config

type AutoTrade struct {
	// ProposalsEnabled controls whether the daemon may produce advisory protection proposals; default true, and proposals are not broker orders unless separately submitted by an explicitly enabled trading path — the `[auto_trade]` section name is historical: nothing auto-trades, and the policy's auto_submit stays false.
	ProposalsEnabled *bool `toml:"proposals_enabled"`
	// PolicyFile points to the local protection-policy TOML; default ~/.config/ibkr/policies/protection-policy.toml.
	PolicyFile string `toml:"policy_file"`
	// HotReload controls whether policy changes are reloaded while the daemon runs; default true.
	HotReload *bool `toml:"hot_reload"`
	// ReloadInterval controls how often the daemon checks policy-file changes; default 30s.
	ReloadInterval duration `toml:"reload_interval"`
	// ProposalCadence controls how often the daemon refreshes protection proposals; default 30s.
	ProposalCadence duration `toml:"proposal_cadence"`
	// FastPathEnabled allows manual proposal preview/submit to use the immediate
	// revalidation path; default true so paper protection stops remain usable.
	// Trading write gates still own broker-submit authority.
	FastPathEnabled *bool `toml:"fast_path_enabled"`
}

type Config struct {
	Gateway       Gateway         `toml:"gateway"`
	Daemon        Daemon          `toml:"daemon"`
	Trading       Trading         `toml:"trading"`
	Rulebook      Rulebook        `toml:"rulebook"`
	AutoTrade     AutoTrade       `toml:"auto_trade"`
	Opportunities Opportunities   `toml:"opportunities"`
	Flex          Flex            `toml:"flex"`
	SPX           SPX             `toml:"spx"`
	Scans         map[string]Scan `toml:"scans"`
}

type Daemon struct {
	// IdleTimeout is how long the auto-spawned daemon stays alive between CLI calls (default 15m, accepts any Go duration string like "1h" or "0s"); set "0s" to disable idle-shutdown when running long cold-start jobs such as the first breadth fan-out under `canary daemon --foreground`.
	IdleTimeout duration `toml:"idle_timeout"`
	// LogLevel is the daemon's log verbosity — one of "debug", "info" (default), "warn", or "error".
	LogLevel string `toml:"log_level"`
}

type Flex struct {
	// Enabled turns the daily Flex statement fetch on; default false.
	Enabled bool `toml:"enabled"`
	// QueryID is the IBKR Flex query id to fetch (create the query in
	// Account Management with cash transactions, transfers, and equity
	// summary sections); required when enabled.
	QueryID string `toml:"query_id"`
	// TokenPath points to a file holding only the Flex Web Service token;
	// default ~/.config/ibkr/flex-token (mode 0600). The token itself never
	// belongs in config.toml, and no surface ever echoes it.
	TokenPath string `toml:"token_path"`
}

type Gateway struct {
	// Host pins the IB Gateway / TWS host; empty (the default) defers to auto-discovery on loopback (127.0.0.1), any non-empty value skips probing.
	Host string `toml:"host"`
	// Port pins the IB Gateway / TWS API port (typically 4001/4002 for IB Gateway live/paper, 7496/7497 for TWS live/paper); absent (nil) defers to port-probing during discovery.
	Port *int `toml:"port"`
	// ClientID pins the IBKR API clientID for the primary connection (default 15); collisions are treated as a stale-client/operator issue and are not auto-walked to neighboring reserved IDs.
	ClientID *int `toml:"client_id"`
	// BreadthClientID is the IBKR clientID used by the dedicated
	// historical-bar connector that backs the SPX breadth refresh.
	// Default 16 (one above the primary's default 15). Pinned to its
	// own connection so breadth's 503-name fan-out runs against a
	// separate 40-msg/sec and 60-historical/10-min rate-limit budget
	// rather than competing with interactive RPCs and the gamma
	// option-leg fan-out on the primary client. Collisions are treated
	// as stale-client/operator issues, not silently shifted to another
	// role's reserved ID.
	BreadthClientID *int `toml:"breadth_client_id"`
	// Account pins the IBKR account ID like "U1234567"; empty (default) defers to the gateway's managedAccounts list — fine for single-account logins, required disambiguator when the login carries multiple accounts.
	Account string `toml:"account"`
	// TLS pins TLS mode for the API socket: absent (nil) auto-tries plain first then TLS, `true` forces TLS-only with no plain fallback, `false` forces plain — setting the field disables fallback in either direction.
	TLS *bool `toml:"tls"`
}

type Opportunities struct {
	// Enabled controls whether the daemon may produce advisory opportunities; default true, and opportunities are not broker writes unless separately submitted by an explicitly enabled trading path.
	Enabled *bool `toml:"enabled"`
	// PolicyFile points to the local opportunity-policy TOML; default ~/.config/ibkr/policies/opportunity-policy.toml.
	PolicyFile string `toml:"policy_file"`
	// RefreshCadence controls how often the daemon refreshes opportunities; default 2m.
	RefreshCadence duration `toml:"refresh_cadence"`
	// HotReload controls whether opportunity policy changes are reloaded while the daemon runs; default true.
	HotReload *bool `toml:"hot_reload"`
	// ReloadInterval controls how often the daemon checks the opportunity policy file for changes; default 30s.
	ReloadInterval duration `toml:"reload_interval"`
}

type Resolved struct {
	Gateway       Gateway
	Daemon        Daemon
	Trading       Trading
	Rulebook      Rulebook
	AutoTrade     AutoTrade
	Opportunities Opportunities
	Flex          Flex
	SPX           SPX
	Scans         map[string]Scan
}

type Rulebook struct {
	// TerminalEvidenceFile points to an optional JSON document of reviewed,
	// exact-contract terminal/non-reporting issuer evidence for rules 6-8. An
	// empty path leaves the retained daemon.db authority unchanged.
	TerminalEvidenceFile string `toml:"terminal_evidence_file"`
}

type SPX struct {
	// MembersAutoRefresh controls whether the daemon refreshes the S&P 500 constituent list from Wikipedia daily at 02:30 ET (default true; set false to pin the embedded baseline) — overridden symmetrically by the `CANARY_SPX_MEMBERS_AUTO_REFRESH` env var (`1` force-on, `0` force-off).
	//
	// Pointer type lets the daemon distinguish an explicit `members_auto_refresh = true` from "field absent" — both enable the refresher today, but a future "user opted in" vs "default behaviour" distinction stays additive.
	MembersAutoRefresh *bool `toml:"members_auto_refresh"`
}

type Scan struct {
	// Type is the IBKR scanner code, such as TOP_PERC_GAIN; dump your gateway's catalog with `canary scan params`.
	Type string `toml:"type"`
	// Exchange is the IBKR scanner locationCode, such as STK.US.MAJOR or STK.NASDAQ.
	Exchange string `toml:"exchange"`
	// Instrument is the IBKR scanner instrument token, such as STK for US stocks or STOCK.EU for European stocks; empty defaults to STK.
	Instrument string `toml:"instrument"`
	// Limit caps returned rows for this preset.
	Limit int `toml:"limit"`
	// Timeout is the per-preset scan timeout; <=0 falls back to the daemon default (20s).
	Timeout duration `toml:"timeout"`
}

type Trading struct {
	// Mode selects the local order-entry state: "disabled" (default), "paper", or "live".
	Mode string `toml:"mode"`
	// MaxNotional caps every equity/ETF order before broker WhatIf; apparent close/reduce orders are not exempt because this client cannot prove that a manual TWS order has not already consumed the exit capacity. Default 10000 in account currency.
	MaxNotional float64 `toml:"max_notional"`
	// MaxOptionContracts caps every single-leg option order; apparent close/reduce orders are not exempt because account-global working-order authority is incomplete. Default 5.
	MaxOptionContracts int `toml:"max_option_contracts"`
	// AllowStockShort permits stock short/opening flip previews when true. Default false.
	AllowStockShort bool `toml:"allow_stock_short"`
	// AllowOptionSellToOpen permits option sell-to-open previews when true. Default false.
	AllowOptionSellToOpen bool `toml:"allow_option_sell_to_open"`
	// PaperSmokeMaxAge is the freshness window for the paper-smoke evidence reported in trading status. The smoke is informational at runtime and enforced by the release pipeline; it does not gate live enablement. Defaults to 168h.
	PaperSmokeMaxAge duration `toml:"paper_smoke_max_age"`
}