@hilbras/omninode 2.0.0-alpha.15 → 2.0.0-alpha.17

package/dist/cli/index.js

@@ -23,7 +23,7 @@ import { realpathSync } from "fs";
 import { Command } from "commander";
 
 // src/version.ts
-var OMNINODE_VERSION = "2.0.0-alpha.15";
+var OMNINODE_VERSION = "2.0.0-alpha.17";
 
 // src/cli/exit-codes.ts
 var EXIT = {
@@ -147,6 +147,10 @@ var projectConfigSchema = z.object({
   }).strict().optional()
 }).strict();
 var appConfigSchema = z.object({
+  /** Active profile; overlays live under `profiles` (§16). */
+  profile: z.string().min(1).optional(),
+  /** Named partial overlays, e.g. development/production/testing. */
+  profiles: z.record(z.unknown()).optional(),
   project: projectConfigSchema,
   logging: z.object({
     level: z.enum(["debug", "info", "warn", "error"]),
@@ -187,6 +191,85 @@ ${lines}
 OmniNode never stores credentials in configuration. Replace each value with an environment-variable reference, e.g. api_key_env_var: MY_API_KEY.`;
 }
 
+// src/config/profiles.ts
+import { homedir } from "os";
+import path from "path";
+function userConfigPath(env = process.env) {
+  if (env.OMNINODE_USER_CONFIG) return env.OMNINODE_USER_CONFIG;
+  const home = env.HOME ?? homedir();
+  return path.join(home, ".omninode", "config.yaml");
+}
+function resolveProfile(input, env) {
+  if (env.OMNINODE_PROFILE) return env.OMNINODE_PROFILE;
+  if (typeof input.profile === "string" && input.profile.length > 0) return input.profile;
+  return "default";
+}
+function mergeConfig(base, overlay) {
+  if (!isPlainObject(base) || !isPlainObject(overlay)) {
+    return overlay === void 0 ? base : overlay;
+  }
+  const result = { ...base };
+  for (const [key, value] of Object.entries(overlay)) {
+    const existing = result[key];
+    if (Array.isArray(value)) {
+      result[key] = value;
+    } else if (isPlainObject(value) && isPlainObject(existing)) {
+      result[key] = mergeConfig(existing, value);
+    } else {
+      result[key] = value;
+    }
+  }
+  return result;
+}
+function isPlainObject(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function asObject(value) {
+  return isPlainObject(value) ? value : {};
+}
+function applyEnvOverrides(input, env) {
+  const applied = [];
+  const config = mergeConfig(input, {});
+  if (env.OMNINODE_LOG_LEVEL) {
+    config.logging = { ...asObject(config.logging), level: env.OMNINODE_LOG_LEVEL };
+    applied.push("OMNINODE_LOG_LEVEL");
+  }
+  if (env.OMNINODE_LOG_FORMAT) {
+    config.logging = { ...asObject(config.logging), format: env.OMNINODE_LOG_FORMAT };
+    applied.push("OMNINODE_LOG_FORMAT");
+  }
+  const memoryProvider = env.OMNINODE_MEMORY_PROVIDER;
+  const memoryRequired = env.OMNINODE_MEMORY_REQUIRED;
+  if (memoryProvider || memoryRequired) {
+    const project = asObject(config.project);
+    config.project = {
+      ...project,
+      memory: {
+        ...asObject(project.memory ?? { provider: "local" }),
+        ...memoryProvider ? { provider: memoryProvider } : {},
+        ...memoryRequired ? { required: memoryRequired !== "false" } : {}
+      }
+    };
+    if (memoryProvider) applied.push("OMNINODE_MEMORY_PROVIDER");
+    if (memoryRequired) applied.push("OMNINODE_MEMORY_REQUIRED");
+  }
+  return { config, applied };
+}
+function applyDefaults(input) {
+  const applied = [];
+  const config = mergeConfig(input, {});
+  const logging = asObject(config.logging);
+  if (logging.level === void 0) {
+    config.logging = { ...logging, level: "info" };
+    applied.push("logging.level");
+  }
+  if (logging.format === void 0) {
+    config.logging = { ...asObject(config.logging), format: "text" };
+    applied.push("logging.format");
+  }
+  return { config, applied };
+}
+
 // src/config/loader.ts
 import { existsSync, readFileSync } from "fs";
 import { parse as parseYaml } from "yaml";
@@ -213,38 +296,129 @@ function expandEnvRefs(text, env, source = "config") {
     }
   );
 }
-function loadConfig(options = {}) {
+function loadConfigDetailed(options = {}) {
   const env = options.env ?? process.env;
-  const path = options.path ?? (options.directory ? findConfigFile(options.directory) : findConfigFile());
-  if (!path) {
+  const explicitPath = options.path;
+  let input = {};
+  let projectFile;
+  let userFile;
+  if (!explicitPath) {
+    const candidate = userConfigPath(env);
+    if (existsSync(candidate)) {
+      input = mergeConfig(input, readConfigDocument(candidate, env));
+      userFile = candidate;
+    }
+  }
+  const resolvedProject = explicitPath ?? (options.directory ? findConfigFile(options.directory) : findConfigFile());
+  if (resolvedProject) {
+    input = mergeConfig(input, readConfigDocument(resolvedProject, env));
+    projectFile = resolvedProject;
+  }
+  if (!projectFile && !userFile) {
     throw new ConfigError(
       "CONFIG_NOT_FOUND",
       "No omninode.yaml found. Run `omninode init` to create one, or pass an explicit path."
     );
   }
-  const raw = readFileSync(path, "utf8");
+  const profile = options.profile ?? resolveProfile(input, env);
+  const overlay = input.profiles?.[profile];
+  if (overlay !== void 0) {
+    const { profiles: _drop, ...base } = input;
+    input = mergeConfig(base, overlay);
+  } else if (profile !== "default" && profile !== "") {
+    throw new ConfigError(
+      "CONFIG_INVALID",
+      `Profile "${profile}" is not defined in this configuration (known: ${Object.keys(input.profiles ?? {}).join(", ") || "none"}).`
+    );
+  }
+  const withEnv = applyEnvOverrides(input, env);
+  const withDefaults = applyDefaults(withEnv.config);
+  const parsed = appConfigSchema.safeParse(withDefaults.config);
+  if (!parsed.success) {
+    const issues = parsed.error.issues.map((issue) => {
+      const location = issue.path.join(".") || "(root)";
+      return `${location}: ${issue.message}`;
+    });
+    throw new ConfigError(
+      "CONFIG_INVALID",
+      `Invalid configuration:
+  ${issues.join("\n  ")}`,
+      { details: { issues } }
+    );
+  }
+  assertUniqueNames(parsed.data);
+  return {
+    config: toAppConfig(parsed.data),
+    sources: {
+      ...projectFile !== void 0 ? { projectFile } : {},
+      ...userFile !== void 0 ? { userFile } : {},
+      profile,
+      envOverrides: withEnv.applied,
+      defaults: withDefaults.applied
+    }
+  };
+}
+function assertUniqueNames(data) {
+  const groups = [
+    ["provider", data.project.providers.map((p) => p.name)],
+    ["agent", data.project.agents.map((a) => a.name)],
+    ["role", data.project.roles.map((r) => r.id)],
+    ["pipeline", data.project.pipelines.map((p) => p.id)]
+  ];
+  for (const [kind, names] of groups) {
+    const seen = /* @__PURE__ */ new Set();
+    for (const name of names) {
+      if (seen.has(name)) {
+        throw new ConfigError(
+          "CONFIG_INVALID",
+          `Duplicate ${kind} name "${name}" \u2014 every ${kind} must have a unique name.`
+        );
+      }
+      seen.add(name);
+    }
+  }
+}
+function readConfigDocument(path2, optionsEnv) {
+  const raw = readFileSync(path2, "utf8");
   const secretFindings = scanForInlineSecrets(raw);
   if (secretFindings.length > 0) {
-    throw new ConfigError("CONFIG_INVALID", describeSecretFindings(path, secretFindings));
+    throw new ConfigError("CONFIG_INVALID", describeSecretFindings(path2, secretFindings));
   }
-  const expanded = expandEnvRefs(raw, env, path);
-  let data;
+  const expanded = expandEnvRefs(raw, optionsEnv, path2);
   try {
-    data = parseYaml(expanded);
+    return parseYaml(expanded);
   } catch (error) {
-    throw new ConfigError("CONFIG_INVALID", `Failed to parse ${path}.`, { cause: error });
+    throw new ConfigError("CONFIG_INVALID", `Failed to parse ${path2}.`, { cause: error });
   }
-  const parsed = appConfigSchema.safeParse(data);
-  if (!parsed.success) {
-    const issues = parsed.error.issues.map((issue) => {
-      const location = issue.path.length > 0 ? issue.path.join(".") : "(root)";
-      return `${location}: ${issue.message}`;
-    });
-    throw new ConfigError("CONFIG_INVALID", `Invalid configuration in ${path}.`, {
-      details: { issues }
-    });
+}
+function configDiagnostics(config) {
+  const notes = [];
+  for (const provider of config.project.providers) {
+    if (!provider.apiKeyEnvVar && provider.baseUrl.startsWith("https://")) {
+      notes.push(
+        `Provider "${provider.name}": API key reference is missing \u2014 add api_key_env_var: <ENV_VAR> unless this endpoint is intentionally keyless.`
+      );
+    }
   }
-  return toAppConfig(parsed.data);
+  for (const agent of config.project.agents) {
+    if (!agent.command && agent.integration !== "custom") {
+      notes.push(`Agent "${agent.name}": no command configured \u2014 the process adapter needs one.`);
+    }
+    if (agent.allowExternalCwd) {
+      notes.push(`Agent "${agent.name}": may run outside the project root (allow_external_cwd).`);
+    }
+  }
+  for (const pipeline of config.project.pipelines) {
+    const ids = new Set(pipeline.steps.map((s) => s.id));
+    for (const step of pipeline.steps) {
+      for (const dep of step.dependsOn ?? []) {
+        if (!ids.has(dep)) {
+          notes.push(`Pipeline "${pipeline.id}": step "${step.id}" depends on unknown step "${dep}".`);
+        }
+      }
+    }
+  }
+  return notes;
 }
 function toAppConfig(yaml) {
   return {
@@ -372,6 +546,18 @@ function defaultProjectConfigYaml(projectName = "My Project") {
 `;
 }
 
+// src/cli/options.ts
+var cliConfigOptions = {};
+function loadProjectConfig() {
+  return loadConfigDetailed({
+    ...cliConfigOptions.path !== void 0 ? { path: cliConfigOptions.path } : {},
+    ...cliConfigOptions.profile !== void 0 ? { profile: cliConfigOptions.profile } : {}
+  }).config;
+}
+function activeConfigPath() {
+  return cliConfigOptions.path ?? findConfigFile();
+}
+
 // src/cli/commands/init.ts
 import { existsSync as existsSync2, writeFileSync } from "fs";
 async function runInit(options) {
@@ -459,7 +645,7 @@ function truncate(text, max) {
   return text.length > max ? `${text.slice(0, max - 1)}\u2026` : text;
 }
 function appendToConfigList(listKey, item) {
-  const configPath = findConfigFile();
+  const configPath = activeConfigPath();
   if (!configPath) {
     throw new OmniNodeError("CONFIG_NOT_FOUND", "No omninode.yaml found. Run `omninode init` first.");
   }
@@ -1365,15 +1551,15 @@ async function writeFileAtomic(target, contents, durability = "rename") {
     }
   }
 }
-async function inspectDocument(path) {
+async function inspectDocument(path2) {
   let raw;
   try {
-    await stat(path);
+    await stat(path2);
   } catch {
     return { status: "missing" };
   }
   try {
-    raw = await readFile(path, "utf8");
+    raw = await readFile(path2, "utf8");
   } catch (error) {
     return { status: "corrupt", detail: `unreadable: ${error instanceof Error ? error.message : String(error)}` };
   }
@@ -1393,21 +1579,21 @@ async function inspectDocument(path) {
   if (version < SCHEMA_VERSION) return { status: "v1-legacy" };
   return { status: "current", schemaVersion: version, count: doc.items.length };
 }
-async function readDocument(path, onCorrupt, quarantine = true) {
-  const state = await inspectDocument(path);
+async function readDocument(path2, onCorrupt, quarantine = true) {
+  const state = await inspectDocument(path2);
   if (state.status === "missing" || state.status === "empty") return [];
   if (state.status === "future") {
     const error = new Error(
-      `${path} was written by a newer OmniNode (schema v${state.schemaVersion} > v${SCHEMA_VERSION})`
+      `${path2} was written by a newer OmniNode (schema v${state.schemaVersion} > v${SCHEMA_VERSION})`
     );
-    onCorrupt?.(path, error);
+    onCorrupt?.(path2, error);
     return [];
   }
   let raw;
   try {
-    raw = await readFile(path, "utf8");
+    raw = await readFile(path2, "utf8");
   } catch (error) {
-    onCorrupt?.(path, error);
+    onCorrupt?.(path2, error);
     return [];
   }
   try {
@@ -1416,16 +1602,16 @@ async function readDocument(path, onCorrupt, quarantine = true) {
     return parsed.items ?? [];
   } catch (error) {
     if (quarantine) {
-      const quarantinePath = `${path}.corrupt-${Date.now()}`;
+      const quarantinePath = `${path2}.corrupt-${Date.now()}`;
       try {
-        await rename(path, quarantinePath);
+        await rename(path2, quarantinePath);
         logger.child({ component: "persistence" }).warn(
-          `Quarantined unreadable store file ${path} \u2192 ${quarantinePath}`
+          `Quarantined unreadable store file ${path2} \u2192 ${quarantinePath}`
         );
       } catch {
       }
     }
-    onCorrupt?.(path, error);
+    onCorrupt?.(path2, error);
     return [];
   }
 }
@@ -1955,7 +2141,7 @@ function registerPipelineInspect(pipelineGroup) {
 function registerAgentInspect(agentGroup) {
   jsonOption(
     agentGroup.command("inspect <name>").description("Show an agent's effective configuration and recent tasks.").action(async (name, options) => {
-      const config = loadConfig();
+      const config = loadProjectConfig();
       const agentConfig = config.project.agents.find((a) => a.name === name);
       if (!agentConfig) throw new OmniNodeError("AGENT_NOT_FOUND", `No agent "${name}" is configured.`);
       const registry = buildAgentRegistry(config);
@@ -1985,7 +2171,7 @@ function registerAgentInspect(agentGroup) {
 function registerProviderInspect(providerGroup) {
   jsonOption(
     providerGroup.command("inspect <name>").description("Show a provider's authentication status and capabilities.").action(async (name, options) => {
-      const config = loadConfig();
+      const config = loadProjectConfig();
       const providerConfig = config.project.providers.find((p) => p.name === name);
       if (!providerConfig) throw new OmniNodeError("PROVIDER_NOT_FOUND", `No provider "${name}" is configured.`);
       const { createProvider: createProvider2 } = await import("./providers-OYXBAQTX.js");
@@ -2018,7 +2204,7 @@ function registerProviderInspect(providerGroup) {
 function registerProviderCommands(program) {
   const provider = program.command("provider").description("Manage AI providers configured in omninode.yaml.");
   provider.command("list").description("List configured providers.").option("--json", "Emit providers as JSON.").action(async (options) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const providers = config.project.providers;
     if (options.json) {
       console.log(JSON.stringify(providers, null, 2));
@@ -2058,7 +2244,7 @@ function registerProviderCommands(program) {
   registerProviderInspect(provider);
 }
 async function addProvider(options) {
-  const configPath = findConfigFile();
+  const configPath = activeConfigPath();
   if (!configPath) {
     throw new OmniNodeError("CONFIG_NOT_FOUND", "No omninode.yaml found. Run `omninode init` first.");
   }
@@ -2073,11 +2259,11 @@ async function addProvider(options) {
     throw new OmniNodeError("CLI_USAGE", `Invalid provider options: ${issues}`);
   }
   const newProvider = candidate.data;
-  const existing = loadConfig();
+  const existing = loadProjectConfig();
   if (existing.project.providers.some((p) => p.name === newProvider.name)) {
     throw new OmniNodeError(
       "CLI_USAGE",
-      `Provider "${newProvider.name}" already exists in ${findConfigFile() ?? "omninode.yaml"}.`
+      `Provider "${newProvider.name}" already exists in ${activeConfigPath() ?? "omninode.yaml"}.`
     );
   }
   const writtenPath = appendToConfigList("providers", newProvider);
@@ -2091,11 +2277,11 @@ async function addProvider(options) {
   }
 }
 function removeProvider(name) {
-  const configPath = findConfigFile();
+  const configPath = activeConfigPath();
   if (!configPath) {
     throw new OmniNodeError("CONFIG_NOT_FOUND", "No omninode.yaml found.");
   }
-  const config = loadConfig();
+  const config = loadProjectConfig();
   if (!config.project.providers.some((p) => p.name === name)) {
     throw new ProviderError("PROVIDER_NOT_FOUND", `No provider "${name}" is configured.`);
   }
@@ -2111,7 +2297,7 @@ function removeProvider(name) {
   console.log(`Removed provider "${name}" from ${configPath}.`);
 }
 async function testProvider(name, options = {}) {
-  const config = loadConfig();
+  const config = loadProjectConfig();
   const providerConfig = config.project.providers.find((p) => p.name === name);
   if (!providerConfig) {
     const available = config.project.providers.map((p) => p.name).join(", ") || "(none)";
@@ -2314,6 +2500,7 @@ var TaskEngine = class {
       const result = {
         ...output.summary !== void 0 ? { summary: output.summary } : {},
         ...output.reports !== void 0 && output.reports.length > 0 ? { reports: output.reports } : {},
+        ...output.protocol !== void 0 ? { protocol: output.protocol } : {},
         // Keep the verbatim output (bounded) for report extraction and audit.
         ...output.rawOutput !== void 0 && output.rawOutput.length > 0 ? { rawOutput: output.rawOutput.slice(0, 1e4) } : {},
         ...output.error !== void 0 ? { error: output.error } : {},
@@ -2493,7 +2680,7 @@ var collectArgs = (value, previous) => [...previous, value];
 function registerAgentCommands(program) {
   const agent = program.command("agent").description("Manage CLI agents registered with OmniNode.");
   agent.command("list").description("List configured agents.").option("--json", "Emit agents as JSON.").action(async (options) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const agents = config.project.agents;
     if (options.json) {
       console.log(JSON.stringify(config.project.agents, null, 2));
@@ -2522,7 +2709,7 @@ function registerAgentCommands(program) {
     (value) => Number(value)
   ).action(async (options) => addAgent(options));
   agent.command("run <name> <objective>").description("Run a single task through this agent immediately.").action(async (name, objective) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const agentConfig = config.project.agents.find((a) => a.name === name);
     if (!agentConfig) {
       throw new AgentError("AGENT_NOT_FOUND", `No agent "${name}" is configured.`);
@@ -2559,7 +2746,7 @@ async function addAgent(options) {
     throw new OmniNodeError("CLI_USAGE", `Invalid agent options: ${issues}`);
   }
   const newAgent = candidate.data;
-  const existing = loadConfig();
+  const existing = loadProjectConfig();
   if (existing.project.agents.some((a) => a.name === newAgent.name)) {
     throw new OmniNodeError(
       "CLI_USAGE",
@@ -2571,7 +2758,7 @@ async function addAgent(options) {
   console.log(`Run \`omninode agent test ${newAgent.name}\` to verify the connection.`);
 }
 async function testAgent(name) {
-  const config = loadConfig();
+  const config = loadProjectConfig();
   const agentConfig = config.project.agents.find((a) => a.name === name);
   if (!agentConfig) {
     const available = config.project.agents.map((a) => a.name).join(", ") || "(none)";
@@ -2602,7 +2789,7 @@ async function testAgent(name) {
 function registerRoleCommands(program) {
   const role = program.command("role").description("Inspect roles defined in omninode.yaml.");
   role.command("list").description("List configured roles.").option("--json", "Emit roles as JSON.").action(async (options) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const roles = config.project.roles;
     if (options.json) {
       console.log(JSON.stringify(config.project.roles, null, 2));
@@ -2626,7 +2813,7 @@ var collectFiles = (value, previous) => [...previous, value];
 function registerTaskCommands(program) {
   const task = program.command("task").description("Create, run and inspect tasks (\xA713).");
   task.command("create <objective>").description("Create a task. Assign a role and/or agent; run it with `omninode task run`.").option("-r, --role <roleId>", "Role id from project.roles (validated at creation).").option("-a, --agent <name>", "Agent name from project.agents (validated at creation).").option("-f, --file <path>", "File or glob relevant to the task (repeatable).", collectFiles).action(async (objective, options) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const engine = createTaskEngine(config);
     const created = await engine.create({
       objective,
@@ -2643,7 +2830,7 @@ function registerTaskCommands(program) {
     console.log(`Run \`omninode task run ${created.id}\` to execute it.`);
   });
   task.command("run <task-id>").description("Run a task through its assigned agent.").action(async (taskId) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const engine = createTaskEngine(config);
     console.log(`Running task ${taskId}...`);
     const finished = await engine.run(taskId);
@@ -2651,7 +2838,7 @@ function registerTaskCommands(program) {
     process.exitCode = exitCodeForStatus(finished.status);
   });
   task.command("status <task-id>").description("Show task details and current status.").action(async (taskId) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const engine = createTaskEngine(config);
     const found = await engine.get(taskId);
     if (!found) {
@@ -2663,7 +2850,7 @@ function registerTaskCommands(program) {
     printOutcome(found, { verbose: true });
   });
   task.command("list").description("List tasks in the project's task store.").option("-s, --status <status>", "Filter by status (created, queued, running, completed, failed, cancelled).").option("--json", "Emit tasks as JSON.").action(async (options) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const engine = createTaskEngine(config);
     const tasks = await engine.list(
       options.status !== void 0 ? { status: options.status } : {}
@@ -2681,13 +2868,13 @@ function registerTaskCommands(program) {
     }
   });
   task.command("cancel <task-id>").description("Cancel a task that has not finished yet.").action(async (taskId) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const engine = createTaskEngine(config);
     const cancelled = await engine.cancel(taskId);
     console.log(`Task ${cancelled.id} is now "${cancelled.status}".`);
   });
   task.command("retry <task-id>").description("Reset a failed, timed out, unknown or cancelled task to created; combine with --run to execute it again.").option("--run", "Run the task again immediately after resetting it.").action(async (taskId, options) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const engine = createTaskEngine(config);
     const reset = await engine.retry(taskId);
     console.log(`Task ${reset.id} reset to "${reset.status}".`);
@@ -4228,7 +4415,7 @@ function buildPipelineEngine(config, log = logger) {
 function registerPipelineCommands(program) {
   const pipeline = program.command("pipeline").description("Run multi-step AI pipelines defined in omninode.yaml (\xA714).");
   pipeline.command("list").description("List configured pipelines.").option("--json", "Emit pipelines as JSON.").action(async (options) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const pipelines = config.project.pipelines;
     if (options.json) {
       console.log(JSON.stringify(config.project.pipelines, null, 2));
@@ -4249,7 +4436,7 @@ function registerPipelineCommands(program) {
   pipeline.command("retry <run-id> [objective]").description(
     "Error recovery: re-run a recorded pipeline run as a new run, reusing its objective."
   ).action(async (runId, objective) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const engine = buildPipelineEngine(config);
     const previous = await engine.get(runId);
     if (!previous) {
@@ -4268,7 +4455,7 @@ function registerPipelineCommands(program) {
     await runPipelineAction(def.id, objective ?? previous.objective);
   });
   pipeline.command("cancel <run-id>").description("Request cancellation of a pipeline run (stops scheduling and cancels running tasks).").action(async (runId) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const engine = buildPipelineEngine(config);
     await engine.cancel(runId);
     console.log(`Cancellation requested for run ${runId}.`);
@@ -4278,7 +4465,7 @@ function registerPipelineCommands(program) {
     await createPipelineFromFile(id, options.from);
   });
   pipeline.command("validate <id>").description("Validate a pipeline definition before running it (\xA79.5).").action(async (id) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const def = findPipeline(config, id);
     const engine = buildPipelineEngine(config);
     engine.validate(def);
@@ -4289,7 +4476,7 @@ function registerPipelineCommands(program) {
     }
   });
   pipeline.command("runs <id>").description("List recorded runs of a pipeline.").action(async (id) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const engine = buildPipelineEngine(config);
     const runs = await engine.listRuns({ pipelineId: id });
     if (runs.length === 0) {
@@ -4302,7 +4489,7 @@ function registerPipelineCommands(program) {
     }
   });
   pipeline.command("status <run-id>").description("Show the recorded state of a pipeline run.").action(async (runId) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const engine = buildPipelineEngine(config);
     const run2 = await engine.get(runId);
     if (!run2) {
@@ -4334,7 +4521,7 @@ function registerPipelineCommands(program) {
   registerPipelineInspect(pipeline);
 }
 async function runPipelineAction(id, objective) {
-  const config = loadConfig();
+  const config = loadProjectConfig();
   const def = findPipeline(config, id);
   const engine = buildPipelineEngine(config);
   console.log(
@@ -4366,7 +4553,7 @@ function registerRunAlias(program) {
   program.command("run <id> [objective]").description("Alias of `omninode pipeline run` \u2014 execute a configured pipeline end to end.").action(async (id, objective) => runPipelineAction(id, objective));
 }
 async function createPipelineFromFile(id, file) {
-  const configPath = findConfigFile();
+  const configPath = activeConfigPath();
   if (!configPath) {
     throw new OmniNodeError("CONFIG_NOT_FOUND", "No omninode.yaml found. Run `omninode init` first.");
   }
@@ -4383,7 +4570,7 @@ async function createPipelineFromFile(id, file) {
     const issues = candidate.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ");
     throw new PipelineError("PIPELINE_INVALID", `Invalid pipeline definition: ${issues}`);
   }
-  const engine = buildPipelineEngine(loadConfig());
+  const engine = buildPipelineEngine(loadProjectConfig());
   engine.validate({ id, ...candidate.data });
   const doc = parseDocument3(readFileSync4(configPath, "utf8"));
   if (doc.getIn(["project", "pipelines"]) === void 0) {
@@ -4418,7 +4605,7 @@ function findPipeline(config, id) {
 function registerMemoryCommands(program) {
   const memory = program.command("memory").description("Inspect and manage persistent project memory (\xA719\u2013\xA720).");
   memory.command("status").description("Show the active memory provider and how much is stored.").action(async () => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const configured = config.project.memory?.provider ?? "local (default \u2014 add a `memory:` section to opt in)";
     const svc = new MemoryService(createMemoryProvider(config.project.memory));
     const entries = await svc.providerRef.query({ limit: 1e4 });
@@ -4433,7 +4620,7 @@ function registerMemoryCommands(program) {
     }
   });
   memory.command("query <text>").description("Search memory for entries relevant to the text.").option("-s, --scope <scope>", "Restrict to a scope: project, task, role or knowledge.").option("-n, --limit <count>", "Maximum entries to return.", (value) => Number(value), 10).option("--json", "Emit entries as JSON.").action(async (text, options) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const svc = new MemoryService(createMemoryProvider(config.project.memory));
     const entries = await svc.providerRef.query({
       text,
@@ -4458,7 +4645,7 @@ function registerMemoryCommands(program) {
     "Comma-separated tags.",
     (value) => value.split(",").map((tag) => tag.trim()).filter((tag) => tag.length > 0)
   ).option("-k, --key <key>", "Entry key (defaults to a generated note key).").action(async (text, options) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const svc = new MemoryService(createMemoryProvider(config.project.memory));
     const key = options.key ?? `note:${Date.now().toString(36)}`;
     await svc.providerRef.write({
@@ -4541,7 +4728,7 @@ function countBy(items, key) {
 }
 function registerStatusCommand(program) {
   program.command("status").description("Show the project's OmniNode state overview (config, tasks, runs, reports, plans, memory).").option("--json", "Emit machine-readable JSON (for scripts and CI).").action(async (options) => {
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const tasks = await new FileTaskStore().list();
     const runs = await new FilePipelineRunStore().list();
     const reportStore = new FileReportStore();
@@ -4622,8 +4809,8 @@ var STORE_FILES = [
 async function migrateProjectStores(directory = `${process.cwd()}/.omninode`, options = {}) {
   const reports = [];
   for (const file of STORE_FILES) {
-    const path = `${directory}/${file}`;
-    const state = await inspectDocument(path);
+    const path2 = `${directory}/${file}`;
+    const state = await inspectDocument(path2);
     if (state.status === "missing") {
       reports.push({ file, state: state.status, migrated: false });
       continue;
@@ -4645,9 +4832,9 @@ async function migrateProjectStores(directory = `${process.cwd()}/.omninode`, op
       reports.push({ file, state: state.status, migrated: false, note: state.detail });
       continue;
     }
-    const items = await readDocument(path, void 0, false);
+    const items = await readDocument(path2, void 0, false);
     if (!options.checkOnly) {
-      await writeFileAtomic(path, `${JSON.stringify({ schemaVersion: SCHEMA_VERSION, items }, null, 2)}
+      await writeFileAtomic(path2, `${JSON.stringify({ schemaVersion: SCHEMA_VERSION, items }, null, 2)}
 `);
     }
     const beforeCount = items.length;
@@ -4690,7 +4877,7 @@ function registerSecurityCommand(program) {
       console.log(`Unknown security action "${action}". Available: audit.`);
       return;
     }
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const findings = [];
     for (const agent of config.project.agents) {
       const policy = resolveEnvPolicy(agent);
@@ -4751,14 +4938,15 @@ Trust model: agents execute with the permissions of the OS user running OmniNode
 
 // src/cli/commands/config.ts
 import { readFileSync as readFileSync5 } from "fs";
+import { parse as parseYaml2 } from "yaml";
 function registerConfigCommands(program) {
   const config = program.command("config").description("Inspect the project configuration (omninode.yaml).");
   config.command("path").description("Print the path of the configuration file in use.").action(() => {
-    const path = findConfigFile();
-    console.log(path ?? "no omninode.yaml found");
+    const path2 = activeConfigPath();
+    console.log(path2 ?? "no omninode.yaml found");
   });
   config.command("show").description("Print the effective configuration (credential references only, never values).").option("--json", "Emit the configuration as JSON.").action((options) => {
-    const resolved = loadConfig();
+    const resolved = loadConfigDetailed().config;
     const payload = {
       project: resolved.project.name,
       providers: resolved.project.providers.map((p) => ({
@@ -4784,18 +4972,41 @@ function registerConfigCommands(program) {
     console.log(`pipelines: ${payload.pipelines.join(", ") || "none"}`);
     console.log(`memory:    ${payload.memory ? `${payload.memory.provider}${payload.memory.required ? " (required)" : ""}` : "not configured"}`);
   });
+  config.command("profiles").description("List the configuration profiles defined in this project.").action(() => {
+    const path2 = activeConfigPath();
+    const raw = path2 ? parseYaml2(readFileSync5(path2, "utf8")) : {};
+    const names = Object.keys(raw.profiles ?? {});
+    const active = loadConfigDetailed().sources.profile;
+    console.log(`active:  ${active}`);
+    console.log(`defined: ${names.length > 0 ? names.join(", ") : "none (add a `profiles:` section)"}`);
+  });
   config.command("validate").description("Validate the configuration file, including the inline-secret scan.").action(() => {
-    const path = findConfigFile();
-    if (!path) throw new OmniNodeError("CONFIG_NOT_FOUND", "No omninode.yaml found.");
-    const findings = scanForInlineSecrets(readFileSync5(path, "utf8"));
+    const path2 = activeConfigPath();
+    if (!path2) throw new OmniNodeError("CONFIG_NOT_FOUND", "No omninode.yaml found.");
+    const findings = scanForInlineSecrets(readFileSync5(path2, "utf8"));
     if (findings.length > 0) {
       throw new OmniNodeError(
         "CONFIG_INVALID",
-        `${path} contains ${findings.length} inline secret(s) (line ${findings.map((f) => f.line).join(", ")}). Use environment-variable references.`
+        `${path2} contains ${findings.length} inline secret(s) (line ${findings.map((f) => f.line).join(", ")}). Use environment-variable references.`
       );
     }
-    const resolved = loadConfig();
-    console.log(`${path} is valid \u2014 project "${resolved.project.name}" with ${resolved.project.providers.length} provider(s), ${resolved.project.agents.length} agent(s), ${resolved.project.pipelines.length} pipeline(s).`);
+    const { config: resolved, sources } = loadConfigDetailed();
+    console.log(
+      `${path2} is valid \u2014 project "${resolved.project.name}" with ${resolved.project.providers.length} provider(s), ${resolved.project.agents.length} agent(s), ${resolved.project.pipelines.length} pipeline(s).`
+    );
+    console.log(`  profile:  ${sources.profile}`);
+    if (sources.userFile) console.log(`  user cfg: ${sources.userFile}`);
+    if (sources.envOverrides.length > 0) {
+      console.log(`  env overrides: ${sources.envOverrides.join(", ")}`);
+    }
+    if (sources.defaults.length > 0) {
+      console.log(`  defaults applied: ${sources.defaults.join(", ")}`);
+    }
+    const diagnostics = configDiagnostics(resolved);
+    if (diagnostics.length > 0) {
+      console.log("  diagnostics:");
+      for (const note of diagnostics) console.log(`    - ${note}`);
+    }
   });
 }
 
@@ -4821,7 +5032,7 @@ function registerModelGroup(program, name) {
         `Unknown capability "${options.capability}". Valid capabilities: ${CAPABILITIES.join(", ")}.`
       );
     }
-    const config = loadConfig();
+    const config = loadProjectConfig();
     const selected = config.project.providers.filter(
       (p) => providerName ? p.name === providerName : true
     );
@@ -4870,7 +5081,10 @@ function createProgram() {
   const program = new Command();
   program.name("omninode").description(
     "Provider-agnostic multi-AI orchestration platform: coordinate CLI agents, AI providers, memory, roles, reports and planning in one execution system."
-  ).version(OMNINODE_VERSION, "-v, --version", "Print the OmniNode version.");
+  ).version(OMNINODE_VERSION, "-v, --version", "Print the OmniNode version.").option("-c, --config <file>", "Use a specific configuration file instead of ./omninode.yaml.").option("-p, --profile <name>", "Apply a named configuration profile (development/production/testing).").hook("preAction", (thisCommand) => {
+    cliConfigOptions.path = thisCommand.opts().config;
+    cliConfigOptions.profile = thisCommand.opts().profile;
+  });
   registerInitCommand(program);
   registerProjectCommands(program);
   registerProviderCommands(program);
@@ -4892,10 +5106,8 @@ function createProgram() {
 }
 function applyLoggingConfig() {
   try {
-    if (findConfigFile()) {
-      const logging = loadConfig().logging;
-      if (logging) configureLogger(logging);
-    }
+    const resolved = loadProjectConfig();
+    if (resolved.logging) configureLogger(resolved.logging);
   } catch {
   }
 }