config

type AIConfig struct {
	// Enabled toggles all AI features in tally. Disabled by default.
	Enabled bool `json:"enabled,omitempty" jsonschema:"default=false,description=Enable AI features (opt-in)" koanf:"enabled"`

	// Command is the ACP-capable agent program argv (stdio).
	// Example: ["acp-agent", "--model", "foo"].
	Command []string `json:"command,omitempty" jsonschema:"description=ACP agent command argv (stdio)" koanf:"command"`

	// Timeout is the per-fix timeout (e.g. "90s"). Parsed with time.ParseDuration at runtime.
	Timeout string `json:"timeout,omitempty" jsonschema:"default=90s,description=Per-fix timeout (e.g. 90s)" koanf:"timeout"`

	// MaxInputBytes limits how much content tally will send to the agent (guards cost/latency).
	MaxInputBytes int `json:"max-input-bytes,omitempty" jsonschema:"default=262144" koanf:"max-input-bytes"`

	// RedactSecrets redacts obvious secrets before sending content to the agent.
	RedactSecrets bool `json:"redact-secrets,omitempty" jsonschema:"default=true" koanf:"redact-secrets"`
}

type Config struct {
	// Rules contains configuration for individual linting rules.
	Rules RulesConfig `json:"rules" jsonschema:"description=Rule configuration" koanf:"rules"`

	// Output configures output format and destination.
	Output OutputConfig `json:"output" jsonschema:"description=Output settings" koanf:"output"`

	// InlineDirectives controls inline suppression directives.
	InlineDirectives InlineDirectivesConfig `json:"inline-directives" koanf:"inline-directives"`

	// AI configures opt-in AI features (e.g., AI AutoFix).
	AI AIConfig `json:"ai" koanf:"ai"`

	// SlowChecks configures async checks that require network or other slow I/O.
	SlowChecks SlowChecksConfig `json:"slow-checks" jsonschema:"description=Slow checks configuration" koanf:"slow-checks"`

	// ConfigFile is the path to the config file that was loaded (if any).
	// This is metadata, not loaded from config.
	ConfigFile string `json:"-" koanf:"-"`
}

type ConfigurationPreference string

type ExcludeConfig struct {
	// Paths contains glob patterns for files to exclude.
	Paths []string `json:"paths,omitempty" jsonschema:"description=Glob patterns for files to exclude (e.g. test/**)" koanf:"paths"`
}

type FixMode string

type InlineDirectivesConfig struct {
	// Enabled controls whether inline directives are processed.
	Enabled bool `json:"enabled,omitempty" jsonschema:"default=true,description=Process inline ignore directives" koanf:"enabled"`

	// WarnUnused reports warnings for directives that don't suppress any violations.
	WarnUnused bool `json:"warn-unused,omitempty" jsonschema:"default=false,description=Warn about unused directives" koanf:"warn-unused"`

	// ValidateRules reports warnings for unknown rule codes in directives.
	ValidateRules bool `json:"validate-rules,omitempty" jsonschema:"default=false" koanf:"validate-rules"`

	// RequireReason reports warnings for directives without a reason= explanation.
	RequireReason bool `json:"require-reason,omitempty" jsonschema:"default=false" koanf:"require-reason"`
}

type OutputConfig struct {
	// Format specifies the output format.
	Format string `json:"format,omitempty" koanf:"format"`

	// Path specifies where to write output.
	Path string `json:"path,omitempty" koanf:"path"`

	// ShowSource enables source code snippets in text output.
	ShowSource bool `json:"show-source,omitempty" koanf:"show-source"`

	// FailLevel sets the minimum severity level that causes a non-zero exit code.
	FailLevel string `json:"fail-level,omitempty" koanf:"fail-level"`
}

type RuleConfig struct {
	// Severity overrides the rule's default severity.
	// Use "off" to disable the rule.
	Severity string `json:"severity,omitempty" jsonschema:"enum=off,enum=error,enum=warning,enum=info,enum=style" koanf:"severity"`

	// Fix controls when auto-fixes are applied for this rule.
	// Values: never, explicit, always (default), unsafe-only.
	Fix FixMode `json:"fix,omitempty" jsonschema:"enum=never,enum=explicit,enum=always,enum=unsafe-only" koanf:"fix"`

	// Exclude contains path patterns where this rule should not run.
	Exclude ExcludeConfig `json:"exclude" koanf:"exclude"`

	// Options contains rule-specific configuration options.
	Options map[string]any `json:"-" koanf:",remain"`
}

type RulesConfig struct {
	// Include explicitly enables rules.
	Include []string `json:"include,omitempty" jsonschema:"description=Enable rules by pattern (e.g. buildkit/*)" koanf:"include"`

	// Exclude explicitly disables rules.
	Exclude []string `json:"exclude,omitempty" jsonschema:"description=Disable rules by pattern" koanf:"exclude"`

	// Tally contains configuration for tally/* rules.
	Tally map[string]RuleConfig `json:"tally,omitempty" jsonschema:"description=Configuration for tally/* rules" koanf:"tally"`

	// Buildkit contains configuration for buildkit/* rules.
	Buildkit map[string]RuleConfig `json:"buildkit,omitempty" jsonschema:"description=Configuration for buildkit/* rules" koanf:"buildkit"`

	// Hadolint contains configuration for hadolint/* rules.
	Hadolint map[string]RuleConfig `json:"hadolint,omitempty" jsonschema:"description=Configuration for hadolint/* rules" koanf:"hadolint"`
}

type SlowChecksConfig struct {
	// Mode controls when slow checks run: auto (CI detection), on, off.
	Mode string `json:"mode,omitempty" jsonschema:"default=auto,enum=auto,enum=on,enum=off,description=When to run slow checks" koanf:"mode"`

	// FailFast skips async checks when fast checks already produce SeverityError violations.
	FailFast bool `json:"fail-fast,omitempty" jsonschema:"default=true,description=Skip slow checks when errors found" koanf:"fail-fast"`

	// Timeout is the wall-clock budget for all async checks per invocation.
	Timeout string `json:"timeout,omitempty" jsonschema:"default=20s,description=Timeout for slow checks (e.g. 20s)" koanf:"timeout"`
}