agent-relay 2.0.4 → 2.0.6

package/packages/telemetry/dist/machine-id.js

@@ -0,0 +1,58 @@
+/**
+ * Machine ID utilities for anonymous user identification.
+ * Uses existing machine-id file at ~/.local/share/agent-relay/machine-id
+ */
+import { createHash, randomBytes } from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+export function getMachineIdPath() {
+    const dataDir = process.env.AGENT_RELAY_DATA_DIR ||
+        path.join(os.homedir(), '.local', 'share', 'agent-relay');
+    return path.join(dataDir, 'machine-id');
+}
+/**
+ * Load or generate machine ID using atomic file creation to avoid race conditions.
+ */
+export function loadMachineId() {
+    const machineIdPath = getMachineIdPath();
+    try {
+        return fs.readFileSync(machineIdPath, 'utf-8').trim();
+    }
+    catch (readErr) {
+        if (readErr.code !== 'ENOENT') {
+            return `${os.hostname()}-${Date.now().toString(36)}`;
+        }
+        try {
+            const dataDir = path.dirname(machineIdPath);
+            fs.mkdirSync(dataDir, { recursive: true });
+            const machineId = `${os.hostname()}-${randomBytes(8).toString('hex')}`;
+            // O_CREAT | O_EXCL fails if file exists - prevents race condition
+            const fd = fs.openSync(machineIdPath, fs.constants.O_CREAT | fs.constants.O_EXCL | fs.constants.O_WRONLY, 0o600);
+            fs.writeSync(fd, machineId);
+            fs.closeSync(fd);
+            return machineId;
+        }
+        catch (writeErr) {
+            // Another process created the file first
+            if (writeErr.code === 'EEXIST') {
+                try {
+                    return fs.readFileSync(machineIdPath, 'utf-8').trim();
+                }
+                catch {
+                    // Fall through
+                }
+            }
+            return `${os.hostname()}-${Date.now().toString(36)}`;
+        }
+    }
+}
+/** SHA256 hash of machine ID, truncated to 16 chars */
+export function createAnonymousId() {
+    const machineId = loadMachineId();
+    return createHash('sha256')
+        .update(machineId)
+        .digest('hex')
+        .substring(0, 16);
+}
+//# sourceMappingURL=machine-id.js.map

package/packages/telemetry/dist/posthog-config.d.ts

@@ -0,0 +1,16 @@
+/**
+ * PostHog configuration.
+ *
+ * Environment variables:
+ *   POSTHOG_API_KEY     - Override API key (any environment)
+ *   POSTHOG_HOST        - Override host URL
+ *
+ * Key selection:
+ *   1. POSTHOG_API_KEY (if set, always used)
+ *   3. PROD_API_KEY (fallback)
+ */
+export declare function getPostHogConfig(): {
+    apiKey: string;
+    host: string;
+} | null;
+//# sourceMappingURL=posthog-config.d.ts.map

package/packages/telemetry/dist/posthog-config.js

@@ -0,0 +1,33 @@
+/**
+ * PostHog configuration.
+ *
+ * Environment variables:
+ *   POSTHOG_API_KEY     - Override API key (any environment)
+ *   POSTHOG_HOST        - Override host URL
+ *
+ * Key selection:
+ *   1. POSTHOG_API_KEY (if set, always used)
+ *   3. PROD_API_KEY (fallback)
+ */
+// =============================================================================
+// Configure your PostHog production key here
+// =============================================================================
+/** Production PostHog API key (write-only, safe for client-side) */
+const PROD_API_KEY = 'phc_2uDu01GtnLABJpVkWw4ri1OgScLU90aEmXmDjufGdqr';
+const HOST = 'https://us.i.posthog.com';
+// =============================================================================
+// Exports
+// =============================================================================
+export function getPostHogConfig() {
+    const host = process.env.POSTHOG_HOST || HOST;
+    // Explicit override for any environment
+    if (process.env.POSTHOG_API_KEY) {
+        return { apiKey: process.env.POSTHOG_API_KEY, host };
+    }
+    // Fallback to production key
+    if (!PROD_API_KEY) {
+        return null;
+    }
+    return { apiKey: PROD_API_KEY, host };
+}
+//# sourceMappingURL=posthog-config.js.map

package/packages/telemetry/package.json

@@ -0,0 +1,41 @@
+{
+  "name": "@agent-relay/telemetry",
+  "version": "2.0.6",
+  "description": "Anonymous telemetry for Agent Relay usage analytics",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "posthog-node": "^4.0.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.19.3",
+    "typescript": "^5.9.3",
+    "vitest": "^3.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AgentWorkforce/relay.git",
+    "directory": "packages/telemetry"
+  }
+}

package/packages/trajectory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/trajectory",
-  "version": "2.0.4",
+  "version": "2.0.6",
   "description": "Trajectory integration utilities (trail/PDERO) for Relay",
   "type": "module",
   "main": "dist/index.js",
@@ -22,7 +22,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@agent-relay/config": "2.0.4"
+    "@agent-relay/config": "2.0.6"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",

package/packages/user-directory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/user-directory",
-  "version": "2.0.4",
+  "version": "2.0.6",
   "description": "User directory service for agent-relay (per-user credential storage)",
   "type": "module",
   "main": "dist/index.js",
@@ -22,7 +22,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@agent-relay/resiliency": "2.0.4"
+    "@agent-relay/resiliency": "2.0.6"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",

package/packages/utils/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/utils",
-  "version": "2.0.4",
+  "version": "2.0.6",
   "description": "Shared utilities for agent-relay: logging, name generation, command resolution, update checking",
   "type": "module",
   "main": "dist/index.js",

package/packages/wrapper/dist/relay-pty-orchestrator.js

@@ -73,7 +73,7 @@ export class RelayPtyOrchestrator extends BaseWrapper {
     hasReceivedOutput = false;
     // Queue monitor for stuck message detection
     queueMonitorTimer;
-    QUEUE_MONITOR_INTERVAL_MS = 30000; // Check every 30 seconds
+    QUEUE_MONITOR_INTERVAL_MS = 5000; // Check every 5 seconds
     injectionStartTime = 0; // Track when isInjecting was set to true
     MAX_INJECTION_STUCK_MS = 60000; // Force reset after 60 seconds
     // Protocol monitor for detecting agent mistakes (e.g., empty AGENT_RELAY_NAME)
@@ -93,6 +93,10 @@ export class RelayPtyOrchestrator extends BaseWrapper {
     constructor(config) {
         super(config);
         this.config = config;
+        // Validate agent name to prevent path traversal attacks
+        if (config.name.includes('..') || config.name.includes('/') || config.name.includes('\\')) {
+            throw new Error(`Invalid agent name: "${config.name}" contains path traversal characters`);
+        }
         // Get project paths (used for logs and local mode)
         const projectPaths = getProjectPaths(config.cwd);
         // Canonical outbox path - agents ALWAYS write here (transparent symlink in workspace mode)
@@ -141,8 +145,9 @@ export class RelayPtyOrchestrator extends BaseWrapper {
                 localSocketPath = tmpSocketPath;
             }
             this.socketPath = localSocketPath;
-            // No legacy path needed for local mode
-            this._legacyOutboxPath = this._outboxPath;
+            // Legacy path for backwards compat (older agents might still use /tmp/relay-outbox)
+            // Even in local mode, we need this symlink for agents with stale instructions
+            this._legacyOutboxPath = `/tmp/relay-outbox/${config.name}`;
         }
         if (this.socketPath.length > MAX_SOCKET_PATH_LENGTH) {
             throw new Error(`Socket path exceeds ${MAX_SOCKET_PATH_LENGTH} chars: ${this.socketPath.length}`);
@@ -224,31 +229,31 @@ export class RelayPtyOrchestrator extends BaseWrapper {
                 mkdirSync(this._outboxPath, { recursive: true });
             }
             this.log(` Created outbox directory: ${this._outboxPath}`);
-            // In workspace mode, create symlinks so agents can use canonical path
-            if (this._workspaceId) {
-                // Helper to create a symlink, cleaning up existing path first
-                const createSymlinkSafe = (linkPath, targetPath) => {
-                    const linkParent = dirname(linkPath);
-                    if (!existsSync(linkParent)) {
-                        mkdirSync(linkParent, { recursive: true });
-                    }
-                    if (existsSync(linkPath)) {
-                        try {
-                            const stats = lstatSync(linkPath);
-                            if (stats.isSymbolicLink() || stats.isFile()) {
-                                unlinkSync(linkPath);
-                            }
-                            else if (stats.isDirectory()) {
-                                rmSync(linkPath, { recursive: true, force: true });
-                            }
+            // Helper to create a symlink, cleaning up existing path first
+            const createSymlinkSafe = (linkPath, targetPath) => {
+                const linkParent = dirname(linkPath);
+                if (!existsSync(linkParent)) {
+                    mkdirSync(linkParent, { recursive: true });
+                }
+                if (existsSync(linkPath)) {
+                    try {
+                        const stats = lstatSync(linkPath);
+                        if (stats.isSymbolicLink() || stats.isFile()) {
+                            unlinkSync(linkPath);
                         }
-                        catch {
-                            // Ignore cleanup errors
+                        else if (stats.isDirectory()) {
+                            rmSync(linkPath, { recursive: true, force: true });
                         }
                     }
-                    symlinkSync(targetPath, linkPath);
-                    this.log(` Created symlink: ${linkPath} -> ${targetPath}`);
-                };
+                    catch {
+                        // Ignore cleanup errors
+                    }
+                }
+                symlinkSync(targetPath, linkPath);
+                this.log(` Created symlink: ${linkPath} -> ${targetPath}`);
+            };
+            // In workspace mode, create symlinks so agents can use canonical path
+            if (this._workspaceId) {
                 // Symlink canonical path (~/.agent-relay/outbox/{name}) -> workspace path
                 // This is the PRIMARY symlink - agents write to canonical path, relay-pty watches workspace path
                 if (this._canonicalOutboxPath !== this._outboxPath) {
@@ -259,6 +264,10 @@ export class RelayPtyOrchestrator extends BaseWrapper {
                     createSymlinkSafe(this._legacyOutboxPath, this._outboxPath);
                 }
             }
+            // In local mode, also create legacy symlink for backwards compat with stale instructions
+            if (!this._workspaceId && this._legacyOutboxPath !== this._outboxPath) {
+                createSymlinkSafe(this._legacyOutboxPath, this._outboxPath);
+            }
         }
         catch (err) {
             this.logError(` Failed to set up outbox: ${err.message}`);
@@ -1485,10 +1494,10 @@ EOF
 \`\`\`
 Then output: \`->relay-file:spawn\`
 
-**Protocol Tips:**
-- Always ACK when you receive a task: "ACK: Brief description"
-- Send DONE when complete: "DONE: What was accomplished"
-- Keep your lead informed of progress
+**Message Format:**
+- \`TO: AgentName\` for direct messages
+- \`TO: *\` to broadcast to all agents
+- \`TO: #channel\` for channel messages
 
 📖 See **AGENTS.md** in the project root for full protocol documentation.`;
         this.log(` Sending periodic protocol reminder (session: ${sessionDurationMinutes}m)`);

package/packages/wrapper/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/wrapper",
-  "version": "2.0.4",
+  "version": "2.0.6",
   "description": "CLI agent wrappers for Agent Relay - tmux, pty integration",
   "type": "module",
   "main": "dist/index.js",
@@ -30,11 +30,11 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@agent-relay/api-types": "2.0.4",
-    "@agent-relay/protocol": "2.0.4",
-    "@agent-relay/config": "2.0.4",
-    "@agent-relay/continuity": "2.0.4",
-    "@agent-relay/resiliency": "2.0.4"
+    "@agent-relay/api-types": "2.0.6",
+    "@agent-relay/protocol": "2.0.6",
+    "@agent-relay/config": "2.0.6",
+    "@agent-relay/continuity": "2.0.6",
+    "@agent-relay/resiliency": "2.0.6"
   },
   "devDependencies": {
     "typescript": "^5.9.3",

package/packages/sdk/dist/discovery.d.ts

@@ -1,29 +0,0 @@
-/**
- * Socket Discovery for Agent Relay SDK
- *
- * Discovers the daemon socket path for local development and cloud environments.
- */
-export interface DiscoveryResult {
-    socketPath: string;
-    projectId: string;
-    source: 'env' | 'cloud' | 'project' | 'legacy';
-}
-/**
- * Discover the relay daemon socket path.
- *
- * Discovery order:
- * 1. RELAY_SOCKET environment variable (explicit override)
- * 2. Cloud workspace socket (if WORKSPACE_ID is set)
- * 3. Project-local socket ({projectRoot}/.agent-relay/relay.sock)
- * 4. Legacy fallback (/tmp/agent-relay.sock)
- *
- * @param cwd - Working directory to start search from (default: process.cwd())
- * @returns Discovery result with socket path and metadata
- */
-export declare function discoverSocket(cwd?: string): DiscoveryResult;
-/**
- * Get the default socket path using discovery.
- * Convenience function that returns just the path.
- */
-export declare function getDefaultSocketPath(cwd?: string): string;
-//# sourceMappingURL=discovery.d.ts.map

package/packages/sdk/dist/discovery.js

@@ -1,126 +0,0 @@
-/**
- * Socket Discovery for Agent Relay SDK
- *
- * Discovers the daemon socket path for local development and cloud environments.
- */
-import { existsSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { homedir } from 'node:os';
-/**
- * Find project root by looking for common markers.
- * Scans up from startDir until it finds a marker or hits the filesystem root.
- */
-function findProjectRoot(startDir = process.cwd()) {
-    let current = startDir;
-    const markers = ['.git', 'package.json', 'Cargo.toml', 'go.mod', 'pyproject.toml', '.agent-relay'];
-    // Limit iterations to prevent infinite loops
-    for (let i = 0; i < 100; i++) {
-        for (const marker of markers) {
-            if (existsSync(join(current, marker))) {
-                return current;
-            }
-        }
-        const parent = join(current, '..');
-        if (parent === current)
-            break; // Reached root
-        current = parent;
-    }
-    return null;
-}
-/**
- * Discover the relay daemon socket path.
- *
- * Discovery order:
- * 1. RELAY_SOCKET environment variable (explicit override)
- * 2. Cloud workspace socket (if WORKSPACE_ID is set)
- * 3. Project-local socket ({projectRoot}/.agent-relay/relay.sock)
- * 4. Legacy fallback (/tmp/agent-relay.sock)
- *
- * @param cwd - Working directory to start search from (default: process.cwd())
- * @returns Discovery result with socket path and metadata
- */
-export function discoverSocket(cwd) {
-    const startDir = cwd || process.cwd();
-    // 1. Explicit socket path from environment
-    const socketEnv = process.env.RELAY_SOCKET;
-    if (socketEnv && existsSync(socketEnv)) {
-        return {
-            socketPath: socketEnv,
-            projectId: process.env.RELAY_PROJECT || 'env',
-            source: 'env',
-        };
-    }
-    // 2. Cloud workspace socket (if WORKSPACE_ID is set)
-    const workspaceId = process.env.WORKSPACE_ID;
-    if (workspaceId) {
-        const cloudSocket = `/tmp/relay/${workspaceId}/sockets/daemon.sock`;
-        if (existsSync(cloudSocket)) {
-            return {
-                socketPath: cloudSocket,
-                projectId: workspaceId,
-                source: 'cloud',
-            };
-        }
-    }
-    // 3. Project-local socket
-    // First try cwd, then scan up to find project root
-    const projectRoot = findProjectRoot(startDir);
-    const searchDirs = [startDir];
-    if (projectRoot && projectRoot !== startDir) {
-        searchDirs.push(projectRoot);
-    }
-    for (const dir of searchDirs) {
-        const projectLocalSocket = join(dir, '.agent-relay', 'relay.sock');
-        if (existsSync(projectLocalSocket)) {
-            // Read project ID from marker file if available
-            let projectId = 'local';
-            const markerPath = join(dir, '.agent-relay', '.project');
-            if (existsSync(markerPath)) {
-                try {
-                    const marker = JSON.parse(readFileSync(markerPath, 'utf-8'));
-                    projectId = marker.projectId || 'local';
-                }
-                catch {
-                    // Ignore marker read errors
-                }
-            }
-            return {
-                socketPath: projectLocalSocket,
-                projectId,
-                source: 'project',
-            };
-        }
-    }
-    // 4. Legacy fallback
-    const legacySocket = '/tmp/agent-relay.sock';
-    if (existsSync(legacySocket)) {
-        return {
-            socketPath: legacySocket,
-            projectId: 'legacy',
-            source: 'legacy',
-        };
-    }
-    // Also check ~/.agent-relay for legacy global installations
-    const homeSocket = join(homedir(), '.agent-relay', 'relay.sock');
-    if (existsSync(homeSocket)) {
-        return {
-            socketPath: homeSocket,
-            projectId: 'home',
-            source: 'legacy',
-        };
-    }
-    // Return legacy path even if it doesn't exist (will fail on connect)
-    return {
-        socketPath: legacySocket,
-        projectId: 'unknown',
-        source: 'legacy',
-    };
-}
-/**
- * Get the default socket path using discovery.
- * Convenience function that returns just the path.
- */
-export function getDefaultSocketPath(cwd) {
-    return discoverSocket(cwd).socketPath;
-}
-//# sourceMappingURL=discovery.js.map