@xfey/tutti 0.1.5 → 0.1.7

package/README.md

@@ -20,14 +20,14 @@
 - `cli-package.mjs`：生成临时 staging `@xfey/tutti` package artifact 的脚本。
 - `prepare-package-assets.mjs`：把 Web build output 和内部 runtime package 复制到 staging package 所需位置。
 - `pack-dry-run.mjs`：构建 staging package 并执行 `npm pack --dry-run --json` 文件列表校验。
-- `smoke-packed-cli.mjs`：安装并验证 packed CLI tarball 的本地 smoke。
+- `smoke-packed-cli.mjs`：安装并验证 packed CLI tarball 的本地 smoke，包括 CLI help / version、runtime deps 和 QR dependency。
 
 ## 当前状态
 
-- 已具备 Fastify host shell、CLI launch、Dev Runner、Host Project API、SSE、SQLite store、collaboration-state、workspace read-state、project timeline observability helper、Control Plane、Procedure / Run、workspace-ops、checks、Relay staged upload finalize、user skills 文件服务、artifacts 可视化产物查看层和 OpenAI / Codex provider 接入。
+- 已具备 Fastify host shell、后台 host manager CLI 套件、Dev Runner、Host Project API、SSE、SQLite store、collaboration-state、workspace read-state、project timeline observability helper、Control Plane、Procedure / Run、workspace-ops、checks、Relay staged upload finalize、user skills 文件服务、artifacts 可视化产物查看层和 OpenAI / Codex provider 接入。
 - Host server 支持在显式 `webStatic.root` 或 packaged `web/` 存在时服务 Web 静态产物；`/api/*`、SSE、health 和 host-local control 不被 SPA fallback 吞掉。
 - Root `pack:dry-run` 会先清理 build output、重新构建，再复制 `apps/web/dist` 到 package-local `web/`，生成临时 staging `@xfey/tutti` artifact，并校验 npm pack 文件列表包含 CLI、migrations、prompts、Web index、bundled `@tutti/shared` / `@tutti/relay-client` 以及它们的外部 runtime dependencies，同时排除源码、source map、日志、SQLite、`.env`、`.tutti-dev` 与测试产物。
-- Root `smoke:packed-cli` 同样从干净 build output 生成 staging `@xfey/tutti` tarball、在临时目录安装，并验证 SQLite native binding、`tutti --help` / `tutti launch --help`、migrations、prompts、Web static index、bundled internal dependencies、bundled external runtime dependencies、仓库锁定的 `@openai/codex` binary 可执行性和临时全局安装路径；该 smoke 不需要 Tutti source repo 存在。
+- Root `smoke:packed-cli` 同样从干净 build output 生成 staging `@xfey/tutti` tarball、在临时目录安装，并验证 SQLite native binding、`tutti --help` / `tutti launch --help` / `tutti --version`、migrations、prompts、Web static index、bundled internal dependencies、bundled external runtime dependencies、CLI QR dependency、仓库锁定的 `@openai/codex` binary 可执行性和临时全局安装路径；该 smoke 不需要 Tutti source repo 存在。
 - `prompts/` 是所有模型-facing prompt、指令模板和 Codex 执行模板的统一落点；长 prompt 不内联在 TypeScript 中。
 - Host Project API 只信任 Relay tunnel metadata 注入的 `relay_session_context`；direct loopback 缺少可信 context 时不作为浏览器工作区入口。
 - 详细模块落点见 `src/README.md`；logger redaction、command idempotency、schema、provider 与 Codex 边界以 `docs/system/` 对应 canonical 文档为准。
@@ -43,7 +43,7 @@
 - packaged / production `tutti launch` 默认连接 `https://tutti.now`；`TUTTI_RELAY_URL` 可覆盖 Relay URL，本地开发 dev runner 默认使用 `http://127.0.0.1:4370`。
 - host 注册使用 machine-local `host_registration_secret`；该 secret 明文只可写入受限权限的 machine-local secret store，不写入目标项目 repo、Git local config 项目身份、SQLite 协作真相或日志，`binding.json` 只保存引用。
 - Relay registration 成功后只把 `relay_project_ref` 写回 machine-local binding；join URL 只在 host 本机终端或当前 host-local control 内存状态中展示，不写入 binding、runtime endpoint、SQLite 协作真相或日志。
-- 普通 `tutti launch` 的前台 stdout 只展示运行提示、setup URL 和 join URL；Host HTTP request log 与 Control Plane / Run Pipeline runtime log 写入 `TUTTI_HOME/logs/host.log`，不写入目标项目 repo 或常规 CLI stdout。
+- 普通 `tutti launch` 默认后台运行 host，CLI 完成页展示 join URL 和二维码；`tutti launch --foreground` 保留前台诊断模式。Host HTTP request log 与 Control Plane / Run Pipeline runtime log 写入 `TUTTI_HOME/logs/host.log`，不写入目标项目 repo 或常规 CLI stdout。
 - Reference 和 Skills 上传的最终写入由 Host Project API 完成；Host 只通过 Relay host-control resolve 获取短期 R2 URL 下载 staged object，不接收浏览器 base64 文件正文，也不持久化 presigned URL。
 - Host Project API command 的 browser session context 只信任 Relay tunnel metadata 中的 `relay_session_context`；route handler 不读取浏览器身份 header，也不接受 payload 内身份字段。
 - Fastify request log、debug log、SSE payload、activity event 和 run result 都必须经过 redaction，不得泄露 provider secret、host registration secret、host connection token、join token、cookie、host 绝对路径或 run workspace path。

package/dist/providers/openai/app-server/read-only-procedure.js

@@ -5,7 +5,7 @@ import { join } from "node:path";
 import { buildCodexAppServerProcessPlan } from "../codex-app-server.js";
 import { DEFAULT_OPENAI_MODEL } from "../model-config.js";
 import { CodexAppServerJsonRpcClient, CodexAppServerProtocolError, } from "./json-rpc.js";
-import { createReadOnlyPermissionProfile } from "./permission-profile.js";
+import { createReadOnlySandboxPolicy } from "./sandbox-policy.js";
 import { buildCodexAppServerProviderConfigOverrides, resolveCodexAppServerModelProvider, } from "./provider-config.js";
 import { buildCodexAppServerTurnInput, resolveCodexAppServerContextRuntimeHint, resolveCodexAppServerSkillInputs, CodexAppServerSkillSelectionError, } from "./skills.js";
 import { containsKnownSecret, createCodexSpawnEnv, extractAgentText, extractServerRequestMethod, findJsonObjectCandidates, isApiKeyAccount, readThreadId, readTurnError, readTurnStatus, redactWithKnownValues, compactText, } from "./runtime-helpers.js";
@@ -166,9 +166,7 @@ export async function runCodexAppServerReadOnlyProcedure(options) {
             model,
             modelProvider,
             approvalPolicy: "never",
-            permissionProfile: createReadOnlyPermissionProfile(readablePaths, {
-                networkEnabled,
-            }),
+            sandbox: "read-only",
             config: buildReadOnlyThreadConfig(options),
             ephemeral: true,
             experimentalRawEvents: false,
@@ -189,7 +187,7 @@ export async function runCodexAppServerReadOnlyProcedure(options) {
             }),
             cwd: appServerCwd,
             approvalPolicy: "never",
-            permissionProfile: createReadOnlyPermissionProfile(readablePaths, {
+            sandboxPolicy: createReadOnlySandboxPolicy({
                 networkEnabled,
             }),
             model,

package/dist/providers/openai/app-server/sandbox-policy.d.ts

@@ -0,0 +1,18 @@
+export type ReadOnlySandboxPolicyOptions = {
+    networkEnabled?: boolean;
+};
+export type WorkspaceWriteSandboxPolicyOptions = {
+    networkEnabled?: boolean;
+};
+export declare function createReadOnlySandboxPolicy(options?: ReadOnlySandboxPolicyOptions): {
+    type: "readOnly";
+    networkAccess: boolean;
+};
+export declare function createWorkspaceWriteSandboxPolicy(writableRoot: string, options?: WorkspaceWriteSandboxPolicyOptions): {
+    type: "workspaceWrite";
+    writableRoots: string[];
+    networkAccess: boolean;
+    excludeTmpdirEnvVar: boolean;
+    excludeSlashTmp: boolean;
+};
+//# sourceMappingURL=sandbox-policy.d.ts.map

package/dist/providers/openai/app-server/sandbox-policy.js

@@ -0,0 +1,16 @@
+export function createReadOnlySandboxPolicy(options = {}) {
+    return {
+        type: "readOnly",
+        networkAccess: options.networkEnabled ?? true,
+    };
+}
+export function createWorkspaceWriteSandboxPolicy(writableRoot, options = {}) {
+    return {
+        type: "workspaceWrite",
+        writableRoots: [writableRoot],
+        networkAccess: options.networkEnabled ?? true,
+        excludeTmpdirEnvVar: false,
+        excludeSlashTmp: false,
+    };
+}
+//# sourceMappingURL=sandbox-policy.js.map

package/dist/providers/openai/app-server/smoke.js

@@ -5,7 +5,7 @@ import { join } from "node:path";
 import { CODEX_APP_SERVER_COMMAND, CODEX_APP_SERVER_LISTEN_URL, buildCodexAppServerProcessPlan, } from "../codex-app-server.js";
 import { DEFAULT_OPENAI_MODEL } from "../model-config.js";
 import { CodexAppServerJsonRpcClient, CodexAppServerProtocolError, } from "./json-rpc.js";
-import { createReadOnlyPermissionProfile } from "./permission-profile.js";
+import { createReadOnlySandboxPolicy } from "./sandbox-policy.js";
 import { buildCodexAppServerProviderConfigOverrides, resolveCodexAppServerModelProvider, } from "./provider-config.js";
 import { containsKnownSecret, countAvailableModels, createCodexSpawnEnv, createSmokeRepo, extractAgentText, extractNotificationMethod, isApiKeyAccount, modelListContains, readAccountType, readGitStatus, readThreadId, readTurnStatus, redactWithKnownValues, renderNoWriteSmokePrompt, } from "./smoke-helpers.js";
 import { resolveCodexAppServerSmokeProviderInput } from "./smoke-provider-input.js";
@@ -68,7 +68,7 @@ export async function runCodexAppServerNoWriteSmoke(options) {
             model,
             modelProvider,
             approvalPolicy: "never",
-            permissionProfile: createReadOnlyPermissionProfile(repoRoot),
+            sandbox: "read-only",
             ephemeral: true,
             experimentalRawEvents: false,
             persistExtendedHistory: false,
@@ -88,7 +88,7 @@ export async function runCodexAppServerNoWriteSmoke(options) {
             ],
             cwd: repoRoot,
             approvalPolicy: "never",
-            permissionProfile: createReadOnlyPermissionProfile(repoRoot),
+            sandboxPolicy: createReadOnlySandboxPolicy(),
             model,
             modelProvider,
             outputSchema: CODEX_APP_SERVER_READ_ONLY_SMOKE_OUTPUT_SCHEMA,

package/dist/providers/openai/app-server/workspace-write-run.js

@@ -5,7 +5,7 @@ import { join } from "node:path";
 import { buildCodexAppServerProcessPlan } from "../codex-app-server.js";
 import { DEFAULT_OPENAI_MODEL } from "../model-config.js";
 import { CodexAppServerJsonRpcClient, CodexAppServerProtocolError, } from "./json-rpc.js";
-import { createWorkspaceWritePermissionProfile } from "./permission-profile.js";
+import { createWorkspaceWriteSandboxPolicy } from "./sandbox-policy.js";
 import { buildCodexAppServerProviderConfigOverrides, resolveCodexAppServerModelProvider, } from "./provider-config.js";
 import { buildCodexAppServerTurnInput, resolveCodexAppServerContextRuntimeHint, resolveCodexAppServerSkillsListWarmup, resolveCodexAppServerSkillInputs, CodexAppServerSkillSelectionError, } from "./skills.js";
 import { compactText, containsKnownSecret, createCodexSpawnEnv, extractAgentText, extractServerRequestMethod, findJsonObjectCandidates, isApiKeyAccount, readThreadId, readTurnError, readTurnStatus, redactWithKnownValues, } from "./runtime-helpers.js";
@@ -248,9 +248,7 @@ export async function runCodexAppServerWorkspaceWriteRun(options) {
             modelProvider,
             approvalPolicy,
             approvalsReviewer,
-            permissionProfile: createWorkspaceWritePermissionProfile(options.workspaceRoot, {
-                networkEnabled,
-            }),
+            sandbox: "workspace-write",
             config: buildWorkspaceWriteThreadConfig(options),
             ephemeral: true,
             experimentalRawEvents: false,
@@ -272,7 +270,7 @@ export async function runCodexAppServerWorkspaceWriteRun(options) {
             cwd: options.workspaceRoot,
             approvalPolicy,
             approvalsReviewer,
-            permissionProfile: createWorkspaceWritePermissionProfile(options.workspaceRoot, {
+            sandboxPolicy: createWorkspaceWriteSandboxPolicy(options.workspaceRoot, {
                 networkEnabled,
             }),
             model,

package/dist/providers/openai/codex-app-server.d.ts

@@ -43,21 +43,12 @@ export type CodexAppServerThreadStartParams = {
     experimentalRawEvents: false;
     persistExtendedHistory: false;
 };
-export type CodexAppServerReadOnlyAccess = {
-    type: "restricted";
-    includePlatformDefaults: boolean;
-    readableRoots: string[];
-} | {
-    type: "fullAccess";
-};
 export type CodexAppServerSandboxPolicy = {
     type: "readOnly";
-    access: CodexAppServerReadOnlyAccess;
     networkAccess: boolean;
 } | {
     type: "workspaceWrite";
     writableRoots: string[];
-    readOnlyAccess: CodexAppServerReadOnlyAccess;
     networkAccess: boolean;
     excludeTmpdirEnvVar: boolean;
     excludeSlashTmp: boolean;

package/dist/providers/openai/codex-app-server.js

@@ -107,11 +107,6 @@ export function createCodexAppServerNoWriteSmokePlan(options) {
                 approvalPolicy: "never",
                 sandboxPolicy: {
                     type: "readOnly",
-                    access: {
-                        type: "restricted",
-                        includePlatformDefaults: true,
-                        readableRoots: [options.workingDirectory],
-                    },
                     networkAccess,
                 },
                 outputSchema: CODEX_NO_WRITE_SMOKE_OUTPUT_SCHEMA,

package/dist/server-shell/cli/args.d.ts

@@ -1,7 +1,49 @@
+export type CliCommand = {
+    kind: "help";
+    topic?: string;
+} | {
+    kind: "version";
+} | {
+    kind: "launch";
+    workspacePath: string;
+    yes: boolean;
+    foreground: boolean;
+} | {
+    kind: "internal-host-run";
+    workspacePath: string;
+    yes: boolean;
+} | {
+    kind: "ps";
+    manage: boolean;
+} | {
+    kind: "stop";
+    workspacePath?: string;
+} | {
+    kind: "restart";
+    workspacePath?: string;
+    yes: boolean;
+} | {
+    kind: "invite";
+    workspacePath?: string;
+} | {
+    kind: "logs";
+    workspacePath?: string;
+    tail: number;
+} | {
+    kind: "provider-setup";
+    workspacePath?: string;
+} | {
+    kind: "provider-status";
+    workspacePath?: string;
+} | {
+    kind: "doctor";
+    workspacePath?: string;
+};
 export type LaunchCliArgs = {
     command: "launch";
     workspacePath: string;
     yes: boolean;
 };
 export declare function parseLaunchCliArgs(argv: readonly string[], cwd?: string): LaunchCliArgs;
+export declare function parseCliArgs(argv: readonly string[], cwd?: string): CliCommand;
 //# sourceMappingURL=args.d.ts.map

package/dist/server-shell/cli/args.js

@@ -1,5 +1,11 @@
 import { resolve } from "node:path";
 import { LaunchError } from "./errors.js";
+function isHelpArg(arg) {
+    return arg === "--help" || arg === "-h";
+}
+function hasHelpArg(args) {
+    return args.some((arg) => isHelpArg(arg));
+}
 export function parseLaunchCliArgs(argv, cwd = process.cwd()) {
     const args = [...argv];
     const command = args.shift();
@@ -27,4 +33,183 @@ export function parseLaunchCliArgs(argv, cwd = process.cwd()) {
         yes,
     };
 }
+function readOptionalWorkspace(args, cwd) {
+    let workspacePath;
+    for (const arg of args) {
+        if (arg.startsWith("--")) {
+            throw new LaunchError("git_bootstrap_failed", `Unsupported option: ${arg}`, "Run `tutti --help` to see supported commands.");
+        }
+        if (workspacePath !== undefined) {
+            throw new LaunchError("git_bootstrap_failed", "Only one workspace_path argument is supported", "Run `tutti --help` to see supported commands.");
+        }
+        workspacePath = resolve(cwd, arg);
+    }
+    return workspacePath;
+}
+export function parseCliArgs(argv, cwd = process.cwd()) {
+    const args = [...argv];
+    const command = args.shift();
+    if (command === undefined ||
+        command === "--help" ||
+        command === "-h" ||
+        command === "help") {
+        return { kind: "help", ...(args[0] === undefined ? {} : { topic: args[0] }) };
+    }
+    if (command === "--version" || command === "-v" || command === "version") {
+        return { kind: "version" };
+    }
+    if (command === "launch") {
+        let workspacePath;
+        let yes = false;
+        let foreground = false;
+        for (const arg of args) {
+            if (arg === "--yes") {
+                yes = true;
+                continue;
+            }
+            if (arg === "--foreground") {
+                foreground = true;
+                continue;
+            }
+            if (isHelpArg(arg)) {
+                return { kind: "help", topic: "launch" };
+            }
+            if (arg.startsWith("--")) {
+                throw new LaunchError("git_bootstrap_failed", `Unsupported option: ${arg}`, "Use `tutti launch --help` to see supported launch options.");
+            }
+            if (workspacePath !== undefined) {
+                throw new LaunchError("git_bootstrap_failed", "Only one workspace_path argument is supported", "Run `tutti launch [workspace_path] [--yes] [--foreground]`.");
+            }
+            workspacePath = resolve(cwd, arg);
+        }
+        return { kind: "launch", workspacePath: workspacePath ?? resolve(cwd, "."), yes, foreground };
+    }
+    if (command === "internal") {
+        const internalCommand = args.shift();
+        if (internalCommand !== "host-run") {
+            throw new LaunchError("git_bootstrap_failed", "Unsupported internal command", "Internal commands are managed by Tutti.");
+        }
+        let workspacePath;
+        let yes = false;
+        for (let index = 0; index < args.length; index += 1) {
+            const arg = args[index];
+            if (arg === "--yes") {
+                yes = true;
+                continue;
+            }
+            if (arg === "--workspace") {
+                const value = args[index + 1];
+                if (value === undefined) {
+                    throw new LaunchError("git_bootstrap_failed", "--workspace requires a path", "Internal host-run commands are managed by Tutti.");
+                }
+                workspacePath = resolve(cwd, value);
+                index += 1;
+                continue;
+            }
+            throw new LaunchError("git_bootstrap_failed", `Unsupported internal option: ${arg ?? ""}`, "Internal commands are managed by Tutti.");
+        }
+        if (workspacePath === undefined) {
+            throw new LaunchError("git_bootstrap_failed", "Internal host-run requires --workspace", "Internal commands are managed by Tutti.");
+        }
+        return { kind: "internal-host-run", workspacePath, yes };
+    }
+    if (command === "ps") {
+        let manage = false;
+        for (const arg of args) {
+            if (arg === "--manage") {
+                manage = true;
+                continue;
+            }
+            if (isHelpArg(arg)) {
+                return { kind: "help", topic: "ps" };
+            }
+            throw new LaunchError("git_bootstrap_failed", `Unsupported option: ${arg}`, "Use `tutti ps --help` to see supported ps options.");
+        }
+        return { kind: "ps", manage };
+    }
+    if (command === "stop") {
+        if (hasHelpArg(args)) {
+            return { kind: "help", topic: "stop" };
+        }
+        const workspacePath = readOptionalWorkspace(args, cwd);
+        return { kind: "stop", ...(workspacePath === undefined ? {} : { workspacePath }) };
+    }
+    if (command === "restart") {
+        if (hasHelpArg(args)) {
+            return { kind: "help", topic: "restart" };
+        }
+        let yes = false;
+        const positional = [];
+        for (const arg of args) {
+            if (arg === "--yes") {
+                yes = true;
+            }
+            else {
+                positional.push(arg);
+            }
+        }
+        const workspacePath = readOptionalWorkspace(positional, cwd);
+        return { kind: "restart", yes, ...(workspacePath === undefined ? {} : { workspacePath }) };
+    }
+    if (command === "invite") {
+        if (hasHelpArg(args)) {
+            return { kind: "help", topic: "invite" };
+        }
+        const workspacePath = readOptionalWorkspace(args, cwd);
+        return { kind: "invite", ...(workspacePath === undefined ? {} : { workspacePath }) };
+    }
+    if (command === "logs") {
+        if (hasHelpArg(args)) {
+            return { kind: "help", topic: "logs" };
+        }
+        let tail = 120;
+        const positional = [];
+        for (let index = 0; index < args.length; index += 1) {
+            const arg = args[index];
+            if (arg === "--tail") {
+                const value = args[index + 1];
+                const parsed = Number(value);
+                if (!Number.isInteger(parsed) || parsed <= 0) {
+                    throw new LaunchError("git_bootstrap_failed", "--tail requires a positive integer", "Run `tutti logs [workspace_path] --tail 120`.");
+                }
+                tail = parsed;
+                index += 1;
+            }
+            else {
+                positional.push(arg ?? "");
+            }
+        }
+        const workspacePath = readOptionalWorkspace(positional, cwd);
+        return { kind: "logs", tail, ...(workspacePath === undefined ? {} : { workspacePath }) };
+    }
+    if (command === "provider") {
+        const providerCommand = args.shift();
+        if (providerCommand === undefined || isHelpArg(providerCommand)) {
+            return { kind: "help", topic: "provider" };
+        }
+        if (providerCommand === "setup") {
+            if (hasHelpArg(args)) {
+                return { kind: "help", topic: "provider" };
+            }
+            const workspacePath = readOptionalWorkspace(args, cwd);
+            return { kind: "provider-setup", ...(workspacePath === undefined ? {} : { workspacePath }) };
+        }
+        if (providerCommand === "status") {
+            if (hasHelpArg(args)) {
+                return { kind: "help", topic: "provider" };
+            }
+            const workspacePath = readOptionalWorkspace(args, cwd);
+            return { kind: "provider-status", ...(workspacePath === undefined ? {} : { workspacePath }) };
+        }
+        return { kind: "help", topic: "provider" };
+    }
+    if (command === "doctor") {
+        if (hasHelpArg(args)) {
+            return { kind: "help", topic: "doctor" };
+        }
+        const workspacePath = readOptionalWorkspace(args, cwd);
+        return { kind: "doctor", ...(workspacePath === undefined ? {} : { workspacePath }) };
+    }
+    throw new LaunchError("git_bootstrap_failed", `Unsupported command: ${command}`, "Run `tutti --help` to see supported commands.");
+}
 //# sourceMappingURL=args.js.map