config, session: derive skills_dir and agent_auth_path from state_dir; remove setuid/setgid #94

Merged

weiwen merged 5 commits from fm/state-dir-implied-paths into main 2026-08-13 00:08:00 +08:00

Conversation 0 Commits 5 Files changed 14 +105 -630

weiwen commented 2026-08-12 23:15:50 +08:00

Owner

Copy link

No description provided.

weiwen added 6 commits 2026-08-12 23:15:50 +08:00

build: migrate from rustPlatform.buildRustPackage to crane for incremental nix builds ... 255d67b2f4

Replace the full-rebuild rustPlatform.buildRustPackage with crane's
two-stage approach: buildDepsOnly caches crate dependencies by
Cargo.lock hash, buildPackage reuses them and only recompiles
changed source files. A source-only change now rebuilds as fast as
cargo build inside a dev shell.

- Add crane input (github:ipetkov/crane)
- Swap rustPlatform for craneLib = (crane.mkLib pkgs).overrideToolchain
- commonArgs shared between buildDepsOnly and buildPackage
- cargoArtifacts (deps only, doCheck=false)
- evie (full build with postInstall wrapper + skills)
- Source filter preserves .md files (needed by include_str! for SYSTEM_PROMPT.md)
- Verified: first build 2m15s deps+evie, incremental build 33s (only evie crate)
- All 487 tests pass

config: derive skills_dir and agent_auth_path from the state root ... f6540c5d45

Both were configurable paths that every real deployment pointed back into the
state root anyway, so they are now derived like homes/ and sessions/ rather
than being two more knobs that can disagree with state_dir.

Also add $HOME/.evie to the state-root fallback chain, ahead of the hardcoded
/var/lib/evie, so a developer running the daemon by hand without systemd and
without $XDG_STATE_HOME lands somewhere writable.

main: pass the derived skills and agent-auth paths to the session manager 71a553bcb0

docs+deploy: document skills and provider credential as state-root-derived ... 74cc564eb2

The docker compose bind target moves with the code: the credential is read at
<state_dir>/auth.json now, so the sample deploy would otherwise mount it at a
path nothing reads. The host-side secrets/agent-auth.json filename is
unchanged.

session, pi, control: remove setuid/setgid privilege-drop and sandbox_user/group config bce3dcf3b9

config, users: remove dead sandbox_user/group config and run_as getters 45226c4272

weiwen referenced this pull request 2026-08-12 23:34:02 +08:00

config: make skills_dir and agent_auth_path implicit under the state root #93

weiwen force-pushed fm/state-dir-implied-paths from 45226c4272 to b0ed84b964 2026-08-12 23:35:04 +08:00 Compare

weiwen force-pushed fm/state-dir-implied-paths from b0ed84b964 to 235940f27a 2026-08-12 23:37:44 +08:00 Compare

weiwen force-pushed fm/state-dir-implied-paths from 235940f27a to df80a6e02f 2026-08-12 23:43:00 +08:00 Compare

weiwen added 1 commit 2026-08-12 23:45:00 +08:00

fix: restore missing tokio::sync::oneshot import 2532a80886

weiwen added 1 commit 2026-08-12 23:55:01 +08:00

fix: allow dead_code on unused config/telegram fields and clippy let_unit_value 8fb48b49be

weiwen force-pushed fm/state-dir-implied-paths from 8fb48b49be to 054c9dd9c6 2026-08-13 00:07:28 +08:00 Compare

weiwen merged commit 41b09a6967 into main 2026-08-13 00:08:00 +08:00

weiwen deleted branch fm/state-dir-implied-paths 2026-08-13 00:08:00 +08:00

weiwen referenced this pull request from a commit 2026-08-13 00:08:01 +08:00

config, session: derive skills_dir and agent_auth_path from state_dir; remove setuid/setgid (#94)

weiwen referenced this pull request 2026-08-13 13:32:02 +08:00

simplify-code-base run a7b8fa: 52 iterations of folding duplicated decisions onto single seams #96

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

epic

Large body of work that groups related issues or PRs into a single initiative; not intended for direct implementation until broken down into smaller tasks.

  

in-review

Agent opened a PR; tracked there — no action needed on the issue

  

ready-for-agent

PRD ready for an agent to implement

  

ready-for-human

Implemented; awaiting human review/merge

No labels

epic

in-review

ready-for-agent

ready-for-human

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

weiwen/evie!94

No description provided.