@excitedjs/dreamux 0.1.1

package/dist/admin/socket.js

@@ -0,0 +1,251 @@
+/**
+ * The admin Unix-socket server.
+ *
+ * One client gets one line-delimited NDJSON stream of requests; we reply
+ * with one line per request. Permissions on the socket are 0600 to keep
+ * other local users out (issue #2 §"管理接口").
+ */
+import { createServer } from 'node:net';
+import { chmodSync, existsSync, readFileSync, rmSync, writeFileSync, } from 'node:fs';
+import { AdminError, } from './protocol.js';
+import { adminMethods } from './methods.js';
+/**
+ * Max attempts to reclaim a stale pidfile before yielding to a competitor.
+ * Mirrors claudemux's instance-lock policy.
+ */
+const RECLAIM_ATTEMPTS = 3;
+export function createAdminSocketServer(server, socketPath, options = {}) {
+    const chmod = options.chmodFn ?? chmodSync;
+    const isAlive = options.isPidAlive ?? defaultIsPidAlive;
+    const myPid = options.selfPid ?? process.pid;
+    const lockPath = `${socketPath}.lock`;
+    let netServer = null;
+    let holdLock = false;
+    return {
+        socketPath,
+        async start() {
+            // PR #3 review #3 (r2): the previous probe-then-unlink had a TOCTOU
+            // window — two competing startups could both observe a stale socket
+            // as not-live, then one bind successfully and the other unlink it
+            // out from under the first. We resolve this by gating *every* path
+            // (probe, cleanup, bind) behind a pidfile that's created with the
+            // exclusive `wx` flag — atomic at the filesystem level. Once we
+            // hold it, nobody else can be inside this start() concurrently.
+            // Stale pidfiles (dead holder) are reclaimed up to RECLAIM_ATTEMPTS
+            // times; a live holder always loses the race.
+            acquirePidLock(lockPath, myPid, isAlive);
+            holdLock = true;
+            try {
+                // Lock is held — stale socket cleanup is now race-free.
+                if (existsSync(socketPath)) {
+                    rmSync(socketPath, { force: true });
+                }
+                netServer = createServer((sock) => handleConnection(server, sock));
+                await new Promise((res, rej) => {
+                    netServer.once('error', rej);
+                    netServer.listen(socketPath, () => res());
+                });
+                // PR #3 review #2: chmod is a hard requirement, not best-effort —
+                // a 0666 admin socket exposes server-ctl methods to every local user.
+                try {
+                    chmod(socketPath, 0o600);
+                }
+                catch (e) {
+                    const chmodErr = e instanceof Error ? e.message : String(e);
+                    throw new Error(`admin socket ${socketPath} could not be locked down to 0600 (${chmodErr}); refusing to expose it on a permissive mode`);
+                }
+            }
+            catch (err) {
+                // Unwind whatever partial state we set up — bound server, socket
+                // file, and the pidfile lock — so a retry doesn't trip over our
+                // own leftovers.
+                if (netServer !== null) {
+                    const closing = netServer;
+                    netServer = null;
+                    await new Promise((res) => closing.close(() => res()));
+                }
+                try {
+                    rmSync(socketPath, { force: true });
+                }
+                catch {
+                    /* best-effort */
+                }
+                releasePidLock(lockPath, myPid);
+                holdLock = false;
+                throw err;
+            }
+        },
+        async close() {
+            if (netServer !== null) {
+                await new Promise((res) => netServer.close(() => res()));
+                netServer = null;
+                try {
+                    rmSync(socketPath, { force: true });
+                }
+                catch {
+                    /* */
+                }
+            }
+            if (holdLock) {
+                releasePidLock(lockPath, myPid);
+                holdLock = false;
+            }
+        },
+    };
+}
+/**
+ * Acquire the single-instance pidfile lock.
+ *
+ * Atomic `wx` create races safely: two competing startups both attempt the
+ * same call; one wins, one gets EEXIST. The loser then reads the holder's
+ * PID and decides:
+ *   - alive holder  → throw (split-brain prevention)
+ *   - dead holder   → remove the stale file and retry the `wx` create
+ *
+ * RECLAIM_ATTEMPTS bounds the retry so a pathologically broken filesystem
+ * doesn't spin forever.
+ */
+function acquirePidLock(lockPath, myPid, isAlive) {
+    for (let attempt = 0; attempt < RECLAIM_ATTEMPTS; attempt++) {
+        try {
+            writeFileSync(lockPath, `${myPid}\n`, { flag: 'wx', mode: 0o600 });
+            return;
+        }
+        catch (err) {
+            if (err.code !== 'EEXIST')
+                throw err;
+        }
+        const holder = readPidFile(lockPath);
+        if (holder === myPid) {
+            // Re-entrant — shouldn't happen in normal use, but treat as held.
+            return;
+        }
+        if (holder !== null && isAlive(holder)) {
+            throw new Error(`admin socket lockfile ${lockPath} is held by another live dreamux-server process (pid ${holder}). ` +
+                'Refusing to bind to avoid split-brain admin control. ' +
+                'Stop the other instance, or set CODEX_HOST_ADMIN_SOCKET to a different path.');
+        }
+        // Stale lock (unreadable PID, or PID belongs to a dead process).
+        // Remove and retry the exclusive create. A competitor reclaiming the
+        // same stale file simply wins this round of `wx`, and we'll see *their*
+        // live PID on the next iteration and bail out.
+        try {
+            rmSync(lockPath, { force: true });
+        }
+        catch {
+            /* concurrent reclaim — retry the wx open */
+        }
+    }
+    throw new Error(`admin socket lockfile ${lockPath} could not be acquired after ${RECLAIM_ATTEMPTS} reclaim attempts; ` +
+        'a competitor is racing us. Retry, or set CODEX_HOST_ADMIN_SOCKET to a different path.');
+}
+/**
+ * Release the pidfile lock — but only if it still names us. A holder whose
+ * file was already reclaimed by a competitor (e.g. we were paused long
+ * enough for our PID to look dead) must not delete the new holder's lock.
+ */
+function releasePidLock(lockPath, myPid) {
+    if (readPidFile(lockPath) !== myPid)
+        return;
+    try {
+        rmSync(lockPath, { force: true });
+    }
+    catch {
+        /* best-effort */
+    }
+}
+function readPidFile(path) {
+    let txt;
+    try {
+        txt = readFileSync(path, 'utf8').trim();
+    }
+    catch {
+        return null;
+    }
+    if (txt === '')
+        return null;
+    const n = Number.parseInt(txt, 10);
+    return Number.isInteger(n) && n > 0 ? n : null;
+}
+function defaultIsPidAlive(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (e) {
+        // EPERM means the process exists but we can't signal it (still alive).
+        return e.code === 'EPERM';
+    }
+}
+function handleConnection(server, sock) {
+    let buf = '';
+    sock.setEncoding('utf8');
+    sock.on('data', (chunk) => {
+        buf += chunk;
+        let idx;
+        while ((idx = buf.indexOf('\n')) !== -1) {
+            const line = buf.slice(0, idx).trim();
+            buf = buf.slice(idx + 1);
+            if (line === '')
+                continue;
+            void processLine(server, sock, line);
+        }
+    });
+    sock.on('error', () => {
+        /* client closed unexpectedly — nothing more to do */
+    });
+}
+async function processLine(server, sock, line) {
+    let req;
+    try {
+        req = JSON.parse(line);
+        if (typeof req !== 'object' || req === null || typeof req.id !== 'string') {
+            throw new Error('bad request envelope');
+        }
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        write(sock, { id: '?', ok: false, error: { code: 'BAD_REQUEST', message: msg } });
+        return;
+    }
+    const handler = adminMethods[req.method];
+    if (handler === undefined) {
+        write(sock, {
+            id: req.id,
+            ok: false,
+            error: { code: 'UNKNOWN_METHOD', message: `unknown method '${req.method}'` },
+        });
+        return;
+    }
+    try {
+        const result = await handler(server, req.params);
+        write(sock, { id: req.id, ok: true, result });
+    }
+    catch (err) {
+        if (err instanceof AdminError) {
+            write(sock, {
+                id: req.id,
+                ok: false,
+                error: { code: err.code, message: err.message },
+            });
+            return;
+        }
+        const msg = err instanceof Error ? err.message : String(err);
+        write(sock, {
+            id: req.id,
+            ok: false,
+            error: { code: 'INTERNAL', message: msg },
+        });
+    }
+}
+function write(sock, response) {
+    try {
+        sock.write(`${JSON.stringify(response)}\n`);
+    }
+    catch {
+        /* client gone */
+    }
+}
+//# sourceMappingURL=socket.js.map

package/dist/admin/socket.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"socket.js","sourceRoot":"","sources":["../../src/admin/socket.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAyC,MAAM,UAAU,CAAC;AAC/E,OAAO,EACL,SAAS,EACT,UAAU,EACV,YAAY,EACZ,MAAM,EACN,aAAa,GACd,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,UAAU,GAGX,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA4B5C;;;GAGG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,UAAkB,EAClB,UAA8B,EAAE;IAEhC,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,UAAU,OAAO,CAAC;IACtC,IAAI,SAAS,GAAqB,IAAI,CAAC;IACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,OAAO;QACL,UAAU;QAEV,KAAK,CAAC,KAAK;YACT,oEAAoE;YACpE,oEAAoE;YACpE,kEAAkE;YAClE,mEAAmE;YACnE,kEAAkE;YAClE,gEAAgE;YAChE,gEAAgE;YAChE,oEAAoE;YACpE,8CAA8C;YAC9C,cAAc,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;YACzC,QAAQ,GAAG,IAAI,CAAC;YAEhB,IAAI,CAAC;gBACH,wDAAwD;gBACxD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;oBAC3B,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtC,CAAC;gBAED,SAAS,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;gBACnE,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;oBACnC,SAAU,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBAC9B,SAAU,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC7C,CAAC,CAAC,CAAC;gBAEH,kEAAkE;gBAClE,sEAAsE;gBACtE,IAAI,CAAC;oBACH,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;gBAC3B,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,QAAQ,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;oBAC5D,MAAM,IAAI,KAAK,CACb,gBAAgB,UAAU,sCAAsC,QAAQ,+CAA+C,CACxH,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,iEAAiE;gBACjE,gEAAgE;gBAChE,iBAAiB;gBACjB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,MAAM,OAAO,GAAG,SAAS,CAAC;oBAC1B,SAAS,GAAG,IAAI,CAAC;oBACjB,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC/D,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtC,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;gBACD,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAChC,QAAQ,GAAG,KAAK,CAAC;gBACjB,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK;YACT,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,EAAE,CAAC,SAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;gBAChE,SAAS,GAAG,IAAI,CAAC;gBACjB,IAAI,CAAC;oBACH,MAAM,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtC,CAAC;gBAAC,MAAM,CAAC;oBACP,KAAK;gBACP,CAAC;YACH,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAChC,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,cAAc,CACrB,QAAgB,EAChB,KAAa,EACb,OAAiC;IAEjC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC;QAC5D,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,GAAG,CAAC;QAClE,CAAC;QACD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,kEAAkE;YAClE,OAAO;QACT,CAAC;QACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,yBAAyB,QAAQ,wDAAwD,MAAM,KAAK;gBAClG,uDAAuD;gBACvD,8EAA8E,CACjF,CAAC;QACJ,CAAC;QACD,iEAAiE;QACjE,qEAAqE;QACrE,wEAAwE;QACxE,+CAA+C;QAC/C,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CACb,yBAAyB,QAAQ,gCAAgC,gBAAgB,qBAAqB;QACpG,uFAAuF,CAC1F,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAgB,EAAE,KAAa;IACrD,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,KAAK;QAAE,OAAO;IAC5C,IAAI,CAAC;QACH,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,uEAAuE;QACvE,OAAQ,CAA2B,CAAC,IAAI,KAAK,OAAO,CAAC;IACvD,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,IAAY;IACpD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACzB,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QACxB,GAAG,IAAI,KAAK,CAAC;QACb,IAAI,GAAW,CAAC;QAChB,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACtC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,EAAE;gBAAE,SAAS;YAC1B,KAAK,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACpB,qDAAqD;IACvD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,IAAY;IACnE,IAAI,GAAiB,CAAC;IACtB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAiB,CAAC;QACvC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QAClF,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,EAAE;YACV,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,mBAAmB,GAAG,CAAC,MAAM,GAAG,EAAE;SAC7E,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,EAAE;gBACV,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE;aAChD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,KAAK,CAAC,IAAI,EAAE;YACV,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE;SAC1C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,IAAY,EAAE,QAAuB;IAClD,IAAI,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC"}

package/dist/cli/dreamux.js

@@ -0,0 +1,105 @@
+/**
+ * `dreamux` — the unified top-level CLI (issue #4).
+ *
+ * Subcommands:
+ *   dreamux server start                # start the long-running server
+ *   dreamux server status               # admin-socket query
+ *   dreamux dispatcher add ...          # configure a dispatcher
+ *   dreamux dispatcher remove --id X
+ *   dreamux dispatcher list
+ *   dreamux dispatcher status --id X
+ *   dreamux dispatcher start --id X
+ *   dreamux dispatcher stop --id X
+ *
+ * Implementation note: this binary is a thin router. `server start` delegates
+ * to the same entrypoint as the legacy `dreamux-server` (`./server.js`);
+ * everything else is forwarded to the legacy `server-ctl` flow
+ * (`./server-ctl.js`). Both legacy binaries are kept as aliases for users
+ * with stale PATH entries (PR #6 shipped them; reverting would break local
+ * setups).
+ */
+import { spawn } from 'node:child_process';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+const HERE = dirname(fileURLToPath(import.meta.url));
+const SERVER_ENTRY = join(HERE, 'server.js');
+const SERVER_CTL_ENTRY = join(HERE, 'server-ctl.js');
+function printRootHelp() {
+    console.log(`dreamux — Codex-host MVP unified CLI (excitedjs/dreamux#4)
+
+Usage:
+  dreamux server start
+  dreamux server status
+  dreamux dispatcher list
+  dreamux dispatcher add --id <ID> --bot-app-id <APP_ID> \\
+                         --bot-secret-ref env:<VAR> [--codex-args-json <JSON>] [--codex-cwd <PATH>]
+  dreamux dispatcher status --id <ID>
+  dreamux dispatcher start  --id <ID>
+  dreamux dispatcher stop   --id <ID>
+  dreamux dispatcher remove --id <ID>
+
+Environment:
+  CODEX_HOST_RUNTIME_DIR    Root dir (default: ~/.codex-host)
+  CODEX_HOST_ADMIN_SOCKET   Admin Unix socket path
+  CODEX_HOST_CODEX_BIN      Codex binary (default: 'codex' on PATH)
+  BOT_SECRET_<NAME>         Each dispatcher's bot secret (referenced via
+                            bot_secret_ref=env:BOT_SECRET_<NAME>)
+
+The legacy 'dreamux-server' and 'server-ctl' binaries remain available as
+aliases for compatibility; new tooling should call 'dreamux'.
+`);
+}
+function fail(msg, code = 2) {
+    console.error(`dreamux: ${msg}\n`);
+    printRootHelp();
+    process.exit(code);
+}
+async function execEntry(entry, argv) {
+    // Re-exec node on the target so each subcommand keeps its own argv / process
+    // environment; no shared state to leak between subcommands.
+    const child = spawn(process.execPath, [entry, ...argv], {
+        stdio: 'inherit',
+    });
+    await new Promise((res, rej) => {
+        child.once('error', rej);
+        child.once('exit', (code, signal) => {
+            if (signal !== null)
+                process.kill(process.pid, signal);
+            process.exit(code ?? 0);
+            res();
+        });
+    });
+    process.exit(0); // unreachable; satisfies TS never
+}
+async function main() {
+    const argv = process.argv.slice(2);
+    if (argv.length === 0 || argv[0] === '--help' || argv[0] === '-h') {
+        printRootHelp();
+        return;
+    }
+    const [topic, sub, ...rest] = argv;
+    if (topic === 'server') {
+        if (sub === 'start') {
+            await execEntry(SERVER_ENTRY, rest);
+            return;
+        }
+        if (sub === 'status') {
+            // server status is an admin-socket query (server-ctl `server status`).
+            await execEntry(SERVER_CTL_ENTRY, ['server', 'status', ...rest]);
+            return;
+        }
+        fail(`unknown 'server' subcommand: ${sub ?? '(missing)'}`);
+    }
+    if (topic === 'dispatcher') {
+        if (sub === undefined)
+            fail("missing 'dispatcher' subcommand");
+        await execEntry(SERVER_CTL_ENTRY, ['dispatcher', sub, ...rest]);
+        return;
+    }
+    fail(`unknown command: ${topic ?? ''}`);
+}
+main().catch((err) => {
+    console.error(`dreamux: ${err instanceof Error ? err.message : err}`);
+    process.exit(1);
+});
+//# sourceMappingURL=dreamux.js.map

package/dist/cli/dreamux.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dreamux.js","sourceRoot":"","sources":["../../src/cli/dreamux.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;AAC7C,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;AAErD,SAAS,aAAa;IACpB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;CAsBb,CAAC,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,GAAW,EAAE,IAAI,GAAG,CAAC;IACjC,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACnC,aAAa,EAAE,CAAC;IAChB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,KAAa,EAAE,IAAc;IACpD,6EAA6E;IAC7E,4DAA4D;IAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE;QACtD,KAAK,EAAE,SAAS;KACjB,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACvD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;YACxB,GAAG,EAAE,CAAC;QACR,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,kCAAkC;AACrD,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClE,aAAa,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IAED,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACnC,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACpB,MAAM,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YACpC,OAAO;QACT,CAAC;QACD,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YACrB,uEAAuE;YACvE,MAAM,SAAS,CAAC,gBAAgB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;YACjE,OAAO;QACT,CAAC;QACD,IAAI,CAAC,gCAAgC,GAAG,IAAI,WAAW,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;QAC3B,IAAI,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC/D,MAAM,SAAS,CAAC,gBAAgB,EAAE,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,oBAAoB,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cli/server-ctl.js

@@ -0,0 +1,172 @@
+/**
+ * `server-ctl` — admin CLI that talks to the server via Unix socket.
+ *
+ * Connects to the admin socket (CODEX_HOST_ADMIN_SOCKET or default), sends a
+ * single NDJSON request, prints the response, exits.
+ *
+ * Usage:
+ *   server-ctl server status
+ *   server-ctl dispatcher list
+ *   server-ctl dispatcher add --id flow --bot-app-id cli_aaa --bot-secret-ref env:BOT_SECRET_FLOW
+ *   server-ctl dispatcher status --id flow
+ *   server-ctl dispatcher start --id flow
+ *   server-ctl dispatcher stop --id flow
+ *   server-ctl dispatcher remove --id flow
+ */
+import { connect } from 'node:net';
+import { adminSocketPath } from '../runtime/paths.js';
+function parseArgs(argv) {
+    const flags = {};
+    const positional = [];
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a.startsWith('--')) {
+            const key = a.slice(2);
+            const next = argv[i + 1];
+            if (next === undefined || next.startsWith('--')) {
+                flags[key] = 'true';
+            }
+            else {
+                flags[key] = next;
+                i++;
+            }
+        }
+        else {
+            positional.push(a);
+        }
+    }
+    return { flags, positional };
+}
+async function main() {
+    const argv = process.argv.slice(2);
+    if (argv.length === 0 || argv[0] === '--help' || argv[0] === '-h') {
+        printHelp();
+        return;
+    }
+    const { flags, positional } = parseArgs(argv);
+    const [obj, verb] = positional;
+    const method = resolveMethod(obj, verb);
+    if (method === null) {
+        console.error(`unknown command: ${obj ?? ''} ${verb ?? ''}\n`);
+        printHelp();
+        process.exit(2);
+    }
+    const params = flagsToParams(method, flags);
+    const request = { id: cryptoRandomId(), method, params };
+    const response = await sendOne(adminSocketPath(), request);
+    if (response.ok) {
+        console.log(JSON.stringify(response.result, null, 2));
+    }
+    else {
+        console.error(`error: [${response.error.code}] ${response.error.message}`);
+        process.exit(1);
+    }
+}
+function resolveMethod(obj, verb) {
+    const o = obj ?? '';
+    const v = verb ?? '';
+    if (o === 'server' && v === 'status')
+        return 'server.status';
+    if (o === 'dispatcher') {
+        switch (v) {
+            case 'add': return 'dispatcher.add';
+            case 'remove': return 'dispatcher.remove';
+            case 'list': return 'dispatcher.list';
+            case 'status': return 'dispatcher.status';
+            case 'start': return 'dispatcher.start';
+            case 'stop': return 'dispatcher.stop';
+        }
+    }
+    return null;
+}
+const FLAG_TO_PARAM = {
+    id: 'dispatcher_id',
+    'bot-app-id': 'bot_app_id',
+    'bot-secret-ref': 'bot_secret_ref',
+    'codex-args-json': 'codex_args_json',
+    'codex-cwd': 'codex_cwd',
+};
+function flagsToParams(_method, flags) {
+    const params = {};
+    for (const [k, v] of Object.entries(flags)) {
+        const key = FLAG_TO_PARAM[k] ?? k.replace(/-/g, '_');
+        params[key] = v;
+    }
+    return params;
+}
+function sendOne(socketPath, request) {
+    return new Promise((resolve, reject) => {
+        let buf = '';
+        let settled = false;
+        let sock;
+        try {
+            sock = connect(socketPath);
+        }
+        catch (err) {
+            reject(err);
+            return;
+        }
+        sock.setEncoding('utf8');
+        sock.on('connect', () => {
+            sock.write(`${JSON.stringify(request)}\n`);
+        });
+        sock.on('data', (chunk) => {
+            buf += chunk;
+            const nl = buf.indexOf('\n');
+            if (nl !== -1 && !settled) {
+                settled = true;
+                const line = buf.slice(0, nl).trim();
+                try {
+                    resolve(JSON.parse(line));
+                }
+                catch (err) {
+                    reject(err);
+                }
+                sock.end();
+            }
+        });
+        sock.on('error', (err) => {
+            if (settled)
+                return;
+            settled = true;
+            const code = err.code;
+            if (code === 'ENOENT' || code === 'ECONNREFUSED') {
+                reject(new Error(`cannot reach admin socket at ${socketPath} — is the server running?`));
+            }
+            else {
+                reject(err);
+            }
+        });
+        sock.on('close', () => {
+            if (settled)
+                return;
+            settled = true;
+            reject(new Error('admin socket closed without a response'));
+        });
+    });
+}
+function cryptoRandomId() {
+    return `cli-${Date.now()}-${Math.floor(Math.random() * 1e6)}`;
+}
+function printHelp() {
+    console.log(`server-ctl — admin CLI for the dreamux server
+
+Usage:
+  server-ctl server status
+  server-ctl dispatcher list
+  server-ctl dispatcher add --id <ID> --bot-app-id <APP_ID> \\
+                            --bot-secret-ref env:<VAR> [--codex-args-json <JSON>] [--codex-cwd <PATH>]
+  server-ctl dispatcher status --id <ID>
+  server-ctl dispatcher start --id <ID>
+  server-ctl dispatcher stop --id <ID>
+  server-ctl dispatcher remove --id <ID>
+
+Environment:
+  CODEX_HOST_ADMIN_SOCKET   override the admin socket path (default: ~/.codex-host/admin.sock)
+`);
+}
+main().catch((err) => {
+    console.error(`server-ctl: ${err instanceof Error ? err.message : err}`);
+    process.exit(1);
+});
+//# sourceMappingURL=server-ctl.js.map

package/dist/cli/server-ctl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server-ctl.js","sourceRoot":"","sources":["../../src/cli/server-ctl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,OAAO,EAAe,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAQtD,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;gBAClB,CAAC,EAAE,CAAC;YACN,CAAC;QACH,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClE,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC;IAE/B,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,oBAAoB,GAAG,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/D,SAAS,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAiB,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,eAAe,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CACX,WAAW,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAC5D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAuB,EAAE,IAAwB;IACtE,MAAM,CAAC,GAAG,GAAG,IAAI,EAAE,CAAC;IACpB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC;IAC7D,IAAI,CAAC,KAAK,YAAY,EAAE,CAAC;QACvB,QAAQ,CAAC,EAAE,CAAC;YACV,KAAK,KAAK,CAAC,CAAC,OAAO,gBAAgB,CAAC;YACpC,KAAK,QAAQ,CAAC,CAAC,OAAO,mBAAmB,CAAC;YAC1C,KAAK,MAAM,CAAC,CAAC,OAAO,iBAAiB,CAAC;YACtC,KAAK,QAAQ,CAAC,CAAC,OAAO,mBAAmB,CAAC;YAC1C,KAAK,OAAO,CAAC,CAAC,OAAO,kBAAkB,CAAC;YACxC,KAAK,MAAM,CAAC,CAAC,OAAO,iBAAiB,CAAC;QACxC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,aAAa,GAA2B;IAC5C,EAAE,EAAE,eAAe;IACnB,YAAY,EAAE,YAAY;IAC1B,gBAAgB,EAAE,gBAAgB;IAClC,iBAAiB,EAAE,iBAAiB;IACpC,WAAW,EAAE,WAAW;CACzB,CAAC;AAEF,SAAS,aAAa,CACpB,OAAe,EACf,KAA6B;IAE7B,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CACd,UAAkB,EAClB,OAAqB;IAErB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;YACxB,GAAG,IAAI,KAAK,CAAC;YACb,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC1B,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBACrC,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC,CAAC;gBAC7C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,GAAG,CAAC,CAAC;gBACd,CAAC;gBACD,IAAI,CAAC,GAAG,EAAE,CAAC;YACb,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACvB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBACjD,MAAM,CACJ,IAAI,KAAK,CACP,gCAAgC,UAAU,2BAA2B,CACtE,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACpB,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,CAAC,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc;IACrB,OAAO,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;CAcb,CAAC,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,eAAe,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/cli/server.js

@@ -0,0 +1,88 @@
+/**
+ * `dreamux-server` — the long-running server entry point.
+ *
+ * Usage:
+ *   dreamux-server                  # run in foreground; logs to stderr
+ *   dreamux-server --help
+ *
+ * Configuration sources (highest precedence first):
+ *   1. environment variables (CODEX_HOST_RUNTIME_DIR, CODEX_HOST_ADMIN_SOCKET,
+ *      CODEX_HOST_CODEX_BIN) — escape hatch for CI / one-off debug runs
+ *   2. per-dispatcher fields in SQLite (codex_args_json: approvalPolicy, extraArgs)
+ *   3. ~/.dreamux/config.toml — user-editable global defaults; auto-created
+ *      with sensible defaults on first boot (see src/runtime/config.ts)
+ *   4. built-in defaults compiled into the binary
+ *
+ * Per-dispatcher secrets stay in env (bot_secret_ref=env:VAR_NAME); they
+ * deliberately do not flow through the config file (issue #2 Q9).
+ */
+import { mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { Server } from '../server.js';
+import { loadOrInitConfig } from '../runtime/config.js';
+import { adminSocketPath, databasePath, runtimeRoot } from '../runtime/paths.js';
+async function main() {
+    if (process.argv.includes('--help') || process.argv.includes('-h')) {
+        printHelp();
+        return;
+    }
+    // Load (or create on first boot) ~/.dreamux/config.toml *before* anything
+    // else looks at runtime paths — paths.* consults the active config for
+    // its non-env defaults. A parse error here fails-fast with a file:line
+    // pointer; the operator fixes the file and restarts.
+    const { config, configFile, createdOnThisBoot } = loadOrInitConfig();
+    if (createdOnThisBoot) {
+        console.error(`[server] created ${configFile} with default settings — edit and restart to change`);
+    }
+    else {
+        console.error(`[server] loaded global config from ${configFile}`);
+    }
+    mkdirSync(runtimeRoot(), { recursive: true });
+    mkdirSync(dirname(databasePath()), { recursive: true });
+    const server = new Server({ config });
+    await server.start();
+    console.error(`[server] up; admin socket: ${adminSocketPath()}`);
+    const shutdown = async (signal) => {
+        console.error(`[server] received ${signal}`);
+        await server.shutdown();
+        process.exit(0);
+    };
+    process.on('SIGTERM', () => void shutdown('SIGTERM'));
+    process.on('SIGINT', () => void shutdown('SIGINT'));
+}
+function printHelp() {
+    console.log(`dreamux-server — Codex-host MVP server (excitedjs/dreamux#2)
+
+Usage:
+  dreamux-server [--help]
+
+Global config:
+  ~/.dreamux/config.toml    Auto-created on first boot. Override with the
+                            DREAMUX_CONFIG_DIR env var. Edit and restart to
+                            apply. Holds defaults for codex.bin,
+                            approval_policy, runtime_dir, outbound retries,
+                            etc. See the file's own comments for keys.
+
+Runtime data (kept separate from config):
+  ~/.codex-host/            SQLite, admin socket, per-dispatcher logs.
+                            Override via 'runtime_dir' in config, or
+                            CODEX_HOST_RUNTIME_DIR env (env wins).
+
+Environment overrides (highest precedence):
+  CODEX_HOST_RUNTIME_DIR    Overrides config.runtime_dir
+  CODEX_HOST_ADMIN_SOCKET   Overrides config.admin_socket
+  CODEX_HOST_CODEX_BIN      Overrides config.codex.bin
+  DREAMUX_CONFIG_DIR        Overrides ~/.dreamux (where config.toml lives)
+  BOT_SECRET_<NAME>         Each dispatcher's bot secret (referenced via
+                            bot_secret_ref=env:BOT_SECRET_<NAME>)
+
+Add dispatchers via server-ctl:
+  dreamux dispatcher add --id flow --bot-app-id cli_aaa \\
+    --bot-secret-ref env:BOT_SECRET_FLOW
+`);
+}
+main().catch((err) => {
+    console.error('[server] fatal:', err);
+    process.exit(1);
+});
+//# sourceMappingURL=server.js.map

package/dist/cli/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/cli/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEjF,KAAK,UAAU,IAAI;IACjB,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,SAAS,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,0EAA0E;IAC1E,uEAAuE;IACvE,uEAAuE;IACvE,qDAAqD;IACrD,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,GAAG,gBAAgB,EAAE,CAAC;IACrE,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,CAAC,KAAK,CACX,oBAAoB,UAAU,qDAAqD,CACpF,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,sCAAsC,UAAU,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,SAAS,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAExD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACrB,OAAO,CAAC,KAAK,CAAC,8BAA8B,eAAe,EAAE,EAAE,CAAC,CAAC;IAEjE,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACvD,OAAO,CAAC,KAAK,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC;QAC7C,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4Bb,CAAC,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}