sentinelayer-cli 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (124) hide show
  1. package/README.md +996 -0
  2. package/bin/create-sentinelayer.js +5 -0
  3. package/bin/sentinelayer-cli.js +5 -0
  4. package/bin/sl.js +5 -0
  5. package/package.json +54 -0
  6. package/src/agents/jules/config/definition.js +209 -0
  7. package/src/agents/jules/config/system-prompt.js +175 -0
  8. package/src/agents/jules/error-intake.js +51 -0
  9. package/src/agents/jules/fix-cycle.js +377 -0
  10. package/src/agents/jules/loop.js +367 -0
  11. package/src/agents/jules/pulse.js +319 -0
  12. package/src/agents/jules/stream.js +186 -0
  13. package/src/agents/jules/swarm/file-scanner.js +74 -0
  14. package/src/agents/jules/swarm/index.js +11 -0
  15. package/src/agents/jules/swarm/orchestrator.js +362 -0
  16. package/src/agents/jules/swarm/pattern-hunter.js +123 -0
  17. package/src/agents/jules/swarm/sub-agent.js +308 -0
  18. package/src/agents/jules/tools/auth-audit.js +222 -0
  19. package/src/agents/jules/tools/dispatch.js +327 -0
  20. package/src/agents/jules/tools/file-edit.js +180 -0
  21. package/src/agents/jules/tools/file-read.js +100 -0
  22. package/src/agents/jules/tools/frontend-analyze.js +570 -0
  23. package/src/agents/jules/tools/glob.js +168 -0
  24. package/src/agents/jules/tools/grep.js +228 -0
  25. package/src/agents/jules/tools/index.js +29 -0
  26. package/src/agents/jules/tools/path-guards.js +161 -0
  27. package/src/agents/jules/tools/runtime-audit.js +409 -0
  28. package/src/agents/jules/tools/shell.js +383 -0
  29. package/src/ai/aidenid.js +945 -0
  30. package/src/ai/client.js +508 -0
  31. package/src/ai/domain-target-store.js +268 -0
  32. package/src/ai/identity-store.js +270 -0
  33. package/src/ai/site-store.js +145 -0
  34. package/src/audit/agents/architecture.js +180 -0
  35. package/src/audit/agents/compliance.js +179 -0
  36. package/src/audit/agents/documentation.js +165 -0
  37. package/src/audit/agents/performance.js +145 -0
  38. package/src/audit/agents/security.js +215 -0
  39. package/src/audit/agents/testing.js +172 -0
  40. package/src/audit/orchestrator.js +557 -0
  41. package/src/audit/package.js +204 -0
  42. package/src/audit/registry.js +284 -0
  43. package/src/audit/replay.js +103 -0
  44. package/src/auth/http.js +113 -0
  45. package/src/auth/service.js +848 -0
  46. package/src/auth/session-store.js +345 -0
  47. package/src/cli.js +244 -0
  48. package/src/commands/ai/identity-lifecycle.js +1337 -0
  49. package/src/commands/ai/provision-governance.js +1246 -0
  50. package/src/commands/ai/shared.js +147 -0
  51. package/src/commands/ai.js +11 -0
  52. package/src/commands/apply.js +19 -0
  53. package/src/commands/audit.js +1147 -0
  54. package/src/commands/auth.js +366 -0
  55. package/src/commands/chat.js +191 -0
  56. package/src/commands/config.js +184 -0
  57. package/src/commands/cost.js +311 -0
  58. package/src/commands/daemon/core.js +850 -0
  59. package/src/commands/daemon/extended.js +1048 -0
  60. package/src/commands/daemon/shared.js +213 -0
  61. package/src/commands/daemon.js +11 -0
  62. package/src/commands/guide.js +174 -0
  63. package/src/commands/ingest.js +58 -0
  64. package/src/commands/init.js +55 -0
  65. package/src/commands/legacy-args.js +30 -0
  66. package/src/commands/mcp.js +404 -0
  67. package/src/commands/omargate.js +21 -0
  68. package/src/commands/persona.js +27 -0
  69. package/src/commands/plugin.js +260 -0
  70. package/src/commands/policy.js +132 -0
  71. package/src/commands/prompt.js +238 -0
  72. package/src/commands/review.js +704 -0
  73. package/src/commands/scan.js +788 -0
  74. package/src/commands/spec.js +716 -0
  75. package/src/commands/swarm.js +651 -0
  76. package/src/commands/telemetry.js +202 -0
  77. package/src/commands/watch.js +510 -0
  78. package/src/config/agent-dictionary.js +182 -0
  79. package/src/config/io.js +56 -0
  80. package/src/config/paths.js +18 -0
  81. package/src/config/schema.js +55 -0
  82. package/src/config/service.js +184 -0
  83. package/src/cost/budget.js +235 -0
  84. package/src/cost/history.js +188 -0
  85. package/src/cost/tracker.js +171 -0
  86. package/src/daemon/artifact-lineage.js +534 -0
  87. package/src/daemon/assignment-ledger.js +770 -0
  88. package/src/daemon/ast-parser-layer.js +258 -0
  89. package/src/daemon/budget-governor.js +633 -0
  90. package/src/daemon/callgraph-overlay.js +646 -0
  91. package/src/daemon/error-worker.js +626 -0
  92. package/src/daemon/hybrid-mapper.js +929 -0
  93. package/src/daemon/jira-lifecycle.js +632 -0
  94. package/src/daemon/operator-control.js +657 -0
  95. package/src/daemon/reliability-lane.js +471 -0
  96. package/src/daemon/watchdog.js +971 -0
  97. package/src/guide/generator.js +316 -0
  98. package/src/ingest/engine.js +918 -0
  99. package/src/legacy-cli.js +2435 -0
  100. package/src/mcp/registry.js +695 -0
  101. package/src/memory/blackboard.js +301 -0
  102. package/src/memory/retrieval.js +581 -0
  103. package/src/plugin/manifest.js +553 -0
  104. package/src/policy/packs.js +144 -0
  105. package/src/prompt/generator.js +106 -0
  106. package/src/review/ai-review.js +669 -0
  107. package/src/review/local-review.js +1284 -0
  108. package/src/review/replay.js +235 -0
  109. package/src/review/report.js +664 -0
  110. package/src/review/spec-binding.js +487 -0
  111. package/src/scan/generator.js +351 -0
  112. package/src/spec/generator.js +519 -0
  113. package/src/spec/regenerate.js +237 -0
  114. package/src/spec/templates.js +91 -0
  115. package/src/swarm/dashboard.js +247 -0
  116. package/src/swarm/factory.js +363 -0
  117. package/src/swarm/pentest.js +934 -0
  118. package/src/swarm/registry.js +419 -0
  119. package/src/swarm/report.js +158 -0
  120. package/src/swarm/runtime.js +576 -0
  121. package/src/swarm/scenario-dsl.js +272 -0
  122. package/src/telemetry/ledger.js +302 -0
  123. package/src/ui/markdown.js +220 -0
  124. package/src/ui/progress.js +100 -0
@@ -0,0 +1,182 @@
1
+ const SUPPORTED_CODING_AGENT_TABLE = Object.freeze({
2
+ "claude-code": Object.freeze({
3
+ name: "Claude Code",
4
+ promptTarget: "claude",
5
+ configFile: "CLAUDE.md",
6
+ configDir: ".claude/",
7
+ }),
8
+ cursor: Object.freeze({
9
+ name: "Cursor",
10
+ promptTarget: "cursor",
11
+ configFile: ".cursorrules",
12
+ configDir: ".cursor/",
13
+ }),
14
+ copilot: Object.freeze({
15
+ name: "GitHub Copilot",
16
+ promptTarget: "copilot",
17
+ configFile: ".github/copilot-instructions.md",
18
+ configDir: ".github/",
19
+ }),
20
+ windsurf: Object.freeze({
21
+ name: "Windsurf",
22
+ promptTarget: "generic",
23
+ configFile: ".windsurfrules",
24
+ configDir: null,
25
+ }),
26
+ cody: Object.freeze({
27
+ name: "Sourcegraph Cody",
28
+ promptTarget: "generic",
29
+ configFile: ".cody/cody.json",
30
+ configDir: ".cody/",
31
+ }),
32
+ aider: Object.freeze({
33
+ name: "Aider",
34
+ promptTarget: "generic",
35
+ configFile: ".aider.conf.yml",
36
+ configDir: null,
37
+ }),
38
+ continue: Object.freeze({
39
+ name: "Continue",
40
+ promptTarget: "generic",
41
+ configFile: ".continue/config.json",
42
+ configDir: ".continue/",
43
+ }),
44
+ codex: Object.freeze({
45
+ name: "OpenAI Codex",
46
+ promptTarget: "codex",
47
+ configFile: "AGENTS.md",
48
+ configDir: null,
49
+ }),
50
+ bolt: Object.freeze({
51
+ name: "Bolt.new",
52
+ promptTarget: "generic",
53
+ configFile: null,
54
+ configDir: null,
55
+ }),
56
+ generic: Object.freeze({
57
+ name: "Other",
58
+ promptTarget: "generic",
59
+ configFile: null,
60
+ configDir: null,
61
+ }),
62
+ });
63
+
64
+ const SUPPORTED_IDE_TABLE = Object.freeze({
65
+ vscode: Object.freeze({
66
+ name: "VS Code",
67
+ detect: (env) =>
68
+ String(env.TERM_PROGRAM || "").toLowerCase().includes("vscode") &&
69
+ !String(env.CURSOR_TRACE_ID || "").trim(),
70
+ }),
71
+ cursor: Object.freeze({
72
+ name: "Cursor",
73
+ detect: (env) => Boolean(String(env.CURSOR_TRACE_ID || "").trim()),
74
+ }),
75
+ jetbrains: Object.freeze({
76
+ name: "JetBrains",
77
+ detect: (env) => Boolean(String(env.JETBRAINS_IDE || "").trim()),
78
+ }),
79
+ neovim: Object.freeze({
80
+ name: "Neovim",
81
+ detect: (env) => Boolean(String(env.NVIM || "").trim()),
82
+ }),
83
+ zed: Object.freeze({
84
+ name: "Zed",
85
+ detect: (env) => String(env.TERM_PROGRAM || "").trim().toLowerCase() === "zed",
86
+ }),
87
+ sublime: Object.freeze({
88
+ name: "Sublime Text",
89
+ detect: (env) => Boolean(String(env.SUBLIME_TEXT || "").trim()),
90
+ }),
91
+ vim: Object.freeze({
92
+ name: "Vim",
93
+ detect: (env) => Boolean(String(env.VIM || "").trim()),
94
+ }),
95
+ emacs: Object.freeze({
96
+ name: "Emacs",
97
+ detect: (env) => Boolean(String(env.INSIDE_EMACS || "").trim()),
98
+ }),
99
+ terminal: Object.freeze({
100
+ name: "Terminal",
101
+ detect: () => true,
102
+ }),
103
+ });
104
+
105
+ const IDE_DETECTION_ORDER = Object.freeze([
106
+ "cursor",
107
+ "vscode",
108
+ "jetbrains",
109
+ "neovim",
110
+ "zed",
111
+ "sublime",
112
+ "vim",
113
+ "emacs",
114
+ "terminal",
115
+ ]);
116
+
117
+ export const DEFAULT_CODING_AGENT_ID = "generic";
118
+ export const DEFAULT_IDE_ID = "terminal";
119
+
120
+ export const SUPPORTED_CODING_AGENTS = SUPPORTED_CODING_AGENT_TABLE;
121
+ export const SUPPORTED_IDES = SUPPORTED_IDE_TABLE;
122
+
123
+ function normalizeKey(value) {
124
+ return String(value || "")
125
+ .trim()
126
+ .toLowerCase();
127
+ }
128
+
129
+ export function listSupportedCodingAgents() {
130
+ return Object.entries(SUPPORTED_CODING_AGENT_TABLE).map(([id, record]) => ({
131
+ id,
132
+ ...record,
133
+ }));
134
+ }
135
+
136
+ export function resolveCodingAgent(agentId = DEFAULT_CODING_AGENT_ID) {
137
+ const normalized = normalizeKey(agentId) || DEFAULT_CODING_AGENT_ID;
138
+ const record = SUPPORTED_CODING_AGENT_TABLE[normalized];
139
+ if (!record) {
140
+ throw new Error(
141
+ `Unsupported coding agent '${agentId}'. Use one of: ${Object.keys(SUPPORTED_CODING_AGENT_TABLE).join(", ")}`
142
+ );
143
+ }
144
+ return {
145
+ id: normalized,
146
+ ...record,
147
+ };
148
+ }
149
+
150
+ export function detectCodingAgentFromEnv(env = process.env) {
151
+ const explicit = normalizeKey(env.SENTINELAYER_CODING_AGENT || env.CODING_AGENT || "");
152
+ if (explicit && Object.prototype.hasOwnProperty.call(SUPPORTED_CODING_AGENT_TABLE, explicit)) {
153
+ return resolveCodingAgent(explicit);
154
+ }
155
+ if (String(env.CURSOR_TRACE_ID || "").trim()) {
156
+ return resolveCodingAgent("cursor");
157
+ }
158
+ return resolveCodingAgent(DEFAULT_CODING_AGENT_ID);
159
+ }
160
+
161
+ export function listSupportedIdes() {
162
+ return Object.entries(SUPPORTED_IDE_TABLE).map(([id, record]) => ({
163
+ id,
164
+ name: record.name,
165
+ }));
166
+ }
167
+
168
+ export function detectIdeFromEnv(env = process.env) {
169
+ for (const id of IDE_DETECTION_ORDER) {
170
+ const entry = SUPPORTED_IDE_TABLE[id];
171
+ if (entry && typeof entry.detect === "function" && entry.detect(env)) {
172
+ return {
173
+ id,
174
+ name: entry.name,
175
+ };
176
+ }
177
+ }
178
+ return {
179
+ id: DEFAULT_IDE_ID,
180
+ name: SUPPORTED_IDE_TABLE[DEFAULT_IDE_ID].name,
181
+ };
182
+ }
@@ -0,0 +1,56 @@
1
+ import fsp from "node:fs/promises";
2
+ import path from "node:path";
3
+
4
+ import { parse, stringify } from "yaml";
5
+
6
+ import { configSchema } from "./schema.js";
7
+
8
+ function parseConfigObject(raw, filePath) {
9
+ const parsed = parse(raw);
10
+ if (parsed === null || parsed === undefined) {
11
+ return {};
12
+ }
13
+ if (typeof parsed !== "object" || Array.isArray(parsed)) {
14
+ throw new Error(`Config at ${filePath} must be a YAML mapping/object.`);
15
+ }
16
+
17
+ const normalized = configSchema.safeParse(parsed);
18
+ if (!normalized.success) {
19
+ throw new Error(`Invalid config at ${filePath}: ${normalized.error.issues[0]?.message || "schema error"}`);
20
+ }
21
+
22
+ return normalized.data;
23
+ }
24
+
25
+ export async function readConfigFile(filePath) {
26
+ try {
27
+ const raw = await fsp.readFile(filePath, "utf-8");
28
+ if (!String(raw || "").trim()) {
29
+ return {};
30
+ }
31
+ return parseConfigObject(raw, filePath);
32
+ } catch (error) {
33
+ if (error && error.code === "ENOENT") {
34
+ return {};
35
+ }
36
+ throw error;
37
+ }
38
+ }
39
+
40
+ export async function writeConfigFile(filePath, data) {
41
+ const normalized = configSchema.parse(data || {});
42
+ await fsp.mkdir(path.dirname(filePath), { recursive: true });
43
+ await fsp.writeFile(filePath, stringify(normalized), "utf-8");
44
+ }
45
+
46
+ export async function ensureConfigFile(filePath) {
47
+ try {
48
+ await fsp.access(filePath);
49
+ } catch (error) {
50
+ if (error && error.code === "ENOENT") {
51
+ await writeConfigFile(filePath, {});
52
+ return;
53
+ }
54
+ throw error;
55
+ }
56
+ }
@@ -0,0 +1,18 @@
1
+ import os from "node:os";
2
+ import path from "node:path";
3
+ import process from "node:process";
4
+
5
+ export function getGlobalConfigPath({ homeDir = os.homedir() } = {}) {
6
+ return path.join(homeDir, ".sentinelayer", "config.yml");
7
+ }
8
+
9
+ export function getProjectConfigPath({ cwd = process.cwd() } = {}) {
10
+ return path.join(path.resolve(cwd), ".sentinelayer.yml");
11
+ }
12
+
13
+ export function getConfigPaths({ cwd = process.cwd(), homeDir } = {}) {
14
+ return {
15
+ global: getGlobalConfigPath({ homeDir }),
16
+ project: getProjectConfigPath({ cwd }),
17
+ };
18
+ }
@@ -0,0 +1,55 @@
1
+ import { z } from "zod";
2
+
3
+ function emptyToUndefined(value) {
4
+ if (value === null || value === undefined) {
5
+ return undefined;
6
+ }
7
+ const normalized = String(value).trim();
8
+ return normalized ? normalized : undefined;
9
+ }
10
+
11
+ const optionalTrimmedString = z.preprocess(emptyToUndefined, z.string().min(1)).optional();
12
+ const optionalUrl = z.preprocess(emptyToUndefined, z.string().url()).optional();
13
+ const optionalStringArray = z
14
+ .array(z.preprocess(emptyToUndefined, z.string().min(1)))
15
+ .optional();
16
+
17
+ const alertsChannelSchema = z
18
+ .object({
19
+ type: optionalTrimmedString,
20
+ webhook_url: optionalTrimmedString,
21
+ webhookUrl: optionalTrimmedString,
22
+ url: optionalTrimmedString,
23
+ bot_token: optionalTrimmedString,
24
+ botToken: optionalTrimmedString,
25
+ chat_id: optionalTrimmedString,
26
+ chatId: optionalTrimmedString,
27
+ })
28
+ .passthrough();
29
+
30
+ const alertsConfigSchema = z
31
+ .object({
32
+ channels: z.array(alertsChannelSchema).optional(),
33
+ frequency: optionalTrimmedString,
34
+ events: optionalStringArray,
35
+ })
36
+ .passthrough()
37
+ .optional();
38
+
39
+ export const configSchema = z
40
+ .object({
41
+ apiUrl: optionalUrl,
42
+ webUrl: optionalUrl,
43
+ outputDir: optionalTrimmedString,
44
+ defaultPolicyPack: optionalTrimmedString,
45
+ defaultModelProvider: z.enum(["openai", "anthropic", "google"]).optional(),
46
+ defaultModelId: optionalTrimmedString,
47
+ sentinelayerToken: optionalTrimmedString,
48
+ openaiApiKey: optionalTrimmedString,
49
+ anthropicApiKey: optionalTrimmedString,
50
+ googleApiKey: optionalTrimmedString,
51
+ alerts: alertsConfigSchema,
52
+ })
53
+ .strict();
54
+
55
+ export const CONFIG_KEYS = Object.freeze(Object.keys(configSchema.shape));
@@ -0,0 +1,184 @@
1
+ import process from "node:process";
2
+ import path from "node:path";
3
+
4
+ import { getConfigPaths } from "./paths.js";
5
+ import { ensureConfigFile, readConfigFile, writeConfigFile } from "./io.js";
6
+ import { CONFIG_KEYS, configSchema } from "./schema.js";
7
+
8
+ const ENV_MAPPING = Object.freeze({
9
+ SENTINELAYER_API_URL: "apiUrl",
10
+ SENTINELAYER_WEB_URL: "webUrl",
11
+ SENTINELAYER_TOKEN: "sentinelayerToken",
12
+ SENTINELAYER_POLICY_PACK: "defaultPolicyPack",
13
+ OPENAI_API_KEY: "openaiApiKey",
14
+ ANTHROPIC_API_KEY: "anthropicApiKey",
15
+ GOOGLE_API_KEY: "googleApiKey",
16
+ });
17
+
18
+ const WRITABLE_SCOPES = new Set(["global", "project"]);
19
+ const LAYER_SCOPES = new Set(["global", "project", "env", "resolved"]);
20
+
21
+ function normalizeKey(key) {
22
+ const normalized = String(key || "").trim();
23
+ if (!CONFIG_KEYS.includes(normalized)) {
24
+ throw new Error(`Unknown config key '${normalized}'. Allowed keys: ${CONFIG_KEYS.join(", ")}`);
25
+ }
26
+ return normalized;
27
+ }
28
+
29
+ function normalizeValueForKey(key, value) {
30
+ const payload = { [key]: value };
31
+ const parsed = configSchema.partial().parse(payload);
32
+ return parsed[key];
33
+ }
34
+
35
+ function buildEnvLayer(env) {
36
+ const layer = {};
37
+ for (const [envVar, key] of Object.entries(ENV_MAPPING)) {
38
+ if (envVar in env) {
39
+ const value = normalizeValueForKey(key, env[envVar]);
40
+ if (value !== undefined) {
41
+ layer[key] = value;
42
+ }
43
+ }
44
+ }
45
+ return layer;
46
+ }
47
+
48
+ function mergeLayers(...layers) {
49
+ return layers.reduce((accumulator, layer) => {
50
+ for (const [key, value] of Object.entries(layer || {})) {
51
+ if (value !== undefined) {
52
+ accumulator[key] = value;
53
+ }
54
+ }
55
+ return accumulator;
56
+ }, {});
57
+ }
58
+
59
+ function normalizeLayerScope(scope, { allowResolved = true } = {}) {
60
+ const normalized = String(scope || "resolved").trim();
61
+ if (!allowResolved && normalized === "resolved") {
62
+ throw new Error("Resolved scope is read-only. Use global or project.");
63
+ }
64
+ if (!LAYER_SCOPES.has(normalized)) {
65
+ throw new Error(`Invalid scope '${normalized}'. Use global, project, env, or resolved.`);
66
+ }
67
+ return normalized;
68
+ }
69
+
70
+ export async function loadConfig({ cwd = process.cwd(), env = process.env, homeDir } = {}) {
71
+ const paths = getConfigPaths({ cwd, homeDir });
72
+ const [globalConfig, projectConfig] = await Promise.all([
73
+ readConfigFile(paths.global),
74
+ readConfigFile(paths.project),
75
+ ]);
76
+
77
+ const envConfig = buildEnvLayer(env);
78
+ const resolved = configSchema.parse(mergeLayers(globalConfig, projectConfig, envConfig));
79
+
80
+ return {
81
+ paths,
82
+ layers: {
83
+ global: globalConfig,
84
+ project: projectConfig,
85
+ env: envConfig,
86
+ },
87
+ resolved,
88
+ };
89
+ }
90
+
91
+ export function getLayer(config, scope) {
92
+ const normalized = normalizeLayerScope(scope);
93
+ if (normalized === "resolved") {
94
+ return config.resolved;
95
+ }
96
+ return config.layers[normalized] || {};
97
+ }
98
+
99
+ export function findConfigSource(config, key) {
100
+ const normalizedKey = normalizeKey(key);
101
+ if (Object.prototype.hasOwnProperty.call(config.layers.env, normalizedKey)) {
102
+ return "env";
103
+ }
104
+ if (Object.prototype.hasOwnProperty.call(config.layers.project, normalizedKey)) {
105
+ return "project";
106
+ }
107
+ if (Object.prototype.hasOwnProperty.call(config.layers.global, normalizedKey)) {
108
+ return "global";
109
+ }
110
+ return null;
111
+ }
112
+
113
+ export async function setConfigValue({
114
+ key,
115
+ value,
116
+ scope = "project",
117
+ cwd = process.cwd(),
118
+ homeDir,
119
+ } = {}) {
120
+ const normalizedScope = normalizeLayerScope(scope, { allowResolved: false });
121
+ if (!WRITABLE_SCOPES.has(normalizedScope)) {
122
+ throw new Error(`Cannot write scope '${normalizedScope}'. Use global or project.`);
123
+ }
124
+
125
+ const normalizedKey = normalizeKey(key);
126
+ const normalizedValue = normalizeValueForKey(normalizedKey, value);
127
+
128
+ const paths = getConfigPaths({ cwd, homeDir });
129
+ const targetPath = paths[normalizedScope];
130
+ const current = await readConfigFile(targetPath);
131
+ const next = {
132
+ ...current,
133
+ [normalizedKey]: normalizedValue,
134
+ };
135
+
136
+ await writeConfigFile(targetPath, next);
137
+
138
+ return {
139
+ scope: normalizedScope,
140
+ path: targetPath,
141
+ key: normalizedKey,
142
+ value: normalizedValue,
143
+ };
144
+ }
145
+
146
+ export async function ensureEditableConfigPath({ scope = "project", cwd = process.cwd(), homeDir } = {}) {
147
+ const normalizedScope = normalizeLayerScope(scope, { allowResolved: false });
148
+ if (!WRITABLE_SCOPES.has(normalizedScope)) {
149
+ throw new Error(`Cannot edit scope '${normalizedScope}'. Use global or project.`);
150
+ }
151
+
152
+ const paths = getConfigPaths({ cwd, homeDir });
153
+ const targetPath = paths[normalizedScope];
154
+ await ensureConfigFile(targetPath);
155
+
156
+ return {
157
+ scope: normalizedScope,
158
+ path: targetPath,
159
+ };
160
+ }
161
+
162
+ export function listConfigKeys() {
163
+ return [...CONFIG_KEYS];
164
+ }
165
+
166
+ export async function resolveOutputRoot({
167
+ cwd = process.cwd(),
168
+ outputDirOverride = "",
169
+ env = process.env,
170
+ homeDir,
171
+ } = {}) {
172
+ const overrideValue = String(outputDirOverride || "").trim();
173
+ if (overrideValue) {
174
+ return path.resolve(cwd, overrideValue);
175
+ }
176
+
177
+ const config = await loadConfig({ cwd, env, homeDir });
178
+ const configuredOutputDir = String(config.resolved.outputDir || "").trim();
179
+ if (configuredOutputDir) {
180
+ return path.resolve(cwd, configuredOutputDir);
181
+ }
182
+
183
+ return path.resolve(cwd, ".sentinelayer");
184
+ }