@nowcrew/daemon 0.6.88-beta.21 → 0.6.88-beta.23

package/dist/runtimes/deepseek-harness-launch.js

@@ -0,0 +1,10 @@
+/**
+ * launchd Background policy can stall dsh's synchronous startup reads before ACP.
+ * Apply application resource policy to this short-lived child, never the daemon.
+ * taskpolicy execs the target; no shell, alternate PATH, or protocol bypass.
+ */
+export function deepSeekHarnessLaunch(bin, args, platform = process.platform) {
+    return platform === "darwin"
+        ? { bin: "/usr/sbin/taskpolicy", args: ["-a", "--", bin, ...args] }
+        : { bin, args: [...args] };
+}

package/dist/runtimes/deepseek-harness-runner.js

@@ -7,6 +7,7 @@ import { isAbsolute } from "node:path";
 import spawn from "cross-spawn";
 import { z } from "zod";
 import { client, methods, ndJsonStream, PROTOCOL_VERSION, } from "@agentclientprotocol/sdk";
+import { deepSeekHarnessLaunch } from "./deepseek-harness-launch.js";
 import { prepareHarnessProfile } from "./deepseek-harness-profile.js";
 import { mapAcpUpdate } from "./kimi-acp-runner.js";
 import { prepareThreadDelivery } from "../thread-input-delivery.js";
@@ -56,7 +57,8 @@ export async function runHarness(input, bin, patchPath) {
         env: process.env,
         ...(patchPath ? { patchPath } : {}),
     });
-    const child = spawn(bin, profile.args, {
+    const launch = deepSeekHarnessLaunch(bin, profile.args);
+    const child = spawn(launch.bin, launch.args, {
         cwd: profile.home,
         env: profile.env,
         stdio: ["pipe", "pipe", "pipe"],
@@ -180,7 +182,7 @@ export async function runHarness(input, bin, patchPath) {
         if (!cancelled)
             process.stderr.write(spawnError
                 ? "DeepSeek Harness launch failed; verify the installed dsh executable.\n"
-                : `DeepSeek Harness ACP execution failed at ${stage}; verify the pinned version, machine credentials and profile patch.\n`);
+                : `DeepSeek Harness ACP execution failed at ${stage}; verify DEEPSEEK_API_KEY, model access, the pinned version and profile patch.\n`);
     }
     finally {
         try {

package/dist/runtimes/deepseek-harness.js

@@ -3,6 +3,7 @@ import { isAbsolute } from "node:path";
 import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { deepSeekHarnessLaunch } from "./deepseek-harness-launch.js";
 import { prepareHarnessProfile } from "./deepseek-harness-profile.js";
 import { probeKimiAcp, AcpProbeCleanupError } from "./kimi-acp-runner.js";
 export const DEEPSEEK_HARNESS_CONFIG_ENV = "NOWCREW_DEEPSEEK_HARNESS_CONFIG";
@@ -52,11 +53,13 @@ export async function probeDeepSeekHarnessAcp(options, spawnProcess = spawn) {
             env: process.env,
             ...(launcher.patchPath ? { patchPath: launcher.patchPath } : {}),
         });
+        const launch = deepSeekHarnessLaunch(options.bin, profile.args);
         return await probeKimiAcp({
             ...options,
+            bin: launch.bin,
             provider: "deepseek-harness",
             effectivePermission: "sandboxed",
-            launchArgs: profile.args,
+            launchArgs: launch.args,
             launchEnv: profile.env,
             launchCwd: root,
         }, spawnProcess);

package/dist/runtimes/kimi-acp-runner.js

@@ -13,7 +13,12 @@ import { prepareThreadDelivery } from "../thread-input-delivery.js";
 import { startFirstProgressWatchdog } from "./progress-watchdog.js";
 import { assertKimiLegacyPromptFits, buildKimiArgs } from "./kimi.js";
 const ERROR_MESSAGE_CAP = 2_000;
-const PROBE_TIMEOUT_MS = 5_000;
+// macOS launchd cold-starts ACP runtimes materially slower than an interactive
+// shell. DeepSeek Harness was measured at ~4.4s before returning initialize
+// under launchd, while the daemon also creates an isolated profile. Keep this
+// bounded below the control-plane request budget, with the existing 1s/2s
+// Harness retries providing the outer bound.
+export const ACP_PROBE_TIMEOUT_MS = 10_000;
 function jsonLine(event) {
     if (process.stdout.write(`${JSON.stringify(event)}\n`))
         return Promise.resolve();
@@ -222,6 +227,15 @@ export async function probeKimiAcp(options, spawnProcess = spawn) {
         env: { ...launchEnv, PATH: augmentedPath(launchEnv) },
         stdio: ["pipe", "pipe", "pipe"],
     });
+    // spawn errors are emitted by ChildProcess, not its stdio streams. A missing
+    // launcher must fail admission, not become an uncaught daemon exception.
+    const spawnFailed = new Promise((resolve) => {
+        child.once("error", () => {
+            if (reason === "initializing")
+                reason = "spawn_error";
+            resolve(false);
+        });
+    });
     child.once("spawn", () => {
         spawnConfirmedMs = elapsed();
         dslog("execution.acp_probe_spawned", "ACP 探测子进程已启动", fields());
@@ -256,13 +270,14 @@ export async function probeKimiAcp(options, spawnProcess = spawn) {
         });
         const result = await Promise.race([
             connected,
+            spawnFailed,
             new Promise((resolve) => {
                 timeout = setTimeout(() => {
                     if (reason === "initializing")
                         reason = "timeout";
                     void stopChild(child);
                     resolve(false);
-                }, PROBE_TIMEOUT_MS);
+                }, ACP_PROBE_TIMEOUT_MS);
             }),
             new Promise((resolve) => {
                 onAbort = () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nowcrew/daemon",
-  "version": "0.6.88-beta.21",
+  "version": "0.6.88-beta.23",
   "type": "module",
   "description": "crew daemon — 运行在用户机器:拉起/管理 agent 进程,注入 crew CLI,归一化 runtime 事件",
   "license": "Apache-2.0",