@nowcrew/daemon 0.6.79-beta.1 → 0.6.79

package/dist/agent-ability/resolver.js

@@ -10,8 +10,8 @@ import { PROJECT_MANIFEST_SOURCE_PATH, ProjectDependencyManifestSchema, } from "
 import { normalizeRepositoryIdentity } from "../repository-identity.js";
 const runFile = promisify(execFile);
 const MAX_FILES = 5_000;
-const MAX_TOTAL_BYTES = 25 * 1024 * 1024;
-const MAX_FILE_BYTES = 2 * 1024 * 1024;
+export const AGENT_ABILITY_MAX_TOTAL_BYTES = 200 * 1024 * 1024;
+export const AGENT_ABILITY_MAX_FILE_BYTES = 100 * 1024 * 1024;
 const MAX_INSTRUCTIONS_BYTES = 96 * 1024;
 const MAX_MEMORY_BYTES = 64 * 1024;
 const AUTHORING_ONLY_ROOTS = new Set([".claude"]);
@@ -125,10 +125,11 @@ export const collectAbilityFiles = async (root) => {
             if (info.isDirectory())
                 await visit(absolute);
             else if (info.isFile()) {
-                if (info.size > MAX_FILE_BYTES)
+                if (info.size > AGENT_ABILITY_MAX_FILE_BYTES) {
                     throw new Error(`ability_file_size_exceeded:${relative(root, absolute)}`);
+                }
                 totalBytes += info.size;
-                if (totalBytes > MAX_TOTAL_BYTES)
+                if (totalBytes > AGENT_ABILITY_MAX_TOTAL_BYTES)
                     throw new Error("ability_total_size_exceeded");
                 if (files.length >= MAX_FILES)
                     throw new Error("ability_file_count_exceeded");
@@ -262,7 +263,7 @@ export const validateAbilityDependencyDeclarations = (manifest, lock) => {
         throw new Error("ability_lock_has_undeclared_dependency");
     }
 };
-const scan = (files, manifest) => {
+export const scanAbilityFiles = (files, manifest) => {
     const findings = [];
     const secrets = [
         /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/u,
@@ -270,7 +271,9 @@ const scan = (files, manifest) => {
         /\bAK(?:ID|IA)[A-Z0-9]{12,}\b/u,
     ];
     const executable = new Set([".exe", ".dll", ".dylib", ".so", ".bin", ".class", ".jar"]);
-    const allowedBinaryDocuments = new Set([".pdf", ".png", ".jpg", ".jpeg", ".gif", ".webp", ".xlsx", ".xls", ".docx", ".pptx"]);
+    const allowedBinaryDocuments = new Set([
+        ".pdf", ".png", ".jpg", ".jpeg", ".gif", ".webp", ".xlsx", ".xls", ".docx", ".pptx", ".ttf", ".otf",
+    ]);
     for (const file of files) {
         let text;
         try {
@@ -396,7 +399,7 @@ export async function resolveAbilityRelease(agentsRoot, command) {
     }
     const externalPaths = await verifyExternalDependencies(cacheRoot, resolved.root, lock);
     files = await collectAbilityFiles(resolved.root);
-    const security = scan(files, manifest);
+    const security = scanAbilityFiles(files, manifest);
     const kinds = new Set(lock.assets.map((asset) => asset.kind));
     const memory = [];
     for (const [layer, mounts] of [["release-policy", manifest.spec.memory.policy], ["release-seed", manifest.spec.memory.seeds]]) {

package/dist/daemon-update-controller.js

@@ -4,11 +4,13 @@ const DaemonUpdateMessageSchema = z.object({
     type: z.literal("daemon:update"),
     updateId: z.string().uuid(),
     targetVersion: z.string().refine(isDaemonReleaseVersion, "invalid daemon release version"),
+    registryUrl: z.string().url().optional(),
 }).strict();
 const DaemonRestartMessageSchema = z.object({
     type: z.literal("daemon:restart"),
     updateId: z.string().uuid(),
     targetVersion: z.string().refine(isDaemonReleaseVersion, "invalid daemon release version"),
+    registryUrl: z.string().url().optional(),
 }).strict();
 const DaemonControlMessageSchema = z.union([DaemonUpdateMessageSchema, DaemonRestartMessageSchema]);
 export function createDaemonUpdateController(deps) {
@@ -24,13 +26,14 @@ export function createDaemonUpdateController(deps) {
             failed(message.updateId, "ineligible");
             return;
         }
+        const registryUrl = message.registryUrl ?? eligibility.registryUrl;
         const preparation = message.type === "daemon:restart"
             ? await deps.prepareRestart()
             : await deps.install({
                 targetVersion: message.targetVersion,
+                ...(registryUrl === undefined ? {} : { registryUrl }),
                 packageRoot: eligibility.packageRoot,
                 npmPrefix: eligibility.npmPrefix,
-                ...(eligibility.registryUrl === undefined ? {} : { registryUrl: eligibility.registryUrl }),
                 onInstalling: () => {
                     deps.sendStatus({ type: "daemon:update-status", updateId: message.updateId, status: "installing" });
                 },

package/dist/daemon-update-eligibility.js

@@ -14,7 +14,7 @@ import { assertRegistryCoversDescriptors, listManagedServiceDescriptorPaths, man
 export async function managedDaemonCapabilities(eligibility) {
     try {
         return (await eligibility()).eligible
-            ? ["daemon_update_v1", "daemon_restart_v1", "daemon_layout_migration_v1"]
+            ? ["daemon_update_v1", "daemon_restart_v1", "daemon_update_registry_v1", "daemon_layout_migration_v1"]
             : [];
     }
     catch {

package/dist/execution-protocol.js

@@ -200,6 +200,7 @@ export const ExecutionStartSchema = z.object({
         language: z.enum(["zh", "en"]),
         systemPrompt: z.string(),
         wakePrompt: z.string(),
+        maintenancePurpose: z.literal("self_training").optional(),
     }).strict(),
     runtime: z.object({
         name: RuntimeSchema,

package/dist/execution-runner.js

@@ -567,8 +567,9 @@ export async function runExecution(config, input, dependencies) {
             projectContext = await cancellable(resolveProjectContext(projectSnapshot, projectWorkspaceRegistry), dependencies.cancellation);
             sessionContextFingerprint = projectSessionContextFingerprint(spec.runtime.name, projectSnapshot);
         }
+        const selfTraining = spec.instructions.maintenancePurpose === "self_training";
         let recalledMemory = "";
-        if (spec.agent.memoryEnabled === true && dependencies.agentMemory !== undefined) {
+        if (!selfTraining && spec.agent.memoryEnabled === true && dependencies.agentMemory !== undefined) {
             try {
                 recalledMemory = await cancellable(dependencies.agentMemory.recall(spec.agent.handle, spec.instructions.wakePrompt, spec.executionId, spec.agent.memoryAgentId ?? null), dependencies.cancellation);
             }
@@ -827,7 +828,10 @@ export async function runExecution(config, input, dependencies) {
         const baseSystemPromptBudget = spec.agent.abilityRelease === undefined
             ? systemPromptBudget
             : Math.max(0, Math.min(systemPromptBudget, Math.max(32 * 1024, systemPromptBudget - 168 * 1024)));
-        const systemPromptWithLocalFacts = withLocalExecutionFacts(spec.instructions.systemPrompt, baseSystemPromptBudget, { collaborationTools: config.codexCollaborationTools && spec.runtime.name === "codex" });
+        const systemPromptWithLocalFacts = withLocalExecutionFacts(spec.instructions.systemPrompt, baseSystemPromptBudget, {
+            ...(selfTraining ? { isolateLocalMemory: true } : {}),
+            collaborationTools: config.codexCollaborationTools && spec.runtime.name === "codex",
+        });
         const boundedSystemPrompt = (context) => appendAgentMemoryContext(typeof systemPromptWithLocalFacts === "string"
             ? systemPromptWithLocalFacts
             : systemPromptWithLocalFacts(context), recalledMemory, baseSystemPromptBudget);
@@ -876,12 +880,13 @@ export async function runExecution(config, input, dependencies) {
                 } : {}),
             },
             session: {
-                enabled: config.resume,
+                enabled: selfTraining ? false : config.resume,
                 warmMs: config.resumeWarmMs,
                 budgetTokens: config.sessionBudgetTokens,
                 softTokens: config.sessionSoftTokens,
                 maxTurns: config.sessionMaxTurns,
             },
+            ...(selfTraining ? { maintenancePurpose: "self_training" } : {}),
             localMemoryV2Enabled: config.localMemoryV2Handles?.has(spec.agent.handle) === true,
         };
         const result = await Promise.race([
@@ -1048,6 +1053,7 @@ export async function runExecution(config, input, dependencies) {
     }
     await dependencies.journal.complete(spec.executionId, completion);
     if (completion.outcome === "succeeded"
+        && spec.instructions.maintenancePurpose !== "self_training"
         && spec.agent.memoryEnabled === true
         && memoryCaptureFinalText !== null
         && dependencies.agentMemory !== undefined) {

package/dist/local-execution-prompt.js

@@ -47,12 +47,13 @@ function takeCompletePromptSections(sections, maxBytes) {
 /** v1 server instructions opt in to daemon-owned paths and bounded local workspace context. */
 export function withLocalExecutionFacts(serverPrompt, maxBytes, options = {}) {
     return ({ workspace, resuming, projectContext, trainingProjectContext }) => {
-        const memory = capMemoryForInject(workspace.memory);
+        const memory = options.isolateLocalMemory ? "" : capMemoryForInject(workspace.memory);
         const workLog = resuming ? "" : capWorkLogForInject(workspace.workLog);
         const collaborationPrompt = options.collaborationTools === true ? buildCollaborationToolsPrompt() : "";
         const mandatoryWorkspacePrompt = `${buildRuntimeWorkspacePrompt(projectContext)}${buildTrainingGitProjectPrompt(trainingProjectContext)}`;
+        const crewHome = options.isolateLocalMemory ? workspace.runDir : workspace.dir;
         const localFactSections = [`\n\n## Local execution facts
-- $CREW_HOME: ${workspace.dir}
+- $CREW_HOME: ${crewHome}
 - $CREW_TASK_LOG: ${workspace.workLogPath}`,
             ...(memory ? [`\n\n## Injected MEMORY.md (bounded local context)\n${memory}`] : []),
             ...(workLog ? [`\n\n## Injected work-log (bounded local context)\n${workLog}`] : []),

package/dist/local-executor.js

@@ -1,6 +1,7 @@
 import { createInterface } from "node:readline";
 import { readFile, rm, writeFile } from "node:fs/promises";
 import { delimiter, join } from "node:path";
+import { cleanupSelfTrainingRunDir } from "./self-training-workspace.js";
 import { prepareWorkspace, rotateAgentSession, safeKey, } from "./workspace.js";
 import { CLAUDE_ADDITIONAL_DIRECTORY_INSTRUCTIONS_ENV, isClaudeAdditionalDirectoryInstructionsSupported, probeClaudeVersion, spawnClaude, } from "./runtimes/claude.js";
 import { spawnCodex } from "./runtimes/codex.js";
@@ -8,7 +9,7 @@ import { DEEPSEEK_CODEX_MODEL, DEEPSEEK_CODEX_REASONING_LEVELS, materializeDeepS
 import { materializeDefaultCodexHome } from "./runtimes/codex-home.js";
 import { materializePrivateCodexHome } from "./codex-home-launch.js";
 import { spawnKimi, KIMI_EFFORT_LEVELS } from "./runtimes/kimi.js";
-import { applyDeepSeekHarnessMachineEnv, applyProviderEnv, providerFingerprint, } from "./provider-env.js";
+import { applyDeepSeekHarnessMachineEnv, applyProviderEnv, providerFingerprint, sanitizeEnvVars, } from "./provider-env.js";
 import { augmentedPath } from "./runtime-path.js";
 import { extractFinalText, extractRunMeta, normalizeEvent, parseLine, } from "./normalize.js";
 import { readSession, writeSession, pickResumeId, isNearBudget } from "./session.js";
@@ -68,14 +69,6 @@ function withoutClaudeInstructionFlag(env) {
 const warnRuntimeLocally = (code) => {
     process.stderr.write(`[runtime-warning] ${code}\n`);
 };
-export function sanitizeEnvVars(raw) {
-    if (!raw)
-        return {};
-    return Object.fromEntries(Object.entries(raw).filter(([key, value]) => typeof value === "string"
-        && ENV_KEY_RE.test(key)
-        && !key.toUpperCase().startsWith("CREW_")
-        && !RESERVED_ENV.has(key.toUpperCase())));
-}
 export function awaitExit(child) {
     return new Promise((resolve) => {
         let settled = false;
@@ -126,6 +119,7 @@ async function launchLegacyRuntime(request) {
         effectivePermission: request.effectivePermission,
         ...(request.model === undefined ? {} : { model: request.model }),
         ...(request.reasoning === undefined ? {} : { reasoning: request.reasoning }),
+        ...(request.networkAccess === undefined ? {} : { networkAccess: request.networkAccess }),
     };
     if (request.runtime === "claude") {
         const additionalDirectories = request.claudeAdditionalDirectories
@@ -215,6 +209,7 @@ export async function executeLocal(input, callbacks = {}, dependencies = {}) {
 async function executeLocalUnlocked(input, callbacks, dependencies) {
     const providerConfig = input.launch.providerConfig ?? {};
     const { runtime } = input;
+    const isolatedMaintenance = input.maintenancePurpose === "self_training";
     const isDeepSeekCodex = runtime.name === "codex" && providerConfig.provider === "deepseek";
     const currentModel = isDeepSeekCodex ? DEEPSEEK_CODEX_MODEL : runtime.model ?? null;
     const launchModel = isDeepSeekCodex ? DEEPSEEK_CODEX_MODEL : runtime.model;
@@ -239,6 +234,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
                 ? {}
                 : { sessionContextFingerprint: input.sessionContextFingerprint }),
             ...(input.launch.description ? { description: input.launch.description } : {}),
+            ...(isolatedMaintenance ? { skipLocalMemory: true } : {}),
         }), dependencies.cancellation);
     }
     catch (error) {
@@ -269,12 +265,23 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
     }
     const sourceCodexHome = inheritedEnv.CODEX_HOME
         ?? (inheritedEnv.HOME === undefined ? undefined : join(inheritedEnv.HOME, ".codex"));
+    let materializedDeepSeekHome;
     try {
         if (isDeepSeekCodex && !providerConfig.providerApiKey) {
             throw new Error("DeepSeek API key is not configured for this Agent");
         }
         if (isDeepSeekCodex) {
-            await awaitWithCancellation((dependencies.materializeDeepSeekCodexHome ?? materializeDeepSeekCodexHome)(workspace.homeDir), dependencies.cancellation);
+            const providerBaseUrl = providerConfig.providerBaseUrl
+                ? new URL(providerConfig.providerBaseUrl, input.launch.serverUrl).toString()
+                : undefined;
+            const materialize = dependencies.materializeDeepSeekCodexHome ?? materializeDeepSeekCodexHome;
+            const materializeOptions = {
+                ...(providerBaseUrl === undefined ? {} : { baseUrl: providerBaseUrl }),
+                ...(isolatedMaintenance ? { selfTraining: true } : {}),
+            };
+            materializedDeepSeekHome = await awaitWithCancellation(providerBaseUrl === undefined && !isolatedMaintenance
+                ? materialize(workspace.homeDir)
+                : materialize(workspace.homeDir, materializeOptions), dependencies.cancellation);
         }
         const supportsNativeResume = runtime.name === "claude"
             || (dependencies.launchRuntime !== undefined && runtimeCapability(runtime.name).nativeResume);
@@ -402,29 +409,30 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         const systemPrompt = localMemoryResultPath === null
             ? baseSystemPrompt
             : `${baseSystemPrompt}${structuredMemoryInstructions ?? ""}`;
-        try {
-            localMemoryTelemetry = createLocalMemoryTelemetry({
-                executionId: input.executionId,
-                agentHandle: input.handle,
-                ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
-                runtime: runtime.name,
-                stableProtocolRuntime: dependencies.launchRuntime !== undefined,
-                agentDir: executionWorkspace.dir,
-                runDir: executionWorkspace.runDir,
-                isMemoryPrune: memoryPruneTraceId !== null,
-                diagnosticsTimeoutMs: dependencies.localMemoryDiagnosticsTimeoutMs
-                    ?? LOCAL_MEMORY_DIAGNOSTICS_TIMEOUT_MS,
-            });
-            await localMemoryTelemetry.captureBefore();
-        }
-        catch (error) {
-            localMemoryTelemetry = null;
-            logLocalMemoryDiagnosticsFailure({
-                executionId: input.executionId,
-                agentHandle: input.handle,
-                ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
-            }, "initialize", error);
-        }
+        if (!isolatedMaintenance)
+            try {
+                localMemoryTelemetry = createLocalMemoryTelemetry({
+                    executionId: input.executionId,
+                    agentHandle: input.handle,
+                    ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
+                    runtime: runtime.name,
+                    stableProtocolRuntime: dependencies.launchRuntime !== undefined,
+                    agentDir: executionWorkspace.dir,
+                    runDir: executionWorkspace.runDir,
+                    isMemoryPrune: memoryPruneTraceId !== null,
+                    diagnosticsTimeoutMs: dependencies.localMemoryDiagnosticsTimeoutMs
+                        ?? LOCAL_MEMORY_DIAGNOSTICS_TIMEOUT_MS,
+                });
+                await localMemoryTelemetry.captureBefore();
+            }
+            catch (error) {
+                localMemoryTelemetry = null;
+                logLocalMemoryDiagnosticsFailure({
+                    executionId: input.executionId,
+                    agentHandle: input.handle,
+                    ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
+                }, "initialize", error);
+            }
         if (memoryPruneTraceId !== null) {
             memoryPruneSharedWriteKey = JSON.stringify([input.launch.agentsRoot, input.handle]);
             const activePruneCount = (activeMemoryPrunes.get(memoryPruneSharedWriteKey) ?? 0) + 1;
@@ -458,6 +466,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             }
         }
         memoryPruneFailurePhase = "runtime_prepare";
+        const crewHome = isolatedMaintenance ? executionWorkspace.runDir : workspace.dir;
         const baseEnv = {
             ...inheritedEnv,
             ...sanitizeEnvVars(providerConfig.envVars),
@@ -466,7 +475,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             CREW_SERVER_URL: input.launch.serverUrl,
             CREW_TOKEN: input.launch.token,
             CREW_CHANNEL: input.channelId,
-            CREW_HOME: workspace.dir,
+            CREW_HOME: crewHome,
             // Keep the daemon-selected storage root authoritative for runtimes.
             // In profile-backed NowWork sessions the daemon config may differ from
             // the daemon process environment, so inheriting CREW_AGENTS_ROOT is not
@@ -476,7 +485,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             ...(input.launch.qaReportRoot === undefined ? {} : { QA_REPORT_HUB: input.launch.qaReportRoot }),
             // Expose only the training root; ability-specific workspace layout stays
             // owned by the training package rather than the NowWork daemon.
-            QA_RUNTIME_ROOT: join(workspace.dir, "training"),
+            QA_RUNTIME_ROOT: join(crewHome, "training"),
             CREW_TASK_DIR: executionWorkspace.runDir,
             CREW_TASK_LOG: executionWorkspace.workLogPath,
             ...(input.wakeMessageId ? { CREW_WAKE_MESSAGE_ID: input.wakeMessageId } : {}),
@@ -492,7 +501,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         };
         const providerEnv = applyProviderEnv(baseEnv, runtime.name, input.launch.codexHomeMode === undefined
             ? providerConfig
-            : { ...providerConfig, codexHomeMode: input.launch.codexHomeMode }, workspace.homeDir);
+            : { ...providerConfig, codexHomeMode: input.launch.codexHomeMode }, workspace.homeDir, materializedDeepSeekHome);
         const childEnv = runtime.name === "deepseek-harness"
             ? applyDeepSeekHarnessMachineEnv(providerEnv, inheritedEnv)
             : providerEnv;
@@ -503,7 +512,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             qa_runtime_root: childEnv.QA_RUNTIME_ROOT ?? null,
             qa_runtime_root_present: childEnv.QA_RUNTIME_ROOT !== undefined,
             inherited_qa_runtime_root_present: inheritedEnv.QA_RUNTIME_ROOT !== undefined,
-            training_root: join(workspace.dir, "training"),
+            training_root: join(crewHome, "training"),
             project_context_present: input.projectContext !== undefined,
             project_ids: JSON.stringify(input.projectContext === undefined
                 ? []
@@ -635,6 +644,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
                 ...(input.projectContext === undefined ? {} : {
                     projectContext: input.projectContext,
                 }),
+                ...(isolatedMaintenance && runtime.name === "codex" ? { networkAccess: true } : {}),
                 ...(input.projectContext === undefined && workspaceRoots.length === 0
                     ? {}
                     : { workspaceRoots: Object.freeze(workspaceRoots) }),
@@ -1118,5 +1128,8 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             const detail = error instanceof Error ? error.message : String(error);
             process.stderr.write(`[execution] failed to remove prompt ${workspace.systemPromptPath}: ${detail}\n`);
         }
+        if (isolatedMaintenance) {
+            await cleanupSelfTrainingRunDir(join(workspace.dir, "tasks"), executionWorkspace.runDir);
+        }
     }
 }

package/dist/machine-info.js

@@ -25,7 +25,9 @@ export { executableRuntimes } from "./runtime-capabilities.js";
 const execFileP = promisify(execFile);
 export const PROJECT_WORKSPACES_CAPABILITY = "project_workspaces_v1";
 export const TRAINING_PROJECT_DEPENDENCIES_CAPABILITY = "training_project_dependencies_v1";
+export const SELF_TRAINING_EXECUTION_CAPABILITY = "self_training_execution_v1";
 export const EXECUTION_LARGE_ATTACHMENTS_CAPABILITY = "execution_attachments_300m_v1";
+export const PROJECT_SKILL_PROJECTION_CAPABILITY = "project_skill_projection_v2";
 export const NATIVE_PROJECT_WORKSPACE_READINESS = Object.freeze({
     resolverReady: true,
     nativeRuntimeAdaptersReady: true,
@@ -42,6 +44,7 @@ export const DAEMON_CAPABILITIES = Object.freeze([
     "execution_machine_queue_v1",
     "execution_agent_memory_policy_v1",
     "execution_agent_memory_mapping_v1",
+    SELF_TRAINING_EXECUTION_CAPABILITY,
     "project_skills_v1",
     "project_skill_projection_v2",
     PROJECT_WORKSPACES_CAPABILITY,

package/dist/project-skills/capability.js

@@ -0,0 +1,109 @@
+import { PROJECT_SKILLS_CAPABILITY, PROJECT_SKILL_PROJECTION_V2_CAPABILITY, } from "./types.js";
+export function projectSkillV2RolloutReady(platform, readiness) {
+    const platformReady = platform === "darwin"
+        || platform === "linux"
+        || (platform === "win32" && readiness.nativeWindowsSmokePassed);
+    return platformReady
+        && readiness.runtimeRootStorePrimitiveReady
+        && readiness.runtimeRootStoreRecoveryReady
+        && readiness.leaseRecoveryReady
+        && readiness.controllerReady
+        && readiness.executionHandlerReady
+        && readiness.codexAdapterReady
+        && readiness.claudeAdapterReady;
+}
+export function effectiveProjectSkillCapabilities(capabilities, projectSkillsReady, projectSkillV2Ready) {
+    const projectSkillCapabilitiesReady = projectSkillsReady && projectSkillV2Ready;
+    if (!projectSkillCapabilitiesReady
+        && !capabilities.includes(PROJECT_SKILLS_CAPABILITY)
+        && !capabilities.includes(PROJECT_SKILL_PROJECTION_V2_CAPABILITY)
+        && Object.isFrozen(capabilities))
+        return capabilities;
+    const filtered = capabilities.filter((capability) => capability !== PROJECT_SKILL_PROJECTION_V2_CAPABILITY
+        && (projectSkillCapabilitiesReady || capability !== PROJECT_SKILLS_CAPABILITY));
+    if (!projectSkillCapabilitiesReady || !filtered.includes(PROJECT_SKILLS_CAPABILITY)) {
+        return Object.freeze(filtered);
+    }
+    const v1Index = filtered.indexOf(PROJECT_SKILLS_CAPABILITY);
+    return Object.freeze([
+        ...filtered.slice(0, v1Index + 1),
+        PROJECT_SKILL_PROJECTION_V2_CAPABILITY,
+        ...filtered.slice(v1Index + 1),
+    ]);
+}
+export function withProjectSkillCapabilityStatus(value, status) {
+    return {
+        ...value,
+        projectSkillsStatus: status,
+        capabilities: status === "ready"
+            ? value.capabilities
+            : effectiveProjectSkillCapabilities(value.capabilities, false, false),
+    };
+}
+const settleReadinessGate = async (operation) => {
+    try {
+        return await operation() === true;
+    }
+    catch {
+        return false;
+    }
+};
+export async function createProjectSkillConnectionCapabilitySnapshot(input) {
+    const runtimeRootStorePrimitiveReady = await settleReadinessGate(input.probeRuntimeRootStorePrimitive);
+    const controllerReady = await settleReadinessGate(input.initializeController);
+    const recoveryReady = await settleReadinessGate(input.recoverRuntimeRootsAndLeases);
+    const readiness = Object.freeze({
+        runtimeRootStorePrimitiveReady,
+        runtimeRootStoreRecoveryReady: recoveryReady,
+        leaseRecoveryReady: recoveryReady,
+        controllerReady,
+        executionHandlerReady: true,
+        codexAdapterReady: true,
+        claudeAdapterReady: true,
+        nativeWindowsSmokePassed: false,
+    });
+    const projectSkillsReady = projectSkillV2RolloutReady(input.platform, readiness);
+    return Object.freeze({
+        capabilities: effectiveProjectSkillCapabilities(input.baseCapabilities, projectSkillsReady, projectSkillsReady),
+        projectSkillsReady,
+        readiness,
+    });
+}
+export async function prepareProjectSkillConnectionCapabilities(input) {
+    const snapshot = await createProjectSkillConnectionCapabilitySnapshot({
+        ...input,
+        baseCapabilities: [...input.baseCapabilities, ...await input.additionalCapabilities()],
+    });
+    input.applyReadiness(snapshot.projectSkillsReady);
+    return snapshot.capabilities;
+}
+export function createProjectSkillControllerReadiness(input) {
+    let status = "initializing";
+    let initialization = null;
+    const ensure = () => {
+        if (status === "ready")
+            return Promise.resolve(true);
+        if (initialization !== null)
+            return initialization;
+        status = "initializing";
+        const attempt = input.initialize().then(() => {
+            status = "ready";
+            return true;
+        }, (error) => {
+            status = "unavailable";
+            input.onUnavailable(error);
+            return false;
+        }).finally(() => {
+            if (initialization === attempt)
+                initialization = null;
+            input.onSettled();
+        });
+        initialization = attempt;
+        return attempt;
+    };
+    return Object.freeze({
+        status: () => status,
+        ensure,
+        applyPreflight: (ready) => { status = ready ? "ready" : "unavailable"; },
+    });
+}

package/dist/project-skills/controller-convergence.js

@@ -0,0 +1,57 @@
+import { ProjectProjectionError, } from "./reconciler.js";
+export const MAX_REMEMBERED_PROJECT_SKILL_AGENTS = 64;
+const compareBinary = (left, right) => {
+    if (left < right)
+        return -1;
+    if (left > right)
+        return 1;
+    return 0;
+};
+const copySnapshot = (snapshot) => Object.freeze({
+    bindings: Object.freeze(snapshot.bindings.map((binding) => Object.freeze({ ...binding }))),
+    generation: snapshot.generation,
+});
+export function createProjectSkillSnapshotEpoch(maxEntries = MAX_REMEMBERED_PROJECT_SKILL_AGENTS) {
+    if (!Number.isSafeInteger(maxEntries) || maxEntries < 1) {
+        throw new ProjectProjectionError("skill_projection_failed");
+    }
+    const snapshots = new Map();
+    return Object.freeze({
+        begin() {
+            snapshots.clear();
+        },
+        remember(handle, snapshot) {
+            const previous = snapshots.get(handle);
+            if (previous !== undefined && snapshot.generation < previous.generation)
+                return;
+            if (previous === undefined && snapshots.size >= maxEntries) {
+                throw new ProjectProjectionError("skill_projection_failed");
+            }
+            snapshots.set(handle, copySnapshot(snapshot));
+        },
+        forget(handle) {
+            snapshots.delete(handle);
+        },
+        entries() {
+            return Object.freeze([...snapshots.entries()]
+                .sort(([left], [right]) => compareBinary(left, right))
+                .map(([handle, snapshot]) => Object.freeze([handle, copySnapshot(snapshot)])));
+        },
+    });
+}
+const stableErrorCode = (reason) => reason?.code === "skill_projection_snapshot_corrupt"
+    ? "skill_projection_snapshot_corrupt"
+    : "skill_projection_failed";
+export function toPathPrivateConvergenceResults(entries, results) {
+    return Object.freeze(entries.map(([handle], index) => {
+        const result = results[index];
+        if (result?.status === "fulfilled") {
+            return Object.freeze({ handle, status: "fulfilled" });
+        }
+        return Object.freeze({
+            handle,
+            status: "rejected",
+            errorCode: stableErrorCode(result?.reason),
+        });
+    }));
+}