@liangjie559567/ultrapower 5.5.30 → 5.5.32

package/.claude-plugin/marketplace.json

@@ -8,15 +8,15 @@
     {
       "name": "ultrapower",
       "description": "Disciplined multi-agent orchestration: workflow enforcement + parallel execution",
-      "version": "5.5.30",
+      "version": "5.5.32",
       "source": {
         "source": "npm",
         "package": "@liangjie559567/ultrapower",
-        "version": "5.5.30"
+        "version": "5.5.32"
       },
       "author": {
         "name": "liangjie559567"
       }
     }
   ]
-}
+}

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ultrapower",
   "description": "Disciplined multi-agent orchestration: workflow enforcement + parallel execution",
-  "version": "5.5.30",
+  "version": "5.5.32",
   "author": {
     "name": "liangjie559567"
   },
@@ -20,4 +20,4 @@
     "anthropic",
     "llm"
   ]
-}
+}

package/bridge/codex-server.cjs

@@ -3,7 +3,8 @@
 try {
   var _cp = require('child_process');
   var _Module = require('module');
-  var _globalRoot = _cp.execSync('npm root -g', { encoding: 'utf8', timeout: 5000 }).trim();
+  var _result = _cp.spawnSync('npm', ['root', '-g'], { encoding: 'utf8', timeout: 5000 });
+  var _globalRoot = _result.status === 0 ? _result.stdout.trim() : '';
   if (_globalRoot) {
     var _sep = process.platform === 'win32' ? ';' : ':';
     process.env.NODE_PATH = _globalRoot + (process.env.NODE_PATH ? _sep + process.env.NODE_PATH : '');
@@ -14503,11 +14504,14 @@ function detectCodexCli(useCache = true) {
   if (useCache && codexCache) return codexCache;
   const installHint = "Install Codex CLI: npm install -g @openai/codex";
   try {
-    const command = process.platform === "win32" ? "where codex" : "which codex";
-    const path = (0, import_child_process.execSync)(command, { encoding: "utf-8", timeout: 5e3 }).trim();
+    const cmd = process.platform === "win32" ? "where" : "which";
+    const pathResult = (0, import_child_process.spawnSync)(cmd, ["codex"], { encoding: "utf-8", timeout: 5e3 });
+    if (pathResult.status !== 0) throw new Error("codex not found");
+    const path = pathResult.stdout.trim();
     let version2;
     try {
-      version2 = (0, import_child_process.execSync)("codex --version", { encoding: "utf-8", timeout: 5e3 }).trim();
+      const versionResult = (0, import_child_process.spawnSync)("codex", ["--version"], { encoding: "utf-8", timeout: 5e3 });
+      if (versionResult.status === 0) version2 = versionResult.stdout.trim();
     } catch {
     }
     const result = { available: true, path, version: version2, installHint };
@@ -14553,13 +14557,13 @@ function setCache(key, value) {
 }
 function execGit(command, cwd) {
   try {
-    return (0, import_child_process2.execSync)(`git --no-pager ${command}`, {
+    const args = ["--no-pager", ...command.split(/\s+/)];
+    const result = (0, import_child_process2.spawnSync)("git", args, {
       cwd,
       encoding: "utf-8",
-      timeout: GIT_TIMEOUT,
-      stdio: ["pipe", "pipe", "pipe"],
-      shell: process.platform === "win32" ? "cmd.exe" : void 0
-    }).trim();
+      timeout: GIT_TIMEOUT
+    });
+    return result.status === 0 ? result.stdout.trim() : "";
   } catch {
     return "";
   }
@@ -14614,6 +14618,7 @@ function getPackageDir() {
   }
   return process.cwd();
 }
+var promptCache = /* @__PURE__ */ new Map();
 function stripFrontmatter(content) {
   const match = content.match(/^---[\s\S]*?---\s*([\s\S]*)$/);
   return match ? match[1].trim() : content.trim();
@@ -14623,10 +14628,17 @@ function loadAgentPrompt(agentName, provider) {
     throw new Error(`Invalid agent name: contains disallowed characters`);
   }
   if (provider) {
+    const cacheKey2 = `${provider}:${agentName}`;
+    if (promptCache.has(cacheKey2)) {
+      return promptCache.get(cacheKey2);
+    }
     try {
       if (provider === "codex" && typeof define_AGENT_PROMPTS_CODEX_default !== "undefined" && define_AGENT_PROMPTS_CODEX_default !== null) {
         const prompt = define_AGENT_PROMPTS_CODEX_default[agentName];
-        if (prompt) return prompt;
+        if (prompt) {
+          promptCache.set(cacheKey2, prompt);
+          return prompt;
+        }
       }
     } catch {
     }
@@ -14638,15 +14650,24 @@ function loadAgentPrompt(agentName, provider) {
       const rel = (0, import_path3.relative)(resolvedProviderDir, resolvedPath);
       if (!rel.startsWith("..") && !(0, import_path3.isAbsolute)(rel)) {
         const content = (0, import_fs3.readFileSync)(providerPath, "utf-8");
-        return stripFrontmatter(content);
+        const prompt = stripFrontmatter(content);
+        promptCache.set(cacheKey2, prompt);
+        return prompt;
       }
     } catch {
     }
   }
+  const cacheKey = agentName;
+  if (promptCache.has(cacheKey)) {
+    return promptCache.get(cacheKey);
+  }
   try {
     if (typeof define_AGENT_PROMPTS_default !== "undefined" && define_AGENT_PROMPTS_default !== null) {
       const prompt = define_AGENT_PROMPTS_default[agentName];
-      if (prompt) return prompt;
+      if (prompt) {
+        promptCache.set(cacheKey, prompt);
+        return prompt;
+      }
     }
   } catch {
   }
@@ -14660,7 +14681,9 @@ function loadAgentPrompt(agentName, provider) {
       throw new Error(`Invalid agent name: path traversal detected`);
     }
     const content = (0, import_fs3.readFileSync)(agentPath, "utf-8");
-    return stripFrontmatter(content);
+    const prompt = stripFrontmatter(content);
+    promptCache.set(cacheKey, prompt);
+    return prompt;
   } catch (error2) {
     const message = error2 instanceof Error && error2.message.includes("Invalid agent name") ? error2.message : "Agent prompt file not found";
     console.warn(`[loadAgentPrompt] ${message}`);
@@ -14863,8 +14886,13 @@ async function initJobDb(cwd) {
       const oldestKey = dbMap.keys().next().value;
       if (oldestKey) {
         const oldDb = dbMap.get(oldestKey);
-        oldDb?.close();
-        dbMap.delete(oldestKey);
+        try {
+          oldDb?.close();
+        } catch (err) {
+          console.error(`[job-state-db] Failed to close connection: ${err}`);
+        } finally {
+          dbMap.delete(oldestKey);
+        }
       }
     }
     ensureStateDir(cwd);
@@ -16350,7 +16378,7 @@ var TIME_THRESHOLD = {
 
 // src/config/loader.ts
 function isValidModelName(name) {
-  return /^[a-zA-Z0-9.\-]{1,100}$/.test(name);
+  return /^[a-zA-Z0-9.-]{1,100}$/.test(name);
 }
 var DEFAULT_CONFIG = {
   agents: {
@@ -16757,9 +16785,7 @@ function executeCodex(prompt, model, cwd, reasoningEffort) {
     const child = (0, import_child_process3.spawn)("codex", args, {
       stdio: ["pipe", "pipe", "pipe"],
       ...cwd ? { cwd } : {},
-      // shell: true needed on Windows for .cmd/.bat executables.
-      // Safe: args are array-based and model names are regex-validated.
-      ...process.platform === "win32" ? { shell: true } : {}
+      shell: false
     });
     const timeoutHandle = setTimeout(() => {
       if (!settled) {
@@ -16883,9 +16909,7 @@ function executeCodexBackground(fullPrompt, modelInput, jobMeta, workingDirector
         detached: process.platform !== "win32",
         stdio: ["pipe", "pipe", "pipe"],
         ...workingDirectory ? { cwd: workingDirectory } : {},
-        // shell: true needed on Windows for .cmd/.bat executables.
-        // Safe: args are array-based and model names are regex-validated.
-        ...process.platform === "win32" ? { shell: true } : {}
+        shell: false
       });
       if (!child.pid) {
         return { error: "Failed to get process ID" };
@@ -17460,15 +17484,16 @@ var SqliteWorkerAdapter = class {
   async init() {
     try {
       const betterSqlite3Module = await import("better-sqlite3");
-      const Database2 = betterSqlite3Module.default || betterSqlite3Module;
+      const DatabaseConstructor = betterSqlite3Module.default || betterSqlite3Module;
       const stateDir = (0, import_path11.join)(this.cwd, ".omc", "state");
       if (!(0, import_fs11.existsSync)(stateDir)) {
         (0, import_fs11.mkdirSync)(stateDir, { recursive: true });
       }
       const dbPath = (0, import_path11.join)(stateDir, "workers.db");
-      this.db = new Database2(dbPath);
-      this.db.pragma("journal_mode = WAL");
-      this.db.exec(`
+      this.db = new DatabaseConstructor(dbPath);
+      if (this.db) {
+        this.db.pragma("journal_mode = WAL");
+        this.db.exec(`
         CREATE TABLE IF NOT EXISTS workers (
           worker_id TEXT PRIMARY KEY,
           worker_type TEXT NOT NULL,
@@ -17494,6 +17519,7 @@ var SqliteWorkerAdapter = class {
         CREATE INDEX IF NOT EXISTS idx_status ON workers(status);
         CREATE INDEX IF NOT EXISTS idx_team_name ON workers(team_name);
       `);
+      }
       return true;
     } catch (error2) {
       console.error("[SqliteWorkerAdapter] Init failed:", error2);

package/bridge/gemini-server.cjs

@@ -3,7 +3,8 @@
 try {
   var _cp = require('child_process');
   var _Module = require('module');
-  var _globalRoot = _cp.execSync('npm root -g', { encoding: 'utf8', timeout: 5000 }).trim();
+  var _result = _cp.spawnSync('npm', ['root', '-g'], { encoding: 'utf8', timeout: 5000 });
+  var _globalRoot = _result.status === 0 ? _result.stdout.trim() : '';
   if (_globalRoot) {
     var _sep = process.platform === 'win32' ? ';' : ':';
     process.env.NODE_PATH = _globalRoot + (process.env.NODE_PATH ? _sep + process.env.NODE_PATH : '');
@@ -14351,11 +14352,14 @@ function detectGeminiCli(useCache = true) {
   if (useCache && geminiCache) return geminiCache;
   const installHint = "Install Gemini CLI: npm install -g @google/gemini-cli (see https://github.com/google-gemini/gemini-cli)";
   try {
-    const command = process.platform === "win32" ? "where gemini" : "which gemini";
-    const path = (0, import_child_process.execSync)(command, { encoding: "utf-8", timeout: 5e3 }).trim();
+    const cmd = process.platform === "win32" ? "where" : "which";
+    const pathResult = (0, import_child_process.spawnSync)(cmd, ["gemini"], { encoding: "utf-8", timeout: 5e3 });
+    if (pathResult.status !== 0) throw new Error("gemini not found");
+    const path = pathResult.stdout.trim();
     let version2;
     try {
-      version2 = (0, import_child_process.execSync)("gemini --version", { encoding: "utf-8", timeout: 5e3 }).trim();
+      const versionResult = (0, import_child_process.spawnSync)("gemini", ["--version"], { encoding: "utf-8", timeout: 5e3 });
+      if (versionResult.status === 0) version2 = versionResult.stdout.trim();
     } catch {
     }
     const result = { available: true, path, version: version2, installHint };
@@ -14399,13 +14403,13 @@ function setCache(key, value) {
 }
 function execGit(command, cwd) {
   try {
-    return (0, import_child_process2.execSync)(`git --no-pager ${command}`, {
+    const args = ["--no-pager", ...command.split(/\s+/)];
+    const result = (0, import_child_process2.spawnSync)("git", args, {
       cwd,
       encoding: "utf-8",
-      timeout: GIT_TIMEOUT,
-      stdio: ["pipe", "pipe", "pipe"],
-      shell: process.platform === "win32" ? "cmd.exe" : void 0
-    }).trim();
+      timeout: GIT_TIMEOUT
+    });
+    return result.status === 0 ? result.stdout.trim() : "";
   } catch {
     return "";
   }
@@ -14458,6 +14462,7 @@ function getPackageDir() {
   }
   return process.cwd();
 }
+var promptCache = /* @__PURE__ */ new Map();
 function stripFrontmatter(content) {
   const match = content.match(/^---[\s\S]*?---\s*([\s\S]*)$/);
   return match ? match[1].trim() : content.trim();
@@ -14467,10 +14472,17 @@ function loadAgentPrompt(agentName, provider) {
     throw new Error(`Invalid agent name: contains disallowed characters`);
   }
   if (provider) {
+    const cacheKey2 = `${provider}:${agentName}`;
+    if (promptCache.has(cacheKey2)) {
+      return promptCache.get(cacheKey2);
+    }
     try {
       if (provider === "codex" && typeof __AGENT_PROMPTS_CODEX__ !== "undefined" && __AGENT_PROMPTS_CODEX__ !== null) {
         const prompt = __AGENT_PROMPTS_CODEX__[agentName];
-        if (prompt) return prompt;
+        if (prompt) {
+          promptCache.set(cacheKey2, prompt);
+          return prompt;
+        }
       }
     } catch {
     }
@@ -14482,15 +14494,24 @@ function loadAgentPrompt(agentName, provider) {
       const rel = (0, import_path3.relative)(resolvedProviderDir, resolvedPath);
       if (!rel.startsWith("..") && !(0, import_path3.isAbsolute)(rel)) {
         const content = (0, import_fs3.readFileSync)(providerPath, "utf-8");
-        return stripFrontmatter(content);
+        const prompt = stripFrontmatter(content);
+        promptCache.set(cacheKey2, prompt);
+        return prompt;
       }
     } catch {
     }
   }
+  const cacheKey = agentName;
+  if (promptCache.has(cacheKey)) {
+    return promptCache.get(cacheKey);
+  }
   try {
     if (typeof define_AGENT_PROMPTS_default !== "undefined" && define_AGENT_PROMPTS_default !== null) {
       const prompt = define_AGENT_PROMPTS_default[agentName];
-      if (prompt) return prompt;
+      if (prompt) {
+        promptCache.set(cacheKey, prompt);
+        return prompt;
+      }
     }
   } catch {
   }
@@ -14504,7 +14525,9 @@ function loadAgentPrompt(agentName, provider) {
       throw new Error(`Invalid agent name: path traversal detected`);
     }
     const content = (0, import_fs3.readFileSync)(agentPath, "utf-8");
-    return stripFrontmatter(content);
+    const prompt = stripFrontmatter(content);
+    promptCache.set(cacheKey, prompt);
+    return prompt;
   } catch (error2) {
     const message = error2 instanceof Error && error2.message.includes("Invalid agent name") ? error2.message : "Agent prompt file not found";
     console.warn(`[loadAgentPrompt] ${message}`);
@@ -14705,8 +14728,13 @@ async function initJobDb(cwd) {
       const oldestKey = dbMap.keys().next().value;
       if (oldestKey) {
         const oldDb = dbMap.get(oldestKey);
-        oldDb?.close();
-        dbMap.delete(oldestKey);
+        try {
+          oldDb?.close();
+        } catch (err) {
+          console.error(`[job-state-db] Failed to close connection: ${err}`);
+        } finally {
+          dbMap.delete(oldestKey);
+        }
       }
     }
     ensureStateDir(cwd);
@@ -16181,7 +16209,7 @@ var TIME_THRESHOLD = {
 
 // src/config/loader.ts
 function isValidModelName(name) {
-  return /^[a-zA-Z0-9.\-]{1,100}$/.test(name);
+  return /^[a-zA-Z0-9.-]{1,100}$/.test(name);
 }
 var DEFAULT_CONFIG = {
   agents: {
@@ -16515,9 +16543,7 @@ function executeGemini(prompt, model, cwd) {
     const child = (0, import_child_process3.spawn)("gemini", args, {
       stdio: ["pipe", "pipe", "pipe"],
       ...cwd ? { cwd } : {},
-      // shell: true needed on Windows for .cmd/.bat executables.
-      // Safe: args are array-based and model names are regex-validated.
-      ...process.platform === "win32" ? { shell: true } : {}
+      shell: false
     });
     const timeoutHandle = setTimeout(() => {
       if (!settled) {
@@ -16593,7 +16619,7 @@ function executeGeminiBackground(fullPrompt, modelInput, jobMeta, workingDirecto
         detached: process.platform !== "win32",
         stdio: ["pipe", "pipe", "pipe"],
         ...workingDirectory ? { cwd: workingDirectory } : {},
-        ...process.platform === "win32" ? { shell: true } : {}
+        shell: false
       });
       if (!child.pid) {
         return { error: "Failed to get process ID" };
@@ -17110,15 +17136,16 @@ var SqliteWorkerAdapter = class {
   async init() {
     try {
       const betterSqlite3Module = await import("better-sqlite3");
-      const Database2 = betterSqlite3Module.default || betterSqlite3Module;
+      const DatabaseConstructor = betterSqlite3Module.default || betterSqlite3Module;
       const stateDir = (0, import_path11.join)(this.cwd, ".omc", "state");
       if (!(0, import_fs11.existsSync)(stateDir)) {
         (0, import_fs11.mkdirSync)(stateDir, { recursive: true });
       }
       const dbPath = (0, import_path11.join)(stateDir, "workers.db");
-      this.db = new Database2(dbPath);
-      this.db.pragma("journal_mode = WAL");
-      this.db.exec(`
+      this.db = new DatabaseConstructor(dbPath);
+      if (this.db) {
+        this.db.pragma("journal_mode = WAL");
+        this.db.exec(`
         CREATE TABLE IF NOT EXISTS workers (
           worker_id TEXT PRIMARY KEY,
           worker_type TEXT NOT NULL,
@@ -17144,6 +17171,7 @@ var SqliteWorkerAdapter = class {
         CREATE INDEX IF NOT EXISTS idx_status ON workers(status);
         CREATE INDEX IF NOT EXISTS idx_team_name ON workers(team_name);
       `);
+      }
       return true;
     } catch (error2) {
       console.error("[SqliteWorkerAdapter] Init failed:", error2);