@xfey/tutti 0.1.2 → 0.1.3

package/README.md

@@ -43,6 +43,7 @@
 - packaged / production `tutti launch` 默认连接 `https://tutti.now`；`TUTTI_RELAY_URL` 可覆盖 Relay URL，本地开发 dev runner 默认使用 `http://127.0.0.1:4370`。
 - host 注册使用 machine-local `host_registration_secret`；该 secret 明文只可写入受限权限的 machine-local secret store，不写入目标项目 repo、Git local config 项目身份、SQLite 协作真相或日志，`binding.json` 只保存引用。
 - Relay registration 成功后只把 `relay_project_ref` 写回 machine-local binding；join URL 只在 host 本机终端或当前 host-local control 内存状态中展示，不写入 binding、runtime endpoint、SQLite 协作真相或日志。
+- 普通 `tutti launch` 的前台 stdout 只展示运行提示、setup URL 和 join URL；Host HTTP request log 与 Control Plane / Run Pipeline runtime log 写入 `TUTTI_HOME/logs/host.log`，不写入目标项目 repo 或常规 CLI stdout。
 - Reference 和 Skills 上传的最终写入由 Host Project API 完成；Host 只通过 Relay host-control resolve 获取短期 R2 URL 下载 staged object，不接收浏览器 base64 文件正文，也不持久化 presigned URL。
 - Host Project API command 的 browser session context 只信任 Relay tunnel metadata 中的 `relay_session_context`；route handler 不读取浏览器身份 header，也不接受 payload 内身份字段。
 - Fastify request log、debug log、SSE payload、activity event 和 run result 都必须经过 redaction，不得泄露 provider secret、host registration secret、host connection token、join token、cookie、host 绝对路径或 run workspace path。

package/dist/server-shell/cli/cli.js

@@ -44,7 +44,7 @@ try {
             yes: args.yes,
             confirm: confirmFromTty,
         });
-        process.stdout.write(`${formatLaunchLifecycleResult(result)}\n`);
+        process.stdout.write(`${formatLaunchLifecycleResult(result, { hyperlinks: process.stdout.isTTY })}\n`);
         if (result.kind === "hosting") {
             await waitForForegroundHostShutdown(result.host);
         }

package/dist/server-shell/cli/host-lifecycle.d.ts

@@ -39,7 +39,10 @@ export type StartLaunchProjectOptions = LaunchPreparationOptions & {
     registerRelayHostConnection?: RelayHostConnectionRegistrar;
     shutdownWaitMs?: number;
 };
+export type FormatLaunchLifecycleResultOptions = {
+    hyperlinks?: boolean;
+};
 export declare function startLaunchProject(options: StartLaunchProjectOptions): Promise<StartLaunchProjectResult>;
-export declare function formatLaunchLifecycleResult(result: StartLaunchProjectResult): string;
+export declare function formatLaunchLifecycleResult(result: StartLaunchProjectResult, options?: FormatLaunchLifecycleResultOptions): string;
 export declare function waitForForegroundHostShutdown(handle: HostServerHandle, processLike?: NodeJS.Process): Promise<void>;
 //# sourceMappingURL=host-lifecycle.d.ts.map

package/dist/server-shell/cli/host-lifecycle.js

@@ -1,5 +1,4 @@
 import { resolve } from "node:path";
-import { redactText } from "@tutti/shared/utils";
 import { connectRelayHostTunnel, RelayHostControlClientError, refreshRelayJoinToken as refreshRelayJoinTokenWithRelay, registerRelayHostConnection as registerRelayHostConnectionWithRelay, } from "@tutti/relay-client";
 import { createHostServer } from "../http/create-server.js";
 import { createHostProjectApiTunnelRequestHandler, createHostProjectApiTunnelStreamRequestHandler, } from "../http/host-tunnel.js";
@@ -13,6 +12,26 @@ import { prepareLaunchProject, resolveLaunchLocalContext, } from "./launch.js";
 import { registerHostWithRelay, relayErrorToLaunchError, } from "./relay-registration.js";
 export { createRuntimeEndpointProbe } from "./host-runtime-endpoint.js";
 const DEFAULT_SHUTDOWN_WAIT_MS = 2_000;
+const OSC8_START = "\u001B]8;;";
+const OSC8_END = "\u001B]8;;\u001B\\";
+function isTerminalSafeHttpUrl(value) {
+    if (!value.startsWith("http://") && !value.startsWith("https://")) {
+        return false;
+    }
+    return Array.from(value).every((character) => {
+        const codePoint = character.codePointAt(0);
+        return codePoint !== undefined && codePoint > 0x1f && codePoint !== 0x7f;
+    });
+}
+function terminalLink(value, options) {
+    if (options.hyperlinks !== true || !isTerminalSafeHttpUrl(value)) {
+        return value;
+    }
+    return `${OSC8_START}${value}\u001B\\${value}${OSC8_END}`;
+}
+function urlLine(label, value, options) {
+    return `${label}: ${terminalLink(value, options)}`;
+}
 function endpointWithoutToken(endpoint) {
     return {
         project_id: endpoint.project_id,
@@ -246,28 +265,18 @@ export async function startLaunchProject(options) {
         }),
     };
 }
-export function formatLaunchLifecycleResult(result) {
+export function formatLaunchLifecycleResult(result, options = {}) {
     const summary = result.summary;
     const fields = [
         result.kind === "connected"
-            ? "Tutti project host is already running"
-            : "Tutti project host is running",
-        "",
-        `Status: ${summary.status}`,
-        `Workspace: ${redactText(summary.workspace_root)}`,
-        `Project: ${summary.project_id}`,
-        `Branch: ${summary.branch}`,
-        `Relay: ${summary.relay_url}`,
+            ? "Tutti is already running. Stop it from the original host terminal."
+            : "Tutti is running. Press Ctrl-C to stop.",
     ];
-    if (summary.provider_status !== undefined) {
-        fields.push(`Provider: ${summary.provider_status}`);
-    }
-    fields.push(`Local diagnostic endpoint: ${summary.local_diagnostic_endpoint}`);
     if (summary.setup_url !== undefined) {
-        fields.push(`Setup URL: ${summary.setup_url}`);
+        fields.push(urlLine("Setup URL", summary.setup_url, options));
     }
     if (summary.relay?.join_url !== undefined) {
-        fields.push(`Join URL: ${summary.relay.join_url}`);
+        fields.push(urlLine("Join URL", summary.relay.join_url, options));
     }
     else if (summary.relay?.join_url_visibility === "not_recoverable") {
         fields.push("Join URL: not recoverable; rotate a fresh invite from the host.");
@@ -275,10 +284,6 @@ export function formatLaunchLifecycleResult(result) {
     else {
         fields.push("Join URL: unavailable from this local host process");
     }
-    fields.push("");
-    fields.push(result.kind === "connected"
-        ? "An existing host server is handling this workspace; no second server was started."
-        : "This terminal is hosting the project server. Press Ctrl-C to stop.");
     return fields.join("\n");
 }
 export async function waitForForegroundHostShutdown(handle, processLike = process) {

package/dist/server-shell/cli/host-server-runtime.d.ts

@@ -12,6 +12,7 @@ export type HostServerFactory = typeof createHostServer;
 export type HostServerHandle = {
     app: FastifyInstance;
     store: HostProjectStore;
+    log_file_path: string;
     runtime_endpoint: MachineRuntimeEndpointRecord;
     trusted_relay_metadata_store: TrustedRelaySessionMetadataStore;
     attachRelayTunnel: (tunnel: RelayHostTunnelHandle) => void;

package/dist/server-shell/cli/host-server-runtime.js

@@ -20,7 +20,7 @@ import { WorkspaceEventBus } from "../http/workspace-events.js";
 import { createTrustedRelaySessionMetadataStore, } from "../session/relay-session-context.js";
 import { LaunchError } from "./errors.js";
 import { relayStateFromLaunchStatus } from "./host-relay-status.js";
-import { readHostRegistrationSecret, createMachineRuntimeEndpointToken, deleteMachineRuntimeEndpoint, writeMachineRuntimeEndpoint, } from "./machine-local.js";
+import { appendHostLogLine, readHostRegistrationSecret, createMachineRuntimeEndpointToken, deleteMachineRuntimeEndpoint, ensureHostLogFile, getHostLogFilePath, writeMachineRuntimeEndpoint, } from "./machine-local.js";
 import { readProjectDisplayName, writeProjectDisplayName } from "./project-identity.js";
 export const HOST_SERVER_VERSION = "0.0.0";
 function createHostRuntimeLogger(options) {
@@ -34,7 +34,7 @@ function createHostRuntimeLogger(options) {
                 fields,
                 now: options.now,
             });
-            process.stdout.write(`${line}\n`);
+            appendHostLogLine(options.logFilePath, line);
         },
     };
 }
@@ -125,6 +125,8 @@ class HostLocalProviderConfigureError extends Error {
 export async function startForegroundHostServer(options) {
     const token = createMachineRuntimeEndpointToken();
     const now = options.now ?? (() => new Date());
+    const logFilePath = getHostLogFilePath(options.preparation.tutti_home);
+    ensureHostLogFile(logFilePath);
     const startedAt = now().toISOString();
     const trustedMetadataStore = createTrustedRelaySessionMetadataStore();
     const agentContextTokenRegistry = new AgentContextTokenRegistry({ now });
@@ -183,10 +185,12 @@ export async function startForegroundHostServer(options) {
     };
     const controlPlaneLogger = createHostRuntimeLogger({
         component: "control-plane",
+        logFilePath,
         now,
     });
     const runPipelineLogger = createHostRuntimeLogger({
         component: "run-pipeline",
+        logFilePath,
         now,
     });
     const approvalManager = new ApprovalRequestManager({
@@ -313,6 +317,7 @@ export async function startForegroundHostServer(options) {
                     store: () => "ready",
                 },
             },
+            logger: { file: logFilePath },
             localControl,
             now,
             projectApi: {
@@ -428,6 +433,7 @@ export async function startForegroundHostServer(options) {
     return {
         app,
         store,
+        log_file_path: logFilePath,
         runtime_endpoint: runtimeEndpoint,
         trusted_relay_metadata_store: trustedMetadataStore,
         attachRelayTunnel: (tunnel) => {

package/dist/server-shell/cli/machine-local.d.ts

@@ -38,6 +38,9 @@ export type MachineProjectBindingResult = {
 export declare function getProjectLocalStoreRoot(tuttiHome: string, projectId: ProjectId): string;
 export declare function getMachineProjectBindingPath(tuttiHome: string, projectId: ProjectId): string;
 export declare function getMachineRuntimeEndpointPath(tuttiHome: string, projectId: ProjectId): string;
+export declare function getHostLogFilePath(tuttiHome: string): string;
+export declare function ensureHostLogFile(logFilePath: string): void;
+export declare function appendHostLogLine(logFilePath: string, line: string): void;
 export declare function createHostRegistrationSecretRef(projectId: ProjectId): string;
 export declare function getHostRegistrationSecretPath(tuttiHome: string, projectId: ProjectId): string;
 export declare function createHostRegistrationSecret(): string;

package/dist/server-shell/cli/machine-local.js

@@ -1,5 +1,5 @@
 import { randomBytes } from "node:crypto";
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
+import { appendFileSync, chmodSync, closeSync, existsSync, mkdirSync, openSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { ID_PREFIXES, isPrefixedId } from "@tutti/shared/ids";
 import { LaunchError } from "./errors.js";
@@ -36,6 +36,19 @@ export function getMachineProjectBindingPath(tuttiHome, projectId) {
 export function getMachineRuntimeEndpointPath(tuttiHome, projectId) {
     return join(getProjectLocalStoreRoot(tuttiHome, projectId), "runtime", "endpoint.json");
 }
+export function getHostLogFilePath(tuttiHome) {
+    return join(tuttiHome, "logs", "host.log");
+}
+export function ensureHostLogFile(logFilePath) {
+    ensurePrivateDirectory(dirname(logFilePath));
+    const fileDescriptor = openSync(logFilePath, "a", 0o600);
+    closeSync(fileDescriptor);
+    chmodSync(logFilePath, 0o600);
+}
+export function appendHostLogLine(logFilePath, line) {
+    ensureHostLogFile(logFilePath);
+    appendFileSync(logFilePath, `${line}\n`, { encoding: "utf8", mode: 0o600 });
+}
 export function createHostRegistrationSecretRef(projectId) {
     return `host_registration:${projectId}`;
 }

package/dist/server-shell/http/create-server.d.ts

@@ -13,7 +13,9 @@ export type HostServerOptions = {
             store?: () => "not_configured" | "ready";
         };
     };
-    logger?: false;
+    logger?: false | {
+        file?: string;
+    };
     localControl?: HostLocalControlOptions;
     now?: () => Date;
     projectApi?: false | HostProjectApiRouteOptions;

package/dist/server-shell/http/create-server.js

@@ -9,7 +9,7 @@ import { registerApiErrorHandler } from "./validation.js";
 export function createHostServer(options = {}) {
     const app = options.logger === false
         ? fastify({ logger: false })
-        : fastify({ logger: createRedactedLoggerOptions("tutti-host") });
+        : fastify({ logger: createRedactedLoggerOptions("tutti-host", options.logger) });
     registerApiErrorHandler(app);
     registerHostHealthRoute(app, {
         ...(options.health?.readiness === undefined

package/dist/server-shell/http/logger.d.ts

@@ -3,5 +3,7 @@ import type { FastifyError, FastifyServerOptions } from "fastify";
 export declare const serializeRequestLog: typeof serializeRuntimeRequestLog;
 export declare const serializeResponseLog: typeof serializeRuntimeResponseLog;
 export declare function serializeErrorLog(error: FastifyError): RuntimeSerializedErrorLog;
-export declare function createRedactedLoggerOptions(service: string): Exclude<FastifyServerOptions["logger"], undefined>;
+export declare function createRedactedLoggerOptions(service: string, options?: {
+    file?: string;
+}): Exclude<FastifyServerOptions["logger"], undefined>;
 //# sourceMappingURL=logger.d.ts.map

package/dist/server-shell/http/logger.js

@@ -4,11 +4,12 @@ export const serializeResponseLog = serializeRuntimeResponseLog;
 export function serializeErrorLog(error) {
     return serializeRuntimeErrorLog(error);
 }
-export function createRedactedLoggerOptions(service) {
+export function createRedactedLoggerOptions(service, options = {}) {
     return {
         level: "info",
         messageKey: "message",
         base: { service, component: "http" },
+        ...(options.file === undefined ? {} : { file: options.file }),
         serializers: {
             req: serializeRequestLog,
             res: serializeResponseLog,

package/node_modules/@tutti/shared/dist/utils/redaction/index.d.ts

@@ -3,10 +3,11 @@ export declare const REDACTION_LABELS: {
     readonly bearerToken: "[REDACTED:bearer_token]";
     readonly cookie: "[REDACTED:cookie]";
     readonly joinToken: "[REDACTED:join_token]";
+    readonly runtimeToken: "[REDACTED:runtime_token]";
     readonly hostSecret: "[REDACTED:host_secret]";
     readonly localPath: "[REDACTED:local_path]";
 };
-export declare const REDACTION_FIXTURES: readonly ["sk-proj-example-secret", "Authorization: Bearer example-token", "Cookie: tutti_session=example-session", "http://127.0.0.1:4370/join/example-join-token", "http://127.0.0.1:4370/api/v1/join/example-join-token/accept", "host_connection_token=example-host-token", "host_registration_secret=example-host-secret", "/Users/example/.tutti/auth.json", "/Users/example/project/.git/config", "/Users/example/.tutti/projects/proj_123/runs/act_123", "OPENAI_API_KEY=example"];
+export declare const REDACTION_FIXTURES: readonly ["sk-proj-example-secret", "Authorization: Bearer example-token", "Cookie: tutti_session=example-session", "http://127.0.0.1:4370/join/example-join-token", "http://127.0.0.1:4370/api/v1/join/example-join-token/accept", "http://127.0.0.1:4371/setup?token=example-runtime-token", "host_connection_token=example-host-token", "host_registration_secret=example-host-secret", "/Users/example/.tutti/auth.json", "/Users/example/project/.git/config", "/Users/example/.tutti/projects/proj_123/runs/act_123", "OPENAI_API_KEY=example"];
 export declare function redactText(value: string): string;
 export declare function redactValue(value: unknown): unknown;
 export type RedactedError = {

package/node_modules/@tutti/shared/dist/utils/redaction/index.js

@@ -3,6 +3,7 @@ export const REDACTION_LABELS = {
     bearerToken: "[REDACTED:bearer_token]",
     cookie: "[REDACTED:cookie]",
     joinToken: "[REDACTED:join_token]",
+    runtimeToken: "[REDACTED:runtime_token]",
     hostSecret: "[REDACTED:host_secret]",
     localPath: "[REDACTED:local_path]",
 };
@@ -12,6 +13,7 @@ export const REDACTION_FIXTURES = [
     "Cookie: tutti_session=example-session",
     "http://127.0.0.1:4370/join/example-join-token",
     "http://127.0.0.1:4370/api/v1/join/example-join-token/accept",
+    "http://127.0.0.1:4371/setup?token=example-runtime-token",
     "host_connection_token=example-host-token",
     "host_registration_secret=example-host-secret",
     "/Users/example/.tutti/auth.json",
@@ -56,6 +58,14 @@ const TEXT_REDACTION_RULES = [
         pattern: /(^|[\s"'`])\/join\/[A-Za-z0-9._~+/-]+/giu,
         replacement: `$1/join/${REDACTION_LABELS.joinToken}`,
     },
+    {
+        pattern: /(https?:\/\/[^\s"'`]+\/setup)\?token=[A-Za-z0-9._~+/-]+/giu,
+        replacement: `$1?token=${REDACTION_LABELS.runtimeToken}`,
+    },
+    {
+        pattern: /(^|[\s"'`])\/setup\?token=[A-Za-z0-9._~+/-]+/giu,
+        replacement: `$1/setup?token=${REDACTION_LABELS.runtimeToken}`,
+    },
     {
         pattern: /\bhost_connection_token\s*=\s*[^\s"'`&]+/giu,
         replacement: `host_connection_token=${REDACTION_LABELS.hostSecret}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xfey/tutti",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",