@codelia/config 0.1.0

package/README.md

@@ -0,0 +1,58 @@
+# @codelia/config
+
+Config schema + registry (no I/O).
+
+This package does not read files or environment variables. It only provides:
+- Config types
+- A registry for defaults
+- Merge/resolve of loaded config layers
+
+File I/O lives in `@codelia/config-loader`.
+
+## Minimal config.json
+
+```json
+{
+  "version": 1,
+  "model": {
+    "provider": "openai",
+    "name": "gpt-5.2-codex",
+    "reasoning": "medium",
+    "verbosity": "medium"
+  },
+  "permissions": {
+    "allow": [
+      { "tool": "read" },
+      { "tool": "skill_load", "skill_name": "repo-review" }
+    ],
+    "deny": [{ "tool": "bash", "command": "rm" }]
+  }
+}
+```
+
+## How it is used (runtime/CLI)
+
+1) Modules register defaults into the shared registry.
+2) CLI/runtime loads the config file.
+3) CLI/runtime merges defaults + config and uses the effective values.
+
+```ts
+import { configRegistry } from "@codelia/config";
+import { loadConfig } from "@codelia/config-loader";
+
+// defaults are registered by modules (e.g. @codelia/core on import)
+const config = await loadConfig("/path/to/config.json");
+const effective = configRegistry.resolve([config]);
+```
+
+## Where config.json is loaded
+
+Current behavior:
+- Global config only.
+- Path is resolved in CLI/runtime.
+- `CODELIA_CONFIG_PATH` overrides the global config file location.
+
+Planned:
+- Project config at `.codelia/config.json` (repo-local override).
+
+See `docs/specs/storage-layout.md` for the default global path (home/XDG).

package/dist/index.cjs

@@ -0,0 +1,258 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  CONFIG_VERSION: () => CONFIG_VERSION,
+  ConfigRegistry: () => ConfigRegistry,
+  configRegistry: () => configRegistry,
+  parseConfig: () => parseConfig
+});
+module.exports = __toCommonJS(index_exports);
+var CONFIG_VERSION = 1;
+var MCP_SERVER_ID_PATTERN = /^[a-zA-Z0-9_-]{1,64}$/;
+var SKILL_NAME_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var pickString = (value) => typeof value === "string" ? value : void 0;
+var pickBoolean = (value) => typeof value === "boolean" ? value : void 0;
+var pickNumber = (value) => typeof value === "number" && Number.isFinite(value) ? value : void 0;
+var pickPositiveInt = (value) => {
+  const num = pickNumber(value);
+  if (num === void 0) return void 0;
+  if (!Number.isInteger(num) || num <= 0) return void 0;
+  return num;
+};
+var pickStringArray = (value) => {
+  if (!Array.isArray(value)) return void 0;
+  const values = value.filter(
+    (entry) => typeof entry === "string"
+  );
+  return values.length ? values : void 0;
+};
+var pickStringRecord = (value) => {
+  if (!isRecord(value)) return void 0;
+  const entries = Object.entries(value).filter(
+    ([, entry]) => typeof entry === "string"
+  );
+  if (!entries.length) return void 0;
+  return Object.fromEntries(entries);
+};
+var parsePermissionRule = (value) => {
+  if (!isRecord(value)) return null;
+  const tool = pickString(value.tool);
+  if (!tool) return null;
+  const command = pickString(value.command);
+  const commandGlob = pickString(value.command_glob);
+  const rawSkillName = pickString(value.skill_name)?.trim().toLowerCase();
+  const skillName = rawSkillName && SKILL_NAME_PATTERN.test(rawSkillName) ? rawSkillName : void 0;
+  return {
+    tool,
+    ...command ? { command } : {},
+    ...commandGlob ? { command_glob: commandGlob } : {},
+    ...skillName ? { skill_name: skillName } : {}
+  };
+};
+var parsePermissionRules = (value) => {
+  if (!Array.isArray(value)) return void 0;
+  const rules = value.map((entry) => parsePermissionRule(entry)).filter((entry) => !!entry);
+  return rules.length ? rules : void 0;
+};
+var parseMcpServerConfig = (value) => {
+  if (!isRecord(value)) return null;
+  const transport = value.transport === "http" || value.transport === "stdio" ? value.transport : void 0;
+  if (!transport) return null;
+  const enabled = pickBoolean(value.enabled);
+  const requestTimeoutMs = pickNumber(value.request_timeout_ms);
+  const oauth = isRecord(value.oauth) ? {
+    ...pickString(value.oauth.authorization_url) ? { authorization_url: pickString(value.oauth.authorization_url) } : {},
+    ...pickString(value.oauth.token_url) ? { token_url: pickString(value.oauth.token_url) } : {},
+    ...pickString(value.oauth.registration_url) ? { registration_url: pickString(value.oauth.registration_url) } : {},
+    ...pickString(value.oauth.client_id) ? { client_id: pickString(value.oauth.client_id) } : {},
+    ...pickString(value.oauth.client_secret) ? { client_secret: pickString(value.oauth.client_secret) } : {},
+    ...pickString(value.oauth.scope) ? { scope: pickString(value.oauth.scope) } : {}
+  } : void 0;
+  if (transport === "http") {
+    const url = pickString(value.url);
+    if (!url) return null;
+    return {
+      transport: "http",
+      ...enabled !== void 0 ? { enabled } : {},
+      url,
+      ...pickStringRecord(value.headers) ? { headers: pickStringRecord(value.headers) } : {},
+      ...pickStringRecord(value.env) ? { env: pickStringRecord(value.env) } : {},
+      ...requestTimeoutMs !== void 0 ? { request_timeout_ms: requestTimeoutMs } : {},
+      ...oauth && Object.keys(oauth).length ? { oauth } : {}
+    };
+  }
+  const command = pickString(value.command);
+  if (!command) return null;
+  return {
+    transport: "stdio",
+    ...enabled !== void 0 ? { enabled } : {},
+    command,
+    ...pickStringArray(value.args) ? { args: pickStringArray(value.args) } : {},
+    ...pickString(value.cwd) ? { cwd: pickString(value.cwd) } : {},
+    ...pickStringRecord(value.env) ? { env: pickStringRecord(value.env) } : {},
+    ...requestTimeoutMs !== void 0 ? { request_timeout_ms: requestTimeoutMs } : {},
+    ...oauth && Object.keys(oauth).length ? { oauth } : {}
+  };
+};
+var parseMcpConfig = (value) => {
+  if (!isRecord(value) || !isRecord(value.servers)) return void 0;
+  const servers = {};
+  for (const [serverId, serverValue] of Object.entries(value.servers)) {
+    if (!MCP_SERVER_ID_PATTERN.test(serverId)) {
+      continue;
+    }
+    const parsed = parseMcpServerConfig(serverValue);
+    if (parsed) {
+      servers[serverId] = parsed;
+    }
+  }
+  if (!Object.keys(servers).length) return void 0;
+  return { servers };
+};
+var parseSkillsConfig = (value) => {
+  if (!isRecord(value)) return void 0;
+  const enabled = pickBoolean(value.enabled);
+  const initial = isRecord(value.initial) ? {
+    ...pickPositiveInt(value.initial.maxEntries) !== void 0 ? { maxEntries: pickPositiveInt(value.initial.maxEntries) } : {},
+    ...pickPositiveInt(value.initial.maxBytes) !== void 0 ? { maxBytes: pickPositiveInt(value.initial.maxBytes) } : {}
+  } : void 0;
+  const search = isRecord(value.search) ? {
+    ...pickPositiveInt(value.search.defaultLimit) !== void 0 ? { defaultLimit: pickPositiveInt(value.search.defaultLimit) } : {},
+    ...pickPositiveInt(value.search.maxLimit) !== void 0 ? { maxLimit: pickPositiveInt(value.search.maxLimit) } : {}
+  } : void 0;
+  const result = {};
+  if (enabled !== void 0) {
+    result.enabled = enabled;
+  }
+  if (initial && Object.keys(initial).length > 0) {
+    result.initial = initial;
+  }
+  if (search && Object.keys(search).length > 0) {
+    result.search = search;
+  }
+  return Object.keys(result).length > 0 ? result : void 0;
+};
+var parseConfig = (value, sourceLabel) => {
+  if (!isRecord(value)) {
+    throw new Error(`${sourceLabel}: config must be an object`);
+  }
+  const version = value.version;
+  if (version !== CONFIG_VERSION) {
+    throw new Error(`${sourceLabel}: unsupported version ${String(version)}`);
+  }
+  const modelValue = value.model;
+  const model = isRecord(modelValue) ? {
+    provider: pickString(modelValue.provider),
+    name: pickString(modelValue.name),
+    reasoning: pickString(modelValue.reasoning),
+    verbosity: pickString(modelValue.verbosity)
+  } : void 0;
+  const permissionsValue = value.permissions;
+  const permissions = isRecord(permissionsValue) ? {
+    allow: parsePermissionRules(permissionsValue.allow),
+    deny: parsePermissionRules(permissionsValue.deny)
+  } : void 0;
+  const hasPermissions = permissions && (permissions.allow || permissions.deny) ? permissions : void 0;
+  const mcp = parseMcpConfig(value.mcp);
+  const skills = parseSkillsConfig(value.skills);
+  const result = { version, model };
+  if (hasPermissions) {
+    result.permissions = hasPermissions;
+  }
+  if (mcp) {
+    result.mcp = mcp;
+  }
+  if (skills) {
+    result.skills = skills;
+  }
+  return result;
+};
+var ConfigRegistry = class {
+  defaults = [];
+  registerDefaults(layer) {
+    this.defaults.push(layer);
+  }
+  resolve(layers) {
+    const merged = { version: CONFIG_VERSION };
+    for (const layer of [...this.defaults, ...layers]) {
+      if (layer?.model) {
+        merged.model = { ...merged.model, ...layer.model };
+      }
+      if (layer?.permissions) {
+        const nextAllow = layer.permissions.allow ?? [];
+        const nextDeny = layer.permissions.deny ?? [];
+        if (nextAllow.length > 0 || nextDeny.length > 0) {
+          merged.permissions ??= {};
+          if (nextAllow.length > 0) {
+            merged.permissions.allow = [
+              ...merged.permissions.allow ?? [],
+              ...nextAllow
+            ];
+          }
+          if (nextDeny.length > 0) {
+            merged.permissions.deny = [
+              ...merged.permissions.deny ?? [],
+              ...nextDeny
+            ];
+          }
+        }
+      }
+      if (layer?.mcp?.servers) {
+        merged.mcp = {
+          servers: {
+            ...merged.mcp?.servers ?? {},
+            ...layer.mcp.servers
+          }
+        };
+      }
+      if (layer?.skills) {
+        const nextSkills = layer.skills;
+        merged.skills ??= {};
+        if (nextSkills.enabled !== void 0) {
+          merged.skills.enabled = nextSkills.enabled;
+        }
+        if (nextSkills.initial) {
+          merged.skills.initial = {
+            ...merged.skills.initial ?? {},
+            ...nextSkills.initial
+          };
+        }
+        if (nextSkills.search) {
+          merged.skills.search = {
+            ...merged.skills.search ?? {},
+            ...nextSkills.search
+          };
+        }
+      }
+    }
+    return merged;
+  }
+};
+var configRegistry = new ConfigRegistry();
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  CONFIG_VERSION,
+  ConfigRegistry,
+  configRegistry,
+  parseConfig
+});

package/dist/index.d.cts

@@ -0,0 +1,72 @@
+type ModelConfig = {
+    provider?: string;
+    name?: string;
+    reasoning?: string;
+    verbosity?: string;
+};
+type PermissionRule = {
+    tool: string;
+    command?: string;
+    command_glob?: string;
+    skill_name?: string;
+};
+type PermissionsConfig = {
+    allow?: PermissionRule[];
+    deny?: PermissionRule[];
+};
+type McpServerConfig = {
+    transport: "stdio" | "http";
+    enabled?: boolean;
+    command?: string;
+    args?: string[];
+    cwd?: string;
+    env?: Record<string, string>;
+    url?: string;
+    headers?: Record<string, string>;
+    request_timeout_ms?: number;
+    oauth?: {
+        authorization_url?: string;
+        token_url?: string;
+        registration_url?: string;
+        client_id?: string;
+        client_secret?: string;
+        scope?: string;
+    };
+};
+type McpConfig = {
+    servers: Record<string, McpServerConfig>;
+};
+type SkillsConfig = {
+    enabled?: boolean;
+    initial?: {
+        maxEntries?: number;
+        maxBytes?: number;
+    };
+    search?: {
+        defaultLimit?: number;
+        maxLimit?: number;
+    };
+};
+type CodeliaConfig = {
+    version: number;
+    model?: ModelConfig;
+    permissions?: PermissionsConfig;
+    mcp?: McpConfig;
+    skills?: SkillsConfig;
+};
+declare const CONFIG_VERSION = 1;
+declare const parseConfig: (value: unknown, sourceLabel: string) => CodeliaConfig;
+type ConfigLayer = {
+    model?: ModelConfig;
+    permissions?: PermissionsConfig;
+    mcp?: McpConfig;
+    skills?: SkillsConfig;
+};
+declare class ConfigRegistry {
+    private readonly defaults;
+    registerDefaults(layer: ConfigLayer): void;
+    resolve(layers: Array<ConfigLayer | null | undefined>): CodeliaConfig;
+}
+declare const configRegistry: ConfigRegistry;
+
+export { CONFIG_VERSION, type CodeliaConfig, ConfigRegistry, type McpConfig, type McpServerConfig, type ModelConfig, type PermissionRule, type PermissionsConfig, type SkillsConfig, configRegistry, parseConfig };

package/dist/index.d.ts

@@ -0,0 +1,72 @@
+type ModelConfig = {
+    provider?: string;
+    name?: string;
+    reasoning?: string;
+    verbosity?: string;
+};
+type PermissionRule = {
+    tool: string;
+    command?: string;
+    command_glob?: string;
+    skill_name?: string;
+};
+type PermissionsConfig = {
+    allow?: PermissionRule[];
+    deny?: PermissionRule[];
+};
+type McpServerConfig = {
+    transport: "stdio" | "http";
+    enabled?: boolean;
+    command?: string;
+    args?: string[];
+    cwd?: string;
+    env?: Record<string, string>;
+    url?: string;
+    headers?: Record<string, string>;
+    request_timeout_ms?: number;
+    oauth?: {
+        authorization_url?: string;
+        token_url?: string;
+        registration_url?: string;
+        client_id?: string;
+        client_secret?: string;
+        scope?: string;
+    };
+};
+type McpConfig = {
+    servers: Record<string, McpServerConfig>;
+};
+type SkillsConfig = {
+    enabled?: boolean;
+    initial?: {
+        maxEntries?: number;
+        maxBytes?: number;
+    };
+    search?: {
+        defaultLimit?: number;
+        maxLimit?: number;
+    };
+};
+type CodeliaConfig = {
+    version: number;
+    model?: ModelConfig;
+    permissions?: PermissionsConfig;
+    mcp?: McpConfig;
+    skills?: SkillsConfig;
+};
+declare const CONFIG_VERSION = 1;
+declare const parseConfig: (value: unknown, sourceLabel: string) => CodeliaConfig;
+type ConfigLayer = {
+    model?: ModelConfig;
+    permissions?: PermissionsConfig;
+    mcp?: McpConfig;
+    skills?: SkillsConfig;
+};
+declare class ConfigRegistry {
+    private readonly defaults;
+    registerDefaults(layer: ConfigLayer): void;
+    resolve(layers: Array<ConfigLayer | null | undefined>): CodeliaConfig;
+}
+declare const configRegistry: ConfigRegistry;
+
+export { CONFIG_VERSION, type CodeliaConfig, ConfigRegistry, type McpConfig, type McpServerConfig, type ModelConfig, type PermissionRule, type PermissionsConfig, type SkillsConfig, configRegistry, parseConfig };

package/dist/index.js

@@ -0,0 +1,230 @@
+// src/index.ts
+var CONFIG_VERSION = 1;
+var MCP_SERVER_ID_PATTERN = /^[a-zA-Z0-9_-]{1,64}$/;
+var SKILL_NAME_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+var isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var pickString = (value) => typeof value === "string" ? value : void 0;
+var pickBoolean = (value) => typeof value === "boolean" ? value : void 0;
+var pickNumber = (value) => typeof value === "number" && Number.isFinite(value) ? value : void 0;
+var pickPositiveInt = (value) => {
+  const num = pickNumber(value);
+  if (num === void 0) return void 0;
+  if (!Number.isInteger(num) || num <= 0) return void 0;
+  return num;
+};
+var pickStringArray = (value) => {
+  if (!Array.isArray(value)) return void 0;
+  const values = value.filter(
+    (entry) => typeof entry === "string"
+  );
+  return values.length ? values : void 0;
+};
+var pickStringRecord = (value) => {
+  if (!isRecord(value)) return void 0;
+  const entries = Object.entries(value).filter(
+    ([, entry]) => typeof entry === "string"
+  );
+  if (!entries.length) return void 0;
+  return Object.fromEntries(entries);
+};
+var parsePermissionRule = (value) => {
+  if (!isRecord(value)) return null;
+  const tool = pickString(value.tool);
+  if (!tool) return null;
+  const command = pickString(value.command);
+  const commandGlob = pickString(value.command_glob);
+  const rawSkillName = pickString(value.skill_name)?.trim().toLowerCase();
+  const skillName = rawSkillName && SKILL_NAME_PATTERN.test(rawSkillName) ? rawSkillName : void 0;
+  return {
+    tool,
+    ...command ? { command } : {},
+    ...commandGlob ? { command_glob: commandGlob } : {},
+    ...skillName ? { skill_name: skillName } : {}
+  };
+};
+var parsePermissionRules = (value) => {
+  if (!Array.isArray(value)) return void 0;
+  const rules = value.map((entry) => parsePermissionRule(entry)).filter((entry) => !!entry);
+  return rules.length ? rules : void 0;
+};
+var parseMcpServerConfig = (value) => {
+  if (!isRecord(value)) return null;
+  const transport = value.transport === "http" || value.transport === "stdio" ? value.transport : void 0;
+  if (!transport) return null;
+  const enabled = pickBoolean(value.enabled);
+  const requestTimeoutMs = pickNumber(value.request_timeout_ms);
+  const oauth = isRecord(value.oauth) ? {
+    ...pickString(value.oauth.authorization_url) ? { authorization_url: pickString(value.oauth.authorization_url) } : {},
+    ...pickString(value.oauth.token_url) ? { token_url: pickString(value.oauth.token_url) } : {},
+    ...pickString(value.oauth.registration_url) ? { registration_url: pickString(value.oauth.registration_url) } : {},
+    ...pickString(value.oauth.client_id) ? { client_id: pickString(value.oauth.client_id) } : {},
+    ...pickString(value.oauth.client_secret) ? { client_secret: pickString(value.oauth.client_secret) } : {},
+    ...pickString(value.oauth.scope) ? { scope: pickString(value.oauth.scope) } : {}
+  } : void 0;
+  if (transport === "http") {
+    const url = pickString(value.url);
+    if (!url) return null;
+    return {
+      transport: "http",
+      ...enabled !== void 0 ? { enabled } : {},
+      url,
+      ...pickStringRecord(value.headers) ? { headers: pickStringRecord(value.headers) } : {},
+      ...pickStringRecord(value.env) ? { env: pickStringRecord(value.env) } : {},
+      ...requestTimeoutMs !== void 0 ? { request_timeout_ms: requestTimeoutMs } : {},
+      ...oauth && Object.keys(oauth).length ? { oauth } : {}
+    };
+  }
+  const command = pickString(value.command);
+  if (!command) return null;
+  return {
+    transport: "stdio",
+    ...enabled !== void 0 ? { enabled } : {},
+    command,
+    ...pickStringArray(value.args) ? { args: pickStringArray(value.args) } : {},
+    ...pickString(value.cwd) ? { cwd: pickString(value.cwd) } : {},
+    ...pickStringRecord(value.env) ? { env: pickStringRecord(value.env) } : {},
+    ...requestTimeoutMs !== void 0 ? { request_timeout_ms: requestTimeoutMs } : {},
+    ...oauth && Object.keys(oauth).length ? { oauth } : {}
+  };
+};
+var parseMcpConfig = (value) => {
+  if (!isRecord(value) || !isRecord(value.servers)) return void 0;
+  const servers = {};
+  for (const [serverId, serverValue] of Object.entries(value.servers)) {
+    if (!MCP_SERVER_ID_PATTERN.test(serverId)) {
+      continue;
+    }
+    const parsed = parseMcpServerConfig(serverValue);
+    if (parsed) {
+      servers[serverId] = parsed;
+    }
+  }
+  if (!Object.keys(servers).length) return void 0;
+  return { servers };
+};
+var parseSkillsConfig = (value) => {
+  if (!isRecord(value)) return void 0;
+  const enabled = pickBoolean(value.enabled);
+  const initial = isRecord(value.initial) ? {
+    ...pickPositiveInt(value.initial.maxEntries) !== void 0 ? { maxEntries: pickPositiveInt(value.initial.maxEntries) } : {},
+    ...pickPositiveInt(value.initial.maxBytes) !== void 0 ? { maxBytes: pickPositiveInt(value.initial.maxBytes) } : {}
+  } : void 0;
+  const search = isRecord(value.search) ? {
+    ...pickPositiveInt(value.search.defaultLimit) !== void 0 ? { defaultLimit: pickPositiveInt(value.search.defaultLimit) } : {},
+    ...pickPositiveInt(value.search.maxLimit) !== void 0 ? { maxLimit: pickPositiveInt(value.search.maxLimit) } : {}
+  } : void 0;
+  const result = {};
+  if (enabled !== void 0) {
+    result.enabled = enabled;
+  }
+  if (initial && Object.keys(initial).length > 0) {
+    result.initial = initial;
+  }
+  if (search && Object.keys(search).length > 0) {
+    result.search = search;
+  }
+  return Object.keys(result).length > 0 ? result : void 0;
+};
+var parseConfig = (value, sourceLabel) => {
+  if (!isRecord(value)) {
+    throw new Error(`${sourceLabel}: config must be an object`);
+  }
+  const version = value.version;
+  if (version !== CONFIG_VERSION) {
+    throw new Error(`${sourceLabel}: unsupported version ${String(version)}`);
+  }
+  const modelValue = value.model;
+  const model = isRecord(modelValue) ? {
+    provider: pickString(modelValue.provider),
+    name: pickString(modelValue.name),
+    reasoning: pickString(modelValue.reasoning),
+    verbosity: pickString(modelValue.verbosity)
+  } : void 0;
+  const permissionsValue = value.permissions;
+  const permissions = isRecord(permissionsValue) ? {
+    allow: parsePermissionRules(permissionsValue.allow),
+    deny: parsePermissionRules(permissionsValue.deny)
+  } : void 0;
+  const hasPermissions = permissions && (permissions.allow || permissions.deny) ? permissions : void 0;
+  const mcp = parseMcpConfig(value.mcp);
+  const skills = parseSkillsConfig(value.skills);
+  const result = { version, model };
+  if (hasPermissions) {
+    result.permissions = hasPermissions;
+  }
+  if (mcp) {
+    result.mcp = mcp;
+  }
+  if (skills) {
+    result.skills = skills;
+  }
+  return result;
+};
+var ConfigRegistry = class {
+  defaults = [];
+  registerDefaults(layer) {
+    this.defaults.push(layer);
+  }
+  resolve(layers) {
+    const merged = { version: CONFIG_VERSION };
+    for (const layer of [...this.defaults, ...layers]) {
+      if (layer?.model) {
+        merged.model = { ...merged.model, ...layer.model };
+      }
+      if (layer?.permissions) {
+        const nextAllow = layer.permissions.allow ?? [];
+        const nextDeny = layer.permissions.deny ?? [];
+        if (nextAllow.length > 0 || nextDeny.length > 0) {
+          merged.permissions ??= {};
+          if (nextAllow.length > 0) {
+            merged.permissions.allow = [
+              ...merged.permissions.allow ?? [],
+              ...nextAllow
+            ];
+          }
+          if (nextDeny.length > 0) {
+            merged.permissions.deny = [
+              ...merged.permissions.deny ?? [],
+              ...nextDeny
+            ];
+          }
+        }
+      }
+      if (layer?.mcp?.servers) {
+        merged.mcp = {
+          servers: {
+            ...merged.mcp?.servers ?? {},
+            ...layer.mcp.servers
+          }
+        };
+      }
+      if (layer?.skills) {
+        const nextSkills = layer.skills;
+        merged.skills ??= {};
+        if (nextSkills.enabled !== void 0) {
+          merged.skills.enabled = nextSkills.enabled;
+        }
+        if (nextSkills.initial) {
+          merged.skills.initial = {
+            ...merged.skills.initial ?? {},
+            ...nextSkills.initial
+          };
+        }
+        if (nextSkills.search) {
+          merged.skills.search = {
+            ...merged.skills.search ?? {},
+            ...nextSkills.search
+          };
+        }
+      }
+    }
+    return merged;
+  }
+};
+var configRegistry = new ConfigRegistry();
+export {
+  CONFIG_VERSION,
+  ConfigRegistry,
+  configRegistry,
+  parseConfig
+};

package/package.json

@@ -0,0 +1,26 @@
+{
+	"name": "@codelia/config",
+	"version": "0.1.0",
+	"type": "module",
+	"files": [
+		"dist"
+	],
+	"main": "./dist/index.cjs",
+	"module": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js",
+			"require": "./dist/index.cjs"
+		}
+	},
+	"scripts": {
+		"build": "tsup src/index.ts --format esm,cjs --dts --clean",
+		"typecheck": "tsc --noEmit"
+	},
+	"dependencies": {},
+	"publishConfig": {
+		"access": "public"
+	}
+}