config

type AdminAuthConfig struct {
	Username string `mapstructure:"username"` // Empty means auth disabled
	Password string `mapstructure:"password"` // Empty means auth disabled
}

type AdminConfig struct {
	Enabled bool            `mapstructure:"enabled"` // Enable embedded admin UI/API (default true)
	Auth    AdminAuthConfig `mapstructure:"auth"`
}

type Config struct {
	Dir             string                    `mapstructure:"dir"` // base .tokenomics directory (default ".tokenomics")
	Server          ServerConfig              `mapstructure:"server"`
	Admin           AdminConfig               `mapstructure:"admin"`
	Storage         StorageConfig             `mapstructure:"storage"`
	Session         SessionConfig             `mapstructure:"session"`
	Security        SecurityConfig            `mapstructure:"security"`
	Logging         LoggingConfig             `mapstructure:"logging"`
	Providers       map[string]ProviderConfig `mapstructure:"providers"`
	Events          EventsConfig              `mapstructure:"events"`
	Remote          RemoteConfig              `mapstructure:"remote"`
	Ledger          LedgerConfig              `mapstructure:"ledger"`
	CLIMaps         map[string]string         `mapstructure:"cli_maps"`         // Map CLI names to providers (e.g. "claude" -> "anthropic")
	DefaultProvider string                    `mapstructure:"default_provider"` // Default provider when not specified in policy
}

type EventsConfig struct {
	Webhooks []WebhookEndpoint `mapstructure:"webhooks"`
}

type FileLogging struct {
	Enabled bool   `mapstructure:"enabled"` // Enable file logging (default false)
	Level   string `mapstructure:"level"`   // Log level for file: "debug", "info", "warn", "error" (default "info")
	Path    string `mapstructure:"path"`    // Log file path (default: {dir}/tokenomics.log)
}

type LedgerConfig struct {
	Enabled     bool `mapstructure:"enabled"`      // Enable session ledger (default true)
	Memory      bool `mapstructure:"memory"`       // Record conversation content (default true)
	EventLedger bool `mapstructure:"event_ledger"` // Capture structured communication events (default false, dual-write phase)
}

type LoggingConfig struct {
	Level          string      `mapstructure:"level"`           // "debug", "info" (default), "warn", "error"
	Format         string      `mapstructure:"format"`          // "json" (default), "text"
	RequestBody    bool        `mapstructure:"request_body"`    // Log full request bodies (default false)
	ResponseBody   bool        `mapstructure:"response_body"`   // Log full response bodies (default false)
	HideTokenHash  bool        `mapstructure:"hide_token_hash"` // Mask token hashes in logs (default false)
	DisableRequest bool        `mapstructure:"disable_request"` // Suppress per-request structured logs (default false)
	ProxyLogFile   string      `mapstructure:"proxy_log_file"`  // Proxy debug log filename under `dir` (default "proxy.log")
	File           FileLogging `mapstructure:"file"`            // Application log file configuration
}

type ProviderConfig struct {
	UpstreamURL string            `mapstructure:"upstream_url" json:"upstream_url"`
	APIKeyEnv   string            `mapstructure:"api_key_env" json:"api_key_env"`
	BaseURLEnv  string            `mapstructure:"base_url_env" json:"base_url_env,omitempty"` // Env var for base URL override (e.g. "OPENAI_BASE_URL")
	AuthHeader  string            `mapstructure:"auth_header" json:"auth_header,omitempty"`   // Custom auth header name (default: "Authorization")
	AuthScheme  string            `mapstructure:"auth_scheme" json:"auth_scheme,omitempty"`   // "bearer" (default), "header" (raw value in auth_header), "query" (appended as ?key=)
	Headers     map[string]string `mapstructure:"headers" json:"headers,omitempty"`           // Extra headers sent with every request
	Models      []string          `mapstructure:"models" json:"models,omitempty"`             // Known model prefixes (informational)
	ChatPath    string            `mapstructure:"chat_path" json:"chat_path,omitempty"`       // Override chat completions path (default: /v1/chat/completions)
}

type RedisConfig struct {
	Addr     string `mapstructure:"addr"`
	Password string `mapstructure:"password"`
	DB       int    `mapstructure:"db"`
}

type RemoteConfig struct {
	URL      string          `mapstructure:"url"`      // Central server URL (e.g. http://config-server:9090)
	APIKey   string          `mapstructure:"api_key"`  // Shared API key for authentication
	SyncSec  int             `mapstructure:"sync"`     // Sync interval in seconds (0 = startup only)
	Insecure bool            `mapstructure:"insecure"` // Skip TLS verification
	Webhook  WebhookReceiver `mapstructure:"webhook"`  // Inbound webhook for push-based sync
}

type SecurityConfig struct {
	HashKeyEnv       string `mapstructure:"hash_key_env"`
	EncryptionKeyEnv string `mapstructure:"encryption_key_env"`
}

type ServerConfig struct {
	HTTPPort    int       `mapstructure:"http_port"`
	HTTPSPort   int       `mapstructure:"https_port"`
	TLS         TLSConfig `mapstructure:"tls"`
	UpstreamURL string    `mapstructure:"upstream_url"`
}

type SessionConfig struct {
	Backend string      `mapstructure:"backend"`
	Redis   RedisConfig `mapstructure:"redis"`
}

type StorageConfig struct {
	DBPath string `mapstructure:"db_path"`
}

type TLSConfig struct {
	Enabled  bool   `mapstructure:"enabled"`
	CertFile string `mapstructure:"cert_file"`
	KeyFile  string `mapstructure:"key_file"`
	AutoGen  bool   `mapstructure:"auto_gen"`
	CertDir  string `mapstructure:"cert_dir"`
}

type WebhookEndpoint struct {
	URL        string   `mapstructure:"url"`
	Secret     string   `mapstructure:"secret"`      // Shared secret sent as X-Webhook-Secret
	SigningKey string   `mapstructure:"signing_key"` // HMAC-SHA256 signing key for X-Webhook-Signature
	Events     []string `mapstructure:"events"`      // Event type filter (supports trailing * wildcard); empty = all
	TimeoutSec int      `mapstructure:"timeout"`     // HTTP timeout in seconds (default 10)
	Insecure   bool     `mapstructure:"insecure"`    // Skip TLS certificate verification (for self-signed certs)
}

type WebhookReceiver struct {
	Enabled      bool   `mapstructure:"enabled"`       // Enable the webhook receiver endpoint
	Path         string `mapstructure:"path"`          // URL path (default: /v1/webhook)
	Secret       string `mapstructure:"secret"`        // Expected X-Webhook-Secret header value
	SigningKey   string `mapstructure:"signing_key"`   // HMAC-SHA256 key for X-Webhook-Signature verification
	AutoRegister bool   `mapstructure:"auto_register"` // Auto-register this proxy's webhook with the central server on startup
	CallbackURL  string `mapstructure:"callback_url"`  // Webhook callback URL the central server will POST to (required if auto_register is true)
	Insecure     bool   `mapstructure:"insecure"`      // Tell the server to skip TLS verification when delivering webhooks to this client
}