config.go

  1package config
  2
  3import (
  4	"cmp"
  5	"context"
  6	"errors"
  7	"fmt"
  8	"maps"
  9	"net/http"
 10	"net/url"
 11	"slices"
 12	"strings"
 13	"time"
 14
 15	"charm.land/catwalk/pkg/catwalk"
 16	"github.com/charmbracelet/crush/internal/csync"
 17	"github.com/charmbracelet/crush/internal/oauth"
 18	"github.com/charmbracelet/crush/internal/oauth/copilot"
 19	"github.com/invopop/jsonschema"
 20)
 21
 22const (
 23	appName              = "crush"
 24	defaultDataDirectory = ".crush"
 25	defaultInitializeAs  = "AGENTS.md"
 26)
 27
 28var defaultContextPaths = []string{
 29	".github/copilot-instructions.md",
 30	".cursorrules",
 31	".cursor/rules/",
 32	"CLAUDE.md",
 33	"CLAUDE.local.md",
 34	"GEMINI.md",
 35	"gemini.md",
 36	"crush.md",
 37	"crush.local.md",
 38	"Crush.md",
 39	"Crush.local.md",
 40	"CRUSH.md",
 41	"CRUSH.local.md",
 42	"AGENTS.md",
 43	"agents.md",
 44	"Agents.md",
 45}
 46
 47type SelectedModelType string
 48
 49// String returns the string representation of the [SelectedModelType].
 50func (s SelectedModelType) String() string {
 51	return string(s)
 52}
 53
 54const (
 55	SelectedModelTypeLarge SelectedModelType = "large"
 56	SelectedModelTypeSmall SelectedModelType = "small"
 57)
 58
 59const (
 60	AgentCoder string = "coder"
 61	AgentTask  string = "task"
 62)
 63
 64type SelectedModel struct {
 65	// The model id as used by the provider API.
 66	// Required.
 67	Model string `json:"model" jsonschema:"required,description=The model ID as used by the provider API,example=gpt-4o"`
 68	// The model provider, same as the key/id used in the providers config.
 69	// Required.
 70	Provider string `json:"provider" jsonschema:"required,description=The model provider ID that matches a key in the providers config,example=openai"`
 71
 72	// Only used by models that use the openai provider and need this set.
 73	ReasoningEffort string `json:"reasoning_effort,omitempty" jsonschema:"description=Reasoning effort level for OpenAI models that support it,enum=low,enum=medium,enum=high"`
 74
 75	// Used by anthropic models that can reason to indicate if the model should think.
 76	Think bool `json:"think,omitempty" jsonschema:"description=Enable thinking mode for Anthropic models that support reasoning"`
 77
 78	// Overrides the default model configuration.
 79	MaxTokens        int64    `json:"max_tokens,omitempty" jsonschema:"description=Maximum number of tokens for model responses,maximum=200000,example=4096"`
 80	Temperature      *float64 `json:"temperature,omitempty" jsonschema:"description=Sampling temperature,minimum=0,maximum=1,example=0.7"`
 81	TopP             *float64 `json:"top_p,omitempty" jsonschema:"description=Top-p (nucleus) sampling parameter,minimum=0,maximum=1,example=0.9"`
 82	TopK             *int64   `json:"top_k,omitempty" jsonschema:"description=Top-k sampling parameter"`
 83	FrequencyPenalty *float64 `json:"frequency_penalty,omitempty" jsonschema:"description=Frequency penalty to reduce repetition"`
 84	PresencePenalty  *float64 `json:"presence_penalty,omitempty" jsonschema:"description=Presence penalty to increase topic diversity"`
 85
 86	// Override provider specific options.
 87	ProviderOptions map[string]any `json:"provider_options,omitempty" jsonschema:"description=Additional provider-specific options for the model"`
 88}
 89
 90type ProviderConfig struct {
 91	// The provider's id.
 92	ID string `json:"id,omitempty" jsonschema:"description=Unique identifier for the provider,example=openai"`
 93	// The provider's name, used for display purposes.
 94	Name string `json:"name,omitempty" jsonschema:"description=Human-readable name for the provider,example=OpenAI"`
 95	// The provider's API endpoint.
 96	BaseURL string `json:"base_url,omitempty" jsonschema:"description=Base URL for the provider's API,format=uri,example=https://api.openai.com/v1"`
 97	// The provider type, e.g. "openai", "anthropic", etc. if empty it defaults to openai.
 98	Type catwalk.Type `json:"type,omitempty" jsonschema:"description=Provider type that determines the API format,enum=openai,enum=openai-compat,enum=anthropic,enum=gemini,enum=azure,enum=vertexai,default=openai"`
 99	// The provider's API key.
100	APIKey string `json:"api_key,omitempty" jsonschema:"description=API key for authentication with the provider,example=$OPENAI_API_KEY"`
101	// The original API key template before resolution (for re-resolution on auth errors).
102	APIKeyTemplate string `json:"-"`
103	// OAuthToken for providers that use OAuth2 authentication.
104	OAuthToken *oauth.Token `json:"oauth,omitempty" jsonschema:"description=OAuth2 token for authentication with the provider"`
105	// Marks the provider as disabled.
106	Disable bool `json:"disable,omitempty" jsonschema:"description=Whether this provider is disabled,default=false"`
107
108	// Custom system prompt prefix.
109	SystemPromptPrefix string `json:"system_prompt_prefix,omitempty" jsonschema:"description=Custom prefix to add to system prompts for this provider"`
110
111	// Extra headers to send with each request to the provider. Values
112	// run through shell expansion at config-load time, so $VAR and
113	// $(cmd) work the same way they do in MCP headers. A header whose
114	// value resolves to the empty string (unset bare $VAR under
115	// lenient nounset, $(echo), or literal "") is omitted from the
116	// outgoing request rather than sent as "Header:".
117	ExtraHeaders map[string]string `json:"extra_headers,omitempty" jsonschema:"description=Additional HTTP headers to send with requests"`
118	// ExtraBody is merged verbatim into OpenAI-compatible request
119	// bodies. String values are NOT shell-expanded: this is a plain
120	// JSON passthrough so that arbitrary provider-extension fields
121	// (numbers, nested objects, booleans) round-trip without a
122	// recursive walker guessing at intent. If you need an env-var-
123	// driven value at request time, put it in extra_headers, or in
124	// the provider's top-level api_key / base_url, all of which do
125	// expand.
126	ExtraBody map[string]any `json:"extra_body,omitempty" jsonschema:"description=Additional fields to include in request bodies\\, only works with openai-compatible providers"`
127
128	ProviderOptions map[string]any `json:"provider_options,omitempty" jsonschema:"description=Additional provider-specific options for this provider"`
129
130	// Used to pass extra parameters to the provider.
131	ExtraParams map[string]string `json:"-"`
132
133	// Skip cost accumulation for this provider when using subscription or flat rate billing.
134	FlatRate bool `json:"flat_rate,omitempty" jsonschema:"description=Flat-rate mode for this provider"`
135
136	// The provider models
137	Models []catwalk.Model `json:"models,omitempty" jsonschema:"description=List of models available from this provider"`
138}
139
140// ToProvider converts the [ProviderConfig] to a [catwalk.Provider].
141func (c *ProviderConfig) ToProvider() catwalk.Provider {
142	// Convert config provider to provider.Provider format
143	provider := catwalk.Provider{
144		Name:   c.Name,
145		ID:     catwalk.InferenceProvider(c.ID),
146		Models: make([]catwalk.Model, len(c.Models)),
147	}
148
149	// Convert models
150	for i, model := range c.Models {
151		provider.Models[i] = catwalk.Model{
152			ID:                     model.ID,
153			Name:                   model.Name,
154			CostPer1MIn:            model.CostPer1MIn,
155			CostPer1MOut:           model.CostPer1MOut,
156			CostPer1MInCached:      model.CostPer1MInCached,
157			CostPer1MOutCached:     model.CostPer1MOutCached,
158			ContextWindow:          model.ContextWindow,
159			DefaultMaxTokens:       model.DefaultMaxTokens,
160			CanReason:              model.CanReason,
161			ReasoningLevels:        model.ReasoningLevels,
162			DefaultReasoningEffort: model.DefaultReasoningEffort,
163			SupportsImages:         model.SupportsImages,
164		}
165	}
166
167	return provider
168}
169
170func (c *ProviderConfig) SetupGitHubCopilot() {
171	maps.Copy(c.ExtraHeaders, copilot.Headers())
172}
173
174type MCPType string
175
176const (
177	MCPStdio MCPType = "stdio"
178	MCPSSE   MCPType = "sse"
179	MCPHttp  MCPType = "http"
180)
181
182type MCPConfig struct {
183	Command       string            `json:"command,omitempty" jsonschema:"description=Command to execute for stdio MCP servers,example=npx"`
184	Env           map[string]string `json:"env,omitempty" jsonschema:"description=Environment variables to set for the MCP server"`
185	Args          []string          `json:"args,omitempty" jsonschema:"description=Arguments to pass to the MCP server command"`
186	Type          MCPType           `json:"type" jsonschema:"required,description=Type of MCP connection,enum=stdio,enum=sse,enum=http,default=stdio"`
187	URL           string            `json:"url,omitempty" jsonschema:"description=URL for HTTP or SSE MCP servers,format=uri,example=http://localhost:3000/mcp"`
188	Disabled      bool              `json:"disabled,omitempty" jsonschema:"description=Whether this MCP server is disabled,default=false"`
189	DisabledTools []string          `json:"disabled_tools,omitempty" jsonschema:"description=List of tools from this MCP server to disable,example=get-library-doc"`
190	EnabledTools  []string          `json:"enabled_tools,omitempty" jsonschema:"description=Allow list of tools from this MCP server,example=get-library-doc"`
191	Timeout       int               `json:"timeout,omitempty" jsonschema:"description=Timeout in seconds for MCP server connections,default=15,example=30,example=60,example=120"`
192
193	// Headers are HTTP headers for HTTP/SSE MCP servers. Values run
194	// through shell expansion at MCP startup, so $VAR and $(cmd)
195	// work. A header whose value resolves to the empty string (unset
196	// bare $VAR under lenient nounset, $(echo), or literal "") is
197	// omitted from the outgoing request rather than sent as
198	// "Header:".
199	Headers map[string]string `json:"headers,omitempty" jsonschema:"description=HTTP headers for HTTP/SSE MCP servers"`
200}
201
202type LSPConfig struct {
203	Disabled    bool              `json:"disabled,omitempty" jsonschema:"description=Whether this LSP server is disabled,default=false"`
204	Command     string            `json:"command,omitempty" jsonschema:"description=Command to execute for the LSP server,example=gopls"`
205	Args        []string          `json:"args,omitempty" jsonschema:"description=Arguments to pass to the LSP server command"`
206	Env         map[string]string `json:"env,omitempty" jsonschema:"description=Environment variables to set to the LSP server command"`
207	FileTypes   []string          `json:"filetypes,omitempty" jsonschema:"description=File types this LSP server handles,example=go,example=mod,example=rs,example=c,example=js,example=ts"`
208	RootMarkers []string          `json:"root_markers,omitempty" jsonschema:"description=Files or directories that indicate the project root,example=go.mod,example=package.json,example=Cargo.toml"`
209	InitOptions map[string]any    `json:"init_options,omitempty" jsonschema:"description=Initialization options passed to the LSP server during initialize request"`
210	Options     map[string]any    `json:"options,omitempty" jsonschema:"description=LSP server-specific settings passed during initialization"`
211	Timeout     int               `json:"timeout,omitempty" jsonschema:"description=Timeout in seconds for LSP server initialization,default=30,example=60,example=120"`
212}
213
214type TUIOptions struct {
215	CompactMode bool   `json:"compact_mode,omitempty" jsonschema:"description=Enable compact mode for the TUI interface,default=false"`
216	DiffMode    string `json:"diff_mode,omitempty" jsonschema:"description=Diff mode for the TUI interface,enum=unified,enum=split"`
217	// Here we can add themes later or any TUI related options
218	//
219
220	Completions Completions `json:"completions,omitzero" jsonschema:"description=Completions UI options"`
221	Transparent *bool       `json:"transparent,omitempty" jsonschema:"description=Enable transparent background for the TUI interface,default=false"`
222}
223
224// Completions defines options for the completions UI.
225type Completions struct {
226	MaxDepth *int `json:"max_depth,omitempty" jsonschema:"description=Maximum depth for the ls tool,default=0,example=10"`
227	MaxItems *int `json:"max_items,omitempty" jsonschema:"description=Maximum number of items to return for the ls tool,default=1000,example=100"`
228}
229
230func (c Completions) Limits() (depth, items int) {
231	return ptrValOr(c.MaxDepth, 0), ptrValOr(c.MaxItems, 0)
232}
233
234type Permissions struct {
235	AllowedTools []string `json:"allowed_tools,omitempty" jsonschema:"description=List of tools that don't require permission prompts,example=bash,example=view"`
236}
237
238type TrailerStyle string
239
240const (
241	TrailerStyleNone         TrailerStyle = "none"
242	TrailerStyleCoAuthoredBy TrailerStyle = "co-authored-by"
243	TrailerStyleAssistedBy   TrailerStyle = "assisted-by"
244)
245
246type Attribution struct {
247	TrailerStyle  TrailerStyle `json:"trailer_style,omitempty" jsonschema:"description=Style of attribution trailer to add to commits,enum=none,enum=co-authored-by,enum=assisted-by,default=assisted-by"`
248	CoAuthoredBy  *bool        `json:"co_authored_by,omitempty" jsonschema:"description=Deprecated: use trailer_style instead"`
249	GeneratedWith bool         `json:"generated_with,omitempty" jsonschema:"description=Add Generated with Crush line to commit messages and issues and PRs,default=true"`
250}
251
252// JSONSchemaExtend marks the co_authored_by field as deprecated in the schema.
253func (Attribution) JSONSchemaExtend(schema *jsonschema.Schema) {
254	if schema.Properties != nil {
255		if prop, ok := schema.Properties.Get("co_authored_by"); ok {
256			prop.Deprecated = true
257		}
258	}
259}
260
261type Options struct {
262	ContextPaths         []string    `json:"context_paths,omitempty" jsonschema:"description=Paths to files containing context information for the AI,example=.cursorrules,example=CRUSH.md"`
263	SkillsPaths          []string    `json:"skills_paths,omitempty" jsonschema:"description=Paths to directories containing Agent Skills (folders with SKILL.md files),example=~/.config/crush/skills,example=./skills"`
264	TUI                  *TUIOptions `json:"tui,omitempty" jsonschema:"description=Terminal user interface options"`
265	Debug                bool        `json:"debug,omitempty" jsonschema:"description=Enable debug logging,default=false"`
266	DebugLSP             bool        `json:"debug_lsp,omitempty" jsonschema:"description=Enable debug logging for LSP servers,default=false"`
267	DisableAutoSummarize bool        `json:"disable_auto_summarize,omitempty" jsonschema:"description=Disable automatic conversation summarization,default=false"`
268	// DataDirectory is where Crush keeps per-project state such as
269	// the SQLite database and workspace overrides. Relative paths are
270	// resolved against the working directory; absolute paths are used
271	// verbatim. After defaulting the stored value is always absolute.
272	DataDirectory             string       `json:"data_directory,omitempty" jsonschema:"description=Directory for storing application data. Relative paths are resolved against the working directory; absolute paths are used as-is.,default=.crush,example=.crush"`
273	DisabledTools             []string     `json:"disabled_tools,omitempty" jsonschema:"description=List of built-in tools to disable and hide from the agent,example=bash,example=sourcegraph"`
274	DisableProviderAutoUpdate bool         `json:"disable_provider_auto_update,omitempty" jsonschema:"description=Disable providers auto-update,default=false"`
275	DisableDefaultProviders   bool         `json:"disable_default_providers,omitempty" jsonschema:"description=Ignore all default/embedded providers. When enabled\\, providers must be fully specified in the config file with base_url\\, models\\, and api_key - no merging with defaults occurs,default=false"`
276	Attribution               *Attribution `json:"attribution,omitempty" jsonschema:"description=Attribution settings for generated content"`
277	DisableMetrics            bool         `json:"disable_metrics,omitempty" jsonschema:"description=Disable sending metrics,default=false"`
278	InitializeAs              string       `json:"initialize_as,omitempty" jsonschema:"description=Name of the context file to create/update during project initialization,default=AGENTS.md,example=AGENTS.md,example=CRUSH.md,example=CLAUDE.md,example=docs/LLMs.md"`
279	AutoLSP                   *bool        `json:"auto_lsp,omitempty" jsonschema:"description=Automatically setup LSPs based on root markers,default=true"`
280	Progress                  *bool        `json:"progress,omitempty" jsonschema:"description=Show indeterminate progress updates during long operations,default=true"`
281	DisableNotifications      bool         `json:"disable_notifications,omitempty" jsonschema:"description=Deprecated: Use notification_style instead. Disable desktop notifications,default=false"`
282	NotificationStyle         string       `json:"notification_style,omitempty" jsonschema:"description=Notification style to use. Options: auto (default), native, osc, bell, disabled. Auto selects based on environment: native for local sessions, osc for SSH (with automatic OSC 99/777 detection).,enum=auto,enum=native,enum=osc,enum=bell,enum=disabled,default=auto"`
283	DisabledSkills            []string     `json:"disabled_skills,omitempty" jsonschema:"description=List of skill names to disable and hide from the agent,example=crush-config"`
284}
285
286type MCPs map[string]MCPConfig
287
288type MCP struct {
289	Name string    `json:"name"`
290	MCP  MCPConfig `json:"mcp"`
291}
292
293func (m MCPs) Sorted() []MCP {
294	sorted := make([]MCP, 0, len(m))
295	for k, v := range m {
296		sorted = append(sorted, MCP{
297			Name: k,
298			MCP:  v,
299		})
300	}
301	slices.SortFunc(sorted, func(a, b MCP) int {
302		return strings.Compare(a.Name, b.Name)
303	})
304	return sorted
305}
306
307type LSPs map[string]LSPConfig
308
309type LSP struct {
310	Name string    `json:"name"`
311	LSP  LSPConfig `json:"lsp"`
312}
313
314func (l LSPs) Sorted() []LSP {
315	sorted := make([]LSP, 0, len(l))
316	for k, v := range l {
317		sorted = append(sorted, LSP{
318			Name: k,
319			LSP:  v,
320		})
321	}
322	slices.SortFunc(sorted, func(a, b LSP) int {
323		return strings.Compare(a.Name, b.Name)
324	})
325	return sorted
326}
327
328// ResolvedEnv returns m.Env with every value expanded through the
329// given resolver. The returned slice is of the form "KEY=value" sorted
330// by key so callers get deterministic output; the receiver's Env map is
331// not mutated. On the first resolution failure it returns nil and an
332// error that identifies the offending key; the inner resolver error is
333// already sanitized by ResolveValue and is wrapped with %w so
334// errors.Is/As continues to work. Callers are expected to surface it
335// (for MCP, via StateError on the status card) rather than silently
336// spawn the server with an empty credential.
337//
338// The resolver choice matters: in server mode pass the shell resolver
339// so $VAR / $(cmd) expand; in client mode pass IdentityResolver so the
340// template is forwarded verbatim and expansion happens on the server.
341func (m MCPConfig) ResolvedEnv(r VariableResolver) ([]string, error) {
342	return resolveEnvs(m.Env, r)
343}
344
345// ResolvedArgs returns m.Args with every element expanded through the
346// given resolver. A fresh slice is allocated; m.Args is never mutated.
347// On the first resolution failure it returns nil and an error
348// identifying the offending positional index; the inner resolver error
349// is already sanitized by ResolveValue and is wrapped with %w so
350// errors.Is/As continues to work.
351//
352// See ResolvedEnv for guidance on picking a resolver.
353func (m MCPConfig) ResolvedArgs(r VariableResolver) ([]string, error) {
354	if len(m.Args) == 0 {
355		return nil, nil
356	}
357	out := make([]string, len(m.Args))
358	for i, a := range m.Args {
359		v, err := r.ResolveValue(a)
360		if err != nil {
361			return nil, fmt.Errorf("arg %d: %w", i, err)
362		}
363		out[i] = v
364	}
365	return out, nil
366}
367
368// ResolvedURL returns m.URL expanded through the given resolver. The
369// receiver is not mutated. Errors from the resolver are already
370// sanitized by ResolveValue and are wrapped with %w for errors.Is/As.
371//
372// URLs run through the same shell-expansion pipeline as the other
373// fields, so a literal '$' (e.g. OData query strings containing
374// $filter/$select) must be escaped as '\$' or '${DOLLAR:-$}' to avoid
375// being interpreted as a variable reference. Same constraint already
376// applies to command, args, env, and headers.
377//
378// See ResolvedEnv for guidance on picking a resolver.
379func (m MCPConfig) ResolvedURL(r VariableResolver) (string, error) {
380	if m.URL == "" {
381		return "", nil
382	}
383	v, err := r.ResolveValue(m.URL)
384	if err != nil {
385		return "", fmt.Errorf("url: %w", err)
386	}
387	return v, nil
388}
389
390// ResolvedHeaders returns m.Headers with every value expanded through
391// the given resolver. A fresh map is allocated; m.Headers is never
392// mutated. On the first resolution failure it returns nil and an error
393// identifying the offending header name; the inner resolver error is
394// already sanitized by ResolveValue and is wrapped with %w so
395// errors.Is/As continues to work.
396//
397// A header whose value resolves to the empty string (unset bare $VAR
398// under lenient nounset, $(echo), or literal "") is omitted from the
399// returned map — sending "X-Auth:" with an empty value is rejected by
400// some providers and the user's intent in "optional, env-gated
401// header" is clearly "absent when the var isn't set."
402//
403// See ResolvedEnv for guidance on picking a resolver.
404func (m MCPConfig) ResolvedHeaders(r VariableResolver) (map[string]string, error) {
405	if len(m.Headers) == 0 {
406		return map[string]string{}, nil
407	}
408	out := make(map[string]string, len(m.Headers))
409	// Sort keys so failures are reported deterministically when more
410	// than one header would fail.
411	keys := make([]string, 0, len(m.Headers))
412	for k := range m.Headers {
413		keys = append(keys, k)
414	}
415	slices.Sort(keys)
416	for _, k := range keys {
417		v, err := r.ResolveValue(m.Headers[k])
418		if err != nil {
419			return nil, fmt.Errorf("header %s: %w", k, err)
420		}
421		if v == "" {
422			continue
423		}
424		out[k] = v
425	}
426	return out, nil
427}
428
429// ResolvedArgs returns l.Args with every element expanded through the
430// given resolver. A fresh slice is allocated; l.Args is never mutated.
431// On the first resolution failure it returns nil and an error
432// identifying the offending positional index; the inner resolver error
433// is already sanitized by ResolveValue and is wrapped with %w so
434// errors.Is/As continues to work.
435//
436// Empty resolved values are kept (a deliberate "empty positional arg"
437// like --flag "" is sometimes valid), matching MCPConfig.ResolvedArgs.
438//
439// The resolver choice matters: in server mode pass the shell resolver
440// so $VAR / $(cmd) expand; in client mode pass IdentityResolver so the
441// template is forwarded verbatim.
442func (l LSPConfig) ResolvedArgs(r VariableResolver) ([]string, error) {
443	if len(l.Args) == 0 {
444		return nil, nil
445	}
446	out := make([]string, len(l.Args))
447	for i, a := range l.Args {
448		v, err := r.ResolveValue(a)
449		if err != nil {
450			return nil, fmt.Errorf("arg %d: %w", i, err)
451		}
452		out[i] = v
453	}
454	return out, nil
455}
456
457// ResolvedEnv returns l.Env with every value expanded through the
458// given resolver. A fresh map is allocated; l.Env is never mutated.
459// On the first resolution failure it returns nil and an error that
460// identifies the offending key; the inner resolver error is already
461// sanitized by ResolveValue and is wrapped with %w so errors.Is/As
462// continues to work.
463//
464// Empty resolved values are kept ("FOO=" is a legitimate request;
465// opt out via ${VAR:+...}), matching MCPConfig.ResolvedEnv.
466//
467// Shape note: this returns map[string]string rather than the []string
468// shape MCPConfig.ResolvedEnv uses because the consumer
469// (powernap.ClientConfig.Environment in internal/lsp/client.go) takes
470// a map directly — returning a []string here would only force a
471// round-trip back to a map at the call site.
472//
473// See ResolvedArgs for guidance on picking a resolver.
474func (l LSPConfig) ResolvedEnv(r VariableResolver) (map[string]string, error) {
475	if len(l.Env) == 0 {
476		return map[string]string{}, nil
477	}
478	out := make(map[string]string, len(l.Env))
479	// Sort keys so failures are reported deterministically when more
480	// than one value would fail.
481	keys := make([]string, 0, len(l.Env))
482	for k := range l.Env {
483		keys = append(keys, k)
484	}
485	slices.Sort(keys)
486	for _, k := range keys {
487		v, err := r.ResolveValue(l.Env[k])
488		if err != nil {
489			return nil, fmt.Errorf("env %q: %w", k, err)
490		}
491		out[k] = v
492	}
493	return out, nil
494}
495
496type Agent struct {
497	ID          string `json:"id,omitempty"`
498	Name        string `json:"name,omitempty"`
499	Description string `json:"description,omitempty"`
500	// This is the id of the system prompt used by the agent
501	Disabled bool `json:"disabled,omitempty"`
502
503	Model SelectedModelType `json:"model" jsonschema:"required,description=The model type to use for this agent,enum=large,enum=small,default=large"`
504
505	// The available tools for the agent
506	//  if this is nil, all tools are available
507	AllowedTools []string `json:"allowed_tools,omitempty"`
508
509	// this tells us which MCPs are available for this agent
510	//  if this is empty all mcps are available
511	//  the string array is the list of tools from the AllowedMCP the agent has available
512	//  if the string array is nil, all tools from the AllowedMCP are available
513	AllowedMCP map[string][]string `json:"allowed_mcp,omitempty"`
514
515	// Overrides the context paths for this agent
516	ContextPaths []string `json:"context_paths,omitempty"`
517}
518
519type Tools struct {
520	Ls   ToolLs   `json:"ls,omitzero"`
521	Grep ToolGrep `json:"grep,omitzero"`
522}
523
524type ToolLs struct {
525	MaxDepth *int `json:"max_depth,omitempty" jsonschema:"description=Maximum depth for the ls tool,default=0,example=10"`
526	MaxItems *int `json:"max_items,omitempty" jsonschema:"description=Maximum number of items to return for the ls tool,default=1000,example=100"`
527}
528
529// Limits returns the user-defined max-depth and max-items, or their defaults.
530func (t ToolLs) Limits() (depth, items int) {
531	return ptrValOr(t.MaxDepth, 0), ptrValOr(t.MaxItems, 0)
532}
533
534type ToolGrep struct {
535	Timeout *time.Duration `json:"timeout,omitempty" jsonschema:"description=Timeout for the grep tool call,default=5s,example=10s"`
536}
537
538// GetTimeout returns the user-defined timeout or the default.
539func (t ToolGrep) GetTimeout() time.Duration {
540	return ptrValOr(t.Timeout, 5*time.Second)
541}
542
543// HookConfig defines a user-configured shell command that fires on a hook
544// event (e.g. PreToolUse). This is a pure-data struct: matcher compilation
545// is owned by hooks.Runner so a JSON round-trip, merge, or reload can't
546// silently drop compiled state.
547type HookConfig struct {
548	// Friendly display name shown in the TUI. Falls back to Command when empty.
549	Name string `json:"name,omitempty" jsonschema:"description=Friendly display name shown in the TUI for this hook"`
550	// Regex pattern tested against the tool name. Empty means match all.
551	Matcher string `json:"matcher,omitempty" jsonschema:"description=Regex pattern tested against the tool name. Empty means match all tools."`
552	// Shell command to execute.
553	Command string `json:"command" jsonschema:"required,description=Shell command to execute when the hook fires"`
554	// Timeout in seconds. Default 30.
555	Timeout int `json:"timeout,omitempty" jsonschema:"description=Timeout in seconds for the hook command,default=30"`
556}
557
558// DisplayName returns the hook name for display purposes. It returns Name
559// when set, otherwise falls back to Command.
560func (h *HookConfig) DisplayName() string {
561	if h.Name != "" {
562		return h.Name
563	}
564	return h.Command
565}
566
567// TimeoutDuration returns the hook timeout as a time.Duration, defaulting
568// to 30s.
569func (h *HookConfig) TimeoutDuration() time.Duration {
570	if h.Timeout <= 0 {
571		return 30 * time.Second
572	}
573	return time.Duration(h.Timeout) * time.Second
574}
575
576// Config holds the configuration for crush.
577type Config struct {
578	Schema string `json:"$schema,omitempty"`
579
580	// We currently only support large/small as values here.
581	Models map[SelectedModelType]SelectedModel `json:"models,omitempty" jsonschema:"description=Model configurations for different model types,example={\"large\":{\"model\":\"gpt-4o\",\"provider\":\"openai\"}}"`
582
583	// Recently used models stored in the data directory config.
584	RecentModels map[SelectedModelType][]SelectedModel `json:"recent_models,omitempty" jsonschema:"-"`
585
586	// The providers that are configured
587	Providers *csync.Map[string, ProviderConfig] `json:"providers,omitempty" jsonschema:"description=AI provider configurations"`
588
589	MCP MCPs `json:"mcp,omitempty" jsonschema:"description=Model Context Protocol server configurations"`
590
591	LSP LSPs `json:"lsp,omitempty" jsonschema:"description=Language Server Protocol configurations"`
592
593	Options *Options `json:"options,omitempty" jsonschema:"description=General application options"`
594
595	Permissions *Permissions `json:"permissions,omitempty" jsonschema:"description=Permission settings for tool usage"`
596
597	Tools Tools `json:"tools,omitzero" jsonschema:"description=Tool configurations"`
598
599	Hooks map[string][]HookConfig `json:"hooks,omitempty" jsonschema:"description=User-defined shell commands that fire on hook events (e.g. PreToolUse)"`
600
601	Agents map[string]Agent `json:"-"`
602}
603
604func (c *Config) EnabledProviders() []ProviderConfig {
605	var enabled []ProviderConfig
606	for p := range c.Providers.Seq() {
607		if !p.Disable {
608			enabled = append(enabled, p)
609		}
610	}
611	return enabled
612}
613
614// IsConfigured  return true if at least one provider is configured
615func (c *Config) IsConfigured() bool {
616	return len(c.EnabledProviders()) > 0
617}
618
619func (c *Config) GetModel(provider, model string) *catwalk.Model {
620	if providerConfig, ok := c.Providers.Get(provider); ok {
621		for _, m := range providerConfig.Models {
622			if m.ID == model {
623				return &m
624			}
625		}
626	}
627	return nil
628}
629
630func (c *Config) GetProviderForModel(modelType SelectedModelType) *ProviderConfig {
631	model, ok := c.Models[modelType]
632	if !ok {
633		return nil
634	}
635	if providerConfig, ok := c.Providers.Get(model.Provider); ok {
636		return &providerConfig
637	}
638	return nil
639}
640
641func (c *Config) GetModelByType(modelType SelectedModelType) *catwalk.Model {
642	model, ok := c.Models[modelType]
643	if !ok {
644		return nil
645	}
646	return c.GetModel(model.Provider, model.Model)
647}
648
649func (c *Config) LargeModel() *catwalk.Model {
650	model, ok := c.Models[SelectedModelTypeLarge]
651	if !ok {
652		return nil
653	}
654	return c.GetModel(model.Provider, model.Model)
655}
656
657func (c *Config) SmallModel() *catwalk.Model {
658	model, ok := c.Models[SelectedModelTypeSmall]
659	if !ok {
660		return nil
661	}
662	return c.GetModel(model.Provider, model.Model)
663}
664
665const maxRecentModelsPerType = 5
666
667func allToolNames() []string {
668	return []string{
669		"agent",
670		"bash",
671		"crush_info",
672		"crush_logs",
673		"job_output",
674		"job_kill",
675		"download",
676		"edit",
677		"multiedit",
678		"lsp_diagnostics",
679		"lsp_references",
680		"lsp_restart",
681		"fetch",
682		"agentic_fetch",
683		"glob",
684		"grep",
685		"ls",
686		"sourcegraph",
687		"todos",
688		"view",
689		"write",
690		"list_mcp_resources",
691		"read_mcp_resource",
692	}
693}
694
695func resolveAllowedTools(allTools []string, disabledTools []string) []string {
696	if disabledTools == nil {
697		return allTools
698	}
699	// filter out disabled tools (exclude mode)
700	return filterSlice(allTools, disabledTools, false)
701}
702
703func resolveReadOnlyTools(tools []string) []string {
704	readOnlyTools := []string{"glob", "grep", "ls", "sourcegraph", "view"}
705	// filter to only include tools that are in allowedtools (include mode)
706	return filterSlice(tools, readOnlyTools, true)
707}
708
709func filterSlice(data []string, mask []string, include bool) []string {
710	var filtered []string
711	for _, s := range data {
712		// if include is true, we include items that ARE in the mask
713		// if include is false, we include items that are NOT in the mask
714		if include == slices.Contains(mask, s) {
715			filtered = append(filtered, s)
716		}
717	}
718	return filtered
719}
720
721func (c *Config) SetupAgents() {
722	allowedTools := resolveAllowedTools(allToolNames(), c.Options.DisabledTools)
723
724	agents := map[string]Agent{
725		AgentCoder: {
726			ID:           AgentCoder,
727			Name:         "Coder",
728			Description:  "An agent that helps with executing coding tasks.",
729			Model:        SelectedModelTypeLarge,
730			ContextPaths: c.Options.ContextPaths,
731			AllowedTools: allowedTools,
732		},
733
734		AgentTask: {
735			ID:           AgentTask,
736			Name:         "Task",
737			Description:  "An agent that helps with searching for context and finding implementation details.",
738			Model:        SelectedModelTypeLarge,
739			ContextPaths: c.Options.ContextPaths,
740			AllowedTools: resolveReadOnlyTools(allowedTools),
741			// NO MCPs or LSPs by default
742			AllowedMCP: map[string][]string{},
743		},
744	}
745	c.Agents = agents
746}
747
748func (c *ProviderConfig) TestConnection(resolver VariableResolver) error {
749	var (
750		providerID = catwalk.InferenceProvider(c.ID)
751		testURL    = ""
752		headers    = make(map[string]string)
753		apiKey, _  = resolver.ResolveValue(c.APIKey)
754	)
755
756	switch providerID {
757	case catwalk.InferenceProviderMiniMax, catwalk.InferenceProviderMiniMaxChina:
758		// NOTE: MiniMax has no good endpoint we can use to validate the API key.
759		return nil
760	case catwalk.InferenceProviderAlibabaSingapore:
761		// NOTE: Alibaba has no good endpoint we can use to validate the API key.
762		// Let's at least check the pattern.
763		if !strings.HasPrefix(apiKey, "sk-") {
764			return fmt.Errorf("invalid API key format for provider %s", c.ID)
765		}
766		return nil
767	}
768
769	switch c.Type {
770	case catwalk.TypeOpenAI, catwalk.TypeOpenAICompat, catwalk.TypeOpenRouter:
771		baseURL, _ := resolver.ResolveValue(c.BaseURL)
772		baseURL = cmp.Or(baseURL, "https://api.openai.com/v1")
773
774		switch providerID {
775		case catwalk.InferenceProviderOpenRouter:
776			testURL = baseURL + "/credits"
777		case catwalk.InferenceProviderOpenCodeGo:
778			testURL = strings.Replace(baseURL, "/go", "", 1) + "/models"
779		default:
780			testURL = baseURL + "/models"
781		}
782
783		headers["Authorization"] = "Bearer " + apiKey
784	case catwalk.TypeAnthropic:
785		baseURL, _ := resolver.ResolveValue(c.BaseURL)
786		baseURL = cmp.Or(baseURL, "https://api.anthropic.com/v1")
787
788		switch providerID {
789		case catwalk.InferenceKimiCoding:
790			testURL = baseURL + "/v1/models"
791		default:
792			testURL = baseURL + "/models"
793		}
794
795		headers["x-api-key"] = apiKey
796		headers["anthropic-version"] = "2023-06-01"
797	case catwalk.TypeGoogle:
798		baseURL, _ := resolver.ResolveValue(c.BaseURL)
799		baseURL = cmp.Or(baseURL, "https://generativelanguage.googleapis.com")
800		testURL = baseURL + "/v1beta/models?key=" + url.QueryEscape(apiKey)
801	case catwalk.TypeBedrock:
802		// NOTE: Bedrock has a `/foundation-models` endpoint that we could in
803		// theory use, but apparently the authorization is region-specific,
804		// so it's not so trivial.
805		if strings.HasPrefix(apiKey, "ABSK") { // Bedrock API keys
806			return nil
807		}
808		return errors.New("not a valid bedrock api key")
809	case catwalk.TypeVercel:
810		// NOTE: Vercel does not validate API keys on the `/models` endpoint.
811		if strings.HasPrefix(apiKey, "vck_") { // Vercel API keys
812			return nil
813		}
814		return errors.New("not a valid vercel api key")
815	}
816
817	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
818	defer cancel()
819
820	client := &http.Client{}
821	req, err := http.NewRequestWithContext(ctx, "GET", testURL, nil)
822	if err != nil {
823		return fmt.Errorf("failed to create request for provider %s: %w", c.ID, err)
824	}
825	for k, v := range headers {
826		req.Header.Set(k, v)
827	}
828	for k, v := range c.ExtraHeaders {
829		req.Header.Set(k, v)
830	}
831
832	resp, err := client.Do(req)
833	if err != nil {
834		return fmt.Errorf("failed to create request for provider %s: %w", c.ID, err)
835	}
836	defer resp.Body.Close()
837
838	switch providerID {
839	case catwalk.InferenceProviderZAI:
840		if resp.StatusCode == http.StatusUnauthorized {
841			return fmt.Errorf("failed to connect to provider %s: %s", c.ID, resp.Status)
842		}
843	default:
844		if resp.StatusCode != http.StatusOK {
845			return fmt.Errorf("failed to connect to provider %s: %s", c.ID, resp.Status)
846		}
847	}
848	return nil
849}
850
851// resolveEnvs expands every value in envs through the given resolver
852// and returns a fresh "KEY=value" slice sorted by key. The input map is
853// not mutated. On the first resolution failure it returns nil and an
854// error identifying the offending variable; the inner resolver error is
855// already sanitized by ResolveValue and is wrapped with %w.
856func resolveEnvs(envs map[string]string, r VariableResolver) ([]string, error) {
857	if len(envs) == 0 {
858		return nil, nil
859	}
860	keys := make([]string, 0, len(envs))
861	for k := range envs {
862		keys = append(keys, k)
863	}
864	slices.Sort(keys)
865	res := make([]string, 0, len(envs))
866	for _, k := range keys {
867		v, err := r.ResolveValue(envs[k])
868		if err != nil {
869			return nil, fmt.Errorf("env %s: %w", k, err)
870		}
871		res = append(res, fmt.Sprintf("%s=%s", k, v))
872	}
873	return res, nil
874}
875
876func ptrValOr[T any](t *T, el T) T {
877	if t == nil {
878		return el
879	}
880	return *t
881}