copilot-hub 0.1.21 → 0.1.24

package/README.md

@@ -82,7 +82,7 @@ copilot-hub start
 
 `start` runs guided setup automatically if required values are missing.
 On interactive terminals, `start` can also offer OS-native service installation when it is not yet configured.
-`start` and `update` also verify the supported Codex CLI range and can install the validated version automatically when needed.
+`start` also verifies the supported Codex CLI range and can install the validated version automatically when needed.
 
 ## Quick start from source
 
@@ -161,16 +161,29 @@ Default values are already applied, and actions start from that agent workspace
 
 - Never commit real bot tokens.
 - If a token is leaked, regenerate it in `@BotFather` using `/revoke`.
-- Keep local runtime files (`data/`, `logs/`) private.
+- Keep local runtime files private.
 
 ## Startup troubleshooting
 
 - If `npm run start` fails, first read the error and follow the suggested action.
 - `npm run start` now checks that Codex CLI is inside the supported range and can install the validated version automatically if missing or outside that range.
 - For Codex login issues, run `codex login` (or the configured `CODEX_BIN`) and retry `npm run start`.
-- If auto-install is skipped or unavailable, install Codex CLI with `npm install -g @openai/codex@0.113.0` or set `CODEX_BIN` in `.env` to a binary in the supported `0.113.x` range.
+- If auto-install is skipped or unavailable, install Codex CLI with `npm install -g @openai/codex@0.113.0` or set `CODEX_BIN` in your Copilot Hub config to a binary in the supported `0.113.x` range.
 - If you are still stuck, ask your favorite LLM with the exact error output.
 
+## Upgrades
+
+Use the standard npm flow:
+
+```bash
+npm install -g copilot-hub@latest
+copilot-hub restart
+```
+
+If Copilot Hub is not already running, use `copilot-hub start` after the install instead of `copilot-hub restart`.
+
+Tokens, registry data, logs and runtime state are now stored in a persistent per-user Copilot Hub directory, so they survive package upgrades. The runtime also no longer keeps the installed package directory as its working directory, so `npm install -g copilot-hub@latest` can replace the package cleanly on Windows while the service is running.
+
 ## Commands
 
 ```bash
@@ -180,19 +193,12 @@ npm run restart
 npm run status
 npm run logs
 npm run configure
-npm run update
 npm run test
 npm run lint
 npm run format:check
 npm run check:apps
 ```
 
-Global update command:
-
-```bash
-copilot-hub update
-```
-
 Service mode (optional, OS-native):
 
 ```bash
@@ -238,11 +244,13 @@ Authentication options:
 
 ## Runtime files
 
-- PIDs: `.copilot-hub/pids/`
-- Logs: `logs/`
+- Config, tokens, registry, logs and runtime state live in the per-user Copilot Hub home directory.
+- Windows default: `%APPDATA%\\copilot-hub`
+- macOS default: `~/Library/Application Support/copilot-hub`
+- Linux default: `${XDG_CONFIG_HOME:-~/.config}/copilot-hub`
 
 ## Security
 
 - Never commit real tokens.
-- Keep `.env` and runtime data local.
+- Keep your Copilot Hub home directory private.
 - Rotate leaked tokens immediately.

package/apps/agent-engine/dist/config.js

@@ -4,16 +4,17 @@ import { spawnSync } from "node:child_process";
 import dotenv from "dotenv";
 import { createWorkspaceBoundaryPolicy, assertWorkspaceAllowed, parseWorkspaceAllowedRoots, } from "@copilot-hub/core/workspace-policy";
 import { parseTurnActivityTimeoutSetting } from "@copilot-hub/core/codex-app-utils";
+import { resolveConfigBaseDir, resolveOptionalPathFromBase, resolvePathFromBase, } from "@copilot-hub/core/config-paths";
 import { getDefaultExternalWorkspaceBasePath, getKernelRootPath, } from "@copilot-hub/core/workspace-paths";
-dotenv.config();
+const envBaseDir = loadEnvironment();
 const kernelRootPath = getKernelRootPath();
 const configuredDefaultWorkspaceRoot = String(process.env.DEFAULT_WORKSPACE_ROOT ?? "").trim();
 const defaultWorkspaceRoot = resolveWorkspaceRoot(configuredDefaultWorkspaceRoot || getDefaultExternalWorkspaceBasePath(kernelRootPath));
 const configuredProjectsBaseDir = String(process.env.PROJECTS_BASE_DIR ?? "").trim();
-const projectsBaseDir = path.resolve(configuredProjectsBaseDir || defaultWorkspaceRoot);
+const projectsBaseDir = resolvePathFromBase(configuredProjectsBaseDir || defaultWorkspaceRoot, envBaseDir);
 const workspaceStrictMode = parseBoolean(process.env.WORKSPACE_STRICT_MODE ?? "true");
 const workspaceAllowedRoots = parseWorkspaceAllowedRoots(process.env.WORKSPACE_ALLOWED_ROOTS ?? "", {
-    cwd: process.cwd(),
+    cwd: envBaseDir,
 });
 const workspacePolicy = createWorkspaceBoundaryPolicy({
     kernelRootPath,
@@ -27,15 +28,19 @@ assertWorkspaceAllowed({
     policy: workspacePolicy,
     label: "DEFAULT_WORKSPACE_ROOT",
 });
-const dataDir = path.resolve(process.env.BOT_DATA_DIR ?? path.join(process.cwd(), "data"));
-const botRegistryFilePath = path.resolve(process.env.BOT_REGISTRY_FILE ?? path.join(dataDir, "bot-registry.json"));
-const secretStoreFilePath = path.resolve(process.env.SECRET_STORE_FILE ?? path.join(dataDir, "secrets.json"));
+const dataDir = resolvePathFromBase(process.env.BOT_DATA_DIR ?? path.join(envBaseDir, "data"), envBaseDir);
+const botRegistryFilePath = resolvePathFromBase(process.env.BOT_REGISTRY_FILE ?? path.join(dataDir, "bot-registry.json"), envBaseDir);
+const secretStoreFilePath = resolvePathFromBase(process.env.SECRET_STORE_FILE ?? path.join(dataDir, "secrets.json"), envBaseDir);
 const instanceLockEnabled = parseBoolean(process.env.INSTANCE_LOCK_ENABLED ?? "true");
-const instanceLockFilePath = path.resolve(process.env.INSTANCE_LOCK_FILE ?? path.join(dataDir, "runtime.lock"));
+const instanceLockFilePath = resolvePathFromBase(process.env.INSTANCE_LOCK_FILE ?? path.join(dataDir, "runtime.lock"), envBaseDir);
 const bootstrapTelegramToken = String(process.env.TELEGRAM_BOT_TOKEN ?? "").trim();
 const defaultProviderKind = normalizeProviderKind(process.env.DEFAULT_PROVIDER_KIND ?? "codex");
 const codexBin = resolveCodexBin(process.env.CODEX_BIN);
-const codexHomeDir = resolveOptionalPath(process.env.CODEX_HOME_DIR);
+const codexHomeDir = resolveOptionalPathFromBase(process.env.CODEX_HOME_DIR, envBaseDir);
+if (codexHomeDir) {
+    process.env.CODEX_HOME_DIR = codexHomeDir;
+    process.env.CODEX_HOME = codexHomeDir;
+}
 const codexSandbox = normalizeCodexSandbox(process.env.CODEX_SANDBOX ?? "danger-full-access");
 const codexApprovalPolicy = normalizeApprovalPolicy(process.env.CODEX_APPROVAL_POLICY ?? "never");
 const turnActivityTimeoutMs = parseTurnActivityTimeoutSetting(process.env.TURN_ACTIVITY_TIMEOUT_MS ?? "0", 0);
@@ -79,6 +84,7 @@ const defaultAllowedChatIds = new Set((process.env.TELEGRAM_ALLOWED_CHAT_IDS ??
     .filter(Boolean));
 fs.mkdirSync(dataDir, { recursive: true });
 export const config = {
+    envBaseDir,
     defaultProviderKind,
     providerDefaults: {
         defaultKind: defaultProviderKind,
@@ -118,6 +124,24 @@ export const config = {
     defaultSharedThreadId,
     defaultAllowedChatIds,
 };
+function loadEnvironment() {
+    const configuredEnvPath = String(process.env.COPILOT_HUB_ENV_PATH ?? "").trim();
+    const resolvedEnvPath = configuredEnvPath ? path.resolve(configuredEnvPath) : "";
+    const baseDir = resolveConfigBaseDir({
+        configuredBaseDir: process.env.COPILOT_HUB_ENV_BASE_DIR,
+        configuredEnvPath: resolvedEnvPath,
+        cwd: process.cwd(),
+    });
+    if (configuredEnvPath) {
+        process.env.COPILOT_HUB_ENV_PATH = resolvedEnvPath;
+        dotenv.config({ path: resolvedEnvPath });
+    }
+    else {
+        dotenv.config();
+    }
+    process.env.COPILOT_HUB_ENV_BASE_DIR = baseDir;
+    return baseDir;
+}
 function resolveCodexBin(rawValue) {
     const value = String(rawValue ?? "").trim();
     const normalized = value.toLowerCase();
@@ -200,14 +224,14 @@ function spawnNpm(args) {
         const comspec = process.env.ComSpec || "cmd.exe";
         const commandLine = ["npm", ...args].join(" ");
         return spawnSync(comspec, ["/d", "/s", "/c", commandLine], {
-            cwd: process.cwd(),
+            cwd: envBaseDir,
             stdio: ["ignore", "pipe", "pipe"],
             shell: false,
             encoding: "utf8",
         });
     }
     return spawnSync("npm", args, {
-        cwd: process.cwd(),
+        cwd: envBaseDir,
         stdio: ["ignore", "pipe", "pipe"],
         shell: false,
         encoding: "utf8",
@@ -234,13 +258,6 @@ function parseBoolean(value) {
     }
     throw new Error("Invalid boolean value in environment.");
 }
-function resolveOptionalPath(value) {
-    const raw = String(value ?? "").trim();
-    if (!raw) {
-        return null;
-    }
-    return path.resolve(raw);
-}
 function normalizeCodexSandbox(value) {
     const mode = String(value ?? "")
         .trim()
@@ -276,5 +293,5 @@ function resolveWorkspaceRoot(value) {
     if (!raw) {
         throw new Error("DEFAULT_WORKSPACE_ROOT must not be empty.");
     }
-    return path.resolve(raw);
+    return resolvePathFromBase(raw, envBaseDir);
 }

package/apps/control-plane/dist/channels/telegram-channel.js

@@ -2,6 +2,7 @@ import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { Bot } from "grammy";
+import { resolvePathFromBase, resolveProcessConfigBaseDir } from "@copilot-hub/core/config-paths";
 import { formatCodexQuotaLine } from "@copilot-hub/core/codex-quota-display";
 import { maybeHandleHubOpsCallback, maybeHandleHubOpsCommand, maybeHandleHubOpsFollowUp, } from "./hub-ops-commands.js";
 import { readCachedCodexQuotaSnapshot, writeCachedCodexQuotaSnapshot, } from "./codex-quota-cache.js";
@@ -991,7 +992,7 @@ async function readCodexAuthTokens() {
 function resolveCodexHomeDir() {
     const fromEnv = String(process.env.CODEX_HOME_DIR ?? process.env.CODEX_HOME ?? "").trim();
     if (fromEnv) {
-        return path.resolve(fromEnv);
+        return resolvePathFromBase(fromEnv, resolveProcessConfigBaseDir());
     }
     return path.join(os.homedir(), ".codex");
 }

package/apps/control-plane/dist/config.js

@@ -3,18 +3,19 @@ import path from "node:path";
 import { spawnSync } from "node:child_process";
 import dotenv from "dotenv";
 import { parseTurnActivityTimeoutSetting } from "@copilot-hub/core/codex-app-utils";
+import { resolveConfigBaseDir, resolveOptionalPathFromBase, resolvePathFromBase, } from "@copilot-hub/core/config-paths";
 import { createWorkspaceBoundaryPolicy, assertWorkspaceAllowed, parseWorkspaceAllowedRoots, } from "@copilot-hub/core/workspace-policy";
 import { normalizeAdminBotId, normalizeAdminTokenEnv } from "./kernel/admin-contract.js";
 import { getDefaultExternalWorkspaceBasePath, getKernelRootPath, } from "@copilot-hub/core/workspace-paths";
-dotenv.config();
+const envBaseDir = loadEnvironment();
 const kernelRootPath = getKernelRootPath();
 const configuredDefaultWorkspaceRoot = String(process.env.DEFAULT_WORKSPACE_ROOT ?? "").trim();
 const defaultWorkspaceRoot = resolveWorkspaceRoot(configuredDefaultWorkspaceRoot || getDefaultExternalWorkspaceBasePath(kernelRootPath));
 const configuredProjectsBaseDir = String(process.env.PROJECTS_BASE_DIR ?? "").trim();
-const projectsBaseDir = path.resolve(configuredProjectsBaseDir || defaultWorkspaceRoot);
+const projectsBaseDir = resolvePathFromBase(configuredProjectsBaseDir || defaultWorkspaceRoot, envBaseDir);
 const workspaceStrictMode = parseBoolean(process.env.WORKSPACE_STRICT_MODE ?? "true");
 const workspaceAllowedRoots = parseWorkspaceAllowedRoots(process.env.WORKSPACE_ALLOWED_ROOTS ?? "", {
-    cwd: process.cwd(),
+    cwd: envBaseDir,
 });
 const workspacePolicy = createWorkspaceBoundaryPolicy({
     kernelRootPath,
@@ -28,18 +29,22 @@ assertWorkspaceAllowed({
     policy: workspacePolicy,
     label: "DEFAULT_WORKSPACE_ROOT",
 });
-const dataDir = path.resolve(process.env.BOT_DATA_DIR ?? path.join(process.cwd(), "data"));
-const botRegistryFilePath = path.resolve(process.env.BOT_REGISTRY_FILE ?? path.join(dataDir, "bot-registry.json"));
-const secretStoreFilePath = path.resolve(process.env.SECRET_STORE_FILE ?? path.join(dataDir, "secrets.json"));
+const dataDir = resolvePathFromBase(process.env.BOT_DATA_DIR ?? path.join(envBaseDir, "data"), envBaseDir);
+const botRegistryFilePath = resolvePathFromBase(process.env.BOT_REGISTRY_FILE ?? path.join(dataDir, "bot-registry.json"), envBaseDir);
+const secretStoreFilePath = resolvePathFromBase(process.env.SECRET_STORE_FILE ?? path.join(dataDir, "secrets.json"), envBaseDir);
 const adminBotId = normalizeAdminBotId(process.env.ADMIN_BOT_ID ?? "admin_agent");
 const adminTelegramTokenEnvName = normalizeAdminTokenEnv(process.env.ADMIN_TELEGRAM_TOKEN_ENV ?? "TELEGRAM_TOKEN_ADMIN");
 const adminTelegramToken = String(process.env[adminTelegramTokenEnvName] ?? "").trim();
 const instanceLockEnabled = parseBoolean(process.env.INSTANCE_LOCK_ENABLED ?? "true");
-const instanceLockFilePath = path.resolve(process.env.INSTANCE_LOCK_FILE ?? path.join(dataDir, "runtime.lock"));
+const instanceLockFilePath = resolvePathFromBase(process.env.INSTANCE_LOCK_FILE ?? path.join(dataDir, "runtime.lock"), envBaseDir);
 const bootstrapTelegramToken = String(process.env.TELEGRAM_BOT_TOKEN ?? "").trim();
 const defaultProviderKind = normalizeProviderKind(process.env.DEFAULT_PROVIDER_KIND ?? "codex");
 const codexBin = resolveCodexBin(process.env.CODEX_BIN);
-const codexHomeDir = resolveOptionalPath(process.env.CODEX_HOME_DIR);
+const codexHomeDir = resolveOptionalPathFromBase(process.env.CODEX_HOME_DIR, envBaseDir);
+if (codexHomeDir) {
+    process.env.CODEX_HOME_DIR = codexHomeDir;
+    process.env.CODEX_HOME = codexHomeDir;
+}
 const codexSandbox = normalizeCodexSandbox(process.env.CODEX_SANDBOX ?? "danger-full-access");
 const codexApprovalPolicy = normalizeApprovalPolicy(process.env.CODEX_APPROVAL_POLICY ?? "never");
 const turnActivityTimeoutMs = parseTurnActivityTimeoutSetting(process.env.TURN_ACTIVITY_TIMEOUT_MS ?? "0", 0);
@@ -83,6 +88,7 @@ const defaultAllowedChatIds = new Set((process.env.TELEGRAM_ALLOWED_CHAT_IDS ??
     .filter(Boolean));
 fs.mkdirSync(dataDir, { recursive: true });
 export const config = {
+    envBaseDir,
     defaultProviderKind,
     providerDefaults: {
         defaultKind: defaultProviderKind,
@@ -125,6 +131,24 @@ export const config = {
     defaultSharedThreadId,
     defaultAllowedChatIds,
 };
+function loadEnvironment() {
+    const configuredEnvPath = String(process.env.COPILOT_HUB_ENV_PATH ?? "").trim();
+    const resolvedEnvPath = configuredEnvPath ? path.resolve(configuredEnvPath) : "";
+    const baseDir = resolveConfigBaseDir({
+        configuredBaseDir: process.env.COPILOT_HUB_ENV_BASE_DIR,
+        configuredEnvPath: resolvedEnvPath,
+        cwd: process.cwd(),
+    });
+    if (configuredEnvPath) {
+        process.env.COPILOT_HUB_ENV_PATH = resolvedEnvPath;
+        dotenv.config({ path: resolvedEnvPath });
+    }
+    else {
+        dotenv.config();
+    }
+    process.env.COPILOT_HUB_ENV_BASE_DIR = baseDir;
+    return baseDir;
+}
 function resolveCodexBin(rawValue) {
     const value = String(rawValue ?? "").trim();
     const normalized = value.toLowerCase();
@@ -207,14 +231,14 @@ function spawnNpm(args) {
         const comspec = process.env.ComSpec || "cmd.exe";
         const commandLine = ["npm", ...args].join(" ");
         return spawnSync(comspec, ["/d", "/s", "/c", commandLine], {
-            cwd: process.cwd(),
+            cwd: envBaseDir,
             stdio: ["ignore", "pipe", "pipe"],
             shell: false,
             encoding: "utf8",
         });
     }
     return spawnSync("npm", args, {
-        cwd: process.cwd(),
+        cwd: envBaseDir,
         stdio: ["ignore", "pipe", "pipe"],
         shell: false,
         encoding: "utf8",
@@ -241,13 +265,6 @@ function parseBoolean(value) {
     }
     throw new Error("Invalid boolean value in environment.");
 }
-function resolveOptionalPath(value) {
-    const raw = String(value ?? "").trim();
-    if (!raw) {
-        return null;
-    }
-    return path.resolve(raw);
-}
 function normalizeCodexSandbox(value) {
     const mode = String(value ?? "")
         .trim()
@@ -283,5 +300,5 @@ function resolveWorkspaceRoot(value) {
     if (!raw) {
         throw new Error("DEFAULT_WORKSPACE_ROOT must not be empty.");
     }
-    return path.resolve(raw);
+    return resolvePathFromBase(raw, envBaseDir);
 }

package/apps/control-plane/dist/copilot-hub.js

@@ -21,13 +21,13 @@ if (!TELEGRAM_TOKEN_PATTERN.test(hubToken) || hubToken.toLowerCase().includes("r
 const hubId = String(process.env.HUB_ID ?? "copilot_hub").trim() || "copilot_hub";
 const hubName = String(process.env.HUB_NAME ?? "Copilot Hub").trim() || "Copilot Hub";
 const configuredHubWorkspaceRoot = String(process.env.HUB_WORKSPACE_ROOT ?? "").trim();
-const hubWorkspaceRootRaw = path.resolve(configuredHubWorkspaceRoot || config.defaultWorkspaceRoot);
+const hubWorkspaceRootRaw = path.resolve(config.envBaseDir, configuredHubWorkspaceRoot || config.defaultWorkspaceRoot);
 const hubWorkspaceRoot = assertWorkspaceAllowed({
     workspaceRoot: hubWorkspaceRootRaw,
     policy: config.workspacePolicy,
     label: "HUB_WORKSPACE_ROOT",
 });
-const hubDataDir = path.resolve(String(process.env.HUB_DATA_DIR ?? path.join(config.dataDir, "copilot_hub")));
+const hubDataDir = path.resolve(config.envBaseDir, String(process.env.HUB_DATA_DIR ?? path.join(config.dataDir, "copilot_hub")));
 const hubThreadMode = normalizeThreadMode(process.env.HUB_THREAD_MODE ?? "per_chat");
 const hubSharedThreadId = String(process.env.HUB_SHARED_THREAD_ID ?? "shared-copilot-hub").trim() || "shared-copilot-hub";
 const allowedChatIds = parseCsvSet(process.env.HUB_ALLOWED_CHAT_IDS ?? "");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "copilot-hub",
-  "version": "0.1.21",
+  "version": "0.1.24",
   "description": "Copilot Hub CLI and runtime bundle",
   "license": "MIT",
   "repository": {
@@ -58,7 +58,6 @@
     "status": "npm run build:scripts --silent && node scripts/dist/cli.mjs status",
     "logs": "npm run build:scripts --silent && node scripts/dist/cli.mjs logs",
     "configure": "npm run build:scripts --silent && node scripts/dist/cli.mjs configure",
-    "update": "npm run build:scripts --silent && node scripts/dist/cli.mjs update",
     "test:scripts": "npm run build:scripts --silent && node --test scripts/test/*.test.mjs",
     "test": "npm run test:scripts && npm run test --workspaces --if-present",
     "lint": "eslint .",

package/packages/core/dist/config-paths.d.ts

@@ -0,0 +1,11 @@
+export declare function resolveConfigBaseDir({ configuredBaseDir, configuredEnvPath, cwd, }?: {
+    configuredBaseDir?: string | null | undefined;
+    configuredEnvPath?: string | null | undefined;
+    cwd?: string;
+}): string;
+export declare function resolveProcessConfigBaseDir({ env, cwd, }?: {
+    env?: NodeJS.ProcessEnv;
+    cwd?: string;
+}): string;
+export declare function resolvePathFromBase(value: unknown, baseDir: string): string;
+export declare function resolveOptionalPathFromBase(value: unknown, baseDir: string): string | null;

package/packages/core/dist/config-paths.js

@@ -0,0 +1,42 @@
+import path from "node:path";
+import process from "node:process";
+export function resolveConfigBaseDir({ configuredBaseDir, configuredEnvPath, cwd = process.cwd(), } = {}) {
+    const explicitBaseDir = normalizePath(configuredBaseDir);
+    if (explicitBaseDir) {
+        return explicitBaseDir;
+    }
+    const envPath = normalizePath(configuredEnvPath);
+    if (envPath) {
+        return path.dirname(envPath);
+    }
+    return path.resolve(cwd);
+}
+export function resolveProcessConfigBaseDir({ env = process.env, cwd = process.cwd(), } = {}) {
+    return resolveConfigBaseDir({
+        configuredBaseDir: env.COPILOT_HUB_ENV_BASE_DIR,
+        configuredEnvPath: env.COPILOT_HUB_ENV_PATH,
+        cwd,
+    });
+}
+export function resolvePathFromBase(value, baseDir) {
+    const raw = String(value ?? "").trim();
+    if (!raw) {
+        throw new Error("Path value must not be empty.");
+    }
+    return path.resolve(baseDir, raw);
+}
+export function resolveOptionalPathFromBase(value, baseDir) {
+    const raw = String(value ?? "").trim();
+    if (!raw) {
+        return null;
+    }
+    return resolvePathFromBase(raw, baseDir);
+}
+function normalizePath(value) {
+    const raw = String(value ?? "").trim();
+    if (!raw) {
+        return "";
+    }
+    return path.resolve(raw);
+}
+//# sourceMappingURL=config-paths.js.map

package/packages/core/dist/config-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-paths.js","sourceRoot":"","sources":["../src/config-paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,MAAM,UAAU,oBAAoB,CAAC,EACnC,iBAAiB,EACjB,iBAAiB,EACjB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,MAKjB,EAAE;IACJ,MAAM,eAAe,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACzD,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,iBAAiB,CAAC,CAAC;IACjD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,EAC1C,GAAG,GAAG,OAAO,CAAC,GAAG,EACjB,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,MAIjB,EAAE;IACJ,OAAO,oBAAoB,CAAC;QAC1B,iBAAiB,EAAE,GAAG,CAAC,wBAAwB;QAC/C,iBAAiB,EAAE,GAAG,CAAC,oBAAoB;QAC3C,GAAG;KACJ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc,EAAE,OAAe;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc,EAAE,OAAe;IACzE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAC3B,CAAC"}

package/packages/core/dist/index.d.ts

@@ -2,6 +2,7 @@ export { createWorkspaceBoundaryPolicy, assertWorkspaceAllowed, isPathInside, no
 export { normalizeThreadId } from "./thread-id.js";
 export { createProjectFingerprint } from "./project-fingerprint.js";
 export { DEFAULT_EXTERNAL_WORKSPACES_DIRNAME, getKernelRootPath, getDefaultExternalWorkspaceBasePath, resolveDefaultWorkspaceForBot, isPathInside as isWorkspacePathInside, } from "./workspace-paths.js";
+export { resolveConfigBaseDir, resolveProcessConfigBaseDir, resolvePathFromBase, resolveOptionalPathFromBase, } from "./config-paths.js";
 export { InstanceLock } from "./instance-lock.js";
 export { JsonStateStore } from "./state-store.js";
 export { assertControlPermission } from "./control-permission.js";

package/packages/core/dist/index.js

@@ -2,6 +2,7 @@ export { createWorkspaceBoundaryPolicy, assertWorkspaceAllowed, isPathInside, no
 export { normalizeThreadId } from "./thread-id.js";
 export { createProjectFingerprint } from "./project-fingerprint.js";
 export { DEFAULT_EXTERNAL_WORKSPACES_DIRNAME, getKernelRootPath, getDefaultExternalWorkspaceBasePath, resolveDefaultWorkspaceForBot, isPathInside as isWorkspacePathInside, } from "./workspace-paths.js";
+export { resolveConfigBaseDir, resolveProcessConfigBaseDir, resolvePathFromBase, resolveOptionalPathFromBase, } from "./config-paths.js";
 export { InstanceLock } from "./instance-lock.js";
 export { JsonStateStore } from "./state-store.js";
 export { assertControlPermission } from "./control-permission.js";

package/packages/core/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,YAAY,EACZ,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACL,mCAAmC,EACnC,iBAAiB,EACjB,mCAAmC,EACnC,6BAA6B,EAC7B,YAAY,IAAI,qBAAqB,GACtC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAC7B,sBAAsB,EACtB,YAAY,EACZ,qBAAqB,EACrB,0BAA0B,GAC3B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACL,mCAAmC,EACnC,iBAAiB,EACjB,mCAAmC,EACnC,6BAA6B,EAC7B,YAAY,IAAI,qBAAqB,GACtC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,2BAA2B,EAC3B,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,0BAA0B,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC"}

package/packages/core/dist/telegram-channel.js

@@ -2,6 +2,7 @@ import fs from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { Bot } from "grammy";
+import { resolvePathFromBase, resolveProcessConfigBaseDir } from "./config-paths.js";
 import { formatCodexQuotaLine, hasCodexQuotaWindows } from "./codex-quota-display.js";
 const CODEX_USAGE_CACHE_TTL_MS = 60_000;
 let cachedCodexUsage = null;
@@ -1194,7 +1195,7 @@ async function readCodexAuthTokens() {
 function resolveCodexHomeDir() {
     const fromEnv = String(process.env.CODEX_HOME_DIR ?? process.env.CODEX_HOME ?? "").trim();
     if (fromEnv) {
-        return path.resolve(fromEnv);
+        return resolvePathFromBase(fromEnv, resolveProcessConfigBaseDir());
     }
     return path.join(os.homedir(), ".codex");
 }