@enbox/gitd 0.2.0 → 0.3.0

package/dist/esm/profiles/config.js

@@ -0,0 +1,156 @@
+/**
+ * Profile configuration — persistent config at `~/.enbox/config.json`.
+ *
+ * Manages the set of named identity profiles and the default selection.
+ * This module handles reading, writing, and resolving profiles across
+ * multiple selection sources (flag, env, git config, global default).
+ *
+ * Storage layout:
+ *   ~/.enbox/
+ *     config.json               Global config (this module)
+ *     profiles/
+ *       <name>/DATA/AGENT/...   Per-profile Web5 agent stores
+ *
+ * @module
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Base directory for all enbox data.  Override with `ENBOX_HOME`. */
+export function enboxHome() {
+    var _a;
+    return (_a = process.env.ENBOX_HOME) !== null && _a !== void 0 ? _a : join(homedir(), '.enbox');
+}
+/** Path to the global config file. */
+export function configPath() {
+    return join(enboxHome(), 'config.json');
+}
+/** Base directory for all profile agent data. */
+export function profilesDir() {
+    return join(enboxHome(), 'profiles');
+}
+/** Path to a specific profile's agent data directory. */
+export function profileDataPath(name) {
+    return join(profilesDir(), name, 'DATA', 'AGENT');
+}
+// ---------------------------------------------------------------------------
+// Config I/O
+// ---------------------------------------------------------------------------
+/** Read the global config.  Returns a default if the file doesn't exist. */
+export function readConfig() {
+    const path = configPath();
+    if (!existsSync(path)) {
+        return { version: 1, defaultProfile: '', profiles: {} };
+    }
+    const raw = readFileSync(path, 'utf-8');
+    return JSON.parse(raw);
+}
+/** Write the global config atomically. */
+export function writeConfig(config) {
+    const path = configPath();
+    mkdirSync(join(path, '..'), { recursive: true });
+    writeFileSync(path, JSON.stringify(config, null, 2) + '\n', 'utf-8');
+}
+/** Add or update a profile entry in the global config. */
+export function upsertProfile(name, entry) {
+    const config = readConfig();
+    config.profiles[name] = entry;
+    // If this is the first profile, make it the default.
+    if (!config.defaultProfile || Object.keys(config.profiles).length === 1) {
+        config.defaultProfile = name;
+    }
+    writeConfig(config);
+}
+/** Remove a profile entry from the global config. */
+export function removeProfile(name) {
+    var _a;
+    const config = readConfig();
+    delete config.profiles[name];
+    // If we removed the default, pick the first remaining (or clear).
+    if (config.defaultProfile === name) {
+        const remaining = Object.keys(config.profiles);
+        config.defaultProfile = (_a = remaining[0]) !== null && _a !== void 0 ? _a : '';
+    }
+    writeConfig(config);
+}
+/** List all profile names. */
+export function listProfiles() {
+    return Object.keys(readConfig().profiles);
+}
+// ---------------------------------------------------------------------------
+// Profile resolution
+// ---------------------------------------------------------------------------
+/**
+ * Resolve which profile to use.
+ *
+ * Precedence (highest to lowest):
+ *   1. `--profile <name>` flag (passed as `flagProfile`)
+ *   2. `ENBOX_PROFILE` environment variable
+ *   3. `.git/config` → `[enbox] profile = <name>`
+ *   4. `~/.enbox/config.json` → `defaultProfile`
+ *   5. First (and only) profile, if exactly one exists
+ *
+ * Returns `null` when no profile can be resolved (i.e. none exist).
+ */
+export function resolveProfile(flagProfile) {
+    // 1. Explicit flag.
+    if (flagProfile) {
+        return flagProfile;
+    }
+    // 2. Environment variable.
+    const envProfile = process.env.ENBOX_PROFILE;
+    if (envProfile) {
+        return envProfile;
+    }
+    // 3. Per-repo git config.
+    const gitProfile = readGitConfigProfile();
+    if (gitProfile) {
+        return gitProfile;
+    }
+    // 4. Global default.
+    const config = readConfig();
+    if (config.defaultProfile) {
+        return config.defaultProfile;
+    }
+    // 5. Single profile fallback.
+    const names = Object.keys(config.profiles);
+    if (names.length === 1) {
+        return names[0];
+    }
+    return null;
+}
+/**
+ * Read the `[enbox] profile` setting from the current repo's `.git/config`.
+ * Returns `null` if not in a git repo or the setting is absent.
+ */
+function readGitConfigProfile() {
+    var _a;
+    try {
+        const result = spawnSync('git', ['config', '--local', 'enbox.profile'], {
+            stdio: ['pipe', 'pipe', 'pipe'],
+            timeout: 2000,
+        });
+        const value = (_a = result.stdout) === null || _a === void 0 ? void 0 : _a.toString().trim();
+        if (result.status === 0 && value) {
+            return value;
+        }
+    }
+    catch (_b) {
+        // Not in a git repo or git not available.
+    }
+    return null;
+}
+/**
+ * Write the `[enbox] profile` setting to the current repo's `.git/config`.
+ */
+export function setGitConfigProfile(name) {
+    spawnSync('git', ['config', '--local', 'enbox.profile', name], {
+        stdio: ['pipe', 'pipe', 'pipe'],
+        timeout: 2000,
+    });
+}
+//# sourceMappingURL=config.js.map

package/dist/esm/profiles/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../src/profiles/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAE7E,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,sEAAsE;AACtE,MAAM,UAAU,SAAS;;IACvB,OAAO,MAAA,OAAO,CAAC,GAAG,CAAC,UAAU,mCAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,sCAAsC;AACtC,MAAM,UAAU,UAAU;IACxB,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AAC1C,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,WAAW;IACzB,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,UAAU,CAAC,CAAC;AACvC,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AA0BD,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E,4EAA4E;AAC5E,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC1D,CAAC;IACD,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;AACxC,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,WAAW,CAAC,MAAmB;IAC7C,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;AACvE,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAmB;IAC7D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAE9B,qDAAqD;IACrD,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;IAC/B,CAAC;IAED,WAAW,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,aAAa,CAAC,IAAY;;IACxC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAE7B,kEAAkE;IAClE,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,CAAC,cAAc,GAAG,MAAA,SAAS,CAAC,CAAC,CAAC,mCAAI,EAAE,CAAC;IAC7C,CAAC;IAED,WAAW,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,8BAA8B;AAC9B,MAAM,UAAU,YAAY;IAC1B,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,cAAc,CAAC,WAAoB;IACjD,oBAAoB;IACpB,IAAI,WAAW,EAAE,CAAC;QAAC,OAAO,WAAW,CAAC;IAAC,CAAC;IAExC,2BAA2B;IAC3B,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC7C,IAAI,UAAU,EAAE,CAAC;QAAC,OAAO,UAAU,CAAC;IAAC,CAAC;IAEtC,0BAA0B;IAC1B,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;IAC1C,IAAI,UAAU,EAAE,CAAC;QAAC,OAAO,UAAU,CAAC;IAAC,CAAC;IAEtC,qBAAqB;IACrB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAAC,OAAO,MAAM,CAAC,cAAc,CAAC;IAAC,CAAC;IAE5D,8BAA8B;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAE5C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,oBAAoB;;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,CAAC,EAAE;YACtE,KAAK,EAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAClC,OAAO,EAAG,IAAK;SAChB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAA,MAAM,CAAC,MAAM,0CAAE,QAAQ,GAAG,IAAI,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IACrD,CAAC;IAAC,WAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,SAAS,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,IAAI,CAAC,EAAE;QAC7D,KAAK,EAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAClC,OAAO,EAAG,IAAK;KAChB,CAAC,CAAC;AACL,CAAC"}

package/dist/types/cli/agent.d.ts

@@ -6,6 +6,9 @@
  * the existing vault and return a ready-to-use `TypedWeb5` instance for
  * each protocol.
  *
+ * Agent data is stored under the resolved profile path:
+ *   `~/.enbox/profiles/<profile>/DATA/AGENT/`
+ *
  * @module
  */
 import type { TypedWeb5 } from '@enbox/api';
@@ -48,12 +51,32 @@ export type AgentContext = {
     org: TypedWeb5<typeof ForgeOrgProtocol.definition, ForgeOrgSchemaMap>;
     web5: Web5;
 };
+/** Options for connecting to the agent. */
+export type ConnectOptions = {
+    /** Vault password. */
+    password: string;
+    /**
+     * Agent data path.  When provided, the agent stores all data under
+     * this directory instead of the default `DATA/AGENT` relative to CWD.
+     *
+     * The profile system sets this to `~/.enbox/profiles/<name>/DATA/AGENT`.
+     */
+    dataPath?: string;
+    /**
+     * Optional recovery phrase (12-word BIP-39 mnemonic) for initializing
+     * a new vault.  When omitted, a new phrase is generated automatically.
+     */
+    recoveryPhrase?: string;
+};
 /**
  * Connect to the local Web5 agent, initializing on first launch.
  *
- * The agent's persistent data lives under `dataPath` (default:
- * `~/.gitd/agent`).  Sync is disabled — the CLI operates against
- * the local DWN only.
+ * When `dataPath` is provided, the agent's persistent data lives there.
+ * Otherwise, it falls back to `DATA/AGENT` relative to CWD (legacy).
+ *
+ * Sync is disabled — the CLI operates against the local DWN only.
  */
-export declare function connectAgent(password: string): Promise<AgentContext>;
+export declare function connectAgent(options: ConnectOptions): Promise<AgentContext & {
+    recoveryPhrase?: string;
+}>;
 //# sourceMappingURL=agent.d.ts.map

package/dist/types/cli/agent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/cli/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAElC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAM/C,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAG,MAAM,CAAC;IACb,IAAI,EAAG,SAAS,CAAC,OAAO,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC1E,IAAI,EAAG,SAAS,CAAC,OAAO,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC1E,MAAM,EAAG,SAAS,CAAC,OAAO,mBAAmB,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAChF,OAAO,EAAG,SAAS,CAAC,OAAO,oBAAoB,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACnF,EAAE,EAAG,SAAS,CAAC,OAAO,eAAe,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACpE,QAAQ,EAAG,SAAS,CAAC,OAAO,qBAAqB,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACtF,QAAQ,EAAG,SAAS,CAAC,OAAO,qBAAqB,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACtF,MAAM,EAAG,SAAS,CAAC,OAAO,mBAAmB,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAChF,aAAa,EAAG,SAAS,CAAC,OAAO,0BAA0B,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;IACrG,IAAI,EAAG,SAAS,CAAC,OAAO,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC1E,GAAG,EAAG,SAAS,CAAC,OAAO,gBAAgB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACvE,IAAI,EAAG,IAAI,CAAC;CACb,CAAC;AAMF;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA6C1E"}
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../../src/cli/agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,OAAO,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAGlC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAM/C,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG;IACzB,GAAG,EAAG,MAAM,CAAC;IACb,IAAI,EAAG,SAAS,CAAC,OAAO,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC1E,IAAI,EAAG,SAAS,CAAC,OAAO,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC1E,MAAM,EAAG,SAAS,CAAC,OAAO,mBAAmB,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAChF,OAAO,EAAG,SAAS,CAAC,OAAO,oBAAoB,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACnF,EAAE,EAAG,SAAS,CAAC,OAAO,eAAe,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACpE,QAAQ,EAAG,SAAS,CAAC,OAAO,qBAAqB,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACtF,QAAQ,EAAG,SAAS,CAAC,OAAO,qBAAqB,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;IACtF,MAAM,EAAG,SAAS,CAAC,OAAO,mBAAmB,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAC;IAChF,aAAa,EAAG,SAAS,CAAC,OAAO,0BAA0B,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;IACrG,IAAI,EAAG,SAAS,CAAC,OAAO,iBAAiB,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAC;IAC1E,GAAG,EAAG,SAAS,CAAC,OAAO,gBAAgB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACvE,IAAI,EAAG,IAAI,CAAC;CACb,CAAC;AAEF,2CAA2C;AAC3C,MAAM,MAAM,cAAc,GAAG;IAC3B,sBAAsB;IACtB,QAAQ,EAAG,MAAM,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,CAAC,EAAG,MAAM,CAAC;IACnB;;;OAGG;IACH,cAAc,CAAC,EAAG,MAAM,CAAC;CAC1B,CAAC;AAMF;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,YAAY,GAAG;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CA8D/G"}

package/dist/types/cli/commands/auth.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `gitd auth` — identity and profile management.
+ *
+ * Usage:
+ *   gitd auth                          Show current identity info
+ *   gitd auth login                    Create or import an identity
+ *   gitd auth list                     List all profiles
+ *   gitd auth use <profile>            Set profile for current repo
+ *   gitd auth use <profile> --global   Set default profile
+ *   gitd auth export [profile]         Export portable identity
+ *   gitd auth import                   Import from recovery phrase
+ *   gitd auth logout [profile]         Remove a profile
+ *
+ * @module
+ */
+import type { AgentContext } from '../agent.js';
+/**
+ * The auth command can run without a pre-existing AgentContext (for `login`,
+ * `list`), but some sub-commands need one (for `export`).  We accept
+ * ctx as optional and connect lazily when needed.
+ */
+export declare function authCommand(ctx: AgentContext | null, args: string[]): Promise<void>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/types/cli/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAoBhD;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAUzF"}

package/dist/types/git-remote/credential-main.d.ts

@@ -16,7 +16,8 @@
  *     helper = /path/to/git-remote-did-credential
  *
  * Environment:
- *   GITD_PASSWORD — vault password for the local agent
+ *   GITD_PASSWORD    — vault password for the local agent
+ *   ENBOX_PROFILE    — (optional) profile name override
  *
  * @module
  */

package/dist/types/git-remote/credential-main.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-main.d.ts","sourceRoot":"","sources":["../../../src/git-remote/credential-main.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;GAoBG"}
+{"version":3,"file":"credential-main.d.ts","sourceRoot":"","sources":["../../../src/git-remote/credential-main.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/types/profiles/config.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Profile configuration — persistent config at `~/.enbox/config.json`.
+ *
+ * Manages the set of named identity profiles and the default selection.
+ * This module handles reading, writing, and resolving profiles across
+ * multiple selection sources (flag, env, git config, global default).
+ *
+ * Storage layout:
+ *   ~/.enbox/
+ *     config.json               Global config (this module)
+ *     profiles/
+ *       <name>/DATA/AGENT/...   Per-profile Web5 agent stores
+ *
+ * @module
+ */
+/** Base directory for all enbox data.  Override with `ENBOX_HOME`. */
+export declare function enboxHome(): string;
+/** Path to the global config file. */
+export declare function configPath(): string;
+/** Base directory for all profile agent data. */
+export declare function profilesDir(): string;
+/** Path to a specific profile's agent data directory. */
+export declare function profileDataPath(name: string): string;
+/** Metadata about a single profile stored in config.json. */
+export type ProfileEntry = {
+    /** Display name for the profile. */
+    name: string;
+    /** The DID URI associated with this profile. */
+    did: string;
+    /** ISO 8601 timestamp when the profile was created. */
+    createdAt: string;
+};
+/** Top-level config.json shape. */
+export type EnboxConfig = {
+    /** Schema version for forward-compatibility. */
+    version: number;
+    /** Name of the default profile. */
+    defaultProfile: string;
+    /** Map of profile name → metadata. */
+    profiles: Record<string, ProfileEntry>;
+};
+/** Read the global config.  Returns a default if the file doesn't exist. */
+export declare function readConfig(): EnboxConfig;
+/** Write the global config atomically. */
+export declare function writeConfig(config: EnboxConfig): void;
+/** Add or update a profile entry in the global config. */
+export declare function upsertProfile(name: string, entry: ProfileEntry): void;
+/** Remove a profile entry from the global config. */
+export declare function removeProfile(name: string): void;
+/** List all profile names. */
+export declare function listProfiles(): string[];
+/**
+ * Resolve which profile to use.
+ *
+ * Precedence (highest to lowest):
+ *   1. `--profile <name>` flag (passed as `flagProfile`)
+ *   2. `ENBOX_PROFILE` environment variable
+ *   3. `.git/config` → `[enbox] profile = <name>`
+ *   4. `~/.enbox/config.json` → `defaultProfile`
+ *   5. First (and only) profile, if exactly one exists
+ *
+ * Returns `null` when no profile can be resolved (i.e. none exist).
+ */
+export declare function resolveProfile(flagProfile?: string): string | null;
+/**
+ * Write the `[enbox] profile` setting to the current repo's `.git/config`.
+ */
+export declare function setGitConfigProfile(name: string): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/types/profiles/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../src/profiles/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAWH,sEAAsE;AACtE,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,sCAAsC;AACtC,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAED,iDAAiD;AACjD,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED,yDAAyD;AACzD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAMD,6DAA6D;AAC7D,MAAM,MAAM,YAAY,GAAG;IACzB,oCAAoC;IACpC,IAAI,EAAG,MAAM,CAAC;IACd,gDAAgD;IAChD,GAAG,EAAG,MAAM,CAAC;IACb,uDAAuD;IACvD,SAAS,EAAG,MAAM,CAAC;CACpB,CAAC;AAEF,mCAAmC;AACnC,MAAM,MAAM,WAAW,GAAG;IACxB,gDAAgD;IAChD,OAAO,EAAG,MAAM,CAAC;IACjB,mCAAmC;IACnC,cAAc,EAAG,MAAM,CAAC;IACxB,sCAAsC;IACtC,QAAQ,EAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACzC,CAAC;AAMF,4EAA4E;AAC5E,wBAAgB,UAAU,IAAI,WAAW,CAOxC;AAED,0CAA0C;AAC1C,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAIrD;AAED,0DAA0D;AAC1D,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,CAUrE;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAWhD;AAED,8BAA8B;AAC9B,wBAAgB,YAAY,IAAI,MAAM,EAAE,CAEvC;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqBlE;AAoBD;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAKtD"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@enbox/gitd",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Decentralized forge (GitHub alternative) built on DWN protocols",
   "type": "module",
   "main": "./dist/esm/index.js",
@@ -91,6 +91,7 @@
     "bun": ">=1.0.0"
   },
   "dependencies": {
+    "@clack/prompts": "^1.0.1",
     "@enbox/api": "0.3.0",
     "@enbox/crypto": "0.0.6",
     "@enbox/dids": "0.0.7",

package/src/cli/agent.ts

@@ -6,12 +6,16 @@
  * the existing vault and return a ready-to-use `TypedWeb5` instance for
  * each protocol.
  *
+ * Agent data is stored under the resolved profile path:
+ *   `~/.enbox/profiles/<profile>/DATA/AGENT/`
+ *
  * @module
  */
 
 import type { TypedWeb5 } from '@enbox/api';
 
 import { Web5 } from '@enbox/api';
+import { Web5UserAgent } from '@enbox/agent';
 
 import type { ForgeCiSchemaMap } from '../ci.js';
 import type { ForgeIssuesSchemaMap } from '../issues.js';
@@ -58,6 +62,24 @@ export type AgentContext = {
   web5 : Web5;
 };
 
+/** Options for connecting to the agent. */
+export type ConnectOptions = {
+  /** Vault password. */
+  password : string;
+  /**
+   * Agent data path.  When provided, the agent stores all data under
+   * this directory instead of the default `DATA/AGENT` relative to CWD.
+   *
+   * The profile system sets this to `~/.enbox/profiles/<name>/DATA/AGENT`.
+   */
+  dataPath? : string;
+  /**
+   * Optional recovery phrase (12-word BIP-39 mnemonic) for initializing
+   * a new vault.  When omitted, a new phrase is generated automatically.
+   */
+  recoveryPhrase? : string;
+};
+
 // ---------------------------------------------------------------------------
 // Agent bootstrap
 // ---------------------------------------------------------------------------
@@ -65,24 +87,85 @@ export type AgentContext = {
 /**
  * Connect to the local Web5 agent, initializing on first launch.
  *
- * The agent's persistent data lives under `dataPath` (default:
- * `~/.gitd/agent`).  Sync is disabled — the CLI operates against
- * the local DWN only.
+ * When `dataPath` is provided, the agent's persistent data lives there.
+ * Otherwise, it falls back to `DATA/AGENT` relative to CWD (legacy).
+ *
+ * Sync is disabled — the CLI operates against the local DWN only.
  */
-export async function connectAgent(password: string): Promise<AgentContext> {
-  const { web5, did, recoveryPhrase } = await Web5.connect({
-    password,
-    sync: 'off',
-  });
+export async function connectAgent(options: ConnectOptions): Promise<AgentContext & { recoveryPhrase?: string }> {
+  const { password, dataPath, recoveryPhrase: inputPhrase } = options;
+
+  let agent: Web5UserAgent;
+  let recoveryPhrase: string | undefined;
+
+  if (dataPath) {
+    // Profile-based: create agent with explicit data path.
+    agent = await Web5UserAgent.create({ dataPath });
+
+    if (await agent.firstLaunch()) {
+      recoveryPhrase = await agent.initialize({
+        password,
+        recoveryPhrase : inputPhrase,
+        dwnEndpoints   : ['https://enbox-dwn.fly.dev'],
+      });
+    }
+    await agent.start({ password });
+
+    // Ensure at least one identity exists.
+    const identities = await agent.identity.list();
+    let identity = identities[0];
+    if (!identity) {
+      identity = await agent.identity.create({
+        didMethod  : 'dht',
+        metadata   : { name: 'Default' },
+        didOptions : {
+          services: [{
+            id              : 'dwn',
+            type            : 'DecentralizedWebNode',
+            serviceEndpoint : ['https://enbox-dwn.fly.dev'],
+            enc             : '#enc',
+            sig             : '#sig',
+          }],
+          verificationMethods: [
+            { algorithm: 'Ed25519', id: 'sig', purposes: ['assertionMethod', 'authentication'] },
+            { algorithm: 'X25519', id: 'enc', purposes: ['keyAgreement'] },
+          ],
+        },
+      });
+    }
+
+    const result = await Web5.connect({
+      agent,
+      connectedDid : identity.did.uri,
+      sync         : 'off',
+    });
 
-  if (recoveryPhrase) {
+    return bindProtocols(result.web5, result.did, recoveryPhrase);
+  }
+
+  // Legacy: let Web5.connect() manage the agent (uses CWD-relative path).
+  const result = await Web5.connect({ password, sync: 'off' });
+
+  if (result.recoveryPhrase) {
     console.log('');
     console.log('  Recovery phrase (save this — it cannot be shown again):');
-    console.log(`  ${recoveryPhrase}`);
+    console.log(`  ${result.recoveryPhrase}`);
     console.log('');
   }
 
-  // Bind typed protocol handles.
+  return bindProtocols(result.web5, result.did, result.recoveryPhrase);
+}
+
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+
+/** Bind typed protocol handles and configure all protocols. */
+async function bindProtocols(
+  web5: Web5,
+  did: string,
+  recoveryPhrase?: string,
+): Promise<AgentContext & { recoveryPhrase?: string }> {
   const repo = web5.using(ForgeRepoProtocol);
   const refs = web5.using(ForgeRefsProtocol);
   const issues = web5.using(ForgeIssuesProtocol);
@@ -113,5 +196,6 @@ export async function connectAgent(password: string): Promise<AgentContext> {
   return {
     did, repo, refs, issues, patches, ci, releases,
     registry, social, notifications, wiki, org, web5,
+    recoveryPhrase,
   };
 }