@diego-vp20/ezc-config 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,4 @@
+export * from './schema.js';
+export * from './load.js';
+export * from './json-schema.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,4 @@
+export * from './schema.js';
+export * from './load.js';
+export * from './json-schema.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC"}

package/dist/json-schema.d.ts

@@ -0,0 +1,3 @@
+/** Generate the JSON Schema for `ezc.json` (used for editor autocomplete and `ezc config schema`). */
+export declare function configJsonSchema(): Record<string, unknown>;
+//# sourceMappingURL=json-schema.d.ts.map

package/dist/json-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.d.ts","sourceRoot":"","sources":["../src/json-schema.ts"],"names":[],"mappings":"AAGA,sGAAsG;AACtG,wBAAgB,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAK1D"}

package/dist/json-schema.js

@@ -0,0 +1,10 @@
+import { zodToJsonSchema } from 'zod-to-json-schema';
+import { ezcConfigSchema } from './schema.js';
+/** Generate the JSON Schema for `ezc.json` (used for editor autocomplete and `ezc config schema`). */
+export function configJsonSchema() {
+    return zodToJsonSchema(ezcConfigSchema, {
+        name: 'EzcConfig',
+        $refStrategy: 'none',
+    });
+}
+//# sourceMappingURL=json-schema.js.map

package/dist/json-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.js","sourceRoot":"","sources":["../src/json-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE9C,sGAAsG;AACtG,MAAM,UAAU,gBAAgB;IAC9B,OAAO,eAAe,CAAC,eAAe,EAAE;QACtC,IAAI,EAAE,WAAW;QACjB,YAAY,EAAE,MAAM;KACrB,CAA4B,CAAC;AAChC,CAAC"}

package/dist/load.d.ts

@@ -0,0 +1,32 @@
+import { type EzcConfig } from './schema.js';
+export interface LoadConfigOptions {
+    /** Directory to search upward from for a project `ezc.json`. Defaults to `process.cwd()`. */
+    cwd?: string;
+    /** Environment used for `EZC_*` overrides. Defaults to `process.env`. */
+    env?: NodeJS.ProcessEnv;
+    /** Override the user config path (mainly for tests). Defaults to `~/.ezc/config.json`. */
+    userConfigPath?: string;
+}
+export interface ConfigSources {
+    user?: string;
+    project?: string;
+    env: boolean;
+}
+export interface LoadedConfig {
+    config: EzcConfig;
+    sources: ConfigSources;
+}
+/** The fully-defaulted config (empty input run through the schema). */
+export declare function defaultConfig(): EzcConfig;
+/** Default user-level config path. */
+export declare function defaultUserConfigPath(): string;
+/** Walk up from `startDir` to find the nearest `ezc.json`, stopping at the repo root or fs root. */
+export declare function findProjectConfig(startDir: string): string | undefined;
+/**
+ * Load config by layering: user (`~/.ezc/config.json`) → project (`ezc.json`) → `EZC_*` env.
+ * Later layers win. Defaults come from the schema. Throws {@link ConfigError} on invalid input.
+ */
+export declare function loadConfig(options?: LoadConfigOptions): LoadedConfig;
+/** Return a copy of the config with secrets masked, safe for logging/printing. */
+export declare function redactConfig(config: EzcConfig): EzcConfig;
+//# sourceMappingURL=load.d.ts.map

package/dist/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../src/load.ts"],"names":[],"mappings":"AAKA,OAAO,EAA4C,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAEvF,MAAM,WAAW,iBAAiB;IAChC,6FAA6F;IAC7F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,aAAa,CAAC;CACxB;AAED,uEAAuE;AACvE,wBAAgB,aAAa,IAAI,SAAS,CAEzC;AAED,sCAAsC;AACtC,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,oGAAoG;AACpG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAUtE;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,YAAY,CA4CxE;AAED,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAGzD"}

package/dist/load.js

@@ -0,0 +1,154 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join, resolve } from 'node:path';
+import { z } from 'zod';
+import { ConfigError } from '@diego-vp20/ezc-shared';
+import { DEFAULT_PROTECTED_PATHS, ezcConfigSchema } from './schema.js';
+/** The fully-defaulted config (empty input run through the schema). */
+export function defaultConfig() {
+    return ezcConfigSchema.parse({});
+}
+/** Default user-level config path. */
+export function defaultUserConfigPath() {
+    return join(homedir(), '.ezc', 'config.json');
+}
+/** Walk up from `startDir` to find the nearest `ezc.json`, stopping at the repo root or fs root. */
+export function findProjectConfig(startDir) {
+    let dir = resolve(startDir);
+    for (;;) {
+        const candidate = join(dir, 'ezc.json');
+        if (existsSync(candidate))
+            return candidate;
+        if (existsSync(join(dir, '.git')))
+            return undefined; // reached repo root without a config
+        const parent = dirname(dir);
+        if (parent === dir)
+            return undefined; // filesystem root
+        dir = parent;
+    }
+}
+/**
+ * Load config by layering: user (`~/.ezc/config.json`) → project (`ezc.json`) → `EZC_*` env.
+ * Later layers win. Defaults come from the schema. Throws {@link ConfigError} on invalid input.
+ */
+export function loadConfig(options = {}) {
+    const cwd = options.cwd ?? process.cwd();
+    const env = options.env ?? process.env;
+    const userPath = options.userConfigPath ?? defaultUserConfigPath();
+    const projectPath = findProjectConfig(cwd);
+    const userRaw = readJsonObjectIfExists(userPath);
+    const projectRaw = projectPath ? readJsonObjectIfExists(projectPath) : undefined;
+    const envRaw = envOverrides(env);
+    let merged = {};
+    if (userRaw)
+        merged = deepMerge(merged, userRaw);
+    if (projectRaw)
+        merged = deepMerge(merged, projectRaw);
+    if (Object.keys(envRaw).length > 0)
+        merged = deepMerge(merged, envRaw);
+    let config;
+    try {
+        config = ezcConfigSchema.parse(merged);
+    }
+    catch (err) {
+        if (err instanceof z.ZodError) {
+            throw new ConfigError(formatZodError(err, projectPath ?? userPath), { cause: err });
+        }
+        throw err;
+    }
+    // Defaults are always protected; user entries extend them. Expand a leading `~`.
+    const protectedPaths = dedupe([...DEFAULT_PROTECTED_PATHS, ...config.protectedPaths]).map(expandHome);
+    // External directories (out-of-root grants) are also home-expanded for the sandbox and tools.
+    const externalDirectories = config.permission.externalDirectories.map(expandHome);
+    return {
+        config: {
+            ...config,
+            protectedPaths,
+            permission: { ...config.permission, externalDirectories },
+        },
+        sources: {
+            user: userRaw ? userPath : undefined,
+            project: projectRaw ? projectPath : undefined,
+            env: Object.keys(envRaw).length > 0,
+        },
+    };
+}
+/** Return a copy of the config with secrets masked, safe for logging/printing. */
+export function redactConfig(config) {
+    if (config.model.apiKey === undefined)
+        return config;
+    return { ...config, model: { ...config.model, apiKey: '***redacted***' } };
+}
+// --- internals -------------------------------------------------------------
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function deepMerge(base, override) {
+    const out = { ...base };
+    for (const [key, value] of Object.entries(override)) {
+        const existing = out[key];
+        out[key] = isPlainObject(existing) && isPlainObject(value) ? deepMerge(existing, value) : value;
+    }
+    return out;
+}
+function readJsonObjectIfExists(file) {
+    if (!existsSync(file))
+        return undefined;
+    let text;
+    try {
+        text = readFileSync(file, 'utf8');
+    }
+    catch (err) {
+        throw new ConfigError(`Could not read config file: ${file}`, { cause: err });
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch (err) {
+        throw new ConfigError(`Invalid JSON in ${file}: ${err.message}`, { cause: err });
+    }
+    if (!isPlainObject(parsed)) {
+        throw new ConfigError(`Config file must contain a JSON object: ${file}`);
+    }
+    return parsed;
+}
+function envOverrides(env) {
+    const overrides = {};
+    const model = {};
+    if (env.EZC_MODEL_BASE_URL)
+        model.baseUrl = env.EZC_MODEL_BASE_URL;
+    if (env.EZC_MODEL)
+        model.model = env.EZC_MODEL;
+    if (env.EZC_MODEL_API_KEY)
+        model.apiKey = env.EZC_MODEL_API_KEY;
+    if (Object.keys(model).length > 0)
+        overrides.model = model;
+    const logging = {};
+    if (env.EZC_LOG_LEVEL)
+        logging.level = env.EZC_LOG_LEVEL;
+    if (env.EZC_LOG_FORMAT)
+        logging.format = env.EZC_LOG_FORMAT;
+    if (Object.keys(logging).length > 0)
+        overrides.logging = logging;
+    if (env.EZC_PERMISSION_MODE)
+        overrides.permission = { defaultMode: env.EZC_PERMISSION_MODE };
+    return overrides;
+}
+function formatZodError(err, file) {
+    const issues = err.issues
+        .map((issue) => `  - ${issue.path.join('.') || '(root)'}: ${issue.message}`)
+        .join('\n');
+    return `Invalid ezc configuration in ${file}:\n${issues}`;
+}
+function expandHome(p) {
+    if (p === '~')
+        return homedir();
+    if (p.startsWith('~/'))
+        return join(homedir(), p.slice(2));
+    return p;
+}
+function dedupe(values) {
+    return [...new Set(values)];
+}
+//# sourceMappingURL=load.js.map

package/dist/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../src/load.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAkB,MAAM,aAAa,CAAC;AAsBvF,uEAAuE;AACvE,MAAM,UAAU,aAAa;IAC3B,OAAO,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,qBAAqB;IACnC,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;AAChD,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACxC,IAAI,UAAU,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC5C,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC,CAAC,qCAAqC;QAC1F,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC,CAAC,kBAAkB;QACxD,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACxD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,IAAI,qBAAqB,EAAE,CAAC;IACnE,MAAM,WAAW,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAEjC,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,OAAO;QAAE,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,UAAU;QAAE,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAEvE,IAAI,MAAiB,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,GAAG,EAAE,WAAW,IAAI,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,iFAAiF;IACjF,MAAM,cAAc,GAAG,MAAM,CAAC,CAAC,GAAG,uBAAuB,EAAE,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CACvF,UAAU,CACX,CAAC;IACF,8FAA8F;IAC9F,MAAM,mBAAmB,GAAG,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAElF,OAAO;QACL,MAAM,EAAE;YACN,GAAG,MAAM;YACT,cAAc;YACd,UAAU,EAAE,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,mBAAmB,EAAE;SAC1D;QACD,OAAO,EAAE;YACP,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACpC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC7C,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;SACpC;KACF,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,MAAiB;IAC5C,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACrD,OAAO,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAAC;AAC7E,CAAC;AAED,8EAA8E;AAE9E,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,SAAS,CAChB,IAA6B,EAC7B,QAAiC;IAEjC,MAAM,GAAG,GAA4B,EAAE,GAAG,IAAI,EAAE,CAAC;IACjD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,GAAG,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAClG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CAAC,+BAA+B,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CAAC,mBAAmB,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,WAAW,CAAC,2CAA2C,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,YAAY,CAAC,GAAsB;IAC1C,MAAM,SAAS,GAA4B,EAAE,CAAC;IAE9C,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,IAAI,GAAG,CAAC,kBAAkB;QAAE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,kBAAkB,CAAC;IACnE,IAAI,GAAG,CAAC,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,SAAS,CAAC;IAC/C,IAAI,GAAG,CAAC,iBAAiB;QAAE,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,iBAAiB,CAAC;IAChE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC;IAE3D,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,IAAI,GAAG,CAAC,aAAa;QAAE,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,aAAa,CAAC;IACzD,IAAI,GAAG,CAAC,cAAc;QAAE,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC,cAAc,CAAC;IAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;IAEjE,IAAI,GAAG,CAAC,mBAAmB;QAAE,SAAS,CAAC,UAAU,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,mBAAmB,EAAE,CAAC;IAE7F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CAAC,GAAe,EAAE,IAAY;IACnD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM;SACtB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;SAC3E,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO,gCAAgC,IAAI,MAAM,MAAM,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IAChC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/schema.d.ts

@@ -0,0 +1,763 @@
+import { z } from 'zod';
+export declare const permissionDecisionSchema: z.ZodEnum<["allow", "ask", "deny"]>;
+export type PermissionDecision = z.infer<typeof permissionDecisionSchema>;
+export declare const permissionModeSchema: z.ZodEnum<["default", "acceptEdits", "plan", "auto", "dontAsk", "bypass"]>;
+export type PermissionMode = z.infer<typeof permissionModeSchema>;
+/** A per-tool rule: either a blanket decision, or a map of command/path pattern -> decision. */
+export declare const toolRuleSchema: z.ZodUnion<[z.ZodEnum<["allow", "ask", "deny"]>, z.ZodRecord<z.ZodString, z.ZodEnum<["allow", "ask", "deny"]>>]>;
+export type ToolRule = z.infer<typeof toolRuleSchema>;
+export declare const modelConfigSchema: z.ZodObject<{
+    baseUrl: z.ZodDefault<z.ZodString>;
+    model: z.ZodDefault<z.ZodString>;
+    apiKey: z.ZodOptional<z.ZodString>;
+    tokenizer: z.ZodOptional<z.ZodString>;
+    contextWindow: z.ZodOptional<z.ZodNumber>;
+    maxOutputTokens: z.ZodOptional<z.ZodNumber>;
+    temperature: z.ZodDefault<z.ZodNumber>;
+    requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    baseUrl: string;
+    model: string;
+    temperature: number;
+    requestTimeoutMs: number;
+    apiKey?: string | undefined;
+    tokenizer?: string | undefined;
+    contextWindow?: number | undefined;
+    maxOutputTokens?: number | undefined;
+}, {
+    baseUrl?: string | undefined;
+    model?: string | undefined;
+    apiKey?: string | undefined;
+    tokenizer?: string | undefined;
+    contextWindow?: number | undefined;
+    maxOutputTokens?: number | undefined;
+    temperature?: number | undefined;
+    requestTimeoutMs?: number | undefined;
+}>;
+export type ModelConfig = z.infer<typeof modelConfigSchema>;
+export declare const permissionConfigSchema: z.ZodObject<{
+    defaultMode: z.ZodDefault<z.ZodEnum<["default", "acceptEdits", "plan", "auto", "dontAsk", "bypass"]>>;
+    rules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodEnum<["allow", "ask", "deny"]>, z.ZodRecord<z.ZodString, z.ZodEnum<["allow", "ask", "deny"]>>]>>>;
+    /** Tools removed from the model's view entirely (pre-filter; docs §4.1). */
+    disabledTools: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Run the heuristic safety classifier in `auto` mode (docs §4.4). User-disable in trusted envs. */
+    classifier: z.ZodDefault<z.ZodBoolean>;
+    /** Directories outside the project root the agent may access (`external_directory`; docs §3). */
+    externalDirectories: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    defaultMode: "default" | "acceptEdits" | "plan" | "auto" | "dontAsk" | "bypass";
+    rules: Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>;
+    disabledTools: string[];
+    classifier: boolean;
+    externalDirectories: string[];
+}, {
+    defaultMode?: "default" | "acceptEdits" | "plan" | "auto" | "dontAsk" | "bypass" | undefined;
+    rules?: Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">> | undefined;
+    disabledTools?: string[] | undefined;
+    classifier?: boolean | undefined;
+    externalDirectories?: string[] | undefined;
+}>;
+export type PermissionConfig = z.infer<typeof permissionConfigSchema>;
+export declare const commandsConfigSchema: z.ZodObject<{
+    test: z.ZodOptional<z.ZodString>;
+    build: z.ZodOptional<z.ZodString>;
+    lint: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    test?: string | undefined;
+    build?: string | undefined;
+    lint?: string | undefined;
+}, {
+    test?: string | undefined;
+    build?: string | undefined;
+    lint?: string | undefined;
+}>;
+export declare const webConfigSchema: z.ZodObject<{
+    searxngUrl: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    searxngUrl?: string | undefined;
+}, {
+    searxngUrl?: string | undefined;
+}>;
+export declare const compactionConfigSchema: z.ZodEffects<z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    /** Fraction of budget at which the status bar warns (TASK-14 `pressure`). */
+    warnThreshold: z.ZodDefault<z.ZodNumber>;
+    /** Fraction of budget that triggers the compaction pipeline before overflow (TASK-15). */
+    criticalThreshold: z.ZodDefault<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    enabled: boolean;
+    warnThreshold: number;
+    criticalThreshold: number;
+}, {
+    enabled?: boolean | undefined;
+    warnThreshold?: number | undefined;
+    criticalThreshold?: number | undefined;
+}>, {
+    enabled: boolean;
+    warnThreshold: number;
+    criticalThreshold: number;
+}, {
+    enabled?: boolean | undefined;
+    warnThreshold?: number | undefined;
+    criticalThreshold?: number | undefined;
+}>;
+export type CompactionConfig = z.infer<typeof compactionConfigSchema>;
+/** Persistent memory: project `EZC.md` (curated) + append-only auto-memory (learned hints). */
+export declare const memoryConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    /** Token cap on auto-memory loaded into context each session (docs §5: first N lines). */
+    maxTokens: z.ZodDefault<z.ZodNumber>;
+    /** Warn when `EZC.md` exceeds this many tokens — every line costs tokens every turn (docs §6). */
+    ezcMdWarnTokens: z.ZodDefault<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    enabled: boolean;
+    maxTokens: number;
+    ezcMdWarnTokens: number;
+}, {
+    enabled?: boolean | undefined;
+    maxTokens?: number | undefined;
+    ezcMdWarnTokens?: number | undefined;
+}>;
+export type MemoryConfig = z.infer<typeof memoryConfigSchema>;
+export declare const contextConfigSchema: z.ZodObject<{
+    budgetTokens: z.ZodOptional<z.ZodNumber>;
+    /** Tokens held back from the budget for the model's reply when sizing the prompt (TASK-14). */
+    reserveOutputTokens: z.ZodDefault<z.ZodNumber>;
+    compaction: z.ZodDefault<z.ZodEffects<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** Fraction of budget at which the status bar warns (TASK-14 `pressure`). */
+        warnThreshold: z.ZodDefault<z.ZodNumber>;
+        /** Fraction of budget that triggers the compaction pipeline before overflow (TASK-15). */
+        criticalThreshold: z.ZodDefault<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        warnThreshold: number;
+        criticalThreshold: number;
+    }, {
+        enabled?: boolean | undefined;
+        warnThreshold?: number | undefined;
+        criticalThreshold?: number | undefined;
+    }>, {
+        enabled: boolean;
+        warnThreshold: number;
+        criticalThreshold: number;
+    }, {
+        enabled?: boolean | undefined;
+        warnThreshold?: number | undefined;
+        criticalThreshold?: number | undefined;
+    }>>;
+    memory: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** Token cap on auto-memory loaded into context each session (docs §5: first N lines). */
+        maxTokens: z.ZodDefault<z.ZodNumber>;
+        /** Warn when `EZC.md` exceeds this many tokens — every line costs tokens every turn (docs §6). */
+        ezcMdWarnTokens: z.ZodDefault<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        maxTokens: number;
+        ezcMdWarnTokens: number;
+    }, {
+        enabled?: boolean | undefined;
+        maxTokens?: number | undefined;
+        ezcMdWarnTokens?: number | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    reserveOutputTokens: number;
+    compaction: {
+        enabled: boolean;
+        warnThreshold: number;
+        criticalThreshold: number;
+    };
+    memory: {
+        enabled: boolean;
+        maxTokens: number;
+        ezcMdWarnTokens: number;
+    };
+    budgetTokens?: number | undefined;
+}, {
+    budgetTokens?: number | undefined;
+    reserveOutputTokens?: number | undefined;
+    compaction?: {
+        enabled?: boolean | undefined;
+        warnThreshold?: number | undefined;
+        criticalThreshold?: number | undefined;
+    } | undefined;
+    memory?: {
+        enabled?: boolean | undefined;
+        maxTokens?: number | undefined;
+        ezcMdWarnTokens?: number | undefined;
+    } | undefined;
+}>;
+export declare const sandboxConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    mode: z.ZodDefault<z.ZodEnum<["auto", "off"]>>;
+    /** Allow outbound network for sandboxed shells. Off by default (docs §4.5). */
+    network: z.ZodDefault<z.ZodBoolean>;
+    /** What to do when no sandbox backend is available (D-10): warn and run, or refuse. */
+    fallback: z.ZodDefault<z.ZodEnum<["warn", "refuse"]>>;
+}, "strict", z.ZodTypeAny, {
+    enabled: boolean;
+    mode: "auto" | "off";
+    network: boolean;
+    fallback: "warn" | "refuse";
+}, {
+    enabled?: boolean | undefined;
+    mode?: "auto" | "off" | undefined;
+    network?: boolean | undefined;
+    fallback?: "warn" | "refuse" | undefined;
+}>;
+export type SandboxConfig = z.infer<typeof sandboxConfigSchema>;
+/** Lifecycle events a hook can subscribe to (TASK-13). */
+export declare const HOOK_EVENTS: readonly ["PreToolUse", "PostToolUse", "UserPromptSubmit", "SessionStart", "SessionEnd", "Resume", "Stop", "Commit", "Compaction"];
+export declare const hookEventSchema: z.ZodEnum<["PreToolUse", "PostToolUse", "UserPromptSubmit", "SessionStart", "SessionEnd", "Resume", "Stop", "Commit", "Compaction"]>;
+export type HookEvent = z.infer<typeof hookEventSchema>;
+/** A single command hook: a script run with the event payload on stdin (docs §2.3). */
+export declare const hookCommandSchema: z.ZodObject<{
+    type: z.ZodDefault<z.ZodLiteral<"command">>;
+    command: z.ZodString;
+    /** Kill the hook after this many seconds. Default 60. */
+    timeout: z.ZodOptional<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    type: "command";
+    command: string;
+    timeout?: number | undefined;
+}, {
+    command: string;
+    type?: "command" | undefined;
+    timeout?: number | undefined;
+}>;
+export type HookCommand = z.infer<typeof hookCommandSchema>;
+/** A matcher group: hooks that fire when `matcher` matches the tool (e.g. `"Write|Edit"`). */
+export declare const hookMatcherSchema: z.ZodObject<{
+    matcher: z.ZodOptional<z.ZodString>;
+    hooks: z.ZodArray<z.ZodObject<{
+        type: z.ZodDefault<z.ZodLiteral<"command">>;
+        command: z.ZodString;
+        /** Kill the hook after this many seconds. Default 60. */
+        timeout: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        type: "command";
+        command: string;
+        timeout?: number | undefined;
+    }, {
+        command: string;
+        type?: "command" | undefined;
+        timeout?: number | undefined;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    hooks: {
+        type: "command";
+        command: string;
+        timeout?: number | undefined;
+    }[];
+    matcher?: string | undefined;
+}, {
+    hooks: {
+        command: string;
+        type?: "command" | undefined;
+        timeout?: number | undefined;
+    }[];
+    matcher?: string | undefined;
+}>;
+export type HookMatcher = z.infer<typeof hookMatcherSchema>;
+/** `event → [matcher groups]`. Keyed by event name; unknown events are ignored by the loader. */
+export declare const hooksConfigSchema: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+    matcher: z.ZodOptional<z.ZodString>;
+    hooks: z.ZodArray<z.ZodObject<{
+        type: z.ZodDefault<z.ZodLiteral<"command">>;
+        command: z.ZodString;
+        /** Kill the hook after this many seconds. Default 60. */
+        timeout: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        type: "command";
+        command: string;
+        timeout?: number | undefined;
+    }, {
+        command: string;
+        type?: "command" | undefined;
+        timeout?: number | undefined;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    hooks: {
+        type: "command";
+        command: string;
+        timeout?: number | undefined;
+    }[];
+    matcher?: string | undefined;
+}, {
+    hooks: {
+        command: string;
+        type?: "command" | undefined;
+        timeout?: number | undefined;
+    }[];
+    matcher?: string | undefined;
+}>, "many">>>;
+export type HooksConfig = z.infer<typeof hooksConfigSchema>;
+/** Session transcript persistence (TASK-17): append-only JSONL under `~/.ezc/projects/`. */
+export declare const sessionsConfigSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    /** Override the storage root. Defaults to `~/.ezc/projects`. */
+    dir: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    enabled: boolean;
+    dir?: string | undefined;
+}, {
+    enabled?: boolean | undefined;
+    dir?: string | undefined;
+}>;
+export type SessionsConfig = z.infer<typeof sessionsConfigSchema>;
+/** Subagents / sidechains (TASK-18): delegated work in its own context window. */
+export declare const subagentsConfigSchema: z.ZodObject<{
+    /** Max nesting depth; the Agent tool is withheld at the cap so recursion is bounded. */
+    maxDepth: z.ZodDefault<z.ZodNumber>;
+    /** Default model↔tool iteration cap for a subagent turn. */
+    maxIterations: z.ZodDefault<z.ZodNumber>;
+    /** Default token budget for a subagent's own context window (its firewall). */
+    budgetTokens: z.ZodOptional<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    maxDepth: number;
+    maxIterations: number;
+    budgetTokens?: number | undefined;
+}, {
+    budgetTokens?: number | undefined;
+    maxDepth?: number | undefined;
+    maxIterations?: number | undefined;
+}>;
+export type SubagentsConfig = z.infer<typeof subagentsConfigSchema>;
+export declare const loggingConfigSchema: z.ZodObject<{
+    level: z.ZodDefault<z.ZodEnum<["debug", "info", "warn", "error"]>>;
+    format: z.ZodDefault<z.ZodEnum<["pretty", "json"]>>;
+}, "strict", z.ZodTypeAny, {
+    level: "warn" | "debug" | "info" | "error";
+    format: "pretty" | "json";
+}, {
+    level?: "warn" | "debug" | "info" | "error" | undefined;
+    format?: "pretty" | "json" | undefined;
+}>;
+/** TUI appearance, keybindings and accessibility (TASK-21). */
+export declare const uiConfigSchema: z.ZodObject<{
+    /** Colour theme. `high-contrast` maximises legibility; pairs colour with icons either way. */
+    theme: z.ZodDefault<z.ZodEnum<["dark", "light", "high-contrast"]>>;
+    /**
+     * Force screen-reader mode (linearised output, no spinners). When unset, Ink auto-detects via
+     * the `INK_SCREEN_READER` environment variable (D-03).
+     */
+    screenReader: z.ZodOptional<z.ZodBoolean>;
+    /**
+     * Keybinding overrides: `action -> key`, merged over the defaults (docs §5). Keys are written
+     * like `ctrl+r`, `shift+tab`, `escape`. Unknown actions are ignored by the loader.
+     */
+    keybindings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strict", z.ZodTypeAny, {
+    theme: "dark" | "light" | "high-contrast";
+    keybindings: Record<string, string>;
+    screenReader?: boolean | undefined;
+}, {
+    theme?: "dark" | "light" | "high-contrast" | undefined;
+    screenReader?: boolean | undefined;
+    keybindings?: Record<string, string> | undefined;
+}>;
+export type UiConfig = z.infer<typeof uiConfigSchema>;
+/** Always-protected paths. User `protectedPaths` are unioned with these; defaults are never dropped. */
+export declare const DEFAULT_PROTECTED_PATHS: readonly string[];
+export declare const ezcConfigSchema: z.ZodObject<{
+    $schema: z.ZodOptional<z.ZodString>;
+    model: z.ZodDefault<z.ZodObject<{
+        baseUrl: z.ZodDefault<z.ZodString>;
+        model: z.ZodDefault<z.ZodString>;
+        apiKey: z.ZodOptional<z.ZodString>;
+        tokenizer: z.ZodOptional<z.ZodString>;
+        contextWindow: z.ZodOptional<z.ZodNumber>;
+        maxOutputTokens: z.ZodOptional<z.ZodNumber>;
+        temperature: z.ZodDefault<z.ZodNumber>;
+        requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        baseUrl: string;
+        model: string;
+        temperature: number;
+        requestTimeoutMs: number;
+        apiKey?: string | undefined;
+        tokenizer?: string | undefined;
+        contextWindow?: number | undefined;
+        maxOutputTokens?: number | undefined;
+    }, {
+        baseUrl?: string | undefined;
+        model?: string | undefined;
+        apiKey?: string | undefined;
+        tokenizer?: string | undefined;
+        contextWindow?: number | undefined;
+        maxOutputTokens?: number | undefined;
+        temperature?: number | undefined;
+        requestTimeoutMs?: number | undefined;
+    }>>;
+    permission: z.ZodDefault<z.ZodObject<{
+        defaultMode: z.ZodDefault<z.ZodEnum<["default", "acceptEdits", "plan", "auto", "dontAsk", "bypass"]>>;
+        rules: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodEnum<["allow", "ask", "deny"]>, z.ZodRecord<z.ZodString, z.ZodEnum<["allow", "ask", "deny"]>>]>>>;
+        /** Tools removed from the model's view entirely (pre-filter; docs §4.1). */
+        disabledTools: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        /** Run the heuristic safety classifier in `auto` mode (docs §4.4). User-disable in trusted envs. */
+        classifier: z.ZodDefault<z.ZodBoolean>;
+        /** Directories outside the project root the agent may access (`external_directory`; docs §3). */
+        externalDirectories: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        defaultMode: "default" | "acceptEdits" | "plan" | "auto" | "dontAsk" | "bypass";
+        rules: Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>;
+        disabledTools: string[];
+        classifier: boolean;
+        externalDirectories: string[];
+    }, {
+        defaultMode?: "default" | "acceptEdits" | "plan" | "auto" | "dontAsk" | "bypass" | undefined;
+        rules?: Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">> | undefined;
+        disabledTools?: string[] | undefined;
+        classifier?: boolean | undefined;
+        externalDirectories?: string[] | undefined;
+    }>>;
+    protectedPaths: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    commands: z.ZodDefault<z.ZodObject<{
+        test: z.ZodOptional<z.ZodString>;
+        build: z.ZodOptional<z.ZodString>;
+        lint: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        test?: string | undefined;
+        build?: string | undefined;
+        lint?: string | undefined;
+    }, {
+        test?: string | undefined;
+        build?: string | undefined;
+        lint?: string | undefined;
+    }>>;
+    web: z.ZodDefault<z.ZodObject<{
+        searxngUrl: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        searxngUrl?: string | undefined;
+    }, {
+        searxngUrl?: string | undefined;
+    }>>;
+    context: z.ZodDefault<z.ZodObject<{
+        budgetTokens: z.ZodOptional<z.ZodNumber>;
+        /** Tokens held back from the budget for the model's reply when sizing the prompt (TASK-14). */
+        reserveOutputTokens: z.ZodDefault<z.ZodNumber>;
+        compaction: z.ZodDefault<z.ZodEffects<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            /** Fraction of budget at which the status bar warns (TASK-14 `pressure`). */
+            warnThreshold: z.ZodDefault<z.ZodNumber>;
+            /** Fraction of budget that triggers the compaction pipeline before overflow (TASK-15). */
+            criticalThreshold: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            enabled: boolean;
+            warnThreshold: number;
+            criticalThreshold: number;
+        }, {
+            enabled?: boolean | undefined;
+            warnThreshold?: number | undefined;
+            criticalThreshold?: number | undefined;
+        }>, {
+            enabled: boolean;
+            warnThreshold: number;
+            criticalThreshold: number;
+        }, {
+            enabled?: boolean | undefined;
+            warnThreshold?: number | undefined;
+            criticalThreshold?: number | undefined;
+        }>>;
+        memory: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            /** Token cap on auto-memory loaded into context each session (docs §5: first N lines). */
+            maxTokens: z.ZodDefault<z.ZodNumber>;
+            /** Warn when `EZC.md` exceeds this many tokens — every line costs tokens every turn (docs §6). */
+            ezcMdWarnTokens: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            enabled: boolean;
+            maxTokens: number;
+            ezcMdWarnTokens: number;
+        }, {
+            enabled?: boolean | undefined;
+            maxTokens?: number | undefined;
+            ezcMdWarnTokens?: number | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        reserveOutputTokens: number;
+        compaction: {
+            enabled: boolean;
+            warnThreshold: number;
+            criticalThreshold: number;
+        };
+        memory: {
+            enabled: boolean;
+            maxTokens: number;
+            ezcMdWarnTokens: number;
+        };
+        budgetTokens?: number | undefined;
+    }, {
+        budgetTokens?: number | undefined;
+        reserveOutputTokens?: number | undefined;
+        compaction?: {
+            enabled?: boolean | undefined;
+            warnThreshold?: number | undefined;
+            criticalThreshold?: number | undefined;
+        } | undefined;
+        memory?: {
+            enabled?: boolean | undefined;
+            maxTokens?: number | undefined;
+            ezcMdWarnTokens?: number | undefined;
+        } | undefined;
+    }>>;
+    sandbox: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        mode: z.ZodDefault<z.ZodEnum<["auto", "off"]>>;
+        /** Allow outbound network for sandboxed shells. Off by default (docs §4.5). */
+        network: z.ZodDefault<z.ZodBoolean>;
+        /** What to do when no sandbox backend is available (D-10): warn and run, or refuse. */
+        fallback: z.ZodDefault<z.ZodEnum<["warn", "refuse"]>>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        mode: "auto" | "off";
+        network: boolean;
+        fallback: "warn" | "refuse";
+    }, {
+        enabled?: boolean | undefined;
+        mode?: "auto" | "off" | undefined;
+        network?: boolean | undefined;
+        fallback?: "warn" | "refuse" | undefined;
+    }>>;
+    sessions: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        /** Override the storage root. Defaults to `~/.ezc/projects`. */
+        dir: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        enabled: boolean;
+        dir?: string | undefined;
+    }, {
+        enabled?: boolean | undefined;
+        dir?: string | undefined;
+    }>>;
+    subagents: z.ZodDefault<z.ZodObject<{
+        /** Max nesting depth; the Agent tool is withheld at the cap so recursion is bounded. */
+        maxDepth: z.ZodDefault<z.ZodNumber>;
+        /** Default model↔tool iteration cap for a subagent turn. */
+        maxIterations: z.ZodDefault<z.ZodNumber>;
+        /** Default token budget for a subagent's own context window (its firewall). */
+        budgetTokens: z.ZodOptional<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        maxDepth: number;
+        maxIterations: number;
+        budgetTokens?: number | undefined;
+    }, {
+        budgetTokens?: number | undefined;
+        maxDepth?: number | undefined;
+        maxIterations?: number | undefined;
+    }>>;
+    hooks: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
+        matcher: z.ZodOptional<z.ZodString>;
+        hooks: z.ZodArray<z.ZodObject<{
+            type: z.ZodDefault<z.ZodLiteral<"command">>;
+            command: z.ZodString;
+            /** Kill the hook after this many seconds. Default 60. */
+            timeout: z.ZodOptional<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            type: "command";
+            command: string;
+            timeout?: number | undefined;
+        }, {
+            command: string;
+            type?: "command" | undefined;
+            timeout?: number | undefined;
+        }>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        hooks: {
+            type: "command";
+            command: string;
+            timeout?: number | undefined;
+        }[];
+        matcher?: string | undefined;
+    }, {
+        hooks: {
+            command: string;
+            type?: "command" | undefined;
+            timeout?: number | undefined;
+        }[];
+        matcher?: string | undefined;
+    }>, "many">>>;
+    logging: z.ZodDefault<z.ZodObject<{
+        level: z.ZodDefault<z.ZodEnum<["debug", "info", "warn", "error"]>>;
+        format: z.ZodDefault<z.ZodEnum<["pretty", "json"]>>;
+    }, "strict", z.ZodTypeAny, {
+        level: "warn" | "debug" | "info" | "error";
+        format: "pretty" | "json";
+    }, {
+        level?: "warn" | "debug" | "info" | "error" | undefined;
+        format?: "pretty" | "json" | undefined;
+    }>>;
+    ui: z.ZodDefault<z.ZodObject<{
+        /** Colour theme. `high-contrast` maximises legibility; pairs colour with icons either way. */
+        theme: z.ZodDefault<z.ZodEnum<["dark", "light", "high-contrast"]>>;
+        /**
+         * Force screen-reader mode (linearised output, no spinners). When unset, Ink auto-detects via
+         * the `INK_SCREEN_READER` environment variable (D-03).
+         */
+        screenReader: z.ZodOptional<z.ZodBoolean>;
+        /**
+         * Keybinding overrides: `action -> key`, merged over the defaults (docs §5). Keys are written
+         * like `ctrl+r`, `shift+tab`, `escape`. Unknown actions are ignored by the loader.
+         */
+        keybindings: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strict", z.ZodTypeAny, {
+        theme: "dark" | "light" | "high-contrast";
+        keybindings: Record<string, string>;
+        screenReader?: boolean | undefined;
+    }, {
+        theme?: "dark" | "light" | "high-contrast" | undefined;
+        screenReader?: boolean | undefined;
+        keybindings?: Record<string, string> | undefined;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    model: {
+        baseUrl: string;
+        model: string;
+        temperature: number;
+        requestTimeoutMs: number;
+        apiKey?: string | undefined;
+        tokenizer?: string | undefined;
+        contextWindow?: number | undefined;
+        maxOutputTokens?: number | undefined;
+    };
+    hooks: Record<string, {
+        hooks: {
+            type: "command";
+            command: string;
+            timeout?: number | undefined;
+        }[];
+        matcher?: string | undefined;
+    }[]>;
+    permission: {
+        defaultMode: "default" | "acceptEdits" | "plan" | "auto" | "dontAsk" | "bypass";
+        rules: Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">>;
+        disabledTools: string[];
+        classifier: boolean;
+        externalDirectories: string[];
+    };
+    protectedPaths: string[];
+    commands: {
+        test?: string | undefined;
+        build?: string | undefined;
+        lint?: string | undefined;
+    };
+    web: {
+        searxngUrl?: string | undefined;
+    };
+    context: {
+        reserveOutputTokens: number;
+        compaction: {
+            enabled: boolean;
+            warnThreshold: number;
+            criticalThreshold: number;
+        };
+        memory: {
+            enabled: boolean;
+            maxTokens: number;
+            ezcMdWarnTokens: number;
+        };
+        budgetTokens?: number | undefined;
+    };
+    sandbox: {
+        enabled: boolean;
+        mode: "auto" | "off";
+        network: boolean;
+        fallback: "warn" | "refuse";
+    };
+    sessions: {
+        enabled: boolean;
+        dir?: string | undefined;
+    };
+    subagents: {
+        maxDepth: number;
+        maxIterations: number;
+        budgetTokens?: number | undefined;
+    };
+    logging: {
+        level: "warn" | "debug" | "info" | "error";
+        format: "pretty" | "json";
+    };
+    ui: {
+        theme: "dark" | "light" | "high-contrast";
+        keybindings: Record<string, string>;
+        screenReader?: boolean | undefined;
+    };
+    $schema?: string | undefined;
+}, {
+    model?: {
+        baseUrl?: string | undefined;
+        model?: string | undefined;
+        apiKey?: string | undefined;
+        tokenizer?: string | undefined;
+        contextWindow?: number | undefined;
+        maxOutputTokens?: number | undefined;
+        temperature?: number | undefined;
+        requestTimeoutMs?: number | undefined;
+    } | undefined;
+    hooks?: Record<string, {
+        hooks: {
+            command: string;
+            type?: "command" | undefined;
+            timeout?: number | undefined;
+        }[];
+        matcher?: string | undefined;
+    }[]> | undefined;
+    $schema?: string | undefined;
+    permission?: {
+        defaultMode?: "default" | "acceptEdits" | "plan" | "auto" | "dontAsk" | "bypass" | undefined;
+        rules?: Record<string, "allow" | "ask" | "deny" | Record<string, "allow" | "ask" | "deny">> | undefined;
+        disabledTools?: string[] | undefined;
+        classifier?: boolean | undefined;
+        externalDirectories?: string[] | undefined;
+    } | undefined;
+    protectedPaths?: string[] | undefined;
+    commands?: {
+        test?: string | undefined;
+        build?: string | undefined;
+        lint?: string | undefined;
+    } | undefined;
+    web?: {
+        searxngUrl?: string | undefined;
+    } | undefined;
+    context?: {
+        budgetTokens?: number | undefined;
+        reserveOutputTokens?: number | undefined;
+        compaction?: {
+            enabled?: boolean | undefined;
+            warnThreshold?: number | undefined;
+            criticalThreshold?: number | undefined;
+        } | undefined;
+        memory?: {
+            enabled?: boolean | undefined;
+            maxTokens?: number | undefined;
+            ezcMdWarnTokens?: number | undefined;
+        } | undefined;
+    } | undefined;
+    sandbox?: {
+        enabled?: boolean | undefined;
+        mode?: "auto" | "off" | undefined;
+        network?: boolean | undefined;
+        fallback?: "warn" | "refuse" | undefined;
+    } | undefined;
+    sessions?: {
+        enabled?: boolean | undefined;
+        dir?: string | undefined;
+    } | undefined;
+    subagents?: {
+        budgetTokens?: number | undefined;
+        maxDepth?: number | undefined;
+        maxIterations?: number | undefined;
+    } | undefined;
+    logging?: {
+        level?: "warn" | "debug" | "info" | "error" | undefined;
+        format?: "pretty" | "json" | undefined;
+    } | undefined;
+    ui?: {
+        theme?: "dark" | "light" | "high-contrast" | undefined;
+        screenReader?: boolean | undefined;
+        keybindings?: Record<string, string> | undefined;
+    } | undefined;
+}>;
+export type EzcConfig = z.infer<typeof ezcConfigSchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,wBAAwB,qCAAmC,CAAC;AACzE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,oBAAoB,4EAO/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,gGAAgG;AAChG,eAAO,MAAM,cAAc,kHAGzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWnB,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,sBAAsB;;;IAI/B,4EAA4E;;IAE5E,oGAAoG;;IAEpG,iGAAiG;;;;;;;;;;;;;;EAG1F,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;EAMtB,CAAC;AAEZ,eAAO,MAAM,eAAe;;;;;;EAIjB,CAAC;AAEZ,eAAO,MAAM,sBAAsB;;IAG/B,6EAA6E;;IAE7E,0FAA0F;;;;;;;;;;;;;;;;;;EAM1F,CAAC;AACL,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE,+FAA+F;AAC/F,eAAO,MAAM,kBAAkB;;IAG3B,0FAA0F;;IAE1F,kGAAkG;;;;;;;;;;EAG3F,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,mBAAmB;;IAG5B,+FAA+F;;;;QA1B/F,6EAA6E;;QAE7E,0FAA0F;;;;;;;;;;;;;;;;;;;;;QAa1F,0FAA0F;;QAE1F,kGAAkG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc3F,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;IAI5B,+EAA+E;;IAE/E,uFAAuF;;;;;;;;;;;;EAGhF,CAAC;AACZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,0DAA0D;AAC1D,eAAO,MAAM,WAAW,oIAUd,CAAC;AACX,eAAO,MAAM,eAAe,sIAAsB,CAAC;AACnD,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,uFAAuF;AACvF,eAAO,MAAM,iBAAiB;;;IAI1B,yDAAyD;;;;;;;;;;EAGlD,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,8FAA8F;AAC9F,eAAO,MAAM,iBAAiB;;;;;QAP1B,yDAAyD;;;;;;;;;;;;;;;;;;;;;;;;;EAYlD,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,iGAAiG;AACjG,eAAO,MAAM,iBAAiB;;;;;QAhB1B,yDAAyD;;;;;;;;;;;;;;;;;;;;;;;;;aAgBgC,CAAC;AAC9F,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB;;IAG7B,gEAAgE;;;;;;;;EAGzD,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,kFAAkF;AAClF,eAAO,MAAM,qBAAqB;IAE9B,wFAAwF;;IAExF,4DAA4D;;IAE5D,+EAA+E;;;;;;;;;;EAGxE,CAAC;AACZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;EAKrB,CAAC;AAEZ,+DAA+D;AAC/D,eAAO,MAAM,cAAc;IAEvB,8FAA8F;;IAE9F;;;OAGG;;IAEH;;;OAGG;;;;;;;;;;EAGI,CAAC;AACZ,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,wGAAwG;AACxG,eAAO,MAAM,uBAAuB,EAAE,SAAS,MAAM,EAMpD,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAzKxB,4EAA4E;;QAE5E,oGAAoG;;QAEpG,iGAAiG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAiDjG,+FAA+F;;;;YA1B/F,6EAA6E;;YAE7E,0FAA0F;;;;;;;;;;;;;;;;;;;;;YAa1F,0FAA0F;;YAE1F,kGAAkG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAoBlG,+EAA+E;;QAE/E,uFAAuF;;;;;;;;;;;;;;;QAiDvF,gEAAgE;;;;;;;;;;QAShE,wFAAwF;;QAExF,4DAA4D;;QAE5D,+EAA+E;;;;;;;;;;;;;;;;YApC/E,yDAAyD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAoDzD,8FAA8F;;QAE9F;;;WAGG;;QAEH;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+BI,CAAC;AAEZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/schema.js

@@ -0,0 +1,191 @@
+import { z } from 'zod';
+export const permissionDecisionSchema = z.enum(['allow', 'ask', 'deny']);
+export const permissionModeSchema = z.enum([
+    'default',
+    'acceptEdits',
+    'plan',
+    'auto',
+    'dontAsk',
+    'bypass',
+]);
+/** A per-tool rule: either a blanket decision, or a map of command/path pattern -> decision. */
+export const toolRuleSchema = z.union([
+    permissionDecisionSchema,
+    z.record(z.string(), permissionDecisionSchema),
+]);
+export const modelConfigSchema = z
+    .object({
+    baseUrl: z.string().url().default('http://localhost:11434/v1'),
+    model: z.string().min(1).default('qwen2.5-coder:7b'),
+    apiKey: z.string().optional(),
+    tokenizer: z.string().optional(),
+    contextWindow: z.number().int().positive().optional(),
+    maxOutputTokens: z.number().int().positive().optional(),
+    temperature: z.number().min(0).max(2).default(0),
+    requestTimeoutMs: z.number().int().positive().default(120_000),
+})
+    .strict();
+export const permissionConfigSchema = z
+    .object({
+    defaultMode: permissionModeSchema.default('default'),
+    rules: z.record(z.string(), toolRuleSchema).default({}),
+    /** Tools removed from the model's view entirely (pre-filter; docs §4.1). */
+    disabledTools: z.array(z.string()).default([]),
+    /** Run the heuristic safety classifier in `auto` mode (docs §4.4). User-disable in trusted envs. */
+    classifier: z.boolean().default(true),
+    /** Directories outside the project root the agent may access (`external_directory`; docs §3). */
+    externalDirectories: z.array(z.string()).default([]),
+})
+    .strict();
+export const commandsConfigSchema = z
+    .object({
+    test: z.string().optional(),
+    build: z.string().optional(),
+    lint: z.string().optional(),
+})
+    .strict();
+export const webConfigSchema = z
+    .object({
+    searxngUrl: z.string().url().optional(),
+})
+    .strict();
+export const compactionConfigSchema = z
+    .object({
+    enabled: z.boolean().default(true),
+    /** Fraction of budget at which the status bar warns (TASK-14 `pressure`). */
+    warnThreshold: z.number().min(0).max(1).default(0.8),
+    /** Fraction of budget that triggers the compaction pipeline before overflow (TASK-15). */
+    criticalThreshold: z.number().min(0).max(1).default(0.92),
+})
+    .strict()
+    .refine((c) => c.warnThreshold <= c.criticalThreshold, {
+    message: 'warnThreshold must be ≤ criticalThreshold',
+});
+/** Persistent memory: project `EZC.md` (curated) + append-only auto-memory (learned hints). */
+export const memoryConfigSchema = z
+    .object({
+    enabled: z.boolean().default(true),
+    /** Token cap on auto-memory loaded into context each session (docs §5: first N lines). */
+    maxTokens: z.number().int().positive().default(2000),
+    /** Warn when `EZC.md` exceeds this many tokens — every line costs tokens every turn (docs §6). */
+    ezcMdWarnTokens: z.number().int().positive().default(4000),
+})
+    .strict();
+export const contextConfigSchema = z
+    .object({
+    budgetTokens: z.number().int().positive().optional(),
+    /** Tokens held back from the budget for the model's reply when sizing the prompt (TASK-14). */
+    reserveOutputTokens: z.number().int().nonnegative().default(1024),
+    compaction: compactionConfigSchema.default({}),
+    memory: memoryConfigSchema.default({}),
+})
+    .strict();
+export const sandboxConfigSchema = z
+    .object({
+    enabled: z.boolean().default(true),
+    mode: z.enum(['auto', 'off']).default('auto'),
+    /** Allow outbound network for sandboxed shells. Off by default (docs §4.5). */
+    network: z.boolean().default(false),
+    /** What to do when no sandbox backend is available (D-10): warn and run, or refuse. */
+    fallback: z.enum(['warn', 'refuse']).default('warn'),
+})
+    .strict();
+/** Lifecycle events a hook can subscribe to (TASK-13). */
+export const HOOK_EVENTS = [
+    'PreToolUse',
+    'PostToolUse',
+    'UserPromptSubmit',
+    'SessionStart',
+    'SessionEnd',
+    'Resume',
+    'Stop',
+    'Commit',
+    'Compaction',
+];
+export const hookEventSchema = z.enum(HOOK_EVENTS);
+/** A single command hook: a script run with the event payload on stdin (docs §2.3). */
+export const hookCommandSchema = z
+    .object({
+    type: z.literal('command').default('command'),
+    command: z.string().min(1),
+    /** Kill the hook after this many seconds. Default 60. */
+    timeout: z.number().int().positive().max(600).optional(),
+})
+    .strict();
+/** A matcher group: hooks that fire when `matcher` matches the tool (e.g. `"Write|Edit"`). */
+export const hookMatcherSchema = z
+    .object({
+    matcher: z.string().optional(),
+    hooks: z.array(hookCommandSchema).min(1),
+})
+    .strict();
+/** `event → [matcher groups]`. Keyed by event name; unknown events are ignored by the loader. */
+export const hooksConfigSchema = z.record(z.string(), z.array(hookMatcherSchema)).default({});
+/** Session transcript persistence (TASK-17): append-only JSONL under `~/.ezc/projects/`. */
+export const sessionsConfigSchema = z
+    .object({
+    enabled: z.boolean().default(true),
+    /** Override the storage root. Defaults to `~/.ezc/projects`. */
+    dir: z.string().optional(),
+})
+    .strict();
+/** Subagents / sidechains (TASK-18): delegated work in its own context window. */
+export const subagentsConfigSchema = z
+    .object({
+    /** Max nesting depth; the Agent tool is withheld at the cap so recursion is bounded. */
+    maxDepth: z.number().int().nonnegative().default(2),
+    /** Default model↔tool iteration cap for a subagent turn. */
+    maxIterations: z.number().int().positive().default(12),
+    /** Default token budget for a subagent's own context window (its firewall). */
+    budgetTokens: z.number().int().positive().optional(),
+})
+    .strict();
+export const loggingConfigSchema = z
+    .object({
+    level: z.enum(['debug', 'info', 'warn', 'error']).default('info'),
+    format: z.enum(['pretty', 'json']).default('pretty'),
+})
+    .strict();
+/** TUI appearance, keybindings and accessibility (TASK-21). */
+export const uiConfigSchema = z
+    .object({
+    /** Colour theme. `high-contrast` maximises legibility; pairs colour with icons either way. */
+    theme: z.enum(['dark', 'light', 'high-contrast']).default('dark'),
+    /**
+     * Force screen-reader mode (linearised output, no spinners). When unset, Ink auto-detects via
+     * the `INK_SCREEN_READER` environment variable (D-03).
+     */
+    screenReader: z.boolean().optional(),
+    /**
+     * Keybinding overrides: `action -> key`, merged over the defaults (docs §5). Keys are written
+     * like `ctrl+r`, `shift+tab`, `escape`. Unknown actions are ignored by the loader.
+     */
+    keybindings: z.record(z.string(), z.string()).default({}),
+})
+    .strict();
+/** Always-protected paths. User `protectedPaths` are unioned with these; defaults are never dropped. */
+export const DEFAULT_PROTECTED_PATHS = [
+    '.git/',
+    '.ezc/',
+    '.env',
+    '~/.ssh/',
+    '~/.aws/',
+];
+export const ezcConfigSchema = z
+    .object({
+    $schema: z.string().optional(),
+    model: modelConfigSchema.default({}),
+    permission: permissionConfigSchema.default({}),
+    protectedPaths: z.array(z.string()).default([...DEFAULT_PROTECTED_PATHS]),
+    commands: commandsConfigSchema.default({}),
+    web: webConfigSchema.default({}),
+    context: contextConfigSchema.default({}),
+    sandbox: sandboxConfigSchema.default({}),
+    sessions: sessionsConfigSchema.default({}),
+    subagents: subagentsConfigSchema.default({}),
+    hooks: hooksConfigSchema,
+    logging: loggingConfigSchema.default({}),
+    ui: uiConfigSchema.default({}),
+})
+    .strict();
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAGzE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,SAAS;IACT,aAAa;IACb,MAAM;IACN,MAAM;IACN,SAAS;IACT,QAAQ;CACT,CAAC,CAAC;AAGH,gGAAgG;AAChG,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC;IACpC,wBAAwB;IACxB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC;CAC/C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC;IAC9D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;CAC/D,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,WAAW,EAAE,oBAAoB,CAAC,OAAO,CAAC,SAAS,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,4EAA4E;IAC5E,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,oGAAoG;IACpG,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrC,iGAAiG;IACjG,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,6EAA6E;IAC7E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACpD,0FAA0F;IAC1F,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CAC1D,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,iBAAiB,EAAE;IACrD,OAAO,EAAE,2CAA2C;CACrD,CAAC,CAAC;AAGL,+FAA+F;AAC/F,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,0FAA0F;IAC1F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpD,kGAAkG;IAClG,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC3D,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,+FAA+F;IAC/F,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACjE,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7C,+EAA+E;IAC/E,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,uFAAuF;IACvF,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0DAA0D;AAC1D,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,YAAY;IACZ,aAAa;IACb,kBAAkB;IAClB,cAAc;IACd,YAAY;IACZ,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,YAAY;CACJ,CAAC;AACX,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAGnD,uFAAuF;AACvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,yDAAyD;IACzD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACzD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,8FAA8F;AAC9F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACzC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,iGAAiG;AACjG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAG9F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,gEAAgE;IAChE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,kFAAkF;AAClF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,wFAAwF;IACxF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnD,4DAA4D;IAC5D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,+EAA+E;IAC/E,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CACrD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,8FAA8F;IAC9F,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjE;;;OAGG;IACH,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC;;;OAGG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,wGAAwG;AACxG,MAAM,CAAC,MAAM,uBAAuB,GAAsB;IACxD,OAAO;IACP,OAAO;IACP,MAAM;IACN,SAAS;IACT,SAAS;CACV,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,uBAAuB,CAAC,CAAC;IACzE,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,SAAS,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,KAAK,EAAE,iBAAiB;IACxB,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,EAAE,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC"}

package/package.json

@@ -0,0 +1,38 @@
+{
+  "name": "@diego-vp20/ezc-config",
+  "version": "0.1.0",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "zod": "^3.25.76",
+    "zod-to-json-schema": "^3.24.5",
+    "@diego-vp20/ezc-shared": "0.1.0"
+  },
+  "description": "Configuration schema and layered config loader for ezc.",
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Diego-VP20/ezc.git"
+  },
+  "homepage": "https://github.com/Diego-VP20/ezc#readme",
+  "bugs": {
+    "url": "https://github.com/Diego-VP20/ezc/issues"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "files": [
+    "dist"
+  ]
+}