spidersan 0.20.1 → 0.20.2

package/dist/lib/carries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"carries.js","sourceRoot":"","sources":["../../src/lib/carries.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAmB7C;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAa,EAAE,eAAyB,EAAE;IACnF,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACD,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,mBAAmB,EAAE,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACxG,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACnC,MAAM,GAAG,GAAoB,EAAE,CAAC;IAChC,MAAM,SAAS,GAAsB,EAAE,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACjD,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEpD,IAAI,QAAQ,GAAa,EAAE,CAAC;QAC5B,IAAI,CAAC;YACD,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;iBACrF,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;iBAC7C,MAAM,CAAC,OAAO,CAAC;iBACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,kDAAkD;iBACrF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACL,oEAAoE;QACxE,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;;YAC/D,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;AAC7D,CAAC"}

package/dist/lib/colony-subscriber.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Colony Subscriber — reads Colony in-progress signals
+ * and keeps the local Spidersan branch registry in sync.
+ *
+ * Design notes:
+ * - Queries the `colony_state` VIEW (not raw `colony_signals`) so that
+ *   `is_stale` is already computed server-side.
+ * - Credentials come from COLONY_SUPABASE_URL + COLONY_SUPABASE_KEY env vars
+ *   (the MycToak Supabase project, separate from Spidersan's own project).
+ *   If env vars are absent, falls back to ~/.envoak/config.json + session files
+ *   automatically (so `envoak vault login` is sufficient — no env vars needed).
+ * - Auth: COLONY_SESSION_JWT is required for RLS-scoped access to colony_state.
+ *   Without it the query falls back to the anon key and will return 0 rows (RLS
+ *   blocks unauthenticated reads of user-scoped signals).
+ * - Queries colony_state with status=in-progress — the status-based model
+ *   replaces the old type=work_claim / type=work_release approach.
+ * - Full offline fallback: any network/auth error returns offline=true and
+ *   the caller falls back to the local registry.  Never throws.
+ * - Field mapping: task (branch name), files (top-level column), agent_label
+ *   (top-level from colony_state view — no payload parsing needed).
+ *
+ * 🍄 hey treesan — the mycelium remembers. migration 025 opened the gradient.
+ *    your spiders can smell the pheromones now. — mycsan
+ */
+export interface ConflictReport {
+    branch: string;
+    conflictsWith: string;
+    files: string[];
+    agent?: string;
+}
+export interface SyncResult {
+    conflicts: ConflictReport[];
+    synced: number;
+    offline: boolean;
+}
+/**
+ * Resolve a human-readable agent name from a Colony agent key ID.
+ *
+ * Uses the `agent_label` field already present on `colony_state` rows.
+ * Falls back to a truncated UUID when no label is available.
+ */
+export declare function resolveAgentName(agentKeyId: string, agentLabel?: string): string;
+/**
+ * Sync the local Spidersan branch registry from Colony signals.
+ *
+ * Steps:
+ *  1. Query `colony_state` VIEW for in-progress signals (one per agent, deduped).
+ *  2. Upsert each active branch into the local registry.
+ *  3. Sweep: remove local active branches absent from the colony in-progress set.
+ *  4. Detect conflicts in the updated registry and return them.
+ *
+ * Returns `offline: true` and an empty conflicts list on any error so callers
+ * can display a warning and continue with existing local data.
+ */
+export declare function syncFromColony(): Promise<SyncResult>;
+//# sourceMappingURL=colony-subscriber.d.ts.map

package/dist/lib/colony-subscriber.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"colony-subscriber.d.ts","sourceRoot":"","sources":["../../src/lib/colony-subscriber.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,MAAM,WAAW,cAAc;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,UAAU;IACvB,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;CACpB;AAmBD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAIhF;AAiHD;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,CAwI1D"}

package/dist/lib/colony-subscriber.js

@@ -0,0 +1,265 @@
+/**
+ * Colony Subscriber — reads Colony in-progress signals
+ * and keeps the local Spidersan branch registry in sync.
+ *
+ * Design notes:
+ * - Queries the `colony_state` VIEW (not raw `colony_signals`) so that
+ *   `is_stale` is already computed server-side.
+ * - Credentials come from COLONY_SUPABASE_URL + COLONY_SUPABASE_KEY env vars
+ *   (the MycToak Supabase project, separate from Spidersan's own project).
+ *   If env vars are absent, falls back to ~/.envoak/config.json + session files
+ *   automatically (so `envoak vault login` is sufficient — no env vars needed).
+ * - Auth: COLONY_SESSION_JWT is required for RLS-scoped access to colony_state.
+ *   Without it the query falls back to the anon key and will return 0 rows (RLS
+ *   blocks unauthenticated reads of user-scoped signals).
+ * - Queries colony_state with status=in-progress — the status-based model
+ *   replaces the old type=work_claim / type=work_release approach.
+ * - Full offline fallback: any network/auth error returns offline=true and
+ *   the caller falls back to the local registry.  Never throws.
+ * - Field mapping: task (branch name), files (top-level column), agent_label
+ *   (top-level from colony_state view — no payload parsing needed).
+ *
+ * 🍄 hey treesan — the mycelium remembers. migration 025 opened the gradient.
+ *    your spiders can smell the pheromones now. — mycsan
+ */
+import { getStorage } from '../storage/index.js';
+import { readFileSync, existsSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+// ─── Agent name resolution ────────────────────────────────────────────────────
+/**
+ * Resolve a human-readable agent name from a Colony agent key ID.
+ *
+ * Uses the `agent_label` field already present on `colony_state` rows.
+ * Falls back to a truncated UUID when no label is available.
+ */
+export function resolveAgentName(agentKeyId, agentLabel) {
+    if (agentLabel)
+        return agentLabel;
+    if (!agentKeyId)
+        return 'unknown-agent';
+    return `agent:${agentKeyId.slice(0, 8)}`;
+}
+// ─── Supabase REST helpers ────────────────────────────────────────────────────
+// ─── Envoak filesystem fallback ───────────────────────────────────────────────
+/** Read a JSON file safely; returns null on any error (missing, malformed, mid-write). */
+function readJsonSafe(filePath) {
+    try {
+        if (!existsSync(filePath))
+            return null;
+        return JSON.parse(readFileSync(filePath, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve colony credentials from envoak's local session files.
+ *
+ * Resolution order:
+ *   1. ~/.envoak/sessions/current.json → clientSessionId
+ *   2. ~/.envoak/sessions/<id>.json    → accessToken + expiresAt
+ *   3. Fallback: ~/.envoak/session.json (legacy single-session file)
+ *
+ * JWT is only used if not expired (or within 60s of expiry).
+ */
+function resolveEnvoakCredentials() {
+    const envoakDir = join(homedir(), '.envoak');
+    const config = readJsonSafe(join(envoakDir, 'config.json'));
+    if (!config?.url || !config?.anonKey)
+        return null;
+    const nowMs = Date.now();
+    const EXPIRY_BUFFER_MS = 60_000; // reject tokens within 60s of expiry
+    function extractJwt(sessionData) {
+        if (!sessionData?.accessToken)
+            return null;
+        const exp = sessionData.expiresAt ?? 0;
+        if (exp && exp - nowMs < EXPIRY_BUFFER_MS) {
+            if (process.env.DEBUG_COLONY) {
+                console.warn('  [colony] envoak session JWT is expired or expiring soon — treating as offline');
+            }
+            return null;
+        }
+        return sessionData.accessToken;
+    }
+    // Try new per-session file via current.json pointer
+    const current = readJsonSafe(join(envoakDir, 'sessions', 'current.json'));
+    if (current?.clientSessionId) {
+        const sessFile = join(envoakDir, 'sessions', `${current.clientSessionId}.json`);
+        const jwt = extractJwt(readJsonSafe(sessFile));
+        if (process.env.DEBUG_COLONY) {
+            console.warn(`  [colony] envoak fallback: using sessions/${current.clientSessionId}.json (jwt=${jwt ? 'ok' : 'missing/expired'})`);
+        }
+        return { url: config.url, anonKey: config.anonKey, sessionJwt: jwt };
+    }
+    // Legacy single session.json
+    const jwt = extractJwt(readJsonSafe(join(envoakDir, 'session.json')));
+    if (process.env.DEBUG_COLONY) {
+        console.warn(`  [colony] envoak fallback: using legacy session.json (jwt=${jwt ? 'ok' : 'missing/expired'})`);
+    }
+    return { url: config.url, anonKey: config.anonKey, sessionJwt: jwt };
+}
+function getColonyCredentials() {
+    const url = process.env.COLONY_SUPABASE_URL || process.env.SUPABASE_URL;
+    const anonKey = process.env.COLONY_SUPABASE_KEY || process.env.SUPABASE_KEY;
+    // Session JWT is required for RLS — without it colony_state returns 0 rows
+    const sessionJwt = process.env.COLONY_SESSION_JWT || null;
+    if (url && anonKey)
+        return { url, anonKey, sessionJwt };
+    // Fall back to envoak's local session files when env vars aren't set
+    return resolveEnvoakCredentials();
+}
+async function fetchColonySignals(url, anonKey, sessionJwt, query) {
+    const endpoint = `${url}/rest/v1/${query}`;
+    // Use session JWT for Authorization when available — anon key alone is blocked by RLS
+    const authToken = sessionJwt ?? anonKey;
+    const response = await fetch(endpoint, {
+        headers: {
+            apikey: anonKey,
+            Authorization: `Bearer ${authToken}`,
+            'Content-Type': 'application/json',
+        },
+    });
+    if (!response.ok) {
+        const text = await response.text();
+        throw new Error(`Colony query failed (${response.status}): ${text}`);
+    }
+    return (await response.json());
+}
+function isStale(row) {
+    // Prefer the view-computed flag when present
+    if (row.is_stale !== undefined)
+        return !!row.is_stale;
+    if (!row.stale_after_ms)
+        return false;
+    const age = Date.now() - new Date(row.updated_at).getTime();
+    return age > row.stale_after_ms;
+}
+// ─── Core sync logic ──────────────────────────────────────────────────────────
+/**
+ * Sync the local Spidersan branch registry from Colony signals.
+ *
+ * Steps:
+ *  1. Query `colony_state` VIEW for in-progress signals (one per agent, deduped).
+ *  2. Upsert each active branch into the local registry.
+ *  3. Sweep: remove local active branches absent from the colony in-progress set.
+ *  4. Detect conflicts in the updated registry and return them.
+ *
+ * Returns `offline: true` and an empty conflicts list on any error so callers
+ * can display a warning and continue with existing local data.
+ */
+export async function syncFromColony() {
+    const creds = getColonyCredentials();
+    if (!creds) {
+        // Credentials not configured — treat as offline (not an error)
+        return { conflicts: [], synced: 0, offline: true };
+    }
+    if (!creds.sessionJwt) {
+        // Warn but continue — queries will silently return 0 rows without session auth
+        console.warn('⚠  COLONY_SESSION_JWT not set — colony_state RLS will block reads. Set COLONY_SESSION_JWT to enable colony sync.');
+    }
+    try {
+        const storage = await getStorage();
+        // ── 1. Fetch all in-progress signals from colony_state VIEW ──────────
+        //
+        // colony_state (not colony_signals) is the correct target:
+        //   - already deduped (one row per agent via colony_gc)
+        //   - is_stale computed server-side
+        //   - agent_label, task, files are top-level columns (no payload parsing)
+        //   - requires session JWT for RLS — anon key returns 0 rows
+        //
+        // status=in-progress is the status-based replacement for type=work_claim.
+        const inProgressRows = await fetchColonySignals(creds.url, creds.anonKey, creds.sessionJwt, 'colony_state?status=eq.in-progress&select=*');
+        // Track branch names seen in the colony so we can sweep stale local entries
+        const colonyBranches = new Set();
+        let synced = 0;
+        // ── 2. Upsert claimed branches into local registry ────────────────────
+        for (const row of inProgressRows) {
+            if (isStale(row))
+                continue;
+            // Branch name: top-level task column (set by register_branch signal emitter)
+            // Fallback to payload.branch for backwards-compat with older signal emitters
+            const rawPayload = row.payload
+                ? (typeof row.payload === 'string' ? JSON.parse(row.payload) : row.payload)
+                : null;
+            const branch = row.task || rawPayload?.branch;
+            if (!branch)
+                continue;
+            colonyBranches.add(branch);
+            // Files: top-level column (no longer inside payload)
+            const files = Array.isArray(row.files) ? row.files : [];
+            // Agent name: top-level agent_label (visible with session JWT)
+            const agentName = resolveAgentName(row.agent_key_id ?? '', row.agent_label ?? rawPayload?.agent);
+            const existing = await storage.get(branch);
+            if (existing) {
+                const merged = [...new Set([...existing.files, ...files])];
+                const updatedAgent = (existing.agent?.startsWith('agent:') && agentName && !agentName.startsWith('agent:'))
+                    ? agentName
+                    : existing.agent;
+                await storage.update(branch, { files: merged, agent: updatedAgent, status: 'active' });
+            }
+            else {
+                await storage.register({
+                    name: branch,
+                    files,
+                    agent: agentName,
+                    status: 'active',
+                    description: `Colony claim by ${agentName}`,
+                });
+            }
+            synced++;
+        }
+        // ── 3. Sweep released branches ────────────────────────────────────────
+        //
+        // Only sweep branches that were synced FROM colony (have a colony-sourced
+        // agent description). Manually-registered local branches are left alone.
+        const allBranches = await storage.list();
+        for (const localBranch of allBranches) {
+            const isColonySourced = localBranch.description?.startsWith('Colony claim by') ||
+                localBranch.agent?.startsWith('agent:');
+            if (localBranch.status === 'active' && !colonyBranches.has(localBranch.name) && isColonySourced) {
+                await storage.unregister(localBranch.name);
+            }
+        }
+        // ── 4. Detect conflicts in the updated registry ───────────────────────
+        const postSweepBranches = await storage.list();
+        const activeBranches = postSweepBranches.filter(b => b.status === 'active');
+        const conflicts = [];
+        // Performance Optimization: Pre-compute sets to avoid O(N^2) memory allocations
+        const branchFileSets = activeBranches.map(b => new Set(b.files));
+        for (let i = 0; i < activeBranches.length; i++) {
+            const a = activeBranches[i];
+            const aFiles = branchFileSets[i];
+            for (let j = i + 1; j < activeBranches.length; j++) {
+                const b = activeBranches[j];
+                // Prioritize standard loop over .filter for short-circuit and less allocations
+                const overlapping = [];
+                for (let k = 0; k < b.files.length; k++) {
+                    const f = b.files[k];
+                    if (aFiles.has(f)) {
+                        overlapping.push(f);
+                    }
+                }
+                if (overlapping.length > 0) {
+                    conflicts.push({
+                        branch: a.name,
+                        conflictsWith: b.name,
+                        files: overlapping,
+                        agent: a.agent,
+                    });
+                }
+            }
+        }
+        return { conflicts, synced, offline: false };
+    }
+    catch (err) {
+        // Any network/auth/parse error → offline fallback
+        const message = err instanceof Error ? err.message : String(err);
+        console.warn(`⚠  Colony unreachable — conflict detection using local registry only (may be incomplete)`);
+        if (process.env.DEBUG_COLONY) {
+            console.warn(`   Colony error: ${message}`);
+        }
+        return { conflicts: [], synced: 0, offline: true };
+    }
+}
+//# sourceMappingURL=colony-subscriber.js.map

package/dist/lib/colony-subscriber.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"colony-subscriber.js","sourceRoot":"","sources":["../../src/lib/colony-subscriber.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAgC7B,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAAkB,EAAE,UAAmB;IACpE,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,CAAC,UAAU;QAAE,OAAO,eAAe,CAAC;IACxC,OAAO,SAAS,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED,iFAAiF;AAEjF,iFAAiF;AAEjF,0FAA0F;AAC1F,SAAS,YAAY,CAAI,QAAgB;IACrC,IAAI,CAAC;QACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAM,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,wBAAwB;IAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,YAAY,CAAqC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC;IAElD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,gBAAgB,GAAG,MAAM,CAAC,CAAC,qCAAqC;IAEtE,SAAS,UAAU,CAAC,WAAgE;QAChF,IAAI,CAAC,WAAW,EAAE,WAAW;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,SAAS,IAAI,CAAC,CAAC;QACvC,IAAI,GAAG,IAAI,GAAG,GAAG,KAAK,GAAG,gBAAgB,EAAE,CAAC;YACxC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;gBAC3B,OAAO,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;YACpG,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,WAAW,CAAC,WAAW,CAAC;IACnC,CAAC;IAED,oDAAoD;IACpD,MAAM,OAAO,GAAG,YAAY,CAA+B,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;IACxG,IAAI,OAAO,EAAE,eAAe,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,eAAe,OAAO,CAAC,CAAC;QAChF,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,8CAA8C,OAAO,CAAC,eAAe,cAAc,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC;QACvI,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IACzE,CAAC;IAED,6BAA6B;IAC7B,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,8DAA8D,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,GAAG,CAAC,CAAC;IAClH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,oBAAoB;IACzB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAC5E,2EAA2E;IAC3E,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC;IAE1D,IAAI,GAAG,IAAI,OAAO;QAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAExD,qEAAqE;IACrE,OAAO,wBAAwB,EAAE,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC7B,GAAW,EACX,OAAe,EACf,UAAyB,EACzB,KAAa;IAEb,MAAM,QAAQ,GAAG,GAAG,GAAG,YAAY,KAAK,EAAE,CAAC;IAC3C,sFAAsF;IACtF,MAAM,SAAS,GAAG,UAAU,IAAI,OAAO,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QACnC,OAAO,EAAE;YACL,MAAM,EAAE,OAAO;YACf,aAAa,EAAE,UAAU,SAAS,EAAE;YACpC,cAAc,EAAE,kBAAkB;SACrC;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;AACxD,CAAC;AAED,SAAS,OAAO,CAAC,GAAoB;IACjC,6CAA6C;IAC7C,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;IACtD,IAAI,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5D,OAAO,GAAG,GAAG,GAAG,CAAC,cAAc,CAAC;AACpC,CAAC;AAED,iFAAiF;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAChC,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IACrC,IAAI,CAAC,KAAK,EAAE,CAAC;QACT,+DAA+D;QAC/D,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACpB,+EAA+E;QAC/E,OAAO,CAAC,IAAI,CAAC,kHAAkH,CAAC,CAAC;IACrI,CAAC;IAED,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;QAEnC,wEAAwE;QACxE,EAAE;QACF,2DAA2D;QAC3D,wDAAwD;QACxD,oCAAoC;QACpC,0EAA0E;QAC1E,6DAA6D;QAC7D,EAAE;QACF,0EAA0E;QAC1E,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAC3C,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,UAAU,EAChB,6CAA6C,CAChD,CAAC;QAEF,4EAA4E;QAC5E,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;QACzC,IAAI,MAAM,GAAG,CAAC,CAAC;QAEf,yEAAyE;QACzE,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;YAC/B,IAAI,OAAO,CAAC,GAAG,CAAC;gBAAE,SAAS;YAE3B,6EAA6E;YAC7E,6EAA6E;YAC7E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO;gBAC1B,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC3E,CAAC,CAAC,IAAI,CAAC;YACX,MAAM,MAAM,GAAuB,GAAG,CAAC,IAAI,IAAK,UAAyC,EAAE,MAAM,CAAC;YAClG,IAAI,CAAC,MAAM;gBAAE,SAAS;YAEtB,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAE3B,qDAAqD;YACrD,MAAM,KAAK,GAAa,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAElE,+DAA+D;YAC/D,MAAM,SAAS,GAAG,gBAAgB,CAC9B,GAAG,CAAC,YAAY,IAAI,EAAE,EACtB,GAAG,CAAC,WAAW,IAAK,UAAwC,EAAE,KAAK,CACtE,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,QAAQ,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC3D,MAAM,YAAY,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACvG,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACrB,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3F,CAAC;iBAAM,CAAC;gBACJ,MAAM,OAAO,CAAC,QAAQ,CAAC;oBACnB,IAAI,EAAE,MAAM;oBACZ,KAAK;oBACL,KAAK,EAAE,SAAS;oBAChB,MAAM,EAAE,QAAQ;oBAChB,WAAW,EAAE,mBAAmB,SAAS,EAAE;iBAC9C,CAAC,CAAC;YACP,CAAC;YACD,MAAM,EAAE,CAAC;QACb,CAAC;QAED,yEAAyE;QACzE,EAAE;QACF,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACzC,KAAK,MAAM,WAAW,IAAI,WAAW,EAAE,CAAC;YACpC,MAAM,eAAe,GAAG,WAAW,CAAC,WAAW,EAAE,UAAU,CAAC,iBAAiB,CAAC;gBACtD,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;YAChE,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,eAAe,EAAE,CAAC;gBAC9F,MAAM,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC;QACL,CAAC;QAED,yEAAyE;QACzE,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAqB,EAAE,CAAC;QAEvC,gFAAgF;QAChF,MAAM,cAAc,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAEjE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;YAEjC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACjD,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;gBAE5B,+EAA+E;gBAC/E,MAAM,WAAW,GAAa,EAAE,CAAC;gBACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACtC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;oBACrB,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBACxB,CAAC;gBACL,CAAC;gBAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzB,SAAS,CAAC,IAAI,CAAC;wBACX,MAAM,EAAE,CAAC,CAAC,IAAI;wBACd,aAAa,EAAE,CAAC,CAAC,IAAI;wBACrB,KAAK,EAAE,WAAW;wBAClB,KAAK,EAAE,CAAC,CAAC,KAAK;qBACjB,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;QACL,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAEjD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACpB,kDAAkD;QAClD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,IAAI,CAAC,0FAA0F,CAAC,CAAC;QACzG,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACvD,CAAC;AACL,CAAC"}

package/dist/lib/config.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Spidersan Configuration Loader
+ *
+ * Loads and validates .spidersanrc configuration file.
+ */
+export interface SpidersanConfig {
+    ecosystem: {
+        enabled: boolean;
+    };
+    agent: {
+        name?: string;
+    };
+    autoWatch: {
+        enabled: boolean;
+        paths: string[];
+        quiet: boolean;
+        legacy: boolean;
+    };
+    readyCheck: {
+        enableWipDetection: boolean;
+        wipPatterns: string[];
+        excludeFiles: string[];
+        enableExperimentalDetection: boolean;
+        experimentalPatterns: string[];
+        enableBuildCheck: boolean;
+    };
+    conflicts: {
+        highSeverityPatterns: string[];
+        mediumSeverityPatterns: string[];
+        /** Repo paths scanned by `conflicts --ecosystem` (see lib/ecosystem-env.ts). */
+        ecosystemRepos: string[];
+    };
+    storage: {
+        type: 'local' | 'supabase';
+        environment?: 'production' | 'staging' | 'local';
+        supabaseUrl?: string;
+        supabaseKey?: string;
+        supabaseUrlStaging?: string;
+        supabaseKeyStaging?: string;
+    };
+}
+export declare const CONFIG_FILES: string[];
+interface ValidationError {
+    path: string;
+    message: string;
+}
+export declare function getConfigPaths(basePath?: string, includeGlobal?: boolean): string[];
+export declare function loadConfigWithSources(basePath?: string, options?: {
+    includeGlobal?: boolean;
+}): Promise<{
+    config: SpidersanConfig;
+    sources: string[];
+    errors: ValidationError[];
+}>;
+export declare function loadConfig(basePath?: string): Promise<SpidersanConfig>;
+export declare function deepMerge(target: any, source: any): any;
+export declare function getWipPatterns(config: SpidersanConfig): RegExp[];
+export declare function getExcludePatterns(config: SpidersanConfig): string[];
+export declare function getHighSeverityPatterns(config: SpidersanConfig): RegExp[];
+export declare function getMediumSeverityPatterns(config: SpidersanConfig): RegExp[];
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,MAAM,WAAW,eAAe;IAC5B,SAAS,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;KACpB,CAAC;IACF,KAAK,EAAE;QACH,IAAI,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,SAAS,EAAE;QACP,OAAO,EAAE,OAAO,CAAC;QACjB,KAAK,EAAE,MAAM,EAAE,CAAC;QAChB,KAAK,EAAE,OAAO,CAAC;QACf,MAAM,EAAE,OAAO,CAAC;KACnB,CAAC;IACF,UAAU,EAAE;QACR,kBAAkB,EAAE,OAAO,CAAC;QAC5B,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,2BAA2B,EAAE,OAAO,CAAC;QACrC,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,gBAAgB,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF,SAAS,EAAE;QACP,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAC/B,sBAAsB,EAAE,MAAM,EAAE,CAAC;QACjC,gFAAgF;QAChF,cAAc,EAAE,MAAM,EAAE,CAAC;KAC5B,CAAC;IACF,OAAO,EAAE;QACL,IAAI,EAAE,OAAO,GAAG,UAAU,CAAC;QAC3B,WAAW,CAAC,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;QACjD,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;CACL;AAkCD,eAAO,MAAM,YAAY,UAAkE,CAAC;AAE5F,UAAU,eAAe;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACnB;AA4GD,wBAAgB,cAAc,CAAC,QAAQ,GAAE,MAAsB,EAAE,aAAa,GAAE,OAAc,GAAG,MAAM,EAAE,CAUxG;AAED,wBAAsB,qBAAqB,CACvC,QAAQ,GAAE,MAAsB,EAChC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1C,OAAO,CAAC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC,CA8BpF;AAED,wBAAsB,UAAU,CAAC,QAAQ,GAAE,MAAsB,GAAG,OAAO,CAAC,eAAe,CAAC,CAO3F;AAGD,wBAAgB,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,GAAG,CAmBvD;AAUD,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAIhE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAEpE;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAIzE;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,EAAE,CAI3E"}

package/dist/lib/config.js

@@ -0,0 +1,235 @@
+/**
+ * Spidersan Configuration Loader
+ *
+ * Loads and validates .spidersanrc configuration file.
+ */
+import { readFile } from 'fs/promises';
+import { existsSync } from 'fs';
+import { join } from 'path';
+import { homedir } from 'os';
+const DEFAULT_CONFIG = {
+    ecosystem: {
+        enabled: true,
+    },
+    agent: {
+        name: '',
+    },
+    autoWatch: {
+        enabled: false,
+        paths: [],
+        quiet: false,
+        legacy: false,
+    },
+    readyCheck: {
+        enableWipDetection: true,
+        wipPatterns: ['TODO', 'FIXME', 'WIP', 'HACK', 'XXX'],
+        excludeFiles: ['tests/**', '*.test.js', '*.test.ts', '**/*.md', '**/docs/**', '**/package-lock.json', '**/yarn.lock', '**/pnpm-lock.yaml'],
+        enableExperimentalDetection: false,
+        experimentalPatterns: ['experimental/', 'test-'],
+        enableBuildCheck: true,
+    },
+    conflicts: {
+        highSeverityPatterns: ['package\\.json$', 'migrations/', '\\.env', 'middleware\\.', 'route\\.ts$'],
+        mediumSeverityPatterns: ['components/ui/', 'lib/', 'hooks/', 'utils/'],
+        ecosystemRepos: [],
+    },
+    storage: {
+        type: 'local',
+        environment: 'production',
+    },
+};
+export const CONFIG_FILES = ['.spidersanrc', '.spidersanrc.json', '.spidersan.config.json'];
+function validateConfig(config) {
+    const errors = [];
+    if (typeof config !== 'object' || config === null) {
+        errors.push({ path: '', message: 'Config must be an object' });
+        return errors;
+    }
+    const obj = config;
+    // Validate ecosystem
+    if (obj.ecosystem !== undefined) {
+        if (typeof obj.ecosystem !== 'object' || obj.ecosystem === null) {
+            errors.push({ path: 'ecosystem', message: 'Must be an object' });
+        }
+        else {
+            const eco = obj.ecosystem;
+            if (eco.enabled !== undefined && typeof eco.enabled !== 'boolean') {
+                errors.push({ path: 'ecosystem.enabled', message: 'Must be a boolean' });
+            }
+        }
+    }
+    // Validate readyCheck
+    if (obj.readyCheck !== undefined) {
+        if (typeof obj.readyCheck !== 'object' || obj.readyCheck === null) {
+            errors.push({ path: 'readyCheck', message: 'Must be an object' });
+        }
+        else {
+            const rc = obj.readyCheck;
+            if (rc.wipPatterns !== undefined && !Array.isArray(rc.wipPatterns)) {
+                errors.push({ path: 'readyCheck.wipPatterns', message: 'Must be an array of strings' });
+            }
+            if (rc.excludeFiles !== undefined && !Array.isArray(rc.excludeFiles)) {
+                errors.push({ path: 'readyCheck.excludeFiles', message: 'Must be an array of strings' });
+            }
+            if (rc.enableWipDetection !== undefined && typeof rc.enableWipDetection !== 'boolean') {
+                errors.push({ path: 'readyCheck.enableWipDetection', message: 'Must be a boolean' });
+            }
+        }
+    }
+    // Validate conflicts.ecosystemRepos
+    if (obj.conflicts !== undefined && typeof obj.conflicts === 'object' && obj.conflicts !== null) {
+        const cf = obj.conflicts;
+        if (cf.ecosystemRepos !== undefined) {
+            if (!Array.isArray(cf.ecosystemRepos) || !cf.ecosystemRepos.every((p) => typeof p === 'string')) {
+                errors.push({ path: 'conflicts.ecosystemRepos', message: 'Must be an array of strings' });
+            }
+        }
+    }
+    // Validate agent
+    if (obj.agent !== undefined) {
+        if (typeof obj.agent !== 'object' || obj.agent === null) {
+            errors.push({ path: 'agent', message: 'Must be an object' });
+        }
+        else {
+            const agent = obj.agent;
+            if (agent.name !== undefined && typeof agent.name !== 'string') {
+                errors.push({ path: 'agent.name', message: 'Must be a string' });
+            }
+        }
+    }
+    // Validate autoWatch
+    if (obj.autoWatch !== undefined) {
+        if (typeof obj.autoWatch !== 'object' || obj.autoWatch === null) {
+            errors.push({ path: 'autoWatch', message: 'Must be an object' });
+        }
+        else {
+            const aw = obj.autoWatch;
+            if (aw.enabled !== undefined && typeof aw.enabled !== 'boolean') {
+                errors.push({ path: 'autoWatch.enabled', message: 'Must be a boolean' });
+            }
+            if (aw.paths !== undefined) {
+                if (!Array.isArray(aw.paths) || !aw.paths.every((p) => typeof p === 'string')) {
+                    errors.push({ path: 'autoWatch.paths', message: 'Must be an array of strings' });
+                }
+            }
+            // autoWatch.hub / autoWatch.hubSync were dropped with the Hub
+            // transport (sp-hnjf). validateConfig only checks the keys it knows,
+            // so an existing .spidersanrc carrying them stays valid and inert.
+            if (aw.quiet !== undefined && typeof aw.quiet !== 'boolean') {
+                errors.push({ path: 'autoWatch.quiet', message: 'Must be a boolean' });
+            }
+            if (aw.legacy !== undefined && typeof aw.legacy !== 'boolean') {
+                errors.push({ path: 'autoWatch.legacy', message: 'Must be a boolean' });
+            }
+        }
+    }
+    // Validate storage
+    if (obj.storage !== undefined) {
+        if (typeof obj.storage !== 'object' || obj.storage === null) {
+            errors.push({ path: 'storage', message: 'Must be an object' });
+        }
+        else {
+            const st = obj.storage;
+            if (st.type !== undefined && !['local', 'supabase'].includes(st.type)) {
+                errors.push({ path: 'storage.type', message: 'Must be "local" or "supabase"' });
+            }
+            if (st.environment !== undefined && !['production', 'staging', 'local'].includes(st.environment)) {
+                errors.push({ path: 'storage.environment', message: 'Must be "production", "staging", or "local"' });
+            }
+        }
+    }
+    return errors;
+}
+export function getConfigPaths(basePath = process.cwd(), includeGlobal = true) {
+    const paths = [];
+    if (includeGlobal) {
+        const home = homedir();
+        CONFIG_FILES.forEach((filename) => paths.push(join(home, filename)));
+    }
+    CONFIG_FILES.forEach((filename) => paths.push(join(basePath, filename)));
+    return paths;
+}
+export async function loadConfigWithSources(basePath = process.cwd(), options = {}) {
+    const includeGlobal = options.includeGlobal !== false;
+    const sources = [];
+    const errors = [];
+    let merged = DEFAULT_CONFIG;
+    const configPaths = getConfigPaths(basePath, includeGlobal);
+    for (const configPath of configPaths) {
+        if (!existsSync(configPath))
+            continue;
+        try {
+            const content = await readFile(configPath, 'utf-8');
+            const userConfig = JSON.parse(content);
+            const validationErrors = validateConfig(userConfig);
+            if (validationErrors.length > 0) {
+                errors.push(...validationErrors.map(err => ({ ...err, path: `${configPath}:${err.path || ''}`.replace(/:$/, '') })));
+            }
+            merged = deepMerge(merged, userConfig);
+            sources.push(configPath);
+        }
+        catch (error) {
+            if (error instanceof SyntaxError) {
+                errors.push({ path: configPath, message: `Invalid JSON: ${error.message}` });
+            }
+            else {
+                errors.push({ path: configPath, message: 'Failed to read config file' });
+            }
+        }
+    }
+    return { config: merged, sources, errors };
+}
+export async function loadConfig(basePath = process.cwd()) {
+    const result = await loadConfigWithSources(basePath);
+    if (result.errors.length > 0) {
+        console.warn('⚠️  Config validation warnings:');
+        result.errors.forEach(e => console.warn(`   ${e.path}: ${e.message}`));
+    }
+    return result.config;
+}
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+export function deepMerge(target, source) {
+    const result = { ...target };
+    for (const key of Object.keys(source)) {
+        // Security: Prevent prototype pollution
+        if (key === '__proto__' || key === 'constructor' || key === 'prototype') {
+            throw new Error(`Invalid config key: ${key}`);
+        }
+        if (source[key] !== undefined) {
+            if (typeof source[key] === 'object' && !Array.isArray(source[key]) && source[key] !== null) {
+                result[key] = deepMerge(result[key] || {}, source[key]);
+            }
+            else {
+                result[key] = source[key];
+            }
+        }
+    }
+    return result;
+}
+function safeRegExp(pattern, flags) {
+    try {
+        return new RegExp(pattern, flags);
+    }
+    catch {
+        return null;
+    }
+}
+export function getWipPatterns(config) {
+    return config.readyCheck.wipPatterns
+        .map(p => safeRegExp(`\\b${p}\\b`, 'i'))
+        .filter((r) => r !== null);
+}
+export function getExcludePatterns(config) {
+    return config.readyCheck.excludeFiles;
+}
+export function getHighSeverityPatterns(config) {
+    return config.conflicts.highSeverityPatterns
+        .map(p => safeRegExp(p))
+        .filter((r) => r !== null);
+}
+export function getMediumSeverityPatterns(config) {
+    return config.conflicts.mediumSeverityPatterns
+        .map(p => safeRegExp(p))
+        .filter((r) => r !== null);
+}
+//# sourceMappingURL=config.js.map