@nowcrew/daemon 0.6.66 → 0.6.67

package/dist/agent-ability/materializer.js

@@ -249,6 +249,23 @@ const verifyCache = async (agentsRoot, ability) => {
 };
 const layerRelativePath = (path, layer) => path.startsWith(`${layer}/`) ? path.slice(layer.length + 1) : path;
 const readManagedCatalog = async (trainingRoot) => JSON.parse(await readFile(join(trainingRoot, "ACTIVE_RELEASE.json"), "utf8"));
+const projectedSkillExists = async (trainingRoot, name) => {
+    const root = join(trainingRoot, "skills", safeAbilityName(name));
+    if (!await isRealDirectory(root))
+        return false;
+    const direct = await lstat(join(root, "SKILL.md")).catch(() => null);
+    if (direct?.isFile() && !direct.isSymbolicLink())
+        return true;
+    for (const entry of await readdir(root, { withFileTypes: true })) {
+        if (!entry.isDirectory())
+            continue;
+        const skill = await lstat(join(root, entry.name, "SKILL.md")).catch(() => null);
+        if (skill?.isFile() && !skill.isSymbolicLink())
+            return true;
+    }
+    return false;
+};
+const projectedSkillsComplete = async (trainingRoot, skills) => (await Promise.all(skills.map((skill) => projectedSkillExists(trainingRoot, skill.name)))).every(Boolean);
 const trainingSwitchJournalPath = (agentRoot) => join(agentRoot, ".training-switch.json");
 const trainingRollbackRoot = (agentRoot) => join(agentRoot, ".training-rollback");
 const trainingDiscardRoot = (agentRoot) => join(agentRoot, ".training-discard");
@@ -422,6 +439,7 @@ const activeTrainingRoot = async (agentsRoot, handle, ability) => {
         && catalog.releaseId === ability.releaseId
         && catalog.rootCommit === ability.rootCommit
         && catalog.artifactDigest === ability.artifactDigest
+        && await projectedSkillsComplete(trainingRoot, ability.skills)
         ? trainingRoot
         : null;
 };
@@ -463,7 +481,8 @@ const materializeWorkspaceTraining = async (agentsRoot, handle, ability) => {
         }
         if (previousCatalog.releaseId === ability.releaseId
             && previousCatalog.artifactDigest === ability.artifactDigest
-            && previousCatalog.projectionDigest === projectionDigest)
+            && previousCatalog.projectionDigest === projectionDigest
+            && await projectedSkillsComplete(trainingRoot, ability.skills))
             return trainingRoot;
     }
     await mkdir(agentRoot, { recursive: true });

package/dist/agent-ability/resolver.js

@@ -9,8 +9,8 @@ import { abilityWorkspaceProjectionPath, DaemonAbilityLockSchema, DaemonAbilityM
 import { PROJECT_MANIFEST_SOURCE_PATH, ProjectDependencyManifestSchema, } from "../project-dependency-manifest.js";
 const runFile = promisify(execFile);
 const MAX_FILES = 5_000;
-export const AGENT_ABILITY_MAX_TOTAL_BYTES = 200 * 1024 * 1024;
-export const AGENT_ABILITY_MAX_FILE_BYTES = 100 * 1024 * 1024;
+const MAX_TOTAL_BYTES = 25 * 1024 * 1024;
+const MAX_FILE_BYTES = 2 * 1024 * 1024;
 const MAX_INSTRUCTIONS_BYTES = 96 * 1024;
 const MAX_MEMORY_BYTES = 64 * 1024;
 const AUTHORING_ONLY_ROOTS = new Set([".claude"]);
@@ -114,11 +114,10 @@ export const collectAbilityFiles = async (root) => {
             if (info.isDirectory())
                 await visit(absolute);
             else if (info.isFile()) {
-                if (info.size > AGENT_ABILITY_MAX_FILE_BYTES) {
+                if (info.size > MAX_FILE_BYTES)
                     throw new Error(`ability_file_size_exceeded:${relative(root, absolute)}`);
-                }
                 totalBytes += info.size;
-                if (totalBytes > AGENT_ABILITY_MAX_TOTAL_BYTES)
+                if (totalBytes > MAX_TOTAL_BYTES)
                     throw new Error("ability_total_size_exceeded");
                 if (files.length >= MAX_FILES)
                     throw new Error("ability_file_count_exceeded");
@@ -252,7 +251,7 @@ export const validateAbilityDependencyDeclarations = (manifest, lock) => {
         throw new Error("ability_lock_has_undeclared_dependency");
     }
 };
-export const scanAbilityFiles = (files, manifest) => {
+const scan = (files, manifest) => {
     const findings = [];
     const secrets = [
         /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/u,
@@ -260,9 +259,7 @@ export const scanAbilityFiles = (files, manifest) => {
         /\bAK(?:ID|IA)[A-Z0-9]{12,}\b/u,
     ];
     const executable = new Set([".exe", ".dll", ".dylib", ".so", ".bin", ".class", ".jar"]);
-    const allowedBinaryDocuments = new Set([
-        ".pdf", ".png", ".jpg", ".jpeg", ".gif", ".webp", ".xlsx", ".xls", ".docx", ".pptx", ".ttf", ".otf",
-    ]);
+    const allowedBinaryDocuments = new Set([".pdf", ".png", ".jpg", ".jpeg", ".gif", ".webp", ".xlsx", ".xls", ".docx", ".pptx"]);
     for (const file of files) {
         let text;
         try {
@@ -385,7 +382,7 @@ export async function resolveAbilityRelease(agentsRoot, command) {
     }
     const externalPaths = await verifyExternalDependencies(cacheRoot, resolved.root, lock);
     files = await collectAbilityFiles(resolved.root);
-    const security = scanAbilityFiles(files, manifest);
+    const security = scan(files, manifest);
     const kinds = new Set(lock.assets.map((asset) => asset.kind));
     const memory = [];
     for (const [layer, mounts] of [["release-policy", manifest.spec.memory.policy], ["release-seed", manifest.spec.memory.seeds]]) {

package/dist/agent-ability/runtime.js

@@ -32,6 +32,9 @@ export function createAgentAbilityRuntime(agentsRoot, options = {}) {
             else if (type === "agent:ability:resolve") {
                 result = await controller.handle(input);
             }
+            else if (options.isAdmissionClosed?.() === true) {
+                result = { ok: false, error: "storage_migration_quiescing" };
+            }
             else {
                 const parsed = AbilityApplyCommandSchema.safeParse(input);
                 if (!parsed.success)

package/dist/automatic-install-target.js

@@ -3,12 +3,12 @@ import { profileLayout, validateLocalInstanceName } from "./profile-layout.js";
 const PROFILE_NAME = /^[a-z0-9][a-z0-9_-]{0,47}$/;
 const KNOWN_TARGETS = {
     "nowwork-in.nowcoder.com": {
-        profile: "in",
+        environment: "production",
         daemonDirectory: "daemon",
         agentsDirectory: "agents",
     },
     "nowwork-dev.nowcoder.com": {
-        profile: "dev",
+        environment: "dev",
         daemonDirectory: "daemon-dev",
         agentsDirectory: "agents-dev",
     },
@@ -42,32 +42,37 @@ function requireCustomProfile(hostname, value) {
     if (!PROFILE_NAME.test(value)) {
         throw new Error("Invalid custom profile; expected a lowercase name of 1-48 letters, digits, '_' or '-'");
     }
-    if (value === "in" || value === "dev") {
+    if (value === "in" || value === "dev" || value === "production") {
         throw new Error(`Profile '${value}' is reserved for a known NowWork hostname`);
     }
     return value;
 }
 function knownTargetForProfile(environment, requestedProfile, input, parsed) {
     const paths = input.platform === "win32" ? win32 : posix;
-    const legacyProfile = environment;
+    // Keep the no-flag target readable by old daemons; any workspace-scoped profile below
+    // uses the canonical environment token (production, never in).
+    const legacyProfile = environment === "production" ? "in" : environment;
     if (requestedProfile === undefined || requestedProfile === legacyProfile) {
         return Object.freeze({
             kind: "known",
             profile: legacyProfile,
             serverUrl: normalizedServerUrl(parsed),
-            daemonHome: paths.join(input.userHome, ".crew", environment === "in" ? "daemon" : "daemon-dev"),
-            agentsRoot: paths.join(input.userHome, ".crew", environment === "in" ? "agents" : "agents-dev"),
+            daemonHome: paths.join(input.userHome, ".crew", environment === "production" ? "daemon" : "daemon-dev"),
+            agentsRoot: paths.join(input.userHome, ".crew", environment === "production" ? "agents" : "agents-dev"),
             npmPrefix: paths.join(input.userHome, ".crew", "daemon-runtimes", legacyProfile),
         });
     }
     if (requestedProfile === "in" || requestedProfile === "dev") {
-        throw new Error(`Server hostname '${new URL(input.serverUrl).hostname}' requires profile '${legacyProfile}'`);
+        throw new Error(`Server hostname '${new URL(input.serverUrl).hostname}' requires profile '${environment}'`);
     }
     const prefix = `nw-${environment}-`;
-    if (!requestedProfile.startsWith(prefix)) {
+    const legacyPrefix = environment === "production" ? "nw-in-" : prefix;
+    if (!requestedProfile.startsWith(prefix) && !requestedProfile.startsWith(legacyPrefix)) {
         throw new Error(`Server hostname '${new URL(input.serverUrl).hostname}' requires profile '${prefix}<local-name>'`);
     }
-    const localInstanceName = validateLocalInstanceName(requestedProfile.slice(prefix.length));
+    const localInstanceName = validateLocalInstanceName(requestedProfile.startsWith(prefix)
+        ? requestedProfile.slice(prefix.length)
+        : requestedProfile.slice(legacyPrefix.length));
     const layout = profileLayout({
         environment,
         localInstanceName,
@@ -91,7 +96,7 @@ export function resolveAutomaticInstallTarget(input) {
     const paths = input.platform === "win32" ? win32 : posix;
     const known = KNOWN_TARGETS[hostname];
     if (known !== undefined) {
-        return knownTargetForProfile(known.profile, input.requestedProfile, input, parsed);
+        return knownTargetForProfile(known.environment, input.requestedProfile, input, parsed);
     }
     const profile = requireCustomProfile(hostname, input.requestedProfile);
     return Object.freeze({

package/dist/computer-cli.js

@@ -82,6 +82,14 @@ function translatedError(error, td) {
     }
     return td(error.message);
 }
+function storageServiceEnvironment(env) {
+    return {
+        ...(env.NOWWORK_HOME === undefined ? {} : { NOWWORK_HOME: env.NOWWORK_HOME }),
+        ...(env.NOWWORK_ENV_TAG === undefined ? {} : { NOWWORK_ENV_TAG: env.NOWWORK_ENV_TAG }),
+        ...(env.NOWWORK_STORAGE_POLICY_PATH === undefined
+            ? {} : { NOWWORK_STORAGE_POLICY_PATH: env.NOWWORK_STORAGE_POLICY_PATH }),
+    };
+}
 export async function runComputerCommand(argv, overrides = {}) {
     const command = argv[0];
     if (!command || !COMPUTER_COMMANDS.has(command))
@@ -202,6 +210,7 @@ export async function runComputerCommand(argv, overrides = {}) {
                     ...deps,
                     profile: restartProfile.name,
                     profileHome: home,
+                    environment: storageServiceEnvironment(deps.env),
                 })
                 : null;
             if (spec && restartProfile) {
@@ -272,7 +281,7 @@ export async function runComputerCommand(argv, overrides = {}) {
             throw new Error(td("Service lifecycle requires the built daemon entry (.js), not a TypeScript development entry"));
         }
         const spec = buildServiceSpec({
-            ...deps, profile: name, profileHome: home,
+            ...deps, profile: name, profileHome: home, environment: storageServiceEnvironment(deps.env),
         });
         const installation = daemonGlobalInstallation(deps.entryPath, deps.platform);
         const managedRecord = installation !== null && spec.platform !== "win32"

package/dist/computer-service.js

@@ -53,6 +53,7 @@ export function windowsCommandArg(value) {
 }
 export function buildServiceSpec(input) {
     const { platform, profile, userHome } = input;
+    const environment = input.environment ?? process.env;
     if (platform !== "darwin" && platform !== "linux" && platform !== "win32") {
         throw new Error(`Computer services are not supported on platform '${platform}'`);
     }
@@ -72,6 +73,16 @@ export function buildServiceSpec(input) {
             throw new Error("Cannot install launchd service without a numeric uid");
         const id = `com.nowcrew.daemon.${profile}${identitySuffix}`;
         const args = daemonCommand.map((arg) => `      <string>${xml(arg)}</string>`).join("\n");
+        const environmentEntries = [
+            ["NOWWORK_HOME", environment.NOWWORK_HOME],
+            ["NOWWORK_ENV_TAG", environment.NOWWORK_ENV_TAG],
+            ["NOWWORK_STORAGE_POLICY_PATH", environment.NOWWORK_STORAGE_POLICY_PATH],
+        ].flatMap(([key, value]) => value === undefined
+            ? []
+            : [`    <key>${key}</key><string>${xml(assertSingleLine(value, key))}</string>`]);
+        const environmentBlock = environmentEntries.length === 0
+            ? ""
+            : `  <key>EnvironmentVariables</key>\n  <dict>\n${environmentEntries.join("\n")}\n  </dict>\n`;
         return {
             platform,
             profile,
@@ -79,7 +90,7 @@ export function buildServiceSpec(input) {
             descriptorPath: resolve(userHome, "Library", "LaunchAgents", `${id}.plist`),
             daemonCommand,
             managerDomain: `gui/${input.uid}`,
-            descriptor: `<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0">\n<dict>\n  <key>Label</key><string>${xml(id)}</string>\n  <key>ProgramArguments</key>\n  <array>\n${args}\n  </array>\n  <key>KeepAlive</key><true/>\n  <key>ProcessType</key><string>Background</string>\n</dict>\n</plist>\n`,
+            descriptor: `<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0">\n<dict>\n  <key>Label</key><string>${xml(id)}</string>\n  <key>ProgramArguments</key>\n  <array>\n${args}\n  </array>\n${environmentBlock}  <key>KeepAlive</key><true/>\n  <key>ProcessType</key><string>Background</string>\n</dict>\n</plist>\n`,
         };
     }
     if (platform === "linux") {
@@ -266,6 +277,35 @@ export async function installService(spec, runner = systemCommandRunner) {
         throw error;
     }
 }
+export async function replaceInstalledServiceDescriptor(spec, previousDescriptor, runner = systemCommandRunner) {
+    if (spec.platform === "win32" || spec.descriptorPath === null || spec.descriptor === null) {
+        throw new Error("Installed service descriptor replacement requires launchd or systemd");
+    }
+    const current = await readServiceDescriptor(spec);
+    if (current !== previousDescriptor) {
+        throw new Error(`Installed descriptor for '${spec.id}' changed before replacement`);
+    }
+    const status = await serviceStatus(spec, runner);
+    if (!status.installed)
+        throw new Error(`Service '${spec.id}' is not installed`);
+    if (status.running || status.loaded)
+        await serviceAction(spec, "stop", runner);
+    try {
+        await writePrivateAtomic(spec.descriptorPath, spec.descriptor);
+        if (spec.platform === "linux") {
+            await checked(runner, "systemctl", ["--user", "daemon-reload"], "systemd reload");
+            await checked(runner, "systemctl", ["--user", "enable", spec.id], "systemd enable");
+        }
+        if (status.running)
+            await serviceAction(spec, "start", runner);
+    }
+    catch (error) {
+        await writePrivateAtomic(spec.descriptorPath, previousDescriptor).catch(() => undefined);
+        if (status.running)
+            await serviceAction(spec, "start", runner).catch(() => undefined);
+        throw error;
+    }
+}
 export async function ensureServiceEnabled(spec, runner = systemCommandRunner) {
     if (spec.platform === "linux") {
         if (spec.descriptorPath === null || !await pathExists(spec.descriptorPath)) {

package/dist/config.js

@@ -59,6 +59,40 @@ function defaultCliPath() {
         return resolve(here, "../../cli/dist/main.js");
     }
 }
+// 临时 dev 验收名单。测试完成后删除此常量，恢复未配置时默认关闭的行为。
+const TEMP_LOCAL_MEMORY_V2_TEST_HANDLES = [
+    "memory-v2-test-a",
+    "memory-v2-test-b",
+    "memory-v2-test-c",
+];
+function isTemporaryDevServer(serverUrl) {
+    try {
+        const hostname = new URL(serverUrl).hostname.toLowerCase();
+        return hostname === "localhost"
+            || hostname === "127.0.0.1"
+            || hostname === "::1"
+            || hostname === "nowwork-dev.nowcoder.com";
+    }
+    catch {
+        return false;
+    }
+}
+function localMemoryV2Handles(env, serverUrl) {
+    const configured = env.CREW_LOCAL_MEMORY_V2_HANDLES;
+    if (configured === undefined) {
+        return isTemporaryDevServer(serverUrl)
+            ? new Set(TEMP_LOCAL_MEMORY_V2_TEST_HANDLES)
+            : new Set();
+    }
+    const raw = configured.trim();
+    if (raw === "")
+        return new Set();
+    const handles = raw.split(",").map((value) => value.trim()).filter(Boolean);
+    if (handles.some((handle) => !/^[A-Za-z0-9][A-Za-z0-9._-]*$/u.test(handle))) {
+        throw new ConfigError("CREW_LOCAL_MEMORY_V2_HANDLES contains an invalid agent handle");
+    }
+    return new Set(handles);
+}
 export const DEFAULT_SERVER_URL = "http://127.0.0.1:3001";
 function codexHomeModeEnv(env) {
     const value = env.CREW_CODEX_HOME_MODE;
@@ -68,6 +102,14 @@ function codexHomeModeEnv(env) {
         return "private";
     throw new ConfigError("CREW_CODEX_HOME_MODE must be shared or private");
 }
+function codexCollaborationToolsEnv(env) {
+    const value = (env.CREW_CODEX_COLLABORATION_TOOLS ?? "").trim().toLowerCase();
+    if (value === "" || value === "0" || value === "false" || value === "off")
+        return false;
+    if (value === "1" || value === "true" || value === "on")
+        return true;
+    throw new ConfigError("CREW_CODEX_COLLABORATION_TOOLS must be one of 1/true/on/0/false/off");
+}
 export function loadConfig(env = process.env) {
     const serverUrl = (env.CREW_SERVER_URL ?? DEFAULT_SERVER_URL).replace(/\/+$/, "");
     const machineToken = env.CREW_MACHINE_TOKEN ?? "";
@@ -99,6 +141,7 @@ export function loadConfig(env = process.env) {
         cliPath: env.CREW_CLI_PATH ?? defaultCliPath(),
         runtimeBin: env.CREW_RUNTIME ?? "claude",
         codexHomeMode: codexHomeModeEnv(env),
+        codexCollaborationTools: codexCollaborationToolsEnv(env),
         dangerous: env.CREW_RUNTIME_SAFE !== "1", // 默认开启 (headless agent 在自有 workspace 内运行)
         resume: env.CREW_RESUME !== "off" && env.CREW_RESUME !== "0", // 默认开启;一键回退现状用 CREW_RESUME=off
         resumeWarmMs: env.CREW_RESUME_WARM_MS != null ? Number(env.CREW_RESUME_WARM_MS) : 3_600_000, // 默认 1h
@@ -108,6 +151,7 @@ export function loadConfig(env = process.env) {
         sessionMaxTurns: env.CREW_SESSION_MAX_TURNS != null ? Number(env.CREW_SESSION_MAX_TURNS) : 30,
         productName: env.CREW_PRODUCT_NAME ?? "nowwork",
         agentMemory: loadAgentMemoryConfig(env),
+        localMemoryV2Handles: localMemoryV2Handles(env, serverUrl),
         executionLimits,
     };
 }

package/dist/daemon-migration-controller.js

@@ -10,6 +10,7 @@ import { buildServiceSpec, captureExactService, serviceStatus, systemCommandRunn
 import { readManagedServiceRegistry } from "./managed-service-registry.js";
 import { uninstallManagedService } from "./managed-service-lifecycle.js";
 import { resolveAutomaticInstallTarget } from "./automatic-install-target.js";
+import { buildStorageMigrationMappings, createSafeServiceManifest, CredentialMaterialError, } from "./storage-migration-manifest.js";
 const MigrationMessageSchema = z.object({
     type: z.literal("daemon:migrate"),
     migrationId: z.string().uuid(),
@@ -47,33 +48,30 @@ async function hashedFiles(root, directory = root) {
     return files;
 }
 async function backupAndCopy(input, id, targetHome, targetAgents, service) {
+    // Validate and project service identity before creating any backup bytes. A descriptor containing
+    // a token must stop the migration before it can be copied into the local backup root.
+    const safeService = createSafeServiceManifest({
+        spec: service.spec,
+        snapshot: service.snapshot,
+        managedRecord: service.managedRecord,
+    });
     const backup = migrationBackupRoot(input, id);
     await mkdir(backup, { recursive: true, mode: 0o700 });
     await cp(input.currentDaemonHome, resolve(backup, "daemon-home"), { recursive: true, force: false });
     await cp(input.currentAgentsRoot, resolve(backup, "agents-root"), { recursive: true, force: false });
     await cp(input.currentDaemonHome, targetHome, { recursive: true, force: false });
     await cp(input.currentAgentsRoot, targetAgents, { recursive: true, force: false });
-    const files = [
-        ...(await hashedFiles(resolve(backup, "daemon-home"))).map((file) => ({ ...file, path: `daemon-home/${file.path}` })),
-        ...(await hashedFiles(resolve(backup, "agents-root"))).map((file) => ({ ...file, path: `agents-root/${file.path}` })),
-    ];
+    const daemonFiles = await hashedFiles(resolve(backup, "daemon-home"));
+    const agentFiles = await hashedFiles(resolve(backup, "agents-root"));
+    const mappings = buildStorageMigrationMappings({ daemonFiles, agentFiles });
     await writeFile(resolve(backup, "manifest.json"), `${JSON.stringify({
-        version: 1,
+        version: 2,
         migrationId: id,
         profile: input.profileName,
         daemonHome: input.currentDaemonHome,
         agentsRoot: input.currentAgentsRoot,
-        service: {
-            id: service.spec.id,
-            platform: service.spec.platform,
-            descriptorPath: service.spec.descriptorPath,
-            descriptor: service.spec.descriptor,
-            daemonCommand: service.spec.daemonCommand,
-            installed: service.snapshot.installed,
-            running: service.snapshot.running,
-            managedRecord: service.managedRecord,
-        },
-        files,
+        service: safeService,
+        mappings,
     }, null, 2)}\n`, { mode: 0o600 });
     return backup;
 }
@@ -147,7 +145,7 @@ export function createDaemonMigrationController(input) {
                 }
             }
             catch (error) {
-                sendFailure(message.migrationId, "target_conflict", error);
+                sendFailure(message.migrationId, error instanceof CredentialMaterialError ? "credential_material" : "target_conflict", error);
                 return;
             }
             input.sendStatus({ type: "daemon:migration-status", migrationId: message.migrationId, status: "backing_up" });
@@ -158,7 +156,7 @@ export function createDaemonMigrationController(input) {
             }
             catch (error) {
                 await Promise.allSettled([rm(targetPath, { recursive: true, force: true }), rm(targetAgents, { recursive: true, force: true })]);
-                sendFailure(message.migrationId, "backup_failed", error);
+                sendFailure(message.migrationId, error instanceof CredentialMaterialError ? "credential_material" : "backup_failed", error);
                 return;
             }
             const install = input.install ?? installDaemonAutomatically;

package/dist/execution-runner.js

@@ -775,7 +775,7 @@ export async function runExecution(config, input, dependencies) {
         const baseSystemPromptBudget = spec.agent.abilityRelease === undefined
             ? systemPromptBudget
             : Math.max(0, Math.min(systemPromptBudget, Math.max(32 * 1024, systemPromptBudget - 168 * 1024)));
-        const systemPromptWithLocalFacts = withLocalExecutionFacts(spec.instructions.systemPrompt, baseSystemPromptBudget);
+        const systemPromptWithLocalFacts = withLocalExecutionFacts(spec.instructions.systemPrompt, baseSystemPromptBudget, { collaborationTools: config.codexCollaborationTools && spec.runtime.name === "codex" });
         const boundedSystemPrompt = (context) => appendAgentMemoryContext(typeof systemPromptWithLocalFacts === "string"
             ? systemPromptWithLocalFacts
             : systemPromptWithLocalFacts(context), recalledMemory, baseSystemPromptBudget);
@@ -801,6 +801,7 @@ export async function runExecution(config, input, dependencies) {
                 name: spec.runtime.name,
                 ...(spec.runtime.model === undefined ? {} : { model: spec.runtime.model }),
                 ...(spec.runtime.reasoning === undefined ? {} : { reasoning: spec.runtime.reasoning }),
+                codexCollaborationTools: config.codexCollaborationTools,
             },
             effectivePermission: permission,
             captureFinal: spec.reporting.captureFinal,
@@ -826,6 +827,7 @@ export async function runExecution(config, input, dependencies) {
                 softTokens: config.sessionSoftTokens,
                 maxTurns: config.sessionMaxTurns,
             },
+            localMemoryV2Enabled: config.localMemoryV2Handles?.has(spec.agent.handle) === true,
         };
         const result = await Promise.race([
             execute(localInput, callbacks, localDependencies),

package/dist/local-execution-prompt.js

@@ -4,7 +4,7 @@
  * server 提示词是权威部分,绝不裁剪;项目工作区提示词是绑定执行的强制部分,放不下就直接失败;
  * 只有本机事实(CREW_HOME / work-log / MEMORY 注入)是可选增强,按整段丢弃或按字节截断。
  */
-import { buildRuntimeWorkspacePrompt, capMemoryForInject, capWorkLogForInject, } from "./prompt.js";
+import { buildCollaborationToolsPrompt, buildRuntimeWorkspacePrompt, capMemoryForInject, capWorkLogForInject, } from "./prompt.js";
 export function truncateUtf8(value, maxBytes) {
     if (maxBytes <= 0)
         return "";
@@ -30,10 +30,11 @@ function takeCompletePromptSections(sections, maxBytes) {
     }, { value: "", bytes: 0, full: true }).value;
 }
 /** v1 server instructions opt in to daemon-owned paths and bounded local workspace context. */
-export function withLocalExecutionFacts(serverPrompt, maxBytes) {
+export function withLocalExecutionFacts(serverPrompt, maxBytes, options = {}) {
     return ({ workspace, resuming, projectContext }) => {
         const memory = capMemoryForInject(workspace.memory);
         const workLog = resuming ? "" : capWorkLogForInject(workspace.workLog);
+        const collaborationPrompt = options.collaborationTools === true ? buildCollaborationToolsPrompt() : "";
         const mandatoryWorkspacePrompt = buildRuntimeWorkspacePrompt(projectContext);
         const localFactSections = [`\n\n## Local execution facts
 - $CREW_HOME: ${workspace.dir}
@@ -41,17 +42,21 @@ export function withLocalExecutionFacts(serverPrompt, maxBytes) {
             ...(memory ? [`\n\n## Injected MEMORY.md (bounded local context)\n${memory}`] : []),
             ...(workLog ? [`\n\n## Injected work-log (bounded local context)\n${workLog}`] : []),
         ];
-        const localFacts = localFactSections.join("");
+        const serverPromptBytes = Buffer.byteLength(serverPrompt, "utf8");
+        const collaborationBytes = Buffer.byteLength(collaborationPrompt, "utf8");
+        const mandatoryBytes = Buffer.byteLength(mandatoryWorkspacePrompt, "utf8");
+        const requiredBytes = serverPromptBytes + collaborationBytes + mandatoryBytes;
+        // 必需预算与 projectContext 无关:协作段落永远参与;无协作时与旧实现逐字节等价。
+        if (collaborationPrompt !== "" && requiredBytes > maxBytes) {
+            throw new Error("collaboration_tools_prompt_budget_exceeded");
+        }
         if (mandatoryWorkspacePrompt !== "") {
-            const serverPromptBytes = Buffer.byteLength(serverPrompt, "utf8");
-            const mandatoryBytes = Buffer.byteLength(mandatoryWorkspacePrompt, "utf8");
-            const requiredBytes = serverPromptBytes + mandatoryBytes;
             if (requiredBytes > maxBytes)
                 throw new Error("project_workspace_prompt_budget_exceeded");
             const optionalFacts = takeCompletePromptSections(localFactSections, maxBytes - requiredBytes);
-            return `${serverPrompt}${optionalFacts}${mandatoryWorkspacePrompt}`;
+            return `${serverPrompt}${collaborationPrompt}${optionalFacts}${mandatoryWorkspacePrompt}`;
         }
-        const remaining = maxBytes - Buffer.byteLength(serverPrompt, "utf8");
-        return `${serverPrompt}${truncateUtf8(localFacts, remaining)}`;
+        const remaining = maxBytes - requiredBytes;
+        return `${serverPrompt}${collaborationPrompt}${truncateUtf8(localFactSections.join(""), remaining)}`;
     };
 }

package/dist/local-executor.js

@@ -31,6 +31,7 @@ import { diffMemoryPruneNotes, evaluateMemoryPrunePostcondition, inspectMemoryPr
 import { createLocalMemoryTelemetry, logLocalMemoryContextPrepareFailure, logLocalMemoryDiagnosticsFailure, } from "./local-memory-telemetry.js";
 import { CodexStartupStageParser } from "./codex-startup-stage.js";
 import { formatRuntimeStartupError } from "./runtime-startup-error.js";
+import { commitLocalMemoryResultAfterExit, initializeLocalMemoryV2ForWorkspace, isLocalMemoryV2Eligible, localMemoryResultPath as makeLocalMemoryResultPath, renderLocalMemoryResultInstructions, } from "./local-memory/runtime.js";
 function memoryPruneFileFactFields(fileFacts) {
     const fields = {};
     for (const [label, fact] of Object.entries(fileFacts)) {
@@ -77,6 +78,7 @@ const RUNTIME_RUNNING_CALLBACK_TIMEOUT_MS = 30_000;
 const MEMORY_PRUNE_DIAGNOSTICS_TIMEOUT_MS = 2_000;
 const LOCAL_MEMORY_DIAGNOSTICS_TIMEOUT_MS = 250;
 const CLAUDE_INSTRUCTION_WARNING = "claude_additional_directory_instructions_unverified";
+const CODEX_COLLABORATION_EXEC_WARNING = "codex_collaboration_disabled_on_exec";
 const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
 const RESERVED_ENV = new Set([
     "PATH",
@@ -277,6 +279,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         }, "workspace_prepare", error);
         throw error;
     }
+    const localMemoryV2Initialized = await initializeLocalMemoryV2ForWorkspace(workspace, input.localMemoryV2Enabled === true);
     let materialized = null;
     let knownAttachmentDirectory = null;
     const startupReservationState = { current: null };
@@ -286,6 +289,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
     let memoryPruneFailurePhase = "diagnostics_before";
     let memoryPruneBeforeSnapshot = null;
     let memoryPruneSharedWriteKey = null;
+    let localMemoryResultPath = null;
     let executionWorkspace = workspace;
     let localMemoryTelemetry = null;
     const inheritedEnv = { ...process.env };
@@ -371,7 +375,6 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             nearBudget,
             ...(input.projectContext === undefined ? {} : { projectContext: input.projectContext }),
         };
-        const systemPrompt = resolvePrompt(input.systemPrompt, promptContext);
         if (input.attachments && input.attachments.length > 0) {
             if (dependencies.cancellation?.isRequested())
                 throw new RuntimeCancelledError();
@@ -405,6 +408,29 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         const attachmentPlan = routeRuntimeAttachments(runtime.name, materialized?.attachments ?? []);
         const wakePrompt = `${resolvePrompt(input.wakePrompt, promptContext)}${attachmentPlan.promptSuffix}`;
         memoryPruneTraceId = parseMemoryPruneTraceId(wakePrompt);
+        if (input.localMemoryV2Enabled === true && memoryPruneTraceId !== null
+            && isLocalMemoryV2Eligible({
+                enabledForHandle: true,
+                agentHomePreexisted: workspace.agentHomePreexisted === true,
+                memorySeedCreated: executionWorkspace.memorySeedCreated === true && (localMemoryV2Initialized || workspace.localMemoryV2Initialized !== false),
+                localMemoryV2Initialized,
+                memoryPrune: true,
+            })) {
+            localMemoryResultPath = makeLocalMemoryResultPath(executionWorkspace.runDir, input.executionId);
+        }
+        const baseSystemPrompt = resolvePrompt(input.systemPrompt, promptContext);
+        const structuredMemoryInstructions = localMemoryResultPath === null
+            ? null
+            : renderLocalMemoryResultInstructions(localMemoryResultPath);
+        const structuredPromptFits = structuredMemoryInstructions === null
+            || input.maxSystemPromptBytes === undefined
+            || Buffer.byteLength(baseSystemPrompt, "utf8") + Buffer.byteLength(structuredMemoryInstructions, "utf8")
+                <= input.maxSystemPromptBytes;
+        if (!structuredPromptFits)
+            localMemoryResultPath = null;
+        const systemPrompt = localMemoryResultPath === null
+            ? baseSystemPrompt
+            : `${baseSystemPrompt}${structuredMemoryInstructions ?? ""}`;
         try {
             localMemoryTelemetry = createLocalMemoryTelemetry({
                 executionId: input.executionId,
@@ -513,7 +539,13 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             ability_release_id: input.abilityRelease?.releaseId,
             ability_root_commit: input.abilityRelease?.rootCommit,
         });
-        const launchRuntime = dependencies.launchRuntime ?? launchLegacyRuntime;
+        const warn = dependencies.warnRuntime ?? warnRuntimeLocally;
+        const launchRuntime = dependencies.launchRuntime ?? (async (launchReq) => {
+            if (launchReq.runtime === "codex" && launchReq.codexCollaborationTools === true) {
+                warn(CODEX_COLLABORATION_EXEC_WARNING);
+            }
+            return launchLegacyRuntime(launchReq);
+        });
         if (dependencies.cancellation?.isRequested())
             throw new RuntimeCancelledError();
         let activeProjectSkillRuntimeRoot;
@@ -582,7 +614,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
                 }
                 else {
                     runtimeEnv = withoutClaudeInstructionFlag(childEnv);
-                    (dependencies.warnRuntime ?? warnRuntimeLocally)(CLAUDE_INSTRUCTION_WARNING);
+                    warn(CLAUDE_INSTRUCTION_WARNING);
                     callbacks.onConsole?.({
                         stream: "system",
                         text: `[runtime-warning] ${CLAUDE_INSTRUCTION_WARNING}`,
@@ -606,6 +638,9 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
                 ...(launchReasoning === undefined ? {} : { reasoning: launchReasoning }),
                 ...(launchSessionId === null ? {} : { sessionId: launchSessionId }),
                 resume: resuming,
+                ...(runtime.codexCollaborationTools === undefined
+                    ? {}
+                    : { codexCollaborationTools: runtime.codexCollaborationTools }),
                 ...(attachmentPlan.nativeImagePaths.length > 0
                     ? { imagePaths: attachmentPlan.nativeImagePaths }
                     : {}),
@@ -892,6 +927,24 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         const { exitCode, spawnError, terminationSignal } = runtimeExit;
         localMemoryTelemetry?.markRuntimeExited(exitCode);
         memoryPruneRuntimeExitCode = exitCode;
+        if (localMemoryResultPath !== null) {
+            const committed = await commitLocalMemoryResultAfterExit({
+                resultPath: localMemoryResultPath,
+                agentDir: executionWorkspace.dir,
+                executionId: input.executionId,
+                pruneTraceId: memoryPruneTraceId,
+                exitCode,
+            });
+            if (committed.status === "failed") {
+                dslog("local_memory.commit_failed", "结构化本地记忆候选未落地，保留结果文件", {
+                    level: "WARN",
+                    execution_id: input.executionId,
+                    agent_handle: input.handle,
+                    error_code: committed.error,
+                    result_path: localMemoryResultPath,
+                });
+            }
+        }
         const errorTail = [
             stderrTail.trim(),
             spawnError === undefined