config

type BashOutputConfig struct {
	SyncThresholdBytes  *int `json:"syncThresholdBytes,omitempty"`  // Spool sync output to disk after exceeding this many bytes.
	AsyncThresholdBytes *int `json:"asyncThresholdBytes,omitempty"` // Spool async output to disk after exceeding this many bytes.
}

type FS struct {
	// contains filtered or unexported fields
}

type HookDefinition struct {
	Type          string `json:"type"`                    // "command" (default), "prompt", or "agent"
	Command       string `json:"command,omitempty"`       // Shell command (type=command)
	Prompt        string `json:"prompt,omitempty"`        // LLM prompt (type=prompt)
	Model         string `json:"model,omitempty"`         // Model override (type=prompt/agent)
	Timeout       int    `json:"timeout,omitempty"`       // Per-hook timeout in seconds (0 = use default)
	Async         bool   `json:"async,omitempty"`         // Fire-and-forget execution
	Once          bool   `json:"once,omitempty"`          // Execute only once per session
	StatusMessage string `json:"statusMessage,omitempty"` // Status message shown during execution
}

type HookMatcherEntry struct {
	Matcher string           `json:"matcher"`
	Hooks   []HookDefinition `json:"hooks"`
}

type HooksConfig struct {
	PreToolUse         []HookMatcherEntry `json:"PreToolUse,omitempty"`
	PostToolUse        []HookMatcherEntry `json:"PostToolUse,omitempty"`
	PostToolUseFailure []HookMatcherEntry `json:"PostToolUseFailure,omitempty"`
	PermissionRequest  []HookMatcherEntry `json:"PermissionRequest,omitempty"`
	SessionStart       []HookMatcherEntry `json:"SessionStart,omitempty"`
	SessionEnd         []HookMatcherEntry `json:"SessionEnd,omitempty"`
	SubagentStart      []HookMatcherEntry `json:"SubagentStart,omitempty"`
	SubagentStop       []HookMatcherEntry `json:"SubagentStop,omitempty"`
	Stop               []HookMatcherEntry `json:"Stop,omitempty"`
	Notification       []HookMatcherEntry `json:"Notification,omitempty"`
	UserPromptSubmit   []HookMatcherEntry `json:"UserPromptSubmit,omitempty"`
	PreCompact         []HookMatcherEntry `json:"PreCompact,omitempty"`
}

type MCPConfig struct {
	Servers map[string]MCPServerConfig `json:"servers,omitempty"`
}

type MCPServerConfig struct {
	Type               string            `json:"type"`              // stdio/http/sse
	Command            string            `json:"command,omitempty"` // for stdio
	Args               []string          `json:"args,omitempty"`
	URL                string            `json:"url,omitempty"` // for http/sse
	Env                map[string]string `json:"env,omitempty"`
	Headers            map[string]string `json:"headers,omitempty"`
	TimeoutSeconds     int               `json:"timeoutSeconds,omitempty"`     // optional connect/list timeout
	EnabledTools       []string          `json:"enabledTools,omitempty"`       // optional remote tool allowlist
	DisabledTools      []string          `json:"disabledTools,omitempty"`      // optional remote tool denylist
	ToolTimeoutSeconds int               `json:"toolTimeoutSeconds,omitempty"` // optional timeout for each MCP tool call
}

type MCPServerRule struct {
	ServerName string `json:"serverName,omitempty"` // Name of the MCP server as declared in .mcp.json.
	URL        string `json:"url,omitempty"`        // Optional URL/endpoint to further pin the server.
}

type PermissionsConfig struct {
	Allow                        []string `json:"allow,omitempty"`                        // Rules that auto-allow tool use.
	Ask                          []string `json:"ask,omitempty"`                          // Rules that require confirmation.
	Deny                         []string `json:"deny,omitempty"`                         // Rules that block tool use.
	AdditionalDirectories        []string `json:"additionalDirectories,omitempty"`        // Extra working directories Claude may access.
	DefaultMode                  string   `json:"defaultMode,omitempty"`                  // Default permission mode when opening Claude Code.
	DisableBypassPermissionsMode string   `json:"disableBypassPermissionsMode,omitempty"` // Set to "disable" to forbid bypassPermissions mode.
}

type Rule struct {
	Name     string // 文件名（不含扩展名）
	Content  string // 规则内容
	Priority int    // 优先级（从文件名前缀解析，如 01-xxx.md -> 1）
}

type RulesLoader struct {
	// contains filtered or unexported fields
}

type SandboxConfig struct {
	Enabled                   *bool                 `json:"enabled,omitempty"`                   // Enable filesystem/network sandboxing for bash.
	AutoAllowBashIfSandboxed  *bool                 `json:"autoAllowBashIfSandboxed,omitempty"`  // Auto-approve bash commands when sandboxed.
	ExcludedCommands          []string              `json:"excludedCommands,omitempty"`          // Commands that must run outside the sandbox.
	AllowUnsandboxedCommands  *bool                 `json:"allowUnsandboxedCommands,omitempty"`  // Whether dangerouslyDisableSandbox escape hatch is allowed.
	EnableWeakerNestedSandbox *bool                 `json:"enableWeakerNestedSandbox,omitempty"` // Allow weaker sandbox for unprivileged Docker.
	Network                   *SandboxNetworkConfig `json:"network,omitempty"`                   // Network-level sandbox knobs.
}

type SandboxNetworkConfig struct {
	AllowUnixSockets  []string `json:"allowUnixSockets,omitempty"`  // Unix sockets exposed inside sandbox (SSH agent, docker socket).
	AllowLocalBinding *bool    `json:"allowLocalBinding,omitempty"` // Allow binding to localhost ports (macOS).
	HTTPProxyPort     *int     `json:"httpProxyPort,omitempty"`     // Port for custom HTTP proxy if bringing your own.
	SocksProxyPort    *int     `json:"socksProxyPort,omitempty"`    // Port for custom SOCKS5 proxy if bringing your own.
}

type Settings struct {
	APIKeyHelper         string             `json:"apiKeyHelper,omitempty"`         // /bin/sh script that returns an API key for outbound model calls.
	CleanupPeriodDays    *int               `json:"cleanupPeriodDays,omitempty"`    // Days to retain chat history locally (default 30). Set to 0 to disable.
	CompanyAnnouncements []string           `json:"companyAnnouncements,omitempty"` // Startup announcements rotated randomly.
	Env                  map[string]string  `json:"env,omitempty"`                  // Environment variables applied to every session.
	IncludeCoAuthoredBy  *bool              `json:"includeCoAuthoredBy,omitempty"`  // Whether to append "co-authored-by Claude" to commits/PRs.
	Permissions          *PermissionsConfig `json:"permissions,omitempty"`          // Tool permission rules and defaults.
	DisallowedTools      []string           `json:"disallowedTools,omitempty"`      // Tool blacklist; disallowed tools are not registered.
	Hooks                *HooksConfig       `json:"hooks,omitempty"`                // Hook commands to run around tool execution.
	DisableAllHooks      *bool              `json:"disableAllHooks,omitempty"`      // Force-disable all hooks.
	Model                string             `json:"model,omitempty"`                // Override default model id.
	StatusLine           *StatusLineConfig  `json:"statusLine,omitempty"`           // Custom status line settings.
	OutputStyle          string             `json:"outputStyle,omitempty"`          // Optional named output style.
	MCP                  *MCPConfig         `json:"mcp,omitempty"`                  // MCP server definitions keyed by name.
	LegacyMCPServers     []string           `json:"mcpServers,omitempty"`           // Deprecated list format; kept for migration errors.
	ForceLoginMethod     string             `json:"forceLoginMethod,omitempty"`     // Restrict login to "claudeai" or "console".
	ForceLoginOrgUUID    string             `json:"forceLoginOrgUUID,omitempty"`    // Org UUID to auto-select during login when set.
	Sandbox              *SandboxConfig     `json:"sandbox,omitempty"`              // Bash sandbox configuration.
	BashOutput           *BashOutputConfig  `json:"bashOutput,omitempty"`           // Thresholds for spooling bash output to disk.
	ToolOutput           *ToolOutputConfig  `json:"toolOutput,omitempty"`           // Thresholds for persisting large tool outputs to disk.
	AllowedMcpServers    []MCPServerRule    `json:"allowedMcpServers,omitempty"`    // Managed allowlist of user-configurable MCP servers.
	DeniedMcpServers     []MCPServerRule    `json:"deniedMcpServers,omitempty"`     // Managed denylist of user-configurable MCP servers.
	AWSAuthRefresh       string             `json:"awsAuthRefresh,omitempty"`       // Script to refresh AWS SSO credentials.
	AWSCredentialExport  string             `json:"awsCredentialExport,omitempty"`  // Script that prints JSON AWS credentials.
	RespectGitignore     *bool              `json:"respectGitignore,omitempty"`     // Whether Glob/Grep tools should respect .gitignore patterns.
}

type SettingsLoader struct {
	ProjectRoot      string
	ConfigRoot       string
	SettingsFiles    []string
	RuntimeOverrides *Settings
	FS               *FS
}

type StatusLineConfig struct {
	Type            string `json:"type"`                      // "command" executes a script; "template" renders a string.
	Command         string `json:"command,omitempty"`         // Executable to run when Type=command.
	Template        string `json:"template,omitempty"`        // Text template when Type=template.
	IntervalSeconds int    `json:"intervalSeconds,omitempty"` // Optional refresh interval in seconds.
	TimeoutSeconds  int    `json:"timeoutSeconds,omitempty"`  // Optional timeout for the command run.
}

type ToolOutputConfig struct {
	DefaultThresholdBytes int            `json:"defaultThresholdBytes,omitempty"` // Persist output to disk after exceeding this many bytes (0 = SDK default).
	PerToolThresholdBytes map[string]int `json:"perToolThresholdBytes,omitempty"` // Optional per-tool thresholds keyed by canonical tool name.
}