@liangjie559567/ultrapower 5.4.8 → 5.5.0

package/.claude-plugin/marketplace.json

@@ -8,11 +8,11 @@
     {
       "name": "ultrapower",
       "description": "Disciplined multi-agent orchestration: workflow enforcement + parallel execution",
-      "version": "5.4.8",
+      "version": "5.5.0",
       "source": {
         "source": "npm",
         "package": "@liangjie559567/ultrapower",
-        "version": "5.4.8"
+        "version": "5.5.0"
       },
       "author": {
         "name": "liangjie559567"

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultrapower",
   "description": "Disciplined multi-agent orchestration: workflow enforcement + parallel execution. Combines superpowers' TDD/debugging discipline with OMC's multi-agent execution capabilities.",
-  "version": "5.4.8",
+  "version": "5.5.0",
   "author": {
     "name": "liangjie559567"
   },

package/bridge/codex-server.cjs

@@ -17323,6 +17323,7 @@ function isSpawnedPid2(pid) {
 }
 var GEMINI_DEFAULT_MODEL = process.env.OMC_GEMINI_DEFAULT_MODEL || "gemini-3-pro-preview";
 var GEMINI_TIMEOUT = Math.min(Math.max(5e3, parseInt(process.env.OMC_GEMINI_TIMEOUT || "3600000", 10) || 36e5), 36e5);
+var _yoloEnv = process.env.OMC_GEMINI_YOLO;
 var MAX_FILE_SIZE2 = 5 * 1024 * 1024;
 var MAX_STDOUT_BYTES2 = 10 * 1024 * 1024;
 

package/bridge/gemini-server.cjs

@@ -16374,6 +16374,8 @@ function validateModelName(model) {
 }
 var GEMINI_DEFAULT_MODEL = process.env.OMC_GEMINI_DEFAULT_MODEL || "gemini-3-pro-preview";
 var GEMINI_TIMEOUT = Math.min(Math.max(5e3, parseInt(process.env.OMC_GEMINI_TIMEOUT || "3600000", 10) || 36e5), 36e5);
+var _yoloEnv = process.env.OMC_GEMINI_YOLO;
+var GEMINI_YOLO = _yoloEnv === "false" || _yoloEnv === "0" ? false : true;
 var GEMINI_RECOMMENDED_ROLES = ["designer", "writer", "vision"];
 var MAX_FILE_SIZE = 5 * 1024 * 1024;
 var MAX_STDOUT_BYTES = 10 * 1024 * 1024;
@@ -16394,7 +16396,7 @@ function executeGemini(prompt, model, cwd) {
   return new Promise((resolve7, reject) => {
     if (model) validateModelName(model);
     let settled = false;
-    const args = ["-p=.", "--yolo"];
+    const args = ["-p=.", ...GEMINI_YOLO ? ["--yolo"] : []];
     if (model) {
       args.push("--model", model);
     }
@@ -16469,7 +16471,7 @@ function executeGeminiBackground(fullPrompt, modelInput, jobMeta, workingDirecto
     const modelsToTry = modelExplicit ? [effectiveModel] : GEMINI_MODEL_FALLBACKS.includes(effectiveModel) ? GEMINI_MODEL_FALLBACKS.slice(GEMINI_MODEL_FALLBACKS.indexOf(effectiveModel)) : [effectiveModel, ...GEMINI_MODEL_FALLBACKS];
     const trySpawnWithModel = (tryModel, remainingModels) => {
       validateModelName(tryModel);
-      const args = ["-p=.", "--yolo", "--model", tryModel];
+      const args = ["-p=.", ...GEMINI_YOLO ? ["--yolo"] : [], "--model", tryModel];
       const child = (0, import_child_process3.spawn)("gemini", args, {
         detached: process.platform !== "win32",
         stdio: ["pipe", "pipe", "pipe"],

package/bridge/mcp-server.cjs

@@ -17913,9 +17913,12 @@ var LSP_SERVERS = {
   }
 };
 function commandExists(command) {
+  if (!command || !command.trim()) {
+    return false;
+  }
   try {
     const checkCommand = process.platform === "win32" ? "where" : "which";
-    (0, import_child_process.execSync)(`${checkCommand} ${command}`, { stdio: "ignore" });
+    (0, import_child_process.execFileSync)(checkCommand, [command], { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -17938,6 +17941,7 @@ function getAllServers() {
 }
 
 // src/tools/lsp/client.ts
+var MAX_BUFFER_BYTES = 64 * 1024 * 1024;
 function fileUri(filePath) {
   return (0, import_url.pathToFileURL)((0, import_path2.resolve)(filePath)).href;
 }
@@ -18011,6 +18015,10 @@ Install with: ${this.serverConfig.installHint}`
     this.process.kill();
     this.process = null;
     this.initialized = false;
+    for (const [, pending] of this.pendingRequests) {
+      clearTimeout(pending.timeout);
+      pending.reject(new Error("LSP client disconnected"));
+    }
     this.pendingRequests.clear();
     this.openDocuments.clear();
     this.diagnostics.clear();
@@ -18019,6 +18027,14 @@ Install with: ${this.serverConfig.installHint}`
    * Handle incoming data from the server
    */
   handleData(data) {
+    if (this.buffer.length + data.length > MAX_BUFFER_BYTES) {
+      console.error(
+        `[ultrapower] \u9519\u8BEF\uFF1ALSP \u7F13\u51B2\u533A\u8D85\u8FC7 ${MAX_BUFFER_BYTES} \u5B57\u8282\uFF0864MB\uFF09\u4E0A\u9650\uFF0C\u6B63\u5728\u65AD\u5F00\u8FDE\u63A5`
+      );
+      this.disconnect().catch(() => {
+      });
+      return;
+    }
     this.buffer += data;
     while (true) {
       const headerEnd = this.buffer.indexOf("\r\n\r\n");
@@ -21491,8 +21507,33 @@ function getActiveSessionsForMode(mode, cwd) {
   return sessionIds.filter((sid) => isJsonModeActive(cwd, mode, sid));
 }
 
+// src/lib/validateMode.ts
+var VALID_MODES = [
+  "autopilot",
+  "ultrapilot",
+  "team",
+  "pipeline",
+  "ralph",
+  "ultrawork",
+  "ultraqa",
+  "swarm"
+];
+function validateMode(mode) {
+  return typeof mode === "string" && VALID_MODES.includes(mode);
+}
+function assertValidMode(mode) {
+  if (!validateMode(mode)) {
+    const raw = typeof mode === "string" ? mode : String(mode);
+    const display = raw.length > 50 ? `${raw.slice(0, 50)}...(truncated)` : raw;
+    throw new Error(
+      `Invalid mode: "${display}". Valid modes are: ${VALID_MODES.join(", ")}`
+    );
+  }
+  return mode;
+}
+
 // src/tools/state-tools.ts
-var EXECUTION_MODES = [
+var STATE_TOOL_MODES = [
   "autopilot",
   "ultrapilot",
   "swarm",
@@ -21500,9 +21541,9 @@ var EXECUTION_MODES = [
   "team",
   "ralph",
   "ultrawork",
-  "ultraqa"
+  "ultraqa",
+  "ralplan"
 ];
-var STATE_TOOL_MODES = [...EXECUTION_MODES, "ralplan"];
 function getStatePath(mode, root) {
   if (MODE_CONFIGS[mode]) {
     return getStateFilePath(root, mode);
@@ -21520,6 +21561,16 @@ var stateReadTool = {
   handler: async (args) => {
     const { mode, workingDirectory, session_id } = args;
     try {
+      if (mode !== "ralplan") {
+        try {
+          assertValidMode(mode);
+        } catch {
+          return {
+            content: [{ type: "text", text: `[ultrapower] \u9519\u8BEF\uFF1A\u65E0\u6548\u7684\u72B6\u6001\u6A21\u5F0F\uFF1A${mode}` }],
+            isError: true
+          };
+        }
+      }
       const root = validateWorkingDirectory(workingDirectory);
       const sessionId = session_id;
       if (mode === "swarm") {
@@ -21696,6 +21747,16 @@ var stateWriteTool = {
       session_id
     } = args;
     try {
+      if (mode !== "ralplan") {
+        try {
+          assertValidMode(mode);
+        } catch {
+          return {
+            content: [{ type: "text", text: `[ultrapower] \u9519\u8BEF\uFF1A\u65E0\u6548\u7684\u72B6\u6001\u6A21\u5F0F\uFF1A${mode}` }],
+            isError: true
+          };
+        }
+      }
       const root = validateWorkingDirectory(workingDirectory);
       const sessionId = session_id;
       if (mode === "swarm") {
@@ -21778,6 +21839,16 @@ var stateClearTool = {
   handler: async (args) => {
     const { mode, workingDirectory, session_id } = args;
     try {
+      if (mode !== "ralplan") {
+        try {
+          assertValidMode(mode);
+        } catch {
+          return {
+            content: [{ type: "text", text: `[ultrapower] \u9519\u8BEF\uFF1A\u65E0\u6548\u7684\u72B6\u6001\u6A21\u5F0F\uFF1A${mode}` }],
+            isError: true
+          };
+        }
+      }
       const root = validateWorkingDirectory(workingDirectory);
       const sessionId = session_id;
       if (sessionId) {