@nowcrew/daemon 0.6.91-beta.3 → 0.6.91-beta.4

package/dist/daemon-update-controller.js

@@ -1,3 +1,4 @@
+import { dslog } from "./slog.js";
 import { z } from "zod";
 import { isDaemonReleaseVersion } from "./daemon-release-version.js";
 const DaemonUpdateMessageSchema = z.object({
@@ -42,15 +43,16 @@ export function createDaemonUpdateController(deps) {
             failed(message.updateId, preparation.errorCode);
             return;
         }
-        let released = false;
-        const releaseOnce = async () => {
-            if (released)
-                return;
-            released = true;
-            await preparation.release();
+        let releaseTask;
+        const releaseOnce = () => {
+            releaseTask ??= preparation.release().catch(error => {
+                releaseTask = undefined;
+                throw error;
+            });
+            return releaseTask;
         };
-        deps.sendStatus({ type: "daemon:update-status", updateId: message.updateId, status: "restarting" });
         try {
+            deps.sendStatus({ type: "daemon:update-status", updateId: message.updateId, status: "restarting" });
             const handoff = deps.scheduleRestart(eligibility.serviceSpec);
             const state = {
                 release: releaseOnce,
@@ -92,7 +94,13 @@ export function createDaemonUpdateController(deps) {
                     failed(message.updateId, "update_in_progress");
                 return true;
             }
-            const done = execute(message).finally(() => {
+            const done = execute(message).catch(error => {
+                dslog("daemon.update_failed", "Daemon 更新或重启准备失败", {
+                    level: "ERROR", update_id: message.updateId, operation: message.type,
+                    error_message: error instanceof Error ? error.message : String(error),
+                });
+                failed(message.updateId, message.type === "daemon:restart" ? "restart_failed" : "install_failed");
+            }).finally(() => {
                 handled.add(message.updateId);
                 if (running?.id === message.updateId)
                     running = null;

package/dist/daemon-updater.js

@@ -1,3 +1,4 @@
+import { dslog } from "./slog.js";
 import { readFile } from "node:fs/promises";
 import { resolve } from "node:path";
 import { systemCommandRunner } from "./computer-service.js";
@@ -17,6 +18,8 @@ export async function prepareDaemonRestart(input) {
     const local = input.localSlots.tryAcquireExclusive();
     if (local === null)
         return { ok: false, errorCode: "runtime_busy" };
+    const acquiredAt = Date.now();
+    dslog("daemon.maintenance_barrier_acquired", "Daemon 已暂停接收执行，准备维护");
     let released = false;
     return {
         ok: true,
@@ -25,6 +28,7 @@ export async function prepareDaemonRestart(input) {
                 return;
             released = true;
             local.release();
+            dslog("daemon.maintenance_barrier_released", "维护屏障已释放", { held_ms: Date.now() - acquiredAt });
         },
     };
 }
@@ -67,16 +71,10 @@ export async function installExactDaemonUpdate(input) {
         || installation.npmPrefix !== input.npmPrefix) {
         return { ok: false, errorCode: "ineligible" };
     }
-    const local = input.localSlots.tryAcquireExclusive();
-    if (local === null)
-        return { ok: false, errorCode: "runtime_busy" };
-    let released = false;
-    const release = async () => {
-        if (released)
-            return;
-        released = true;
-        local.release();
-    };
+    const barrier = await prepareDaemonRestart(input);
+    if (!barrier.ok)
+        return barrier;
+    const release = barrier.release;
     const lockedInstallation = daemonGlobalInstallation(input.currentEntryPath ?? process.argv[1] ?? "", input.platform ?? process.platform);
     if (lockedInstallation === null
         || lockedInstallation.packageRoot !== input.packageRoot

package/dist/execution-journal.js

@@ -8,7 +8,7 @@ import { provePosixProcessGroupStopped } from "./execution-posix-stop-proof.js";
 export { JournalLockedError, JournalLockCorruptionError } from "./execution-journal-lock.js";
 const ExecutionIdSchema = z.string().uuid();
 const TimestampSchema = z.string().datetime({ offset: true });
-const RuntimeSchema = z.enum(["claude", "codex", "kimi", "hermes", "opencode", "deepseek-harness"]);
+const RuntimeSchema = z.enum(["claude", "codex", "kimi", "hermes", "opencode", "deepseek-harness", "memory_migration"]);
 const RUNTIME_READY_SUFFIX = ".runtime-ready";
 const RawJournalEntrySchema = z.object({
     executionId: ExecutionIdSchema,
@@ -523,6 +523,8 @@ export function createExecutionJournal(agentsRoot, options = {}) {
         }
     };
     const pruneInternal = async () => {
+        if (options.retainCompleted)
+            return;
         const protectedExecutionIds = new Set(options.protectedExecutionIds?.() ?? []);
         const entries = await readAll();
         const acknowledged = entries

package/dist/execution-protocol.js

@@ -319,7 +319,7 @@ const RawExecutionCompletedSchema = z.object({
     providerErrorCategory: ProviderErrorCategorySchema.optional(),
     providerHttpStatus: ProviderHttpStatusSchema.optional(),
     providerErrorCode: ProviderErrorCodeSchema.optional(),
-    runtime: RuntimeSchema,
+    runtime: z.union([RuntimeSchema, z.literal("memory_migration")]),
     model: z.string().optional(),
     resumed: z.boolean(),
     finalText: z.string().optional(),

package/dist/execution-runner.js

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import { dirname, join, resolve } from "node:path";
 import { isLocalMemoryV2Enabled, localMemoryV2Environment, resolveReposRoot } from "./config.js";
+import { detectLocalMemoryStorageVersion } from "./local-memory/storage-format.js";
 import { DaemonToServerExecutionFrameSchema, ExecutionCompletedSchema, ExecutionRejectedSchema, ExecutionStartSchema, } from "./execution-protocol.js";
 import { JournalConflictError } from "./execution-journal.js";
 import { boundExecutionFrame } from "./execution-event-limit.js";
@@ -837,8 +838,9 @@ export async function runExecution(config, input, dependencies) {
         const localMemoryGuardInBase = localMemoryV2Environment(config.serverUrl) === "custom";
         const boundedSystemPrompt = (context) => {
             const enabled = context.workspace.localMemoryV2Enabled ?? localMemoryV2Enabled;
-            const systemPromptWithLocalFacts = withLocalExecutionFacts(`${spec.instructions.systemPrompt}${enabled && localMemoryGuardInBase ? renderLocalMemoryV2WriteGuard() : ""}`, baseSystemPromptBudget, {
+            const systemPromptWithLocalFacts = withLocalExecutionFacts(`${spec.instructions.systemPrompt}${enabled && localMemoryGuardInBase && detectLocalMemoryStorageVersion(context.workspace.memory) !== 2 ? renderLocalMemoryV2WriteGuard() : ""}`, baseSystemPromptBudget, {
                 ...(selfTraining ? { isolateLocalMemory: true } : {}),
+                memoryQuery: spec.instructions.wakePrompt,
                 collaborationTools: config.codexCollaborationTools && spec.runtime.name === "codex",
             });
             const base = typeof systemPromptWithLocalFacts === "string"

package/dist/host-execution-coordinator.js

@@ -286,13 +286,19 @@ export function createHostExecutionCoordinator(options = {}) {
                 ...Array.from({ length: executionSlots }, (_, slot) => join(root, "slots", String(slot))),
                 join(root, "memory-prune-slots", "0"),
             ];
-            for (const target of targets) {
-                const lease = await acquireLease(target);
-                if (lease === null) {
-                    await retryRelease("exclusive_execution_partial", () => Promise.all(leases.map((owned) => owned.close())).then(() => undefined));
-                    return null;
+            try {
+                for (const target of targets) {
+                    const lease = await acquireLease(target);
+                    if (lease === null) {
+                        await retryRelease("exclusive_execution_partial", () => Promise.all(leases.map((owned) => owned.close())).then(() => undefined));
+                        return null;
+                    }
+                    leases.push(lease);
                 }
-                leases.push(lease);
+            }
+            catch (error) {
+                await retryRelease("exclusive_execution_partial", () => Promise.all(leases.map(owned => owned.close())).then(() => undefined));
+                throw error;
             }
             let releasePromise = null;
             return {

package/dist/local-execution-prompt.js

@@ -2,8 +2,9 @@
  * 本机执行提示词的合成与预算裁剪。
  *
  * server 提示词是权威部分,绝不裁剪;项目工作区提示词是绑定执行的强制部分,放不下就直接失败;
- * 只有本机事实(CREW_HOME / work-log / MEMORY 注入)是可选增强,按整段丢弃或按字节截断。
+ * 本机事实与旧格式预览可按预算省略；schema2身份和置顶规则必须保留，放不下则拒绝执行。
  */
+import { detectLocalMemoryStorageVersion } from "./local-memory/storage-format.js";
 import { buildCollaborationToolsPrompt, buildRuntimeWorkspacePrompt, capMemoryForInject, capWorkLogForInject, } from "./prompt.js";
 const trainingProjectJson = (project) => JSON.stringify({
     repositoryKey: project.repositoryKey,
@@ -57,10 +58,14 @@ export function withLocalExecutionFacts(serverPrompt, maxBytes, options = {}) {
         }
         const remaining = maxBytes - requiredBytes - Math.max(0, reservedPromptBytes);
         const factsBytes = Buffer.byteLength(localFacts, "utf8");
-        if (factsBytes > remaining)
+        if (factsBytes > remaining) {
+            if (!options.isolateLocalMemory && detectLocalMemoryStorageVersion(workspace.memory) === 2) {
+                throw new Error("local_memory_identity_budget_exceeded");
+            }
             return `${serverPrompt}${collaborationPrompt}${mandatoryWorkspacePrompt}`;
+        }
         const memoryHeading = "\n\n## Injected MEMORY.md (bounded local context)\n";
-        const memory = options.isolateLocalMemory ? "" : capMemoryForInject(workspace.memory, undefined, remaining - factsBytes - Buffer.byteLength(memoryHeading, "utf8"));
+        const memory = options.isolateLocalMemory ? "" : capMemoryForInject(workspace.memory, undefined, remaining - factsBytes - Buffer.byteLength(memoryHeading, "utf8"), options.memoryQuery);
         const memorySection = memory === "" ? "" : memoryHeading + memory;
         const workLogSection = workLog === "" ? "" : `\n\n## Injected work-log (bounded local context)\n${workLog}`;
         const workLogBudget = remaining - factsBytes - Buffer.byteLength(memorySection, "utf8");

package/dist/local-executor.js

@@ -6,7 +6,7 @@ import { createInterface } from "node:readline";
 import { readFile, rm, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import { cleanupSelfTrainingRunDir } from "./self-training-workspace.js";
-import { prepareWorkspace, rotateAgentSession, safeKey, } from "./workspace.js";
+import { rotateAgentSession, safeKey, } from "./workspace.js";
 import { CLAUDE_ADDITIONAL_DIRECTORY_INSTRUCTIONS_ENV, isClaudeAdditionalDirectoryInstructionsSupported, probeClaudeVersion, spawnClaude, } from "./runtimes/claude.js";
 import { spawnCodex } from "./runtimes/codex.js";
 import { DEEPSEEK_CODEX_MODEL, DEEPSEEK_CODEX_REASONING_LEVELS, materializeDeepSeekCodexHome, } from "./runtimes/codex-deepseek-config.js";
@@ -42,10 +42,12 @@ import { createLocalMemoryTelemetry, logLocalMemoryContextPrepareFailure, logLoc
 import { CodexStartupStageParser } from "./codex-startup-stage.js";
 import { formatRuntimeStartupError } from "./runtime-startup-error.js";
 import { logRuntimeEnvironmentContract } from "./runtime-environment-telemetry.js";
-import { commitLocalMemoryResultAfterExit, initializeLocalMemoryV2ForWorkspace, isLocalMemoryV2Eligible, localMemoryResultPath as makeLocalMemoryResultPath, } from "./local-memory/runtime.js";
+import { commitLocalMemoryResultAfterExit, isLocalMemoryV2Eligible, localMemoryResultPath as makeLocalMemoryResultPath, } from "./local-memory/runtime.js";
 import { prepareLocalMemoryPrompt } from "./local-memory/prompt.js";
-import { reportLocalMemoryV2Deferred, resolveLocalMemoryV2Rollout } from "./local-memory/rollout.js";
+import { reportLocalMemoryV2Deferred } from "./local-memory/rollout.js";
+import { prepareExecutionMemoryWorkspace } from "./local-memory/execution-workspace.js";
 import { localMemoryV2Environment } from "./config.js";
+import { detectLocalMemoryStorageVersion } from "./local-memory/storage-format.js";
 export class RuntimeRunningCallbackTimeoutError extends Error {
     constructor(runtime, timeoutMs) {
         super(`${runtime} runtime-running callback timed out after ${timeoutMs}ms`);
@@ -211,37 +213,11 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             : "high"
         : runtime.reasoning;
     const providerFp = providerFingerprint(runtime.name, providerConfig);
-    let workspace;
-    try {
-        workspace = await awaitWithCancellation(prepareWorkspace({
-            agentsRoot: input.launch.agentsRoot,
-            handle: input.handle,
-            cliPath: input.launch.cliPath,
-            executionId: input.executionId,
-            ...(input.keyMode === undefined ? {} : { keyMode: input.keyMode }),
-            ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
-            ...(input.resumeKey === undefined ? {} : { resumeKey: input.resumeKey }),
-            ...(input.sessionContextFingerprint === undefined
-                ? {}
-                : { sessionContextFingerprint: input.sessionContextFingerprint }),
-            ...(input.launch.description ? { description: input.launch.description } : {}),
-            ...(isolatedMaintenance ? { skipLocalMemory: true } : {}),
-        }), dependencies.cancellation);
-    }
-    catch (error) {
-        logLocalMemoryContextPrepareFailure({
-            executionId: input.executionId,
-            agentHandle: input.handle,
-            ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
-        }, "workspace_prepare", error);
-        throw error;
-    }
-    const memoryRollout = await resolveLocalMemoryV2Rollout({ workspace, handle: input.handle,
-        serverUrl: input.launch.serverUrl, requested: input.localMemoryV2Enabled === true,
-        selfTraining: isolatedMaintenance, ...(input.launch.description ? { description: input.launch.description } : {}) });
-    workspace = { ...workspace, localMemoryV2Enabled: memoryRollout.enabled };
+    const preparedMemory = await prepareExecutionMemoryWorkspace(input, isolatedMaintenance, dependencies.cancellation);
+    let workspace = preparedMemory.workspace;
+    const memoryRollout = preparedMemory.mode;
     input = { ...input, localMemoryV2Enabled: memoryRollout.enabled };
-    const localMemoryV2Initialized = await initializeLocalMemoryV2ForWorkspace(workspace, memoryRollout.enabled);
+    const localMemoryV2Initialized = preparedMemory.initialized;
     let materialized = null;
     let knownAttachmentDirectory = null;
     const startupReservationState = { current: null };
@@ -391,7 +367,7 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
         let baseWakePrompt = `${resolvePrompt(input.wakePrompt, promptContext)}${attachmentPlan.promptSuffix}`;
         memoryPruneTraceId = isolatedMaintenance ? null : parseMemoryPruneTraceId(baseWakePrompt);
         if (memoryRollout.deferred)
-            reportLocalMemoryV2Deferred(input.executionId, input.handle, memoryPruneTraceId !== null || input.maintenancePurpose === "memory_prune");
+            reportLocalMemoryV2Deferred(input.executionId, input.handle, memoryPruneTraceId !== null || input.maintenancePurpose === "memory_prune", memoryRollout.legacyFallback);
         if (memoryPruneTraceId !== null) {
             executionWorkspace = await resolveMemoryPruneWorkLog(executionWorkspace, input);
             promptContext = { ...promptContext, workspace: executionWorkspace };
@@ -411,8 +387,11 @@ async function executeLocalUnlocked(input, callbacks, dependencies) {
             agentDir: executionWorkspace.dir, executionId: input.executionId, agentHandle: input.handle,
             enabled: input.localMemoryV2Enabled === true, query: baseWakePrompt,
             resultPath: localMemoryResultPath, maxBytes: input.maxSystemPromptBytes,
-            strictRollout: !isolatedMaintenance && localMemoryV2Environment(input.launch.serverUrl) === "dev",
+            storageVersion: detectLocalMemoryStorageVersion(executionWorkspace.memory),
+            strictRollout: !isolatedMaintenance && !memoryRollout.legacyFallback && (localMemoryV2Environment(input.launch.serverUrl) === "dev"
+                || detectLocalMemoryStorageVersion(executionWorkspace.memory) === 2),
             deferred: memoryRollout.deferred,
+            ...(memoryRollout.legacyFallback ? { legacyFallback: true } : {}),
             renderBase: (reservedPromptBytes) => resolvePrompt(input.systemPrompt, { ...promptContext, reservedPromptBytes }),
         });
         localMemoryResultPath = memoryPrompt.resultPath;

package/dist/local-memory/execution-workspace.js

@@ -0,0 +1,36 @@
+import { prepareWorkspace } from "../workspace.js";
+import { awaitWithCancellation } from "../runtime-cancellation.js";
+import { logLocalMemoryContextPrepareFailure } from "../local-memory-telemetry.js";
+import { resolveLocalMemoryV2Rollout } from "./rollout.js";
+import { initializeLocalMemoryV2ForWorkspace } from "./runtime.js";
+import { withMemoryAccess } from "./migration-access.js";
+import { join } from "node:path";
+export async function prepareExecutionMemoryWorkspace(input, isolated, cancellation) {
+    try {
+        const prepare = async (context) => {
+            const prepared = await prepareWorkspace({
+                agentsRoot: input.launch.agentsRoot, handle: input.handle, cliPath: input.launch.cliPath,
+                executionId: input.executionId,
+                ...(input.keyMode === undefined ? {} : { keyMode: input.keyMode }),
+                ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }),
+                ...(input.resumeKey === undefined ? {} : { resumeKey: input.resumeKey }),
+                ...(input.sessionContextFingerprint === undefined ? {} : { sessionContextFingerprint: input.sessionContextFingerprint }),
+                ...(input.launch.description ? { description: input.launch.description } : {}),
+                ...(isolated ? { skipLocalMemory: true } : {}),
+            });
+            const workspace = context?.created ? { ...prepared, agentHomePreexisted: false } : prepared;
+            const mode = await resolveLocalMemoryV2Rollout({ workspace, handle: input.handle, serverUrl: input.launch.serverUrl,
+                requested: input.localMemoryV2Enabled === true, selfTraining: isolated,
+                ...(input.launch.description ? { description: input.launch.description } : {}) });
+            const initialized = await initializeLocalMemoryV2ForWorkspace(workspace, mode.enabled);
+            return { workspace: { ...workspace, localMemoryV2Enabled: mode.enabled }, mode, initialized };
+        };
+        return await awaitWithCancellation(isolated ? prepare()
+            : withMemoryAccess(join(input.launch.agentsRoot, input.handle), prepare, { create: true }), cancellation);
+    }
+    catch (error) {
+        logLocalMemoryContextPrepareFailure({ executionId: input.executionId, agentHandle: input.handle,
+            ...(input.taskKey === undefined ? {} : { taskKey: input.taskKey }) }, "workspace_prepare", error);
+        throw error;
+    }
+}

package/dist/local-memory/full-index-search.js

@@ -0,0 +1,47 @@
+import { parseFullMemoryIndex, LOCAL_MEMORY_GENERATED_INDEX_PATTERN } from "./storage-format.js";
+const excerpt = (text, size) => Array.from(text).slice(0, size).join("");
+/** 查询完整元数据；只在明确的历史入口返回非有效记录。正文仍按引用和哈希分页读取。 */
+export function searchFullMemoryIndex(memory, sha256, input, outputBytes) {
+    const records = parseFullMemoryIndex(memory);
+    const block = LOCAL_MEMORY_GENERATED_INDEX_PATTERN.exec(memory);
+    const prefix = memory.slice(0, block.index);
+    let line = (prefix.match(/\n/gu) ?? []).length + 1;
+    let offset = Array.from(prefix).length;
+    const positions = new Map();
+    for (const part of block[0].matchAll(/[^\n]*(?:\n|$)/gu)) {
+        const id = /^- id: ([A-Za-z0-9_-]+)\r?\n?$/u.exec(part[0])?.[1];
+        if (id)
+            positions.set(id, { line, offset });
+        line += 1;
+        offset += Array.from(part[0]).length;
+    }
+    const terms = input.query.normalize("NFKC").toLowerCase().split(/\s+/u).filter(Boolean);
+    const candidates = records.filter(entry => {
+        const active = entry.status === "active" || entry.status === "pinned";
+        const content = `${entry.id} ${entry.title} ${entry.summary} ${entry.triggers.join(" ")}`.normalize("NFKC").toLowerCase();
+        return active !== input.history && terms.every(term => content.includes(term));
+    });
+    const matches = [];
+    let bytes = 512, hasMore = false;
+    for (const entry of candidates) {
+        const position = positions.get(entry.id);
+        if (!position)
+            throw new Error("memory_storage_position_invalid");
+        if (position.line <= input.afterLine)
+            continue;
+        const item = { ...position, id: entry.id, status: entry.status, revision: entry.revision,
+            file: entry.file, anchor: entry.anchor, heading: excerpt(entry.title, 96),
+            title: excerpt(entry.title, 120), summary: excerpt(entry.summary, 240), text: excerpt(entry.summary, 240) };
+        const size = Buffer.byteLength(JSON.stringify(item), "utf8") + 1;
+        if (matches.length >= input.limit || bytes + size > outputBytes) {
+            hasMore = true;
+            break;
+        }
+        matches.push(item);
+        bytes += size;
+    }
+    if (hasMore && matches.length === 0)
+        throw new Error("memory_output_too_large");
+    return { file: "MEMORY.md", storageVersion: 2, sha256, matches, matchCount: candidates.length,
+        hasMore, complete: !hasMore, nextAfterLine: hasMore ? matches.at(-1).line : null };
+}

package/dist/local-memory/index-budget.js

@@ -50,14 +50,17 @@ export function selectLocalMemoryIndexEntries(entries, budget, options = {}) {
         .map((entry) => entry.id);
     const protectedIds = options.protectedIds ?? new Set();
     const protectedEntries = projectable.filter((entry) => protectedIds.has(entry.id)).sort(compareEntries);
-    const candidates = projectable.filter((entry) => !protectedIds.has(entry.id)).sort(compareEntries);
+    const candidates = projectable.filter((entry) => !protectedIds.has(entry.id)).sort((left, right) => (options.relevance?.(right) ?? 0) - (options.relevance?.(left) ?? 0) || compareEntries(left, right));
     const selected = [];
     let renderedLength = 0;
+    let renderedBytes = 0;
     for (const entry of protectedEntries) {
         selected.push(entry);
         renderedLength += cardLength(entry, selected.length > 1);
+        renderedBytes += Buffer.byteLength(renderLocalMemoryIndexCard(entry), "utf8") + (selected.length > 1 ? 1 : 0);
     }
-    if (selected.length > budget.entryCap || renderedLength > budget.indexCodePointCap) {
+    if (selected.length > budget.entryCap || renderedLength > budget.indexCodePointCap
+        || renderedBytes > (budget.indexByteCap ?? Infinity)) {
         return {
             entries: selected,
             omittedIds: [...omittedIds, ...candidates.map((entry) => entry.id)],
@@ -65,12 +68,15 @@ export function selectLocalMemoryIndexEntries(entries, budget, options = {}) {
         };
     }
     for (const entry of candidates) {
-        if (selected.length >= budget.entryCap || renderedLength + cardLength(entry, selected.length > 0) > budget.indexCodePointCap) {
+        const bytes = Buffer.byteLength(renderLocalMemoryIndexCard(entry), "utf8") + (selected.length > 0 ? 1 : 0);
+        if (selected.length >= budget.entryCap || renderedLength + cardLength(entry, selected.length > 0) > budget.indexCodePointCap
+            || renderedBytes + bytes > (budget.indexByteCap ?? Infinity)) {
             omittedIds.push(entry.id);
             continue;
         }
         selected.push(entry);
         renderedLength += cardLength(entry, selected.length > 1);
+        renderedBytes += bytes;
     }
     return {
         entries: selected,

package/dist/local-memory/migration-access.js

@@ -0,0 +1,118 @@
+import { lstat, mkdir, open, readFile, realpath } from "node:fs/promises";
+import { join } from "node:path";
+import { z } from "zod";
+import { createJournalLease, createJournalLeaseRegistry, JournalLockedError } from "../execution-journal-lock.js";
+import { defaultProcessController } from "../execution-journal.js";
+import { createHash } from "node:crypto";
+import { MigrationStateSchema } from "./migration-schema.js";
+import { detectLocalMemoryStorageVersion, parseFullMemoryIndex } from "./storage-format.js";
+import { readMemoryInventorySource, inventoryLimits } from "./inventory-source.js";
+const StateGate = z.object({
+    schemaVersion: z.literal(1), migrationId: z.string().min(1),
+    phase: z.enum(["prepared", "applying", "committed", "rolled_back", "repair_required"]),
+}).passthrough();
+async function checkedDirectory(parent, name) {
+    const directory = join(parent, name);
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    const stat = await lstat(directory);
+    if (!stat.isDirectory() || stat.isSymbolicLink() || await realpath(directory) !== directory) {
+        throw new Error("memory_migration_path_invalid");
+    }
+    return directory;
+}
+export async function assertMemoryAccessAllowed(agentDir) {
+    let state = null;
+    try {
+        const source = await readMemoryInventorySource(agentDir, ".crew/memory/migration.v1.json", inventoryLimits.fileBytes);
+        state = StateGate.parse(JSON.parse(source.content));
+        if (state.phase === "applying" || state.phase === "repair_required")
+            throw new Error("memory_migration_in_progress");
+    }
+    catch (error) {
+        if (error instanceof Error && error.message === "memory_migration_in_progress")
+            throw error;
+        if (error.code !== "ENOENT")
+            throw new Error("memory_migration_state_invalid");
+    }
+    let source;
+    try {
+        source = await readMemoryInventorySource(agentDir, "MEMORY.md", inventoryLimits.fileBytes);
+    }
+    catch (error) {
+        if (error.code === "ENOENT" && state === null)
+            return;
+        if (error instanceof Error && error.message === "read_limit_exceeded")
+            throw new Error("memory_file_too_large");
+        throw error;
+    }
+    const version = detectLocalMemoryStorageVersion(source.content);
+    if (version === 2 || state?.phase === "committed") {
+        if (!state)
+            throw new Error("memory_migration_state_missing");
+        const verified = MigrationStateSchema.parse(state);
+        if (verified.phase !== "committed" || verified.storageVersion !== 2 || version !== 2
+            || verified.identity.rootFingerprint !== createHash("sha256").update(await realpath(agentDir)).digest("hex")) {
+            throw new Error("memory_migration_state_invalid");
+        }
+        parseFullMemoryIndex(source.content);
+    }
+}
+/** 复用现有进程身份锁；仅保护一次本地IO，不持锁等待模型，避免子CLI自锁。 */
+export async function withMemoryAccess(agentDir, operation, options = {}) {
+    let created = false;
+    if (options.create) {
+        created = await lstat(agentDir).then(() => false, (e) => { if (e.code === "ENOENT")
+            return true; throw e; });
+        await mkdir(agentDir, { recursive: true, mode: 0o700 });
+    }
+    const root = await realpath(agentDir);
+    if ((await lstat(agentDir)).isSymbolicLink())
+        throw new Error("memory_migration_path_invalid");
+    const crew = await checkedDirectory(root, ".crew");
+    const memory = await checkedDirectory(crew, "memory");
+    const directory = await checkedDirectory(memory, "access.lock");
+    const lease = createJournalLease({ directory, currentPid: process.pid,
+        captureCurrentIdentity: async () => {
+            const identity = await defaultProcessController.inspectIdentity(process.pid);
+            if (!identity)
+                throw new Error("memory_migration_process_unknown");
+            return identity;
+        },
+        inspectIdentity: pid => defaultProcessController.inspectIdentity(pid),
+        registry: createJournalLeaseRegistry(),
+        syncDirectory: async (path) => {
+            if (process.platform === "win32")
+                return;
+            const handle = await open(path, "r");
+            try {
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+        },
+    });
+    const deadline = Date.now() + (options.waitMs ?? 2000);
+    for (;;) {
+        try {
+            await lease.acquire();
+            break;
+        }
+        catch (error) {
+            if (!(error instanceof JournalLockedError))
+                throw error;
+            if (Date.now() >= deadline)
+                throw new Error("memory_migration_access_busy");
+            await new Promise(resolve => setTimeout(resolve, 25));
+        }
+    }
+    try {
+        if (!options.maintenance)
+            await assertMemoryAccessAllowed(root);
+        lease.assertUsable();
+        return await operation({ created });
+    }
+    finally {
+        await lease.close();
+    }
+}

package/dist/local-memory/migration-cli.js

@@ -0,0 +1,54 @@
+import { isAbsolute, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { z } from 'zod';
+import { applyMemoryMigration, prepareMemoryMigration, recoverMemoryMigration, statusMemoryMigration } from './migration-store.js';
+import { MigrationError, MigrationHistorySchema, MigrationIdentitySchema, MigrationIntentReceiptSchema, MigrationProcessStoppedReceiptSchema, MigrationRecordMappingSchema } from './migration-schema.js';
+const base = z.object({ agentDir: z.string().refine(isAbsolute), identity: MigrationIdentitySchema });
+export const MigrationCommandSchema = z.discriminatedUnion('command', [
+    base.extend({ command: z.literal('prepare'), serverHistory: MigrationHistorySchema, recordMappings: z.array(MigrationRecordMappingSchema).max(10000).optional() }).strict(),
+    base.extend({ command: z.literal('status') }).strict(),
+    base.extend({ command: z.literal('apply'), intentReceipt: MigrationIntentReceiptSchema }).strict(),
+    base.extend({ command: z.literal('recover'), serverHistory: MigrationHistorySchema.optional(), intentReceipt: MigrationIntentReceiptSchema.optional(), stoppedReceipt: MigrationProcessStoppedReceiptSchema.optional(), cancelled: z.boolean() }).strict(),
+]);
+export function summarizeMemoryMigration(state) {
+    return { migrationId: state?.migrationId ?? null, phase: state?.phase ?? null, storageVersion: state?.storageVersion ?? null, sourceDigest: state?.sourceDigest ?? null, planDigest: state?.planDigest ?? null,
+        issues: state?.issues ?? [], result: state === null ? 'missing' : state.phase === 'repair_required' ? 'repair_required' : 'success' };
+}
+/** The caller owns the execution/maintenance lease. This boundary never accepts or reads credentials. */
+export async function runMemoryMigrationCommand(raw) {
+    let migrationId = null;
+    try {
+        const input = MigrationCommandSchema.parse(raw);
+        migrationId = input.identity.migrationId;
+        const state = input.command === 'prepare' ? await prepareMemoryMigration(input) : input.command === 'apply' ? await applyMemoryMigration(input)
+            : input.command === 'recover' ? await recoverMemoryMigration(input) : await statusMemoryMigration(input);
+        return summarizeMemoryMigration(state);
+    }
+    catch (error) {
+        const reason = error instanceof MigrationError ? error.code : error instanceof z.ZodError ? 'migration_input_invalid' : 'migration_operation_failed';
+        return { ...summarizeMemoryMigration(null), migrationId, result: reason === 'migration_needs_review' ? 'needs_review' : reason.includes('repair_required') ? 'repair_required' : 'failed',
+            issues: error instanceof MigrationError && error.issues.length ? error.issues : [{ path: '', reason }] };
+    }
+}
+async function main() {
+    try {
+        const chunks = [];
+        let bytes = 0;
+        for await (const chunk of process.stdin) {
+            const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+            bytes += buffer.length;
+            if (bytes > 8 * 1024 * 1024)
+                throw new Error('input_limit');
+            chunks.push(buffer);
+        }
+        const result = await runMemoryMigrationCommand(JSON.parse(Buffer.concat(chunks).toString('utf8')));
+        process.stdout.write(`${JSON.stringify(result)}\n`);
+        process.exitCode = result.result === 'success' || result.result === 'missing' ? 0 : 1;
+    }
+    catch {
+        process.stdout.write(`${JSON.stringify({ ...summarizeMemoryMigration(null), result: 'failed', issues: [{ path: '', reason: 'migration_input_invalid' }] })}\n`);
+        process.exitCode = 1;
+    }
+}
+if (process.argv[1] && resolve(process.argv[1]) === fileURLToPath(import.meta.url))
+    void main();