@liangjie559567/ultrapower 5.4.8 → 5.5.1

package/.claude-plugin/marketplace.json

@@ -8,11 +8,11 @@
     {
       "name": "ultrapower",
       "description": "Disciplined multi-agent orchestration: workflow enforcement + parallel execution",
-      "version": "5.4.8",
+      "version": "5.5.0",
       "source": {
         "source": "npm",
         "package": "@liangjie559567/ultrapower",
-        "version": "5.4.8"
+        "version": "5.5.0"
       },
       "author": {
         "name": "liangjie559567"

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultrapower",
   "description": "Disciplined multi-agent orchestration: workflow enforcement + parallel execution. Combines superpowers' TDD/debugging discipline with OMC's multi-agent execution capabilities.",
-  "version": "5.4.8",
+  "version": "5.5.0",
   "author": {
     "name": "liangjie559567"
   },

package/bridge/codex-server.cjs

@@ -17323,6 +17323,7 @@ function isSpawnedPid2(pid) {
 }
 var GEMINI_DEFAULT_MODEL = process.env.OMC_GEMINI_DEFAULT_MODEL || "gemini-3-pro-preview";
 var GEMINI_TIMEOUT = Math.min(Math.max(5e3, parseInt(process.env.OMC_GEMINI_TIMEOUT || "3600000", 10) || 36e5), 36e5);
+var _yoloEnv = process.env.OMC_GEMINI_YOLO;
 var MAX_FILE_SIZE2 = 5 * 1024 * 1024;
 var MAX_STDOUT_BYTES2 = 10 * 1024 * 1024;
 
@@ -17388,7 +17389,7 @@ async function handleWaitForJob(provider, jobId, timeoutMs = 36e5) {
   if (!jobId || typeof jobId !== "string") {
     return textResult("job_id is required.", true);
   }
-  const effectiveTimeout = Math.max(1e3, Math.min(timeoutMs, 36e5));
+  const effectiveTimeout = Math.max(1e3, Math.min(timeoutMs, 6e4));
   const deadline = Date.now() + effectiveTimeout;
   let pollDelay = 500;
   let notFoundCount = 0;
@@ -17608,7 +17609,6 @@ async function handleKillJob(provider, jobId, signal = "SIGTERM") {
     ...status,
     killedByUser: true
   };
-  writeJobStatus(updated);
   try {
     if (process.platform !== "win32") {
       process.kill(-status.pid, signal);
@@ -17800,7 +17800,7 @@ function getJobManagementToolSchemas(_provider) {
           },
           timeout_ms: {
             type: "number",
-            description: "Maximum time to wait in milliseconds (default: 3600000, max: 3600000)."
+            description: "Maximum time to wait in milliseconds (default: 3600000, max: 60000)."
           }
         },
         required: ["job_id"]

package/bridge/gemini-server.cjs

@@ -16374,6 +16374,8 @@ function validateModelName(model) {
 }
 var GEMINI_DEFAULT_MODEL = process.env.OMC_GEMINI_DEFAULT_MODEL || "gemini-3-pro-preview";
 var GEMINI_TIMEOUT = Math.min(Math.max(5e3, parseInt(process.env.OMC_GEMINI_TIMEOUT || "3600000", 10) || 36e5), 36e5);
+var _yoloEnv = process.env.OMC_GEMINI_YOLO;
+var GEMINI_YOLO = _yoloEnv === "false" || _yoloEnv === "0" ? false : true;
 var GEMINI_RECOMMENDED_ROLES = ["designer", "writer", "vision"];
 var MAX_FILE_SIZE = 5 * 1024 * 1024;
 var MAX_STDOUT_BYTES = 10 * 1024 * 1024;
@@ -16394,7 +16396,7 @@ function executeGemini(prompt, model, cwd) {
   return new Promise((resolve7, reject) => {
     if (model) validateModelName(model);
     let settled = false;
-    const args = ["-p=.", "--yolo"];
+    const args = ["-p=.", ...GEMINI_YOLO ? ["--yolo"] : []];
     if (model) {
       args.push("--model", model);
     }
@@ -16469,7 +16471,7 @@ function executeGeminiBackground(fullPrompt, modelInput, jobMeta, workingDirecto
     const modelsToTry = modelExplicit ? [effectiveModel] : GEMINI_MODEL_FALLBACKS.includes(effectiveModel) ? GEMINI_MODEL_FALLBACKS.slice(GEMINI_MODEL_FALLBACKS.indexOf(effectiveModel)) : [effectiveModel, ...GEMINI_MODEL_FALLBACKS];
     const trySpawnWithModel = (tryModel, remainingModels) => {
       validateModelName(tryModel);
-      const args = ["-p=.", "--yolo", "--model", tryModel];
+      const args = ["-p=.", ...GEMINI_YOLO ? ["--yolo"] : [], "--model", tryModel];
       const child = (0, import_child_process3.spawn)("gemini", args, {
         detached: process.platform !== "win32",
         stdio: ["pipe", "pipe", "pipe"],
@@ -17031,7 +17033,7 @@ async function handleWaitForJob(provider, jobId, timeoutMs = 36e5) {
   if (!jobId || typeof jobId !== "string") {
     return textResult("job_id is required.", true);
   }
-  const effectiveTimeout = Math.max(1e3, Math.min(timeoutMs, 36e5));
+  const effectiveTimeout = Math.max(1e3, Math.min(timeoutMs, 6e4));
   const deadline = Date.now() + effectiveTimeout;
   let pollDelay = 500;
   let notFoundCount = 0;
@@ -17251,7 +17253,6 @@ async function handleKillJob(provider, jobId, signal = "SIGTERM") {
     ...status,
     killedByUser: true
   };
-  writeJobStatus(updated);
   try {
     if (process.platform !== "win32") {
       process.kill(-status.pid, signal);
@@ -17443,7 +17444,7 @@ function getJobManagementToolSchemas(_provider) {
           },
           timeout_ms: {
             type: "number",
-            description: "Maximum time to wait in milliseconds (default: 3600000, max: 3600000)."
+            description: "Maximum time to wait in milliseconds (default: 3600000, max: 60000)."
           }
         },
         required: ["job_id"]

package/bridge/mcp-server.cjs

@@ -17913,9 +17913,12 @@ var LSP_SERVERS = {
   }
 };
 function commandExists(command) {
+  if (!command || !command.trim()) {
+    return false;
+  }
   try {
     const checkCommand = process.platform === "win32" ? "where" : "which";
-    (0, import_child_process.execSync)(`${checkCommand} ${command}`, { stdio: "ignore" });
+    (0, import_child_process.execFileSync)(checkCommand, [command], { stdio: "ignore" });
     return true;
   } catch {
     return false;
@@ -17938,6 +17941,7 @@ function getAllServers() {
 }
 
 // src/tools/lsp/client.ts
+var MAX_BUFFER_BYTES = 64 * 1024 * 1024;
 function fileUri(filePath) {
   return (0, import_url.pathToFileURL)((0, import_path2.resolve)(filePath)).href;
 }
@@ -18011,6 +18015,10 @@ Install with: ${this.serverConfig.installHint}`
     this.process.kill();
     this.process = null;
     this.initialized = false;
+    for (const [, pending] of this.pendingRequests) {
+      clearTimeout(pending.timeout);
+      pending.reject(new Error("LSP client disconnected"));
+    }
     this.pendingRequests.clear();
     this.openDocuments.clear();
     this.diagnostics.clear();
@@ -18019,6 +18027,14 @@ Install with: ${this.serverConfig.installHint}`
    * Handle incoming data from the server
    */
   handleData(data) {
+    if (this.buffer.length + data.length > MAX_BUFFER_BYTES) {
+      console.error(
+        `[ultrapower] \u9519\u8BEF\uFF1ALSP \u7F13\u51B2\u533A\u8D85\u8FC7 ${MAX_BUFFER_BYTES} \u5B57\u8282\uFF0864MB\uFF09\u4E0A\u9650\uFF0C\u6B63\u5728\u65AD\u5F00\u8FDE\u63A5`
+      );
+      this.disconnect().catch(() => {
+      });
+      return;
+    }
     this.buffer += data;
     while (true) {
       const headerEnd = this.buffer.indexOf("\r\n\r\n");
@@ -20909,9 +20925,11 @@ async function handleExecute(sessionId, socketPath, code, executionTimeout, exec
 async function handleReset(sessionId, socketPath) {
   try {
     const result = await sendSocketRequest(socketPath, "reset", {}, 1e4);
+    resetExecutionCounter(sessionId);
     return formatResetResult(result, sessionId);
   } catch (_error) {
     await killBridgeWithEscalation(sessionId);
+    resetExecutionCounter(sessionId);
     return [
       "=== Bridge Restarted ===",
       `Session: ${sessionId}`,
@@ -20951,6 +20969,7 @@ async function handleInterrupt(sessionId, socketPath, gracePeriodMs = 5e3) {
       {},
       Math.min(gracePeriodMs, 5e3)
     );
+    resetExecutionCounter(sessionId);
     return formatInterruptResult(
       {
         ...result,
@@ -20961,6 +20980,7 @@ async function handleInterrupt(sessionId, socketPath, gracePeriodMs = 5e3) {
     );
   } catch {
     const escalationResult = await killBridgeWithEscalation(sessionId, { gracePeriodMs });
+    resetExecutionCounter(sessionId);
     return formatInterruptResult(
       {
         status: "force_killed",
@@ -21113,6 +21133,9 @@ var pythonReplTool = {
     };
   }
 };
+function resetExecutionCounter(sessionId) {
+  executionCounters.delete(sessionId);
+}
 
 // src/tools/state-tools.ts
 var import_fs8 = require("fs");
@@ -21491,8 +21514,33 @@ function getActiveSessionsForMode(mode, cwd) {
   return sessionIds.filter((sid) => isJsonModeActive(cwd, mode, sid));
 }
 
+// src/lib/validateMode.ts
+var VALID_MODES = [
+  "autopilot",
+  "ultrapilot",
+  "team",
+  "pipeline",
+  "ralph",
+  "ultrawork",
+  "ultraqa",
+  "swarm"
+];
+function validateMode(mode) {
+  return typeof mode === "string" && VALID_MODES.includes(mode);
+}
+function assertValidMode(mode) {
+  if (!validateMode(mode)) {
+    const raw = typeof mode === "string" ? mode : String(mode);
+    const display = raw.length > 50 ? `${raw.slice(0, 50)}...(truncated)` : raw;
+    throw new Error(
+      `Invalid mode: "${display}". Valid modes are: ${VALID_MODES.join(", ")}`
+    );
+  }
+  return mode;
+}
+
 // src/tools/state-tools.ts
-var EXECUTION_MODES = [
+var STATE_TOOL_MODES = [
   "autopilot",
   "ultrapilot",
   "swarm",
@@ -21500,9 +21548,9 @@ var EXECUTION_MODES = [
   "team",
   "ralph",
   "ultrawork",
-  "ultraqa"
+  "ultraqa",
+  "ralplan"
 ];
-var STATE_TOOL_MODES = [...EXECUTION_MODES, "ralplan"];
 function getStatePath(mode, root) {
   if (MODE_CONFIGS[mode]) {
     return getStateFilePath(root, mode);
@@ -21520,6 +21568,16 @@ var stateReadTool = {
   handler: async (args) => {
     const { mode, workingDirectory, session_id } = args;
     try {
+      if (mode !== "ralplan") {
+        try {
+          assertValidMode(mode);
+        } catch {
+          return {
+            content: [{ type: "text", text: `[ultrapower] \u9519\u8BEF\uFF1A\u65E0\u6548\u7684\u72B6\u6001\u6A21\u5F0F\uFF1A${mode}` }],
+            isError: true
+          };
+        }
+      }
       const root = validateWorkingDirectory(workingDirectory);
       const sessionId = session_id;
       if (mode === "swarm") {
@@ -21696,6 +21754,16 @@ var stateWriteTool = {
       session_id
     } = args;
     try {
+      if (mode !== "ralplan") {
+        try {
+          assertValidMode(mode);
+        } catch {
+          return {
+            content: [{ type: "text", text: `[ultrapower] \u9519\u8BEF\uFF1A\u65E0\u6548\u7684\u72B6\u6001\u6A21\u5F0F\uFF1A${mode}` }],
+            isError: true
+          };
+        }
+      }
       const root = validateWorkingDirectory(workingDirectory);
       const sessionId = session_id;
       if (mode === "swarm") {
@@ -21778,6 +21846,16 @@ var stateClearTool = {
   handler: async (args) => {
     const { mode, workingDirectory, session_id } = args;
     try {
+      if (mode !== "ralplan") {
+        try {
+          assertValidMode(mode);
+        } catch {
+          return {
+            content: [{ type: "text", text: `[ultrapower] \u9519\u8BEF\uFF1A\u65E0\u6548\u7684\u72B6\u6001\u6A21\u5F0F\uFF1A${mode}` }],
+            isError: true
+          };
+        }
+      }
       const root = validateWorkingDirectory(workingDirectory);
       const sessionId = session_id;
       if (sessionId) {