@jungjaehoon/mama-os 0.53.0 → 0.57.0

package/dist/cli/config/config-manager.js

@@ -1,886 +0,0 @@
-"use strict";
-/**
- * Configuration Manager for MAMA Standalone
- *
- * Manages YAML configuration file at ~/.mama/config.yaml
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ConfigValidationError = void 0;
-exports.initConfig = initConfig;
-exports.getConfig = getConfig;
-exports.resetConfigCache = resetConfigCache;
-exports.expandPath = expandPath;
-exports.getConfigPath = getConfigPath;
-exports.getMAMAHome = getMAMAHome;
-exports.configExists = configExists;
-exports.loadConfig = loadConfig;
-exports.saveConfig = saveConfig;
-exports.createDefaultConfig = createDefaultConfig;
-exports.validateConfig = validateConfig;
-exports.getDefaultMultiAgentConfig = getDefaultMultiAgentConfig;
-exports.provisionDefaults = provisionDefaults;
-const promises_1 = require("node:fs/promises");
-const node_fs_1 = require("node:fs");
-const node_crypto_1 = require("node:crypto");
-const node_os_1 = require("node:os");
-const node_path_1 = require("node:path");
-const yaml = __importStar(require("js-yaml"));
-const types_js_1 = require("./types.js");
-const backend_model_policy_js_1 = require("../../agent/backend-model-policy.js");
-// ============================================================================
-// Sync Config Cache (STORY-002)
-// ============================================================================
-let _cachedConfig = null;
-/**
- * Initialize config: load from disk, apply env overrides, and cache.
- * Call once at startup (e.g., in mama start).
- */
-async function initConfig() {
-    const config = await loadConfig();
-    _cachedConfig = applyEnvOverrides(config);
-    return _cachedConfig;
-}
-/**
- * Get the cached config synchronously.
- * Throws if initConfig() hasn't been called, catching initialization order bugs early.
- */
-function getConfig() {
-    if (!_cachedConfig) {
-        throw new Error('Config not initialized. Call initConfig() at startup.');
-    }
-    return _cachedConfig;
-}
-/**
- * Reset cached config (for testing).
- * @param useDefaults - If true, set cache to DEFAULT_CONFIG instead of null.
- */
-function resetConfigCache(useDefaults = false) {
-    _cachedConfig = useDefaults ? { ...types_js_1.DEFAULT_CONFIG } : null;
-}
-/**
- * ENV_MAP: MAMA_* environment variables → config paths.
- * Format: MAMA_{SECTION}_{FIELD} → config.section.field
- * Values are parsed as numbers where the target type is number.
- */
-const envMap = [
-    // Prompt
-    { env: 'MAMA_PROMPT_WARN_CHARS', path: ['prompt', 'warn_chars'], type: 'number' },
-    { env: 'MAMA_PROMPT_TRUNCATE_CHARS', path: ['prompt', 'truncate_chars'], type: 'number' },
-    { env: 'MAMA_PROMPT_HARD_LIMIT_CHARS', path: ['prompt', 'hard_limit_chars'], type: 'number' },
-    { env: 'MAMA_PROMPT_SKILL_MAX_CHARS', path: ['prompt', 'skill_max_chars'], type: 'number' },
-    // Prompt (token-based)
-    { env: 'MAMA_PROMPT_WARN_TOKENS', path: ['prompt', 'warn_tokens'], type: 'number' },
-    { env: 'MAMA_PROMPT_TRUNCATE_TOKENS', path: ['prompt', 'truncate_tokens'], type: 'number' },
-    { env: 'MAMA_PROMPT_HARD_LIMIT_TOKENS', path: ['prompt', 'hard_limit_tokens'], type: 'number' },
-    { env: 'MAMA_PROMPT_SKILL_MAX_TOKENS', path: ['prompt', 'skill_max_tokens'], type: 'number' },
-    // Timeouts
-    { env: 'MAMA_TIMEOUT_REQUEST_MS', path: ['timeouts', 'request_ms'], type: 'number' },
-    { env: 'MAMA_TIMEOUT_CODEX_REQUEST_MS', path: ['timeouts', 'codex_request_ms'], type: 'number' },
-    { env: 'MAMA_TIMEOUT_INITIALIZE_MS', path: ['timeouts', 'initialize_ms'], type: 'number' },
-    { env: 'MAMA_TIMEOUT_SESSION_MS', path: ['timeouts', 'session_ms'], type: 'number' },
-    {
-        env: 'MAMA_TIMEOUT_SESSION_CLEANUP_MS',
-        path: ['timeouts', 'session_cleanup_ms'],
-        type: 'number',
-    },
-    { env: 'MAMA_TIMEOUT_AGENT_MS', path: ['timeouts', 'agent_ms'], type: 'number' },
-    { env: 'MAMA_TIMEOUT_ULTRAWORK_MS', path: ['timeouts', 'ultrawork_ms'], type: 'number' },
-    { env: 'MAMA_TIMEOUT_BUSY_RETRY_MS', path: ['timeouts', 'busy_retry_ms'], type: 'number' },
-    // Gateway
-    { env: 'MAMA_GATEWAY_DEDUP_TTL_MS', path: ['gateway_tuning', 'dedup_ttl_ms'], type: 'number' },
-    {
-        env: 'MAMA_GATEWAY_MENTION_TTL_MS',
-        path: ['gateway_tuning', 'mention_ttl_ms'],
-        type: 'number',
-    },
-    {
-        env: 'MAMA_GATEWAY_MESSAGE_TTL_MS',
-        path: ['gateway_tuning', 'message_ttl_ms'],
-        type: 'number',
-    },
-    {
-        env: 'MAMA_GATEWAY_CLEANUP_INTERVAL_MS',
-        path: ['gateway_tuning', 'cleanup_interval_ms'],
-        type: 'number',
-    },
-    {
-        env: 'MAMA_GATEWAY_HEARTBEAT_INTERVAL_MS',
-        path: ['gateway_tuning', 'heartbeat_interval_ms'],
-        type: 'number',
-    },
-    // IO
-    { env: 'MAMA_IO_MAX_READ_BYTES', path: ['io', 'max_read_bytes'], type: 'number' },
-    {
-        env: 'MAMA_IO_MAX_DYNAMIC_CONTEXT_CHARS',
-        path: ['io', 'max_dynamic_context_chars'],
-        type: 'number',
-    },
-    {
-        env: 'MAMA_IO_CONTEXT_THRESHOLD_TOKENS',
-        path: ['io', 'context_threshold_tokens'],
-        type: 'number',
-    },
-    { env: 'MAMA_IO_MAX_CONTEXT_TOKENS', path: ['io', 'max_context_tokens'], type: 'number' },
-    // Metrics
-    { env: 'MAMA_METRICS_ENABLED', path: ['metrics', 'enabled'], type: 'boolean' },
-    { env: 'MAMA_METRICS_RETENTION_DAYS', path: ['metrics', 'retention_days'], type: 'number' },
-    // Token Budget
-    { env: 'MAMA_TOKEN_BUDGET_DAILY_LIMIT', path: ['token_budget', 'daily_limit'], type: 'number' },
-    {
-        env: 'MAMA_TOKEN_BUDGET_ALERT_THRESHOLD',
-        path: ['token_budget', 'alert_threshold'],
-        type: 'number',
-    },
-    // Message-router memory policy
-    {
-        env: 'MAMA_MEMORY_POLICY_IMPLICIT_RECALL',
-        path: ['memory_policy', 'implicit_recall'],
-        type: 'boolean',
-    },
-    {
-        env: 'MAMA_MEMORY_POLICY_IMPLICIT_LEGACY_CONTEXT_SEARCH',
-        path: ['memory_policy', 'implicit_legacy_context_search'],
-        type: 'boolean',
-    },
-];
-/**
- * Apply MAMA_* environment variable overrides to config.
- * Env vars take precedence over config.yaml values.
- */
-function applyEnvOverrides(config) {
-    const result = { ...config };
-    for (const { env, path, type } of envMap) {
-        const value = process.env[env];
-        if (value === undefined) {
-            continue;
-        }
-        const [section, field] = path;
-        const sectionObj = result[section];
-        if (sectionObj && typeof sectionObj === 'object') {
-            const normalizedValue = value.trim().toLowerCase();
-            const parsed = type === 'boolean' ? normalizedValue === 'true' || normalizedValue === '1' : Number(value);
-            if (type === 'number' && isNaN(parsed)) {
-                continue;
-            }
-            result[section] = {
-                ...sectionObj,
-                [field]: parsed,
-            };
-        }
-    }
-    return result;
-}
-/**
- * Error thrown when config validation fails.
- * Contains all validation errors and resolution guidance.
- */
-class ConfigValidationError extends Error {
-    errors;
-    configPath;
-    constructor(errors, configPath) {
-        const header = `Invalid configuration (${configPath}):\n`;
-        const body = errors.map((e) => `  - ${e}`).join('\n');
-        const footer = `\nFix config.yaml or run 'mama init --force' to regenerate.`;
-        super(header + body + footer);
-        this.errors = errors;
-        this.configPath = configPath;
-        this.name = 'ConfigValidationError';
-    }
-}
-exports.ConfigValidationError = ConfigValidationError;
-/**
- * Validate required config fields (fail-fast policy).
- * Called after mergeWithDefaults() — if a field is still missing after merge,
- * the user's config.yaml is genuinely missing it.
- */
-function validateRequiredFields(config, configPath) {
-    const errors = [];
-    if (!config.agent.backend) {
-        errors.push("agent.backend is required. Valid: 'claude' | 'codex' | 'cline'");
-    }
-    // Validate role definitions have models
-    if (config.roles?.definitions) {
-        for (const [name, role] of Object.entries(config.roles.definitions)) {
-            if (!role.model) {
-                errors.push(`roles.definitions.${name}.model is required`);
-            }
-        }
-    }
-    // Validate enabled multi-agent agents have backend+model
-    if (config.multi_agent?.agents) {
-        for (const [id, agent] of Object.entries(config.multi_agent.agents)) {
-            if (agent.enabled === false)
-                continue;
-            // Agents inherit from global config, so only error if neither agent nor global has it
-            const effectiveBackend = agent.backend ?? config.agent.backend;
-            const effectiveModel = effectiveBackend
-                ? (0, backend_model_policy_js_1.resolveBackendScopedModel)({
-                    backend: effectiveBackend,
-                    model: agent.model,
-                    inheritedBackend: config.agent.backend,
-                    inheritedModel: config.agent.model,
-                })
-                : undefined;
-            if (!effectiveBackend) {
-                errors.push(`multi_agent.agents.${id}: no backend. Set in agent config or agent.backend`);
-            }
-            if (!effectiveModel) {
-                errors.push(`multi_agent.agents.${id}: no model. Set in agent config or agent.model`);
-            }
-        }
-    }
-    appendMemoryPolicyValidationErrors(config, errors);
-    if (errors.length > 0) {
-        throw new ConfigValidationError(errors, configPath);
-    }
-}
-function appendMemoryPolicyValidationErrors(config, errors) {
-    if (!config.memory_policy) {
-        return;
-    }
-    if (typeof config.memory_policy.implicit_recall !== 'boolean') {
-        errors.push('memory_policy.implicit_recall must be boolean');
-    }
-    if (typeof config.memory_policy.implicit_legacy_context_search !== 'boolean') {
-        errors.push('memory_policy.implicit_legacy_context_search must be boolean');
-    }
-}
-/**
- * Expand ~ to home directory
- */
-function expandPath(path) {
-    if (path.startsWith('~')) {
-        return path.replace('~', (0, node_os_1.homedir)());
-    }
-    return path;
-}
-/**
- * Get the full path to config file
- */
-function getConfigPath() {
-    return expandPath(types_js_1.MAMA_PATHS.CONFIG);
-}
-/**
- * Get the MAMA home directory
- */
-function getMAMAHome() {
-    return expandPath(types_js_1.MAMA_PATHS.HOME);
-}
-/**
- * Check if config file exists
- */
-function configExists() {
-    return (0, node_fs_1.existsSync)(getConfigPath());
-}
-/**
- * Load configuration from file
- *
- * @returns Configuration object
- * @throws Error if config file doesn't exist or is invalid
- */
-async function loadConfig() {
-    const configPath = getConfigPath();
-    if (!(0, node_fs_1.existsSync)(configPath)) {
-        throw new Error(`Configuration file not found: ${configPath}\nRun 'mama init' to create it.`);
-    }
-    try {
-        const content = await (0, promises_1.readFile)(configPath, 'utf-8');
-        const config = yaml.load(content);
-        // Validate required fields
-        if (!config.version || !config.agent || !config.database) {
-            throw new Error('Invalid configuration: missing required fields');
-        }
-        // Merge with defaults for any missing optional fields
-        const merged = mergeWithDefaults(config);
-        // Fail-fast: validate required fields after merge
-        validateRequiredFields(merged, configPath);
-        return merged;
-    }
-    catch (error) {
-        if (error instanceof Error && error.message.includes('missing required')) {
-            throw error;
-        }
-        const message = error instanceof Error ? error.message : String(error);
-        if (message.includes('unidentified alias')) {
-            throw new Error(`Failed to load configuration: ${message}\n` +
-                'Hint: YAML cron expressions starting with "*" must be quoted. ' +
-                'Use: cron: "*/10 * * * *" (or "0 * * * *").');
-        }
-        throw new Error(`Failed to load configuration: ${message}`);
-    }
-}
-/**
- * Save configuration to file
- *
- * @param config - Configuration object to save
- */
-/**
- * Prune role entries that are byte-identical to the shipped defaults before
- * persisting (review R2-M1): load->mutate->save flows would otherwise FREEZE
- * default definitions into config.yaml, silently shadowing every future
- * default change (the B1 silent-death class at field level). Only the user's
- * actual customizations are persisted; defaults re-merge at load time.
- */
-function canonicalJson(value) {
-    if (Array.isArray(value)) {
-        return `[${value.map(canonicalJson).join(',')}]`;
-    }
-    if (value && typeof value === 'object') {
-        const entries = Object.entries(value)
-            .sort(([a], [b]) => a.localeCompare(b))
-            .map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`);
-        return `{${entries.join(',')}}`;
-    }
-    return JSON.stringify(value) ?? 'undefined';
-}
-function pruneDefaultRolesForSave(config) {
-    const defaults = types_js_1.DEFAULT_CONFIG.roles;
-    if (!config.roles || !defaults) {
-        return config;
-    }
-    const definitions = {};
-    for (const [name, def] of Object.entries(config.roles.definitions ?? {})) {
-        const defaultDef = defaults.definitions[name];
-        const inheritedDefaultDef = defaultDef
-            ? { ...defaultDef, model: config.agent.model }
-            : undefined;
-        if (!inheritedDefaultDef || canonicalJson(def) !== canonicalJson(inheritedDefaultDef)) {
-            definitions[name] = def;
-        }
-    }
-    const sourceMapping = {};
-    for (const [source, role] of Object.entries(config.roles.sourceMapping ?? {})) {
-        if (defaults.sourceMapping[source] !== role) {
-            sourceMapping[source] = role;
-        }
-    }
-    if (Object.keys(definitions).length === 0 && Object.keys(sourceMapping).length === 0) {
-        const { roles: _roles, ...rest } = config;
-        return rest;
-    }
-    return {
-        ...config,
-        roles: { definitions, sourceMapping },
-    };
-}
-async function saveConfig(config) {
-    const configPath = getConfigPath();
-    const configDir = (0, node_path_1.dirname)(configPath);
-    // Ensure directory exists
-    if (!(0, node_fs_1.existsSync)(configDir)) {
-        await (0, promises_1.mkdir)(configDir, { recursive: true });
-    }
-    const content = yaml.dump(pruneDefaultRolesForSave(config), {
-        indent: 2,
-        lineWidth: 120,
-        noRefs: true,
-    });
-    // Add header comment
-    const fileContent = `# MAMA Standalone Configuration
-# Generated: ${new Date().toISOString()}
-# Documentation: https://github.com/jungjaehoon-lifegamez/MAMA
-
-${content}`;
-    const temporaryPath = (0, node_path_1.join)(configDir, `.config.yaml.${process.pid}.${(0, node_crypto_1.randomUUID)()}.tmp`);
-    const mode = 0o600;
-    let handle;
-    try {
-        handle = await (0, promises_1.open)(temporaryPath, 'wx', mode);
-        await handle.writeFile(fileContent, 'utf8');
-        await handle.sync();
-        await handle.close();
-        handle = undefined;
-        await (0, promises_1.rename)(temporaryPath, configPath);
-        try {
-            const directory = await (0, promises_1.open)(configDir, 'r');
-            try {
-                await directory.sync();
-            }
-            finally {
-                await directory.close();
-            }
-        }
-        catch {
-            // The rename is already the commit point. Some platforms do not support
-            // opening/fsyncing directories, so a post-commit durability hint cannot
-            // be reported as a failed save.
-        }
-    }
-    catch (error) {
-        await handle?.close().catch(() => undefined);
-        await (0, promises_1.unlink)(temporaryPath).catch(() => undefined);
-        throw error;
-    }
-}
-/**
- * Create default configuration file
- *
- * @param overwrite - Whether to overwrite existing config
- * @returns Path to created config file
- * @throws Error if config exists and overwrite is false
- */
-async function createDefaultConfig(overwrite = false) {
-    const configPath = getConfigPath();
-    if ((0, node_fs_1.existsSync)(configPath) && !overwrite) {
-        throw new Error(`Configuration file already exists: ${configPath}\nUse --force to overwrite.`);
-    }
-    // Ensure logs directory exists
-    const logsDir = expandPath(types_js_1.MAMA_PATHS.LOGS);
-    if (!(0, node_fs_1.existsSync)(logsDir)) {
-        await (0, promises_1.mkdir)(logsDir, { recursive: true });
-    }
-    await saveConfig(types_js_1.DEFAULT_CONFIG);
-    return configPath;
-}
-/**
- * Merge user config with defaults
- * SECURITY: Type guards ensure safe defaults for optional fields
- */
-function mergeWithDefaults(config) {
-    const multiAgent = normalizeLegacyMultiAgentConfig(config.multi_agent);
-    const agent = config.agent && config.agent.backend === 'codex-mcp'
-        ? { ...config.agent, backend: 'codex' }
-        : config.agent;
-    const mergedAgentDefaults = {
-        ...types_js_1.DEFAULT_CONFIG.agent,
-        ...agent,
-    };
-    const mergedAgent = {
-        ...mergedAgentDefaults,
-        model: agent?.model ??
-            (0, backend_model_policy_js_1.resolveBackendScopedModel)({
-                backend: mergedAgentDefaults.backend,
-            }),
-    };
-    const inheritedRoleDefinitions = Object.fromEntries(Object.entries(types_js_1.DEFAULT_CONFIG.roles?.definitions ?? {}).map(([name, role]) => [
-        name,
-        { ...role, model: mergedAgent.model },
-    ]));
-    const mergedRoles = types_js_1.DEFAULT_CONFIG.roles
-        ? {
-            definitions: { ...inheritedRoleDefinitions, ...config.roles?.definitions },
-            sourceMapping: {
-                ...types_js_1.DEFAULT_CONFIG.roles.sourceMapping,
-                ...config.roles?.sourceMapping,
-            },
-        }
-        : config.roles;
-    const scopedModels = (0, backend_model_policy_js_1.rescopeConfigModels)({
-        backend: mergedAgent.backend,
-        agentModel: mergedAgent.model,
-        roleModels: Object.fromEntries(Object.entries(mergedRoles?.definitions ?? {}).map(([name, role]) => [name, role.model])),
-    });
-    const scopedRoles = mergedRoles
-        ? {
-            ...mergedRoles,
-            definitions: Object.fromEntries(Object.entries(mergedRoles.definitions).map(([name, role]) => [
-                name,
-                { ...role, model: scopedModels.roleModels[name] },
-            ])),
-        }
-        : mergedRoles;
-    (0, backend_model_policy_js_1.emitBackendModelWarnings)([...scopedModels.changes, ...(scopedModels.warnings ?? [])]);
-    return {
-        // Preserve all user-defined fields (scheduling, custom sections, etc.)
-        ...config,
-        // Deep-merge known structured fields with defaults
-        version: config.version ?? types_js_1.DEFAULT_CONFIG.version,
-        agent: { ...mergedAgent, model: scopedModels.agentModel },
-        database: {
-            ...types_js_1.DEFAULT_CONFIG.database,
-            ...config.database,
-        },
-        logging: {
-            ...types_js_1.DEFAULT_CONFIG.logging,
-            ...config.logging,
-        },
-        // Roles merge is ADDITIVE on definitions: a persisted config written by an
-        // older version lacks newer role definitions (owner_console), and a plain
-        // override would silently disable trust-conditional escalation on every
-        // real deployment. User-defined roles and sourceMapping still win.
-        roles: scopedRoles,
-        use_claude_cli: config.use_claude_cli ?? types_js_1.DEFAULT_CONFIG.use_claude_cli,
-        discord: config.discord ?? types_js_1.DEFAULT_CONFIG.discord,
-        slack: config.slack ?? types_js_1.DEFAULT_CONFIG.slack,
-        telegram: config.telegram ?? types_js_1.DEFAULT_CONFIG.telegram,
-        chatwork: config.chatwork ?? types_js_1.DEFAULT_CONFIG.chatwork,
-        heartbeat: config.heartbeat ?? types_js_1.DEFAULT_CONFIG.heartbeat,
-        multi_agent: multiAgent,
-        prompt: config.prompt ? { ...types_js_1.DEFAULT_CONFIG.prompt, ...config.prompt } : types_js_1.DEFAULT_CONFIG.prompt,
-        timeouts: config.timeouts
-            ? { ...types_js_1.DEFAULT_CONFIG.timeouts, ...config.timeouts }
-            : types_js_1.DEFAULT_CONFIG.timeouts,
-        gateway_tuning: config.gateway_tuning
-            ? { ...types_js_1.DEFAULT_CONFIG.gateway_tuning, ...config.gateway_tuning }
-            : types_js_1.DEFAULT_CONFIG.gateway_tuning,
-        io: config.io ? { ...types_js_1.DEFAULT_CONFIG.io, ...config.io } : types_js_1.DEFAULT_CONFIG.io,
-        metrics: config.metrics
-            ? { ...types_js_1.DEFAULT_CONFIG.metrics, ...config.metrics }
-            : types_js_1.DEFAULT_CONFIG.metrics,
-        token_budget: config.token_budget
-            ? { ...types_js_1.DEFAULT_CONFIG.token_budget, ...config.token_budget }
-            : types_js_1.DEFAULT_CONFIG.token_budget,
-        memory_policy: config.memory_policy
-            ? { ...types_js_1.DEFAULT_CONFIG.memory_policy, ...config.memory_policy }
-            : types_js_1.DEFAULT_CONFIG.memory_policy,
-    };
-}
-/**
- * Normalize legacy multi-agent defaults for existing installations.
- *
- * Existing users may still have historical team profiles where "developer"
- * used to run as advisory tier with read-only tooling. For the current
- * default workflow, this profile is expected to orchestrate edits and
- * delegate work, so we gently upgrade missing permission metadata.
- */
-function normalizeLegacyMultiAgentConfig(multiAgentConfig) {
-    if (!multiAgentConfig?.agents) {
-        return multiAgentConfig;
-    }
-    let backendMigrated = false;
-    const backendNormalizedAgents = Object.fromEntries(Object.entries(multiAgentConfig.agents).map(([agentId, agent]) => {
-        if (agent.backend !== 'codex-mcp') {
-            return [agentId, agent];
-        }
-        backendMigrated = true;
-        return [agentId, { ...agent, backend: 'codex' }];
-    }));
-    if (backendMigrated) {
-        multiAgentConfig = { ...multiAgentConfig, agents: backendNormalizedAgents };
-    }
-    // Migrate sisyphus → conductor (renamed in v0.9.0)
-    const agentEntries = multiAgentConfig.agents;
-    if (agentEntries['sisyphus'] && !agentEntries['conductor']) {
-        const { sisyphus: sisyphusEntry, ...rest } = agentEntries;
-        const migratedAgents = {
-            ...rest,
-            conductor: {
-                ...sisyphusEntry,
-                name: 'Conductor',
-                display_name: '🎯 Conductor',
-                trigger_prefix: '!conductor',
-                persona_file: '~/.mama/personas/conductor.md',
-                tier: 1,
-                can_delegate: true,
-            },
-        };
-        const migratedDefaultAgent = multiAgentConfig.default_agent === 'sisyphus' ? 'conductor' : multiAgentConfig.default_agent;
-        multiAgentConfig = {
-            ...multiAgentConfig,
-            default_agent: migratedDefaultAgent,
-            agents: migratedAgents,
-        };
-    }
-    const defaultAgents = getDefaultMultiAgentConfig().agents;
-    const mergedAgents = {
-        ...multiAgentConfig.agents,
-    };
-    let addedBuiltinAgent = false;
-    let changedBuiltinAgent = false;
-    for (const [agentId, defaultAgent] of Object.entries(defaultAgents)) {
-        if (!mergedAgents[agentId]) {
-            mergedAgents[agentId] = defaultAgent;
-            addedBuiltinAgent = true;
-        }
-        else {
-            const normalizedAgent = normalizeBuiltinCodeActAgentPermissions(agentId, mergedAgents[agentId], defaultAgent);
-            if (normalizedAgent !== mergedAgents[agentId]) {
-                changedBuiltinAgent = true;
-                mergedAgents[agentId] = normalizedAgent;
-            }
-        }
-    }
-    for (const [agentId, defaultAgent] of Object.entries(getLegacySelfPacedAgentDefaults())) {
-        const existingAgent = mergedAgents[agentId];
-        if (!existingAgent) {
-            continue;
-        }
-        const normalizedAgent = normalizeBuiltinCodeActAgentPermissions(agentId, existingAgent, defaultAgent);
-        if (normalizedAgent !== existingAgent) {
-            changedBuiltinAgent = true;
-            mergedAgents[agentId] = normalizedAgent;
-        }
-    }
-    if (addedBuiltinAgent || changedBuiltinAgent) {
-        multiAgentConfig = {
-            ...multiAgentConfig,
-            agents: mergedAgents,
-        };
-    }
-    const developer = multiAgentConfig.agents.developer;
-    if (!developer) {
-        return multiAgentConfig;
-    }
-    const hasExplicitPermissionOverrides = developer.tool_permissions !== undefined || developer.can_delegate !== undefined;
-    if (!hasExplicitPermissionOverrides && (developer.tier === 2 || developer.tier === undefined)) {
-        return {
-            ...multiAgentConfig,
-            agents: {
-                ...multiAgentConfig.agents,
-                developer: {
-                    ...developer,
-                    tier: 1,
-                    can_delegate: true,
-                    tool_permissions: {
-                        allowed: ['*'],
-                        blocked: [],
-                    },
-                },
-            },
-        };
-    }
-    const needsAutoTierUpgrade = developer.can_delegate === true &&
-        (developer.tier === undefined || developer.tier < 1 || developer.tier > 1);
-    if (needsAutoTierUpgrade) {
-        return {
-            ...multiAgentConfig,
-            agents: {
-                ...multiAgentConfig.agents,
-                developer: {
-                    ...developer,
-                    tier: 1,
-                },
-            },
-        };
-    }
-    return multiAgentConfig;
-}
-const SYSTEM_CODE_ACT_AGENT_IDS = new Set(['dashboard-agent', 'wiki-agent']);
-const LEGACY_SYSTEM_CODE_ACT_GATEWAY_ALLOWED = {
-    'dashboard-agent': ['mama_search', 'agent_notices', 'report_publish'],
-    'wiki-agent': [
-        'mama_search',
-        'agent_notices',
-        'case_list',
-        'case_assemble',
-        'obsidian',
-        'wiki_publish',
-    ],
-};
-function normalizeBuiltinCodeActAgentPermissions(agentId, agent, defaultAgent) {
-    if (!SYSTEM_CODE_ACT_AGENT_IDS.has(agentId)) {
-        return agent;
-    }
-    const defaultGatewayAllowed = defaultAgent.gateway_tool_permissions?.allowed ?? [];
-    const allowed = agent.tool_permissions?.allowed ?? [];
-    const blocked = agent.tool_permissions?.blocked ?? [];
-    const hasGatewayToolsInCliAllowed = allowed.some((tool) => defaultGatewayAllowed.includes(tool));
-    const blocksReadOnlyCliTools = ['Read', 'Grep', 'Glob'].some((tool) => blocked.includes(tool));
-    const shouldMigrateLegacyPermissions = agent.useCodeAct === true &&
-        allowed.includes('code_act') &&
-        (hasGatewayToolsInCliAllowed || blocksReadOnlyCliTools);
-    const gatewayToolPermissions = normalizeBuiltinGatewayToolPermissions(agentId, agent.gateway_tool_permissions ?? defaultAgent.gateway_tool_permissions, defaultAgent.gateway_tool_permissions);
-    if (!shouldMigrateLegacyPermissions &&
-        gatewayToolPermissions === agent.gateway_tool_permissions) {
-        return agent;
-    }
-    return {
-        ...agent,
-        ...(shouldMigrateLegacyPermissions ? { tool_permissions: defaultAgent.tool_permissions } : {}),
-        gateway_tool_permissions: gatewayToolPermissions,
-    };
-}
-function normalizeBuiltinGatewayToolPermissions(agentId, permissions, defaultPermissions) {
-    const allowed = permissions?.allowed;
-    const defaultAllowed = defaultPermissions?.allowed ?? [];
-    const legacyAllowed = LEGACY_SYSTEM_CODE_ACT_GATEWAY_ALLOWED[agentId];
-    if (!allowed || !legacyAllowed || defaultAllowed.length === 0) {
-        return permissions;
-    }
-    const allowedSet = new Set(allowed);
-    const isLegacyDefault = allowed.length === legacyAllowed.length && legacyAllowed.every((tool) => allowedSet.has(tool));
-    if (!isLegacyDefault) {
-        return permissions;
-    }
-    return {
-        ...permissions,
-        allowed: defaultAllowed,
-    };
-}
-/**
- * Validate configuration
- *
- * @param config - Configuration to validate
- * @returns Array of validation errors (empty if valid)
- */
-function validateConfig(config) {
-    const errors = [];
-    if (config.version !== 1) {
-        errors.push(`Unsupported config version: ${config.version}`);
-    }
-    if (!config.agent.model) {
-        errors.push('agent.model is required');
-    }
-    if (config.agent.backend && !['claude', 'codex', 'cline'].includes(config.agent.backend)) {
-        errors.push('agent.backend must be "claude", "codex", or "cline"');
-    }
-    if (Object.hasOwn(config.agent, 'codex_transport')) {
-        errors.push('agent.codex_transport was removed; Codex always uses app-server');
-    }
-    if (config.agent.max_turns < 1 || config.agent.max_turns > 100) {
-        errors.push('agent.max_turns must be between 1 and 100');
-    }
-    if (config.agent.timeout < 1000) {
-        errors.push('agent.timeout must be at least 1000ms');
-    }
-    if (!config.database.path) {
-        errors.push('database.path is required');
-    }
-    const validLogLevels = ['debug', 'info', 'warn', 'error'];
-    if (!validLogLevels.includes(config.logging.level)) {
-        errors.push(`logging.level must be one of: ${validLogLevels.join(', ')}`);
-    }
-    appendMemoryPolicyValidationErrors(config, errors);
-    return errors;
-}
-/**
- * Get the default multi-agent configuration (disabled by default)
- */
-function getDefaultMultiAgentConfig() {
-    return {
-        enabled: false,
-        free_chat: true,
-        default_agent: 'conductor',
-        agents: {
-            'os-agent': {
-                name: 'OS Agent',
-                display_name: '🖥️ OS Agent',
-                trigger_prefix: '!os',
-                persona_file: '~/.mama/personas/os-agent.md',
-                tier: 1,
-                can_delegate: true,
-                enabled: true,
-            },
-            conductor: {
-                name: 'Conductor',
-                display_name: '🎯 Conductor',
-                trigger_prefix: '!conductor',
-                persona_file: '~/.mama/personas/conductor.md',
-                tier: 1,
-                can_delegate: true,
-            },
-            memory: {
-                name: 'Memory Agent',
-                display_name: '🧠 Memory',
-                trigger_prefix: '!memory',
-                persona_file: '~/.mama/personas/memory.md',
-                tier: 3,
-                can_delegate: false,
-                enabled: true,
-            },
-        },
-        loop_prevention: {
-            max_chain_length: 5,
-            global_cooldown_ms: 1000,
-            chain_window_ms: 60000,
-        },
-        workflow: {
-            enabled: true,
-        },
-        council: {
-            enabled: true,
-        },
-    };
-}
-function getLegacySelfPacedAgentDefaults() {
-    return {
-        'dashboard-agent': {
-            name: 'Dashboard Agent',
-            display_name: '📊 Dashboard',
-            trigger_prefix: '!dashboard',
-            persona_file: '~/.mama/personas/dashboard.md',
-            tier: 2,
-            can_delegate: false,
-            enabled: true,
-            useCodeAct: true,
-            tool_permissions: {
-                allowed: ['Read', 'Grep', 'Glob', 'code_act'],
-                blocked: ['Bash', 'Write', 'Edit', 'Agent', 'WebSearch', 'WebFetch'],
-            },
-            gateway_tool_permissions: {
-                allowed: ['mama_search', 'context_compile', 'agent_notices', 'report_publish'],
-                blocked: [],
-            },
-        },
-        'wiki-agent': {
-            name: 'Wiki Agent',
-            display_name: '📚 Wiki',
-            trigger_prefix: '!wiki',
-            persona_file: '~/.mama/personas/wiki.md',
-            tier: 2,
-            can_delegate: false,
-            enabled: true,
-            useCodeAct: true,
-            tool_permissions: {
-                allowed: ['Read', 'Grep', 'Glob', 'code_act'],
-                blocked: ['Bash', 'Write', 'Edit', 'Agent', 'WebSearch', 'WebFetch'],
-            },
-            gateway_tool_permissions: {
-                allowed: [
-                    'mama_search',
-                    'context_compile',
-                    'agent_notices',
-                    'case_list',
-                    'case_assemble',
-                    'obsidian',
-                    'wiki_publish',
-                ],
-                blocked: [],
-            },
-        },
-    };
-}
-/**
- * Provision default multi-agent config on first start.
- *
- * - Injects a default (disabled) multi_agent section into config.yaml
- *   only if one is not already present.
- *
- * Personas are retired for the owner runtime: nothing is written into
- * ~/.mama/personas here.
- */
-async function provisionDefaults() {
-    // Inject default multi_agent config if missing
-    if (configExists()) {
-        const config = await loadConfig();
-        if (!config.multi_agent) {
-            config.multi_agent = getDefaultMultiAgentConfig();
-            await saveConfig(config);
-            console.log('✓ Multi-agent config initialized (disabled)');
-        }
-    }
-}
-//# sourceMappingURL=config-manager.js.map