@getrift/rift 0.0.0 → 0.1.0-beta.0

package/dist/src/cli/token.d.ts

@@ -0,0 +1,37 @@
+/**
+ * CLI stub: `rift token issue <config-path>`
+ *
+ * Generates a cryptographically random bearer token, writes it to the
+ * macOS Keychain as the next version (AUTH_TOKEN_v{N+1}), and sends
+ * SIGHUP to the running daemon so it picks up the new token without
+ * a full restart.
+ *
+ * The config path is required so the CLI can resolve the same
+ * `data_dir` the daemon uses for its PID file.
+ *
+ * Full CLI implementation (subcommands, help text) deferred to a
+ * later slice.
+ */
+import { type KeychainOps } from "../auth/keychain.js";
+export interface SignalResult {
+    signaled: boolean;
+    warning?: string;
+}
+/**
+ * Attempt to send SIGHUP to the daemon via its PID file.
+ * Returns a result describing what happened — never throws.
+ */
+export declare function signalDaemon(pidPath: string): SignalResult;
+/**
+ * Issue a new bearer token, write it to the Keychain, and signal the
+ * running daemon.
+ *
+ * @param configPath  Path to the daemon's config.json (used to resolve data_dir for the PID file).
+ * @param keychain    Keychain backend (defaults to macOS Keychain; injectable for tests).
+ */
+export declare function issueToken(configPath: string, keychain?: KeychainOps): Promise<{
+    version: number;
+    token: string;
+    signal: SignalResult;
+}>;
+//# sourceMappingURL=token.d.ts.map

package/dist/src/cli/token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../src/cli/token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGpE,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,YAAY,CAuC1D;AAED;;;;;;GAMG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,QAAQ,GAAE,WAAyB,GAClC,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC,CAanE"}

package/dist/src/cli/token.js

@@ -0,0 +1,105 @@
+/**
+ * CLI stub: `rift token issue <config-path>`
+ *
+ * Generates a cryptographically random bearer token, writes it to the
+ * macOS Keychain as the next version (AUTH_TOKEN_v{N+1}), and sends
+ * SIGHUP to the running daemon so it picks up the new token without
+ * a full restart.
+ *
+ * The config path is required so the CLI can resolve the same
+ * `data_dir` the daemon uses for its PID file.
+ *
+ * Full CLI implementation (subcommands, help text) deferred to a
+ * later slice.
+ */
+import crypto from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { macKeychain } from "../auth/keychain.js";
+import { loadConfig } from "../config/loader.js";
+/**
+ * Attempt to send SIGHUP to the daemon via its PID file.
+ * Returns a result describing what happened — never throws.
+ */
+export function signalDaemon(pidPath) {
+    let raw;
+    try {
+        raw = fs.readFileSync(pidPath, "utf-8").trim();
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === "ENOENT") {
+            return {
+                signaled: false,
+                warning: `PID file not found at ${pidPath}. Daemon may not be running.`,
+            };
+        }
+        return {
+            signaled: false,
+            warning: `Cannot read PID file at ${pidPath}: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    const pid = Number(raw);
+    if (!Number.isFinite(pid) || pid <= 0) {
+        return { signaled: false, warning: `Invalid PID file at ${pidPath}.` };
+    }
+    try {
+        process.kill(pid, "SIGHUP");
+        return { signaled: true };
+    }
+    catch (err) {
+        const code = err.code;
+        if (code === "ESRCH") {
+            return {
+                signaled: false,
+                warning: `Daemon not running (stale PID ${pid}). Remove ${pidPath} or restart daemon.`,
+            };
+        }
+        return {
+            signaled: false,
+            warning: `Failed to signal daemon (PID ${pid}): ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+}
+/**
+ * Issue a new bearer token, write it to the Keychain, and signal the
+ * running daemon.
+ *
+ * @param configPath  Path to the daemon's config.json (used to resolve data_dir for the PID file).
+ * @param keychain    Keychain backend (defaults to macOS Keychain; injectable for tests).
+ */
+export async function issueToken(configPath, keychain = macKeychain) {
+    const config = loadConfig(configPath);
+    const currentVersion = await keychain.findLatestVersion();
+    const newVersion = currentVersion + 1;
+    const token = crypto.randomBytes(32).toString("base64url");
+    await keychain.write(newVersion, token);
+    const pidPath = path.join(config.data_paths.data_dir, "rift.pid");
+    const signal = signalDaemon(pidPath);
+    return { version: newVersion, token, signal };
+}
+// --- Standalone execution ---
+const __filename = fileURLToPath(import.meta.url);
+if (process.argv[1] === __filename) {
+    const configPath = process.argv[2];
+    if (!configPath) {
+        process.stderr.write("Usage: rift token issue <config-path>\n");
+        process.exit(1);
+    }
+    issueToken(configPath)
+        .then(({ version, token, signal }) => {
+        process.stdout.write(`v${version}: ${token}\n`);
+        if (signal.signaled) {
+            process.stderr.write("SIGHUP sent to daemon.\n");
+        }
+        else {
+            process.stderr.write(`Warning: ${signal.warning} Token written to Keychain; restart daemon or send SIGHUP to activate.\n`);
+        }
+    })
+        .catch((err) => {
+        process.stderr.write(`Error: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=token.js.map

package/dist/src/cli/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/cli/token.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAoB,MAAM,qBAAqB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAOjD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,GAAI,GAAyB,CAAC,IAAI,CAAC;QAC7C,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,yBAAyB,OAAO,8BAA8B;aACxE,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,2BAA2B,OAAO,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACnG,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,uBAAuB,OAAO,GAAG,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,IAAI,GAAI,GAAyB,CAAC,IAAI,CAAC;QAC7C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,iCAAiC,GAAG,aAAa,OAAO,qBAAqB;aACvF,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,gCAAgC,GAAG,MAAM,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACrG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAAkB,EAClB,WAAwB,WAAW;IAEnC,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAEtC,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IAC1D,MAAM,UAAU,GAAG,cAAc,GAAG,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAE3D,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAExC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAErC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,+BAA+B;AAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,UAAU,CAAC,UAAU,CAAC;SACnB,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE;QACnC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACnD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,YAAY,MAAM,CAAC,OAAO,0EAA0E,CACrG,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC/D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/src/cli/uninstall/mcp-uninstall.d.ts

@@ -0,0 +1,33 @@
+import { type ClientId } from "../mcp-config-writers/index.js";
+export interface UninstallMcpResult {
+    client: ClientId;
+    /** "removed" — found and removed; "absent" — no rift entry; "missing" — config file didn't exist. */
+    status: "removed" | "absent" | "missing" | "skipped" | "failed";
+    /** Opaque backup ID, present only when a file was rewritten. */
+    backupId?: string;
+    /** Internal-only error message (operator log), never printed to friend. */
+    error?: string;
+}
+export interface UninstallMcpOpts {
+    /** Override $HOME (test only). */
+    homeDir?: string;
+    /** Stable timestamp source (test only). */
+    now?: () => Date;
+    /** Restrict to a subset of clients; default: all known clients. */
+    clients?: readonly ClientId[];
+}
+export declare function uninstallMcpEntries(opts?: UninstallMcpOpts): UninstallMcpResult[];
+/**
+ * Returns the new file contents (rift block + any legacy stragglers
+ * removed), `null` if the JSON is unparseable, or the input string
+ * unchanged if there was nothing to remove.
+ */
+export declare function removeRiftFromJson(raw: string): string | null;
+/**
+ * Drops `[mcp_servers.rift]` and any legacy server section from a Codex
+ * TOML config. Line-based: matches the install writer's approach so we
+ * don't depend on a TOML parser. Returns the input string unchanged when
+ * nothing matched.
+ */
+export declare function removeRiftFromToml(raw: string): string;
+//# sourceMappingURL=mcp-uninstall.d.ts.map

package/dist/src/cli/uninstall/mcp-uninstall.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-uninstall.d.ts","sourceRoot":"","sources":["../../../../src/cli/uninstall/mcp-uninstall.ts"],"names":[],"mappings":"AAcA,OAAO,EAGL,KAAK,QAAQ,EACd,MAAM,gCAAgC,CAAC;AAGxC,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,QAAQ,CAAC;IACjB,qGAAqG;IACrG,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IAChE,gEAAgE;IAChE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,mEAAmE;IACnE,OAAO,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;CAC/B;AAID,wBAAgB,mBAAmB,CACjC,IAAI,GAAE,gBAAqB,GAC1B,kBAAkB,EAAE,CAWtB;AAmDD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CA0B7D;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA4BtD"}

package/dist/src/cli/uninstall/mcp-uninstall.js

@@ -0,0 +1,181 @@
+/**
+ * MCP-config reverse-merge for `rift uninstall`.
+ *
+ * For each known client config: read the file, remove the `rift` server
+ * entry (and any straggling legacy entries), and write the result back
+ * atomically. The original file is backed up to `<file>.bak.<iso>` and
+ * surfaced to the friend by opaque ID only.
+ *
+ * Mirrors the install writers' contract: atomic write, redacted output,
+ * idempotent on rerun. Path strings are operator-internal — they never
+ * appear in friend-visible output.
+ */
+import fs from "node:fs";
+import { ALL_CLIENTS, defaultClientConfigPath, } from "../mcp-config-writers/index.js";
+import { isLegacyServerName } from "../mcp-config-writers/redact.js";
+const RIFT_KEY = "rift";
+export function uninstallMcpEntries(opts = {}) {
+    const homeDir = opts.homeDir ?? process.env["HOME"] ?? "";
+    const now = (opts.now ?? (() => new Date()))();
+    const tsToken = now.toISOString().replace(/[:.]/g, "-");
+    const clients = opts.clients ?? ALL_CLIENTS;
+    const results = [];
+    for (const client of clients) {
+        results.push(removeFromOne(client, homeDir, tsToken));
+    }
+    return results;
+}
+function removeFromOne(client, homeDir, tsToken) {
+    const configPath = defaultClientConfigPath(client, homeDir);
+    if (!fs.existsSync(configPath)) {
+        return { client, status: "missing" };
+    }
+    let raw;
+    try {
+        raw = fs.readFileSync(configPath, "utf8");
+    }
+    catch (err) {
+        return {
+            client,
+            status: "failed",
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+    const next = client === "codex" ? removeRiftFromToml(raw) : removeRiftFromJson(raw);
+    if (next === null) {
+        return {
+            client,
+            status: "skipped",
+            error: "config file unparseable; left untouched",
+        };
+    }
+    if (next === raw) {
+        return { client, status: "absent" };
+    }
+    const backupPath = `${configPath}.bak.${tsToken}`;
+    const backupId = `rift-uninstall-${client}-${tsToken}`;
+    try {
+        fs.copyFileSync(configPath, backupPath);
+        const tmp = `${configPath}.tmp.${tsToken}`;
+        fs.writeFileSync(tmp, next, "utf8");
+        fs.renameSync(tmp, configPath);
+    }
+    catch (err) {
+        return {
+            client,
+            status: "failed",
+            error: err instanceof Error ? err.message : String(err),
+        };
+    }
+    return { client, status: "removed", backupId };
+}
+/**
+ * Returns the new file contents (rift block + any legacy stragglers
+ * removed), `null` if the JSON is unparseable, or the input string
+ * unchanged if there was nothing to remove.
+ */
+export function removeRiftFromJson(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+        return raw;
+    }
+    const obj = parsed;
+    const servers = obj["mcpServers"];
+    if (!servers || typeof servers !== "object" || Array.isArray(servers)) {
+        return raw;
+    }
+    const next = { ...servers };
+    let changed = false;
+    for (const key of Object.keys(next)) {
+        if (key === RIFT_KEY || isLegacyServerName(key)) {
+            delete next[key];
+            changed = true;
+        }
+    }
+    if (!changed)
+        return raw;
+    obj["mcpServers"] = next;
+    return JSON.stringify(obj, null, 2) + "\n";
+}
+/**
+ * Drops `[mcp_servers.rift]` and any legacy server section from a Codex
+ * TOML config. Line-based: matches the install writer's approach so we
+ * don't depend on a TOML parser. Returns the input string unchanged when
+ * nothing matched.
+ */
+export function removeRiftFromToml(raw) {
+    const lines = raw.split("\n");
+    const out = [];
+    let skipping = false;
+    for (const line of lines) {
+        const sectionMatch = /^\s*\[\s*([^\]]+?)\s*\]\s*(?:#.*)?$/.exec(line);
+        if (sectionMatch) {
+            const segments = parseTomlKey(sectionMatch[1]);
+            if (segments && segments.length === 2 && segments[0] === "mcp_servers") {
+                const name = segments[1];
+                if (name === RIFT_KEY || isLegacyServerName(name)) {
+                    skipping = true;
+                    continue;
+                }
+            }
+            skipping = false;
+        }
+        if (!skipping)
+            out.push(line);
+    }
+    // Trim leading blank lines that were stranded by removed sections.
+    while (out.length > 0 && out[0] === "")
+        out.shift();
+    // Collapse runs of 2+ blank lines that may have appeared between sections.
+    const collapsed = [];
+    for (const line of out) {
+        if (line === "" && collapsed[collapsed.length - 1] === "")
+            continue;
+        collapsed.push(line);
+    }
+    return collapsed.join("\n");
+}
+/**
+ * Parse a dotted TOML section key into its segments (quotes stripped).
+ * Returns `null` if any segment looks malformed; the caller treats that
+ * as "leave the section alone."
+ */
+function parseTomlKey(raw) {
+    const parts = [];
+    let i = 0;
+    while (i < raw.length) {
+        while (i < raw.length && raw[i] === " ")
+            i++;
+        if (i >= raw.length)
+            break;
+        if (raw[i] === '"') {
+            const end = raw.indexOf('"', i + 1);
+            if (end < 0)
+                return null;
+            parts.push(raw.slice(i + 1, end));
+            i = end + 1;
+        }
+        else {
+            let j = i;
+            while (j < raw.length && raw[j] !== "." && raw[j] !== " ")
+                j++;
+            parts.push(raw.slice(i, j));
+            i = j;
+        }
+        while (i < raw.length && raw[i] === " ")
+            i++;
+        if (i < raw.length) {
+            if (raw[i] !== ".")
+                return null;
+            i++;
+        }
+    }
+    return parts.filter((p) => p.length > 0);
+}
+//# sourceMappingURL=mcp-uninstall.js.map

package/dist/src/cli/uninstall/mcp-uninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-uninstall.js","sourceRoot":"","sources":["../../../../src/cli/uninstall/mcp-uninstall.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EACL,WAAW,EACX,uBAAuB,GAExB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAqBrE,MAAM,QAAQ,GAAG,MAAM,CAAC;AAExB,MAAM,UAAU,mBAAmB,CACjC,OAAyB,EAAE;IAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,WAAW,CAAC;IAE5C,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CACpB,MAAgB,EAChB,OAAe,EACf,OAAe;IAEf,MAAM,UAAU,GAAG,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM;YACN,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACpF,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,MAAM;YACN,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,yCAAyC;SACjD,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,UAAU,QAAQ,OAAO,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,kBAAkB,MAAM,IAAI,OAAO,EAAE,CAAC;IACvD,IAAI,CAAC;QACH,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,GAAG,UAAU,QAAQ,OAAO,EAAE,CAAC;QAC3C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACpC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM;YACN,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3E,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,MAAiC,CAAC;IAC9C,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IAClC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,GAAI,OAAmC,EAAE,CAAC;IACzD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,GAAG,KAAK,QAAQ,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAChD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC;IACzB,GAAG,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;IACzB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,CAAC;YAChD,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;gBACvE,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;gBAC1B,IAAI,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,QAAQ,GAAG,IAAI,CAAC;oBAChB,SAAS;gBACX,CAAC;YACH,CAAC;YACD,QAAQ,GAAG,KAAK,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,mEAAmE;IACnE,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACpD,2EAA2E;IAC3E,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,EAAE,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,SAAS;QACpE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM;YAAE,MAAM;QAC3B,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACnB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACpC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YAClC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QACd,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,CAAC,EAAE,CAAC;YAC/D,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5B,CAAC,GAAG,CAAC,CAAC;QACR,CAAC;QACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;YACnB,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAChC,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/src/config/loader.d.ts

@@ -0,0 +1,9 @@
+import { type Config } from "./schema.js";
+/**
+ * Load, validate, freeze config. Throws on invalid config.
+ *
+ * Relative `data_dir` / `jobs_dir` are resolved against the directory
+ * containing the config file — not `process.cwd()`.
+ */
+export declare function loadConfig(configPath: string): Config;
+//# sourceMappingURL=loader.d.ts.map

package/dist/src/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../../src/config/loader.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AAkCxD;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAkBrD"}

package/dist/src/config/loader.js

@@ -0,0 +1,73 @@
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { ConfigSchema } from "./schema.js";
+function deepFreeze(obj) {
+    Object.freeze(obj);
+    for (const value of Object.values(obj)) {
+        if (value !== null && typeof value === "object" && !Object.isFrozen(value)) {
+            deepFreeze(value);
+        }
+    }
+    return obj;
+}
+/**
+ * Runtime directories that must exist before the daemon operates.
+ * Paths are resolved relative to the directory containing the config file.
+ */
+function ensureDirectories(dataDir, jobsDir) {
+    const dirs = [
+        dataDir,
+        path.join(dataDir, "quarantine"),
+        path.join(dataDir, "raw"),
+        path.join(dataDir, "raw", "conversations"),
+        path.join(dataDir, "raw", "conversations", "inbox"),
+        path.join(dataDir, "raw", "digests"),
+        path.join(dataDir, "inbox"),
+        path.join(dataDir, "observability"),
+        path.join(dataDir, "triage-results"),
+        jobsDir,
+    ];
+    for (const dir of dirs) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+}
+/**
+ * Load, validate, freeze config. Throws on invalid config.
+ *
+ * Relative `data_dir` / `jobs_dir` are resolved against the directory
+ * containing the config file — not `process.cwd()`.
+ */
+export function loadConfig(configPath) {
+    const absoluteConfigPath = path.resolve(configPath);
+    const configDir = path.dirname(absoluteConfigPath);
+    const raw = fs.readFileSync(absoluteConfigPath, "utf-8");
+    const json = JSON.parse(raw);
+    const parsed = ConfigSchema.parse(json);
+    // Normalize data_paths to absolute so the returned config exposes the
+    // same resolved paths used to create directories.
+    const resolvedDataDir = path.resolve(configDir, parsed.data_paths.data_dir);
+    const resolvedJobsDir = path.resolve(configDir, parsed.data_paths.jobs_dir);
+    parsed.data_paths.data_dir = resolvedDataDir;
+    parsed.data_paths.jobs_dir = resolvedJobsDir;
+    ensureDirectories(resolvedDataDir, resolvedJobsDir);
+    return deepFreeze(parsed);
+}
+// --- Standalone execution ---
+const __filename = fileURLToPath(import.meta.url);
+if (process.argv[1] === __filename) {
+    const configPath = process.argv[2];
+    if (!configPath) {
+        process.stderr.write("Usage: tsx src/config/loader.ts <config-path>\n");
+        process.exit(1);
+    }
+    try {
+        const config = loadConfig(configPath);
+        process.stdout.write(JSON.stringify(config, null, 2) + "\n");
+    }
+    catch (err) {
+        process.stderr.write(`Config error: ${err instanceof Error ? err.message : String(err)}\n`);
+        process.exit(1);
+    }
+}
+//# sourceMappingURL=loader.js.map

package/dist/src/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/config/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAe,MAAM,aAAa,CAAC;AAExD,SAAS,UAAU,CAAmB,GAAM;IAC1C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACvC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3E,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,OAAe,EAAE,OAAe;IACzD,MAAM,IAAI,GAAG;QACX,OAAO;QACP,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC;QACpC,OAAO;KACR,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAEnD,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAExC,sEAAsE;IACtE,kDAAkD;IAClD,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5E,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5E,MAAM,CAAC,UAAU,CAAC,QAAQ,GAAG,eAAe,CAAC;IAC7C,MAAM,CAAC,UAAU,CAAC,QAAQ,GAAG,eAAe,CAAC;IAE7C,iBAAiB,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAEpD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,+BAA+B;AAC/B,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EAAE,CAAC;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CACtE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}