@sjawhar/opencode-legion-envoy 1.0.0 → 1.1.0

package/dist/src/server.js

@@ -14311,7 +14311,7 @@ function normalizeEnvoyUrl(value) {
 }
 
 // ../envoy-client/src/dispatch-config.ts
-import { readFileSync } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import { homedir } from "os";
 import * as path from "path";
 
@@ -14320,6 +14320,21 @@ function messageFor(error) {
   return error instanceof Error ? error.message : String(error);
 }
 
+// ../envoy-client/src/secret-file.ts
+import { readFileSync } from "fs";
+function readSecretFile(variable, filePath) {
+  let contents;
+  try {
+    contents = readFileSync(filePath, "utf8");
+  } catch (error) {
+    throw new Error(`${variable} names ${filePath}, which could not be read: ${messageFor(error)}`);
+  }
+  const value = contents.trim();
+  if (value.length === 0)
+    throw new Error(`${variable} names ${filePath}, which is empty`);
+  return value;
+}
+
 // ../envoy-client/src/dispatch-config.ts
 var DEFAULT_SERVER_URL = "http://localhost:8766";
 function normalizeDispatchUrl(url2) {
@@ -14356,7 +14371,7 @@ function describeSchemaIssue(filePath, error) {
 function readEnvoyFile(filePath) {
   let raw;
   try {
-    raw = readFileSync(filePath, "utf-8");
+    raw = readFileSync2(filePath, "utf-8");
   } catch {
     return { kind: "absent" };
   }
@@ -14389,8 +14404,22 @@ function resolveDispatchConfig(env, options = {}) {
   };
   const rawUrl = explicitUrl !== undefined ? { value: explicitUrl, source: "DISPATCH_URL" } : merged.enabled === true ? { value: merged.serverUrl ?? DEFAULT_SERVER_URL, source: "dispatch.serverUrl" } : null;
   const url2 = rawUrl ? parsedDispatchUrl(rawUrl.value, rawUrl.source) : { url: null, error: null };
-  const token = env.DISPATCH_TOKEN ?? merged.token ?? null;
-  const tokenSource = env.DISPATCH_TOKEN === undefined ? "dispatch.token" : "DISPATCH_TOKEN";
+  let token;
+  let tokenSource;
+  if (env.DISPATCH_TOKEN_FILE !== undefined) {
+    tokenSource = "DISPATCH_TOKEN_FILE";
+    try {
+      token = readSecretFile(tokenSource, env.DISPATCH_TOKEN_FILE);
+    } catch (error) {
+      return { enabled: false, url: url2.url, token: null, error: messageFor(error) };
+    }
+  } else if (env.DISPATCH_TOKEN !== undefined) {
+    tokenSource = "DISPATCH_TOKEN";
+    token = env.DISPATCH_TOKEN;
+  } else {
+    tokenSource = "dispatch.token";
+    token = merged.token ?? null;
+  }
   if (url2.error !== null)
     return { enabled: false, url: null, token, error: url2.error };
   if (url2.url === null)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sjawhar/opencode-legion-envoy",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "type": "module",
   "main": "dist/src/server.js",
   "exports": {

package/skills/legion-controller/SKILL.md

@@ -18,8 +18,9 @@ until that PR merges, this skill's contract is not yet runnable on `main`.
 The Legion extension claims `legion-<project>-controller` and registers controller readiness
 with the daemon during session startup. Do not handle a wake unless that startup succeeded.
 
-For an interactive takeover, start OMP with `LEGION_CONTROLLER_SECRET` and
-`LEGION_DAEMON_URL` in its environment, then run:
+For an interactive takeover, start OMP with `LEGION_CONTROLLER_SECRET` (or
+`LEGION_CONTROLLER_SECRET_FILE`, a path to a file holding it) and `LEGION_DAEMON_URL` in its
+environment, then run:
 
 ```text
 /legion-claim-controller

package/skills/legion-worker/SKILL.md

@@ -19,8 +19,9 @@ until that PR merges, this skill's contract is not yet runnable on `main`.
 
 The daemon spawns you as a separate `omp --mode rpc` process (behind `legion worker-shim`,
 in a tmux pane) with `LEGION_TREE`, `LEGION_ISSUE`, `LEGION_ROLE`, `LEGION_GENERATION`,
-`LEGION_BOOT_TOKEN`, `LEGION_DAEMON_URL`, `LEGION_STATE_DIR`, and `LEGION_WORKSPACE` in your
-environment (`LEGION_PROJECT` is also supplied, but nothing reads it). The extension
+`LEGION_BOOT_TOKEN_FILE` (a 0600 file under `$LEGION_STATE_DIR/secrets` holding your boot token;
+the extension reads it for you), `LEGION_DAEMON_URL`, `LEGION_STATE_DIR`, and `LEGION_WORKSPACE`
+in your environment (`LEGION_PROJECT` is also supplied, but nothing reads it). The extension
 completes the boot handshake for you at session start — it registers with the daemon, claims
 your role, and signals readiness. You never call `envoy_role_set` yourself.