octoflow-core 1.0.0

package/dist/cli/lifecycle/server-listen.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/cli/lifecycle/server-listen.ts"],
+  "sourcesContent": ["import type { Server as HttpServer } from 'node:http';\nimport type { Server as HttpsServer } from 'node:https';\n\nexport type CliServer = HttpServer | HttpsServer;\n\nexport function isServerNotRunningError(error: unknown): boolean {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    'code' in error &&\n    (error as { code?: string }).code === 'ERR_SERVER_NOT_RUNNING'\n  );\n}\n\nexport function listenOnServer(\n  server: CliServer,\n  host: string,\n  port: number\n): Promise<void> {\n  return new Promise((resolve, reject) => {\n    const onError = (error: Error) => {\n      server.off('error', onError);\n      reject(error);\n    };\n    const onListening = () => {\n      server.off('error', onError);\n      resolve();\n    };\n\n    server.once('error', onError);\n    server.listen(port, host, onListening);\n  });\n}\n\nexport function waitForServerExit(server: CliServer): Promise<Error | null> {\n  return new Promise((resolve) => {\n    const onClose = () => {\n      server.off('error', onError);\n      resolve(null);\n    };\n    const onError = (error: Error) => {\n      server.off('close', onClose);\n      resolve(error);\n    };\n\n    server.once('close', onClose);\n    server.once('error', onError);\n  });\n}\n"],
+  "mappings": "AAKO,SAAS,wBAAwB,OAAyB;AAC/D,SACE,OAAO,UAAU,YACjB,UAAU,QACV,UAAU,SACT,MAA4B,SAAS;AAE1C;AAEO,SAAS,eACd,QACA,MACA,MACe;AACf,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,UAAU,CAAC,UAAiB;AAChC,aAAO,IAAI,SAAS,OAAO;AAC3B,aAAO,KAAK;AAAA,IACd;AACA,UAAM,cAAc,MAAM;AACxB,aAAO,IAAI,SAAS,OAAO;AAC3B,cAAQ;AAAA,IACV;AAEA,WAAO,KAAK,SAAS,OAAO;AAC5B,WAAO,OAAO,MAAM,MAAM,WAAW;AAAA,EACvC,CAAC;AACH;AAEO,SAAS,kBAAkB,QAA0C;AAC1E,SAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,UAAM,UAAU,MAAM;AACpB,aAAO,IAAI,SAAS,OAAO;AAC3B,cAAQ,IAAI;AAAA,IACd;AACA,UAAM,UAAU,CAAC,UAAiB;AAChC,aAAO,IAAI,SAAS,OAAO;AAC3B,cAAQ,KAAK;AAAA,IACf;AAEA,WAAO,KAAK,SAAS,OAAO;AAC5B,WAAO,KAAK,SAAS,OAAO;AAAA,EAC9B,CAAC;AACH;",
+  "names": []
+}

package/dist/cli/lifecycle/signal.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Wire process signals to an AbortController so that SIGINT/SIGTERM
+ * propagate through Bridge → runner → child process cleanup.
+ *
+ * Registers exactly one handler per call and removes both handlers when
+ * the controller is aborted, preventing listener accumulation across
+ * multiple CLI invocations in the same process (e.g. tests, daemon reuse).
+ */
+export declare function wireSignals(controller: AbortController): void;
+//# sourceMappingURL=signal.d.ts.map

package/dist/cli/lifecycle/signal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal.d.ts","sourceRoot":"","sources":["../../../src/cli/lifecycle/signal.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,UAAU,EAAE,eAAe,GAAG,IAAI,CAkB7D"}

package/dist/cli/lifecycle/signal.js

@@ -0,0 +1,20 @@
+function wireSignals(controller) {
+  if (controller.signal.aborted) return;
+  const abort = () => {
+    if (!controller.signal.aborted) controller.abort();
+  };
+  process.on("SIGINT", abort);
+  process.on("SIGTERM", abort);
+  controller.signal.addEventListener(
+    "abort",
+    () => {
+      process.off("SIGINT", abort);
+      process.off("SIGTERM", abort);
+    },
+    { once: true }
+  );
+}
+export {
+  wireSignals
+};
+//# sourceMappingURL=signal.js.map

package/dist/cli/lifecycle/signal.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/cli/lifecycle/signal.ts"],
+  "sourcesContent": ["/**\n * Wire process signals to an AbortController so that SIGINT/SIGTERM\n * propagate through Bridge \u2192 runner \u2192 child process cleanup.\n *\n * Registers exactly one handler per call and removes both handlers when\n * the controller is aborted, preventing listener accumulation across\n * multiple CLI invocations in the same process (e.g. tests, daemon reuse).\n */\nexport function wireSignals(controller: AbortController): void {\n  if (controller.signal.aborted) return;\n\n  const abort = () => {\n    if (!controller.signal.aborted) controller.abort();\n  };\n\n  process.on('SIGINT', abort);\n  process.on('SIGTERM', abort);\n\n  controller.signal.addEventListener(\n    'abort',\n    () => {\n      process.off('SIGINT', abort);\n      process.off('SIGTERM', abort);\n    },\n    { once: true }\n  );\n}\n"],
+  "mappings": "AAQO,SAAS,YAAY,YAAmC;AAC7D,MAAI,WAAW,OAAO,QAAS;AAE/B,QAAM,QAAQ,MAAM;AAClB,QAAI,CAAC,WAAW,OAAO,QAAS,YAAW,MAAM;AAAA,EACnD;AAEA,UAAQ,GAAG,UAAU,KAAK;AAC1B,UAAQ,GAAG,WAAW,KAAK;AAE3B,aAAW,OAAO;AAAA,IAChB;AAAA,IACA,MAAM;AACJ,cAAQ,IAAI,UAAU,KAAK;AAC3B,cAAQ,IAAI,WAAW,KAAK;AAAA,IAC9B;AAAA,IACA,EAAE,MAAM,KAAK;AAAA,EACf;AACF;",
+  "names": []
+}

package/dist/cli/main.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=main.d.ts.map

package/dist/cli/main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.d.ts","sourceRoot":"","sources":["../../src/cli/main.ts"],"names":[],"mappings":""}

package/dist/cli/main.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { runCli } from "./index.js";
+void runCli();
+//# sourceMappingURL=main.js.map

package/dist/cli/main.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/cli/main.ts"],
+  "sourcesContent": ["#!/usr/bin/env node\nimport { runCli } from './index.js';\n\nvoid runCli();\n"],
+  "mappings": ";AACA,SAAS,cAAc;AAEvB,KAAK,OAAO;",
+  "names": []
+}

package/dist/config/config-load.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Config file discovery, cache, and `loadConfig` / `clearConfigCache`.
+ */
+import type { BackendName } from '../domain/core-client.js';
+import type { OctoFlowConfig } from './config-shapes.js';
+export interface LoadConfigOptions {
+    /** Skip all config file discovery, including OCTOFLOW_CONFIG. */
+    ignoreFileConfig?: boolean;
+}
+export type ApiKeyConfig = Partial<Record<BackendName | 'anthropic' | 'google' | 'openai', string>>;
+export declare function normalizeApiKeys(apiKeys?: ApiKeyConfig): Partial<Record<BackendName, string>>;
+export declare function loadConfig(options?: LoadConfigOptions): OctoFlowConfig | null;
+export declare function clearConfigCache(): void;
+//# sourceMappingURL=config-load.d.ts.map

package/dist/config/config-load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-load.d.ts","sourceRoot":"","sources":["../../src/config/config-load.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AA+BzD,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAgBD,MAAM,MAAM,YAAY,GAAG,OAAO,CAChC,MAAM,CAAC,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,EAAE,MAAM,CAAC,CAChE,CAAC;AAEF,wBAAgB,gBAAgB,CAC9B,OAAO,CAAC,EAAE,YAAY,GACrB,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAYtC;AAED,wBAAgB,UAAU,CACxB,OAAO,GAAE,iBAAsB,GAC9B,cAAc,GAAG,IAAI,CAoBvB;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC"}

package/dist/config/config-load.js

@@ -0,0 +1,75 @@
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { getOctoFlowConfigPath } from "../utils/octoflow-home.js";
+import { isSafeKey } from "../utils/safe-key.js";
+const CONFIG_FILE_NAMES = ["octoflow.config.json", ".octoflow.json"];
+function discoverConfigPaths(startDir = process.cwd()) {
+  const paths = [];
+  let current = resolve(startDir);
+  while (true) {
+    for (const fileName of CONFIG_FILE_NAMES) {
+      paths.push(join(current, fileName));
+    }
+    const parent = dirname(current);
+    if (parent === current) break;
+    current = parent;
+  }
+  return paths;
+}
+function candidatePaths() {
+  const paths = [];
+  if (process.env.OCTOFLOW_CONFIG) {
+    paths.push(process.env.OCTOFLOW_CONFIG);
+  }
+  paths.push(...discoverConfigPaths());
+  paths.push(getOctoFlowConfigPath());
+  return paths;
+}
+function truthyEnvFlag(value) {
+  if (!value) return false;
+  return ["1", "true", "yes", "on"].includes(value.toLowerCase());
+}
+function shouldIgnoreFileConfig(options = {}) {
+  return options.ignoreFileConfig === true || truthyEnvFlag(process.env.OCTOFLOW_IGNORE_CONFIG);
+}
+let cachedConfig;
+function normalizeApiKeys(apiKeys) {
+  if (!apiKeys) return {};
+  const mapped = {};
+  for (const [key, value] of Object.entries(apiKeys)) {
+    if (typeof value !== "string" || value.length === 0) continue;
+    if (!isSafeKey(key)) continue;
+    if (key === "anthropic") mapped["anthropic-api"] = value;
+    else if (key === "google") mapped["gemini-api"] = value;
+    else if (key === "openai") mapped["openai-api"] = value;
+    else mapped[key] = value;
+  }
+  return mapped;
+}
+function loadConfig(options = {}) {
+  if (shouldIgnoreFileConfig(options)) return null;
+  if (cachedConfig !== void 0) return cachedConfig;
+  for (const path of candidatePaths()) {
+    if (!existsSync(path)) continue;
+    try {
+      if (path.endsWith(".json")) {
+        cachedConfig = JSON.parse(
+          readFileSync(path, "utf-8")
+        );
+        return cachedConfig;
+      }
+    } catch {
+    }
+  }
+  cachedConfig = null;
+  return cachedConfig;
+}
+function clearConfigCache() {
+  cachedConfig = void 0;
+}
+export {
+  clearConfigCache,
+  loadConfig,
+  normalizeApiKeys
+};
+//# sourceMappingURL=config-load.js.map

package/dist/config/config-load.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/config/config-load.ts"],
+  "sourcesContent": ["/**\n * Config file discovery, cache, and `loadConfig` / `clearConfigCache`.\n */\n\nimport { existsSync, readFileSync } from 'node:fs';\nimport { dirname, join, resolve } from 'node:path';\n\nimport type { BackendName } from '../domain/core-client.js';\nimport { getOctoFlowConfigPath } from '../utils/octoflow-home.js';\nimport { isSafeKey } from '../utils/safe-key.js';\nimport type { OctoFlowConfig } from './config-shapes.js';\n\nconst CONFIG_FILE_NAMES = ['octoflow.config.json', '.octoflow.json'] as const;\n\nfunction discoverConfigPaths(startDir = process.cwd()): string[] {\n  const paths: string[] = [];\n  let current = resolve(startDir);\n\n  while (true) {\n    for (const fileName of CONFIG_FILE_NAMES) {\n      paths.push(join(current, fileName));\n    }\n\n    const parent = dirname(current);\n    if (parent === current) break;\n    current = parent;\n  }\n\n  return paths;\n}\n\nfunction candidatePaths(): string[] {\n  const paths: string[] = [];\n  if (process.env.OCTOFLOW_CONFIG) {\n    paths.push(process.env.OCTOFLOW_CONFIG);\n  }\n  paths.push(...discoverConfigPaths());\n  paths.push(getOctoFlowConfigPath());\n  return paths;\n}\n\nexport interface LoadConfigOptions {\n  /** Skip all config file discovery, including OCTOFLOW_CONFIG. */\n  ignoreFileConfig?: boolean;\n}\n\nfunction truthyEnvFlag(value: string | undefined): boolean {\n  if (!value) return false;\n  return ['1', 'true', 'yes', 'on'].includes(value.toLowerCase());\n}\n\nfunction shouldIgnoreFileConfig(options: LoadConfigOptions = {}): boolean {\n  return (\n    options.ignoreFileConfig === true ||\n    truthyEnvFlag(process.env.OCTOFLOW_IGNORE_CONFIG)\n  );\n}\n\nlet cachedConfig: OctoFlowConfig | null | undefined;\n\nexport type ApiKeyConfig = Partial<\n  Record<BackendName | 'anthropic' | 'google' | 'openai', string>\n>;\n\nexport function normalizeApiKeys(\n  apiKeys?: ApiKeyConfig\n): Partial<Record<BackendName, string>> {\n  if (!apiKeys) return {};\n  const mapped: Partial<Record<BackendName, string>> = {};\n  for (const [key, value] of Object.entries(apiKeys)) {\n    if (typeof value !== 'string' || value.length === 0) continue;\n    if (!isSafeKey(key)) continue;\n    if (key === 'anthropic') mapped['anthropic-api'] = value;\n    else if (key === 'google') mapped['gemini-api'] = value;\n    else if (key === 'openai') mapped['openai-api'] = value;\n    else mapped[key as BackendName] = value;\n  }\n  return mapped;\n}\n\nexport function loadConfig(\n  options: LoadConfigOptions = {}\n): OctoFlowConfig | null {\n  if (shouldIgnoreFileConfig(options)) return null;\n  if (cachedConfig !== undefined) return cachedConfig;\n\n  for (const path of candidatePaths()) {\n    if (!existsSync(path)) continue;\n    try {\n      if (path.endsWith('.json')) {\n        cachedConfig = JSON.parse(\n          readFileSync(path, 'utf-8')\n        ) as OctoFlowConfig;\n        return cachedConfig;\n      }\n    } catch {\n      // Skip malformed config files and continue searching.\n    }\n  }\n\n  cachedConfig = null;\n  return cachedConfig;\n}\n\nexport function clearConfigCache(): void {\n  cachedConfig = undefined;\n}\n"],
+  "mappings": "AAIA,SAAS,YAAY,oBAAoB;AACzC,SAAS,SAAS,MAAM,eAAe;AAGvC,SAAS,6BAA6B;AACtC,SAAS,iBAAiB;AAG1B,MAAM,oBAAoB,CAAC,wBAAwB,gBAAgB;AAEnE,SAAS,oBAAoB,WAAW,QAAQ,IAAI,GAAa;AAC/D,QAAM,QAAkB,CAAC;AACzB,MAAI,UAAU,QAAQ,QAAQ;AAE9B,SAAO,MAAM;AACX,eAAW,YAAY,mBAAmB;AACxC,YAAM,KAAK,KAAK,SAAS,QAAQ,CAAC;AAAA,IACpC;AAEA,UAAM,SAAS,QAAQ,OAAO;AAC9B,QAAI,WAAW,QAAS;AACxB,cAAU;AAAA,EACZ;AAEA,SAAO;AACT;AAEA,SAAS,iBAA2B;AAClC,QAAM,QAAkB,CAAC;AACzB,MAAI,QAAQ,IAAI,iBAAiB;AAC/B,UAAM,KAAK,QAAQ,IAAI,eAAe;AAAA,EACxC;AACA,QAAM,KAAK,GAAG,oBAAoB,CAAC;AACnC,QAAM,KAAK,sBAAsB,CAAC;AAClC,SAAO;AACT;AAOA,SAAS,cAAc,OAAoC;AACzD,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,CAAC,KAAK,QAAQ,OAAO,IAAI,EAAE,SAAS,MAAM,YAAY,CAAC;AAChE;AAEA,SAAS,uBAAuB,UAA6B,CAAC,GAAY;AACxE,SACE,QAAQ,qBAAqB,QAC7B,cAAc,QAAQ,IAAI,sBAAsB;AAEpD;AAEA,IAAI;AAMG,SAAS,iBACd,SACsC;AACtC,MAAI,CAAC,QAAS,QAAO,CAAC;AACtB,QAAM,SAA+C,CAAC;AACtD,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,QAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG;AACrD,QAAI,CAAC,UAAU,GAAG,EAAG;AACrB,QAAI,QAAQ,YAAa,QAAO,eAAe,IAAI;AAAA,aAC1C,QAAQ,SAAU,QAAO,YAAY,IAAI;AAAA,aACzC,QAAQ,SAAU,QAAO,YAAY,IAAI;AAAA,QAC7C,QAAO,GAAkB,IAAI;AAAA,EACpC;AACA,SAAO;AACT;AAEO,SAAS,WACd,UAA6B,CAAC,GACP;AACvB,MAAI,uBAAuB,OAAO,EAAG,QAAO;AAC5C,MAAI,iBAAiB,OAAW,QAAO;AAEvC,aAAW,QAAQ,eAAe,GAAG;AACnC,QAAI,CAAC,WAAW,IAAI,EAAG;AACvB,QAAI;AACF,UAAI,KAAK,SAAS,OAAO,GAAG;AAC1B,uBAAe,KAAK;AAAA,UAClB,aAAa,MAAM,OAAO;AAAA,QAC5B;AACA,eAAO;AAAA,MACT;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,iBAAe;AACf,SAAO;AACT;AAEO,SAAS,mBAAyB;AACvC,iBAAe;AACjB;",
+  "names": []
+}

package/dist/config/config-shapes.d.ts

@@ -0,0 +1,164 @@
+/**
+ * Serializable and resolved config shapes (profiles, top-level file, server snapshot).
+ */
+import type { ComplexityRoutingConfig } from '../adapters/agents/routing.js';
+import type { TaskStoreConfig } from '../adapters/data/task-store/config-types.js';
+import type { BridgeFallbackOptions, SessionBackendMobilityOptions } from '../domain/bridge-api.js';
+import type { BackendOverrides, FrameworkWorkspaceConfig, OctoFlowConfigAgentType as ConfigSelectableAgentType, SerializedAgentSkillsConfig, SerializedLoopConfig, SerializedMcpOptions, SerializedMcpServerConfig, SerializedSkillConfig, SerializedTaskConfig, SerializedToolConfig } from '../domain/config-contracts.js';
+import type { ManagedWorktreeOptions } from '../domain/contracts/backends.js';
+import type { BackendName } from '../domain/core-client.js';
+import type { AgentCard, BridgeApprovalMode, BridgeExecutionMode } from '../domain/core-task.js';
+import type { PermissionConfig } from '../domain/permission.js';
+import type { BackendType, LlmProvider } from '../domain/protocol.js';
+import type { BridgeHooksConfig } from '../hooks/types.js';
+import type { BrainConfig } from '../runtime/bridge/brain-config.js';
+import type { OctoFlowServerConfig, ResolvedOctoFlowServerConfig } from './server-config.js';
+export type OctoFlowProfileName = 'local-trusted' | 'local-sandboxed' | 'remote-service' | 'remote-ssh';
+export type OctoFlowRuntimeTarget = 'local' | 'tmux' | 'container' | 'remote';
+export type OctoFlowSandboxMode = 'off' | 'process' | 'container' | 'kernel';
+export type OctoFlowNetworkMode = 'inherit' | 'none';
+export type OctoFlowCredentialStrategy = 'env-passthrough' | 'secret-ref';
+export type OctoFlowAgentCardVisibility = 'public' | 'authenticated';
+export interface OctoFlowDefaults {
+    agentType?: ConfigSelectableAgentType;
+    backendType?: BackendType;
+    cwd?: string;
+    llmProvider?: LlmProvider;
+    loop?: SerializedLoopConfig;
+    mcpConfigPath?: string;
+    model?: string;
+    retries?: number;
+    systemPrompt?: string;
+    tasks?: SerializedTaskConfig;
+    timeoutMs?: number;
+    worktree?: boolean | string | ManagedWorktreeOptions;
+}
+export interface OctoFlowSessionConfig {
+    historyPolicy?: 'context';
+    maxOpenContexts?: number;
+}
+export interface OctoFlowRuntimeConfig {
+    executionMode?: BridgeExecutionMode;
+    target?: OctoFlowRuntimeTarget;
+    workspace?: string;
+}
+export interface OctoFlowCredentialsConfig {
+    allowedEnvVars?: string[];
+    denyEnvVars?: string[];
+    strategy?: OctoFlowCredentialStrategy;
+}
+export interface OctoFlowFilesystemConfig {
+    denyPaths?: string[];
+    readableRoots?: string[];
+    writableRoots?: string[];
+}
+export interface OctoFlowSecurityConfig {
+    approvalMode?: BridgeApprovalMode;
+    credentials?: OctoFlowCredentialsConfig;
+    filesystem?: OctoFlowFilesystemConfig;
+    network?: OctoFlowNetworkMode;
+    /**
+     * Default `permission` preset for this profile. CLI flags
+     * (`--permission`, `-y`, `--always-ask`) and per-send
+     * `BridgeSendMessageParams.permission` override this value.
+     */
+    permission?: PermissionConfig;
+    sandbox?: OctoFlowSandboxMode;
+}
+export interface OctoFlowProfile {
+    backends?: Partial<Record<BackendName, BackendOverrides>>;
+    defaults?: OctoFlowDefaults;
+    mcpServers?: Record<string, SerializedMcpServerConfig>;
+    priority?: BackendName[];
+    runtime?: OctoFlowRuntimeConfig;
+    security?: OctoFlowSecurityConfig;
+    session?: OctoFlowSessionConfig;
+    tools?: SerializedToolConfig;
+}
+export type { OctoFlowServerAuthConfig, OctoFlowServerConfig, OctoFlowServerRateLimitConfig, OctoFlowServerTlsConfig, ResolvedOctoFlowServerConfig, } from './server-config.js';
+export { resolveServerConfig } from './server-config.js';
+/**
+ * Serializable routing config for `octoflow.config.json`.
+ * Omits `alwaysComplex` (RegExp is not JSON-serializable).
+ */
+export type SerializedRoutingConfig = Omit<ComplexityRoutingConfig, 'alwaysComplex'>;
+export interface OctoFlowConfig {
+    agentCard?: Partial<AgentCard>;
+    apiKeys?: Partial<Record<BackendName | 'anthropic' | 'google' | 'openai', string>>;
+    /**
+     * Top-level brain configuration. When `enabled`, `createBridge()` resolves
+     * and attaches a shipped `MemoryBrain` before plugin initialization. See
+     * `docs/brain.md` for the bridge integration surface.
+     */
+    brain?: BrainConfig;
+    agentSkills?: SerializedAgentSkillsConfig;
+    defaultProfile?: string;
+    frameworkWorkspace?: FrameworkWorkspaceConfig;
+    defaults?: OctoFlowDefaults;
+    hooks?: BridgeHooksConfig;
+    mcpOptions?: SerializedMcpOptions;
+    mcpServers?: Record<string, SerializedMcpServerConfig>;
+    priority?: BackendName[];
+    profiles?: Record<string, OctoFlowProfile>;
+    /**
+     * Enable automatic fallback to the next backend in `priority` when the
+     * current backend fails. Equivalent to `BridgeOptions.fallback`.
+     * Runtime `createBridge({ fallback })` wins over this file-level default.
+     */
+    fallback?: boolean | BridgeFallbackOptions;
+    /**
+     * Cross-turn LLM switching. When `enabled`, the bridge can switch backends
+     * mid-conversation on failure (`mode: 'on-failure'`) or on explicit
+     * per-send `backendSwitch` request (`mode: 'manual-only'`).
+     * Requires `dynamicSession: true`. Runtime value wins over this default.
+     */
+    sessionBackendMobility?: SessionBackendMobilityOptions;
+    /**
+     * Smart model routing config. When set, simple messages are routed to
+     * `cheapBackend` before the priority loop runs.
+     */
+    routing?: SerializedRoutingConfig;
+    server?: OctoFlowServerConfig;
+    skills?: SerializedSkillConfig[];
+    storage?: boolean;
+    taskStore?: TaskStoreConfig;
+    tools?: SerializedToolConfig;
+}
+export interface ResolvedOctoFlowProfile {
+    backends: Partial<Record<BackendName, BackendOverrides>>;
+    defaults: OctoFlowDefaults;
+    mcpServers: Record<string, SerializedMcpServerConfig>;
+    name: string;
+    priority: BackendName[];
+    runtime: Required<OctoFlowRuntimeConfig>;
+    security: {
+        approvalMode: BridgeApprovalMode;
+        credentials: {
+            allowedEnvVars: string[];
+            denyEnvVars: string[];
+            strategy: OctoFlowCredentialStrategy;
+        };
+        filesystem: {
+            denyPaths: string[];
+            readableRoots: string[];
+            writableRoots: string[];
+        };
+        network: OctoFlowNetworkMode;
+        sandbox: OctoFlowSandboxMode;
+    };
+    session: {
+        historyPolicy: 'context';
+        maxOpenContexts: number;
+    };
+    tools: SerializedToolConfig;
+}
+export interface ResolvedOctoFlowConfig {
+    agentCard: Partial<AgentCard>;
+    agentSkills?: SerializedAgentSkillsConfig;
+    apiKeys: Partial<Record<BackendName, string>>;
+    defaultProfile: string;
+    frameworkWorkspace?: FrameworkWorkspaceConfig;
+    profiles: Record<string, ResolvedOctoFlowProfile>;
+    server: ResolvedOctoFlowServerConfig;
+}
+//# sourceMappingURL=config-shapes.d.ts.map

package/dist/config/config-shapes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-shapes.d.ts","sourceRoot":"","sources":["../../src/config/config-shapes.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6CAA6C,CAAC;AACnF,OAAO,KAAK,EACV,qBAAqB,EACrB,6BAA6B,EAC9B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,IAAI,yBAAyB,EACpD,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AAC9E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,KAAK,EACV,SAAS,EACT,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AACrE,OAAO,KAAK,EACV,oBAAoB,EACpB,4BAA4B,EAC7B,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,mBAAmB,GAC3B,eAAe,GACf,iBAAiB,GACjB,gBAAgB,GAChB,YAAY,CAAC;AACjB,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;AAC9E,MAAM,MAAM,mBAAmB,GAAG,KAAK,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC;AAC7E,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,MAAM,CAAC;AACrD,MAAM,MAAM,0BAA0B,GAAG,iBAAiB,GAAG,YAAY,CAAC;AAC1E,MAAM,MAAM,2BAA2B,GAAG,QAAQ,GAAG,eAAe,CAAC;AAErE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,IAAI,CAAC,EAAE,oBAAoB,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,sBAAsB,CAAC;CACtD;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,SAAS,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,0BAA0B,CAAC;CACvC;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,CAAC,EAAE,kBAAkB,CAAC;IAClC,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACxC,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B;;;;OAIG;IACH,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,OAAO,CAAC,EAAE,mBAAmB,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC1D,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACvD,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IACzB,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B;AAED,YAAY,EACV,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAAG,IAAI,CACxC,uBAAuB,EACvB,eAAe,CAChB,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,OAAO,CACf,MAAM,CAAC,WAAW,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,EAAE,MAAM,CAAC,CAChE,CAAC;IACF;;;;OAIG;IACH,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAC1C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,UAAU,CAAC,EAAE,oBAAoB,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACvD,QAAQ,CAAC,EAAE,WAAW,EAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC3C;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,GAAG,qBAAqB,CAAC;IAC3C;;;;;OAKG;IACH,sBAAsB,CAAC,EAAE,6BAA6B,CAAC;IACvD;;;OAGG;IACH,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAClC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAC9B,MAAM,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,KAAK,CAAC,EAAE,oBAAoB,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACzD,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,OAAO,EAAE,QAAQ,CAAC,qBAAqB,CAAC,CAAC;IACzC,QAAQ,EAAE;QACR,YAAY,EAAE,kBAAkB,CAAC;QACjC,WAAW,EAAE;YACX,cAAc,EAAE,MAAM,EAAE,CAAC;YACzB,WAAW,EAAE,MAAM,EAAE,CAAC;YACtB,QAAQ,EAAE,0BAA0B,CAAC;SACtC,CAAC;QACF,UAAU,EAAE;YACV,SAAS,EAAE,MAAM,EAAE,CAAC;YACpB,aAAa,EAAE,MAAM,EAAE,CAAC;YACxB,aAAa,EAAE,MAAM,EAAE,CAAC;SACzB,CAAC;QACF,OAAO,EAAE,mBAAmB,CAAC;QAC7B,OAAO,EAAE,mBAAmB,CAAC;KAC9B,CAAC;IACF,OAAO,EAAE;QACP,aAAa,EAAE,SAAS,CAAC;QACzB,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,KAAK,EAAE,oBAAoB,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9B,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAC1C,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAClD,MAAM,EAAE,4BAA4B,CAAC;CACtC"}

package/dist/config/config-shapes.js

@@ -0,0 +1,5 @@
+import { resolveServerConfig } from "./server-config.js";
+export {
+  resolveServerConfig
+};
+//# sourceMappingURL=config-shapes.js.map

package/dist/config/config-shapes.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../src/config/config-shapes.ts"],
+  "sourcesContent": ["/**\n * Serializable and resolved config shapes (profiles, top-level file, server snapshot).\n */\n\nimport type { ComplexityRoutingConfig } from '../adapters/agents/routing.js';\nimport type { TaskStoreConfig } from '../adapters/data/task-store/config-types.js';\nimport type {\n  BridgeFallbackOptions,\n  SessionBackendMobilityOptions,\n} from '../domain/bridge-api.js';\nimport type {\n  BackendOverrides,\n  FrameworkWorkspaceConfig,\n  OctoFlowConfigAgentType as ConfigSelectableAgentType,\n  SerializedAgentSkillsConfig,\n  SerializedLoopConfig,\n  SerializedMcpOptions,\n  SerializedMcpServerConfig,\n  SerializedSkillConfig,\n  SerializedTaskConfig,\n  SerializedToolConfig,\n} from '../domain/config-contracts.js';\nimport type { ManagedWorktreeOptions } from '../domain/contracts/backends.js';\nimport type { BackendName } from '../domain/core-client.js';\nimport type {\n  AgentCard,\n  BridgeApprovalMode,\n  BridgeExecutionMode,\n} from '../domain/core-task.js';\nimport type { PermissionConfig } from '../domain/permission.js';\nimport type { BackendType, LlmProvider } from '../domain/protocol.js';\nimport type { BridgeHooksConfig } from '../hooks/types.js';\nimport type { BrainConfig } from '../runtime/bridge/brain-config.js';\nimport type {\n  OctoFlowServerConfig,\n  ResolvedOctoFlowServerConfig,\n} from './server-config.js';\n\nexport type OctoFlowProfileName =\n  | 'local-trusted'\n  | 'local-sandboxed'\n  | 'remote-service'\n  | 'remote-ssh';\nexport type OctoFlowRuntimeTarget = 'local' | 'tmux' | 'container' | 'remote';\nexport type OctoFlowSandboxMode = 'off' | 'process' | 'container' | 'kernel';\nexport type OctoFlowNetworkMode = 'inherit' | 'none';\nexport type OctoFlowCredentialStrategy = 'env-passthrough' | 'secret-ref';\nexport type OctoFlowAgentCardVisibility = 'public' | 'authenticated';\n\nexport interface OctoFlowDefaults {\n  agentType?: ConfigSelectableAgentType;\n  backendType?: BackendType;\n  cwd?: string;\n  llmProvider?: LlmProvider;\n  loop?: SerializedLoopConfig;\n  mcpConfigPath?: string;\n  model?: string;\n  retries?: number;\n  systemPrompt?: string;\n  tasks?: SerializedTaskConfig;\n  timeoutMs?: number;\n  worktree?: boolean | string | ManagedWorktreeOptions;\n}\n\nexport interface OctoFlowSessionConfig {\n  historyPolicy?: 'context';\n  maxOpenContexts?: number;\n}\n\nexport interface OctoFlowRuntimeConfig {\n  executionMode?: BridgeExecutionMode;\n  target?: OctoFlowRuntimeTarget;\n  workspace?: string;\n}\n\nexport interface OctoFlowCredentialsConfig {\n  allowedEnvVars?: string[];\n  denyEnvVars?: string[];\n  strategy?: OctoFlowCredentialStrategy;\n}\n\nexport interface OctoFlowFilesystemConfig {\n  denyPaths?: string[];\n  readableRoots?: string[];\n  writableRoots?: string[];\n}\n\nexport interface OctoFlowSecurityConfig {\n  approvalMode?: BridgeApprovalMode;\n  credentials?: OctoFlowCredentialsConfig;\n  filesystem?: OctoFlowFilesystemConfig;\n  network?: OctoFlowNetworkMode;\n  /**\n   * Default `permission` preset for this profile. CLI flags\n   * (`--permission`, `-y`, `--always-ask`) and per-send\n   * `BridgeSendMessageParams.permission` override this value.\n   */\n  permission?: PermissionConfig;\n  sandbox?: OctoFlowSandboxMode;\n}\n\nexport interface OctoFlowProfile {\n  backends?: Partial<Record<BackendName, BackendOverrides>>;\n  defaults?: OctoFlowDefaults;\n  mcpServers?: Record<string, SerializedMcpServerConfig>;\n  priority?: BackendName[];\n  runtime?: OctoFlowRuntimeConfig;\n  security?: OctoFlowSecurityConfig;\n  session?: OctoFlowSessionConfig;\n  tools?: SerializedToolConfig;\n}\n\nexport type {\n  OctoFlowServerAuthConfig,\n  OctoFlowServerConfig,\n  OctoFlowServerRateLimitConfig,\n  OctoFlowServerTlsConfig,\n  ResolvedOctoFlowServerConfig,\n} from './server-config.js';\nexport { resolveServerConfig } from './server-config.js';\n\n/**\n * Serializable routing config for `octoflow.config.json`.\n * Omits `alwaysComplex` (RegExp is not JSON-serializable).\n */\nexport type SerializedRoutingConfig = Omit<\n  ComplexityRoutingConfig,\n  'alwaysComplex'\n>;\n\nexport interface OctoFlowConfig {\n  agentCard?: Partial<AgentCard>;\n  apiKeys?: Partial<\n    Record<BackendName | 'anthropic' | 'google' | 'openai', string>\n  >;\n  /**\n   * Top-level brain configuration. When `enabled`, `createBridge()` resolves\n   * and attaches a shipped `MemoryBrain` before plugin initialization. See\n   * `docs/brain.md` for the bridge integration surface.\n   */\n  brain?: BrainConfig;\n  agentSkills?: SerializedAgentSkillsConfig;\n  defaultProfile?: string;\n  frameworkWorkspace?: FrameworkWorkspaceConfig;\n  defaults?: OctoFlowDefaults;\n  hooks?: BridgeHooksConfig;\n  mcpOptions?: SerializedMcpOptions;\n  mcpServers?: Record<string, SerializedMcpServerConfig>;\n  priority?: BackendName[];\n  profiles?: Record<string, OctoFlowProfile>;\n  /**\n   * Enable automatic fallback to the next backend in `priority` when the\n   * current backend fails. Equivalent to `BridgeOptions.fallback`.\n   * Runtime `createBridge({ fallback })` wins over this file-level default.\n   */\n  fallback?: boolean | BridgeFallbackOptions;\n  /**\n   * Cross-turn LLM switching. When `enabled`, the bridge can switch backends\n   * mid-conversation on failure (`mode: 'on-failure'`) or on explicit\n   * per-send `backendSwitch` request (`mode: 'manual-only'`).\n   * Requires `dynamicSession: true`. Runtime value wins over this default.\n   */\n  sessionBackendMobility?: SessionBackendMobilityOptions;\n  /**\n   * Smart model routing config. When set, simple messages are routed to\n   * `cheapBackend` before the priority loop runs.\n   */\n  routing?: SerializedRoutingConfig;\n  server?: OctoFlowServerConfig;\n  skills?: SerializedSkillConfig[];\n  storage?: boolean;\n  taskStore?: TaskStoreConfig;\n  tools?: SerializedToolConfig;\n}\n\nexport interface ResolvedOctoFlowProfile {\n  backends: Partial<Record<BackendName, BackendOverrides>>;\n  defaults: OctoFlowDefaults;\n  mcpServers: Record<string, SerializedMcpServerConfig>;\n  name: string;\n  priority: BackendName[];\n  runtime: Required<OctoFlowRuntimeConfig>;\n  security: {\n    approvalMode: BridgeApprovalMode;\n    credentials: {\n      allowedEnvVars: string[];\n      denyEnvVars: string[];\n      strategy: OctoFlowCredentialStrategy;\n    };\n    filesystem: {\n      denyPaths: string[];\n      readableRoots: string[];\n      writableRoots: string[];\n    };\n    network: OctoFlowNetworkMode;\n    sandbox: OctoFlowSandboxMode;\n  };\n  session: {\n    historyPolicy: 'context';\n    maxOpenContexts: number;\n  };\n  tools: SerializedToolConfig;\n}\n\nexport interface ResolvedOctoFlowConfig {\n  agentCard: Partial<AgentCard>;\n  agentSkills?: SerializedAgentSkillsConfig;\n  apiKeys: Partial<Record<BackendName, string>>;\n  defaultProfile: string;\n  frameworkWorkspace?: FrameworkWorkspaceConfig;\n  profiles: Record<string, ResolvedOctoFlowProfile>;\n  server: ResolvedOctoFlowServerConfig;\n}\n"],
+  "mappings": "AAuHA,SAAS,2BAA2B;",
+  "names": []
+}

package/dist/config/config.d.ts

@@ -0,0 +1,13 @@
+import type { ProxyOptions } from '../domain/core-client.js';
+import type { AgentCard } from '../domain/core-task.js';
+import type { ResolvedOctoFlowConfig, ResolvedOctoFlowProfile } from './config-shapes.js';
+export type { BackendOverrides, FrameworkWorkspaceConfig, SerializedAgentSkillsConfig, SerializedLoopConfig, SerializedMcpOptions, SerializedMcpServer, SerializedMcpServerConfig, SerializedSkillConfig, SerializedTaskConfig, SerializedToolConfig, SerializedToolDefinition, } from '../domain/config-contracts.js';
+export { type ApiKeyConfig, clearConfigCache, loadConfig, type LoadConfigOptions, normalizeApiKeys, } from './config-load.js';
+export type { OctoFlowAgentCardVisibility, OctoFlowConfig, OctoFlowCredentialsConfig, OctoFlowCredentialStrategy, OctoFlowDefaults, OctoFlowFilesystemConfig, OctoFlowNetworkMode, OctoFlowProfile, OctoFlowProfileName, OctoFlowRuntimeConfig, OctoFlowRuntimeTarget, OctoFlowSandboxMode, OctoFlowSecurityConfig, OctoFlowServerAuthConfig, OctoFlowServerConfig, OctoFlowServerRateLimitConfig, OctoFlowServerTlsConfig, OctoFlowSessionConfig, ResolvedOctoFlowConfig, ResolvedOctoFlowProfile, ResolvedOctoFlowServerConfig, SerializedRoutingConfig, } from './config-shapes.js';
+export { resolveServerConfig } from './config-shapes.js';
+export { CONFIG_TEMPLATE, DEFAULT_PRIORITY, mergeDefaults, mergeToolConfigs, } from './defaults.js';
+export declare function resolveConfig(config?: import("./config-shapes.js").OctoFlowConfig | null): ResolvedOctoFlowConfig;
+export declare function resolveProfile(profileName?: string, config?: ResolvedOctoFlowConfig): ResolvedOctoFlowProfile;
+export declare function mergeWithFileConfig(opts: ProxyOptions): ProxyOptions;
+export declare function resolveAgentCardConfig(config?: ResolvedOctoFlowConfig): Partial<AgentCard>;
+//# sourceMappingURL=config.d.ts.map

package/dist/config/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/config/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAe,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAC1E,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAIxD,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,oBAAoB,CAAC;AAO5B,YAAY,EACV,gBAAgB,EAChB,wBAAwB,EACxB,2BAA2B,EAC3B,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,wBAAwB,GACzB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,KAAK,YAAY,EACjB,gBAAgB,EAChB,UAAU,EACV,KAAK,iBAAiB,EACtB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,2BAA2B,EAC3B,cAAc,EACd,yBAAyB,EACzB,0BAA0B,EAC1B,gBAAgB,EAChB,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,uBAAuB,EACvB,qBAAqB,EACrB,sBAAsB,EACtB,uBAAuB,EACvB,4BAA4B,EAC5B,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,aAAa,EACb,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAiEvB,wBAAgB,aAAa,CAAC,MAAM,qDAAe,GAAG,sBAAsB,CA6F3E;AAED,wBAAgB,cAAc,CAC5B,WAAW,CAAC,EAAE,MAAM,EACpB,MAAM,yBAAkB,GACvB,uBAAuB,CAMzB;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,YAAY,GAAG,YAAY,CAiEpE;AAED,wBAAgB,sBAAsB,CACpC,MAAM,yBAAkB,GACvB,OAAO,CAAC,SAAS,CAAC,CAEpB"}

package/dist/config/config.js

@@ -0,0 +1,198 @@
+import { cloneValue } from "../utils/clone.js";
+import { isSafeKey } from "../utils/safe-key.js";
+import { loadConfig, normalizeApiKeys } from "./config-load.js";
+import {
+  DEFAULT_AGENT_CARD,
+  DEFAULT_PROFILES,
+  DEFAULT_SERVER_CONFIG,
+  mergeProfile
+} from "./defaults.js";
+import {
+  clearConfigCache,
+  loadConfig as loadConfig2,
+  normalizeApiKeys as normalizeApiKeys2
+} from "./config-load.js";
+import { resolveServerConfig } from "./config-shapes.js";
+import {
+  CONFIG_TEMPLATE,
+  DEFAULT_PRIORITY,
+  mergeDefaults,
+  mergeToolConfigs
+} from "./defaults.js";
+const API_KEY_ENV_ALIASES = {
+  "anthropic-api": ["ANTHROPIC_API_KEY", "ANTHROPIC_API_HOST_KEY"],
+  "gemini-api": ["GEMINI_API_KEY", "GOOGLE_API_KEY"],
+  "openai-api": ["OPENAI_API_KEY", "OPENAI_API_HOST_KEY"]
+};
+const HOST_ENV_ALIASES = {
+  "anthropic-api": ["ANTHROPIC_BASE_URL", "ANTHROPIC_HOST"],
+  "gemini-api": ["GEMINI_BASE_URL", "GEMINI_HOST"],
+  "openai-api": ["OPENAI_BASE_URL", "OPENAI_HOST"]
+};
+function firstEnvValue(keys) {
+  for (const key of keys) {
+    const value = process.env[key];
+    if (typeof value === "string" && value.length > 0) return value;
+  }
+  return void 0;
+}
+function resolveEnvApiKeys() {
+  const apiKeys = {};
+  for (const [backend, keys] of Object.entries(API_KEY_ENV_ALIASES)) {
+    const value = firstEnvValue(keys);
+    if (value) apiKeys[backend] = value;
+  }
+  return apiKeys;
+}
+function resolveEnvBackendOverrides() {
+  const backends = {};
+  for (const [backend, keys] of Object.entries(HOST_ENV_ALIASES)) {
+    const host = firstEnvValue(keys);
+    if (host) backends[backend] = { host };
+  }
+  return backends;
+}
+function mergeEnvBackendOverrides(profile, envBackends) {
+  if (Object.keys(envBackends).length === 0) return profile;
+  const backends = { ...profile.backends };
+  for (const [backend, envOverride] of Object.entries(envBackends)) {
+    backends[backend] = {
+      ...envOverride,
+      ...backends[backend] ?? {}
+    };
+  }
+  return { ...profile, backends };
+}
+function resolveConfig(config = loadConfig()) {
+  const fileConfig = config ?? null;
+  const envApiKeys = resolveEnvApiKeys();
+  const envBackends = resolveEnvBackendOverrides();
+  const defaultProfileName = fileConfig?.defaultProfile ?? "local-trusted";
+  const profileNames = /* @__PURE__ */ new Set([
+    ...Object.keys(DEFAULT_PROFILES),
+    ...Object.keys(fileConfig?.profiles ?? {}),
+    defaultProfileName
+  ]);
+  const profiles = {};
+  for (const profileName of profileNames) {
+    if (!isSafeKey(profileName)) continue;
+    const profile = mergeProfile(
+      profileName,
+      fileConfig,
+      fileConfig?.profiles?.[profileName]
+    );
+    profiles[profileName] = mergeEnvBackendOverrides(profile, envBackends);
+  }
+  return {
+    defaultProfile: defaultProfileName,
+    agentSkills: fileConfig?.agentSkills ? {
+      ...fileConfig.agentSkills,
+      additionalPaths: fileConfig.agentSkills.additionalPaths ? [...fileConfig.agentSkills.additionalPaths] : void 0,
+      disabled: fileConfig.agentSkills.disabled ? [...fileConfig.agentSkills.disabled] : void 0
+    } : void 0,
+    frameworkWorkspace: fileConfig?.frameworkWorkspace ? { ...fileConfig.frameworkWorkspace } : void 0,
+    apiKeys: { ...envApiKeys, ...normalizeApiKeys(fileConfig?.apiKeys) },
+    agentCard: { ...DEFAULT_AGENT_CARD, ...fileConfig?.agentCard ?? {} },
+    server: {
+      a2aVersion: fileConfig?.server?.a2aVersion ?? DEFAULT_SERVER_CONFIG.a2aVersion,
+      agentCardVisibility: fileConfig?.server?.agentCardVisibility ?? DEFAULT_SERVER_CONFIG.agentCardVisibility,
+      auth: {
+        mode: fileConfig?.server?.auth?.mode ?? DEFAULT_SERVER_CONFIG.auth.mode,
+        bearerTokens: fileConfig?.server?.auth?.bearerTokens ?? DEFAULT_SERVER_CONFIG.auth.bearerTokens,
+        headerName: fileConfig?.server?.auth?.headerName ?? DEFAULT_SERVER_CONFIG.auth.headerName
+      },
+      baseUrl: fileConfig?.server?.baseUrl ?? DEFAULT_SERVER_CONFIG.baseUrl,
+      cacheControl: fileConfig?.server?.cacheControl ?? DEFAULT_SERVER_CONFIG.cacheControl,
+      host: fileConfig?.server?.host ?? DEFAULT_SERVER_CONFIG.host,
+      maxBodyBytes: fileConfig?.server?.maxBodyBytes ?? DEFAULT_SERVER_CONFIG.maxBodyBytes,
+      port: fileConfig?.server?.port ?? DEFAULT_SERVER_CONFIG.port,
+      rateLimit: {
+        enabled: fileConfig?.server?.rateLimit?.enabled ?? DEFAULT_SERVER_CONFIG.rateLimit.enabled,
+        windowMs: fileConfig?.server?.rateLimit?.windowMs ?? DEFAULT_SERVER_CONFIG.rateLimit.windowMs,
+        maxRequests: fileConfig?.server?.rateLimit?.maxRequests ?? DEFAULT_SERVER_CONFIG.rateLimit.maxRequests,
+        maxConcurrent: fileConfig?.server?.rateLimit?.maxConcurrent ?? DEFAULT_SERVER_CONFIG.rateLimit.maxConcurrent,
+        ipv6SubnetBits: fileConfig?.server?.rateLimit?.ipv6SubnetBits ?? DEFAULT_SERVER_CONFIG.rateLimit.ipv6SubnetBits
+      },
+      tls: fileConfig?.server?.tls ? {
+        caPath: fileConfig.server.tls.caPath,
+        certPath: fileConfig.server.tls.certPath,
+        keyPath: fileConfig.server.tls.keyPath,
+        passphrase: fileConfig.server.tls.passphrase,
+        requestCert: fileConfig.server.tls.requestCert ?? true,
+        rejectUnauthorized: fileConfig.server.tls.rejectUnauthorized ?? true
+      } : DEFAULT_SERVER_CONFIG.tls
+    },
+    profiles
+  };
+}
+function resolveProfile(profileName, config = resolveConfig()) {
+  const key = profileName ?? config.defaultProfile;
+  const profile = config.profiles[key] ?? config.profiles[config.defaultProfile];
+  if (!profile) throw new Error(`Profile "${key}" not found in config`);
+  return cloneValue(profile);
+}
+function mergeWithFileConfig(opts) {
+  const configInput = opts.config ?? loadConfig({
+    ignoreFileConfig: opts.ignoreFileConfig
+  });
+  const config = resolveConfig(configInput);
+  const profile = resolveProfile(opts.profile, config);
+  const hasResolvedApiKeys = Object.keys(config.apiKeys).length > 0;
+  const hasResolvedBackends = Object.keys(profile.backends).length > 0;
+  if (!configInput) {
+    if (!opts.apiKeys && !hasResolvedApiKeys && !hasResolvedBackends) {
+      return opts;
+    }
+    return {
+      ...opts,
+      apiKeys: { ...config.apiKeys, ...normalizeApiKeys(opts.apiKeys) },
+      backends: opts.backends ?? (hasResolvedBackends ? profile.backends : void 0)
+    };
+  }
+  const mcpServers = Object.keys(profile.mcpServers).length > 0 ? profile.mcpServers : void 0;
+  const tools = profile.tools.definitions?.length || profile.tools.servers?.length || profile.tools.allowedTools?.length ? profile.tools : void 0;
+  return {
+    config: opts.config,
+    ignoreFileConfig: opts.ignoreFileConfig,
+    agentType: opts.agentType ?? profile.defaults.agentType,
+    priority: opts.priority ?? profile.priority,
+    backendType: opts.backendType ?? profile.defaults.backendType,
+    llmProvider: opts.llmProvider ?? profile.defaults.llmProvider,
+    apiKeys: { ...config.apiKeys, ...normalizeApiKeys(opts.apiKeys) },
+    profile: opts.profile ?? config.defaultProfile,
+    model: opts.model ?? profile.defaults.model,
+    systemPrompt: opts.systemPrompt ?? profile.defaults.systemPrompt,
+    cwd: opts.cwd ?? profile.defaults.cwd ?? profile.runtime.workspace,
+    timeoutMs: opts.timeoutMs ?? profile.defaults.timeoutMs,
+    retries: opts.retries ?? profile.defaults.retries,
+    worktree: opts.worktree ?? profile.defaults.worktree,
+    env: opts.env,
+    routing: opts.routing ?? configInput.routing,
+    loop: opts.loop ?? profile.defaults.loop,
+    tasks: opts.tasks ?? profile.defaults.tasks,
+    mcpConfigPath: opts.mcpConfigPath ?? profile.defaults.mcpConfigPath,
+    mcpServers: opts.mcpServers ?? mcpServers,
+    mcpOptions: opts.mcpOptions ?? configInput.mcpOptions,
+    tools: opts.tools ?? tools,
+    skills: opts.skills ?? configInput.skills,
+    backends: opts.backends ?? (Object.keys(profile.backends).length > 0 ? profile.backends : void 0)
+  };
+}
+function resolveAgentCardConfig(config = resolveConfig()) {
+  return cloneValue(config.agentCard);
+}
+export {
+  CONFIG_TEMPLATE,
+  DEFAULT_PRIORITY,
+  clearConfigCache,
+  loadConfig2 as loadConfig,
+  mergeDefaults,
+  mergeToolConfigs,
+  mergeWithFileConfig,
+  normalizeApiKeys2 as normalizeApiKeys,
+  resolveAgentCardConfig,
+  resolveConfig,
+  resolveProfile,
+  resolveServerConfig
+};
+//# sourceMappingURL=config.js.map