@corenel/config 0.1.0

package/LICENSE

@@ -0,0 +1,93 @@
+Elastic License 2.0
+
+URL: https://www.elastic.co/licensing/elastic-license
+
+## Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+## Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject to
+the limitations and conditions below.
+
+## Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set of
+the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key functionality
+in the software, and you may not remove or obscure any functionality in the
+software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other notices
+of the licensor in the software. Any use of the licensor's trademarks is subject
+to applicable law.
+
+## Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software. If you or your company make any written claim that the software
+infringes or contributes to infringement of any patent, your patent license for
+the software granted under these terms ends immediately. If your company makes
+such a claim, your patent license ends immediately for work on behalf of your
+company.
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from you
+also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+## No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+## Termination
+
+If you use the software in violation of these terms, such use is not licensed,
+and your licenses will automatically terminate. If the licensor provides you
+with a notice of your violation, and you cease all violation of this license no
+later than 30 days after you receive that notice, your licenses will be
+reinstated retroactively. However, if you violate these terms after such
+reinstatement, any additional violation of these terms will cause your licenses
+to terminate automatically and permanently.
+
+## No Liability
+
+*As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising out
+of these terms or the use or nature of the software, under any kind of legal
+claim.*
+
+## Definitions
+
+The **licensor** is the entity offering these terms, and the **software** is the
+software the licensor makes available under these terms, including any portion of
+it.
+
+**you** refers to the individual or entity agreeing to these terms.
+
+**your company** is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control over, are
+under the control of, or are under common control with that organization.
+**control** means ownership of substantially all the assets of an entity, or the
+power to direct its management and policies by vote, contract, or otherwise.
+Control can be direct or indirect.
+
+**your licenses** are all the licenses granted to you for the software under these
+terms.
+
+**use** means anything you do with the software requiring one of your licenses.
+
+**trademark** means trademarks, service marks, and similar rights.

package/dist/credential.d.ts

@@ -0,0 +1,57 @@
+import { type StoredCredential, type CredentialSource, type ResolvedCredential } from '@corenel/tools-node';
+/** The environment variable that carries a headless credential (surface C). */
+export declare const TOKEN_ENV = "CORENEL_TOKEN";
+export type { StoredCredential, CredentialSource, ResolvedCredential };
+/** The state dir. Delegates rather than recomputing `homedir()/.corenel`: the
+ *  token file and auth.json are siblings inside it, so a `--state-dir` must
+ *  move both or neither, and two copies of that arithmetic is precisely how the
+ *  two stores drifted apart in the first place. */
+export declare function authDir(stateDir?: string): string;
+export declare function credentialPath(stateDir?: string): string;
+/**
+ * Persist the credential 0600, AND mirror the access token into the sibling
+ * token file.
+ *
+ * PRESERVES unknown top-level keys already in the file (exactly the posture
+ * `writeDaemonConfig` already takes for daemon.json), rather than replacing
+ * the file wholesale. Without this, every sign-in and every token refresh
+ * silently wiped any sibling section written into auth.json by something
+ * else -- e.g. mcp/config.ts's `mcp` credential map -- with no error and
+ * nothing to notice it happened. No key is special-cased: whatever is
+ * foreign to StoredCredential today, or added as a sibling tomorrow, survives
+ * the same way.
+ *
+ * The mirror is not redundancy for its own sake: the gateway client and
+ * @corenel/cli read `<dir>/token`, so a sign-in that only wrote auth.json would
+ * leave the daemon reporting an account it could not actually authenticate as —
+ * the exact divergence this module was rewritten to close. Writing both here,
+ * at the one choke point every sign-in passes through, means the two readers
+ * agree the moment login returns.
+ *
+ * Best-effort chmod, as elsewhere in this package (Windows has no POSIX mode).
+ */
+export declare function saveCredential(cred: StoredCredential, stateDir?: string): Promise<void>;
+/** Read the stored credential, or null when there is none. A malformed file is
+ * treated as absent rather than fatal — a corrupt credential should send the
+ * user through sign-in, not wedge the daemon. */
+export declare function loadCredential(stateDir?: string): Promise<StoredCredential | null>;
+/** Sign out of BOTH stores. Clearing only auth.json would leave the gateway
+ *  still authenticating from the token file while the operator believes they
+ *  signed out — worse than the bug pointing the other way, because it is
+ *  silent. */
+export declare function clearCredential(stateDir?: string): Promise<void>;
+/**
+ * Resolve the credential to use — a thin adapter over the shared resolver so
+ * this daemon and the gateway client can never answer differently.
+ *
+ * The environment wins deliberately: it is how a container, a CI job or an SSH
+ * session supplies identity, and those are exactly the places where a stored
+ * file may be a stale artifact of some earlier image build. An explicit env var
+ * is a present-tense statement of intent; a file is not.
+ *
+ * An expired stored token is reported, not silently used — the caller decides
+ * whether to refresh or re-prompt, and a caller that ignores `expired` fails at
+ * the gateway rather than here.
+ */
+export declare function resolveCredential(env?: NodeJS.ProcessEnv, stateDir?: string, now?: () => number): Promise<ResolvedCredential>;
+//# sourceMappingURL=credential.d.ts.map

package/dist/credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../src/credential.ts"],"names":[],"mappings":"AAgCA,OAAO,EAGL,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,KAAK,kBAAkB,EACtE,MAAM,qBAAqB,CAAC;AAE7B,+EAA+E;AAC/E,eAAO,MAAM,SAAS,kBAAiB,CAAC;AAExC,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAC;AAEvE;;;mDAGmD;AACnD,wBAAgB,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAExD;AAqCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAY7F;AAED;;iDAEiD;AACjD,wBAAsB,cAAc,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAExF;AAED;;;cAGc;AACd,wBAAsB,eAAe,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,QAAQ,CAAC,EAAE,MAAM,EACjB,GAAG,GAAE,MAAM,MAAiB,GAC3B,OAAO,CAAC,kBAAkB,CAAC,CAE7B"}

package/dist/credential.js

@@ -0,0 +1,147 @@
+/* Where the user's sign-in credential lives, and how it is resolved.
+ *
+ * THREE AUTH SURFACES, per spec s8.3.1. Keeping them apart is the whole point of
+ * this module living separately from token.ts:
+ *
+ *   A  user identity   who is this person?              <- THIS FILE
+ *   B  pairing         may this process talk to this
+ *                      sidecar's port?                  <- token.ts (daemon.token)
+ *   C  headless        identity where no browser exists  <- CORENEL_TOKEN, below
+ *
+ * Surface B is explicitly NOT authority: the pairing token authenticates a
+ * connection, it does not say who the user is. Merging the two would turn "can
+ * reach the port" into "is the account owner", which is a privilege escalation,
+ * not a simplification.
+ *
+ * Storage is a 0600 file under the state dir, matching how the pairing token,
+ * the sidecar id and the self-signed key are already stored. An OS keychain is
+ * the better home and the port below is shaped for one, but every cross-platform
+ * keychain route costs either a native dependency or shelling out to three
+ * different binaries — deferred deliberately rather than by omission.
+ *
+ * WHAT CHANGED, and why this file is now thin: surface A is written in TWO
+ * places on a real machine — this `auth.json`, and the `<dir>/token` file that
+ * `corenel login` writes and the gateway client reads. Resolving them
+ * independently is what let `corenel-sidecar auth` print "Not signed in" on a
+ * machine that was running models fine. So resolution, precedence and sign-out
+ * all live in @corenel/tools-node's auth module now (which the gateway client
+ * already depends on), and this file keeps only the auth.json format plus the
+ * mirroring that keeps the two stores from diverging in the first place. The
+ * precedence is documented there, once.
+ */
+import { promises as fs } from 'node:fs';
+import { credentialDir, credentialFilePath, readCredentialFile, clearAllCredentials, resolveNodeCredential, writeAuthToken, TOKEN_ENV as NODE_TOKEN_ENV, } from '@corenel/tools-node';
+/** The environment variable that carries a headless credential (surface C). */
+export const TOKEN_ENV = NODE_TOKEN_ENV;
+/** The state dir. Delegates rather than recomputing `homedir()/.corenel`: the
+ *  token file and auth.json are siblings inside it, so a `--state-dir` must
+ *  move both or neither, and two copies of that arithmetic is precisely how the
+ *  two stores drifted apart in the first place. */
+export function authDir(stateDir) {
+    return credentialDir(stateDir);
+}
+export function credentialPath(stateDir) {
+    return credentialFilePath(stateDir);
+}
+/** Every top-level field `StoredCredential` itself owns. Stripped from
+ *  whatever is already on disk before the new credential is laid on top, so a
+ *  field this sign-in no longer sets (e.g. a dropped `refreshToken`) does not
+ *  survive as a stale leftover of the PREVIOUS credential. */
+const STORED_CREDENTIAL_KEYS = ['accessToken', 'refreshToken', 'expiresAt', 'account', 'apiBase'];
+/**
+ * The file's existing top-level keys that are NOT StoredCredential's own --
+ * i.e. everything a sibling writer (packages/sidecar/src/mcp/config.ts's `mcp`
+ * section, and whatever the next one is) has put there.
+ *
+ * Absent or unreadable is treated as "nothing to preserve", not an error --
+ * the same posture `loadCredential` already takes on a malformed file. A
+ * sign-in must never be the thing that fails because an unrelated section of
+ * this file got corrupted.
+ */
+async function readForeignAuthJson(path) {
+    let raw;
+    try {
+        raw = await fs.readFile(path, 'utf8');
+    }
+    catch {
+        return {};
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+            return {};
+        const obj = { ...parsed };
+        for (const k of STORED_CREDENTIAL_KEYS)
+            delete obj[k];
+        return obj;
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Persist the credential 0600, AND mirror the access token into the sibling
+ * token file.
+ *
+ * PRESERVES unknown top-level keys already in the file (exactly the posture
+ * `writeDaemonConfig` already takes for daemon.json), rather than replacing
+ * the file wholesale. Without this, every sign-in and every token refresh
+ * silently wiped any sibling section written into auth.json by something
+ * else -- e.g. mcp/config.ts's `mcp` credential map -- with no error and
+ * nothing to notice it happened. No key is special-cased: whatever is
+ * foreign to StoredCredential today, or added as a sibling tomorrow, survives
+ * the same way.
+ *
+ * The mirror is not redundancy for its own sake: the gateway client and
+ * @corenel/cli read `<dir>/token`, so a sign-in that only wrote auth.json would
+ * leave the daemon reporting an account it could not actually authenticate as —
+ * the exact divergence this module was rewritten to close. Writing both here,
+ * at the one choke point every sign-in passes through, means the two readers
+ * agree the moment login returns.
+ *
+ * Best-effort chmod, as elsewhere in this package (Windows has no POSIX mode).
+ */
+export async function saveCredential(cred, stateDir) {
+    const path = credentialPath(stateDir);
+    await fs.mkdir(authDir(stateDir), { recursive: true });
+    const foreign = await readForeignAuthJson(path);
+    const next = { ...foreign, ...cred };
+    await fs.writeFile(path, JSON.stringify(next, null, 2) + '\n', { mode: 0o600 });
+    try {
+        await fs.chmod(path, 0o600);
+    }
+    catch {
+        /* best effort on platforms without POSIX modes */
+    }
+    await writeAuthToken(cred.accessToken, stateDir);
+}
+/** Read the stored credential, or null when there is none. A malformed file is
+ * treated as absent rather than fatal — a corrupt credential should send the
+ * user through sign-in, not wedge the daemon. */
+export async function loadCredential(stateDir) {
+    return await readCredentialFile(stateDir);
+}
+/** Sign out of BOTH stores. Clearing only auth.json would leave the gateway
+ *  still authenticating from the token file while the operator believes they
+ *  signed out — worse than the bug pointing the other way, because it is
+ *  silent. */
+export async function clearCredential(stateDir) {
+    await clearAllCredentials(stateDir);
+}
+/**
+ * Resolve the credential to use — a thin adapter over the shared resolver so
+ * this daemon and the gateway client can never answer differently.
+ *
+ * The environment wins deliberately: it is how a container, a CI job or an SSH
+ * session supplies identity, and those are exactly the places where a stored
+ * file may be a stale artifact of some earlier image build. An explicit env var
+ * is a present-tense statement of intent; a file is not.
+ *
+ * An expired stored token is reported, not silently used — the caller decides
+ * whether to refresh or re-prompt, and a caller that ignores `expired` fails at
+ * the gateway rather than here.
+ */
+export async function resolveCredential(env = process.env, stateDir, now = Date.now) {
+    return await resolveNodeCredential({ env, now, ...(stateDir ? { stateDir } : {}) });
+}
+//# sourceMappingURL=credential.js.map

package/dist/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../src/credential.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EACL,aAAa,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,qBAAqB,EACjG,cAAc,EAAE,SAAS,IAAI,cAAc,GAE5C,MAAM,qBAAqB,CAAC;AAE7B,+EAA+E;AAC/E,MAAM,CAAC,MAAM,SAAS,GAAG,cAAc,CAAC;AAIxC;;;mDAGmD;AACnD,MAAM,UAAU,OAAO,CAAC,QAAiB;IACvC,OAAO,aAAa,CAAC,QAAQ,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAiB;IAC9C,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;8DAG8D;AAC9D,MAAM,sBAAsB,GAC1B,CAAC,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAErE;;;;;;;;;GASG;AACH,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9E,MAAM,GAAG,GAAG,EAAE,GAAI,MAAkC,EAAE,CAAC;QACvD,KAAK,MAAM,CAAC,IAAI,sBAAsB;YAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAsB,EAAE,QAAiB;IAC5E,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;IACrC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,kDAAkD;IACpD,CAAC;IACD,MAAM,cAAc,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;iDAEiD;AACjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAiB;IACpD,OAAO,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED;;;cAGc;AACd,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAiB;IACrD,MAAM,mBAAmB,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAyB,OAAO,CAAC,GAAG,EACpC,QAAiB,EACjB,MAAoB,IAAI,CAAC,GAAG;IAE5B,OAAO,MAAM,qBAAqB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC"}

package/dist/daemonConfig.d.ts

@@ -0,0 +1,56 @@
+export declare const DAEMON_CONFIG_VERSION = 1;
+export interface DaemonConfig {
+    version: number;
+    port?: number;
+    host?: string;
+    roots?: string[];
+    addUnder?: string[];
+    cloneUnder?: string[];
+    allowLan?: boolean;
+    allowOrigins?: string[];
+    tlsCert?: string;
+    tlsKey?: string;
+    selfSigned?: boolean;
+    tunnel?: string;
+    tunnelName?: string;
+    tunnelHostname?: string;
+    endpoint?: string;
+    allowShell?: boolean;
+    keepTranscripts?: boolean;
+    isolation?: string;
+    msbBin?: string;
+    guestImage?: string;
+    maxChainDepth?: number;
+    name?: string;
+    appUrl?: string;
+    defaultModel?: string;
+    /** {name,url} pairs only -- never a credential. See packages/sidecar/src/mcp/. */
+    mcpServers?: {
+        name: string;
+        url: string;
+    }[];
+    /** `mcp:<server>/<tool>` addresses the daemon's OWN agent loop may call --
+     * see `daemonTools.ts`'s module comment. Absent or empty grants NOTHING:
+     * `registerMcpTools` builds its policy by putting this list into
+     * `tools.allow` on top of `BUILTIN_POLICIES.standard`, which is
+     * deny-by-default, so a machine that never sets this is exactly as locked
+     * down as one that predates the key. A plain `string[]`, not its own
+     * command, so `corenel config add|remove|list mcpAllow` work for free. */
+    mcpAllow?: string[];
+}
+/** Keys this file must never carry. `--acp-auth` and tunnel credentials belong
+ * in auth.json: daemon.json is meant to be safe to paste into a support thread
+ * and to copy to another laptop, and it is neither the moment a secret can
+ * land in it. */
+export declare const SECRET_KEYS: readonly string[];
+/** Every key the config may carry — anything else is someone else's and is
+ * preserved untouched rather than dropped. */
+export declare const KNOWN_KEYS: readonly (keyof DaemonConfig)[];
+export declare function daemonConfigPath(stateDir: string): string;
+export declare function readDaemonConfig(stateDir: string): Promise<{
+    config: DaemonConfig;
+    unknown: Record<string, unknown>;
+    corrupt: boolean;
+}>;
+export declare function writeDaemonConfig(stateDir: string, next: DaemonConfig, unknown?: Record<string, unknown>): Promise<void>;
+//# sourceMappingURL=daemonConfig.d.ts.map

package/dist/daemonConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemonConfig.d.ts","sourceRoot":"","sources":["../src/daemonConfig.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,qBAAqB,IAAI,CAAC;AAEvC,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,UAAU,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7C;;;;;;8EAM0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;iBAGiB;AACjB,eAAO,MAAM,WAAW,EAAE,SAAS,MAAM,EAAwC,CAAC;AAElF;8CAC8C;AAC9C,eAAO,MAAM,UAAU,EAAE,SAAS,CAAC,MAAM,YAAY,CAAC,EAMrD,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED,wBAAsB,gBAAgB,CACpC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAiCvF;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,YAAY,EAClB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACpC,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/dist/daemonConfig.js

@@ -0,0 +1,78 @@
+/* THE MACHINE'S OWN SETTINGS, as a file the operator can read.
+ *
+ * `args.ts` parses 32 flags and reads no file, so every durable fact about a
+ * machine -- its roots, its certificate, its name, its policy -- is retyped on
+ * every start, and nothing can report how a running daemon was configured.
+ * Roughly 24 of those flags describe a MACHINE rather than an invocation.
+ *
+ * Two rules hold this together. A read never throws: a daemon whose config is
+ * missing or corrupt starts on defaults rather than refusing to start. And a
+ * write merges: re-running setup with one new root leaves everything else
+ * exactly as it was, because a command that silently drops last month's
+ * settings is worse than the flag wall it replaces.
+ */
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { dirname, join } from 'node:path';
+export const DAEMON_CONFIG_VERSION = 1;
+/** Keys this file must never carry. `--acp-auth` and tunnel credentials belong
+ * in auth.json: daemon.json is meant to be safe to paste into a support thread
+ * and to copy to another laptop, and it is neither the moment a secret can
+ * land in it. */
+export const SECRET_KEYS = ['acpAuth', 'tunnelToken', 'token'];
+/** Every key the config may carry — anything else is someone else's and is
+ * preserved untouched rather than dropped. */
+export const KNOWN_KEYS = [
+    'version', 'port', 'host', 'roots', 'addUnder', 'cloneUnder', 'allowLan',
+    'allowOrigins', 'tlsCert', 'tlsKey', 'selfSigned', 'tunnel', 'tunnelName',
+    'tunnelHostname', 'endpoint', 'allowShell', 'keepTranscripts', 'isolation',
+    'msbBin', 'guestImage', 'maxChainDepth', 'name', 'appUrl',
+    'defaultModel', 'mcpServers', 'mcpAllow',
+];
+export function daemonConfigPath(stateDir) {
+    return join(stateDir, 'daemon.json');
+}
+export async function readDaemonConfig(stateDir) {
+    // `corrupt` is `false` for "no file yet" (the ordinary fresh-machine case) and
+    // `true` only when a file EXISTS but could not be trusted as-is (bad JSON, or
+    // valid JSON that isn't an object). Never throws either way -- a daemon must
+    // still start on defaults -- but the caller can now tell the two apart and
+    // say so, instead of a typo'd file silently vanishing into "just defaults".
+    const empty = (corrupt) => ({ config: { version: DAEMON_CONFIG_VERSION }, unknown: {}, corrupt });
+    let raw;
+    try {
+        raw = await readFile(daemonConfigPath(stateDir), 'utf8');
+    }
+    catch {
+        return empty(false); // no file yet: the ordinary case on a fresh machine
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return empty(true); // corrupt: start on defaults rather than not at all
+    }
+    if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed))
+        return empty(true);
+    const src = parsed;
+    const config = { version: DAEMON_CONFIG_VERSION };
+    const unknown = {};
+    for (const [k, v] of Object.entries(src)) {
+        if (k === 'version')
+            continue;
+        if (KNOWN_KEYS.includes(k)) {
+            config[k] = v;
+        }
+        else {
+            unknown[k] = v;
+        }
+    }
+    return { config, unknown, corrupt: false };
+}
+export async function writeDaemonConfig(stateDir, next, unknown = {}) {
+    const body = { ...unknown, ...next, version: DAEMON_CONFIG_VERSION };
+    const path = daemonConfigPath(stateDir);
+    await mkdir(dirname(path), { recursive: true });
+    await writeFile(path, `${JSON.stringify(body, null, 2)}\n`, 'utf8');
+}
+//# sourceMappingURL=daemonConfig.js.map

package/dist/daemonConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemonConfig.js","sourceRoot":"","sources":["../src/daemonConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAuCvC;;;iBAGiB;AACjB,MAAM,CAAC,MAAM,WAAW,GAAsB,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;AAElF;8CAC8C;AAC9C,MAAM,CAAC,MAAM,UAAU,GAAoC;IACzD,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU;IACxE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY;IACzE,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW;IAC1E,QAAQ,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ;IACzD,cAAc,EAAE,YAAY,EAAE,UAAU;CACzC,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,OAAO,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,QAAgB;IAEhB,+EAA+E;IAC/E,8EAA8E;IAC9E,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,qBAAqB,EAAkB,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3H,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,oDAAoD;IAC3E,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,oDAAoD;IAC1E,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC;IAEvF,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,MAAM,GAAiB,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IAChE,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,SAAS;YAAE,SAAS;QAC9B,IAAK,UAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,MAA6C,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,IAAkB,EAClB,UAAmC,EAAE;IAErC,MAAM,IAAI,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACtE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from './daemonConfig';
+export * from './credential';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export * from './daemonConfig.js';
+export * from './credential.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC"}

package/package.json

@@ -0,0 +1,40 @@
+{
+  "name": "@corenel/config",
+  "version": "0.1.0",
+  "license": "Elastic-2.0",
+  "type": "module",
+  "description": "Corenel config — the single reader and writer of the dot-dir's daemon.json and auth.json. Two independent readers of one file drift, and the symptom is silence.",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./*": {
+      "types": "./dist/*.d.ts",
+      "default": "./dist/*.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@corenel/tools-node": "0.4.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.13.1",
+    "typescript": "^5.9.3"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Prompd/prompd-web.git",
+    "directory": "packages/config"
+  },
+  "scripts": {
+    "typecheck": "tsc --noEmit",
+    "prebuild": "pnpm --filter @corenel/tools-node build",
+    "build": "node build.mjs"
+  }
+}