@nowcrew/daemon 0.6.88 → 0.6.89

package/README.md

@@ -50,7 +50,8 @@ npx -y --registry https://registry.npmjs.org @nowcrew/daemon@beta install \
   --release-tag beta --registry https://registry.npmjs.org
 ```
 
-The installer selects the fixed `in` layout for `nowwork-in.nowcoder.com` and the fixed `dev` layout for
+The installer selects the fixed production layout for both `nowwork.nowcoder.com` (canonical) and
+`nowwork-in.nowcoder.com` (legacy compatibility), and the fixed `dev` layout for
 `nowwork-dev.nowcoder.com`. It compares the parsed hostname exactly; lookalike suffixes are not accepted.
 An unknown hostname is rejected before any write and reports how to retry with an explicit custom profile:
 

package/dist/agent-ability/controller.js

@@ -3,7 +3,17 @@ import { resolveAbilityRelease } from "./resolver.js";
 export const normalizeAbilityCommandError = (error, fallback) => {
     const message = error instanceof Error ? error.message : fallback;
     const structured = message.match(/^(ability_[a-z0-9_]+)(?::|$)/u)?.[1];
-    return structured ?? fallback;
+    if (structured)
+        return structured;
+    if (error instanceof Error && "code" in error) {
+        if (error.code === "ENOSPC")
+            return "ability_disk_full";
+        if (error.code === "EACCES" || error.code === "EPERM")
+            return "ability_filesystem_permission_denied";
+        if (error.code === "ENOENT")
+            return "ability_local_file_missing";
+    }
+    return fallback;
 };
 export function createAgentAbilityController(deps) {
     const resolver = deps.resolve ?? resolveAbilityRelease;

package/dist/agent-ability/git-errors.js

@@ -0,0 +1,22 @@
+/** Classify Git failures without returning command arguments or raw stderr. */
+export function abilityGitErrorCode(error) {
+    if (!(error instanceof Error))
+        return "ability_git_failed";
+    if ("code" in error && error.code === "ENOENT")
+        return "ability_git_unavailable";
+    if ("killed" in error && error.killed === true)
+        return "ability_git_timeout";
+    const stderr = "stderr" in error && typeof error.stderr === "string" ? error.stderr : "";
+    if (/no space left on device/i.test(stderr))
+        return "ability_disk_full";
+    if (/host key verification failed|remote host identification has changed/i.test(stderr)) {
+        return "ability_git_host_verification_failed";
+    }
+    if (/permission denied \(publickey|authentication failed|could not read username|repository not found|access denied/i.test(stderr)) {
+        return "ability_git_access_denied";
+    }
+    if (/could not resolve host|could not resolve hostname|connection timed out|connection refused|network is unreachable|could not connect to server/i.test(stderr)) {
+        return "ability_git_network_failed";
+    }
+    return "ability_git_failed";
+}

package/dist/agent-ability/resolver.js

@@ -7,6 +7,7 @@ import { parse } from "yaml";
 import { z } from "zod";
 import { abilityWorkspaceProjectionPath, DaemonAbilityLockSchema, DaemonAbilityManifestSchema, matchesAbilityBranch, } from "./types.js";
 import { PROJECT_MANIFEST_SOURCE_PATH, ProjectDependencyManifestSchema, } from "../project-dependency-manifest.js";
+import { abilityGitErrorCode } from "./git-errors.js";
 import { normalizeRepositoryIdentity } from "../repository-identity.js";
 const runFile = promisify(execFile);
 const MAX_FILES = 5_000;
@@ -42,6 +43,7 @@ const gitEnv = () => ({
     GIT_CONFIG_NOSYSTEM: "1",
     GIT_CONFIG_GLOBAL: process.platform === "win32" ? "NUL" : "/dev/null",
     GIT_TERMINAL_PROMPT: "0",
+    LC_ALL: "C",
 });
 export const abilitySha256 = (content) => `sha256:${createHash("sha256").update(content).digest("hex")}`;
 export const safeAbilityName = (value) => value.replace(/[^A-Za-z0-9._-]/gu, "_").slice(0, 128);
@@ -73,10 +75,16 @@ const comparePosixPaths = (left, right) => {
     return leftParts.length - rightParts.length;
 };
 const git = async (args, cwd) => {
-    const result = await runFile("git", [...GIT_ARGS, ...args], {
-        ...(cwd ? { cwd } : {}), env: gitEnv(), timeout: 60_000, maxBuffer: 16 * 1024 * 1024,
-    });
-    return result.stdout.trim();
+    try {
+        const result = await runFile("git", [...GIT_ARGS, ...args], {
+            ...(cwd ? { cwd } : {}), env: gitEnv(), timeout: 60_000, maxBuffer: 16 * 1024 * 1024,
+        });
+        return result.stdout.trim();
+    }
+    catch (error) {
+        // 仅回传固定错误分类，不把 Git stderr 中的凭据、仓库地址或本地路径发到界面。
+        throw new Error(abilityGitErrorCode(error));
+    }
 };
 export const parseAbilityRefLine = (line) => {
     const [branch, commit, rawTime, ...extra] = line.split("\t");

package/dist/automatic-daemon-installer.js

@@ -14,6 +14,7 @@ import { daemonRegistryCandidates } from "./daemon-registry.js";
 import { npmInvocation } from "./npm-command.js";
 import { discoverExactLegacyService, } from "./automatic-service-migration.js";
 import { resolveDaemonLocalStateRootFromEnv } from "./daemon-local-home.js";
+import { serverHostIdentity } from "./server-url.js";
 function profileStorage(platform, userHome, runner) {
     return {
         platform,
@@ -27,7 +28,7 @@ function profileStorage(platform, userHome, runner) {
     };
 }
 function sameHostname(left, right) {
-    return new URL(left).hostname.toLowerCase() === new URL(right).hostname.toLowerCase();
+    return serverHostIdentity(left) === serverHostIdentity(right);
 }
 function localHomeForTarget(target, platform) {
     const paths = platform === "win32" ? win32 : posix;

package/dist/automatic-install-target.js

@@ -4,6 +4,14 @@ import { normalizeDaemonNpmRegistry } from "./npm-registry.js";
 import { resolveDaemonLocalHome } from "./daemon-local-home.js";
 const PROFILE_NAME = /^[a-z0-9][a-z0-9_-]{0,47}$/;
 const KNOWN_TARGETS = {
+    // Canonical production hostname. Keep the internal hostname below as a
+    // compatibility alias so existing profiles and service identities continue
+    // to work when users move between the two URLs.
+    "nowwork.nowcoder.com": {
+        environment: "production",
+        daemonDirectory: "daemon",
+        agentsDirectory: "agents",
+    },
     "nowwork-in.nowcoder.com": {
         environment: "production",
         daemonDirectory: "daemon",

package/dist/server-url.js

@@ -0,0 +1,25 @@
+const CANONICAL_PRODUCTION_HOST = "nowwork.nowcoder.com";
+const PRODUCTION_HOST_ALIASES = new Set([
+    CANONICAL_PRODUCTION_HOST,
+    "nowwork-in.nowcoder.com",
+]);
+function canonicalHostname(hostname) {
+    const normalized = hostname.toLowerCase();
+    return isProductionServerHostname(normalized) ? CANONICAL_PRODUCTION_HOST : normalized;
+}
+export function isProductionServerHostname(hostname) {
+    return PRODUCTION_HOST_ALIASES.has(hostname.toLowerCase());
+}
+/** Host identity used by profile/service guards; the public and internal production names are aliases. */
+export function serverHostIdentity(serverUrl) {
+    return canonicalHostname(new URL(serverUrl).hostname);
+}
+/** URL identity used by storage records; preserve path/port/query while collapsing production host aliases. */
+export function serverUrlIdentity(serverUrl) {
+    const parsed = new URL(serverUrl);
+    parsed.hostname = canonicalHostname(parsed.hostname);
+    return parsed.toString().replace(/\/+$/u, "");
+}
+export function serverUrlsMatch(left, right) {
+    return serverUrlIdentity(left) === serverUrlIdentity(right);
+}

package/dist/slog.js

@@ -16,6 +16,7 @@ import { join, resolve } from "node:path";
 import { createHash } from "node:crypto";
 import { appendFileSync, existsSync, mkdirSync, readdirSync, readFileSync, statSync, unlinkSync } from "node:fs";
 import { resolveDaemonLocalStateRoot } from "./daemon-local-home.js";
+import { isProductionServerHostname } from "./server-url.js";
 const FLUSH_INTERVAL_MS = 1500;
 const BATCH_SIZE = 50;
 const SPOOL_MAX_FILES = 50; // spool 目录文件数上限,超出丢最旧(日志非关键数据,防无限膨胀)
@@ -30,7 +31,7 @@ let lastErrorAt = 0;
 let exitHookInstalled = false;
 let localStateRoot;
 function deploymentEnvironment(serverHost) {
-    if (serverHost === "nowwork-in.nowcoder.com")
+    if (serverHost !== undefined && isProductionServerHostname(serverHost))
         return "prod";
     if (serverHost === "nowwork-dev.nowcoder.com")
         return "dev";

package/dist/storage-runtime-readiness.js

@@ -12,6 +12,7 @@ import { createStorageMigrationRuntimeController, } from "./storage-runtime-cont
 import { resolveEnvTag, resolveNowworkHome } from "./storage-layout.js";
 import { readStorageOwnershipClaim } from "./storage-ownership.js";
 import { parseDaemonLocalHomeMode, resolveDaemonLocalStateRoot } from "./daemon-local-home.js";
+import { isProductionServerHostname } from "./server-url.js";
 const notReady = (reason) => Object.freeze({ ready: false, reason });
 function canonicalPath(value) {
     const absolute = resolve(value);
@@ -50,7 +51,7 @@ function environmentMatchesServer(serverUrl, environment) {
     const hostname = new URL(serverUrl).hostname.toLowerCase();
     if (hostname === "nowwork-dev.nowcoder.com")
         return environment === "dev";
-    if (hostname === "nowwork-in.nowcoder.com")
+    if (isProductionServerHostname(hostname))
         return environment === "production";
     return true;
 }

package/dist/storage-runtime.js

@@ -2,12 +2,12 @@ import { findInstallationForProfile, readInstallations, resolveLocalStorageRoots
 import { storageHelloIdentity } from "./storage-identity.js";
 import { storageLayout } from "./storage-layout.js";
 import { readStorageOwnershipClaim, resolveWorkspaceStorageOwnershipClaim, } from "./storage-ownership.js";
-const canonicalServerUrl = (value) => value.replace(/\/+$/u, "");
+import { serverUrlsMatch } from "./server-url.js";
 export function resolveStorageRuntime(input) {
     const installation = findInstallationForProfile(input.records, input.profile);
     if (installation === null)
         return null;
-    if (canonicalServerUrl(installation.serverUrl) !== canonicalServerUrl(input.serverUrl)) {
+    if (!serverUrlsMatch(installation.serverUrl, input.serverUrl)) {
         throw new Error("installation server identity does not match the active profile");
     }
     const local = resolveLocalStorageRoots({

package/dist/storage-worker-executor.js

@@ -13,6 +13,7 @@ import { readStorageWorkerOperation } from "./storage-worker-operation.js";
 import { storageIdFingerprint } from "./storage-identity.js";
 import { waitForStorageMigrationAcknowledgement } from "./storage-target-confirmation.js";
 import { resolveDaemonLocalStateRoot } from "./daemon-local-home.js";
+import { serverUrlsMatch } from "./server-url.js";
 const defaultServiceDependencies = () => ({
     assertManagedServiceIdentity,
     serviceAction,
@@ -70,9 +71,6 @@ function sameInstallation(left, right) {
 function sameProfile(left, right) {
     return JSON.stringify(left) === JSON.stringify(right);
 }
-function canonicalServerUrl(value) {
-    return value.replace(/\/+$/u, "");
-}
 export function createStorageWorkerServiceLifecycle(operation, injected = {}) {
     const dependencies = { ...defaultServiceDependencies(), ...injected };
     const sourceLocalHome = resolveDaemonLocalStateRoot({
@@ -137,7 +135,7 @@ export function createStorageWorkerServiceLifecycle(operation, injected = {}) {
             throw new Error(`Target service '${targetSpec.id}' already exists`);
         sourceProfile = await dependencies.loadProfile(operation.profile, sourceRecord.daemonHome);
         if (sourceProfile.name !== operation.profile
-            || canonicalServerUrl(sourceProfile.serverUrl) !== canonicalServerUrl(operation.installation.target.serverUrl)) {
+            || !serverUrlsMatch(sourceProfile.serverUrl, operation.installation.target.serverUrl)) {
             throw new Error("Source profile does not match target installation identity");
         }
         baselineInstallations = await assertTargetMetadataUnchanged();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nowcrew/daemon",
-  "version": "0.6.88",
+  "version": "0.6.89",
   "type": "module",
   "description": "crew daemon — 运行在用户机器:拉起/管理 agent 进程,注入 crew CLI,归一化 runtime 事件",
   "license": "Apache-2.0",
@@ -16,6 +16,14 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "daemon": "pnpm --filter @nowcrew/cli build && tsx src/main.ts",
+    "build": "tsc -p tsconfig.json",
+    "codex-home:migrate": "tsx src/runtimes/codex-home-migration-cli.ts",
+    "prepublishOnly": "pnpm build && node ../scripts/daemon-release-artifact.mjs --strict-registry",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  },
   "dependencies": {
     "@agentclientprotocol/sdk": "1.2.1",
     "@nowcrew/cli": "0.4.16",
@@ -36,12 +44,5 @@
     "tsx": "^4.19.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0"
-  },
-  "scripts": {
-    "daemon": "pnpm --filter @nowcrew/cli build && tsx src/main.ts",
-    "build": "tsc -p tsconfig.json",
-    "codex-home:migrate": "tsx src/runtimes/codex-home-migration-cli.ts",
-    "test": "vitest run",
-    "typecheck": "tsc --noEmit"
   }
-}
+}