@nowcrew/daemon 0.6.50 → 0.6.52

package/dist/automatic-install-target.js

@@ -3,12 +3,12 @@ import { profileLayout, validateLocalInstanceName } from "./profile-layout.js";
 const PROFILE_NAME = /^[a-z0-9][a-z0-9_-]{0,47}$/;
 const KNOWN_TARGETS = {
     "nowwork-in.nowcoder.com": {
-        profile: "in",
+        environment: "production",
         daemonDirectory: "daemon",
         agentsDirectory: "agents",
     },
     "nowwork-dev.nowcoder.com": {
-        profile: "dev",
+        environment: "dev",
         daemonDirectory: "daemon-dev",
         agentsDirectory: "agents-dev",
     },
@@ -42,32 +42,37 @@ function requireCustomProfile(hostname, value) {
     if (!PROFILE_NAME.test(value)) {
         throw new Error("Invalid custom profile; expected a lowercase name of 1-48 letters, digits, '_' or '-'");
     }
-    if (value === "in" || value === "dev") {
+    if (value === "in" || value === "dev" || value === "production") {
         throw new Error(`Profile '${value}' is reserved for a known NowWork hostname`);
     }
     return value;
 }
 function knownTargetForProfile(environment, requestedProfile, input, parsed) {
     const paths = input.platform === "win32" ? win32 : posix;
-    const legacyProfile = environment;
+    // Keep the no-flag target readable by old daemons; any workspace-scoped profile below
+    // uses the canonical environment token (production, never in).
+    const legacyProfile = environment === "production" ? "in" : environment;
     if (requestedProfile === undefined || requestedProfile === legacyProfile) {
         return Object.freeze({
             kind: "known",
             profile: legacyProfile,
             serverUrl: normalizedServerUrl(parsed),
-            daemonHome: paths.join(input.userHome, ".crew", environment === "in" ? "daemon" : "daemon-dev"),
-            agentsRoot: paths.join(input.userHome, ".crew", environment === "in" ? "agents" : "agents-dev"),
+            daemonHome: paths.join(input.userHome, ".crew", environment === "production" ? "daemon" : "daemon-dev"),
+            agentsRoot: paths.join(input.userHome, ".crew", environment === "production" ? "agents" : "agents-dev"),
             npmPrefix: paths.join(input.userHome, ".crew", "daemon-runtimes", legacyProfile),
         });
     }
     if (requestedProfile === "in" || requestedProfile === "dev") {
-        throw new Error(`Server hostname '${new URL(input.serverUrl).hostname}' requires profile '${legacyProfile}'`);
+        throw new Error(`Server hostname '${new URL(input.serverUrl).hostname}' requires profile '${environment}'`);
     }
     const prefix = `nw-${environment}-`;
-    if (!requestedProfile.startsWith(prefix)) {
+    const legacyPrefix = environment === "production" ? "nw-in-" : prefix;
+    if (!requestedProfile.startsWith(prefix) && !requestedProfile.startsWith(legacyPrefix)) {
         throw new Error(`Server hostname '${new URL(input.serverUrl).hostname}' requires profile '${prefix}<local-name>'`);
     }
-    const localInstanceName = validateLocalInstanceName(requestedProfile.slice(prefix.length));
+    const localInstanceName = validateLocalInstanceName(requestedProfile.startsWith(prefix)
+        ? requestedProfile.slice(prefix.length)
+        : requestedProfile.slice(legacyPrefix.length));
     const layout = profileLayout({
         environment,
         localInstanceName,
@@ -91,7 +96,7 @@ export function resolveAutomaticInstallTarget(input) {
     const paths = input.platform === "win32" ? win32 : posix;
     const known = KNOWN_TARGETS[hostname];
     if (known !== undefined) {
-        return knownTargetForProfile(known.profile, input.requestedProfile, input, parsed);
+        return knownTargetForProfile(known.environment, input.requestedProfile, input, parsed);
     }
     const profile = requireCustomProfile(hostname, input.requestedProfile);
     return Object.freeze({

package/dist/daemon-migration-controller.js

@@ -10,6 +10,7 @@ import { buildServiceSpec, captureExactService, serviceStatus, systemCommandRunn
 import { readManagedServiceRegistry } from "./managed-service-registry.js";
 import { uninstallManagedService } from "./managed-service-lifecycle.js";
 import { resolveAutomaticInstallTarget } from "./automatic-install-target.js";
+import { buildStorageMigrationMappings, createSafeServiceManifest, CredentialMaterialError, } from "./storage-migration-manifest.js";
 const MigrationMessageSchema = z.object({
     type: z.literal("daemon:migrate"),
     migrationId: z.string().uuid(),
@@ -47,33 +48,30 @@ async function hashedFiles(root, directory = root) {
     return files;
 }
 async function backupAndCopy(input, id, targetHome, targetAgents, service) {
+    // Validate and project service identity before creating any backup bytes. A descriptor containing
+    // a token must stop the migration before it can be copied into the local backup root.
+    const safeService = createSafeServiceManifest({
+        spec: service.spec,
+        snapshot: service.snapshot,
+        managedRecord: service.managedRecord,
+    });
     const backup = migrationBackupRoot(input, id);
     await mkdir(backup, { recursive: true, mode: 0o700 });
     await cp(input.currentDaemonHome, resolve(backup, "daemon-home"), { recursive: true, force: false });
     await cp(input.currentAgentsRoot, resolve(backup, "agents-root"), { recursive: true, force: false });
     await cp(input.currentDaemonHome, targetHome, { recursive: true, force: false });
     await cp(input.currentAgentsRoot, targetAgents, { recursive: true, force: false });
-    const files = [
-        ...(await hashedFiles(resolve(backup, "daemon-home"))).map((file) => ({ ...file, path: `daemon-home/${file.path}` })),
-        ...(await hashedFiles(resolve(backup, "agents-root"))).map((file) => ({ ...file, path: `agents-root/${file.path}` })),
-    ];
+    const daemonFiles = await hashedFiles(resolve(backup, "daemon-home"));
+    const agentFiles = await hashedFiles(resolve(backup, "agents-root"));
+    const mappings = buildStorageMigrationMappings({ daemonFiles, agentFiles });
     await writeFile(resolve(backup, "manifest.json"), `${JSON.stringify({
-        version: 1,
+        version: 2,
         migrationId: id,
         profile: input.profileName,
         daemonHome: input.currentDaemonHome,
         agentsRoot: input.currentAgentsRoot,
-        service: {
-            id: service.spec.id,
-            platform: service.spec.platform,
-            descriptorPath: service.spec.descriptorPath,
-            descriptor: service.spec.descriptor,
-            daemonCommand: service.spec.daemonCommand,
-            installed: service.snapshot.installed,
-            running: service.snapshot.running,
-            managedRecord: service.managedRecord,
-        },
-        files,
+        service: safeService,
+        mappings,
     }, null, 2)}\n`, { mode: 0o600 });
     return backup;
 }
@@ -147,7 +145,7 @@ export function createDaemonMigrationController(input) {
                 }
             }
             catch (error) {
-                sendFailure(message.migrationId, "target_conflict", error);
+                sendFailure(message.migrationId, error instanceof CredentialMaterialError ? "credential_material" : "target_conflict", error);
                 return;
             }
             input.sendStatus({ type: "daemon:migration-status", migrationId: message.migrationId, status: "backing_up" });
@@ -158,7 +156,7 @@ export function createDaemonMigrationController(input) {
             }
             catch (error) {
                 await Promise.allSettled([rm(targetPath, { recursive: true, force: true }), rm(targetAgents, { recursive: true, force: true })]);
-                sendFailure(message.migrationId, "backup_failed", error);
+                sendFailure(message.migrationId, error instanceof CredentialMaterialError ? "credential_material" : "backup_failed", error);
                 return;
             }
             const install = input.install ?? installDaemonAutomatically;

package/dist/machine-info.js

@@ -191,10 +191,11 @@ export async function collectMachineHello(agentsRoot, executionLimits, runtimePl
             profileName: dependencies.profileName,
             daemonHome: dependencies.daemonHome ?? daemonHome(),
             agentsRoot,
-            ...(dependencies.profileName.match(/^nw-(?:in|dev)-([a-z0-9][a-z0-9_-]{0,39})$/u)?.[1] === undefined
+            ...(dependencies.profileName.match(/^nw-(?:production|in|dev)-([a-z0-9][a-z0-9_-]{0,39})$/u)?.[1] === undefined
                 ? {}
-                : { localInstanceName: dependencies.profileName.match(/^nw-(?:in|dev)-([a-z0-9][a-z0-9_-]{0,39})$/u)[1] }),
+                : { localInstanceName: dependencies.profileName.match(/^nw-(?:production|in|dev)-([a-z0-9][a-z0-9_-]{0,39})$/u)[1] }),
         }),
+        ...(dependencies.storageIdentity ?? {}),
         ...(backend.supported ? {
             executionProtocol: EXECUTION_PROTOCOL,
             executionLimits: Object.freeze({

package/dist/main.js

@@ -7,6 +7,7 @@
  */
 import { parseArgs } from "node:util";
 import { homedir } from "node:os";
+import { join } from "node:path";
 import { loadConfig, ConfigError } from "./config.js";
 import { detectDaemonLang, formatDaemonText, translateDaemon } from "./i18n.js";
 import { cliVersion, daemonVersion } from "./machine-info.js";
@@ -21,7 +22,18 @@ import { formatDaemonStartupError } from "./daemon-startup-error.js";
 import { assertManagedServiceStartup } from "./managed-service-startup.js";
 import { daemonGlobalInstallation } from "./daemon-installation.js";
 import { acquireDaemonInstallationLease, runWithDaemonInstallationLease, } from "./daemon-installation-lease.js";
+import { loadStorageRuntime } from "./storage-runtime.js";
+import { readStorageMigrationReceipt } from "./storage-migration-controller.js";
+import { storageMigrationStatusReplay } from "./storage-status-replay.js";
+import { runStorageWorkerCommand } from "./storage-worker-command.js";
+import { probeStorageMigrationRuntime } from "./storage-runtime-readiness.js";
+import { createStorageTargetConfirmationHandler } from "./storage-target-confirmation.js";
 async function main() {
+    const workerResult = await runStorageWorkerCommand(process.argv.slice(2));
+    if (workerResult !== null) {
+        process.exitCode = workerResult;
+        return;
+    }
     const computerResult = await runComputerCommand(process.argv.slice(2));
     if (computerResult !== null) {
         process.exitCode = computerResult;
@@ -57,8 +69,10 @@ async function main() {
     // 不把 machine token 放进 argv / plist / systemd unit / scheduled task。
     if (values["daemon-home"])
         process.env.CREW_DAEMON_HOME = values["daemon-home"];
+    let activeDaemonHome;
     if (values.profile) {
         const home = daemonHome();
+        activeDaemonHome = home;
         const profile = await loadProfile(values.profile, home);
         if (cmd === "serve") {
             await assertProfileAgentsRootUnique(profile, home, homedir());
@@ -100,9 +114,72 @@ async function main() {
         const installationLease = installation === null
             ? null
             : await acquireDaemonInstallationLease(installation.npmPrefix);
+        const storageRuntime = values.profile === undefined
+            ? null
+            : await loadStorageRuntime({
+                profile: values.profile,
+                serverUrl: config.serverUrl,
+                userHome: homedir(),
+                platform: process.platform,
+                environment: process.env,
+            });
+        const migrationRuntime = values.profile === undefined || activeDaemonHome === undefined || storageRuntime !== null
+            ? { ready: false, reason: "not_legacy_source" }
+            : await probeStorageMigrationRuntime({
+                profile: values.profile,
+                serverUrl: config.serverUrl,
+                currentDaemonHome: activeDaemonHome,
+                currentAgentsRoot: config.agentsRoot,
+                userHome: homedir(),
+                platform: process.platform,
+                ...(process.getuid === undefined ? {} : { uid: process.getuid() }),
+                environment: process.env,
+            });
+        const targetConfirmation = storageRuntime?.identity.storageMigrationId === undefined
+            ? null
+            : createStorageTargetConfirmationHandler({
+                backupsRoot: storageRuntime.local.backupsRoot,
+                identity: storageRuntime.identity,
+                profile: storageRuntime.installation.profile,
+                completionTimeoutMs: 180_000,
+            });
+        const storageMigration = storageRuntime !== null
+            ? {
+                ready: false,
+                statusOutboxPath: join(storageRuntime.local.stateRoot, "storage-status-outbox.json"),
+                identity: storageRuntime.identity,
+                ...(targetConfirmation === null ? {} : { confirm: targetConfirmation.handle }),
+                ...(storageRuntime.identity.storageMigrationId === undefined ? {} : {
+                    replayStatus: async (send) => {
+                        const migrationId = storageRuntime.identity.storageMigrationId;
+                        const receipt = await readStorageMigrationReceipt(storageRuntime.local.backupsRoot, migrationId);
+                        if (receipt === null)
+                            throw new Error(`storage migration receipt not found: ${migrationId}`);
+                        for (const frame of storageMigrationStatusReplay(receipt, {
+                            migrationId,
+                            environment: storageRuntime.identity.storageEnvironment,
+                            workspaceId: storageRuntime.identity.storageWorkspaceId,
+                            profile: storageRuntime.installation.profile,
+                        }))
+                            send(frame);
+                    },
+                }),
+            }
+            : migrationRuntime.ready
+                ? {
+                    ready: true,
+                    statusOutboxPath: migrationRuntime.runtime.statusOutboxPath,
+                    identity: migrationRuntime.runtime.identity,
+                    controller: migrationRuntime.runtime.controller,
+                    attach: migrationRuntime.runtime.attach,
+                    bindServerIdentity: migrationRuntime.runtime.bindServerIdentity,
+                    replayStatus: migrationRuntime.runtime.replayStatus,
+                }
+                : undefined;
         await runWithDaemonInstallationLease(installationLease, async () => {
             const service = serve(config, {
                 ...(values.profile === undefined ? {} : { profileName: values.profile }),
+                ...(storageMigration === undefined ? {} : { storageMigration }),
             });
             await runServeLifecycle(service);
         });

package/dist/profile-layout.js

@@ -2,6 +2,10 @@ import { posix, win32 } from "node:path";
 export const PROFILE_LAYOUT_VERSION = 1;
 const PROFILE_NAME = /^[a-z0-9][a-z0-9_-]{0,47}$/u;
 const LOCAL_INSTANCE_NAME = /^[a-z0-9][a-z0-9_-]{0,39}$/u;
+/** Accept the legacy `in` tag at the boundary, but never persist it in a new layout. */
+export function normalizeProfileEnvironment(value) {
+    return value === "in" ? "production" : value;
+}
 export function validateLocalInstanceName(value) {
     const normalized = value.trim().toLowerCase();
     if (!LOCAL_INSTANCE_NAME.test(normalized) || normalized.includes("..")) {
@@ -10,19 +14,21 @@ export function validateLocalInstanceName(value) {
     return normalized;
 }
 export function profileForLocalInstance(environment, localInstanceName) {
-    const profile = `nw-${environment}-${validateLocalInstanceName(localInstanceName)}`;
+    const canonicalEnvironment = normalizeProfileEnvironment(environment);
+    const profile = `nw-${canonicalEnvironment}-${validateLocalInstanceName(localInstanceName)}`;
     if (!PROFILE_NAME.test(profile))
         throw new Error("derived daemon profile exceeds 48 characters");
     return profile;
 }
 export function profileLayout(input) {
+    const environment = normalizeProfileEnvironment(input.environment);
     const localInstanceName = validateLocalInstanceName(input.localInstanceName);
-    const profile = profileForLocalInstance(input.environment, localInstanceName);
+    const profile = profileForLocalInstance(environment, localInstanceName);
     const paths = input.platform === "win32" ? win32 : posix;
-    const base = `${input.environment}-${localInstanceName}`;
+    const base = `${environment}-${localInstanceName}`;
     return Object.freeze({
         layoutVersion: PROFILE_LAYOUT_VERSION,
-        environment: input.environment,
+        environment,
         localInstanceName,
         profile,
         daemonHome: paths.join(input.userHome, ".crew", `daemon-${base}`),

package/dist/serve.js

@@ -51,6 +51,7 @@ import { handleRuntimeProbeFrame, probeRuntimeHealth } from "./runtime-health.js
 import { buildControlPlaneUrl } from "./control-plane-url.js";
 import { createServeMigrationController, handleMigrationControlMessage } from "./daemon-migration-wiring.js";
 import { createCodexHomeModeController } from "./codex-home-mode-controller.js";
+import { attachStorageMigrationRuntime, createServeStorageStatusDelivery, handleStorageMigrationControl, replayStorageMigrationStatus, storageMigrationCapabilities, } from "./storage-serve-adapter.js";
 export { buildControlPlaneUrl } from "./control-plane-url.js";
 // normalize.ts 的活动种类 → activity 枚举
 const ACTIVITY_MAP = {
@@ -175,13 +176,36 @@ export function serve(config, opts = {}) {
     });
     const machineHelloPublisher = createProjectSkillMachineHelloPublisher({
         status: projectSkillControllerReadiness.status,
-        effective: withProjectSkillCapabilityStatus,
+        effective: (hello, status) => {
+            const effective = withProjectSkillCapabilityStatus(hello, status);
+            const configuredIdentity = opts.storageMigration?.identity;
+            const currentIdentity = typeof configuredIdentity === "function"
+                ? configuredIdentity()
+                : configuredIdentity;
+            return currentIdentity === undefined ? effective : { ...effective, ...currentIdentity };
+        },
         onSent: (hello) => log(`📤 已上报机器信息: ${hello.hostname} · ${hello.os} · installed=[${hello.runtimes.join(",")}] · executable=[${hello.executionRuntimes.join(",")}] · agents=[${hello.agentHandles.join(",")}]`),
     });
     const initializedProjectSkills = initializedProjectSkillsReconciler(projectSkillControllerReadiness.ensure, projectSkillsReconciler);
+    const configuredCapabilities = opts.machineInfo?.capabilities ?? daemonCapabilities(process.platform);
+    const storageCapabilities = storageMigrationCapabilities(configuredCapabilities, opts.storageMigration);
+    const storageStatusDelivery = createServeStorageStatusDelivery(opts.storageMigration, {
+        onPersistenceError: (error) => dslog("daemon.storage_status_outbox_failed", "存储迁移状态 outbox 持久化失败", { level: "ERROR", error_message: error.message }),
+        transmit: (frame) => { try {
+            if (ws?.readyState === WebSocket.OPEN)
+                ws.send(JSON.stringify(frame));
+        }
+        catch { /* retry */ } },
+    });
+    const storageMigrationRuntime = attachStorageMigrationRuntime(opts.storageMigration, {
+        isBusy: () => executionRuns.size > 0 || legacyRuns.size > 0,
+        waitForExecutionFrames: () => executionFrameQueue,
+        flushLocalState: flushSlog,
+        sendStatus: storageStatusDelivery.send,
+    });
     const prepareProjectSkillCapabilities = createProjectSkillConnectionCapabilityProvider({
         platform: process.platform,
-        baseCapabilities: opts.machineInfo?.capabilities ?? daemonCapabilities(process.platform),
+        baseCapabilities: storageCapabilities,
         additionalCapabilities: () => managedDaemonCapabilities(updateEligibility),
         probeRuntimeRootStorePrimitive: projectSkillRuntimeRootStartup.probeNativePublicationPrimitiveReadiness,
         initializeController: projectSkillControllerReadiness.ensure,
@@ -310,6 +334,12 @@ export function serve(config, opts = {}) {
             // 连上了才有机会把离线期间(断连原因/退出前)落盘的日志补传上去
             void drainSpool();
             // 上报本机信息 (hostname/os/daemon 版本/已装 runtimes)
+            storageStatusDelivery.replayPending();
+            const storageReplay = replayStorageMigrationStatus(opts.storageMigration, openedSocket, () => ws === openedSocket, (error) => {
+                dslog("daemon.storage_status_replay_failed", "存储迁移状态重放失败", {
+                    level: "ERROR", error_message: error.message,
+                });
+            }, storageStatusDelivery.send);
             const { detectInstalled, detectExecutable = detectExecutionRuntimesWithSignal } = opts.machineInfo ?? {};
             const helloPromise = (opts.machineInfo?.collect ?? collectMachineHello)(config.agentsRoot, config.executionLimits, process.platform, {
                 ...(detectInstalled ? { detectInstalled } : {}),
@@ -325,6 +355,7 @@ export function serve(config, opts = {}) {
                 if (hello.executionProtocol === undefined)
                     return [];
                 const detected = await runtimeProbe.detect(hello.runtimes, detectExecutable);
+                await storageReplay;
                 if (ws === openedSocket && openedSocket.readyState === WebSocket.OPEN
                     && detected.some((runtime) => !hello.executionRuntimes.includes(runtime))) {
                     detectedExecutionRuntimes = detected;
@@ -339,7 +370,8 @@ export function serve(config, opts = {}) {
                 return [];
             });
             void helloPromise
-                .then((hello) => {
+                .then(async (hello) => {
+                await storageReplay;
                 if (ws !== openedSocket || openedSocket.readyState !== WebSocket.OPEN)
                     return;
                 detectedExecutionRuntimes = hello.executionRuntimes;
@@ -387,6 +419,8 @@ export function serve(config, opts = {}) {
             if (typeof decoded !== "object" || decoded === null)
                 return;
             const rawType = "type" in decoded && typeof decoded.type === "string" ? decoded.type : "";
+            if (storageStatusDelivery.acknowledge(decoded))
+                return;
             if (rawType === "daemon:update" || rawType === "daemon:restart") {
                 void updateController.handle(decoded).catch((error) => {
                     dslog("daemon.control_failed", "daemon 控制操作处理失败", {
@@ -403,6 +437,11 @@ export function serve(config, opts = {}) {
                 void codexHomeModeController.handle(decoded).catch((error) => dslog("daemon.codex_home_mode_failed", "Codex Home 模式切换失败", { level: "ERROR", error_message: error.message }));
                 return;
             }
+            if (handleStorageMigrationControl(opts.storageMigration, rawType, decoded, storageStatusDelivery.send, (kind, error) => {
+                dslog(kind === "migration" ? "daemon.storage_migration_failed" : "daemon.storage_migration_confirmation_failed", kind === "migration" ? "存储迁移控制操作失败" : "存储迁移 hello 确认处理失败", { level: "ERROR", error_message: error.message });
+            })) {
+                return;
+            }
             if (rawType.startsWith("execution:")) {
                 const parsedExecution = ServerToDaemonExecutionFrameSchema.safeParse(decoded);
                 if (!parsedExecution.success) {
@@ -464,6 +503,14 @@ export function serve(config, opts = {}) {
                         return;
                     }
                     const spec = frame;
+                    if (storageMigrationRuntime.isAdmissionClosed()) {
+                        safeExecutionSend(ExecutionRejectedSchema.parse({
+                            type: "execution:rejected", protocolVersion: 1, executionId: spec.executionId,
+                            reason: "resource_limit", message: "Storage migration is quiescing this machine",
+                            at: new Date().toISOString(),
+                        }));
+                        return;
+                    }
                     const workspaceRejection = projectWorkspaceCapabilityRejection(spec, capabilities.executionRunner, new Date().toISOString());
                     if (workspaceRejection !== null)
                         return void safeExecutionSend(workspaceRejection);
@@ -770,6 +817,17 @@ export function serve(config, opts = {}) {
                 // ready 帧带 server 视角的 machineId/workspaceId → 作为后续所有日志的默认关联键
                 const r = msg;
                 setSlogDefaults({ machine_id: r.machineId, workspace_id: r.workspaceId });
+                if (opts.storageMigration?.ready === true && typeof r.workspaceId === "string") {
+                    try {
+                        opts.storageMigration.bindServerIdentity?.({ workspaceId: r.workspaceId });
+                        machineHelloPublisher.republish();
+                    }
+                    catch (error) {
+                        dslog("daemon.storage_identity_bind_failed", "存储迁移 Workspace 身份绑定失败", {
+                            level: "ERROR", error_message: error.message,
+                        });
+                    }
+                }
                 // 旧 server 无此字段 → 空集合(daemon 保持全部旧行为)。
                 serverCapabilities = new Set(Array.isArray(r.serverCapabilities)
                     ? r.serverCapabilities.filter((c) => typeof c === "string")
@@ -868,6 +926,8 @@ export function serve(config, opts = {}) {
             }
             if (msg.type !== "agent:start")
                 return; // ready/error 等忽略
+            if (storageMigrationRuntime.isAdmissionClosed())
+                return;
             // 任务键:scheduled run 用 runId(每次运行独立 cwd/work-log;overlap 由 server 端 skip_if_running 管,
             // daemon 的 running 去重只兜底"同一 run 重复投递");普通唤醒仍是 线程锚点 ?? 频道。
             const scheduled = msg.reason === "scheduled_job" && msg.scheduledRun
@@ -1283,6 +1343,7 @@ export function serve(config, opts = {}) {
             concurrencyTelemetry.stop();
             runtimeProbe.stop();
             completionRetransmitter.stop();
+            storageStatusDelivery.stop();
             const deadline = createShutdownDeadline(shutdownTimeoutMs);
             if (reconnectTimer !== null) {
                 clearTimeout(reconnectTimer);

package/dist/storage-config.js

@@ -0,0 +1,175 @@
+import { readFile } from "node:fs/promises";
+import { posix, win32 } from "node:path";
+import { z } from "zod";
+import { atomicPrivateWrite } from "./atomic-private-write.js";
+import { resolveEnvTag, resolveNowworkHome, storageLayout, } from "./storage-layout.js";
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu;
+const PROFILE = /^[a-z0-9][a-z0-9_-]{0,47}$/u;
+const PORTABLE_ABSOLUTE_PATH = z.string().min(1).max(32768).refine((value) => posix.isAbsolute(value) || win32.isAbsolute(value), "must be an absolute path");
+const ServerUrlSchema = z.string().url().max(2048).refine((value) => {
+    const url = new URL(value);
+    return (url.protocol === "http:" || url.protocol === "https:") && !url.username && !url.password;
+}, "serverUrl must be HTTP(S) without embedded credentials");
+const InstallationRecordSchema = z.object({
+    version: z.literal(1),
+    installationId: z.string().uuid(),
+    profile: z.string().regex(PROFILE),
+    serverUrl: ServerUrlSchema,
+    environment: z.string().regex(/^[a-z0-9][a-z0-9_-]{0,31}$/u),
+    workspaceId: z.string().uuid(),
+    storageId: z.string().min(1).max(128).regex(/^[A-Za-z0-9_-]+$/u),
+    nowworkHome: PORTABLE_ABSOLUTE_PATH,
+    runtimeRoot: PORTABLE_ABSOLUTE_PATH,
+    credentialRef: z.string().regex(/^profile:[a-z0-9][a-z0-9_-]{0,47}$/u),
+    storageMigrationId: z.string().uuid().optional(),
+    createdAt: z.string().datetime({ offset: true }),
+    updatedAt: z.string().datetime({ offset: true }),
+}).strict();
+const InstallationRegistrySchema = z.object({
+    version: z.literal(1),
+    installations: z.array(InstallationRecordSchema).max(256),
+}).strict();
+export function findInstallationForProfile(records, profile) {
+    if (!PROFILE.test(profile))
+        throw new Error("profile name is invalid");
+    const matches = records.filter((record) => record.profile === profile);
+    if (matches.length > 1)
+        throw new Error(`Multiple installations use profile '${profile}'`);
+    return matches[0] ?? null;
+}
+const pathsFor = (platform) => platform === "win32" ? win32 : posix;
+function absoluteBase(value, fallback, platform, name) {
+    const paths = pathsFor(platform);
+    const selected = value ?? fallback;
+    if (!paths.isAbsolute(selected) || selected.includes("\0") || selected.includes("\n") || selected.includes("\r")) {
+        throw new Error(`${name} must be an absolute single-line path`);
+    }
+    return paths.normalize(selected);
+}
+export function resolveLocalStorageRoots(input) {
+    const paths = pathsFor(input.platform);
+    const userHome = absoluteBase(input.userHome, input.userHome, input.platform, "user home");
+    if (input.platform === "win32") {
+        const local = absoluteBase(input.environment.LOCALAPPDATA, paths.join(userHome, "AppData", "Local"), input.platform, "LOCALAPPDATA");
+        const root = paths.join(local, "NowWork");
+        return Object.freeze({
+            configRoot: paths.join(root, "config"),
+            runtimeBase: paths.join(root, "runtime"),
+            cacheRoot: paths.join(root, "cache"),
+            stateRoot: paths.join(root, "state"),
+            backupsRoot: paths.join(root, "state", "backups"),
+            runtimePackagesRoot: paths.join(root, "cache", "runtime-packages"),
+        });
+    }
+    if (input.platform === "darwin") {
+        const applicationSupport = paths.join(userHome, "Library", "Application Support", "NowWork");
+        const cacheRoot = paths.join(userHome, "Library", "Caches", "NowWork");
+        return Object.freeze({
+            configRoot: paths.join(applicationSupport, "config"),
+            runtimeBase: paths.join(cacheRoot, "runtime"),
+            cacheRoot,
+            stateRoot: paths.join(applicationSupport, "state"),
+            backupsRoot: paths.join(applicationSupport, "state", "backups"),
+            runtimePackagesRoot: paths.join(cacheRoot, "runtime-packages"),
+        });
+    }
+    const configHome = absoluteBase(input.environment.XDG_CONFIG_HOME, paths.join(userHome, ".config"), input.platform, "XDG_CONFIG_HOME");
+    const cacheHome = absoluteBase(input.environment.XDG_CACHE_HOME, paths.join(userHome, ".cache"), input.platform, "XDG_CACHE_HOME");
+    const stateHome = absoluteBase(input.environment.XDG_STATE_HOME, paths.join(userHome, ".local", "state"), input.platform, "XDG_STATE_HOME");
+    const runtimeHome = absoluteBase(input.environment.XDG_RUNTIME_DIR, paths.join(stateHome, "nowwork", "runtime"), input.platform, "XDG_RUNTIME_DIR");
+    const stateRoot = paths.join(stateHome, "nowwork");
+    const cacheRoot = paths.join(cacheHome, "nowwork");
+    return Object.freeze({
+        configRoot: paths.join(configHome, "nowwork"),
+        runtimeBase: input.environment.XDG_RUNTIME_DIR === undefined ? runtimeHome : paths.join(runtimeHome, "nowwork"),
+        cacheRoot,
+        stateRoot,
+        backupsRoot: paths.join(stateRoot, "backups"),
+        runtimePackagesRoot: paths.join(cacheRoot, "runtime-packages"),
+    });
+}
+export function buildStorageConfig(input) {
+    if (!PROFILE.test(input.profile))
+        throw new Error("profile name is invalid");
+    if (!UUID.test(input.workspaceId))
+        throw new Error("workspace id must be a UUID");
+    const paths = pathsFor(input.platform);
+    const local = resolveLocalStorageRoots(input);
+    const home = resolveNowworkHome({
+        ...(input.nowworkHome === undefined ? {} : { explicit: input.nowworkHome }),
+        ...(input.environment.NOWWORK_HOME === undefined ? {} : { environment: input.environment.NOWWORK_HOME }),
+        userHome: input.userHome,
+        platform: input.platform,
+    });
+    const credentialRef = `profile:${input.profile}`;
+    if (home.mode === "legacy") {
+        return Object.freeze({
+            mode: "legacy",
+            profile: input.profile,
+            workspaceId: input.workspaceId.toLowerCase(),
+            credentialRef,
+            daemonHome: input.legacyDaemonHome ?? paths.join(input.userHome, ".crew", "daemon"),
+            agentsRoot: input.legacyAgentsRoot ?? paths.join(input.userHome, ".crew", "agents"),
+            layout: null,
+            local,
+            diagnostics: Object.freeze(["legacy_storage_detected"]),
+        });
+    }
+    const environment = resolveEnvTag({
+        ...(input.envTag === undefined ? {} : { explicit: input.envTag }),
+        ...(input.environment.NOWWORK_ENV_TAG === undefined ? {} : { environment: input.environment.NOWWORK_ENV_TAG }),
+    }).environment;
+    const layout = storageLayout({
+        nowworkHome: home.root,
+        environment,
+        workspaceId: input.workspaceId,
+        runtimeBase: local.runtimeBase,
+        platform: input.platform,
+    });
+    return Object.freeze({
+        mode: "standard",
+        profile: input.profile,
+        workspaceId: input.workspaceId.toLowerCase(),
+        credentialRef,
+        daemonHome: local.configRoot,
+        agentsRoot: layout.agentItemsRoot,
+        layout,
+        local,
+        diagnostics: Object.freeze([]),
+    });
+}
+export function installationsPath(configRoot) {
+    const paths = win32.isAbsolute(configRoot) && !posix.isAbsolute(configRoot) ? win32 : posix;
+    return paths.join(configRoot, "installations.json");
+}
+export async function readInstallations(input) {
+    const path = installationsPath(input.configRoot);
+    try {
+        const parsed = InstallationRegistrySchema.parse(JSON.parse(await readFile(path, "utf8")));
+        return Object.freeze(parsed.installations.map((record) => Object.freeze(record)));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return Object.freeze([]);
+        throw new Error(`Invalid installation registry: ${path}`, { cause: error });
+    }
+}
+export async function writeInstallations(records, input) {
+    let parsed;
+    try {
+        parsed = InstallationRegistrySchema.parse({ version: 1, installations: records });
+        const installationIds = new Set();
+        const profiles = new Set();
+        for (const record of parsed.installations) {
+            if (installationIds.has(record.installationId) || profiles.has(record.profile)) {
+                throw new Error("duplicate installation identity");
+            }
+            installationIds.add(record.installationId);
+            profiles.add(record.profile);
+        }
+    }
+    catch (error) {
+        throw new Error("Invalid installation metadata", { cause: error });
+    }
+    await atomicPrivateWrite(installationsPath(input.configRoot), `${JSON.stringify(parsed, null, 2)}\n`);
+}