@nordbyte/nordrelay 0.3.0 → 0.3.1

package/dist/settings-service.js

@@ -1,4 +1,3 @@
-import { existsSync, readFileSync } from "node:fs";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import path from "node:path";
 const SECRET_KEYS = new Set([
@@ -17,7 +16,7 @@ export const SETTING_DEFINITIONS = [
     setting("TELEGRAM_ALLOWED_CHAT_IDS", "Allowed chat IDs", "Telegram", "list", "Optional chat allowlist.", true),
     setting("TELEGRAM_ALLOW_ANY_CHAT", "Allow any Telegram chat", "Telegram", "boolean", "Unsafe override; keep off for normal use.", true),
     setting("TELEGRAM_ROLE_POLICIES_JSON", "Role policy JSON", "Telegram", "json", "Granular Telegram permission policy.", true),
-    setting("TELEGRAM_TRANSPORT", "Telegram transport", "Telegram", "string", "polling or webhook.", true),
+    setting("TELEGRAM_TRANSPORT", "Telegram transport", "Telegram", "string", "polling or webhook.", true, ["polling", "webhook"]),
     setting("TELEGRAM_WEBHOOK_URL", "Webhook public URL", "Telegram", "string", "Public base URL for webhook mode.", true),
     setting("TELEGRAM_WEBHOOK_HOST", "Webhook bind host", "Telegram", "string", "Local webhook bind host.", true),
     setting("TELEGRAM_WEBHOOK_PORT", "Webhook bind port", "Telegram", "number", "Local webhook bind port.", true),
@@ -25,7 +24,7 @@ export const SETTING_DEFINITIONS = [
     setting("TELEGRAM_WEBHOOK_SECRET", "Webhook secret", "Telegram", "secret", "Optional Telegram webhook secret token.", true),
     setting("NORDRELAY_CODEX_ENABLED", "Enable Codex", "Agents", "boolean", "Allow Codex sessions.", true),
     setting("NORDRELAY_PI_ENABLED", "Enable Pi", "Agents", "boolean", "Allow Pi sessions.", true),
-    setting("NORDRELAY_DEFAULT_AGENT", "Default agent", "Agents", "string", "codex or pi.", true),
+    setting("NORDRELAY_DEFAULT_AGENT", "Default agent", "Agents", "string", "codex or pi.", true, ["codex", "pi"]),
     setting("CODEX_API_KEY", "Codex API key", "Codex", "secret", "Optional Codex SDK API key.", true),
     setting("CODEX_CLI_PATH", "Codex CLI path", "Codex", "string", "Optional explicit Codex executable path.", true),
     setting("CODEX_USE_BUNDLED_CLI", "Use bundled Codex CLI", "Codex", "boolean", "Force SDK-bundled CLI instead of host CLI.", true),
@@ -33,28 +32,28 @@ export const SETTING_DEFINITIONS = [
     setting("CODEX_SYNC_INTERVAL_MS", "Codex sync interval", "Codex", "number", "Local state sync interval.", true),
     setting("CODEX_EXTERNAL_BUSY_CHECK_MS", "External busy check", "Codex", "number", "External CLI busy polling interval.", true),
     setting("CODEX_EXTERNAL_BUSY_STALE_MS", "External busy stale timeout", "Codex", "number", "External CLI stale timeout.", true),
-    setting("CODEX_SANDBOX_MODE", "Codex sandbox mode", "Codex", "string", "read-only, workspace-write, or danger-full-access.", true),
-    setting("CODEX_APPROVAL_POLICY", "Codex approval policy", "Codex", "string", "never, on-request, on-failure, or untrusted.", true),
+    setting("CODEX_SANDBOX_MODE", "Codex sandbox mode", "Codex", "string", "read-only, workspace-write, or danger-full-access.", true, ["read-only", "workspace-write", "danger-full-access"]),
+    setting("CODEX_APPROVAL_POLICY", "Codex approval policy", "Codex", "string", "never, on-request, on-failure, or untrusted.", true, ["never", "on-request", "on-failure", "untrusted"]),
     setting("CODEX_LAUNCH_PROFILES_JSON", "Launch profiles JSON", "Codex", "json", "Additional launch profile definitions.", true),
     setting("CODEX_DEFAULT_LAUNCH_PROFILE", "Default launch profile", "Codex", "string", "Launch profile ID used by default.", true),
     setting("ENABLE_UNSAFE_LAUNCH_PROFILES", "Enable unsafe profiles", "Codex", "boolean", "Expose danger-full-access profiles.", true),
     setting("PI_CLI_PATH", "Pi CLI path", "Pi", "string", "Optional Pi executable path.", true),
     setting("PI_SESSION_DIR", "Pi session dir", "Pi", "string", "Optional Pi session directory.", true),
     setting("PI_DEFAULT_MODEL", "Default Pi model", "Pi", "string", "Default Pi model slug.", false),
-    setting("PI_DEFAULT_THINKING", "Default Pi thinking", "Pi", "string", "off, minimal, low, medium, high, or xhigh.", false),
-    setting("CONNECTOR_LOG_FORMAT", "Log format", "Operations", "string", "text or json.", true),
-    setting("TOOL_VERBOSITY", "Tool verbosity", "Operations", "string", "all, summary, errors-only, or none.", false),
+    setting("PI_DEFAULT_THINKING", "Default Pi thinking", "Pi", "string", "off, minimal, low, medium, high, or xhigh.", false, ["off", "minimal", "low", "medium", "high", "xhigh"]),
+    setting("CONNECTOR_LOG_FORMAT", "Log format", "Operations", "string", "text or json.", true, ["text", "json"]),
+    setting("TOOL_VERBOSITY", "Tool verbosity", "Operations", "string", "all, summary, errors-only, or none.", false, ["all", "summary", "errors-only", "none"]),
     setting("SHOW_TURN_TOKEN_USAGE", "Show turn token usage", "Operations", "boolean", "Append per-turn token usage.", false),
     setting("ENABLE_TELEGRAM_LOGIN", "Enable Telegram login", "Operations", "boolean", "Allow /login and /logout.", true),
     setting("ENABLE_TELEGRAM_REACTIONS", "Enable Telegram reactions", "Operations", "boolean", "Send Telegram reactions.", true),
     setting("TELEGRAM_RATE_LIMIT_MIN_INTERVAL_MS", "Telegram send interval", "Operations", "number", "Minimum send interval.", true),
     setting("TELEGRAM_EDIT_MIN_INTERVAL_MS", "Telegram edit interval", "Operations", "number", "Minimum edit interval.", true),
-    setting("TELEGRAM_CLI_MIRROR_MODE", "CLI mirror mode", "Operations", "string", "off, status, final, or full.", false),
+    setting("TELEGRAM_CLI_MIRROR_MODE", "CLI mirror mode", "Operations", "string", "off, status, final, or full.", false, ["off", "status", "final", "full"]),
     setting("TELEGRAM_CLI_MIRROR_MIN_UPDATE_MS", "CLI mirror update interval", "Operations", "number", "Minimum mirrored edit interval.", true),
-    setting("TELEGRAM_NOTIFY_MODE", "Notify mode", "Operations", "string", "off, minimal, or all.", false),
+    setting("TELEGRAM_NOTIFY_MODE", "Notify mode", "Operations", "string", "off, minimal, or all.", false, ["off", "minimal", "all"]),
     setting("TELEGRAM_QUIET_HOURS", "Quiet hours", "Operations", "string", "HH-HH or blank.", false),
     setting("TELEGRAM_REDACT_PATTERNS", "Redaction patterns", "Operations", "list", "Additional comma-separated regex patterns.", true),
-    setting("NORDRELAY_UPDATE_METHOD", "Update method", "Operations", "string", "auto, npm, or git.", true),
+    setting("NORDRELAY_UPDATE_METHOD", "Update method", "Operations", "string", "auto, npm, or git.", true, ["auto", "npm", "git"]),
     setting("MAX_FILE_SIZE", "Max file size", "Artifacts", "number", "Max inbound/outbound file size.", true),
     setting("ARTIFACT_RETENTION_DAYS", "Artifact retention days", "Artifacts", "number", "Days before pruning.", true),
     setting("ARTIFACT_MAX_TURNS", "Max artifact turns", "Artifacts", "number", "Maximum artifact turns retained.", true),
@@ -64,12 +63,12 @@ export const SETTING_DEFINITIONS = [
     setting("TELEGRAM_AUTO_SEND_ARTIFACTS", "Auto-send artifacts", "Artifacts", "boolean", "Automatically send artifact files.", false),
     setting("WORKSPACE_ALLOWED_ROOTS", "Workspace allowed roots", "Workspace", "list", "Restrict selectable workspaces.", true),
     setting("WORKSPACE_WARN_ROOTS", "Workspace warn roots", "Workspace", "list", "Warn for broad workspace roots.", true),
-    setting("NORDRELAY_STATE_BACKEND", "State backend", "Workspace", "string", "json or sqlite.", true),
+    setting("NORDRELAY_STATE_BACKEND", "State backend", "Workspace", "string", "json or sqlite.", true, ["json", "sqlite"]),
     setting("NORDRELAY_AUDIT_MAX_EVENTS", "Audit max events", "Workspace", "number", "Retained audit events.", true),
     setting("NORDRELAY_SESSION_LOCK_TTL_MS", "Session lock TTL", "Workspace", "number", "Write-lock TTL.", true),
     setting("NORDRELAY_VERSION_CACHE_TTL_MS", "Version cache TTL", "Workspace", "number", "NPM version cache TTL.", true),
     setting("OPENAI_API_KEY", "OpenAI API key", "Voice", "secret", "Whisper fallback API key.", true),
-    setting("VOICE_PREFERRED_BACKEND", "Voice backend", "Voice", "string", "auto, parakeet, faster-whisper, or openai.", false),
+    setting("VOICE_PREFERRED_BACKEND", "Voice backend", "Voice", "string", "auto, parakeet, faster-whisper, or openai.", false, ["auto", "parakeet", "faster-whisper", "openai"]),
     setting("VOICE_DEFAULT_LANGUAGE", "Voice language", "Voice", "string", "Default transcription language.", false),
     setting("VOICE_TRANSCRIBE_ONLY", "Voice transcribe only", "Voice", "boolean", "Do not send voice transcripts as prompts.", false),
     setting("FASTER_WHISPER_PYTHON", "faster-whisper Python", "Voice", "string", "Python executable.", true),
@@ -108,6 +107,7 @@ export class SettingsService {
     async update(patch) {
         const current = await readEnvFile(this.envPath);
         const changedKeys = [];
+        const errors = [];
         const definitions = new Map(SETTING_DEFINITIONS.map((definition) => [definition.key, definition]));
         for (const [key, rawValue] of Object.entries(patch)) {
             const definition = definitions.get(key);
@@ -125,18 +125,24 @@ export class SettingsService {
                 }
                 continue;
             }
+            const validationError = validateSettingValue(definition, value);
+            if (validationError) {
+                errors.push({ key, message: validationError });
+                continue;
+            }
             if (current[key] !== value) {
                 current[key] = value;
                 changedKeys.push(key);
             }
         }
-        if (changedKeys.length > 0) {
+        if (changedKeys.length > 0 && errors.length === 0) {
             await writeEnvFile(this.envPath, current);
         }
         return {
             envPath: this.envPath,
-            changedKeys,
-            restartRequired: changedKeys.some((key) => definitions.get(key)?.restartRequired),
+            changedKeys: errors.length === 0 ? changedKeys : [],
+            restartRequired: errors.length === 0 && changedKeys.some((key) => definitions.get(key)?.restartRequired),
+            errors,
         };
     }
 }
@@ -144,11 +150,8 @@ export function resolveDashboardEnvPath(home, cwd = process.cwd()) {
     if (process.env.NORDRELAY_ENV_FILE) {
         return path.resolve(process.env.NORDRELAY_ENV_FILE);
     }
-    const homeEnv = path.join(home, "nordrelay.env");
-    if (existsSync(homeEnv)) {
-        return homeEnv;
-    }
-    return path.join(cwd, ".env");
+    void cwd;
+    return path.join(home, "nordrelay.env");
 }
 export function maskSecret(value) {
     if (!value) {
@@ -159,8 +162,28 @@ export function maskSecret(value) {
     }
     return `${value.slice(0, 4)}...${value.slice(-4)}`;
 }
-function setting(key, label, group, kind, description, restartRequired) {
-    return { key, label, group, kind, description, restartRequired };
+function setting(key, label, group, kind, description, restartRequired, options) {
+    return { key, label, group, kind, description, restartRequired, options };
+}
+function validateSettingValue(definition, value) {
+    if (definition.kind === "number" && !Number.isFinite(Number(value))) {
+        return "Must be a number.";
+    }
+    if (definition.kind === "boolean" && !["true", "false", "1", "0", "yes", "no", "on", "off"].includes(value.toLowerCase())) {
+        return "Must be true or false.";
+    }
+    if (definition.kind === "json") {
+        try {
+            JSON.parse(value);
+        }
+        catch (error) {
+            return `Invalid JSON: ${error instanceof Error ? error.message : String(error)}`;
+        }
+    }
+    if (definition.options && !definition.options.includes(value)) {
+        return `Must be one of: ${definition.options.join(", ")}.`;
+    }
+    return null;
 }
 async function readEnvFile(filePath) {
     try {

package/dist/state-backend.js

@@ -1,4 +1,5 @@
 import { createRequire } from "node:module";
+import { mkdirSync } from "node:fs";
 import path from "node:path";
 import { readJsonFileWithBackup, writeJsonFileAtomic } from "./persistence.js";
 const require = createRequire(import.meta.url);
@@ -40,14 +41,22 @@ function tryCreateSqliteDocumentStore(options) {
         return null;
     }
     const filePath = stateBackendPath(options.workspace, "sqlite");
-    const db = new Database(filePath);
-    db.exec([
-        "CREATE TABLE IF NOT EXISTS documents (",
-        "key TEXT PRIMARY KEY,",
-        "json TEXT NOT NULL,",
-        "updated_at TEXT NOT NULL",
-        ")",
-    ].join(" "));
+    let db;
+    try {
+        mkdirSync(path.dirname(filePath), { recursive: true });
+        db = new Database(filePath);
+        db.exec([
+            "CREATE TABLE IF NOT EXISTS documents (",
+            "key TEXT PRIMARY KEY,",
+            "json TEXT NOT NULL,",
+            "updated_at TEXT NOT NULL",
+            ")",
+        ].join(" "));
+    }
+    catch (error) {
+        console.warn(`SQLite state backend failed at ${filePath}:`, error instanceof Error ? error.message : String(error));
+        return null;
+    }
     return {
         kind: "sqlite",
         filePath,