@knpkv/codecommit-core 0.10.1 → 0.13.0

package/dist/ChildEnv.js

@@ -42,19 +42,24 @@
  *   same paths, so clearing them would point the child at a different file and
  *   break legitimate custom config locations.
  *
- * KNOWN LIMITATION — Windows casing. Clearing works by mapping each name to
- * `undefined` in an object merged over the inherited environment, which matches
- * keys exactly. Windows environment names are case-insensitive, so a host
- * exporting `Aws_Access_Key_Id` keeps that entry alongside the `AWS_ACCESS_KEY_ID`
- * tombstone and the AWS CLI can still read it. Closing this means filtering the
- * inherited keys case-insensitively, which requires enumerating the parent
- * environment; no Effect service exposes that here, and `globalThis.process` is
- * not available to this code. The two `assume` call sites are POSIX-only in
- * practice — their clipboard step has only `pbcopy` and `xclip` — so the exposed
- * path is the SandboxService clone on a Windows host. Tracked rather than
- * silently accepted; the exact-case behaviour these tests cover is correct on
- * POSIX.
+ * CASE INSENSITIVITY. Clearing works by mapping each name to `undefined` in an
+ * object merged over the inherited environment, and that merge matches keys
+ * exactly. Windows environment names are case-insensitive, so a host exporting
+ * `Aws_Access_Key_Id` would keep that entry alive beside the `AWS_ACCESS_KEY_ID`
+ * tombstone and the AWS CLI could still read it. `profileScopedEnv` therefore
+ * takes the inherited environment and tombstones the spellings actually present
+ * as well as the canonical names, which closes the gap without taking `PATH` and
+ * every other inherited variable into this module's hands: the spawn stays
+ * `extendEnv: true`.
+ *
+ * The folding is unconditional, on every platform. On POSIX a lowercase
+ * `aws_access_key_id` is a genuinely distinct variable that the AWS chain never
+ * reads, so dropping it is broader than strictly required — deliberately, because
+ * detecting a case-insensitive host would mean reading the platform from this
+ * module, and a variable differing only in case carries the same intent. Nothing
+ * we spawn (`git`, `aws`, `assume`, `docker`) reads the lowercase spellings.
  */
+import { Context, Layer } from "effect";
 const OVERRIDING_AWS_VARIABLES = [
     "AWS_ACCESS_KEY_ID",
     "AWS_SECRET_ACCESS_KEY",
@@ -67,25 +72,53 @@ const OVERRIDING_AWS_VARIABLES = [
     "AWS_REGION",
     "AWS_DEFAULT_REGION"
 ];
+/** Whether an inherited name denotes an overriding AWS variable under any casing. */
+const isOverridingAwsVariable = (name) => {
+    // `toUpperCase`, not `toLocaleUpperCase`: these names are ASCII and a Turkish
+    // locale would fold `AWS_..._ID` differently, reintroducing the gap it closes.
+    const canonical = name.toUpperCase();
+    return OVERRIDING_AWS_VARIABLES.some((candidate) => candidate === canonical);
+};
 /**
  * Builds a child environment where `overrides` are the only AWS credential and
  * region inputs, dropping any ambient values that would outrank them.
  *
+ * `inherited` is the environment the child will extend. It is read only to find
+ * which spellings of the overriding names are actually present, so a
+ * case-insensitive host cannot keep `Aws_Access_Key_Id` alive beside the
+ * canonical tombstone. Pass the environment the spawn will really inherit —
+ * `HostEnvironment.variables` at a runtime call site.
+ *
  * Must be paired with `extendEnv: true`; on its own it does not carry `PATH`.
  *
  * @example
  * ```ts
+ * const host = yield* ChildEnv.HostEnvironment
  * ChildProcess.make("git", args, {
- *   env: ChildEnv.profileScopedEnv({ AWS_PROFILE: profile }),
+ *   env: ChildEnv.profileScopedEnv(host.variables, { AWS_PROFILE: profile }),
  *   extendEnv: true
  * })
  * ```
  */
-export const profileScopedEnv = (overrides) => {
+export const profileScopedEnv = (inherited, overrides) => {
     const cleared = {};
     for (const name of OVERRIDING_AWS_VARIABLES) {
         cleared[name] = undefined;
     }
+    for (const name of Object.keys(inherited)) {
+        if (isOverridingAwsVariable(name))
+            cleared[name] = undefined;
+    }
     return { ...cleared, ...overrides };
 };
+/**
+ * The environment a spawned child will inherit.
+ *
+ * A service rather than a direct read because only the executable boundary may
+ * touch the host process, while the spawns that need it sit deep in the runtime.
+ */
+export class HostEnvironment extends Context.Service()("@knpkv/codecommit-core/ChildEnv/HostEnvironment") {
+}
+/** Binds the inherited environment read at the executable boundary. */
+export const layerHostEnvironment = (variables) => Layer.succeed(HostEnvironment, HostEnvironment.of({ variables }));
 //# sourceMappingURL=ChildEnv.js.map

package/dist/ChildEnv.js.map

@@ -1 +1 @@
-{"version":3,"file":"ChildEnv.js","sourceRoot":"","sources":["../src/ChildEnv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,wBAAwB,GAA0B;IACtD,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,oBAAoB;IACpB,2BAA2B;IAC3B,cAAc;IACd,6BAA6B;IAC7B,uBAAuB;IACvB,YAAY;IACZ,oBAAoB;CACrB,CAAA;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,SAA6C,EACT,EAAE;IACtC,MAAM,OAAO,GAAuC,EAAE,CAAA;IACtD,KAAK,MAAM,IAAI,IAAI,wBAAwB,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAA;IAC3B,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE,CAAA;AACrC,CAAC,CAAA"}
+{"version":3,"file":"ChildEnv.js","sourceRoot":"","sources":["../src/ChildEnv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AACH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAEvC,MAAM,wBAAwB,GAA0B;IACtD,mBAAmB;IACnB,uBAAuB;IACvB,mBAAmB;IACnB,oBAAoB;IACpB,2BAA2B;IAC3B,cAAc;IACd,6BAA6B;IAC7B,uBAAuB;IACvB,YAAY;IACZ,oBAAoB;CACrB,CAAA;AAED,qFAAqF;AACrF,MAAM,uBAAuB,GAAG,CAAC,IAAY,EAAW,EAAE;IACxD,8EAA8E;IAC9E,+EAA+E;IAC/E,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACpC,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAA;AAC9E,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,SAA6C,EAC7C,SAA6C,EAC7C,EAAE;IACF,MAAM,OAAO,GAAuC,EAAE,CAAA;IACtD,KAAK,MAAM,IAAI,IAAI,wBAAwB,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAA;IAC3B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC1C,IAAI,uBAAuB,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAA;IAC9D,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,SAAS,EAAE,CAAA;AACrC,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,OAAO,eAAgB,SAAQ,OAAO,CAAC,OAAO,EAEhD,CAAC,iDAAiD,CAAC;CAAG;AAE1D,uEAAuE;AACvE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,SAA6C,EACf,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA"}

package/dist/ConfigService/SandboxPolicy.d.ts

@@ -0,0 +1,37 @@
+import { Effect } from "effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Path from "effect/Path";
+import { SandboxConfigurationError } from "../Errors.js";
+/** Dedicated host root for explicit sandbox volume sharing. */
+export declare const sandboxVolumeRoot: (homePath: string) => string;
+/**
+ * Validate all authority-bearing sandbox settings at a persistence or execution boundary.
+ */
+export declare const validateSandboxConfig: (config: {
+    readonly image: string;
+    readonly extensions: readonly string[];
+    readonly setupCommands: readonly string[];
+    readonly env: {
+        readonly [x: string]: string;
+    };
+    readonly volumeMounts: readonly {
+        readonly hostPath: string;
+        readonly containerPath: string;
+        readonly readonly: boolean;
+    }[];
+    readonly cloneDepth: number;
+}, homePath: string) => Effect.Effect<{
+    readonly image: string;
+    readonly extensions: readonly string[];
+    readonly setupCommands: readonly string[];
+    readonly env: {
+        readonly [x: string]: string;
+    };
+    readonly volumeMounts: readonly {
+        readonly hostPath: string;
+        readonly containerPath: string;
+        readonly readonly: boolean;
+    }[];
+    readonly cloneDepth: number;
+}, SandboxConfigurationError, FileSystem.FileSystem | Path.Path>;
+//# sourceMappingURL=SandboxPolicy.d.ts.map

package/dist/ConfigService/SandboxPolicy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxPolicy.d.ts","sourceRoot":"","sources":["../../src/ConfigService/SandboxPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAaxD,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,aAAc,MAAM,KAAG,MAAmD,CAAA;AAExG;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;gEAkFjC,CAAA"}

package/dist/ConfigService/SandboxPolicy.js

@@ -0,0 +1,72 @@
+import { Effect } from "effect";
+import * as FileSystem from "effect/FileSystem";
+import * as Path from "effect/Path";
+import { SandboxConfigurationError } from "../Errors.js";
+const digestPinnedImage = /@sha256:[0-9a-f]{64}$/u;
+const environmentVariableName = /^[A-Za-z_][A-Za-z0-9_]*$/u;
+const reservedEnvironmentKeys = new Set(["HASHED_PASSWORD", "PASSWORD"]);
+const permittedContainerRoots = ["/home/coder", "/tmp/.local/share/code-server"];
+const reject = (message) => new SandboxConfigurationError({ message });
+const expandHome = (input, homePath) => input === "~" ? homePath : input.startsWith("~/") ? `${homePath}${input.slice(1)}` : input;
+/** Dedicated host root for explicit sandbox volume sharing. */
+export const sandboxVolumeRoot = (homePath) => `${homePath}/.codecommit/sandbox-volumes`;
+/**
+ * Validate all authority-bearing sandbox settings at a persistence or execution boundary.
+ */
+export const validateSandboxConfig = Effect.fn("SandboxPolicy.validateSandboxConfig")(function* (config, homePath) {
+    const path = yield* Path.Path;
+    const fileSystem = yield* FileSystem.FileSystem;
+    if (!digestPinnedImage.test(config.image)) {
+        return yield* reject("Sandbox image must be pinned to an immutable sha256 digest");
+    }
+    for (const [key, value] of Object.entries(config.env)) {
+        if (!environmentVariableName.test(key)) {
+            return yield* reject(`Sandbox environment variable ${key} has an invalid name`);
+        }
+        if (reservedEnvironmentKeys.has(key.toUpperCase())) {
+            return yield* reject(`Sandbox environment variable ${key} is reserved`);
+        }
+        if (/\r|\n/u.test(value)) {
+            return yield* reject(`Sandbox environment variable ${key} must be a single line`);
+        }
+    }
+    const resolvedHomePath = path.resolve(homePath);
+    const allowedRoot = path.resolve(sandboxVolumeRoot(resolvedHomePath));
+    for (const mount of config.volumeMounts) {
+        const hostPath = path.resolve(expandHome(mount.hostPath, homePath));
+        const relativeHostPath = path.relative(allowedRoot, hostPath);
+        if (relativeHostPath === "" ||
+            relativeHostPath === ".." ||
+            relativeHostPath.startsWith(`..${path.sep}`) ||
+            path.isAbsolute(relativeHostPath)) {
+            return yield* reject(`Sandbox mount ${mount.hostPath} must be a child of ~/.codecommit/sandbox-volumes`);
+        }
+        const canonicalRoot = yield* fileSystem.realPath(allowedRoot).pipe(Effect.mapError(() => reject("Sandbox volume root must exist before adding mounts")));
+        const canonicalHomePath = yield* fileSystem.realPath(resolvedHomePath).pipe(Effect.mapError(() => reject("Sandbox home directory must exist before adding mounts")));
+        const expectedCanonicalRoot = path.resolve(canonicalHomePath, ".codecommit", "sandbox-volumes");
+        if (canonicalRoot !== expectedCanonicalRoot) {
+            return yield* reject("Sandbox volume root must not redirect outside ~/.codecommit/sandbox-volumes");
+        }
+        const canonicalHostPath = yield* fileSystem.realPath(hostPath).pipe(Effect.mapError(() => reject(`Sandbox mount ${mount.hostPath} must already exist`)));
+        const relativeCanonicalPath = path.relative(canonicalRoot, canonicalHostPath);
+        if (relativeCanonicalPath === "" ||
+            relativeCanonicalPath === ".." ||
+            relativeCanonicalPath.startsWith(`..${path.sep}`) ||
+            path.isAbsolute(relativeCanonicalPath)) {
+            return yield* reject(`Sandbox mount ${mount.hostPath} must resolve inside ~/.codecommit/sandbox-volumes`);
+        }
+        const containerPath = path.normalize(mount.containerPath);
+        const isPermittedContainerChild = permittedContainerRoots.some((root) => {
+            const relativeContainerPath = path.relative(root, containerPath);
+            return relativeContainerPath !== "" &&
+                relativeContainerPath !== ".." &&
+                !relativeContainerPath.startsWith(`..${path.sep}`) &&
+                !path.isAbsolute(relativeContainerPath);
+        });
+        if (!isPermittedContainerChild) {
+            return yield* reject(`Sandbox mount target ${mount.containerPath} must be a child of /home/coder or the code-server runtime data root`);
+        }
+    }
+    return config;
+});
+//# sourceMappingURL=SandboxPolicy.js.map

package/dist/ConfigService/SandboxPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SandboxPolicy.js","sourceRoot":"","sources":["../../src/ConfigService/SandboxPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAA;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAA;AAGxD,MAAM,iBAAiB,GAAG,wBAAwB,CAAA;AAClD,MAAM,uBAAuB,GAAG,2BAA2B,CAAA;AAC3D,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC,CAAA;AACxE,MAAM,uBAAuB,GAAG,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAA;AAEhF,MAAM,MAAM,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,IAAI,yBAAyB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;AAE9E,MAAM,UAAU,GAAG,CAAC,KAAa,EAAE,QAAgB,EAAU,EAAE,CAC7D,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAA;AAE5F,+DAA+D;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,GAAG,QAAQ,8BAA8B,CAAA;AAExG;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,qCAAqC,CAAC,CACnF,QAAQ,CAAC,EAAC,MAAqB,EAAE,QAAgB;IAC/C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAC7B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAA;IAC/C,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,4DAA4D,CAAC,CAAA;IACpF,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,gCAAgC,GAAG,sBAAsB,CAAC,CAAA;QACjF,CAAC;QACD,IAAI,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACnD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,gCAAgC,GAAG,cAAc,CAAC,CAAA;QACzE,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,gCAAgC,GAAG,wBAAwB,CAAC,CAAA;QACnF,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACrE,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAA;QACnE,MAAM,gBAAgB,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAA;QAC7D,IACE,gBAAgB,KAAK,EAAE;YACvB,gBAAgB,KAAK,IAAI;YACzB,gBAAgB,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YAC5C,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACjC,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAClB,iBAAiB,KAAK,CAAC,QAAQ,mDAAmD,CACnF,CAAA;QACH,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,IAAI,CAChE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,qDAAqD,CAAC,CAAC,CACrF,CAAA;QACD,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,IAAI,CACzE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,wDAAwD,CAAC,CAAC,CACxF,CAAA;QACD,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CACxC,iBAAiB,EACjB,aAAa,EACb,iBAAiB,CAClB,CAAA;QACD,IAAI,aAAa,KAAK,qBAAqB,EAAE,CAAC;YAC5C,OAAO,KAAK,CAAC,CAAC,MAAM,CAClB,6EAA6E,CAC9E,CAAA;QACH,CAAC;QACD,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,KAAK,CAAC,QAAQ,qBAAqB,CAAC,CAAC,CACpF,CAAA;QACD,MAAM,qBAAqB,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,iBAAiB,CAAC,CAAA;QAC7E,IACE,qBAAqB,KAAK,EAAE;YAC5B,qBAAqB,KAAK,IAAI;YAC9B,qBAAqB,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;YACjD,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,EACtC,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,MAAM,CAClB,iBAAiB,KAAK,CAAC,QAAQ,oDAAoD,CACpF,CAAA;QACH,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;QACzD,MAAM,yBAAyB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACtE,MAAM,qBAAqB,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,CAAA;YAChE,OAAO,qBAAqB,KAAK,EAAE;gBACjC,qBAAqB,KAAK,IAAI;gBAC9B,CAAC,qBAAqB,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClD,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAA;QAC3C,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,CAAC,MAAM,CAClB,wBAAwB,KAAK,CAAC,aAAa,sEAAsE,CAClH,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CACF,CAAA"}

package/dist/ConfigService/index.d.ts

@@ -10,8 +10,10 @@ import type * as Path from "effect/Path";
 import { EventsHub } from "../CacheService/EventsHub.js";
 import type { DetectedProfile, TuiConfig } from "./internal.js";
 import type { ConfigValidationResult } from "./validate.js";
+export { reviewProfileSkillLimit } from "../ReviewProfile.js";
 export { discoverAwsProfiles } from "./detectProfiles.js";
-export { AccountConfig, defaultSandboxConfig, DetectedProfile, SandboxConfig, TuiConfig } from "./internal.js";
+export { AccountConfig, defaultReviewConfig, defaultReviewProfiles, defaultSandboxConfig, defaultSandboxImage, DetectedProfile, ReviewConfig, ReviewKind, ReviewProfileConfig, SandboxConfig, TuiConfig } from "./internal.js";
+export { sandboxVolumeRoot, validateSandboxConfig } from "./SandboxPolicy.js";
 export { ConfigValidationResult } from "./validate.js";
 declare const ConfigService_base: Context.ServiceClass<ConfigService, "@knpkv/codecommit-core/ConfigService", {
     readonly load: Effect.Effect<TuiConfig, unknown>;

package/dist/ConfigService/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ConfigService/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAU,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AACvD,OAAO,KAAK,KAAK,UAAU,MAAM,mBAAmB,CAAA;AACpD,OAAO,KAAK,KAAK,IAAI,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAIxD,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAK/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAG3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;;mBASnC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;mBACjC,CAAC,MAAM,EAAE,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;6BACzC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;4BACvD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;qBACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;oBAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;uBAC9B,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,OAAO,CAAC;;AATrE,qBAAa,aAAc,SAAQ,kBAWQ;CAAG;AAwC9C,eAAO,MAAM,iBAAiB,kFA0BQ,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ConfigService/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAU,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AACvD,OAAO,KAAK,KAAK,UAAU,MAAM,mBAAmB,CAAA;AACpD,OAAO,KAAK,KAAK,IAAI,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AAIxD,OAAO,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAM/D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAG3D,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,aAAa,EACb,SAAS,EACV,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;;mBASnC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;mBACjC,CAAC,MAAM,EAAE,SAAS,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;6BACzC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;4BACvD,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;qBACrC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;oBAC/B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC;uBAC9B,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,OAAO,CAAC;;AATrE,qBAAa,aAAc,SAAQ,kBAWQ;CAAG;AAwC9C,eAAO,MAAM,iBAAiB,kFAkCQ,CAAA"}

package/dist/ConfigService/index.js

@@ -12,10 +12,13 @@ import { detectProfiles } from "./detectProfiles.js";
 import { ConfigPaths } from "./internal.js";
 import { makeLoad } from "./load.js";
 import { makeReset } from "./reset.js";
+import { validateSandboxConfig } from "./SandboxPolicy.js";
 import { save } from "./save.js";
 import { validate } from "./validate.js";
+export { reviewProfileSkillLimit } from "../ReviewProfile.js";
 export { discoverAwsProfiles } from "./detectProfiles.js";
-export { AccountConfig, defaultSandboxConfig, DetectedProfile, SandboxConfig, TuiConfig } from "./internal.js";
+export { AccountConfig, defaultReviewConfig, defaultReviewProfiles, defaultSandboxConfig, defaultSandboxImage, DetectedProfile, ReviewConfig, ReviewKind, ReviewProfileConfig, SandboxConfig, TuiConfig } from "./internal.js";
+export { sandboxVolumeRoot, validateSandboxConfig } from "./SandboxPolicy.js";
 export { ConfigValidationResult } from "./validate.js";
 // ---------------------------------------------------------------------------
 // Service Definition
@@ -41,7 +44,12 @@ export const ConfigServiceLive = Layer.effect(ConfigService, Effect.gen(function
     const reset = makeReset(detectProfilesLive);
     return {
         load: provide(load),
-        save: (config) => provide(save(config)).pipe(Effect.tap(() => hub.publish({ _tag: "Config" }))),
+        save: (config) => provide(Effect.gen(function* () {
+            const paths = yield* ConfigPaths;
+            const homePath = yield* paths.homePath;
+            yield* validateSandboxConfig(config.sandbox, homePath);
+            yield* save(config);
+        })).pipe(Effect.tap(() => hub.publish({ _tag: "Config" }))),
         detectProfiles: provide(detectProfilesLive),
         getConfigPath: provide(ConfigPaths.pipe(Effect.flatMap((p) => p.configPath))),
         backup: provide(backup),

package/dist/ConfigService/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ConfigService/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAGvD,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AACxD,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,eAAe,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC9G,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAEtD,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAW/C,CAAC,sCAAsC,CAAC;CAAG;AAE9C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAClC,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,EACjD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAClD,CACF,CACF,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAClD,CAAA;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CACnC,MAAM,CAAC,OAAO,CACZ,CAAC,MAAM,EAAgC,EAAE,CAAC,IAAI,EAC9C,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC,CAAC,CACzG,CACF,CAAA;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAC/B,MAAM,CAAC,OAAO,CACZ,CAAC,MAAM,EAAgC,EAAE,CAAC,IAAI,EAC9C,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAChG,CACF,CAAA;IAED,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AACjC,CAAC,CAAC,CACH,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAC3C,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAmD,CAAA;IACpF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,SAAS,CAAA;IAE5B,MAAM,OAAO,GAAG,CACd,MAA4E,EACvD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAErD,MAAM,kBAAkB,GAAG,cAAc,CAAC,IAAI,CAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,KAAK,EAAE,CAAC,CAAC,CAC3G,CAAA;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAA;IAE3C,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC/F,cAAc,EAAE,OAAO,CAAC,kBAAkB,CAAC;QAC3C,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7E,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;KAC5B,CAAA;AACH,CAAC,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ConfigService/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAA;AAGvD,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AACxD,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAEhC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAExC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,YAAY,EACZ,UAAU,EACV,mBAAmB,EACnB,aAAa,EACb,SAAS,EACV,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAA;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAEtD,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,OAAO,aAAc,SAAQ,OAAO,CAAC,OAAO,EAW/C,CAAC,sCAAsC,CAAC;CAAG;AAE9C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,eAAe,GAAG,KAAK,CAAC,MAAM,CAClC,WAAW,EACX,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,EACjD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CACjB,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAClD,CACF,CACF,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC5C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAClD,CAAA;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CACnC,MAAM,CAAC,OAAO,CACZ,CAAC,MAAM,EAAgC,EAAE,CAAC,IAAI,EAC9C,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,EAAE,OAAO,EAAE,uDAAuD,EAAE,CAAC,CAAC,CACzG,CACF,CAAA;IAED,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAC/B,MAAM,CAAC,OAAO,CACZ,CAAC,MAAM,EAAgC,EAAE,CAAC,IAAI,EAC9C,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAChG,CACF,CAAA;IAED,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAA;AACjC,CAAC,CAAC,CACH,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC,MAAM,CAC3C,aAAa,EACb,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAmD,CAAA;IACpF,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,SAAS,CAAA;IAE5B,MAAM,OAAO,GAAG,CACd,MAA4E,EACvD,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAErD,MAAM,kBAAkB,GAAG,cAAc,CAAC,IAAI,CAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,qBAAqB,CAAC,EAAE,OAAO,EAAE,+BAA+B,EAAE,KAAK,EAAE,CAAC,CAAC,CAC3G,CAAA;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,kBAAkB,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,kBAAkB,CAAC,CAAA;IAE3C,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC;QACnB,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CACf,OAAO,CACL,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAA;YAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAA;YACtC,KAAK,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YACtD,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACrB,CAAC,CAAC,CACH,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3D,cAAc,EAAE,OAAO,CAAC,kBAAkB,CAAC;QAC3C,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7E,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;QACvB,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;KAC5B,CAAA;AACH,CAAC,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAA"}

package/dist/ConfigService/internal.d.ts

@@ -3,6 +3,7 @@
  */
 import { Context, Effect, Schema } from "effect";
 import type { ConfigError, ProfileDetectionError } from "../Errors.js";
+export declare const defaultSandboxImage = "codercom/code-server@sha256:b88ed46a6ace76a0294a17a24f39aa88032ed0a3692c3d8ab5433b47ab57ccbf";
 declare const DetectedProfile_base: Schema.Class<DetectedProfile, Schema.Struct<{
     readonly name: Schema.brand<Schema.NonEmptyString, "AwsProfileName">;
     readonly region: Schema.optionalKey<Schema.brand<Schema.String, "AwsRegion">>;
@@ -29,6 +30,27 @@ export declare const AccountConfig: Schema.Struct<{
     readonly enabled: Schema.withDecodingDefaultTypeKey<Schema.Boolean, never>;
 }>;
 export type AccountConfig = typeof AccountConfig.Type;
+export declare const ReviewKind: Schema.Literals<readonly ["review", "security", "tests", "explain"]>;
+export type ReviewKind = typeof ReviewKind.Type;
+export declare const ReviewProfileConfig: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly name: Schema.String;
+    readonly kind: Schema.Literals<readonly ["review", "security", "tests", "explain"]>;
+    readonly skillIds: Schema.$Array<Schema.String>;
+}>;
+export type ReviewProfileConfig = typeof ReviewProfileConfig.Type;
+export declare const defaultReviewProfiles: ReadonlyArray<ReviewProfileConfig>;
+export declare const ReviewConfig: Schema.Struct<{
+    readonly defaultProfileId: Schema.withDecodingDefaultTypeKey<Schema.String, never>;
+    readonly profiles: Schema.withDecodingDefaultTypeKey<Schema.$Array<Schema.Struct<{
+        readonly id: Schema.String;
+        readonly name: Schema.String;
+        readonly kind: Schema.Literals<readonly ["review", "security", "tests", "explain"]>;
+        readonly skillIds: Schema.$Array<Schema.String>;
+    }>>, never>;
+}>;
+export type ReviewConfig = typeof ReviewConfig.Type;
+export declare const defaultReviewConfig: ReviewConfig;
 export declare const TuiConfig: Schema.Struct<{
     readonly accounts: Schema.$Array<Schema.Struct<{
         readonly profile: Schema.brand<Schema.String, "AwsProfileName">;
@@ -38,6 +60,15 @@ export declare const TuiConfig: Schema.Struct<{
     readonly autoDetect: Schema.withDecodingDefaultTypeKey<Schema.Boolean, never>;
     readonly autoRefresh: Schema.withDecodingDefaultTypeKey<Schema.Boolean, never>;
     readonly refreshIntervalSeconds: Schema.withDecodingDefaultTypeKey<Schema.Number, never>;
+    readonly review: Schema.withDecodingDefaultTypeKey<Schema.Struct<{
+        readonly defaultProfileId: Schema.withDecodingDefaultTypeKey<Schema.String, never>;
+        readonly profiles: Schema.withDecodingDefaultTypeKey<Schema.$Array<Schema.Struct<{
+            readonly id: Schema.String;
+            readonly name: Schema.String;
+            readonly kind: Schema.Literals<readonly ["review", "security", "tests", "explain"]>;
+            readonly skillIds: Schema.$Array<Schema.String>;
+        }>>, never>;
+    }>, never>;
     readonly sandbox: Schema.withDecodingDefaultTypeKey<Schema.Struct<{
         readonly image: Schema.withDecodingDefaultTypeKey<Schema.String, never>;
         readonly extensions: Schema.withDecodingDefaultTypeKey<Schema.$Array<Schema.String>, never>;
@@ -52,6 +83,8 @@ export declare const TuiConfig: Schema.Struct<{
     }>, never>;
 }>;
 export type TuiConfig = typeof TuiConfig.Type;
+/** Migrate only the mutable image tag previously emitted by the settings UI. */
+export declare const migrateLegacySandboxImage: (config: TuiConfig) => TuiConfig;
 export declare const accountsFromDetected: (detected: ReadonlyArray<DetectedProfile>) => TuiConfig["accounts"];
 export declare const makeDefaultConfig: (detected?: ReadonlyArray<DetectedProfile>) => TuiConfig;
 export declare const parseAwsConfig: (content: string) => ReadonlyArray<DetectedProfile>;

package/dist/ConfigService/internal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../src/ConfigService/internal.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAgB,OAAO,EAAE,MAAM,EAAgB,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE5E,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;;;;;AAoBtE,qBAAa,eAAgB,SAAQ,oBAGnC;CAAG;AAEL,eAAO,MAAM,aAAa;;;;;;;;;;;EAuBxB,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAA;AAErD,eAAO,MAAM,oBAAoB,EAAE,aAAoD,CAAA;AAEvF,eAAO,MAAM,aAAa;;;;EAMxB,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAA;AAErD,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;EAQpB,CAAA;AAEF,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAA;AAE7C,eAAO,MAAM,oBAAoB,aAAc,aAAa,CAAC,eAAe,CAAC,KAAG,SAAS,CAAC,UAAU,CAK/F,CAAA;AAEL,eAAO,MAAM,iBAAiB,cAAc,aAAa,CAAC,eAAe,CAAC,KAAQ,SAMhF,CAAA;AAqCF,eAAO,MAAM,cAAc,YAAa,MAAM,KAAG,aAAa,CAAC,eAAe,CAO3E,CAAA;;yBASsB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;uBACpC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC;;AAJnE,qBAAa,WAAY,SAAQ,gBAMQ;CAAG"}
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../../src/ConfigService/internal.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAgB,OAAO,EAAE,MAAM,EAAgB,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE5E,OAAO,KAAK,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AAoBtE,eAAO,MAAM,mBAAmB,iGACgE,CAAA;;;;;AAGhG,qBAAa,eAAgB,SAAQ,oBAGnC;CAAG;AAEL,eAAO,MAAM,aAAa;;;;;;;;;;;EAuBxB,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAA;AAErD,eAAO,MAAM,oBAAoB,EAAE,aAAoD,CAAA;AAEvF,eAAO,MAAM,aAAa;;;;EAMxB,CAAA;AAEF,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAA;AAErD,eAAO,MAAM,UAAU,sEAA8D,CAAA;AACrF,MAAM,MAAM,UAAU,GAAG,OAAO,UAAU,CAAC,IAAI,CAAA;AAE/C,eAAO,MAAM,mBAAmB;;;;;EAY9B,CAAA;AAEF,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;AAEjE,eAAO,MAAM,qBAAqB,EAAE,aAAa,CAAC,mBAAmB,CAyBpE,CAAA;AAED,eAAO,MAAM,YAAY;;;;;;;;EAsBxB,CAAA;AAED,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,IAAI,CAAA;AAEnD,eAAO,MAAM,mBAAmB,EAAE,YAGjC,CAAA;AAED,eAAO,MAAM,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWpB,CAAA;AAEF,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAA;AAE7C,gFAAgF;AAChF,eAAO,MAAM,yBAAyB,WAAY,SAAS,KAAG,SAGlD,CAAA;AAEZ,eAAO,MAAM,oBAAoB,aAAc,aAAa,CAAC,eAAe,CAAC,KAAG,SAAS,CAAC,UAAU,CAK/F,CAAA;AAEL,eAAO,MAAM,iBAAiB,cAAc,aAAa,CAAC,eAAe,CAAC,KAAQ,SAOhF,CAAA;AAuCF,eAAO,MAAM,cAAc,YAAa,MAAM,KAAG,aAAa,CAAC,eAAe,CAO3E,CAAA;;yBASsB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC;uBACpC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC;;AAJnE,qBAAa,WAAY,SAAQ,gBAMQ;CAAG"}

package/dist/ConfigService/internal.js

@@ -3,6 +3,7 @@
  */
 import { Array as Arr, Context, Effect, Option, pipe, Schema } from "effect";
 import { AwsProfileName, AwsRegion } from "../Domain.js";
+import { reviewProfileSkillLimit } from "../ReviewProfile.js";
 // ---------------------------------------------------------------------------
 // Schemas
 // ---------------------------------------------------------------------------
@@ -12,20 +13,22 @@ const emptyStrings = [];
 const emptyEnv = {};
 const emptyVolumeMounts = [];
 const defaultAccountRegions = [decodeAwsRegion("us-east-1")];
+export const defaultSandboxImage = "codercom/code-server@sha256:b88ed46a6ace76a0294a17a24f39aa88032ed0a3692c3d8ab5433b47ab57ccbf";
+const legacyDefaultSandboxImage = "codercom/code-server:latest";
 export class DetectedProfile extends Schema.Class("DetectedProfile")({
     name: Schema.NonEmptyString.pipe(Schema.brand("AwsProfileName")),
     region: Schema.optionalKey(AwsRegion)
 }) {
 }
 export const SandboxConfig = Schema.Struct({
-    image: Schema.String.pipe(Schema.withDecodingDefaultTypeKey(decodingDefault("codercom/code-server:latest"))),
+    image: Schema.String.pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(defaultSandboxImage))),
     extensions: Schema.Array(Schema.String).pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(emptyStrings))),
     setupCommands: Schema.Array(Schema.String).pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(emptyStrings))),
     env: Schema.Record(Schema.String, Schema.String).pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(emptyEnv))),
     volumeMounts: Schema.Array(Schema.Struct({
         hostPath: Schema.String,
         containerPath: Schema.String,
-        readonly: Schema.Boolean.pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(false)))
+        readonly: Schema.Boolean.pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(true)))
     })).pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(emptyVolumeMounts))),
     cloneDepth: Schema.Int.check(Schema.isGreaterThanOrEqualTo(0)).pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(0)))
 });
@@ -35,16 +38,63 @@ export const AccountConfig = Schema.Struct({
     regions: Schema.Array(AwsRegion).pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(defaultAccountRegions))),
     enabled: Schema.Boolean.pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(true)))
 });
+export const ReviewKind = Schema.Literals(["review", "security", "tests", "explain"]);
+export const ReviewProfileConfig = Schema.Struct({
+    id: Schema.String.check(Schema.isTrimmed(), Schema.isNonEmpty(), Schema.isMaxLength(64), Schema.isPattern(/^[a-z][a-z0-9-]*$/u)),
+    name: Schema.String.check(Schema.isTrimmed(), Schema.isNonEmpty(), Schema.isMaxLength(80)),
+    kind: ReviewKind,
+    skillIds: Schema.Array(Schema.String.check(Schema.isTrimmed(), Schema.isNonEmpty(), Schema.isMaxLength(256))).check(Schema.isMaxLength(reviewProfileSkillLimit), Schema.isUnique())
+});
+export const defaultReviewProfiles = [
+    {
+        id: "thorough",
+        name: "Thorough review",
+        kind: "review",
+        skillIds: ["builtin:pr-review", "builtin:pr-review-diff"]
+    },
+    {
+        id: "security",
+        name: "Security review",
+        kind: "security",
+        skillIds: ["builtin:pr-review-diff"]
+    },
+    {
+        id: "tests",
+        name: "Test review",
+        kind: "tests",
+        skillIds: ["builtin:pr-review-diff"]
+    },
+    {
+        id: "explain",
+        name: "Explain change",
+        kind: "explain",
+        skillIds: []
+    }
+];
+export const ReviewConfig = Schema.Struct({
+    defaultProfileId: Schema.String.check(Schema.isTrimmed(), Schema.isNonEmpty(), Schema.isMaxLength(64), Schema.isPattern(/^[a-z][a-z0-9-]*$/u)).pipe(Schema.withDecodingDefaultTypeKey(decodingDefault("thorough"))),
+    profiles: Schema.Array(ReviewProfileConfig).check(Schema.isMinLength(1), Schema.isMaxLength(12)).pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(defaultReviewProfiles)))
+}).check(Schema.makeFilter(({ defaultProfileId, profiles }) => new Set(profiles.map(({ id }) => id)).size === profiles.length &&
+    profiles.some(({ id }) => id === defaultProfileId), { expected: "unique review profile ids containing the default profile" }));
+export const defaultReviewConfig = {
+    defaultProfileId: "thorough",
+    profiles: defaultReviewProfiles
+};
 export const TuiConfig = Schema.Struct({
     accounts: Schema.Array(AccountConfig),
     autoDetect: Schema.Boolean.pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(true))),
     autoRefresh: Schema.Boolean.pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(true))),
     refreshIntervalSeconds: Schema.Number.pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(300))),
+    review: ReviewConfig.pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(defaultReviewConfig))),
     sandbox: SandboxConfig.pipe(Schema.withDecodingDefaultTypeKey(decodingDefault(defaultSandboxConfig)))
 });
+/** Migrate only the mutable image tag previously emitted by the settings UI. */
+export const migrateLegacySandboxImage = (config) => config.sandbox.image === legacyDefaultSandboxImage
+    ? { ...config, sandbox: { ...config.sandbox, image: defaultSandboxImage } }
+    : config;
 export const accountsFromDetected = (detected) => detected.map((profile) => ({
     profile: profile.name,
-    regions: profile.region ? [profile.region] : [],
+    regions: profile.region !== undefined && profile.region.length > 0 ? [profile.region] : [],
     enabled: false
 }));
 export const makeDefaultConfig = (detected = []) => ({
@@ -52,6 +102,7 @@ export const makeDefaultConfig = (detected = []) => ({
     autoDetect: true,
     autoRefresh: true,
     refreshIntervalSeconds: 300,
+    review: defaultReviewConfig,
     sandbox: defaultSandboxConfig
 });
 // ---------------------------------------------------------------------------
@@ -64,22 +115,26 @@ const parseIniSections = (content) => {
     let current = null;
     for (const line of lines) {
         const trimmed = line.trim();
-        if (!trimmed || trimmed.startsWith("#") || trimmed.startsWith(";"))
+        if (trimmed.length === 0 || trimmed.startsWith("#") || trimmed.startsWith(";"))
             continue;
         const profileMatch = trimmed.match(/^\[(?:profile\s+)?(.+)\]$/);
-        if (profileMatch?.[1]) {
-            if (current)
+        if (profileMatch?.[1] !== undefined) {
+            if (current !== null)
                 sections.push(current);
             current = { name: profileMatch[1].trim() };
         }
-        else if (current && trimmed.includes("=")) {
+        else if (current !== null && trimmed.includes("=")) {
             const [key, ...valueParts] = trimmed.split("=");
             if (key?.trim().toLowerCase() === "region") {
-                current.region = valueParts.join("=").trim();
+                const region = valueParts.join("=").trim();
+                if (region.length === 0)
+                    delete current.region;
+                else
+                    current.region = region;
             }
         }
     }
-    if (current)
+    if (current !== null)
         sections.push(current);
     return sections;
 };

package/dist/ConfigService/internal.js.map

@@ -1 +1 @@
-{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../src/ConfigService/internal.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,KAAK,IAAI,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAGxD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,eAAe,GAAG,CAAI,KAAQ,EAA+C,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAQ3G,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;AACpD,MAAM,YAAY,GAAkB,EAAE,CAAA;AACtC,MAAM,QAAQ,GAA2B,EAAE,CAAA;AAC3C,MAAM,iBAAiB,GAAqC,EAAE,CAAA;AAC9D,MAAM,qBAAqB,GAAqB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAA;AAE9E,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAAkB,iBAAiB,CAAC,CAAC;IACpF,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;CACtC,CAAC;CAAG;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,6BAA6B,CAAC,CAAC,CAAC;IAC5G,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9G,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC7C,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CACjE;IACD,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAC7D;IACD,YAAY,EAAE,MAAM,CAAC,KAAK,CACxB,MAAM,CAAC,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,aAAa,EAAE,MAAM,CAAC,MAAM;QAC5B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;KACzF,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,0BAA0B,CAC/B,eAAe,CAAC,iBAAiB,CAAC,CACnC,CACF;IACD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CACtD;CACF,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,oBAAoB,GAAkB,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAA;AAEvF,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CACnC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC,CAC1E;IACD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;CACvF,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IACzF,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,OAAO,EAAE,aAAa,CAAC,IAAI,CACzB,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CACzE;CACF,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAwC,EAAyB,EAAE,CACtG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC,IAAI;IACrB,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;IAC/C,OAAO,EAAE,KAAK;CACf,CAAC,CAAC,CAAA;AAEL,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAQ,GAAmC,EAAE,EAAa,EAAE,CAAC,CAAC;IAC9F,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC;IACxC,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,IAAI;IACjB,sBAAsB,EAAE,GAAG;IAC3B,OAAO,EAAE,oBAAoB;CAC9B,CAAC,CAAA;AAEF,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,MAAM,qBAAqB,GAAG,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAA;AAOzE,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAqB,EAAE;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,IAAI,OAAO,GAA6C,IAAI,CAAA;IAE5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAE5E,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAC/D,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtB,IAAI,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnC,OAAO,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAA;QAC5C,CAAC;aAAM,IAAI,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC/C,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC3C,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,OAAO;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnC,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAe,EAAkC,EAAE,CAChF,IAAI,CACF,gBAAgB,CAAC,OAAO,CAAC,EACzB,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,EACpD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EACzB,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EACnC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAC5C,CAAA;AAEH,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAM7C,CAAC,oCAAoC,CAAC;CAAG"}
+{"version":3,"file":"internal.js","sourceRoot":"","sources":["../../src/ConfigService/internal.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,KAAK,IAAI,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC5E,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAExD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAA;AAE7D,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,MAAM,eAAe,GAAG,CAAI,KAAQ,EAA+C,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAQ3G,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;AACpD,MAAM,YAAY,GAAkB,EAAE,CAAA;AACtC,MAAM,QAAQ,GAA2B,EAAE,CAAA;AAC3C,MAAM,iBAAiB,GAAqC,EAAE,CAAA;AAC9D,MAAM,qBAAqB,GAAqB,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAA;AAC9E,MAAM,CAAC,MAAM,mBAAmB,GAC9B,8FAA8F,CAAA;AAChG,MAAM,yBAAyB,GAAG,6BAA6B,CAAA;AAE/D,MAAM,OAAO,eAAgB,SAAQ,MAAM,CAAC,KAAK,CAAkB,iBAAiB,CAAC,CAAC;IACpF,IAAI,EAAE,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChE,MAAM,EAAE,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC;CACtC,CAAC;CAAG;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAClG,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9G,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAC7C,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CACjE;IACD,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CACnD,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAC7D;IACD,YAAY,EAAE,MAAM,CAAC,KAAK,CACxB,MAAM,CAAC,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC,MAAM;QACvB,aAAa,EAAE,MAAM,CAAC,MAAM;QAC5B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;KACxF,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,0BAA0B,CAC/B,eAAe,CAAC,iBAAiB,CAAC,CACnC,CACF;IACD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACjE,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CACtD;CACF,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,oBAAoB,GAAkB,MAAM,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAA;AAEvF,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,cAAc;IACvB,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CACnC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC,CAC1E;IACD,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;CACvF,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;AAGrF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CACrB,MAAM,CAAC,SAAS,EAAE,EAClB,MAAM,CAAC,UAAU,EAAE,EACnB,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EACtB,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC,CACvC;IACD,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC1F,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE,MAAM,CAAC,KAAK,CACpB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CACtF,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;CACxE,CAAC,CAAA;AAIF,MAAM,CAAC,MAAM,qBAAqB,GAAuC;IACvE;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,CAAC,mBAAmB,EAAE,wBAAwB,CAAC;KAC1D;IACD;QACE,EAAE,EAAE,UAAU;QACd,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,CAAC,wBAAwB,CAAC;KACrC;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,CAAC,wBAAwB,CAAC;KACrC;IACD;QACE,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,SAAS;QACf,QAAQ,EAAE,EAAE;KACb;CACF,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CACnC,MAAM,CAAC,SAAS,EAAE,EAClB,MAAM,CAAC,UAAU,EAAE,EACnB,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,EACtB,MAAM,CAAC,SAAS,CAAC,oBAAoB,CAAC,CACvC,CAAC,IAAI,CACJ,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAC/D;IACD,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAC/C,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EACrB,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CACvB,CAAC,IAAI,CACJ,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,qBAAqB,CAAC,CAAC,CAC1E;CACF,CAAC,CAAC,KAAK,CACN,MAAM,CAAC,UAAU,CACf,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,EAAE,EAAE,CACjC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,MAAM;IAC9D,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,gBAAgB,CAAC,EACpD,EAAE,QAAQ,EAAE,0DAA0D,EAAE,CACzE,CACF,CAAA;AAID,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,gBAAgB,EAAE,UAAU;IAC5B,QAAQ,EAAE,qBAAqB;CAChC,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC;IACrC,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IACzF,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IACnG,MAAM,EAAE,YAAY,CAAC,IAAI,CACvB,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,mBAAmB,CAAC,CAAC,CACxE;IACD,OAAO,EAAE,aAAa,CAAC,IAAI,CACzB,MAAM,CAAC,0BAA0B,CAAC,eAAe,CAAC,oBAAoB,CAAC,CAAC,CACzE;CACF,CAAC,CAAA;AAIF,gFAAgF;AAChF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,MAAiB,EAAa,EAAE,CACxE,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,yBAAyB;IAChD,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE;IAC3E,CAAC,CAAC,MAAM,CAAA;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAwC,EAAyB,EAAE,CACtG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC,IAAI;IACrB,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;IAC1F,OAAO,EAAE,KAAK;CACf,CAAC,CAAC,CAAA;AAEL,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAQ,GAAmC,EAAE,EAAa,EAAE,CAAC,CAAC;IAC9F,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,CAAC;IACxC,UAAU,EAAE,IAAI;IAChB,WAAW,EAAE,IAAI;IACjB,sBAAsB,EAAE,GAAG;IAC3B,MAAM,EAAE,mBAAmB;IAC3B,OAAO,EAAE,oBAAoB;CAC9B,CAAC,CAAA;AAEF,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E,MAAM,qBAAqB,GAAG,MAAM,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAA;AAOzE,MAAM,gBAAgB,GAAG,CAAC,OAAe,EAAqB,EAAE;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACjC,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,IAAI,OAAO,GAA6C,IAAI,CAAA;IAE5D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;QAC3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAQ;QAExF,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAA;QAC/D,IAAI,YAAY,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,OAAO,KAAK,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YAC5C,OAAO,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAA;QAC5C,CAAC;aAAM,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC/C,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;gBAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAA;;oBACzC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAA;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC5C,OAAO,QAAQ,CAAA;AACjB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAe,EAAkC,EAAE,CAChF,IAAI,CACF,gBAAgB,CAAC,OAAO,CAAC,EACzB,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,EACpD,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EACzB,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EACnC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAC5C,CAAA;AAEH,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,MAAM,OAAO,WAAY,SAAQ,OAAO,CAAC,OAAO,EAM7C,CAAC,oCAAoC,CAAC;CAAG"}

package/dist/ConfigService/load.d.ts

@@ -1,32 +1,43 @@
 /**
  * @internal
  */
-import { Effect, Schema } from "effect";
+import { Effect } from "effect";
 import * as FileSystem from "effect/FileSystem";
 import type * as Path from "effect/Path";
 import { ConfigError, ConfigParseError } from "../Errors.js";
 import type { ProfileDetectionError } from "../Errors.js";
 import { ConfigPaths, type DetectedProfile } from "./internal.js";
-export declare const makeLoad: (detectProfiles: Effect.Effect<readonly DetectedProfile[], ProfileDetectionError, ConfigPaths | FileSystem.FileSystem | Path.Path>) => Effect.Effect<Schema.Struct.ReadonlySide<{
-    readonly accounts: Schema.$Array<Schema.Struct<{
-        readonly profile: Schema.brand<Schema.String, "AwsProfileName">;
-        readonly regions: Schema.withDecodingDefaultTypeKey<Schema.$Array<Schema.brand<Schema.String, "AwsRegion">>, never>;
-        readonly enabled: Schema.withDecodingDefaultTypeKey<Schema.Boolean, never>;
-    }>>;
-    readonly autoDetect: Schema.withDecodingDefaultTypeKey<Schema.Boolean, never>;
-    readonly autoRefresh: Schema.withDecodingDefaultTypeKey<Schema.Boolean, never>;
-    readonly refreshIntervalSeconds: Schema.withDecodingDefaultTypeKey<Schema.Number, never>;
-    readonly sandbox: Schema.withDecodingDefaultTypeKey<Schema.Struct<{
-        readonly image: Schema.withDecodingDefaultTypeKey<Schema.String, never>;
-        readonly extensions: Schema.withDecodingDefaultTypeKey<Schema.$Array<Schema.String>, never>;
-        readonly setupCommands: Schema.withDecodingDefaultTypeKey<Schema.$Array<Schema.String>, never>;
-        readonly env: Schema.withDecodingDefaultTypeKey<Schema.$Record<Schema.String, Schema.String>, never>;
-        readonly volumeMounts: Schema.withDecodingDefaultTypeKey<Schema.$Array<Schema.Struct<{
-            readonly hostPath: Schema.String;
-            readonly containerPath: Schema.String;
-            readonly readonly: Schema.withDecodingDefaultTypeKey<Schema.Boolean, never>;
-        }>>, never>;
-        readonly cloneDepth: Schema.withDecodingDefaultTypeKey<Schema.Int, never>;
-    }>, never>;
-}, "Type">, ConfigError | ConfigParseError, ConfigPaths | FileSystem.FileSystem | Path.Path>;
+export declare const makeLoad: (detectProfiles: Effect.Effect<readonly DetectedProfile[], ProfileDetectionError, ConfigPaths | FileSystem.FileSystem | Path.Path>) => Effect.Effect<{
+    readonly accounts: readonly {
+        readonly profile: string & import("effect/Brand").Brand<"AwsProfileName">;
+        readonly regions: readonly (string & import("effect/Brand").Brand<"AwsRegion">)[];
+        readonly enabled: boolean;
+    }[];
+    readonly autoDetect: boolean;
+    readonly autoRefresh: boolean;
+    readonly refreshIntervalSeconds: number;
+    readonly review: {
+        readonly defaultProfileId: string;
+        readonly profiles: readonly {
+            readonly id: string;
+            readonly name: string;
+            readonly kind: "explain" | "review" | "security" | "tests";
+            readonly skillIds: readonly string[];
+        }[];
+    };
+    readonly sandbox: {
+        readonly image: string;
+        readonly extensions: readonly string[];
+        readonly setupCommands: readonly string[];
+        readonly env: {
+            readonly [x: string]: string;
+        };
+        readonly volumeMounts: readonly {
+            readonly hostPath: string;
+            readonly containerPath: string;
+            readonly readonly: boolean;
+        }[];
+        readonly cloneDepth: number;
+    };
+}, ConfigError | ConfigParseError, ConfigPaths | FileSystem.FileSystem | Path.Path>;
 //# sourceMappingURL=load.d.ts.map

package/dist/ConfigService/load.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../src/ConfigService/load.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACvC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,KAAK,IAAI,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EAAwB,WAAW,EAAE,KAAK,eAAe,EAAgC,MAAM,eAAe,CAAA;AAIrH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;4FA8CnB,CAAA"}
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../src/ConfigService/load.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AACvC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,KAAK,IAAI,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAA;AACzD,OAAO,EAEL,WAAW,EACX,KAAK,eAAe,EAIrB,MAAM,eAAe,CAAA;AAItB,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mFA+CnB,CAAA"}