config

type BrowserDescriptor struct {
	Name              string                    `json:"name"`
	ExecutionLocation string                    `json:"executionLocation"`
	Transport         BrowserTransport          `json:"transport"`
	AllowedTools      []string                  `json:"allowedTools"`
	OutputArtifacts   map[string]OutputArtifact `json:"outputArtifacts,omitempty"`
}

type BrowserTransport struct {
	Type             string `json:"type" yaml:"type"`
	ExtensionID      string `json:"extensionId" yaml:"extensionId"`
	PortName         string `json:"portName" yaml:"portName"`
	RequestTimeoutMs int    `json:"requestTimeoutMs,omitempty" yaml:"requestTimeoutMs,omitempty"`
}

type Group[T any] struct {
	URL   string `yaml:"url,omitempty" json:"url,omitempty"`
	Items []T    `yaml:"items,omitempty" json:"items,omitempty"`
}

type MCPClient struct {
	// MetadataCacheIgnoredCookies lists explicitly known routing-only cookies.
	// They are still sent normally; only metadata cache identity ignores them.
	// Never include authentication or application-session cookies. Empty tracks all cookies.
	MetadataCacheIgnoredCookies []string `json:"metadataCacheIgnoredCookies,omitempty" yaml:"metadataCacheIgnoredCookies,omitempty"`

	ResolvedIdentity  *ResolvedServiceIdentity `json:"-" yaml:"-"`
	ExecutionLocation string                   `json:"executionLocation,omitempty" yaml:"executionLocation,omitempty"`
	BrowserTransport  *BrowserTransport        `json:"browserTransport,omitempty" yaml:"browserTransport,omitempty"`
	BrowserTools      []string                 `json:"browserTools,omitempty" yaml:"browserTools,omitempty"`
	// PrimitiveNamespaces optionally narrows discovered provider namespaces.
	// An empty list accepts the namespaces authorized by the provider.
	PrimitiveNamespaces []string `yaml:"primitiveNamespaces,omitempty" json:"primitiveNamespaces,omitempty"`
	// PrimitiveProviderIdentity optionally pins a provider instance. Replacing
	// an observed instance on an existing connection requires this declaration.
	PrimitiveProviderIdentity string `yaml:"primitiveProviderIdentity,omitempty" json:"primitiveProviderIdentity,omitempty"`
	*mcp.ClientOptions        `yaml:",inline" json:",inline"`
	SkillDiscovery            *SkillDiscovery        `yaml:"skillDiscovery,omitempty" json:"skillDiscovery,omitempty"`
	Async                     []*asynccfg.Config     `yaml:"async,omitempty" json:"async,omitempty"`
	Descriptions              map[string]string      `yaml:"descriptions,omitempty" json:"descriptions,omitempty"`
	Metadata                  map[string]interface{} `yaml:"metadata,omitempty" json:"metadata,omitempty"`
	// OutputArtifacts captures configured binary outputs before tool results
	// reach model context. Keys are exact, literal MCP tool names.
	OutputArtifacts map[string]OutputArtifact `yaml:"outputArtifacts,omitempty" json:"outputArtifacts,omitempty"`
	// Cacheable marks specific tools on this MCP server as eligible for
	// prompt-history supersession. Keys are tool names (exact match);
	// values indicate cacheability.
	Cacheable map[string]bool `yaml:"cacheable,omitempty" json:"cacheable,omitempty"`
	// ToolTimeoutSec overrides the default tool execution timeout when invoking
	// tools on this MCP server. When zero, a system default applies.
	ToolTimeoutSec int `yaml:"toolTimeoutSec,omitempty" json:"toolTimeoutSec,omitempty"`
	// DisableDelegatedAuth is the MCP-level delegated-auth kill switch. When
	// set on a server whose auth.mode is oauth, client creation fails with a
	// typed provider-disabled error; it never silently falls back to
	// workspace credentials.
	DisableDelegatedAuth bool `yaml:"disableDelegatedAuth,omitempty" json:"disableDelegatedAuth,omitempty"`
	// EagerLink asks an interactive Agently client to establish delegated OAuth
	// when this MCP server is first selected for use, before calling it remotely.
	// Discovery and workspace startup must not initiate the authorization flow.
	EagerLink bool `yaml:"eagerLink,omitempty" json:"eagerLink,omitempty"`
	// ToolsListVisibility declares whether tools/list is public workspace
	// metadata or private principal-scoped metadata. Remote servers default to
	// private when omitted. Public catalogs are warmed in the background and
	// reused from the shared registry; private catalogs are discovered lazily
	// and cached under the authenticated principal identity.
	ToolsListVisibility string `yaml:"toolsListVisibility,omitempty" json:"toolsListVisibility,omitempty"`
	// ResourceCacheScopes is explicit managing metadata classification by namespace.
	// Omitted namespaces remain user/credential/conversation scoped.
	ResourceCacheScopes map[string]string `yaml:"resourceCacheScopes,omitempty" json:"resourceCacheScopes,omitempty"`
	// ProtectedResourceMetadataURL pins a path-specific RFC 9728 document
	// when the origin-wide document describes a different MCP resource.
	ProtectedResourceMetadataURL string `yaml:"protectedResourceMetadataURL,omitempty" json:"protectedResourceMetadataURL,omitempty"`
}

type OutputArtifact struct {
	// Role is trusted workspace policy, never inferred from a MIME type or name.
	Role         string `json:"role,omitempty" yaml:"role,omitempty"`
	Name         string `json:"name,omitempty" yaml:"name,omitempty"`
	NamePath     string `json:"namePath,omitempty" yaml:"namePath,omitempty"`
	BytesPath    string `json:"bytesPath,omitempty" yaml:"bytesPath,omitempty"`
	MimeTypePath string `json:"mimeTypePath,omitempty" yaml:"mimeTypePath,omitempty"`
	MimeType     string `json:"mimeType,omitempty" yaml:"mimeType,omitempty"`
	Encoding     string `json:"encoding,omitempty" yaml:"encoding,omitempty"`
}

type ResolvedServiceIdentity struct {
	ServiceName      string
	ResourceURI      string
	ProviderIdentity string
}

type ResourceMetadata struct {
	Extractor string            `json:"extractor,omitempty" yaml:"extractor,omitempty"`
	Fields    map[string]string `json:"fields,omitempty" yaml:"fields,omitempty"`
}

type ResourceRoot struct {
	ID           string
	URI          string
	Description  string
	Include      []string
	Exclude      []string
	MaxSizeBytes int64
	Vectorize    bool
	Snapshot     bool
	SnapshotMD5  bool
	AllowGrep    bool
	UpstreamRef  string
	SnapshotURI  string
	SnapshotRoot string
	Metadata     ResourceMetadata
}

type SkillDiscovery struct {
	Tools   *SkillToolBridge `yaml:"tools,omitempty" json:"tools,omitempty"`
	Enabled bool             `yaml:"enabled" json:"enabled"`
	// CatalogID is required when the configured server name is not URI-safe.
	CatalogID        string `yaml:"catalogId,omitempty" json:"catalogId,omitempty"`
	MaxPages         int    `yaml:"maxPages,omitempty" json:"maxPages,omitempty"`
	MaxScannedItems  int    `yaml:"maxScannedItems,omitempty" json:"maxScannedItems,omitempty"`
	MaxSkills        int    `yaml:"maxSkills,omitempty" json:"maxSkills,omitempty"`
	MaxMetadataBytes int    `yaml:"maxMetadataBytes,omitempty" json:"maxMetadataBytes,omitempty"`
	MaxSkillBytes    int    `yaml:"maxSkillBytes,omitempty" json:"maxSkillBytes,omitempty"`
	TimeoutSec       int    `yaml:"timeoutSec,omitempty" json:"timeoutSec,omitempty"`
}

type SkillToolBridge struct {
	List string `yaml:"list" json:"list"`
	Get  string `yaml:"get" json:"get"`
}

type Upstream struct {
	Name               string
	Driver             string
	DSN                string
	Secret             *scy.Resource
	Shadow             string
	Batch              int
	Force              bool
	Enabled            bool
	MinIntervalSeconds int
}