@nowcrew/daemon 0.6.77-beta.1 → 0.6.77-beta.3

package/dist/attachment-limits.js

@@ -0,0 +1,4 @@
+export const ATTACHMENT_MAX_FILE_BYTES = 300 * 1024 * 1024;
+export const ATTACHMENT_MAX_TOTAL_BYTES = ATTACHMENT_MAX_FILE_BYTES;
+export const ATTACHMENT_DOWNLOAD_TIMEOUT_MS = 10 * 60_000;
+export const ATTACHMENT_NATIVE_IMAGE_MAX_BYTES = 25 * 1024 * 1024;

package/dist/attachments.js

@@ -1,7 +1,6 @@
-import { mkdir, rm, writeFile } from "node:fs/promises";
+import { mkdir, open, rm } from "node:fs/promises";
 import { basename, extname, resolve, sep } from "node:path";
-export const ATTACHMENT_MAX_FILE_BYTES = 25 * 1024 * 1024;
-export const ATTACHMENT_MAX_TOTAL_BYTES = 50 * 1024 * 1024;
+import { ATTACHMENT_DOWNLOAD_TIMEOUT_MS, ATTACHMENT_MAX_FILE_BYTES, ATTACHMENT_MAX_TOTAL_BYTES, } from "./attachment-limits.js";
 const throwIfAborted = (signal) => {
     if (signal?.aborted)
         throw signal.reason ?? new Error("Attachment materialization aborted");
@@ -46,7 +45,7 @@ function checkedRedirect(value, base) {
     }
     return url;
 }
-async function readBounded(response, maxBytes) {
+async function writeBounded(response, path, maxBytes, signal) {
     const declared = Number(response.headers.get("content-length") ?? "");
     if (Number.isFinite(declared) && declared > maxBytes) {
         throw new Error(`Attachment exceeds the ${maxBytes} byte limit`);
@@ -54,21 +53,33 @@ async function readBounded(response, maxBytes) {
     if (!response.body)
         throw new Error("Attachment response body is empty");
     const reader = response.body.getReader();
-    const chunks = [];
     let size = 0;
-    while (true) {
-        const part = await reader.read();
-        if (part.done)
-            break;
-        const chunk = Buffer.from(part.value);
-        size += chunk.length;
-        if (size > maxBytes) {
-            await reader.cancel();
-            throw new Error(`Attachment exceeds the ${maxBytes} byte limit`);
+    try {
+        const file = await open(path, "wx", 0o600);
+        try {
+            while (true) {
+                throwIfAborted(signal);
+                const part = await reader.read();
+                if (part.done)
+                    break;
+                const chunk = Buffer.from(part.value);
+                size += chunk.length;
+                if (size > maxBytes) {
+                    throw new Error(`Attachment exceeds the ${maxBytes} byte limit`);
+                }
+                await file.writeFile(chunk);
+            }
+            throwIfAborted(signal);
+            return size;
+        }
+        finally {
+            await file.close();
         }
-        chunks.push(chunk);
     }
-    return Buffer.concat(chunks, size);
+    catch (error) {
+        await reader.cancel().catch(() => { });
+        throw error;
+    }
 }
 async function downloadAttachment(input) {
     const initial = new URL(`/agent/attachments/${encodeURIComponent(input.attachment.id)}/download`, input.serverUrl);
@@ -104,12 +115,11 @@ async function downloadAttachment(input) {
         }
         if (!response.ok)
             throw new Error(`Attachment download failed with status ${response.status}`);
-        const data = await readBounded(response, input.maxFileBytes);
+        const size = await writeBounded(response, input.path, input.maxFileBytes, input.signal);
         throwIfAborted(input.signal);
-        if (data.length !== input.attachment.sizeBytes) {
-            throw new Error(`Attachment size mismatch: expected ${input.attachment.sizeBytes}, received ${data.length}`);
+        if (size !== input.attachment.sizeBytes) {
+            throw new Error(`Attachment size mismatch: expected ${input.attachment.sizeBytes}, received ${size}`);
         }
-        return data;
     }
     catch (error) {
         if (input.signal?.aborted) {
@@ -161,22 +171,18 @@ export async function materializeAttachments(input) {
             }
             used.add(filename.toLowerCase());
             const path = containedPath(directory, filename);
-            const data = await downloadAttachment({
+            await downloadAttachment({
                 serverUrl: input.serverUrl,
                 token: input.token,
                 attachment,
                 fetchImpl: input.fetchImpl ?? fetch,
                 maxFileBytes,
                 maxRedirects: input.maxRedirects ?? 3,
-                timeoutMs: input.timeoutMs ?? 10_000,
+                timeoutMs: input.timeoutMs ?? ATTACHMENT_DOWNLOAD_TIMEOUT_MS,
+                path,
                 ...(input.signal === undefined ? {} : { signal: input.signal }),
             });
             throwIfAborted(input.signal);
-            await writeFile(path, data, {
-                flag: "wx",
-                mode: 0o600,
-                ...(input.signal === undefined ? {} : { signal: input.signal }),
-            });
             materialized.push({ ...attachment, filename, path });
         }
         return { directory, attachments: materialized };

package/dist/daemon-updater.js

@@ -1,20 +1,31 @@
 import { readFile } from "node:fs/promises";
-import { resolve } from "node:path";
+import { posix, resolve, win32 } from "node:path";
 import { systemCommandRunner } from "./computer-service.js";
 import { daemonGlobalInstallation } from "./daemon-installation.js";
 import { daemonReleaseChannel, isDaemonReleaseVersion } from "./daemon-release-version.js";
 import { normalizeDaemonNpmRegistry } from "./npm-registry.js";
-function configuredRegistryArgs(allowLoopbackHttp) {
+const PUBLIC_NPM_REGISTRY = normalizeDaemonNpmRegistry();
+function configuredRegistries(betaUpdate) {
     try {
-        return process.env.CREW_NPM_REGISTRY === undefined ? [] : [
-            "--registry",
-            normalizeDaemonNpmRegistry(process.env.CREW_NPM_REGISTRY, { allowLoopbackHttp }),
-        ];
+        const configured = process.env.CREW_NPM_REGISTRY === undefined
+            ? PUBLIC_NPM_REGISTRY
+            : normalizeDaemonNpmRegistry(process.env.CREW_NPM_REGISTRY, { allowLoopbackHttp: betaUpdate });
+        return betaUpdate ? [...new Set([configured, PUBLIC_NPM_REGISTRY])] : [configured];
     }
     catch {
         return null;
     }
 }
+function npmCommand(platform, nodePath) {
+    const paths = platform === "win32" ? win32 : posix;
+    return paths.join(paths.dirname(nodePath), platform === "win32" ? "npm.cmd" : "npm");
+}
+function registryArgs(registry) {
+    return ["--registry", registry];
+}
+function isRegistryAuthFailure(stderr) {
+    return /(?:\bE401\b|\b401\b.*\bUnauthorized\b)/iu.test(stderr);
+}
 export async function prepareDaemonRestart(input) {
     const local = input.localSlots.tryAcquireExclusive();
     if (local === null)
@@ -40,10 +51,10 @@ async function readPackageVersion(packageRoot) {
     const body = JSON.parse(await readFile(resolve(packageRoot, "package.json"), "utf8"));
     return typeof body.version === "string" ? body.version : "";
 }
-async function restoreInstalledVersion(input, runner, version, registryArgs) {
+async function restoreInstalledVersion(input, runner, command, version, registryArgs) {
     if (!isDaemonReleaseVersion(version))
         return false;
-    const result = await runner((input.platform ?? process.platform) === "win32" ? "npm.cmd" : "npm", [
+    const result = await runner(command, [
         "install",
         "--global",
         "--prefix",
@@ -98,6 +109,8 @@ export async function installExactDaemonUpdate(input) {
         return { ok: false, errorCode: "ineligible" };
     }
     const runner = input.runner ?? systemCommandRunner;
+    const platform = input.platform ?? process.platform;
+    const command = npmCommand(platform, input.nodePath ?? process.execPath);
     let previousVersion = "";
     try {
         previousVersion = await (input.readInstalledVersion ?? readPackageVersion)(input.packageRoot);
@@ -111,9 +124,9 @@ export async function installExactDaemonUpdate(input) {
         await release();
         return { ok: false, errorCode: "install_failed" };
     }
-    const registryArgs = configuredRegistryArgs(daemonReleaseChannel(previousVersion) === "beta"
+    const registries = configuredRegistries(daemonReleaseChannel(previousVersion) === "beta"
         || daemonReleaseChannel(input.targetVersion) === "beta");
-    if (registryArgs === null) {
+    if (registries === null) {
         await release();
         return { ok: false, errorCode: "install_failed" };
     }
@@ -124,20 +137,33 @@ export async function installExactDaemonUpdate(input) {
         await release();
         return { ok: false, errorCode: "install_failed" };
     }
-    const result = await runner((input.platform ?? process.platform) === "win32" ? "npm.cmd" : "npm", [
-        "install",
-        "--global",
-        "--prefix",
-        input.npmPrefix,
-        "--ignore-scripts",
-        "--no-audit",
-        "--no-fund",
-        ...registryArgs,
-        `@nowcrew/daemon@${input.targetVersion}`,
-    ]).catch(() => null);
-    if (result === null || result.exitCode !== 0) {
+    let selectedRegistryArgs = [];
+    let installed = false;
+    let authFailed = false;
+    for (const registry of registries) {
+        const args = registryArgs(registry);
+        const result = await runner(command, [
+            "install",
+            "--global",
+            "--prefix",
+            input.npmPrefix,
+            "--ignore-scripts",
+            "--no-audit",
+            "--no-fund",
+            ...args,
+            `@nowcrew/daemon@${input.targetVersion}`,
+        ]).catch(() => null);
+        if (result?.exitCode === 0) {
+            selectedRegistryArgs = args;
+            installed = true;
+            break;
+        }
+        if (result !== null && isRegistryAuthFailure(result.stderr))
+            authFailed = true;
+    }
+    if (!installed) {
         await release();
-        return { ok: false, errorCode: "install_failed" };
+        return { ok: false, errorCode: authFailed ? "registry_auth_failed" : "install_failed" };
     }
     let installedVersion = "";
     try {
@@ -147,7 +173,7 @@ export async function installExactDaemonUpdate(input) {
         // Version verification is authoritative; unreadable package metadata is a mismatch.
     }
     if (installedVersion !== input.targetVersion) {
-        const restored = await restoreInstalledVersion(input, runner, previousVersion, registryArgs);
+        const restored = await restoreInstalledVersion(input, runner, command, previousVersion, selectedRegistryArgs);
         if (!restored) {
             console.error(`[daemon-update] version verification failed; restore of ${previousVersion} was unsuccessful`);
         }

package/dist/execution-protocol.js

@@ -1,4 +1,5 @@
 import { z } from "zod";
+import { ATTACHMENT_MAX_FILE_BYTES, ATTACHMENT_MAX_TOTAL_BYTES, } from "./attachment-limits.js";
 import { AbilityRepositoryUrlSchema, SafeAbilityPathSchema, WorkspaceAbilityTargetSchema, } from "./agent-ability/types.js";
 import { compareProjectSkillRefs, MAX_AGENT_PROJECT_SKILL_BINDINGS, MAX_PROJECT_ID_LENGTH, MAX_PROJECT_SKILL_NAME_LENGTH, } from "./project-skills/types.js";
 const ExecutionIdSchema = z.string().uuid();
@@ -160,8 +161,10 @@ export const ExecutionAttachmentSchema = z.object({
     id: z.string().min(1).max(200),
     filename: z.string().min(1).max(255),
     mime: z.string().min(1).max(200),
-    sizeBytes: z.number().int().nonnegative().max(25 * 1024 * 1024),
+    sizeBytes: z.number().int().nonnegative().max(ATTACHMENT_MAX_FILE_BYTES),
 }).strict();
+const ExecutionAttachmentsSchema = z.array(ExecutionAttachmentSchema).max(20).refine((attachments) => attachments.reduce((total, attachment) => total + attachment.sizeBytes, 0)
+    <= ATTACHMENT_MAX_TOTAL_BYTES, "attachment bytes exceed the execution limit");
 const ExecutionAgentSchema = z.object({
     id: z.string().min(1),
     handle: AgentHandleSchema,
@@ -214,7 +217,7 @@ export const ExecutionStartSchema = z.object({
         scheduledRunId: ExecutionIdSchema.optional(),
         externalResponseSessionId: ExecutionIdSchema.optional(),
         answerStream: z.boolean().optional(),
-        attachments: z.array(ExecutionAttachmentSchema).max(20).optional(),
+        attachments: ExecutionAttachmentsSchema.optional(),
     }).strict(),
     reporting: z.object({
         captureFinal: z.boolean(),

package/dist/machine-info.js

@@ -25,6 +25,7 @@ export { executableRuntimes } from "./runtime-capabilities.js";
 const execFileP = promisify(execFile);
 export const PROJECT_WORKSPACES_CAPABILITY = "project_workspaces_v1";
 export const TRAINING_PROJECT_DEPENDENCIES_CAPABILITY = "training_project_dependencies_v1";
+export const EXECUTION_LARGE_ATTACHMENTS_CAPABILITY = "execution_attachments_300m_v1";
 export const NATIVE_PROJECT_WORKSPACE_READINESS = Object.freeze({
     resolverReady: true,
     nativeRuntimeAdaptersReady: true,
@@ -36,6 +37,7 @@ export const DAEMON_CAPABILITIES = Object.freeze([
     "execution_telemetry_ack_v1",
     "execution_external_output_v1",
     "execution_attachments_v1",
+    EXECUTION_LARGE_ATTACHMENTS_CAPABILITY,
     "execution_answer_stream_v1",
     "execution_machine_queue_v1",
     "execution_agent_memory_policy_v1",

package/dist/runtime-capabilities.js

@@ -1,3 +1,4 @@
+import { ATTACHMENT_NATIVE_IMAGE_MAX_BYTES } from "./attachment-limits.js";
 export const LOCAL_EXECUTION_RUNTIMES = [
     "claude", "codex", "kimi", "hermes", "opencode", "deepseek-harness",
 ];
@@ -46,7 +47,8 @@ export function routeRuntimeAttachments(runtime, attachments) {
     const lines = attachments.map((attachment) => `- ${JSON.stringify(attachment.path)} (${attachment.mime}, ${attachment.sizeBytes} bytes)`);
     return {
         nativeImagePaths: runtime === "codex"
-            ? attachments.filter((attachment) => attachment.mime.startsWith("image/"))
+            ? attachments.filter((attachment) => attachment.mime.startsWith("image/")
+                && attachment.sizeBytes <= ATTACHMENT_NATIVE_IMAGE_MAX_BYTES)
                 .map((attachment) => attachment.path)
             : [],
         promptSuffix: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nowcrew/daemon",
-  "version": "0.6.77-beta.1",
+  "version": "0.6.77-beta.3",
   "type": "module",
   "description": "crew daemon — 运行在用户机器:拉起/管理 agent 进程,注入 crew CLI,归一化 runtime 事件",
   "license": "Apache-2.0",