@tianshu-ai/tianshu 0.3.0

package/packages/server/dist/core/plugins/skills.js

@@ -0,0 +1,389 @@
+// Skill loader (ADR-0004 §11).
+//
+// A "skill" is a markdown how-to file that ships alongside its
+// owning plugin (host self-ships some too). The agent doesn't see
+// skill bodies by default \u2014 instead it sees a list of
+// `{ name, description, location }` injected into the system
+// prompt and pulls a body into context on demand via the files
+// plugin's `tenant_config_read` / `read_file` tools.
+//
+// Frontmatter shape:
+//
+//   ---
+//   name: tianshu-mount-layout
+//   description: How the host filesystem maps into the sandbox guest.
+//   when:                                # optional
+//     toolPresent: exec                  # any of these forms
+//     capabilityPresent: sandbox.shell
+//   ---
+//
+// `when` is plain {key:value} \u2014 v0 supports `toolPresent` and
+// `capabilityPresent`. Composition (and/or) is v1+.
+//
+// We intentionally don't bring in gray-matter / js-yaml etc.\u2014a
+// minimal hand-parser for `key: value` plus a flat sub-block keeps
+// the dependency footprint tiny and the failure modes obvious. If
+// authors want richer frontmatter, we'll switch then.
+import fs from "node:fs";
+import path from "node:path";
+/**
+ * Load every `contributes.skills[]` entry for one plugin.
+ * `pluginDir` is the manifest's directory; skill paths are resolved
+ * against it.
+ */
+export function loadSkillsForPlugin(args) {
+    const skills = [];
+    const failures = [];
+    for (const c of args.contributions) {
+        const filePath = path.resolve(args.pluginDir, c.path);
+        const source = { pluginId: args.pluginId, contributionId: c.id };
+        const loaded = loadSkillFromFile({ filePath, source });
+        if (loaded.ok) {
+            skills.push(loaded.skill);
+        }
+        else {
+            failures.push({ source, filePath, reason: loaded.reason });
+        }
+    }
+    return { skills, failures };
+}
+/**
+ * Discover OpenClaw-style directory skills under `rootDir`.
+ *
+ * Each immediate subdirectory whose name doesn't start with `.` and
+ * which contains a `SKILL.md` becomes one skill. Frontmatter parsing
+ * mirrors `loadSkillsForPlugin`. Optional sibling dirs (`scripts/`,
+ * `references/`, `assets/`) are deliberately not eagerly loaded —
+ * the agent reads them on demand via the regular file tools, just
+ * like Claude Code / OpenClaw do.
+ *
+ * Returns `{skills:[], failures:[]}` when `rootDir` doesn't exist
+ * (so callers can probe many candidate locations cheaply).
+ */
+export function loadDirectorySkills(args) {
+    const skills = [];
+    const failures = [];
+    if (!fs.existsSync(args.rootDir))
+        return { skills, failures };
+    let entries;
+    try {
+        entries = fs.readdirSync(args.rootDir, { withFileTypes: true });
+    }
+    catch (err) {
+        return {
+            skills,
+            failures: [
+                {
+                    source: { pluginId: args.pluginId, contributionId: "<root>" },
+                    filePath: args.rootDir,
+                    reason: `readdir failed: ${err instanceof Error ? err.message : String(err)}`,
+                },
+            ],
+        };
+    }
+    for (const entry of entries) {
+        if (!entry.isDirectory())
+            continue;
+        if (entry.name.startsWith("."))
+            continue;
+        const skillMd = path.join(args.rootDir, entry.name, "SKILL.md");
+        if (!fs.existsSync(skillMd))
+            continue;
+        const source = {
+            pluginId: args.pluginId,
+            contributionId: entry.name,
+        };
+        const loaded = loadSkillFromFile({ filePath: skillMd, source });
+        if (loaded.ok) {
+            skills.push(loaded.skill);
+        }
+        else {
+            failures.push({ source, filePath: skillMd, reason: loaded.reason });
+        }
+    }
+    return { skills, failures };
+}
+function loadSkillFromFile(args) {
+    if (!fs.existsSync(args.filePath)) {
+        return { ok: false, reason: "skill file not found" };
+    }
+    let raw;
+    try {
+        raw = fs.readFileSync(args.filePath, "utf8");
+    }
+    catch (err) {
+        return {
+            ok: false,
+            reason: `read failed: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+    const parsed = parseFrontmatter(raw);
+    if (!parsed.ok)
+        return { ok: false, reason: parsed.reason };
+    const { frontmatter, body } = parsed;
+    const name = pickString(frontmatter, "name");
+    const description = pickString(frontmatter, "description");
+    if (!name)
+        return { ok: false, reason: "frontmatter missing `name`" };
+    if (!description) {
+        return { ok: false, reason: "frontmatter missing `description`" };
+    }
+    const scope = pickString(frontmatter, "scope");
+    const scopeNarrowed = scope === "main" || scope === "worker" ? scope : undefined;
+    return {
+        ok: true,
+        skill: {
+            source: args.source,
+            filePath: args.filePath,
+            name,
+            description,
+            when: extractWhen(frontmatter),
+            scope: scopeNarrowed,
+            body: body.trim(),
+        },
+    };
+}
+function parseFrontmatter(src) {
+    // No frontmatter? Treat as empty map, body = whole file. Some
+    // skills may legitimately have nothing to declare beyond name/desc;
+    // we still require those fields, so authors will see the missing
+    // -name error if they skip the block entirely.
+    if (!src.startsWith("---")) {
+        return { ok: true, frontmatter: {}, body: src };
+    }
+    const end = src.indexOf("\n---", 3);
+    if (end < 0) {
+        return { ok: false, reason: "frontmatter open `---` has no closing `---`" };
+    }
+    const fmText = src.slice(3, end).replace(/^\r?\n/, "");
+    let body = src.slice(end + 4);
+    if (body.startsWith("\r\n"))
+        body = body.slice(2);
+    else if (body.startsWith("\n"))
+        body = body.slice(1);
+    const fm = {};
+    let currentBlock = null;
+    const lines = fmText.split(/\r?\n/);
+    for (const lineRaw of lines) {
+        if (lineRaw.trim().length === 0)
+            continue;
+        const indented = /^\s/.test(lineRaw);
+        const line = lineRaw.trimEnd();
+        if (!indented) {
+            // top-level "key:" or "key: value"
+            const m = /^([A-Za-z][A-Za-z0-9_]*)\s*:\s*(.*)$/.exec(line);
+            if (!m) {
+                return { ok: false, reason: `bad frontmatter line: "${line}"` };
+            }
+            const key = m[1];
+            const value = m[2];
+            if (value.length === 0) {
+                // start of a sub-block
+                const map = {};
+                currentBlock = { key, map };
+                fm[key] = map;
+            }
+            else {
+                currentBlock = null;
+                fm[key] = unquote(value);
+            }
+        }
+        else {
+            if (!currentBlock) {
+                return {
+                    ok: false,
+                    reason: `indented line "${line.trim()}" without an enclosing block`,
+                };
+            }
+            const m = /^\s+([A-Za-z][A-Za-z0-9_]*)\s*:\s*(.*)$/.exec(line);
+            if (!m) {
+                return { ok: false, reason: `bad sub-block line: "${line}"` };
+            }
+            currentBlock.map[m[1]] = unquote(m[2]);
+        }
+    }
+    return { ok: true, frontmatter: fm, body };
+}
+function unquote(s) {
+    if ((s.startsWith('"') && s.endsWith('"') && s.length >= 2) ||
+        (s.startsWith("'") && s.endsWith("'") && s.length >= 2)) {
+        return s.slice(1, -1);
+    }
+    return s;
+}
+function pickString(fm, key) {
+    const v = fm[key];
+    return typeof v === "string" ? v : undefined;
+}
+function extractWhen(fm) {
+    const w = fm["when"];
+    if (!w || typeof w !== "object")
+        return undefined;
+    const out = {};
+    if (typeof w.toolPresent === "string")
+        out.toolPresent = w.toolPresent;
+    if (typeof w.capabilityPresent === "string")
+        out.capabilityPresent = w.capabilityPresent;
+    return Object.keys(out).length > 0 ? out : undefined;
+}
+/**
+ * Filter skills by their `when:` predicate and `scope:` field
+ * against the current tenant state.
+ *
+ * `agentScope` (`"main"` | `"worker"`) determines who's loading
+ * the skill list right now. A skill marked `scope: main` is
+ * hidden from worker runs; `scope: worker` is hidden from the
+ * main chat agent. Skills without a `scope:` are visible to
+ * both, the legacy default. Omit `agentScope` (or pass undefined)
+ * to bypass the scope filter entirely — useful for callers that
+ * want the unfiltered universe (e.g. admin UIs).
+ */
+export function filterSkillsForTenant(skills, ctx) {
+    return skills.filter((s) => {
+        if (s.scope && ctx.agentScope && s.scope !== ctx.agentScope) {
+            return false;
+        }
+        if (!s.when)
+            return true;
+        if (s.when.toolPresent && !ctx.hasTool(s.when.toolPresent))
+            return false;
+        if (s.when.capabilityPresent && !ctx.hasCapability(s.when.capabilityPresent)) {
+            return false;
+        }
+        return true;
+    });
+}
+// ─── tenant-config mirroring ─────────────────────────────────────
+//
+// Why mirror at all
+//   - Plugin / host SKILL.md files live outside any tenant
+//     workspace (under `<repoRoot>/skills/` or `<pluginDir>/
+//     skills/`), so `tenant_config_read` (scoped to
+//     `_tenant/config/`) and `read_file` (scoped to the user
+//     workspace) can't reach them.
+//   - We tried a `read_skill(name)` meta-tool. It works but is a
+//     special case agents have to learn. The user's preference is
+//     "skills are files, read them like any other file" — so we
+//     mirror once at boot and let `tenant_config_read` do the
+//     work.
+//
+// Mirror layout
+//   <tenant>/_tenant/config/skills/_host/<pluginId>/<skillId>/SKILL.md
+//
+// `_host/` namespacing keeps user-authored tenant skills (under
+// `skills/<name>/SKILL.md`) and worker bundles cleanly separate
+// from things the host owns. The mirror tree is overwritten on
+// every boot — the source of truth lives in the plugin / host
+// repo, edits there are pointless and `tenant_config_write`
+// refuses paths under `skills/_host/` to make that explicit.
+const HOST_SKILL_NAMESPACE = "_host";
+export function mirroredSkillRelPath(pluginId, contributionId) {
+    return `skills/${HOST_SKILL_NAMESPACE}/${pluginId}/${contributionId}/SKILL.md`;
+}
+/** Absolute path of the mirror entry for one skill, given the
+ *  tenant's `_tenant/config/` root. */
+export function mirroredSkillFilePath(tenantConfigDir, pluginId, contributionId) {
+    return path.join(tenantConfigDir, "skills", HOST_SKILL_NAMESPACE, pluginId, contributionId, "SKILL.md");
+}
+/** True iff a `_tenant/config/...` path falls under the host
+ *  mirror tree. Used by `tenant_config_write` to refuse writes
+ *  there (the source of truth is the plugin / host repo). */
+export function isMirroredSkillPath(relPath) {
+    // Strip leading slash if any so callers can pass either form.
+    const trimmed = relPath.replace(/^\/+/, "");
+    return trimmed.startsWith(`skills/${HOST_SKILL_NAMESPACE}/`);
+}
+/**
+ * Write the body of every supplied skill to its mirror location
+ * under `tenantConfigDir`. Idempotent — files are rewritten on
+ * every call. Returns the skills with `filePath` rebound to the
+ * mirror path so callers (system prompt, tools) advertise the
+ * tenant-config URI instead of the absolute host path the agent
+ * can't read.
+ *
+ * We rebind in a NEW LoadedSkill so the original (used for in-
+ * memory body access) keeps its real filePath for diagnostics.
+ *
+ * Failure to write a single mirror entry is logged but does not
+ * abort the rest — a skill we couldn't mirror just falls through
+ * to its original (unreachable) filePath, which is no worse than
+ * the pre-mirror state.
+ */
+export function mirrorSkillsToTenantConfig(args) {
+    const out = [];
+    for (const s of args.skills) {
+        const dest = mirroredSkillFilePath(args.tenantConfigDir, s.source.pluginId, s.source.contributionId);
+        try {
+            fs.mkdirSync(path.dirname(dest), { recursive: true });
+            // Reconstruct the on-disk file from frontmatter + body so
+            // the mirrored copy is a self-contained SKILL.md, not just
+            // the body. The agent reads the mirrored path and gets back
+            // the same shape it would have seen at the source.
+            const text = renderSkillFile(s);
+            // Only rewrite if the content actually changed — avoids
+            // tripping the workboard fs.watch on every boot when nothing
+            // moved. (The watcher debounces, but writing zero-delta files
+            // every activate is still wasteful.)
+            let existing = null;
+            try {
+                existing = fs.readFileSync(dest, "utf8");
+            }
+            catch {
+                existing = null;
+            }
+            if (existing !== text) {
+                const tmp = `${dest}.tmp.${process.pid}.${Date.now()}`;
+                fs.writeFileSync(tmp, text);
+                fs.renameSync(tmp, dest);
+            }
+            out.push({ ...s, filePath: dest });
+        }
+        catch (err) {
+            args.log.warn("[skills] mirror failed", {
+                pluginId: s.source.pluginId,
+                contributionId: s.source.contributionId,
+                dest,
+                err: err instanceof Error ? err.message : String(err),
+            });
+            out.push(s); // fall through with original filePath
+        }
+    }
+    return out;
+}
+/** Reconstruct the SKILL.md text from a LoadedSkill. The original
+ *  on-disk file may have used yaml-style frontmatter; we emit a
+ *  canonical, hand-parseable form that the same loader can re-read
+ *  if anyone ever points loadSkillsForPlugin at the mirror tree. */
+function renderSkillFile(s) {
+    const lines = ["---"];
+    lines.push(`name: ${s.name}`);
+    lines.push(`description: ${s.description}`);
+    if (s.scope)
+        lines.push(`scope: ${s.scope}`);
+    if (s.when?.toolPresent) {
+        lines.push(`when:`);
+        lines.push(`  toolPresent: ${s.when.toolPresent}`);
+    }
+    else if (s.when?.capabilityPresent) {
+        lines.push(`when:`);
+        lines.push(`  capabilityPresent: ${s.when.capabilityPresent}`);
+    }
+    lines.push("---");
+    lines.push("");
+    lines.push(s.body);
+    return lines.join("\n");
+}
+/** Remove every entry under `skills/_host/` for a tenant. Useful
+ *  when a plugin is disabled / uninstalled and we don't want stale
+ *  mirror copies advertising skills the agent can no longer use.
+ *  Best-effort: a missing directory is fine. */
+export function cleanupMirroredSkills(tenantConfigDir) {
+    const root = path.join(tenantConfigDir, "skills", HOST_SKILL_NAMESPACE);
+    try {
+        fs.rmSync(root, { recursive: true, force: true });
+    }
+    catch {
+        // best-effort
+    }
+}
+//# sourceMappingURL=skills.js.map

package/packages/server/dist/core/plugins/skills.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skills.js","sourceRoot":"","sources":["../../../src/core/plugins/skills.ts"],"names":[],"mappings":"AAAA,+BAA+B;AAC/B,EAAE;AACF,+DAA+D;AAC/D,kEAAkE;AAClE,2DAA2D;AAC3D,6DAA6D;AAC7D,+DAA+D;AAC/D,qDAAqD;AACrD,EAAE;AACF,qBAAqB;AACrB,EAAE;AACF,QAAQ;AACR,+BAA+B;AAC/B,sEAAsE;AACtE,oDAAoD;AACpD,8DAA8D;AAC9D,uCAAuC;AACvC,QAAQ;AACR,EAAE;AACF,mEAAmE;AACnE,oDAAoD;AACpD,EAAE;AACF,oEAAoE;AACpE,mEAAmE;AACnE,kEAAkE;AAClE,sDAAsD;AAEtD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA8C7B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAInC;IACC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IAExC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;QAEjE,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAKnC;IACC,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAE9D,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM;YACN,QAAQ,EAAE;gBACR;oBACE,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE;oBAC7D,QAAQ,EAAE,IAAI,CAAC,OAAO;oBACtB,MAAM,EAAE,mBAAmB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBAC9E;aACF;SACF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS;QACtC,MAAM,MAAM,GAAG;YACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE,KAAK,CAAC,IAAI;SAC3B,CAAC;QACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAWD,SAAS,iBAAiB,CAAC,IAG1B;IACC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACvD,CAAC;IACD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC3E,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IAC5D,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC3D,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC;IACtE,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,aAAa,GACjB,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI;YACJ,WAAW;YACX,IAAI,EAAE,WAAW,CAAC,WAAW,CAAC;YAC9B,KAAK,EAAE,aAAa;YACpB,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;SAClB;KACF,CAAC;AACJ,CAAC;AAgBD,SAAS,gBAAgB,CAAC,GAAW;IACnC,8DAA8D;IAC9D,oEAAoE;IACpE,iEAAiE;IACjE,+CAA+C;IAC/C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,6CAA6C,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvD,IAAI,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC7C,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAErD,MAAM,EAAE,GAAgB,EAAE,CAAC;IAC3B,IAAI,YAAY,GAAwD,IAAI,CAAC;IAE7E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,mCAAmC;YACnC,MAAM,CAAC,GAAG,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0BAA0B,IAAI,GAAG,EAAE,CAAC;YAClE,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YAClB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACpB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,uBAAuB;gBACvB,MAAM,GAAG,GAA2B,EAAE,CAAC;gBACvC,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;gBAC5B,EAAE,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;YAChB,CAAC;iBAAM,CAAC;gBACN,YAAY,GAAG,IAAI,CAAC;gBACpB,EAAE,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,kBAAkB,IAAI,CAAC,IAAI,EAAE,8BAA8B;iBACpE,CAAC;YACJ,CAAC;YACD,MAAM,CAAC,GAAG,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/D,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,IAAI,GAAG,EAAE,CAAC;YAChE,CAAC;YACD,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,IACE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,EACvD,CAAC;QACD,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CAAC,EAAe,EAAE,GAAW;IAC9C,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;IAClB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,EAAe;IAClC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,GAAG,GAAc,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QAAE,GAAG,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC;IACvE,IAAI,OAAO,CAAC,CAAC,iBAAiB,KAAK,QAAQ;QACzC,GAAG,CAAC,iBAAiB,GAAG,CAAC,CAAC,iBAAiB,CAAC;IAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAAqB,EACrB,GAKC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACzB,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,UAAU,EAAE,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;YAAE,OAAO,KAAK,CAAC;QACzE,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAC7E,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,EAAE;AACF,oBAAoB;AACpB,2DAA2D;AAC3D,6DAA6D;AAC7D,oDAAoD;AACpD,6DAA6D;AAC7D,mCAAmC;AACnC,iEAAiE;AACjE,kEAAkE;AAClE,gEAAgE;AAChE,8DAA8D;AAC9D,YAAY;AACZ,EAAE;AACF,gBAAgB;AAChB,uEAAuE;AACvE,EAAE;AACF,gEAAgE;AAChE,gEAAgE;AAChE,+DAA+D;AAC/D,8DAA8D;AAC9D,4DAA4D;AAC5D,6DAA6D;AAE7D,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAErC,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,cAAsB;IAC3E,OAAO,UAAU,oBAAoB,IAAI,QAAQ,IAAI,cAAc,WAAW,CAAC;AACjF,CAAC;AAED;uCACuC;AACvC,MAAM,UAAU,qBAAqB,CACnC,eAAuB,EACvB,QAAgB,EAChB,cAAsB;IAEtB,OAAO,IAAI,CAAC,IAAI,CACd,eAAe,EACf,QAAQ,EACR,oBAAoB,EACpB,QAAQ,EACR,cAAc,EACd,UAAU,CACX,CAAC;AACJ,CAAC;AAED;;6DAE6D;AAC7D,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,8DAA8D;IAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC,UAAU,CAAC,UAAU,oBAAoB,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAI1C;IACC,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,qBAAqB,CAChC,IAAI,CAAC,eAAe,EACpB,CAAC,CAAC,MAAM,CAAC,QAAQ,EACjB,CAAC,CAAC,MAAM,CAAC,cAAc,CACxB,CAAC;QACF,IAAI,CAAC;YACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,0DAA0D;YAC1D,2DAA2D;YAC3D,4DAA4D;YAC5D,mDAAmD;YACnD,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YAChC,wDAAwD;YACxD,6DAA6D;YAC7D,8DAA8D;YAC9D,qCAAqC;YACrC,IAAI,QAAQ,GAAkB,IAAI,CAAC;YACnC,IAAI,CAAC;gBACH,QAAQ,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC;YACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBACvD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAC5B,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,EAAE;gBACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ;gBAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc;gBACvC,IAAI;gBACJ,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACtD,CAAC,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,sCAAsC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;oEAGoE;AACpE,SAAS,eAAe,CAAC,CAAc;IACrC,MAAM,KAAK,GAAa,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5C,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACrD,CAAC;SAAM,IAAI,CAAC,CAAC,IAAI,EAAE,iBAAiB,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnB,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;gDAGgD;AAChD,MAAM,UAAU,qBAAqB,CAAC,eAAuB;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC"}

package/packages/server/dist/core/templates.d.ts

@@ -0,0 +1,28 @@
+/** Resolve where the on-disk templates directory lives. */
+export declare function getTemplatesDir(): string;
+export declare const TENANT_TEMPLATE = "tenant-workspace";
+export declare const USER_TEMPLATE = "user-workspace";
+/** Seed the tenant-shared `_tenant/` workspace. Idempotent on already-existing dirs. */
+export declare function seedTenantWorkspace(tenantId: string, home?: string): void;
+/** Seed a user's home dir under workspace/users/<userId>/. Idempotent. */
+export declare function seedUserWorkspace(tenantId: string, userId: string, home?: string): void;
+/**
+ * Backfill missing template subtrees into an existing tenant.
+ *
+ * `seedTenantWorkspace` only fires the first time a tenant is
+ * created — once `_tenant/` exists it bails out. That's correct
+ * for SOUL.md / MEMORY.md (user may have edited them) but wrong
+ * for additive config the host ships later, e.g. the
+ * `_tenant/config/main/skills/skill-creator/` bundle that backs
+ * the agent-managed skill workflow.
+ *
+ * `ensureTenantConfigDefaults` walks the template's `config/` tree
+ * and copies each *missing* file/dir into the tenant. Existing
+ * files are left alone, so a user-edited skill is never
+ * overwritten. Skills the user removed will be re-seeded — that's
+ * intentional; if you want to disable a builtin skill, set
+ * `enabled: false` in its frontmatter rather than deleting the
+ * directory.
+ */
+export declare function ensureTenantConfigDefaults(tenantId: string, home?: string): void;
+//# sourceMappingURL=templates.d.ts.map

package/packages/server/dist/core/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../src/core/templates.ts"],"names":[],"mappings":"AAoBA,2DAA2D;AAC3D,wBAAgB,eAAe,IAAI,MAAM,CAKxC;AAED,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAClD,eAAO,MAAM,aAAa,mBAAmB,CAAC;AAa9C,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CASzE;AAED,0EAA0E;AAC1E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAKvF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,MAAM,EAChB,IAAI,CAAC,EAAE,MAAM,GACZ,IAAI,CAUN"}

package/packages/server/dist/core/templates.js

@@ -0,0 +1,103 @@
+// Workspace seeding from templates/.
+//
+// When a tenant is created, we copy `templates/tenant-workspace/` into
+// `<tenant>/workspace/_tenant/`. When a user is added to a tenant, we
+// copy `templates/user-workspace/` into `<tenant>/workspace/users/<userId>/`.
+//
+// Templates ship in the server package's source tree (and dist tree after
+// build). The TIANSHU_TEMPLATES_DIR env var overrides for tests / Docker.
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { getTenantSharedDir, getTenantWorkspaceDir, getUserHomeDir, } from "./paths.js";
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+/** Resolve where the on-disk templates directory lives. */
+export function getTemplatesDir() {
+    const env = process.env.TIANSHU_TEMPLATES_DIR?.trim();
+    if (env)
+        return path.resolve(env);
+    // src/core/templates.ts → ../../templates (relative to packages/server/src)
+    return path.resolve(__dirname, "..", "..", "templates");
+}
+export const TENANT_TEMPLATE = "tenant-workspace";
+export const USER_TEMPLATE = "user-workspace";
+function copyDirRecursive(src, dest) {
+    if (!fs.existsSync(src)) {
+        // Templates not shipped (e.g. in some test setups) — leave the
+        // destination empty rather than crashing. Higher-level code can
+        // recover by lazily creating files when first accessed.
+        fs.mkdirSync(dest, { recursive: true });
+        return;
+    }
+    fs.cpSync(src, dest, { recursive: true });
+}
+/** Seed the tenant-shared `_tenant/` workspace. Idempotent on already-existing dirs. */
+export function seedTenantWorkspace(tenantId, home) {
+    const sharedDir = getTenantSharedDir(tenantId, home);
+    if (fs.existsSync(sharedDir))
+        return;
+    const templates = getTemplatesDir();
+    copyDirRecursive(path.join(templates, TENANT_TEMPLATE), sharedDir);
+    // Always ensure users/ container exists alongside _tenant/.
+    const usersDir = path.join(getTenantWorkspaceDir(tenantId, home), "users");
+    fs.mkdirSync(usersDir, { recursive: true });
+}
+/** Seed a user's home dir under workspace/users/<userId>/. Idempotent. */
+export function seedUserWorkspace(tenantId, userId, home) {
+    const userHome = getUserHomeDir(tenantId, userId, home);
+    if (fs.existsSync(userHome))
+        return;
+    const templates = getTemplatesDir();
+    copyDirRecursive(path.join(templates, USER_TEMPLATE), userHome);
+}
+/**
+ * Backfill missing template subtrees into an existing tenant.
+ *
+ * `seedTenantWorkspace` only fires the first time a tenant is
+ * created — once `_tenant/` exists it bails out. That's correct
+ * for SOUL.md / MEMORY.md (user may have edited them) but wrong
+ * for additive config the host ships later, e.g. the
+ * `_tenant/config/main/skills/skill-creator/` bundle that backs
+ * the agent-managed skill workflow.
+ *
+ * `ensureTenantConfigDefaults` walks the template's `config/` tree
+ * and copies each *missing* file/dir into the tenant. Existing
+ * files are left alone, so a user-edited skill is never
+ * overwritten. Skills the user removed will be re-seeded — that's
+ * intentional; if you want to disable a builtin skill, set
+ * `enabled: false` in its frontmatter rather than deleting the
+ * directory.
+ */
+export function ensureTenantConfigDefaults(tenantId, home) {
+    const templates = getTemplatesDir();
+    const tenantConfigSrc = path.join(templates, TENANT_TEMPLATE, "config");
+    if (!fs.existsSync(tenantConfigSrc))
+        return;
+    const tenantConfigDst = path.join(getTenantSharedDir(tenantId, home), "config");
+    fs.mkdirSync(tenantConfigDst, { recursive: true });
+    copyMissing(tenantConfigSrc, tenantConfigDst);
+}
+/** Copy files/dirs from `src` into `dst`, skipping anything already
+ *  present at the destination. Symlinks are followed but not copied
+ *  as symlinks — the tenant config tree is treated as plain data. */
+function copyMissing(src, dst) {
+    const entries = fs.readdirSync(src, { withFileTypes: true });
+    for (const entry of entries) {
+        const srcPath = path.join(src, entry.name);
+        const dstPath = path.join(dst, entry.name);
+        if (entry.isDirectory()) {
+            if (!fs.existsSync(dstPath)) {
+                fs.cpSync(srcPath, dstPath, { recursive: true });
+            }
+            else {
+                copyMissing(srcPath, dstPath);
+            }
+        }
+        else if (entry.isFile() || entry.isSymbolicLink()) {
+            if (!fs.existsSync(dstPath)) {
+                fs.copyFileSync(srcPath, dstPath);
+            }
+        }
+    }
+}
+//# sourceMappingURL=templates.js.map

package/packages/server/dist/core/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/core/templates.ts"],"names":[],"mappings":"AAAA,qCAAqC;AACrC,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,8EAA8E;AAC9E,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAE1E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE/D,2DAA2D;AAC3D,MAAM,UAAU,eAAe;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IACtD,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,4EAA4E;IAC5E,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAClD,MAAM,CAAC,MAAM,aAAa,GAAG,gBAAgB,CAAC;AAE9C,SAAS,gBAAgB,CAAC,GAAW,EAAE,IAAY;IACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,+DAA+D;QAC/D,gEAAgE;QAChE,wDAAwD;QACxD,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,IAAa;IACjE,MAAM,SAAS,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO;IACrC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC;IAEnE,4DAA4D;IAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3E,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAa;IAC/E,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IACpC,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,QAAQ,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,IAAa;IAEb,MAAM,SAAS,GAAG,eAAe,EAAE,CAAC;IACpC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC;IACxE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO;IAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAC/B,kBAAkB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAClC,QAAQ,CACT,CAAC;IACF,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,WAAW,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;AAChD,CAAC;AAED;;qEAEqE;AACrE,SAAS,WAAW,CAAC,GAAW,EAAE,GAAW;IAC3C,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/packages/server/dist/core/tenant-context.d.ts

@@ -0,0 +1,18 @@
+import type { Database as DB } from "better-sqlite3";
+import { type ResolvedConfig } from "./config.js";
+export declare class TenantContext {
+    readonly tenantId: string;
+    readonly db: DB;
+    readonly config: ResolvedConfig;
+    readonly home: string;
+    constructor(tenantId: string, db: DB, config: ResolvedConfig, home: string);
+    get root(): string;
+    get workspaceDir(): string;
+    get sharedDir(): string;
+    get secretsDir(): string;
+    get logsDir(): string;
+    userHomeDir(userId: string): string;
+}
+/** Build a TenantContext given a freshly-opened DB and the tenantId. */
+export declare function buildTenantContext(tenantId: string, db: DB, home: string): TenantContext;
+//# sourceMappingURL=tenant-context.d.ts.map

package/packages/server/dist/core/tenant-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-context.d.ts","sourceRoot":"","sources":["../../src/core/tenant-context.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAUvE,qBAAa,aAAa;aAEN,QAAQ,EAAE,MAAM;aAChB,EAAE,EAAE,EAAE;aACN,MAAM,EAAE,cAAc;aACtB,IAAI,EAAE,MAAM;gBAHZ,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,EAAE,EACN,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,MAAM;IAG9B,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,IAAI,SAAS,IAAI,MAAM,CAEtB;IAED,IAAI,UAAU,IAAI,MAAM,CAEvB;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IAED,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;CAGpC;AAED,wEAAwE;AACxE,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,EAAE,EACN,IAAI,EAAE,MAAM,GACX,aAAa,CAGf"}

package/packages/server/dist/core/tenant-context.js

@@ -0,0 +1,42 @@
+// A TenantContext is the per-request "everything you need to do work for
+// this tenant" handle. Routes don't take a tenantId string — they take
+// a TenantContext, so by construction they cannot accidentally swap
+// tenants halfway through a handler.
+import { resolveTenantConfig } from "./config.js";
+import { getTenantLogsDir, getTenantRoot, getTenantSecretsDir, getTenantSharedDir, getTenantWorkspaceDir, getUserHomeDir, } from "./paths.js";
+export class TenantContext {
+    tenantId;
+    db;
+    config;
+    home;
+    constructor(tenantId, db, config, home) {
+        this.tenantId = tenantId;
+        this.db = db;
+        this.config = config;
+        this.home = home;
+    }
+    get root() {
+        return getTenantRoot(this.tenantId, this.home);
+    }
+    get workspaceDir() {
+        return getTenantWorkspaceDir(this.tenantId, this.home);
+    }
+    get sharedDir() {
+        return getTenantSharedDir(this.tenantId, this.home);
+    }
+    get secretsDir() {
+        return getTenantSecretsDir(this.tenantId, this.home);
+    }
+    get logsDir() {
+        return getTenantLogsDir(this.tenantId, this.home);
+    }
+    userHomeDir(userId) {
+        return getUserHomeDir(this.tenantId, userId, this.home);
+    }
+}
+/** Build a TenantContext given a freshly-opened DB and the tenantId. */
+export function buildTenantContext(tenantId, db, home) {
+    const config = resolveTenantConfig(tenantId, home);
+    return new TenantContext(tenantId, db, config, home);
+}
+//# sourceMappingURL=tenant-context.js.map

package/packages/server/dist/core/tenant-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-context.js","sourceRoot":"","sources":["../../src/core/tenant-context.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,uEAAuE;AACvE,oEAAoE;AACpE,qCAAqC;AAGrC,OAAO,EAAE,mBAAmB,EAAuB,MAAM,aAAa,CAAC;AACvE,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,GACf,MAAM,YAAY,CAAC;AAEpB,MAAM,OAAO,aAAa;IAEN;IACA;IACA;IACA;IAJlB,YACkB,QAAgB,EAChB,EAAM,EACN,MAAsB,EACtB,IAAY;QAHZ,aAAQ,GAAR,QAAQ,CAAQ;QAChB,OAAE,GAAF,EAAE,CAAI;QACN,WAAM,GAAN,MAAM,CAAgB;QACtB,SAAI,GAAJ,IAAI,CAAQ;IAC3B,CAAC;IAEJ,IAAI,IAAI;QACN,OAAO,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,YAAY;QACd,OAAO,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,SAAS;QACX,OAAO,kBAAkB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,OAAO;QACT,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,EAAM,EACN,IAAY;IAEZ,MAAM,MAAM,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACnD,OAAO,IAAI,aAAa,CAAC,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACvD,CAAC"}

package/packages/server/dist/core/tenant-id.d.ts

@@ -0,0 +1,8 @@
+export declare class InvalidTenantIdError extends Error {
+    readonly code: "INVALID_TENANT_ID";
+    constructor(message: string);
+}
+/** Validate a candidate tenantId. Returns the canonical id (== input) or throws. */
+export declare function validateTenantId(candidate: unknown): string;
+export declare function isValidTenantId(candidate: unknown): candidate is string;
+//# sourceMappingURL=tenant-id.d.ts.map

package/packages/server/dist/core/tenant-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant-id.d.ts","sourceRoot":"","sources":["../../src/core/tenant-id.ts"],"names":[],"mappings":"AAyBA,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAG,mBAAmB,CAAU;gBACjC,OAAO,EAAE,MAAM;CAI5B;AAED,oFAAoF;AACpF,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,OAAO,GAAG,MAAM,CAc3D;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,IAAI,MAAM,CAOvE"}