config

type AutocompleteConfig struct {
	// ClaudeDir, when set, enables scanning ~/.claude/{skills,commands,agents}.
	// Empty disables Claude resource autocomplete; path autocomplete is always on.
	ClaudeDir string `json:"claude_dir,omitempty"`
	// IncludePlugins / IncludeBuiltins gate the plugin-marketplace scan and the
	// curated built-in slash-command roster. Pointer so an absent key defaults to
	// true (the historical always-on behavior); set false to disable.
	IncludePlugins  *bool `json:"include_plugins,omitempty"`
	IncludeBuiltins *bool `json:"include_builtins,omitempty"`
	// MaxResults caps the suggestions returned per query (0 → 15, the historical
	// default).
	MaxResults int `json:"max_results,omitempty"`
	// SourcePriority orders the slash-item sources for tie-breaking at equal
	// fuzzy score (empty → ["builtins","skills","commands"], the historical
	// order). Sources omitted from the list keep their default position after the
	// listed ones — a partial list reorders, never drops.
	SourcePriority []string `json:"source_priority,omitempty"`

	// ShortcutsFile points at the user-defined shortcut list (JSON; see
	// internal/autocomplete/shortcuts.go for the format). Defaults to
	// shortcuts.json next to the config file; empty string disables.
	// (An earlier custom_phrases config field was dropped in favor of
	// shortcuts: same use case, richer semantics — bare-word trigger,
	// keyword aliases, separate editable file.)
	ShortcutsFile string `json:"shortcuts_file,omitempty"`
}

type Config struct {
	Host            string  `json:"host"`
	Port            int     `json:"port"`
	PollInterval    float64 `json:"poll_interval"`
	MetricsInterval float64 `json:"metrics_interval"`
	CaptureLines    int     `json:"capture_lines"`
	UploadDir       string  `json:"upload_dir"`
	// UploadMaxBytes caps POST /api/upload (0 → 50<<20, the historical default).
	UploadMaxBytes int64              `json:"upload_max_bytes,omitempty"`
	Autocomplete   AutocompleteConfig `json:"autocomplete"`
	Metrics        MetricsConfig      `json:"metrics"`
	Relay          RelayConfig        `json:"relay,omitempty"`
	Notify         NotifyConfig       `json:"notify,omitempty"`

	// DefaultSessionCWD is the working dir new sessions start in (empty →
	// os.UserHomeDir(), the historical default). Resolved and passed to tmuxctl
	// at the call site (server.handleCreateSession) so tmuxctl stays decoupled
	// from config.
	DefaultSessionCWD string `json:"default_session_cwd,omitempty"`

	// AgentCommandsExtra / AgentHostCommandsExtra are APPENDED to the builtin
	// agent-command classifier sets (internal/ws agentstate.go) — the builtin
	// sets always stay, these only add entries. AgentCommandsExtra names full
	// coding agents (screen-text classified); AgentHostCommandsExtra names
	// generic runtimes that merely host an agent (title-only classified). Empty
	// (default) leaves the builtin sets unchanged.
	AgentCommandsExtra     []string `json:"agent_commands_extra,omitempty"`
	AgentHostCommandsExtra []string `json:"agent_host_commands_extra,omitempty"`

	// UI is an OPAQUE passthrough blob delivered verbatim to the frontend as
	// window.__UI_CONFIG__ (see internal/pwa IndexHandler). The server never
	// interprets it — the frontend owns its schema — which avoids maintaining a
	// deep UI-settings struct in both Go and JS. Empty → the frontend sees null.
	// Invalid JSON here fails loud at Load (never injected into the HTML).
	UI json.RawMessage `json:"ui,omitempty"`

	// Hosts are the FULL-SESSION federation targets: remote tmux-webui instances
	// whose sessions this "hub" lists and proxies, so one UI shows every machine.
	// Each host's sessions surface under a "<name>/<session>" prefix and every
	// session-scoped request (list/history/panes/rename/delete/create/ws) is
	// forwarded to the owning host with the prefix stripped (see internal/fedproxy).
	//
	// NOT to be confused with notify.peers (below): peers is STATUS-ONLY agent
	// federation (each Monitor scan GETs a peer's /api/agents), hosts is the full
	// session proxy. The two are deliberately separate — a status-only peer needs
	// no proxying, a proxied host publishes its own /api/agents locally. Empty = no
	// federation (default), byte-identical to a standalone server.
	Hosts []HostConfig `json:"hosts,omitempty"`

	// Token, when non-empty, gates every request behind a ?token=/cookie check
	// (see server.tokenGate). Minted at startup only in --lan mode, never
	// persisted — empty leaves a plain localhost bind tokenless and
	// byte-identical to a no-auth server.
	Token string `json:"-"`
}

type HostConfig struct {
	Name        string `json:"name"`
	URL         string `json:"url"`
	FallbackURL string `json:"fallback_url,omitempty"`
	Token       string `json:"token,omitempty"`
}

type MetricsConfig struct {
	// Provider: "gopsutil" (default, built-in) or "http" (pull from URL).
	Provider string `json:"provider"`
	// URL is consumed when Provider == "http". Workshop dogfood points this
	// at http://127.0.0.1:10103/sysmon/current.
	URL string `json:"url,omitempty"`
}

type NotifyConfig struct {
	WebhookURL     string            `json:"webhook_url,omitempty"`
	WebhookHeaders map[string]string `json:"webhook_headers,omitempty"`
	// Interval is the Monitor scan period in seconds (default 3).
	Interval float64 `json:"interval,omitempty"`
	// Cooldown throttles per-pane re-notification in seconds (default 60): a
	// pane sitting in waiting won't re-push until it leaves and re-enters, and a
	// fast re-entry is still capped to this.
	Cooldown float64 `json:"cooldown,omitempty"`
	// NoPreview drops the pane's last line from the push body. Default (false)
	// includes it — it's your own device and the prompt is the useful part.
	NoPreview bool `json:"no_preview,omitempty"`
	// URLBase is prepended to the push url so tapping opens the app (default "/").
	URLBase string `json:"url_base,omitempty"`

	// RecordMaxFrames and RecordMaxBytes bound the I4 per-pane replay ring —
	// whichever ceiling binds first evicts the oldest frame. Recording is OFF by
	// default (opt-in per pane via POST /api/agents/{session}/{pane}/record), so
	// these only matter once a pane is being recorded. Defaults: 200 frames /
	// 4MB (RecordMaxFrames<=0 → 200, RecordMaxBytes<=0 → 4<<20).
	RecordMaxFrames int `json:"record_max_frames,omitempty"`
	RecordMaxBytes  int `json:"record_max_bytes,omitempty"`

	// Peers are the I6 remote-host status federation sources: Tailscale/LAN-
	// reachable tmux-webui base URLs (e.g. "http://host-b:10105"). Each Monitor
	// scan also GETs each peer's /api/agents with a SHORT timeout, best-effort —
	// a dead/slow peer is logged and skipped, never blocking the local scan.
	// Remote agents are tagged host=<peer> and their pane ids host-prefixed so
	// they never collide with local ones. STATUS ONLY — there is no cross-host
	// input/focus (out of scope by design). Empty = no federation (default).
	Peers []string `json:"peers,omitempty"`
	// PeerToken, when set, is carried as the tw_token cookie on each peer poll so
	// a token-gated (--lan) peer admits the read-only /api/agents request. Peers
	// are trusted LAN hosts; leave empty for tokenless peers.
	PeerToken string `json:"peer_token,omitempty"`
}

type RelayConfig struct {
	// PaneScript is the path to a shell script that allocates a relay pane.
	// Empty disables /api/relay (returns 501).
	PaneScript  string `json:"pane_pool_script,omitempty"`
	RelayScript string `json:"relay_script,omitempty"`
	SignalDir   string `json:"signal_dir,omitempty"`
}