@kendoo.agentdesk/agentdesk 0.6.5 → 0.6.7

package/README.md

@@ -2,17 +2,21 @@
 
 AI team orchestrator for [Claude Code](https://claude.ai/code). Run collaborative agent sessions from your terminal and watch them live on [agentdesk.live](https://agentdesk.live).
 
-AgentDesk spawns a team of 7 specialized AI agents inside Claude Code that collaborate on your tasks:
+AgentDesk spawns a team of AI agents inside Claude Code that collaborate on your tasks. The default team includes 7 built-in agents, and you can add custom agents to fit your workflow.
+
+### Built-in Agents
 
 | Agent | Role |
 |-------|------|
 | Jane | Product Lead — facilitates, clarifies requirements, coordinates the team |
-| Luna | UX/UI Designer — visual consistency, accessibility, interaction patterns |
-| Mark | Content Writer — copy, tone, user-facing text |
-| Sam | Architecture Auditor — code structure, separation of concerns |
 | Dennis | Senior Developer — implements the solution |
-| Bart | QA Engineer — edge cases, risks, acceptance criteria |
+| Sam | Architecture Auditor — code structure, separation of concerns |
+| Bart | QA Engineer — edge cases, risks, acceptance criteria, screenshots |
 | Vera | Test Engineer — unit tests, regression coverage |
+| Luna | UX/UI Designer — visual consistency, accessibility, interaction patterns |
+| Mark | Content Writer — copy, tone, user-facing text |
+
+You can also add **custom agents** (e.g., a Security Engineer or DevOps specialist) via project settings.
 
 ## Getting Started
 
@@ -22,7 +26,7 @@ AgentDesk spawns a team of 7 specialized AI agents inside Claude Code that colla
 npm i -g @kendoo.agentdesk/agentdesk
 ```
 
-Requires [Node.js](https://nodejs.org/) 18+.
+Requires [Claude Code](https://claude.ai/code) and [Node.js](https://nodejs.org/) 18+.
 
 ### 2. Sign in
 
@@ -38,7 +42,7 @@ Opens your browser to [agentdesk.live](https://agentdesk.live) where you sign up
 agentdesk init
 ```
 
-This detects your project, asks which task tracker you use (Linear, Jira, GitHub Issues, or none), and saves the config to `.agentdesk.json`.
+This detects your project, asks which task tracker you use (Linear, Jira, GitHub Issues, or none), and saves the config.
 
 ### 4. Run a team session
 
@@ -55,70 +59,83 @@ agentdesk team -d "Fix the checkout total calculation"
 agentdesk team -d "Add Google OAuth to the login page"
 ```
 
-Open [agentdesk.live](https://agentdesk.live) to watch the session live.
+Watch the session live at [agentdesk.live](https://agentdesk.live). Each session gets a deep link you can share.
+
+## Commands
+
+```
+agentdesk login                        Sign in to AgentDesk
+agentdesk logout                       Sign out and remove credentials
+agentdesk init                         Set up project and configure tracker
+agentdesk team <TASK-ID>               Run a team session on an existing task
+agentdesk team -d "..."                Describe what you want — task created automatically
+agentdesk update                       Update to the latest version
+```
+
+### Options
+
+| Flag | Description |
+|------|-------------|
+| `--description`, `-d` | Task description or requirements |
+| `--cwd` | Working directory (defaults to current) |
 
 ## Configuration
 
-`agentdesk init` creates `.agentdesk.json` in your project root. You can also edit it manually:
+Settings can be managed in two ways:
 
-```json
-{
-  "tracker": "linear",
-  "linear": { "workspace": "your-workspace" }
-}
-```
+1. **Web UI** — go to [agentdesk.live](https://agentdesk.live), select a project, and click the gear icon to configure tracker, team composition, custom agents, commands, and instructions.
+2. **Local file** — `.agentdesk.json` in your project root. Local settings override server settings.
+
+The CLI fetches settings from the server at runtime. If the server is unreachable, it falls back to `.agentdesk.json`.
 
 ### Task trackers
 
 | Tracker | Config |
 |---------|--------|
-| Linear | `{ "tracker": "linear", "linear": { "workspace": "..." } }` |
-| Jira | `{ "tracker": "jira", "jira": { "baseUrl": "https://company.atlassian.net" } }` |
-| GitHub Issues | `{ "tracker": "github", "github": { "repo": "owner/repo" } }` |
+| Linear | Workspace slug (e.g., `kendoo`) |
+| Jira | Base URL (e.g., `https://company.atlassian.net`) + project key |
+| GitHub Issues | Repository (e.g., `owner/repo`) |
 | None | No config needed — pass `-d "description"` when running a session |
 
-### Declaring project agents
+### Custom agents
 
-If your project has existing AI agents, bots, or automation, declare them so the team knows about them:
+Add custom agents to your team via project settings (web UI or `.agentdesk.json`):
 
 ```json
 {
   "projectAgents": [
     {
-      "name": "ReviewBot",
-      "role": "Auto-reviews PRs for security issues",
-      "when": "Triggers on every PR creation",
-      "how": "Comment /review on a PR to re-trigger"
+      "name": "Adam",
+      "role": "Security Engineer",
+      "when": "Review code before PR, participate in discussions",
+      "how": "Comment and review PR"
     }
   ]
 }
 ```
 
-AgentDesk also auto-discovers agents from `.claude/agents/`, `.claude/commands/`, `.mcp.json`, GitHub Actions workflows, Dependabot, and Renovate configs.
-
-## Commands
-
-```
-agentdesk login                        Sign in to AgentDesk
-agentdesk logout                       Sign out and remove credentials
-agentdesk init                         Set up project and configure tracker
-agentdesk team <TASK-ID>               Run a team session on an existing task
-agentdesk team -d "..."                Describe what you want — task created automatically
-```
-
-### Options
+After adding a custom agent, enable them in Team Composition (web UI) or add their name to the `"team"` array. Custom agents participate in all phases alongside built-in agents.
 
-| Flag | Description |
-|------|-------------|
-| `--description`, `-d` | Task description or requirements |
-| `--cwd` | Working directory (defaults to current) |
+AgentDesk also auto-discovers agents from `.claude/agents/`, `.claude/commands/`, `.mcp.json`, GitHub Actions workflows, Dependabot, and Renovate configs.
 
 ## How It Works
 
 1. You run `agentdesk team TASK-ID` in your project directory
 2. AgentDesk detects your project type, reads `CLAUDE.md`, and discovers existing agents
-3. 7 AI agents collaborate on your task in structured phases: **Brainstorm** > **Planning** > **Execution** > **Review**
+3. The team collaborates in structured phases: **Intake** > **Brainstorm** > **Planning** > **Execution** > **Review**
 4. The session streams live to [agentdesk.live](https://agentdesk.live) where you can watch and send messages to the team
+5. For UI tasks, the team captures screenshots (desktop + mobile) and uploads them to your task tracker
+6. Token usage is tracked and displayed per session
+
+## Dashboard Features
+
+- **Live sessions** — watch agents collaborate in real-time
+- **Session deep links** — share a direct URL to any session
+- **Project settings** — configure tracker, team, custom agents, and instructions per project
+- **Account settings** — manage your API key and profile
+- **Agent roster** — see each agent's role, participation rate, tag breakdown, and phase involvement
+- **Token tracking** — input/output token counts per session
+- **Auto-reconnect** — CLI reconnects automatically if the connection drops
 
 ## Requirements
 

package/cli/login.mjs

@@ -104,8 +104,8 @@ export async function runLogin() {
 
       if (apiKey) {
         // Save credentials
-        if (!existsSync(CONFIG_DIR)) mkdirSync(CONFIG_DIR, { recursive: true });
-        writeFileSync(CREDENTIALS_PATH, JSON.stringify({ apiKey, name, savedAt: Date.now() }, null, 2));
+        if (!existsSync(CONFIG_DIR)) mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
+        writeFileSync(CREDENTIALS_PATH, JSON.stringify({ apiKey, name, savedAt: Date.now() }, null, 2), { mode: 0o600 });
 
         res.writeHead(200, { "Content-Type": "text/html" });
         res.end(`<html><body style="background:#0f172a;color:#e2e8f0;font-family:system-ui;display:flex;align-items:center;justify-content:center;height:100vh;margin:0"><div style="text-align:center"><h2 style="color:#2dd4bf">Logged in to AgentDesk</h2><p>You can close this tab and return to your terminal.</p></div></body></html>`);
@@ -145,11 +145,11 @@ export async function runLogin() {
   console.log("");
   console.log("  Waiting for authentication...");
 
-  // Open browser
-  const { exec } = await import("child_process");
+  // Open browser (use execFile to avoid shell injection)
+  const { execFile } = await import("child_process");
   const platform = process.platform;
   const cmd = platform === "darwin" ? "open" : platform === "win32" ? "start" : "xdg-open";
-  exec(`${cmd} "${loginUrl}"`);
+  execFile(cmd, [loginUrl], () => {});
 
   // Timeout after 5 minutes
   setTimeout(() => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kendoo.agentdesk/agentdesk",
-  "version": "0.6.5",
+  "version": "0.6.7",
   "description": "AI team orchestrator for Claude Code — run collaborative agent sessions from your terminal",
   "type": "module",
   "bin": {