zeph-config 0.22.4

// SPDX-FileCopyrightText: 2026 Andrei G <bug-ops>
// SPDX-License-Identifier: MIT OR Apache-2.0

use std::collections::HashMap;
use std::num::NonZeroUsize;

use crate::tools::ToolsConfig;
use serde::{Deserialize, Serialize};
use zeph_common::secret::Secret;

use crate::agent::{AgentConfig, FocusConfig, GoalConfig, SubAgentConfig};
use crate::channels::{
    A2aClientConfig, A2aServerConfig, DiscordConfig, McpConfig, SlackConfig, TelegramConfig,
};
use crate::classifiers::ClassifiersConfig;
use crate::cli::CliConfig;
use crate::cocoon::CocoonConfig;
use crate::defaults::{default_skill_paths, default_sqlite_path_field};
use crate::execution::ExecutionConfig;
use crate::experiment::{ExperimentConfig, OrchestrationConfig};
use crate::features::{
    CostConfig, DaemonConfig, DebugConfig, GatewayConfig, IndexConfig, RegistryConfig,
    SchedulerConfig, SkillPromptMode, SkillsConfig, VaultConfig,
};
use crate::hooks::HooksConfig;
use crate::learning::LearningConfig;
use crate::logging::LoggingConfig;
use crate::memory::{
    CompressionConfig, DocumentConfig, GraphConfig, MagicDocsConfig, MemoryConfig, SemanticConfig,
    SessionsConfig, SidequestConfig, TierConfig, VectorBackend,
};
use crate::metrics::MetricsConfig;
use crate::notifications::NotificationsConfig;
use crate::providers::{
    LlmConfig, ProviderEntry, get_default_embedding_model, get_default_response_cache_ttl_secs,
    get_default_router_ema_alpha, get_default_router_reorder_interval,
};
use crate::security::TrustConfig;
use crate::security::{SecurityConfig, TimeoutConfig};
use crate::telemetry::TelemetryConfig;
use crate::ui::LspConfig;
use crate::ui::{AcpConfig, TuiConfig};

/// Top-level agent configuration.
///
/// Loaded from a TOML file via [`Config::load`]. Env-var overrides can be applied
/// via `apply_env_overrides`. Secret resolution via `VaultProvider`
/// is handled in `zeph-core` through the `SecretResolver` trait.
#[derive(Debug, Deserialize, Serialize)]
pub struct Config {
    pub agent: AgentConfig,
    pub llm: LlmConfig,
    pub skills: SkillsConfig,
    pub memory: MemoryConfig,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub telegram: Option<TelegramConfig>,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub discord: Option<DiscordConfig>,
    #[serde(skip_serializing_if = "Option::is_none")]
    pub slack: Option<SlackConfig>,
    #[serde(default)]
    pub tools: ToolsConfig,
    /// Named execution environments for per-turn CWD and env-var selection.
    ///
    /// Opt-in — existing configs without `[execution]` deserialise with all defaults.
    #[serde(default)]
    pub execution: ExecutionConfig,
    #[serde(default)]
    pub a2a: A2aServerConfig,
    /// Client-side security policy for `zeph --connect <URL>` (remote-TUI A2A attach).
    /// Separate from `[a2a]`, which governs this process's own A2A server (#5878).
    #[serde(default)]
    pub a2a_client: A2aClientConfig,
    #[serde(default)]
    pub mcp: McpConfig,
    #[serde(default)]
    pub index: IndexConfig,
    #[serde(default)]
    pub vault: VaultConfig,
    #[serde(default)]
    pub security: SecurityConfig,
    #[serde(default)]
    pub timeouts: TimeoutConfig,
    #[serde(default)]
    pub cost: CostConfig,
    #[serde(default)]
    pub gateway: GatewayConfig,
    #[serde(default)]
    pub daemon: DaemonConfig,
    #[serde(default)]
    pub scheduler: SchedulerConfig,
    #[serde(default)]
    pub tui: TuiConfig,
    #[serde(default)]
    pub acp: AcpConfig,
    #[serde(default)]
    pub agents: SubAgentConfig,
    #[serde(default)]
    pub orchestration: OrchestrationConfig,
    #[serde(default)]
    pub classifiers: ClassifiersConfig,
    #[serde(default)]
    pub experiments: ExperimentConfig,
    #[serde(default)]
    pub debug: DebugConfig,
    #[serde(default)]
    pub logging: LoggingConfig,
    #[serde(default)]
    pub hooks: HooksConfig,
    #[serde(default)]
    pub lsp: LspConfig,
    /// `MagicDocs` auto-maintained markdown (#2702).
    #[serde(default)]
    pub magic_docs: MagicDocsConfig,
    /// Profiling and distributed tracing configuration.
    #[serde(default)]
    pub telemetry: TelemetryConfig,
    /// Prometheus metrics export configuration.
    #[serde(default)]
    pub metrics: MetricsConfig,
    /// Session UX settings (recap-on-resume, etc.).
    #[serde(default)]
    pub session: crate::session::SessionConfig,
    /// `zeph serve` persistent agent service settings (spec-068 §9).
    #[serde(default)]
    pub serve: crate::serve::ServeConfig,
    /// Session-scoped CLI overrides (bare mode, JSON output, auto-approve).
    #[serde(default)]
    pub cli: CliConfig,
    /// MARCH self-check quality pipeline configuration.
    #[serde(default)]
    pub quality: crate::quality::QualityConfig,
    /// Per-turn completion notification settings (macOS banners, ntfy webhook).
    #[serde(default)]
    pub notifications: NotificationsConfig,
    /// Long-horizon goal lifecycle configuration.
    #[serde(default)]
    pub goals: GoalConfig,
    /// Cocoon display and behaviour settings (independent of `[[llm.providers]]` Cocoon entry).
    #[serde(default)]
    pub cocoon: CocoonConfig,
    /// Resolved secrets from vault. Never serialized — populated at runtime.
    #[serde(skip)]
    pub secrets: ResolvedSecrets,
    /// Git worktree isolation configuration.
    #[serde(default)]
    pub worktree: crate::worktree::WorktreeConfig,
    /// Durable execution layer configuration (`[durable]`).
    #[serde(default)]
    pub durable: crate::durable::DurableConfig,
    /// Vault-anchor downgrade-resistance configuration (`[integrity]`, issue #6449).
    #[serde(default)]
    pub integrity: crate::integrity::IntegrityConfig,
    /// Ultra-compressed telegraphic output mode configuration (`[caveman]`).
    ///
    /// Toggle at runtime with `/caveman [on|off]` or via the bundled `caveman` skill.
    #[serde(default)]
    pub caveman: crate::features::CavemanConfig,
    /// Knowledge-ingest subsystem configuration (`[knowledge]`).
    ///
    /// Controls `zeph knowledge ingest` behaviour: provider selection, concurrency cap,
    /// document limit, and recall inclusion of imported rows (spec-067).
    #[serde(default)]
    pub knowledge: crate::knowledge::KnowledgeConfig,
    /// Plugin subsystem configuration (`[plugins]`), currently the install-time
    /// name-similarity/typosquat check (spec-043, #5864).
    #[serde(default)]
    pub plugins: crate::plugins::PluginsConfig,
    /// Deep-link scheme configuration (`[deep_link]`). Gated by the `deep-link` feature.
    #[cfg(feature = "deep-link")]
    #[serde(default)]
    pub deep_link: crate::deep_link::DeepLinkConfig,
}

/// Secrets resolved from the vault at runtime.
///
/// Populated by `SecretResolver::resolve_secrets()` in `zeph-core`.
/// Never serialized to TOML.
#[derive(Debug, Default)]
pub struct ResolvedSecrets {
    pub claude_api_key: Option<Secret>,
    pub openai_api_key: Option<Secret>,
    pub gemini_api_key: Option<Secret>,
    pub compatible_api_keys: HashMap<String, Secret>,
    pub discord_token: Option<Secret>,
    pub slack_bot_token: Option<Secret>,
    pub slack_signing_secret: Option<Secret>,
    /// Gonka wallet private key for signing blockchain transactions.
    pub gonka_private_key: Option<Secret>,
    /// Gonka wallet address for node identity verification.
    pub gonka_address: Option<Secret>,
    /// Cocoon sidecar access hash resolved from the vault key `ZEPH_COCOON_ACCESS_HASH`.
    pub cocoon_access_hash: Option<Secret>,
    /// Skill/plugin registry bearer credential, resolved from the vault key named by
    /// `skills.registry.auth_vault_key` when `skills.registry.enabled = true` (spec-045,
    /// #5869). `None` when the registry is disabled or `auth_vault_key` is unset.
    pub skill_registry_token: Option<Secret>,
    /// `web_search` tool API key, resolved from the vault key named by
    /// `tools.search.api_key_vault_key` when `tools.search.enabled = true` (spec
    /// 006-1-web-search). `None` when the tool is disabled or the key is unset.
    pub web_search_api_key: Option<Secret>,
    /// Arbitrary named secrets resolved from `ZEPH_SECRET_*` vault keys.
    /// Key is the lowercased name after stripping the prefix (e.g. `github_token`).
    ///
    /// Shared by two consumers: skill `requires_secrets` injection (see
    /// `zeph-core::agent::tool_execution::inject_active_skill_env`) and sub-agent
    /// `permissions.secrets` approval (see `zeph-core::agent::subagent_commands::resolve_subagent_secret`).
    pub custom: HashMap<String, Secret>,
}

impl Default for Config {
    #[allow(clippy::too_many_lines)] // flat struct literal with one field per config section — no meaningful split exists
    fn default() -> Self {
        Self {
            agent: AgentConfig {
                name: "Zeph".into(),
                max_tool_iterations: 10,
                auto_update_check: true,
                instruction_files: Vec::new(),
                instruction_auto_detect: true,
                max_tool_retries: 2,
                tool_repeat_threshold: 2,
                max_retry_duration_secs: 30,
                focus: FocusConfig::default(),
                tool_filter: crate::agent::ToolFilterConfig::default(),
                budget_hint_enabled: true,
                supervisor: crate::agent::TaskSupervisorConfig::default(),
                time_reminder_enabled: false,
                time_reminder_interval_requests: 10,
            },
            llm: LlmConfig {
                // #5932/#6018-followup (critic S1): `Config::default()` must itself satisfy
                // `validate_pool` (non-empty pool), since it is what `--dump-config-defaults`
                // serializes and what `Config::load()`/`run_tui_remote` fall back to when no
                // config file exists — mirrors the single active `[[llm.providers]]` entry the
                // shipped `config/default.toml` reference ships.
                providers: vec![ProviderEntry::default()],
                routing: crate::providers::LlmRoutingStrategy::None,
                embedding_model: get_default_embedding_model(),
                candle: None,
                stt: None,
                response_cache_enabled: false,
                response_cache_ttl_secs: get_default_response_cache_ttl_secs(),
                semantic_cache_enabled: false,
                semantic_cache_threshold: 0.95,
                semantic_cache_max_candidates: 10,
                router_ema_enabled: false,
                router_ema_alpha: get_default_router_ema_alpha(),
                router_reorder_interval: get_default_router_reorder_interval(),
                router: None,
                instruction_file: None,
                summary_model: None,
                summary_provider: None,
                complexity_routing: None,
                coe: None,
                stream_limits: crate::StreamLimits::default(),
            },
            skills: SkillsConfig {
                paths: default_skill_paths(),
                max_active_skills: NonZeroUsize::new(5).expect("5 is non-zero"),
                disambiguation_threshold: 0.20,
                min_injection_score: 0.20,
                cosine_weight: 0.7,
                hybrid_search: true,
                bm25_alpha: 0.7,
                learning: LearningConfig::default(),
                trust: TrustConfig::default(),
                registry: RegistryConfig::default(),
                prompt_mode: SkillPromptMode::Auto,
                two_stage_matching: false,
                confusability_threshold: 0.0,
                rl_routing_enabled: false,
                rl_learning_rate: 0.01,
                rl_weight: 0.3,
                rl_persist_interval: 10,
                rl_warmup_updates: 50,
                rl_embed_dim: None,
                query_rewrite_provider: crate::providers::ProviderName::default(),
                generation_provider: crate::providers::ProviderName::default(),
                generation_timeout_ms: 60_000,
                generation_output_dir: None,
                mining: crate::features::SkillMiningConfig::default(),
                evaluation: crate::features::SkillEvaluationConfig::default(),
                proactive_exploration: crate::features::ProactiveExplorationConfig::default(),
                disambiguate_provider: crate::providers::ProviderName::default(),
                semantic_scan: false,
                semantic_scan_provider: crate::providers::ProviderName::default(),
                group_structured: false,
                support_similarity_threshold: 0.50,
                subagent_skill_token_budget: NonZeroUsize::new(12_000).expect("12000 is non-zero"),
            },
            memory: MemoryConfig {
                sqlite_path: default_sqlite_path_field(),
                history_limit: 50,
                qdrant_url: "http://localhost:6334".into(),
                qdrant_api_key: None,
                qdrant_timeout_secs: 10,
                semantic: SemanticConfig::default(),
                summarization_threshold: 50,
                summarization_llm_timeout_secs: 60,
                context_budget_tokens: 0,
                soft_compaction_threshold: 0.60,
                hard_compaction_threshold: 0.90,
                compaction_preserve_tail: 6,
                compaction_cooldown_turns: 2,
                auto_budget: true,
                prune_protect_tokens: 40_000,
                cross_session_score_threshold: 0.35,
                vector_backend: VectorBackend::default(),
                token_safety_margin: 1.0,
                redact_credentials: true,
                autosave_assistant: true,
                autosave_min_length: 20,
                tool_call_cutoff: 6,
                sqlite_pool_size: 5,
                sessions: SessionsConfig::default(),
                documents: DocumentConfig::default(),
                eviction: crate::memory::EvictionConfig::default(),
                compression: CompressionConfig::default(),
                sidequest: SidequestConfig::default(),
                graph: GraphConfig::default(),
                compression_guidelines: crate::memory::CompressionGuidelinesConfig::default(),
                shutdown_summary: true,
                shutdown_summary_min_messages: 4,
                shutdown_summary_max_messages: 20,
                shutdown_summary_timeout_secs: 30,
                shutdown_summary_provider: crate::providers::ProviderName::default(),
                compaction_provider: crate::providers::ProviderName::default(),
                structured_summaries: false,
                tiers: TierConfig::default(),
                admission: crate::memory::AdmissionConfig::default(),
                digest: crate::memory::DigestConfig::default(),
                context_strategy: crate::memory::ContextStrategy::default(),
                crossover_turn_threshold: 20,
                consolidation: crate::memory::ConsolidationConfig::default(),
                forgetting: crate::memory::ForgettingConfig::default(),
                database_url: None,
                store_routing: crate::memory::StoreRoutingConfig::default(),
                persona: crate::memory::PersonaConfig::default(),
                trajectory: crate::memory::TrajectoryConfig::default(),
                category: crate::memory::CategoryConfig::default(),
                tree: crate::memory::TreeConfig::default(),
                microcompact: crate::memory::MicrocompactConfig::default(),
                autodream: crate::memory::AutoDreamConfig::default(),
                key_facts_dedup_threshold: 0.95,
                compression_spectrum: crate::features::CompressionSpectrumConfig::default(),
                retrieval: crate::memory::RetrievalConfig::default(),
                reasoning: crate::memory::ReasoningConfig::default(),
                hebbian: crate::memory::HebbianConfig::default(),
                memcot: crate::memory::MemCotConfig::default(),
                retrieval_failures: crate::memory::RetrievalFailuresConfig::default(),
                quality_gate: crate::memory::WriteQualityGateConfig::default(),
                tiered_retrieval: crate::memory::TieredRetrievalConfig::default(),
                type_aware_compose: crate::memory::TypeAwareComposeConfig::default(),
                optical_forgetting: crate::memory::OpticalForgettingConfig::default(),
                em_graph: crate::memory::EmGraphConfig::default(),
                episodic_consolidation: crate::memory::EpisodicConsolidationConfig::default(),
                shadow_memory: crate::memory::TrajectoryRiskAccumulatorConfig::default(),
                five_signal: crate::memory::FiveSignalConfig::default(),
                fidelity: None,
                store: crate::memory::CrossThreadStoreConfig::default(),
                consent_gate: crate::memory::ConsentGateConfig::default(),
            },
            telegram: None,
            discord: None,
            slack: None,
            tools: ToolsConfig::default(),
            execution: ExecutionConfig::default(),
            a2a: A2aServerConfig::default(),
            a2a_client: A2aClientConfig::default(),
            mcp: McpConfig::default(),
            index: IndexConfig::default(),
            vault: VaultConfig::default(),
            security: SecurityConfig::default(),
            timeouts: TimeoutConfig::default(),
            cost: CostConfig::default(),
            gateway: GatewayConfig::default(),
            daemon: DaemonConfig::default(),
            scheduler: SchedulerConfig::default(),
            tui: TuiConfig::default(),
            acp: AcpConfig::default(),
            agents: SubAgentConfig::default(),
            orchestration: OrchestrationConfig::default(),
            classifiers: ClassifiersConfig::default(),
            experiments: ExperimentConfig::default(),
            debug: DebugConfig::default(),
            logging: LoggingConfig::default(),
            lsp: LspConfig::default(),
            hooks: HooksConfig::default(),
            magic_docs: MagicDocsConfig::default(),
            telemetry: TelemetryConfig::default(),
            metrics: MetricsConfig::default(),
            session: crate::session::SessionConfig::default(),
            serve: crate::serve::ServeConfig::default(),
            cli: CliConfig::default(),
            quality: crate::quality::QualityConfig::default(),
            notifications: NotificationsConfig::default(),
            goals: GoalConfig::default(),
            cocoon: CocoonConfig::default(),
            secrets: ResolvedSecrets::default(),
            worktree: crate::worktree::WorktreeConfig::default(),
            durable: crate::durable::DurableConfig::default(),
            integrity: crate::integrity::IntegrityConfig::default(),
            caveman: crate::features::CavemanConfig::default(),
            knowledge: crate::knowledge::KnowledgeConfig::default(),
            plugins: crate::plugins::PluginsConfig::default(),
            #[cfg(feature = "deep-link")]
            deep_link: crate::deep_link::DeepLinkConfig::default(),
        }
    }
}