night-orch 0.3.2 → 0.4.0

package/dist/settings/registry.d.ts

@@ -1,20 +1,28 @@
+import type { z } from 'zod';
 import type { Config } from '../config/schema.js';
-export type SettingKey = 'github.pollIntervalSeconds' | 'security.maxDailyCostUsd' | 'security.maxCostPerRunUsd' | 'loop.maxReviewIterations' | 'loop.maxTotalAgentPasses' | 'observability.agentStreaming';
-export type SettingValue = number | boolean;
-export type SettingType = 'number' | 'boolean';
+export type SettingKey = string;
+export type JsonValue = string | number | boolean | null | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export type SettingValue = JsonValue;
+export type SettingType = 'number' | 'boolean' | 'string' | 'json';
+type SettingPath = readonly [string, ...string[]];
 interface SettingDefinitionBase<K extends SettingKey, V extends SettingValue> {
     key: K;
     label: string;
     description: string;
     details: string;
     type: SettingType;
-    defaultValue: V;
-    yamlPath: readonly [string, ...string[]];
+    mutable: boolean;
+    sensitive: boolean;
+    defaultValue: V | null;
+    yamlPath: SettingPath;
     read: (config: Config) => V;
     apply: (config: Config, value: V) => Config;
     parseInput: (raw: unknown) => V;
     parseStored: (raw: string) => V;
     serialize: (value: V) => string;
+    sanitizeForDisplay: (value: V) => SettingValue;
 }
 export interface NumberSettingDefinition<K extends SettingKey = SettingKey> extends SettingDefinitionBase<K, number> {
     type: 'number';
@@ -25,13 +33,81 @@ export interface NumberSettingDefinition<K extends SettingKey = SettingKey> exte
 export interface BooleanSettingDefinition<K extends SettingKey = SettingKey> extends SettingDefinitionBase<K, boolean> {
     type: 'boolean';
 }
-export type SettingDefinition = NumberSettingDefinition | BooleanSettingDefinition;
+export interface StringSettingDefinition<K extends SettingKey = SettingKey> extends SettingDefinitionBase<K, string | null> {
+    type: 'string';
+    options?: readonly string[];
+    allowNull?: boolean;
+}
+export interface JsonSettingDefinition<K extends SettingKey = SettingKey> extends SettingDefinitionBase<K, JsonValue> {
+    type: 'json';
+}
+export type SettingDefinition = NumberSettingDefinition | BooleanSettingDefinition | StringSettingDefinition | JsonSettingDefinition;
 export interface SettingYamlValue {
     hasYamlValue: boolean;
     yamlValue: SettingValue | null;
 }
 export declare function listSettingDefinitions(): SettingDefinition[];
 export declare function getSettingDefinition(key: string): SettingDefinition | null;
+export declare function sanitizeSettingValueForDisplay(definition: SettingDefinition, value: SettingValue | null): SettingValue | null;
 export declare function resolveSettingYamlValue(definition: SettingDefinition, rawConfig: unknown, baseConfig: Config): SettingYamlValue;
+export interface NumberSettingOptions {
+    key: string;
+    label: string;
+    description: string;
+    details: string;
+    defaultValue: number;
+    yamlPath: SettingPath;
+    integer: boolean;
+    min?: number;
+    max?: number;
+    step?: number;
+    mutable?: boolean;
+    sensitive?: boolean;
+    sanitizeForDisplay?: (value: number) => SettingValue;
+}
+export declare function numberSetting(options: NumberSettingOptions): NumberSettingDefinition;
+export interface BooleanSettingOptions {
+    key: string;
+    label: string;
+    description: string;
+    details: string;
+    defaultValue: boolean;
+    yamlPath: SettingPath;
+    mutable?: boolean;
+    sensitive?: boolean;
+    sanitizeForDisplay?: (value: boolean) => SettingValue;
+}
+export declare function booleanSetting(options: BooleanSettingOptions): BooleanSettingDefinition;
+export interface StringSettingOptions {
+    key: string;
+    label: string;
+    description: string;
+    details: string;
+    defaultValue: string | null;
+    yamlPath: SettingPath;
+    options?: readonly string[];
+    allowNull?: boolean;
+    minLength?: number;
+    url?: boolean;
+    validate?: (value: string) => string | null;
+    mutable?: boolean;
+    sensitive?: boolean;
+    sanitizeForDisplay?: (value: string | null) => SettingValue;
+}
+export declare function stringSetting(options: StringSettingOptions): StringSettingDefinition;
+export interface JsonSettingOptions {
+    key: string;
+    label: string;
+    description: string;
+    details: string;
+    defaultValue: JsonValue;
+    yamlPath: SettingPath;
+    mutable?: boolean;
+    sensitive?: boolean;
+    normalize?: (value: JsonValue) => JsonValue;
+    sanitizeForDisplay?: (value: JsonValue) => SettingValue;
+}
+export declare function jsonSetting(options: JsonSettingOptions): JsonSettingDefinition;
+export declare function validateJsonSettingShape<T>(value: JsonValue, schema: z.ZodType<T>, key: string): JsonValue;
 export {};
 //# sourceMappingURL=registry.d.ts.map

package/dist/settings/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/settings/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAEjD,MAAM,MAAM,UAAU,GAClB,4BAA4B,GAC5B,0BAA0B,GAC1B,2BAA2B,GAC3B,0BAA0B,GAC1B,0BAA0B,GAC1B,8BAA8B,CAAA;AAElC,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,OAAO,CAAA;AAC3C,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;AAE9C,UAAU,qBAAqB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,YAAY;IAC1E,GAAG,EAAE,CAAC,CAAA;IACN,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,WAAW,CAAA;IACjB,YAAY,EAAE,CAAC,CAAA;IACf,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;IACxC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,CAAA;IAC3B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,MAAM,CAAA;IAC3C,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,CAAC,CAAA;IAC/B,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,CAAA;IAC/B,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,CACxE,SAAQ,qBAAqB,CAAC,CAAC,EAAE,MAAM,CAAC;IACxC,IAAI,EAAE,QAAQ,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,wBAAwB,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,CACzE,SAAQ,qBAAqB,CAAC,CAAC,EAAE,OAAO,CAAC;IACzC,IAAI,EAAE,SAAS,CAAA;CAChB;AAED,MAAM,MAAM,iBAAiB,GAAG,uBAAuB,GAAG,wBAAwB,CAAA;AAElF,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,YAAY,GAAG,IAAI,CAAA;CAC/B;AAgMD,wBAAgB,sBAAsB,IAAI,iBAAiB,EAAE,CAE5D;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAE1E;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,iBAAiB,EAC7B,SAAS,EAAE,OAAO,EAClB,UAAU,EAAE,MAAM,GACjB,gBAAgB,CAYlB"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/settings/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAC5B,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAMjD,MAAM,MAAM,UAAU,GAAG,MAAM,CAAA;AAC/B,MAAM,MAAM,SAAS,GACjB,MAAM,GACN,MAAM,GACN,OAAO,GACP,IAAI,GACJ,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAA;AAChC,MAAM,MAAM,YAAY,GAAG,SAAS,CAAA;AACpC,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAA;AAElE,KAAK,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;AAEjD,UAAU,qBAAqB,CAAC,CAAC,SAAS,UAAU,EAAE,CAAC,SAAS,YAAY;IAC1E,GAAG,EAAE,CAAC,CAAA;IACN,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,WAAW,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,EAAE,OAAO,CAAA;IAClB,YAAY,EAAE,CAAC,GAAG,IAAI,CAAA;IACtB,QAAQ,EAAE,WAAW,CAAA;IACrB,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,CAAC,CAAA;IAC3B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,MAAM,CAAA;IAC3C,UAAU,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,CAAC,CAAA;IAC/B,WAAW,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,CAAC,CAAA;IAC/B,SAAS,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,MAAM,CAAA;IAC/B,kBAAkB,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,YAAY,CAAA;CAC/C;AAED,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,CACxE,SAAQ,qBAAqB,CAAC,CAAC,EAAE,MAAM,CAAC;IACxC,IAAI,EAAE,QAAQ,CAAA;IACd,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,wBAAwB,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,CACzE,SAAQ,qBAAqB,CAAC,CAAC,EAAE,OAAO,CAAC;IACzC,IAAI,EAAE,SAAS,CAAA;CAChB;AAED,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,CACxE,SAAQ,qBAAqB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,IAAI,EAAE,QAAQ,CAAA;IACd,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,qBAAqB,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU,CACtE,SAAQ,qBAAqB,CAAC,CAAC,EAAE,SAAS,CAAC;IAC3C,IAAI,EAAE,MAAM,CAAA;CACb;AAED,MAAM,MAAM,iBAAiB,GACzB,uBAAuB,GACvB,wBAAwB,GACxB,uBAAuB,GACvB,qBAAqB,CAAA;AAEzB,MAAM,WAAW,gBAAgB;IAC/B,YAAY,EAAE,OAAO,CAAA;IACrB,SAAS,EAAE,YAAY,GAAG,IAAI,CAAA;CAC/B;AAKD,wBAAgB,sBAAsB,IAAI,iBAAiB,EAAE,CAE5D;AAED,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAE1E;AAED,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,iBAAiB,EAC7B,KAAK,EAAE,YAAY,GAAG,IAAI,GACzB,YAAY,GAAG,IAAI,CAMrB;AAED,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,iBAAiB,EAC7B,SAAS,EAAE,OAAO,EAClB,UAAU,EAAE,MAAM,GACjB,gBAAgB,CAYlB;AAuBD,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,WAAW,CAAA;IACrB,OAAO,EAAE,OAAO,CAAA;IAChB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,YAAY,CAAA;CACrD;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,uBAAuB,CA+BpF;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,OAAO,CAAA;IACrB,QAAQ,EAAE,WAAW,CAAA;IACrB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,YAAY,CAAA;CACtD;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,wBAAwB,CAkBvF;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,QAAQ,EAAE,WAAW,CAAA;IACrB,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IAC3C,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,KAAK,YAAY,CAAA;CAC5D;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,uBAAuB,CAkCpF;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,SAAS,CAAA;IACvB,QAAQ,EAAE,WAAW,CAAA;IACrB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,SAAS,CAAA;IAC3C,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,YAAY,CAAA;CACxD;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,qBAAqB,CAwB9E;AAED,wBAAgB,wBAAwB,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAU1G"}

package/dist/settings/registry.js

@@ -1,190 +1,8 @@
-const SETTING_DEFINITIONS = {
-    'github.pollIntervalSeconds': {
-        key: 'github.pollIntervalSeconds',
-        label: 'Poll Interval (seconds)',
-        description: 'Delay between automatic poll cycles.',
-        details: 'Controls how often night-orch checks configured repos for work. Lower values react faster but increase API traffic; higher values reduce background load.',
-        type: 'number',
-        defaultValue: 300,
-        yamlPath: ['github', 'pollIntervalSeconds'],
-        min: 5,
-        max: 3600,
-        step: 5,
-        read: (config) => config.github.pollIntervalSeconds,
-        apply: (config, value) => ({
-            ...config,
-            github: {
-                ...config.github,
-                pollIntervalSeconds: value,
-            },
-        }),
-        parseInput: (raw) => parseNumberInput(raw, {
-            key: 'github.pollIntervalSeconds',
-            integer: true,
-            min: 5,
-            max: 3600,
-        }),
-        parseStored: (raw) => parseStoredNumber(raw, {
-            key: 'github.pollIntervalSeconds',
-            integer: true,
-            min: 5,
-            max: 3600,
-        }),
-        serialize: (value) => JSON.stringify(value),
-    },
-    'security.maxDailyCostUsd': {
-        key: 'security.maxDailyCostUsd',
-        label: 'Daily Cost Budget (USD)',
-        description: 'Maximum allowed spend per UTC day before new runs are blocked.',
-        details: 'Sets the global daily spend cap for pay-per-use mode. When the cap is reached, new runs are blocked until the next UTC day or until you raise the limit.',
-        type: 'number',
-        defaultValue: 50,
-        yamlPath: ['security', 'maxDailyCostUsd'],
-        min: 1,
-        max: 10000,
-        step: 1,
-        read: (config) => config.security.maxDailyCostUsd,
-        apply: (config, value) => ({
-            ...config,
-            security: {
-                ...config.security,
-                maxDailyCostUsd: value,
-            },
-        }),
-        parseInput: (raw) => parseNumberInput(raw, {
-            key: 'security.maxDailyCostUsd',
-            integer: false,
-            min: 1,
-            max: 10000,
-        }),
-        parseStored: (raw) => parseStoredNumber(raw, {
-            key: 'security.maxDailyCostUsd',
-            integer: false,
-            min: 1,
-            max: 10000,
-        }),
-        serialize: (value) => JSON.stringify(value),
-    },
-    'security.maxCostPerRunUsd': {
-        key: 'security.maxCostPerRunUsd',
-        label: 'Per-Run Cost Budget (USD)',
-        description: 'Maximum allowed spend for a single run before it is blocked.',
-        details: 'Sets the per-issue run cost ceiling. Useful for preventing one expensive issue from consuming most of the daily budget.',
-        type: 'number',
-        defaultValue: 10,
-        yamlPath: ['security', 'maxCostPerRunUsd'],
-        min: 0.1,
-        max: 1000,
-        step: 0.5,
-        read: (config) => config.security.maxCostPerRunUsd,
-        apply: (config, value) => ({
-            ...config,
-            security: {
-                ...config.security,
-                maxCostPerRunUsd: value,
-            },
-        }),
-        parseInput: (raw) => parseNumberInput(raw, {
-            key: 'security.maxCostPerRunUsd',
-            integer: false,
-            min: 0.1,
-            max: 1000,
-        }),
-        parseStored: (raw) => parseStoredNumber(raw, {
-            key: 'security.maxCostPerRunUsd',
-            integer: false,
-            min: 0.1,
-            max: 1000,
-        }),
-        serialize: (value) => JSON.stringify(value),
-    },
-    'loop.maxReviewIterations': {
-        key: 'loop.maxReviewIterations',
-        label: 'Max Review Iterations',
-        description: 'Maximum review correction loops per run.',
-        details: 'Limits how many review-fix-review cycles a run can execute before stopping. Higher values can improve completion rate, but may increase runtime and cost.',
-        type: 'number',
-        defaultValue: 4,
-        yamlPath: ['loop', 'maxReviewIterations'],
-        min: 1,
-        max: 20,
-        step: 1,
-        read: (config) => config.loop.maxReviewIterations,
-        apply: (config, value) => ({
-            ...config,
-            loop: {
-                ...config.loop,
-                maxReviewIterations: value,
-            },
-        }),
-        parseInput: (raw) => parseNumberInput(raw, {
-            key: 'loop.maxReviewIterations',
-            integer: true,
-            min: 1,
-            max: 20,
-        }),
-        parseStored: (raw) => parseStoredNumber(raw, {
-            key: 'loop.maxReviewIterations',
-            integer: true,
-            min: 1,
-            max: 20,
-        }),
-        serialize: (value) => JSON.stringify(value),
-    },
-    'loop.maxTotalAgentPasses': {
-        key: 'loop.maxTotalAgentPasses',
-        label: 'Max Total Agent Passes',
-        description: 'Hard cap on planner/coder/reviewer passes in one run.',
-        details: 'Caps total planner/coder/reviewer passes across the full run. This is a safety guard against long loops and runaway spend.',
-        type: 'number',
-        defaultValue: 10,
-        yamlPath: ['loop', 'maxTotalAgentPasses'],
-        min: 1,
-        max: 50,
-        step: 1,
-        read: (config) => config.loop.maxTotalAgentPasses,
-        apply: (config, value) => ({
-            ...config,
-            loop: {
-                ...config.loop,
-                maxTotalAgentPasses: value,
-            },
-        }),
-        parseInput: (raw) => parseNumberInput(raw, {
-            key: 'loop.maxTotalAgentPasses',
-            integer: true,
-            min: 1,
-            max: 50,
-        }),
-        parseStored: (raw) => parseStoredNumber(raw, {
-            key: 'loop.maxTotalAgentPasses',
-            integer: true,
-            min: 1,
-            max: 50,
-        }),
-        serialize: (value) => JSON.stringify(value),
-    },
-    'observability.agentStreaming': {
-        key: 'observability.agentStreaming',
-        label: 'Agent Streaming',
-        description: 'Enable in-flight agent event streaming to TUI/Web.',
-        details: 'Turns live agent event streaming on or off for terminal and web views. Disable this if you want quieter live output while runs are active.',
-        type: 'boolean',
-        defaultValue: true,
-        yamlPath: ['observability', 'agentStreaming'],
-        read: (config) => config.observability?.agentStreaming ?? true,
-        apply: (config, value) => ({
-            ...config,
-            observability: {
-                ...buildDefaultObservability(config),
-                agentStreaming: value,
-            },
-        }),
-        parseInput: (raw) => parseBooleanInput(raw, 'observability.agentStreaming'),
-        parseStored: (raw) => parseStoredBoolean(raw, 'observability.agentStreaming'),
-        serialize: (value) => JSON.stringify(value),
-    },
-};
+import { githubDefinitions } from './definitions/github.js';
+import { loopDefinitions } from './definitions/loop.js';
+import { observabilityDefinitions } from './definitions/observability.js';
+import { securityDefinitions } from './definitions/security.js';
+const SETTING_DEFINITIONS = buildSettingDefinitions();
 const SETTING_KEYS = Object.keys(SETTING_DEFINITIONS);
 export function listSettingDefinitions() {
     return SETTING_KEYS.map((key) => SETTING_DEFINITIONS[key]);
@@ -192,6 +10,13 @@ export function listSettingDefinitions() {
 export function getSettingDefinition(key) {
     return SETTING_DEFINITIONS[key] ?? null;
 }
+export function sanitizeSettingValueForDisplay(definition, value) {
+    if (value === null) {
+        return null;
+    }
+    const sanitize = definition.sanitizeForDisplay;
+    return sanitize(value);
+}
 export function resolveSettingYamlValue(definition, rawConfig, baseConfig) {
     if (!hasValueAtPath(rawConfig, definition.yamlPath)) {
         return {
@@ -204,6 +29,144 @@ export function resolveSettingYamlValue(definition, rawConfig, baseConfig) {
         yamlValue: definition.read(baseConfig),
     };
 }
+function buildSettingDefinitions() {
+    const definitions = [
+        ...githubDefinitions(),
+        ...loopDefinitions(),
+        ...securityDefinitions(),
+        ...observabilityDefinitions(),
+    ];
+    const entries = new Map();
+    for (const definition of definitions) {
+        if (entries.has(definition.key)) {
+            throw new Error(`Duplicate runtime setting key: ${definition.key}`);
+        }
+        entries.set(definition.key, definition);
+    }
+    return Object.fromEntries(entries);
+}
+export function numberSetting(options) {
+    return {
+        key: options.key,
+        label: options.label,
+        description: options.description,
+        details: options.details,
+        type: 'number',
+        mutable: options.mutable ?? true,
+        sensitive: options.sensitive ?? false,
+        defaultValue: options.defaultValue,
+        yamlPath: options.yamlPath,
+        ...(options.min !== undefined ? { min: options.min } : {}),
+        ...(options.max !== undefined ? { max: options.max } : {}),
+        ...(options.step !== undefined ? { step: options.step } : {}),
+        read: (config) => readNumberValue(config, options.yamlPath, options.defaultValue),
+        apply: (config, value) => setConfigValue(config, options.yamlPath, value),
+        parseInput: (raw) => parseNumberInput(raw, {
+            key: options.key,
+            integer: options.integer,
+            min: options.min,
+            max: options.max,
+        }),
+        parseStored: (raw) => parseStoredNumber(raw, {
+            key: options.key,
+            integer: options.integer,
+            min: options.min,
+            max: options.max,
+        }),
+        serialize: (value) => JSON.stringify(value),
+        sanitizeForDisplay: options.sanitizeForDisplay ?? identitySanitize,
+    };
+}
+export function booleanSetting(options) {
+    return {
+        key: options.key,
+        label: options.label,
+        description: options.description,
+        details: options.details,
+        type: 'boolean',
+        mutable: options.mutable ?? true,
+        sensitive: options.sensitive ?? false,
+        defaultValue: options.defaultValue,
+        yamlPath: options.yamlPath,
+        read: (config) => readBooleanValue(config, options.yamlPath, options.defaultValue),
+        apply: (config, value) => setConfigValue(config, options.yamlPath, value),
+        parseInput: (raw) => parseBooleanInput(raw, options.key),
+        parseStored: (raw) => parseStoredBoolean(raw, options.key),
+        serialize: (value) => JSON.stringify(value),
+        sanitizeForDisplay: options.sanitizeForDisplay ?? identitySanitize,
+    };
+}
+export function stringSetting(options) {
+    return {
+        key: options.key,
+        label: options.label,
+        description: options.description,
+        details: options.details,
+        type: 'string',
+        mutable: options.mutable ?? true,
+        sensitive: options.sensitive ?? false,
+        defaultValue: options.defaultValue,
+        yamlPath: options.yamlPath,
+        ...(options.options ? { options: options.options } : {}),
+        ...(options.allowNull ? { allowNull: true } : {}),
+        read: (config) => readStringValue(config, options.yamlPath, options.defaultValue, options.allowNull ?? false),
+        apply: (config, value) => setConfigValue(config, options.yamlPath, value),
+        parseInput: (raw) => parseStringInput(raw, {
+            key: options.key,
+            allowNull: options.allowNull,
+            options: options.options,
+            minLength: options.minLength,
+            url: options.url,
+            validate: options.validate,
+        }),
+        parseStored: (raw) => parseStoredString(raw, {
+            key: options.key,
+            allowNull: options.allowNull,
+            options: options.options,
+            minLength: options.minLength,
+            url: options.url,
+            validate: options.validate,
+        }),
+        serialize: (value) => JSON.stringify(value),
+        sanitizeForDisplay: options.sanitizeForDisplay ?? identitySanitize,
+    };
+}
+export function jsonSetting(options) {
+    return {
+        key: options.key,
+        label: options.label,
+        description: options.description,
+        details: options.details,
+        type: 'json',
+        mutable: options.mutable ?? true,
+        sensitive: options.sensitive ?? false,
+        defaultValue: options.defaultValue,
+        yamlPath: options.yamlPath,
+        read: (config) => readJsonValue(config, options.yamlPath, options.defaultValue),
+        apply: (config, value) => setConfigValue(config, options.yamlPath, value),
+        parseInput: (raw) => {
+            const parsed = parseJsonInput(raw, options.key);
+            return options.normalize ? options.normalize(parsed) : parsed;
+        },
+        parseStored: (raw) => {
+            const parsed = parseStoredJson(raw, options.key);
+            return options.normalize ? options.normalize(parsed) : parsed;
+        },
+        serialize: (value) => JSON.stringify(value),
+        sanitizeForDisplay: options.sanitizeForDisplay ?? identitySanitize,
+    };
+}
+export function validateJsonSettingShape(value, schema, key) {
+    const result = schema.safeParse(value);
+    if (result.success) {
+        return result.data;
+    }
+    const issue = result.error.issues[0];
+    const path = issue?.path.length ? issue.path.join('.') : key;
+    const message = issue?.message ?? 'invalid structure';
+    throw new Error(`${key} has invalid structure (${path}): ${message}`);
+}
+// --- Internal helpers ---
 function parseNumberInput(raw, options) {
     const parsed = typeof raw === 'number'
         ? raw
@@ -231,8 +194,11 @@ function validateNumber(value, options) {
     if (options.integer && !Number.isInteger(value)) {
         throw new Error(`${options.key} must be an integer`);
     }
-    if (value < options.min || value > options.max) {
-        throw new Error(`${options.key} must be between ${options.min} and ${options.max}`);
+    if (options.min !== undefined && value < options.min) {
+        throw new Error(`${options.key} must be >= ${options.min}`);
+    }
+    if (options.max !== undefined && value > options.max) {
+        throw new Error(`${options.key} must be <= ${options.max}`);
     }
     return value;
 }
@@ -275,12 +241,138 @@ function parseStoredBoolean(raw, key) {
         throw new Error(`Invalid stored value for ${key}: ${err.message}`);
     }
 }
-function buildDefaultObservability(config) {
+function parseStringInput(raw, options) {
+    if (raw === null) {
+        if (options.allowNull) {
+            return null;
+        }
+        throw new Error(`${options.key} must be a string`);
+    }
+    if (typeof raw !== 'string') {
+        throw new Error(`${options.key} must be a string`);
+    }
+    if (options.allowNull && raw.trim().toLowerCase() === 'null') {
+        return null;
+    }
+    const value = raw;
+    if (options.minLength !== undefined && value.trim().length < options.minLength) {
+        throw new Error(`${options.key} must be at least ${options.minLength} character(s)`);
+    }
+    if (options.options && !options.options.includes(value)) {
+        throw new Error(`${options.key} must be one of: ${options.options.join(', ')}`);
+    }
+    if (options.url) {
+        try {
+            void new URL(value);
+        }
+        catch {
+            throw new Error(`${options.key} must be a valid URL`);
+        }
+    }
+    const validationError = options.validate?.(value);
+    if (validationError) {
+        throw new Error(validationError);
+    }
+    return value;
+}
+function parseStoredString(raw, options) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (typeof parsed !== 'string' && parsed !== null) {
+            throw new Error(`Stored value for ${options.key} is not string/null`);
+        }
+        return parseStringInput(parsed, options);
+    }
+    catch (err) {
+        throw new Error(`Invalid stored value for ${options.key}: ${err.message}`);
+    }
+}
+function parseJsonInput(raw, key) {
+    if (typeof raw === 'string') {
+        try {
+            const parsed = JSON.parse(raw);
+            if (!isJsonValue(parsed)) {
+                throw new Error('must be valid JSON');
+            }
+            return parsed;
+        }
+        catch (err) {
+            throw new Error(`${key} must be valid JSON: ${err.message}`);
+        }
+    }
+    if (!isJsonValue(raw)) {
+        throw new Error(`${key} must be valid JSON`);
+    }
+    return raw;
+}
+function parseStoredJson(raw, key) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (!isJsonValue(parsed)) {
+            throw new Error(`Stored value for ${key} is not valid JSON`);
+        }
+        return parsed;
+    }
+    catch (err) {
+        throw new Error(`Invalid stored value for ${key}: ${err.message}`);
+    }
+}
+function identitySanitize(value) {
+    return value;
+}
+function readNumberValue(config, path, fallback) {
+    const value = readPathValue(config, path);
+    return typeof value === 'number' ? value : fallback;
+}
+function readBooleanValue(config, path, fallback) {
+    const value = readPathValue(config, path);
+    return typeof value === 'boolean' ? value : fallback;
+}
+function readStringValue(config, path, fallback, allowNull) {
+    const value = readPathValue(config, path);
+    if (typeof value === 'string') {
+        return value;
+    }
+    if (allowNull && value === null) {
+        return null;
+    }
+    return fallback;
+}
+function readJsonValue(config, path, fallback) {
+    const value = readPathValue(config, path);
+    return isJsonValue(value) ? value : fallback;
+}
+function setConfigValue(config, path, value) {
+    return setPathValue(config, path, value);
+}
+function readPathValue(source, path) {
+    let current = source;
+    for (const segment of path) {
+        if (!isRecord(current)) {
+            return undefined;
+        }
+        current = current[segment];
+    }
+    return current;
+}
+function setPathValue(source, path, value) {
+    if (path.length === 0) {
+        return isRecord(source) ? { ...source } : {};
+    }
+    const [segment, ...rest] = path;
+    if (segment === undefined) {
+        return isRecord(source) ? { ...source } : {};
+    }
+    const current = isRecord(source) ? source : {};
+    if (rest.length === 0) {
+        return {
+            ...current,
+            [segment]: value,
+        };
+    }
     return {
-        agentStreaming: config.observability?.agentStreaming ?? true,
-        eventRetention: config.observability?.eventRetention ?? 1000,
-        sessionLogs: config.observability?.sessionLogs ?? true,
-        sessionLogRetention: config.observability?.sessionLogRetention ?? 7,
+        ...current,
+        [segment]: setPathValue(current[segment], rest, value),
     };
 }
 function hasValueAtPath(source, path) {
@@ -296,4 +388,19 @@ function hasValueAtPath(source, path) {
 function isRecord(value) {
     return typeof value === 'object' && value !== null;
 }
+function isJsonValue(value) {
+    if (value === null
+        || typeof value === 'string'
+        || typeof value === 'number'
+        || typeof value === 'boolean') {
+        return true;
+    }
+    if (Array.isArray(value)) {
+        return value.every((entry) => isJsonValue(entry));
+    }
+    if (!isRecord(value)) {
+        return false;
+    }
+    return Object.values(value).every((entry) => isJsonValue(entry));
+}
 //# sourceMappingURL=registry.js.map