@livedesk/hub 0.1.40 → 0.1.42

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/hub",
-  "version": "0.1.40",
+  "version": "0.1.42",
   "description": "LiveDesk local Hub API and browser frame bridge",
   "type": "module",
   "main": "src/server.js",
@@ -16,7 +16,7 @@
   },
   "dependencies": {
     "@ffmpeg-installer/ffmpeg": "^1.1.0",
-    "@livedesk/runtime-core": "0.1.5",
+    "@livedesk/runtime-core": "0.1.5",
     "@openai/codex-sdk": "0.145.0",
     "cors": "^2.8.5",
     "express": "^4.21.2",

package/src/agents/agent-device-scope.js

@@ -1,29 +1,29 @@
-function normalizeIds(value) {
-  const source = Array.isArray(value) ? value : [];
-  return [...new Set(source.map(item => String(item || '').trim()).filter(Boolean))].slice(0, 500);
-}
-
-export function createAgentDeviceScope(allowedDeviceIds, fallbackDeviceIds = []) {
-  const requested = normalizeIds(allowedDeviceIds);
-  const fallback = normalizeIds(fallbackDeviceIds);
-  return new Set(requested.length > 0 ? requested : fallback);
-}
-
-export function selectAgentDeviceIds({ allowedDeviceIds, requestedDeviceIds, connectedDeviceIds }) {
-  const allowed = allowedDeviceIds instanceof Set ? allowedDeviceIds : new Set(normalizeIds(allowedDeviceIds));
-  const requested = normalizeIds(requestedDeviceIds);
-  const connected = new Set(normalizeIds(connectedDeviceIds));
-  const candidates = requested.length > 0 ? requested : [...allowed];
-  return candidates.filter(deviceId => allowed.has(deviceId) && connected.has(deviceId));
-}
-
-export function resolveAgentTargetIds({ allowedDeviceIds, requestedDeviceIds, connectedDeviceIds }) {
-  const requested = normalizeIds(requestedDeviceIds);
-  const allowed = allowedDeviceIds instanceof Set ? allowedDeviceIds : new Set(normalizeIds(allowedDeviceIds));
-  const deviceIds = selectAgentDeviceIds({ allowedDeviceIds: allowed, requestedDeviceIds: requested, connectedDeviceIds });
-  if (deviceIds.length > 0) return { deviceIds, error: '' };
-  if (requested.length > 0 && requested.every(deviceId => !allowed.has(deviceId))) {
-    return { deviceIds: [], error: 'agent-target-outside-selection' };
-  }
-  return { deviceIds: [], error: 'agent-no-target-devices' };
-}
+function normalizeIds(value) {
+  const source = Array.isArray(value) ? value : [];
+  return [...new Set(source.map(item => String(item || '').trim()).filter(Boolean))].slice(0, 500);
+}
+
+export function createAgentDeviceScope(allowedDeviceIds, fallbackDeviceIds = []) {
+  const requested = normalizeIds(allowedDeviceIds);
+  const fallback = normalizeIds(fallbackDeviceIds);
+  return new Set(requested.length > 0 ? requested : fallback);
+}
+
+export function selectAgentDeviceIds({ allowedDeviceIds, requestedDeviceIds, connectedDeviceIds }) {
+  const allowed = allowedDeviceIds instanceof Set ? allowedDeviceIds : new Set(normalizeIds(allowedDeviceIds));
+  const requested = normalizeIds(requestedDeviceIds);
+  const connected = new Set(normalizeIds(connectedDeviceIds));
+  const candidates = requested.length > 0 ? requested : [...allowed];
+  return candidates.filter(deviceId => allowed.has(deviceId) && connected.has(deviceId));
+}
+
+export function resolveAgentTargetIds({ allowedDeviceIds, requestedDeviceIds, connectedDeviceIds }) {
+  const requested = normalizeIds(requestedDeviceIds);
+  const allowed = allowedDeviceIds instanceof Set ? allowedDeviceIds : new Set(normalizeIds(allowedDeviceIds));
+  const deviceIds = selectAgentDeviceIds({ allowedDeviceIds: allowed, requestedDeviceIds: requested, connectedDeviceIds });
+  if (deviceIds.length > 0) return { deviceIds, error: '' };
+  if (requested.length > 0 && requested.every(deviceId => !allowed.has(deviceId))) {
+    return { deviceIds: [], error: 'agent-target-outside-selection' };
+  }
+  return { deviceIds: [], error: 'agent-no-target-devices' };
+}

package/src/agents/agent-manager.js

@@ -1,103 +1,103 @@
-import os from 'node:os';
-import path from 'node:path';
-import { AgentSettingsStore } from './agent-settings.js';
-import { AgentRuntimeError } from './agent-runtime-error.js';
-
-function publicCodexStatus(status = {}) {
-  return {
-    installed: status.installed === true,
-    authenticated: ['signed-in', 'not-signed-in'].includes(status.authenticated) ? status.authenticated : 'unknown',
-    status: String(status.status || 'unknown').slice(0, 40),
-    codexPath: String(status.codexPath || '').slice(0, 500),
-    detail: String(status.detail || '').slice(0, 300)
-  };
-}
-
-function publicCodexConnection(result = {}) {
-  const latencyMs = Number(result.latencyMs);
-  return {
-    ok: result.ok === true,
-    latencyMs: Number.isFinite(latencyMs) ? Math.max(0, Math.round(latencyMs)) : 0,
-    threadId: String(result.threadId || '').slice(0, 200)
-  };
-}
-
-export function createAgentManager({
-  dataDir = path.join(os.homedir(), '.livedesk'),
-  settingsStore,
-  codexRuntime
-} = {}) {
-  const settings = settingsStore || new AgentSettingsStore({ dataDir });
-  const runtime = codexRuntime;
-  let statusCache = { expiresAt: 0, value: null };
-  let statusRefreshPromise = null;
-  let statusRefreshGeneration = 0;
-
-  async function getCodexStatus() {
-    if (!runtime) return { installed: false, authenticated: 'unknown', status: 'unavailable', codexPath: '' };
-    if (statusCache.value && statusCache.expiresAt > Date.now()) return statusCache.value;
-    if (statusRefreshPromise) return statusRefreshPromise;
-    const generation = statusRefreshGeneration;
-    const refresh = (async () => {
-      let value;
-      try {
-        value = publicCodexStatus(await runtime.getStatus());
-      } catch (error) {
-        value = publicCodexStatus({
-          installed: true,
-          authenticated: 'unknown',
-          status: error?.code || 'security-unavailable',
-          detail: error?.message || 'Codex security isolation is unavailable.'
-        });
-      }
-      if (generation === statusRefreshGeneration) {
-        statusCache = { value, expiresAt: Date.now() + 10000 };
-      }
-      return value;
-    })();
-    statusRefreshPromise = refresh;
-    try {
-      return await refresh;
-    } finally {
-      if (statusRefreshPromise === refresh) statusRefreshPromise = null;
-    }
-  }
-
-  async function publicSettings() {
-    const current = await settings.get();
-    const codex = await getCodexStatus();
-    return {
-      enabled: current.enabled === true,
-      codexInstallation: codex.installed ? 'installed' : 'not-installed',
-      codexAuth: codex.authenticated,
-      codexStatus: codex.status
-    };
-  }
-
-  return {
-    getSettings: publicSettings,
-    async testConnection() {
-      if (!runtime) throw new AgentRuntimeError('codex-sdk-not-installed', 'Codex SDK is not installed.', { status: 503 });
-      statusCache = { expiresAt: 0, value: null };
-      statusRefreshGeneration += 1;
-      statusRefreshPromise = null;
-      return publicCodexConnection(await runtime.testConnection());
-    },
-    async createSummary(input) {
-      const source = input && typeof input === 'object' ? input : {};
-      const results = Array.isArray(source.results) ? source.results : [];
-      return {
-        summary: String(results.length ? `${source.completed || 0} completed, ${source.failed || 0} failed.` : 'LiveDesk Agent run completed.').slice(0, 1200)
-      };
-    },
-    async startRun(input) {
-      if (!runtime) {
-        throw new AgentRuntimeError('agent-codex-not-active', 'Codex SDK is not available for LiveDesk Agent commands.', { status: 409 });
-      }
-      return runtime.start(input);
-    },
-    getRun(runId) { return runtime?.get(runId) || null; },
-    cancelRun(runId) { return runtime?.cancel(runId) || null; },
-    cancelAllRuns() { return runtime?.cancelAll?.() || 0; }
-  };
-}
+import os from 'node:os';
+import path from 'node:path';
+import { AgentSettingsStore } from './agent-settings.js';
+import { AgentRuntimeError } from './agent-runtime-error.js';
+
+function publicCodexStatus(status = {}) {
+  return {
+    installed: status.installed === true,
+    authenticated: ['signed-in', 'not-signed-in'].includes(status.authenticated) ? status.authenticated : 'unknown',
+    status: String(status.status || 'unknown').slice(0, 40),
+    codexPath: String(status.codexPath || '').slice(0, 500),
+    detail: String(status.detail || '').slice(0, 300)
+  };
+}
+
+function publicCodexConnection(result = {}) {
+  const latencyMs = Number(result.latencyMs);
+  return {
+    ok: result.ok === true,
+    latencyMs: Number.isFinite(latencyMs) ? Math.max(0, Math.round(latencyMs)) : 0,
+    threadId: String(result.threadId || '').slice(0, 200)
+  };
+}
+
+export function createAgentManager({
+  dataDir = path.join(os.homedir(), '.livedesk'),
+  settingsStore,
+  codexRuntime
+} = {}) {
+  const settings = settingsStore || new AgentSettingsStore({ dataDir });
+  const runtime = codexRuntime;
+  let statusCache = { expiresAt: 0, value: null };
+  let statusRefreshPromise = null;
+  let statusRefreshGeneration = 0;
+
+  async function getCodexStatus() {
+    if (!runtime) return { installed: false, authenticated: 'unknown', status: 'unavailable', codexPath: '' };
+    if (statusCache.value && statusCache.expiresAt > Date.now()) return statusCache.value;
+    if (statusRefreshPromise) return statusRefreshPromise;
+    const generation = statusRefreshGeneration;
+    const refresh = (async () => {
+      let value;
+      try {
+        value = publicCodexStatus(await runtime.getStatus());
+      } catch (error) {
+        value = publicCodexStatus({
+          installed: true,
+          authenticated: 'unknown',
+          status: error?.code || 'security-unavailable',
+          detail: error?.message || 'Codex security isolation is unavailable.'
+        });
+      }
+      if (generation === statusRefreshGeneration) {
+        statusCache = { value, expiresAt: Date.now() + 10000 };
+      }
+      return value;
+    })();
+    statusRefreshPromise = refresh;
+    try {
+      return await refresh;
+    } finally {
+      if (statusRefreshPromise === refresh) statusRefreshPromise = null;
+    }
+  }
+
+  async function publicSettings() {
+    const current = await settings.get();
+    const codex = await getCodexStatus();
+    return {
+      enabled: current.enabled === true,
+      codexInstallation: codex.installed ? 'installed' : 'not-installed',
+      codexAuth: codex.authenticated,
+      codexStatus: codex.status
+    };
+  }
+
+  return {
+    getSettings: publicSettings,
+    async testConnection() {
+      if (!runtime) throw new AgentRuntimeError('codex-sdk-not-installed', 'Codex SDK is not installed.', { status: 503 });
+      statusCache = { expiresAt: 0, value: null };
+      statusRefreshGeneration += 1;
+      statusRefreshPromise = null;
+      return publicCodexConnection(await runtime.testConnection());
+    },
+    async createSummary(input) {
+      const source = input && typeof input === 'object' ? input : {};
+      const results = Array.isArray(source.results) ? source.results : [];
+      return {
+        summary: String(results.length ? `${source.completed || 0} completed, ${source.failed || 0} failed.` : 'LiveDesk Agent run completed.').slice(0, 1200)
+      };
+    },
+    async startRun(input) {
+      if (!runtime) {
+        throw new AgentRuntimeError('agent-codex-not-active', 'Codex SDK is not available for LiveDesk Agent commands.', { status: 409 });
+      }
+      return runtime.start(input);
+    },
+    getRun(runId) { return runtime?.get(runId) || null; },
+    cancelRun(runId) { return runtime?.cancel(runId) || null; },
+    cancelAllRuns() { return runtime?.cancelAll?.() || 0; }
+  };
+}

package/src/agents/agent-permission-store.js

@@ -1,78 +1,78 @@
-import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-import crypto from 'node:crypto';
-import { DEFAULT_CUSTOM_AGENT_PERMISSION_CATEGORIES, normalizeAgentPermissionCategories } from './agent-permissions.js';
-
-function safePolicyId(value) {
-  const id = String(value || '').trim().replace(/[^a-zA-Z0-9_.:-]/g, '-').slice(0, 80);
-  return id || 'custom-default';
-}
-
-function publicPolicy(policy) {
-  return {
-    id: policy.id,
-    name: policy.name,
-    categories: { ...policy.categories },
-    createdAt: policy.createdAt,
-    updatedAt: policy.updatedAt
-  };
-}
-
-export function createAgentPermissionStore({ dataDir = path.join(os.homedir(), '.livedesk') } = {}) {
-  const filePath = path.join(dataDir, 'agent-permission-policies.json');
-  let policies;
-
-  async function load() {
-    if (policies) return policies;
-    try {
-      const parsed = JSON.parse(await readFile(filePath, 'utf8'));
-      policies = new Map(Object.entries(parsed && typeof parsed === 'object' ? parsed : {}).map(([id, value]) => [safePolicyId(id), {
-        id: safePolicyId(id),
-        name: String(value?.name || id).slice(0, 120),
-        categories: normalizeAgentPermissionCategories(value?.categories, DEFAULT_CUSTOM_AGENT_PERMISSION_CATEGORIES),
-        createdAt: String(value?.createdAt || new Date().toISOString()),
-        updatedAt: String(value?.updatedAt || new Date().toISOString())
-      }]));
-    } catch {
-      policies = new Map();
-    }
-    if (!policies.has('custom-default')) {
-      const now = new Date().toISOString();
-      policies.set('custom-default', { id: 'custom-default', name: 'Custom default', categories: { ...DEFAULT_CUSTOM_AGENT_PERMISSION_CATEGORIES }, createdAt: now, updatedAt: now });
-    }
-    return policies;
-  }
-
-  async function save() {
-    const current = await load();
-    const value = Object.fromEntries([...current].map(([id, policy]) => [id, policy]));
-    await mkdir(path.dirname(filePath), { recursive: true });
-    const temporaryPath = `${filePath}.${process.pid}.${crypto.randomUUID()}.tmp`;
-    await writeFile(temporaryPath, `${JSON.stringify(value, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
-    await rename(temporaryPath, filePath);
-  }
-
-  return {
-    async list() { return [...await load()].map(([, policy]) => publicPolicy(policy)); },
-    async get(id = 'custom-default') {
-      const current = await load();
-      return publicPolicy(current.get(safePolicyId(id)) || current.get('custom-default'));
-    },
-    async upsert({ id = 'custom-default', name = 'Custom default', categories = {} } = {}) {
-      const current = await load();
-      const policyId = safePolicyId(id);
-      const previous = current.get(policyId);
-      const now = new Date().toISOString();
-      current.set(policyId, {
-        id: policyId,
-        name: String(name || policyId).slice(0, 120),
-        categories: normalizeAgentPermissionCategories(categories, previous?.categories || DEFAULT_CUSTOM_AGENT_PERMISSION_CATEGORIES),
-        createdAt: previous?.createdAt || now,
-        updatedAt: now
-      });
-      await save();
-      return publicPolicy(current.get(policyId));
-    }
-  };
-}
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import { DEFAULT_CUSTOM_AGENT_PERMISSION_CATEGORIES, normalizeAgentPermissionCategories } from './agent-permissions.js';
+
+function safePolicyId(value) {
+  const id = String(value || '').trim().replace(/[^a-zA-Z0-9_.:-]/g, '-').slice(0, 80);
+  return id || 'custom-default';
+}
+
+function publicPolicy(policy) {
+  return {
+    id: policy.id,
+    name: policy.name,
+    categories: { ...policy.categories },
+    createdAt: policy.createdAt,
+    updatedAt: policy.updatedAt
+  };
+}
+
+export function createAgentPermissionStore({ dataDir = path.join(os.homedir(), '.livedesk') } = {}) {
+  const filePath = path.join(dataDir, 'agent-permission-policies.json');
+  let policies;
+
+  async function load() {
+    if (policies) return policies;
+    try {
+      const parsed = JSON.parse(await readFile(filePath, 'utf8'));
+      policies = new Map(Object.entries(parsed && typeof parsed === 'object' ? parsed : {}).map(([id, value]) => [safePolicyId(id), {
+        id: safePolicyId(id),
+        name: String(value?.name || id).slice(0, 120),
+        categories: normalizeAgentPermissionCategories(value?.categories, DEFAULT_CUSTOM_AGENT_PERMISSION_CATEGORIES),
+        createdAt: String(value?.createdAt || new Date().toISOString()),
+        updatedAt: String(value?.updatedAt || new Date().toISOString())
+      }]));
+    } catch {
+      policies = new Map();
+    }
+    if (!policies.has('custom-default')) {
+      const now = new Date().toISOString();
+      policies.set('custom-default', { id: 'custom-default', name: 'Custom default', categories: { ...DEFAULT_CUSTOM_AGENT_PERMISSION_CATEGORIES }, createdAt: now, updatedAt: now });
+    }
+    return policies;
+  }
+
+  async function save() {
+    const current = await load();
+    const value = Object.fromEntries([...current].map(([id, policy]) => [id, policy]));
+    await mkdir(path.dirname(filePath), { recursive: true });
+    const temporaryPath = `${filePath}.${process.pid}.${crypto.randomUUID()}.tmp`;
+    await writeFile(temporaryPath, `${JSON.stringify(value, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+    await rename(temporaryPath, filePath);
+  }
+
+  return {
+    async list() { return [...await load()].map(([, policy]) => publicPolicy(policy)); },
+    async get(id = 'custom-default') {
+      const current = await load();
+      return publicPolicy(current.get(safePolicyId(id)) || current.get('custom-default'));
+    },
+    async upsert({ id = 'custom-default', name = 'Custom default', categories = {} } = {}) {
+      const current = await load();
+      const policyId = safePolicyId(id);
+      const previous = current.get(policyId);
+      const now = new Date().toISOString();
+      current.set(policyId, {
+        id: policyId,
+        name: String(name || policyId).slice(0, 120),
+        categories: normalizeAgentPermissionCategories(categories, previous?.categories || DEFAULT_CUSTOM_AGENT_PERMISSION_CATEGORIES),
+        createdAt: previous?.createdAt || now,
+        updatedAt: now
+      });
+      await save();
+      return publicPolicy(current.get(policyId));
+    }
+  };
+}

package/src/agents/agent-runtime-error.js

@@ -1,9 +1,9 @@
-export class AgentRuntimeError extends Error {
-  constructor(code, message, { status = 502, retryable = false } = {}) {
-    super(message);
-    this.name = 'AgentRuntimeError';
-    this.code = code;
-    this.status = status;
-    this.retryable = retryable;
-  }
-}
+export class AgentRuntimeError extends Error {
+  constructor(code, message, { status = 502, retryable = false } = {}) {
+    super(message);
+    this.name = 'AgentRuntimeError';
+    this.code = code;
+    this.status = status;
+    this.retryable = retryable;
+  }
+}

package/src/agents/agent-settings.js

@@ -1,71 +1,71 @@
-import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
-import os from 'node:os';
-import path from 'node:path';
-
-export const DEFAULT_AGENT_SETTINGS = Object.freeze({
-  settingsVersion: 5,
-  enabled: true,
-  codexTaskTimeoutMs: 600000,
-  codexMaxTurns: 12,
-  codexMaxToolCalls: 20,
-  codexResumeSessions: true,
-  maxConcurrentRequests: 2
-});
-
-function booleanValue(value, fallback) {
-  return typeof value === 'boolean' ? value : fallback;
-}
-
-function numberValue(value, min, max, fallback, integer = false) {
-  const number = Number(value);
-  if (!Number.isFinite(number)) return fallback;
-  const clamped = Math.max(min, Math.min(max, number));
-  return integer ? Math.round(clamped) : clamped;
-}
-
-export function normalizeAgentSettings(value = {}) {
-  const source = value && typeof value === 'object' && !Array.isArray(value) ? value : {};
-  return {
-    settingsVersion: 5,
-    enabled: booleanValue(source.enabled, DEFAULT_AGENT_SETTINGS.enabled),
-    codexTaskTimeoutMs: numberValue(source.codexTaskTimeoutMs, 30000, 1800000, DEFAULT_AGENT_SETTINGS.codexTaskTimeoutMs, true),
-    codexMaxTurns: numberValue(source.codexMaxTurns, 1, 40, DEFAULT_AGENT_SETTINGS.codexMaxTurns, true),
-    codexMaxToolCalls: numberValue(source.codexMaxToolCalls, 1, 100, DEFAULT_AGENT_SETTINGS.codexMaxToolCalls, true),
-    codexResumeSessions: booleanValue(source.codexResumeSessions, DEFAULT_AGENT_SETTINGS.codexResumeSessions),
-    maxConcurrentRequests: numberValue(source.maxConcurrentRequests, 1, 8, DEFAULT_AGENT_SETTINGS.maxConcurrentRequests, true)
-  };
-}
-
-async function writeJsonAtomic(filePath, value) {
-  await mkdir(path.dirname(filePath), { recursive: true });
-  const temporaryPath = `${filePath}.${process.pid}.${Date.now()}.tmp`;
-  await writeFile(temporaryPath, `${JSON.stringify(value, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
-  await rename(temporaryPath, filePath);
-}
-
-export class AgentSettingsStore {
-  constructor({ dataDir = path.join(os.homedir(), '.livedesk') } = {}) {
-    this.filePath = path.join(dataDir, 'agent-settings.json');
-    this.settings = null;
-  }
-
-  async get() {
-    if (this.settings) return { ...this.settings };
-    try {
-      const raw = await readFile(this.filePath, 'utf8');
-      this.settings = normalizeAgentSettings(JSON.parse(raw));
-    } catch {
-      this.settings = normalizeAgentSettings(DEFAULT_AGENT_SETTINGS);
-    }
-    return { ...this.settings };
-  }
-
-  async update(patch = {}) {
-    const current = await this.get();
-    const next = normalizeAgentSettings({ ...current, ...patch });
-    await writeJsonAtomic(this.filePath, next);
-    this.settings = next;
-    return { ...next };
-  }
-
-}
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+
+export const DEFAULT_AGENT_SETTINGS = Object.freeze({
+  settingsVersion: 5,
+  enabled: true,
+  codexTaskTimeoutMs: 600000,
+  codexMaxTurns: 12,
+  codexMaxToolCalls: 20,
+  codexResumeSessions: true,
+  maxConcurrentRequests: 2
+});
+
+function booleanValue(value, fallback) {
+  return typeof value === 'boolean' ? value : fallback;
+}
+
+function numberValue(value, min, max, fallback, integer = false) {
+  const number = Number(value);
+  if (!Number.isFinite(number)) return fallback;
+  const clamped = Math.max(min, Math.min(max, number));
+  return integer ? Math.round(clamped) : clamped;
+}
+
+export function normalizeAgentSettings(value = {}) {
+  const source = value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+  return {
+    settingsVersion: 5,
+    enabled: booleanValue(source.enabled, DEFAULT_AGENT_SETTINGS.enabled),
+    codexTaskTimeoutMs: numberValue(source.codexTaskTimeoutMs, 30000, 1800000, DEFAULT_AGENT_SETTINGS.codexTaskTimeoutMs, true),
+    codexMaxTurns: numberValue(source.codexMaxTurns, 1, 40, DEFAULT_AGENT_SETTINGS.codexMaxTurns, true),
+    codexMaxToolCalls: numberValue(source.codexMaxToolCalls, 1, 100, DEFAULT_AGENT_SETTINGS.codexMaxToolCalls, true),
+    codexResumeSessions: booleanValue(source.codexResumeSessions, DEFAULT_AGENT_SETTINGS.codexResumeSessions),
+    maxConcurrentRequests: numberValue(source.maxConcurrentRequests, 1, 8, DEFAULT_AGENT_SETTINGS.maxConcurrentRequests, true)
+  };
+}
+
+async function writeJsonAtomic(filePath, value) {
+  await mkdir(path.dirname(filePath), { recursive: true });
+  const temporaryPath = `${filePath}.${process.pid}.${Date.now()}.tmp`;
+  await writeFile(temporaryPath, `${JSON.stringify(value, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
+  await rename(temporaryPath, filePath);
+}
+
+export class AgentSettingsStore {
+  constructor({ dataDir = path.join(os.homedir(), '.livedesk') } = {}) {
+    this.filePath = path.join(dataDir, 'agent-settings.json');
+    this.settings = null;
+  }
+
+  async get() {
+    if (this.settings) return { ...this.settings };
+    try {
+      const raw = await readFile(this.filePath, 'utf8');
+      this.settings = normalizeAgentSettings(JSON.parse(raw));
+    } catch {
+      this.settings = normalizeAgentSettings(DEFAULT_AGENT_SETTINGS);
+    }
+    return { ...this.settings };
+  }
+
+  async update(patch = {}) {
+    const current = await this.get();
+    const next = normalizeAgentSettings({ ...current, ...patch });
+    await writeJsonAtomic(this.filePath, next);
+    this.settings = next;
+    return { ...next };
+  }
+
+}