@link-assistant/hive-mind 2.13.5 → 2.15.0

package/src/solve.config.lib.mjs

@@ -507,6 +507,17 @@ export const SOLVE_OPTION_DEFINITIONS = {
     description: '[EXPERIMENTAL] When --accept-incomming-comments-as-input is enabled, queue new PR/issue comments and only flush them once the AI signals it is idle (waiting for input). This is the default mode implied by --auto-input-until-mergeable so the AI completes the current step before being interrupted with new instructions. Mutually exclusive with --stream-comments-to-input; queue mode wins if both are set. Only supported for --tool claude and --tool agent.',
     default: false,
   },
+  // Issue #2164: route the task's model traffic through a `hive-mind-router`
+  //   sidecar instead of bind-mounting the operator's vendor credentials into
+  //   the task container. The task then holds a token scoped to itself alone,
+  //   every request lands in that token's own audit log, and the subscription
+  //   never leaves the sidecar. Experimental: GitHub traffic and `--model
+  //   formal-ai` are not routed yet (see docs/ROUTER.md).
+  'use-router': {
+    type: 'boolean',
+    description: '[EXPERIMENTAL] Route model traffic through the hive-mind-router sidecar instead of mounting Claude/Codex credentials into the task container. Each task receives its own scoped, short-lived token and its own request log, and the AI subscription stays in the router. Requires --isolation docker (or the Telegram bot in docker isolation mode).',
+    default: false,
+  },
   'prompt-explore-sub-agent': {
     type: 'boolean',
     description: 'Encourage AI to use Explore-style sub-agent workflow for codebase exploration. Supported for --tool claude and --tool codex.',
@@ -592,6 +603,11 @@ export const SOLVE_OPTION_DEFINITIONS = {
     description: 'Disable Claude Code built-in tools and MCP servers that have no value (and may be harmful) in autonomous headless runs: AskUserQuestion, CronCreate/Delete/List, EnterPlanMode/ExitPlanMode, EnterWorktree/ExitWorktree, Monitor, NotebookEdit, PushNotification, RemoteTrigger, ScheduleWakeup, and the claude.ai Gmail/Drive/Calendar OAuth connectors. Default: true. Use --no-useless-tools-disabled to keep them enabled. Supported for --tool claude (issue #1627).',
     default: true,
   },
+  'agent-memory-disabled': {
+    type: 'boolean',
+    description: "Disable every AI tool's own cross-task memory and permission classifier, so the repository stays the only memory a task keeps. For --tool codex: -c features.memories=false and -c features.external_agent_memory_import=false. For --tool gemini and --tool qwen: tools.exclude=[save_memory] and experimental.autoMemory=false. --tool opencode and --tool agent have no cross-session memory feature. Default: true; --no-agent-memory-disabled lets those tools keep their own memory. For --tool claude the same switches (CLAUDE_CODE_DISABLE_AUTO_MEMORY, CLAUDE_CODE_DISABLE_ORG_MEMORY, autoMemoryEnabled=false, permissions.disableAutoMode=disable) are part of the quiet configuration baked into the Docker image, so they stay off regardless of this flag (issue #2178).",
+    default: true,
+  },
   'auto-gh-configuration-repair': {
     type: 'boolean',
     description: 'Automatically repair git configuration using gh-setup-git-identity --repair when git identity is not configured. Requires gh-setup-git-identity to be installed.',

package/src/task.config.lib.mjs

@@ -63,6 +63,11 @@ export const createYargsConfig = yargsInstance =>
       choices: ['screen', 'none', 'docker'],
       default: 'docker',
     })
+    .option('use-router', {
+      type: 'boolean',
+      description: '[EXPERIMENTAL] Route model traffic through the hive-mind-router sidecar instead of mounting AI credentials into the task container (issue #2164)',
+      default: false,
+    })
     .option('screen-name', {
       type: 'string',
       description: 'Screen session name when --isolation screen is used',

package/src/task.mjs

@@ -42,6 +42,7 @@ if (earlyArgs.length === 0 || earlyArgs.includes('--help') || earlyArgs.includes
   console.log('  --tool             AI tool for agent-commander read-only mode (claude, codex, opencode, agent, qwen, gemini) [default: claude]');
   console.log('  --model, -m        Model to use');
   console.log('  --isolation        agent-commander isolation mode [default: docker]');
+  console.log('  --use-router       [EXPERIMENTAL] Route model traffic through the hive-mind-router sidecar (issue #2164)');
   console.log('  --dry-run          Print split output without creating GitHub issues');
   console.log('  --verbose, -v      Enable verbose logging');
   console.log('  --output-format    Output format (text or json) [default: text]');

package/src/telegram-bot.mjs

@@ -255,6 +255,7 @@ const { createHeartbeat, resumeSessionsOnLaunch, createShutdownHandler } = await
 const { formatExecutingWorkSessionMessage, formatStartingWorkSessionMessage } = await import('./work-session-formatting.lib.mjs');
 const { buildTelegramHelpMessage, buildTelegramInfoBlock, buildSolveQueuedMessage } = await import('./telegram-ui-messages.lib.mjs');
 const { startFormalAiMaintenance } = await import('./formal-ai-maintenance.lib.mjs');
+const { startRouterMaintenance } = await import('./router-maintenance.lib.mjs');
 // Initialize Sentry for error tracking
 await initializeSentry({
   debug: VERBOSE,
@@ -1198,6 +1199,7 @@ if (VERBOSE) {
 const launchAbortController = new AbortController();
 let sessionMonitoringTimer = null;
 let formalAiMaintenance = null;
+let routerMaintenance = null;
 let launchAnnouncementShown = false;
 
 function startSessionMonitoringOnce() {
@@ -1220,6 +1222,20 @@ function startFormalAiMaintenanceOnce() {
   });
 }
 
+// Issue #2164 (R5): the router sidecar must only run while at least one task
+// uses it. A task that finishes releases its own lease, but a killed task or a
+// host reboot leaves one behind — this tick reconciles those against Docker and
+// stops an idle router. The audit data volume is never removed.
+function startRouterMaintenanceOnce() {
+  if (routerMaintenance) return;
+  routerMaintenance = startRouterMaintenance({
+    verbose: VERBOSE,
+    log: async message => {
+      console.log(message);
+    },
+  });
+}
+
 // Issue #1927 (requirements #3/#4): a periodic timestamped heartbeat so the "last
 // time the bot was alive" is always discoverable from the log. The heartbeat
 // logic lives in bot-lifecycle.lib.mjs so it can be unit tested.
@@ -1240,6 +1256,7 @@ async function onBotLaunched() {
 
   startSessionMonitoringOnce();
   startFormalAiMaintenanceOnce();
+  startRouterMaintenanceOnce();
   heartbeat.start();
   if (VERBOSE) {
     console.log('[VERBOSE] Bot launched successfully');
@@ -1334,6 +1351,7 @@ const handleShutdownSignal = createShutdownHandler({
     launchAbortController.abort();
     if (sessionMonitoringTimer) clearInterval(sessionMonitoringTimer);
     formalAiMaintenance?.stop();
+    routerMaintenance?.stop();
     heartbeat.stop();
     stopSolveQueue();
   },