daycare-cli 0.0.0-canary.00a24ac

package/dist/commands/start.js

@@ -0,0 +1,173 @@
+import { promises as fs } from "node:fs";
+import path from "node:path";
+import { configLoad } from "../config/configLoad.js";
+import { Engine } from "../engine/engine.js";
+import { requestSocket } from "../engine/ipc/client.js";
+import { EngineEventBus } from "../engine/ipc/events.js";
+import { startEngineServer } from "../engine/ipc/server.js";
+import { getLogger } from "../log.js";
+import { DEFAULT_SETTINGS_PATH } from "../settings.js";
+import { awaitShutdown, onShutdown } from "../utils/shutdown.js";
+import { promptConfirm } from "./prompts.js";
+const logger = getLogger("command.start");
+export async function startCommand(options) {
+    const settingsPath = path.resolve(options.settings ?? DEFAULT_SETTINGS_PATH);
+    const config = await configLoad(settingsPath, { verbose: options.verbose ?? false });
+    logger.info({ settings: config.settingsPath }, "start: Starting Daycare");
+    const eventBus = new EngineEventBus();
+    const socketPath = config.socketPath;
+    const pidPath = path.join(config.configDir, "engine.pid");
+    await ensureConfigDir(config.configDir);
+    const socketResponsive = await isEngineRunning(socketPath);
+    const existingPid = await readPidFile(pidPath);
+    const pidRunning = existingPid ? isProcessRunning(existingPid) : false;
+    const running = socketResponsive || pidRunning;
+    if (running) {
+        if (!socketResponsive && pidRunning) {
+            logger.warn({ pid: existingPid }, "event: Engine process detected but socket unresponsive.");
+        }
+        const shouldRestart = options.force === true
+            ? true
+            : await promptConfirm({
+                message: "Engine already running. Stop it and restart?",
+                default: false
+            });
+        if (shouldRestart !== true) {
+            logger.info("event: Engine already running; leaving it in place.");
+            return;
+        }
+        const requested = await requestEngineShutdown(socketPath);
+        if (!requested) {
+            logger.warn("error: Failed to request engine shutdown. Aborting start.");
+            return;
+        }
+        const stopped = await waitForEngineShutdown(socketPath, existingPid, 2000);
+        if (!stopped) {
+            logger.warn("start: Engine did not shut down in time. Aborting start.");
+            return;
+        }
+        await removeStaleFile(socketPath);
+        await removeStaleFile(pidPath);
+    }
+    else {
+        await removeStaleFile(socketPath);
+        await removeStaleFile(pidPath);
+    }
+    const runtime = new Engine({
+        config,
+        eventBus
+    });
+    await runtime.start();
+    let engineServer = null;
+    try {
+        engineServer = await startEngineServer({
+            settingsPath: config.settingsPath,
+            runtime,
+            eventBus,
+            socketPath: config.socketPath
+        });
+    }
+    catch (error) {
+        logger.warn({ error }, "error: Engine server failed to start");
+    }
+    if (engineServer) {
+        await writePidFile(pidPath);
+        onShutdown("engine-pid", () => removeStaleFile(pidPath));
+    }
+    onShutdown("engine-runtime", () => {
+        void runtime.shutdown();
+    });
+    if (engineServer) {
+        onShutdown("engine-server", () => {
+            void engineServer?.close().catch((error) => {
+                logger.warn({ error }, "error: Engine server shutdown failed");
+            });
+        });
+    }
+    logger.info("ready: Ready. Listening for messages.");
+    const signal = await awaitShutdown();
+    logger.info({ signal }, "event: Shutdown complete");
+    process.exit(0);
+}
+async function ensureConfigDir(configDir) {
+    if (!configDir || configDir === ".") {
+        return;
+    }
+    await fs.mkdir(configDir, { recursive: true });
+}
+async function isEngineRunning(socketPath) {
+    try {
+        const response = await requestSocket({
+            socketPath,
+            path: "/v1/engine/status",
+            method: "GET"
+        });
+        return response.statusCode >= 200 && response.statusCode < 300;
+    }
+    catch {
+        return false;
+    }
+}
+async function requestEngineShutdown(socketPath) {
+    try {
+        const response = await requestSocket({
+            socketPath,
+            path: "/v1/engine/shutdown",
+            method: "POST"
+        });
+        return response.statusCode >= 200 && response.statusCode < 300;
+    }
+    catch {
+        return false;
+    }
+}
+async function waitForEngineShutdown(socketPath, pid, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        const running = await isEngineRunning(socketPath);
+        const pidRunning = pid ? isProcessRunning(pid) : false;
+        if (!running && !pidRunning) {
+            return true;
+        }
+        await delay(100);
+    }
+    return false;
+}
+function delay(ms) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, ms);
+    });
+}
+async function writePidFile(pidPath) {
+    await fs.writeFile(pidPath, `${process.pid}\n`, { mode: 0o600 });
+}
+async function removeStaleFile(filePath) {
+    await fs.rm(filePath, { force: true });
+}
+async function readPidFile(pidPath) {
+    try {
+        const raw = await fs.readFile(pidPath, "utf8");
+        const parsed = Number.parseInt(raw.trim(), 10);
+        return Number.isFinite(parsed) ? parsed : null;
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            return null;
+        }
+        throw error;
+    }
+}
+function isProcessRunning(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === "ESRCH") {
+            return false;
+        }
+        return true;
+    }
+}
+//# sourceMappingURL=start.js.map

package/dist/commands/start.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"start.js","sourceRoot":"","sources":["../../sources/commands/start.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,MAAM,GAAG,SAAS,CAAC,eAAe,CAAC,CAAC;AAQ1C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAqB;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,qBAAqB,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC;IACrF,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAE1E,MAAM,QAAQ,GAAG,IAAI,cAAc,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAE1D,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAExC,MAAM,gBAAgB,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;IAC3D,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACvE,MAAM,OAAO,GAAG,gBAAgB,IAAI,UAAU,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACV,IAAI,CAAC,gBAAgB,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,yDAAyD,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,aAAa,GACf,OAAO,CAAC,KAAK,KAAK,IAAI;YAClB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,MAAM,aAAa,CAAC;gBAChB,OAAO,EAAE,8CAA8C;gBACvD,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC;QACb,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;YACnE,OAAO;QACX,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YACzE,OAAO;QACX,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;YACxE,OAAO;QACX,CAAC;QACD,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACJ,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,MAAM,CAAC;QACvB,MAAM;QACN,QAAQ;KACX,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IAEtB,IAAI,YAAY,GAAyD,IAAI,CAAC;IAC9E,IAAI,CAAC;QACD,YAAY,GAAG,MAAM,iBAAiB,CAAC;YACnC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,OAAO;YACP,QAAQ;YACR,UAAU,EAAE,MAAM,CAAC,UAAU;SAChC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,sCAAsC,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,YAAY,EAAE,CAAC;QACf,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;QAC5B,UAAU,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,UAAU,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,KAAK,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,IAAI,YAAY,EAAE,CAAC;QACf,UAAU,CAAC,eAAe,EAAE,GAAG,EAAE;YAC7B,KAAK,YAAY,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;gBACvC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,sCAAsC,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,aAAa,EAAE,CAAC;IACrC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,SAAiB;IAC5C,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QAClC,OAAO;IACX,CAAC;IACD,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,UAAkB;IAC7C,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;YACjC,UAAU;YACV,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,UAAkB;IACnD,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC;YACjC,UAAU;YACV,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,MAAM;SACjB,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,UAAU,IAAI,GAAG,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,GAAkB,EAAE,SAAiB;IAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACvD,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACrB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACP,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAAe;IACvC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,QAAgB;IAC3C,MAAM,EAAE,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe;IACtC,IAAI,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACjC,IAAI,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACnB,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC"}

package/dist/commands/status.d.ts

@@ -0,0 +1,2 @@
+export declare function statusCommand(): Promise<void>;
+//# sourceMappingURL=status.d.ts.map

package/dist/commands/status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.d.ts","sourceRoot":"","sources":["../../sources/commands/status.ts"],"names":[],"mappings":"AAGA,wBAAsB,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CASnD"}

package/dist/commands/status.js

@@ -0,0 +1,28 @@
+import { requestSocket } from "../engine/ipc/client.js";
+import { resolveEngineSocketPath } from "../engine/ipc/socket.js";
+export async function statusCommand() {
+    intro("daycare status");
+    try {
+        const status = await fetchStatus();
+        console.log(JSON.stringify(status, null, 2));
+        outro("Done.");
+    }
+    catch (error) {
+        outro(`Engine not running: ${error.message}`);
+    }
+}
+async function fetchStatus() {
+    const socketPath = resolveEngineSocketPath();
+    const response = await requestSocket({ socketPath, path: "/v1/engine/status" });
+    if (response.statusCode < 200 || response.statusCode >= 300) {
+        throw new Error(response.body);
+    }
+    return JSON.parse(response.body);
+}
+function intro(message) {
+    console.log(message);
+}
+function outro(message) {
+    console.log(message);
+}
+//# sourceMappingURL=status.js.map

package/dist/commands/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../sources/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAElE,MAAM,CAAC,KAAK,UAAU,aAAa;IAC/B,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACxB,IAAI,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,KAAK,CAAC,OAAO,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,KAAK,CAAC,uBAAwB,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW;IACtB,MAAM,UAAU,GAAG,uBAAuB,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAChF,IAAI,QAAQ,CAAC,UAAU,GAAG,GAAG,IAAI,QAAQ,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAY,CAAC;AAChD,CAAC;AAED,SAAS,KAAK,CAAC,OAAe;IAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,KAAK,CAAC,OAAe;IAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC"}

package/dist/commands/upgrade.d.ts

@@ -0,0 +1,5 @@
+export type UpgradeOptions = {
+    settings?: string;
+};
+export declare function upgradeCommand(options: UpgradeOptions): Promise<void>;
+//# sourceMappingURL=upgrade.d.ts.map

package/dist/commands/upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../sources/commands/upgrade.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,cAAc,GAAG;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,wBAAsB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAY3E"}

package/dist/commands/upgrade.js

@@ -0,0 +1,22 @@
+import path from "node:path";
+import { configLoad } from "../config/configLoad.js";
+import { DEFAULT_SETTINGS_PATH } from "../settings.js";
+import { storageUpgrade } from "../storage/storageUpgrade.js";
+export async function upgradeCommand(options) {
+    intro("daycare upgrade");
+    const settingsPath = path.resolve(options.settings ?? DEFAULT_SETTINGS_PATH);
+    const config = await configLoad(settingsPath);
+    const result = await storageUpgrade(config);
+    if (result.applied.length === 0) {
+        outro("Storage already up to date.");
+        return;
+    }
+    outro(`Applied migrations: ${result.applied.join(", ")}`);
+}
+function intro(message) {
+    console.log(message);
+}
+function outro(message) {
+    console.log(message);
+}
+//# sourceMappingURL=upgrade.js.map

package/dist/commands/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../../sources/commands/upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAM9D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IACxD,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACzB,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,IAAI,qBAAqB,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrC,OAAO;IACX,CAAC;IAED,KAAK,CAAC,uBAAuB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,KAAK,CAAC,OAAe;IAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,KAAK,CAAC,OAAe;IAC1B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACzB,CAAC"}

package/dist/config/configLoad.d.ts

@@ -0,0 +1,7 @@
+import type { Config, ConfigOverrides } from "./configTypes.js";
+/**
+ * Loads, validates, and resolves the config from disk into an immutable snapshot.
+ * Expects: settingsPath points at the JSON settings file.
+ */
+export declare function configLoad(settingsPath?: string, overrides?: ConfigOverrides): Promise<Config>;
+//# sourceMappingURL=configLoad.d.ts.map

package/dist/config/configLoad.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configLoad.d.ts","sourceRoot":"","sources":["../../sources/config/configLoad.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEhE;;;GAGG;AACH,wBAAsB,UAAU,CAC5B,YAAY,GAAE,MAA8B,EAC5C,SAAS,GAAE,eAAoB,GAChC,OAAO,CAAC,MAAM,CAAC,CAejB"}

package/dist/config/configLoad.js

@@ -0,0 +1,25 @@
+import { promises as fs } from "node:fs";
+import path from "node:path";
+import { DEFAULT_SETTINGS_PATH } from "../settings.js";
+import { configResolve } from "./configResolve.js";
+import { configSettingsParse } from "./configSettingsParse.js";
+/**
+ * Loads, validates, and resolves the config from disk into an immutable snapshot.
+ * Expects: settingsPath points at the JSON settings file.
+ */
+export async function configLoad(settingsPath = DEFAULT_SETTINGS_PATH, overrides = {}) {
+    const resolvedPath = path.resolve(settingsPath);
+    let raw = {};
+    try {
+        const content = await fs.readFile(resolvedPath, "utf8");
+        raw = JSON.parse(content);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT") {
+            throw error;
+        }
+    }
+    const settings = configSettingsParse(raw);
+    return configResolve(settings, resolvedPath, overrides);
+}
+//# sourceMappingURL=configLoad.js.map

package/dist/config/configLoad.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configLoad.js","sourceRoot":"","sources":["../../sources/config/configLoad.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAG/D;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC5B,eAAuB,qBAAqB,EAC5C,YAA6B,EAAE;IAE/B,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,GAAG,GAAY,EAAE,CAAC;IAEtB,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QACxD,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;IACzC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,aAAa,CAAC,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;AAC5D,CAAC"}

package/dist/config/configResolve.d.ts

@@ -0,0 +1,8 @@
+import type { SettingsConfig } from "../settings.js";
+import type { Config, ConfigOverrides } from "./configTypes.js";
+/**
+ * Resolves derived paths and defaults into an immutable Config snapshot.
+ * Expects: settingsPath is absolute; settings already validated.
+ */
+export declare function configResolve(settings: SettingsConfig, settingsPath: string, overrides?: ConfigOverrides): Config;
+//# sourceMappingURL=configResolve.d.ts.map

package/dist/config/configResolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configResolve.d.ts","sourceRoot":"","sources":["../../sources/config/configResolve.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAA0C,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE7F,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAMhE;;;GAGG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,GAAE,eAAoB,GAAG,MAAM,CAgCrH"}

package/dist/config/configResolve.js

@@ -0,0 +1,123 @@
+import path from "node:path";
+import { resolveEngineSocketPath } from "../engine/ipc/socket.js";
+import { DEFAULT_DAYCARE_DIR } from "../paths.js";
+import { freezeDeep } from "../utils/freezeDeep.js";
+const DEFAULT_DOCKER_IMAGE = "daycare-sandbox";
+const DEFAULT_DOCKER_TAG = "latest";
+const DEFAULT_DOCKER_ISOLATED_DNS_SERVERS = ["1.1.1.1", "8.8.8.8"];
+/**
+ * Resolves derived paths and defaults into an immutable Config snapshot.
+ * Expects: settingsPath is absolute; settings already validated.
+ */
+export function configResolve(settings, settingsPath, overrides = {}) {
+    const resolvedSettings = resolveSettingsDefaults(settings);
+    const resolvedSettingsPath = path.resolve(settingsPath);
+    const configDir = path.dirname(resolvedSettingsPath);
+    const dataDir = path.resolve(resolvedSettings.engine?.dataDir ?? DEFAULT_DAYCARE_DIR);
+    const agentsDir = path.join(dataDir, "agents");
+    const usersDir = path.join(configDir, "users");
+    const databasePath = path.resolve(resolvedSettings.engine?.db?.path ?? path.join(dataDir, "daycare.db"));
+    const databaseUrl = configDatabaseUrlResolve(resolvedSettings.engine?.db?.url);
+    const databaseAutoMigrate = resolvedSettings.engine?.db?.autoMigrate ?? true;
+    const authPath = path.join(dataDir, "auth.json");
+    const socketPath = resolveEngineSocketPath(resolvedSettings.engine?.socketPath);
+    const frozenSettings = freezeDeep(structuredClone(resolvedSettings));
+    const verbose = overrides.verbose ?? false;
+    return freezeDeep({
+        settingsPath: resolvedSettingsPath,
+        configDir,
+        dataDir,
+        agentsDir,
+        usersDir,
+        db: {
+            path: databasePath,
+            url: databaseUrl,
+            autoMigrate: databaseAutoMigrate
+        },
+        authPath,
+        socketPath,
+        docker: frozenSettings.docker,
+        settings: frozenSettings,
+        verbose
+    });
+}
+function resolveSettingsDefaults(settings) {
+    const emergencyContextLimit = settings.agents?.emergencyContextLimit ?? 200_000;
+    const appReviewerEnabled = settings.security?.appReviewerEnabled ?? false;
+    const docker = resolveDockerDefaults(settings.docker);
+    return {
+        ...settings,
+        agents: {
+            ...settings.agents,
+            emergencyContextLimit
+        },
+        security: {
+            ...settings.security,
+            appReviewerEnabled
+        },
+        docker
+    };
+}
+function resolveDockerDefaults(docker) {
+    return {
+        enabled: docker?.enabled ?? false,
+        image: docker?.image ?? DEFAULT_DOCKER_IMAGE,
+        tag: docker?.tag ?? DEFAULT_DOCKER_TAG,
+        socketPath: docker?.socketPath,
+        runtime: docker?.runtime,
+        enableWeakerNestedSandbox: docker?.enableWeakerNestedSandbox ?? false,
+        readOnly: docker?.readOnly ?? false,
+        unconfinedSecurity: docker?.unconfinedSecurity ?? false,
+        capAdd: dockerCapabilityListNormalize(docker?.capAdd),
+        capDrop: dockerCapabilityListNormalize(docker?.capDrop),
+        allowLocalNetworkingForUsers: dockerUserIdListNormalize(docker?.allowLocalNetworkingForUsers),
+        isolatedDnsServers: dockerDnsListNormalize(docker?.isolatedDnsServers, DEFAULT_DOCKER_ISOLATED_DNS_SERVERS),
+        localDnsServers: dockerDnsListNormalize(docker?.localDnsServers, [])
+    };
+}
+function dockerCapabilityListNormalize(input) {
+    if (!input || input.length === 0) {
+        return [];
+    }
+    return Array.from(new Set(input
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0)
+        .sort()));
+}
+function dockerUserIdListNormalize(input) {
+    if (!input || input.length === 0) {
+        return [];
+    }
+    return Array.from(new Set(input
+        .map((entry) => entry.trim())
+        .filter((entry) => entry.length > 0)
+        .sort()));
+}
+function dockerDnsListNormalize(input, fallback) {
+    const source = input && input.length > 0 ? input : fallback;
+    if (source.length === 0) {
+        return [];
+    }
+    const seen = new Set();
+    const result = [];
+    for (const entry of source) {
+        const normalized = entry.trim();
+        if (normalized.length === 0 || seen.has(normalized)) {
+            continue;
+        }
+        seen.add(normalized);
+        result.push(normalized);
+    }
+    return result;
+}
+function configDatabaseUrlResolve(input) {
+    if (!input) {
+        return null;
+    }
+    const trimmed = input.trim();
+    if (trimmed.length === 0) {
+        return null;
+    }
+    return trimmed;
+}
+//# sourceMappingURL=configResolve.js.map

package/dist/config/configResolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configResolve.js","sourceRoot":"","sources":["../../sources/config/configResolve.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAGpD,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAC/C,MAAM,kBAAkB,GAAG,QAAQ,CAAC;AACpC,MAAM,mCAAmC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AAEnE;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,QAAwB,EAAE,YAAoB,EAAE,YAA6B,EAAE;IACzG,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,OAAO,IAAI,mBAAmB,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACzG,MAAM,WAAW,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/E,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,EAAE,WAAW,IAAI,IAAI,CAAC;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChF,MAAM,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,IAAI,KAAK,CAAC;IAE3C,OAAO,UAAU,CAAC;QACd,YAAY,EAAE,oBAAoB;QAClC,SAAS;QACT,OAAO;QACP,SAAS;QACT,QAAQ;QACR,EAAE,EAAE;YACA,IAAI,EAAE,YAAY;YAClB,GAAG,EAAE,WAAW;YAChB,WAAW,EAAE,mBAAmB;SACnC;QACD,QAAQ;QACR,UAAU;QACV,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,QAAQ,EAAE,cAAc;QACxB,OAAO;KACV,CAAC,CAAC;AACP,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAwB;IACrD,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,EAAE,qBAAqB,IAAI,OAAO,CAAC;IAChF,MAAM,kBAAkB,GAAG,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,IAAI,KAAK,CAAC;IAC1E,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtD,OAAO;QACH,GAAG,QAAQ;QACX,MAAM,EAAE;YACJ,GAAG,QAAQ,CAAC,MAAM;YAClB,qBAAqB;SACxB;QACD,QAAQ,EAAE;YACN,GAAG,QAAQ,CAAC,QAAQ;YACpB,kBAAkB;SACrB;QACD,MAAM;KACT,CAAC;AACN,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAkC;IAC7D,OAAO;QACH,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK;QACjC,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,oBAAoB;QAC5C,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,kBAAkB;QACtC,UAAU,EAAE,MAAM,EAAE,UAAU;QAC9B,OAAO,EAAE,MAAM,EAAE,OAAO;QACxB,yBAAyB,EAAE,MAAM,EAAE,yBAAyB,IAAI,KAAK;QACrE,QAAQ,EAAE,MAAM,EAAE,QAAQ,IAAI,KAAK;QACnC,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,IAAI,KAAK;QACvD,MAAM,EAAE,6BAA6B,CAAC,MAAM,EAAE,MAAM,CAAC;QACrD,OAAO,EAAE,6BAA6B,CAAC,MAAM,EAAE,OAAO,CAAC;QACvD,4BAA4B,EAAE,yBAAyB,CAAC,MAAM,EAAE,4BAA4B,CAAC;QAC7F,kBAAkB,EAAE,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,EAAE,mCAAmC,CAAC;QAC3G,eAAe,EAAE,sBAAsB,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,CAAC;KACvE,CAAC;AACN,CAAC;AAED,SAAS,6BAA6B,CAAC,KAA2B;IAC9D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CACb,IAAI,GAAG,CACH,KAAK;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,IAAI,EAAE,CACd,CACJ,CAAC;AACN,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA2B;IAC1D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CACb,IAAI,GAAG,CACH,KAAK;SACA,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;SACnC,IAAI,EAAE,CACd,CACJ,CAAC;AACN,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA2B,EAAE,QAAkB;IAC3E,MAAM,MAAM,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YAClD,SAAS;QACb,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAyB;IACvD,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/dist/config/configResolve.spec.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=configResolve.spec.d.ts.map

package/dist/config/configResolve.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configResolve.spec.d.ts","sourceRoot":"","sources":["../../sources/config/configResolve.spec.ts"],"names":[],"mappings":""}

package/dist/config/configResolve.spec.js

@@ -0,0 +1,168 @@
+import path from "node:path";
+import { describe, expect, it } from "vitest";
+import { configResolve } from "./configResolve.js";
+describe("configResolve", () => {
+    it("resolves runtime directories with usersDir under configDir", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            engine: {
+                dataDir: "/tmp/daycare/.daycare"
+            }
+        }, configPath);
+        expect(config.dataDir).toBe(path.resolve("/tmp/daycare/.daycare"));
+        expect(config.agentsDir).toBe(path.resolve("/tmp/daycare/.daycare/agents"));
+        expect(config.usersDir).toBe(path.resolve("/tmp/daycare/users"));
+        expect(config.db.path).toBe(path.resolve("/tmp/daycare/.daycare/daycare.db"));
+    });
+    it("resolves engine.db.path from settings", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            engine: {
+                dataDir: "/tmp/daycare/.daycare",
+                db: {
+                    path: "/tmp/daycare/custom/daycare.db"
+                }
+            }
+        }, configPath);
+        expect(config.db.path).toBe(path.resolve("/tmp/daycare/custom/daycare.db"));
+    });
+    it("defaults engine.db.url to null and auto migrations to true", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({}, configPath);
+        expect(config.db.url).toBeNull();
+        expect(config.db.autoMigrate).toBe(true);
+    });
+    it("resolves engine.db.url and auto migration settings", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            engine: {
+                db: {
+                    path: "/tmp/daycare/custom/daycare.db",
+                    url: "postgres://postgres:postgres@127.0.0.1:5432/daycare",
+                    autoMigrate: false
+                }
+            }
+        }, configPath);
+        expect(config.db.path).toBe(path.resolve("/tmp/daycare/custom/daycare.db"));
+        expect(config.db.url).toBe("postgres://postgres:postgres@127.0.0.1:5432/daycare");
+        expect(config.db.autoMigrate).toBe(false);
+    });
+    it("defaults security.appReviewerEnabled to false", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({}, configPath);
+        expect(config.settings.security.appReviewerEnabled).toBe(false);
+    });
+    it("resolves security.appReviewerEnabled from settings", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({ security: { appReviewerEnabled: false } }, configPath);
+        expect(config.settings.security.appReviewerEnabled).toBe(false);
+    });
+    it("defaults docker settings when missing", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({}, configPath);
+        expect(config.docker).toEqual({
+            enabled: false,
+            image: "daycare-sandbox",
+            tag: "latest",
+            socketPath: undefined,
+            runtime: undefined,
+            enableWeakerNestedSandbox: false,
+            readOnly: false,
+            unconfinedSecurity: false,
+            capAdd: [],
+            capDrop: [],
+            allowLocalNetworkingForUsers: [],
+            isolatedDnsServers: ["1.1.1.1", "8.8.8.8"],
+            localDnsServers: []
+        });
+        expect(config.settings.docker).toEqual(config.docker);
+    });
+    it("resolves partial docker settings with defaults", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            docker: {
+                enabled: true,
+                image: "custom-sandbox"
+            }
+        }, configPath);
+        expect(config.docker).toEqual({
+            enabled: true,
+            image: "custom-sandbox",
+            tag: "latest",
+            socketPath: undefined,
+            runtime: undefined,
+            enableWeakerNestedSandbox: false,
+            readOnly: false,
+            unconfinedSecurity: false,
+            capAdd: [],
+            capDrop: [],
+            allowLocalNetworkingForUsers: [],
+            isolatedDnsServers: ["1.1.1.1", "8.8.8.8"],
+            localDnsServers: []
+        });
+    });
+    it("resolves full docker settings", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            docker: {
+                enabled: true,
+                image: "daycare-sandbox",
+                tag: "v2",
+                socketPath: "/var/run/docker.sock",
+                runtime: "runsc",
+                enableWeakerNestedSandbox: true,
+                readOnly: true,
+                unconfinedSecurity: true,
+                capAdd: ["NET_ADMIN"],
+                capDrop: ["MKNOD"]
+            }
+        }, configPath);
+        expect(config.docker).toEqual({
+            enabled: true,
+            image: "daycare-sandbox",
+            tag: "v2",
+            socketPath: "/var/run/docker.sock",
+            runtime: "runsc",
+            enableWeakerNestedSandbox: true,
+            readOnly: true,
+            unconfinedSecurity: true,
+            capAdd: ["NET_ADMIN"],
+            capDrop: ["MKNOD"],
+            allowLocalNetworkingForUsers: [],
+            isolatedDnsServers: ["1.1.1.1", "8.8.8.8"],
+            localDnsServers: []
+        });
+    });
+    it("normalizes docker capability lists", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            docker: {
+                capAdd: [" SYS_ADMIN ", "NET_ADMIN", "NET_ADMIN"],
+                capDrop: ["MKNOD", " MKNOD "]
+            }
+        }, configPath);
+        expect(config.docker.capAdd).toEqual(["NET_ADMIN", "SYS_ADMIN"]);
+        expect(config.docker.capDrop).toEqual(["MKNOD"]);
+    });
+    it("normalizes docker local-network user allowlist", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            docker: {
+                allowLocalNetworkingForUsers: [" user-b ", "user-a", "user-a", " "]
+            }
+        }, configPath);
+        expect(config.docker.allowLocalNetworkingForUsers).toEqual(["user-a", "user-b"]);
+    });
+    it("normalizes docker dns server lists", () => {
+        const configPath = path.join("/tmp/daycare", "settings.json");
+        const config = configResolve({
+            docker: {
+                isolatedDnsServers: [" 9.9.9.9 ", "1.1.1.1", "9.9.9.9", " "],
+                localDnsServers: [" 192.168.1.1 ", "8.8.8.8", "192.168.1.1"]
+            }
+        }, configPath);
+        expect(config.docker.isolatedDnsServers).toEqual(["9.9.9.9", "1.1.1.1"]);
+        expect(config.docker.localDnsServers).toEqual(["192.168.1.1", "8.8.8.8"]);
+    });
+});
+//# sourceMappingURL=configResolve.spec.js.map

package/dist/config/configResolve.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configResolve.spec.js","sourceRoot":"","sources":["../../sources/config/configResolve.spec.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,OAAO,EAAE,uBAAuB;aACnC;SACJ,EACD,UAAU,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACnE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,OAAO,EAAE,uBAAuB;gBAChC,EAAE,EAAE;oBACA,IAAI,EAAE,gCAAgC;iBACzC;aACJ;SACJ,EACD,UAAU,CACb,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QAClE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,EAAE,EAAE;oBACA,IAAI,EAAE,gCAAgC;oBACtC,GAAG,EAAE,qDAAqD;oBAC1D,WAAW,EAAE,KAAK;iBACrB;aACJ;SACJ,EACD,UAAU,CACb,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,qDAAqD,CAAC,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,QAAQ,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,KAAK;YACd,KAAK,EAAE,iBAAiB;YACxB,GAAG,EAAE,QAAQ;YACb,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,SAAS;YAClB,yBAAyB,EAAE,KAAK;YAChC,QAAQ,EAAE,KAAK;YACf,kBAAkB,EAAE,KAAK;YACzB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,EAAE;YACX,4BAA4B,EAAE,EAAE;YAChC,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YAC1C,eAAe,EAAE,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,gBAAgB;aAC1B;SACJ,EACD,UAAU,CACb,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,gBAAgB;YACvB,GAAG,EAAE,QAAQ;YACb,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,SAAS;YAClB,yBAAyB,EAAE,KAAK;YAChC,QAAQ,EAAE,KAAK;YACf,kBAAkB,EAAE,KAAK;YACzB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,EAAE;YACX,4BAA4B,EAAE,EAAE;YAChC,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YAC1C,eAAe,EAAE,EAAE;SACtB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACrC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,OAAO,EAAE,IAAI;gBACb,KAAK,EAAE,iBAAiB;gBACxB,GAAG,EAAE,IAAI;gBACT,UAAU,EAAE,sBAAsB;gBAClC,OAAO,EAAE,OAAO;gBAChB,yBAAyB,EAAE,IAAI;gBAC/B,QAAQ,EAAE,IAAI;gBACd,kBAAkB,EAAE,IAAI;gBACxB,MAAM,EAAE,CAAC,WAAW,CAAC;gBACrB,OAAO,EAAE,CAAC,OAAO,CAAC;aACrB;SACJ,EACD,UAAU,CACb,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;YAC1B,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,iBAAiB;YACxB,GAAG,EAAE,IAAI;YACT,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,OAAO;YAChB,yBAAyB,EAAE,IAAI;YAC/B,QAAQ,EAAE,IAAI;YACd,kBAAkB,EAAE,IAAI;YACxB,MAAM,EAAE,CAAC,WAAW,CAAC;YACrB,OAAO,EAAE,CAAC,OAAO,CAAC;YAClB,4BAA4B,EAAE,EAAE;YAChC,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;YAC1C,eAAe,EAAE,EAAE;SACtB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,MAAM,EAAE,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC;gBACjD,OAAO,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC;aAChC;SACJ,EACD,UAAU,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACtD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,4BAA4B,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,CAAC;aACtE;SACJ,EACD,UAAU,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,aAAa,CACxB;YACI,MAAM,EAAE;gBACJ,kBAAkB,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC;gBAC5D,eAAe,EAAE,CAAC,eAAe,EAAE,SAAS,EAAE,aAAa,CAAC;aAC/D;SACJ,EACD,UAAU,CACb,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/config/configSettingsParse.d.ts

@@ -0,0 +1,7 @@
+import type { SettingsConfig } from "../settings.js";
+/**
+ * Parses raw settings data into a validated SettingsConfig.
+ * Expects: raw is JSON-compatible and matches the settings schema.
+ */
+export declare function configSettingsParse(raw: unknown): SettingsConfig;
+//# sourceMappingURL=configSettingsParse.d.ts.map