config

type Config struct {
	// Type of repository: "sleuth", "git", or "path"
	Type RepositoryType `json:"type"`

	// ServerURL is the Sleuth server URL (only for type=sleuth)
	ServerURL string `json:"serverUrl,omitempty"`

	// AuthToken is the OAuth token for Sleuth server or an HTTP(S) git token.
	AuthToken string `json:"authToken,omitempty"`

	// AuthUsername is the HTTP(S) basic-auth username used with AuthToken for
	// git repositories. Empty uses a host-specific default.
	AuthUsername string `json:"authUsername,omitempty"`

	// RepositoryURL is the repository URL
	// - For git: git repository URL (https://github.com/org/repo.git)
	// - For path: file:// URL pointing to local directory (file:///path/to/repo)
	RepositoryURL string `json:"repositoryUrl,omitempty"`

	// Identity is the email used to resolve team and user scopes when
	// this Config is the active profile. Empty falls back to git config.
	Identity string `json:"identity,omitempty"`

	// ProfileName is the active profile name this Config was loaded from.
	// Populated by Load(); not serialized.
	ProfileName string `json:"-"`

	// ForceEnabledClients is the list of client IDs that should always be enabled,
	// even if not detected.
	ForceEnabledClients []string `json:"forceEnabledClients,omitempty"`

	// ForceDisabledClients is the list of client IDs that should always be disabled,
	// even if detected.
	ForceDisabledClients []string `json:"forceDisabledClients,omitempty"`
}

type MultiProfileConfig struct {
	// DefaultProfile is the profile that owns "write" actions when no
	// --profile flag is given (sx add, sx role, sx team ...). It is also
	// the conflict tiebreaker when multiple active profiles publish an
	// asset with the same name. Always a member of ActiveProfiles.
	DefaultProfile string `json:"defaultProfile"`

	// ActiveProfiles is the set of profiles considered "on" for read
	// operations (sx install, sx list). When more than one is active,
	// install merges applicable assets from every active profile's vault.
	// Order is precedence for conflict resolution when DefaultProfile
	// isn't in the active set.
	ActiveProfiles []string `json:"activeProfiles,omitempty"`

	// Profiles is a map of profile name to profile configuration
	Profiles map[string]*Profile `json:"profiles"`

	// EnabledClients is DEPRECATED - use ForceEnabledClients/ForceDisabledClients instead.
	// Kept for migration purposes only.
	EnabledClients []string `json:"enabledClients,omitempty"`

	// ForceEnabledClients is the list of client IDs that should always be enabled,
	// even if not detected. This is global across all profiles.
	ForceEnabledClients []string `json:"forceEnabledClients,omitempty"`

	// ForceDisabledClients is the list of client IDs that should always be disabled,
	// even if detected. This is global across all profiles.
	ForceDisabledClients []string `json:"forceDisabledClients,omitempty"`

	// BootstrapOptions stores user consent for bootstrap items (hooks, MCP servers).
	// Keyed by option key, nil/missing = yes (backwards compatible).
	BootstrapOptions map[string]*bool `json:"bootstrapOptions,omitempty"`
}

type OAuthClient struct {
	// contains filtered or unexported fields
}

type OAuthDeviceCodeResponse struct {
	DeviceCode              string `json:"device_code"`
	UserCode                string `json:"user_code"`
	VerificationURI         string `json:"verification_uri"`
	VerificationURIComplete string `json:"verification_uri_complete,omitempty"`
	ExpiresIn               int    `json:"expires_in"`
	Interval                int    `json:"interval,omitempty"`
}

type OAuthTokenResponse struct {
	AccessToken  string `json:"access_token"`
	TokenType    string `json:"token_type"`
	ExpiresIn    int    `json:"expires_in,omitempty"`
	RefreshToken string `json:"refresh_token,omitempty"`
	Error        string `json:"error,omitempty"`
	ErrorDesc    string `json:"error_description,omitempty"`
}

type Profile struct {
	// Type of repository: "sleuth", "git", or "path"
	Type RepositoryType `json:"type"`

	// ServerURL is the Sleuth server URL (only for type=sleuth)
	ServerURL string `json:"serverUrl,omitempty"`

	// AuthToken is the OAuth token for Sleuth server or an HTTP(S) git token.
	AuthToken string `json:"authToken,omitempty"`

	// AuthUsername is the HTTP(S) basic-auth username used with AuthToken for
	// git repositories. Empty uses a host-specific default.
	AuthUsername string `json:"authUsername,omitempty"`

	// RepositoryURL is the repository URL
	// - For git: git repository URL (https://github.com/org/repo.git)
	// - For path: file:// URL pointing to local directory (file:///path/to/repo)
	RepositoryURL string `json:"repositoryUrl,omitempty"`

	// Identity is the email used to resolve team and user scopes for this
	// profile. When empty, sx falls back to `git config user.email`. Set
	// per-profile so a single machine can use different identities for
	// different vaults (e.g. work vs personal email).
	Identity string `json:"identity,omitempty"`
}

type RepositoryType string