forgebadger 0.1.1 → 0.1.3

package/README.md

@@ -265,6 +265,16 @@ Restore verifies file hashes, schema/migration compatibility, table counts, SQLi
 
 This backup does not contain project repositories, managed worktrees, running terminals, terminal history, host CLI login/configuration, filesystem-side CLI config rollback files or the account-recovery key. Restore those resources separately as needed; restored session metadata does not recreate processes. JWT rotation invalidates legacy JWTs, and restored opaque browser sessions are deleted; sign in again after restore. Source and backup authentication records remain unchanged. The backup is sensitive local state, not an encrypted archive.
 
+### Version and uninstall
+
+```bash
+forgebadger --version
+forgebadger uninstall            # interactive confirmation; --yes for scripts
+forgebadger uninstall --backup /private/path/new-backup   # back up state first
+```
+
+`forgebadger uninstall` removes the local state directory (`~/.forgebadger` by default): the database, the saved runtime `config.json` with the **master encryption key**, backups and runtime state. It refuses to delete a directory that does not look like ForgeBadger state, refuses to run while Gateway/Web ports are still serving (stop them first, or pass `--force`), and asks for confirmation unless `--yes` is given. The command cannot remove the globally installed npm package from inside itself — afterwards run `npm uninstall -g forgebadger` to finish. Deleting the state directory is irreversible; without the master key, encrypted provider credentials and integration secrets are unrecoverable, so consider `--backup` first.
+
 
 ## Personal and small-team delivery
 

package/dist/commands/uninstall.d.ts

@@ -0,0 +1,24 @@
+import { type LoadRuntimeConfigOptions, type RuntimeConfigInspection } from "../runtime/config.js";
+interface OutputWriter {
+    write(chunk: string): unknown;
+}
+export interface RunUninstallOptions {
+    yes?: boolean;
+    force?: boolean;
+    backup?: string;
+    stateDir?: string;
+    env?: NodeJS.ProcessEnv;
+    homeDir?: string;
+    isTTY?: boolean;
+    inspectConfig?: (options: LoadRuntimeConfigOptions) => Promise<RuntimeConfigInspection>;
+    confirm?: (question: string) => Promise<boolean>;
+    removeDir?: (dir: string) => Promise<void>;
+    checkPort?: (host: string, port: number) => Promise<void>;
+    backupRunner?: (options: {
+        output: string;
+    } & LoadRuntimeConfigOptions) => Promise<unknown>;
+    stdout?: OutputWriter;
+    stderr?: OutputWriter;
+}
+export declare function runUninstall(options?: RunUninstallOptions): Promise<number>;
+export {};

package/dist/commands/uninstall.js

@@ -0,0 +1,123 @@
+import { lstat, rm } from "node:fs/promises";
+import path from "node:path";
+import { createInterface } from "node:readline/promises";
+import { createInstanceBackup } from "../runtime/backup.js";
+import { inspectRuntimeConfig } from "../runtime/config.js";
+import { assertPortAvailable } from "../runtime/ports.js";
+export async function runUninstall(options = {}) {
+    const stdout = options.stdout ?? process.stdout;
+    const stderr = options.stderr ?? process.stderr;
+    const env = options.env ?? process.env;
+    const homeDir = options.homeDir;
+    const inspectConfig = options.inspectConfig ?? inspectRuntimeConfig;
+    const inspection = await inspectConfig(toRuntimeConfigOptions(options));
+    const stateDir = inspection.stateDir;
+    if (!inspection.initialized && !(await isDirectory(stateDir))) {
+        stdout.write(`ForgeBadger state: ${stateDir} (not initialized), nothing to uninstall.\n`);
+        stdout.write("To finish uninstalling, run: npm uninstall -g forgebadger\n");
+        return 0;
+    }
+    const guardFailure = stateDirGuardFailure(stateDir, homeDir);
+    if (guardFailure) {
+        stderr.write(`${guardFailure}\n`);
+        return 1;
+    }
+    if (!options.force && !(await hasStateMarker(stateDir))) {
+        stderr.write(`Refusing to remove ${stateDir}: no config.json or forgebadger.db found. Use --force to remove it anyway.\n`);
+        return 1;
+    }
+    const checkPort = options.checkPort ?? assertPortAvailable;
+    if (!options.force && inspection.initialized) {
+        try {
+            await checkPort(inspection.gateway.host, inspection.gateway.port);
+            await checkPort(inspection.web.host, inspection.web.port);
+        }
+        catch {
+            stderr.write(`ForgeBadger appears to be running (port ${inspection.gateway.port} or ${inspection.web.port} is in use). Stop it before uninstalling, or use --force to skip this check.\n`);
+            return 1;
+        }
+    }
+    if (!options.yes) {
+        const isTTY = options.isTTY ?? process.stdin.isTTY === true;
+        if (!isTTY) {
+            stderr.write("Uninstall requires confirmation. Re-run with --yes in non-interactive mode.\n");
+            return 1;
+        }
+        const confirm = options.confirm ?? defaultConfirm;
+        const accepted = await confirm(`Delete ${stateDir}? This removes the database, master key, backups and runtime state. [y/N] `);
+        if (!accepted) {
+            stdout.write("Uninstall cancelled.\n");
+            return 0;
+        }
+    }
+    if (options.backup) {
+        const backupRunner = options.backupRunner ?? createInstanceBackup;
+        await backupRunner({ output: options.backup, ...toRuntimeConfigOptions(options) });
+        stdout.write(`Backup created: ${options.backup}\n`);
+    }
+    const removeDir = options.removeDir ?? ((dir) => rm(dir, { recursive: true, force: true }));
+    try {
+        await removeDir(stateDir);
+    }
+    catch (error) {
+        const code = error.code;
+        if (code === "EBUSY" || code === "EPERM" || code === "EACCES") {
+            stderr.write(`Unable to remove ${stateDir}: files are in use. Stop running ForgeBadger processes and try again.\n`);
+            return 1;
+        }
+        throw error;
+    }
+    stdout.write(`State removed: ${stateDir}\n`);
+    stdout.write("To finish uninstalling, run: npm uninstall -g forgebadger\n");
+    return 0;
+}
+function toRuntimeConfigOptions(options) {
+    const result = {};
+    if (options.stateDir !== undefined)
+        result.stateDir = options.stateDir;
+    if (options.env !== undefined)
+        result.env = options.env;
+    if (options.homeDir !== undefined)
+        result.homeDir = options.homeDir;
+    return result;
+}
+function stateDirGuardFailure(stateDir, homeDir) {
+    const resolved = path.resolve(stateDir);
+    if (resolved === path.parse(resolved).root) {
+        return `Refusing to remove filesystem root: ${resolved}`;
+    }
+    if (homeDir !== undefined && resolved === path.resolve(homeDir)) {
+        return `Refusing to remove the home directory: ${resolved}`;
+    }
+    return undefined;
+}
+async function hasStateMarker(stateDir) {
+    return (await isFile(path.join(stateDir, "config.json"))) || (await isFile(path.join(stateDir, "forgebadger.db")));
+}
+async function isFile(filePath) {
+    try {
+        return (await lstat(filePath)).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+async function isDirectory(dirPath) {
+    try {
+        return (await lstat(dirPath)).isDirectory();
+    }
+    catch {
+        return false;
+    }
+}
+async function defaultConfirm(question) {
+    const rl = createInterface({ input: process.stdin, output: process.stdout });
+    try {
+        const answer = await rl.question(question);
+        return answer.trim().toLowerCase() === "y" || answer.trim().toLowerCase() === "yes";
+    }
+    finally {
+        rl.close();
+    }
+}
+//# sourceMappingURL=uninstall.js.map

package/dist/commands/uninstall.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uninstall.js","sourceRoot":"","sources":["../../src/commands/uninstall.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,oBAAoB,EAGrB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAuB1D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAA+B,EAAE;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,oBAAoB,CAAC;IACpE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IAErC,IAAI,CAAC,UAAU,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,sBAAsB,QAAQ,6CAA6C,CAAC,CAAC;QAC1F,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC5E,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,YAAY,GAAG,oBAAoB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,IAAI,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,KAAK,CACV,sBAAsB,QAAQ,8EAA8E,CAC7G,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,CAAC;IAC3D,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClE,MAAM,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,KAAK,CACV,2CAA2C,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,UAAU,CAAC,GAAG,CAAC,IAAI,gFAAgF,CAC7K,CAAC;YACF,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;YAC9F,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,cAAc,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,UAAU,QAAQ,4EAA4E,CAC/F,CAAC;QACF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;YACvC,OAAO,CAAC,CAAC;QACX,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC;QAClE,MAAM,YAAY,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,KAAK,CAAC,mBAAmB,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,GAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACpG,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;QAChD,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9D,MAAM,CAAC,KAAK,CAAC,oBAAoB,QAAQ,yEAAyE,CAAC,CAAC;YACpH,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,kBAAkB,QAAQ,IAAI,CAAC,CAAC;IAC7C,MAAM,CAAC,KAAK,CAAC,6DAA6D,CAAC,CAAC;IAC5E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,sBAAsB,CAAC,OAA4B;IAC1D,MAAM,MAAM,GAA6B,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IACvE,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IACxD,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACpE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,OAA2B;IACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,OAAO,uCAAuC,QAAQ,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,0CAA0C,QAAQ,EAAE,CAAC;IAC9D,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;AACrH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,QAAgB;IACpC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAgB;IAC5C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC;IACtF,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/gateway/src/adapters/index.js

@@ -21,7 +21,12 @@ export function createAdapterLaunchPlan(input) {
         case "codex":
             return {
                 command: "codex",
-                args: modelArgs(input.adapter, input.model),
+                // The shared Codex daemon retains its launch environment, including
+                // another terminal's hook identity. Keep execution inside this PTY's
+                // process tree so hooks inherit this session's id and attach token.
+                args: ["--no-daemon", "-c", 'tui.notifications=["approval-requested"]',
+                    "-c", 'tui.notification_method="osc9"', "-c", 'tui.notification_condition="always"',
+                    ...modelArgs(input.adapter, input.model)],
                 cwd: input.projectRoot,
                 env: input.env ?? {},
                 secretEnvNames: input.secretEnvNames ?? [],
@@ -50,12 +55,30 @@ export function createAdapterLaunchPlan(input) {
                 secretEnvNames: input.secretEnvNames ?? [],
                 credentialMode: input.credentialMode
             };
+        case "mcode":
+            // Zero-arg launch (host_environment policy, same as Kimi/PI): provider,
+            // model, and credential selection live in the applied global
+            // config.yaml, never in launch-time args/env. `--model` exists but only
+            // under `mcode exec`; the interactive TUI entry accepts no model flag.
+            return {
+                command: "mcode",
+                args: [],
+                cwd: input.projectRoot,
+                env: input.env ?? {},
+                secretEnvNames: input.secretEnvNames ?? [],
+                credentialMode: input.credentialMode
+            };
     }
 }
 export function formatAdapterModelId(adapter, provider, modelId) {
     if (adapter === "opencode" && !modelId.includes("/")) {
         return `${provider}/${modelId}`;
     }
+    if (adapter === "mcode" && !modelId.startsWith("custom_provider:")) {
+        // Custom providers are addressed with the explicit prefix; the bare
+        // `<provider>/<model>` form only resolves inside the bundled registry.
+        return `custom_provider:${provider}/${modelId}`;
+    }
     return modelId;
 }
 function modelArgs(adapter, model) {

package/dist/gateway/src/adapters/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAwC,MAAM,aAAa,CAAC;AAqB3F,MAAM,UAAU,uBAAuB,CAAC,KAA6B;IACnE,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,sBAAsB,CAAC;gBAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;QACL,KAAK,UAAU;YACb,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;gBAC3C,GAAG,EAAE,KAAK,CAAC,WAAW;gBACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;gBAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;gBAC3C,GAAG,EAAE,KAAK,CAAC,WAAW;gBACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;gBAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,KAAK,MAAM;YACT,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;gBAC3C,GAAG,EAAE,KAAK,CAAC,WAAW;gBACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;gBAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,KAAK,IAAI;YACP,qEAAqE;YACrE,oEAAoE;YACpE,0EAA0E;YAC1E,oEAAoE;YACpE,oDAAoD;YACpD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,KAAK,CAAC,WAAW;gBACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;gBAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAkB,EAClB,QAAgB,EAChB,OAAe;IAEf,IAAI,OAAO,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAChB,OAAkB,EAClB,KAAwC;IAExC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvF,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,mBAAmB,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CACP,IAAI,EAAE,GAAG,MAAM,aAAa,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAC3D,IAAI,EAAE,GAAG,MAAM,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAC1D,IAAI,EAAE,GAAG,MAAM,aAAa,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC,EAAE,CAC3E,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/adapters/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAwC,MAAM,aAAa,CAAC;AAqB3F,MAAM,UAAU,uBAAuB,CAAC,KAA6B;IACnE,QAAQ,KAAK,CAAC,OAAO,EAAE,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,sBAAsB,CAAC;gBAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9D,CAAC,CAAC;QACL,KAAK,UAAU;YACb,OAAO;gBACL,OAAO,EAAE,UAAU;gBACnB,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;gBAC3C,GAAG,EAAE,KAAK,CAAC,WAAW;gBACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;gBAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,KAAK,OAAO;YACV,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,oEAAoE;gBACpE,qEAAqE;gBACrE,oEAAoE;gBACpE,IAAI,EAAE,CAAC,aAAa,EAAE,IAAI,EAAE,0CAA0C;oBACpE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,qCAAqC;oBACnF,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC3C,GAAG,EAAE,KAAK,CAAC,WAAW;gBACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;gBAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,KAAK,MAAM;YACT,OAAO;gBACL,OAAO,EAAE,MAAM;gBACf,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC;gBAC3C,GAAG,EAAE,KAAK,CAAC,WAAW;gBACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;gBAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,KAAK,IAAI;YACP,qEAAqE;YACrE,oEAAoE;YACpE,0EAA0E;YAC1E,oEAAoE;YACpE,oDAAoD;YACpD,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,KAAK,CAAC,WAAW;gBACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;gBAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;QACJ,KAAK,OAAO;YACV,wEAAwE;YACxE,6DAA6D;YAC7D,wEAAwE;YACxE,uEAAuE;YACvE,OAAO;gBACL,OAAO,EAAE,OAAO;gBAChB,IAAI,EAAE,EAAE;gBACR,GAAG,EAAE,KAAK,CAAC,WAAW;gBACtB,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,EAAE;gBACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,EAAE;gBAC1C,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC;IACN,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,OAAkB,EAClB,QAAgB,EAChB,OAAe;IAEf,IAAI,OAAO,KAAK,UAAU,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,OAAO,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACnE,oEAAoE;QACpE,uEAAuE;QACvE,OAAO,mBAAmB,QAAQ,IAAI,OAAO,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAChB,OAAkB,EAClB,KAAwC;IAExC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7E,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACvF,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,mBAAmB,KAAK,CAAC,QAAQ,EAAE,CAAC;YACnD,IAAI,CAAC,IAAI,CACP,IAAI,EAAE,GAAG,MAAM,aAAa,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAC3D,IAAI,EAAE,GAAG,MAAM,YAAY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAC1D,IAAI,EAAE,GAAG,MAAM,aAAa,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,IAAI,WAAW,CAAC,EAAE,CAC3E,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/gateway/src/config/env.d.ts

@@ -1,4 +1,8 @@
 import { z } from "zod";
+export declare const registrationModeSchema: z.ZodEnum<["open", "off", "invite"]>;
+export declare const cliAdapterIdSchema: z.ZodEnum<["claude", "opencode", "codex", "kimi", "pi", "mcode"]>;
+export declare const sessionPrefixSchema: z.ZodString;
+export declare const cliAutonomyAdaptersSchema: z.ZodPipeline<z.ZodEffects<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodEnum<["claude", "opencode", "codex", "kimi", "pi", "mcode"]>, "many">]>, string[], string | ("claude" | "opencode" | "codex" | "kimi" | "pi" | "mcode")[]>, z.ZodArray<z.ZodEnum<["claude", "opencode", "codex", "kimi", "pi", "mcode"]>, "many">>;
 declare const envSchema: z.ZodEffects<z.ZodObject<{
     FORGEBADGER_PORT: z.ZodDefault<z.ZodNumber>;
     FORGEBADGER_HOST: z.ZodDefault<z.ZodString>;
@@ -8,8 +12,14 @@ declare const envSchema: z.ZodEffects<z.ZodObject<{
     FORGEBADGER_SESSION_PREFIX: z.ZodDefault<z.ZodString>;
     FORGEBADGER_REGISTRATION: z.ZodDefault<z.ZodEnum<["open", "off", "invite"]>>;
     FORGEBADGER_PROJECT_MANAGER_AUTO_DISPATCH_ENABLED: z.ZodEffects<z.ZodDefault<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false"]>]>>, boolean, boolean | "true" | "false" | undefined>;
-    FORGEBADGER_CLI_AUTONOMY_ADAPTERS: z.ZodPipeline<z.ZodEffects<z.ZodDefault<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodEnum<["claude", "opencode", "codex", "kimi", "pi"]>, "many">]>>, string[], string | ("claude" | "opencode" | "codex" | "kimi" | "pi")[] | undefined>, z.ZodArray<z.ZodEnum<["claude", "opencode", "codex", "kimi", "pi"]>, "many">>;
+    FORGEBADGER_CLI_AUTONOMY_ADAPTERS: z.ZodDefault<z.ZodPipeline<z.ZodEffects<z.ZodUnion<[z.ZodString, z.ZodArray<z.ZodEnum<["claude", "opencode", "codex", "kimi", "pi", "mcode"]>, "many">]>, string[], string | ("claude" | "opencode" | "codex" | "kimi" | "pi" | "mcode")[]>, z.ZodArray<z.ZodEnum<["claude", "opencode", "codex", "kimi", "pi", "mcode"]>, "many">>>;
     FORGEBADGER_MCP_ENABLED: z.ZodEffects<z.ZodDefault<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false"]>]>>, boolean, boolean | "true" | "false" | undefined>;
+    /**
+     * Operator escape hatch: when true the runtime-settings API rejects writes
+     * and the console renders the settings page read-only (.env stays the only
+     * source of truth).
+     */
+    FORGEBADGER_RUNTIME_SETTINGS_READONLY: z.ZodEffects<z.ZodDefault<z.ZodUnion<[z.ZodBoolean, z.ZodEnum<["true", "false"]>]>>, boolean, boolean | "true" | "false" | undefined>;
     FORGEBADGER_MASTER_KEY: z.ZodEffects<z.ZodString, string, string>;
     FORGEBADGER_SESSION_SERVER_IPC_PATH: z.ZodOptional<z.ZodString>;
 }, "strip", z.ZodTypeAny, {
@@ -21,8 +31,9 @@ declare const envSchema: z.ZodEffects<z.ZodObject<{
     FORGEBADGER_SESSION_PREFIX: string;
     FORGEBADGER_REGISTRATION: "open" | "off" | "invite";
     FORGEBADGER_PROJECT_MANAGER_AUTO_DISPATCH_ENABLED: boolean;
-    FORGEBADGER_CLI_AUTONOMY_ADAPTERS: ("claude" | "opencode" | "codex" | "kimi" | "pi")[];
+    FORGEBADGER_CLI_AUTONOMY_ADAPTERS: ("claude" | "opencode" | "codex" | "kimi" | "pi" | "mcode")[];
     FORGEBADGER_MCP_ENABLED: boolean;
+    FORGEBADGER_RUNTIME_SETTINGS_READONLY: boolean;
     FORGEBADGER_MASTER_KEY: string;
     FORGEBADGER_SESSION_SERVER_IPC_PATH?: string | undefined;
 }, {
@@ -35,8 +46,9 @@ declare const envSchema: z.ZodEffects<z.ZodObject<{
     FORGEBADGER_SESSION_PREFIX?: string | undefined;
     FORGEBADGER_REGISTRATION?: "open" | "off" | "invite" | undefined;
     FORGEBADGER_PROJECT_MANAGER_AUTO_DISPATCH_ENABLED?: boolean | "true" | "false" | undefined;
-    FORGEBADGER_CLI_AUTONOMY_ADAPTERS?: string | ("claude" | "opencode" | "codex" | "kimi" | "pi")[] | undefined;
+    FORGEBADGER_CLI_AUTONOMY_ADAPTERS?: string | ("claude" | "opencode" | "codex" | "kimi" | "pi" | "mcode")[] | undefined;
     FORGEBADGER_MCP_ENABLED?: boolean | "true" | "false" | undefined;
+    FORGEBADGER_RUNTIME_SETTINGS_READONLY?: boolean | "true" | "false" | undefined;
     FORGEBADGER_SESSION_SERVER_IPC_PATH?: string | undefined;
 }>, {
     FORGEBADGER_PORT: number;
@@ -47,8 +59,9 @@ declare const envSchema: z.ZodEffects<z.ZodObject<{
     FORGEBADGER_SESSION_PREFIX: string;
     FORGEBADGER_REGISTRATION: "open" | "off" | "invite";
     FORGEBADGER_PROJECT_MANAGER_AUTO_DISPATCH_ENABLED: boolean;
-    FORGEBADGER_CLI_AUTONOMY_ADAPTERS: ("claude" | "opencode" | "codex" | "kimi" | "pi")[];
+    FORGEBADGER_CLI_AUTONOMY_ADAPTERS: ("claude" | "opencode" | "codex" | "kimi" | "pi" | "mcode")[];
     FORGEBADGER_MCP_ENABLED: boolean;
+    FORGEBADGER_RUNTIME_SETTINGS_READONLY: boolean;
     FORGEBADGER_MASTER_KEY: string;
     FORGEBADGER_SESSION_SERVER_IPC_PATH?: string | undefined;
 }, {
@@ -61,8 +74,9 @@ declare const envSchema: z.ZodEffects<z.ZodObject<{
     FORGEBADGER_SESSION_PREFIX?: string | undefined;
     FORGEBADGER_REGISTRATION?: "open" | "off" | "invite" | undefined;
     FORGEBADGER_PROJECT_MANAGER_AUTO_DISPATCH_ENABLED?: boolean | "true" | "false" | undefined;
-    FORGEBADGER_CLI_AUTONOMY_ADAPTERS?: string | ("claude" | "opencode" | "codex" | "kimi" | "pi")[] | undefined;
+    FORGEBADGER_CLI_AUTONOMY_ADAPTERS?: string | ("claude" | "opencode" | "codex" | "kimi" | "pi" | "mcode")[] | undefined;
     FORGEBADGER_MCP_ENABLED?: boolean | "true" | "false" | undefined;
+    FORGEBADGER_RUNTIME_SETTINGS_READONLY?: boolean | "true" | "false" | undefined;
     FORGEBADGER_SESSION_SERVER_IPC_PATH?: string | undefined;
 }>;
 export type GatewayEnv = z.infer<typeof envSchema>;

package/dist/gateway/src/config/env.js

@@ -1,27 +1,46 @@
 import { homedir } from "node:os";
 import path from "node:path";
 import { z } from "zod";
+import { adapterIds } from "../lib/adapter-ids.js";
 import { expandUserPath } from "../lib/user-path.js";
 const strictEnvBoolean = z
     .union([z.boolean(), z.enum(["true", "false"])])
     .default(false)
     .transform((value) => value === true || value === "true");
-const cliAdapterId = z.enum(["claude", "opencode", "codex", "kimi", "pi"]);
+const cliAdapterId = z.enum(adapterIds);
+// Shared with the runtime-settings service so the settings page validates
+// against exactly the same shapes the process env accepts.
+export const registrationModeSchema = z.enum(["open", "off", "invite"]);
+export const cliAdapterIdSchema = cliAdapterId;
+export const sessionPrefixSchema = z
+    .string()
+    .regex(/^[a-zA-Z0-9_-]+$/)
+    .max(32);
+export const cliAutonomyAdaptersSchema = z
+    .union([z.string(), z.array(cliAdapterId)])
+    .transform((value) => (typeof value === "string" ? value.split(",").map((entry) => entry.trim()).filter(Boolean) : value))
+    .pipe(z.array(cliAdapterId));
+const runtimeSettingsBoolean = z
+    .union([z.boolean(), z.enum(["true", "false"])])
+    .default(false)
+    .transform((value) => value === true || value === "true");
 const envSchema = z.object({
     FORGEBADGER_PORT: z.coerce.number().int().positive().default(3000),
     FORGEBADGER_HOST: z.string().default("127.0.0.1"),
     FORGEBADGER_STATE_DIR: z.string(),
     FORGEBADGER_DB_PATH: z.string(),
     FORGEBADGER_JWT_SECRET: z.string().min(32),
-    FORGEBADGER_SESSION_PREFIX: z.string().regex(/^[a-zA-Z0-9_-]+$/).default("fb-"),
-    FORGEBADGER_REGISTRATION: z.enum(["open", "off", "invite"]).default("open"),
+    FORGEBADGER_SESSION_PREFIX: sessionPrefixSchema.default("fb-"),
+    FORGEBADGER_REGISTRATION: registrationModeSchema.default("open"),
     FORGEBADGER_PROJECT_MANAGER_AUTO_DISPATCH_ENABLED: strictEnvBoolean,
-    FORGEBADGER_CLI_AUTONOMY_ADAPTERS: z
-        .union([z.string(), z.array(cliAdapterId)])
-        .default("")
-        .transform((value) => (typeof value === "string" ? value.split(",").map((entry) => entry.trim()).filter(Boolean) : value))
-        .pipe(z.array(cliAdapterId)),
+    FORGEBADGER_CLI_AUTONOMY_ADAPTERS: cliAutonomyAdaptersSchema.default(""),
     FORGEBADGER_MCP_ENABLED: strictEnvBoolean,
+    /**
+     * Operator escape hatch: when true the runtime-settings API rejects writes
+     * and the console renders the settings page read-only (.env stays the only
+     * source of truth).
+     */
+    FORGEBADGER_RUNTIME_SETTINGS_READONLY: runtimeSettingsBoolean,
     FORGEBADGER_MASTER_KEY: z.string().refine((value) => isValidMasterKey(value), {
         message: "FORGEBADGER_MASTER_KEY must be 32 bytes or 64 hex characters"
     }),

package/dist/gateway/src/config/env.js.map

@@ -1 +1 @@
-{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,gBAAgB,GAAG,CAAC;KACvB,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;KAC/C,OAAO,CAAC,KAAK,CAAC;KACd,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC;AAE5D,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAE3E,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACjD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;IACjC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/B,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,0BAA0B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/E,wBAAwB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC3E,iDAAiD,EAAE,gBAAgB;IACnE,iCAAiC,EAAE,CAAC;SACjC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;SAC1C,OAAO,CAAC,EAAE,CAAC;SACX,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;SACzH,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC9B,uBAAuB,EAAE,gBAAgB;IACzC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE;QAC5E,OAAO,EAAE,8DAA8D;KACxE,CAAC;IACF,mCAAmC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1B,wEAAwE;IACxE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,OAAO,GAAG,GAAG,CAAC,mCAAmC,CAAC;IACxD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,qCAAqC,CAAC;YAC7C,OAAO,EAAE,yFAAyF;SACnG,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,MAAM,UAAU,OAAO,CAAC,QAA2B,OAAO,CAAC,GAAG;IAC5D,OAAO,SAAS,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAwB;IACpD,MAAM,UAAU,GAAsB,EAAE,GAAG,KAAK,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAC3B,cAAc,CAAC,KAAK,CAAC,qBAAqB,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC,CACpF,CAAC;IACF,UAAU,CAAC,qBAAqB,GAAG,QAAQ,CAAC;IAC5C,UAAU,CAAC,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAC3C,cAAc,CAAC,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CACnF,CAAC;IACF,IAAI,KAAK,CAAC,mCAAmC,EAAE,CAAC;QAC9C,UAAU,CAAC,mCAAmC,GAAG,IAAI,CAAC,OAAO,CAC3D,cAAc,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACpF,CAAC"}
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,MAAM,gBAAgB,GAAG,CAAC;KACvB,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;KAC/C,OAAO,CAAC,KAAK,CAAC;KACd,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC;AAE5D,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAExC,0EAA0E;AAC1E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACxE,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAC/C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,EAAE;KACR,KAAK,CAAC,kBAAkB,CAAC;KACzB,GAAG,CAAC,EAAE,CAAC,CAAC;AACX,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;KAC1C,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;KACzH,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;AAC/B,MAAM,sBAAsB,GAAG,CAAC;KAC7B,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;KAC/C,OAAO,CAAC,KAAK,CAAC;KACd,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC,CAAC;AAE5D,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IACzB,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACjD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;IACjC,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/B,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,0BAA0B,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9D,wBAAwB,EAAE,sBAAsB,CAAC,OAAO,CAAC,MAAM,CAAC;IAChE,iDAAiD,EAAE,gBAAgB;IACnE,iCAAiC,EAAE,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;IACxE,uBAAuB,EAAE,gBAAgB;IACzC;;;;OAIG;IACH,qCAAqC,EAAE,sBAAsB;IAC7D,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE;QAC5E,OAAO,EAAE,8DAA8D;KACxE,CAAC;IACF,mCAAmC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3D,CAAC,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC1B,wEAAwE;IACxE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,OAAO,GAAG,GAAG,CAAC,mCAAmC,CAAC;IACxD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,qCAAqC,CAAC;YAC7C,OAAO,EAAE,yFAAyF;SACnG,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,MAAM,UAAU,OAAO,CAAC,QAA2B,OAAO,CAAC,GAAG;IAC5D,OAAO,SAAS,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAwB;IACpD,MAAM,UAAU,GAAsB,EAAE,GAAG,KAAK,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAC3B,cAAc,CAAC,KAAK,CAAC,qBAAqB,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,CAAC,CAAC,CACpF,CAAC;IACF,UAAU,CAAC,qBAAqB,GAAG,QAAQ,CAAC;IAC5C,UAAU,CAAC,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAC3C,cAAc,CAAC,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,CACnF,CAAC;IACF,IAAI,KAAK,CAAC,mCAAmC,EAAE,CAAC;QAC9C,UAAU,CAAC,mCAAmC,GAAG,IAAI,CAAC,OAAO,CAC3D,cAAc,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;AACpF,CAAC"}

package/dist/gateway/src/config-generation/writer.d.ts

@@ -5,6 +5,8 @@ export interface WriteConfigPlanOptions {
     backupRoot?: string;
     failBeforeWrite?: string;
     failRollbackFor?: string[];
+    createOnly?: boolean;
+    beforeWrite?: () => void;
 }
 export declare class ConfigWriteError extends Error {
     readonly conflicts: ConflictReport[];

package/dist/gateway/src/config-generation/writer.js

@@ -1,4 +1,5 @@
 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
+import { closeSync, constants, mkdirSync, openSync, rmSync, writeFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { dirname, join } from "node:path";
 import { safeResolve } from "../lib/safe-resolve.js";
@@ -32,6 +33,7 @@ export async function writeConfigPlan(plan, options = {}) {
     const skippedFiles = [];
     try {
         for (const file of plan.files) {
+            options.beforeWrite?.();
             const conflict = conflicts.find((current) => current.relativePath === file.relativePath);
             const decision = conflict?.conflictType === "exists"
                 ? (options.decisions?.[file.relativePath] ?? "skip")
@@ -45,6 +47,23 @@ export async function writeConfigPlan(plan, options = {}) {
             if (options.failBeforeWrite === file.relativePath) {
                 throw new Error(`Injected write failure for ${file.relativePath}`);
             }
+            if (options.createOnly) {
+                const absolutePath = safeResolve(plan.targetRoot, file.relativePath);
+                mkdirSync(dirname(absolutePath), { recursive: true });
+                options.beforeWrite?.();
+                if (safeResolve(plan.targetRoot, file.relativePath) !== absolutePath)
+                    throw new Error("Config parent path changed");
+                const fd = openSync(absolutePath, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | (constants.O_NOFOLLOW ?? 0), 0o600);
+                appliedWrites.push({ relativePath: file.relativePath, absolutePath, created: true });
+                try {
+                    writeFileSync(fd, file.content, "utf8");
+                }
+                finally {
+                    closeSync(fd);
+                }
+                writtenFiles.push(file.relativePath);
+                continue;
+            }
             const absolutePath = safeResolve(plan.targetRoot, file.relativePath);
             const existingContent = await readExistingFile(absolutePath);
             const backupFile = existingContent === undefined
@@ -74,7 +93,7 @@ export async function writeConfigPlan(plan, options = {}) {
         };
     }
     catch (error) {
-        const rollbackResult = await rollbackAppliedWrites(appliedWrites, options);
+        const rollbackResult = await rollbackAppliedWrites(appliedWrites, plan.targetRoot, options);
         const outcome = rollbackResult.success ? "rolled_back" : "rollback_failed";
         return {
             writtenFiles,
@@ -111,7 +130,7 @@ async function readExistingFile(absolutePath) {
         throw error;
     }
 }
-async function rollbackAppliedWrites(appliedWrites, options) {
+async function rollbackAppliedWrites(appliedWrites, targetRoot, options) {
     const restoredFiles = [];
     const removedFiles = [];
     const failedFiles = [];
@@ -121,7 +140,14 @@ async function rollbackAppliedWrites(appliedWrites, options) {
                 throw new Error(`Injected rollback failure for ${write.relativePath}`);
             }
             if (write.created) {
-                await rm(write.absolutePath, { force: true });
+                if (options.createOnly) {
+                    if (safeResolve(targetRoot, write.relativePath) !== write.absolutePath)
+                        throw new Error("Config rollback path changed");
+                    rmSync(write.absolutePath, { force: true });
+                }
+                else {
+                    await rm(write.absolutePath, { force: true });
+                }
                 removedFiles.push(write.relativePath);
                 continue;
             }

package/dist/gateway/src/config-generation/writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../../src/config-generation/writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAmBvD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,SAAS,CAAmB;IAErC,YAAY,OAAe,EAAE,SAA2B;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAgB,EAChB,UAAkC,EAAE;IAEpC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtD,IAAI,QAAQ,CAAC,YAAY,KAAK,aAAa,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,EAAE,iBAAiB,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC;YACzF,MAAM,QAAQ,GACZ,QAAQ,EAAE,YAAY,KAAK,QAAQ;gBACjC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC;gBACpD,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;oBACxC,CAAC,CAAC,WAAW,CAAC;YACpB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,UAAU,GACd,eAAe,KAAK,SAAS;gBAC3B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;YAE5E,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,YAAY,GAAiB;gBACjC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,YAAY;gBACZ,OAAO,EAAE,eAAe,KAAK,SAAS;aACvC,CAAC;YACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,YAAY,CAAC,UAAU,GAAG,UAAU,CAAC;YACvC,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;QAED,OAAO;YACL,YAAY;YACZ,YAAY;YACZ,UAAU;YACV,SAAS;YACT,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;SAC5C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC3E,OAAO;YACL,YAAY;YACZ,YAAY;YACZ,UAAU;YACV,SAAS;YACT,OAAO;YACP,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;YACjE,iBAAiB,EAAE,KAAK;YACxB,cAAc;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAgB,EAAE,UAAmB;IAC5D,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC7F,2EAA2E;IAC3E,4CAA4C;IAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,YAAoB,EACpB,OAAe;IAEf,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,YAAoB;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,aAA6B,EAC7B,OAA+B;IAE/B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC/D,MAAM,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC3D,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa;QACb,YAAY;QACZ,WAAW;QACX,OAAO,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}
+{"version":3,"file":"writer.js","sourceRoot":"","sources":["../../../src/config-generation/writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC3F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAqBvD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,SAAS,CAAmB;IAErC,YAAY,OAAe,EAAE,SAA2B;QACtD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAgB,EAChB,UAAkC,EAAE;IAEpC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACpD,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtD,IAAI,QAAQ,CAAC,YAAY,KAAK,aAAa,EAAE,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,QAAQ,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CAAC,0CAA0C,EAAE,iBAAiB,CAAC,CAAC;IAC5F,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC9B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC;YACzF,MAAM,QAAQ,GACZ,QAAQ,EAAE,YAAY,KAAK,QAAQ;gBACjC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC;gBACpD,CAAC,CAAC,QAAQ;oBACR,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;oBACxC,CAAC,CAAC,WAAW,CAAC;YACpB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;gBACxB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,IAAI,OAAO,CAAC,eAAe,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YACrE,CAAC;YAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrE,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtD,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBACpH,MAAM,EAAE,GAAG,QAAQ,CAAC,YAAY,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;gBAClI,aAAa,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrF,IAAI,CAAC;oBAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;gBAC3E,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,eAAe,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,UAAU,GACd,eAAe,KAAK,SAAS;gBAC3B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,MAAM,eAAe,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;YAE5E,MAAM,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACpD,MAAM,YAAY,GAAiB;gBACjC,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,YAAY;gBACZ,OAAO,EAAE,eAAe,KAAK,SAAS;aACvC,CAAC;YACF,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,YAAY,CAAC,UAAU,GAAG,UAAU,CAAC;YACvC,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACjC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;QAED,OAAO;YACL,YAAY;YACZ,YAAY;YACZ,UAAU;YACV,SAAS;YACT,OAAO,EAAE,SAAS;YAClB,WAAW,EAAE,EAAE;YACf,iBAAiB,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC;SAC5C,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,cAAc,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5F,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAC3E,OAAO;YACL,YAAY;YACZ,YAAY;YACZ,UAAU;YACV,SAAS;YACT,OAAO;YACP,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;YACjE,iBAAiB,EAAE,KAAK;YACxB,cAAc;SACf,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAgB,EAAE,UAAmB;IAC5D,MAAM,IAAI,GAAG,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAC7F,2EAA2E;IAC3E,4CAA4C;IAC5C,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,UAAkB,EAClB,YAAoB,EACpB,OAAe;IAEf,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAClD,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,YAAoB;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAClD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,aAA6B,EAC7B,UAAkB,EAClB,OAA+B;IAE/B,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC;YACzE,CAAC;YAED,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;oBACvB,IAAI,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,CAAC,YAAY;wBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;oBACxH,MAAM,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9C,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,CAAC;gBACD,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;gBACtC,SAAS;YACX,CAAC;YAED,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;gBACrB,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC/D,MAAM,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;gBAC3D,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAED,OAAO;QACL,aAAa;QACb,YAAY;QACZ,WAAW;QACX,OAAO,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC;AACnD,CAAC"}

package/dist/gateway/src/db/migrations/0097_telegram_channel_accounts.sql

@@ -0,0 +1,7 @@
+CREATE TABLE `telegram_channel_accounts` (`id` text PRIMARY KEY NOT NULL, `user_id` text NOT NULL, `bot_token_encrypted` text NOT NULL, `bot_username` text, `enabled` integer DEFAULT false NOT NULL, `connection_state` text DEFAULT 'disabled' NOT NULL, `last_connected_at` integer, `last_error_code` text, `last_error_message` text, `config_revision` integer DEFAULT 1 NOT NULL, `created_at` integer, `updated_at` integer, FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_telegram_channel_accounts_user` ON `telegram_channel_accounts` (`user_id`);
+--> statement-breakpoint
+CREATE TABLE `integration_telegram_configs` (`id` text PRIMARY KEY NOT NULL, `user_id` text NOT NULL, `enabled` integer DEFAULT false NOT NULL, `emergency_disabled` integer DEFAULT false NOT NULL, `allowed_chat_ids` text DEFAULT '[]' NOT NULL, `created_at` integer, `updated_at` integer, FOREIGN KEY (`user_id`) REFERENCES `users`(`id`) ON UPDATE no action ON DELETE cascade);
+--> statement-breakpoint
+CREATE UNIQUE INDEX `idx_integration_telegram_configs_user` ON `integration_telegram_configs` (`user_id`);

package/dist/gateway/src/db/migrations/0098_skill_remote_provenance.sql

@@ -0,0 +1 @@
+ALTER TABLE skills ADD COLUMN remote_provenance text;

package/dist/gateway/src/db/migrations/0099_runtime_settings.sql

@@ -0,0 +1 @@
+CREATE TABLE `runtime_settings` (`key` text PRIMARY KEY NOT NULL, `value` text NOT NULL, `updated_at` integer NOT NULL, `updated_by` text);

package/dist/gateway/src/db/migrations/0100_runtime_confirmation_revocation.sql

@@ -0,0 +1,27 @@
+CREATE TABLE `__new_session_runtime_confirmations` (
+ user_id text NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+ session_id text NOT NULL,
+ runtime_name text NOT NULL,
+ launch_nonce text NOT NULL UNIQUE,
+ daemon_pid integer NOT NULL CHECK(daemon_pid > 0),
+ daemon_started_at text NOT NULL,
+ status text NOT NULL CHECK(status IN ('pending','stopped','revoked')),
+ receipt_json text,
+ updated_at integer NOT NULL,
+ PRIMARY KEY(user_id,session_id),
+ FOREIGN KEY(user_id,session_id) REFERENCES sessions(user_id,id) ON DELETE CASCADE,
+ CHECK((status='pending' AND receipt_json IS NULL) OR (status='stopped' AND receipt_json IS NOT NULL) OR (status='revoked' AND receipt_json IS NULL))
+);
+--> statement-breakpoint
+INSERT INTO `__new_session_runtime_confirmations` SELECT * FROM session_runtime_confirmations;
+--> statement-breakpoint
+DROP TABLE session_runtime_confirmations;
+--> statement-breakpoint
+ALTER TABLE `__new_session_runtime_confirmations` RENAME TO session_runtime_confirmations;
+--> statement-breakpoint
+CREATE TRIGGER preserve_pending_runtime_confirmation
+BEFORE DELETE ON session_runtime_confirmations
+WHEN OLD.status = 'pending'
+BEGIN
+ SELECT RAISE(ABORT, 'SESSION_RUNTIME_STOP_UNCONFIRMED');
+END;

package/dist/gateway/src/db/migrations/0101_provider_private_networks.sql

@@ -0,0 +1,7 @@
+-- Per-provider opt-in to trusted private / loopback endpoint addresses
+-- (e.g. a local Ollama or vLLM server on 127.0.0.1). Only the
+-- private/loopback/link-local IP blocklist and loopback hostname checks are
+-- relaxed; cloud metadata hosts (169.254.169.254, *.metadata.google.internal),
+-- `.internal` names, and credentials-in-URL remain blocked.
+ALTER TABLE `model_provider_profiles`
+  ADD COLUMN `allow_private_networks` integer DEFAULT 0 NOT NULL CHECK (`allow_private_networks` IN (0, 1));

package/dist/gateway/src/db/migrations/0102_copilot_preferences.sql

@@ -0,0 +1,4 @@
+-- Server-side persistence of the Copilot model + thinking-strength
+-- preferences. user_settings.model_id (previously unused) is reused as the
+-- preferred Copilot model; copilot_thinking_effort stores off|low|medium|high.
+ALTER TABLE `user_settings` ADD COLUMN `copilot_thinking_effort` TEXT;

package/dist/gateway/src/db/migrations/0103_model_thinking_efforts.sql

@@ -0,0 +1,8 @@
+-- Per-model thinking-strength declaration for Model Center -> CLI config sync.
+-- support_efforts is a JSON array of levels (low|medium|high|xhigh|max);
+-- default_effort is nullable (NULL = the CLI keeps its own default).
+-- The Kimi Code adapter writes both into the model alias entry in
+-- ~/.kimi-code/config.toml (support_efforts / default_effort keys).
+ALTER TABLE `model_profiles` ADD COLUMN `support_efforts` TEXT NOT NULL DEFAULT '[]';
+--> statement-breakpoint
+ALTER TABLE `model_profiles` ADD COLUMN `default_effort` TEXT;

package/dist/gateway/src/db/migrations/0104_copilot_project_autonomy.sql

@@ -0,0 +1 @@
+ALTER TABLE `projects` ADD `copilot_autonomy` integer DEFAULT false NOT NULL;