sensorium-mcp 3.0.103 → 3.1.0-refactor.1

package/dist/config.js

@@ -1,841 +0,0 @@
-/**
- * Centralized configuration — reads environment variables at startup
- * and exports validated values used throughout the codebase.
- */
-import { createRequire } from "node:module";
-import { randomUUID } from "node:crypto";
-import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { join } from "node:path";
-import { log } from "./logger.js";
-import { FILES_DIR } from "./data/file-storage.js";
-import { getThread, getAllThreads, updateThread } from "./data/memory/thread-registry.js";
-const esmRequire = createRequire(import.meta.url);
-const { version: PKG_VERSION } = esmRequire("../package.json");
-// ─── Environment variables ──────────────────────────────────────────────────
-const TELEGRAM_TOKEN = process.env.TELEGRAM_TOKEN ?? "";
-const TELEGRAM_CHAT_ID = process.env.TELEGRAM_CHAT_ID ?? "";
-const OPENAI_API_KEY = process.env.OPENAI_API_KEY ?? "";
-const VOICE_ANALYSIS_URL = process.env.VOICE_ANALYSIS_URL ?? "";
-const AUTONOMOUS_MODE = process.env.AUTONOMOUS_MODE === "true";
-const DEFAULT_WAIT_TIMEOUT_MINUTES = 1440;
-const envWaitTimeoutMinutes = parseInt(process.env.WAIT_TIMEOUT_MINUTES ?? "", 10);
-const ENV_WAIT_TIMEOUT = Number.isFinite(envWaitTimeoutMinutes) ? envWaitTimeoutMinutes : undefined;
-const rawDmnActivationHours = parseFloat(process.env.DMN_ACTIVATION_HOURS ?? "");
-const DMN_ACTIVATION_HOURS = Math.max(0.5, Number.isFinite(rawDmnActivationHours) ? rawDmnActivationHours : 4);
-// ─── Validation ─────────────────────────────────────────────────────────────
-if (!TELEGRAM_TOKEN || !TELEGRAM_CHAT_ID) {
-    log.error("TELEGRAM_TOKEN and TELEGRAM_CHAT_ID environment variables are required.");
-    process.exit(1);
-}
-if (!OPENAI_API_KEY) {
-    log.warn("OPENAI_API_KEY not set — voice messages will not be transcribed.");
-}
-if (VOICE_ANALYSIS_URL) {
-    log.info(`Voice analysis service configured: ${VOICE_ANALYSIS_URL}`);
-}
-if (process.env.TRANSCRIPTION_BASE_URL) {
-    const model = process.env.TRANSCRIPTION_MODEL || "whisper-1";
-    log.info(`Transcription provider configured: ${process.env.TRANSCRIPTION_BASE_URL} (model: ${model})`);
-}
-// ─── Templates directory ────────────────────────────────────────────────────
-export const TEMPLATES_DIR = join(homedir(), ".remote-copilot-mcp", "templates");
-mkdirSync(TEMPLATES_DIR, { recursive: true });
-/** The single source of truth for the default agent type when none is configured. */
-export const DEFAULT_AGENT_TYPE = "claude";
-export const VALID_AGENT_TYPES = [
-    "copilot",
-    "claude",
-    "codex", "openai_codex",
-    "fable",
-];
-export function isValidAgentType(v) {
-    return typeof v === "string" && VALID_AGENT_TYPES.includes(v);
-}
-const SETTINGS_PATH = join(homedir(), ".remote-copilot-mcp", "settings.json");
-const SETTINGS_TMP_PATH = SETTINGS_PATH + ".tmp";
-/** Atomically persist settings: write to .tmp then rename over the original. */
-function atomicWriteSettings(settings) {
-    writeFileSync(SETTINGS_TMP_PATH, JSON.stringify(settings, null, 2), "utf-8");
-    renameSync(SETTINGS_TMP_PATH, SETTINGS_PATH);
-    // settings.json holds MCP auth headers/tokens — restrict to owner (no-op on
-    // Windows NTFS, effective on POSIX where the server may also run).
-    try {
-        chmodSync(SETTINGS_PATH, 0o600);
-    }
-    catch { /* best-effort */ }
-}
-/** Read and parse the settings file, returning an empty object on any failure. */
-function readSettings() {
-    try {
-        return JSON.parse(readFileSync(SETTINGS_PATH, "utf-8"));
-    }
-    catch (err) {
-        if (err?.code !== "ENOENT")
-            log.warn(`[config] Failed to read settings: ${err}`);
-        return {};
-    }
-}
-/** Read settings, apply a mutator, and atomically persist the result. */
-function updateSettings(mutator) {
-    const settings = readSettings();
-    mutator(settings);
-    atomicWriteSettings(settings);
-}
-export function getAgentType() {
-    const t = readSettings().agentType;
-    return isValidAgentType(t) ? t : DEFAULT_AGENT_TYPE;
-}
-export function setAgentType(type) {
-    updateSettings(s => { s.agentType = type; });
-}
-// ─── Imported (external) skills ─────────────────────────────────────────────
-// Skills that live OUTSIDE Sensorium (e.g. a separate git repo of sensitive
-// skills) are registered here by absolute path + format, never copied. The
-// skill loader reads them in place, so a `git pull` in the source repo updates
-// them with no re-import.
-export const SKILL_TYPES = ["sensorium", "claude", "copilot"];
-export function isValidSkillType(v) {
-    return typeof v === "string" && SKILL_TYPES.includes(v);
-}
-/** All registered external skills. Malformed entries are dropped. */
-export function getImportedSkills() {
-    const raw = readSettings().importedSkills;
-    if (!Array.isArray(raw))
-        return [];
-    return raw.filter((e) => !!e && typeof e.path === "string" && isValidSkillType(e.type));
-}
-/** Register an external skill by path+type. Idempotent on path (updates type). */
-export function addImportedSkill(skill) {
-    updateSettings(s => {
-        const list = getImportedSkills().filter(e => e.path !== skill.path);
-        list.push(skill);
-        s.importedSkills = list;
-    });
-}
-/** Unregister an external skill by path. */
-export function removeImportedSkill(path) {
-    updateSettings(s => {
-        s.importedSkills = getImportedSkills().filter(e => e.path !== path);
-    });
-}
-let _threadDbGetter = null;
-/** Wire up the memory DB accessor so per-thread lookups (agent type, autonomous mode) work. */
-export function setThreadDb(getter) {
-    _threadDbGetter = getter;
-}
-// ─── Per-thread agent-type overrides ────────────────────────────────────────
-/**
- * Persists a per-thread agent-type override into thread_registry.client.
- * Returns true if the row was updated, false if no thread exists or the DB
- * accessor is not yet wired up.
- */
-export function setThreadAgentType(threadId, agentType) {
-    if (!_threadDbGetter) {
-        log.warn(`[config] setThreadAgentType(${threadId}, ${agentType}): DB not initialized — skipping`);
-        return false;
-    }
-    try {
-        return updateThread(_threadDbGetter(), threadId, { client: agentType });
-    }
-    catch (err) {
-        log.warn(`[config] setThreadAgentType DB write failed: ${err}`);
-        return false;
-    }
-}
-/** Returns the conversation mode for a thread, defaulting to "concise". */
-export function getThreadConversationMode(threadId) {
-    const map = readSettings().threadConversationModes;
-    if (map) {
-        const m = map[String(threadId)];
-        if (m === "concise" || m === "voice")
-            return m;
-    }
-    return "concise"; // concise is the default
-}
-/** Persists a per-thread conversation mode. */
-export function setThreadConversationMode(threadId, mode) {
-    updateSettings(s => {
-        const map = (s.threadConversationModes ?? {});
-        map[String(threadId)] = mode;
-        s.threadConversationModes = map;
-    });
-}
-/** Returns all per-thread agent-type overrides from thread_registry.client. */
-export function getAllThreadAgentTypes() {
-    if (!_threadDbGetter)
-        return {};
-    try {
-        const result = {};
-        for (const t of getAllThreads(_threadDbGetter())) {
-            if (isValidAgentType(t.client))
-                result[String(t.threadId)] = t.client;
-        }
-        return result;
-    }
-    catch (err) {
-        log.debug(`[config] getAllThreadAgentTypes DB lookup failed: ${err}`);
-        return {};
-    }
-}
-/**
- * Returns the effective agent type for a given thread.
- * Per-thread thread_registry.client takes precedence over the global default.
- */
-export function getEffectiveAgentType(threadId) {
-    if (threadId !== undefined && _threadDbGetter) {
-        try {
-            const entry = getThread(_threadDbGetter(), threadId);
-            if (entry && isValidAgentType(entry.client))
-                return entry.client;
-        }
-        catch (err) {
-            log.debug(`[config] getEffectiveAgentType DB lookup failed: ${err}`);
-        }
-    }
-    return getAgentType();
-}
-// ─── Per-thread autonomous mode ──────────────────────────────────────────────
-/**
- * Returns the effective autonomous mode for a given thread.
- * Per-thread DB value takes precedence over the global AUTONOMOUS_MODE env var.
- */
-export function getEffectiveAutonomousMode(threadId) {
-    if (threadId !== undefined && _threadDbGetter) {
-        try {
-            const threadEntry = getThread(_threadDbGetter(), threadId);
-            if (threadEntry != null)
-                return threadEntry.autonomousMode ?? AUTONOMOUS_MODE;
-        }
-        catch (err) {
-            log.debug(`[config] getEffectiveAutonomousMode DB lookup failed: ${err}`);
-        }
-    }
-    return AUTONOMOUS_MODE;
-}
-function parseMcpServers(raw) {
-    return (raw && typeof raw === "object" && !Array.isArray(raw))
-        ? raw : {};
-}
-/** Returns all user-configured MCP servers (excludes auto-injected sensorium). */
-export function getMcpServers() {
-    return parseMcpServers(readSettings().mcpServers);
-}
-/** Overwrites the entire MCP servers map. */
-export function setMcpServers(servers) {
-    updateSettings(s => { s.mcpServers = servers; });
-}
-/** Add or update a single MCP server by name. */
-export function addMcpServer(name, config) {
-    if (!name || name === "sensorium-mcp")
-        throw new Error(`Invalid MCP server name: "${name}"`);
-    if (config.type === "stdio" && !config.command)
-        throw new Error("Stdio MCP server requires a command");
-    if (config.type === "http" && !config.url)
-        throw new Error("HTTP MCP server requires a url");
-    updateSettings(s => {
-        const existing = parseMcpServers(s.mcpServers);
-        existing[name] = config;
-        s.mcpServers = existing;
-    });
-}
-/** Remove an MCP server by name. Returns true if it existed. */
-export function removeMcpServer(name) {
-    let existed = false;
-    updateSettings(s => {
-        const servers = parseMcpServers(s.mcpServers);
-        if (name in servers) {
-            delete servers[name];
-            existed = true;
-        }
-        s.mcpServers = servers;
-    });
-    return existed;
-}
-// ─── Per-thread custom MCP servers (universal, agent-agnostic) ──────────────
-//
-// The operator can attach arbitrary MCP servers to a single thread via the
-// dashboard. Stored in settings.json keyed by threadId (same pattern as
-// threadConversationModes / threadKeepAlive — no DB schema change), then merged
-// on top of the global mcpServers map at spawn. Sensorium knows nothing about
-// what any server does (RAG, search, whatever) — it's just an { type: "http",
-// url, headers } entry, e.g. an Authorization: Bearer <token> that selects a
-// corpus on some external host.
-//
-// HARD INVARIANTS (security):
-//   • HTTP-ONLY. A per-thread `stdio` entry would spawn an operator-supplied
-//     binary at agent-spawn time = arbitrary code execution, so stdio is
-//     rejected on write and never parsed back out.
-//   • RESERVED names can't be overridden — `sensorium-mcp` is the agent's own
-//     control channel (clobbering it severs the orchestrator link).
-/** MCP server names a per-thread entry may never use. */
-export const RESERVED_MCP_NAMES = ["sensorium-mcp", "rag"];
-/**
- * Header names must be plain HTTP tokens. This is a hard security boundary, not
- * cosmetics: Codex renders headers as dotted TOML `-c mcp_servers.X.http_headers.<key>`
- * overrides, so a key containing `.`, `"`, `=`, `[` or whitespace could break out
- * of the header path and inject arbitrary config (e.g. re-point sensorium-mcp or
- * add an stdio server), defeating the reserved-name and http-only invariants.
- */
-const SAFE_HEADER_NAME = /^[A-Za-z0-9-]+$/;
-/** Parse one raw entry into a validated http-only ThreadMcpServer, or null if invalid. */
-function parseThreadMcpServer(raw) {
-    if (!raw || typeof raw !== "object" || Array.isArray(raw))
-        return null;
-    const o = raw;
-    if (o.type !== "http" || typeof o.url !== "string" || o.url.length === 0)
-        return null;
-    const entry = { type: "http", url: o.url };
-    if (o.headers && typeof o.headers === "object" && !Array.isArray(o.headers)) {
-        const headers = {};
-        for (const [k, v] of Object.entries(o.headers)) {
-            if (typeof v === "string" && SAFE_HEADER_NAME.test(k))
-                headers[k] = v;
-        }
-        if (Object.keys(headers).length > 0)
-            entry.headers = headers;
-    }
-    return entry;
-}
-/** Parse a per-thread server map, dropping reserved names and non-http/invalid entries. */
-function parseThreadMcpServers(raw) {
-    if (!raw || typeof raw !== "object" || Array.isArray(raw))
-        return {};
-    const result = {};
-    for (const [name, val] of Object.entries(raw)) {
-        if (!name || RESERVED_MCP_NAMES.includes(name))
-            continue;
-        const parsed = parseThreadMcpServer(val);
-        if (parsed)
-            result[name] = parsed;
-    }
-    return result;
-}
-/** Returns a thread's custom MCP servers (http-only, reserved names excluded). */
-export function getThreadMcpServers(threadId) {
-    const map = readSettings().threadMcpServers;
-    return parseThreadMcpServers(map?.[String(threadId)]);
-}
-/**
- * Replace a thread's custom MCP servers. Pass null/empty to clear.
- * Validates http-only transport and rejects reserved names; throws on violation
- * so the dashboard can surface a 400.
- */
-/**
- * Validate a caller-supplied server map against the per-thread invariants
- * (http-only, non-reserved name, safe header names). Throws on any violation so
- * the dashboard can surface a 400. Shared by per-thread MCP writes and agent
- * templates (which carry the same kind of map).
- */
-function sanitizeThreadMcpServers(servers) {
-    const clean = {};
-    if (servers) {
-        for (const [name, cfg] of Object.entries(servers)) {
-            if (!name)
-                throw new Error("MCP server name is required");
-            if (RESERVED_MCP_NAMES.includes(name))
-                throw new Error(`MCP server name "${name}" is reserved`);
-            if (!cfg || cfg.type !== "http")
-                throw new Error(`MCP server "${name}" must be http (stdio is not allowed per-thread)`);
-            if (!cfg.url)
-                throw new Error(`MCP server "${name}" requires a url`);
-            const entry = { type: "http", url: cfg.url };
-            if (cfg.headers && Object.keys(cfg.headers).length > 0) {
-                for (const [k, v] of Object.entries(cfg.headers)) {
-                    if (!SAFE_HEADER_NAME.test(k))
-                        throw new Error(`MCP server "${name}" header name "${k}" is invalid (letters, digits, hyphen only)`);
-                    if (typeof v === "string" && v.includes(MASK_SENTINEL))
-                        throw new Error(`MCP server "${name}" header "${k}" is still masked — re-enter the value`);
-                }
-                entry.headers = cfg.headers;
-            }
-            clean[name] = entry;
-        }
-    }
-    return clean;
-}
-/** Header value the dashboard shows in place of a stored secret; must never be persisted back. */
-export const MASK_SENTINEL = "••••";
-/** Mask header values so the dashboard shows which headers exist without leaking the secret. */
-export function maskThreadMcpServers(servers) {
-    const out = {};
-    for (const [name, cfg] of Object.entries(servers)) {
-        const masked = { type: "http", url: cfg.url };
-        if (cfg.headers && Object.keys(cfg.headers).length > 0) {
-            masked.headers = {};
-            for (const k of Object.keys(cfg.headers))
-                masked.headers[k] = MASK_SENTINEL;
-        }
-        out[name] = masked;
-    }
-    return out;
-}
-export function setThreadMcpServers(threadId, servers) {
-    const clean = sanitizeThreadMcpServers(servers);
-    updateSettings(s => {
-        const map = (s.threadMcpServers ?? {});
-        if (Object.keys(clean).length > 0)
-            map[String(threadId)] = clean;
-        else
-            delete map[String(threadId)];
-        s.threadMcpServers = map;
-    });
-}
-/** Remove a thread's custom MCP servers entirely (called on hard-delete). */
-export function deleteThreadMcpServers(threadId) {
-    updateSettings(s => {
-        const map = (s.threadMcpServers ?? {});
-        if (String(threadId) in map) {
-            delete map[String(threadId)];
-            s.threadMcpServers = map;
-        }
-    });
-}
-/** All per-thread MCP servers (for dashboard enrichment), reserved/invalid excluded. */
-export function getAllThreadMcpServers() {
-    const map = readSettings().threadMcpServers;
-    if (!map || typeof map !== "object")
-        return {};
-    const result = {};
-    for (const [tid, val] of Object.entries(map)) {
-        const parsed = parseThreadMcpServers(val);
-        if (Object.keys(parsed).length > 0)
-            result[tid] = parsed;
-    }
-    return result;
-}
-/** Parse+validate one stored template, or null if malformed. */
-function parseAgentTemplate(raw) {
-    if (!raw || typeof raw !== "object" || Array.isArray(raw))
-        return null;
-    const o = raw;
-    if (typeof o.id !== "string" || !o.id)
-        return null;
-    if (typeof o.name !== "string" || !o.name)
-        return null;
-    if (!isValidAgentType(o.client))
-        return null;
-    if (typeof o.workingDirectory !== "string" || !o.workingDirectory)
-        return null;
-    const tpl = { id: o.id, name: o.name, client: o.client, workingDirectory: o.workingDirectory };
-    if (typeof o.systemPrompt === "string" && o.systemPrompt.length > 0)
-        tpl.systemPrompt = o.systemPrompt;
-    const mcp = parseThreadMcpServers(o.mcpServers);
-    if (Object.keys(mcp).length > 0)
-        tpl.mcpServers = mcp;
-    return tpl;
-}
-/** All stored agent templates (malformed entries dropped). */
-export function getAgentTemplates() {
-    const raw = readSettings().agentTemplates;
-    if (!Array.isArray(raw))
-        return [];
-    const result = [];
-    for (const item of raw) {
-        const parsed = parseAgentTemplate(item);
-        if (parsed)
-            result.push(parsed);
-    }
-    return result;
-}
-/** Single template by id, or null. */
-export function getAgentTemplate(id) {
-    return getAgentTemplates().find(t => t.id === id) ?? null;
-}
-/**
- * Upsert a template. A blank id creates a new one (server-assigned id); an
- * existing id replaces in place. Validates required fields and the MCP map;
- * throws on violation so the dashboard can surface a 400.
- */
-export function saveAgentTemplate(input) {
-    const name = input.name?.trim();
-    if (!name)
-        throw new Error("name is required");
-    if (!isValidAgentType(input.client))
-        throw new Error(`client must be one of: ${VALID_AGENT_TYPES.join(", ")}`);
-    const workingDirectory = input.workingDirectory?.trim();
-    if (!workingDirectory)
-        throw new Error("workingDirectory is required");
-    const mcpServers = sanitizeThreadMcpServers(input.mcpServers ?? undefined);
-    const tpl = {
-        id: input.id?.trim() ? input.id.trim() : `tpl_${randomUUID().replace(/-/g, "").slice(0, 12)}`,
-        name,
-        client: input.client,
-        workingDirectory,
-    };
-    const systemPrompt = typeof input.systemPrompt === "string" ? input.systemPrompt.trim() : "";
-    if (systemPrompt)
-        tpl.systemPrompt = systemPrompt;
-    if (Object.keys(mcpServers).length > 0)
-        tpl.mcpServers = mcpServers;
-    updateSettings(s => {
-        const list = getAgentTemplates();
-        const idx = list.findIndex(t => t.id === tpl.id);
-        if (idx >= 0)
-            list[idx] = tpl;
-        else
-            list.push(tpl);
-        s.agentTemplates = list;
-    });
-    return tpl;
-}
-/** Remove a template by id. Returns true if one was removed. */
-export function deleteAgentTemplate(id) {
-    const before = getAgentTemplates();
-    const after = before.filter(t => t.id !== id);
-    if (after.length === before.length)
-        return false;
-    updateSettings(s => { s.agentTemplates = after; });
-    return true;
-}
-// ─── Bootstrap message count setting ────────────────────────────────────────
-/** Default number of episodes for the bootstrap "Recent Conversation" section. */
-const DEFAULT_BOOTSTRAP_MESSAGE_COUNT = 50;
-/** Number of recent episodes injected into the bootstrap as "Recent Conversation". */
-export function getBootstrapMessageCount() {
-    const v = readSettings().bootstrapMessageCount;
-    if (typeof v === "number" && Number.isFinite(v) && v >= 0)
-        return v;
-    return DEFAULT_BOOTSTRAP_MESSAGE_COUNT;
-}
-export function setBootstrapMessageCount(count) {
-    const clamped = Math.max(0, Math.round(count));
-    if (!Number.isFinite(clamped))
-        return;
-    updateSettings(s => { s.bootstrapMessageCount = clamped; });
-}
-// ——— Wait timeout setting ———————————————————————————————————————————
-export function getWaitTimeoutMinutes() {
-    const v = readSettings().waitTimeoutMinutes;
-    if (typeof v === "number" && Number.isFinite(v) && v >= 1)
-        return v;
-    return ENV_WAIT_TIMEOUT ?? DEFAULT_WAIT_TIMEOUT_MINUTES;
-}
-export function setWaitTimeoutMinutes(minutes) {
-    const clamped = Math.max(1, Math.round(minutes));
-    if (!Number.isFinite(clamped))
-        return;
-    updateSettings(s => { s.waitTimeoutMinutes = clamped; });
-}
-// ─── Default model settings ──────────────────────────────────────────────────
-const DEFAULT_THREAD_MODEL = "claude-opus-4-6";
-const DEFAULT_WORKER_MODEL = "claude-sonnet-4-6";
-// Model for the experimental "fable" agent type — a Claude-CLI thread pinned to
-// a distinct (premium) model. Overridable via settings.fableModel.
-const DEFAULT_FABLE_MODEL = "claude-fable-5";
-export function getFableModel() {
-    const v = readSettings().fableModel;
-    return typeof v === "string" && v.length > 0 ? v : DEFAULT_FABLE_MODEL;
-}
-export function getDefaultThreadModel() {
-    const v = readSettings().defaultThreadModel;
-    return typeof v === "string" && v.length > 0 ? v : DEFAULT_THREAD_MODEL;
-}
-export function getDefaultWorkerModel() {
-    const v = readSettings().defaultWorkerModel;
-    return typeof v === "string" && v.length > 0 ? v : DEFAULT_WORKER_MODEL;
-}
-export function updateDefaultThreadModel(model) {
-    updateSettings(s => { s.defaultThreadModel = model; });
-}
-export function updateDefaultWorkerModel(model) {
-    updateSettings(s => { s.defaultWorkerModel = model; });
-}
-// ─── Copilot provider (BYOK / OpenRouter) settings ──────────────────────────
-const DEFAULT_COPILOT_MODEL = "claude-opus-4-6";
-const DEFAULT_COPILOT_BYOK = {
-    enabled: false,
-    providerType: "openai",
-    baseUrl: "",
-    apiKey: "",
-    modelId: "",
-    wireModel: "",
-};
-export function isValidCopilotProviderType(v) {
-    return v === "openai" || v === "azure" || v === "anthropic";
-}
-/** Model passed to the Copilot CLI via --model / COPILOT_MODEL (native or BYOK). */
-export function getCopilotModel() {
-    const v = readSettings().copilotModel;
-    return typeof v === "string" && v.length > 0 ? v : DEFAULT_COPILOT_MODEL;
-}
-export function setCopilotModel(model) {
-    updateSettings(s => { s.copilotModel = model; });
-}
-/** Coerce an untrusted value into a fully-valid CopilotByokConfig, filling defaults. */
-function normalizeByokConfig(raw) {
-    if (!raw || typeof raw !== "object")
-        return { ...DEFAULT_COPILOT_BYOK };
-    const e = raw;
-    return {
-        enabled: typeof e.enabled === "boolean" ? e.enabled : false,
-        providerType: isValidCopilotProviderType(e.providerType) ? e.providerType : "openai",
-        baseUrl: typeof e.baseUrl === "string" ? e.baseUrl : "",
-        apiKey: typeof e.apiKey === "string" ? e.apiKey : "",
-        modelId: typeof e.modelId === "string" ? e.modelId : "",
-        wireModel: typeof e.wireModel === "string" ? e.wireModel : "",
-    };
-}
-export function getCopilotByokConfig() {
-    return normalizeByokConfig(readSettings().copilotByok);
-}
-/**
- * Merge a partial patch into the stored BYOK config and persist. The merged
- * result is re-validated through normalizeByokConfig so the settings file can
- * never hold an invalid providerType or non-string field, even though the input
- * originates from the dashboard.
- */
-export function setCopilotByokConfig(patch) {
-    const next = normalizeByokConfig({ ...getCopilotByokConfig(), ...patch });
-    updateSettings(s => { s.copilotByok = next; });
-    return next;
-}
-/**
- * Assemble the environment variables that configure the Copilot CLI's model and
- * (optionally) a custom BYOK provider. Values here are meant to override any
- * inherited process.env at spawn time.
- */
-export function getCopilotSpawnEnv() {
-    const model = getCopilotModel();
-    const env = { COPILOT_MODEL: model };
-    const byok = getCopilotByokConfig();
-    if (byok.enabled && byok.baseUrl && byok.apiKey) {
-        env.COPILOT_PROVIDER_BASE_URL = byok.baseUrl;
-        env.COPILOT_PROVIDER_TYPE = byok.providerType;
-        env.COPILOT_PROVIDER_API_KEY = byok.apiKey;
-        env.COPILOT_PROVIDER_MODEL_ID = byok.modelId || model;
-        env.COPILOT_PROVIDER_WIRE_MODEL = byok.wireModel || model;
-    }
-    return env;
-}
-// ─── Custom spawn env vars (per agent) ──────────────────────────────────────
-//
-// Operator-supplied env vars merged into the respective agent's spawn env. They
-// are stored per agent so a var set for Claude is never injected into Copilot
-// (and vice-versa). Locked built-ins always win over these, and the spawn path
-// strips any ENV_DENYLIST key so a custom var can't smuggle a secret/cross-agent
-// value past the denylist.
-/** Coerce untrusted input into a clean string→string map (trimmed non-empty keys). */
-function normalizeCustomEnvVars(raw) {
-    if (!raw || typeof raw !== "object" || Array.isArray(raw))
-        return {};
-    const out = {};
-    for (const [k, v] of Object.entries(raw)) {
-        const key = typeof k === "string" ? k.trim() : "";
-        if (key && typeof v === "string")
-            out[key] = v;
-    }
-    return out;
-}
-export function getClaudeCustomEnvVars() {
-    return normalizeCustomEnvVars(readSettings().claudeCustomEnvVars);
-}
-export function setClaudeCustomEnvVars(vars) {
-    updateSettings(s => { s.claudeCustomEnvVars = normalizeCustomEnvVars(vars); });
-}
-export function getCopilotCustomEnvVars() {
-    return normalizeCustomEnvVars(readSettings().copilotCustomEnvVars);
-}
-export function setCopilotCustomEnvVars(vars) {
-    updateSettings(s => { s.copilotCustomEnvVars = normalizeCustomEnvVars(vars); });
-}
-const PROMPT_LABEL_MAX = 64;
-const PROMPT_TEXT_MAX = 4000;
-/** Coerce untrusted input into a clean list of {label, text} prompts. */
-export function normalizePredefinedPrompts(raw) {
-    if (!Array.isArray(raw))
-        return [];
-    const out = [];
-    for (const item of raw) {
-        if (!item || typeof item !== "object")
-            continue;
-        const rec = item;
-        const label = typeof rec.label === "string" ? rec.label.trim() : "";
-        const text = typeof rec.text === "string" ? rec.text.trim() : "";
-        if (!label || !text)
-            continue;
-        out.push({ label: label.slice(0, PROMPT_LABEL_MAX), text: text.slice(0, PROMPT_TEXT_MAX) });
-    }
-    return out;
-}
-export function getPredefinedPrompts() {
-    return normalizePredefinedPrompts(readSettings().predefinedPrompts);
-}
-export function setPredefinedPrompts(list) {
-    updateSettings(s => { s.predefinedPrompts = normalizePredefinedPrompts(list); });
-}
-// ─── Claude spawn settings ──────────────────────────────────────────────────
-//
-// Overrides for values previously only discoverable from the environment or via
-// auto-detection. Precedence is always env var → dashboard setting → autodetect,
-// so setting an env var keeps the exact prior behavior and an unset setting is a
-// no-op. Returns undefined when neither env nor setting supplies a value, letting
-// the caller fall back to its existing auto-detection logic.
-const DEFAULT_MAX_CONCURRENT_THREADS = 20;
-function readStringSetting(key) {
-    const v = readSettings()[key];
-    return typeof v === "string" && v.length > 0 ? v : undefined;
-}
-/** Explicit path to the Claude CLI binary (settings only — env is read at the call site). */
-export function getClaudeCliPath() {
-    return readStringSetting("claudeCliPath");
-}
-export function setClaudeCliPath(path) {
-    updateSettings(s => { if (path)
-        s.claudeCliPath = path;
-    else
-        delete s.claudeCliPath; });
-}
-/** Long-lived Claude setup token used in place of the broken OAuth refresh flow. */
-export function getClaudeOauthToken() {
-    return readStringSetting("claudeOauthToken");
-}
-export function setClaudeOauthToken(token) {
-    updateSettings(s => { if (token)
-        s.claudeOauthToken = token;
-    else
-        delete s.claudeOauthToken; });
-}
-/** Path to git-bash (Windows) passed to Claude via CLAUDE_CODE_GIT_BASH_PATH. */
-export function getClaudeGitBashPath() {
-    return readStringSetting("claudeGitBashPath");
-}
-export function setClaudeGitBashPath(path) {
-    updateSettings(s => { if (path)
-        s.claudeGitBashPath = path;
-    else
-        delete s.claudeGitBashPath; });
-}
-/** Maximum number of concurrent spawned threads. */
-export function getMaxConcurrentThreads() {
-    const v = readSettings().maxConcurrentThreads;
-    if (typeof v === "number" && Number.isFinite(v) && v >= 1)
-        return Math.round(v);
-    return DEFAULT_MAX_CONCURRENT_THREADS;
-}
-export function setMaxConcurrentThreads(count) {
-    const clamped = Math.max(1, Math.round(count));
-    if (!Number.isFinite(clamped))
-        return;
-    updateSettings(s => { s.maxConcurrentThreads = clamped; });
-}
-// ─── Guardrails setting ─────────────────────────────────────────────────────
-/** Whether guardrail (Active Decisions) notes are injected into memory briefings. */
-export function getGuardrailsEnabled() {
-    const v = readSettings().guardrailsEnabled;
-    if (typeof v === "boolean")
-        return v;
-    return true; // default: enabled
-}
-export function setGuardrailsEnabled(enabled) {
-    updateSettings(s => { s.guardrailsEnabled = enabled; });
-}
-// ─── Keep-alive settings ─────────────────────────────────────────────────────
-const DEFAULT_KEEP_ALIVE_MAX_RETRIES = 5;
-const DEFAULT_KEEP_ALIVE_COOLDOWN_MS = 300_000;
-export function getKeepAliveEnabled() {
-    const v = readSettings().keepAliveEnabled;
-    if (typeof v === "boolean")
-        return v;
-    return false; // default: disabled
-}
-export function setKeepAliveEnabled(enabled) {
-    updateSettings(s => { s.keepAliveEnabled = enabled; });
-}
-export function getKeepAliveThreadId() {
-    const v = readSettings().keepAliveThreadId;
-    if (typeof v === "number" && Number.isFinite(v) && v > 0)
-        return v;
-    return 0;
-}
-export function setKeepAliveThreadId(threadId) {
-    updateSettings(s => { s.keepAliveThreadId = threadId; });
-}
-export function getKeepAliveMaxRetries() {
-    const v = readSettings().keepAliveMaxRetries;
-    if (typeof v === "number" && Number.isFinite(v) && v > 0)
-        return v;
-    return DEFAULT_KEEP_ALIVE_MAX_RETRIES;
-}
-export function setKeepAliveMaxRetries(retries) {
-    updateSettings(s => { s.keepAliveMaxRetries = retries; });
-}
-export function getKeepAliveCooldownMs() {
-    const v = readSettings().keepAliveCooldownMs;
-    if (typeof v === "number" && Number.isFinite(v) && v > 0)
-        return v;
-    return DEFAULT_KEEP_ALIVE_COOLDOWN_MS;
-}
-export function setKeepAliveCooldownMs(ms) {
-    updateSettings(s => { s.keepAliveCooldownMs = ms; });
-}
-export function isValidKeeperClient(v) {
-    return v === "claude" || v === "copilot";
-}
-export function getKeepAliveClient() {
-    const v = readSettings().keepAliveClient;
-    return isValidKeeperClient(v) ? v : "claude";
-}
-export function setKeepAliveClient(client) {
-    updateSettings(s => { s.keepAliveClient = client; });
-}
-/** Sets keep-alive settings for a specific thread. */
-export function setThreadKeepAlive(threadId, settings) {
-    updateSettings(s => {
-        const map = (s.threadKeepAlive ?? {});
-        map[String(threadId)] = settings;
-        s.threadKeepAlive = map;
-    });
-}
-/** Removes per-thread keep-alive settings. */
-export function removeThreadKeepAlive(threadId) {
-    updateSettings(s => {
-        const map = (s.threadKeepAlive ?? {});
-        delete map[String(threadId)];
-        s.threadKeepAlive = map;
-    });
-}
-/** Returns all per-thread keep-alive overrides. */
-export function getAllThreadKeepAlive() {
-    const map = readSettings().threadKeepAlive;
-    if (!map || typeof map !== "object")
-        return {};
-    const result = {};
-    for (const [k, v] of Object.entries(map)) {
-        if (v && typeof v === "object") {
-            const e = v;
-            result[k] = {
-                enabled: typeof e.enabled === "boolean" ? e.enabled : false,
-                client: isValidKeeperClient(e.client) ? e.client : undefined,
-                cooldownMs: typeof e.cooldownMs === "number" && e.cooldownMs >= 1000 ? e.cooldownMs : undefined,
-                maxRetries: typeof e.maxRetries === "number" && e.maxRetries > 0 ? e.maxRetries : undefined,
-            };
-        }
-    }
-    return result;
-}
-// ─── Child thread memory source ───────────────────────────────────────────
-/**
- * Read the MEMORY_SOURCE_THREAD_ID env var set by the parent process
- * when spawning a child thread (worker/branch). Returns the parent
- * thread ID for memory briefing, or undefined if not a child thread.
- */
-export function getMemorySourceThreadId() {
-    const val = process.env.MEMORY_SOURCE_THREAD_ID;
-    if (!val)
-        return undefined;
-    const n = Number(val);
-    return Number.isFinite(n) ? n : undefined;
-}
-// ─── Exported config object ─────────────────────────────────────────────────
-export const config = {
-    TELEGRAM_TOKEN,
-    TELEGRAM_CHAT_ID,
-    OPENAI_API_KEY,
-    VOICE_ANALYSIS_URL,
-    get WAIT_TIMEOUT_MINUTES() { return getWaitTimeoutMinutes(); },
-    DMN_ACTIVATION_HOURS,
-    FILES_DIR,
-    PKG_VERSION,
-};
-//# sourceMappingURL=config.js.map