fix(hub): enable tenant Typst package resolution

2026-07-22 17:47:56 +08:00
parent 6462e42823
commit 36660f72d6
6 changed files with 156 additions and 45 deletions
@@ -40,6 +40,17 @@ HUB_PROJECT_WORKSPACE_ROOT="/var/lib/cph-hub/workspaces"
 # startup unless XDG_STATE_HOME is set (then defaults to $XDG_STATE_HOME/skills).
 HUB_SKILL_STORE_ROOT="/var/lib/cph-hub/state/skills"

+# Optional tenant-local Typst package roots. When configured, the agent
+# sandbox forwards these exact paths to Typst. The preinstalled package path is
+# read-only; the cache path is the only additional write location.
+# Keep the preinstalled package path outside the release tree and provision it
+# with the namespace layout expected by Typst, for example:
+#   <root>/paradigm/paradigm-templates/0.2.20/
+# Use a separate service-writable cache path when runtime dependencies may be
+# downloaded; do not make the immutable preinstalled directory the cache.
+# TYPST_PACKAGE_PATH="/srv/curriculum-project-hub/typst-packages/org-a"
+# TYPST_PACKAGE_CACHE_PATH="/var/cache/cph-hub/org-a/typst"
+
 # This process is pinned to exactly one Organization. Feishu credentials are
 # resolved from that Organization's encrypted ACTIVE connection.
 HUB_SILO_ORGANIZATION_ID=""