@lightcone-ai/daemon 0.15.5 → 0.15.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lightcone-ai/daemon",
-  "version": "0.15.5",
+  "version": "0.15.6",
   "type": "module",
   "main": "src/index.js",
   "bin": {

package/src/agent-manager.js

@@ -1,4 +1,5 @@
 import { spawn } from 'child_process';
+import { createHash } from 'crypto';
 import {
   existsSync,
   mkdirSync,
@@ -124,6 +125,10 @@ function normalizeObject(value) {
   return isPlainObject(value) ? value : {};
 }
 
+function hashRenderedWorkspaceContext(value) {
+  return createHash('sha256').update(String(value ?? ''), 'utf8').digest('hex');
+}
+
 function normalizePublishStage(value, fallback = 'unknown') {
   const normalized = String(value ?? '').trim().toLowerCase();
   if (!normalized) return fallback;
@@ -768,32 +773,6 @@ export class AgentManager {
     };
   }
 
-  // Fetches the per-spawn workspace context bundle (Goal State + active
-  // context items) so the daemon can inject it into the agent's system
-  // prompt. Returns '' when there is nothing to inject; never throws — a
-  // network error or absent workspaceId just degrades to empty context, so
-  // spawn proceeds without the bundle rather than failing closed.
-  async _fetchWorkspaceContextPrompt({ agentId, workspaceId }) {
-    if (!workspaceId) return '';
-    if (!this.serverUrl || !this.machineApiKey) return '';
-    try {
-      const url = `${this.serverUrl}/internal/agent/${encodeURIComponent(agentId)}/context?workspaceId=${encodeURIComponent(workspaceId)}`;
-      const res = await fetch(url, {
-        headers: { 'Authorization': `Bearer ${this.machineApiKey}` },
-      });
-      if (!res.ok) {
-        const text = await res.text();
-        console.log(`[AgentManager] Workspace context fetch failed for ${agentId} (non-fatal): ${res.status} ${text.slice(0, 200)}`);
-        return '';
-      }
-      const payload = await res.json();
-      return typeof payload?.renderedPrompt === 'string' ? payload.renderedPrompt : '';
-    } catch (err) {
-      console.log(`[AgentManager] Workspace context fetch error for ${agentId} (non-fatal): ${err.message}`);
-      return '';
-    }
-  }
-
   async _fetchSpawnDirective({
     agentId,
     workspaceId,
@@ -1077,14 +1056,25 @@ export class AgentManager {
       ...credentialEnvVars,
     };
 
-    // Inject the assembled workspace context (Goal State + active context
-    // items) directly into the system prompt, replacing the legacy
-    // "read BRIEF.md on startup" handshake. Empty workspaces leave the prompt
-    // unchanged.
-    const renderedWorkspaceContext = await this._fetchWorkspaceContextPrompt({
-      agentId,
-      workspaceId,
-    });
+    // Inject the authoritative workspace context carried by spawn-directive.
+    // This removes the historical daemon-side second context assembly path.
+    const renderedWorkspaceContext = typeof directive?.rendered_context_prompt === 'string'
+      ? directive.rendered_context_prompt
+      : '';
+    const expectedWorkspaceContextHash = typeof directive?.rendered_context_prompt_hash === 'string'
+      ? directive.rendered_context_prompt_hash.trim()
+      : '';
+    if (expectedWorkspaceContextHash) {
+      const actualWorkspaceContextHash = hashRenderedWorkspaceContext(renderedWorkspaceContext);
+      if (actualWorkspaceContextHash !== expectedWorkspaceContextHash) {
+        console.log(
+          `[AgentManager] Spawn directive context hash mismatch for ${agentId}: `
+          + `expected=${expectedWorkspaceContextHash} actual=${actualWorkspaceContextHash}`
+        );
+        failStart('spawn_directive_invalid_context_hash');
+        return;
+      }
+    }
     const baseSystemPrompt = typeof directive?.system_prompt === 'string'
       ? directive.system_prompt
       : '';

package/src/browser-login.js

@@ -64,7 +64,9 @@ export const PLATFORM_CONFIGS = {
     },
   },
   kuaishou: {
-    loginUrl: 'https://www.kuaishou.com',
+    // Use creator platform so QR scan establishes a creator session (cp.kuaishou.com).
+    // www.kuaishou.com session is separate — it cannot access the creator publish APIs.
+    loginUrl: 'https://cp.kuaishou.com',
     getSessionValue: (cookies) => cookies.find(c => c.name === 'passToken')?.value ?? null,
     isLoggedIn: (cookies, baseline) => {
       const val = cookies.find(c => c.name === 'passToken')?.value ?? null;