) error
}

type FileConfig struct {
	MaxIterations        int     `yaml:"max_iterations"`
	MaxTokens            int     `yaml:"max_tokens"`
	AutoCompactThreshold float64 `yaml:"auto_compact_threshold"`
	DisplayThinking      bool    `yaml:"display_thinking"`

	// DefaultProvider / DefaultModel are the (provider, model) pair the
	// agent boots with. Phase 3's /model switch will mutate these and call
	// Save to persist across launches.
	DefaultProvider string `yaml:"default_provider"`
	DefaultModel    string `yaml:"default_model"`

	DefaultEffort string `yaml:"default_effort"`

	// DefaultProfile is the persona the root agent boots into. Phase 6's
	// /profile switch mutates this and calls Save to persist across launches.
	// Empty falls back to "evva" at bootstrap.
	DefaultProfile string `yaml:"default_profile"`

	// PermissionMode is the agent's startup stance. One of:
	// "default" | "accept_edits" | "plan" | "bypass" | "auto". Defaults to
	// "default" when omitted. The -permission-mode CLI flag overrides this.
	PermissionMode string `yaml:"permission_mode"`

	FetchMaxBytes int    `yaml:"fetch_max_bytes"`
	TavilyAPIKey  string `yaml:"tavily_api_key"`

	// EnableAutoMemory gates the auto-memory subsystem (update_user_profile,
	// update_project_memory tools + the per-session prompt section). Default
	// true; users opt out via /config or by setting this to false. Pointer so
	// missing-key in YAML preserves the default rather than zeroing.
	EnableAutoMemory *bool `yaml:"enable_auto_memory,omitempty"`

	Providers map[string]FileProviderConfig `yaml:"providers"`

	// Custom is the downstream-app extension slot. Values round-trip through
	// YAML as the `custom:` section. Empty / nil produces no `custom:` key in
	// the output. Decoded as map[string]any — consumers cast at use-site.
	Custom map[string]any `yaml:"custom,omitempty"`
}

type FileProviderConfig struct {
	APIKey string `yaml:"api_key"`
	APIURL string `yaml:"api_url"`
}

type LoadOptions struct {
	AppName    string // brand identifier; drives the AppHome layout. Defaults to "evva".
	AppHome    string // absolute path; defaults to ~/.<AppName>/.
	WorkDir    string // process cwd; defaults to os.Getwd().
	AppVersion string // version string for diagnostics; defaults to DefaultAppVersion.

	// EnvAliases maps the caller's preferred env-var names onto evva's
	// canonical ones BEFORE godotenv.Load runs. Useful when a downstream
	// app advertises friendlier spellings — e.g. `{"LOGDIR": "LOG_DIR",
	// "LOGLEVEL": "LOG_LEVEL"}` lets a friday user write either form in
	// `~/.friday/.env` and have evva's loader pick it up.
	//
	// The promotion is non-overriding: an alias only seeds the canonical
	// name when that canonical name is unset. Existing canonical exports
	// win, so a deliberate `LOG_DIR=...` is never clobbered by a stray
	// alias.
	EnvAliases map[string]string

	// EnvOverrides runs AFTER the YAML + canonical env-vars have built
	// the Config. Each entry gets the populated *Config and can fold in
	// env vars that don't have a native hook inside Load (e.g.
	// MAX_ITERS → cfg.SetMaxIterations). The first error short-circuits
	// the rest and is returned from Load wrapped with the failing
	// override's Name — `config: EnvOverrides[<name>]: <wrapped>` — so
	// a downstream app with several overrides can identify the culprit
	// without grepping stack traces.
	//
	// Use this to translate downstream-flavoured env conventions
	// (APIKEY → cfg.SetProviderCredentials, MAX_ITERS → cfg.SetMaxIterations)
	// in one place instead of post-Load shim code at every call site.
	EnvOverrides []EnvOverride

	// ProviderCredentials wires LLM provider credentials from env vars
	// declaratively — the alternative to writing a separate EnvOverride
	// that reads os.Getenv(...) and calls cfg.SetProviderCredentials.
	//
	// Keyed by provider name (matches pkg/llm.DefaultRegistry); the
	// ProviderCredsFromEnv value names the env vars to read. EnvAliases
	// promotion runs first, so aliased names (e.g. `APIKEY` → `DEEPSEEK_API_KEY`)
	// reach this layer through their canonical form. Empty env-var values
	// are passed through to SetProviderCredentials — the agent's LLM-build
	// step will surface "API_KEY not set" loudly on first Run.
	//
	// Example:
	//
	//	LoadOptions{
	//	    ProviderCredentials: map[string]config.ProviderCredsFromEnv{
	//	        "deepseek": {APIKeyEnv: "DEEPSEEK_API_KEY",
	//	                    APIURLDefault: constant.DEEPSEEK.ApiUrl},
	//	    },
	//	}
	//
	// Applied AFTER the YAML loader populates LLMProviderConfig but
	// BEFORE EnvOverrides run, so an EnvOverride can still mutate the
	// installed creds if it needs to.
	ProviderCredentials map[string]ProviderCredsFromEnv

	// SeedEnvTemplate is written to <AppHome>/.env on first launch when
	// the file is missing. Useful for closing the "evva creates the YAML
	// but the user doesn't know to create .env" first-run gap.
	//
	// Empty means "don't write a .env template" (the historical behaviour).
	// An existing .env is never overwritten, even with SeedEnvTemplate set.
	SeedEnvTemplate string
}

type ProviderCredsFromEnv struct {
	// APIKeyEnv is the env-var name carrying the provider's API key
	// (e.g. "DEEPSEEK_API_KEY"). Empty means "no key from env".
	APIKeyEnv string
	// APIURLEnv is the env-var name carrying the provider's API URL.
	// Most consumers leave this empty and lean on APIURLDefault.
	APIURLEnv string
	// APIURLDefault is the URL to use when APIURLEnv is empty or unset.
	// Typically a constant from pkg/constant (e.g. constant.DEEPSEEK.ApiUrl).
	APIURLDefault string
}