config

type Config struct {
	// Addr is the HTTP listen address. Defaults to loopback (127.0.0.1:8080)
	// because the API and dashboard have no built-in authentication yet —
	// exposing them requires an authenticating reverse proxy. Set ":8080" (all
	// interfaces) deliberately, behind such a proxy. See docs/security/.
	Addr string
	// DB is the storage DSN. For SQLite this is a file path ("console.db") or
	// "" / ":memory:" for an in-memory database.
	DB string
	// StorePlugin is the path to an out-of-process storage-backend plugin
	// executable (e.g. console-plugin-postgres). When set, it replaces the
	// built-in SQLite store; the plugin inherits this process's environment.
	StorePlugin string
	// NotifyPlugins are paths to out-of-process notifier plugin executables
	// (e.g. console-plugin-slack). Each is launched and registered as a sink;
	// plugins inherit this process's environment (e.g. CONSOLE_SLACK_WEBHOOK_URL).
	NotifyPlugins []string
	// StatusPlugins are paths to out-of-process status-provider plugin
	// executables (e.g. console-plugin-cloudflare). Each is launched and
	// registered with the status engine; plugins inherit this process's
	// environment (e.g. CLOUDFLARE_API_TOKEN).
	StatusPlugins []string
	// LLMPlugin is the path to an out-of-process LLM provider plugin executable
	// (e.g. console-plugin-anthropic). When set, it supplies the AI-Assisted
	// onboarding provider over gRPC; empty disables AI-Assisted mode. The plugin
	// inherits this process's environment (e.g. ANTHROPIC_API_KEY).
	LLMPlugin string
	// Metrics enables in-process metrics collection (internal/obs). When false
	// the App uses the allocation-free no-op Recorder. Defaults to true.
	Metrics bool
	// MetricsAddr, when set, serves /metrics on a separate listener at this
	// address instead of the main one (CONSOLE_METRICS_ADDR).
	MetricsAddr string
	// LogFormat selects the log encoding: "text" (default) or "json"
	// (CONSOLE_LOG_FORMAT). Check with Validate.
	LogFormat string
	// Version is the build version reported by console_build_info. It is set
	// by the caller (not read from the environment); empty becomes "unknown".
	Version string
	// AuthMode is CONSOLE_AUTH: "auto" (default) or "disabled". Check with Validate.
	AuthMode string
	// Tokens are the static API tokens (CONSOLE_{ADMIN,WRITE,READ,EVAL}_TOKENS
	// and _FILE variants). Secret; renders as counts only.
	Tokens Tokens
	// CookieSecure is CONSOLE_COOKIE_SECURE: "auto" (default) or "always".
	// Check with Validate.
	CookieSecure string
	// contains filtered or unexported fields
}

type Tokens struct {
	Admin, Write, Read, Eval []string
}