@nowcrew/daemon 0.6.79-beta.1 → 0.6.79

package/dist/project-skills/serve-capability.js

@@ -0,0 +1,28 @@
+import { WebSocket } from "ws";
+import { daemonCapabilityBindings, } from "../machine-info.js";
+import { prepareProjectSkillConnectionCapabilities, } from "./capability.js";
+export function createProjectSkillConnectionCapabilityProvider(input) {
+    return async () => daemonCapabilityBindings(input.platform, await prepareProjectSkillConnectionCapabilities(input));
+}
+export function createProjectSkillMachineHelloPublisher(input) {
+    let latest = null;
+    let latestSocket = null;
+    const republish = () => {
+        if (latest === null || latestSocket?.readyState !== WebSocket.OPEN)
+            return;
+        const hello = input.effective(latest, input.status());
+        try {
+            latestSocket.send(JSON.stringify(hello));
+            input.onSent(hello);
+        }
+        catch { /* 非 OPEN,忽略 */ }
+    };
+    return Object.freeze({
+        publish: (hello, socket) => {
+            latest = hello;
+            latestSocket = socket;
+            republish();
+        },
+        republish,
+    });
+}

package/dist/project-skills/serve-startup.js

@@ -0,0 +1,60 @@
+import { createExecutionJournal } from "../execution-journal.js";
+import { reconcileExecutionJournal } from "../execution-recovery.js";
+import { dslog, flushSlog } from "../slog.js";
+/**
+ * 每次连接 preflight 的 Runtime root / lease 恢复。重连时本进程仍在跑的 execution 合法持有 lease,
+ * 必须当作存活而非孤儿;失败也必须留痕,否则整条连接静默摘掉 Project Skills 能力
+ * (incident: 2026-09-02,绑定项目的 Agent 全部 execution_spec_incompatible)。
+ */
+export function createProjectSkillReconnectRecovery(startup, agentsRoot, journal, protectedExecutionIds, liveExecutionIds) {
+    return async () => {
+        const live = liveExecutionIds();
+        try {
+            await startup.recover(agentsRoot, journal(), protectedExecutionIds, live);
+            return true;
+        }
+        catch (error) {
+            dslog("project_skills.preflight_recovery_failed", "Project Skill runtime root 恢复失败,本连接不宣告 Project Skills 能力", {
+                level: "ERROR",
+                error_code: error.code ?? "unknown",
+                error_message: error.message,
+                live_execution_count: live.size,
+            });
+            return false;
+        }
+    };
+}
+export async function initializeProjectSkillProtectedExecutionJournal(input) {
+    return input.startup.initializeAfterLeaseProtection(input.config.agentsRoot, async (snapshot) => {
+        input.protectedExecutionIds.clear();
+        for (const executionId of snapshot)
+            input.protectedExecutionIds.add(executionId);
+        const journal = input.injectedJournal ?? createExecutionJournal(input.config.agentsRoot, {
+            protectedExecutionIds: () => input.protectedExecutionIds,
+            onOperationTiming: (event) => {
+                if (event.operation !== "mark_runtime_ready"
+                    && event.queueWaitMs < 250
+                    && event.operationMs < 250)
+                    return;
+                dslog("execution.journal_operation", "execution journal 操作完成", {
+                    level: event.outcome === "succeeded" ? "INFO" : "ERROR",
+                    execution_id: event.executionId,
+                    operation: event.operation,
+                    outcome: event.outcome,
+                    queue_wait_ms: event.queueWaitMs,
+                    operation_ms: event.operationMs,
+                    total_ms: event.queueWaitMs + event.operationMs,
+                });
+            },
+        });
+        await reconcileExecutionJournal(journal, {
+            agentsRoot: input.config.agentsRoot,
+            serverUrl: input.config.serverUrl,
+            ...(input.profileName === undefined ? {} : { profileName: input.profileName }),
+            log: dslog,
+            flush: flushSlog,
+            writeStderr: (line) => process.stderr.write(line),
+        });
+        return journal;
+    });
+}

package/dist/provider-env.js

@@ -11,6 +11,24 @@
 import { join } from "node:path";
 import { DEEPSEEK_CODEX_KEY_ENV, deepSeekCodexHome, } from "./runtimes/codex-deepseek-config.js";
 import { DEEPSEEK_HARNESS_CONFIG_ENV } from "./runtimes/deepseek-harness.js";
+const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const RESERVED_ENV = new Set([
+    "PATH",
+    "XDG_CONFIG_HOME",
+    "XDG_DATA_HOME",
+    "XDG_CACHE_HOME",
+    "GH_CONFIG_DIR",
+    "CLOUDSDK_CONFIG",
+]);
+/** Keep user-provided variables away from daemon-owned runtime and credential fields. */
+export function sanitizeEnvVars(raw) {
+    if (!raw)
+        return {};
+    return Object.fromEntries(Object.entries(raw).filter(([key, value]) => typeof value === "string"
+        && ENV_KEY_RE.test(key)
+        && !key.toUpperCase().startsWith("CREW_")
+        && !RESERVED_ENV.has(key.toUpperCase())));
+}
 /** custom 模式下必须从继承 env 中剔除的全局路由/凭证变量(避免与注入值叠加或抢优先级)。 */
 const CONFLICTING_ENV = [
     "ANTHROPIC_BASE_URL",
@@ -39,12 +57,12 @@ const CONFLICTING_CODEX_ENV = [
     DEEPSEEK_CODEX_KEY_ENV,
 ];
 /** 返回叠加了 provider 隔离的新 env(不改入参);不支持的 runtime/provider 组合原样返回。 */
-export function applyProviderEnv(base, runtime, cfg, homeDir) {
+export function applyProviderEnv(base, runtime, cfg, homeDir, deepSeekHomeOverride) {
     if (runtime === "codex" && cfg.provider === "deepseek") {
         const env = { ...base };
         for (const key of CONFLICTING_CODEX_ENV)
             delete env[key];
-        env.CODEX_HOME = deepSeekCodexHome(homeDir);
+        env.CODEX_HOME = deepSeekHomeOverride ?? deepSeekCodexHome(homeDir);
         if (cfg.providerApiKey)
             env[DEEPSEEK_CODEX_KEY_ENV] = cfg.providerApiKey;
         return env;
@@ -100,7 +118,7 @@ export function applyDeepSeekHarnessMachineEnv(base, machineEnv) {
  */
 export function providerFingerprint(runtime, cfg) {
     if (runtime === "codex" && cfg.provider === "deepseek") {
-        return `deepseek|${cfg.providerApiKey ? "key" : "nokey"}`;
+        return `deepseek|${cfg.providerBaseUrl ?? "default"}|${cfg.providerApiKey ? "key" : "nokey"}`;
     }
     if (runtime !== "claude" || cfg.provider !== "custom")
         return null;

package/dist/runner.js

@@ -11,7 +11,8 @@ import { readOriginDecisionFile, resetOriginDecisionFile } from "./origin-decisi
 import { readBoundImDecisionFile, resetBoundImDecisionFile } from "./bound-im-decision.js";
 import { launchSupervisedRuntime } from "./supervised-runtime.js";
 import { awaitWithCancellation, } from "./runtime-cancellation.js";
-export { awaitExit, exitActivity, sanitizeEnvVars } from "./local-executor.js";
+export { awaitExit, exitActivity } from "./local-executor.js";
+export { sanitizeEnvVars } from "./provider-env.js";
 const ICON = {
     init: "🟢", text: "💬", reading: "📖", sending: "📨", checking: "🔎",
     claiming: "📌", crew: "⚙️", tool: "🛠️", tool_result: "↩️", done: "✅", error: "❌",

package/dist/runtimes/codex-app-server-runner.js

@@ -21,9 +21,14 @@ const RunnerInputSchema = z.object({
     cwd: z.string().min(1).optional(),
     workspaceRoots: z.array(z.string().min(1)).optional(),
     skillRoots: z.array(z.string().min(1)).optional(),
+    networkAccess: z.boolean().optional(),
     codexCollaborationTools: z.boolean().optional(),
     resume: z.boolean(),
-}).strict();
+}).strict().superRefine((input, ctx) => {
+    if (input.networkAccess === true && input.effectivePermission !== "workspace_write") {
+        ctx.addIssue({ code: "custom", message: "network_access_requires_workspace_write" });
+    }
+});
 const RPC_TIMEOUT_MS = 30_000;
 const INITIALIZE_RPC_TIMEOUT_MS = 60_000;
 const ERROR_MESSAGE_CAP = 2_000;
@@ -613,6 +618,9 @@ async function runCodexAppServerAttempt(bin, input, attempt, initializeTimeoutMs
             ...(input.reasoning === undefined || input.reasoning === "default"
                 ? {}
                 : { effort: input.reasoning }),
+            ...(input.networkAccess === true ? {
+                sandboxPolicy: { type: "workspaceWrite", networkAccess: true },
+            } : {}),
         });
         logStage(activeStage, "ok", attempt, stageStartedAt);
         turnId = started.turn.id;

package/dist/runtimes/codex-deepseek-config.js

@@ -7,10 +7,20 @@ export const DEEPSEEK_CODEX_BASE_URL = "https://api.deepseek.com/";
 export const DEEPSEEK_CODEX_KEY_ENV = "NOWCREW_DEEPSEEK_API_KEY";
 export const DEEPSEEK_CODEX_REASONING_LEVELS = ["low", "high", "max"];
 const PRIVATE_CODEX_HOME = ".codex-deepseek";
-export function deepSeekCodexHome(homeDir) {
-    return resolve(homeDir, PRIVATE_CODEX_HOME);
+const SELF_TRAINING_PRIVATE_CODEX_HOME = ".codex-deepseek-self-training";
+export function deepSeekCodexHome(homeDir, selfTraining = false) {
+    return resolve(homeDir, selfTraining ? SELF_TRAINING_PRIVATE_CODEX_HOME : PRIVATE_CODEX_HOME);
 }
-export function renderDeepSeekConfig(codexHome) {
+function normalizedBaseUrl(value) {
+    const url = new URL(value);
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        throw new Error("DeepSeek provider base URL must use HTTP(S)");
+    }
+    if (!url.pathname.endsWith("/"))
+        url.pathname = `${url.pathname}/`;
+    return url.toString();
+}
+export function renderDeepSeekConfig(codexHome, baseUrl = DEEPSEEK_CODEX_BASE_URL) {
     const catalogPath = join(codexHome, "models.json");
     return [
         `model = ${JSON.stringify(DEEPSEEK_CODEX_MODEL)}`,
@@ -20,7 +30,7 @@ export function renderDeepSeekConfig(codexHome) {
         "",
         "[model_providers.deepseek]",
         'name = "deepseek"',
-        `base_url = ${JSON.stringify(DEEPSEEK_CODEX_BASE_URL)}`,
+        `base_url = ${JSON.stringify(normalizedBaseUrl(baseUrl))}`,
         'wire_api = "responses"',
         `env_key = ${JSON.stringify(DEEPSEEK_CODEX_KEY_ENV)}`,
         "",
@@ -40,11 +50,11 @@ async function writePrivateAtomic(path, content) {
         await rm(temporary, { force: true });
     }
 }
-export async function materializeDeepSeekCodexHome(homeDir) {
-    const codexHome = deepSeekCodexHome(homeDir);
+export async function materializeDeepSeekCodexHome(homeDir, options = {}) {
+    const codexHome = deepSeekCodexHome(homeDir, options.selfTraining === true);
     await mkdir(codexHome, { recursive: true, mode: 0o700 });
     await chmod(codexHome, 0o700);
     await writePrivateAtomic(join(codexHome, "models.json"), DEEPSEEK_CODEX_CATALOG);
-    await writePrivateAtomic(join(codexHome, "config.toml"), renderDeepSeekConfig(codexHome));
+    await writePrivateAtomic(join(codexHome, "config.toml"), renderDeepSeekConfig(codexHome, options.baseUrl));
     return codexHome;
 }

package/dist/runtimes/codex.js

@@ -36,6 +36,9 @@ export function buildCodexArgs(input) {
     else if (input.effectivePermission === "full_access" || (input.effectivePermission === undefined && input.dangerous)) {
         args.push("--dangerously-bypass-approvals-and-sandbox");
     }
+    if (input.effectivePermission === "workspace_write" && input.networkAccess === true) {
+        args.push("-c", "sandbox_workspace_write.network_access=true");
+    }
     for (const imagePath of input.imagePaths ?? [])
         args.push("--image", imagePath);
     // `-` instructs codex exec to read the prompt from stdin. Keeping the complete prompt out of argv

package/dist/self-training-workspace.js

@@ -0,0 +1,15 @@
+import { rm } from "node:fs/promises";
+import { isAbsolute, relative, sep } from "node:path";
+/** Delete only a concrete child of this Agent's tasks root; never follow an ambiguous target. */
+export async function cleanupSelfTrainingRunDir(tasksRoot, runDir) {
+    const child = relative(tasksRoot, runDir);
+    if (child === "" || isAbsolute(child) || child === ".." || child.startsWith(`..${sep}`))
+        return;
+    try {
+        await rm(runDir, { recursive: true, force: true });
+    }
+    catch (error) {
+        const detail = error instanceof Error ? error.message : String(error);
+        process.stderr.write(`[execution] failed to remove self-training run dir ${runDir}: ${detail}\n`);
+    }
+}

package/dist/supervised-runtime.js

@@ -46,6 +46,7 @@ export function supervisorLaunch(request) {
                 effectivePermission: request.effectivePermission,
                 ...(request.model === undefined ? {} : { model: request.model }),
                 ...(request.reasoning === undefined ? {} : { reasoning: request.reasoning }),
+                ...(request.networkAccess === undefined ? {} : { networkAccess: request.networkAccess }),
                 ...(request.sessionId === undefined ? {} : { sessionId: request.sessionId }),
                 ...(request.imagePaths === undefined ? {} : { imagePaths: request.imagePaths }),
                 ...(request.agentRoot === undefined ? {} : {

package/dist/workspace.js

@@ -59,12 +59,13 @@ export async function prepareWorkspace(input) {
     const crewDir = join(dir, ".crew");
     await mkdir(crewDir, { recursive: true });
     // 预先创建明细目录,让收尾流程可以按功能创建 notes/<topic>.md。
-    await mkdir(join(dir, "notes"), { recursive: true });
+    if (!input.skipLocalMemory)
+        await mkdir(join(dir, "notes"), { recursive: true });
     // MEMORY.md:首次创建"持久身份 + 知识索引"骨架,之后由 agent 自己维护
     const memoryPath = join(dir, "MEMORY.md");
-    const memorySeedCreated = !(await exists(memoryPath));
+    const memorySeedCreated = !input.skipLocalMemory && !(await exists(memoryPath));
     const localMemoryV2Initialized = await hasLocalMemoryV2Marker(dir);
-    if (memorySeedCreated) {
+    if (!input.skipLocalMemory && memorySeedCreated) {
         try {
             await writeFile(memoryPath, memorySeed(input.handle, input.description), "utf8");
         }
@@ -73,13 +74,15 @@ export async function prepareWorkspace(input) {
             throw error;
         }
     }
-    let memory;
-    try {
-        memory = await readFile(memoryPath, "utf8");
-    }
-    catch (error) {
-        logMemoryPrepareFailure(input, "memory_read", error);
-        throw error;
+    let memory = "";
+    if (!input.skipLocalMemory) {
+        try {
+            memory = await readFile(memoryPath, "utf8");
+        }
+        catch (error) {
+            logMemoryPrepareFailure(input, "memory_read", error);
+            throw error;
+        }
     }
     // 系统提示词按 execution 隔离;省略 identity 的兼容调用每次使用随机路径。
     const promptDir = join(crewDir, "prompts");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nowcrew/daemon",
-  "version": "0.6.79-beta.1",
+  "version": "0.6.79",
   "type": "module",
   "description": "crew daemon — 运行在用户机器:拉起/管理 agent 进程,注入 crew CLI,归一化 runtime 事件",
   "license": "Apache-2.0",