@nowcrew/daemon 0.5.27 → 0.5.28

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nowcrew/daemon",
-  "version": "0.5.27",
+  "version": "0.5.28",
   "type": "module",
   "description": "crew daemon — 运行在用户机器:拉起/管理 agent 进程,注入 crew CLI,归一化 runtime 事件",
   "license": "Apache-2.0",
@@ -21,7 +21,7 @@
     "cross-spawn": "^7.0.6",
     "ws": "^8",
     "zod": "^3.23.0",
-    "@nowcrew/cli": "^0.4.6"
+    "@nowcrew/cli": "^0.4.13"
   },
   "optionalDependencies": {
     "koffi": "^2.9.0"

package/dist/attachments.js

@@ -1,196 +0,0 @@
-import { mkdir, rm, writeFile } from "node:fs/promises";
-import { basename, extname, resolve, sep } from "node:path";
-export const ATTACHMENT_MAX_FILE_BYTES = 25 * 1024 * 1024;
-export const ATTACHMENT_MAX_TOTAL_BYTES = 50 * 1024 * 1024;
-const throwIfAborted = (signal) => {
-    if (signal?.aborted)
-        throw signal.reason ?? new Error("Attachment materialization aborted");
-};
-function truncateUtf8(value, maxBytes) {
-    let bytes = 0;
-    let output = "";
-    for (const character of value) {
-        const size = Buffer.byteLength(character, "utf8");
-        if (bytes + size > maxBytes)
-            break;
-        output += character;
-        bytes += size;
-    }
-    return output;
-}
-function safeFilename(value) {
-    const leaf = basename(value.replace(/\\/gu, "/"))
-        .replace(/[\u0000-\u001f\u007f]/gu, "_")
-        .replace(/^\.+/u, "")
-        .trim();
-    return truncateUtf8(leaf, 180) || "attachment";
-}
-function collisionName(filename, index) {
-    if (index === 1)
-        return filename;
-    const extension = extname(filename);
-    const stem = extension ? filename.slice(0, -extension.length) : filename;
-    return `${stem}-${index}${extension}`;
-}
-function containedPath(directory, filename) {
-    const target = resolve(directory, filename);
-    if (!target.startsWith(`${resolve(directory)}${sep}`)) {
-        throw new Error("Attachment path escapes the execution directory");
-    }
-    return target;
-}
-function checkedRedirect(value, base) {
-    const url = new URL(value, base);
-    if (url.protocol !== "https:" || url.username || url.password) {
-        throw new Error("Attachment redirects must use credential-free HTTPS URLs");
-    }
-    return url;
-}
-async function readBounded(response, maxBytes) {
-    const declared = Number(response.headers.get("content-length") ?? "");
-    if (Number.isFinite(declared) && declared > maxBytes) {
-        throw new Error(`Attachment exceeds the ${maxBytes} byte limit`);
-    }
-    if (!response.body)
-        throw new Error("Attachment response body is empty");
-    const reader = response.body.getReader();
-    const chunks = [];
-    let size = 0;
-    while (true) {
-        const part = await reader.read();
-        if (part.done)
-            break;
-        const chunk = Buffer.from(part.value);
-        size += chunk.length;
-        if (size > maxBytes) {
-            await reader.cancel();
-            throw new Error(`Attachment exceeds the ${maxBytes} byte limit`);
-        }
-        chunks.push(chunk);
-    }
-    return Buffer.concat(chunks, size);
-}
-async function downloadAttachment(input) {
-    const initial = new URL(`/agent/attachments/${encodeURIComponent(input.attachment.id)}/download`, input.serverUrl);
-    if (!["http:", "https:"].includes(initial.protocol)
-        || initial.username || initial.password) {
-        throw new Error("Invalid NowWork attachment download URL");
-    }
-    let current = initial;
-    const controller = new AbortController();
-    let timedOut = false;
-    const onAbort = () => controller.abort(input.signal?.reason ?? new Error("Attachment materialization aborted"));
-    input.signal?.addEventListener("abort", onAbort, { once: true });
-    if (input.signal?.aborted)
-        onAbort();
-    const timer = setTimeout(() => {
-        timedOut = true;
-        controller.abort(new Error(`Attachment download timed out after ${input.timeoutMs}ms`));
-    }, input.timeoutMs);
-    try {
-        let response = await input.fetchImpl(current, {
-            redirect: "manual",
-            headers: { authorization: `Bearer ${input.token}` },
-            signal: controller.signal,
-        });
-        for (let redirects = 0; [301, 302, 303, 307, 308].includes(response.status); redirects += 1) {
-            if (redirects >= input.maxRedirects)
-                throw new Error("Attachment redirect limit exceeded");
-            const location = response.headers.get("location");
-            if (!location)
-                throw new Error("Attachment redirect is missing a location");
-            current = checkedRedirect(location, current);
-            response = await input.fetchImpl(current, { redirect: "manual", signal: controller.signal });
-        }
-        if (!response.ok)
-            throw new Error(`Attachment download failed with status ${response.status}`);
-        const data = await readBounded(response, input.maxFileBytes);
-        throwIfAborted(input.signal);
-        if (data.length !== input.attachment.sizeBytes) {
-            throw new Error(`Attachment size mismatch: expected ${input.attachment.sizeBytes}, received ${data.length}`);
-        }
-        return data;
-    }
-    catch (error) {
-        if (input.signal?.aborted) {
-            throw input.signal.reason ?? new Error("Attachment materialization aborted");
-        }
-        if (timedOut) {
-            throw new Error(`Attachment download timed out after ${input.timeoutMs}ms`);
-        }
-        throw error;
-    }
-    finally {
-        clearTimeout(timer);
-        input.signal?.removeEventListener("abort", onAbort);
-    }
-}
-export function executionAttachmentDirectory(runDir, executionId) {
-    const attachmentsRoot = resolve(runDir, "attachments");
-    const executionKey = executionId.replace(/[^A-Za-z0-9._-]/gu, "_");
-    const directory = resolve(attachmentsRoot, executionKey);
-    if (!directory.startsWith(`${attachmentsRoot}${sep}`)) {
-        throw new Error("Attachment directory escapes the run directory");
-    }
-    return directory;
-}
-export async function materializeAttachments(input) {
-    throwIfAborted(input.signal);
-    const maxFileBytes = input.maxFileBytes ?? ATTACHMENT_MAX_FILE_BYTES;
-    const maxTotalBytes = input.maxTotalBytes ?? ATTACHMENT_MAX_TOTAL_BYTES;
-    const total = input.attachments.reduce((sum, attachment) => sum + attachment.sizeBytes, 0);
-    if (input.attachments.some((attachment) => attachment.sizeBytes > maxFileBytes)
-        || total > maxTotalBytes) {
-        throw new Error("Attachment metadata exceeds the configured byte limit");
-    }
-    const directory = executionAttachmentDirectory(input.runDir, input.executionId);
-    const used = new Set();
-    const materialized = [];
-    try {
-        await rm(directory, { recursive: true, force: true });
-        throwIfAborted(input.signal);
-        await mkdir(directory, { recursive: true, mode: 0o700 });
-        throwIfAborted(input.signal);
-        for (const attachment of input.attachments) {
-            const base = safeFilename(attachment.filename);
-            let collision = 1;
-            let filename = collisionName(base, collision);
-            while (used.has(filename.toLowerCase())) {
-                collision += 1;
-                filename = collisionName(base, collision);
-            }
-            used.add(filename.toLowerCase());
-            const path = containedPath(directory, filename);
-            const data = await downloadAttachment({
-                serverUrl: input.serverUrl,
-                token: input.token,
-                attachment,
-                fetchImpl: input.fetchImpl ?? fetch,
-                maxFileBytes,
-                maxRedirects: input.maxRedirects ?? 3,
-                timeoutMs: input.timeoutMs ?? 10_000,
-                ...(input.signal === undefined ? {} : { signal: input.signal }),
-            });
-            throwIfAborted(input.signal);
-            await writeFile(path, data, {
-                flag: "wx",
-                mode: 0o600,
-                ...(input.signal === undefined ? {} : { signal: input.signal }),
-            });
-            materialized.push({ ...attachment, filename, path });
-        }
-        return { directory, attachments: materialized };
-    }
-    catch (error) {
-        try {
-            await rm(directory, { recursive: true, force: true });
-        }
-        catch (cleanupError) {
-            throw new AggregateError([error, cleanupError], "Attachment materialization failed and its execution directory could not be removed");
-        }
-        throw error;
-    }
-}
-export async function cleanupMaterializedAttachments(directory) {
-    await rm(directory, { recursive: true, force: true });
-}

package/dist/bound-im-decision.js

@@ -1,22 +0,0 @@
-import { readFile, unlink } from "node:fs/promises";
-import { join } from "node:path";
-export function boundImDecisionFilePath(runDir) {
-    return join(runDir, ".bound-im-decision.json");
-}
-export async function resetBoundImDecisionFile(path) {
-    await unlink(path).catch((error) => {
-        if (error.code !== "ENOENT")
-            throw error;
-    });
-}
-export async function readBoundImDecisionFile(path) {
-    try {
-        const parsed = JSON.parse(await readFile(path, "utf8"));
-        if (!parsed || typeof parsed !== "object")
-            return null;
-        return parsed.decision === "notify" ? { decision: "notify" } : null;
-    }
-    catch {
-        return null;
-    }
-}

package/dist/completion-retransmitter.js

@@ -1,77 +0,0 @@
-const DEFAULT_DELAYS = Object.freeze([1_000, 2_000, 4_000, 8_000, 16_000, 30_000]);
-export function createCompletionRetransmitter(options) {
-    const delays = options.retryDelaysMs?.length ? [...options.retryDelaysMs] : [...DEFAULT_DELAYS];
-    const pending = new Map();
-    let active = false;
-    let stopped = false;
-    const delayFor = (attempts) => delays[Math.min(Math.max(attempts - 1, 0), delays.length - 1)];
-    const clear = (entry) => {
-        if (entry.timer !== null)
-            clearTimeout(entry.timer);
-        entry.timer = null;
-    };
-    function schedule(entry) {
-        clear(entry);
-        if (!active || stopped)
-            return;
-        const delay = delayFor(entry.attempts);
-        entry.timer = setTimeout(() => {
-            entry.timer = null;
-            attempt(entry);
-        }, delay);
-        entry.timer.unref?.();
-    }
-    function attempt(entry) {
-        if (!active || stopped)
-            return;
-        const accepted = options.send(entry.frame);
-        if (accepted) {
-            entry.attempts += 1;
-            const nextDelayMs = delayFor(entry.attempts);
-            options.onAttempt?.({
-                kind: entry.attempts === 1 ? "sent" : "retried",
-                executionId: entry.frame.executionId,
-                attempt: entry.attempts,
-                nextDelayMs,
-            });
-        }
-        schedule(entry);
-    }
-    return {
-        track(frame) {
-            if (stopped || pending.has(frame.executionId))
-                return;
-            const entry = { frame, attempts: 0, timer: null };
-            pending.set(frame.executionId, entry);
-            if (active)
-                attempt(entry);
-        },
-        acknowledge(executionId) {
-            const entry = pending.get(executionId);
-            if (!entry)
-                return null;
-            clear(entry);
-            pending.delete(executionId);
-            return entry.attempts;
-        },
-        pause() {
-            active = false;
-            for (const entry of pending.values())
-                clear(entry);
-        },
-        resume() {
-            if (stopped || active)
-                return;
-            active = true;
-            for (const entry of pending.values())
-                attempt(entry);
-        },
-        stop() {
-            stopped = true;
-            active = false;
-            for (const entry of pending.values())
-                clear(entry);
-            pending.clear();
-        },
-    };
-}

package/dist/computer-cli.js

@@ -1,274 +0,0 @@
-import { parseArgs } from "node:util";
-import { homedir } from "node:os";
-import { resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-import { assertProfileAgentsRootUnique, daemonHome, inspectProfileAgentsRoot, listProfiles, loadProfile, PROFILE_AGENTS_ROOT_CONFLICT_MESSAGE, ProfileAgentsRootConflictError, profileIsPrivate, profilePath, publicProfile, removeProfile, resolveAgentsRoot, saveProfile, windowsDpapiProtector, } from "./computer-profile.js";
-import { buildServiceSpec, doctorService, hardenWindowsProfile, installService, serviceAction, serviceStatus, systemCommandRunner, uninstallService, upgradeDaemon, windowsProfileIsPrivate, } from "./computer-service.js";
-import { defaultProcessController } from "./execution-journal.js";
-import { inspectJournalLock } from "./execution-journal-lock.js";
-import { detectDaemonLang, formatDaemonText } from "./i18n.js";
-const COMPUTER_COMMANDS = new Set(["profile", "doctor", "install", "uninstall", "start", "stop", "restart", "status", "upgrade"]);
-export function builtDaemonEntry(moduleUrl = import.meta.url) {
-    return moduleUrl.endsWith(".js")
-        ? fileURLToPath(new URL("./main.js", moduleUrl))
-        : "";
-}
-function defaults() {
-    const npmCommand = process.platform === "win32" ? "npm.cmd" : "npm";
-    return {
-        env: process.env,
-        platform: process.platform,
-        userHome: homedir(),
-        uid: process.getuid?.(),
-        nodePath: process.execPath,
-        entryPath: builtDaemonEntry(),
-        runner: systemCommandRunner,
-        ...(process.platform === "win32" ? { profileProtector: windowsDpapiProtector } : {}),
-        resolveGlobalNodeModules: async () => {
-            const result = await systemCommandRunner(npmCommand, ["root", "--global"]);
-            if (result.exitCode !== 0 || !result.stdout.trim()) {
-                throw new Error(`Unable to locate global npm modules: ${result.stderr.trim() || `exit ${result.exitCode}`}`);
-            }
-            return result.stdout.trim();
-        },
-        readStdin: async () => {
-            if (process.stdin.isTTY)
-                throw new Error("--token-stdin requires a token on standard input");
-            const chunks = [];
-            for await (const chunk of process.stdin)
-                chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
-            return Buffer.concat(chunks).toString("utf8");
-        },
-        stdout: (text) => process.stdout.write(text),
-        stderr: (text) => process.stderr.write(text),
-    };
-}
-export function isGlobalDaemonEntry(entryPath, globalNodeModules) {
-    return resolve(entryPath) === resolve(globalNodeModules, "@nowcrew", "daemon", "dist", "main.js");
-}
-function usage(td) {
-    return [
-        td("Computer lifecycle:"),
-        "  crew-daemon profile save <name> --server-url <url> [--agents-root <path>] [--token-stdin]",
-        "  crew-daemon profile list|show|remove [<name>]",
-        "  crew-daemon doctor|install|uninstall|start|stop|restart|status --profile <name>",
-        "  crew-daemon upgrade [--profile <name>]",
-        "",
-        td("profile save reads the machine token from CREW_MACHINE_TOKEN, or stdin with --token-stdin."),
-    ].join("\n") + "\n";
-}
-function requireValue(value, name, td) {
-    if (!value)
-        throw new Error(td("Missing {{name}}", { name }));
-    return value;
-}
-function translatedError(error, td) {
-    if (error instanceof ProfileAgentsRootConflictError) {
-        return td(PROFILE_AGENTS_ROOT_CONFLICT_MESSAGE, {
-            profile: error.profile,
-            conflict: error.conflict,
-            agentsRoot: error.agentsRoot,
-            command: error.command,
-        });
-    }
-    return td(error.message);
-}
-export async function runComputerCommand(argv, overrides = {}) {
-    const command = argv[0];
-    if (!command || !COMPUTER_COMMANDS.has(command))
-        return null;
-    const deps = { ...defaults(), ...overrides };
-    const lang = detectDaemonLang(deps.env);
-    const td = (message, values) => formatDaemonText(lang, message, values);
-    try {
-        const parsed = parseArgs({
-            args: [...argv],
-            allowPositionals: true,
-            strict: true,
-            options: {
-                profile: { type: "string" },
-                "server-url": { type: "string" },
-                "agents-root": { type: "string" },
-                "token-stdin": { type: "boolean", default: false },
-                help: { type: "boolean", short: "h", default: false },
-            },
-        });
-        if (parsed.values.help) {
-            deps.stdout(usage(td));
-            return 0;
-        }
-        const [, action, positionalName] = parsed.positionals;
-        const home = daemonHome(deps.env);
-        const profileStorage = {
-            platform: deps.platform,
-            userHome: deps.userHome,
-            ...(deps.profileProtector ? { protector: deps.profileProtector } : {}),
-            ...(deps.platform === "win32"
-                ? { harden: (path) => hardenWindowsProfile(path, deps.runner) }
-                : {}),
-        };
-        if (command === "profile") {
-            if (action === "list") {
-                deps.stdout(`${JSON.stringify(await listProfiles(home), null, 2)}\n`);
-                return 0;
-            }
-            const name = requireValue(positionalName, "profile name", td);
-            if (action === "show") {
-                deps.stdout(`${JSON.stringify(publicProfile(await loadProfile(name, home, profileStorage)), null, 2)}\n`);
-                return 0;
-            }
-            if (action === "remove") {
-                await loadProfile(name, home, profileStorage);
-                const spec = buildServiceSpec({
-                    ...deps, profile: name, profileHome: home,
-                });
-                const status = await serviceStatus(spec, deps.runner);
-                if (status.installed)
-                    throw new Error(td("Service '{{id}}' is still installed; uninstall it before removing the profile", { id: spec.id }));
-                await removeProfile(name, home);
-                deps.stdout(`${td("Removed profile '{{name}}'.", { name })}\n`);
-                return 0;
-            }
-            if (action !== "save")
-                throw new Error(td("Expected profile save, list, show, or remove"));
-            const fromStdin = parsed.values["token-stdin"];
-            if (fromStdin && deps.env.CREW_MACHINE_TOKEN) {
-                throw new Error(td("Choose one token source: CREW_MACHINE_TOKEN or --token-stdin"));
-            }
-            const machineToken = (fromStdin ? await deps.readStdin() : deps.env.CREW_MACHINE_TOKEN)?.trim();
-            if (!machineToken)
-                throw new Error(td("Missing machine token; use CREW_MACHINE_TOKEN or --token-stdin"));
-            const profile = {
-                name,
-                serverUrl: requireValue(parsed.values["server-url"], "--server-url", td),
-                machineToken,
-                ...(parsed.values["agents-root"]
-                    ? { agentsRoot: resolveAgentsRoot(parsed.values["agents-root"], deps.userHome, deps.platform) }
-                    : {}),
-                ...(deps.env.PATH ? { runtimePath: deps.env.PATH } : {}),
-            };
-            await saveProfile(profile, home, profileStorage);
-            deps.stdout(`${td("Saved profile '{{name}}' with private credentials.", { name })}\n`);
-            return 0;
-        }
-        const profileName = parsed.values.profile;
-        if (command === "upgrade") {
-            const restartProfile = profileName
-                ? await loadProfile(profileName, home, profileStorage)
-                : null;
-            const spec = restartProfile
-                ? buildServiceSpec({
-                    ...deps,
-                    profile: restartProfile.name,
-                    profileHome: home,
-                })
-                : null;
-            if (spec) {
-                if (!isGlobalDaemonEntry(deps.entryPath, await deps.resolveGlobalNodeModules())) {
-                    throw new Error(td("Service lifecycle requires a global @nowcrew/daemon install; run npm install --global @nowcrew/daemon@latest"));
-                }
-                const before = await serviceStatus(spec, deps.runner);
-                if (!before.installed)
-                    throw new Error(td("Service '{{id}}' is not installed", { id: spec.id }));
-            }
-            await upgradeDaemon(deps.platform, deps.runner);
-            if (restartProfile) {
-                try {
-                    await assertProfileAgentsRootUnique(restartProfile, home, deps.userHome, profileStorage);
-                }
-                catch (error) {
-                    if (!(error instanceof ProfileAgentsRootConflictError))
-                        throw error;
-                    deps.stdout(`${td("Upgraded daemon but skipped restart for '{{name}}': {{reason}}", { name: restartProfile.name, reason: translatedError(error, td) })}\n`);
-                    return 0;
-                }
-                await serviceAction(spec, "restart", deps.runner);
-                deps.stdout(`${td("Upgraded daemon and restart request accepted for '{{name}}'. Verify with status.", { name: restartProfile.name })}\n`);
-            }
-            else {
-                deps.stdout(`${td("Upgraded daemon. Installed services were not restarted; pass --profile to restart one.")}\n`);
-            }
-            return 0;
-        }
-        const name = requireValue(profileName, "--profile", td);
-        const profile = await loadProfile(name, home, profileStorage);
-        if (command === "install" || command === "start" || command === "restart") {
-            await assertProfileAgentsRootUnique(profile, home, deps.userHome, profileStorage);
-        }
-        if (!deps.entryPath.endsWith(".js")) {
-            throw new Error(td("Service lifecycle requires the built daemon entry (.js), not a TypeScript development entry"));
-        }
-        const spec = buildServiceSpec({
-            ...deps, profile: name, profileHome: home,
-        });
-        if (command === "install") {
-            if (!isGlobalDaemonEntry(deps.entryPath, await deps.resolveGlobalNodeModules())) {
-                throw new Error(td("Service lifecycle requires a global @nowcrew/daemon install; run npm install --global @nowcrew/daemon@latest"));
-            }
-            await installService(spec, deps.runner);
-            deps.stdout(`${td("Installed '{{id}}'. Use status to confirm runtime state.", { id: spec.id })}\n`);
-            return 0;
-        }
-        if (command === "uninstall") {
-            await uninstallService(spec, deps.runner);
-            deps.stdout(`${td("Uninstalled '{{id}}'.", { id: spec.id })}\n`);
-            return 0;
-        }
-        if (command === "start" || command === "stop" || command === "restart") {
-            await serviceAction(spec, command, deps.runner);
-            deps.stdout(`${td("{{action}} request accepted for '{{id}}'. Verify with status.", {
-                action: command,
-                id: spec.id,
-            })}\n`);
-            return 0;
-        }
-        if (command === "status") {
-            const status = await serviceStatus(spec, deps.runner);
-            deps.stdout(`${JSON.stringify({ installed: status.installed, loaded: status.loaded, running: status.running, detail: (status.stdout || status.stderr).trim() }, null, 2)}\n`);
-            return status.installed && status.running ? 0 : 3;
-        }
-        if (command === "doctor") {
-            const privateFile = deps.platform === "win32"
-                ? await windowsProfileIsPrivate(profilePath(name, home), deps.runner)
-                : await profileIsPrivate(name, home, deps.platform);
-            const serviceChecks = await doctorService(spec, privateFile, deps.runner);
-            const rootInspection = await inspectProfileAgentsRoot(profile, home, deps.userHome, profileStorage);
-            const journalPath = resolve(rootInspection.agentsRoot, ".crew", "executions");
-            const journalLock = await inspectJournalLock({
-                directory: journalPath,
-                inspectIdentity: defaultProcessController.inspectIdentity,
-            });
-            const checks = [
-                ...serviceChecks,
-                {
-                    name: "agents-root-unique",
-                    ok: rootInspection.duplicateProfiles.length === 0,
-                    detail: rootInspection.duplicateProfiles.length === 0
-                        ? "unique"
-                        : `also used by: ${rootInspection.duplicateProfiles.join(", ")}`,
-                },
-                {
-                    name: "journal-lock-health",
-                    ok: journalLock.status === "unlocked" || journalLock.status === "owned",
-                    detail: journalLock.detail,
-                },
-            ];
-            const registered = (await serviceStatus(spec, deps.runner)).installed;
-            deps.stdout(`${JSON.stringify({
-                agentsRoot: rootInspection.agentsRoot,
-                journalPath,
-                duplicateProfiles: rootInspection.duplicateProfiles,
-                journalLock,
-                checks,
-                registered,
-            }, null, 2)}\n`);
-            return checks.every((check) => check.ok) ? 0 : 4;
-        }
-        deps.stderr(usage(td));
-        return 2;
-    }
-    catch (error) {
-        deps.stderr(`crew-daemon: ${translatedError(error, td)}\n`);
-        return 1;
-    }
-}