@qduc/term2 0.1.5 → 0.1.6

package/dist/services/settings-persistence.test.js

@@ -0,0 +1,51 @@
+import test from 'ava';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { SettingsSchema, DEFAULT_SETTINGS } from './settings-schema.js';
+import { hasMissingKeys, loadSettingsFromFile, saveSettingsToFile, stripSensitiveSettings, } from './settings-persistence.js';
+test('stripSensitiveSettings: removes shellPath and openrouter secrets', (t) => {
+    const settings = JSON.parse(JSON.stringify(DEFAULT_SETTINGS));
+    settings.app.shellPath = '/bin/zsh';
+    settings.agent.openrouter = {
+        apiKey: 'secret',
+        baseUrl: 'https://example.com',
+        referrer: 'x',
+        title: 'y',
+    };
+    const cleaned = stripSensitiveSettings(settings);
+    t.is(cleaned.app?.shellPath, undefined);
+    t.is(cleaned.agent?.openrouter, undefined);
+});
+test('hasMissingKeys: true when defaults introduce new key', (t) => {
+    const target = { a: { b: 1 } };
+    const source = { a: { b: 1, c: 2 } };
+    t.true(hasMissingKeys(target, source, new Set()));
+});
+test('loadSettingsFromFile: returns empty validated when schema rejects', (t) => {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'term2-settings-'));
+    t.teardown(() => fs.rmSync(dir, { recursive: true, force: true }));
+    fs.writeFileSync(path.join(dir, 'settings.json'), JSON.stringify({ agent: { maxTurns: -1 } }, null, 2), 'utf-8');
+    const out = loadSettingsFromFile({
+        settingsDir: dir,
+        schema: SettingsSchema,
+        disableLogging: true,
+    });
+    t.deepEqual(out.validated, {});
+    t.deepEqual(out.raw, { agent: { maxTurns: -1 } });
+});
+test('saveSettingsToFile: writes stripped settings', (t) => {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'term2-settings-'));
+    t.teardown(() => fs.rmSync(dir, { recursive: true, force: true }));
+    const settings = JSON.parse(JSON.stringify(DEFAULT_SETTINGS));
+    settings.app.shellPath = '/bin/zsh';
+    saveSettingsToFile({
+        settingsDir: dir,
+        settings,
+        stripSensitiveSettings,
+        disableLogging: true,
+    });
+    const written = JSON.parse(fs.readFileSync(path.join(dir, 'settings.json'), 'utf-8'));
+    t.is(written.app?.shellPath, undefined);
+});
+//# sourceMappingURL=settings-persistence.test.js.map

package/dist/services/settings-persistence.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-persistence.test.js","sourceRoot":"","sources":["../../source/services/settings-persistence.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,KAAK,CAAC;AACvB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AAEnC,IAAI,CAAC,kEAAkE,EAAE,CAAC,CAAC,EAAE,EAAE;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,UAAU,GAAG;QAC1B,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,GAAG;QACb,KAAK,EAAE,GAAG;KACX,CAAC;IAEF,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC,CAAC,EAAE,CAAE,OAAe,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC,CAAC,EAAE,CAAE,OAAe,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sDAAsD,EAAE,CAAC,CAAC,EAAE,EAAE;IACjE,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;IACrC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mEAAmE,EAAE,CAAC,CAAC,EAAE,EAAE;IAC9E,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEnE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEjH,MAAM,GAAG,GAAG,oBAAoB,CAAC;QAC/B,WAAW,EAAE,GAAG;QAChB,MAAM,EAAE,cAAc;QACtB,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;IAEH,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8CAA8C,EAAE,CAAC,CAAC,EAAE,EAAE;IACzD,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC;IAEpC,kBAAkB,CAAC;QACjB,WAAW,EAAE,GAAG;QAChB,QAAQ;QACR,sBAAsB;QACtB,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC"}

package/dist/services/settings-schema.d.ts

@@ -0,0 +1,320 @@
+import { z } from 'zod';
+import '../providers/index.js';
+export declare const AgentSettingsSchema: z.ZodObject<{
+    model: z.ZodDefault<z.ZodString>;
+    reasoningEffort: z.ZodDefault<z.ZodEnum<{
+        default: "default";
+        medium: "medium";
+        none: "none";
+        minimal: "minimal";
+        low: "low";
+        high: "high";
+    }>>;
+    temperature: z.ZodOptional<z.ZodNumber>;
+    maxTurns: z.ZodDefault<z.ZodNumber>;
+    retryAttempts: z.ZodDefault<z.ZodNumber>;
+    provider: z.ZodDefault<z.ZodString>;
+    openrouter: z.ZodOptional<z.ZodObject<{
+        apiKey: z.ZodOptional<z.ZodString>;
+        baseUrl: z.ZodOptional<z.ZodString>;
+        referrer: z.ZodOptional<z.ZodString>;
+        title: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    mentorModel: z.ZodOptional<z.ZodString>;
+    mentorProvider: z.ZodOptional<z.ZodString>;
+    mentorReasoningEffort: z.ZodDefault<z.ZodEnum<{
+        default: "default";
+        medium: "medium";
+        none: "none";
+        minimal: "minimal";
+        low: "low";
+        high: "high";
+    }>>;
+    useFlexServiceTier: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+export declare const ShellSettingsSchema: z.ZodObject<{
+    timeout: z.ZodDefault<z.ZodNumber>;
+    maxOutputLines: z.ZodDefault<z.ZodNumber>;
+    maxOutputChars: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const UISettingsSchema: z.ZodObject<{
+    historySize: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const LoggingSettingsSchema: z.ZodObject<{
+    logLevel: z.ZodDefault<z.ZodEnum<{
+        error: "error";
+        warn: "warn";
+        info: "info";
+        security: "security";
+        debug: "debug";
+    }>>;
+    disableLogging: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    debugLogging: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    suppressConsoleOutput: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+export declare const EnvironmentSettingsSchema: z.ZodObject<{
+    nodeEnv: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const AppSettingsSchema: z.ZodObject<{
+    shellPath: z.ZodOptional<z.ZodString>;
+    mentorMode: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    editMode: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    liteMode: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+export declare const ToolsSettingsSchema: z.ZodObject<{
+    logFileOperations: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    enableEditHealing: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    editHealingModel: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+}, z.core.$strip>;
+export declare const DebugSettingsSchema: z.ZodObject<{
+    debugBashTool: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, z.core.$strip>;
+export declare const SSHSettingsSchema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodBoolean>;
+    host: z.ZodOptional<z.ZodString>;
+    port: z.ZodDefault<z.ZodNumber>;
+    username: z.ZodOptional<z.ZodString>;
+    remoteDir: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare const WebSearchSettingsSchema: z.ZodObject<{
+    provider: z.ZodOptional<z.ZodString>;
+    tavily: z.ZodOptional<z.ZodObject<{
+        apiKey: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const CustomProviderSchema: z.ZodObject<{
+    name: z.ZodString;
+    baseUrl: z.ZodString;
+    apiKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Settings that are sensitive and should NEVER be saved to disk.
+ * These are only loaded from environment variables.
+ */
+export declare function getSensitiveSettingKeys(): Set<string>;
+export declare const SENSITIVE_SETTING_KEYS: Set<string>;
+export declare const SettingsSchema: z.ZodObject<{
+    providers: z.ZodDefault<z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        baseUrl: z.ZodString;
+        apiKey: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>>;
+    agent: z.ZodOptional<z.ZodObject<{
+        model: z.ZodDefault<z.ZodString>;
+        reasoningEffort: z.ZodDefault<z.ZodEnum<{
+            default: "default";
+            medium: "medium";
+            none: "none";
+            minimal: "minimal";
+            low: "low";
+            high: "high";
+        }>>;
+        temperature: z.ZodOptional<z.ZodNumber>;
+        maxTurns: z.ZodDefault<z.ZodNumber>;
+        retryAttempts: z.ZodDefault<z.ZodNumber>;
+        provider: z.ZodDefault<z.ZodString>;
+        openrouter: z.ZodOptional<z.ZodObject<{
+            apiKey: z.ZodOptional<z.ZodString>;
+            baseUrl: z.ZodOptional<z.ZodString>;
+            referrer: z.ZodOptional<z.ZodString>;
+            title: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+        mentorModel: z.ZodOptional<z.ZodString>;
+        mentorProvider: z.ZodOptional<z.ZodString>;
+        mentorReasoningEffort: z.ZodDefault<z.ZodEnum<{
+            default: "default";
+            medium: "medium";
+            none: "none";
+            minimal: "minimal";
+            low: "low";
+            high: "high";
+        }>>;
+        useFlexServiceTier: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, z.core.$strip>>;
+    shell: z.ZodOptional<z.ZodObject<{
+        timeout: z.ZodDefault<z.ZodNumber>;
+        maxOutputLines: z.ZodDefault<z.ZodNumber>;
+        maxOutputChars: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    ui: z.ZodOptional<z.ZodObject<{
+        historySize: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    logging: z.ZodOptional<z.ZodObject<{
+        logLevel: z.ZodDefault<z.ZodEnum<{
+            error: "error";
+            warn: "warn";
+            info: "info";
+            security: "security";
+            debug: "debug";
+        }>>;
+        disableLogging: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        debugLogging: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        suppressConsoleOutput: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, z.core.$strip>>;
+    environment: z.ZodOptional<z.ZodObject<{
+        nodeEnv: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    app: z.ZodOptional<z.ZodObject<{
+        shellPath: z.ZodOptional<z.ZodString>;
+        mentorMode: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        editMode: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        liteMode: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, z.core.$strip>>;
+    tools: z.ZodOptional<z.ZodObject<{
+        logFileOperations: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        enableEditHealing: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        editHealingModel: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    }, z.core.$strip>>;
+    debug: z.ZodOptional<z.ZodObject<{
+        debugBashTool: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, z.core.$strip>>;
+    ssh: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        host: z.ZodOptional<z.ZodString>;
+        port: z.ZodDefault<z.ZodNumber>;
+        username: z.ZodOptional<z.ZodString>;
+        remoteDir: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    webSearch: z.ZodOptional<z.ZodObject<{
+        provider: z.ZodOptional<z.ZodString>;
+        tavily: z.ZodOptional<z.ZodObject<{
+            apiKey: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export interface SettingsData {
+    providers: Array<z.infer<typeof CustomProviderSchema>>;
+    agent: z.infer<typeof AgentSettingsSchema>;
+    shell: z.infer<typeof ShellSettingsSchema>;
+    ui: z.infer<typeof UISettingsSchema>;
+    logging: z.infer<typeof LoggingSettingsSchema>;
+    environment: z.infer<typeof EnvironmentSettingsSchema>;
+    app: z.infer<typeof AppSettingsSchema>;
+    tools: z.infer<typeof ToolsSettingsSchema>;
+    debug: z.infer<typeof DebugSettingsSchema>;
+    ssh: z.infer<typeof SSHSettingsSchema>;
+    webSearch: z.infer<typeof WebSearchSettingsSchema>;
+}
+export type SettingSource = 'cli' | 'env' | 'config' | 'default';
+export interface SettingWithSource<T = any> {
+    value: T;
+    source: SettingSource;
+}
+export interface SettingsWithSources {
+    agent: {
+        model: SettingWithSource<string>;
+        reasoningEffort: SettingWithSource<string>;
+        temperature: SettingWithSource<number | undefined>;
+        maxTurns: SettingWithSource<number>;
+        retryAttempts: SettingWithSource<number>;
+        provider: SettingWithSource<string>;
+        openrouter: SettingWithSource<any>;
+        mentorModel: SettingWithSource<string | undefined>;
+        mentorProvider: SettingWithSource<string | undefined>;
+        mentorReasoningEffort: SettingWithSource<string>;
+        useFlexServiceTier: SettingWithSource<boolean>;
+    };
+    shell: {
+        timeout: SettingWithSource<number>;
+        maxOutputLines: SettingWithSource<number>;
+        maxOutputChars: SettingWithSource<number>;
+    };
+    ui: {
+        historySize: SettingWithSource<number>;
+    };
+    logging: {
+        logLevel: SettingWithSource<string>;
+        disableLogging: SettingWithSource<boolean>;
+        debugLogging: SettingWithSource<boolean>;
+        suppressConsoleOutput: SettingWithSource<boolean>;
+    };
+    environment: {
+        nodeEnv: SettingWithSource<string | undefined>;
+    };
+    app: {
+        shellPath: SettingWithSource<string | undefined>;
+        mentorMode: SettingWithSource<boolean>;
+        editMode: SettingWithSource<boolean>;
+        liteMode: SettingWithSource<boolean>;
+    };
+    tools: {
+        logFileOperations: SettingWithSource<boolean>;
+        enableEditHealing: SettingWithSource<boolean>;
+        editHealingModel: SettingWithSource<string>;
+    };
+    debug: {
+        debugBashTool: SettingWithSource<boolean>;
+    };
+    ssh: {
+        enabled: SettingWithSource<boolean>;
+        host: SettingWithSource<string | undefined>;
+        port: SettingWithSource<number>;
+        username: SettingWithSource<string | undefined>;
+        remoteDir: SettingWithSource<string | undefined>;
+    };
+    webSearch: {
+        provider: SettingWithSource<string | undefined>;
+        tavily: SettingWithSource<{
+            apiKey?: string;
+        } | undefined>;
+    };
+}
+/**
+ * Centralized list of all setting keys for consistency across the app.
+ * Used by settings command UI and other components to avoid duplication.
+ */
+export declare const SETTING_KEYS: {
+    readonly AGENT_MODEL: "agent.model";
+    readonly AGENT_REASONING_EFFORT: "agent.reasoningEffort";
+    readonly AGENT_TEMPERATURE: "agent.temperature";
+    readonly AGENT_PROVIDER: "agent.provider";
+    readonly AGENT_MAX_TURNS: "agent.maxTurns";
+    readonly AGENT_RETRY_ATTEMPTS: "agent.retryAttempts";
+    readonly AGENT_OPENROUTER_API_KEY: "agent.openrouter.apiKey";
+    readonly AGENT_OPENROUTER_BASE_URL: "agent.openrouter.baseUrl";
+    readonly AGENT_OPENROUTER_REFERRER: "agent.openrouter.referrer";
+    readonly AGENT_OPENROUTER_TITLE: "agent.openrouter.title";
+    readonly AGENT_MENTOR_MODEL: "agent.mentorModel";
+    readonly AGENT_MENTOR_PROVIDER: "agent.mentorProvider";
+    readonly AGENT_MENTOR_REASONING_EFFORT: "agent.mentorReasoningEffort";
+    readonly AGENT_USE_FLEX_SERVICE_TIER: "agent.useFlexServiceTier";
+    readonly SHELL_TIMEOUT: "shell.timeout";
+    readonly SHELL_MAX_OUTPUT_LINES: "shell.maxOutputLines";
+    readonly SHELL_MAX_OUTPUT_CHARS: "shell.maxOutputChars";
+    readonly UI_HISTORY_SIZE: "ui.historySize";
+    readonly LOGGING_LOG_LEVEL: "logging.logLevel";
+    readonly LOGGING_DISABLE: "logging.disableLogging";
+    readonly LOGGING_DEBUG: "logging.debugLogging";
+    readonly LOGGING_SUPPRESS_CONSOLE: "logging.suppressConsoleOutput";
+    readonly ENV_NODE_ENV: "environment.nodeEnv";
+    readonly APP_SHELL_PATH: "app.shellPath";
+    readonly APP_MENTOR_MODE: "app.mentorMode";
+    readonly APP_EDIT_MODE: "app.editMode";
+    readonly APP_LITE_MODE: "app.liteMode";
+    readonly TOOLS_LOG_FILE_OPS: "tools.logFileOperations";
+    readonly TOOLS_ENABLE_EDIT_HEALING: "tools.enableEditHealing";
+    readonly TOOLS_EDIT_HEALING_MODEL: "tools.editHealingModel";
+    readonly DEBUG_BASH_TOOL: "debug.debugBashTool";
+    readonly SSH_ENABLED: "ssh.enabled";
+    readonly SSH_HOST: "ssh.host";
+    readonly SSH_PORT: "ssh.port";
+    readonly SSH_USERNAME: "ssh.username";
+    readonly SSH_REMOTE_DIR: "ssh.remoteDir";
+    readonly WEB_SEARCH_PROVIDER: "webSearch.provider";
+    readonly WEB_SEARCH_TAVILY_API_KEY: "webSearch.tavily.apiKey";
+};
+export declare const RUNTIME_MODIFIABLE_SETTINGS: Set<string>;
+export declare const OPTIONAL_DEFAULT_KEYS: Set<string>;
+export declare const DEFAULT_SETTINGS: SettingsData;
+/**
+ * Publicly exported list of sensitive settings for UI/CLI components to use.
+ * These settings should only be configured via environment variables.
+ */
+export declare const SENSITIVE_SETTINGS: {
+    readonly AGENT_OPENROUTER_API_KEY: "agent.openrouter.apiKey";
+    readonly AGENT_OPENROUTER_BASE_URL: "agent.openrouter.baseUrl";
+    readonly AGENT_OPENROUTER_REFERRER: "agent.openrouter.referrer";
+    readonly AGENT_OPENROUTER_TITLE: "agent.openrouter.title";
+    readonly APP_SHELL_PATH: "app.shellPath";
+};
+//# sourceMappingURL=settings-schema.d.ts.map

package/dist/services/settings-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-schema.d.ts","sourceRoot":"","sources":["../../source/services/settings-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,uBAAuB,CAAC;AAK/B,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAqC9B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;iBAI9B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;iBAE3B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;;;iBAKhC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;iBAEpC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;iBAS5B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;iBAI9B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;iBAE9B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;iBAM5B,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;iBAOlC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAEH;;;GAGG;AACH,wBAAgB,uBAAuB,IAAI,GAAG,CAAC,MAAM,CAAC,CAsBrD;AAED,eAAO,MAAM,sBAAsB,aAA4B,CAAC;AAEhE,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAYzB,CAAC;AAGH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;IACvD,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;IAC3C,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;CACpD;AAED,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEjE,MAAM,WAAW,iBAAiB,CAAC,CAAC,GAAG,GAAG;IACxC,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE;QACL,KAAK,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACjC,eAAe,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC3C,WAAW,EAAE,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QACnD,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACpC,aAAa,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzC,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACpC,UAAU,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnC,WAAW,EAAE,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QACnD,cAAc,EAAE,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QACtD,qBAAqB,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACjD,kBAAkB,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;KAChD,CAAC;IACF,KAAK,EAAE;QACL,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACnC,cAAc,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAC1C,cAAc,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;KAC3C,CAAC;IACF,EAAE,EAAE;QACF,WAAW,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;KACxC,CAAC;IACF,OAAO,EAAE;QACP,QAAQ,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACpC,cAAc,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3C,YAAY,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACzC,qBAAqB,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;KACnD,CAAC;IACF,WAAW,EAAE;QACX,OAAO,EAAE,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;KAChD,CAAC;IACF,GAAG,EAAE;QACH,SAAS,EAAE,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QACjD,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvC,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACrC,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;KACtC,CAAC;IACF,KAAK,EAAE;QACL,iBAAiB,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC9C,iBAAiB,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC9C,gBAAgB,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;KAC7C,CAAC;IACF,KAAK,EAAE;QACL,aAAa,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;KAC3C,CAAC;IACF,GAAG,EAAE;QACH,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,EAAE,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAC5C,IAAI,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAChC,QAAQ,EAAE,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAChD,SAAS,EAAE,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;KAClD,CAAC;IACF,SAAS,EAAE;QACT,QAAQ,EAAE,iBAAiB,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;QAChD,MAAM,EAAE,iBAAiB,CAAC;YAAE,MAAM,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,SAAS,CAAC,CAAC;KAC5D,CAAC;CACH;AAED;;;GAGG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCf,CAAC;AAGX,eAAO,MAAM,2BAA2B,aAiBtC,CAAC;AAGH,eAAO,MAAM,qBAAqB,aAAsB,CAAC;AAGzD,eAAO,MAAM,gBAAgB,EAAE,YAwD9B,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;;;CAMrB,CAAC"}

package/dist/services/settings-schema.js

@@ -0,0 +1,272 @@
+import { z } from 'zod';
+// Import providers to ensure they're registered before schema construction
+import '../providers/index.js';
+import { getAllProviders } from '../providers/index.js';
+import { getAllWebSearchProviders } from '../providers/web-search/index.js';
+// Define schemas for validation
+export const AgentSettingsSchema = z.object({
+    model: z.string().min(1).default('gpt-5.1'),
+    // 'default' signals we should *not* explicitly pass a reasoningEffort
+    // to the API, allowing it to decide what to use.
+    reasoningEffort: z.enum(['default', 'none', 'minimal', 'low', 'medium', 'high']).default('default'),
+    // Temperature controls randomness. We keep it optional so providers/models
+    // can use their own defaults when unset.
+    temperature: z.number().min(0).max(2).optional(),
+    maxTurns: z.number().int().positive().default(100),
+    retryAttempts: z.number().int().nonnegative().default(2),
+    // NOTE: We do NOT validate provider existence here because the provider
+    // registry can be extended at runtime from settings.json (custom providers).
+    // We validate/fallback after SettingsService loads and registers runtime providers.
+    provider: z.string().min(1).default('openai').describe('Provider to use for the agent'),
+    openrouter: z
+        .object({
+        apiKey: z.string().optional(),
+        baseUrl: z.string().url().optional(),
+        referrer: z.string().optional(),
+        title: z.string().optional(),
+    })
+        .optional(),
+    mentorModel: z.string().optional().describe('Model to use as a mentor'),
+    mentorProvider: z
+        .string()
+        .min(1)
+        .optional()
+        .describe('Provider to use for the mentor model (defaults to agent.provider when unset)'),
+    mentorReasoningEffort: z
+        .enum(['default', 'none', 'minimal', 'low', 'medium', 'high'])
+        .default('default')
+        .describe('Reasoning effort for the mentor model'),
+    useFlexServiceTier: z
+        .boolean()
+        .optional()
+        .default(false)
+        .describe('Use OpenAI Flex Service Tier to reduce costs (OpenAI only)'),
+});
+export const ShellSettingsSchema = z.object({
+    timeout: z.number().int().positive().default(120000),
+    maxOutputLines: z.number().int().positive().default(1000),
+    maxOutputChars: z.number().int().positive().default(10000),
+});
+export const UISettingsSchema = z.object({
+    historySize: z.number().int().positive().default(1000),
+});
+export const LoggingSettingsSchema = z.object({
+    logLevel: z.enum(['error', 'warn', 'info', 'security', 'debug']).default('info'),
+    disableLogging: z.boolean().optional().default(false),
+    debugLogging: z.boolean().optional().default(false),
+    suppressConsoleOutput: z.boolean().optional().default(true),
+});
+export const EnvironmentSettingsSchema = z.object({
+    nodeEnv: z.string().optional(),
+});
+export const AppSettingsSchema = z.object({
+    shellPath: z.string().optional(),
+    // Independent mode flags that can be enabled together and persist across sessions
+    // mentorMode: uses simplified mentor prompt and enables ask_mentor tool (if mentorModel configured)
+    // editMode: auto-approves apply_patch operations within cwd for faster file editing
+    // liteMode: minimal context for general terminal assistance (no codebase tools/prompts)
+    mentorMode: z.boolean().optional().default(false),
+    editMode: z.boolean().optional().default(false),
+    liteMode: z.boolean().optional().default(false),
+});
+export const ToolsSettingsSchema = z.object({
+    logFileOperations: z.boolean().optional().default(true),
+    enableEditHealing: z.boolean().optional().default(true),
+    editHealingModel: z.string().optional().default('gpt-4o-mini'),
+});
+export const DebugSettingsSchema = z.object({
+    debugBashTool: z.boolean().optional().default(false),
+});
+export const SSHSettingsSchema = z.object({
+    enabled: z.boolean().default(false),
+    host: z.string().optional(),
+    port: z.number().int().positive().default(22),
+    username: z.string().optional(),
+    remoteDir: z.string().optional(),
+});
+export const WebSearchSettingsSchema = z.object({
+    provider: z.string().optional(),
+    tavily: z
+        .object({
+        apiKey: z.string().optional(),
+    })
+        .optional(),
+});
+export const CustomProviderSchema = z.object({
+    name: z.string().min(1),
+    baseUrl: z.string().url(),
+    apiKey: z.string().optional(),
+});
+/**
+ * Settings that are sensitive and should NEVER be saved to disk.
+ * These are only loaded from environment variables.
+ */
+export function getSensitiveSettingKeys() {
+    const keys = new Set(['app.shellPath']);
+    // Add provider-specific sensitive keys
+    for (const provider of getAllProviders()) {
+        if (provider.sensitiveSettingKeys) {
+            for (const key of provider.sensitiveSettingKeys) {
+                keys.add(key);
+            }
+        }
+    }
+    // Add web search provider-specific sensitive keys
+    for (const provider of getAllWebSearchProviders()) {
+        if (provider.sensitiveSettingKeys) {
+            for (const key of provider.sensitiveSettingKeys) {
+                keys.add(key);
+            }
+        }
+    }
+    return keys;
+}
+export const SENSITIVE_SETTING_KEYS = getSensitiveSettingKeys();
+export const SettingsSchema = z.object({
+    providers: z.array(CustomProviderSchema).optional().default([]),
+    agent: AgentSettingsSchema.optional(),
+    shell: ShellSettingsSchema.optional(),
+    ui: UISettingsSchema.optional(),
+    logging: LoggingSettingsSchema.optional(),
+    environment: EnvironmentSettingsSchema.optional(),
+    app: AppSettingsSchema.optional(),
+    tools: ToolsSettingsSchema.optional(),
+    debug: DebugSettingsSchema.optional(),
+    ssh: SSHSettingsSchema.optional(),
+    webSearch: WebSearchSettingsSchema.optional(),
+});
+/**
+ * Centralized list of all setting keys for consistency across the app.
+ * Used by settings command UI and other components to avoid duplication.
+ */
+export const SETTING_KEYS = {
+    AGENT_MODEL: 'agent.model',
+    AGENT_REASONING_EFFORT: 'agent.reasoningEffort',
+    AGENT_TEMPERATURE: 'agent.temperature',
+    AGENT_PROVIDER: 'agent.provider',
+    AGENT_MAX_TURNS: 'agent.maxTurns',
+    AGENT_RETRY_ATTEMPTS: 'agent.retryAttempts',
+    AGENT_OPENROUTER_API_KEY: 'agent.openrouter.apiKey', // Sensitive - env only
+    AGENT_OPENROUTER_BASE_URL: 'agent.openrouter.baseUrl', // Sensitive - env only
+    AGENT_OPENROUTER_REFERRER: 'agent.openrouter.referrer', // Sensitive - env only
+    AGENT_OPENROUTER_TITLE: 'agent.openrouter.title', // Sensitive - env only
+    AGENT_MENTOR_MODEL: 'agent.mentorModel',
+    AGENT_MENTOR_PROVIDER: 'agent.mentorProvider',
+    AGENT_MENTOR_REASONING_EFFORT: 'agent.mentorReasoningEffort',
+    AGENT_USE_FLEX_SERVICE_TIER: 'agent.useFlexServiceTier',
+    SHELL_TIMEOUT: 'shell.timeout',
+    SHELL_MAX_OUTPUT_LINES: 'shell.maxOutputLines',
+    SHELL_MAX_OUTPUT_CHARS: 'shell.maxOutputChars',
+    UI_HISTORY_SIZE: 'ui.historySize',
+    LOGGING_LOG_LEVEL: 'logging.logLevel',
+    LOGGING_DISABLE: 'logging.disableLogging',
+    LOGGING_DEBUG: 'logging.debugLogging',
+    LOGGING_SUPPRESS_CONSOLE: 'logging.suppressConsoleOutput',
+    ENV_NODE_ENV: 'environment.nodeEnv',
+    APP_SHELL_PATH: 'app.shellPath',
+    APP_MENTOR_MODE: 'app.mentorMode',
+    APP_EDIT_MODE: 'app.editMode',
+    APP_LITE_MODE: 'app.liteMode',
+    TOOLS_LOG_FILE_OPS: 'tools.logFileOperations',
+    TOOLS_ENABLE_EDIT_HEALING: 'tools.enableEditHealing',
+    TOOLS_EDIT_HEALING_MODEL: 'tools.editHealingModel',
+    DEBUG_BASH_TOOL: 'debug.debugBashTool',
+    SSH_ENABLED: 'ssh.enabled',
+    SSH_HOST: 'ssh.host',
+    SSH_PORT: 'ssh.port',
+    SSH_USERNAME: 'ssh.username',
+    SSH_REMOTE_DIR: 'ssh.remoteDir',
+    WEB_SEARCH_PROVIDER: 'webSearch.provider',
+    WEB_SEARCH_TAVILY_API_KEY: 'webSearch.tavily.apiKey',
+};
+// Define which settings are modifiable at runtime
+export const RUNTIME_MODIFIABLE_SETTINGS = new Set([
+    SETTING_KEYS.AGENT_MODEL,
+    SETTING_KEYS.AGENT_REASONING_EFFORT,
+    SETTING_KEYS.AGENT_TEMPERATURE,
+    SETTING_KEYS.AGENT_PROVIDER,
+    SETTING_KEYS.AGENT_MENTOR_MODEL,
+    SETTING_KEYS.AGENT_MENTOR_PROVIDER,
+    SETTING_KEYS.AGENT_MENTOR_REASONING_EFFORT,
+    SETTING_KEYS.AGENT_USE_FLEX_SERVICE_TIER,
+    SETTING_KEYS.SHELL_TIMEOUT,
+    SETTING_KEYS.SHELL_MAX_OUTPUT_LINES,
+    SETTING_KEYS.SHELL_MAX_OUTPUT_CHARS,
+    SETTING_KEYS.LOGGING_LOG_LEVEL,
+    SETTING_KEYS.LOGGING_SUPPRESS_CONSOLE,
+    SETTING_KEYS.APP_MENTOR_MODE,
+    SETTING_KEYS.APP_EDIT_MODE,
+    SETTING_KEYS.APP_LITE_MODE,
+]);
+// Some settings with default values are optional to persist
+export const OPTIONAL_DEFAULT_KEYS = new Set([]);
+// Default settings
+export const DEFAULT_SETTINGS = {
+    providers: [],
+    agent: {
+        model: 'gpt-5.1',
+        reasoningEffort: 'default',
+        maxTurns: 100,
+        retryAttempts: 2,
+        provider: 'openai',
+        openrouter: {
+        // defaults empty; can be provided via env or config
+        // defaults empty; can be provided via env or config
+        },
+        mentorModel: undefined,
+        mentorProvider: undefined,
+        mentorReasoningEffort: 'default',
+        useFlexServiceTier: false,
+    },
+    shell: {
+        timeout: 120000,
+        maxOutputLines: 1000,
+        maxOutputChars: 10000,
+    },
+    ui: {
+        historySize: 1000,
+    },
+    logging: {
+        logLevel: 'info',
+        disableLogging: false,
+        debugLogging: false,
+        suppressConsoleOutput: true,
+    },
+    environment: {
+        nodeEnv: undefined,
+    },
+    app: {
+        shellPath: undefined,
+        mentorMode: false,
+        editMode: false,
+        liteMode: false,
+    },
+    tools: {
+        logFileOperations: true,
+        enableEditHealing: true,
+        editHealingModel: 'gpt-4o-mini',
+    },
+    debug: {
+        debugBashTool: false,
+    },
+    ssh: {
+        enabled: false,
+        port: 22,
+    },
+    webSearch: {
+        provider: 'tavily',
+        tavily: {},
+    },
+};
+/**
+ * Publicly exported list of sensitive settings for UI/CLI components to use.
+ * These settings should only be configured via environment variables.
+ */
+export const SENSITIVE_SETTINGS = {
+    AGENT_OPENROUTER_API_KEY: 'agent.openrouter.apiKey',
+    AGENT_OPENROUTER_BASE_URL: 'agent.openrouter.baseUrl',
+    AGENT_OPENROUTER_REFERRER: 'agent.openrouter.referrer',
+    AGENT_OPENROUTER_TITLE: 'agent.openrouter.title',
+    APP_SHELL_PATH: 'app.shellPath',
+};
+//# sourceMappingURL=settings-schema.js.map