config

type AgentConfig struct {
	SystemPrompt     string            `toml:"system_prompt"`
	SystemPromptFile string            `toml:"system_prompt_file"`
	MaxSteps         int               `toml:"max_steps"`         // tool-call rounds per turn; 0 = unlimited
	PlannerMaxSteps  int               `toml:"planner_max_steps"` // planner read-only tool-call rounds; 0 = unlimited
	Temperature      float64           `toml:"temperature"`
	PlannerModel     string            `toml:"planner_model"`
	SubagentModel    string            `toml:"subagent_model"`
	SubagentModels   map[string]string `toml:"subagent_models"`
	SubagentEffort   string            `toml:"subagent_effort"`
	SubagentEfforts  map[string]string `toml:"subagent_efforts"`
	FastTaskModel    string            `toml:"fast_task_model"` // lightweight model for dream/distill background tasks
	// OutputStyle selects a persona/tone block folded into the system prompt at
	// startup (a built-in like "explanatory"/"learning"/"concise", or a custom
	// .fairpeer/output-styles/<name>.md). Empty = the unmodified prompt.
	OutputStyle string `toml:"output_style"`
	// AutoPlan controls whether interactive turns that look multi-step start in
	// plan mode automatically: "off" keeps plan mode manual, "on" enables the
	// approval gate. Legacy "ask" is treated as "on".
	AutoPlan string `toml:"auto_plan"`
	// AutoPlanClassifier optionally names a provider/model used to classify
	// borderline auto-plan decisions. Empty keeps the zero-cost heuristic path.
	AutoPlanClassifier string `toml:"auto_plan_classifier"`
	// Compaction window fractions: soft = notice only, compact = trigger, force = hard ceiling.
	SoftCompactRatio  float64 `toml:"soft_compact_ratio"`
	CompactRatio      float64 `toml:"compact_ratio"`
	CompactForceRatio float64 `toml:"compact_force_ratio"`
	// ContextBudgetPercent caps the effective window for compaction decisions
	// (SPEC v2 §3.6). 0/100 = full window (default, zero config). E.g. 80 =
	// compact as if the window were 80% of its real size — saves cost on input
	// pricing tiers and avoids quality drop near the window edge.
	ContextBudgetPercent int `toml:"context_budget_percent"`
}

type BotAllowlist struct {
	Enabled        bool     `toml:"enabled"`
	AllowAll       bool     `toml:"allow_all"`
	Mode           string   `toml:"mode"` // "open"（默认，自动加入）| "review"（需管理员审批）
	QQUsers        []string `toml:"qq_users"`
	FeishuUsers    []string `toml:"feishu_users"`
	WeixinUsers    []string `toml:"weixin_users"`
	TelegramUsers  []string `toml:"telegram_users"`
	QQGroups       []string `toml:"qq_groups"`
	FeishuGroups   []string `toml:"feishu_groups"`
	WeixinGroups   []string `toml:"weixin_groups"`
	TelegramGroups []string `toml:"telegram_groups"`
}

type BotConfig struct {
	Enabled     bool                  `toml:"enabled"`
	Model       string                `toml:"model"` // 用于 bot 的模型名，空则用 default_model
	MaxSteps    int                   `toml:"max_steps"`
	DebounceMs  int                   `toml:"debounce_ms"` // 消息合并窗口，毫秒
	Allowlist   BotAllowlist          `toml:"allowlist"`
	QQ          QQBotConfig           `toml:"qq"`
	Feishu      FeishuBotConfig       `toml:"feishu"`
	Weixin      WeixinBotConfig       `toml:"weixin"`
	Telegram    TelegramBotConfig     `toml:"telegram"`
	Connections []BotConnectionConfig `toml:"connections"`
	// DesktopWatchers 是持久化的"桌面事件订阅"列表：哪些 IM 聊天要接收桌面
	// agent 的审批/提问/完成推送（/desktop watch on 订阅，跨重启保留）。
	DesktopWatchers []BotDesktopWatcher `toml:"desktop_watchers"`
}

type BotConnectionConfig struct {
	ID              string                        `toml:"id"`
	Provider        string                        `toml:"provider"` // qq|feishu|weixin|telegram
	Domain          string                        `toml:"domain"`   // feishu|lark|weixin|qq|telegram
	Label           string                        `toml:"label"`
	Enabled         bool                          `toml:"enabled"`
	Status          string                        `toml:"status"` // disconnected|pending|connected|error
	Model           string                        `toml:"model"`
	WorkspaceRoot   string                        `toml:"workspace_root"`
	Credential      BotConnectionCredential       `toml:"credential"`
	SessionMappings []BotConnectionSessionMapping `toml:"session_mappings"`
	LastError       string                        `toml:"last_error"`
	CreatedAt       string                        `toml:"created_at"`
	UpdatedAt       string                        `toml:"updated_at"`
}

type BotConnectionCredential struct {
	AppID        string `toml:"app_id"`
	AppSecretEnv string `toml:"app_secret_env"`
	AccountID    string `toml:"account_id"`
	TokenEnv     string `toml:"token_env"`
}

type BotConnectionSessionMapping struct {
	RemoteID      string `toml:"remote_id"`
	ChatType      string `toml:"chat_type"`
	ChatID        string `toml:"chat_id"`
	SessionID     string `toml:"session_id"`
	Scope         string `toml:"scope"`
	WorkspaceRoot string `toml:"workspace_root"`
	UpdatedAt     string `toml:"updated_at"`
}

type BotDesktopWatcher struct {
	Platform string `toml:"platform"`
	ChatType string `toml:"chat_type"`
	ChatID   string `toml:"chat_id"`
}

type CodegraphConfig struct {
	Enabled     bool   `toml:"enabled"`
	AutoInstall bool   `toml:"auto_install"`
	Path        string `toml:"path"` // local binary path (skips download)
	Tier        string `toml:"tier"`
	DownloadURL string `toml:"download_url"` // custom download base URL for air-gapped/intranet (replaces GitHub default)
}

type Config struct {
	ConfigVersion int    `toml:"config_version"`
	DefaultModel  string `toml:"default_model"`
	Language      string `toml:"language"` // ui/model language tag (e.g. "zh"); empty = auto-detect from $LANG / $FAIRPEER_LANG
	// ReasoningLanguage steers ONLY the visible thinking/reasoning text language
	// (auto|zh|en), independent of the final-answer language. Default "auto" leaves
	// it to the provider. It is injected as a transient per-turn block, never into
	// the cache-stable system prompt prefix.
	ReasoningLanguage string              `json:"-" toml:"reasoning_language"` // auto|zh|en; empty = auto
	UI                UIConfig            `toml:"ui"`
	Desktop           DesktopConfig       `toml:"desktop"`
	Notifications     NotificationsConfig `toml:"notifications"`
	Agent             AgentConfig         `toml:"agent"`
	Providers         []ProviderEntry     `toml:"providers"`
	Tools             ToolsConfig         `toml:"tools"`
	Permissions       PermissionsConfig   `toml:"permissions"`
	Sandbox           SandboxConfig       `toml:"sandbox"`
	Network           NetworkConfig       `toml:"network"`
	Plugins           []PluginEntry       `toml:"plugins"`
	// NetDev ([netdev]) is pinned to the USER config after the project merge
	// (pinNetDev in LoadForRoot): a cloned repo must never inject devices, hop
	// chains, or scan scopes. See internal/config/netdev.go and NETDEV_SPEC §7.3.
	NetDev     NetDevConfig     `toml:"netdev"`
	Skills     SkillsConfig     `toml:"skills"`
	Codegraph  CodegraphConfig  `toml:"codegraph"`
	Dream      DreamConfig      `toml:"dream"`
	Statusline StatuslineConfig `toml:"statusline"`
	LSP        LSPConfig        `toml:"lsp"`
	Bot        BotConfig        `toml:"bot"`
	// Cowork holds coWork (office) profile settings — currently just the browser
	// path override. Empty means auto-detect; a non-empty path is tried first
	// (and the user is guided to set it when no browser is found).
	Cowork CoworkConfig `toml:"cowork"`
	// LLM holds the global request budget (rate limiting) applied to all
	// providers. RPM=0 (the default) disables limiting for backward compat.
	LLM LLMConfig `toml:"llm"`
	// Profiles holds optional [[profiles]] entries that override the built-in
	// dev/cowork profiles by name. A name collision with a builtin replaces it,
	// so users can customise a profile's model/prompt/skills without code. Empty
	// means only the builtins are available (dev + cowork).
	Profiles []Profile `toml:"profiles"`
	// MobileBridge configures the linkpeer mobile companion bridge (desktop ↔
	// phone P2P). Empty means mobilebridge uses its built-in defaults; the
	// LINKPEER_SIGNAL env var still overrides signal_url for ad-hoc dev.
	MobileBridge MobileBridgeConfig `toml:"mobilebridge"`
	// TrustDomain ([trustdomain]) is the private-network trust domain
	// ledger (docs/TRUSTDOMAIN_SPEC.md): cross-profile infrastructure,
	// off by default. Independent of agent profiles and providers.
	TrustDomain TrustDomainConfig `toml:"trustdomain"`
	// contains filtered or unexported fields
}

type CoworkConfig struct {
	BrowserPath string `toml:"browser_path"` // absolute path to a Chromium-based browser exe; empty = auto-detect
	// BrowserHeadless controls whether the driven browser runs headless. Default
	// false (headed/visible) — a visible browser behaves closer to a human user,
	// keeps login state in a persistent profile, and avoids the rendering
	// quirks headless has on JS-heavy/anti-bot sites (e.g. GitHub's challenge
	// page). Set true for servers/CI where there is no display.
	BrowserHeadless bool `toml:"browser_headless"`
	// BrowserUserDataDir gives the driven browser a persistent user-data
	// directory. Empty = a fresh temp profile per launch (state is lost on
	// restart). Set to a fixed path to keep cookies/login across sessions —
	// essential for sites that require sign-in, and it reduces the "verify you
	// are human" friction on revisit.
	BrowserUserDataDir string `toml:"browser_user_data_dir"`
	// BrowserAttachURL makes browser automation ATTACH to an already-running
	// debug-enabled browser instead of launching a fresh instance per task
	// (e.g. "http://127.0.0.1:9222" — the endpoint the desktop's managed
	// browser uses). Chromium only accepts CDP connections when started with
	// --remote-debugging-port (and, since Chrome 136, only with a non-default
	// user-data-dir), so the target is normally the dedicated managed browser
	// started from Settings → 办公, where logins persist and the window stays
	// open between tasks. Empty = current behavior (launch + own lifecycle
	// per browser_auto run).
	BrowserAttachURL string `toml:"browser_attach_url"`
	// PPTActiveTemplate is the id of the active PPT template (from the templates
	// dir <user-config>/fairpeer/ppt-templates/<id>.json). When set, the ppt-wizard
	// skill generates decks from that template: it opens the template's master_file
	// in WPS (if any) and places content at the template's pre-defined layout
	// coordinates, so most slides don't need per-step VLM perception. Empty = no
	// template, the CUA builds from a blank deck.
	PPTActiveTemplate string `toml:"ppt_active_template"`
	// PPTMode selects how the ppt-wizard skill builds decks. "fast" (default
	// when empty) generates in one pass with no rework; "validate" generates,
	// then checks and reworks on issues. The desktop cowork settings panel
	// exposes this as a dropdown; PPTActiveTemplate still selects the template
	// used in either mode.
	PPTMode string `toml:"ppt_mode"`
	// SMTP configures outbound email (email_send). All fields required to enable
	// sending; empty SMTPHost disables email_send (it returns a config error).
	SMTP SMTPConfig `toml:"smtp"`
	// RAGEnabled is the master switch for the knowledge base (RAG). nil/unset =
	// enabled (the historical default, backward compatible). Set to false to
	// fully disable the knowledge base: no auto-injection into messages, the
	// rag_search/rag_import/... tools are not registered, and expert teams skip
	// knowledge-base context. This is distinct from EmbeddingModel (which only
	// toggles semantic reranking on top of FTS5) — RAGEnabled governs whether RAG
	// runs at all.
	RAGEnabled *bool `toml:"rag_enabled"`
	// EmbeddingModel enables semantic RAG reranking. When set to a provider model
	// ref that supports embeddings, rag_search computes a query embedding and
	// reranks FTS5 hits by cosine similarity. Empty = FTS5-only (the default,
	// works offline). Set to a real embedding model (e.g. a provider with kind
	// "embedding") to upgrade RAG to hybrid.
	EmbeddingModel string `toml:"embedding_model"`
	// VLMBackend is legacy: VLM now always uses the provider multimodal chat path
	// (base64 image_url content parts). Kept for TOML backward-compat but ignored.
	// Use VLMModel / ScreenshotVLMModel to pick the vision model.
	VLMBackend string `toml:"vlm_backend"`
	// VLMModel is the provider model ref for image recognition (screen_perceive).
	// E.g. "<provider>/<model>". Must be vision-capable (provider vision=true).
	VLMModel string `toml:"vlm_model"`
	// IMAP configures inbound email (email_read/search). Empty Host = read tools
	// return "not configured". Reading uses go-imap + go-message (protocol-level
	// correct: full SEARCH, RFC 2047 header decoding, multipart MIME).
	IMAP IMAPConfig `toml:"imap"`
	// EmailAccounts holds the mailboxes FairPeer can talk to. At load time
	// normalizeEmailAccounts folds the legacy single [cowork.smtp]/[cowork.imap]
	// pair above into EmailAccounts[0] when this slice is empty, so existing
	// single-account configs keep working unchanged; new configs may use either
	// form. Tools select an account by Name; Default (or [0]) is the fallback.
	EmailAccounts []EmailAccount `toml:"email_accounts"`
	// ExtractModel is the LLM used by the RAG deep-extraction pipeline (turns
	// imported documents into a structured entity/relation graph). Empty = fall
	// back to the active profile's main model. Pair with ExtractInterval /
	// ExtractConcurrency to tune request cadence; the pipeline is conservative
	// by default (1 concurrent chunk, 3s between chunks) to avoid rate limits.
	ExtractModel string `toml:"extract_model"`
	// ExtractInterval is the pause between chunk extractions (default "3s").
	// Raise it on rate-limited endpoints; lower on generous local models.
	ExtractInterval string `toml:"extract_interval"`
	// ExtractConcurrency is how many chunks extract in parallel (default 1).
	// Keep low to avoid tripping rate limits — extraction is a background task
	// where throughput matters less than "no errors".
	ExtractConcurrency int `toml:"extract_concurrency"`

	// ScreenshotEnabled turns on the global-hotkey screenshot-to-VLM feature.
	// When true, pressing ScreenshotHotkey anywhere (even when FairPeer is in
	// the background) captures the screen, sends it to ScreenshotVLMModel for
	// recognition, and replies via IM bot + in-app toast. Default false — the
	// user opts in via the cowork settings tab.
	ScreenshotEnabled bool `toml:"screenshot_enabled"`
	// ScreenshotHotkey is the global hotkey combination (e.g. "Ctrl+Shift+Alt+W").
	// Detected via GetAsyncKeyState polling so it fires even when FairPeer isn't
	// focused. Default "Ctrl+Shift+Alt+W".
	ScreenshotHotkey string `toml:"screenshot_hotkey"`
	// ScreenshotVLMModel is the model used for screenshot recognition.
	// This is the SINGLE place all image-recognition config lives —
	// set it once in the cowork settings page.
	ScreenshotVLMModel string `toml:"screenshot_vlm_model"`
	// VoiceModel is the provider model ref for speech-to-text, used by voice
	// input (mic button) and audio-attachment understanding. E.g.
	// "stepfun/stepaudio-2.5-asr" or "zhipu/glm-asr-2512". It must point at an
	// OpenAI-compatible /audio/transcriptions endpoint. Independent of the main
	// chat model — any main model works, since audio is transcribed to text
	// first and the text is then sent to the main model. Empty = voice input
	// disabled (the mic button is disabled with a hint to configure a model).
	VoiceModel string `toml:"voice_model"`
	// ScreenshotPrompt is the user prompt sent with the screenshot image to the
	// VLM model. Users can customize this to change the solving behavior (e.g.
	// focus on specific subjects, require verification, etc.). Empty means use
	// the built-in default.
	ScreenshotPrompt string `toml:"screenshot_prompt"`

	// EStopHotkey is the global EMERGENCY-STOP hotkey for coWork desktop
	// automation. Pressing it anywhere (even with FairPeer minimized) cancels
	// the in-flight turn on the active tab — the kill switch for screen_* tools,
	// whose clicks/typing are irreversible. Registered via Win32 RegisterHotKey
	// like the screenshot hotkey. Default "Ctrl+Shift+Pause". Set to "off" to
	// disable the feature entirely.
	EStopHotkey string `toml:"estop_hotkey"`
	// HEPort is the port for the Hyper-Extract Python server. Default 0 means
	// use the built-in default (18900).
	HEPort int `toml:"he_port"`
	// BrowserUseEnabled controls whether the browser-use autonomous-browsing
	// sidecar is wired up. When false (the zero-value DEFAULT), browser_auto
	// returns a clear "disabled" error and no Python sidecar is started. This
	// is intentionally opt-in: the sidecar needs the browser-use Python package
	// installed (and a provider client), so users who haven't set that up are
	// not bothered by startup failures. Set browser_use_enabled = true once
	// the environment is ready.
	BrowserUseEnabled bool `toml:"browser_use_enabled"`
	// BrowserUsePython overrides the Python interpreter used to run the
	// browser-use sidecar. Empty = "python" (Windows) / "python3" (other). In
	// the packaged build this resolves to the bundled runtime's python.exe.
	BrowserUsePython string `toml:"browser_use_python"`
	// BrowserUsePort is the port for the browser-use sidecar. Default 0 means
	// use the built-in default (18901, distinct from HE's 18900).
	BrowserUsePort int `toml:"browser_use_port"`
	// BrowserUseModel is the provider model ref the sidecar uses for the
	// agentic loop (e.g. "<provider>/<model>"). Empty = fall back to VLMModel,
	// then the main agent model. A strong vision-capable model is strongly
	// recommended — the loop reads screenshots/accessibility trees.
	BrowserUseModel string `toml:"browser_use_model"`
	// BrowserUseMaxSteps caps the agentic loop. Default 0 means let the sidecar
	// pick a sensible bound. Set lower for cheaper/faster runs, higher for
	// complex multi-page tasks.
	BrowserUseMaxSteps int `toml:"browser_use_max_steps"`
	// FastLLMBaseDomain overrides the base URL for direct /chat/completions calls
	// made by the scheduler time-parser and RAG ask (legacy path; Phase 3 will
	// route these through the resolved fast-task provider instead). Empty = the
	// built-in default.
	FastLLMBaseDomain string `toml:"fast_llm_base_domain"`
}

type DesktopConfig struct {
	Language       string   `toml:"language"`        // auto|en|zh; empty/auto = browser/OS auto-detect
	Theme          string   `toml:"theme"`           // auto|dark|light; empty resolves to dark
	ThemeStyle     string   `toml:"theme_style"`     // graphite|aurora|slate|carbon|nocturne|amber and legacy aliases
	CloseBehavior  string   `toml:"close_behavior"`  // quit|background; desktop window close behavior
	DisplayMode    string   `toml:"display_mode"`    // standard|compact|minimal; transcript display mode
	CheckUpdates   *bool    `toml:"check_updates"`   // startup update checks; nil keeps the default enabled
	Telemetry      *bool    `toml:"telemetry"`       // anonymous launch ping (install id + version + OS); nil keeps the default enabled
	Metrics        *bool    `toml:"metrics"`         // opt-in aggregate agent metrics (anonymous signal/bucket counts; no content); nil = disabled
	ProviderAccess []string `toml:"provider_access"` // desktop-only list of provider entries shown in Settings > Model > Access
	ExpandThinking bool     `toml:"expand_thinking"` // true = show reasoning text expanded by default; false = collapsed
}

type DreamConfig struct {
	Enabled         bool `toml:"enabled"`          // master switch; false disables both background agents
	DreamInterval   int  `toml:"dream_interval"`   // days between automatic Dream runs; 0 = default 7
	DistillInterval int  `toml:"distill_interval"` // days between automatic Distill runs; 0 = default 30
	SkillColdDays   int  `toml:"skill_cold_days"`  // days a skill is unused before cold-retirement; 0 = default 90
	IdleMinutes     int  `toml:"idle_minutes"`     // minutes of user inactivity before a Dream run may fire; 0 = default 10
}

type EffortCapability struct {
	Supported bool
	Levels    []string
	Default   string
}

type EmailAccount struct {
	Name    string     `toml:"name"`    // stable handle tools/scheduler address (e.g. "personal-139")
	Default bool       `toml:"default"` // used when a tool omits an account name
	SMTP    SMTPConfig `toml:"smtp"`
	IMAP    IMAPConfig `toml:"imap"`
}

type FeishuBotConfig struct {
	Enabled           bool   `toml:"enabled"`
	Domain            string `toml:"domain"` // feishu（默认）| lark
	AppID             string `toml:"app_id"`
	AppSecretEnv      string `toml:"app_secret_env"`     // 如 FEISHU_BOT_APP_SECRET
	VerificationToken string `toml:"verification_token"` // 事件订阅验证 token
	Mode              string `toml:"mode"`               // webhook（默认）| websocket
	WebhookPort       int    `toml:"webhook_port"`       // webhook 模式端口
	RequireMention    bool   `toml:"require_mention"`
}

type IMAPConfig struct {
	Host          string `toml:"host"`            // IMAP server host, e.g. imap.example.com
	Port          int    `toml:"port"`            // IMAP port (993 for implicit TLS, 143 for STARTTLS/plain)
	Username      string `toml:"username"`        // mailbox login
	PasswordEnv   string `toml:"password_env"`    // env var holding the password
	SkipTLSVerify bool   `toml:"skip_tls_verify"` // opt in to skip TLS cert verification (self-signed/corporate CAs). Verification stays ON unless this is true.
}

type LLMConfig struct {
	RPM         int `toml:"rpm"`          // max requests/minute per API key (0 = unlimited)
	TPM         int `toml:"tpm"`          // max tokens/minute (0 = unlimited; reserved, not enforced yet)
	ReserveMain int `toml:"reserve_main"` // requests reserved for main-agent priority (default 2)
}

type LSPConfig struct {
	Enabled bool                 `toml:"enabled"`
	Servers map[string]LSPServer `toml:"servers"`
}

type LSPServer struct {
	Command     string            `toml:"command"`
	Args        []string          `toml:"args"`
	Env         map[string]string `toml:"env"`
	LanguageID  string            `toml:"language_id"`
	Extensions  []string          `toml:"extensions"`
	InstallHint string            `toml:"install_hint"`
}

type MCPImportCandidate struct {
	Entry       PluginEntry
	Recommended bool
	Reasons     []string
}

type MigrationResult struct {
	From     string
	To       string
	KeyToEnv bool
	Plugins  int
	Warnings []string
}

type MobileBridgeConfig struct {
	SignalURL   string   `toml:"signal_url"`   // linkpeer-signal K base URL; empty = DefaultConfig placeholder
	STUNServers []string `toml:"stun_servers"` // extra STUN servers for cross-network P2P (M3)
	LogLevel    string   `toml:"log_level"`    // trace|debug|info|warn|error; empty = info
	AutoConfirm bool     `toml:"auto_confirm"` // 联调：收到 exchange 自动确认，不等用户点允许
	// PairAddress 钉死配对二维码使用哪块网卡的 IP（多网卡环境用户手选）。
	// 空 = 自动：默认路由出口优先 + 全部真实网卡作为多候选（手机端自动匹配）。
	PairAddress string `toml:"pair_address"`
	// UDPKnock 单包敲门（M3 NAT 穿透辅助，默认关）：S 从 ICE 同一 UDP
	// socket 向 C 的公网映射（srflx，经 KnockServer 探得）发敲门包，
	// 提前打开 S 侧 NAT。双对称 NAT 无效（协议 §7）。
	UDPKnock    bool   `toml:"udp_knock"`
	KnockServer string `toml:"knock_server"` // 敲门依赖的远程 STUN，如 stun:host:3478
	// CloudSignalURL 公网跳板 K（跨网配对/信令候选）：非空时 S 维持第二条
	// 出站 WSS 长连到该云 K，二维码 relay 追加它为末位候选——手机同网自动
	// 选局域网直连，跨网回退到云 K 打洞。空 = 关（纯局域网/单 K，零云）。
	CloudSignalURL string `toml:"cloud_signal_url"`
	// TURN 中转兜底（跨网打洞全败时经 coturn 中继；ICE 仍优先直连）。
	// 凭据为 coturn use-auth-secret（REST）模式：user=时间戳，pass=HMAC。
	TURNEnabled bool     `toml:"turn_enabled"`
	TURNServers []string `toml:"turn_servers"` // 如 ["turn:signal.example.com:3478?transport=udp"]
	TURNUser    string   `toml:"turn_user"`
	TURNPass    string   `toml:"turn_pass"`
}

type NetDevAlertRule struct {
	Name     string `toml:"name"`
	Metric   string `toml:"metric"`   // reachable | if_down_count | uptime_reset | flap_count | if_down_above_p90
	Op       string `toml:"op"`       // >= | <= | ==
	Value    int64  `toml:"value"`    // reachable: 1=up 0=down; uptime_reset: 1=reboot detected
	Severity string `toml:"severity"` // info | warning | critical
	Enabled  bool   `toml:"enabled"`
}

type NetDevAssessment struct {
	EngagementID string   `toml:"engagement_id"`
	Scopes       []string `toml:"scopes"`
	Expires      string   `toml:"expires"`
	Approver     string   `toml:"approver"`
}

type NetDevConfig struct {
	Enabled bool             `toml:"enabled"`
	Trap    NetDevTrapConfig `toml:"trap"`
	// NotifyWebhook is the Finding notification outlet (NETDEV_SPEC_V2 §5.2):
	// generic JSON POST; empty = off. min severity: info|warning|critical.
	NotifyWebhook     string `toml:"notify_webhook"`
	NotifyMinSeverity string `toml:"notify_min_severity"`
	NotifyFormat      string `toml:"notify_format"` // generic | feishu | dingtalk | wecom
	// SMTP 通知出口（§5.2 追加）：与 webhook 并行；密码入 secret store。
	NotifySMTPHost    string   `toml:"notify_smtp_host"`
	NotifySMTPPort    int      `toml:"notify_smtp_port"`
	NotifySMTPUser    string   `toml:"notify_smtp_user"`
	NotifySMTPPassEnv string   `toml:"notify_smtp_pass_env"`
	NotifySMTPFrom    string   `toml:"notify_smtp_from"`
	NotifySMTPTo      []string `toml:"notify_smtp_to"`
	// NotifyBotDest pushes through the embedded IM gateway (feishu:oc_xxx /
	// weixin:wxid_xxx / qq:group / telegram:chat) — empty = off.
	NotifyBotDest string `toml:"notify_bot_dest"`
	// BriefingPushTime schedules the daily briefing push ("08:00" local;
	// "" = off) through the notify outlets.
	BriefingPushTime string `toml:"briefing_push_time"`
	// NetworkName is the managed network's display name (e.g. "总部生产网") —
	// 运维页面的身份标识, like a coding workspace's project name.
	NetworkName          string          `toml:"network_name"`
	DefaultMode          string          `toml:"default_mode"` // diagnose | assess
	AuditRetention       string          `toml:"audit_retention"`
	ProxyDeviceTraffic   bool            `toml:"proxy_device_traffic"` // false: devices dialed directly, never via the shared HTTP proxy
	MaxSessionsPerDevice int             `toml:"max_sessions_per_device"`
	Devices              []NetDevDevice  `toml:"devices"`
	Hops                 []NetDevHop     `toml:"hops"`
	Groups               []NetDevGroup   `toml:"groups"`
	Discovery            NetDevDiscovery `toml:"discovery"`
	// ExtraRead extends the drivers' read-command tables at runtime
	// ([netdev.extra_read] with vendor tables — see NETDEV_SPEC B-1: the
	// knowledge-growth path; unknown commands stay refused until classified).
	ExtraRead map[string][]string `toml:"extra_read"`
	// WeakCredDict is a local password-dictionary file for the strong tier of
	// netdev_weak_cred / NetDevWeakCredCheck (completion-spec §5.2). Empty =
	// basic tier only. The file's CONTENT never enters config or exports.
	WeakCredDict string `toml:"weak_cred_dict"`
	// InspectionInterval schedules the read-battery sweep ("1h", "30m"; "" = off).
	InspectionInterval string `toml:"inspection_interval"`
	// ScheduledBaseline rides the scheduled inspection sweep: also run the
	// config-security baseline battery each scheduled pass (default off).
	ScheduledBaseline bool `toml:"scheduled_baseline"`
	// BackupInterval schedules the config-backup sweep ("1h", "24h"; "" = off):
	// every tick snapshots every managed device's running-config into the
	// versioned vault — the drift/history backbone.
	BackupInterval string           `toml:"backup_interval"`
	Assessment     NetDevAssessment `toml:"assessment"`
	// Guardrails are the per-ask / per-tool-call controls (NETDEV_SPEC §6):
	// they reach DOWN into every LLM turn, not just the mode level.
	Guardrails NetDevGuardrails `toml:"guardrails"`
	// Projects are site-level scopes (collections of device groups) for the
	// title-bar switcher — see NetDevProject.
	Projects []NetDevProject `toml:"projects"`
	// Presets are named diagnostic command batteries ("OSPF 邻居全套") the
	// device card can run in one click — each command still goes through the
	// sealed Exec path one by one.
	Presets []NetDevPreset `toml:"presets"`
	// LogFollow bounds the streaming tail -F follows (hard caps: lines, bytes,
	// duration — an unbounded follow streaming into the UI is an incident).
	LogFollow NetDevLogFollow `toml:"log_follow"`
	// DBSources are read-only database diagnostic endpoints (netdev_db_query):
	// the allowlist is exact-statement-prefix, the account itself must be
	// least-privilege (the real structural seal lives in the DB grants).
	DBSources []NetDevDBSource `toml:"db_sources"`
	// PollIntervalSeconds schedules the SNMP health sweep (0 = off): every
	// device carrying an [netdev.devices.*.snmp] block is polled for
	// reachability/uptime/interface status into the health snapshot.
	PollIntervalSeconds int `toml:"poll_interval_seconds"`
	// AlertRules turn health/syslog signals into auto-Findings (active →
	// resolved lifecycle). Evaluated on every health poll.
	AlertRules []NetDevAlertRule `toml:"alert_rules"`
	// Syslog is the passive receiver (UDP): devices point their syslog here;
	// lines aggregate per device and known-bad patterns auto-escalate to
	// Findings. Port 0 = off.
	Syslog NetDevSyslogConfig `toml:"syslog"`
}

type NetDevDBSource struct {
	Name        string   `toml:"name"`
	Type        string   `toml:"type"` // mysql | postgres | redis | mongodb | mssql | clickhouse | elasticsearch
	Host        string   `toml:"host"`
	Port        int      `toml:"port"`
	Username    string   `toml:"username"`
	PasswordEnv string   `toml:"password_env"`
	Database    string   `toml:"database"`
	Allowlist   []string `toml:"allowlist"`
	// Via tunnels the connection through the first named hop's SSH chain
	// (local forward; production DBs behind bastions, NETDEV_SPEC_V2 追加).
	Via []string `toml:"via"`
}

type NetDevDevice struct {
	Name    string   `toml:"name"`
	Vendor  string   `toml:"vendor"` // huawei | cisco | zte
	OS      string   `toml:"os"`     // vrp8 | vrp5 | ios | iosxe | zxr10 …
	Model   string   `toml:"model"`
	Address string   `toml:"address"`
	Port    int      `toml:"port"` // 0 => 22
	Via     []string `toml:"via"`  // ordered hop names (route to the device)
	Group   string   `toml:"group"`
	// Role is the user's EXPLICIT device-class override for the topology icon
	// set (router/switch/firewall/ips/vpn/bastion/server/ap/cloud; Chinese
	// aliases accepted). Empty = infer (group words → model/name → vendor
	// default). This is the minimal non-GUI "manual override" of the parked
	// topology-overlay lot.
	Role          string   `toml:"role"`
	Protocols     []string `toml:"protocols"` // priority order: ssh, netconf（telnet 已裁决删除，§6.4）
	Username      string   `toml:"username"`
	PasswordEnv   string   `toml:"password_env"`
	IdentityFile  string   `toml:"identity_file"`
	PassphraseEnv string   `toml:"passphrase_env"`
	UseSSHConfig  bool     `toml:"use_ssh_config"`
	Encoding      string   `toml:"encoding"` // auto | utf-8 | gbk
	// OOBURL is the 带外启动器 deep link (NETDEV_SPEC_V2 §6.3): ESXi/堡垒/BMC
	// Web UI entry. FairPeer only launches the local browser/RDP client — no
	// RDP/VNC protocol in-product; the click is audited.
	OOBURL string      `toml:"oob_url"`
	SNMP   *NetDevSNMP `toml:"snmp"`
	// ConsolePort, when set, replaces the SSH dial with a serial console
	// line (COM3 on Windows — the USB-serial adapter plugged into the
	// switch's console port). No host keys, no auth: physical presence IS
	// the authorization; the read-only classifier still seals every command.
	// ConsoleBaud 0 => 9600, line format fixed at 8N1.
	ConsolePort string `toml:"console_port"`
	ConsoleBaud int    `toml:"console_baud"`
	// LogPaths whitelists additional log-directory roots for this device
	// (e.g. "/opt/app/logs", "/usr/local/tomcat/logs"). tail/head/grep/wc on
	// paths under /var/log or one of these roots classify as read — the
	// log-source path whitelist that feeds netdev_log_read and the classifier
	// bypass. Human-registered only, like every inventory field.
	LogPaths []string `toml:"log_paths"`
	// ConfigPaths whitelists server config-file roots for §7.3 配置文件管理
	// (e.g. "/etc/nginx"): snapshot/diff/drift reads and restore-verify
	// proposal steps are confined to these roots — same authorization model as
	// LogPaths, human-registered only. Edits NEVER happen in-product: change
	// products are submitted as file-upload proposal steps.
	ConfigPaths []string `toml:"config_paths"`
	// Kind is the DATA-PLANE discriminator (NETDEV_SPEC_V2 §2.1): "" derives
	// from vendor (backward compatible — existing devices unchanged);
	// "docker" / "k8s" enable their API clients below. vendor stays the CLI
	// driver story for network gear.
	Kind   string                `toml:"kind"` // "" | docker | k8s | firewall
	Docker *NetDevDockerConfig   `toml:"docker,omitempty"`
	K8s    *NetDevK8sConfig      `toml:"k8s,omitempty"`
	Fw     *NetDevFirewallConfig `toml:"firewall,omitempty"`
}

type NetDevDiscovery struct {
	Scopes        []string `toml:"scopes"`         // CIDR whitelist; probing outside is refused
	Rate          int      `toml:"rate"`           // parallel probe cap
	Mode          string   `toml:"mode"`           // tunnel | probe | auto
	ProbeFallback string   `toml:"probe_fallback"` // tunnel when netprobe can't deploy
	// NmapPath is the user-supplied nmap binary for the service-sweep
	// orchestrator (empty = LookPath("nmap"); absent = the feature refuses
	// with install guidance — the product orchestrates, never bundles).
	NmapPath string `toml:"nmap_path"`
	// NetprobePath is fairpeer's own netprobe binary (cmd/netprobe) for
	// in-network liveness sweeps — the user builds/copies it (often onto a
	// jump host, where SSH-tunnel probing can't reach); the product
	// orchestrates and parses, same grammar as nmap_path.
	NetprobePath string `toml:"netprobe_path"`
	// SnmpCommunity enables F2's sysDescr fingerprint on discovery: hosts
	// with an open 161 get ONE v2c GET (no retry). Empty (default) = off —
	// SNMP stays a per-device metrics channel only.
	SnmpCommunity string `toml:"snmp_community"`
	// HTTPProbe enables F3's application fingerprint (default off): one
	// standard GET / per open 80/443/8080/8443 — title/Server header and the
	// TLS certificate. Opt-in: it is the only discovery traffic that is more
	// than a TCP handshake + banner wait.
	HTTPProbe bool `toml:"http_probe"`
	// F4 pacing keys (spec §4.7). Zero values take the spec defaults; -1
	// disables where disabling is a legal posture.
	FastMode       bool `toml:"fast_mode"`          // rate x4 for authorized windows
	MaxHostsPerJob int  `toml:"max_hosts_per_job"`  // 0 => 65536 (one /16)
	WallSec        int  `toml:"discovery_wall_sec"` // 0 => 14400 (4h)
	PerHostDelayMS int  `toml:"per_host_delay_ms"`  // 0 => 800ms jitter; -1 = off
	CacheTTLHours  int  `toml:"cache_ttl_hours"`    // 0 => 24; -1 = always re-probe
	MaxHops        int  `toml:"max_hops"`           // 0 => 2 (clamped 1..4): recursion depth cap
	// NoMediumConfirm pre-checks /23-/21 nets on the plan card (the key is
	// inverted so Go's zero value keeps the SAFE default: medium nets stay
	// unchecked until the operator opts into trusting them).
	NoMediumConfirm bool `toml:"medium_no_confirm"`
}

type NetDevDockerConfig struct {
	// Socket: npipe:////./pipe/docker_engine (Windows local) |
	// unix:///var/run/docker.sock | tcp://host:2375 (inventory hosts only).
	Socket string `toml:"socket"`
}

type NetDevFirewallConfig struct {
	ApiTokenEnv string `toml:"api_token_env"` // secret-store key holding the REST API token
}

type NetDevGroup struct {
	Name         string `toml:"name"`
	Policy       string `toml:"policy"`        // read-only | proposal | proposal+confirm2
	ChangeWindow string `toml:"change_window"` // e.g. "tue,thu 22:00-24:00"; "" = any time
}

type NetDevGuardrails struct {
	ConfirmEachCommand bool     `toml:"confirm_each_command"`
	TurnCommandBudget  int      `toml:"turn_command_budget"`
	AllowedGroups      []string `toml:"allowed_groups"`
}

type NetDevHop struct {
	Name          string `toml:"name"`
	Host          string `toml:"host"`
	Port          int    `toml:"port"`
	User          string `toml:"user"`
	IdentityFile  string `toml:"identity_file"`
	PassphraseEnv string `toml:"passphrase_env"`
	PasswordEnv   string `toml:"password_env"`
	ProxyJump     string `toml:"proxy_jump"` // comma-separated chain of other hop names
	UseSSHConfig  bool   `toml:"use_ssh_config"`
}

type NetDevK8sConfig struct {
	KubeconfigEnv string   `toml:"kubeconfig_env"` // secret-store key holding the kubeconfig YAML
	Context       string   `toml:"context"`        // pinned; "" = kubeconfig's current-context
	Namespaces    []string `toml:"namespaces"`     // allowed namespaces; empty = all
}

type NetDevLogFollow struct {
	MaxLines   int `toml:"max_lines"`   // 0 => 500
	MaxBytes   int `toml:"max_bytes"`   // 0 => 256 KiB
	MaxSeconds int `toml:"max_seconds"` // 0 => 600
}

type NetDevPreset struct {
	Name     string   `toml:"name"`
	Commands []string `toml:"commands"`
	Vendors  []string `toml:"vendors"` // empty = all vendors
}

type NetDevProject struct {
	Name   string   `toml:"name"`
	Groups []string `toml:"groups"`
	Note   string   `toml:"note"`
}

type NetDevSNMP struct {
	Version      string `toml:"version"` // v2c | v3
	CommunityEnv string `toml:"community_env"`
	Username     string `toml:"username"`
	AuthEnv      string `toml:"auth_env"`
	PrivEnv      string `toml:"priv_env"`
}

type NetDevSyslogConfig struct {
	Port       int `toml:"port"`         // UDP listen port; 0 = off
	RatePerMin int `toml:"rate_per_min"` // per-device ingest cap (0 => 600)
}

type NetDevTrapConfig struct {
	Port int `toml:"port"` // UDP listen port; 0 = off
}

type NetworkConfig struct {
	// ProxyMode is "auto" (default; environment proxy for now), "env", "custom",
	// or "off". auto leaves room for OS proxy detection later without changing the
	// config shape.
	ProxyMode string `toml:"proxy_mode"`
	// ProxyURL is an advanced custom override such as "socks5://127.0.0.1:7890".
	// When set and proxy_mode = "custom", it wins over the structured proxy table.
	ProxyURL string `toml:"proxy_url"`
	// NoProxy is honored for custom proxies. Env/auto modes use NO_PROXY from the
	// process environment instead.
	NoProxy string             `toml:"no_proxy"`
	Proxy   NetworkProxyConfig `toml:"proxy"`
}

type NetworkProxyConfig struct {
	Type     string `toml:"type"` // http|https|socks5|socks5h
	Server   string `toml:"server"`
	Port     int    `toml:"port"`
	Username string `toml:"username"`
	Password string `toml:"password"`
}

type NotificationsConfig struct {
	Enabled         bool `toml:"enabled"`
	TurnDone        bool `toml:"turn_done"`
	ApprovalRequest bool `toml:"approval_request"`
	AskRequest      bool `toml:"ask_request"`
}

type PermissionsConfig struct {
	Mode  string   `toml:"mode"`
	Allow []string `toml:"allow"`
	Ask   []string `toml:"ask"`
	Deny  []string `toml:"deny"`
}

type PluginEntry struct {
	Name    string            `toml:"name"`
	Type    string            `toml:"type"` // "stdio" (default) | "http" | "sse"
	Command string            `toml:"command"`
	Args    []string          `toml:"args"`
	Env     map[string]string `toml:"env"`
	URL     string            `toml:"url"`
	Headers map[string]string `toml:"headers"`
	// AutoStart controls whether the server connects during session startup.
	// Nil preserves historical behavior: configured servers start automatically.
	AutoStart *bool `toml:"auto_start"`
	// Tier selects how aggressively the server is connected at boot:
	//   "eager"      — blocks startup until the handshake completes; required for
	//                  servers whose tools the system prompt depends on.
	//   "lazy"       — registers placeholder tools immediately (from on-disk
	//                  schema cache when available) and only spawns the real
	//                  subprocess on first model use. Kept for legacy configs.
	//   "background" — placeholder + spawn fired at boot but not waited on;
	//                  swap happens once the spawn finishes.
	// Empty defaults to "background" so enabled MCPs connect automatically
	// without blocking chat. Unknown non-empty values fall back to "lazy".
	Tier string `toml:"tier"`
	// CallTimeout overrides the per-call default timeout (60s) for this MCP
	// server's JSON-RPC calls. Prevents a slow server from blocking the agent.
	// Format: Go duration string (e.g. "30s", "2m", "0" to disable).
	CallTimeout string `toml:"call_timeout"`
	// Risk marks this MCP server's tools' risk class for the permission gate
	// (SPEC v2 §3.2A). MCP tools default to "external" (safe: outward
	// operations need approval). Set to "read" for a trusted read-only server
	// so its tools don't prompt; "write_local"/"exec" for the in-between cases.
	// Empty/unknown = "external" (fail-safe). See internal/permission/risk.go.
	Risk string `toml:"risk"`
}

type Profile struct {
	Name              string   `toml:"name"`
	DisplayName       string   `toml:"display_name"`
	Model             string   `toml:"model"`               // overrides DefaultModel; "" = config default
	SubagentModel     string   `toml:"subagent_model"`      // overrides agent.subagent_model; "" = unchanged
	Effort            string   `toml:"effort"`              // overrides effort; "" = provider default
	SystemPromptAddon string   `toml:"system_prompt_addon"` // appended to resolved prompt; "" = unchanged
	SystemPromptFile  string   `toml:"system_prompt_file"`  // when set, replaces the resolved prompt entirely
	EnabledSkills     []string `toml:"enabled_skills"`      // whitelist; empty = all skills
	DisabledSkills    []string `toml:"disabled_skills"`     // extra-disabled on top of config
	Plugins           []string `toml:"plugins"`             // plugin name whitelist; empty = all plugins (unless PluginAllowlist)
	HiddenPlugins     []string `toml:"hidden_plugins"`      // NAMED plugins to hide (unlike Plugins, user-installed servers stay visible); empty = hide none
	PluginAllowlist   bool     `toml:"plugin_allowlist"`    // treat Plugins as a strict allowlist: empty list hides ALL external MCPs (netdev seal; builtinFloor pins it)
	HiddenTools       []string `toml:"hidden_tools"`        // tools to Hide from main loop schemas; empty = all visible. Subagents still see them via FilterRegistry.
	WorkspaceType     string   `toml:"workspace_type"`      // "code" | "document"; frontend hint only

	// ToolScope is the HARD tool seal (unlike HiddenTools, which only trims
	// main-loop schemas): "netdev-only" removes process-exec and file-write
	// tools from the Registry entirely, so subagents inherit the same removal
	// and a prompt-injected model cannot reach a write path through any tool.
	// Empty = the default full builtin surface. See NETDEV_SPEC §7.1.
	ToolScope string `toml:"tool_scope"`
	// SkillDomains lists the skill `domain:` frontmatter values this profile's
	// index shows. A USER skill declaring a domain outside the list is folded
	// out of the pinned index (visibility only — run_skill / /<name> still
	// execute it; the profile whitelist above governs shipped skills and is a
	// different, harder gate). Undomained user skills stay visible in every
	// profile. Empty = no folding (all user skills listed).
	SkillDomains []string `toml:"skill_domains"`
	// LoadProjectInstructions: nil = default (load the workspace's AGENTS.md
	// hierarchy and project memory as usual). Explicit false is for profiles
	// whose subject is NOT the workspace (netdev: the subject is the network)
	// — a cloned repo's instruction files must not steer device sessions.
	LoadProjectInstructions *bool `toml:"load_project_instructions"`
}

type ProviderEntry struct {
	Name      string   `toml:"name"`
	Kind      string   `toml:"kind"`
	BaseURL   string   `toml:"base_url"`
	Model     string   `toml:"model"`      // a single model (back-compat)
	Models    []string `toml:"models"`     // a vendor's model list (one base_url/key, many models)
	ModelsURL string   `toml:"models_url"` // auto-fetch models from this URL on startup
	Default   string   `toml:"default"`    // default model when Models is set (else Models[0])
	// FastModel is the lightweight model used for background/fast tasks
	// (dream/distill/rag-extract, scheduler time-parse). Empty = fall back to
	// Default at runtime. This is the per-provider "fast" role; the global
	// agent.fast_task_model can override it.
	FastModel     string            `toml:"fast_model"`
	APIKeyEnv     string            `toml:"api_key_env"`
	ContextWindow int               `toml:"context_window"`
	Price         *provider.Pricing `toml:"price"`
	// Thinking / Effort are provider-kind-specific knobs forwarded to the provider
	// via Config.Extra. The anthropic provider reads Thinking="adaptive" to enable
	// extended thinking and Effort ("low".."max") to tune depth. The
	// openai-compatible provider forwards Effort as reasoning_effort for
	// thinking-capable models.
	// Empty = provider default.
	Thinking string `toml:"thinking"`
	Effort   string `toml:"effort"`
	// ReasoningProtocol selects the request shape for OpenAI-compatible reasoning
	// models. Empty/auto uses the model capability registry plus endpoint
	// heuristics; none disables automatic reasoning controls for this provider.
	ReasoningProtocol string `toml:"reasoning_protocol"`
	// SupportedEfforts lists the /effort levels this provider/model exposes.
	// When non-empty, it overrides the built-in defaults. All providers
	// support the unified low/medium/high vocabulary by default. "auto" is
	// the implicit prefix — always accepted.
	SupportedEfforts []string `toml:"supported_efforts"`
	// DefaultEffort is the /effort level used when the user picks "auto" or
	// has not set Effort. Ignored when SupportedEfforts is empty.
	DefaultEffort string `toml:"default_effort"`
	// Vision enables image support for this provider. When true, user-attached
	// images are sent as image_url content parts. When false (default), images
	// are stripped before sending to avoid 400 errors from text-only models.
	Vision bool `toml:"vision"`
	// VisionDetail controls the image detail level sent to the API ("auto",
	// "low", "high"). Only effective when Vision is true.
	VisionDetail string `toml:"vision_detail"`
	// NoProxy reaches this provider's base_url directly, never through the proxy.
	// For China-only endpoints a foreign-exit proxy resets the TLS handshake (#2803).
	NoProxy bool `toml:"no_proxy"`
	// CodingOnly marks this provider as consuming a Coding Plan subscription
	// quota (vs the regular token quota). UI surfaces a "consumes subscription
	// quota" hint; optionally restricts to coding-tool use per vendor terms.
	CodingOnly bool `toml:"coding_only"`
	// Aggregator marks this provider as a model-aggregation platform that can
	// call multiple vendors' models under one endpoint+key (e.g. a Coding Plan).
	// UI groups these under an "aggregators" section; not a routing branch.
	Aggregator bool `toml:"aggregator"`
}

type QQBotConfig struct {
	Enabled      bool   `toml:"enabled"`
	AppID        string `toml:"app_id"`
	AppSecretEnv string `toml:"app_secret_env"` // 环境变量名，如 QQ_BOT_APP_SECRET
}

type RenderScope string

type SMTPConfig struct {
	Host           string `toml:"host"`            // SMTP server host, e.g. smtp.example.com
	Port           int    `toml:"port"`            // SMTP port (587 for STARTTLS, 465 for implicit TLS, 25 plain)
	From           string `toml:"from"`            // sender address, e.g. agent@example.com
	Username       string `toml:"username"`        // SMTP auth username (often = From); empty = no auth
	PasswordEnv    string `toml:"password_env"`    // env var holding the SMTP password (never stored)
	UseTLS         bool   `toml:"use_tls"`         // implicit TLS (port 465); false = STARTTLS/plain. DEPRECATED: use encryption_mode.
	EncryptionMode string `toml:"encryption_mode"` // "tls" (implicit, 465) | "starttls" (587) | "none" (25). Empty → migrate from use_tls.
}

type SandboxConfig struct {
	WorkspaceRoot string   `toml:"workspace_root"`
	AllowWrite    []string `toml:"allow_write"`
	// Bash is the OS-sandbox mode for the bash tool: "enforce" (default) jails
	// each command, "off" runs it unconfined. Phase 1; macOS only for now, with
	// a graceful fallback elsewhere (see internal/sandbox).
	Bash string `toml:"bash"`
	// Network allows network egress from inside the bash sandbox. Defaults true
	// so module/package downloads keep working; the boundary is then writes.
	Network bool `toml:"network"`
	// RequireAvailable, when true, makes bash mode "enforce" fail-closed (refuse
	// all commands) if no OS sandbox is available on this platform, rather than
	// silently degrading to unconfined. False (default) keeps the graceful
	// fallback so fairpeer stays usable on unsupported OSes.
	RequireAvailable bool `toml:"require_available"`
	// StrictWrites narrows the macOS Seatbelt toolchain-cache grants to true
	// cache subdirs only (~/.cargo/registry/cache, ~/Library/Caches, …) so a
	// prompt-injected command can't drop an executable in ~/.cargo/bin or
	// ~/.npm. Default false: the broad grants are needed for `go install`/
	// `cargo build`/`npm install` (they write to bin/pkg dirs). Turn on for
	// high-security deployments that don't run build tools. Audit A8. macOS only.
	StrictWrites bool `toml:"strict_writes"`
	// ReadRoots confines read_file/grep to these directories (opt-in). Empty =
	// unconfined reads (the default), because an agent legitimately reads /etc,
	// system headers, ~/.gitconfig, package caches, etc. A high-security
	// deployment that wants read/data isolation sets this; boot then wires
	// ConfineReaders to override the unconfined defaults. Note: bash is NOT
	// read-confined even when this is set, so this is defense-in-depth. Audit A7.
	ReadRoots []string `toml:"read_roots"`
}

type SearchConfig struct {
	Engine string `toml:"engine"`
	RgPath string `toml:"rg_path"`
}

type SkillsConfig struct {
	Paths          []string `toml:"paths"`
	ExcludedPaths  []string `toml:"excluded_paths"`
	DisabledSkills []string `toml:"disabled_skills"`
	MaxDepth       int      `toml:"max_depth"`
}

type StatuslineConfig struct {
	Command string `toml:"command"`
}

type TelegramBotConfig struct {
	Enabled  bool   `toml:"enabled"`
	TokenEnv string `toml:"token_env"` // 环境变量名，如 TELEGRAM_BOT_TOKEN
	APIBase  string `toml:"api_base"`  // 可选：自建 Bot API 服务器，空 = 官方 https://api.telegram.org
}

type ToolsConfig struct {
	Enabled            []string     `toml:"enabled"`
	BashTimeoutSeconds *int         `toml:"bash_timeout_seconds"`
	Search             SearchConfig `toml:"search"`
}

type TrustDomainConfig struct {
	Enabled bool `toml:"enabled"`
	// SignalURL is the rendezvous point ("wss://host/knock"); empty means
	// LAN-only discovery (mDNS / bootstrap peers).
	SignalURL string `toml:"signal_url"`
	// DomainID is the genesis block hash (hex) — the domain's permanent
	// identity. Empty = this host is not yet admitted to any domain.
	DomainID string `toml:"domain_id"`
	// DataDir holds the ledger, identity key and related state. Empty =
	// <user config dir>/trustdomain.
	DataDir string `toml:"data_dir"`
	// BootstrapPeers lists known member addresses ("host:port"). Gossip is
	// pull-based, so a fleet configures these bidirectionally (mesh) —
	// spec §四/§17: servers should not rely on avahi/mDNS being present.
	BootstrapPeers []string `toml:"bootstrap_peers"`
	// ListenAddr is the TCP listener for inbound peers (default ":7123";
	// "127.0.0.1:0" for a private ephemeral port).
	ListenAddr string `toml:"listen_addr"`
	// Discover enables UDP-broadcast LAN discovery (spec §四①): signed
	// beacons on DiscoveryPort announce members of THIS domain; discovered
	// addresses merge into the peer set. Addresses only — trust stays with
	// the membership handshake.
	Discover bool `toml:"discover"`
	// DiscoveryPort is the UDP beacon port (default 7125).
	DiscoveryPort int `toml:"discovery_port"`
	// Admins lists founding/known admin public keys (base64, std encoding)
	// for display and admission flows; the authoritative set lives on the
	// chain itself.
	Admins []string `toml:"admins"`
	// QuorumM mirrors the domain's admin quorum threshold for pre-join
	// display; the chain is authoritative.
	QuorumM int `toml:"quorum_m"`

	// Limits tune the node loop (chain-internal caps like MaxBlockBytes
	// are constants in internal/trustdomain).
	AttestIntervalSec     int    `toml:"attest_interval_sec"`     // 0 = 60
	CheckpointEveryBlocks uint64 `toml:"checkpoint_every_blocks"` // 0 = off, manual only
	TickIntervalSec       int    `toml:"tick_interval_sec"`       // 0 = 5
}

type UIConfig struct {
	Theme          string `toml:"theme"`           // auto|dark|light; empty resolves to auto
	ThemeStyle     string `toml:"theme_style"`     // graphite|aurora|slate|carbon|nocturne|amber and legacy aliases
	ShortcutLayout string `toml:"shortcut_layout"` // classic|desktop; accepted for compatibility
	CloseBehavior  string `toml:"close_behavior"`  // legacy desktop close behavior; prefer desktop.close_behavior
	ShowReasoning  bool   `toml:"show_reasoning"`  // Ctrl+O / /verbose: show thinking text in CLI; false = collapsed
}

type WeixinBotConfig struct {
	Enabled   bool   `toml:"enabled"`
	AccountID string `toml:"account_id"`
	TokenEnv  string `toml:"token_env"` // 环境变量名，如 WEIXIN_BOT_TOKEN
	APIBase   string `toml:"api_base"`  // iLink API base URL
}