@marifold/core 0.60.0

package/dist/channels/respond.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.respond = respond;
+/**
+ * Run one turn for a messaging channel (Telegram, Slack, …) and collect a
+ * plain-text reply. **Channel-agnostic:** without an `approvalHandler` the agent
+ * run is unattended (`ask` degrades to deny — the profile's `allow` rules and
+ * `trusted_folders` govern); with one, the channel prompts the user to approve.
+ * Presentation/formatting (chunking, markdown) belongs to the channel bridge.
+ */
+async function respond(runtime, request) {
+    const { profile, mode, prompt, sessionId, approvalHandler, cwd, trustedFolders, instructions, think } = request;
+    if (mode === 'chat') {
+        let text = '';
+        for await (const chunk of runtime.stream({ prompt, profile, sessionId, think }))
+            text += chunk;
+        return { text: text.trim(), ok: true, denied: [] };
+    }
+    // Agent — unattended (no approvalHandler). Accumulate the visible text; map
+    // tool requests by id so a policy denial can be reported by tool name; track
+    // the terminal status so the channel can flag a failed run.
+    const runner = runtime.createAgentRunner(profile);
+    const toolById = new Map();
+    const denied = new Set();
+    let text = '';
+    let ok = false;
+    for await (const event of runner.run({ objective: prompt, profile, sessionId, approvalHandler, cwd, trustedFolders, instructions, think })) {
+        if (event.type === 'text')
+            text += event.text;
+        else if (event.type === 'tool_request')
+            toolById.set(event.call.id, event.call.tool);
+        else if (event.type === 'approval_decision' && !event.approved) {
+            denied.add(toolById.get(event.requestId) ?? event.requestId);
+        }
+        else if (event.type === 'done') {
+            ok = event.status === 'completed';
+        }
+    }
+    return { text: text.trim(), ok, denied: [...denied] };
+}
+//# sourceMappingURL=respond.js.map

package/dist/channels/respond.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"respond.js","sourceRoot":"","sources":["../../src/channels/respond.ts"],"names":[],"mappings":";;;AAwCA;;;;;;GAMG;AACI,KAAK,kBAAkB,OAAwB,EAAE,OAAuB;IAC7E,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAEhH,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YAAE,IAAI,IAAI,KAAK,CAAC;QAC/F,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrD,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,4DAA4D;IAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC3I,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;YAAE,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;aACzC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aAChF,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC/D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/D,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjC,EAAE,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;AACxD,CAAC"}

package/dist/config/ChatGptTokenRefresh.d.ts

@@ -0,0 +1,18 @@
+export interface ChatGptRefreshedTokens {
+    /** OAuth access token — used directly as the Codex-backend bearer credential. */
+    apiKey: string;
+    /** Next refresh token. May rotate; persist it. */
+    refreshToken: string;
+    /** ChatGPT account id from the refreshed id_token, when present. */
+    accountId?: string;
+    /** Unix seconds when the access credential expires, when reported. */
+    expiresAt?: number;
+}
+/**
+ * Refresh an expired ChatGPT OAuth credential from the stored refresh token.
+ * Subscription (ChatGPT plan) accounts use the access token directly against
+ * the Codex backend, so no id_token→API-key exchange happens; the account id is
+ * re-derived from the refreshed id_token for the `chatgpt-account-id` header.
+ */
+export declare function refreshChatGptAccessToken(refreshToken: string): Promise<ChatGptRefreshedTokens>;
+//# sourceMappingURL=ChatGptTokenRefresh.d.ts.map

package/dist/config/ChatGptTokenRefresh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChatGptTokenRefresh.d.ts","sourceRoot":"","sources":["../../src/config/ChatGptTokenRefresh.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,sBAAsB;IACrC,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sEAAsE;IACtE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBrG"}

package/dist/config/ChatGptTokenRefresh.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.refreshChatGptAccessToken = refreshChatGptAccessToken;
+const proxy_1 = require("../util/proxy");
+const idToken_1 = require("../util/idToken");
+const CHATGPT_AUTH_ISSUER = 'https://auth.openai.com';
+const CHATGPT_OAUTH_CLIENT_ID = 'app_EMoamEEZ73f0CkXaXp7hrann';
+const REFRESH_TIMEOUT_MS = 20_000;
+/**
+ * Refresh an expired ChatGPT OAuth credential from the stored refresh token.
+ * Subscription (ChatGPT plan) accounts use the access token directly against
+ * the Codex backend, so no id_token→API-key exchange happens; the account id is
+ * re-derived from the refreshed id_token for the `chatgpt-account-id` header.
+ */
+async function refreshChatGptAccessToken(refreshToken) {
+    const data = await postJson(`${CHATGPT_AUTH_ISSUER}/oauth/token`, {
+        grant_type: 'refresh_token',
+        refresh_token: refreshToken,
+        client_id: CHATGPT_OAUTH_CLIENT_ID,
+    }, 'ChatGPT token refresh failed');
+    const accessToken = stringField(data.access_token);
+    if (!accessToken) {
+        throw new Error('ChatGPT token refresh response did not include an access token.');
+    }
+    const idToken = stringField(data.id_token);
+    const expiresIn = numberField(data.expires_in);
+    return {
+        apiKey: accessToken,
+        refreshToken: stringField(data.refresh_token) ?? refreshToken,
+        accountId: idToken ? (0, idToken_1.accountIdFromIdToken)(idToken) : undefined,
+        expiresAt: expiresIn !== undefined ? Math.floor(Date.now() / 1000) + expiresIn : undefined,
+    };
+}
+async function postJson(url, body, label) {
+    return parseResponse(await doFetch(url, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+        body: JSON.stringify(body),
+        signal: AbortSignal.timeout(REFRESH_TIMEOUT_MS),
+    }, label), label);
+}
+async function doFetch(url, init, label) {
+    const dispatcher = (0, proxy_1.proxyDispatcher)();
+    try {
+        return await fetch(url, dispatcher ? { ...init, dispatcher } : init);
+    }
+    catch (error) {
+        throw new Error(`${label}: ${error instanceof Error ? `${error.name}: ${error.message}` : String(error)}`);
+    }
+}
+async function parseResponse(response, label) {
+    if (!response.ok) {
+        throw new Error(`${label}: HTTP ${response.status}: ${await response.text().catch(() => '')}`);
+    }
+    return await response.json();
+}
+function stringField(value) {
+    return typeof value === 'string' && value ? value : undefined;
+}
+function numberField(value) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : undefined;
+}
+//# sourceMappingURL=ChatGptTokenRefresh.js.map

package/dist/config/ChatGptTokenRefresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ChatGptTokenRefresh.js","sourceRoot":"","sources":["../../src/config/ChatGptTokenRefresh.ts"],"names":[],"mappings":";;;AAAA,yCAAgD;AAChD,6CAAuD;AAEvD,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AACtD,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAC/D,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAalC;;;;;GAKG;AACI,KAAK,oCAAoC,YAAoB;IAClE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,mBAAmB,cAAc,EAAE;QAChE,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,YAAY;QAC3B,SAAS,EAAE,uBAAuB;KACnC,EAAE,8BAA8B,CAAC,CAAC;IAEnC,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACnD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE/C,OAAO;QACL,MAAM,EAAE,WAAW;QACnB,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,YAAY;QAC7D,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAA,8BAAoB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAC9D,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS;KAC3F,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,IAA4B,EAAE,KAAa;IAC9E,OAAO,aAAa,CAAC,MAAM,OAAO,CAAC,GAAG,EAAE;QACtC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;QAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;KAChD,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,IAAiB,EAAE,KAAa;IAClE,MAAM,UAAU,GAAG,IAAA,uBAAe,GAAE,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,QAAkB,EAAE,KAAa;IAC5D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,UAAU,QAAQ,CAAC,MAAM,KAAK,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAA6B,CAAC;AAC1D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC"}

package/dist/config/ConfigBackup.d.ts

@@ -0,0 +1,20 @@
+import { LoadedMarifoldConfig } from './ConfigSchema';
+export interface ConfigBackupExportOptions {
+    includeSessions?: boolean;
+}
+export interface ConfigBackupExportResult {
+    path: string;
+    profileFileCount: number;
+    includedSessions: boolean;
+}
+export interface ConfigBackupImportOptions {
+    force?: boolean;
+}
+export interface ConfigBackupImportResult {
+    configPath: string;
+    profileFileCount: number;
+    restoredSessions: boolean;
+}
+export declare function exportConfigBackup(loadedConfig: LoadedMarifoldConfig, outputPath: string, options?: ConfigBackupExportOptions): ConfigBackupExportResult;
+export declare function importConfigBackup(loadedConfig: LoadedMarifoldConfig, inputPath: string, options?: ConfigBackupImportOptions): ConfigBackupImportResult;
+//# sourceMappingURL=ConfigBackup.d.ts.map

package/dist/config/ConfigBackup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigBackup.d.ts","sourceRoot":"","sources":["../../src/config/ConfigBackup.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAyBtD,MAAM,WAAW,yBAAyB;IACxC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,oBAAoB,EAClC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,yBAA8B,GACtC,wBAAwB,CA2B1B;AAED,wBAAgB,kBAAkB,CAChC,YAAY,EAAE,oBAAoB,EAClC,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,yBAA8B,GACtC,wBAAwB,CA0C1B"}

package/dist/config/ConfigBackup.js

@@ -0,0 +1,197 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.exportConfigBackup = exportConfigBackup;
+exports.importConfigBackup = importConfigBackup;
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const ConfigLoader_1 = require("./ConfigLoader");
+const ConfigManager_1 = require("./ConfigManager");
+const MarifoldError_1 = require("../errors/MarifoldError");
+const WorkspacePaths_1 = require("../workspace/WorkspacePaths");
+const BACKUP_SCHEMA = 'marifold.config-backup.v1';
+function exportConfigBackup(loadedConfig, outputPath, options = {}) {
+    const resolvedOutputPath = (0, WorkspacePaths_1.resolveUserPath)(outputPath);
+    const profileFiles = collectProfileFiles(loadedConfig.config.paths.profilesDir);
+    const sessionsDb = options.includeSessions && fs.existsSync(loadedConfig.config.paths.sessionsDb)
+        ? {
+            encoding: 'base64',
+            content: fs.readFileSync(loadedConfig.config.paths.sessionsDb).toString('base64'),
+        }
+        : undefined;
+    const backup = {
+        schema: BACKUP_SCHEMA,
+        exportedAt: new Date().toISOString(),
+        configToml: fs.existsSync(loadedConfig.configPath)
+            ? fs.readFileSync(loadedConfig.configPath, 'utf-8')
+            : (0, ConfigManager_1.renderMarifoldConfig)(loadedConfig.config),
+        profiles: profileFiles,
+        ...(sessionsDb ? { sessionsDb } : {}),
+    };
+    fs.mkdirSync(path.dirname(resolvedOutputPath), { recursive: true });
+    fs.writeFileSync(resolvedOutputPath, `${JSON.stringify(backup, null, 2)}\n`);
+    return {
+        path: resolvedOutputPath,
+        profileFileCount: profileFiles.length,
+        includedSessions: Boolean(sessionsDb),
+    };
+}
+function importConfigBackup(loadedConfig, inputPath, options = {}) {
+    const resolvedInputPath = (0, WorkspacePaths_1.resolveUserPath)(inputPath);
+    const backup = readBackup(resolvedInputPath);
+    const restoredConfig = loadBackupConfig(backup.configToml);
+    const profileTargets = backup.profiles.map(file => ({
+        file,
+        target: path.join(restoredConfig.config.paths.profilesDir, safeRelativePath(file.path)),
+    }));
+    const sessionsTarget = backup.sessionsDb ? restoredConfig.config.paths.sessionsDb : undefined;
+    if (!options.force) {
+        if (fs.existsSync(loadedConfig.configPath)) {
+            throw MarifoldError_1.MarifoldError.configInvalid(`Config file already exists at ${loadedConfig.configPath}. Re-run with --force to overwrite it.`);
+        }
+        for (const target of profileTargets) {
+            if (fs.existsSync(target.target)) {
+                throw MarifoldError_1.MarifoldError.configInvalid(`Profile file already exists at ${target.target}. Re-run with --force to overwrite it.`);
+            }
+        }
+        if (sessionsTarget && fs.existsSync(sessionsTarget)) {
+            throw MarifoldError_1.MarifoldError.configInvalid(`Sessions database already exists at ${sessionsTarget}. Re-run with --force to overwrite it.`);
+        }
+    }
+    fs.mkdirSync(path.dirname(loadedConfig.configPath), { recursive: true });
+    fs.writeFileSync(loadedConfig.configPath, backup.configToml);
+    for (const target of profileTargets) {
+        fs.mkdirSync(path.dirname(target.target), { recursive: true });
+        fs.writeFileSync(target.target, Buffer.from(target.file.content, target.file.encoding));
+    }
+    if (backup.sessionsDb && sessionsTarget) {
+        fs.mkdirSync(path.dirname(sessionsTarget), { recursive: true });
+        fs.writeFileSync(sessionsTarget, Buffer.from(backup.sessionsDb.content, backup.sessionsDb.encoding));
+    }
+    return {
+        configPath: loadedConfig.configPath,
+        profileFileCount: profileTargets.length,
+        restoredSessions: Boolean(backup.sessionsDb),
+    };
+}
+function collectProfileFiles(profilesDir) {
+    if (!fs.existsSync(profilesDir))
+        return [];
+    const files = [];
+    const stack = [profilesDir];
+    while (stack.length > 0) {
+        const current = stack.pop();
+        if (!current)
+            continue;
+        for (const entry of fs.readdirSync(current, { withFileTypes: true })) {
+            const absolutePath = path.join(current, entry.name);
+            if (entry.isDirectory()) {
+                stack.push(absolutePath);
+                continue;
+            }
+            if (!entry.isFile())
+                continue;
+            const relativePath = path.relative(profilesDir, absolutePath);
+            if (!relativePath || relativePath.startsWith('..') || path.isAbsolute(relativePath))
+                continue;
+            files.push({
+                path: relativePath,
+                encoding: 'base64',
+                content: fs.readFileSync(absolutePath).toString('base64'),
+            });
+        }
+    }
+    return files.sort((a, b) => a.path.localeCompare(b.path));
+}
+function readBackup(inputPath) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(inputPath, 'utf-8'));
+        if (parsed.schema !== BACKUP_SCHEMA) {
+            throw new Error(`Expected schema '${BACKUP_SCHEMA}'.`);
+        }
+        if (typeof parsed.configToml !== 'string') {
+            throw new Error('Expected configToml to be a string.');
+        }
+        if (!Array.isArray(parsed.profiles)) {
+            throw new Error('Expected profiles to be an array.');
+        }
+        for (const file of parsed.profiles) {
+            if (typeof file !== 'object'
+                || file === null
+                || typeof file.path !== 'string'
+                || file.encoding !== 'base64'
+                || typeof file.content !== 'string') {
+                throw new Error('Profile files must include path, base64 encoding, and content.');
+            }
+            safeRelativePath(file.path);
+        }
+        if (parsed.sessionsDb && (parsed.sessionsDb.encoding !== 'base64' || typeof parsed.sessionsDb.content !== 'string')) {
+            throw new Error('sessionsDb must use base64 encoding.');
+        }
+        return {
+            schema: BACKUP_SCHEMA,
+            exportedAt: typeof parsed.exportedAt === 'string' ? parsed.exportedAt : '',
+            configToml: parsed.configToml,
+            profiles: parsed.profiles,
+            ...(parsed.sessionsDb ? { sessionsDb: parsed.sessionsDb } : {}),
+        };
+    }
+    catch (error) {
+        throw MarifoldError_1.MarifoldError.configInvalid(`Could not read config backup ${inputPath}: ${error instanceof Error ? error.message : String(error)}`);
+    }
+}
+function loadBackupConfig(configToml) {
+    const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), 'marifold-config-backup-'));
+    const tempConfig = path.join(tempDir, 'config.toml');
+    try {
+        fs.writeFileSync(tempConfig, configToml);
+        return new ConfigLoader_1.ConfigLoader().load({ configPath: tempConfig });
+    }
+    finally {
+        fs.rmSync(tempDir, { recursive: true, force: true });
+    }
+}
+function safeRelativePath(filePath) {
+    if (!filePath || path.isAbsolute(filePath)) {
+        throw MarifoldError_1.MarifoldError.configInvalid(`Invalid backup profile path: ${filePath}`);
+    }
+    const normalized = path.normalize(filePath);
+    if (normalized === '.' || normalized.startsWith('..') || path.isAbsolute(normalized)) {
+        throw MarifoldError_1.MarifoldError.configInvalid(`Invalid backup profile path: ${filePath}`);
+    }
+    return normalized;
+}
+//# sourceMappingURL=ConfigBackup.js.map

package/dist/config/ConfigBackup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigBackup.js","sourceRoot":"","sources":["../../src/config/ConfigBackup.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,EAAE,+BAAW;AACzB,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAE7B,iDAA8C;AAC9C,mDAAuD;AACvD,2DAAwD;AACxD,gEAA8D;AAE9D,MAAM,aAAa,GAAG,2BAA2B,CAAC;AAuClD,4BACE,YAAkC,EAClC,UAAkB,EAClB,OAAO,GAA8B,EAAE;IAEvC,MAAM,kBAAkB,GAAG,IAAA,gCAAe,EAAC,UAAU,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,mBAAmB,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;QAC/F,CAAC,CAAC;YACA,QAAQ,EAAE,QAAiB;YAC3B,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;SAClF;QACD,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,MAAM,GAAyB;QACnC,MAAM,EAAE,aAAa;QACrB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC;YAChD,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC;YACnD,CAAC,CAAC,IAAA,oCAAoB,EAAC,YAAY,CAAC,MAAM,CAAC;QAC7C,QAAQ,EAAE,YAAY;QACtB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtC,CAAC;IAEF,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,EAAE,CAAC,aAAa,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7E,OAAO;QACL,IAAI,EAAE,kBAAkB;QACxB,gBAAgB,EAAE,YAAY,CAAC,MAAM;QACrC,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAAC;KACtC,CAAC;AACJ,CAAC;AAED,4BACE,YAAkC,EAClC,SAAiB,EACjB,OAAO,GAA8B,EAAE;IAEvC,MAAM,iBAAiB,GAAG,IAAA,gCAAe,EAAC,SAAS,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI;QACJ,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KACxF,CAAC,CAAC,CAAC;IACJ,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAE9F,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,MAAM,6BAAa,CAAC,aAAa,CAAC,iCAAiC,YAAY,CAAC,UAAU,wCAAwC,CAAC,CAAC;QACtI,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,MAAM,6BAAa,CAAC,aAAa,CAAC,kCAAkC,MAAM,CAAC,MAAM,wCAAwC,CAAC,CAAC;YAC7H,CAAC;QACH,CAAC;QACD,IAAI,cAAc,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACpD,MAAM,6BAAa,CAAC,aAAa,CAAC,uCAAuC,cAAc,wCAAwC,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;IAED,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,EAAE,CAAC,aAAa,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAE7D,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/D,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,IAAI,cAAc,EAAE,CAAC;QACxC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvG,CAAC;IAED,OAAO;QACL,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,gBAAgB,EAAE,cAAc,CAAC,MAAM;QACvC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmB;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,EAAE,CAAC;IAE3C,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO;YAAE,SAAS;QAEvB,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACrE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACzB,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAS;YAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YAC9D,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,SAAS;YAC9F,KAAK,CAAC,IAAI,CAAC;gBACT,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAkC,CAAC;QAChG,IAAI,MAAM,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,oBAAoB,aAAa,IAAI,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACnC,IACE,OAAO,IAAI,KAAK,QAAQ;mBACrB,IAAI,KAAK,IAAI;mBACb,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;mBAC7B,IAAI,CAAC,QAAQ,KAAK,QAAQ;mBAC1B,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EACnC,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;YACpF,CAAC;YACD,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,UAAU,CAAC,OAAO,KAAK,QAAQ,CAAC,EAAE,CAAC;YACpH,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,aAAa;YACrB,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;YAC1E,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,6BAAa,CAAC,aAAa,CAAC,gCAAgC,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5I,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IAClF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACrD,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACzC,OAAO,IAAI,2BAAY,EAAE,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;IAC7D,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,MAAM,6BAAa,CAAC,aAAa,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACrF,MAAM,6BAAa,CAAC,aAAa,CAAC,gCAAgC,QAAQ,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/config/ConfigLoader.d.ts

@@ -0,0 +1,28 @@
+import { PartialAgentConfig } from '../agent/ApprovalPolicy';
+import { LoadedMarifoldConfig } from './ConfigSchema';
+export interface LoadConfigOptions {
+    configPath?: string;
+}
+export declare class ConfigLoader {
+    load(options?: LoadConfigOptions): LoadedMarifoldConfig;
+    private resolveConfigPath;
+    private readToml;
+    private normalize;
+    private normalizeService;
+    private normalizeChannels;
+    private normalizeTelegramChannel;
+    private normalizeWebSearch;
+    private normalizeDefault;
+    private normalizePaths;
+    private normalizeModels;
+    private normalizeMemory;
+    private normalizeProviders;
+}
+/**
+ * Parse a TOML `[agent]` table into a {@link PartialAgentConfig} — only the keys
+ * actually present, with NO defaults applied — so it can be merged over the
+ * global config. Shared by ConfigLoader (global `[agent]`) and ProfileResolver
+ * (per-profile `[agent]` in profile.toml) so validation is identical.
+ */
+export declare function parsePartialAgentConfig(raw: unknown, label: string): PartialAgentConfig;
+//# sourceMappingURL=ConfigLoader.d.ts.map

package/dist/config/ConfigLoader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ConfigLoader.d.ts","sourceRoot":"","sources":["../../src/config/ConfigLoader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoD,kBAAkB,EAAsB,MAAM,yBAAyB,CAAC;AAEnI,OAAO,EACL,oBAAoB,EAerB,MAAM,gBAAgB,CAAC;AAcxB,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qBAAa,YAAY;IACvB,IAAI,CAAC,OAAO,GAAE,iBAAsB,GAAG,oBAAoB,CAW1D;IAED,OAAO,CAAC,iBAAiB;IAIzB,OAAO,CAAC,QAAQ;IAYhB,OAAO,CAAC,SAAS;IAoBjB,OAAO,CAAC,gBAAgB;IAUxB,OAAO,CAAC,iBAAiB;IAOzB,OAAO,CAAC,wBAAwB;IAgBhC,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,gBAAgB;IAexB,OAAO,CAAC,cAAc;IAWtB,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,eAAe;IAOvB,OAAO,CAAC,kBAAkB;CAuC3B;AAkFD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,kBAAkB,CAavF"}