@nowcrew/daemon 0.6.67 → 0.6.68

package/dist/local-executor.js

@@ -1,6 +1,7 @@
 import { createInterface } from "node:readline";
 import { readFile, rm, writeFile } from "node:fs/promises";
 import { delimiter, join } from "node:path";
+import { cleanupSelfTrainingRunDir } from "./self-training-workspace.js";
 import { prepareWorkspace, rotateAgentSession, safeKey, } from "./workspace.js";
 import { CLAUDE_ADDITIONAL_DIRECTORY_INSTRUCTIONS_ENV, isClaudeAdditionalDirectoryInstructionsSupported, probeClaudeVersion, spawnClaude, } from "./runtimes/claude.js";
 import { spawnCodex } from "./runtimes/codex.js";
@@ -8,7 +9,7 @@ import { DEEPSEEK_CODEX_MODEL, DEEPSEEK_CODEX_REASONING_LEVELS, materializeDeepS
 import { materializeDefaultCodexHome } from "./runtimes/codex-home.js";
 import { materializePrivateCodexHome } from "./codex-home-launch.js";
 import { spawnKimi, KIMI_EFFORT_LEVELS } from "./runtimes/kimi.js";
-import { applyDeepSeekHarnessMachineEnv, applyProviderEnv, providerFingerprint, } from "./provider-env.js";
+import { applyDeepSeekHarnessMachineEnv, applyProviderEnv, providerFingerprint, sanitizeEnvVars, } from "./provider-env.js";
 import { augmentedPath } from "./runtime-path.js";
 import { extractFinalText, extractRunMeta, normalizeEvent, parseLine, } from "./normalize.js";
 import { readSession, writeSession, pickResumeId, isNearBudget } from "./session.js";
@@ -31,7 +32,6 @@ import { diffMemoryPruneNotes, evaluateMemoryPrunePostcondition, inspectMemoryPr
 import { createLocalMemoryTelemetry, logLocalMemoryContextPrepareFailure, logLocalMemoryDiagnosticsFailure, } from "./local-memory-telemetry.js";
 import { CodexStartupStageParser } from "./codex-startup-stage.js";
 import { formatRuntimeStartupError } from "./runtime-startup-error.js";
-import { commitLocalMemoryResultAfterExit, initializeLocalMemoryV2ForWorkspace, isLocalMemoryV2Eligible, localMemoryResultPath as makeLocalMemoryResultPath, renderLocalMemoryResultInstructions, } from "./local-memory/runtime.js";
 function memoryPruneFileFactFields(fileFacts) {
     const fields = {};
     for (const [label, fact] of Object.entries(fileFacts)) {
@@ -78,7 +78,6 @@ const RUNTIME_RUNNING_CALLBACK_TIMEOUT_MS = 30_000;
 const MEMORY_PRUNE_DIAGNOSTICS_TIMEOUT_MS = 2_000;
 const LOCAL_MEMORY_DIAGNOSTICS_TIMEOUT_MS = 250;
 const CLAUDE_INSTRUCTION_WARNING = "claude_additional_directory_instructions_unverified";
-const CODEX_COLLABORATION_EXEC_WARNING = "codex_collaboration_disabled_on_exec";
 const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
 const RESERVED_ENV = new Set([
     "PATH",
@@ -98,14 +97,6 @@ function withoutClaudeInstructionFlag(env) {
 const warnRuntimeLocally = (code) => {
     process.stderr.write(`[runtime-warning] ${code}\n`);
 };
-export function sanitizeEnvVars(raw) {
-    if (!raw)
-        return {};
-    return Object.fromEntries(Object.entries(raw).filter(([key, value]) => typeof value === "string"
-        && ENV_KEY_RE.test(key)
-        && !key.toUpperCase().startsWith("CREW_")
-        && !RESERVED_ENV.has(key.toUpperCase())));
-}
 export function awaitExit(child) {
     return new Promise((resolve) => {
         let settled = false;
@@ -156,6 +147,7 @@ async function launchLegacyRuntime(request) {
         effectivePermission: request.effectivePermission,
         ...(request.model === undefined ? {} : { model: request.model }),
         ...(request.reasoning === undefined ? {} : { reasoning: request.reasoning }),
+        ...(request.networkAccess === undefined ? {} : { networkAccess: request.networkAccess }),
     };
     if (request.runtime === "claude") {
         const additionalDirectories = request.claudeAdditionalDirectories
@@ -245,6 +237,7 @@ export async function executeLocal(input, callbacks = {}, dependencies = {}) {
 async function executeLocalUnlocked(input, callbacks, dependencies) {
     const providerConfig = input.launch.providerConfig ?? {};
     const { runtime } = input;
+    const isolatedMaintenance = input.maintenancePurpose === "self_training";
     const isDeepSeekCodex = runtime.name === "codex" && providerConfig.provider === "deepseek";
     const currentModel = isDeepSeekCodex ? DEEPSEEK_CODEX_MODEL : runtime.model ?? null;
     const launchModel = isDeepSeekCodex ? DEEPSEEK_CODEX_MODEL : runtime.model;
@@ -269,6 +262,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
                 ? {}
                 : { sessionContextFingerprint: input.sessionContextFingerprint }),
             ...(input.launch.description ? { description: input.launch.description } : {}),
+            ...(isolatedMaintenance ? { skipLocalMemory: true } : {}),
         }), dependencies.cancellation);
     }
     catch (error) {
@@ -279,7 +273,6 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         }, "workspace_prepare", error);
         throw error;
     }
-    const localMemoryV2Initialized = await initializeLocalMemoryV2ForWorkspace(workspace, input.localMemoryV2Enabled === true);
     let materialized = null;
     let knownAttachmentDirectory = null;
     const startupReservationState = { current: null };
@@ -289,7 +282,6 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
     let memoryPruneFailurePhase = "diagnostics_before";
     let memoryPruneBeforeSnapshot = null;
     let memoryPruneSharedWriteKey = null;
-    let localMemoryResultPath = null;
     let executionWorkspace = workspace;
     let localMemoryTelemetry = null;
     const inheritedEnv = { ...process.env };
@@ -299,12 +291,23 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
     }
     const sourceCodexHome = inheritedEnv.CODEX_HOME
         ?? (inheritedEnv.HOME === undefined ? undefined : join(inheritedEnv.HOME, ".codex"));
+    let materializedDeepSeekHome;
     try {
         if (isDeepSeekCodex && !providerConfig.providerApiKey) {
             throw new Error("DeepSeek API key is not configured for this Agent");
         }
         if (isDeepSeekCodex) {
-            await awaitWithCancellation((dependencies.materializeDeepSeekCodexHome ?? materializeDeepSeekCodexHome)(workspace.homeDir), dependencies.cancellation);
+            const providerBaseUrl = providerConfig.providerBaseUrl
+                ? new URL(providerConfig.providerBaseUrl, input.launch.serverUrl).toString()
+                : undefined;
+            const materialize = dependencies.materializeDeepSeekCodexHome ?? materializeDeepSeekCodexHome;
+            const materializeOptions = {
+                ...(providerBaseUrl === undefined ? {} : { baseUrl: providerBaseUrl }),
+                ...(isolatedMaintenance ? { selfTraining: true } : {}),
+            };
+            materializedDeepSeekHome = await awaitWithCancellation(providerBaseUrl === undefined && !isolatedMaintenance
+                ? materialize(workspace.homeDir)
+                : materialize(workspace.homeDir, materializeOptions), dependencies.cancellation);
         }
         const supportsNativeResume = runtime.name === "claude"
             || (dependencies.launchRuntime !== undefined && runtimeCapability(runtime.name).nativeResume);
@@ -375,6 +378,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             nearBudget,
             ...(input.projectContext === undefined ? {} : { projectContext: input.projectContext }),
         };
+        const systemPrompt = resolvePrompt(input.systemPrompt, promptContext);
         if (input.attachments && input.attachments.length > 0) {
             if (dependencies.cancellation?.isRequested())
                 throw new RuntimeCancelledError();
@@ -408,52 +412,30 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         const attachmentPlan = routeRuntimeAttachments(runtime.name, materialized?.attachments ?? []);
         const wakePrompt = `${resolvePrompt(input.wakePrompt, promptContext)}${attachmentPlan.promptSuffix}`;
         memoryPruneTraceId = parseMemoryPruneTraceId(wakePrompt);
-        if (input.localMemoryV2Enabled === true && memoryPruneTraceId !== null
-            && isLocalMemoryV2Eligible({
-                enabledForHandle: true,
-                agentHomePreexisted: workspace.agentHomePreexisted === true,
-                memorySeedCreated: executionWorkspace.memorySeedCreated === true && (localMemoryV2Initialized || workspace.localMemoryV2Initialized !== false),
-                localMemoryV2Initialized,
-                memoryPrune: true,
-            })) {
-            localMemoryResultPath = makeLocalMemoryResultPath(executionWorkspace.runDir, input.executionId);
-        }
-        const baseSystemPrompt = resolvePrompt(input.systemPrompt, promptContext);
-        const structuredMemoryInstructions = localMemoryResultPath === null
-            ? null
-            : renderLocalMemoryResultInstructions(localMemoryResultPath);
-        const structuredPromptFits = structuredMemoryInstructions === null
-            || input.maxSystemPromptBytes === undefined
-            || Buffer.byteLength(baseSystemPrompt, "utf8") + Buffer.byteLength(structuredMemoryInstructions, "utf8")
-                <= input.maxSystemPromptBytes;
-        if (!structuredPromptFits)
-            localMemoryResultPath = null;
-        const systemPrompt = localMemoryResultPath === null
-            ? baseSystemPrompt
-            : `${baseSystemPrompt}${structuredMemoryInstructions ?? ""}`;
-        try {
-            localMemoryTelemetry = createLocalMemoryTelemetry({
-                executionId: input.executionId,
-                agentHandle: input.handle,
-                ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
-                runtime: runtime.name,
-                stableProtocolRuntime: dependencies.launchRuntime !== undefined,
-                agentDir: executionWorkspace.dir,
-                runDir: executionWorkspace.runDir,
-                isMemoryPrune: memoryPruneTraceId !== null,
-                diagnosticsTimeoutMs: dependencies.localMemoryDiagnosticsTimeoutMs
-                    ?? LOCAL_MEMORY_DIAGNOSTICS_TIMEOUT_MS,
-            });
-            await localMemoryTelemetry.captureBefore();
-        }
-        catch (error) {
-            localMemoryTelemetry = null;
-            logLocalMemoryDiagnosticsFailure({
-                executionId: input.executionId,
-                agentHandle: input.handle,
-                ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
-            }, "initialize", error);
-        }
+        if (!isolatedMaintenance)
+            try {
+                localMemoryTelemetry = createLocalMemoryTelemetry({
+                    executionId: input.executionId,
+                    agentHandle: input.handle,
+                    ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
+                    runtime: runtime.name,
+                    stableProtocolRuntime: dependencies.launchRuntime !== undefined,
+                    agentDir: executionWorkspace.dir,
+                    runDir: executionWorkspace.runDir,
+                    isMemoryPrune: memoryPruneTraceId !== null,
+                    diagnosticsTimeoutMs: dependencies.localMemoryDiagnosticsTimeoutMs
+                        ?? LOCAL_MEMORY_DIAGNOSTICS_TIMEOUT_MS,
+                });
+                await localMemoryTelemetry.captureBefore();
+            }
+            catch (error) {
+                localMemoryTelemetry = null;
+                logLocalMemoryDiagnosticsFailure({
+                    executionId: input.executionId,
+                    agentHandle: input.handle,
+                    ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
+                }, "initialize", error);
+            }
         if (memoryPruneTraceId !== null) {
             memoryPruneSharedWriteKey = JSON.stringify([input.launch.agentsRoot, input.handle]);
             const activePruneCount = (activeMemoryPrunes.get(memoryPruneSharedWriteKey) ?? 0) + 1;
@@ -487,6 +469,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             }
         }
         memoryPruneFailurePhase = "runtime_prepare";
+        const crewHome = isolatedMaintenance ? executionWorkspace.runDir : workspace.dir;
         const baseEnv = {
             ...inheritedEnv,
             ...sanitizeEnvVars(providerConfig.envVars),
@@ -495,10 +478,10 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             CREW_SERVER_URL: input.launch.serverUrl,
             CREW_TOKEN: input.launch.token,
             CREW_CHANNEL: input.channelId,
-            CREW_HOME: workspace.dir,
+            CREW_HOME: crewHome,
             // Expose only the training root; ability-specific workspace layout stays
             // owned by the training package rather than the NowWork daemon.
-            QA_RUNTIME_ROOT: join(workspace.dir, "training"),
+            QA_RUNTIME_ROOT: join(crewHome, "training"),
             CREW_TASK_DIR: executionWorkspace.runDir,
             CREW_TASK_LOG: executionWorkspace.workLogPath,
             ...(input.wakeMessageId ? { CREW_WAKE_MESSAGE_ID: input.wakeMessageId } : {}),
@@ -514,7 +497,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         };
         const providerEnv = applyProviderEnv(baseEnv, runtime.name, input.launch.codexHomeMode === undefined
             ? providerConfig
-            : { ...providerConfig, codexHomeMode: input.launch.codexHomeMode }, workspace.homeDir);
+            : { ...providerConfig, codexHomeMode: input.launch.codexHomeMode }, workspace.homeDir, materializedDeepSeekHome);
         const childEnv = runtime.name === "deepseek-harness"
             ? applyDeepSeekHarnessMachineEnv(providerEnv, inheritedEnv)
             : providerEnv;
@@ -525,7 +508,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             qa_runtime_root: childEnv.QA_RUNTIME_ROOT ?? null,
             qa_runtime_root_present: childEnv.QA_RUNTIME_ROOT !== undefined,
             inherited_qa_runtime_root_present: inheritedEnv.QA_RUNTIME_ROOT !== undefined,
-            training_root: join(workspace.dir, "training"),
+            training_root: join(crewHome, "training"),
             project_context_present: input.projectContext !== undefined,
             project_ids: JSON.stringify(input.projectContext === undefined
                 ? []
@@ -539,13 +522,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             ability_release_id: input.abilityRelease?.releaseId,
             ability_root_commit: input.abilityRelease?.rootCommit,
         });
-        const warn = dependencies.warnRuntime ?? warnRuntimeLocally;
-        const launchRuntime = dependencies.launchRuntime ?? (async (launchReq) => {
-            if (launchReq.runtime === "codex" && launchReq.codexCollaborationTools === true) {
-                warn(CODEX_COLLABORATION_EXEC_WARNING);
-            }
-            return launchLegacyRuntime(launchReq);
-        });
+        const launchRuntime = dependencies.launchRuntime ?? launchLegacyRuntime;
         if (dependencies.cancellation?.isRequested())
             throw new RuntimeCancelledError();
         let activeProjectSkillRuntimeRoot;
@@ -614,7 +591,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
                 }
                 else {
                     runtimeEnv = withoutClaudeInstructionFlag(childEnv);
-                    warn(CLAUDE_INSTRUCTION_WARNING);
+                    (dependencies.warnRuntime ?? warnRuntimeLocally)(CLAUDE_INSTRUCTION_WARNING);
                     callbacks.onConsole?.({
                         stream: "system",
                         text: `[runtime-warning] ${CLAUDE_INSTRUCTION_WARNING}`,
@@ -638,9 +615,6 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
                 ...(launchReasoning === undefined ? {} : { reasoning: launchReasoning }),
                 ...(launchSessionId === null ? {} : { sessionId: launchSessionId }),
                 resume: resuming,
-                ...(runtime.codexCollaborationTools === undefined
-                    ? {}
-                    : { codexCollaborationTools: runtime.codexCollaborationTools }),
                 ...(attachmentPlan.nativeImagePaths.length > 0
                     ? { imagePaths: attachmentPlan.nativeImagePaths }
                     : {}),
@@ -654,6 +628,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
                     workspaceRoots: Object.freeze(input.projectContext.secondary.map((project) => project.root)),
                     projectContext: input.projectContext,
                 }),
+                ...(isolatedMaintenance && runtime.name === "codex" ? { networkAccess: true } : {}),
             };
             return launchRequest;
         };
@@ -927,24 +902,6 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         const { exitCode, spawnError, terminationSignal } = runtimeExit;
         localMemoryTelemetry?.markRuntimeExited(exitCode);
         memoryPruneRuntimeExitCode = exitCode;
-        if (localMemoryResultPath !== null) {
-            const committed = await commitLocalMemoryResultAfterExit({
-                resultPath: localMemoryResultPath,
-                agentDir: executionWorkspace.dir,
-                executionId: input.executionId,
-                pruneTraceId: memoryPruneTraceId,
-                exitCode,
-            });
-            if (committed.status === "failed") {
-                dslog("local_memory.commit_failed", "结构化本地记忆候选未落地，保留结果文件", {
-                    level: "WARN",
-                    execution_id: input.executionId,
-                    agent_handle: input.handle,
-                    error_code: committed.error,
-                    result_path: localMemoryResultPath,
-                });
-            }
-        }
         const errorTail = [
             stderrTail.trim(),
             spawnError === undefined
@@ -1118,5 +1075,8 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             const detail = error instanceof Error ? error.message : String(error);
             process.stderr.write(`[execution] failed to remove prompt ${workspace.systemPromptPath}: ${detail}\n`);
         }
+        if (isolatedMaintenance) {
+            await cleanupSelfTrainingRunDir(join(workspace.dir, "tasks"), executionWorkspace.runDir);
+        }
     }
 }

package/dist/machine-info.js

@@ -24,6 +24,7 @@ export { executableRuntimes } from "./runtime-capabilities.js";
 const execFileP = promisify(execFile);
 export const PROJECT_WORKSPACES_CAPABILITY = "project_workspaces_v1";
 export const TRAINING_PROJECT_DEPENDENCIES_CAPABILITY = "training_project_dependencies_v1";
+export const SELF_TRAINING_EXECUTION_CAPABILITY = "self_training_execution_v1";
 export const NATIVE_PROJECT_WORKSPACE_READINESS = Object.freeze({
     resolverReady: true,
     nativeRuntimeAdaptersReady: true,
@@ -39,6 +40,7 @@ export const DAEMON_CAPABILITIES = Object.freeze([
     "execution_machine_queue_v1",
     "execution_agent_memory_policy_v1",
     "execution_agent_memory_mapping_v1",
+    SELF_TRAINING_EXECUTION_CAPABILITY,
     "project_skills_v1",
     PROJECT_WORKSPACES_CAPABILITY,
     TRAINING_PROJECT_DEPENDENCIES_CAPABILITY,
@@ -191,11 +193,10 @@ export async function collectMachineHello(agentsRoot, executionLimits, runtimePl
             profileName: dependencies.profileName,
             daemonHome: dependencies.daemonHome ?? daemonHome(),
             agentsRoot,
-            ...(dependencies.profileName.match(/^nw-(?:production|in|dev)-([a-z0-9][a-z0-9_-]{0,39})$/u)?.[1] === undefined
+            ...(dependencies.profileName.match(/^nw-(?:in|dev)-([a-z0-9][a-z0-9_-]{0,39})$/u)?.[1] === undefined
                 ? {}
-                : { localInstanceName: dependencies.profileName.match(/^nw-(?:production|in|dev)-([a-z0-9][a-z0-9_-]{0,39})$/u)[1] }),
+                : { localInstanceName: dependencies.profileName.match(/^nw-(?:in|dev)-([a-z0-9][a-z0-9_-]{0,39})$/u)[1] }),
         }),
-        ...(dependencies.storageIdentity ?? {}),
         ...(backend.supported ? {
             executionProtocol: EXECUTION_PROTOCOL,
             executionLimits: Object.freeze({

package/dist/main.js

@@ -7,7 +7,6 @@
  */
 import { parseArgs } from "node:util";
 import { homedir } from "node:os";
-import { join } from "node:path";
 import { loadConfig, ConfigError } from "./config.js";
 import { detectDaemonLang, formatDaemonText, translateDaemon } from "./i18n.js";
 import { cliVersion, daemonVersion } from "./machine-info.js";
@@ -22,18 +21,7 @@ import { formatDaemonStartupError } from "./daemon-startup-error.js";
 import { assertManagedServiceStartup } from "./managed-service-startup.js";
 import { daemonGlobalInstallation } from "./daemon-installation.js";
 import { acquireDaemonInstallationLease, runWithDaemonInstallationLease, } from "./daemon-installation-lease.js";
-import { loadStorageRuntime } from "./storage-runtime.js";
-import { readStorageMigrationReceipt } from "./storage-migration-controller.js";
-import { storageMigrationStatusReplay } from "./storage-status-replay.js";
-import { runStorageWorkerCommand } from "./storage-worker-command.js";
-import { probeStorageMigrationRuntime } from "./storage-runtime-readiness.js";
-import { createStorageTargetConfirmationHandler } from "./storage-target-confirmation.js";
 async function main() {
-    const workerResult = await runStorageWorkerCommand(process.argv.slice(2));
-    if (workerResult !== null) {
-        process.exitCode = workerResult;
-        return;
-    }
     const computerResult = await runComputerCommand(process.argv.slice(2));
     if (computerResult !== null) {
         process.exitCode = computerResult;
@@ -69,10 +57,8 @@ async function main() {
     // 不把 machine token 放进 argv / plist / systemd unit / scheduled task。
     if (values["daemon-home"])
         process.env.CREW_DAEMON_HOME = values["daemon-home"];
-    let activeDaemonHome;
     if (values.profile) {
         const home = daemonHome();
-        activeDaemonHome = home;
         const profile = await loadProfile(values.profile, home);
         if (cmd === "serve") {
             await assertProfileAgentsRootUnique(profile, home, homedir());
@@ -85,12 +71,6 @@ async function main() {
                 agentsRoot: resolveAgentsRoot(profile.agentsRoot, homedir(), process.platform),
                 nodePath: process.execPath,
                 entryPath: builtDaemonEntry(),
-                environment: {
-                    ...(process.env.NOWWORK_HOME === undefined ? {} : { NOWWORK_HOME: process.env.NOWWORK_HOME }),
-                    ...(process.env.NOWWORK_ENV_TAG === undefined ? {} : { NOWWORK_ENV_TAG: process.env.NOWWORK_ENV_TAG }),
-                    ...(process.env.NOWWORK_STORAGE_POLICY_PATH === undefined
-                        ? {} : { NOWWORK_STORAGE_POLICY_PATH: process.env.NOWWORK_STORAGE_POLICY_PATH }),
-                },
             });
         }
         applyProfileToEnv(profile, process.env);
@@ -120,72 +100,9 @@ async function main() {
         const installationLease = installation === null
             ? null
             : await acquireDaemonInstallationLease(installation.npmPrefix);
-        const storageRuntime = values.profile === undefined
-            ? null
-            : await loadStorageRuntime({
-                profile: values.profile,
-                serverUrl: config.serverUrl,
-                userHome: homedir(),
-                platform: process.platform,
-                environment: process.env,
-            });
-        const migrationRuntime = values.profile === undefined || activeDaemonHome === undefined || storageRuntime !== null
-            ? { ready: false, reason: "not_legacy_source" }
-            : await probeStorageMigrationRuntime({
-                profile: values.profile,
-                serverUrl: config.serverUrl,
-                currentDaemonHome: activeDaemonHome,
-                currentAgentsRoot: config.agentsRoot,
-                userHome: homedir(),
-                platform: process.platform,
-                ...(process.getuid === undefined ? {} : { uid: process.getuid() }),
-                environment: process.env,
-            });
-        const targetConfirmation = storageRuntime?.identity.storageMigrationId === undefined
-            ? null
-            : createStorageTargetConfirmationHandler({
-                backupsRoot: storageRuntime.local.backupsRoot,
-                identity: storageRuntime.identity,
-                profile: storageRuntime.installation.profile,
-                completionTimeoutMs: 180_000,
-            });
-        const storageMigration = storageRuntime !== null
-            ? {
-                ready: false,
-                statusOutboxPath: join(storageRuntime.local.stateRoot, "storage-status-outbox.json"),
-                identity: storageRuntime.identity,
-                ...(targetConfirmation === null ? {} : { confirm: targetConfirmation.handle }),
-                ...(storageRuntime.identity.storageMigrationId === undefined ? {} : {
-                    replayStatus: async (send) => {
-                        const migrationId = storageRuntime.identity.storageMigrationId;
-                        const receipt = await readStorageMigrationReceipt(storageRuntime.local.backupsRoot, migrationId);
-                        if (receipt === null)
-                            throw new Error(`storage migration receipt not found: ${migrationId}`);
-                        for (const frame of storageMigrationStatusReplay(receipt, {
-                            migrationId,
-                            environment: storageRuntime.identity.storageEnvironment,
-                            workspaceId: storageRuntime.identity.storageWorkspaceId,
-                            profile: storageRuntime.installation.profile,
-                        }))
-                            send(frame);
-                    },
-                }),
-            }
-            : migrationRuntime.ready
-                ? {
-                    ready: true,
-                    statusOutboxPath: migrationRuntime.runtime.statusOutboxPath,
-                    identity: migrationRuntime.runtime.identity,
-                    controller: migrationRuntime.runtime.controller,
-                    attach: migrationRuntime.runtime.attach,
-                    bindServerIdentity: migrationRuntime.runtime.bindServerIdentity,
-                    replayStatus: migrationRuntime.runtime.replayStatus,
-                }
-                : undefined;
         await runWithDaemonInstallationLease(installationLease, async () => {
             const service = serve(config, {
                 ...(values.profile === undefined ? {} : { profileName: values.profile }),
-                ...(storageMigration === undefined ? {} : { storageMigration }),
             });
             await runServeLifecycle(service);
         });

package/dist/managed-service-lifecycle.js

@@ -1,6 +1,6 @@
 import { randomUUID } from "node:crypto";
 import { acquireDaemonInstallationLease } from "./daemon-installation-lease.js";
-import { installService, ensureServiceEnabled, readServiceDescriptor, serviceAction, replaceInstalledServiceDescriptor, uninstallService, } from "./computer-service.js";
+import { installService, ensureServiceEnabled, readServiceDescriptor, serviceAction, uninstallService, } from "./computer-service.js";
 import { ManagedServiceConflictError, ManagedServiceRegistryError, assertRegistryCoversDescriptors, listManagedServiceDescriptorPaths, managedServiceIdentityMatches, managedServiceConflict, normalizeManagedServiceRecord, serviceDescriptorSha256, withManagedServiceRegistryLock, } from "./managed-service-registry.js";
 function requirePortableManagedSpec(spec) {
     if ((spec.platform !== "darwin" && spec.platform !== "linux")
@@ -35,17 +35,6 @@ function sameManagedIdentity(left, right) {
     const { generation: _generation, createdAt: _createdAt, ...expected } = right;
     return managedServiceIdentityMatches(left, expected);
 }
-function sameManagedResource(left, right) {
-    const { generation: _leftGeneration, createdAt: _leftCreatedAt, descriptorSha256: _leftHash, ...leftResource } = left;
-    const { generation: _rightGeneration, createdAt: _rightCreatedAt, descriptorSha256: _rightHash, ...rightResource } = right;
-    return JSON.stringify(leftResource) === JSON.stringify(rightResource);
-}
-function descriptorDiffIsStorageEnvironmentOnly(previous, next) {
-    if (!next.includes("\n  <key>EnvironmentVariables</key>\n"))
-        return false;
-    const strip = (descriptor) => descriptor.replace(/\n  <key>EnvironmentVariables<\/key>\n  <dict>\n(?:    <key>(?:NOWWORK_HOME|NOWWORK_ENV_TAG|NOWWORK_STORAGE_POLICY_PATH)<\/key><string>[^<]*<\/string>\n)+  <\/dict>\n/u, "\n");
-    return strip(previous) === strip(next);
-}
 function assertRecordDescribesSpec(input) {
     requirePortableManagedSpec(input.spec);
     const { spec, record } = input;
@@ -62,20 +51,8 @@ function assertRecordDescribesSpec(input) {
     }
 }
 export async function installManagedService(input) {
+    assertRecordDescribesSpec(input);
     requirePortableManagedSpec(input.spec);
-    const requestedDescriptor = input.spec.descriptor;
-    const expectedDescriptorHash = serviceDescriptorSha256(input.spec.descriptor);
-    const expectedPath = normalizeManagedServiceRecord({
-        ...input.record,
-        descriptorPath: input.spec.descriptorPath,
-        descriptorSha256: expectedDescriptorHash,
-    }).descriptorPath;
-    if (input.record.platform !== input.spec.platform
-        || input.record.serviceId !== input.spec.id
-        || input.record.profile !== input.spec.profile
-        || input.record.descriptorPath !== expectedPath) {
-        throw new ManagedServiceRegistryError(`Managed service record does not describe '${input.spec.id}'`);
-    }
     const acquire = input.acquireInstallationLease ?? acquireDaemonInstallationLease;
     await withManagedServiceRegistryLock(input.registry ?? {}, async ({ services, replace }) => {
         const exact = services.find((record) => sameManagedIdentity(record, input.record));
@@ -99,28 +76,6 @@ export async function installManagedService(input) {
             }
             return;
         }
-        const registered = services.find((record) => record.serviceId === input.record.serviceId
-            && record.profile === input.record.profile
-            && record.daemonHome === input.record.daemonHome);
-        if (registered !== undefined && sameManagedResource(registered, input.record)) {
-            const current = await readServiceDescriptor(input.spec);
-            if (current === null || serviceDescriptorSha256(current) !== registered.descriptorSha256) {
-                throw new ManagedServiceRegistryError(`Installed descriptor for '${input.spec.id}' does not match its registry record`);
-            }
-            if (!descriptorDiffIsStorageEnvironmentOnly(current, requestedDescriptor)) {
-                throw new ManagedServiceRegistryError(`Installed descriptor for '${input.spec.id}' conflicts with the requested identity`);
-            }
-            await replaceInstalledServiceDescriptor(input.spec, current, input.runner);
-            try {
-                await replace(services.map((record) => record === registered ? input.record : record));
-            }
-            catch (error) {
-                const rollbackSpec = { ...input.spec, descriptor: current };
-                await replaceInstalledServiceDescriptor(rollbackSpec, requestedDescriptor, input.runner).catch(() => undefined);
-                throw error;
-            }
-            return;
-        }
         const conflict = managedServiceConflict(services, input.record);
         if (conflict !== null) {
             throw new ManagedServiceConflictError(conflict.resource, input.record, conflict.owner);

package/dist/managed-service-startup.js

@@ -14,7 +14,6 @@ export async function assertManagedServiceStartup(input) {
         nodePath: input.nodePath,
         entryPath: input.entryPath,
         profileHome: input.daemonHome,
-        ...(input.environment === undefined ? {} : { environment: input.environment }),
     });
     const readRegistry = input.readManagedServices
         ?? (() => readManagedServiceRegistry({ userHome: input.userHome }));
@@ -43,7 +42,6 @@ export async function assertManagedServiceStartup(input) {
             nodePath: input.nodePath,
             entryPath: input.entryPath,
             profileHome: input.daemonHome,
-            ...(input.environment === undefined ? {} : { environment: input.environment }),
             legacyServiceId: true,
         });
         const legacyDescriptor = await readDescriptor(legacySpec);

package/dist/profile-layout.js

@@ -2,10 +2,6 @@ import { posix, win32 } from "node:path";
 export const PROFILE_LAYOUT_VERSION = 1;
 const PROFILE_NAME = /^[a-z0-9][a-z0-9_-]{0,47}$/u;
 const LOCAL_INSTANCE_NAME = /^[a-z0-9][a-z0-9_-]{0,39}$/u;
-/** Accept the legacy `in` tag at the boundary, but never persist it in a new layout. */
-export function normalizeProfileEnvironment(value) {
-    return value === "in" ? "production" : value;
-}
 export function validateLocalInstanceName(value) {
     const normalized = value.trim().toLowerCase();
     if (!LOCAL_INSTANCE_NAME.test(normalized) || normalized.includes("..")) {
@@ -14,21 +10,19 @@ export function validateLocalInstanceName(value) {
     return normalized;
 }
 export function profileForLocalInstance(environment, localInstanceName) {
-    const canonicalEnvironment = normalizeProfileEnvironment(environment);
-    const profile = `nw-${canonicalEnvironment}-${validateLocalInstanceName(localInstanceName)}`;
+    const profile = `nw-${environment}-${validateLocalInstanceName(localInstanceName)}`;
     if (!PROFILE_NAME.test(profile))
         throw new Error("derived daemon profile exceeds 48 characters");
     return profile;
 }
 export function profileLayout(input) {
-    const environment = normalizeProfileEnvironment(input.environment);
     const localInstanceName = validateLocalInstanceName(input.localInstanceName);
-    const profile = profileForLocalInstance(environment, localInstanceName);
+    const profile = profileForLocalInstance(input.environment, localInstanceName);
     const paths = input.platform === "win32" ? win32 : posix;
-    const base = `${environment}-${localInstanceName}`;
+    const base = `${input.environment}-${localInstanceName}`;
     return Object.freeze({
         layoutVersion: PROFILE_LAYOUT_VERSION,
-        environment,
+        environment: input.environment,
         localInstanceName,
         profile,
         daemonHome: paths.join(input.userHome, ".crew", `daemon-${base}`),

package/dist/project-skills/controller.js

@@ -183,8 +183,6 @@ export function createProjectSkillsController(deps) {
             const parsed = ProjectCommandSchema.safeParse(input);
             if (!parsed.success)
                 return { ok: false, error: "invalid_project_command" };
-            if (deps.isAdmissionClosed?.() === true)
-                return { ok: false, error: "storage_migration_quiescing" };
             try {
                 assertCurrentEpoch(epochToken);
             }

package/dist/prompt.js

@@ -305,7 +305,7 @@ ${memoryTaskReadRule}
 - **跨任务协调看实时清单**:用 \`crew task list --mine\` 查你当前所有任务及其状态(谁在排队、谁在评审)。例:你一次只能测一个页面时,据此判断"正在测 #1、#2 排队",在 #2 的工作日志里标注"等 #1 完成"。
 - 需要更多背景时再 \`Read $CREW_HOME/notes/<topic>.md\`;不要一次把所有笔记读进上下文。
 
-${communicationSection}${ctx.collaborationToolsEnabled === true ? buildCollaborationToolsPrompt() : ""}
+${communicationSection}
 
 CLI 成功时打印人类可读文本到 stdout;失败时 stderr 给出错误,并用**退出码**告诉你下一步:
 - \`4\` = 任务已被他人认领 / 不可认领 → 停手,别抢,转做别的。
@@ -385,21 +385,3 @@ export function buildOriginDecisionRetryPrompt(channelId, threadId) {
         "普通内部消息不算外部回复决策；--send-draft 也不是外部回复开关。",
     ].join("\n");
 }
-/**
- * Codex 原生 collaboration.* 工具的用法与边界(spec 2d;2026-08-28 对 Codex 0.149.1/0.150.1 实测)。
- * 只在 daemon 开关打开且 runtime 为 codex 时注入;是本机 runtime 能力事实,不是产品策略。
- * 契约来自实测,不编造 Codex 未声明的返回字段。
- */
-export function buildCollaborationToolsPrompt() {
-    return `
-
-## Codex 原生协作工具
-本机 Codex 已开启 \`collaboration.*\` 子 agent 工具。它们完全在 Codex 进程内运行:子 agent 的工作对 NowWork 的频道、线程、任务、execution 记录和按 agent 的 token 统计**都不可见**,token 并入你本轮的用量。只用于你自己会汇总的内部交叉核对、并行调研;绝不用于人类或其它 NowWork 成员需要观察、审计或接手的事。
-- **\`collaboration.spawn_agent\`** —— 必填 \`task_name\`(仅小写字母/数字/下划线)、\`message\`;可选 \`fork_turns\`(\`"none"\`|\`"all"\`|\`"3"\` 这样的轮数,默认 \`"all"\`)、\`model\`、\`reasoning_effort\`。立即启动独立 turn,你不阻塞;子 agent 跑完后 idle 而非销毁。新 agent 用 **canonical 任务名路径**引用,如 \`/root/api_review\`。含 root 最多 4 个活跃 agent。
-- **\`collaboration.followup_task\`** —— 必填 \`target\`(canonical 路径,不是 UUID)、\`message\`。异步投递并把 idle 的目标唤醒进新 turn,可重复。
-- **\`collaboration.send_message\`** —— 必填 \`target\`、\`message\`。只入队,**不**启动 turn;要触发工作用 followup_task。
-- **\`collaboration.list_agents\`** —— 可选 \`path_prefix\`。只读,列出 live agents。
-- **\`collaboration.wait_agent\`** —— 可选 \`timeout_ms\`(10000–3600000,默认 30000)。阻塞你直到任一子 agent 有更新、有新输入或超时。
-- **没有任何返回值有保证的 schema**:不要去解析返回值里的 \`agent_id\`/\`id\`/\`accepted\` 之类字段;用 \`list_agents\` 和 \`wait_agent\` 获取状态。
-- **不要调用 \`collaboration.interrupt_agent\`**:它会把你自己这轮 turn 一起中断(2026-08-10 线上事故),中断后本轮结果全部丢失且不会重跑。让子 agent 自然跑完或直接忽略其结果。`;
-}