source

type Agent struct {
	Enabled bool   `toml:"enabled"`
	Scope   string `toml:"scope,omitempty"` // "user" | "project"
}

type Canonical struct {
	Config       Config
	MCPServers   []MCPServer
	Skills       []Skill
	Subagents    []Subagent
	Commands     []Command
	Hooks        []Hook
	LSPServers   []LSPServer
	Plugins      []Plugin
	Marketplaces []Marketplace
	Memory       Memory
	// Project holds the project-only canonical set by project.Merge. It is nil
	// for a user-scope canonical (one loaded directly from ~/.agentsync/ without
	// a project overlay). Scope-aware render paths (apply/status/diff/reconcile
	// --scope project) render from Project instead of the merged canonical so
	// user-scope items are not duplicated into the project directory.
	Project *Canonical
}

type Command struct {
	Name        string         // filename without .md extension
	Frontmatter map[string]any // YAML frontmatter
	Body        string         // markdown body
}

type Config struct {
	Agents               map[string]Agent           `toml:"agents"`
	Updates              UpdateDefaults             `toml:"updates"`
	Secrets              SecretsConfig              `toml:"secrets"`
	Memory               MemoryConfig               `toml:"memory"`
	DestinationGitBackup DestinationGitBackupConfig `toml:"destination_directory_git_backup"`
}

type DestinationGitBackupConfig struct {
	Mode        string `toml:"mode,omitempty"`         // "prompt" | "on" | "off"
	AuthorName  string `toml:"author_name,omitempty"`  // commit author override
	AuthorEmail string `toml:"author_email,omitempty"` // commit email override
}

type Hook struct {
	Event   string // e.g. "PreToolUse"
	Matcher string // glob/regex string
	Type    string // "command"
	Command string // shell command
}

type LSPServer struct {
	ID   string
	Spec LSPServerSpec
}

type LSPServerSpec struct {
	Command string            `toml:"command,omitempty"`
	Args    []string          `toml:"args,omitempty"`
	Env     map[string]string `toml:"env,omitempty"`
	URL     string            `toml:"url,omitempty"`
	Headers map[string]string `toml:"headers,omitempty"`
	// Agents / Enabled mirror MCPServerSpec: they are source-only targeting
	// fields that the rendered destination never carries, so capture must
	// preserve them (via source.ReadLSP) rather than reset them from the dest.
	Agents  []string `toml:"agents,omitempty"`  // ["*"] or ["claude",...]; empty = all
	Enabled *bool    `toml:"enabled,omitempty"` // nil means default-on
	// Extra carries native LSP-server fields agentsync does not model, captured
	// on ingest and rendered back verbatim. Passthrough only — see the note on
	// MCPServerSpec.Extra (never secret-resolved or walked; the capture leak
	// backstop scans it).
	Extra map[string]any `toml:"extra,omitempty"`
}

type MCPServer struct {
	ID     string        `toml:"-"` // filename minus .toml
	Server MCPServerSpec `toml:"server"`
}

type MCPServerSpec struct {
	Type    string            `toml:"type"` // stdio | http | sse
	Command string            `toml:"command,omitempty"`
	Args    []string          `toml:"args,omitempty"`
	URL     string            `toml:"url,omitempty"`
	Headers map[string]string `toml:"headers,omitempty"`
	Env     map[string]string `toml:"env,omitempty"`
	Agents  []string          `toml:"agents,omitempty"`  // ["*"] or ["claude","opencode"]
	Enabled *bool             `toml:"enabled,omitempty"` // nil means default-on
	// Extra carries native MCP-server fields agentsync does not model (e.g.
	// timeout, disabled, cwd), captured on ingest and rendered back verbatim so
	// import/reconcile/apply are not lossy for them. It is PASSTHROUGH ONLY:
	// values are never secret-resolved (a ${secret:…} here is written literally,
	// not substituted) and never visited by walkSecretFields — so it stays out of
	// the secret machinery. The capture leak backstop (secrets.ResidualSecretCleartext)
	// scans it instead, refusing a write that would persist a live secret value.
	Extra map[string]any `toml:"extra,omitempty"`
}

type Marketplace struct {
	// Name is the declared marketplace name (from marketplace.json, falling back
	// to a URL-derived slug) — untrusted.Text so a print site sanitizes it by
	// construction; use Unverified() for path/lookup use.
	Name        untrusted.Text  `toml:"-"`
	Marketplace MarketplaceSpec `toml:"marketplace"`
}

type MarketplaceSpec struct {
	URL               string `toml:"url"`
	Ref               string `toml:"ref,omitempty"`
	DefaultUpdateMode string `toml:"default_update_mode,omitempty"`
}

type Memory struct {
	Body      string            // raw AGENTS.md (with @import directives); expansion happens at render via ExpandMemoryImports
	Fragments map[string]string // fragment body, keyed by slash path under memory/fragments/ (loaded recursively)
}

type MemoryConfig struct {
	// Banner controls the agentsync "managed file" notice prepended to every
	// rendered memory file (CLAUDE.md, AGENTS.md, …) — see RenderManagedMemory.
	// It is ON by default; set `banner = false` to opt out. The field is a *bool
	// so "unset" (nil → default-on) is distinguishable from "explicitly false",
	// which the project-overlay merge needs to tell an explicit project override
	// from an inherited default.
	Banner *bool `toml:"banner,omitempty"`
}

type Plugin struct {
	// ID is the plugin's filesystem id (the plugins/<id>.toml stem), originating
	// from a marketplace install — untrusted.Text so a print site sanitizes it by
	// construction; use Unverified() for path/lookup use.
	ID     untrusted.Text `toml:"-"`
	Plugin PluginSpec     `toml:"plugin"`
}

type PluginSpec struct {
	// ID is "<name>@<marketplace>" and Version comes from the fetched manifest;
	// both are untrusted.Text (see Plugin.ID). ManifestSHA/Update are
	// agentsync-controlled and stay plain strings.
	ID          untrusted.Text `toml:"id"`
	Version     untrusted.Text `toml:"version,omitempty"`
	ManifestSHA string         `toml:"manifest_sha,omitempty"`
	Update      string         `toml:"update,omitempty"` // pinned | track | manual
	Agents      []string       `toml:"agents,omitempty"`
	// Disabled, when true, suppresses the plugin's projection during
	// marketplace.LoadProjected. `agentsync plugin disable <id>` sets this.
	// Without honouring it there, the CLI's TOML write would be a no-op:
	// projection would still surface the plugin's MCP servers / skills / etc.
	// into the canonical model and apply would ship them.
	Disabled bool `toml:"disabled,omitempty"`
}

type SecretsConfig struct {
	Backend      string `toml:"backend"` // "env" | "age"
	File         string `toml:"file"`
	Recipient    string `toml:"recipient"`
	IdentityFile string `toml:"identity_file"`
}

type Skill struct {
	Name        string         `toml:"-"` // dirname
	Frontmatter map[string]any `toml:"-"` // YAML frontmatter parsed
	Body        string         `toml:"-"` // markdown body
	Files       []SkillFile    `toml:"-"` // bundled files other than SKILL.md
}

type SkillFile struct {
	Path    string `toml:"-"`
	Content []byte `toml:"-"`
	Mode    uint32 `toml:"-"`
}

type Subagent struct {
	Name        string         // filename without .md extension
	Frontmatter map[string]any // YAML frontmatter (description, tools, model, color, etc.)
	Body        string         // markdown body
}

type UpdateDefaults struct {
	DefaultMode     string `toml:"default_mode"`     // pinned | track | manual
	DefaultInterval string `toml:"default_interval"` // e.g. "24h"
}