@nowcrew/daemon 0.6.64 → 0.6.66

package/dist/agent-ability/resolver.js

@@ -9,8 +9,8 @@ import { abilityWorkspaceProjectionPath, DaemonAbilityLockSchema, DaemonAbilityM
 import { PROJECT_MANIFEST_SOURCE_PATH, ProjectDependencyManifestSchema, } from "../project-dependency-manifest.js";
 const runFile = promisify(execFile);
 const MAX_FILES = 5_000;
-const MAX_TOTAL_BYTES = 25 * 1024 * 1024;
-const MAX_FILE_BYTES = 2 * 1024 * 1024;
+export const AGENT_ABILITY_MAX_TOTAL_BYTES = 200 * 1024 * 1024;
+export const AGENT_ABILITY_MAX_FILE_BYTES = 100 * 1024 * 1024;
 const MAX_INSTRUCTIONS_BYTES = 96 * 1024;
 const MAX_MEMORY_BYTES = 64 * 1024;
 const AUTHORING_ONLY_ROOTS = new Set([".claude"]);
@@ -114,10 +114,11 @@ export const collectAbilityFiles = async (root) => {
             if (info.isDirectory())
                 await visit(absolute);
             else if (info.isFile()) {
-                if (info.size > MAX_FILE_BYTES)
+                if (info.size > AGENT_ABILITY_MAX_FILE_BYTES) {
                     throw new Error(`ability_file_size_exceeded:${relative(root, absolute)}`);
+                }
                 totalBytes += info.size;
-                if (totalBytes > MAX_TOTAL_BYTES)
+                if (totalBytes > AGENT_ABILITY_MAX_TOTAL_BYTES)
                     throw new Error("ability_total_size_exceeded");
                 if (files.length >= MAX_FILES)
                     throw new Error("ability_file_count_exceeded");
@@ -251,7 +252,7 @@ export const validateAbilityDependencyDeclarations = (manifest, lock) => {
         throw new Error("ability_lock_has_undeclared_dependency");
     }
 };
-const scan = (files, manifest) => {
+export const scanAbilityFiles = (files, manifest) => {
     const findings = [];
     const secrets = [
         /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/u,
@@ -259,7 +260,9 @@ const scan = (files, manifest) => {
         /\bAK(?:ID|IA)[A-Z0-9]{12,}\b/u,
     ];
     const executable = new Set([".exe", ".dll", ".dylib", ".so", ".bin", ".class", ".jar"]);
-    const allowedBinaryDocuments = new Set([".pdf", ".png", ".jpg", ".jpeg", ".gif", ".webp", ".xlsx", ".xls", ".docx", ".pptx"]);
+    const allowedBinaryDocuments = new Set([
+        ".pdf", ".png", ".jpg", ".jpeg", ".gif", ".webp", ".xlsx", ".xls", ".docx", ".pptx", ".ttf", ".otf",
+    ]);
     for (const file of files) {
         let text;
         try {
@@ -382,7 +385,7 @@ export async function resolveAbilityRelease(agentsRoot, command) {
     }
     const externalPaths = await verifyExternalDependencies(cacheRoot, resolved.root, lock);
     files = await collectAbilityFiles(resolved.root);
-    const security = scan(files, manifest);
+    const security = scanAbilityFiles(files, manifest);
     const kinds = new Set(lock.assets.map((asset) => asset.kind));
     const memory = [];
     for (const [layer, mounts] of [["release-policy", manifest.spec.memory.policy], ["release-seed", manifest.spec.memory.seeds]]) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nowcrew/daemon",
-  "version": "0.6.64",
+  "version": "0.6.66",
   "type": "module",
   "description": "crew daemon — 运行在用户机器:拉起/管理 agent 进程,注入 crew CLI,归一化 runtime 事件",
   "license": "Apache-2.0",
@@ -16,14 +16,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "daemon": "pnpm --filter @nowcrew/cli build && tsx src/main.ts",
-    "build": "tsc -p tsconfig.json",
-    "codex-home:migrate": "tsx src/runtimes/codex-home-migration-cli.ts",
-    "prepublishOnly": "pnpm build && node ../scripts/daemon-release-artifact.mjs --strict-registry",
-    "test": "vitest run",
-    "typecheck": "tsc --noEmit"
-  },
   "dependencies": {
     "@agentclientprotocol/sdk": "1.2.1",
     "@nowcrew/cli": "^0.4.13",
@@ -42,5 +34,12 @@
     "tsx": "^4.19.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0"
+  },
+  "scripts": {
+    "daemon": "pnpm --filter @nowcrew/cli build && tsx src/main.ts",
+    "build": "tsc -p tsconfig.json",
+    "codex-home:migrate": "tsx src/runtimes/codex-home-migration-cli.ts",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
   }
-}
+}