claude-flow-novice 2.8.1 → 2.9.0

package/.claude/core/config.js

@@ -1,1221 +0,0 @@
-/**
- * Enterprise Configuration Management for Claude-Flow
- * Features: Security masking, change tracking, multi-format support, credential management
- */ import { promises as fs } from 'fs';
-import { join } from 'path';
-import { homedir } from 'os';
-import { createHash, randomBytes, createCipheriv, createDecipheriv } from 'crypto';
-import { safeParseJSON } from '../utils/helpers.js';
-import { ConfigError, ValidationError } from '../utils/errors.js';
-/**
- * Security classifications for configuration paths
- */ const SECURITY_CLASSIFICATIONS = {
-    credentials: {
-        level: 'secret',
-        encrypted: true
-    },
-    'credentials.apiKey': {
-        level: 'secret',
-        maskPattern: '****...****',
-        encrypted: true
-    },
-    'credentials.token': {
-        level: 'secret',
-        maskPattern: '****...****',
-        encrypted: true
-    },
-    'credentials.password': {
-        level: 'secret',
-        maskPattern: '********',
-        encrypted: true
-    },
-    'mcp.apiKey': {
-        level: 'confidential',
-        maskPattern: '****...****'
-    },
-    'logging.destination': {
-        level: 'internal'
-    },
-    orchestrator: {
-        level: 'internal'
-    },
-    terminal: {
-        level: 'public'
-    }
-};
-/**
- * Sensitive configuration paths that should be masked in output
- */ const SENSITIVE_PATHS = [
-    'credentials',
-    'apiKey',
-    'token',
-    'password',
-    'secret',
-    'key',
-    'auth'
-];
-/**
- * Format parsers for different configuration file types
- */ const FORMAT_PARSERS = {
-    json: {
-        parse: JSON.parse,
-        stringify: (obj)=>JSON.stringify(obj, null, 2),
-        extension: '.json'
-    },
-    yaml: {
-        parse: (content)=>{
-            // Simple YAML parser for basic key-value pairs
-            const lines = content.split('\n');
-            const result = {};
-            let current = result;
-            const stack = [
-                result
-            ];
-            for (const line of lines){
-                const trimmed = line.trim();
-                if (!trimmed || trimmed.startsWith('#')) continue;
-                const indent = line.length - line.trimStart().length;
-                const colonIndex = trimmed.indexOf(':');
-                if (colonIndex === -1) continue;
-                const key = trimmed.substring(0, colonIndex).trim();
-                const value = trimmed.substring(colonIndex + 1).trim();
-                // Simple value parsing
-                let parsedValue = value;
-                if (value === 'true') parsedValue = true;
-                else if (value === 'false') parsedValue = false;
-                else if (!isNaN(Number(value)) && value !== '') parsedValue = Number(value);
-                else if (value.startsWith('"') && value.endsWith('"')) {
-                    parsedValue = value.slice(1, -1);
-                }
-                current[key] = parsedValue;
-            }
-            return result;
-        },
-        stringify: (obj)=>{
-            const stringify = (obj, indent = 0)=>{
-                const spaces = '  '.repeat(indent);
-                let result = '';
-                for (const [key, value] of Object.entries(obj)){
-                    if (typeof value === 'object' && value !== null && !Array.isArray(value)) {
-                        result += `${spaces}${key}:\n${stringify(value, indent + 1)}`;
-                    } else {
-                        const formattedValue = typeof value === 'string' ? `"${value}"` : String(value);
-                        result += `${spaces}${key}: ${formattedValue}\n`;
-                    }
-                }
-                return result;
-            };
-            return stringify(obj);
-        },
-        extension: '.yaml'
-    },
-    toml: {
-        parse: (content)=>{
-            // Simple TOML parser for basic sections and key-value pairs
-            const lines = content.split('\n');
-            const result = {};
-            let currentSection = result;
-            for (const line of lines){
-                const trimmed = line.trim();
-                if (!trimmed || trimmed.startsWith('#')) continue;
-                // Section header
-                if (trimmed.startsWith('[') && trimmed.endsWith(']')) {
-                    const sectionName = trimmed.slice(1, -1);
-                    currentSection = result[sectionName] = {};
-                    continue;
-                }
-                // Key-value pair
-                const equalsIndex = trimmed.indexOf('=');
-                if (equalsIndex === -1) continue;
-                const key = trimmed.substring(0, equalsIndex).trim();
-                const value = trimmed.substring(equalsIndex + 1).trim();
-                // Simple value parsing
-                let parsedValue = value;
-                if (value === 'true') parsedValue = true;
-                else if (value === 'false') parsedValue = false;
-                else if (!isNaN(Number(value)) && value !== '') parsedValue = Number(value);
-                else if (value.startsWith('"') && value.endsWith('"')) {
-                    parsedValue = value.slice(1, -1);
-                }
-                currentSection[key] = parsedValue;
-            }
-            return result;
-        },
-        stringify: (obj)=>{
-            let result = '';
-            for (const [section, values] of Object.entries(obj)){
-                if (typeof values === 'object' && values !== null && !Array.isArray(values)) {
-                    result += `[${section}]\n`;
-                    for (const [key, value] of Object.entries(values)){
-                        const formattedValue = typeof value === 'string' ? `"${value}"` : String(value);
-                        result += `${key} = ${formattedValue}\n`;
-                    }
-                    result += '\n';
-                }
-            }
-            return result;
-        },
-        extension: '.toml'
-    }
-};
-/**
- * Default configuration values
- */ const DEFAULT_CONFIG = {
-    orchestrator: {
-        maxConcurrentAgents: 10,
-        taskQueueSize: 100,
-        healthCheckInterval: 30000,
-        shutdownTimeout: 30000
-    },
-    terminal: {
-        type: 'auto',
-        poolSize: 5,
-        recycleAfter: 10,
-        healthCheckInterval: 60000,
-        commandTimeout: 300000
-    },
-    memory: {
-        backend: 'hybrid',
-        cacheSizeMB: 100,
-        syncInterval: 5000,
-        conflictResolution: 'crdt',
-        retentionDays: 30
-    },
-    coordination: {
-        maxRetries: 3,
-        retryDelay: 1000,
-        deadlockDetection: true,
-        resourceTimeout: 60000,
-        messageTimeout: 30000
-    },
-    mcp: {
-        transport: 'stdio',
-        port: 3000,
-        tlsEnabled: false
-    },
-    logging: {
-        level: 'info',
-        format: 'json',
-        destination: 'console'
-    },
-    credentials: {
-    },
-    security: {
-        encryptionEnabled: true,
-        auditLogging: true,
-        maskSensitiveValues: true,
-        allowEnvironmentOverrides: true
-    }
-};
-/**
- * Configuration manager
- */ export class ConfigManager {
-    static instance;
-    config;
-    configPath;
-    profiles = new Map();
-    currentProfile;
-    userConfigDir;
-    changeHistory = [];
-    encryptionKey;
-    validationRules = new Map();
-    formatParsers = FORMAT_PARSERS;
-    constructor(){
-        this.config = deepClone(DEFAULT_CONFIG);
-        this.userConfigDir = this.getUserConfigDir();
-        this.setupValidationRules();
-    // Encryption will be initialized via init() method
-    }
-    /**
-   * Gets the singleton instance
-   */ static getInstance() {
-        if (!ConfigManager.instance) {
-            ConfigManager.instance = new ConfigManager();
-        }
-        return ConfigManager.instance;
-    }
-    /**
-   * Initialize async components
-   */ async init() {
-        await this.initializeEncryption();
-    }
-    /**
-   * Initializes encryption for sensitive configuration values
-   */ async initializeEncryption() {
-        try {
-            const keyFile = join(this.userConfigDir, '.encryption-key');
-            // Check if key file exists (simplified for demo)
-            try {
-                await fs.access(keyFile);
-                // In a real implementation, this would be more secure
-                this.encryptionKey = randomBytes(32);
-            } catch  {
-                this.encryptionKey = randomBytes(32);
-            // Store key securely (in production, use proper key management)
-            }
-        } catch (error) {
-            console.warn('Failed to initialize encryption:', error.message);
-        }
-    }
-    /**
-   * Sets up validation rules for configuration paths
-   */ setupValidationRules() {
-        // Orchestrator validation rules
-        this.validationRules.set('orchestrator.maxConcurrentAgents', {
-            type: 'number',
-            required: true,
-            min: 1,
-            max: 100,
-            validator: (value, config)=>{
-                if (value > config.terminal?.poolSize * 2) {
-                    return 'maxConcurrentAgents should not exceed 2x terminal pool size';
-                }
-                return null;
-            }
-        });
-        this.validationRules.set('orchestrator.taskQueueSize', {
-            type: 'number',
-            required: true,
-            min: 1,
-            max: 10000,
-            dependencies: [
-                'orchestrator.maxConcurrentAgents'
-            ],
-            validator: (value, config)=>{
-                const maxAgents = config.orchestrator?.maxConcurrentAgents || 1;
-                if (value < maxAgents * 10) {
-                    return 'taskQueueSize should be at least 10x maxConcurrentAgents';
-                }
-                return null;
-            }
-        });
-        // Terminal validation rules
-        this.validationRules.set('terminal.type', {
-            type: 'string',
-            required: true,
-            values: [
-                'auto',
-                'vscode',
-                'native'
-            ]
-        });
-        this.validationRules.set('terminal.poolSize', {
-            type: 'number',
-            required: true,
-            min: 1,
-            max: 50
-        });
-        // Memory validation rules
-        this.validationRules.set('memory.backend', {
-            type: 'string',
-            required: true,
-            values: [
-                'sqlite',
-                'markdown',
-                'hybrid'
-            ]
-        });
-        this.validationRules.set('memory.cacheSizeMB', {
-            type: 'number',
-            required: true,
-            min: 1,
-            max: 10000,
-            validator: (value)=>{
-                if (value > 1000) {
-                    return 'Large cache sizes may impact system performance';
-                }
-                return null;
-            }
-        });
-        // Security validation rules
-        this.validationRules.set('security.encryptionEnabled', {
-            type: 'boolean',
-            required: true
-        });
-        // Credentials validation
-        this.validationRules.set('credentials.apiKey', {
-            type: 'string',
-            pattern: /^[a-zA-Z0-9_-]+$/,
-            validator: (value)=>{
-                if (value && value.length < 16) {
-                    return 'API key should be at least 16 characters long';
-                }
-                return null;
-            }
-        });
-    }
-    /**
-   * Loads configuration from various sources
-   */ async load(configPath) {
-        if (configPath !== undefined) {
-            this.configPath = configPath;
-        }
-        // Start with defaults
-        let config = deepClone(DEFAULT_CONFIG);
-        // Load from file if specified
-        if (configPath) {
-            const fileConfig = await this.loadFromFile(configPath);
-            config = deepMergeConfig(config, fileConfig);
-        }
-        // Load from environment variables
-        const envConfig = this.loadFromEnv();
-        config = deepMergeConfig(config, envConfig);
-        // Validate the final configuration
-        this.validate(config);
-        this.config = config;
-        return config;
-    }
-    /**
-   * Gets the current configuration with optional security masking
-   */ get(maskSensitive = false) {
-        const config = deepClone(this.config);
-        if (maskSensitive && this.config.security?.maskSensitiveValues) {
-            return this.maskSensitiveValues(config);
-        }
-        return config;
-    }
-    /**
-   * Gets configuration with security masking applied
-   */ getSecure() {
-        return this.get(true);
-    }
-    /**
-   * Gets all configuration values (alias for get method for backward compatibility)
-   */ async getAll() {
-        return this.get();
-    }
-    /**
-   * Updates configuration values with change tracking
-   */ update(updates, options = {}) {
-        const oldConfig = deepClone(this.config);
-        // Track changes before applying
-        this.trackChanges(oldConfig, updates, options);
-        // Apply updates
-        this.config = deepMergeConfig(this.config, updates);
-        // Validate the updated configuration
-        this.validateWithDependencies(this.config);
-        return this.get();
-    }
-    /**
-   * Loads default configuration
-   */ loadDefault() {
-        this.config = deepClone(DEFAULT_CONFIG);
-    }
-    /**
-   * Saves configuration to file with format support
-   */ async save(path, format) {
-        const savePath = path || this.configPath;
-        if (!savePath) {
-            throw new ConfigError('No configuration file path specified');
-        }
-        const detectedFormat = format || this.detectFormat(savePath);
-        const parser = this.formatParsers[detectedFormat];
-        if (!parser) {
-            throw new ConfigError(`Unsupported format for saving: ${detectedFormat}`);
-        }
-        // Get configuration without sensitive values for saving
-        const configToSave = this.getConfigForSaving();
-        const content = parser.stringify(configToSave);
-        await fs.writeFile(savePath, content, 'utf8');
-        // Record the save operation
-        this.recordChange({
-            timestamp: new Date().toISOString(),
-            path: 'CONFIG_SAVED',
-            oldValue: null,
-            newValue: savePath,
-            source: 'file'
-        });
-    }
-    /**
-   * Gets configuration suitable for saving (excludes runtime-only values)
-   */ getConfigForSaving() {
-        const config = deepClone(this.config);
-        // Remove encrypted credentials from the saved config
-        // They should be stored separately in a secure location
-        if (config.credentials) {
-            delete config.credentials;
-        }
-        return config;
-    }
-    /**
-   * Gets user configuration directory
-   */ getUserConfigDir() {
-        const home = homedir();
-        return join(home, '.claude-flow');
-    }
-    /**
-   * Creates user config directory if it doesn't exist
-   */ async ensureUserConfigDir() {
-        try {
-            await fs.mkdir(this.userConfigDir, {
-                recursive: true
-            });
-        } catch (error) {
-            if (error.code !== 'EEXIST') {
-                throw new ConfigError(`Failed to create config directory: ${error.message}`);
-            }
-        }
-    }
-    /**
-   * Loads all profiles from the profiles directory
-   */ async loadProfiles() {
-        const profilesDir = join(this.userConfigDir, 'profiles');
-        try {
-            const entries = await fs.readdir(profilesDir, {
-                withFileTypes: true
-            });
-            for (const entry of entries){
-                if (entry.isFile() && entry.name.endsWith('.json')) {
-                    const profileName = entry.name.replace('.json', '');
-                    const profilePath = join(profilesDir, entry.name);
-                    try {
-                        const content = await fs.readFile(profilePath, 'utf8');
-                        const profileConfig = safeParseJSON(content);
-                        if (profileConfig) {
-                            this.profiles.set(profileName, profileConfig);
-                        }
-                    } catch (error) {
-                        console.warn(`Failed to load profile ${profileName}: ${error.message}`);
-                    }
-                }
-            }
-        } catch (error) {
-        // Profiles directory doesn't exist - this is okay
-        }
-    }
-    /**
-   * Applies a named profile
-   */ async applyProfile(profileName) {
-        await this.loadProfiles();
-        const profile = this.profiles.get(profileName);
-        if (!profile) {
-            throw new ConfigError(`Profile '${profileName}' not found`);
-        }
-        this.config = deepMergeConfig(this.config, profile);
-        this.currentProfile = profileName;
-        this.validate(this.config);
-    }
-    /**
-   * Saves current configuration as a profile
-   */ async saveProfile(profileName, config) {
-        await this.ensureUserConfigDir();
-        const profilesDir = join(this.userConfigDir, 'profiles');
-        await fs.mkdir(profilesDir, {
-            recursive: true
-        });
-        const profileConfig = config || this.config;
-        const profilePath = join(profilesDir, `${profileName}.json`);
-        const content = JSON.stringify(profileConfig, null, 2);
-        await fs.writeFile(profilePath, content, 'utf8');
-        this.profiles.set(profileName, profileConfig);
-    }
-    /**
-   * Deletes a profile
-   */ async deleteProfile(profileName) {
-        const profilePath = join(this.userConfigDir, 'profiles', `${profileName}.json`);
-        try {
-            await fs.unlink(profilePath);
-            this.profiles.delete(profileName);
-        } catch (error) {
-            if (error.code === 'ENOENT') {
-                throw new ConfigError(`Profile '${profileName}' not found`);
-            }
-            throw new ConfigError(`Failed to delete profile: ${error.message}`);
-        }
-    }
-    /**
-   * Lists all available profiles
-   */ async listProfiles() {
-        await this.loadProfiles();
-        return Array.from(this.profiles.keys());
-    }
-    /**
-   * Gets a specific profile configuration
-   */ async getProfile(profileName) {
-        await this.loadProfiles();
-        return this.profiles.get(profileName);
-    }
-    /**
-   * Gets the current active profile name
-   */ getCurrentProfile() {
-        return this.currentProfile;
-    }
-    /**
-   * Sets a configuration value by path with change tracking and validation
-   */ set(path, value, options = {}) {
-        const oldValue = this.getValue(path);
-        // Record the change
-        this.recordChange({
-            timestamp: new Date().toISOString(),
-            path,
-            oldValue,
-            newValue: value,
-            user: options.user,
-            reason: options.reason,
-            source: options.source || 'cli'
-        });
-        // Encrypt sensitive values
-        if (this.isSensitivePath(path) && this.config.security?.encryptionEnabled) {
-            value = this.encryptValue(value);
-        }
-        const keys = path.split('.');
-        let current = this.config;
-        for(let i = 0; i < keys.length - 1; i++){
-            const key = keys[i];
-            if (!(key in current)) {
-                current[key] = {};
-            }
-            current = current[key];
-        }
-        current[keys[keys.length - 1]] = value;
-        // Validate the path-specific rule and dependencies
-        this.validatePath(path, value);
-        this.validateWithDependencies(this.config);
-    }
-    /**
-   * Gets a configuration value by path with decryption for sensitive values
-   */ getValue(path, decrypt = true) {
-        const keys = path.split('.');
-        let current = this.config;
-        for (const key of keys){
-            if (current && typeof current === 'object' && key in current) {
-                current = current[key];
-            } else {
-                return undefined;
-            }
-        }
-        // Decrypt sensitive values if requested
-        if (decrypt && this.isSensitivePath(path) && this.isEncryptedValue(current)) {
-            try {
-                return this.decryptValue(current);
-            } catch (error) {
-                console.warn(`Failed to decrypt value at path ${path}:`, error.message);
-                return current;
-            }
-        }
-        return current;
-    }
-    /**
-   * Resets configuration to defaults
-   */ reset() {
-        this.config = deepClone(DEFAULT_CONFIG);
-        delete this.currentProfile;
-    }
-    /**
-   * Gets configuration schema for validation
-   */ getSchema() {
-        return {
-            orchestrator: {
-                maxConcurrentAgents: {
-                    type: 'number',
-                    min: 1,
-                    max: 100
-                },
-                taskQueueSize: {
-                    type: 'number',
-                    min: 1,
-                    max: 10000
-                },
-                healthCheckInterval: {
-                    type: 'number',
-                    min: 1000,
-                    max: 300000
-                },
-                shutdownTimeout: {
-                    type: 'number',
-                    min: 1000,
-                    max: 300000
-                }
-            },
-            terminal: {
-                type: {
-                    type: 'string',
-                    values: [
-                        'auto',
-                        'vscode',
-                        'native'
-                    ]
-                },
-                poolSize: {
-                    type: 'number',
-                    min: 1,
-                    max: 50
-                },
-                recycleAfter: {
-                    type: 'number',
-                    min: 1,
-                    max: 1000
-                },
-                healthCheckInterval: {
-                    type: 'number',
-                    min: 1000,
-                    max: 3600000
-                },
-                commandTimeout: {
-                    type: 'number',
-                    min: 1000,
-                    max: 3600000
-                }
-            },
-            memory: {
-                backend: {
-                    type: 'string',
-                    values: [
-                        'sqlite',
-                        'markdown',
-                        'hybrid'
-                    ]
-                },
-                cacheSizeMB: {
-                    type: 'number',
-                    min: 1,
-                    max: 10000
-                },
-                syncInterval: {
-                    type: 'number',
-                    min: 1000,
-                    max: 300000
-                },
-                conflictResolution: {
-                    type: 'string',
-                    values: [
-                        'crdt',
-                        'timestamp',
-                        'manual'
-                    ]
-                },
-                retentionDays: {
-                    type: 'number',
-                    min: 1,
-                    max: 3650
-                }
-            },
-            coordination: {
-                maxRetries: {
-                    type: 'number',
-                    min: 0,
-                    max: 100
-                },
-                retryDelay: {
-                    type: 'number',
-                    min: 100,
-                    max: 60000
-                },
-                deadlockDetection: {
-                    type: 'boolean'
-                },
-                resourceTimeout: {
-                    type: 'number',
-                    min: 1000,
-                    max: 3600000
-                },
-                messageTimeout: {
-                    type: 'number',
-                    min: 1000,
-                    max: 300000
-                }
-            },
-            mcp: {
-                transport: {
-                    type: 'string',
-                    values: [
-                        'stdio',
-                        'http',
-                        'websocket'
-                    ]
-                },
-                port: {
-                    type: 'number',
-                    min: 1,
-                    max: 65535
-                },
-                tlsEnabled: {
-                    type: 'boolean'
-                }
-            },
-            logging: {
-                level: {
-                    type: 'string',
-                    values: [
-                        'debug',
-                        'info',
-                        'warn',
-                        'error'
-                    ]
-                },
-                format: {
-                    type: 'string',
-                    values: [
-                        'json',
-                        'text'
-                    ]
-                },
-                destination: {
-                    type: 'string',
-                    values: [
-                        'console',
-                        'file'
-                    ]
-                }
-            }
-        };
-    }
-    /**
-   * Validates a value against schema
-   */ validateValue(value, schema, path) {
-        if (schema.type === 'number') {
-            if (typeof value !== 'number' || isNaN(value)) {
-                throw new ValidationError(`${path}: must be a number`);
-            }
-            if (schema.min !== undefined && value < schema.min) {
-                throw new ValidationError(`${path}: must be at least ${schema.min}`);
-            }
-            if (schema.max !== undefined && value > schema.max) {
-                throw new ValidationError(`${path}: must be at most ${schema.max}`);
-            }
-        } else if (schema.type === 'string') {
-            if (typeof value !== 'string') {
-                throw new ValidationError(`${path}: must be a string`);
-            }
-            if (schema.values && !schema.values.includes(value)) {
-                throw new ValidationError(`${path}: must be one of [${schema.values.join(', ')}]`);
-            }
-        } else if (schema.type === 'boolean') {
-            if (typeof value !== 'boolean') {
-                throw new ValidationError(`${path}: must be a boolean`);
-            }
-        }
-    }
-    /**
-   * Gets configuration diff between current and default
-   */ getDiff() {
-        const defaultConfig = DEFAULT_CONFIG;
-        const diff = {};
-        const findDifferences = (current, defaults, path = '')=>{
-            for(const key in current){
-                const currentValue = current[key];
-                const defaultValue = defaults[key];
-                const fullPath = path ? `${path}.${key}` : key;
-                if (typeof currentValue === 'object' && currentValue !== null && !Array.isArray(currentValue)) {
-                    if (typeof defaultValue === 'object' && defaultValue !== null) {
-                        const nestedDiff = {};
-                        findDifferences(currentValue, defaultValue, fullPath);
-                        if (Object.keys(nestedDiff).length > 0) {
-                            if (!path) {
-                                diff[key] = nestedDiff;
-                            }
-                        }
-                    }
-                } else if (currentValue !== defaultValue) {
-                    const pathParts = fullPath.split('.');
-                    let target = diff;
-                    for(let i = 0; i < pathParts.length - 1; i++){
-                        if (!target[pathParts[i]]) {
-                            target[pathParts[i]] = {};
-                        }
-                        target = target[pathParts[i]];
-                    }
-                    target[pathParts[pathParts.length - 1]] = currentValue;
-                }
-            }
-        };
-        findDifferences(this.config, defaultConfig);
-        return diff;
-    }
-    /**
-   * Exports configuration with metadata
-   */ export() {
-        return {
-            version: '1.0.0',
-            exported: new Date().toISOString(),
-            profile: this.currentProfile,
-            config: this.config,
-            diff: this.getDiff()
-        };
-    }
-    /**
-   * Imports configuration from export
-   */ import(data) {
-        if (!data.config) {
-            throw new ConfigError('Invalid configuration export format');
-        }
-        this.validateWithDependencies(data.config);
-        this.config = data.config;
-        this.currentProfile = data.profile;
-        // Record the import operation
-        this.recordChange({
-            timestamp: new Date().toISOString(),
-            path: 'CONFIG_IMPORTED',
-            oldValue: null,
-            newValue: data.version || 'unknown',
-            source: 'file'
-        });
-    }
-    /**
-   * Loads configuration from file with format detection
-   */ async loadFromFile(path) {
-        try {
-            const content = await fs.readFile(path, 'utf8');
-            const format = this.detectFormat(path, content);
-            const parser = this.formatParsers[format];
-            if (!parser) {
-                throw new ConfigError(`Unsupported configuration format: ${format}`);
-            }
-            const config = parser.parse(content);
-            if (!config) {
-                throw new ConfigError(`Invalid ${format.toUpperCase()} in configuration file: ${path}`);
-            }
-            return config;
-        } catch (error) {
-            if (error.code === 'ENOENT') {
-                // File doesn't exist, use defaults
-                return {};
-            }
-            throw new ConfigError(`Failed to load configuration from ${path}: ${error.message}`);
-        }
-    }
-    /**
-   * Detects configuration file format
-   */ detectFormat(path, content) {
-        const ext = path.split('.').pop()?.toLowerCase();
-        if (ext === 'yaml' || ext === 'yml') return 'yaml';
-        if (ext === 'toml') return 'toml';
-        if (ext === 'json') return 'json';
-        // Try to detect from content
-        if (content) {
-            const trimmed = content.trim();
-            if (trimmed.startsWith('{') || trimmed.startsWith('[')) return 'json';
-            if (trimmed.includes('=') && trimmed.includes('[')) return 'toml';
-            if (trimmed.includes(':') && !trimmed.includes('=')) return 'yaml';
-        }
-        // Default to JSON
-        return 'json';
-    }
-    /**
-   * Loads configuration from environment variables
-   */ loadFromEnv() {
-        const config = {};
-        // Orchestrator settings
-        const maxAgents = process.env.CLAUDE_FLOW_MAX_AGENTS;
-        if (maxAgents) {
-            if (!config.orchestrator) {
-                config.orchestrator = {};
-            }
-            config.orchestrator = {
-                ...DEFAULT_CONFIG.orchestrator,
-                ...config.orchestrator,
-                maxConcurrentAgents: parseInt(maxAgents, 10)
-            };
-        }
-        // Terminal settings
-        const terminalType = process.env.CLAUDE_FLOW_TERMINAL_TYPE;
-        if (terminalType === 'vscode' || terminalType === 'native' || terminalType === 'auto') {
-            config.terminal = {
-                ...DEFAULT_CONFIG.terminal,
-                ...config.terminal,
-                type: terminalType
-            };
-        }
-        // Memory settings
-        const memoryBackend = process.env.CLAUDE_FLOW_MEMORY_BACKEND;
-        if (memoryBackend === 'sqlite' || memoryBackend === 'markdown' || memoryBackend === 'hybrid') {
-            config.memory = {
-                ...DEFAULT_CONFIG.memory,
-                ...config.memory,
-                backend: memoryBackend
-            };
-        }
-        // MCP settings
-        const mcpTransport = process.env.CLAUDE_FLOW_MCP_TRANSPORT;
-        if (mcpTransport === 'stdio' || mcpTransport === 'http' || mcpTransport === 'websocket') {
-            config.mcp = {
-                ...DEFAULT_CONFIG.mcp,
-                ...config.mcp,
-                transport: mcpTransport
-            };
-        }
-        const mcpPort = process.env.CLAUDE_FLOW_MCP_PORT;
-        if (mcpPort) {
-            config.mcp = {
-                ...DEFAULT_CONFIG.mcp,
-                ...config.mcp,
-                port: parseInt(mcpPort, 10)
-            };
-        }
-        // Logging settings
-        const logLevel = process.env.CLAUDE_FLOW_LOG_LEVEL;
-        if (logLevel === 'debug' || logLevel === 'info' || logLevel === 'warn' || logLevel === 'error') {
-            config.logging = {
-                ...DEFAULT_CONFIG.logging,
-                ...config.logging,
-                level: logLevel
-            };
-        }
-        return config;
-    }
-    /**
-   * Validates configuration with dependency checking
-   */ validateWithDependencies(config) {
-        const errors = [];
-        const warnings = [];
-        // Validate all paths with rules
-        for (const [path, rule] of this.validationRules.entries()){
-            const value = this.getValueByPath(config, path);
-            try {
-                this.validatePath(path, value, config);
-            } catch (error) {
-                errors.push(error.message);
-            }
-        }
-        // Additional cross-field validations
-        if (config.orchestrator.maxConcurrentAgents > config.terminal.poolSize * 3) {
-            warnings.push('High agent-to-terminal ratio may cause resource contention');
-        }
-        if (config.memory.cacheSizeMB > 1000 && config.memory.backend === 'sqlite') {
-            warnings.push('Large cache size with SQLite backend may impact performance');
-        }
-        if (config.mcp.transport === 'http' && !config.mcp.tlsEnabled) {
-            warnings.push('HTTP transport without TLS is not recommended for production');
-        }
-        // Log warnings
-        if (warnings.length > 0 && config.logging?.level === 'debug') {
-            console.warn('Configuration warnings:', warnings);
-        }
-        // Throw errors
-        if (errors.length > 0) {
-            throw new ValidationError(`Configuration validation failed:\n${errors.join('\n')}`);
-        }
-    }
-    /**
-   * Validates a specific configuration path
-   */ validatePath(path, value, config) {
-        const rule = this.validationRules.get(path);
-        if (!rule) return;
-        const currentConfig = config || this.config;
-        // Required validation
-        if (rule.required && (value === undefined || value === null)) {
-            throw new ValidationError(`${path} is required`);
-        }
-        if (value === undefined || value === null) return;
-        // Type validation
-        if (rule.type === 'number' && (typeof value !== 'number' || isNaN(value))) {
-            throw new ValidationError(`${path} must be a number`);
-        }
-        if (rule.type === 'string' && typeof value !== 'string') {
-            throw new ValidationError(`${path} must be a string`);
-        }
-        if (rule.type === 'boolean' && typeof value !== 'boolean') {
-            throw new ValidationError(`${path} must be a boolean`);
-        }
-        // Range validation
-        if (typeof value === 'number') {
-            if (rule.min !== undefined && value < rule.min) {
-                throw new ValidationError(`${path} must be at least ${rule.min}`);
-            }
-            if (rule.max !== undefined && value > rule.max) {
-                throw new ValidationError(`${path} must be at most ${rule.max}`);
-            }
-        }
-        // Values validation
-        if (rule.values && !rule.values.includes(value)) {
-            throw new ValidationError(`${path} must be one of: ${rule.values.join(', ')}`);
-        }
-        // Pattern validation
-        if (rule.pattern && typeof value === 'string' && !rule.pattern.test(value)) {
-            throw new ValidationError(`${path} does not match required pattern`);
-        }
-        // Custom validator
-        if (rule.validator) {
-            const result = rule.validator(value, currentConfig);
-            if (result) {
-                throw new ValidationError(`${path}: ${result}`);
-            }
-        }
-    }
-    /**
-   * Gets a value from a configuration object by path
-   */ getValueByPath(obj, path) {
-        const keys = path.split('.');
-        let current = obj;
-        for (const key of keys){
-            if (current && typeof current === 'object' && key in current) {
-                current = current[key];
-            } else {
-                return undefined;
-            }
-        }
-        return current;
-    }
-    /**
-   * Legacy validate method for backward compatibility
-   */ validate(config) {
-        this.validateWithDependencies(config);
-    }
-    /**
-   * Masks sensitive values in configuration
-   */ maskSensitiveValues(config) {
-        const maskedConfig = deepClone(config);
-        // Recursively mask sensitive paths
-        const maskObject = (obj, path = '')=>{
-            if (!obj || typeof obj !== 'object') return obj;
-            const masked = {};
-            for (const [key, value] of Object.entries(obj)){
-                const currentPath = path ? `${path}.${key}` : key;
-                if (this.isSensitivePath(currentPath)) {
-                    const classification = SECURITY_CLASSIFICATIONS[currentPath];
-                    masked[key] = classification?.maskPattern || '****';
-                } else if (typeof value === 'object' && value !== null) {
-                    masked[key] = maskObject(value, currentPath);
-                } else {
-                    masked[key] = value;
-                }
-            }
-            return masked;
-        };
-        return maskObject(maskedConfig);
-    }
-    /**
-   * Tracks changes to configuration
-   */ trackChanges(oldConfig, updates, options) {
-        // Simple implementation for tracking changes
-        for (const [key, value] of Object.entries(updates)){
-            this.recordChange({
-                timestamp: new Date().toISOString(),
-                path: key,
-                oldValue: oldConfig[key],
-                newValue: value,
-                user: options.user,
-                reason: options.reason,
-                source: options.source || 'cli'
-            });
-        }
-    }
-    /**
-   * Records a configuration change
-   */ recordChange(change) {
-        this.changeHistory.push(change);
-        // Keep only last 1000 changes
-        if (this.changeHistory.length > 1000) {
-            this.changeHistory.shift();
-        }
-    }
-    /**
-   * Checks if a path contains sensitive information
-   */ isSensitivePath(path) {
-        return SENSITIVE_PATHS.some((sensitive)=>path.toLowerCase().includes(sensitive.toLowerCase()));
-    }
-    /**
-   * Encrypts a sensitive value
-   */ encryptValue(value) {
-        if (!this.encryptionKey) {
-            return value; // Return original if encryption not available
-        }
-        try {
-            // Simplified encryption - in production use proper encryption
-            const iv = randomBytes(16);
-            const key = createHash('sha256').update(this.encryptionKey).digest();
-            const cipher = createCipheriv('aes-256-cbc', key, iv);
-            let encrypted = cipher.update(JSON.stringify(value), 'utf8', 'hex');
-            encrypted += cipher.final('hex');
-            return `encrypted:${iv.toString('hex')}:${encrypted}`;
-        } catch (error) {
-            console.warn('Failed to encrypt value:', error.message);
-            return value;
-        }
-    }
-    /**
-   * Decrypts a sensitive value
-   */ decryptValue(encryptedValue) {
-        if (!this.encryptionKey || !this.isEncryptedValue(encryptedValue)) {
-            return encryptedValue;
-        }
-        try {
-            const parts = encryptedValue.replace('encrypted:', '').split(':');
-            if (parts.length !== 2) return encryptedValue; // Handle old format
-            const iv = Buffer.from(parts[0], 'hex');
-            const encrypted = parts[1];
-            const key = createHash('sha256').update(this.encryptionKey).digest();
-            const decipher = createDecipheriv('aes-256-cbc', key, iv);
-            let decrypted = decipher.update(encrypted, 'hex', 'utf8');
-            decrypted += decipher.final('utf8');
-            return JSON.parse(decrypted);
-        } catch (error) {
-            console.warn('Failed to decrypt value:', error.message);
-            return encryptedValue;
-        }
-    }
-    /**
-   * Checks if a value is encrypted
-   */ isEncryptedValue(value) {
-        return typeof value === 'string' && value.startsWith('encrypted:');
-    }
-}
-// Export singleton instance
-export const configManager = ConfigManager.getInstance();
-// Helper function to load configuration
-export async function loadConfig(path) {
-    return await configManager.load(path);
-}
-function deepClone(obj) {
-    return JSON.parse(JSON.stringify(obj));
-}
-export { SENSITIVE_PATHS, SECURITY_CLASSIFICATIONS };
-// Custom deepMerge for Config type
-function deepMergeConfig(target, ...sources) {
-    const result = deepClone(target);
-    for (const source of sources){
-        if (!source) continue;
-        // Merge each section
-        if (source.orchestrator) {
-            result.orchestrator = {
-                ...result.orchestrator,
-                ...source.orchestrator
-            };
-        }
-        if (source.terminal) {
-            result.terminal = {
-                ...result.terminal,
-                ...source.terminal
-            };
-        }
-        if (source.memory) {
-            result.memory = {
-                ...result.memory,
-                ...source.memory
-            };
-        }
-        if (source.coordination) {
-            result.coordination = {
-                ...result.coordination,
-                ...source.coordination
-            };
-        }
-        if (source.mcp) {
-            result.mcp = {
-                ...result.mcp,
-                ...source.mcp
-            };
-        }
-        if (source.logging) {
-            result.logging = {
-                ...result.logging,
-                ...source.logging
-            };
-        }
-        if (source.credentials) {
-            result.credentials = {
-                ...result.credentials,
-                ...source.credentials
-            };
-        }
-        if (source.security) {
-            result.security = {
-                ...result.security,
-                ...source.security
-            };
-        }
-    }
-    return result;
-}
-
-//# sourceMappingURL=config.js.map