@biaoo/tiangong-wiki 0.3.5 → 0.3.7

package/README.md

@@ -86,6 +86,8 @@ tiangong-wiki sync                                    # index Markdown pages
 
 That means commands still work best from inside a workspace, but they can also run from outside the workspace after setup, or target a specific workspace explicitly with `--env-file`.
 
+For automatic vault processing, new setup runs default to `WIKI_AGENT_AUTH_MODE=codex-login`, a dedicated Codex home under the current user's home directory, and `WIKI_AGENT_MODEL=gpt-5.5`. Before enabling that mode, run `CODEX_HOME="$HOME/.codex-tiangong-wiki" codex login` on macOS/Linux, or set `$env:CODEX_HOME = "$env:USERPROFILE\.codex-tiangong-wiki"` before `codex login` on Windows PowerShell.
+
 ```bash
 tiangong-wiki find --type concept --status active     # structured query
 tiangong-wiki fts "Bayesian"                          # full-text search

package/README.zh-CN.md

@@ -86,6 +86,8 @@ tiangong-wiki sync                                    # 索引 Markdown 文件
 
 这意味着命令仍然最适合在 workspace 内执行；但 setup 之后，即使在 workspace 外运行，也可以通过默认配置正常工作，或者通过 `--env-file` 显式指定目标工作区。
 
+如果启用自动 vault 处理，新的 setup 默认使用 `WIKI_AGENT_AUTH_MODE=codex-login`、当前用户 home 目录下的专用 Codex home 和 `WIKI_AGENT_MODEL=gpt-5.5`。启用前，macOS/Linux 执行 `CODEX_HOME="$HOME/.codex-tiangong-wiki" codex login`；Windows PowerShell 先设置 `$env:CODEX_HOME = "$env:USERPROFILE\.codex-tiangong-wiki"`，再执行 `codex login`。
+
 ```bash
 tiangong-wiki find --type concept --status active     # 结构化查询
 tiangong-wiki fts "贝叶斯"                             # 全文搜索

package/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: tiangong-wiki-skill
-description: "Use when you need to retrieve historically accumulated knowledge, methods, or behavioral patterns before answering or acting; when a conversation or workflow produces durable insights worth preserving for future reuse; or when you discover existing wiki content that is outdated or incorrect and needs correction."
+description: "Use when you need to retrieve historically accumulated knowledge, methods, or behavioral patterns before answering or acting; when a conversation or workflow produces durable insights worth preserving for future reuse; or when existing wiki content is outdated or incorrect. On Windows native shells or Codex automation, invoke the CLI as tiangong-wiki.cmd."
 ---
 
 # Wiki Skill
@@ -9,6 +9,20 @@ description: "Use when you need to retrieve historically accumulated knowledge,
 
 Use the local wiki as the **durable knowledge layer** — not just for the current conversation, but for all future work. Query first, then read or edit the Markdown files that remain the source of truth.
 
+## CLI Entrypoint
+
+Use `tiangong-wiki <command>` on macOS, Linux, WSL, and Git Bash.
+
+On Windows native shells such as PowerShell, Command Prompt, background daemon tasks, or Codex worker automation, use the npm command shim explicitly:
+
+```powershell
+tiangong-wiki.cmd doctor
+tiangong-wiki.cmd sync
+tiangong-wiki.cmd lint --format json
+```
+
+Do not invoke the suffixless `tiangong-wiki` executable from Windows native shells. npm also installs that shebang script for POSIX-like environments, but Windows may treat it as an unknown file and open the "choose an app" dialog instead of executing the CLI.
+
 ## When to Use
 
 Activate this skill in three scenarios:

package/assets/config.example.env

@@ -8,7 +8,24 @@ WIKI_SYNC_INTERVAL=86400
 EMBEDDING_BASE_URL=https://api.openai.com/v1
 EMBEDDING_API_KEY=your-embedding-api-key
 EMBEDDING_MODEL=text-embedding-3-small
-EMBEDDING_DIMENSIONS=384
+EMBEDDING_DIMENSIONS=1536
+
+WIKI_AGENT_ENABLED=false
+# For local Codex login auth, run on macOS/Linux:
+# CODEX_HOME="$HOME/.codex-tiangong-wiki" codex login
+# On Windows PowerShell:
+# $env:CODEX_HOME = "$env:USERPROFILE\.codex-tiangong-wiki"; codex login
+WIKI_AGENT_AUTH_MODE=codex-login
+# Optional. Leave unset to use the current user's default: <home>/.codex-tiangong-wiki
+# WIKI_AGENT_CODEX_HOME=/absolute/path/to/.codex-tiangong-wiki
+#
+# To use an API key instead of Codex login:
+# WIKI_AGENT_AUTH_MODE=api-key
+# WIKI_AGENT_BASE_URL=https://api.openai.com/v1
+# WIKI_AGENT_API_KEY=sk-...
+WIKI_AGENT_MODEL=gpt-5.5
+WIKI_AGENT_BATCH_SIZE=5
+WIKI_AGENT_SANDBOX_MODE=danger-full-access
 
 VAULT_SOURCE=local
 # When VAULT_SOURCE=synology, also set:

package/dist/commands/check-config.js

@@ -63,7 +63,9 @@ export function registerCheckConfigCommand(program) {
                 embeddingConfigured: embeddingClient !== null,
                 agentEnabled: wikiAgent.enabled,
                 agentConfigured: wikiAgent.configured,
+                agentAuthMode: wikiAgent.authMode,
                 agentBaseUrl: wikiAgent.baseUrl ?? "",
+                agentCodexHome: wikiAgent.codexHome ?? "",
                 agentModel: wikiAgent.model ?? "",
                 agentBatchSize: wikiAgent.batchSize,
                 agentWorkflowTimeoutSeconds: wikiAgent.workflowTimeoutSeconds,

package/dist/core/cli-env.js

@@ -27,7 +27,27 @@ function unquoteEnvValue(rawValue) {
         return value;
     }
     if (value.startsWith('"') && value.endsWith('"')) {
-        return value.slice(1, -1).replace(/\\n/g, "\n").replace(/\\"/g, '"').replace(/\\\\/g, "\\");
+        const inner = value.slice(1, -1);
+        let output = "";
+        for (let index = 0; index < inner.length; index += 1) {
+            const current = inner[index];
+            if (current !== "\\" || index === inner.length - 1) {
+                output += current;
+                continue;
+            }
+            const next = inner[index + 1];
+            index += 1;
+            if (next === "n") {
+                output += "\n";
+            }
+            else if (next === '"' || next === "\\") {
+                output += next;
+            }
+            else {
+                output += `\\${next}`;
+            }
+        }
+        return output;
     }
     if (value.startsWith("'") && value.endsWith("'")) {
         return value.slice(1, -1);

package/dist/core/codex-workflow.js

@@ -1,28 +1,89 @@
 import path from "node:path";
-import { Codex } from "@openai/codex-sdk";
+import { mkdirSync } from "node:fs";
+import childProcess from "node:child_process";
+import { syncBuiltinESMExports } from "node:module";
 import { readWorkflowResult } from "./workflow-result.js";
 import { resolveAgentSettings } from "./paths.js";
 import { readTextFileSync, writeTextFileSync } from "../utils/fs.js";
 import { AppError } from "../utils/errors.js";
 export const CODEX_WORKFLOW_VERSION = "2026-04-07";
+const hiddenWindowsSpawnPatch = Symbol.for("tiangong-wiki.hiddenWindowsSpawnPatch");
+function isSpawnOptions(value) {
+    return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function addHiddenWindowDefault(options) {
+    if (!isSpawnOptions(options)) {
+        return { windowsHide: true };
+    }
+    return { ...options, windowsHide: options.windowsHide ?? true };
+}
+export function createHiddenWindowsSpawn(spawnFn) {
+    return ((command, argsOrOptions, options) => {
+        if (Array.isArray(argsOrOptions)) {
+            return spawnFn(command, argsOrOptions, addHiddenWindowDefault(options));
+        }
+        if (isSpawnOptions(argsOrOptions) && options === undefined) {
+            return spawnFn(command, addHiddenWindowDefault(argsOrOptions));
+        }
+        if (argsOrOptions === undefined && options === undefined) {
+            return spawnFn(command, addHiddenWindowDefault(undefined));
+        }
+        return spawnFn(command, argsOrOptions, addHiddenWindowDefault(options));
+    });
+}
+function installHiddenWindowsSpawnPatch(platform = process.platform) {
+    if (platform !== "win32") {
+        return;
+    }
+    const currentSpawn = childProcess.spawn;
+    if (currentSpawn[hiddenWindowsSpawnPatch]) {
+        return;
+    }
+    const patchedSpawn = createHiddenWindowsSpawn(childProcess.spawn);
+    patchedSpawn[hiddenWindowsSpawnPatch] = true;
+    childProcess.spawn = patchedSpawn;
+    syncBuiltinESMExports();
+}
+let codexSdkModulePromise = null;
+async function loadCodexSdk() {
+    // The SDK captures child_process.spawn during module import and currently
+    // does not expose windowsHide; install the Windows default before loading it.
+    installHiddenWindowsSpawnPatch();
+    codexSdkModulePromise ??= import("@openai/codex-sdk");
+    return codexSdkModulePromise;
+}
 function normalizeEnv(input) {
+    const agentSettings = resolveAgentSettings(input.env);
+    if (agentSettings.authMode === "codex-login" && agentSettings.codexHome) {
+        mkdirSync(agentSettings.codexHome, { recursive: true });
+    }
     const normalized = {};
     for (const [key, value] of Object.entries({
         ...process.env,
         ...input.env,
-        ...(input.env?.WIKI_AGENT_API_KEY && !input.env.OPENAI_API_KEY ? { OPENAI_API_KEY: input.env.WIKI_AGENT_API_KEY } : {}),
+        ...(agentSettings.authMode === "api-key" && agentSettings.apiKey && !input.env?.OPENAI_API_KEY
+            ? { OPENAI_API_KEY: agentSettings.apiKey }
+            : {}),
+        ...(agentSettings.authMode === "codex-login" && agentSettings.codexHome
+            ? { CODEX_HOME: agentSettings.codexHome }
+            : {}),
     })) {
         if (typeof value === "string") {
             normalized[key] = value;
         }
     }
+    if (agentSettings.authMode === "codex-login") {
+        delete normalized.OPENAI_API_KEY;
+        delete normalized.CODEX_API_KEY;
+    }
     normalized.PATH = [input.skillArtifactsPath, normalized.PATH].filter(Boolean).join(path.delimiter);
     return normalized;
 }
-function createCodexClient(input) {
+async function createCodexClient(input) {
+    const agentSettings = resolveAgentSettings(input.env);
     const env = normalizeEnv(input);
-    const baseUrl = input.env?.WIKI_AGENT_BASE_URL?.trim();
-    const apiKey = input.env?.WIKI_AGENT_API_KEY?.trim();
+    const baseUrl = agentSettings.authMode === "api-key" ? agentSettings.baseUrl : null;
+    const apiKey = agentSettings.authMode === "api-key" ? agentSettings.apiKey : null;
     const options = {
         apiKey: apiKey || undefined,
         env,
@@ -43,6 +104,7 @@ function createCodexClient(input) {
             },
         };
     }
+    const { Codex } = await loadCodexSdk();
     return new Codex(options);
 }
 function persistWorkflowThreadId(queueItemPath, threadId) {
@@ -117,7 +179,7 @@ export class CodexSdkWorkflowRunner {
     // The SDK can only continue a thread by sending a new input, so queue retries
     // must not automatically resume real workflow threads inline.
     async startWorkflow(input) {
-        const codex = createCodexClient(input);
+        const codex = await createCodexClient(input);
         const thread = codex.startThread({
             model: input.model ?? undefined,
             modelReasoningEffort: "low",
@@ -133,7 +195,7 @@ export class CodexSdkWorkflowRunner {
         return { threadId, mode: "start" };
     }
     async resumeWorkflow(threadId, input) {
-        const codex = createCodexClient(input);
+        const codex = await createCodexClient(input);
         const thread = codex.resumeThread(threadId, {
             model: input.model ?? undefined,
             modelReasoningEffort: "low",

package/dist/core/db.js

@@ -97,6 +97,8 @@ function ensureBaseTables(db, embeddingDimensions) {
       queued_at TEXT NOT NULL,
       claimed_at TEXT,
       started_at TEXT,
+      heartbeat_at TEXT,
+      processing_owner_id TEXT,
       processed_at TEXT,
       result_page_id TEXT,
       error_message TEXT,
@@ -133,6 +135,8 @@ function ensureBaseTables(db, embeddingDimensions) {
     ensureTableColumns(db, "vault_processing_queue", {
         claimed_at: "TEXT",
         started_at: "TEXT",
+        heartbeat_at: "TEXT",
+        processing_owner_id: "TEXT",
         thread_id: "TEXT",
         workflow_version: "TEXT",
         decision: "TEXT",

package/dist/core/embedding.js

@@ -1,5 +1,6 @@
 import { sha256Text } from "../utils/fs.js";
 import { AppError } from "../utils/errors.js";
+export const DEFAULT_EMBEDDING_DIMENSIONS = 1536;
 export class EmbeddingClient {
     settings;
     constructor(settings) {
@@ -9,7 +10,7 @@ export class EmbeddingClient {
         const baseUrl = env.EMBEDDING_BASE_URL ?? env.OPENROUTER_BASE_URL;
         const apiKey = env.EMBEDDING_API_KEY ?? env.OPENROUTER_API_KEY;
         const model = env.EMBEDDING_MODEL ?? env.OPENROUTER_EMBEDDING_MODEL;
-        const rawDimensions = env.EMBEDDING_DIMENSIONS ?? "384";
+        const rawDimensions = env.EMBEDDING_DIMENSIONS ?? String(DEFAULT_EMBEDDING_DIMENSIONS);
         if (!baseUrl || !apiKey || !model) {
             return null;
         }

package/dist/core/onboarding.js

@@ -4,9 +4,9 @@ import { fileURLToPath } from "node:url";
 import { confirm, input, password, select } from "@inquirer/prompts";
 import { DEFAULT_WIKI_ENV_FILE, getCliEnvironmentInfo, parseEnvFile, serializeEnvEntries } from "./cli-env.js";
 import { resolveTemplateFilePath, loadConfig } from "./config.js";
-import { EmbeddingClient } from "./embedding.js";
+import { DEFAULT_EMBEDDING_DIMENSIONS, EmbeddingClient } from "./embedding.js";
 import { writeGlobalConfig } from "./global-config.js";
-import { parseVaultHashMode, parseWikiAgentSandboxMode, resolveAgentSettings } from "./paths.js";
+import { DEFAULT_WIKI_AGENT_MODEL, defaultWikiAgentCodexHome, parseVaultHashMode, parseWikiAgentAuthMode, parseWikiAgentSandboxMode, resolveAgentSettings, } from "./paths.js";
 import { loadSynologyConfigFromEnv, normalizeSynologyRemotePath, withSynologyClient } from "./synology.js";
 import { ensureWikiSkillInstall, formatParserSkills, inspectSkillInstall, installParserSkill, OPTIONAL_PARSER_SKILLS, parseParserSkillSelection, parseParserSkills, resolveWorkspaceRootFromWikiPath, resolveWorkspaceSkillPath, resolveWorkspaceSkillPaths, } from "./workspace-skills.js";
 import { scaffoldWorkspaceAssets } from "./workspace-bootstrap.js";
@@ -32,8 +32,10 @@ const MANAGED_ENV_KEYS = new Set([
     "EMBEDDING_MODEL",
     "EMBEDDING_DIMENSIONS",
     "WIKI_AGENT_ENABLED",
+    "WIKI_AGENT_AUTH_MODE",
     "WIKI_AGENT_BASE_URL",
     "WIKI_AGENT_API_KEY",
+    "WIKI_AGENT_CODEX_HOME",
     "WIKI_AGENT_MODEL",
     "WIKI_AGENT_BATCH_SIZE",
     "WIKI_AGENT_SANDBOX_MODE",
@@ -86,6 +88,17 @@ function safeAgentSandboxMode(rawValue) {
         return "danger-full-access";
     }
 }
+function safeAgentAuthMode(env) {
+    try {
+        if (env.WIKI_AGENT_AUTH_MODE && env.WIKI_AGENT_AUTH_MODE.trim()) {
+            return parseWikiAgentAuthMode(env.WIKI_AGENT_AUTH_MODE);
+        }
+    }
+    catch {
+        return env.WIKI_AGENT_API_KEY?.trim() ? "api-key" : "codex-login";
+    }
+    return env.WIKI_AGENT_API_KEY?.trim() ? "api-key" : "codex-login";
+}
 function safeBooleanFlag(rawValue, defaultValue) {
     if (rawValue === undefined || rawValue.trim().length === 0) {
         return defaultValue;
@@ -120,6 +133,12 @@ function validateWikiPath(rawValue) {
     }
     return null;
 }
+function validateAbsolutePath(rawValue, label) {
+    if (!path.isAbsolute(rawValue.trim())) {
+        return `${label} must be an absolute path.`;
+    }
+    return null;
+}
 class InquirerPromptDriver {
     inputStream;
     outputStream;
@@ -368,6 +387,7 @@ function getPathDefaults(env, cwd) {
     const configPath = env.WIKI_CONFIG_PATH ? path.resolve(env.WIKI_CONFIG_PATH) : path.join(wikiRoot, "wiki.config.json");
     const templatesPath = env.WIKI_TEMPLATES_PATH ? path.resolve(env.WIKI_TEMPLATES_PATH) : path.join(wikiRoot, "templates");
     const defaultHashMode = vaultSource === "synology" ? "mtime" : "content";
+    const agentAuthMode = safeAgentAuthMode(env);
     return {
         envFilePath: env.WIKI_ENV_FILE ? path.resolve(cwd, env.WIKI_ENV_FILE) : path.join(cwd, DEFAULT_WIKI_ENV_FILE),
         vaultSource,
@@ -388,11 +408,13 @@ function getPathDefaults(env, cwd) {
         embeddingBaseUrl: env.EMBEDDING_BASE_URL ?? env.OPENROUTER_BASE_URL ?? "https://api.openai.com/v1",
         embeddingApiKey: env.EMBEDDING_API_KEY ?? env.OPENROUTER_API_KEY ?? null,
         embeddingModel: env.EMBEDDING_MODEL ?? env.OPENROUTER_EMBEDDING_MODEL ?? "text-embedding-3-small",
-        embeddingDimensions: env.EMBEDDING_DIMENSIONS ?? "384",
+        embeddingDimensions: env.EMBEDDING_DIMENSIONS ?? String(DEFAULT_EMBEDDING_DIMENSIONS),
         agentEnabled: (env.WIKI_AGENT_ENABLED ?? "").trim().toLowerCase() === "true",
-        agentBaseUrl: env.WIKI_AGENT_BASE_URL ?? "https://api.openai.com/v1",
+        agentAuthMode,
+        agentBaseUrl: env.WIKI_AGENT_BASE_URL ?? (agentAuthMode === "api-key" ? "https://api.openai.com/v1" : null),
         agentApiKey: env.WIKI_AGENT_API_KEY ?? null,
-        agentModel: env.WIKI_AGENT_MODEL ?? null,
+        agentCodexHome: env.WIKI_AGENT_CODEX_HOME ?? defaultWikiAgentCodexHome(),
+        agentModel: env.WIKI_AGENT_MODEL ?? DEFAULT_WIKI_AGENT_MODEL,
         agentBatchSize: env.WIKI_AGENT_BATCH_SIZE ?? "5",
         agentSandboxMode: safeAgentSandboxMode(env.WIKI_AGENT_SANDBOX_MODE),
         parserSkills: parseParserSkills(env.WIKI_PARSER_SKILLS, { strict: false }),
@@ -417,7 +439,7 @@ async function collectEmbeddingSettings(driver, ctx, defaults, env) {
             required: true,
         });
         const embeddingModel = await promptText(driver, "EMBEDDING_MODEL", defaults.embeddingModel ?? "text-embedding-3-small", { required: true });
-        const embeddingDimensions = await promptText(driver, "EMBEDDING_DIMENSIONS", defaults.embeddingDimensions ?? "384", { validator: (value) => validateNonNegativeInteger(value, "EMBEDDING_DIMENSIONS") });
+        const embeddingDimensions = await promptText(driver, "EMBEDDING_DIMENSIONS", defaults.embeddingDimensions ?? String(DEFAULT_EMBEDDING_DIMENSIONS), { validator: (value) => validateNonNegativeInteger(value, "EMBEDDING_DIMENSIONS") });
         const shouldProbe = await promptYesNo(driver, "Probe the embedding endpoint now?", false);
         if (shouldProbe) {
             try {
@@ -457,19 +479,50 @@ async function collectAgentSettings(driver, ctx, defaults) {
     if (!enabled) {
         return {
             agentEnabled: false,
+            agentAuthMode: null,
             agentBaseUrl: null,
             agentApiKey: null,
+            agentCodexHome: null,
             agentModel: null,
             agentBatchSize: null,
             agentSandboxMode: null,
         };
     }
     writeWarning(ctx.output, "Warning: danger-full-access grants full access to the runtime workspace.");
+    const agentAuthMode = await driver.select({
+        message: "WIKI_AGENT_AUTH_MODE",
+        defaultValue: defaults.agentAuthMode ?? "codex-login",
+        choices: [
+            {
+                value: "codex-login",
+                label: "codex-login",
+                description: "Use a local Codex ChatGPT login stored under WIKI_AGENT_CODEX_HOME.",
+            },
+            {
+                value: "api-key",
+                label: "api-key",
+                description: "Use WIKI_AGENT_API_KEY and optional WIKI_AGENT_BASE_URL.",
+            },
+        ],
+    });
+    const authSettings = agentAuthMode === "api-key"
+        ? {
+            agentBaseUrl: await promptText(driver, "WIKI_AGENT_BASE_URL", defaults.agentBaseUrl ?? "https://api.openai.com/v1", { validator: (value) => validateUrl(value, "WIKI_AGENT_BASE_URL") }),
+            agentApiKey: await promptPassword(driver, "WIKI_AGENT_API_KEY", defaults.agentApiKey ?? "", {
+                required: true,
+            }),
+            agentCodexHome: null,
+        }
+        : {
+            agentBaseUrl: null,
+            agentApiKey: null,
+            agentCodexHome: await promptText(driver, "WIKI_AGENT_CODEX_HOME", defaults.agentCodexHome ?? defaultWikiAgentCodexHome(), { validator: (value) => validateAbsolutePath(value, "WIKI_AGENT_CODEX_HOME") }),
+        };
     return {
         agentEnabled: true,
-        agentBaseUrl: await promptText(driver, "WIKI_AGENT_BASE_URL", defaults.agentBaseUrl ?? "https://api.openai.com/v1", { validator: (value) => validateUrl(value, "WIKI_AGENT_BASE_URL") }),
-        agentApiKey: await promptPassword(driver, "WIKI_AGENT_API_KEY", defaults.agentApiKey ?? "", { required: true }),
-        agentModel: await promptText(driver, "WIKI_AGENT_MODEL", defaults.agentModel ?? "", { required: true }),
+        agentAuthMode,
+        ...authSettings,
+        agentModel: await promptText(driver, "WIKI_AGENT_MODEL", defaults.agentModel ?? DEFAULT_WIKI_AGENT_MODEL, { required: true }),
         agentBatchSize: await promptText(driver, "WIKI_AGENT_BATCH_SIZE", defaults.agentBatchSize ?? "5", { validator: (value) => validateNonNegativeInteger(value, "WIKI_AGENT_BATCH_SIZE") }),
         agentSandboxMode: await driver.select({
             message: "WIKI_AGENT_SANDBOX_MODE",
@@ -561,7 +614,13 @@ function buildSetupSummary(values) {
         lines.push(`  EMBEDDING_DIMENSIONS: ${values.embeddingDimensions}`);
     }
     if (values.agentEnabled) {
-        lines.push(`  WIKI_AGENT_BASE_URL: ${values.agentBaseUrl}`);
+        lines.push(`  WIKI_AGENT_AUTH_MODE: ${values.agentAuthMode}`);
+        if (values.agentAuthMode === "api-key") {
+            lines.push(`  WIKI_AGENT_BASE_URL: ${values.agentBaseUrl}`);
+        }
+        if (values.agentAuthMode === "codex-login") {
+            lines.push(`  WIKI_AGENT_CODEX_HOME: ${values.agentCodexHome}`);
+        }
         lines.push(`  WIKI_AGENT_MODEL: ${values.agentModel}`);
         lines.push(`  WIKI_AGENT_BATCH_SIZE: ${values.agentBatchSize}`);
         lines.push(`  WIKI_AGENT_SANDBOX_MODE: ${values.agentSandboxMode}`);
@@ -598,8 +657,10 @@ function writeSetupEnvFile(values) {
         ["EMBEDDING_MODEL", values.embeddingEnabled ? values.embeddingModel : null],
         ["EMBEDDING_DIMENSIONS", values.embeddingEnabled ? values.embeddingDimensions : null],
         ["WIKI_AGENT_ENABLED", values.agentEnabled ? "true" : "false"],
-        ["WIKI_AGENT_BASE_URL", values.agentEnabled ? values.agentBaseUrl : null],
-        ["WIKI_AGENT_API_KEY", values.agentEnabled ? values.agentApiKey : null],
+        ["WIKI_AGENT_AUTH_MODE", values.agentEnabled ? values.agentAuthMode : null],
+        ["WIKI_AGENT_BASE_URL", values.agentEnabled && values.agentAuthMode === "api-key" ? values.agentBaseUrl : null],
+        ["WIKI_AGENT_API_KEY", values.agentEnabled && values.agentAuthMode === "api-key" ? values.agentApiKey : null],
+        ["WIKI_AGENT_CODEX_HOME", values.agentEnabled && values.agentAuthMode === "codex-login" ? values.agentCodexHome : null],
         ["WIKI_AGENT_MODEL", values.agentEnabled ? values.agentModel : null],
         ["WIKI_AGENT_BATCH_SIZE", values.agentEnabled ? values.agentBatchSize : null],
         ["WIKI_AGENT_SANDBOX_MODE", values.agentEnabled ? values.agentSandboxMode : null],
@@ -908,7 +969,9 @@ function inspectAgent(checks, env) {
             collectDoctorCheck(checks, "error", "agent", `Automatic vault processing is enabled but missing: ${settings.missing.join(", ")}`, "Set the missing WIKI_AGENT_* values in `.wiki.env` or rerun `tiangong-wiki setup`.");
             return;
         }
-        collectDoctorCheck(checks, "ok", "agent", `Automatic vault processing is enabled with model ${settings.model}.`);
+        collectDoctorCheck(checks, "ok", "agent", settings.authMode === "codex-login"
+            ? `Automatic vault processing is enabled with model ${settings.model} via Codex login at ${settings.codexHome}.`
+            : `Automatic vault processing is enabled with model ${settings.model} via API key auth.`);
     }
     catch (error) {
         const message = error instanceof Error ? error.message : String(error);

package/dist/core/paths.js

@@ -1,8 +1,10 @@
 import { fileURLToPath } from "node:url";
+import os from "node:os";
 import path from "node:path";
 import { AppError } from "../utils/errors.js";
 const TRUE_VALUES = new Set(["1", "true", "yes", "on"]);
 const FALSE_VALUES = new Set(["0", "false", "no", "off"]);
+export const DEFAULT_WIKI_AGENT_MODEL = "gpt-5.5";
 function parseBooleanFlag(label, rawValue, defaultValue) {
     if (rawValue === undefined) {
         return defaultValue;
@@ -75,6 +77,19 @@ function requireAbsolutePath(label, rawValue) {
     }
     return path.resolve(rawValue);
 }
+function normalizeOptionalAbsolutePath(label, rawValue) {
+    const value = rawValue?.trim();
+    if (!value) {
+        return null;
+    }
+    if (!path.isAbsolute(value)) {
+        throw new AppError(`${label} must be an absolute path: ${rawValue}`, "config");
+    }
+    return path.resolve(value);
+}
+export function defaultWikiAgentCodexHome() {
+    return path.join(os.homedir(), ".codex-tiangong-wiki");
+}
 export function parseVaultHashMode(raw) {
     const value = (raw ?? "content").trim().toLowerCase();
     if (value === "content" || value === "mtime") {
@@ -89,6 +104,13 @@ export function parseWikiAgentBackend(raw) {
     }
     throw new AppError(`WIKI_AGENT_BACKEND must be "codex-workflow", got ${raw}`, "config");
 }
+export function parseWikiAgentAuthMode(raw) {
+    const value = (raw ?? "api-key").trim().toLowerCase();
+    if (value === "api-key" || value === "codex-login") {
+        return value;
+    }
+    throw new AppError(`WIKI_AGENT_AUTH_MODE must be "api-key" or "codex-login", got ${raw}`, "config");
+}
 export function parseWikiAgentSandboxMode(raw) {
     const value = (raw ?? "danger-full-access").trim().toLowerCase();
     if (value === "danger-full-access" || value === "workspace-write") {
@@ -98,28 +120,33 @@ export function parseWikiAgentSandboxMode(raw) {
 }
 export function resolveAgentSettings(env = process.env, options = {}) {
     const enabled = parseBooleanFlag("WIKI_AGENT_ENABLED", env.WIKI_AGENT_ENABLED, false);
-    const baseUrl = normalizeOptionalUrl(env.WIKI_AGENT_BASE_URL);
-    const apiKey = env.WIKI_AGENT_API_KEY?.trim() || null;
-    const model = env.WIKI_AGENT_MODEL?.trim() || null;
+    const authMode = parseWikiAgentAuthMode(env.WIKI_AGENT_AUTH_MODE);
+    const rawBaseUrl = normalizeOptionalUrl(env.WIKI_AGENT_BASE_URL);
+    const baseUrl = authMode === "api-key" ? rawBaseUrl : null;
+    const rawApiKey = env.WIKI_AGENT_API_KEY?.trim() || null;
+    const apiKey = authMode === "api-key" ? rawApiKey : null;
+    const codexHome = authMode === "codex-login"
+        ? normalizeOptionalAbsolutePath("WIKI_AGENT_CODEX_HOME", env.WIKI_AGENT_CODEX_HOME) ?? defaultWikiAgentCodexHome()
+        : null;
+    const model = env.WIKI_AGENT_MODEL?.trim() || DEFAULT_WIKI_AGENT_MODEL;
     const batchSize = parseNonNegativeInteger(env.WIKI_AGENT_BATCH_SIZE, 5, "WIKI_AGENT_BATCH_SIZE");
     const sandboxMode = parseWikiAgentSandboxMode(env.WIKI_AGENT_SANDBOX_MODE);
     const workflowTimeoutSeconds = parsePositiveInteger(env.WIKI_WORKFLOW_TIMEOUT, 600, "WIKI_WORKFLOW_TIMEOUT");
     const missing = [];
     if (enabled) {
-        if (!apiKey) {
+        if (authMode === "api-key" && !apiKey) {
             missing.push("WIKI_AGENT_API_KEY");
         }
-        if (!model) {
-            missing.push("WIKI_AGENT_MODEL");
-        }
     }
     if (options.strict && enabled && missing.length > 0) {
         throw new AppError(`WIKI_AGENT_ENABLED=true but missing required settings: ${missing.join(", ")}`, "config");
     }
     return {
         enabled,
+        authMode,
         baseUrl,
         apiKey,
+        codexHome,
         model,
         batchSize,
         sandboxMode,

package/dist/core/runtime.js

@@ -1,11 +1,11 @@
 import { loadConfig } from "./config.js";
 import { openDb } from "./db.js";
-import { EmbeddingClient } from "./embedding.js";
+import { DEFAULT_EMBEDDING_DIMENSIONS, EmbeddingClient } from "./embedding.js";
 import { resolveRuntimePaths } from "./paths.js";
 export function getEmbeddingDimensionFromEnv(env = process.env) {
-    const raw = env.EMBEDDING_DIMENSIONS ?? "384";
+    const raw = env.EMBEDDING_DIMENSIONS ?? String(DEFAULT_EMBEDDING_DIMENSIONS);
     const value = Number.parseInt(raw, 10);
-    return Number.isFinite(value) && value > 0 ? value : 384;
+    return Number.isFinite(value) && value > 0 ? value : DEFAULT_EMBEDDING_DIMENSIONS;
 }
 export function loadRuntimeConfig(env = process.env) {
     const paths = resolveRuntimePaths(env);

package/dist/core/sqlite-extensions.js

@@ -23,21 +23,25 @@ function getExistingFtsSql(db) {
         .get();
     return row?.sql ?? null;
 }
-function resolveBundledSimpleExtensionPath(packageRoot) {
-    const byArch = SIMPLE_ASSET_MAP[process.platform];
+export function resolveBundledSimpleExtensionRelativePath(platform = process.platform, arch = process.arch) {
+    const byArch = SIMPLE_ASSET_MAP[platform];
     if (!byArch) {
-        throw new AppError(`Bundled simple extension is not available for platform ${process.platform}-${process.arch}.`, "config", {
-            platform: process.platform,
-            arch: process.arch,
+        throw new AppError(`Bundled simple extension is not available for platform ${platform}-${arch}.`, "config", {
+            platform,
+            arch,
         });
     }
-    const relativePath = byArch[process.arch];
+    const relativePath = byArch[arch];
     if (!relativePath) {
-        throw new AppError(`Bundled simple extension is not available for platform ${process.platform}-${process.arch}.`, "config", {
-            platform: process.platform,
-            arch: process.arch,
+        throw new AppError(`Bundled simple extension is not available for platform ${platform}-${arch}.`, "config", {
+            platform,
+            arch,
         });
     }
+    return relativePath;
+}
+function resolveBundledSimpleExtensionPath(packageRoot) {
+    const relativePath = resolveBundledSimpleExtensionRelativePath();
     const extensionPath = path.join(packageRoot, relativePath);
     if (!pathExistsSync(extensionPath)) {
         throw new AppError(`Bundled simple extension not found: ${extensionPath}`, "runtime", {

package/dist/core/sync.js

@@ -1,6 +1,6 @@
 import { loadConfig } from "./config.js";
 import { clearAllIndexedData, getMeta, openDb, resetVectorTable, setMetaValues, } from "./db.js";
-import { EmbeddingClient } from "./embedding.js";
+import { DEFAULT_EMBEDDING_DIMENSIONS, EmbeddingClient } from "./embedding.js";
 import { applyChanges, scanPages, scanSpecificPages } from "./indexer.js";
 import { resolveRuntimePaths } from "./paths.js";
 import { collectVaultFiles, syncVaultIndex } from "./vault.js";
@@ -8,9 +8,9 @@ import { AppError } from "../utils/errors.js";
 import { pathExistsSync } from "../utils/fs.js";
 import { makeSyncId, toOffsetIso } from "../utils/time.js";
 function getEmbeddingDimension(env) {
-    const raw = env.EMBEDDING_DIMENSIONS ?? "384";
+    const raw = env.EMBEDDING_DIMENSIONS ?? String(DEFAULT_EMBEDDING_DIMENSIONS);
     const value = Number.parseInt(raw, 10);
-    return Number.isFinite(value) && value > 0 ? value : 384;
+    return Number.isFinite(value) && value > 0 ? value : DEFAULT_EMBEDDING_DIMENSIONS;
 }
 function getEmbeddingTargets(db, embedAll, insertedIds, summaryChangedIds) {
     const rows = db.prepare("SELECT rowid, id, summary_text AS summaryText, embedding_status AS embeddingStatus FROM pages").all();