@nowcrew/daemon 0.6.88-beta.22 → 0.6.88-beta.23

package/dist/runtimes/deepseek-harness-launch.js

@@ -0,0 +1,10 @@
+/**
+ * launchd Background policy can stall dsh's synchronous startup reads before ACP.
+ * Apply application resource policy to this short-lived child, never the daemon.
+ * taskpolicy execs the target; no shell, alternate PATH, or protocol bypass.
+ */
+export function deepSeekHarnessLaunch(bin, args, platform = process.platform) {
+    return platform === "darwin"
+        ? { bin: "/usr/sbin/taskpolicy", args: ["-a", "--", bin, ...args] }
+        : { bin, args: [...args] };
+}

package/dist/runtimes/deepseek-harness-runner.js

@@ -7,6 +7,7 @@ import { isAbsolute } from "node:path";
 import spawn from "cross-spawn";
 import { z } from "zod";
 import { client, methods, ndJsonStream, PROTOCOL_VERSION, } from "@agentclientprotocol/sdk";
+import { deepSeekHarnessLaunch } from "./deepseek-harness-launch.js";
 import { prepareHarnessProfile } from "./deepseek-harness-profile.js";
 import { mapAcpUpdate } from "./kimi-acp-runner.js";
 import { prepareThreadDelivery } from "../thread-input-delivery.js";
@@ -56,7 +57,8 @@ export async function runHarness(input, bin, patchPath) {
         env: process.env,
         ...(patchPath ? { patchPath } : {}),
     });
-    const child = spawn(bin, profile.args, {
+    const launch = deepSeekHarnessLaunch(bin, profile.args);
+    const child = spawn(launch.bin, launch.args, {
         cwd: profile.home,
         env: profile.env,
         stdio: ["pipe", "pipe", "pipe"],

package/dist/runtimes/deepseek-harness.js

@@ -3,6 +3,7 @@ import { isAbsolute } from "node:path";
 import { mkdtemp, rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
+import { deepSeekHarnessLaunch } from "./deepseek-harness-launch.js";
 import { prepareHarnessProfile } from "./deepseek-harness-profile.js";
 import { probeKimiAcp, AcpProbeCleanupError } from "./kimi-acp-runner.js";
 export const DEEPSEEK_HARNESS_CONFIG_ENV = "NOWCREW_DEEPSEEK_HARNESS_CONFIG";
@@ -52,11 +53,13 @@ export async function probeDeepSeekHarnessAcp(options, spawnProcess = spawn) {
             env: process.env,
             ...(launcher.patchPath ? { patchPath: launcher.patchPath } : {}),
         });
+        const launch = deepSeekHarnessLaunch(options.bin, profile.args);
         return await probeKimiAcp({
             ...options,
+            bin: launch.bin,
             provider: "deepseek-harness",
             effectivePermission: "sandboxed",
-            launchArgs: profile.args,
+            launchArgs: launch.args,
             launchEnv: profile.env,
             launchCwd: root,
         }, spawnProcess);

package/dist/runtimes/kimi-acp-runner.js

@@ -227,6 +227,15 @@ export async function probeKimiAcp(options, spawnProcess = spawn) {
         env: { ...launchEnv, PATH: augmentedPath(launchEnv) },
         stdio: ["pipe", "pipe", "pipe"],
     });
+    // spawn errors are emitted by ChildProcess, not its stdio streams. A missing
+    // launcher must fail admission, not become an uncaught daemon exception.
+    const spawnFailed = new Promise((resolve) => {
+        child.once("error", () => {
+            if (reason === "initializing")
+                reason = "spawn_error";
+            resolve(false);
+        });
+    });
     child.once("spawn", () => {
         spawnConfirmedMs = elapsed();
         dslog("execution.acp_probe_spawned", "ACP 探测子进程已启动", fields());
@@ -261,6 +270,7 @@ export async function probeKimiAcp(options, spawnProcess = spawn) {
         });
         const result = await Promise.race([
             connected,
+            spawnFailed,
             new Promise((resolve) => {
                 timeout = setTimeout(() => {
                     if (reason === "initializing")

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nowcrew/daemon",
-  "version": "0.6.88-beta.22",
+  "version": "0.6.88-beta.23",
   "type": "module",
   "description": "crew daemon — 运行在用户机器:拉起/管理 agent 进程,注入 crew CLI,归一化 runtime 事件",
   "license": "Apache-2.0",
@@ -16,13 +16,6 @@
   "publishConfig": {
     "access": "public"
   },
-  "scripts": {
-    "daemon": "pnpm --filter @nowcrew/cli build && tsx src/main.ts",
-    "build": "tsc -p tsconfig.json",
-    "prepublishOnly": "pnpm build && node ../scripts/daemon-release-artifact.mjs --strict-registry",
-    "test": "vitest run",
-    "typecheck": "tsc --noEmit"
-  },
   "dependencies": {
     "@agentclientprotocol/sdk": "1.2.1",
     "@nowcrew/cli": "0.4.14",
@@ -43,5 +36,11 @@
     "tsx": "^4.19.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0"
+  },
+  "scripts": {
+    "daemon": "pnpm --filter @nowcrew/cli build && tsx src/main.ts",
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
   }
-}
+}