@nowcrew/daemon 0.6.97-beta.9 → 0.6.98-beta.1

package/README.md

@@ -413,6 +413,13 @@ discovery is unchanged: Claude may still load `~/.claude/skills`, and Codex may
 and `~/.agents/skills`. The DeepSeek Codex variant keeps its Agent-private `.codex-deepseek` Home for
 provider credentials. Project bindings do not hide or rewrite any of those sources.
 
+Both Codex launchers disable host automatic memories and inherit the execution's prepared environment,
+overriding host `core`, default exclusions, `exclude` and `include_only` filters. These are process-local
+settings: authentication, providers and Skills retain the configured Home, and no other environment
+scope is merged. The policy version in Codex's session fingerprint cold-starts older native sessions
+once, then subsequent runs can resume normally. Explicit `shell_environment_policy.set` entries, shell
+startup scripts and Agent notes remain separate configuration; this change does not correct them.
+
 Binding changes reconcile immediately when the Computer is online. On reconnect the server sends the
 complete binding set for every Agent assigned to that Computer, including empty sets that clear stale
 links left by offline unbinds. Every non-empty execution snapshot is also reconciled immediately before

package/dist/automatic-service-migration.js

@@ -3,6 +3,8 @@ import { posix, win32 } from "node:path";
 import { buildServiceSpec, serviceStatus, windowsCommandArg, } from "./computer-service.js";
 import { daemonGlobalInstallation } from "./daemon-installation.js";
 import { inspectLegacyServiceInstallationDetails } from "./legacy-service-installation.js";
+import { powershellCommandArgs } from "./powershell-command.js";
+import { windowsTaskPrincipalFields, windowsTaskPrincipalMatches, windowsTaskPrincipalScript, } from "./windows-task-principal.js";
 function encoded(value) {
     return Buffer.from(value, "utf16le").toString("base64");
 }
@@ -142,12 +144,11 @@ async function discoverWindows(input, identity) {
         "$n=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($args[0]));",
         "$tasks=@(Get-ScheduledTask -ErrorAction Stop|Where-Object{$_.TaskPath -eq '\\' -and $_.TaskName -ceq $n});",
         "if($tasks.Count -ne 1){[pscustomobject]@{count=$tasks.Count}|ConvertTo-Json -Compress;exit 0};",
-        "$task=$tasks[0];$actions=@($task.Actions);$me=[Security.Principal.WindowsIdentity]::GetCurrent().Name;",
-        "[pscustomobject]@{count=1;state=[int]$task.State;actionCount=$actions.Count;execute=if($actions.Count -eq 1){$actions[0].Execute}else{$null};arguments=if($actions.Count -eq 1){$actions[0].Arguments}else{$null};principalMatches=([String]::Equals($task.Principal.UserId,$me,[StringComparison]::OrdinalIgnoreCase)-and [int]$task.Principal.LogonType -eq 3 -and [int]$task.Principal.RunLevel -eq 0)}|ConvertTo-Json -Compress;",
+        "$task=$tasks[0];$actions=@($task.Actions);",
+        windowsTaskPrincipalScript,
+        `[pscustomobject]@{count=1;state=[int]$task.State;actionCount=$actions.Count;execute=if($actions.Count -eq 1){$actions[0].Execute}else{$null};arguments=if($actions.Count -eq 1){$actions[0].Arguments}else{$null};${windowsTaskPrincipalFields}}|ConvertTo-Json -Compress;`,
     ].join("");
-    const result = await input.runner("powershell.exe", [
-        "-NoProfile", "-NonInteractive", "-Command", script, encoded(identity.id),
-    ]);
+    const result = await input.runner("powershell.exe", powershellCommandArgs(script, [encoded(identity.id)]));
     if (result.exitCode !== 0) {
         throw new Error(`Unable to inspect legacy scheduled task: ${result.stderr.trim() || `exit ${result.exitCode}`}`);
     }
@@ -165,7 +166,7 @@ async function discoverWindows(input, identity) {
         : null;
     if (definition.count !== 1
         || definition.actionCount !== 1
-        || definition.principalMatches !== true
+        || !windowsTaskPrincipalMatches(definition)
         || !win32.isAbsolute(definition.execute ?? "")
         || match === null
         || match[2] !== input.desired.profile

package/dist/computer-service.js

@@ -6,7 +6,9 @@ import { promisify } from "node:util";
 import { dirname, resolve } from "node:path";
 import { normalizeDaemonNpmRegistry } from "./npm-registry.js";
 import { daemonRegistryCandidates } from "./daemon-registry.js";
+import { windowsTaskPrincipalFields, windowsTaskPrincipalMatches, windowsTaskPrincipalScript, } from "./windows-task-principal.js";
 import { npmInvocation } from "./npm-command.js";
+import { powershellCommandArgs } from "./powershell-command.js";
 const execFileAsync = promisify(execFile);
 const WINDOWS_STOP_TIMEOUT_MS = 5_000;
 const WINDOWS_STOP_POLL_MS = 100;
@@ -195,12 +197,11 @@ async function windowsTaskDefinitionMatches(spec, runner) {
         "$n=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($args[0]));",
         "$tasks=@(Get-ScheduledTask -ErrorAction Stop|Where-Object{$_.TaskPath -eq '\\' -and $_.TaskName -ceq $n});",
         "if($tasks.Count -ne 1){[pscustomobject]@{count=$tasks.Count}|ConvertTo-Json -Compress;exit 0};",
-        "$task=$tasks[0];$actions=@($task.Actions);$me=[Security.Principal.WindowsIdentity]::GetCurrent().Name;",
-        "[pscustomobject]@{count=1;actionCount=$actions.Count;execute=if($actions.Count -eq 1){$actions[0].Execute}else{$null};arguments=if($actions.Count -eq 1){$actions[0].Arguments}else{$null};principalMatches=([String]::Equals($task.Principal.UserId,$me,[StringComparison]::OrdinalIgnoreCase)-and [int]$task.Principal.LogonType -eq 3 -and [int]$task.Principal.RunLevel -eq 0)}|ConvertTo-Json -Compress;",
+        "$task=$tasks[0];$actions=@($task.Actions);",
+        windowsTaskPrincipalScript,
+        `[pscustomobject]@{count=1;actionCount=$actions.Count;execute=if($actions.Count -eq 1){$actions[0].Execute}else{$null};arguments=if($actions.Count -eq 1){$actions[0].Arguments}else{$null};${windowsTaskPrincipalFields}}|ConvertTo-Json -Compress;`,
     ].join("");
-    const result = await runner("powershell.exe", [
-        "-NoProfile", "-NonInteractive", "-Command", script, encodedName,
-    ]);
+    const result = await runner("powershell.exe", powershellCommandArgs(script, [encodedName]));
     if (result.exitCode !== 0) {
         throw new Error(`Unable to inspect scheduled task definition: ${result.stderr.trim() || `exit ${result.exitCode}`}`);
     }
@@ -214,7 +215,7 @@ async function windowsTaskDefinitionMatches(spec, runner) {
     const expectedArguments = spec.daemonCommand.slice(1).map(windowsCommandArg).join(" ");
     return definition.count === 1
         && definition.actionCount === 1
-        && definition.principalMatches === true
+        && windowsTaskPrincipalMatches(definition)
         && sameWindowsPath(definition.execute, spec.daemonCommand[0])
         && definition.arguments === expectedArguments;
 }
@@ -226,9 +227,7 @@ async function windowsTaskState(spec, runner) {
         "$tasks=@(Get-ScheduledTask -ErrorAction Stop|Where-Object{$_.TaskPath -eq '\\' -and $_.TaskName -ceq $n});",
         "if($tasks.Count -eq 0){'missing'}elseif($tasks.Count -eq 1){'state:'+([int]$tasks[0].State)}else{throw 'duplicate scheduled tasks'}",
     ].join("");
-    const result = await runner("powershell.exe", [
-        "-NoProfile", "-NonInteractive", "-Command", script, encodedName,
-    ]);
+    const result = await runner("powershell.exe", powershellCommandArgs(script, [encodedName]));
     if (result.exitCode !== 0) {
         throw new Error(`Unable to query scheduled task: ${result.stderr.trim() || `exit ${result.exitCode}`}`);
     }
@@ -279,10 +278,9 @@ export async function installService(spec, runner = systemCommandRunner) {
             "$principal=New-ScheduledTaskPrincipal -UserId $identity -LogonType Interactive -RunLevel Limited;",
             "Register-ScheduledTask -TaskName $name -TaskPath '\\' -Action $action -Trigger $trigger -Settings $settings -Principal $principal -ErrorAction Stop|Out-Null;",
         ].join("");
-        await checked(runner, "powershell.exe", [
-            "-NoProfile", "-NonInteractive", "-Command", script,
+        await checked(runner, "powershell.exe", powershellCommandArgs(script, [
             encodedName, encodedExecutable, encodedArguments,
-        ], "Scheduled task installation");
+        ]), "Scheduled task installation");
         return;
     }
     if (spec.descriptorPath === null || spec.descriptor === null)
@@ -418,6 +416,33 @@ export async function serviceAction(spec, action, runner = systemCommandRunner)
     }
 }
 const systemDetachedSpawn = (command, args, options) => spawn(command, [...args], options);
+function windowsRestartCommandArgs(spec) {
+    if (!spec.runtimeProcessIdentity)
+        throw new Error("Windows daemon process identity is required for restart");
+    const encodedName = Buffer.from(spec.id, "utf16le").toString("base64");
+    const encodedExecutable = Buffer.from(spec.daemonCommand[0], "utf16le").toString("base64");
+    const encodedArguments = Buffer.from(spec.daemonCommand.slice(1).map(windowsCommandArg).join(" "), "utf16le").toString("base64");
+    const script = [
+        "$ErrorActionPreference='Stop';",
+        "$n=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($args[1]));",
+        "$exe=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($args[2]));",
+        "$argv=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($args[3]));",
+        "$task=@(Get-ScheduledTask -ErrorAction Stop|Where-Object{$_.TaskPath -eq '\\' -and $_.TaskName -ceq $n});if($task.Count -ne 1){throw 'scheduled task identity changed'};",
+        "$actions=@($task[0].Actions);if($actions.Count -ne 1 -or -not [String]::Equals($actions[0].Execute,$exe,[StringComparison]::OrdinalIgnoreCase) -or $actions[0].Arguments -cne $argv){throw 'scheduled task action changed'};",
+        "$p=Get-Process -Id ([int]$args[0]) -ErrorAction Stop;",
+        "if($p.StartTime.ToUniversalTime().ToFileTimeUtc().ToString() -cne $args[4]){throw 'daemon process identity changed'};",
+        "$p.Kill();",
+        "if(-not $p.WaitForExit(10000)){throw 'daemon exit timeout'};",
+        "$deadline=[DateTime]::UtcNow.AddSeconds(10);",
+        "do{$task=@(Get-ScheduledTask -ErrorAction Stop|Where-Object{$_.TaskPath -eq '\\' -and $_.TaskName -ceq $n});if($task.Count -ne 1){throw 'scheduled task identity changed'};if([int]$task[0].State -ne 4){break};Start-Sleep -Milliseconds 100}while([DateTime]::UtcNow -lt $deadline);",
+        "if([int]$task[0].State -eq 4){throw 'scheduled task stop timeout'};",
+        "$actions=@($task[0].Actions);if($actions.Count -ne 1 -or -not [String]::Equals($actions[0].Execute,$exe,[StringComparison]::OrdinalIgnoreCase) -or $actions[0].Arguments -cne $argv){throw 'scheduled task action changed'};",
+        "& schtasks.exe /Run /TN $n | Out-Null;if($LASTEXITCODE -ne 0){throw 'scheduled task start failed'};",
+    ].join("");
+    return powershellCommandArgs(script, [
+        String(process.pid), encodedName, encodedExecutable, encodedArguments, spec.runtimeProcessIdentity,
+    ]);
+}
 const RESTART_HELPER_SOURCE = String.raw `
 const { spawnSync } = require("node:child_process");
 const spec = JSON.parse(process.argv[1]);
@@ -428,27 +453,7 @@ setTimeout(() => {
   } else if (spec.platform === "linux") {
     restarted = spawnSync("systemctl", ["--user", "--no-block", "restart", spec.id], { stdio: "ignore", shell: false });
   } else {
-    const encodedName = Buffer.from(spec.id, "utf16le").toString("base64");
-    const encodedExecutable = Buffer.from(spec.executable, "utf16le").toString("base64");
-    const encodedArguments = Buffer.from(spec.arguments, "utf16le").toString("base64");
-    const script = [
-      "$ErrorActionPreference='Stop';",
-      "$n=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($args[1]));",
-      "$exe=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($args[2]));",
-      "$argv=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($args[3]));",
-      "$task=@(Get-ScheduledTask -ErrorAction Stop|Where-Object{$_.TaskPath -eq '\\' -and $_.TaskName -ceq $n});if($task.Count -ne 1){throw 'scheduled task identity changed'};",
-      "$actions=@($task[0].Actions);if($actions.Count -ne 1 -or -not [String]::Equals($actions[0].Execute,$exe,[StringComparison]::OrdinalIgnoreCase) -or $actions[0].Arguments -cne $argv){throw 'scheduled task action changed'};",
-      "$p=Get-Process -Id ([int]$args[0]) -ErrorAction Stop;",
-      "if($p.StartTime.ToUniversalTime().ToFileTimeUtc().ToString() -cne $args[4]){throw 'daemon process identity changed'};",
-      "$p.Kill();",
-      "if(-not $p.WaitForExit(10000)){throw 'daemon exit timeout'};",
-      "$deadline=[DateTime]::UtcNow.AddSeconds(10);",
-      "do{$task=@(Get-ScheduledTask -ErrorAction Stop|Where-Object{$_.TaskPath -eq '\\' -and $_.TaskName -ceq $n});if($task.Count -ne 1){throw 'scheduled task identity changed'};if([int]$task[0].State -ne 4){break};Start-Sleep -Milliseconds 100}while([DateTime]::UtcNow -lt $deadline);",
-      "if([int]$task[0].State -eq 4){throw 'scheduled task stop timeout'};",
-      "$actions=@($task[0].Actions);if($actions.Count -ne 1 -or -not [String]::Equals($actions[0].Execute,$exe,[StringComparison]::OrdinalIgnoreCase) -or $actions[0].Arguments -cne $argv){throw 'scheduled task action changed'};",
-      "& schtasks.exe /Run /TN $n | Out-Null;if($LASTEXITCODE -ne 0){throw 'scheduled task start failed'};",
-    ].join("");
-    restarted = spawnSync("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script, String(spec.daemonPid), encodedName, encodedExecutable, encodedArguments, spec.processIdentity], { stdio: "ignore", shell: false });
+    restarted = spawnSync("powershell.exe", spec.powershellArgs, { stdio: "ignore", shell: false });
   }
   if (restarted.status !== 0) process.send?.({ type: "restart-failed", status: restarted.status });
   setTimeout(() => {
@@ -470,15 +475,8 @@ export function scheduleServiceRestart(spec, spawnDetached = systemDetachedSpawn
             ? { platform: spec.platform, id: spec.id }
             : {
                 platform: spec.platform,
-                id: spec.id,
-                daemonPid: process.pid,
-                executable: spec.daemonCommand[0],
-                arguments: spec.daemonCommand.slice(1).map(windowsCommandArg).join(" "),
-                processIdentity: spec.runtimeProcessIdentity,
+                powershellArgs: windowsRestartCommandArgs(spec),
             };
-    if (spec.platform === "win32" && !payload.processIdentity) {
-        throw new Error("Windows daemon process identity is required for restart");
-    }
     const child = spawnDetached(process.execPath, ["-e", RESTART_HELPER_SOURCE, JSON.stringify(payload)], { detached: true, stdio: ["ignore", "ignore", "ignore", "ipc"], shell: false });
     child.unref();
     let settleFailure;
@@ -627,7 +625,7 @@ export async function windowsProfileIsPrivate(path, runner = systemCommandRunner
         "$unsafe=$rules|Where-Object { $_.AccessControlType -eq 'Allow' -and $safe -notcontains $_.IdentityReference.Translate([Security.Principal.SecurityIdentifier]).Value };",
         "if($unsafe){'false'}else{'true'}",
     ].join("");
-    const result = await runner("powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", script, encodedPath]);
+    const result = await runner("powershell.exe", powershellCommandArgs(script, [encodedPath]));
     if (result.exitCode !== 0)
         throw new Error(`Profile ACL inspection failed: ${result.stderr.trim() || `exit ${result.exitCode}`}`);
     if (result.stdout.trim() === "true")

package/dist/computer-setup-client.js

@@ -1,6 +1,7 @@
 import { z } from "zod";
 import { hostname } from "node:os";
 import { MachineTokenSchema } from "./computer-profile.js";
+import { powershellCommandArgs } from "./powershell-command.js";
 import { systemCommandRunner, } from "./computer-service.js";
 const HttpUrlSchema = z.string().url().refine((value) => {
     const url = new URL(value);
@@ -309,8 +310,10 @@ export function createComputerSetupClient(options) {
     };
 }
 export async function openSetupBrowser(url, platform = process.platform, runner = systemCommandRunner) {
-    const command = platform === "win32" ? "explorer.exe" : platform === "darwin" ? "open" : "xdg-open";
-    const args = [url];
+    const command = platform === "win32" ? "powershell.exe" : platform === "darwin" ? "open" : "xdg-open";
+    const args = platform === "win32"
+        ? powershellCommandArgs("Start-Process -FilePath $args[0] -ErrorAction Stop | Out-Null", [url])
+        : [url];
     const result = await runner(command, args);
     if (result.exitCode !== 0) {
         throw new Error(`Unable to open the computer setup browser: ${redactSetupSecrets(result.stderr.trim() || `exit ${result.exitCode}`)}`);

package/dist/npm-command.js

@@ -1,9 +1,9 @@
 import { posix, win32 } from "node:path";
-/** Execute POSIX npm through its owning Node binary so service PATH is irrelevant. */
+/** Execute npm through its owning Node binary so PATH and cmd.exe quoting are irrelevant. */
 export function npmInvocation(platform, nodePath = process.execPath) {
     const paths = platform === "win32" ? win32 : posix;
-    const npmPath = paths.join(paths.dirname(nodePath), platform === "win32" ? "npm.cmd" : "npm");
-    return platform === "win32"
-        ? { command: npmPath, argsPrefix: [] }
-        : { command: nodePath, argsPrefix: [npmPath] };
+    const npmPath = platform === "win32"
+        ? paths.join(paths.dirname(nodePath), "node_modules", "npm", "bin", "npm-cli.js")
+        : paths.join(paths.dirname(nodePath), "npm");
+    return { command: nodePath, argsPrefix: [npmPath] };
 }

package/dist/powershell-command.js

@@ -0,0 +1,12 @@
+/**
+ * powershell.exe -Command joins trailing argv into command text, rather than
+ * binding it to $args. Invoke a scriptblock with literal arguments inside one
+ * UTF-16LE encoded command. Encoding is transport, not encryption.
+ */
+export function powershellCommandArgs(script, args = []) {
+    // PowerShell also treats typographic single quotes as string delimiters.
+    const literals = args.map((arg) => `'${arg.replace(/['\u2018-\u201b]/gu, (quote) => quote + quote)}'`).join(" ");
+    const command = "[Console]::OutputEncoding=[Text.UTF8Encoding]::new($false);\n"
+        + `& {\n${script}\n} ${literals}`;
+    return ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(command, "utf16le").toString("base64")];
+}

package/dist/provider-env.js

@@ -11,6 +11,7 @@
 import { join } from "node:path";
 import { DEEPSEEK_CODEX_KEY_ENV, deepSeekCodexHome, } from "./runtimes/codex-deepseek-config.js";
 import { mergeRuntimeEnvironments } from "./runtime-environment-merge.js";
+import { CODEX_EXECUTION_POLICY_VERSION } from "./runtimes/codex-execution-policy.js";
 const ENV_KEY_RE = /^[A-Za-z_][A-Za-z0-9_]*$/;
 const RESERVED_ENV = new Set([
     "PATH",
@@ -125,11 +126,15 @@ export function applyDeepSeekHarnessMachineEnv(base, machineEnv, platform = proc
 }
 /**
  * provider 关键配置指纹:Claude Custom 路由和 Codex DeepSeek key 有无都会改变会话边界,
- * 供 pickResumeId 判定冷启动。default 恒为 null;不含 key 明文(同 Provider 换 key 可续)。
+ * 供 pickResumeId 判定冷启动。Codex 还包含执行策略版本,避免续用带宿主记忆的旧会话。
+ * 不含 key 明文(同 Provider 换 key 可续);其他 runtime 的 default 仍为 null。
  */
 export function providerFingerprint(runtime, cfg) {
-    if (runtime === "codex" && cfg.provider === "deepseek") {
-        return `deepseek|${cfg.providerBaseUrl ?? "default"}|${cfg.providerApiKey ? "key" : "nokey"}`;
+    if (runtime === "codex") {
+        const provider = cfg.provider === "deepseek"
+            ? `deepseek|${cfg.providerBaseUrl ?? "default"}|${cfg.providerApiKey ? "key" : "nokey"}`
+            : "default";
+        return `${CODEX_EXECUTION_POLICY_VERSION}|${provider}`;
     }
     if (runtime !== "claude" || cfg.provider !== "custom")
         return null;

package/dist/runtimes/codex-app-server-runner.js

@@ -10,6 +10,7 @@ import { assertCodexCollaborationVersion, assertCodexNativeWorkspaceVersion, ass
 import { decideTurnRetry, itemMakesTurnUnsafe } from "./codex-turn-retry.js";
 import { startFirstProgressWatchdog } from "./progress-watchdog.js";
 import { prepareThreadDelivery, ThreadDeliveryColdStartRequired } from "../thread-input-delivery.js";
+import { codexExecutionPolicyArgs } from "./codex-execution-policy.js";
 const RunnerInputSchema = z.object({
     systemPrompt: z.string().min(1),
     wakePrompt: z.string().min(1),
@@ -57,6 +58,7 @@ export function codexAppServerArgs(input) {
         // multi_agent 按开关;multi_agent_v2 无条件关,钉死已验证的 v1 契约(spec 2b)。
         "-c", `features.multi_agent=${input.collaborationTools === true}`,
         "-c", "features.multi_agent_v2=false",
+        ...codexExecutionPolicyArgs(),
         "app-server", "--listen", "stdio://",
     ];
 }

package/dist/runtimes/codex-execution-policy.js

@@ -0,0 +1,12 @@
+/** Bump when old native transcripts must not cross a changed execution boundary. */
+export const CODEX_EXECUTION_POLICY_VERSION = "nowwork-codex-context-v1";
+/** Process-local overrides: keep host auth/Skills without importing host automatic memory. */
+export function codexExecutionPolicyArgs() {
+    return [
+        "features.memories=false",
+        'shell_environment_policy.inherit="all"',
+        "shell_environment_policy.ignore_default_excludes=true",
+        "shell_environment_policy.exclude=[]",
+        "shell_environment_policy.include_only=[]",
+    ].flatMap(value => ["-c", value]);
+}

package/dist/runtimes/codex.js

@@ -3,6 +3,7 @@
  */
 // cross-spawn:win32 上 npm CLI 是 .cmd shim,node 原生 spawn 不带 shell 无法执行(ENOENT/EINVAL)
 import spawn from "cross-spawn";
+import { codexExecutionPolicyArgs } from "./codex-execution-policy.js";
 /** Minimum CLI whose real app-server contract supports NowCrew native project workspaces. */
 export const CODEX_NATIVE_WORKSPACE_MIN_VERSION = "0.148.0";
 /** Minimum CLI whose `multi_agent` collaboration tool contract was empirically verified (2026-08-28). */
@@ -26,6 +27,7 @@ export function buildCodexArgs(input) {
     args.push("-c", `model_reasoning_effort=${effort}`);
     // 纵深防御:exec 启动器没有 initialize 握手、无法断言版本,协作工具恒关(spec 2b)。
     args.push("-c", "features.multi_agent=false", "-c", "features.multi_agent_v2=false");
+    args.push(...codexExecutionPolicyArgs());
     if (input.projectRootMarkers) {
         args.push("-c", `project_root_markers=${JSON.stringify(input.projectRootMarkers)}`);
     }

package/dist/windows-scheduled-task.js

@@ -1,5 +1,6 @@
 import { systemCommandRunner, windowsCommandArg, } from "./computer-service.js";
 import { win32 } from "node:path";
+import { powershellCommandArgs } from "./powershell-command.js";
 function encoded(value) {
     return Buffer.from(value, "utf16le").toString("base64");
 }
@@ -33,10 +34,9 @@ export async function inspectWindowsServiceUpdateScope(spec, npmPrefix, daemonPi
         "$enginePid=if($instances.Count -eq 1){[int64]$instances[0].EnginePID}else{0};",
         "[pscustomobject]@{count=1;state=[int]$task.State;execute=if($actions.Count -eq 1){$actions[0].Execute}else{$null};arguments=if($actions.Count -eq 1){$actions[0].Arguments}else{$null};instanceCount=$instances.Count;enginePid=$enginePid;engineOwned=($enginePid -eq $pidValue -or $ancestors -contains $enginePid);processIdentity=$processIdentity;conflictingPrefixes=$conflicts.Count}|ConvertTo-Json -Compress;",
     ].join("");
-    const result = await runner("powershell.exe", [
-        "-NoProfile", "-NonInteractive", "-Command", script,
+    const result = await runner("powershell.exe", powershellCommandArgs(script, [
         encoded(spec.id), encoded(entryMarker), String(daemonPid),
-    ]);
+    ]));
     if (result.exitCode !== 0)
         return { valid: false };
     let inspection;

package/dist/windows-task-principal.js

@@ -0,0 +1,26 @@
+/** Read only: resolve the task's account with Windows, without guessing or stripping its domain. */
+export const windowsTaskPrincipalScript = [
+    "$currentUserSid=[Security.Principal.WindowsIdentity]::GetCurrent().User.Value;",
+    "$principalSid=$null;",
+    "try{",
+    "$account=[string]$task.Principal.UserId;",
+    "if($account -match '^S-\\d-'){",
+    "$principalSid=([Security.Principal.SecurityIdentifier]::new($account)).Value;",
+    "}else{",
+    "$principalSid=([Security.Principal.NTAccount]::new($account)).Translate([Security.Principal.SecurityIdentifier]).Value;",
+    "}",
+    "}catch{$principalSid=$null};",
+].join("");
+export const windowsTaskPrincipalFields = [
+    "currentUserSid=$currentUserSid;",
+    "principalSid=$principalSid;",
+    "logonType=[int]$task.Principal.LogonType;",
+    "runLevel=[int]$task.Principal.RunLevel;",
+].join("");
+export function windowsTaskPrincipalMatches(principal) {
+    return typeof principal.currentUserSid === "string"
+        && /^S-1-(?:\d+-)*\d+$/.test(principal.currentUserSid)
+        && principal.principalSid === principal.currentUserSid
+        && principal.logonType === 3 // Interactive
+        && principal.runLevel === 0; // Limited
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nowcrew/daemon",
-  "version": "0.6.97-beta.9",
+  "version": "0.6.98-beta.1",
   "type": "module",
   "description": "crew daemon — 运行在用户机器:拉起/管理 agent 进程,注入 crew CLI,归一化 runtime 事件",
   "license": "Apache-2.0",
@@ -18,6 +18,13 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "daemon": "pnpm --filter @nowcrew/cli build && tsx src/main.ts",
+    "build": "tsc -p tsconfig.json",
+    "prepublishOnly": "pnpm build && node ../scripts/daemon-release-artifact.mjs --strict-registry",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit"
+  },
   "dependencies": {
     "@agentclientprotocol/sdk": "1.2.1",
     "@nowcrew/cli": "0.4.17",
@@ -39,11 +46,5 @@
     "tsx": "^4.19.0",
     "typescript": "^5.6.0",
     "vitest": "^2.1.0"
-  },
-  "scripts": {
-    "daemon": "pnpm --filter @nowcrew/cli build && tsx src/main.ts",
-    "build": "tsc -p tsconfig.json",
-    "test": "vitest run",
-    "typecheck": "tsc --noEmit"
   }
-}
+}