config

type Audit struct {
	Path string `yaml:"path"`
	// RedactKeys are argument keys whose values are masked in the log.
	RedactKeys []string `yaml:"redact_keys"`
}

type Config struct {
	Mode        Mode                `yaml:"mode"`
	DefaultHost string              `yaml:"default_host"`
	Hosts       map[string]Host     `yaml:"hosts"`
	Tools       map[string]ToolRule `yaml:"tools"`
	Audit       Audit               `yaml:"audit"`
	Files       Files               `yaml:"files"`
	HTTP        HTTP                `yaml:"http"`
	// TimeoutSeconds is the per-command timeout. Default 30.
	TimeoutSeconds int `yaml:"timeout_seconds"`
	// MaxOutputBytes caps tool output returned to the model. Default 48 KiB.
	MaxOutputBytes int `yaml:"max_output_bytes"`
}

type Files struct {
	// AllowPaths are glob-ish path prefixes readable by file tools.
	AllowPaths []string `yaml:"allow_paths"`
	// MaxBytes caps file_read output. Default 64 KiB.
	MaxBytes int64 `yaml:"max_bytes"`
}

type HTTP struct {
	Addr string `yaml:"addr"`
	// AuthToken is required as "Authorization: Bearer <token>" when set.
	AuthToken string `yaml:"auth_token"`
}

type Host struct {
	// Addr is the SSH address (host or host:port). Empty for the implicit local host.
	Addr string `yaml:"addr"`
	User string `yaml:"user"`
	// Key is the path to a private key. Falls back to ssh-agent, then default keys.
	Key string `yaml:"key"`
	// Mode overrides the global mode for this host.
	Mode Mode `yaml:"mode"`
	Port int  `yaml:"port"`
}

type Mode string

type ToolRule struct {
	// Enabled=false removes the tool entirely. Defaults to true except shell_exec.
	Enabled *bool `yaml:"enabled"`
	// AllowTargets restricts which targets (service names, container names,
	// units, paths) the tool may touch. Glob patterns. Empty = all.
	AllowTargets []string `yaml:"allow_targets"`
	// Approval: "always", "never", or "" (default by mode: mutating tools
	// require approval in operate mode).
	Approval string `yaml:"approval"`
}