@excitedjs/dreamux 0.1.1

package/dist/runtime/codex-args.js

@@ -0,0 +1,92 @@
+/**
+ * Parse `dispatchers.codex_args_json` into the CLI-arg array passed to
+ * the codex app-server child, AND validate that the trusted-local
+ * invariants from issue #2 §"信任模型" hold.
+ *
+ * Canonical shape:
+ *   {
+ *     "approvalPolicy": "never",            // overrides global default if set
+ *     "sandboxMode":    "workspace-write",  // overrides global default if set
+ *     "extraArgs":      ["--model", "..."]  // appended after global extra_args
+ *   }
+ *
+ * Precedence for each field (highest wins):
+ *   1. dispatchers.codex_args_json (this JSON)
+ *   2. global defaults from ~/.dreamux/config.toml (passed in as `defaults`)
+ *   3. hardcoded fallbacks (`'never'`, `'workspace-write'`, `[]`)
+ * Per the feat/global-config-dir work — see decision 0003.
+ *
+ * `approvalPolicy` not in the trusted-local allowlist fails-fast at startup
+ * (issue #2 §"实现陷阱"): dispatcher refuses to come up if the policy may
+ * request approval AND no approval handler is wired.
+ *
+ * `sandboxMode` is similarly validated against the codex 0.134 enum so a
+ * typo doesn't reach the daemon (where the only feedback is a fatal early
+ * exit).
+ */
+const TRUSTED_LOCAL_APPROVAL_POLICIES = new Set([
+    'never',
+    'auto',
+    'auto-approve',
+    'on-failure',
+]);
+const ALLOWED_SANDBOX_MODES = new Set([
+    'read-only',
+    'workspace-write',
+    'danger-full-access',
+]);
+export function parseCodexArgs(json, defaults = {}) {
+    let raw;
+    try {
+        raw = json.trim() === '' ? {} : JSON.parse(json);
+    }
+    catch (e) {
+        throw new Error(`codex_args_json is not valid JSON: ${e.message}`);
+    }
+    if (typeof raw !== 'object' || raw === null) {
+        throw new Error('codex_args_json must be a JSON object');
+    }
+    const obj = raw;
+    const approvalPolicy = typeof obj['approvalPolicy'] === 'string'
+        ? obj['approvalPolicy']
+        : (defaults.approvalPolicy ?? 'never');
+    const sandboxMode = typeof obj['sandboxMode'] === 'string'
+        ? obj['sandboxMode']
+        : (defaults.sandboxMode ?? 'workspace-write');
+    const perDispatcherExtra = Array.isArray(obj['extraArgs'])
+        ? obj['extraArgs'].map((x) => String(x))
+        : [];
+    // Global extra_args go first; per-dispatcher extra_args are appended.
+    // codex's CLI is order-sensitive for `-c key=value` overrides — the
+    // last write wins — so per-dispatcher always overrides a same-key
+    // global.
+    const extraArgs = [
+        ...(defaults.extraArgs ?? []),
+        ...perDispatcherExtra,
+    ];
+    if (!TRUSTED_LOCAL_APPROVAL_POLICIES.has(approvalPolicy)) {
+        throw new Error(`dispatcher startup refused: approvalPolicy='${approvalPolicy}' may request approval, ` +
+            `but the dreamux MVP only ships with a fail-fast approval handler ` +
+            `(issue #2 §"信任模型"). Configure approvalPolicy='never' or extend the trust model first.`);
+    }
+    if (!ALLOWED_SANDBOX_MODES.has(sandboxMode)) {
+        throw new Error(`dispatcher startup refused: sandboxMode='${sandboxMode}' is not one of ` +
+            `${Array.from(ALLOWED_SANDBOX_MODES).join(' | ')} (codex 0.134 enum).`);
+    }
+    return { approvalPolicy, sandboxMode, extraArgs };
+}
+export function codexArgsToCli(parsed) {
+    // codex >= 0.134 dropped --approval-policy and --sandbox at the
+    // app-server level; the remaining mechanism is `-c key=value` config
+    // overrides for both. Pass approval_policy first, then sandbox_mode,
+    // then per-dispatcher / global extra args — letting extra_args contain
+    // a same-key `-c` override that wins (codex parses last write wins).
+    return [
+        '-c',
+        `approval_policy=${parsed.approvalPolicy}`,
+        '-c',
+        `sandbox_mode=${parsed.sandboxMode}`,
+        ...parsed.extraArgs,
+    ];
+}
+//# sourceMappingURL=codex-args.js.map

package/dist/runtime/codex-args.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-args.js","sourceRoot":"","sources":["../../src/runtime/codex-args.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,+BAA+B,GAAG,IAAI,GAAG,CAAC;IAC9C,OAAO;IACP,MAAM;IACN,cAAc;IACd,YAAY;CACb,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACpC,WAAW;IACX,iBAAiB;IACjB,oBAAoB;CACrB,CAAC,CAAC;AAcH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,WAA8B,EAAE;IAEhC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,sCAAuC,CAAW,CAAC,OAAO,EAAE,CAC7D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,cAAc,GAClB,OAAO,GAAG,CAAC,gBAAgB,CAAC,KAAK,QAAQ;QACvC,CAAC,CAAE,GAAG,CAAC,gBAAgB,CAAY;QACnC,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,IAAI,OAAO,CAAC,CAAC;IAC3C,MAAM,WAAW,GACf,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ;QACpC,CAAC,CAAE,GAAG,CAAC,aAAa,CAAY;QAChC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,IAAI,iBAAiB,CAAC,CAAC;IAClD,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACxD,CAAC,CAAE,GAAG,CAAC,WAAW,CAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,EAAE,CAAC;IACP,sEAAsE;IACtE,oEAAoE;IACpE,kEAAkE;IAClE,UAAU;IACV,MAAM,SAAS,GAAG;QAChB,GAAG,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC;QAC7B,GAAG,kBAAkB;KACtB,CAAC;IAEF,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,+CAA+C,cAAc,0BAA0B;YACrF,mEAAmE;YACnE,uFAAuF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,4CAA4C,WAAW,kBAAkB;YACvE,GAAG,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CACzE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAuB;IACpD,gEAAgE;IAChE,qEAAqE;IACrE,qEAAqE;IACrE,uEAAuE;IACvE,qEAAqE;IACrE,OAAO;QACL,IAAI;QACJ,mBAAmB,MAAM,CAAC,cAAc,EAAE;QAC1C,IAAI;QACJ,gBAAgB,MAAM,CAAC,WAAW,EAAE;QACpC,GAAG,MAAM,CAAC,SAAS;KACpB,CAAC;AACJ,CAAC"}

package/dist/runtime/config.js

@@ -0,0 +1,351 @@
+/**
+ * Global dreamux configuration loaded from `~/.dreamux/config.toml`.
+ *
+ * Why this exists: pre-config, every dispatcher had to repeat the same
+ * `approval_policy=never`, every operator had to remember
+ * `CODEX_HOST_CODEX_BIN`, every retry/timeout tuning was buried in
+ * source-level constants. This file is the user-editable surface for
+ * machine-wide defaults; per-dispatcher settings still override it, and
+ * the existing env vars still override everything (escape hatch for CI
+ * and one-off debug runs).
+ *
+ * Layout — separation of concerns:
+ *   ~/.dreamux/        user-editable configuration (this module)
+ *   ~/.codex-host/     runtime data (SQLite, sockets, dispatcher logs)
+ * Mixing them was the original sin; keeping them apart is what makes a
+ * `rm -rf ~/.codex-host` recovery safe.
+ *
+ * Format: TOML (matches codex's own `~/.codex/config.toml`).
+ * Parse failures fail-fast with the offending line.
+ */
+import { homedir } from 'node:os';
+import { dirname, isAbsolute, join } from 'node:path';
+import { closeSync, mkdirSync, openSync, readFileSync, writeSync, } from 'node:fs';
+import { parse as parseToml, TomlError } from 'smol-toml';
+/**
+ * Built-in defaults — identical to what individual modules used before this
+ * config existed. Anything you change here is a behavior change for fresh
+ * installs (and only fresh installs; existing `~/.dreamux/config.toml`
+ * files are not touched on upgrade).
+ */
+export const BUILT_IN_DEFAULTS = {
+    runtime_dir: '~/.codex-host',
+    admin_socket: null,
+    codex: {
+        bin: 'codex',
+        approval_policy: 'never',
+        sandbox_mode: 'workspace-write',
+        extra_args: [],
+        initialize_timeout_ms: 10_000,
+    },
+    outbound: {
+        retries: 3,
+        retry_delay_ms: 1000,
+    },
+};
+/**
+ * Codex 0.134 sandbox modes (from `codex --help`'s `-s, --sandbox` choices).
+ * Kept in sync with `codex-args.ts` (same allowlist enforced at the
+ * per-dispatcher level).
+ */
+export const ALLOWED_SANDBOX_MODES = new Set([
+    'read-only',
+    'workspace-write',
+    'danger-full-access',
+]);
+/**
+ * The literal TOML text written on first boot. Comments are part of the
+ * UX — they tell an operator opening the file for the first time what
+ * each key means and where to read more.
+ */
+export const DEFAULT_CONFIG_TOML = `# dreamux global configuration (~/.dreamux/config.toml)
+#
+# Edit this file and restart \`dreamux server start\` to apply changes.
+# Runtime data (SQLite, sockets, dispatcher logs) lives separately in
+# \`runtime_dir\` below — this file holds only user-editable settings.
+# See .agents/decisions/0003-global-config-dir.md for the design rationale.
+#
+# Precedence (highest wins):
+#   1. environment variables (CODEX_HOST_RUNTIME_DIR, CODEX_HOST_ADMIN_SOCKET,
+#      CODEX_HOST_CODEX_BIN) — escape hatch for CI and one-off debug runs
+#   2. per-dispatcher fields (codex_args_json: approvalPolicy, extraArgs)
+#   3. this file
+#   4. built-in defaults baked into the binary
+
+# Where dreamux stores runtime state (SQLite database, admin Unix socket,
+# per-dispatcher Codex sockets and logs).
+#
+# \`~/\` is expanded to your home directory. Relative paths are not supported.
+runtime_dir = "~/.codex-host"
+
+# Admin Unix socket path. Leave commented to derive as <runtime_dir>/admin.sock.
+# admin_socket = "~/.codex-host/admin.sock"
+
+[codex]
+# Path to the codex CLI. Bare name (\`codex\`) resolves via $PATH; an
+# absolute path (\`/opt/codex/bin/codex\`) skips the lookup.
+bin = "codex"
+
+# Default approval policy applied to every dispatcher. A per-dispatcher
+# \`codex_args_json\` (set via \`dreamux dispatcher add --codex-args-json ...\`)
+# overrides this when present. Must be one of:
+#   never | auto | auto-approve | on-failure
+# See issue #2 §"信任模型" for the trust-model implications of \`never\`.
+approval_policy = "never"
+
+# Default sandbox mode codex executes shell commands under. Per-dispatcher
+# \`codex_args_json.sandboxMode\` overrides this when present.
+# Must be one of:
+#   read-only            — codex cannot write any files
+#   workspace-write      — codex can write inside its cwd; recommended
+#                          baseline for trusted-local
+#   danger-full-access   — no sandbox; pair with approval_policy="never"
+#                          only when codex must spawn helpers that chdir
+#                          out of its cwd (e.g. tm dispatching into other
+#                          worktrees). Trust model becomes equivalent to
+#                          giving any allowed bot user shell access.
+sandbox_mode = "workspace-write"
+
+# Extra args appended to every codex app-server invocation. Per-dispatcher
+# extra_args (in codex_args_json) are appended *after* these.
+extra_args = []
+
+# Handshake timeout. Without this, dreamux would hang forever on a codex
+# that accepts the WebSocket upgrade but never replies to \`initialize\`
+# (PR #5). 0 is not a valid value — set to a positive integer.
+initialize_timeout_ms = 10000
+
+[outbound]
+# How many times to retry a failed Feishu send before parking the inbound
+# row in \`outbound_failed\`. The Codex turn never re-runs on retry — only
+# the outbound delivery is retried (PR #3 review #1).
+retries = 3
+
+# Initial delay between outbound retries (ms).
+retry_delay_ms = 1000
+`;
+export function globalConfigDir(overrides = {}) {
+    if (overrides.configDir !== undefined)
+        return overrides.configDir;
+    return process.env['DREAMUX_CONFIG_DIR'] || join(homedir(), '.dreamux');
+}
+export function globalConfigFile(overrides = {}) {
+    return join(globalConfigDir(overrides), 'config.toml');
+}
+/**
+ * Load `<configDir>/config.toml`, creating it with default content on
+ * first boot. Throws with a file-line-pointing message when TOML parsing
+ * fails so the operator can fix the file without spelunking through
+ * libraries.
+ *
+ * Safe to call from `server start` on every boot — first call ensures
+ * the directory and file exist with sensible defaults; subsequent calls
+ * just read.
+ *
+ * PR #8 review #1: create the file with the atomic `wx` (O_CREAT|O_EXCL)
+ * flag, not check-then-write. Two server processes booting concurrently
+ * against the same `~/.dreamux/` would otherwise both see "file absent"
+ * and one would overwrite what the other wrote. Posix guarantees only
+ * one `wx` open wins; the loser gets EEXIST and falls through to the
+ * read path.
+ */
+export function loadOrInitConfig(overrides = {}) {
+    const file = globalConfigFile(overrides);
+    // Parent dir creation is idempotent under `recursive: true` (no race),
+    // but it can still legitimately fail (e.g. parent is unwritable). Let
+    // the EACCES propagate — the user needs to see it.
+    mkdirSync(dirname(file), { recursive: true });
+    const createdOnThisBoot = atomicWriteIfAbsent(file, DEFAULT_CONFIG_TOML);
+    const raw = readFileSync(file, 'utf8');
+    let parsed;
+    try {
+        parsed = parseToml(raw);
+    }
+    catch (err) {
+        throw formatTomlError(err, file);
+    }
+    const config = mergeWithDefaults(parsed, file);
+    return { config, configFile: file, createdOnThisBoot };
+}
+/**
+ * Atomic create-if-absent. Returns true if this call created the file.
+ *
+ * Uses Node's `wx` flag, which maps to POSIX `open(O_CREAT | O_EXCL)`.
+ * Two processes racing the same path see exactly one EEXIST and exactly
+ * one success — no torn writes, no overwriting each other.
+ */
+function atomicWriteIfAbsent(file, content) {
+    let fd;
+    try {
+        fd = openSync(file, 'wx', 0o600);
+    }
+    catch (err) {
+        if (err.code === 'EEXIST')
+            return false;
+        throw err;
+    }
+    try {
+        writeSync(fd, content);
+    }
+    finally {
+        closeSync(fd);
+    }
+    return true;
+}
+function formatTomlError(err, file) {
+    if (err instanceof TomlError) {
+        const where = typeof err.line === 'number' && typeof err.column === 'number'
+            ? `${file}:${err.line}:${err.column}`
+            : file;
+        return new Error(`dreamux config parse error at ${where}: ${err.message}\n` +
+            `Fix the TOML syntax in ${file} and restart, or delete the file to regenerate defaults.`);
+    }
+    const msg = err instanceof Error ? err.message : String(err);
+    return new Error(`dreamux config parse error in ${file}: ${msg}\n` +
+        `Fix the TOML syntax in ${file} and restart, or delete the file to regenerate defaults.`);
+}
+/**
+ * Merge user-supplied TOML object with built-in defaults. Unknown top-level
+ * keys are tolerated (forward-compat with newer config files); known keys
+ * are validated for type and (where relevant) value membership.
+ */
+function mergeWithDefaults(raw, file) {
+    if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {
+        throw new Error(`dreamux config error in ${file}: top-level must be a table`);
+    }
+    const obj = raw;
+    const codexIn = isPlainObject(obj['codex']) ? obj['codex'] : {};
+    const outboundIn = isPlainObject(obj['outbound']) ? obj['outbound'] : {};
+    const runtime_dir = expandHome(requireString(obj, 'runtime_dir', BUILT_IN_DEFAULTS.runtime_dir, file));
+    const admin_socket_raw = obj['admin_socket'];
+    const admin_socket = admin_socket_raw === undefined || admin_socket_raw === null
+        ? null
+        : expandHome(ensureString(admin_socket_raw, 'admin_socket', file));
+    const approval_policy = requireString(codexIn, 'approval_policy', BUILT_IN_DEFAULTS.codex.approval_policy, file, 'codex.');
+    // Validate approval_policy against the same allowlist as codex-args.ts.
+    // Keep the two in sync — see decision 0001 / issue #2 §"信任模型".
+    const ALLOWED_POLICIES = new Set([
+        'never',
+        'auto',
+        'auto-approve',
+        'on-failure',
+    ]);
+    if (!ALLOWED_POLICIES.has(approval_policy)) {
+        throw new Error(`dreamux config error in ${file}: codex.approval_policy='${approval_policy}' ` +
+            `is not one of ${Array.from(ALLOWED_POLICIES).join(' | ')}`);
+    }
+    const sandbox_mode = requireString(codexIn, 'sandbox_mode', BUILT_IN_DEFAULTS.codex.sandbox_mode, file, 'codex.');
+    if (!ALLOWED_SANDBOX_MODES.has(sandbox_mode)) {
+        throw new Error(`dreamux config error in ${file}: codex.sandbox_mode='${sandbox_mode}' ` +
+            `is not one of ${Array.from(ALLOWED_SANDBOX_MODES).join(' | ')}`);
+    }
+    const extra_args = requireStringArray(codexIn, 'extra_args', BUILT_IN_DEFAULTS.codex.extra_args, file, 'codex.');
+    const initialize_timeout_ms = requirePositiveInt(codexIn, 'initialize_timeout_ms', BUILT_IN_DEFAULTS.codex.initialize_timeout_ms, file, 'codex.');
+    const retries = requireNonNegativeInt(outboundIn, 'retries', BUILT_IN_DEFAULTS.outbound.retries, file, 'outbound.');
+    const retry_delay_ms = requireNonNegativeInt(outboundIn, 'retry_delay_ms', BUILT_IN_DEFAULTS.outbound.retry_delay_ms, file, 'outbound.');
+    return {
+        runtime_dir,
+        admin_socket,
+        codex: {
+            bin: requireString(codexIn, 'bin', BUILT_IN_DEFAULTS.codex.bin, file, 'codex.'),
+            approval_policy,
+            sandbox_mode,
+            extra_args,
+            initialize_timeout_ms,
+        },
+        outbound: { retries, retry_delay_ms },
+    };
+}
+function isPlainObject(v) {
+    return v !== null && typeof v === 'object' && !Array.isArray(v);
+}
+function requireString(obj, key, fallback, file, prefix = '') {
+    const v = obj[key];
+    if (v === undefined)
+        return fallback;
+    return ensureString(v, `${prefix}${key}`, file);
+}
+function ensureString(v, key, file) {
+    if (typeof v !== 'string') {
+        throw new Error(`dreamux config error in ${file}: ${key} must be a string (got ${describeType(v)})`);
+    }
+    return v;
+}
+function requireStringArray(obj, key, fallback, file, prefix = '') {
+    const v = obj[key];
+    if (v === undefined)
+        return fallback;
+    if (!Array.isArray(v)) {
+        throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be an array of strings (got ${describeType(v)})`);
+    }
+    return v.map((item, i) => {
+        if (typeof item !== 'string') {
+            throw new Error(`dreamux config error in ${file}: ${prefix}${key}[${i}] must be a string (got ${describeType(item)})`);
+        }
+        return item;
+    });
+}
+function requirePositiveInt(obj, key, fallback, file, prefix = '') {
+    const n = readInt(obj, key, file, prefix);
+    if (n === null)
+        return fallback;
+    if (n <= 0) {
+        throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be > 0 (got ${n})`);
+    }
+    return n;
+}
+function requireNonNegativeInt(obj, key, fallback, file, prefix = '') {
+    const n = readInt(obj, key, file, prefix);
+    if (n === null)
+        return fallback;
+    if (n < 0) {
+        throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be >= 0 (got ${n})`);
+    }
+    return n;
+}
+function readInt(obj, key, file, prefix) {
+    const v = obj[key];
+    if (v === undefined)
+        return null;
+    // smol-toml returns BigInt for integers; accept both.
+    if (typeof v === 'bigint') {
+        if (v < BigInt(Number.MIN_SAFE_INTEGER) || v > BigInt(Number.MAX_SAFE_INTEGER)) {
+            throw new Error(`dreamux config error in ${file}: ${prefix}${key}=${v} is outside safe integer range`);
+        }
+        return Number(v);
+    }
+    if (typeof v === 'number') {
+        if (!Number.isInteger(v)) {
+            throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be an integer (got ${v})`);
+        }
+        return v;
+    }
+    throw new Error(`dreamux config error in ${file}: ${prefix}${key} must be an integer (got ${describeType(v)})`);
+}
+function describeType(v) {
+    if (v === null)
+        return 'null';
+    if (Array.isArray(v))
+        return 'array';
+    return typeof v;
+}
+/**
+ * Expand a leading `~/` (or bare `~`) to the user's home directory.
+ * Absolute paths and other relative paths pass through unchanged; the
+ * latter aren't supported by callers but we leave them alone so a typo
+ * surfaces as a missing-path error rather than silent expansion.
+ */
+export function expandHome(path) {
+    if (path === '~')
+        return homedir();
+    if (path.startsWith('~/'))
+        return join(homedir(), path.slice(2));
+    if (!isAbsolute(path)) {
+        // Pass through; downstream consumers will error if they need an
+        // absolute path. (We considered erroring here, but bash-style configs
+        // sometimes use bare names that get resolved later.)
+        return path;
+    }
+    return path;
+}
+//# sourceMappingURL=config.js.map

package/dist/runtime/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/runtime/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EACL,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AA2B1D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAkB;IAC9C,WAAW,EAAE,eAAe;IAC5B,YAAY,EAAE,IAAI;IAClB,KAAK,EAAE;QACL,GAAG,EAAE,OAAO;QACZ,eAAe,EAAE,OAAO;QACxB,YAAY,EAAE,iBAAiB;QAC/B,UAAU,EAAE,EAAE;QACd,qBAAqB,EAAE,MAAM;KAC9B;IACD,QAAQ,EAAE;QACR,OAAO,EAAE,CAAC;QACV,cAAc,EAAE,IAAI;KACrB;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IAC3C,WAAW;IACX,iBAAiB;IACjB,oBAAoB;CACrB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiElC,CAAC;AAOF,MAAM,UAAU,eAAe,CAAC,YAAiC,EAAE;IACjE,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,SAAS,CAAC;IAClE,OAAO,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,YAAiC,EAAE;IAClE,OAAO,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAC9B,YAAiC,EAAE;IAEnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAEzC,uEAAuE;IACvE,sEAAsE;IACtE,mDAAmD;IACnD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9C,MAAM,iBAAiB,GAAG,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAEzE,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/C,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,IAAY,EAAE,OAAe;IACxD,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACnE,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACzB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CAAC,GAAY,EAAE,IAAY;IACjD,IAAI,GAAG,YAAY,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GACT,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAC5D,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,EAAE;YACrC,CAAC,CAAC,IAAI,CAAC;QACX,OAAO,IAAI,KAAK,CACd,iCAAiC,KAAK,KAAK,GAAG,CAAC,OAAO,IAAI;YACxD,0BAA0B,IAAI,0DAA0D,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7D,OAAO,IAAI,KAAK,CACd,iCAAiC,IAAI,KAAK,GAAG,IAAI;QAC/C,0BAA0B,IAAI,0DAA0D,CAC3F,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,GAAY,EAAE,IAAY;IACnD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,6BAA6B,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEzE,MAAM,WAAW,GAAG,UAAU,CAC5B,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,CACvE,CAAC;IACF,MAAM,gBAAgB,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,YAAY,GAChB,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,IAAI;QACzD,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,UAAU,CACR,YAAY,CAAC,gBAAgB,EAAE,cAAc,EAAE,IAAI,CAAC,CACrD,CAAC;IAER,MAAM,eAAe,GAAG,aAAa,CACnC,OAAO,EACP,iBAAiB,EACjB,iBAAiB,CAAC,KAAK,CAAC,eAAe,EACvC,IAAI,EACJ,QAAQ,CACT,CAAC;IACF,wEAAwE;IACxE,+DAA+D;IAC/D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC;QAC/B,OAAO;QACP,MAAM;QACN,cAAc;QACd,YAAY;KACb,CAAC,CAAC;IACH,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,4BAA4B,eAAe,IAAI;YAC5E,iBAAiB,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,aAAa,CAChC,OAAO,EACP,cAAc,EACd,iBAAiB,CAAC,KAAK,CAAC,YAAY,EACpC,IAAI,EACJ,QAAQ,CACT,CAAC;IACF,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,yBAAyB,YAAY,IAAI;YACtE,iBAAiB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,kBAAkB,CACnC,OAAO,EACP,YAAY,EACZ,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAClC,IAAI,EACJ,QAAQ,CACT,CAAC;IAEF,MAAM,qBAAqB,GAAG,kBAAkB,CAC9C,OAAO,EACP,uBAAuB,EACvB,iBAAiB,CAAC,KAAK,CAAC,qBAAqB,EAC7C,IAAI,EACJ,QAAQ,CACT,CAAC;IAEF,MAAM,OAAO,GAAG,qBAAqB,CACnC,UAAU,EACV,SAAS,EACT,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAClC,IAAI,EACJ,WAAW,CACZ,CAAC;IACF,MAAM,cAAc,GAAG,qBAAqB,CAC1C,UAAU,EACV,gBAAgB,EAChB,iBAAiB,CAAC,QAAQ,CAAC,cAAc,EACzC,IAAI,EACJ,WAAW,CACZ,CAAC;IAEF,OAAO;QACL,WAAW;QACX,YAAY;QACZ,KAAK,EAAE;YACL,GAAG,EAAE,aAAa,CAChB,OAAO,EACP,KAAK,EACL,iBAAiB,CAAC,KAAK,CAAC,GAAG,EAC3B,IAAI,EACJ,QAAQ,CACT;YACD,eAAe;YACf,YAAY;YACZ,UAAU;YACV,qBAAqB;SACtB;QACD,QAAQ,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE;KACtC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAC/B,OAAO,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,aAAa,CACpB,GAA4B,EAC5B,GAAW,EACX,QAAgB,EAChB,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACrC,OAAO,YAAY,CAAC,CAAC,EAAE,GAAG,MAAM,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,CAAU,EAAE,GAAW,EAAE,IAAY;IACzD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,GAAG,0BAA0B,YAAY,CAAC,CAAC,CAAC,GAAG,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,kBAAkB,CACzB,GAA4B,EAC5B,GAAW,EACX,QAAkB,EAClB,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,qCAAqC,YAAY,CAAC,CAAC,CAAC,GAAG,CACxG,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACvB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,IAAI,CAAC,2BAA2B,YAAY,CAAC,IAAI,CAAC,GAAG,CACtG,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CACzB,GAA4B,EAC5B,GAAW,EACX,QAAgB,EAChB,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAChC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAC1E,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,qBAAqB,CAC5B,GAA4B,EAC5B,GAAW,EACX,QAAgB,EAChB,IAAY,EACZ,MAAM,GAAG,EAAE;IAEX,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IAChC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,CAC3E,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CACd,GAA4B,EAC5B,GAAW,EACX,IAAY,EACZ,MAAc;IAEd,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACjC,sDAAsD;IACtD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,IAAI,CAAC,gCAAgC,CACtF,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,4BAA4B,CAAC,GAAG,CACjF,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,IAAI,KAAK,CACb,2BAA2B,IAAI,KAAK,MAAM,GAAG,GAAG,4BAA4B,YAAY,CAAC,CAAC,CAAC,GAAG,CAC/F,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,CAAU;IAC9B,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAC;IACrC,OAAO,OAAO,CAAC,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,IAAI,KAAK,GAAG;QAAE,OAAO,OAAO,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,gEAAgE;QAChE,sEAAsE;QACtE,qDAAqD;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/runtime/paths.js

@@ -0,0 +1,77 @@
+/**
+ * Filesystem layout for the codex-host server runtime.
+ *
+ * Default root: ~/.codex-host/  (override via env CODEX_HOST_RUNTIME_DIR
+ * or `runtime_dir` in ~/.dreamux/config.toml — env wins, see config.ts).
+ * Layout:
+ *   <root>/
+ *     state.db                  SQLite database (dispatchers + inbound_buffer)
+ *     admin.sock                server-ctl admin Unix socket
+ *     dispatchers/<id>/
+ *       cwd/                    Codex app-server cwd
+ *       socket                  Codex Unix socket
+ *       stdout.log              Codex stdout
+ *       stderr.log              Codex stderr (load-bearing for debug)
+ *
+ * Issue #2 §"核心设计要点": Dispatcher does NOT bind a worktree; cwd above
+ * is the codex daemon's own (intentionally empty) workdir. The dispatcher
+ * picks worktree per tm-call by passing `--worktree /repos/...` in shell.
+ *
+ * Issue ~/.dreamux/ config (feat/global-config-dir): paths.* functions
+ * read an optionally-injected `DreamuxConfig` snapshot for non-env
+ * defaults. Server.start() calls setRuntimeConfig() once at boot; bare
+ * tests / standalone callers fall back to the built-in defaults.
+ */
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { BUILT_IN_DEFAULTS, expandHome, } from './config.js';
+let currentConfig = BUILT_IN_DEFAULTS;
+/**
+ * Set the active configuration snapshot. Called once by Server.start() with
+ * the result of loadOrInitConfig(); tests can call it to inject a custom
+ * snapshot. Idempotent.
+ */
+export function setRuntimeConfig(config) {
+    currentConfig = config;
+}
+/** Test hook: revert to the built-in defaults. */
+export function resetRuntimeConfig() {
+    currentConfig = BUILT_IN_DEFAULTS;
+}
+export function getRuntimeConfig() {
+    return currentConfig;
+}
+export function runtimeRoot() {
+    const fromEnv = process.env['CODEX_HOST_RUNTIME_DIR'];
+    if (fromEnv !== undefined && fromEnv !== '')
+        return fromEnv;
+    return expandHome(currentConfig.runtime_dir) || join(homedir(), '.codex-host');
+}
+export function databasePath() {
+    return join(runtimeRoot(), 'state.db');
+}
+export function adminSocketPath() {
+    const fromEnv = process.env['CODEX_HOST_ADMIN_SOCKET'];
+    if (fromEnv !== undefined && fromEnv !== '')
+        return fromEnv;
+    if (currentConfig.admin_socket !== null) {
+        return expandHome(currentConfig.admin_socket);
+    }
+    return join(runtimeRoot(), 'admin.sock');
+}
+export function dispatcherDir(id) {
+    return join(runtimeRoot(), 'dispatchers', id);
+}
+export function dispatcherCodexCwd(id) {
+    return join(dispatcherDir(id), 'cwd');
+}
+export function dispatcherSocketPath(id) {
+    return join(dispatcherDir(id), 'socket');
+}
+export function dispatcherStdoutLog(id) {
+    return join(dispatcherDir(id), 'stdout.log');
+}
+export function dispatcherStderrLog(id) {
+    return join(dispatcherDir(id), 'stderr.log');
+}
+//# sourceMappingURL=paths.js.map

package/dist/runtime/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/runtime/paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EACL,iBAAiB,EACjB,UAAU,GAEX,MAAM,aAAa,CAAC;AAErB,IAAI,aAAa,GAAkB,iBAAiB,CAAC;AAErD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,aAAa,GAAG,MAAM,CAAC;AACzB,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,kBAAkB;IAChC,aAAa,GAAG,iBAAiB,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACtD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC;IAC5D,OAAO,UAAU,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,OAAO,CAAC;IAC5D,IAAI,aAAa,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QACxC,OAAO,UAAU,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,EAAU;IAC3C,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,EAAU;IAC7C,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,OAAO,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC"}

package/dist/runtime/secrets.js

@@ -0,0 +1,18 @@
+/**
+ * Resolve `bot_secret_ref` into the actual app secret.
+ *
+ * Issue #2 §"开放问题 Q9": P0 supports `env:VAR_NAME` only. Future references
+ * (keyring, 1Password, vault) are out of scope.
+ */
+export function resolveBotSecret(ref) {
+    if (!ref.startsWith('env:')) {
+        throw new Error(`unsupported bot_secret_ref scheme: ${ref}. P0 only supports env:<VAR>.`);
+    }
+    const varName = ref.slice('env:'.length);
+    const value = process.env[varName];
+    if (value === undefined || value === '') {
+        throw new Error(`bot secret env var '${varName}' is not set (referenced by bot_secret_ref=${ref})`);
+    }
+    return value;
+}
+//# sourceMappingURL=secrets.js.map

package/dist/runtime/secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.js","sourceRoot":"","sources":["../../src/runtime/secrets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,sCAAsC,GAAG,+BAA+B,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,uBAAuB,OAAO,8CAA8C,GAAG,GAAG,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}