@aigne/afs-cli 1.11.0-beta.11 → 1.11.0-beta.13

package/dist/config/loader.mjs

@@ -181,7 +181,8 @@ var ConfigLoader = class {
 				mounts: allMounts,
 				serve: mergedServe
 			},
-			mountSources
+			mountSources,
+			configDirs: entries.map((e) => e.configDir)
 		};
 	}
 	/**
@@ -213,5 +214,5 @@ var ConfigLoader = class {
 const configLoader = new ConfigLoader();
 
 //#endregion
-export { CONFIG_DIR_NAME, CONFIG_FILE_NAME, ConfigLoader };
+export { AFS_USER_CONFIG_DIR_ENV, CONFIG_DIR_NAME, CONFIG_FILE_NAME, ConfigLoader };
 //# sourceMappingURL=loader.mjs.map

package/dist/config/loader.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"loader.mjs","names":[],"sources":["../../src/config/loader.ts"],"sourcesContent":["import { access, readFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { parse } from \"smol-toml\";\nimport { resolveEnvVarsInObject } from \"./env.js\";\nimport { type AFSConfig, ConfigSchema, type MountConfig, type ServeConfig } from \"./schema.js\";\n\nexport const CONFIG_DIR_NAME = \".afs-config\";\nexport const CONFIG_FILE_NAME = \"config.toml\";\n\nexport interface ConfigLoaderOptions {\n  /** Custom path to user-level config directory (for testing) */\n  userConfigDir?: string;\n}\n\nexport interface LoadWithSourcesResult {\n  config: AFSConfig;\n  /** Map from \"namespace:path\" → config directory that defines this mount */\n  mountSources: Map<string, string>;\n}\n\n/**\n * Environment variable to override user config directory.\n * Useful for testing to isolate from real user config.\n */\nexport const AFS_USER_CONFIG_DIR_ENV = \"AFS_USER_CONFIG_DIR\";\n\n/**\n * Loads and merges AFS configuration from multiple layers\n *\n * Layer priority (lowest to highest):\n * 1. User-level: ~/.afs-config/config.toml\n * 2. All intermediate directories from project root to cwd\n *\n * Example: if cwd is /project/packages/cli, configs are merged from:\n *   ~/.afs-config/config.toml (user)\n *   /project/.afs-config/config.toml (project root, has .git)\n *   /project/packages/.afs-config/config.toml (intermediate)\n *   /project/packages/cli/.afs-config/config.toml (cwd)\n */\nexport class ConfigLoader {\n  private userConfigDir: string;\n\n  constructor(options: ConfigLoaderOptions = {}) {\n    // Priority: options > environment variable > default (~/.afs-config)\n    this.userConfigDir =\n      options.userConfigDir ??\n      process.env[AFS_USER_CONFIG_DIR_ENV] ??\n      join(homedir(), CONFIG_DIR_NAME);\n  }\n\n  /**\n   * Load and merge configuration from all layers\n   *\n   * @param cwd - Current working directory (defaults to process.cwd())\n   * @returns Merged configuration\n   * @throws Error on invalid config, TOML parse error, or duplicate mount paths\n   */\n  async load(cwd: string = process.cwd()): Promise<AFSConfig> {\n    const result = await this.loadWithSources(cwd);\n    return result.config;\n  }\n\n  /**\n   * Load and merge configuration, also returning the config directory for each mount.\n   *\n   * mountSources maps \"namespace:path\" → config directory path (dirname of config file).\n   * Used by credential store to scope credentials per config location.\n   */\n  async loadWithSources(cwd: string = process.cwd()): Promise<LoadWithSourcesResult> {\n    const configPaths = await this.getConfigPaths(cwd);\n    const entries: { config: AFSConfig; configDir: string }[] = [];\n\n    for (const configPath of configPaths) {\n      const config = await this.loadSingleConfig(configPath);\n      entries.push({ config, configDir: dirname(configPath) });\n    }\n\n    return this.mergeConfigsWithSources(entries);\n  }\n\n  /**\n   * Get paths to all existing config files\n   *\n   * Collects configs from:\n   * 1. User-level: ~/.afs-config/config.toml\n   * 2. Project root (or topmost .afs-config dir) to cwd: all .afs-config/config.toml files\n   */\n  async getConfigPaths(cwd: string = process.cwd()): Promise<string[]> {\n    const paths: string[] = [];\n\n    // 1. User-level config\n    const userConfigPath = join(this.userConfigDir, CONFIG_FILE_NAME);\n    if (await this.fileExists(userConfigPath)) {\n      paths.push(userConfigPath);\n    }\n\n    // 2. Find project root (look for .git going up)\n    const projectRoot = await this.findProjectRoot(cwd);\n\n    // 3. Determine start directory\n    // If project root found, use it; otherwise find topmost .afs-config directory\n    const startDir = projectRoot ?? (await this.findTopmostAfsDir(cwd)) ?? cwd;\n\n    // 4. Collect all config files from start to cwd\n    // Exclude user config directory to avoid loading it twice\n    const intermediatePaths = await this.collectConfigsFromTo(startDir, cwd, this.userConfigDir);\n    paths.push(...intermediatePaths);\n\n    return paths;\n  }\n\n  /**\n   * Find the topmost directory containing .afs-config from startDir going up\n   */\n  private async findTopmostAfsDir(startDir: string): Promise<string | null> {\n    let currentDir = startDir;\n    let topmostAfsDir: string | null = null;\n\n    while (true) {\n      if (await this.fileExists(join(currentDir, CONFIG_DIR_NAME))) {\n        topmostAfsDir = currentDir;\n      }\n\n      const parentDir = dirname(currentDir);\n      if (parentDir === currentDir) {\n        // Reached filesystem root\n        break;\n      }\n      currentDir = parentDir;\n    }\n\n    return topmostAfsDir;\n  }\n\n  /**\n   * Collect all config files from startDir to endDir (inclusive)\n   * Returns paths in order from startDir to endDir (parent to child)\n   *\n   * @param excludeConfigDir - Optional config directory to exclude (to avoid duplicates)\n   */\n  private async collectConfigsFromTo(\n    startDir: string,\n    endDir: string,\n    excludeConfigDir?: string,\n  ): Promise<string[]> {\n    const paths: string[] = [];\n\n    // Build list of directories from startDir to endDir\n    const dirs: string[] = [];\n    let current = endDir;\n\n    while (true) {\n      dirs.unshift(current); // prepend to maintain parent-to-child order\n\n      if (current === startDir) {\n        break;\n      }\n\n      const parent = dirname(current);\n      if (parent === current) {\n        // Reached filesystem root without finding startDir\n        // This shouldn't happen if startDir is an ancestor of endDir\n        break;\n      }\n      current = parent;\n    }\n\n    // Check each directory for config file\n    for (const dir of dirs) {\n      const configDir = join(dir, CONFIG_DIR_NAME);\n      // Skip if this is the excluded config directory (e.g., user config already loaded)\n      if (excludeConfigDir && configDir === excludeConfigDir) {\n        continue;\n      }\n      const configPath = join(configDir, CONFIG_FILE_NAME);\n      if (await this.fileExists(configPath)) {\n        paths.push(configPath);\n      }\n    }\n\n    return paths;\n  }\n\n  /**\n   * Load a single config file\n   */\n  private async loadSingleConfig(configPath: string): Promise<AFSConfig> {\n    const content = await readFile(configPath, \"utf-8\");\n\n    let parsed: unknown;\n    try {\n      parsed = parse(content);\n    } catch (error) {\n      throw new Error(\n        `Failed to parse TOML config at ${configPath}: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n\n    // Resolve environment variables with friendly error messages\n    let resolved: unknown;\n    try {\n      resolved = resolveEnvVarsInObject(parsed);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      // Extract variable name from error message like \"Environment variable GITHUB_TOKEN is not defined\"\n      const match = message.match(/Environment variable (\\w+) is not defined/);\n      if (match) {\n        const varName = match[1];\n        throw new Error(\n          `Missing environment variable ${varName} in ${configPath}.\\n` +\n            `  Set it in your shell: export ${varName}=your_value\\n` +\n            `  Or add to .env file: ${varName}=your_value`,\n        );\n      }\n      throw new Error(`Failed to resolve environment variables in ${configPath}: ${message}`);\n    }\n\n    // Validate against schema\n    const result = ConfigSchema.safeParse(resolved);\n    if (!result.success) {\n      const errors = result.error.issues.map((e) => `${e.path.join(\".\")}: ${e.message}`).join(\"; \");\n      throw new Error(`Invalid config at ${configPath}: ${errors}`);\n    }\n\n    return result.data;\n  }\n\n  /**\n   * Create a composite key for namespace+path duplicate detection\n   * Uses empty string for undefined namespace (default namespace)\n   */\n  private makeNamespacePathKey(namespace: string | undefined, path: string): string {\n    return `${namespace ?? \"\"}:${path}`;\n  }\n\n  /**\n   * Merge configs with source tracking.\n   * Returns merged config plus a map of mount key → config directory.\n   */\n  private mergeConfigsWithSources(\n    entries: { config: AFSConfig; configDir: string }[],\n  ): LoadWithSourcesResult {\n    const mountIndexByKey = new Map<string, number>();\n    const allMounts: MountConfig[] = [];\n    const mountSources = new Map<string, string>();\n    let mergedServe: ServeConfig | undefined;\n\n    for (const { config, configDir } of entries) {\n      for (const mount of config.mounts) {\n        const key = this.makeNamespacePathKey(mount.namespace, mount.path);\n        const existingIndex = mountIndexByKey.get(key);\n        if (existingIndex !== undefined) {\n          allMounts[existingIndex] = mount;\n        } else {\n          mountIndexByKey.set(key, allMounts.length);\n          allMounts.push(mount);\n        }\n        // Track source (child overrides parent)\n        mountSources.set(key, configDir);\n      }\n\n      if (config.serve) {\n        mergedServe = mergedServe ? { ...mergedServe, ...config.serve } : config.serve;\n      }\n    }\n\n    return {\n      config: { mounts: allMounts, serve: mergedServe },\n      mountSources,\n    };\n  }\n\n  /**\n   * Find project root by looking for .git\n   * Note: Only .git is used as project root marker, not .afs-config,\n   * because .afs-config can exist at multiple levels for hierarchical config\n   */\n  async findProjectRoot(startDir: string): Promise<string | null> {\n    let currentDir = startDir;\n\n    while (true) {\n      // Check for .git directory\n      if (await this.fileExists(join(currentDir, \".git\"))) {\n        return currentDir;\n      }\n\n      const parentDir = dirname(currentDir);\n      if (parentDir === currentDir) {\n        // Reached filesystem root\n        return null;\n      }\n      currentDir = parentDir;\n    }\n  }\n\n  /**\n   * Check if a file or directory exists\n   */\n  private async fileExists(path: string): Promise<boolean> {\n    try {\n      await access(path);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n}\n\n// Default singleton instance\nexport const configLoader = new ConfigLoader();\n"],"mappings":";;;;;;;;AAOA,MAAa,kBAAkB;AAC/B,MAAa,mBAAmB;;;;;AAiBhC,MAAa,0BAA0B;;;;;;;;;;;;;;AAevC,IAAa,eAAb,MAA0B;CACxB,AAAQ;CAER,YAAY,UAA+B,EAAE,EAAE;AAE7C,OAAK,gBACH,QAAQ,iBACR,QAAQ,IAAI,4BACZ,KAAK,SAAS,EAAE,gBAAgB;;;;;;;;;CAUpC,MAAM,KAAK,MAAc,QAAQ,KAAK,EAAsB;AAE1D,UADe,MAAM,KAAK,gBAAgB,IAAI,EAChC;;;;;;;;CAShB,MAAM,gBAAgB,MAAc,QAAQ,KAAK,EAAkC;EACjF,MAAM,cAAc,MAAM,KAAK,eAAe,IAAI;EAClD,MAAM,UAAsD,EAAE;AAE9D,OAAK,MAAM,cAAc,aAAa;GACpC,MAAM,SAAS,MAAM,KAAK,iBAAiB,WAAW;AACtD,WAAQ,KAAK;IAAE;IAAQ,WAAW,QAAQ,WAAW;IAAE,CAAC;;AAG1D,SAAO,KAAK,wBAAwB,QAAQ;;;;;;;;;CAU9C,MAAM,eAAe,MAAc,QAAQ,KAAK,EAAqB;EACnE,MAAM,QAAkB,EAAE;EAG1B,MAAM,iBAAiB,KAAK,KAAK,eAAe,iBAAiB;AACjE,MAAI,MAAM,KAAK,WAAW,eAAe,CACvC,OAAM,KAAK,eAAe;EAQ5B,MAAM,WAJc,MAAM,KAAK,gBAAgB,IAAI,IAIlB,MAAM,KAAK,kBAAkB,IAAI,IAAK;EAIvE,MAAM,oBAAoB,MAAM,KAAK,qBAAqB,UAAU,KAAK,KAAK,cAAc;AAC5F,QAAM,KAAK,GAAG,kBAAkB;AAEhC,SAAO;;;;;CAMT,MAAc,kBAAkB,UAA0C;EACxE,IAAI,aAAa;EACjB,IAAI,gBAA+B;AAEnC,SAAO,MAAM;AACX,OAAI,MAAM,KAAK,WAAW,KAAK,YAAY,gBAAgB,CAAC,CAC1D,iBAAgB;GAGlB,MAAM,YAAY,QAAQ,WAAW;AACrC,OAAI,cAAc,WAEhB;AAEF,gBAAa;;AAGf,SAAO;;;;;;;;CAST,MAAc,qBACZ,UACA,QACA,kBACmB;EACnB,MAAM,QAAkB,EAAE;EAG1B,MAAM,OAAiB,EAAE;EACzB,IAAI,UAAU;AAEd,SAAO,MAAM;AACX,QAAK,QAAQ,QAAQ;AAErB,OAAI,YAAY,SACd;GAGF,MAAM,SAAS,QAAQ,QAAQ;AAC/B,OAAI,WAAW,QAGb;AAEF,aAAU;;AAIZ,OAAK,MAAM,OAAO,MAAM;GACtB,MAAM,YAAY,KAAK,KAAK,gBAAgB;AAE5C,OAAI,oBAAoB,cAAc,iBACpC;GAEF,MAAM,aAAa,KAAK,WAAW,iBAAiB;AACpD,OAAI,MAAM,KAAK,WAAW,WAAW,CACnC,OAAM,KAAK,WAAW;;AAI1B,SAAO;;;;;CAMT,MAAc,iBAAiB,YAAwC;EACrE,MAAM,UAAU,MAAM,SAAS,YAAY,QAAQ;EAEnD,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,QAAQ;WAChB,OAAO;AACd,SAAM,IAAI,MACR,kCAAkC,WAAW,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GACxG;;EAIH,IAAI;AACJ,MAAI;AACF,cAAW,uBAAuB,OAAO;WAClC,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAEtE,MAAM,QAAQ,QAAQ,MAAM,4CAA4C;AACxE,OAAI,OAAO;IACT,MAAM,UAAU,MAAM;AACtB,UAAM,IAAI,MACR,gCAAgC,QAAQ,MAAM,WAAW,oCACrB,QAAQ,sCAChB,QAAQ,aACrC;;AAEH,SAAM,IAAI,MAAM,8CAA8C,WAAW,IAAI,UAAU;;EAIzF,MAAM,SAAS,aAAa,UAAU,SAAS;AAC/C,MAAI,CAAC,OAAO,SAAS;GACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK;AAC7F,SAAM,IAAI,MAAM,qBAAqB,WAAW,IAAI,SAAS;;AAG/D,SAAO,OAAO;;;;;;CAOhB,AAAQ,qBAAqB,WAA+B,MAAsB;AAChF,SAAO,GAAG,aAAa,GAAG,GAAG;;;;;;CAO/B,AAAQ,wBACN,SACuB;EACvB,MAAM,kCAAkB,IAAI,KAAqB;EACjD,MAAM,YAA2B,EAAE;EACnC,MAAM,+BAAe,IAAI,KAAqB;EAC9C,IAAI;AAEJ,OAAK,MAAM,EAAE,QAAQ,eAAe,SAAS;AAC3C,QAAK,MAAM,SAAS,OAAO,QAAQ;IACjC,MAAM,MAAM,KAAK,qBAAqB,MAAM,WAAW,MAAM,KAAK;IAClE,MAAM,gBAAgB,gBAAgB,IAAI,IAAI;AAC9C,QAAI,kBAAkB,OACpB,WAAU,iBAAiB;SACtB;AACL,qBAAgB,IAAI,KAAK,UAAU,OAAO;AAC1C,eAAU,KAAK,MAAM;;AAGvB,iBAAa,IAAI,KAAK,UAAU;;AAGlC,OAAI,OAAO,MACT,eAAc,cAAc;IAAE,GAAG;IAAa,GAAG,OAAO;IAAO,GAAG,OAAO;;AAI7E,SAAO;GACL,QAAQ;IAAE,QAAQ;IAAW,OAAO;IAAa;GACjD;GACD;;;;;;;CAQH,MAAM,gBAAgB,UAA0C;EAC9D,IAAI,aAAa;AAEjB,SAAO,MAAM;AAEX,OAAI,MAAM,KAAK,WAAW,KAAK,YAAY,OAAO,CAAC,CACjD,QAAO;GAGT,MAAM,YAAY,QAAQ,WAAW;AACrC,OAAI,cAAc,WAEhB,QAAO;AAET,gBAAa;;;;;;CAOjB,MAAc,WAAW,MAAgC;AACvD,MAAI;AACF,SAAM,OAAO,KAAK;AAClB,UAAO;UACD;AACN,UAAO;;;;AAMb,MAAa,eAAe,IAAI,cAAc"}
+{"version":3,"file":"loader.mjs","names":[],"sources":["../../src/config/loader.ts"],"sourcesContent":["import { access, readFile } from \"node:fs/promises\";\nimport { homedir } from \"node:os\";\nimport { dirname, join } from \"node:path\";\nimport { parse } from \"smol-toml\";\nimport { resolveEnvVarsInObject } from \"./env.js\";\nimport { type AFSConfig, ConfigSchema, type MountConfig, type ServeConfig } from \"./schema.js\";\n\nexport const CONFIG_DIR_NAME = \".afs-config\";\nexport const CONFIG_FILE_NAME = \"config.toml\";\n\nexport interface ConfigLoaderOptions {\n  /** Custom path to user-level config directory (for testing) */\n  userConfigDir?: string;\n}\n\nexport interface LoadWithSourcesResult {\n  config: AFSConfig;\n  /** Map from \"namespace:path\" → config directory that defines this mount */\n  mountSources: Map<string, string>;\n  /** Config directories in order from outermost to innermost */\n  configDirs: string[];\n}\n\n/**\n * Environment variable to override user config directory.\n * Useful for testing to isolate from real user config.\n */\nexport const AFS_USER_CONFIG_DIR_ENV = \"AFS_USER_CONFIG_DIR\";\n\n/**\n * Loads and merges AFS configuration from multiple layers\n *\n * Layer priority (lowest to highest):\n * 1. User-level: ~/.afs-config/config.toml\n * 2. All intermediate directories from project root to cwd\n *\n * Example: if cwd is /project/packages/cli, configs are merged from:\n *   ~/.afs-config/config.toml (user)\n *   /project/.afs-config/config.toml (project root, has .git)\n *   /project/packages/.afs-config/config.toml (intermediate)\n *   /project/packages/cli/.afs-config/config.toml (cwd)\n */\nexport class ConfigLoader {\n  private userConfigDir: string;\n\n  constructor(options: ConfigLoaderOptions = {}) {\n    // Priority: options > environment variable > default (~/.afs-config)\n    this.userConfigDir =\n      options.userConfigDir ??\n      process.env[AFS_USER_CONFIG_DIR_ENV] ??\n      join(homedir(), CONFIG_DIR_NAME);\n  }\n\n  /**\n   * Load and merge configuration from all layers\n   *\n   * @param cwd - Current working directory (defaults to process.cwd())\n   * @returns Merged configuration\n   * @throws Error on invalid config, TOML parse error, or duplicate mount paths\n   */\n  async load(cwd: string = process.cwd()): Promise<AFSConfig> {\n    const result = await this.loadWithSources(cwd);\n    return result.config;\n  }\n\n  /**\n   * Load and merge configuration, also returning the config directory for each mount.\n   *\n   * mountSources maps \"namespace:path\" → config directory path (dirname of config file).\n   * Used by credential store to scope credentials per config location.\n   */\n  async loadWithSources(cwd: string = process.cwd()): Promise<LoadWithSourcesResult> {\n    const configPaths = await this.getConfigPaths(cwd);\n    const entries: { config: AFSConfig; configDir: string }[] = [];\n\n    for (const configPath of configPaths) {\n      const config = await this.loadSingleConfig(configPath);\n      entries.push({ config, configDir: dirname(configPath) });\n    }\n\n    return this.mergeConfigsWithSources(entries);\n  }\n\n  /**\n   * Get paths to all existing config files\n   *\n   * Collects configs from:\n   * 1. User-level: ~/.afs-config/config.toml\n   * 2. Project root (or topmost .afs-config dir) to cwd: all .afs-config/config.toml files\n   */\n  async getConfigPaths(cwd: string = process.cwd()): Promise<string[]> {\n    const paths: string[] = [];\n\n    // 1. User-level config\n    const userConfigPath = join(this.userConfigDir, CONFIG_FILE_NAME);\n    if (await this.fileExists(userConfigPath)) {\n      paths.push(userConfigPath);\n    }\n\n    // 2. Find project root (look for .git going up)\n    const projectRoot = await this.findProjectRoot(cwd);\n\n    // 3. Determine start directory\n    // If project root found, use it; otherwise find topmost .afs-config directory\n    const startDir = projectRoot ?? (await this.findTopmostAfsDir(cwd)) ?? cwd;\n\n    // 4. Collect all config files from start to cwd\n    // Exclude user config directory to avoid loading it twice\n    const intermediatePaths = await this.collectConfigsFromTo(startDir, cwd, this.userConfigDir);\n    paths.push(...intermediatePaths);\n\n    return paths;\n  }\n\n  /**\n   * Find the topmost directory containing .afs-config from startDir going up\n   */\n  private async findTopmostAfsDir(startDir: string): Promise<string | null> {\n    let currentDir = startDir;\n    let topmostAfsDir: string | null = null;\n\n    while (true) {\n      if (await this.fileExists(join(currentDir, CONFIG_DIR_NAME))) {\n        topmostAfsDir = currentDir;\n      }\n\n      const parentDir = dirname(currentDir);\n      if (parentDir === currentDir) {\n        // Reached filesystem root\n        break;\n      }\n      currentDir = parentDir;\n    }\n\n    return topmostAfsDir;\n  }\n\n  /**\n   * Collect all config files from startDir to endDir (inclusive)\n   * Returns paths in order from startDir to endDir (parent to child)\n   *\n   * @param excludeConfigDir - Optional config directory to exclude (to avoid duplicates)\n   */\n  private async collectConfigsFromTo(\n    startDir: string,\n    endDir: string,\n    excludeConfigDir?: string,\n  ): Promise<string[]> {\n    const paths: string[] = [];\n\n    // Build list of directories from startDir to endDir\n    const dirs: string[] = [];\n    let current = endDir;\n\n    while (true) {\n      dirs.unshift(current); // prepend to maintain parent-to-child order\n\n      if (current === startDir) {\n        break;\n      }\n\n      const parent = dirname(current);\n      if (parent === current) {\n        // Reached filesystem root without finding startDir\n        // This shouldn't happen if startDir is an ancestor of endDir\n        break;\n      }\n      current = parent;\n    }\n\n    // Check each directory for config file\n    for (const dir of dirs) {\n      const configDir = join(dir, CONFIG_DIR_NAME);\n      // Skip if this is the excluded config directory (e.g., user config already loaded)\n      if (excludeConfigDir && configDir === excludeConfigDir) {\n        continue;\n      }\n      const configPath = join(configDir, CONFIG_FILE_NAME);\n      if (await this.fileExists(configPath)) {\n        paths.push(configPath);\n      }\n    }\n\n    return paths;\n  }\n\n  /**\n   * Load a single config file\n   */\n  private async loadSingleConfig(configPath: string): Promise<AFSConfig> {\n    const content = await readFile(configPath, \"utf-8\");\n\n    let parsed: unknown;\n    try {\n      parsed = parse(content);\n    } catch (error) {\n      throw new Error(\n        `Failed to parse TOML config at ${configPath}: ${error instanceof Error ? error.message : String(error)}`,\n      );\n    }\n\n    // Resolve environment variables with friendly error messages\n    let resolved: unknown;\n    try {\n      resolved = resolveEnvVarsInObject(parsed);\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      // Extract variable name from error message like \"Environment variable GITHUB_TOKEN is not defined\"\n      const match = message.match(/Environment variable (\\w+) is not defined/);\n      if (match) {\n        const varName = match[1];\n        throw new Error(\n          `Missing environment variable ${varName} in ${configPath}.\\n` +\n            `  Set it in your shell: export ${varName}=your_value\\n` +\n            `  Or add to .env file: ${varName}=your_value`,\n        );\n      }\n      throw new Error(`Failed to resolve environment variables in ${configPath}: ${message}`);\n    }\n\n    // Validate against schema\n    const result = ConfigSchema.safeParse(resolved);\n    if (!result.success) {\n      const errors = result.error.issues.map((e) => `${e.path.join(\".\")}: ${e.message}`).join(\"; \");\n      throw new Error(`Invalid config at ${configPath}: ${errors}`);\n    }\n\n    return result.data;\n  }\n\n  /**\n   * Create a composite key for namespace+path duplicate detection\n   * Uses empty string for undefined namespace (default namespace)\n   */\n  private makeNamespacePathKey(namespace: string | undefined, path: string): string {\n    return `${namespace ?? \"\"}:${path}`;\n  }\n\n  /**\n   * Merge configs with source tracking.\n   * Returns merged config plus a map of mount key → config directory.\n   */\n  private mergeConfigsWithSources(\n    entries: { config: AFSConfig; configDir: string }[],\n  ): LoadWithSourcesResult {\n    const mountIndexByKey = new Map<string, number>();\n    const allMounts: MountConfig[] = [];\n    const mountSources = new Map<string, string>();\n    let mergedServe: ServeConfig | undefined;\n\n    for (const { config, configDir } of entries) {\n      for (const mount of config.mounts) {\n        const key = this.makeNamespacePathKey(mount.namespace, mount.path);\n        const existingIndex = mountIndexByKey.get(key);\n        if (existingIndex !== undefined) {\n          allMounts[existingIndex] = mount;\n        } else {\n          mountIndexByKey.set(key, allMounts.length);\n          allMounts.push(mount);\n        }\n        // Track source (child overrides parent)\n        mountSources.set(key, configDir);\n      }\n\n      if (config.serve) {\n        mergedServe = mergedServe ? { ...mergedServe, ...config.serve } : config.serve;\n      }\n    }\n\n    return {\n      config: { mounts: allMounts, serve: mergedServe },\n      mountSources,\n      configDirs: entries.map((e) => e.configDir),\n    };\n  }\n\n  /**\n   * Find project root by looking for .git\n   * Note: Only .git is used as project root marker, not .afs-config,\n   * because .afs-config can exist at multiple levels for hierarchical config\n   */\n  async findProjectRoot(startDir: string): Promise<string | null> {\n    let currentDir = startDir;\n\n    while (true) {\n      // Check for .git directory\n      if (await this.fileExists(join(currentDir, \".git\"))) {\n        return currentDir;\n      }\n\n      const parentDir = dirname(currentDir);\n      if (parentDir === currentDir) {\n        // Reached filesystem root\n        return null;\n      }\n      currentDir = parentDir;\n    }\n  }\n\n  /**\n   * Check if a file or directory exists\n   */\n  private async fileExists(path: string): Promise<boolean> {\n    try {\n      await access(path);\n      return true;\n    } catch {\n      return false;\n    }\n  }\n}\n\n// Default singleton instance\nexport const configLoader = new ConfigLoader();\n"],"mappings":";;;;;;;;AAOA,MAAa,kBAAkB;AAC/B,MAAa,mBAAmB;;;;;AAmBhC,MAAa,0BAA0B;;;;;;;;;;;;;;AAevC,IAAa,eAAb,MAA0B;CACxB,AAAQ;CAER,YAAY,UAA+B,EAAE,EAAE;AAE7C,OAAK,gBACH,QAAQ,iBACR,QAAQ,IAAI,4BACZ,KAAK,SAAS,EAAE,gBAAgB;;;;;;;;;CAUpC,MAAM,KAAK,MAAc,QAAQ,KAAK,EAAsB;AAE1D,UADe,MAAM,KAAK,gBAAgB,IAAI,EAChC;;;;;;;;CAShB,MAAM,gBAAgB,MAAc,QAAQ,KAAK,EAAkC;EACjF,MAAM,cAAc,MAAM,KAAK,eAAe,IAAI;EAClD,MAAM,UAAsD,EAAE;AAE9D,OAAK,MAAM,cAAc,aAAa;GACpC,MAAM,SAAS,MAAM,KAAK,iBAAiB,WAAW;AACtD,WAAQ,KAAK;IAAE;IAAQ,WAAW,QAAQ,WAAW;IAAE,CAAC;;AAG1D,SAAO,KAAK,wBAAwB,QAAQ;;;;;;;;;CAU9C,MAAM,eAAe,MAAc,QAAQ,KAAK,EAAqB;EACnE,MAAM,QAAkB,EAAE;EAG1B,MAAM,iBAAiB,KAAK,KAAK,eAAe,iBAAiB;AACjE,MAAI,MAAM,KAAK,WAAW,eAAe,CACvC,OAAM,KAAK,eAAe;EAQ5B,MAAM,WAJc,MAAM,KAAK,gBAAgB,IAAI,IAIlB,MAAM,KAAK,kBAAkB,IAAI,IAAK;EAIvE,MAAM,oBAAoB,MAAM,KAAK,qBAAqB,UAAU,KAAK,KAAK,cAAc;AAC5F,QAAM,KAAK,GAAG,kBAAkB;AAEhC,SAAO;;;;;CAMT,MAAc,kBAAkB,UAA0C;EACxE,IAAI,aAAa;EACjB,IAAI,gBAA+B;AAEnC,SAAO,MAAM;AACX,OAAI,MAAM,KAAK,WAAW,KAAK,YAAY,gBAAgB,CAAC,CAC1D,iBAAgB;GAGlB,MAAM,YAAY,QAAQ,WAAW;AACrC,OAAI,cAAc,WAEhB;AAEF,gBAAa;;AAGf,SAAO;;;;;;;;CAST,MAAc,qBACZ,UACA,QACA,kBACmB;EACnB,MAAM,QAAkB,EAAE;EAG1B,MAAM,OAAiB,EAAE;EACzB,IAAI,UAAU;AAEd,SAAO,MAAM;AACX,QAAK,QAAQ,QAAQ;AAErB,OAAI,YAAY,SACd;GAGF,MAAM,SAAS,QAAQ,QAAQ;AAC/B,OAAI,WAAW,QAGb;AAEF,aAAU;;AAIZ,OAAK,MAAM,OAAO,MAAM;GACtB,MAAM,YAAY,KAAK,KAAK,gBAAgB;AAE5C,OAAI,oBAAoB,cAAc,iBACpC;GAEF,MAAM,aAAa,KAAK,WAAW,iBAAiB;AACpD,OAAI,MAAM,KAAK,WAAW,WAAW,CACnC,OAAM,KAAK,WAAW;;AAI1B,SAAO;;;;;CAMT,MAAc,iBAAiB,YAAwC;EACrE,MAAM,UAAU,MAAM,SAAS,YAAY,QAAQ;EAEnD,IAAI;AACJ,MAAI;AACF,YAAS,MAAM,QAAQ;WAChB,OAAO;AACd,SAAM,IAAI,MACR,kCAAkC,WAAW,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,GACxG;;EAIH,IAAI;AACJ,MAAI;AACF,cAAW,uBAAuB,OAAO;WAClC,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAEtE,MAAM,QAAQ,QAAQ,MAAM,4CAA4C;AACxE,OAAI,OAAO;IACT,MAAM,UAAU,MAAM;AACtB,UAAM,IAAI,MACR,gCAAgC,QAAQ,MAAM,WAAW,oCACrB,QAAQ,sCAChB,QAAQ,aACrC;;AAEH,SAAM,IAAI,MAAM,8CAA8C,WAAW,IAAI,UAAU;;EAIzF,MAAM,SAAS,aAAa,UAAU,SAAS;AAC/C,MAAI,CAAC,OAAO,SAAS;GACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,KAAK;AAC7F,SAAM,IAAI,MAAM,qBAAqB,WAAW,IAAI,SAAS;;AAG/D,SAAO,OAAO;;;;;;CAOhB,AAAQ,qBAAqB,WAA+B,MAAsB;AAChF,SAAO,GAAG,aAAa,GAAG,GAAG;;;;;;CAO/B,AAAQ,wBACN,SACuB;EACvB,MAAM,kCAAkB,IAAI,KAAqB;EACjD,MAAM,YAA2B,EAAE;EACnC,MAAM,+BAAe,IAAI,KAAqB;EAC9C,IAAI;AAEJ,OAAK,MAAM,EAAE,QAAQ,eAAe,SAAS;AAC3C,QAAK,MAAM,SAAS,OAAO,QAAQ;IACjC,MAAM,MAAM,KAAK,qBAAqB,MAAM,WAAW,MAAM,KAAK;IAClE,MAAM,gBAAgB,gBAAgB,IAAI,IAAI;AAC9C,QAAI,kBAAkB,OACpB,WAAU,iBAAiB;SACtB;AACL,qBAAgB,IAAI,KAAK,UAAU,OAAO;AAC1C,eAAU,KAAK,MAAM;;AAGvB,iBAAa,IAAI,KAAK,UAAU;;AAGlC,OAAI,OAAO,MACT,eAAc,cAAc;IAAE,GAAG;IAAa,GAAG,OAAO;IAAO,GAAG,OAAO;;AAI7E,SAAO;GACL,QAAQ;IAAE,QAAQ;IAAW,OAAO;IAAa;GACjD;GACA,YAAY,QAAQ,KAAK,MAAM,EAAE,UAAU;GAC5C;;;;;;;CAQH,MAAM,gBAAgB,UAA0C;EAC9D,IAAI,aAAa;AAEjB,SAAO,MAAM;AAEX,OAAI,MAAM,KAAK,WAAW,KAAK,YAAY,OAAO,CAAC,CACjD,QAAO;GAGT,MAAM,YAAY,QAAQ,WAAW;AACrC,OAAI,cAAc,WAEhB,QAAO;AAET,gBAAa;;;;;;CAOjB,MAAc,WAAW,MAAgC;AACvD,MAAI;AACF,SAAM,OAAO,KAAK;AAClB,UAAO;UACD;AACN,UAAO;;;;AAMb,MAAa,eAAe,IAAI,cAAc"}

package/dist/config/program-install.cjs

@@ -0,0 +1,450 @@
+const require_rolldown_runtime = require('../_virtual/rolldown_runtime.cjs');
+const require_loader = require('./loader.cjs');
+const require_mount_commands = require('./mount-commands.cjs');
+let node_child_process = require("node:child_process");
+let node_fs_promises = require("node:fs/promises");
+let node_os = require("node:os");
+let node_path = require("node:path");
+let _aigne_afs = require("@aigne/afs");
+
+//#region src/config/program-install.ts
+/**
+* Program Installation
+*
+* Business logic for installing, listing, and removing AFS programs.
+* Programs are installed to ~/.afs-config/programs/<id>/ and mounted
+* at /programs/<id> in the CWD config (same as `mount add`).
+*/
+/**
+* Get the user config directory.
+*/
+function getUserConfigDir(override) {
+	return override ?? process.env[require_loader.AFS_USER_CONFIG_DIR_ENV] ?? (0, node_path.join)((0, node_os.homedir)(), require_loader.CONFIG_DIR_NAME);
+}
+/**
+* Detect the source type from a source string.
+*/
+function detectSourceType(source) {
+	if (source.endsWith(".zip")) return "zip";
+	if (source.startsWith("https://github.com/") || source.startsWith("http://github.com/") || source.startsWith("github.com/")) return "github";
+	return "local";
+}
+/**
+* Parse a GitHub URL into owner, repo, ref, and optional subdirectory.
+*/
+function parseGitHubURL(url) {
+	let normalized = url;
+	if (normalized.startsWith("github.com/")) normalized = `https://${normalized}`;
+	const match = normalized.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?(?:\/tree\/([^/]+)\/(.+))?$/);
+	if (!match) return { cloneUrl: normalized.replace(/\/+$/, "") };
+	const [, owner, repo, _ref, subdir] = match;
+	return {
+		cloneUrl: `https://github.com/${owner}/${repo}.git`,
+		subdir: subdir || void 0
+	};
+}
+/**
+* Resolve a source to a local directory path containing program.yaml.
+* For github/zip sources, downloads/extracts to a temp directory.
+*
+* Returns [resolvedPath, tempDir?] — tempDir is set if caller should clean up.
+*/
+async function resolveSource(source, type, cwd) {
+	switch (type) {
+		case "local": {
+			const dirPath = (0, node_path.isAbsolute)(source) ? source : (0, node_path.resolve)(cwd, source);
+			try {
+				await (0, node_fs_promises.readdir)(dirPath);
+			} catch {
+				throw new Error(`Source directory does not exist: ${dirPath}`);
+			}
+			return [dirPath, void 0];
+		}
+		case "github": {
+			const { cloneUrl, subdir } = parseGitHubURL(source);
+			const tempDir = (0, node_path.join)((0, node_os.tmpdir)(), `afs-install-${Date.now()}`);
+			await (0, node_fs_promises.mkdir)(tempDir, { recursive: true });
+			try {
+				(0, node_child_process.execSync)(`git clone --depth 1 ${cloneUrl} ${(0, node_path.join)(tempDir, "repo")}`, {
+					stdio: "pipe",
+					timeout: 6e4
+				});
+			} catch (err) {
+				await (0, node_fs_promises.rm)(tempDir, {
+					recursive: true,
+					force: true
+				});
+				const msg = err instanceof Error ? err.message : String(err);
+				throw new Error(`Failed to clone GitHub repository: ${msg}`);
+			}
+			return [subdir ? (0, node_path.join)(tempDir, "repo", subdir) : (0, node_path.join)(tempDir, "repo"), tempDir];
+		}
+		case "zip": {
+			const zipPath = (0, node_path.isAbsolute)(source) ? source : (0, node_path.resolve)(cwd, source);
+			const tempDir = (0, node_path.join)((0, node_os.tmpdir)(), `afs-install-${Date.now()}`);
+			const extractDir = (0, node_path.join)(tempDir, "extracted");
+			await (0, node_fs_promises.mkdir)(extractDir, { recursive: true });
+			try {
+				const lines = (0, node_child_process.execSync)(`unzip -l "${zipPath}"`, {
+					encoding: "utf-8",
+					stdio: [
+						"pipe",
+						"pipe",
+						"pipe"
+					]
+				}).split("\n");
+				for (const line of lines) {
+					const trimmed = line.trim();
+					if (!trimmed || trimmed.startsWith("Archive:") || trimmed.startsWith("Length") || trimmed.startsWith("---")) continue;
+					const parts = trimmed.split(/\s+/);
+					if (parts.length >= 4) {
+						const name = parts.slice(3).join(" ");
+						if (name.includes("..") || name.startsWith("/")) {
+							await (0, node_fs_promises.rm)(tempDir, {
+								recursive: true,
+								force: true
+							});
+							throw new Error(`Zip file contains unsafe path: ${name}. Refusing to extract.`);
+						}
+					}
+				}
+			} catch (err) {
+				if (err instanceof Error && err.message.includes("unsafe path")) throw err;
+				await (0, node_fs_promises.rm)(tempDir, {
+					recursive: true,
+					force: true
+				});
+				const msg = err instanceof Error ? err.message : String(err);
+				throw new Error(`Failed to read zip file: ${msg}`);
+			}
+			try {
+				(0, node_child_process.execSync)(`unzip -o "${zipPath}" -d "${extractDir}"`, {
+					stdio: "pipe",
+					timeout: 3e4
+				});
+			} catch (err) {
+				await (0, node_fs_promises.rm)(tempDir, {
+					recursive: true,
+					force: true
+				});
+				const msg = err instanceof Error ? err.message : String(err);
+				throw new Error(`Failed to extract zip file: ${msg}`);
+			}
+			const entries = await (0, node_fs_promises.readdir)(extractDir);
+			if (entries.includes("program.yaml")) return [extractDir, tempDir];
+			if (entries.length === 1) {
+				const subPath = (0, node_path.join)(extractDir, entries[0]);
+				try {
+					if ((await (0, node_fs_promises.readdir)(subPath)).includes("program.yaml")) return [subPath, tempDir];
+				} catch {}
+			}
+			await (0, node_fs_promises.rm)(tempDir, {
+				recursive: true,
+				force: true
+			});
+			throw new Error("No program.yaml found in zip archive");
+		}
+		default: throw new Error(`Unsupported source type: ${type}`);
+	}
+}
+/**
+* Validate a directory contains a valid program.yaml.
+* Returns the parsed manifest.
+*/
+async function validateProgramDir(dirPath) {
+	const yamlPath = (0, node_path.join)(dirPath, "program.yaml");
+	let content;
+	try {
+		content = await (0, node_fs_promises.readFile)(yamlPath, "utf-8");
+	} catch {
+		throw new Error(`No program.yaml found in ${dirPath}`);
+	}
+	return (0, _aigne_afs.parseProgramManifest)(content);
+}
+/**
+* Install a program from a source (local dir, GitHub URL, or zip file).
+*/
+async function installProgram(source, options) {
+	const userConfigDir = getUserConfigDir(options?.userConfigDir);
+	const cwd = options?.cwd ?? process.cwd();
+	const [resolvedPath, tempDir] = await resolveSource(source, detectSourceType(source), cwd);
+	try {
+		const manifest = await validateProgramDir(resolvedPath);
+		const programsDir = (0, node_path.join)(userConfigDir, "programs");
+		const installPath = (0, node_path.join)(programsDir, manifest.id);
+		const mountPath = `/programs/${manifest.id}`;
+		await (0, node_fs_promises.mkdir)(programsDir, { recursive: true });
+		const tempInstallPath = `${installPath}.installing`;
+		await (0, node_fs_promises.rm)(tempInstallPath, {
+			recursive: true,
+			force: true
+		});
+		await (0, node_fs_promises.cp)(resolvedPath, tempInstallPath, { recursive: true });
+		await (0, node_fs_promises.rm)(installPath, {
+			recursive: true,
+			force: true
+		});
+		await (0, node_fs_promises.rename)(tempInstallPath, installPath);
+		await (0, node_fs_promises.mkdir)((0, node_path.join)(userConfigDir, "data", manifest.id), { recursive: true });
+		await require_mount_commands.persistMount(cwd, {
+			path: mountPath,
+			uri: `fs://${installPath}`
+		});
+		const { notifyDaemonReload } = await Promise.resolve().then(() => require("../program/daemon-integration.cjs"));
+		const { getDaemonStatus } = await Promise.resolve().then(() => require("../daemon/manager.cjs"));
+		await notifyDaemonReload({ getDaemonStatus });
+		return {
+			success: true,
+			programId: manifest.id,
+			programName: manifest.name,
+			installPath,
+			mountPath
+		};
+	} finally {
+		if (tempDir) await (0, node_fs_promises.rm)(tempDir, {
+			recursive: true,
+			force: true
+		});
+	}
+}
+/**
+* List installed programs by scanning ~/.afs-config/programs/.
+*/
+async function listInstalledPrograms(options) {
+	const programsDir = (0, node_path.join)(getUserConfigDir(options?.userConfigDir), "programs");
+	let entries;
+	try {
+		entries = await (0, node_fs_promises.readdir)(programsDir);
+	} catch {
+		return [];
+	}
+	const programs = [];
+	for (const entry of entries) {
+		const dirPath = (0, node_path.join)(programsDir, entry);
+		try {
+			const manifest = await validateProgramDir(dirPath);
+			programs.push({
+				id: manifest.id,
+				name: manifest.name,
+				entrypoint: manifest.entrypoint,
+				installPath: dirPath,
+				mountPath: `/programs/${manifest.id}`
+			});
+		} catch {}
+	}
+	return programs;
+}
+/**
+* Remove an installed program.
+*/
+async function removeProgram(programId, options) {
+	const userConfigDir = getUserConfigDir(options?.userConfigDir);
+	const cwd = options?.cwd ?? process.cwd();
+	const installPath = (0, node_path.join)(userConfigDir, "programs", programId);
+	try {
+		await (0, node_fs_promises.readdir)(installPath);
+	} catch {
+		throw new Error(`Program "${programId}" is not installed`);
+	}
+	await (0, node_fs_promises.rm)(installPath, {
+		recursive: true,
+		force: true
+	});
+	await require_mount_commands.unpersistMount(cwd, `/programs/${programId}`);
+	let purgedData = false;
+	if (options?.purge) {
+		await (0, node_fs_promises.rm)((0, node_path.join)(userConfigDir, "data", programId), {
+			recursive: true,
+			force: true
+		});
+		purgedData = true;
+	}
+	const { notifyDaemonReload } = await Promise.resolve().then(() => require("../program/daemon-integration.cjs"));
+	const { getDaemonStatus } = await Promise.resolve().then(() => require("../daemon/manager.cjs"));
+	await notifyDaemonReload({ getDaemonStatus });
+	return {
+		success: true,
+		programId,
+		purgedData
+	};
+}
+/**
+* Read per-program mount overrides from mounts.toml.
+*
+* Location: ~/.afs-config/data/{programId}/mounts.toml
+*
+* Returns [] if the file is missing or invalid.
+*/
+async function readProgramMountOverrides(programId, options) {
+	const mountsPath = (0, node_path.join)(getUserConfigDir(options?.userConfigDir), "data", programId, "mounts.toml");
+	let content;
+	try {
+		content = await (0, node_fs_promises.readFile)(mountsPath, "utf-8");
+	} catch {
+		return [];
+	}
+	try {
+		const { parse } = await import("smol-toml");
+		const mounts = parse(content).mounts;
+		if (!Array.isArray(mounts)) return [];
+		const result = [];
+		for (const entry of mounts) {
+			if (typeof entry !== "object" || entry === null) continue;
+			const { path, uri, options: options$1 } = entry;
+			if (typeof path !== "string" || typeof uri !== "string") continue;
+			const override = {
+				target: path,
+				uri
+			};
+			if (options$1 && typeof options$1 === "object" && !Array.isArray(options$1)) {
+				const opts = options$1;
+				if (Object.keys(opts).length > 0) override.options = opts;
+			}
+			result.push(override);
+		}
+		return result;
+	} catch {
+		return [];
+	}
+}
+/**
+* Interactive configure flow for a program's mount dependencies.
+*
+* Uses the standard credential resolution flow (browser form / OAuth) for each
+* mount. Mounts with already-stored credentials are skipped silently.
+* After resolution, URI templates are rebuilt with collected values and
+* credentials are persisted under the final URI.
+*/
+async function configureProgramMounts(programId, options) {
+	const userConfigDir = getUserConfigDir(options?.userConfigDir);
+	const cwd = options?.cwd ?? process.cwd();
+	const manifest = await validateProgramDir((0, node_path.join)(userConfigDir, "programs", programId));
+	const existingOverrides = await readProgramMountOverrides(programId, { userConfigDir });
+	const existingByTarget = new Map(existingOverrides.map((o) => [o.target, o]));
+	const { ProviderRegistry } = await import("@aigne/afs");
+	const { resolveCredentialsForMount } = await Promise.resolve().then(() => require("./credential-helpers.cjs"));
+	const { createCLIAuthContext } = await Promise.resolve().then(() => require("../credential/cli-auth-context.cjs"));
+	const { createCredentialStore } = await Promise.resolve().then(() => require("../credential/store.cjs"));
+	const registry = new ProviderRegistry();
+	const authContext = createCLIAuthContext();
+	const credentialStore = createCredentialStore();
+	const configuredMounts = [];
+	const { getTemplateVariableNames } = await import("@aigne/afs/utils/uri-template");
+	for (const mountDecl of manifest.mounts) {
+		const existing = existingByTarget.get(mountDecl.target);
+		const startUri = existing?.uri || mountDecl.uri;
+		try {
+			const forceThis = options?.force === true || options?.force === "" || options?.force === mountDecl.target;
+			const result = await resolveCredentialsForMount({
+				cwd,
+				uri: startUri,
+				mountPath: mountDecl.target,
+				authContext,
+				credentialStore,
+				registry,
+				forceCollect: forceThis || void 0,
+				extraOptions: existing?.options
+			});
+			if (result) {
+				await result.persistCredentials();
+				const finalUri = result.resolvedUri || result.configUri || startUri;
+				const info = await registry.getProviderInfo(startUri);
+				const templateVars = new Set(info?.manifest?.uriTemplate ? getTemplateVariableNames(info.manifest.uriTemplate) : []);
+				const filteredOptions = {};
+				if (existing?.options) {
+					for (const [k, v] of Object.entries(existing.options)) if (!templateVars.has(k)) filteredOptions[k] = v;
+				}
+				if (result.collected) {
+					for (const [k, v] of Object.entries(result.nonSensitive)) if (!templateVars.has(k)) filteredOptions[k] = v;
+				}
+				const options$1 = Object.keys(filteredOptions).length > 0 ? filteredOptions : void 0;
+				configuredMounts.push({
+					target: mountDecl.target,
+					uri: finalUri,
+					options: options$1
+				});
+			} else configuredMounts.push({
+				target: mountDecl.target,
+				uri: startUri,
+				options: existing?.options
+			});
+		} catch (err) {
+			const msg = err instanceof Error ? err.message : String(err);
+			console.warn(`  Skipping ${mountDecl.target}: ${msg}`);
+			configuredMounts.push({
+				target: mountDecl.target,
+				uri: startUri,
+				options: existing?.options
+			});
+		}
+	}
+	const changedMounts = configuredMounts.filter((m) => {
+		const decl = manifest.mounts.find((d) => d.target === m.target);
+		return decl && (m.uri !== decl.uri || m.options && Object.keys(m.options).length > 0);
+	});
+	const dataDir = (0, node_path.join)(userConfigDir, "data", programId);
+	const mountsTomlPath = (0, node_path.join)(dataDir, "mounts.toml");
+	if (changedMounts.length > 0) {
+		await (0, node_fs_promises.mkdir)(dataDir, { recursive: true });
+		const { stringify } = await import("smol-toml");
+		await (0, node_fs_promises.writeFile)(mountsTomlPath, stringify({ mounts: changedMounts.map((m) => ({
+			path: m.target,
+			uri: m.uri,
+			...m.options && Object.keys(m.options).length > 0 ? { options: m.options } : {}
+		})) }), "utf-8");
+	} else try {
+		await (0, node_fs_promises.rm)(mountsTomlPath);
+	} catch {}
+	try {
+		const { notifyDaemonReload } = await Promise.resolve().then(() => require("../program/daemon-integration.cjs"));
+		const { getDaemonStatus } = await Promise.resolve().then(() => require("../daemon/manager.cjs"));
+		await notifyDaemonReload({ getDaemonStatus });
+	} catch {}
+	return {
+		success: true,
+		programId,
+		configuredMounts: changedMounts
+	};
+}
+/**
+* List configurable mounts and their current status for a program.
+*/
+async function listProgramMountStatus(programId, options) {
+	const userConfigDir = getUserConfigDir(options?.userConfigDir);
+	const manifest = await validateProgramDir((0, node_path.join)(userConfigDir, "programs", programId));
+	const overrides = await readProgramMountOverrides(programId, { userConfigDir });
+	const overrideByTarget = new Map(overrides.map((o) => [o.target, o]));
+	const { createCredentialStore } = await Promise.resolve().then(() => require("../credential/store.cjs"));
+	const credentialStore = createCredentialStore();
+	const mounts = [];
+	for (const mountDecl of manifest.mounts) {
+		const override = overrideByTarget.get(mountDecl.target);
+		const effectiveUri = override?.uri || mountDecl.uri;
+		let hasCredentials = false;
+		try {
+			const stored = await credentialStore.get(effectiveUri);
+			hasCredentials = !!stored && Object.keys(stored).length > 0;
+		} catch {}
+		mounts.push({
+			path: mountDecl.target,
+			uri: mountDecl.uri,
+			configuredUri: override?.uri !== mountDecl.uri ? override?.uri : void 0,
+			required: mountDecl.required,
+			hasCredentials,
+			hasOptions: !!(override?.options && Object.keys(override.options).length > 0)
+		});
+	}
+	return {
+		programId,
+		mounts
+	};
+}
+
+//#endregion
+exports.configureProgramMounts = configureProgramMounts;
+exports.getUserConfigDir = getUserConfigDir;
+exports.installProgram = installProgram;
+exports.listInstalledPrograms = listInstalledPrograms;
+exports.listProgramMountStatus = listProgramMountStatus;
+exports.readProgramMountOverrides = readProgramMountOverrides;
+exports.removeProgram = removeProgram;

package/dist/config/program-install.d.mts

@@ -0,0 +1 @@
+import "@aigne/afs";