config

type AgentConfig struct {
	Endpoint             string
	SpaceID              string
	UpdateAuthorizedKeys bool
	ServicePassword      string
	VSCodeTunnel         string
	SyslogPort           int
	APIPort              int
	DisableTerminal      bool
	DisableSpaceIO       bool
	MethodsFile          string
	DNSResolver          bool
	// Scriptling plugins to load into space script environments: explicit
	// executables (Plugins) and directories to scan (PluginDirs), mirroring
	// the scriptling CLI's --plugin / --plugin-dir. Empty by default.
	Plugins    []string
	PluginDirs []string
	Port       PortConfig
	TLS        TLSConfig

	// Registration handshake: the per-space key proving the agent may
	// register for SpaceID, and the pinned fingerprint (sha256 of the
	// server certificate's public key) authenticating the agent listener.
	// Injected into containers at create time; passed by hand for manual
	// agents. Either may be empty for pre-upgrade provisioning.
	RegistrationKey       string
	ServerCertFingerprint string
}

type AuditConfig struct {
	Retention   int
	Routing     string // "internal" | "external" | "both"
	AuditStream string // stream label for external log driver, defaults to "audit"

	// Data-access auditing for environments holding production data copies.
	// Both default off — noisy for local development.
	FileOperations bool // audit space file read/write/copy operations
	SpaceSessions  bool // audit interactive session opens (terminal, code-server)
}

type BadgerDBConfig struct {
	Enabled bool
	Path    string
}

type ChatConfig struct {
	Enabled          bool
	Type             string // API protocol of the endpoint at BaseURL: openai, anthropic, google, ollama, xai. Takes precedence over Provider.
	Provider         string
	APIKey           string
	BaseURL          string
	OpenAIAPIKey     string // Deprecated: use APIKey
	OpenAIBaseURL    string // Deprecated: use BaseURL
	Model            string
	MaxTokens        int
	Temperature      *float32 // nil leaves the provider's default
	SystemPromptFile string
	SystemPrompt     string
	ReasoningEffort  string
	UIStyle          string
}

type ClusterConfig struct {
	Key            string
	AdvertiseAddr  string
	BindAddr       string
	Peers          []string
	AllowLeafNodes bool
	Compression    bool
	TCPOnly        bool
	// MinClusterSize is the leader-election quorum floor: the fewest nodes
	// that must be visible before a zone leader can be elected or kept.
	// Set it to the majority of the smallest zone you will run — 2 for
	// two- or three-server production zones. The default of 1 suits
	// single-machine testing, where a lone server must elect itself.
	MinClusterSize int
}

type DockerConfig struct {
	Host string
}

type KVMConfig struct {
	// ImagesPath is the directory KVM base images are downloaded into and
	// per-space disk overlays + cloud-init seeds live under. It must be
	// writable by knot and readable by the qemu user libvirt runs VMs as —
	// the libvirt images dir (/var/lib/libvirt/images) is the conventional
	// choice when knot runs as root.
	ImagesPath string
	// CloudImagePath is a read-only library of cloud images admins keep on
	// the node. A bare image name in a KVM spec (e.g. "ubuntu-24.04")
	// resolves to <CloudImagePath>/<name> (with ".qcow2" appended when the
	// name has no extension). Empty follows ImagesPath
	// (<ImagesPath>/cloud-images), so relocating the images path moves the
	// library too unless this pins it elsewhere.
	CloudImagePath string
	// BaseImagePath is the cache for base images downloaded from URLs in
	// KVM specs: each file lands under it named after the URL's last path
	// segment and is reused by every later space on the node. Empty follows
	// ImagesPath (<ImagesPath>/base), so relocating the images path moves
	// the cache too unless this pins it elsewhere.
	BaseImagePath string
	// Resolvers are the DNS servers handed to bridged VMs via cloud-init.
	// Defaults to Cloudflare's pair; the gateway is no longer injected
	// implicitly — admins who want the router to answer DNS list it here.
	Resolvers []string
}

type LogOutputConfig struct {
	URL      string
	Format   string
	Stream   string
	Headers  map[string]string
	Username string // optional HTTP basic auth username
	Password string // optional HTTP basic auth password
	Token    string // optional bearer token (Authorization: Bearer <token>); takes precedence over basic auth
}

type MCPConfig struct {
	Enabled       bool                    `toml:"enabled"`
	RemoteServers []MCPRemoteServerConfig `toml:"remote_servers"`
}

type MCPRemoteServerConfig struct {
	Namespace      string   `toml:"namespace"`
	URL            string   `toml:"url"`             // HTTP(S) URL of the remote server (empty for stdio)
	Command        string   `toml:"command"`         // stdio: executable to launch as a subprocess (empty for HTTP)
	Args           []string `toml:"args"`            // stdio: command-line arguments
	Env            []string `toml:"env"`             // stdio: extra KEY=VALUE environment variables (merged on top of the parent environment)
	Token          string   `toml:"token"`           // HTTP bearer token
	ToolVisibility string   `toml:"tool_visibility"` // "native" or "on-demand"
	Notifications  bool     `toml:"notifications"`   // accept listChanged notifications from this server and propagate them
}

type MySQLConfig struct {
	Enabled               bool
	Host                  string
	Port                  int
	User                  string
	Password              string
	Database              string
	ConnectionMaxIdle     int
	ConnectionMaxOpen     int
	ConnectionMaxLifetime int
}

type NomadConfig struct {
	Host   string
	Token  string
	DC     string // Nomad datacenter, exposed as ${{ .nomad.dc }}. Defaults to NOMAD_DC.
	Region string // Nomad region, exposed as ${{ .nomad.region }}. Defaults to NOMAD_REGION.
}

type OriginConfig struct {
	Server string
	Token  string
}

type PodmanConfig struct {
	Host string
}

type PortConfig struct {
	CodeServer int
	VNCHttp    int
	SSH        int
	TCPPorts   []string
	HTTPPorts  []string
	HTTPSPorts []string
}

type PostgresConfig struct {
	Enabled               bool
	Host                  string
	Port                  int
	User                  string
	Password              string
	Database              string
	SSLMode               string
	ConnectionMaxIdle     int
	ConnectionMaxOpen     int
	ConnectionMaxLifetime int
}

type RedisConfig struct {
	Enabled    bool
	Hosts      []string
	Password   string
	DB         int
	MasterName string
	KeyPrefix  string
}

type ServerAddr struct {
	HttpServer string
	WsServer   string
	ApiToken   string
}

type ServerConfig struct {
	Listen                 string
	ListenAgent            string
	URL                    string
	AgentEndpoint          string
	WildcardDomain         string
	HTMLPath               string
	TemplatePath           string
	AgentPath              string
	PackagePath            string
	PrivateFilesPath       string
	FilesPath              string // file storage directory; empty disables file storage
	FilesDefaultQuotaMB    int    // quota for users whose own and group limits are all 0; 0 = unlimited
	FilesDefaultMaxBuckets int    // bucket limit for users whose own and group limits are all 0; 0 = unlimited
	PublicFilesPath        string
	DownloadPath           string
	DisableSpaceCreate     bool
	ListenTunnel           string
	TunnelDomain           string
	TunnelServer           string
	TerminalWebGL          bool
	EncryptionKey          string
	Zone                   string
	Hostname               string
	Timezone               string
	LeafNode               bool
	// DesktopMode is set when the server was started by bare `knot`
	// (desktop / leaf mode) rather than `knot server`.
	DesktopMode bool
	// ConfigPath is the config file the server was started from, used by
	// the in-server setup wizard to write updates back.
	ConfigPath         string
	AuthIPRateLimiting bool
	// Failed-login rate limiting: block auth after AuthRateLimitAttempts
	// failures within AuthRateLimitWindow seconds, for AuthRateLimitBlock
	// seconds.
	AuthRateLimitAttempts int
	AuthRateLimitWindow   int // seconds
	AuthRateLimitBlock    int // seconds
	DNSEnabled            bool
	DNSListen             string
	Nameservers           []string
	MCPToolTimeout        int
	ScriptFSAllowedPaths  []string
	ScriptNetPolicyFile   string
	Origin                OriginConfig
	TOTP                  TOTPConfig
	UI                    UIConfig
	Cluster               ClusterConfig
	MySQL                 MySQLConfig
	Postgres              PostgresConfig
	BadgerDB              BadgerDBConfig
	Redis                 RedisConfig
	Audit                 AuditConfig
	LogOutput             LogOutputConfig
	Docker                DockerConfig
	Podman                PodmanConfig
	Nomad                 NomadConfig
	KVM                   KVMConfig
	// EnabledBackends is the admin's platform allowlist: which backends the
	// template editor offers and template creation accepts (docker, podman,
	// apple, nomad, kvm). Empty means all. Independent of runtime
	// detection — a listed backend still needs a node that can run it.
	EnabledBackends           []string
	TLS                       TLSConfig
	MCP                       MCPConfig
	Chat                      ChatConfig
	MCPToolsPath              string
	MCPToolsDisabled          []string
	LibDir                    string
	KnotLibPath               string
	PluginsPath               string
	BaseImageRegistry         string
	BaseImagesManifest        string
	BaseImageRegistryUser     string
	BaseImageRegistryPassword string
	BaseImagesUpdateEnabled   bool
	BaseImagesUpdateURL       string
}

type TLSConfig struct {
	CertFile   string
	KeyFile    string
	UseTLS     bool
	SkipVerify bool
}

type TOTPConfig struct {
	Enabled bool
	Window  int
	Issuer  string
}

type UIConfig struct {
	HideSupportLinks   bool
	HideAPITokens      bool
	EnableGravatar     bool
	LogoURL            string
	LogoInvert         bool
	EnableBuiltinIcons bool
	Icons              []string
}