aft/config.rs
1use std::collections::{HashMap, HashSet};
2use std::path::PathBuf;
3
4use serde::{Deserialize, Serialize};
5
6use crate::harness::Harness;
7
8/// Runtime configuration for the aft process.
9///
10/// Holds project-scoped settings and tuning knobs. Values are set at startup
11/// and remain immutable for the lifetime of the process.
12#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
13#[serde(rename_all = "snake_case")]
14pub enum SemanticBackend {
15 Fastembed,
16 #[serde(rename = "openai_compatible")]
17 OpenAiCompatible,
18 Ollama,
19}
20
21impl SemanticBackend {
22 pub const fn as_str(&self) -> &'static str {
23 match self {
24 Self::Fastembed => "fastembed",
25 Self::OpenAiCompatible => "openai_compatible",
26 Self::Ollama => "ollama",
27 }
28 }
29
30 pub fn from_name(name: &str) -> Option<Self> {
31 match name {
32 "fastembed" => Some(Self::Fastembed),
33 "openai_compatible" => Some(Self::OpenAiCompatible),
34 "ollama" => Some(Self::Ollama),
35 _ => None,
36 }
37 }
38}
39
40#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
41pub struct SemanticBackendConfig {
42 pub backend: SemanticBackend,
43 pub model: String,
44 pub base_url: Option<String>,
45 pub api_key_env: Option<String>,
46 pub timeout_ms: u64,
47 pub max_batch_size: usize,
48 /// Maximum number of project files to semantically index. Guards local
49 /// fastembed memory (model + embeddings + batch buffers) on huge project
50 /// roots; remote backends that embed server-side can raise it freely.
51 pub max_files: usize,
52}
53
54#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]
55pub struct UserServerDef {
56 pub id: String,
57 pub extensions: Vec<String>,
58 pub binary: String,
59 pub args: Vec<String>,
60 pub root_markers: Vec<String>,
61 pub env: HashMap<String, String>,
62 pub initialization_options: Option<serde_json::Value>,
63 pub disabled: bool,
64}
65
66impl Default for SemanticBackendConfig {
67 fn default() -> Self {
68 Self {
69 backend: SemanticBackend::Fastembed,
70 model: DEFAULT_SEMANTIC_MODEL.to_string(),
71 base_url: None,
72 api_key_env: None,
73 // Keep the default below the plugin bridge timeout to avoid bridge-killed
74 // semantic_search requests when callers do not set an explicit timeout.
75 timeout_ms: 25_000,
76 max_batch_size: 64,
77 max_files: 20_000,
78 }
79 }
80}
81
82pub const DEFAULT_SEMANTIC_MODEL: &str = "all-MiniLM-L6-v2";
83
84impl Config {
85 pub fn semantic_backend_label(&self) -> &'static str {
86 self.semantic.backend.as_str()
87 }
88}
89
90#[derive(Debug, Clone, Serialize, Deserialize)]
91#[serde(default)]
92pub struct Config {
93 /// Root directory of the project being analyzed. `None` if not scoped.
94 pub project_root: Option<PathBuf>,
95 /// How many levels of call-graph edges to follow during validation (default: 1).
96 pub validation_depth: u32,
97 /// Hours before a checkpoint expires and is eligible for cleanup (default: 24).
98 pub checkpoint_ttl_hours: u32,
99 /// Maximum depth for recursive symbol resolution (default: 10).
100 pub max_symbol_depth: u32,
101 /// Seconds before killing a formatter subprocess (default: 10).
102 pub formatter_timeout_secs: u32,
103 /// Seconds before killing a type-checker subprocess (default: 30).
104 pub type_checker_timeout_secs: u32,
105 /// Whether to auto-format files after edits (default: true).
106 pub format_on_edit: bool,
107 /// Whether to auto-validate files after edits (default: false).
108 /// When "syntax", only tree-sitter parse check. When "full", runs type checker.
109 pub validate_on_edit: Option<String>,
110 /// Per-language formatter overrides. Keys: "typescript", "python", "rust", "go".
111 /// Values: "biome", "oxfmt", "prettier", "deno", "ruff", "black", "rustfmt", "goimports", "gofmt", "none".
112 pub formatter: HashMap<String, String>,
113 /// Per-language type checker overrides. Keys: "typescript", "python", "rust", "go".
114 /// Values: "tsc", "tsgo", "biome", "pyright", "ruff", "cargo", "go", "staticcheck", "none".
115 pub checker: HashMap<String, String>,
116 /// Whether to restrict file operations to within `project_root` (default: false).
117 /// When true, write-capable commands reject paths outside the project root.
118 pub restrict_to_project_root: bool,
119 /// Enable the trigram search index (default: false).
120 pub search_index: bool,
121 /// Enable semantic search (default: false).
122 pub semantic_search: bool,
123 /// Whether the plugin registered the `aft_search` tool for this surface
124 /// (default: false). Forwarded by the plugin's resolved registration
125 /// predicate (semantic on + not minimal + not disabled). Used only to pick
126 /// the grep-rewrite footer: when true the footer steers to `aft_search`,
127 /// otherwise to the `grep` tool. Not a capability gate.
128 pub aft_search_registered: bool,
129 /// Enable the persisted callgraph store substrate (default: false).
130 pub callgraph_store: bool,
131 /// Enable experimental bash command rewriting (default: false).
132 pub experimental_bash_rewrite: bool,
133 /// Enable experimental bash command compression (default: false).
134 pub experimental_bash_compress: bool,
135 /// Enable experimental bash background execution (default: false).
136 pub experimental_bash_background: bool,
137 /// Maximum number of background bash tasks allowed to run concurrently (default: 8).
138 pub max_background_bash_tasks: usize,
139 /// Emit reminders for long-running bash tasks (default: true).
140 pub bash_long_running_reminder_enabled: bool,
141 /// Milliseconds between long-running bash reminders (default: 10 minutes).
142 pub bash_long_running_reminder_interval_ms: u64,
143 /// Enable OpenCode-style bash permission prompts (default: false).
144 pub bash_permissions: bool,
145 /// Maximum file size to fully index in bytes (default: 1MB).
146 pub search_index_max_file_size: u64,
147 /// Maximum number of source files allowed for legacy in-memory call-graph operations
148 /// (`trace_data`, symbol move analysis, and dead-code snapshots). Store-backed
149 /// edge-query commands (`callers`, `call_tree`, `impact`, `trace_to`,
150 /// `trace_to_symbol`) are not capped by this setting. Does not affect
151 /// `grep`, `glob`, `read`, `edit`, or other non-callgraph features.
152 /// Default: 5_000 (matches measured per-op cost ceilings; raise for
153 /// very large projects if you accept multi-minute per-call latency).
154 pub max_callgraph_files: usize,
155 pub semantic: SemanticBackendConfig,
156 /// Enable Astral ty as an experimental Python LSP server (default: false).
157 pub experimental_lsp_ty: bool,
158 /// User-defined LSP servers registered by the OpenCode plugin.
159 pub lsp_servers: Vec<UserServerDef>,
160 /// Lowercase LSP server IDs disabled by user config.
161 pub disabled_lsp: HashSet<String>,
162 /// Extra directories to search when resolving LSP binaries.
163 /// The plugin populates these from its own auto-install cache (e.g.
164 /// `~/.cache/aft/lsp-packages/<pkg>/node_modules/.bin/`) so a binary AFT
165 /// installed itself is discoverable without needing it on PATH.
166 /// Resolution order: `<project_root>/node_modules/.bin/<bin>` →
167 /// `lsp_paths_extra/<bin>` (in order) → PATH via `which`.
168 pub lsp_paths_extra: Vec<PathBuf>,
169 /// Binary names the hosting plugin knows how to auto-install.
170 ///
171 /// Built-in LSPs discovered from files only emit missing-binary warnings
172 /// when their binary is in this set. User-configured `lsp_servers` keep
173 /// warning unconditionally.
174 pub lsp_auto_install_binaries: HashSet<String>,
175 /// Binary names with plugin-managed auto-installs currently in flight.
176 ///
177 /// Missing-binary warnings are suppressed while the install is actively
178 /// running; install failure reporting is handled by the plugin after the
179 /// background work settles.
180 pub lsp_inflight_installs: HashSet<String>,
181 /// Persistent storage directory for indexes (trigram, semantic).
182 /// Set by the plugin to the XDG-compliant path (e.g. ~/.local/share/opencode/storage/plugin/aft/).
183 /// Falls back to ~/.cache/aft/ if not set.
184 pub storage_dir: Option<PathBuf>,
185 /// Allow URL-fetch commands to access private network hosts.
186 /// Default false; hosting plugins only forward this from user-level config.
187 pub url_fetch_allow_private: bool,
188 /// Hosting harness identity supplied by configure.
189 #[serde(default)]
190 pub harness: Option<Harness>,
191 /// Maximum number of (server, file) entries kept in the in-memory
192 /// diagnostic cache. Older entries are evicted in LRU order when the
193 /// cap is exceeded. Set to 0 to disable the cap entirely.
194 /// Default: 5000 (covers very large monorepos with bounded memory).
195 pub diagnostic_cache_size: usize,
196}
197
198impl Default for Config {
199 fn default() -> Self {
200 Config {
201 project_root: None,
202 validation_depth: 1,
203 checkpoint_ttl_hours: 24,
204 max_symbol_depth: 10,
205 formatter_timeout_secs: 10,
206 type_checker_timeout_secs: 30,
207 format_on_edit: true,
208 validate_on_edit: None,
209 formatter: HashMap::new(),
210 checker: HashMap::new(),
211 // Default to false to match OpenCode's existing permission-based model.
212 // The plugin opts into root restriction explicitly when desired.
213 restrict_to_project_root: false,
214 search_index: false,
215 semantic_search: false,
216 aft_search_registered: false,
217 callgraph_store: false,
218 experimental_bash_rewrite: false,
219 experimental_bash_compress: false,
220 experimental_bash_background: false,
221 max_background_bash_tasks: 8,
222 bash_long_running_reminder_enabled: true,
223 bash_long_running_reminder_interval_ms: 600_000,
224 bash_permissions: false,
225 search_index_max_file_size: 1_048_576,
226 // Projects larger than this skip legacy in-memory reverse-index construction.
227 //
228 // The previous default (20_000) was set by hand-wave to "fits under
229 // the 30 s bridge timeout" without measurement. Direct benchmarks
230 // showed the cost is super-linear (tree-sitter parse + reverse-index
231 // build per file): a 6.8K-file Rust project took 41 s — already past
232 // the 60 s per-callgraph-op timeout. At 10 K extrapolated cost is
233 // ~80–100 s; at 20 K it's 5+ minutes. So the old default routinely
234 // produced "timed out, restarting bridge" rather than a clean
235 // `project_too_large` rejection.
236 //
237 // 5_000 reflects measured reality: at this size, callgraph
238 // operations on a real Rust/TS project complete in roughly 30–40 s,
239 // matching the per-op timeout budget. Users with bigger projects
240 // can raise this knob, but the default should not advertise
241 // capabilities that fail in practice. Read/edit/grep/glob/outline/
242 // semantic_search/AST/LSP and the store-backed callgraph edge ops all
243 // remain unaffected by this cap — it gates legacy `trace_data`,
244 // dead-code snapshots, and `aft_refactor op="move"`.
245 max_callgraph_files: 5_000,
246 semantic: SemanticBackendConfig::default(),
247 experimental_lsp_ty: false,
248 lsp_servers: Vec::new(),
249 disabled_lsp: HashSet::new(),
250 lsp_paths_extra: Vec::new(),
251 lsp_auto_install_binaries: HashSet::new(),
252 lsp_inflight_installs: HashSet::new(),
253 storage_dir: None,
254 url_fetch_allow_private: false,
255 harness: None,
256 diagnostic_cache_size: 5000,
257 }
258 }
259}