adaria-ai 0.1.0

package/dist/config/schema.d.ts

@@ -0,0 +1,306 @@
+import { z } from "zod";
+/**
+ * adaria-ai config schema.
+ *
+ * Written to `$ADARIA_HOME/config.yaml` by `adaria-ai init`. Secrets may be
+ * stored inline or replaced with the sentinel string `***keychain***`, in
+ * which case `store.ts` resolves them from the macOS Keychain at load time.
+ *
+ * Shape diverges from pilot-ai: dropped all personal-agent surfaces (notion,
+ * obsidian, linear, figma, github, google workspace, telegram, filesystem
+ * sandbox). Only Slack is supported as the messenger in v1.
+ */
+export declare const slackConfigSchema: z.ZodObject<{
+    botToken: z.ZodString;
+    appToken: z.ZodString;
+    signingSecret: z.ZodString;
+}, z.core.$strip>;
+export declare const claudeConfigSchema: z.ZodObject<{
+    mode: z.ZodDefault<z.ZodLiteral<"cli">>;
+    cliBinary: z.ZodDefault<z.ZodString>;
+    apiKey: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const securityConfigSchema: z.ZodObject<{
+    allowedUsers: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    dmOnly: z.ZodDefault<z.ZodBoolean>;
+    auditLog: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maskSecrets: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export declare const safetyConfigSchema: z.ZodObject<{
+    dangerousActionsRequireApproval: z.ZodDefault<z.ZodBoolean>;
+    approvalTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const thresholdsConfigSchema: z.ZodObject<{
+    keywordRankAlert: z.ZodDefault<z.ZodNumber>;
+    reviewSentimentAlert: z.ZodDefault<z.ZodNumber>;
+    oneStarReviewAlert: z.ZodDefault<z.ZodNumber>;
+    installSignupDropAlert: z.ZodDefault<z.ZodNumber>;
+    subscriptionDropAlert: z.ZodDefault<z.ZodNumber>;
+    seoClicksDropAlert: z.ZodDefault<z.ZodNumber>;
+    seoImpressionsDropAlert: z.ZodDefault<z.ZodNumber>;
+    webTrafficDropAlert: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+export declare const agentConfigSchema: z.ZodObject<{
+    showThinking: z.ZodDefault<z.ZodBoolean>;
+    briefingChannel: z.ZodOptional<z.ZodString>;
+    weeklyTimeoutMs: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strip>;
+/**
+ * `config.yaml.collectors` holds the global secrets each collector needs.
+ * Every block is optional so users can enable collectors incrementally:
+ * an unset block means the skill/orchestrator that depends on it will
+ * simply skip that data source. Secret fields accept the keychain
+ * sentinel the same way `slack.*` does.
+ */
+export declare const appStoreCollectorConfigSchema: z.ZodObject<{
+    keyId: z.ZodString;
+    issuerId: z.ZodString;
+    privateKey: z.ZodString;
+}, z.core.$strip>;
+export declare const playStoreCollectorConfigSchema: z.ZodObject<{
+    serviceAccountJson: z.ZodString;
+}, z.core.$strip>;
+export declare const eodinSdkCollectorConfigSchema: z.ZodObject<{
+    apiKey: z.ZodString;
+}, z.core.$strip>;
+export declare const eodinGrowthCollectorConfigSchema: z.ZodObject<{
+    token: z.ZodString;
+}, z.core.$strip>;
+export declare const asoMobileCollectorConfigSchema: z.ZodObject<{
+    apiKey: z.ZodString;
+}, z.core.$strip>;
+export declare const youtubeCollectorConfigSchema: z.ZodObject<{
+    apiKey: z.ZodString;
+}, z.core.$strip>;
+export declare const ardenTtsCollectorConfigSchema: z.ZodObject<{
+    endpoint: z.ZodString;
+}, z.core.$strip>;
+export declare const twitterSocialConfigSchema: z.ZodObject<{
+    apiKey: z.ZodString;
+    apiSecret: z.ZodString;
+    accessToken: z.ZodString;
+    accessTokenSecret: z.ZodString;
+}, z.core.$strip>;
+export declare const facebookSocialConfigSchema: z.ZodObject<{
+    appId: z.ZodString;
+    appSecret: z.ZodString;
+    accessToken: z.ZodString;
+    pageId: z.ZodString;
+}, z.core.$strip>;
+export declare const threadsSocialConfigSchema: z.ZodObject<{
+    accessToken: z.ZodString;
+    userId: z.ZodString;
+}, z.core.$strip>;
+export declare const tiktokSocialConfigSchema: z.ZodObject<{
+    clientKey: z.ZodString;
+    clientSecret: z.ZodString;
+    accessToken: z.ZodString;
+}, z.core.$strip>;
+export declare const youtubeSocialConfigSchema: z.ZodObject<{
+    accessToken: z.ZodString;
+    channelId: z.ZodString;
+}, z.core.$strip>;
+export declare const linkedinSocialConfigSchema: z.ZodObject<{
+    accessToken: z.ZodString;
+    organizationId: z.ZodString;
+}, z.core.$strip>;
+export declare const socialConfigSchema: z.ZodDefault<z.ZodObject<{
+    twitter: z.ZodOptional<z.ZodObject<{
+        apiKey: z.ZodString;
+        apiSecret: z.ZodString;
+        accessToken: z.ZodString;
+        accessTokenSecret: z.ZodString;
+    }, z.core.$strip>>;
+    facebook: z.ZodOptional<z.ZodObject<{
+        appId: z.ZodString;
+        appSecret: z.ZodString;
+        accessToken: z.ZodString;
+        pageId: z.ZodString;
+    }, z.core.$strip>>;
+    threads: z.ZodOptional<z.ZodObject<{
+        accessToken: z.ZodString;
+        userId: z.ZodString;
+    }, z.core.$strip>>;
+    tiktok: z.ZodOptional<z.ZodObject<{
+        clientKey: z.ZodString;
+        clientSecret: z.ZodString;
+        accessToken: z.ZodString;
+    }, z.core.$strip>>;
+    youtube: z.ZodOptional<z.ZodObject<{
+        accessToken: z.ZodString;
+        channelId: z.ZodString;
+    }, z.core.$strip>>;
+    linkedin: z.ZodOptional<z.ZodObject<{
+        accessToken: z.ZodString;
+        organizationId: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+export declare const collectorsConfigSchema: z.ZodDefault<z.ZodObject<{
+    appStore: z.ZodOptional<z.ZodObject<{
+        keyId: z.ZodString;
+        issuerId: z.ZodString;
+        privateKey: z.ZodString;
+    }, z.core.$strip>>;
+    playStore: z.ZodOptional<z.ZodObject<{
+        serviceAccountJson: z.ZodString;
+    }, z.core.$strip>>;
+    eodinSdk: z.ZodOptional<z.ZodObject<{
+        apiKey: z.ZodString;
+    }, z.core.$strip>>;
+    eodinGrowth: z.ZodOptional<z.ZodObject<{
+        token: z.ZodString;
+    }, z.core.$strip>>;
+    asoMobile: z.ZodOptional<z.ZodObject<{
+        apiKey: z.ZodString;
+    }, z.core.$strip>>;
+    youtube: z.ZodOptional<z.ZodObject<{
+        apiKey: z.ZodString;
+    }, z.core.$strip>>;
+    ardenTts: z.ZodOptional<z.ZodObject<{
+        endpoint: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>>;
+export declare const configSchema: z.ZodObject<{
+    slack: z.ZodObject<{
+        botToken: z.ZodString;
+        appToken: z.ZodString;
+        signingSecret: z.ZodString;
+    }, z.core.$strip>;
+    claude: z.ZodObject<{
+        mode: z.ZodDefault<z.ZodLiteral<"cli">>;
+        cliBinary: z.ZodDefault<z.ZodString>;
+        apiKey: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>;
+    security: z.ZodObject<{
+        allowedUsers: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        dmOnly: z.ZodDefault<z.ZodBoolean>;
+        auditLog: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            maskSecrets: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>;
+    safety: z.ZodDefault<z.ZodObject<{
+        dangerousActionsRequireApproval: z.ZodDefault<z.ZodBoolean>;
+        approvalTimeoutMinutes: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    agent: z.ZodDefault<z.ZodObject<{
+        showThinking: z.ZodDefault<z.ZodBoolean>;
+        briefingChannel: z.ZodOptional<z.ZodString>;
+        weeklyTimeoutMs: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    social: z.ZodDefault<z.ZodObject<{
+        twitter: z.ZodOptional<z.ZodObject<{
+            apiKey: z.ZodString;
+            apiSecret: z.ZodString;
+            accessToken: z.ZodString;
+            accessTokenSecret: z.ZodString;
+        }, z.core.$strip>>;
+        facebook: z.ZodOptional<z.ZodObject<{
+            appId: z.ZodString;
+            appSecret: z.ZodString;
+            accessToken: z.ZodString;
+            pageId: z.ZodString;
+        }, z.core.$strip>>;
+        threads: z.ZodOptional<z.ZodObject<{
+            accessToken: z.ZodString;
+            userId: z.ZodString;
+        }, z.core.$strip>>;
+        tiktok: z.ZodOptional<z.ZodObject<{
+            clientKey: z.ZodString;
+            clientSecret: z.ZodString;
+            accessToken: z.ZodString;
+        }, z.core.$strip>>;
+        youtube: z.ZodOptional<z.ZodObject<{
+            accessToken: z.ZodString;
+            channelId: z.ZodString;
+        }, z.core.$strip>>;
+        linkedin: z.ZodOptional<z.ZodObject<{
+            accessToken: z.ZodString;
+            organizationId: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    thresholds: z.ZodDefault<z.ZodObject<{
+        keywordRankAlert: z.ZodDefault<z.ZodNumber>;
+        reviewSentimentAlert: z.ZodDefault<z.ZodNumber>;
+        oneStarReviewAlert: z.ZodDefault<z.ZodNumber>;
+        installSignupDropAlert: z.ZodDefault<z.ZodNumber>;
+        subscriptionDropAlert: z.ZodDefault<z.ZodNumber>;
+        seoClicksDropAlert: z.ZodDefault<z.ZodNumber>;
+        seoImpressionsDropAlert: z.ZodDefault<z.ZodNumber>;
+        webTrafficDropAlert: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
+    collectors: z.ZodDefault<z.ZodObject<{
+        appStore: z.ZodOptional<z.ZodObject<{
+            keyId: z.ZodString;
+            issuerId: z.ZodString;
+            privateKey: z.ZodString;
+        }, z.core.$strip>>;
+        playStore: z.ZodOptional<z.ZodObject<{
+            serviceAccountJson: z.ZodString;
+        }, z.core.$strip>>;
+        eodinSdk: z.ZodOptional<z.ZodObject<{
+            apiKey: z.ZodString;
+        }, z.core.$strip>>;
+        eodinGrowth: z.ZodOptional<z.ZodObject<{
+            token: z.ZodString;
+        }, z.core.$strip>>;
+        asoMobile: z.ZodOptional<z.ZodObject<{
+            apiKey: z.ZodString;
+        }, z.core.$strip>>;
+        youtube: z.ZodOptional<z.ZodObject<{
+            apiKey: z.ZodString;
+        }, z.core.$strip>>;
+        ardenTts: z.ZodOptional<z.ZodObject<{
+            endpoint: z.ZodString;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AdariaConfig = z.infer<typeof configSchema>;
+export type SlackConfig = z.infer<typeof slackConfigSchema>;
+export type ClaudeConfig = z.infer<typeof claudeConfigSchema>;
+export type SecurityConfig = z.infer<typeof securityConfigSchema>;
+export type SafetyConfig = z.infer<typeof safetyConfigSchema>;
+export type AgentConfig = z.infer<typeof agentConfigSchema>;
+export type ThresholdsConfig = z.infer<typeof thresholdsConfigSchema>;
+export type SocialConfig = z.infer<typeof socialConfigSchema>;
+export type CollectorsConfig = z.infer<typeof collectorsConfigSchema>;
+export type AppStoreCollectorConfig = z.infer<typeof appStoreCollectorConfigSchema>;
+export type PlayStoreCollectorConfig = z.infer<typeof playStoreCollectorConfigSchema>;
+export type EodinSdkCollectorConfig = z.infer<typeof eodinSdkCollectorConfigSchema>;
+export type EodinGrowthCollectorConfig = z.infer<typeof eodinGrowthCollectorConfigSchema>;
+export type AsoMobileCollectorConfig = z.infer<typeof asoMobileCollectorConfigSchema>;
+export type YoutubeCollectorConfig = z.infer<typeof youtubeCollectorConfigSchema>;
+export type ArdenTtsCollectorConfig = z.infer<typeof ardenTtsCollectorConfigSchema>;
+export declare const KEYCHAIN_SENTINEL = "***keychain***";
+/**
+ * Keychain slot names for every secret field in the config. Kept in one
+ * place so init.ts (writes) and store.ts (reads) can't drift out of sync.
+ */
+export declare const KEYCHAIN_KEYS: {
+    readonly slackBotToken: "slack-bot-token";
+    readonly slackAppToken: "slack-app-token";
+    readonly slackSigningSecret: "slack-signing-secret";
+    readonly anthropicApiKey: "anthropic-api-key";
+    readonly appStorePrivateKey: "collector-appstore-private-key";
+    readonly playStoreServiceAccount: "collector-playstore-service-account";
+    readonly eodinSdkApiKey: "collector-eodin-sdk-api-key";
+    readonly eodinGrowthToken: "collector-eodin-growth-token";
+    readonly asoMobileApiKey: "collector-asomobile-api-key";
+    readonly youtubeApiKey: "collector-youtube-api-key";
+    readonly twitterApiKey: "social-twitter-api-key";
+    readonly twitterApiSecret: "social-twitter-api-secret";
+    readonly twitterAccessToken: "social-twitter-access-token";
+    readonly twitterAccessTokenSecret: "social-twitter-access-token-secret";
+    readonly facebookAppSecret: "social-facebook-app-secret";
+    readonly facebookAccessToken: "social-facebook-access-token";
+    readonly threadsAccessToken: "social-threads-access-token";
+    readonly tiktokClientSecret: "social-tiktok-client-secret";
+    readonly tiktokAccessToken: "social-tiktok-access-token";
+    readonly youtubeAccessToken: "social-youtube-access-token";
+    readonly linkedinAccessToken: "social-linkedin-access-token";
+};
+//# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,iBAAiB;;;;iBAI5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;iBAY7B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;iBAY/B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;iBAiBjC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;iBAS5B,CAAC;AAMH;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B;;;;iBAIxC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;iBAEzC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;iBAExC,CAAC;AAEH,eAAO,MAAM,gCAAgC;;iBAE3C,CAAC;AAEH,eAAO,MAAM,8BAA8B;;iBAEzC,CAAC;AAEH,eAAO,MAAM,4BAA4B;;iBAEvC,CAAC;AAEH,eAAO,MAAM,6BAA6B;;iBAGxC,CAAC;AAMH,eAAO,MAAM,yBAAyB;;;;;iBAKpC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;iBAKrC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;iBAGpC,CAAC;AAEH,eAAO,MAAM,wBAAwB;;;;iBAInC,CAAC;AAEH,eAAO,MAAM,yBAAyB;;;iBAGpC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;iBAGrC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBASjB,CAAC;AAMf,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;kBAUrB,CAAC;AAEf,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAwBvB,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAC1C,OAAO,4BAA4B,CACpC,CAAC;AACF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF,eAAO,MAAM,iBAAiB,mBAAmB,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;CAuBhB,CAAC"}

package/dist/config/schema.js

@@ -0,0 +1,220 @@
+import { z } from "zod";
+/**
+ * adaria-ai config schema.
+ *
+ * Written to `$ADARIA_HOME/config.yaml` by `adaria-ai init`. Secrets may be
+ * stored inline or replaced with the sentinel string `***keychain***`, in
+ * which case `store.ts` resolves them from the macOS Keychain at load time.
+ *
+ * Shape diverges from pilot-ai: dropped all personal-agent surfaces (notion,
+ * obsidian, linear, figma, github, google workspace, telegram, filesystem
+ * sandbox). Only Slack is supported as the messenger in v1.
+ */
+export const slackConfigSchema = z.object({
+    botToken: z.string().min(1),
+    appToken: z.string().min(1),
+    signingSecret: z.string().min(1),
+});
+export const claudeConfigSchema = z.object({
+    /** M1 ships only the CLI runner. The schema intentionally refuses
+     *  `mode: 'api'` at load time rather than silently falling through to
+     *  CLI when the user expected an Anthropic SDK invocation (M1 claude
+     *  review HIGH #1). A later milestone will re-add `'api'` once the
+     *  fallback runner is ported. */
+    mode: z.literal("cli").default("cli"),
+    cliBinary: z.string().default("claude"),
+    apiKey: z.string().nullable().default(null),
+    /** Default Claude CLI timeout in ms — adaria-ai defaults to 120s for
+     *  reactive Slack calls; weekly orchestrator overrides this per-call. */
+    timeoutMs: z.number().int().positive().default(120_000),
+});
+export const securityConfigSchema = z.object({
+    /** Slack user IDs allowed to mention the bot. Non-allowlisted users are
+     *  silently ignored. */
+    allowedUsers: z.array(z.string()).default([]),
+    /** If true, only direct messages (no public channel mentions) are accepted. */
+    dmOnly: z.boolean().default(false),
+    auditLog: z
+        .object({
+        enabled: z.boolean().default(true),
+        maskSecrets: z.boolean().default(true),
+    })
+        .default({ enabled: true, maskSecrets: true }),
+});
+export const safetyConfigSchema = z.object({
+    dangerousActionsRequireApproval: z.boolean().default(true),
+    approvalTimeoutMinutes: z.number().int().positive().default(30),
+});
+export const thresholdsConfigSchema = z.object({
+    /** Keyword rank drop (positions) to trigger a critical alert. */
+    keywordRankAlert: z.number().int().positive().default(5),
+    /** Negative review ratio (0–1) to trigger a critical alert. */
+    reviewSentimentAlert: z.number().min(0).max(1).default(0.3),
+    /** 1-star reviews in 24h to trigger a warning. */
+    oneStarReviewAlert: z.number().int().nonnegative().default(3),
+    /** Install→signup conversion drop ratio (0–1) to trigger a warning. */
+    installSignupDropAlert: z.number().min(0).max(1).default(0.15),
+    /** Signup→subscription conversion drop ratio (0–1) to trigger a warning. */
+    subscriptionDropAlert: z.number().min(0).max(1).default(0.2),
+    /** SEO clicks WoW drop ratio to trigger a warning. */
+    seoClicksDropAlert: z.number().min(0).max(1).default(0.3),
+    /** SEO impressions WoW drop ratio to trigger a warning. */
+    seoImpressionsDropAlert: z.number().min(0).max(1).default(0.3),
+    /** Web traffic sessions WoW drop ratio to trigger a warning. */
+    webTrafficDropAlert: z.number().min(0).max(1).default(0.25),
+});
+export const agentConfigSchema = z.object({
+    /** Whether to stream Claude's thinking snippets back to the Slack message. */
+    showThinking: z.boolean().default(true),
+    /** Default briefing channel (e.g. "#growth"). Used by the weekly
+     *  orchestrator (M6) for posting the Sunday briefing. */
+    briefingChannel: z.string().optional(),
+    /** Claude CLI timeout override for weekly orchestrator (ms). Weekly
+     *  analysis skills may take much longer than interactive commands. */
+    weeklyTimeoutMs: z.number().int().positive().default(900_000),
+});
+// ---------------------------------------------------------------------------
+// Collector credentials (global — per-app identifiers live in apps.yaml)
+// ---------------------------------------------------------------------------
+/**
+ * `config.yaml.collectors` holds the global secrets each collector needs.
+ * Every block is optional so users can enable collectors incrementally:
+ * an unset block means the skill/orchestrator that depends on it will
+ * simply skip that data source. Secret fields accept the keychain
+ * sentinel the same way `slack.*` does.
+ */
+export const appStoreCollectorConfigSchema = z.object({
+    keyId: z.string().min(1),
+    issuerId: z.string().min(1),
+    privateKey: z.string().min(1),
+});
+export const playStoreCollectorConfigSchema = z.object({
+    serviceAccountJson: z.string().min(1),
+});
+export const eodinSdkCollectorConfigSchema = z.object({
+    apiKey: z.string().min(1),
+});
+export const eodinGrowthCollectorConfigSchema = z.object({
+    token: z.string().min(1),
+});
+export const asoMobileCollectorConfigSchema = z.object({
+    apiKey: z.string().min(1),
+});
+export const youtubeCollectorConfigSchema = z.object({
+    apiKey: z.string().min(1),
+});
+export const ardenTtsCollectorConfigSchema = z.object({
+    /** Not a secret — the user-hosted TTS endpoint URL. */
+    endpoint: z.string().url(),
+});
+// ---------------------------------------------------------------------------
+// Social platform credentials
+// ---------------------------------------------------------------------------
+export const twitterSocialConfigSchema = z.object({
+    apiKey: z.string().min(1),
+    apiSecret: z.string().min(1),
+    accessToken: z.string().min(1),
+    accessTokenSecret: z.string().min(1),
+});
+export const facebookSocialConfigSchema = z.object({
+    appId: z.string().min(1),
+    appSecret: z.string().min(1),
+    accessToken: z.string().min(1),
+    pageId: z.string().min(1),
+});
+export const threadsSocialConfigSchema = z.object({
+    accessToken: z.string().min(1),
+    userId: z.string().min(1),
+});
+export const tiktokSocialConfigSchema = z.object({
+    clientKey: z.string().min(1),
+    clientSecret: z.string().min(1),
+    accessToken: z.string().min(1),
+});
+export const youtubeSocialConfigSchema = z.object({
+    accessToken: z.string().min(1),
+    channelId: z.string().min(1),
+});
+export const linkedinSocialConfigSchema = z.object({
+    accessToken: z.string().min(1),
+    organizationId: z.string().min(1),
+});
+export const socialConfigSchema = z
+    .object({
+    twitter: twitterSocialConfigSchema.optional(),
+    facebook: facebookSocialConfigSchema.optional(),
+    threads: threadsSocialConfigSchema.optional(),
+    tiktok: tiktokSocialConfigSchema.optional(),
+    youtube: youtubeSocialConfigSchema.optional(),
+    linkedin: linkedinSocialConfigSchema.optional(),
+})
+    .default({});
+// ---------------------------------------------------------------------------
+// Collector credentials (global — per-app identifiers live in apps.yaml)
+// ---------------------------------------------------------------------------
+export const collectorsConfigSchema = z
+    .object({
+    appStore: appStoreCollectorConfigSchema.optional(),
+    playStore: playStoreCollectorConfigSchema.optional(),
+    eodinSdk: eodinSdkCollectorConfigSchema.optional(),
+    eodinGrowth: eodinGrowthCollectorConfigSchema.optional(),
+    asoMobile: asoMobileCollectorConfigSchema.optional(),
+    youtube: youtubeCollectorConfigSchema.optional(),
+    ardenTts: ardenTtsCollectorConfigSchema.optional(),
+})
+    .default({});
+export const configSchema = z.object({
+    slack: slackConfigSchema,
+    claude: claudeConfigSchema,
+    security: securityConfigSchema,
+    safety: safetyConfigSchema.default({
+        dangerousActionsRequireApproval: true,
+        approvalTimeoutMinutes: 30,
+    }),
+    agent: agentConfigSchema.default({
+        showThinking: true,
+        weeklyTimeoutMs: 900_000,
+    }),
+    social: socialConfigSchema,
+    thresholds: thresholdsConfigSchema.default({
+        keywordRankAlert: 5,
+        reviewSentimentAlert: 0.3,
+        oneStarReviewAlert: 3,
+        installSignupDropAlert: 0.15,
+        subscriptionDropAlert: 0.2,
+        seoClicksDropAlert: 0.3,
+        seoImpressionsDropAlert: 0.3,
+        webTrafficDropAlert: 0.25,
+    }),
+    collectors: collectorsConfigSchema,
+});
+export const KEYCHAIN_SENTINEL = "***keychain***";
+/**
+ * Keychain slot names for every secret field in the config. Kept in one
+ * place so init.ts (writes) and store.ts (reads) can't drift out of sync.
+ */
+export const KEYCHAIN_KEYS = {
+    slackBotToken: "slack-bot-token",
+    slackAppToken: "slack-app-token",
+    slackSigningSecret: "slack-signing-secret",
+    anthropicApiKey: "anthropic-api-key",
+    appStorePrivateKey: "collector-appstore-private-key",
+    playStoreServiceAccount: "collector-playstore-service-account",
+    eodinSdkApiKey: "collector-eodin-sdk-api-key",
+    eodinGrowthToken: "collector-eodin-growth-token",
+    asoMobileApiKey: "collector-asomobile-api-key",
+    youtubeApiKey: "collector-youtube-api-key",
+    // Social platform secrets
+    twitterApiKey: "social-twitter-api-key",
+    twitterApiSecret: "social-twitter-api-secret",
+    twitterAccessToken: "social-twitter-access-token",
+    twitterAccessTokenSecret: "social-twitter-access-token-secret",
+    facebookAppSecret: "social-facebook-app-secret",
+    facebookAccessToken: "social-facebook-access-token",
+    threadsAccessToken: "social-threads-access-token",
+    tiktokClientSecret: "social-tiktok-client-secret",
+    tiktokAccessToken: "social-tiktok-access-token",
+    youtubeAccessToken: "social-youtube-access-token",
+    linkedinAccessToken: "social-linkedin-access-token",
+};
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC;;;;qCAIiC;IACjC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3C;6EACyE;IACzE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C;4BACwB;IACxB,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,+EAA+E;IAC/E,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACvC,CAAC;SACD,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;CACjD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,+BAA+B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1D,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,iEAAiE;IACjE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,+DAA+D;IAC/D,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC3D,kDAAkD;IAClD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,uEAAuE;IACvE,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9D,4EAA4E;IAC5E,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC5D,sDAAsD;IACtD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACzD,2DAA2D;IAC3D,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC9D,gEAAgE;IAChE,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CAC5D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,8EAA8E;IAC9E,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC;6DACyD;IACzD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC;0EACsE;IACtE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;CAC9D,CAAC,CAAC;AAEH,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,uDAAuD;IACvD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CAC3B,CAAC,CAAC;AAEH,8EAA8E;AAC9E,8BAA8B;AAC9B,8EAA8E;AAE9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,OAAO,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC/C,OAAO,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,0BAA0B,CAAC,QAAQ,EAAE;CAChD,CAAC;KACD,OAAO,CAAC,EAAE,CAAC,CAAC;AAEf,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,QAAQ,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IAClD,SAAS,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IACpD,QAAQ,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IAClD,WAAW,EAAE,gCAAgC,CAAC,QAAQ,EAAE;IACxD,SAAS,EAAE,8BAA8B,CAAC,QAAQ,EAAE;IACpD,OAAO,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IAChD,QAAQ,EAAE,6BAA6B,CAAC,QAAQ,EAAE;CACnD,CAAC;KACD,OAAO,CAAC,EAAE,CAAC,CAAC;AAEf,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,KAAK,EAAE,iBAAiB;IACxB,MAAM,EAAE,kBAAkB;IAC1B,QAAQ,EAAE,oBAAoB;IAC9B,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACjC,+BAA+B,EAAE,IAAI;QACrC,sBAAsB,EAAE,EAAE;KAC3B,CAAC;IACF,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC;QAC/B,YAAY,EAAE,IAAI;QAClB,eAAe,EAAE,OAAO;KACzB,CAAC;IACF,MAAM,EAAE,kBAAkB;IAC1B,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC;QACzC,gBAAgB,EAAE,CAAC;QACnB,oBAAoB,EAAE,GAAG;QACzB,kBAAkB,EAAE,CAAC;QACrB,sBAAsB,EAAE,IAAI;QAC5B,qBAAqB,EAAE,GAAG;QAC1B,kBAAkB,EAAE,GAAG;QACvB,uBAAuB,EAAE,GAAG;QAC5B,mBAAmB,EAAE,IAAI;KAC1B,CAAC;IACF,UAAU,EAAE,sBAAsB;CACnC,CAAC,CAAC;AAiCH,MAAM,CAAC,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,aAAa,EAAE,iBAAiB;IAChC,aAAa,EAAE,iBAAiB;IAChC,kBAAkB,EAAE,sBAAsB;IAC1C,eAAe,EAAE,mBAAmB;IACpC,kBAAkB,EAAE,gCAAgC;IACpD,uBAAuB,EAAE,qCAAqC;IAC9D,cAAc,EAAE,6BAA6B;IAC7C,gBAAgB,EAAE,8BAA8B;IAChD,eAAe,EAAE,6BAA6B;IAC9C,aAAa,EAAE,2BAA2B;IAC1C,0BAA0B;IAC1B,aAAa,EAAE,wBAAwB;IACvC,gBAAgB,EAAE,2BAA2B;IAC7C,kBAAkB,EAAE,6BAA6B;IACjD,wBAAwB,EAAE,oCAAoC;IAC9D,iBAAiB,EAAE,4BAA4B;IAC/C,mBAAmB,EAAE,8BAA8B;IACnD,kBAAkB,EAAE,6BAA6B;IACjD,kBAAkB,EAAE,6BAA6B;IACjD,iBAAiB,EAAE,4BAA4B;IAC/C,kBAAkB,EAAE,6BAA6B;IACjD,mBAAmB,EAAE,8BAA8B;CAC3C,CAAC"}

package/dist/config/store.d.ts

@@ -0,0 +1,38 @@
+import { type AdariaConfig } from "./schema.js";
+/**
+ * Create $ADARIA_HOME and all required subdirectories and force 0700 perms.
+ *
+ * The explicit `fs.chmod` calls are load-bearing: `fs.mkdir({ mode })` silently
+ * ignores the mode argument on pre-existing directories, so if the user ever
+ * created `~/.adaria` by hand or via a prior tool at 0755, we need to tighten
+ * it on every daemon startup. Same pattern applies to `saveConfig` below.
+ */
+export declare function ensureAdariaDir(): Promise<void>;
+/**
+ * Load and validate the config from $ADARIA_HOME/config.yaml.
+ * Throws ConfigError if the file is missing or invalid.
+ * Secrets flagged with KEYCHAIN_SENTINEL are resolved from the macOS Keychain.
+ *
+ * TODO(M6): cache resolved config for daemon hot path — cron shots currently
+ * fork the `security` CLI up to 4× per loadConfig() call. Fine during M1
+ * startup, but M6 weekly/monitor cron will benefit from in-memory caching
+ * with SIGHUP invalidation.
+ */
+export declare function loadConfig(): Promise<AdariaConfig>;
+/**
+ * Read the YAML file as-is without schema validation or keychain resolution.
+ * Used by `adaria-ai init` when updating an existing config.
+ */
+export declare function loadRawConfig(): Promise<Record<string, unknown>>;
+/**
+ * Write a (possibly partial) config object to disk as YAML with 0600 perms.
+ *
+ * The explicit `fs.chmod` is load-bearing: `fs.writeFile({ mode })` only applies
+ * the mode when creating a new file. Without the chmod, a config accidentally
+ * written with a loose umask (e.g. 0022 → 0644) would stay loose across
+ * subsequent saves. Callers are responsible for writing a structure that will
+ * pass schema validation on the next load.
+ */
+export declare function saveConfig(config: Partial<AdariaConfig> | Record<string, unknown>): Promise<void>;
+export declare function configExists(): Promise<boolean>;
+//# sourceMappingURL=store.d.ts.map

package/dist/config/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/config/store.ts"],"names":[],"mappings":"AAEA,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAcrB;;;;;;;GAOG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC,CAOrD;AAED;;;;;;;;;GASG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,YAAY,CAAC,CA6BxD;AAyGD;;;GAGG;AACH,wBAAsB,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAwBtE;AAED;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACtD,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,OAAO,CAAC,CAOrD"}