sensorium-mcp 3.0.102 → 3.1.0-refactor.0

package/dist/config/keep-alive-settings.js

@@ -0,0 +1,100 @@
+/**
+ * Keep-alive settings — global keeper toggle/target/retry policy, keeper
+ * client type, and per-thread keep-alive overrides.
+ */
+import { readSettings, updateSettings } from "./settings-store.js";
+// ─── Keep-alive settings ─────────────────────────────────────────────────────
+const DEFAULT_KEEP_ALIVE_MAX_RETRIES = 5;
+const DEFAULT_KEEP_ALIVE_COOLDOWN_MS = 300_000;
+export function getKeepAliveEnabled() {
+    const v = readSettings().keepAliveEnabled;
+    if (typeof v === "boolean")
+        return v;
+    return false; // default: disabled
+}
+export function setKeepAliveEnabled(enabled) {
+    updateSettings((s) => {
+        s.keepAliveEnabled = enabled;
+    });
+}
+export function getKeepAliveThreadId() {
+    const v = readSettings().keepAliveThreadId;
+    if (typeof v === "number" && Number.isFinite(v) && v > 0)
+        return v;
+    return 0;
+}
+export function setKeepAliveThreadId(threadId) {
+    updateSettings((s) => {
+        s.keepAliveThreadId = threadId;
+    });
+}
+export function getKeepAliveMaxRetries() {
+    const v = readSettings().keepAliveMaxRetries;
+    if (typeof v === "number" && Number.isFinite(v) && v > 0)
+        return v;
+    return DEFAULT_KEEP_ALIVE_MAX_RETRIES;
+}
+export function setKeepAliveMaxRetries(retries) {
+    updateSettings((s) => {
+        s.keepAliveMaxRetries = retries;
+    });
+}
+export function getKeepAliveCooldownMs() {
+    const v = readSettings().keepAliveCooldownMs;
+    if (typeof v === "number" && Number.isFinite(v) && v > 0)
+        return v;
+    return DEFAULT_KEEP_ALIVE_COOLDOWN_MS;
+}
+export function setKeepAliveCooldownMs(ms) {
+    updateSettings((s) => {
+        s.keepAliveCooldownMs = ms;
+    });
+}
+export function isValidKeeperClient(v) {
+    return v === "claude" || v === "copilot";
+}
+export function getKeepAliveClient() {
+    const v = readSettings().keepAliveClient;
+    return isValidKeeperClient(v) ? v : "claude";
+}
+export function setKeepAliveClient(client) {
+    updateSettings((s) => {
+        s.keepAliveClient = client;
+    });
+}
+/** Sets keep-alive settings for a specific thread. */
+export function setThreadKeepAlive(threadId, settings) {
+    updateSettings((s) => {
+        const map = (s.threadKeepAlive ?? {});
+        map[String(threadId)] = settings;
+        s.threadKeepAlive = map;
+    });
+}
+/** Removes per-thread keep-alive settings. */
+export function removeThreadKeepAlive(threadId) {
+    updateSettings((s) => {
+        const map = (s.threadKeepAlive ?? {});
+        delete map[String(threadId)];
+        s.threadKeepAlive = map;
+    });
+}
+/** Returns all per-thread keep-alive overrides. */
+export function getAllThreadKeepAlive() {
+    const map = readSettings().threadKeepAlive;
+    if (!map || typeof map !== "object")
+        return {};
+    const result = {};
+    for (const [k, v] of Object.entries(map)) {
+        if (v && typeof v === "object") {
+            const e = v;
+            result[k] = {
+                enabled: typeof e.enabled === "boolean" ? e.enabled : false,
+                client: isValidKeeperClient(e.client) ? e.client : undefined,
+                cooldownMs: typeof e.cooldownMs === "number" && e.cooldownMs >= 1000 ? e.cooldownMs : undefined,
+                maxRetries: typeof e.maxRetries === "number" && e.maxRetries > 0 ? e.maxRetries : undefined,
+            };
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=keep-alive-settings.js.map

package/dist/config/keep-alive-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keep-alive-settings.js","sourceRoot":"","sources":["../../src/config/keep-alive-settings.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEnE,gFAAgF;AAEhF,MAAM,8BAA8B,GAAG,CAAC,CAAC;AACzC,MAAM,8BAA8B,GAAG,OAAO,CAAC;AAE/C,MAAM,UAAU,mBAAmB;IACjC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC,gBAAgB,CAAC;IAC1C,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,CAAC,oBAAoB;AACpC,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,gBAAgB,GAAG,OAAO,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC,iBAAiB,CAAC;IAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,iBAAiB,GAAG,QAAQ,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC,mBAAmB,CAAC;IAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACnE,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,mBAAmB,GAAG,OAAO,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC,mBAAmB,CAAC;IAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,CAAC;IACnE,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAC/C,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,mBAAmB,GAAG,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAMD,MAAM,UAAU,mBAAmB,CAAC,CAAU;IAC5C,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC;IACzC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,eAAe,GAAG,MAAM,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAWD,sDAAsD;AACtD,MAAM,UAAU,kBAAkB,CAAC,QAAgB,EAAE,QAAiC;IACpF,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAA4B,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,QAAQ,CAAC;QACjC,CAAC,CAAC,eAAe,GAAG,GAAG,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,8CAA8C;AAC9C,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,CAA4B,CAAC;QACjE,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7B,CAAC,CAAC,eAAe,GAAG,GAAG,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,qBAAqB;IACnC,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC,eAAsD,CAAC;IAClF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,MAAM,GAA4C,EAAE,CAAC;IAC3D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAA4B,CAAC;YACvC,MAAM,CAAC,CAAC,CAAC,GAAG;gBACV,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK;gBAC3D,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBAC5D,UAAU,EACR,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBACrF,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;aAC5F,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/config/mcp-settings.d.ts

@@ -0,0 +1,59 @@
+/**
+ * MCP server settings — the global user-configured server map plus the
+ * security-hardened per-thread server entries (http-only, reserved-name and
+ * header-name invariants) and dashboard masking helpers.
+ */
+export type McpServerConfig = {
+    type: "stdio";
+    command: string;
+    args?: string[];
+    env?: Record<string, string>;
+} | {
+    type: "http";
+    url: string;
+    headers?: Record<string, string>;
+    env?: Record<string, string>;
+};
+/** Returns all user-configured MCP servers (excludes auto-injected sensorium). */
+export declare function getMcpServers(): Record<string, McpServerConfig>;
+/** Overwrites the entire MCP servers map. */
+export declare function setMcpServers(servers: Record<string, McpServerConfig>): void;
+/** Add or update a single MCP server by name. */
+export declare function addMcpServer(name: string, config: McpServerConfig): void;
+/** Remove an MCP server by name. Returns true if it existed. */
+export declare function removeMcpServer(name: string): boolean;
+/** MCP server names a per-thread entry may never use. */
+export declare const RESERVED_MCP_NAMES: readonly string[];
+/** A per-thread MCP server entry — HTTP transport only (no stdio, by design). */
+export type ThreadMcpServer = {
+    type: "http";
+    url: string;
+    headers?: Record<string, string>;
+};
+/** Parse a per-thread server map, dropping reserved names and non-http/invalid entries. */
+export declare function parseThreadMcpServers(raw: unknown): Record<string, ThreadMcpServer>;
+/** Returns a thread's custom MCP servers (http-only, reserved names excluded). */
+export declare function getThreadMcpServers(threadId: number): Record<string, ThreadMcpServer>;
+/**
+ * Validate a caller-supplied server map against the per-thread invariants
+ * (http-only, non-reserved name, safe header names). Throws on any violation so
+ * the dashboard can surface a 400. Shared by per-thread MCP writes and agent
+ * templates (which carry the same kind of map).
+ */
+export declare function sanitizeThreadMcpServers(servers: Record<string, ThreadMcpServer> | null | undefined): Record<string, ThreadMcpServer>;
+/** Header value the dashboard shows in place of a stored secret; must never be persisted back. */
+export declare const MASK_SENTINEL = "\u2022\u2022\u2022\u2022";
+type MaskedThreadMcpServer = {
+    type: "http";
+    url: string;
+    headers?: Record<string, string>;
+};
+/** Mask header values so the dashboard shows which headers exist without leaking the secret. */
+export declare function maskThreadMcpServers(servers: Record<string, ThreadMcpServer>): Record<string, MaskedThreadMcpServer>;
+export declare function setThreadMcpServers(threadId: number, servers: Record<string, ThreadMcpServer> | null): void;
+/** Remove a thread's custom MCP servers entirely (called on hard-delete). */
+export declare function deleteThreadMcpServers(threadId: number): void;
+/** All per-thread MCP servers (for dashboard enrichment), reserved/invalid excluded. */
+export declare function getAllThreadMcpServers(): Record<string, Record<string, ThreadMcpServer>>;
+export {};
+//# sourceMappingURL=mcp-settings.d.ts.map

package/dist/config/mcp-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-settings.d.ts","sourceRoot":"","sources":["../../src/config/mcp-settings.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH,MAAM,MAAM,eAAe,GACvB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AAQlG,kFAAkF;AAClF,wBAAgB,aAAa,IAAI,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAE/D;AAED,6CAA6C;AAC7C,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,IAAI,CAI5E;AAED,iDAAiD;AACjD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,IAAI,CAUxE;AAED,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAWrD;AAmBD,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA6B,CAAC;AAE9E,iFAAiF;AACjF,MAAM,MAAM,eAAe,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AA2B9F,2FAA2F;AAC3F,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CASnF;AAED,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAGrF;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,IAAI,GAAG,SAAS,GAC1D,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CA4BjC;AAED,kGAAkG;AAClG,eAAO,MAAM,aAAa,6BAAS,CAAC;AAEpC,KAAK,qBAAqB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC;AAE7F,gGAAgG;AAChG,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GACvC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAWvC;AAED,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAAG,IAAI,GAC9C,IAAI,CAQN;AAED,6EAA6E;AAC7E,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQ7D;AAED,wFAAwF;AACxF,wBAAgB,sBAAsB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CASxF"}

package/dist/config/mcp-settings.js

@@ -0,0 +1,196 @@
+/**
+ * MCP server settings — the global user-configured server map plus the
+ * security-hardened per-thread server entries (http-only, reserved-name and
+ * header-name invariants) and dashboard masking helpers.
+ */
+import { readSettings, updateSettings } from "./settings-store.js";
+function parseMcpServers(raw) {
+    return raw && typeof raw === "object" && !Array.isArray(raw)
+        ? raw
+        : {};
+}
+/** Returns all user-configured MCP servers (excludes auto-injected sensorium). */
+export function getMcpServers() {
+    return parseMcpServers(readSettings().mcpServers);
+}
+/** Overwrites the entire MCP servers map. */
+export function setMcpServers(servers) {
+    updateSettings((s) => {
+        s.mcpServers = servers;
+    });
+}
+/** Add or update a single MCP server by name. */
+export function addMcpServer(name, config) {
+    if (!name || name === "sensorium-mcp")
+        throw new Error(`Invalid MCP server name: "${name}"`);
+    if (config.type === "stdio" && !config.command)
+        throw new Error("Stdio MCP server requires a command");
+    if (config.type === "http" && !config.url)
+        throw new Error("HTTP MCP server requires a url");
+    updateSettings((s) => {
+        const existing = parseMcpServers(s.mcpServers);
+        existing[name] = config;
+        s.mcpServers = existing;
+    });
+}
+/** Remove an MCP server by name. Returns true if it existed. */
+export function removeMcpServer(name) {
+    let existed = false;
+    updateSettings((s) => {
+        const servers = parseMcpServers(s.mcpServers);
+        if (name in servers) {
+            delete servers[name];
+            existed = true;
+        }
+        s.mcpServers = servers;
+    });
+    return existed;
+}
+// ─── Per-thread custom MCP servers (universal, agent-agnostic) ──────────────
+//
+// The operator can attach arbitrary MCP servers to a single thread via the
+// dashboard. Stored in settings.json keyed by threadId (same pattern as
+// threadConversationModes / threadKeepAlive — no DB schema change), then merged
+// on top of the global mcpServers map at spawn. Sensorium knows nothing about
+// what any server does (RAG, search, whatever) — it's just an { type: "http",
+// url, headers } entry, e.g. an Authorization: Bearer <token> that selects a
+// corpus on some external host.
+//
+// HARD INVARIANTS (security):
+//   • HTTP-ONLY. A per-thread `stdio` entry would spawn an operator-supplied
+//     binary at agent-spawn time = arbitrary code execution, so stdio is
+//     rejected on write and never parsed back out.
+//   • RESERVED names can't be overridden — `sensorium-mcp` is the agent's own
+//     control channel (clobbering it severs the orchestrator link).
+/** MCP server names a per-thread entry may never use. */
+export const RESERVED_MCP_NAMES = ["sensorium-mcp", "rag"];
+/**
+ * Header names must be plain HTTP tokens. This is a hard security boundary, not
+ * cosmetics: Codex renders headers as dotted TOML `-c mcp_servers.X.http_headers.<key>`
+ * overrides, so a key containing `.`, `"`, `=`, `[` or whitespace could break out
+ * of the header path and inject arbitrary config (e.g. re-point sensorium-mcp or
+ * add an stdio server), defeating the reserved-name and http-only invariants.
+ */
+const SAFE_HEADER_NAME = /^[A-Za-z0-9-]+$/;
+/** Parse one raw entry into a validated http-only ThreadMcpServer, or null if invalid. */
+function parseThreadMcpServer(raw) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return null;
+    const o = raw;
+    if (o.type !== "http" || typeof o.url !== "string" || o.url.length === 0)
+        return null;
+    const entry = { type: "http", url: o.url };
+    if (o.headers && typeof o.headers === "object" && !Array.isArray(o.headers)) {
+        const headers = {};
+        for (const [k, v] of Object.entries(o.headers)) {
+            if (typeof v === "string" && SAFE_HEADER_NAME.test(k))
+                headers[k] = v;
+        }
+        if (Object.keys(headers).length > 0)
+            entry.headers = headers;
+    }
+    return entry;
+}
+/** Parse a per-thread server map, dropping reserved names and non-http/invalid entries. */
+export function parseThreadMcpServers(raw) {
+    if (!raw || typeof raw !== "object" || Array.isArray(raw))
+        return {};
+    const result = {};
+    for (const [name, val] of Object.entries(raw)) {
+        if (!name || RESERVED_MCP_NAMES.includes(name))
+            continue;
+        const parsed = parseThreadMcpServer(val);
+        if (parsed)
+            result[name] = parsed;
+    }
+    return result;
+}
+/** Returns a thread's custom MCP servers (http-only, reserved names excluded). */
+export function getThreadMcpServers(threadId) {
+    const map = readSettings().threadMcpServers;
+    return parseThreadMcpServers(map?.[String(threadId)]);
+}
+/**
+ * Validate a caller-supplied server map against the per-thread invariants
+ * (http-only, non-reserved name, safe header names). Throws on any violation so
+ * the dashboard can surface a 400. Shared by per-thread MCP writes and agent
+ * templates (which carry the same kind of map).
+ */
+export function sanitizeThreadMcpServers(servers) {
+    const clean = {};
+    if (servers) {
+        for (const [name, cfg] of Object.entries(servers)) {
+            if (!name)
+                throw new Error("MCP server name is required");
+            if (RESERVED_MCP_NAMES.includes(name))
+                throw new Error(`MCP server name "${name}" is reserved`);
+            if (!cfg || cfg.type !== "http")
+                throw new Error(`MCP server "${name}" must be http (stdio is not allowed per-thread)`);
+            if (!cfg.url)
+                throw new Error(`MCP server "${name}" requires a url`);
+            const entry = { type: "http", url: cfg.url };
+            if (cfg.headers && Object.keys(cfg.headers).length > 0) {
+                for (const [k, v] of Object.entries(cfg.headers)) {
+                    if (!SAFE_HEADER_NAME.test(k))
+                        throw new Error(`MCP server "${name}" header name "${k}" is invalid (letters, digits, hyphen only)`);
+                    if (typeof v === "string" && v.includes(MASK_SENTINEL))
+                        throw new Error(`MCP server "${name}" header "${k}" is still masked — re-enter the value`);
+                }
+                entry.headers = cfg.headers;
+            }
+            clean[name] = entry;
+        }
+    }
+    return clean;
+}
+/** Header value the dashboard shows in place of a stored secret; must never be persisted back. */
+export const MASK_SENTINEL = "••••";
+/** Mask header values so the dashboard shows which headers exist without leaking the secret. */
+export function maskThreadMcpServers(servers) {
+    const out = {};
+    for (const [name, cfg] of Object.entries(servers)) {
+        const masked = { type: "http", url: cfg.url };
+        if (cfg.headers && Object.keys(cfg.headers).length > 0) {
+            masked.headers = {};
+            for (const k of Object.keys(cfg.headers))
+                masked.headers[k] = MASK_SENTINEL;
+        }
+        out[name] = masked;
+    }
+    return out;
+}
+export function setThreadMcpServers(threadId, servers) {
+    const clean = sanitizeThreadMcpServers(servers);
+    updateSettings((s) => {
+        const map = (s.threadMcpServers ?? {});
+        if (Object.keys(clean).length > 0)
+            map[String(threadId)] = clean;
+        else
+            delete map[String(threadId)];
+        s.threadMcpServers = map;
+    });
+}
+/** Remove a thread's custom MCP servers entirely (called on hard-delete). */
+export function deleteThreadMcpServers(threadId) {
+    updateSettings((s) => {
+        const map = (s.threadMcpServers ?? {});
+        if (String(threadId) in map) {
+            delete map[String(threadId)];
+            s.threadMcpServers = map;
+        }
+    });
+}
+/** All per-thread MCP servers (for dashboard enrichment), reserved/invalid excluded. */
+export function getAllThreadMcpServers() {
+    const map = readSettings().threadMcpServers;
+    if (!map || typeof map !== "object")
+        return {};
+    const result = {};
+    for (const [tid, val] of Object.entries(map)) {
+        const parsed = parseThreadMcpServers(val);
+        if (Object.keys(parsed).length > 0)
+            result[tid] = parsed;
+    }
+    return result;
+}
+//# sourceMappingURL=mcp-settings.js.map

package/dist/config/mcp-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-settings.js","sourceRoot":"","sources":["../../src/config/mcp-settings.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAQnE,SAAS,eAAe,CAAC,GAAY;IACnC,OAAO,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAC1D,CAAC,CAAE,GAAuC;QAC1C,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa;IAC3B,OAAO,eAAe,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,aAAa,CAAC,OAAwC;IACpE,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,UAAU,GAAG,OAAO,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAuB;IAChE,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,GAAG,CAAC,CAAC;IAC7F,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO;QAC5C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC7F,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,MAAM,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QACxB,CAAC,CAAC,UAAU,GAAG,QAAQ,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;YACpB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;YACrB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,CAAC,CAAC,UAAU,GAAG,OAAO,CAAC;IACzB,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+EAA+E;AAC/E,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,gCAAgC;AAChC,EAAE;AACF,8BAA8B;AAC9B,6EAA6E;AAC7E,yEAAyE;AACzE,mDAAmD;AACnD,8EAA8E;AAC9E,oEAAoE;AAEpE,yDAAyD;AACzD,MAAM,CAAC,MAAM,kBAAkB,GAAsB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AAK9E;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,iBAAiB,CAAC;AAE3C,0FAA0F;AAC1F,SAAS,oBAAoB,CAAC,GAAY;IACxC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtF,MAAM,KAAK,GAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5D,IAAI,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5E,MAAM,OAAO,GAA2B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAkC,CAAC,EAAE,CAAC;YAC1E,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACrE,MAAM,MAAM,GAAoC,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;QACzE,IAAI,CAAC,IAAI,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,SAAS;QACzD,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC,gBAAuD,CAAC;IACnF,OAAO,qBAAqB,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAA2D;IAE3D,MAAM,KAAK,GAAoC,EAAE,CAAC;IAClD,IAAI,OAAO,EAAE,CAAC;QACZ,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;YAC1D,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACnC,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,eAAe,CAAC,CAAC;YAC3D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;gBAC7B,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,kDAAkD,CAAC,CAAC;YACzF,IAAI,CAAC,GAAG,CAAC,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,kBAAkB,CAAC,CAAC;YACrE,MAAM,KAAK,GAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;YAC9D,IAAI,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACjD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC3B,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,kBAAkB,CAAC,6CAA6C,CACpF,CAAC;oBACJ,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC;wBACpD,MAAM,IAAI,KAAK,CACb,eAAe,IAAI,aAAa,CAAC,wCAAwC,CAC1E,CAAC;gBACN,CAAC;gBACD,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;YAC9B,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAIpC,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAClC,OAAwC;IAExC,MAAM,GAAG,GAA0C,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,MAAM,MAAM,GAA0B,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;QACrE,IAAI,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,OAAO,GAAG,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC;QAC9E,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,QAAgB,EAChB,OAA+C;IAE/C,MAAM,KAAK,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAChD,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAA4B,CAAC;QAClE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,KAAK,CAAC;;YAC5D,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,gBAAgB,GAAG,GAAG,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,CAA4B,CAAC;QAClE,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;YAC5B,OAAO,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7B,CAAC,CAAC,gBAAgB,GAAG,GAAG,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,sBAAsB;IACpC,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC,gBAAuD,CAAC;IACnF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAoD,EAAE,CAAC;IACnE,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/config/misc-settings.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Miscellaneous settings — imported external skills, per-thread conversation
+ * mode, bootstrap message count, wait timeout, predefined prompts, guardrails
+ * toggle, and the child-thread memory source env var.
+ */
+export declare const SKILL_TYPES: readonly ["sensorium", "claude", "copilot"];
+export type SkillType = (typeof SKILL_TYPES)[number];
+export interface ImportedSkill {
+    path: string;
+    type: SkillType;
+}
+export declare function isValidSkillType(v: unknown): v is SkillType;
+/** All registered external skills. Malformed entries are dropped. */
+export declare function getImportedSkills(): ImportedSkill[];
+/** Register an external skill by path+type. Idempotent on path (updates type). */
+export declare function addImportedSkill(skill: ImportedSkill): void;
+/** Unregister an external skill by path. */
+export declare function removeImportedSkill(path: string): void;
+export type ConversationMode = "concise" | "voice";
+/** Returns the conversation mode for a thread, defaulting to "concise". */
+export declare function getThreadConversationMode(threadId: number): ConversationMode;
+/** Persists a per-thread conversation mode. */
+export declare function setThreadConversationMode(threadId: number, mode: ConversationMode): void;
+/** Number of recent episodes injected into the bootstrap as "Recent Conversation". */
+export declare function getBootstrapMessageCount(): number;
+export declare function setBootstrapMessageCount(count: number): void;
+export declare function getWaitTimeoutMinutes(): number;
+export declare function setWaitTimeoutMinutes(minutes: number): void;
+export interface PredefinedPrompt {
+    label: string;
+    text: string;
+}
+/** Coerce untrusted input into a clean list of {label, text} prompts. */
+export declare function normalizePredefinedPrompts(raw: unknown): PredefinedPrompt[];
+export declare function getPredefinedPrompts(): PredefinedPrompt[];
+export declare function setPredefinedPrompts(list: PredefinedPrompt[]): void;
+/** Whether guardrail (Active Decisions) notes are injected into memory briefings. */
+export declare function getGuardrailsEnabled(): boolean;
+export declare function setGuardrailsEnabled(enabled: boolean): void;
+/**
+ * Read the MEMORY_SOURCE_THREAD_ID env var set by the parent process
+ * when spawning a child thread (worker/branch). Returns the parent
+ * thread ID for memory briefing, or undefined if not a child thread.
+ */
+export declare function getMemorySourceThreadId(): number | undefined;
+//# sourceMappingURL=misc-settings.d.ts.map

package/dist/config/misc-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"misc-settings.d.ts","sourceRoot":"","sources":["../../src/config/misc-settings.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAUH,eAAO,MAAM,WAAW,6CAA8C,CAAC;AACvE,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,SAAS,CAE3D;AAED,qEAAqE;AACrE,wBAAgB,iBAAiB,IAAI,aAAa,EAAE,CASnD;AAED,kFAAkF;AAClF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAM3D;AAED,4CAA4C;AAC5C,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAItD;AAID,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,OAAO,CAAC;AAEnD,2EAA2E;AAC3E,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAO5E;AAED,+CAA+C;AAC/C,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,IAAI,CAMxF;AAOD,sFAAsF;AACtF,wBAAgB,wBAAwB,IAAI,MAAM,CAIjD;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAM5D;AAQD,wBAAgB,qBAAqB,IAAI,MAAM,CAI9C;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAM3D;AAQD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAKD,yEAAyE;AACzE,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,EAAE,CAY3E;AAED,wBAAgB,oBAAoB,IAAI,gBAAgB,EAAE,CAEzD;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAInE;AAID,qFAAqF;AACrF,wBAAgB,oBAAoB,IAAI,OAAO,CAI9C;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAI3D;AAID;;;;GAIG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,SAAS,CAK5D"}

package/dist/config/misc-settings.js

@@ -0,0 +1,146 @@
+/**
+ * Miscellaneous settings — imported external skills, per-thread conversation
+ * mode, bootstrap message count, wait timeout, predefined prompts, guardrails
+ * toggle, and the child-thread memory source env var.
+ */
+import { readSettings, updateSettings } from "./settings-store.js";
+// ─── Imported (external) skills ─────────────────────────────────────────────
+// Skills that live OUTSIDE Sensorium (e.g. a separate git repo of sensitive
+// skills) are registered here by absolute path + format, never copied. The
+// skill loader reads them in place, so a `git pull` in the source repo updates
+// them with no re-import.
+export const SKILL_TYPES = ["sensorium", "claude", "copilot"];
+export function isValidSkillType(v) {
+    return typeof v === "string" && SKILL_TYPES.includes(v);
+}
+/** All registered external skills. Malformed entries are dropped. */
+export function getImportedSkills() {
+    const raw = readSettings().importedSkills;
+    if (!Array.isArray(raw))
+        return [];
+    return raw.filter((e) => !!e &&
+        typeof e.path === "string" &&
+        isValidSkillType(e.type));
+}
+/** Register an external skill by path+type. Idempotent on path (updates type). */
+export function addImportedSkill(skill) {
+    updateSettings((s) => {
+        const list = getImportedSkills().filter((e) => e.path !== skill.path);
+        list.push(skill);
+        s.importedSkills = list;
+    });
+}
+/** Unregister an external skill by path. */
+export function removeImportedSkill(path) {
+    updateSettings((s) => {
+        s.importedSkills = getImportedSkills().filter((e) => e.path !== path);
+    });
+}
+/** Returns the conversation mode for a thread, defaulting to "concise". */
+export function getThreadConversationMode(threadId) {
+    const map = readSettings().threadConversationModes;
+    if (map) {
+        const m = map[String(threadId)];
+        if (m === "concise" || m === "voice")
+            return m;
+    }
+    return "concise"; // concise is the default
+}
+/** Persists a per-thread conversation mode. */
+export function setThreadConversationMode(threadId, mode) {
+    updateSettings((s) => {
+        const map = (s.threadConversationModes ?? {});
+        map[String(threadId)] = mode;
+        s.threadConversationModes = map;
+    });
+}
+// ─── Bootstrap message count setting ────────────────────────────────────────
+/** Default number of episodes for the bootstrap "Recent Conversation" section. */
+const DEFAULT_BOOTSTRAP_MESSAGE_COUNT = 50;
+/** Number of recent episodes injected into the bootstrap as "Recent Conversation". */
+export function getBootstrapMessageCount() {
+    const v = readSettings().bootstrapMessageCount;
+    if (typeof v === "number" && Number.isFinite(v) && v >= 0)
+        return v;
+    return DEFAULT_BOOTSTRAP_MESSAGE_COUNT;
+}
+export function setBootstrapMessageCount(count) {
+    const clamped = Math.max(0, Math.round(count));
+    if (!Number.isFinite(clamped))
+        return;
+    updateSettings((s) => {
+        s.bootstrapMessageCount = clamped;
+    });
+}
+// ——— Wait timeout setting ———————————————————————————————————————————
+const DEFAULT_WAIT_TIMEOUT_MINUTES = 1440;
+const envWaitTimeoutMinutes = parseInt(process.env.WAIT_TIMEOUT_MINUTES ?? "", 10);
+const ENV_WAIT_TIMEOUT = Number.isFinite(envWaitTimeoutMinutes) ? envWaitTimeoutMinutes : undefined;
+export function getWaitTimeoutMinutes() {
+    const v = readSettings().waitTimeoutMinutes;
+    if (typeof v === "number" && Number.isFinite(v) && v >= 1)
+        return v;
+    return ENV_WAIT_TIMEOUT ?? DEFAULT_WAIT_TIMEOUT_MINUTES;
+}
+export function setWaitTimeoutMinutes(minutes) {
+    const clamped = Math.max(1, Math.round(minutes));
+    if (!Number.isFinite(clamped))
+        return;
+    updateSettings((s) => {
+        s.waitTimeoutMinutes = clamped;
+    });
+}
+const PROMPT_LABEL_MAX = 64;
+const PROMPT_TEXT_MAX = 4000;
+/** Coerce untrusted input into a clean list of {label, text} prompts. */
+export function normalizePredefinedPrompts(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const item of raw) {
+        if (!item || typeof item !== "object")
+            continue;
+        const rec = item;
+        const label = typeof rec.label === "string" ? rec.label.trim() : "";
+        const text = typeof rec.text === "string" ? rec.text.trim() : "";
+        if (!label || !text)
+            continue;
+        out.push({ label: label.slice(0, PROMPT_LABEL_MAX), text: text.slice(0, PROMPT_TEXT_MAX) });
+    }
+    return out;
+}
+export function getPredefinedPrompts() {
+    return normalizePredefinedPrompts(readSettings().predefinedPrompts);
+}
+export function setPredefinedPrompts(list) {
+    updateSettings((s) => {
+        s.predefinedPrompts = normalizePredefinedPrompts(list);
+    });
+}
+// ─── Guardrails setting ─────────────────────────────────────────────────────
+/** Whether guardrail (Active Decisions) notes are injected into memory briefings. */
+export function getGuardrailsEnabled() {
+    const v = readSettings().guardrailsEnabled;
+    if (typeof v === "boolean")
+        return v;
+    return true; // default: enabled
+}
+export function setGuardrailsEnabled(enabled) {
+    updateSettings((s) => {
+        s.guardrailsEnabled = enabled;
+    });
+}
+// ─── Child thread memory source ───────────────────────────────────────────
+/**
+ * Read the MEMORY_SOURCE_THREAD_ID env var set by the parent process
+ * when spawning a child thread (worker/branch). Returns the parent
+ * thread ID for memory briefing, or undefined if not a child thread.
+ */
+export function getMemorySourceThreadId() {
+    const val = process.env.MEMORY_SOURCE_THREAD_ID;
+    if (!val)
+        return undefined;
+    const n = Number(val);
+    return Number.isFinite(n) ? n : undefined;
+}
+//# sourceMappingURL=misc-settings.js.map

package/dist/config/misc-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"misc-settings.js","sourceRoot":"","sources":["../../src/config/misc-settings.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAEnE,+EAA+E;AAC/E,4EAA4E;AAC5E,2EAA2E;AAC3E,+EAA+E;AAC/E,0BAA0B;AAE1B,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAQvE,MAAM,UAAU,gBAAgB,CAAC,CAAU;IACzC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAK,WAAiC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC,cAAc,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,GAAG,CAAC,MAAM,CACf,CAAC,CAAC,EAAsB,EAAE,CACxB,CAAC,CAAC,CAAC;QACH,OAAQ,CAAmB,CAAC,IAAI,KAAK,QAAQ;QAC7C,gBAAgB,CAAE,CAAmB,CAAC,IAAI,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gBAAgB,CAAC,KAAoB;IACnD,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC,cAAc,GAAG,IAAI,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,cAAc,GAAG,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAMD,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC,uBAA8D,CAAC;IAC1F,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,OAAO;YAAE,OAAO,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC,CAAC,yBAAyB;AAC7C,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,yBAAyB,CAAC,QAAgB,EAAE,IAAsB;IAChF,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,uBAAuB,IAAI,EAAE,CAA4B,CAAC;QACzE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,CAAC;QAC7B,CAAC,CAAC,uBAAuB,GAAG,GAAG,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,kFAAkF;AAClF,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAE3C,sFAAsF;AACtF,MAAM,UAAU,wBAAwB;IACtC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC,qBAAqB,CAAC;IAC/C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACpE,OAAO,+BAA+B,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO;IACtC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,qBAAqB,GAAG,OAAO,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uEAAuE;AAEvE,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAC1C,MAAM,qBAAqB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;AACnF,MAAM,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;AAEpG,MAAM,UAAU,qBAAqB;IACnC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC,kBAAkB,CAAC;IAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACpE,OAAO,gBAAgB,IAAI,4BAA4B,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO;IACtC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,kBAAkB,GAAG,OAAO,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAaD,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,MAAM,eAAe,GAAG,IAAI,CAAC;AAE7B,yEAAyE;AACzE,MAAM,UAAU,0BAA0B,CAAC,GAAY;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,SAAS;QAChD,MAAM,GAAG,GAAG,IAA+B,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YAAE,SAAS;QAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,0BAA0B,CAAC,YAAY,EAAE,CAAC,iBAAiB,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAwB;IAC3D,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,iBAAiB,GAAG,0BAA0B,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,qFAAqF;AACrF,MAAM,UAAU,oBAAoB;IAClC,MAAM,CAAC,GAAG,YAAY,EAAE,CAAC,iBAAiB,CAAC;IAC3C,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC,CAAC,mBAAmB;AAClC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE;QACnB,CAAC,CAAC,iBAAiB,GAAG,OAAO,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,6EAA6E;AAE7E;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC"}

package/dist/config/settings-store.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Settings persistence core — atomic read/modify/write of settings.json
+ * under the user's home directory. All config domain modules go through
+ * readSettings/updateSettings; nothing else touches the file directly.
+ */
+/** Read and parse the settings file, returning an empty object on any failure. */
+export declare function readSettings(): Record<string, unknown>;
+/** Read settings, apply a mutator, and atomically persist the result. */
+export declare function updateSettings(mutator: (s: Record<string, unknown>) => void): void;
+//# sourceMappingURL=settings-store.d.ts.map

package/dist/config/settings-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-store.d.ts","sourceRoot":"","sources":["../../src/config/settings-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA4CH,kFAAkF;AAClF,wBAAgB,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAQtD;AAED,yEAAyE;AACzE,wBAAgB,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,IAAI,CAIlF"}