@aalis/runtime 0.15.0 → 0.16.0

package/dist/home.js

@@ -0,0 +1,229 @@
+import { chmodSync, existsSync, mkdirSync, readdirSync, realpathSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { basename, isAbsolute, join, normalize, resolve } from 'node:path';
+import { CORE_CONFIG_SCHEMA, defaultsFrom } from '@aalis/schema-config';
+import { stringify as stringifyYaml } from 'yaml';
+// ============================================================
+// 家目录：解析、路径派生与初始化
+// ============================================================
+//
+// 家目录装着一个实例的全部状态与密钥，只在这里解析，core 不参与。进程的 cwd 不带语义：
+// 唯一的例外是命令行与环境变量里写的相对路径，它们按启动时的 cwd 解析一次（那是用户在 shell 里的意图），
+// 之后全程只用绝对路径。
+/** 宿主件的路径参数必须是绝对路径：相对路径会按调用那一刻的 cwd 解析，而 cwd 不带语义 */
+export function assertAbsolute(what, p) {
+    if (!isFullyAbsolute(p))
+        throw new Error(`${what}必须是绝对路径：${p}`);
+}
+/** profile 名既拼进 `~/.aalis-<profile>`，也拼进数据库名：只许小写字母、数字与连字符，挡住 `../x` 这类跳出。 */
+const PROFILE_PATTERN = /^[a-z0-9][a-z0-9-]{0,31}$/;
+const CONFIG_FILE = 'aalis.config.yaml';
+const SECRETS_FILE = 'secrets.yaml';
+/** `--init` 只在空目录、或只有布局自己的条目（上次初始化中途失败留下的）的目录里做 */
+const LAYOUT_ENTRIES = new Set([
+    'state',
+    'logs',
+    'cache',
+    'run',
+    'tmp',
+    'self',
+    'stage',
+    SECRETS_FILE,
+    '.DS_Store',
+]);
+/**
+ * 绝对路径。Windows 上还要带盘符或 UNC 前缀：`\aalis` 这类按当前盘解析，仍然依赖 cwd。
+ */
+export function isFullyAbsolute(p, platform = process.platform) {
+    return platform === 'win32' ? /^(?:[A-Za-z]:[\\/]|\\\\)/.test(p) : isAbsolute(p);
+}
+/** 家目录相关的输入有误（参数缺值、profile 名不合法、来源冲突）：宿主据此一行报错退出。 */
+export class HomeArgsError extends Error {
+    name = 'HomeArgsError';
+}
+/**
+ * 只认开头的宿主参数（`--home <dir>`、`--home=<dir>`、`--profile`、`--init`、`--service`），遇到第一个别的参数即停：
+ * 之后的都属于子命令，子命令自己的参数里出现同名写法也不会被吃掉。
+ * 开头这一段里的 `--` 跳过：`pnpm dev -- --init` 会把 `--` 原样传进来。
+ */
+export function parseHostArgs(argv) {
+    const out = { init: false, service: false, rest: [] };
+    let i = 0;
+    for (; i < argv.length; i++) {
+        const arg = argv[i];
+        if (arg === '--')
+            continue;
+        if (arg === '--init' || arg === '--service') {
+            out[arg === '--init' ? 'init' : 'service'] = true;
+            continue;
+        }
+        const m = /^--(home|profile)(?:=(.*))?$/.exec(arg);
+        if (!m)
+            break;
+        const key = m[1];
+        const value = m[2] ?? argv[++i];
+        if (!value)
+            throw new HomeArgsError(`--${key} 缺少取值`);
+        out[key] = value;
+    }
+    out.rest = argv.slice(i);
+    return out;
+}
+/**
+ * 家目录的覆盖顺序：`--home` → `AALIS_HOME` → `--profile` / `AALIS_PROFILE`（`~/.aalis-<p>`）→ 宿主的 defaultHome → `~/.aalis`。
+ * 指定了 profile、同时又有更高优先级的 `--home` 或 `AALIS_HOME` 时报错，不静默忽略 profile：
+ * 以为进了测试实例、实际写进主实例，是这类配置错误最坏的后果。
+ */
+export function resolveHome(input) {
+    const { args, env } = input;
+    const userHome = input.userHome ?? homedir();
+    // 环境变量设成空串（`AALIS_HOME=` 用来清掉它）视同没设
+    const explicit = args.home ?? nonEmpty(env.AALIS_HOME);
+    const profile = args.profile ?? nonEmpty(env.AALIS_PROFILE);
+    // defaultHome 是宿主代码写死的值：写错了不论这次谁胜出都报，免得换一台没设环境变量的机器才暴露
+    if (input.defaultHome !== undefined && !isFullyAbsolute(input.defaultHome)) {
+        throw new HomeArgsError(`defaultHome 必须是绝对路径：${input.defaultHome}`);
+    }
+    if (explicit !== undefined && profile !== undefined) {
+        const homeSource = args.home !== undefined ? '--home' : 'AALIS_HOME';
+        const profileSource = args.profile !== undefined ? '--profile' : 'AALIS_PROFILE';
+        throw new HomeArgsError(`同时指定了 ${homeSource} 与 ${profileSource}，只能选一个`);
+    }
+    if (explicit !== undefined)
+        return withProfile(toAbsolute(explicit, userHome, input.cwd), userHome);
+    if (profile !== undefined) {
+        if (!PROFILE_PATTERN.test(profile)) {
+            throw new HomeArgsError(`profile 名「${profile}」不合法：只能用小写字母、数字与连字符，以字母或数字开头，最长 32 个字符`);
+        }
+        return { home: join(userHome, `.aalis-${profile}`), profile };
+    }
+    if (input.defaultHome !== undefined)
+        return withProfile(normalize(input.defaultHome), userHome);
+    return { home: join(userHome, '.aalis') };
+}
+/**
+ * `~/.aalis-<p>` 就是 profile p 的家目录：经 `--home`、`AALIS_HOME` 或 defaultHome 选中它时同样带上 profile，
+ * 插件按 profile 派生的名字（如记忆库名）对同一个家目录才一样。这里按路径的写法认，认不出的写法由
+ * {@link profileOfRealHome} 按真实路径补认。
+ */
+function withProfile(home, userHome) {
+    const profile = /^\.aalis-(.+)$/.exec(basename(home))?.[1];
+    if (profile === undefined || !PROFILE_PATTERN.test(profile))
+        return { home };
+    return resolve(home) === resolve(userHome, `.aalis-${profile}`) ? { home, profile } : { home };
+}
+/**
+ * 按真实路径补认 profile：家目录的真实路径就是 `~/.aalis-<p>` 的真实路径时为 p。补上按写法认不出的情形：
+ * 大小写写错、经指向它的符号链接选中、用户主目录本身是符号链接。`~/.aalis-<p>` 自己是指向别处的链接时，
+ * 经那个别处的路径选中仍认不出。用户主目录不存在时没有 profile。
+ */
+export function profileOfRealHome(realHome, userHome = homedir()) {
+    let realUserHome;
+    try {
+        realUserHome = realpathSync.native(userHome);
+    }
+    catch {
+        return undefined;
+    }
+    return withProfile(realHome, realUserHome).profile;
+}
+function nonEmpty(value) {
+    return value === '' ? undefined : value;
+}
+/**
+ * 命令行与环境变量里的家目录写法转成绝对路径。开头的 `~` 展开成用户主目录：`--home=~/x` 不经 shell 展开，
+ * launchd、systemd 与容器的环境变量也不展开，不处理就会在 cwd 下建出一个名叫 `~` 的目录。
+ */
+function toAbsolute(value, userHome, cwd) {
+    if (value === '~')
+        return userHome;
+    if (/^~[\\/]/.test(value))
+        return join(userHome, value.slice(2));
+    if (value.startsWith('~'))
+        throw new HomeArgsError(`不支持「~用户名」写法，请写绝对路径：${value}`);
+    if (isFullyAbsolute(value))
+        return normalize(value);
+    if (cwd === undefined)
+        throw new HomeArgsError(`当前目录已不存在，家目录请写绝对路径：${value}`);
+    return resolve(cwd, value);
+}
+/** 由家目录与安装集派生全部路径（家目录布局见计划书「家目录布局」）。 */
+export function derivePaths(home, app, profile) {
+    // 冻结：同一个对象交给每个插件，任何一处改了它（例如改 app）都会把别的插件的装卸目录一起带偏
+    return Object.freeze({
+        home,
+        ...(profile !== undefined ? { profile } : {}),
+        app,
+        config: join(home, CONFIG_FILE),
+        secrets: join(home, SECRETS_FILE),
+        state: join(home, 'state'),
+        logs: join(home, 'logs'),
+        cache: join(home, 'cache'),
+        run: join(home, 'run'),
+        tmp: join(home, 'tmp'),
+        self: Object.freeze({
+            personas: join(home, 'self', 'personas'),
+            skills: join(home, 'self', 'skills'),
+            workflows: join(home, 'self', 'workflows'),
+        }),
+        stage: Object.freeze({
+            drafts: join(home, 'stage', 'drafts'),
+            public: join(home, 'stage', 'public'),
+            paper: join(home, 'stage', 'paper'),
+        }),
+    });
+}
+/** 初始化的判据：主配置文件存在。 */
+export function isHomeInitialized(paths) {
+    return existsSync(paths.config);
+}
+/**
+ * 只有 owner 进得来的平台（本地终端、单 token 的 WebUI）的平台档开箱给全部工具分组，无条件写：平台没装时这一层不起作用，
+ * 之后从市场装上即生效。多人平台不代开：带分组的工具默认不暴露，public 工具在群里的可达性靠这道分组闸。与 create-aalis 生成的平台档一致
+ */
+const OWNER_PLATFORM_PROFILES = { cli: { enabledToolGroups: ['*'] }, webui: { enabledToolGroups: ['*'] } };
+/**
+ * 建家目录：目录 0700，写默认主配置与空的密钥文件（0600），建布局里的子目录。主配置里写上 owner 平台的平台档。
+ * 已初始化时拒绝，不覆盖任何文件。目录已存在时只接受空目录，或只有布局自己条目的目录（上次初始化中途失败），
+ * 沿用并收紧为 0700：`--home ~ --init` 这类笔误不能把用户主目录改成 0700、再往里铺一层布局。
+ */
+export function initHome(paths) {
+    if (isHomeInitialized(paths))
+        throw new HomeArgsError(`家目录已经初始化过：${paths.home}`);
+    if (existsSync(paths.home)) {
+        const foreign = readdirSync(paths.home).filter(name => !LAYOUT_ENTRIES.has(name));
+        if (foreign.length > 0) {
+            const shown = foreign.slice(0, 3).join('、') + (foreign.length > 3 ? ' 等' : '');
+            throw new HomeArgsError(`目录不是空的（有 ${shown}），不能在这里初始化家目录：${paths.home}`);
+        }
+    }
+    mkdirSync(paths.home, { recursive: true, mode: 0o700 });
+    chmodSync(paths.home, 0o700);
+    for (const dir of [
+        paths.state,
+        paths.logs,
+        paths.cache,
+        paths.run,
+        paths.self.personas,
+        paths.self.skills,
+        paths.self.workflows,
+        paths.stage.drafts,
+        paths.stage.public,
+        paths.stage.paper,
+    ]) {
+        mkdirSync(dir, { recursive: true });
+    }
+    mkdirSync(paths.tmp, { recursive: true, mode: 0o700 });
+    // 密钥文件先建：主配置是初始化的判据，最后写，中途失败时下次仍能重新初始化
+    if (existsSync(paths.secrets))
+        chmodSync(paths.secrets, 0o600);
+    else
+        writeFileSync(paths.secrets, '', { mode: 0o600, flag: 'wx' });
+    const { name, logLevel } = defaultsFrom(CORE_CONFIG_SCHEMA);
+    const sessionConfig = { platforms: OWNER_PLATFORM_PROFILES };
+    writeFileSync(paths.config, stringifyYaml({ name, logLevel, plugins: {}, sessionConfig }), {
+        mode: 0o600,
+        flag: 'wx',
+    });
+}
+//# sourceMappingURL=home.js.map

package/dist/home.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home.js","sourceRoot":"","sources":["../src/home.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrG,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE3E,OAAO,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACxE,OAAO,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAElD,+DAA+D;AAC/D,kBAAkB;AAClB,+DAA+D;AAC/D,EAAE;AACF,kDAAkD;AAClD,4DAA4D;AAC5D,cAAc;AAEd,qDAAqD;AACrD,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,CAAS;IACpD,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,8EAA8E;AAC9E,MAAM,eAAe,GAAG,2BAA2B,CAAC;AAEpD,MAAM,WAAW,GAAG,mBAAmB,CAAC;AACxC,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC,mDAAmD;AACnD,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IAClD,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,KAAK;IACL,MAAM;IACN,OAAO;IACP,YAAY;IACZ,WAAW;CACZ,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,WAA4B,OAAO,CAAC,QAAQ;IACrF,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,qDAAqD;AACrD,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,GAAG,eAAe,CAAC;CACjC;AAcD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAuB;IACnD,MAAM,GAAG,GAAa,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAChE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,GAAG,KAAK,IAAI;YAAE,SAAS;QAC3B,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,WAAW,EAAE,CAAC;YAC5C,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC;YAClD,SAAS;QACX,CAAC;QACD,MAAM,CAAC,GAAG,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC;YAAE,MAAM;QACd,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAuB,CAAC;QACvC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAuB;IACjD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAC5B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC;IAC7C,oCAAoC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC5D,uDAAuD;IACvD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,aAAa,CAAC,uBAAuB,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;QACrE,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC;QACjF,MAAM,IAAI,aAAa,CAAC,SAAS,UAAU,MAAM,aAAa,QAAQ,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IACpG,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,aAAa,CACrB,aAAa,OAAO,wCAAwC,CAC7D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB;IACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC7E,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,QAAQ,EAAE,UAAU,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AACjG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,WAAmB,OAAO,EAAE;IAC9E,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC;AACrD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,QAAgB,EAAE,GAAuB;IAC1E,IAAI,KAAK,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC;IACnC,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;IAClF,IAAI,eAAe,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,aAAa,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;IAC9E,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,GAAW,EAAE,OAAgB;IACrE,kDAAkD;IAClD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,GAAG;QACH,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC;QAC/B,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC;QACjC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1B,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACxB,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QAC1B,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QACtB,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YAClB,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC;YACxC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC;SAC3C,CAAC;QACF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC;YACrC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC;YACrC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC;SACpC,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,sBAAsB;AACtB,MAAM,UAAU,iBAAiB,CAAC,KAAgB;IAChD,OAAO,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,EAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;AAE3G;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAgB;IACvC,IAAI,iBAAiB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,aAAa,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACjF,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/E,MAAM,IAAI,aAAa,CAAC,YAAY,KAAK,iBAAiB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IACD,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxD,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7B,KAAK,MAAM,GAAG,IAAI;QAChB,KAAK,CAAC,KAAK;QACX,KAAK,CAAC,IAAI;QACV,KAAK,CAAC,KAAK;QACX,KAAK,CAAC,GAAG;QACT,KAAK,CAAC,IAAI,CAAC,QAAQ;QACnB,KAAK,CAAC,IAAI,CAAC,MAAM;QACjB,KAAK,CAAC,IAAI,CAAC,SAAS;QACpB,KAAK,CAAC,KAAK,CAAC,MAAM;QAClB,KAAK,CAAC,KAAK,CAAC,MAAM;QAClB,KAAK,CAAC,KAAK,CAAC,KAAK;KAClB,EAAE,CAAC;QACF,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,uCAAuC;IACvC,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;;QAC1D,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAC;IAC5D,MAAM,aAAa,GAAG,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAC;IAC7D,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE;QACzF,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,IAAI;KACX,CAAC,CAAC;AACL,CAAC"}

package/dist/host-logs.d.ts

@@ -0,0 +1,9 @@
+import type { HostLogs } from '@aalis/api-host-logs';
+import type { Logger, LogHub } from '@aalis/core';
+import type { FileLoggerHandle } from './file-logger.js';
+/**
+ * host-logs 服务的实现：历史读文件日志（先等它把已记下的写完），实时接中枢。`file` 不给时没有历史。
+ * 订阅带历史时先攒着实时的，历史送完再接着送比它新的，之后直通；补发途中 listener 抛错只丢掉那一条，与中枢同一规则
+ */
+export declare function createHostLogs(hub: LogHub, file: Pick<FileLoggerHandle, 'path' | 'flush'> | undefined, logger: Logger): HostLogs;
+//# sourceMappingURL=host-logs.d.ts.map

package/dist/host-logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-logs.d.ts","sourceRoot":"","sources":["../src/host-logs.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,KAAK,EAAY,MAAM,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAoDzD;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,SAAS,EAC1D,MAAM,EAAE,MAAM,GACb,QAAQ,CA4CV"}

package/dist/host-logs.js

@@ -0,0 +1,104 @@
+import { open } from 'node:fs/promises';
+import { parseLogLine } from '@aalis/schema-log';
+/** 从文件末尾往前最多扫这么多字节：筛得很窄、往前翻得很深时也有界，更早的去看 logs/latest.log 本体 */
+const SCAN_BYTES = 16 * 1024 * 1024;
+const CHUNK_BYTES = 64 * 1024;
+/**
+ * 文件末尾往前分块读，返回最后 limit 条符合 accept 的日志（文件内的先后）。latest.log 可能几百 MB，不整个载入。
+ * 按字节切行：UTF-8 的多字节序列里没有 0x0A，块边界劈不开字符。文件不在时没有历史
+ */
+async function readTail(path, limit, accept) {
+    let file;
+    try {
+        file = await open(path, 'r');
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return [];
+        throw err;
+    }
+    try {
+        const { size } = await file.stat();
+        const batches = [];
+        let count = 0;
+        let pos = size;
+        // 已读、开头可能是半行的字节：留着与前一块拼起来
+        let carry = Buffer.alloc(0);
+        while (pos > 0 && count < limit && size - pos < SCAN_BYTES) {
+            const start = Math.max(0, pos - CHUNK_BYTES);
+            const chunk = Buffer.alloc(pos - start);
+            await file.read(chunk, 0, chunk.length, start);
+            pos = start;
+            const bytes = Buffer.concat([chunk, carry]);
+            const cut = pos > 0 ? bytes.indexOf(0x0a) + 1 : 0;
+            if (pos > 0 && cut === 0) {
+                carry = bytes;
+                continue;
+            }
+            carry = bytes.subarray(0, cut);
+            const batch = bytes
+                .subarray(cut)
+                .toString('utf8')
+                .split('\n')
+                .map(parseLogLine)
+                .filter((entry) => entry !== null && accept(entry));
+            batches.push(batch);
+            count += batch.length;
+        }
+        return batches.reverse().flat().slice(-limit);
+    }
+    finally {
+        await file.close();
+    }
+}
+/**
+ * host-logs 服务的实现：历史读文件日志（先等它把已记下的写完），实时接中枢。`file` 不给时没有历史。
+ * 订阅带历史时先攒着实时的，历史送完再接着送比它新的，之后直通；补发途中 listener 抛错只丢掉那一条，与中枢同一规则
+ */
+export function createHostLogs(hub, file, logger) {
+    const recent = async (limit, options = {}) => {
+        if (!file || limit <= 0)
+            return [];
+        await file.flush();
+        const { before, match } = options;
+        return readTail(file.path, limit, entry => (before === undefined || entry.seq < before) && (match?.(entry) ?? true));
+    };
+    return {
+        recent,
+        subscribe(listener, options = {}) {
+            const history = options.history ?? 0;
+            if (history <= 0)
+                return hub.onEntry(listener);
+            let last = Number.NEGATIVE_INFINITY;
+            let queued = [];
+            let closed = false;
+            const deliver = (entry) => {
+                if (closed || entry.seq <= last)
+                    return;
+                last = entry.seq;
+                // 订阅者就是日志的去处，它的错误（含返回被拒的 Promise）无处可报
+                try {
+                    Promise.resolve(listener(entry)).catch(() => { });
+                }
+                catch { }
+            };
+            const off = hub.onEntry(entry => (queued ? queued.push(entry) : deliver(entry)));
+            void recent(history)
+                .catch(err => {
+                logger.warn('日志订阅没能补发历史，只送此后的:', err);
+                return [];
+            })
+                .then(tail => {
+                const pending = queued ?? [];
+                queued = undefined;
+                for (const entry of [...tail, ...pending])
+                    deliver(entry);
+            });
+            return () => {
+                closed = true;
+                off();
+            };
+        },
+    };
+}
+//# sourceMappingURL=host-logs.js.map

package/dist/host-logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-logs.js","sourceRoot":"","sources":["../src/host-logs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAGxC,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAGjD,+DAA+D;AAC/D,MAAM,UAAU,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpC,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9B;;;GAGG;AACH,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAa,EAAE,MAAoC;IACvF,IAAI,IAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,GAAG,IAAI,CAAC;QACf,0BAA0B;QAC1B,IAAI,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,IAAI,IAAI,GAAG,GAAG,GAAG,UAAU,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,WAAW,CAAC,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;YACxC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC/C,GAAG,GAAG,KAAK,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;YAC5C,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,GAAG,KAAK,CAAC;gBACd,SAAS;YACX,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC/B,MAAM,KAAK,GAAG,KAAK;iBAChB,QAAQ,CAAC,GAAG,CAAC;iBACb,QAAQ,CAAC,MAAM,CAAC;iBAChB,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,YAAY,CAAC;iBACjB,MAAM,CAAC,CAAC,KAAK,EAAqB,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACxB,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,IAA0D,EAC1D,MAAc;IAEd,MAAM,MAAM,GAAuB,KAAK,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE;QAC/D,IAAI,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC;YAAE,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;QAClC,OAAO,QAAQ,CACb,IAAI,CAAC,IAAI,EACT,KAAK,EACL,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAClF,CAAC;IACJ,CAAC,CAAC;IACF,OAAO;QACL,MAAM;QACN,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,EAAE;YAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;YACrC,IAAI,OAAO,IAAI,CAAC;gBAAE,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC/C,IAAI,IAAI,GAAG,MAAM,CAAC,iBAAiB,CAAC;YACpC,IAAI,MAAM,GAA2B,EAAE,CAAC;YACxC,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,MAAM,OAAO,GAAG,CAAC,KAAe,EAAE,EAAE;gBAClC,IAAI,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI;oBAAE,OAAO;gBACxC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC;gBACjB,sCAAsC;gBACtC,IAAI,CAAC;oBACH,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC9D,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC,CAAC;YACF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACjF,KAAK,MAAM,CAAC,OAAO,CAAC;iBACjB,KAAK,CAAC,GAAG,CAAC,EAAE;gBACX,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;gBACtC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;iBACD,IAAI,CAAC,IAAI,CAAC,EAAE;gBACX,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC;gBAC7B,MAAM,GAAG,SAAS,CAAC;gBACnB,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;oBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5D,CAAC,CAAC,CAAC;YACL,OAAO,GAAG,EAAE;gBACV,MAAM,GAAG,IAAI,CAAC;gBACd,GAAG,EAAE,CAAC;YACR,CAAC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,11 +1,13 @@
 export { getBootstrapBuffer, installBootstrapBuffer } from './bootstrap-buffer.js';
-export { type ConfigProvider, type ConfigStore, createConfigStore, installHostConfig } from './config-store.js';
+export { type ConfigProvider, type ConfigStore, createConfigStore, installHostConfig, type SecretProvider, type SecretStoreInit, } from './config-store.js';
 export { type ConfigSyncOptions, handleConfigChanged, installConfigHotReload, syncPluginDefaults, withPluginConfigSync, } from './config-sync.js';
 export { type ConsoleSinkHandle, installConsoleSink } from './console-sink.js';
-export { appendCrashLog, DEFAULT_LOG_FILE, type FileLoggerHandle, setupFileLogger } from './file-logger.js';
+export { appendCrashLog, type FileLoggerHandle, setupFileLogger } from './file-logger.js';
+export { derivePaths, HomeArgsError, type HostArgs, initHome, isHomeInitialized, parseHostArgs, profileOfRealHome, type ResolveHomeInput, resolveHome, } from './home.js';
+export { createHostLogs } from './host-logs.js';
 export { createNodeModulesPluginLoader } from './node-modules-loader.js';
 export { createPluginDiscovery, type PluginDescriptor, type PluginDiscovery, type PluginLoader, } from './plugin-discovery.js';
-export { buildRespawnCommand, createFsPluginLoader, createFsYamlConfigProvider, createProcessRespawnStrategy, isRestartRollback, READY_MESSAGE, type RespawnOptions, type RestartRollback, } from './providers.js';
+export { buildRespawnCommand, createFsPluginLoader, createFsSecretsProvider, createFsYamlConfigProvider, createProcessRespawnStrategy, createServiceRestartStrategy, isRestartRollback, READY_MESSAGE, type RespawnOptions, type RestartRollback, SERVICE_RESTART_EXIT_CODE, } from './providers.js';
 export { type StartAalisOptions, startAalis } from './start.js';
 export { tryDispatchSubcommand } from './subcommand.js';
 export { installTerminalStateRestorer, restoreTerminalState } from './terminal.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAChH,OAAO,EACL,KAAK,iBAAiB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,KAAK,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,4BAA4B,EAC5B,iBAAiB,EACjB,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,KAAK,iBAAiB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,iBAAiB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,KAAK,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EACL,WAAW,EACX,aAAa,EACb,KAAK,QAAQ,EACb,QAAQ,EACR,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,KAAK,gBAAgB,EACrB,WAAW,GACZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EACL,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,4BAA4B,EAC5B,4BAA4B,EAC5B,iBAAiB,EACjB,aAAa,EACb,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,KAAK,iBAAiB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -6,18 +6,21 @@
 //   - createFsPluginLoader：monorepo 自托管（扫描 packages/ 目录）
 //   - createPluginDiscovery：把加载器发现的插件整批交给 core，并提供热扫描（plugin-source 服务的实现）
 //   - createConfigStore / installHostConfig：配置文档与 host-config 服务（core 只持运行态）
+//   - createHostLogs：host-logs 服务（读日志：文件日志里的历史 + 中枢的实时）
 //   - withPluginConfigSync：导入定义后、登记前把 schema 派生默认值深合并进文档
-//   - createFsYamlConfigProvider / createProcessRespawnStrategy：YAML 配置 + 进程级重启
+//   - createFsYamlConfigProvider / createFsSecretsProvider / createProcessRespawnStrategy：YAML 配置与密钥文件 + 进程级重启
 //   - startAalis：组装以上 + 宿主件为实例并启动（带 options 开关，默认独立部署）
 //   - install*/setup*/tryDispatchSubcommand：宿主件，供高级 opt-in 组装
 export { getBootstrapBuffer, installBootstrapBuffer } from './bootstrap-buffer.js';
-export { createConfigStore, installHostConfig } from './config-store.js';
+export { createConfigStore, installHostConfig, } from './config-store.js';
 export { handleConfigChanged, installConfigHotReload, syncPluginDefaults, withPluginConfigSync, } from './config-sync.js';
 export { installConsoleSink } from './console-sink.js';
-export { appendCrashLog, DEFAULT_LOG_FILE, setupFileLogger } from './file-logger.js';
+export { appendCrashLog, setupFileLogger } from './file-logger.js';
+export { derivePaths, HomeArgsError, initHome, isHomeInitialized, parseHostArgs, profileOfRealHome, resolveHome, } from './home.js';
+export { createHostLogs } from './host-logs.js';
 export { createNodeModulesPluginLoader } from './node-modules-loader.js';
 export { createPluginDiscovery, } from './plugin-discovery.js';
-export { buildRespawnCommand, createFsPluginLoader, createFsYamlConfigProvider, createProcessRespawnStrategy, isRestartRollback, READY_MESSAGE, } from './providers.js';
+export { buildRespawnCommand, createFsPluginLoader, createFsSecretsProvider, createFsYamlConfigProvider, createProcessRespawnStrategy, createServiceRestartStrategy, isRestartRollback, READY_MESSAGE, SERVICE_RESTART_EXIT_CODE, } from './providers.js';
 export { startAalis } from './start.js';
 export { tryDispatchSubcommand } from './subcommand.js';
 export { installTerminalStateRestorer, restoreTerminalState } from './terminal.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,uDAAuD;AACvD,8DAA8D;AAC9D,oEAAoE;AACpE,yDAAyD;AACzD,2EAA2E;AAC3E,6EAA6E;AAC7E,yDAAyD;AACzD,gFAAgF;AAChF,uDAAuD;AACvD,8DAA8D;AAE9D,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAyC,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAChH,OAAO,EAEL,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAA0B,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAyB,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EACL,qBAAqB,GAItB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,0BAA0B,EAC1B,4BAA4B,EAC5B,iBAAiB,EACjB,aAAa,GAGd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAA0B,UAAU,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,EAAE;AACF,uDAAuD;AACvD,8DAA8D;AAC9D,oEAAoE;AACpE,yDAAyD;AACzD,2EAA2E;AAC3E,6EAA6E;AAC7E,wDAAwD;AACxD,yDAAyD;AACzD,+GAA+G;AAC/G,uDAAuD;AACvD,8DAA8D;AAE9D,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAGL,iBAAiB,EACjB,iBAAiB,GAGlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAEL,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAA0B,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAyB,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EACL,WAAW,EACX,aAAa,EAEb,QAAQ,EACR,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EAEjB,WAAW,GACZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,6BAA6B,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EACL,qBAAqB,GAItB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,4BAA4B,EAC5B,4BAA4B,EAC5B,iBAAiB,EACjB,aAAa,EAGb,yBAAyB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAA0B,UAAU,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,4BAA4B,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/dist/instance-lock.d.ts

@@ -0,0 +1,56 @@
+/** 锁文件内容 */
+export interface LockHolder {
+    pid: number;
+    /** 进程启动标识，见 {@link ProcessProbe.startId}；查不了时没有 */
+    startId?: string;
+    /** 本次开机的标识；查不了时没有 */
+    bootId?: string;
+    /** pid 命名空间（Linux）；查不了时没有 */
+    pidNs?: string;
+    /** 交接令牌的 sha256 */
+    handoffHash: string;
+}
+/** 查询本机进程的那几样东西，测试里换成替身 */
+export interface ProcessProbe {
+    /** 本进程的 pid */
+    pid: number;
+    now(): number;
+    /** 本次开机的标识：Linux 的 boot_id、macOS 的 kern.bootsessionuuid；别的平台没有 */
+    bootId(): string | undefined;
+    /** 本进程的 pid 命名空间（Linux）；别的平台没有 */
+    pidNs(): string | undefined;
+    /** pid 是否存在 */
+    exists(pid: number): boolean;
+    /**
+     * 进程启动标识，只用来比相等：Linux 是 `/proc/<pid>/stat` 的 starttime（开机以来的时钟滴答，与墙上时钟无关），
+     * 其它 POSIX 是 UTC 下 `ps -o lstart=` 的原文（进程创建时记下的时刻，之后不随时钟步进变）。查不了时为 undefined。
+     */
+    startId(pid: number): string | undefined;
+}
+export declare const nodeProcessProbe: ProcessProbe;
+export interface InstanceLock {
+    /** 本进程持有的锁文件 */
+    readonly file: string;
+    /** 交接令牌：respawn 时经环境变量交给新进程 */
+    readonly handoffToken: string;
+    /** 删掉本进程的锁文件：只在它仍是本进程那份时删（交接后可能已被清掉，同名的也可能是别的实例的）；靠内容比对，重复调用不会误删 */
+    release(): void;
+}
+type AcquireResult = {
+    ok: true;
+    lock: InstanceLock;
+} | {
+    ok: false;
+    holder: LockHolder;
+    file: string;
+};
+/**
+ * 取实例锁。`handoffToken` 是旧实例 respawn 时交过来的令牌：与锁里的哈希对得上的那份按已交接处理；
+ * 否则按持有者死活决定取锁还是报占用。
+ */
+export declare function acquireInstanceLock(runDir: string, opts?: {
+    handoffToken?: string;
+    probe?: ProcessProbe;
+}): AcquireResult;
+export {};
+//# sourceMappingURL=instance-lock.d.ts.map

package/dist/instance-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-lock.d.ts","sourceRoot":"","sources":["../src/instance-lock.ts"],"names":[],"mappings":"AAyCA,YAAY;AACZ,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6BAA6B;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mBAAmB;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,2BAA2B;AAC3B,MAAM,WAAW,YAAY;IAC3B,eAAe;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,IAAI,MAAM,CAAC;IACd,kEAAkE;IAClE,MAAM,IAAI,MAAM,GAAG,SAAS,CAAC;IAC7B,kCAAkC;IAClC,KAAK,IAAI,MAAM,GAAG,SAAS,CAAC;IAC5B,eAAe;IACf,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B;;;OAGG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CAC1C;AAgBD,eAAO,MAAM,gBAAgB,EAAE,YA2C9B,CAAC;AAEF,MAAM,WAAW,YAAY;IAC3B,gBAAgB;IAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+BAA+B;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,oEAAoE;IACpE,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,KAAK,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,YAAY,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAuDxG;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,YAAY,CAAA;CAAO,GACzD,aAAa,CAoEf"}