config

type ClaudeConfig struct {
	// BaseURL sets ANTHROPIC_BASE_URL inside the container, redirecting Claude
	// Code API traffic to a custom endpoint: an Anthropic-compatible gateway
	// (e.g. LunaRoute) or a host-side LLM proxy (e.g. Headroom).
	//
	// Traffic goes through the Moat proxy, which injects the anthropic or claude
	// grant's credential for the endpoint's host, so the key never enters the
	// container. A localhost URL is rewritten to the synthetic host-gateway
	// name and its port allowed, since the container cannot reach a host
	// service at its own loopback address.
	BaseURL string `yaml:"base_url,omitempty"`

	// SyncLogs enables mounting Claude's session logs directory so logs from
	// inside the container appear on the host at the correct project location.
	// Default: false, unless the "anthropic" grant is configured (then true).
	SyncLogs *bool `yaml:"sync_logs,omitempty"`

	// Plugins enables or disables specific plugins for this run.
	// Keys are in format "plugin-name@marketplace", values are true/false.
	Plugins map[string]bool `yaml:"plugins,omitempty"`

	// Marketplaces defines additional plugin marketplaces for this run.
	Marketplaces map[string]MarketplaceSpec `yaml:"marketplaces,omitempty"`

	// MCP defines MCP (Model Context Protocol) server configurations.
	MCP map[string]MCPServerSpec `yaml:"mcp,omitempty"`

	// SubscriptionType overrides the subscriptionType written to Claude Code's
	// .credentials.json (e.g. "pro", "max"). Setup-token and pasted-token grants
	// don't carry the plan, so moat defaults to "max"; set this to match your
	// plan. Imported grants use the real value unless this is set.
	SubscriptionType string `yaml:"subscription_type,omitempty"`

	// RateLimitTier overrides the rateLimitTier written to Claude Code's
	// .credentials.json (e.g. "default_claude_max_20x"). Optional; mainly affects
	// Claude Code's local rate-limit hints. Real plan limits are enforced
	// server-side via the proxy-injected token.
	RateLimitTier string `yaml:"rate_limit_tier,omitempty"`

	// LLMGateway configures a Keep LLM gateway sidecar inside the container.
	// Mutually exclusive with BaseURL.
	LLMGateway *LLMGatewayConfig `yaml:"llm-gateway,omitempty"`

	// SkipPermissionsPrompt controls whether to suppress the bypass-permissions
	// warning in Claude Code. Set automatically by moat when
	// --dangerously-skip-permissions is being passed. Not a moat.yaml field.
	SkipPermissionsPrompt bool `yaml:"-"`
}

type CodexConfig struct {
	// SyncLogs enables mounting a session directory so Codex transcripts
	// written inside the container appear on the host.
	// Default: false, unless the "openai" grant is configured (then true).
	SyncLogs *bool `yaml:"sync_logs,omitempty"`

	// SharedSessions mounts the host's own ~/.codex/sessions instead of the
	// per-workspace directory under ~/.moat/codex/sessions.
	//
	// Codex partitions sessions by date rather than by workspace and offers no
	// config key to relocate the directory, so sharing it exposes this host
	// user's Codex transcripts from every project to the container — including
	// projects whose transcripts may carry regulated or confidential data.
	// moat therefore isolates per workspace by default; set this to true only
	// when cross-project history in one place is worth that exposure.
	SharedSessions bool `yaml:"shared_sessions,omitempty"`

	// RequireApproval keeps Codex's own approval prompts and sandbox enabled
	// instead of moat's default of turning both off. Set automatically by moat
	// when `moat codex --noyolo` is used. Not a moat.yaml field.
	RequireApproval bool `yaml:"-"`

	// MCP defines MCP (Model Context Protocol) server configurations.
	MCP map[string]MCPServerSpec `yaml:"mcp,omitempty"`
}

type Config struct {
	Name         string            `yaml:"name,omitempty"`
	Agent        string            `` /* 177-byte string literal not displayed */
	Agents       []string          `` /* 249-byte string literal not displayed */
	Version      string            `yaml:"version,omitempty"`
	Dependencies []string          `yaml:"dependencies,omitempty"`
	Grants       []string          `yaml:"grants,omitempty"`
	Env          map[string]string `yaml:"env,omitempty"`
	Secrets      map[string]string `yaml:"secrets,omitempty"`
	Mounts       []MountEntry      `yaml:"mounts,omitempty"`
	Devices      []DeviceEntry     `` /* 179-byte string literal not displayed */
	Ports        map[string]int    `yaml:"ports,omitempty"`
	Network      NetworkConfig     `yaml:"network,omitempty"`
	Command      []string          `yaml:"command,omitempty"`
	Claude       ClaudeConfig      `yaml:"claude,omitempty"`
	Copilot      CopilotConfig     `yaml:"copilot,omitempty"`
	Codex        CodexConfig       `yaml:"codex,omitempty"`
	Gemini       GeminiConfig      `yaml:"gemini,omitempty"`
	Pi           PiConfig          `yaml:"pi,omitempty"`
	Interactive  bool              `yaml:"interactive,omitempty"`
	// Clipboard enables host clipboard bridging. Default true when nil.
	Clipboard *bool           `yaml:"clipboard,omitempty"`
	Snapshots SnapshotConfig  `yaml:"snapshots,omitempty"`
	Tracing   TracingConfig   `yaml:"tracing,omitempty"`
	Hooks     HooksConfig     `yaml:"hooks,omitempty"`
	Workspace WorkspaceConfig `yaml:"workspace,omitempty"`

	// Sandbox configures container sandboxing.
	// "none" disables gVisor sandbox (Docker only).
	// Empty string or omitted uses default (gVisor enabled).
	Sandbox string `yaml:"sandbox,omitempty"`

	// Runtime forces a specific container runtime ("docker" or "apple").
	// If not set, moat auto-detects the best available runtime.
	// Useful when agent needs docker:dind on macOS (Apple containers can't run dind).
	Runtime string `yaml:"runtime,omitempty"`

	Volumes         []VolumeConfig         `yaml:"volumes,omitempty"`
	Container       ContainerConfig        `yaml:"container,omitempty"`
	MCP             []MCPServerConfig      `yaml:"mcp,omitempty"`
	Services        map[string]ServiceSpec `yaml:"services,omitempty"`
	LanguageServers []string               `yaml:"language_servers,omitempty"`

	// BaseImage specifies a custom base image for the container.
	// Moat layers its infrastructure (user, entrypoint, etc.) on top.
	// Must be Debian-based (Ubuntu, Debian) since moat uses apt-get.
	BaseImage string `yaml:"base_image,omitempty"`

	// Deprecated: old runtime field for language versions
	DeprecatedRuntime *deprecatedRuntime `yaml:"-"`
}

type ContainerConfig struct {
	// Memory specifies the memory limit in megabytes.
	// Applies to both Docker and Apple containers.
	// If not set, Apple containers default to 8192 MB (8 GB) for AI agent
	// runs (claude/codex/gemini), or 4096 MB (4 GB) otherwise.
	// Docker containers have no default limit.
	//
	// Example:
	//   container:
	//     memory: 8192  # 8 GB
	Memory int `yaml:"memory,omitempty"`

	// CPUs specifies the number of CPUs.
	// Applies to both Docker and Apple containers.
	// If not set, uses runtime defaults.
	//
	// Example:
	//   container:
	//     cpus: 8
	CPUs int `yaml:"cpus,omitempty"`

	// DNS specifies DNS servers for both runtime containers and builders.
	// Applies to both Docker and Apple containers.
	// If not set, defaults to ["8.8.8.8", "8.8.4.4"] (Google DNS).
	//
	// Example:
	//   container:
	//     dns: ["192.168.1.1", "1.1.1.1"]
	//
	// Note: Using public DNS will send queries to that provider,
	// potentially leaking information about your dependencies and internal services.
	DNS []string `yaml:"dns,omitempty"`

	// Ulimits specifies resource limits (ulimits) for the container.
	// Applies to both Docker and Apple containers.
	// Keys are ulimit names (e.g., "nofile", "nproc", "memlock").
	// Values specify soft and hard limits. Use -1 for unlimited.
	//
	// Example:
	//   container:
	//     ulimits:
	//       nofile:
	//         soft: 1024
	//         hard: 65536
	Ulimits map[string]UlimitSpec `yaml:"ulimits,omitempty"`
}

type CopilotConfig struct {
	// Model optionally selects the model passed to `copilot --model`.
	Model string `yaml:"model,omitempty"`

	// Context sets the context window tier passed to `copilot --context`.
	// Valid values: "default", "long_context".
	Context string `yaml:"context,omitempty"`

	// ReasoningEffort sets the reasoning effort level passed to `copilot --reasoning-effort`.
	// Valid values: "none", "minimal", "low", "medium", "high", "xhigh", "max".
	ReasoningEffort string `yaml:"reasoning_effort,omitempty"`

	// Experimental starts Copilot CLI with --experimental.
	Experimental bool `yaml:"experimental,omitempty"`

	// Autopilot starts Copilot CLI in autopilot mode.
	Autopilot bool `yaml:"autopilot,omitempty"`
}

type DebugConfig struct {
	RetentionDays int `yaml:"retention_days"`
}

type DeviceEntry struct {
	// Name is the device's name in moat.yaml. It determines how the container
	// addresses the device: MOAT_SERIAL_<NAME>_URL carries its rfc2217://
	// endpoint.
	Name string `yaml:"name"`

	// Match selects which attached device this entry refers to. The specific
	// device is pinned on first use; see internal/serialdev.
	Match DeviceMatch `yaml:"match"`

	// Baud optionally sets the initial line rate. Tools normally set their own.
	Baud int `yaml:"baud,omitempty"`

	// Record is "events" (default) or "full".
	Record string `yaml:"record,omitempty"`
}

type DeviceMatch struct {
	USB string `yaml:"usb"`

	// Interface picks one UART of a multi-interface bridge (FT2232H, CP2105,
	// ESP-Prog): one USB device, several ttys, identical USB IDs. It is the
	// interface number moat device list shows for each port. Empty matches
	// single-UART devices unchanged.
	Interface string `yaml:"interface,omitempty"`
}

type GeminiConfig struct {
	// SyncLogs enables mounting Gemini's session logs directory so logs from
	// inside the container appear on the host at the correct project location.
	// Default: false, unless the "gemini" grant is configured (then true).
	SyncLogs *bool `yaml:"sync_logs,omitempty"`

	// MCP defines MCP (Model Context Protocol) server configurations.
	MCP map[string]MCPServerSpec `yaml:"mcp,omitempty"`
}

type GlobalConfig struct {
	Proxy  ProxyConfig  `yaml:"proxy"`
	Debug  DebugConfig  `yaml:"debug"`
	Mounts []MountEntry `yaml:"mounts,omitempty"`

	// Profiles holds per-credential-profile settings, keyed by profile name.
	// They apply to any run using that profile (--profile / MOAT_PROFILE).
	Profiles map[string]ProfileConfig `yaml:"profiles,omitempty"`
}

type HooksConfig struct {
	// PostBuild runs as the container user (moatuser) during image build,
	// after all dependencies are installed. Baked into image layers and cached.
	// Use for user-level image setup like configuring git defaults.
	PostBuild string `yaml:"post_build,omitempty"`

	// PostBuildRoot runs as root during image build, after all dependencies
	// are installed. Baked into image layers and cached.
	// Use for system-level setup like installing packages or kernel tuning.
	PostBuildRoot string `yaml:"post_build_root,omitempty"`

	// PreRun runs as the container user (moatuser) in /workspace on every
	// container start, before the main command. Use for workspace-level
	// setup that needs project files (e.g., "npm install").
	PreRun string `yaml:"pre_run,omitempty"`
}

type LLMGatewayConfig struct {
	Policy *keep.PolicyConfig `yaml:"policy,omitempty"`
}

type MCPAuthConfig struct {
	Grant  string `yaml:"grant"`
	Header string `yaml:"header"`
}

type MCPServerConfig struct {
	Name   string             `yaml:"name"`
	URL    string             `yaml:"url"`
	Auth   *MCPAuthConfig     `yaml:"auth,omitempty"`
	Policy *keep.PolicyConfig `yaml:"policy,omitempty"`
}

type MCPServerSpec struct {
	// Command is the executable to run
	Command string `yaml:"command"`

	// Args are command-line arguments
	Args []string `yaml:"args,omitempty"`

	// Env are environment variables for the server
	Env map[string]string `yaml:"env,omitempty"`

	// Grant specifies a credential grant to inject (e.g., "github", "anthropic")
	Grant string `yaml:"grant,omitempty"`

	// Cwd is the working directory for the server
	Cwd string `yaml:"cwd,omitempty"`
}

type MarketplaceSpec struct {
	// Source is the type of marketplace: "github", "git", or "directory"
	Source string `yaml:"source"`

	// Repo is the GitHub repository in "owner/repo" format (for source: github)
	Repo string `yaml:"repo,omitempty"`

	// URL is the git URL (for source: git)
	// Supports both HTTPS (https://github.com/org/repo.git) and
	// SSH (git@github.com:org/repo.git) URLs
	URL string `yaml:"url,omitempty"`

	// Path is the local directory path (for source: directory)
	Path string `yaml:"path,omitempty"`
}

type MountEntry struct {
	Source   string   `yaml:"source"`
	Target   string   `yaml:"target"`
	Mode     string   `yaml:"mode,omitempty"`
	ReadOnly bool     `yaml:"-"`
	Exclude  []string `yaml:"exclude,omitempty"`
}

type NetworkConfig struct {
	Policy     string                      `yaml:"policy,omitempty"` // "permissive" or "strict", default "permissive"
	Allow      []string                    `yaml:"allow,omitempty"`  // deprecated: hard error
	Rules      []netrules.NetworkRuleEntry `yaml:"rules,omitempty"`
	KeepPolicy *keep.PolicyConfig          `yaml:"keep_policy,omitempty"`
	Host       []int                       `yaml:"host,omitempty"` // TCP ports on the host the container may access
}

type PiConfig struct {
	Provider string   `yaml:"provider,omitempty"`
	Model    string   `yaml:"model,omitempty"`
	Packages []string `yaml:"packages,omitempty"`
	// SyncLogs persists Pi transcripts in a per-workspace host directory.
	// Opt-in: backend grants alone do not enable Pi session sharing.
	SyncLogs *bool `yaml:"sync_logs,omitempty"`
}

type ProfileConfig struct {
	// Inherit names a parent profile; InheritDefault selects the unscoped store.
	// These are mutually exclusive, so a named profile called "default" remains valid.
	Inherit        string `yaml:"inherit,omitempty"`
	InheritDefault bool   `yaml:"inherit_default,omitempty"`

	// Env are environment variables set in the container for any run using
	// this profile. moat.yaml env and -e flags override them; proxy variables
	// moat owns are filtered out, exactly as for the other two layers.
	Env map[string]string `yaml:"env,omitempty"`
}

type ProxyConfig struct {
	Port int `yaml:"port"`
}

type ServiceSpec struct {
	Env    map[string]string `yaml:"env,omitempty"`
	Image  string            `yaml:"image,omitempty"`
	Wait   *bool             `yaml:"wait,omitempty"`
	Memory int               `yaml:"memory,omitempty"` // Memory limit in MB for the service container (0 = runtime default)
	// Extra holds unknown list-valued keys (e.g., "models" for ollama).
	// Populated by UnmarshalYAML. The run layer maps these to provisions
	// using the registry's provisions_key.
	Extra map[string][]string `yaml:"-"`
}

type SnapshotConfig struct {
	Disabled  bool                    `yaml:"disabled,omitempty"`
	Triggers  SnapshotTriggerConfig   `yaml:"triggers,omitempty"`
	Exclude   SnapshotExcludeConfig   `yaml:"exclude,omitempty"`
	Retention SnapshotRetentionConfig `yaml:"retention,omitempty"`
}

type SnapshotExcludeConfig struct {
	IgnoreGitignore bool     `yaml:"ignore_gitignore,omitempty"`
	Additional      []string `yaml:"additional,omitempty"`
}

type SnapshotRetentionConfig struct {
	MaxCount      int  `yaml:"max_count,omitempty"`
	DeleteInitial bool `yaml:"delete_initial,omitempty"`
}

type SnapshotTriggerConfig struct {
	DisablePreRun        bool `yaml:"disable_pre_run,omitempty"`
	DisableGitCommits    bool `yaml:"disable_git_commits,omitempty"`
	DisableBuilds        bool `yaml:"disable_builds,omitempty"`
	DisableIdle          bool `yaml:"disable_idle,omitempty"`
	IdleThresholdSeconds int  `yaml:"idle_threshold_seconds,omitempty"`
}

type TracingConfig struct {
	DisableExec bool `yaml:"disable_exec,omitempty"`
}

type UlimitSpec struct {
	Soft int64 `yaml:"soft"`
	Hard int64 `yaml:"hard"`
}

type VolumeConfig struct {
	Name     string `yaml:"name"`
	Target   string `yaml:"target"`
	ReadOnly bool   `yaml:"readonly,omitempty"`
	// Type selects the backing store: "bind" (default) is a host bind mount at
	// ~/.moat/volumes/<agent>/<name> (visible on the host; crosses the host↔VM
	// filesystem-sharing layer on VM-based runtimes). "volume" is a Docker named
	// volume on the engine's native filesystem (not host-visible; bypasses that
	// layer). Docker runtime only.
	Type string `yaml:"type,omitempty"`
}

type WorkspaceConfig struct {
	// Mode is "bind" (default) or "volume". Empty means bind.
	Mode WorkspaceMode `yaml:"mode,omitempty"`
}

type WorkspaceMode string