agent-relay 2.0.5 → 2.0.6

package/packages/mcp/dist/prompts/protocol.js

@@ -91,21 +91,13 @@ Channel messages include the channel:
 Relay message from Alice [msg-id-456] [#general]: Hello team!
 \`\`\`
 
-### ACK/DONE Protocol
-When assigned a task:
-1. Send ACK immediately: "ACK: Starting work on X"
+### Optional: ACK/DONE Convention
+Some applications use ACK/DONE conventions for task tracking. If your application uses this pattern:
+1. Send ACK when starting: "ACK: Starting work on X"
 2. Send progress updates as needed
 3. Send DONE when complete: "DONE: Completed X with result Y"
 
-Example:
-\`\`\`
-# When receiving a task
-relay_send(to="Lead", message="ACK: Starting test suite run")
-
-# ... do work ...
-
-relay_send(to="Lead", message="DONE: All 42 tests passed")
-\`\`\`
+Note: This is an application-level convention, not a protocol requirement. Check your application's documentation for expected message formats.
 
 ## Best Practices
 
@@ -116,9 +108,9 @@ relay_send(to="Lead", message="DONE: All 42 tests passed")
 - Use channels for team announcements
 
 ### For Worker Agents
-- ACK immediately when receiving tasks
+- Respond promptly when receiving tasks
 - Send progress updates for long tasks
-- Send DONE with results when complete
+- Report results when complete
 - Ask clarifying questions if needed
 
 ### Message Etiquette

package/packages/mcp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/mcp",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "MCP server for Agent Relay - native messaging tools for AI agents in Claude, Cursor, and VS Code",
   "author": "Agent Workforce Inc.",
   "license": "Apache-2.0",
@@ -47,7 +47,7 @@
     "prepublishOnly": "npm run clean && npm run build && npm test"
   },
   "dependencies": {
-    "@agent-relay/config": "2.0.5",
+    "@agent-relay/config": "2.0.6",
     "@modelcontextprotocol/sdk": "^1.0.0",
     "zod": "^3.23.8"
   },

package/packages/memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/memory",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Semantic memory storage and retrieval system for agent-relay with multiple backend support",
   "type": "module",
   "main": "dist/index.js",
@@ -22,7 +22,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@agent-relay/hooks": "2.0.5"
+    "@agent-relay/hooks": "2.0.6"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",

package/packages/policy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/policy",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Agent policy management with multi-level fallback (repo, local PRPM, cloud workspace)",
   "type": "module",
   "main": "dist/index.js",
@@ -22,7 +22,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@agent-relay/config": "2.0.5"
+    "@agent-relay/config": "2.0.6"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",

package/packages/protocol/dist/types.d.ts

@@ -278,6 +278,8 @@ export interface SpawnPayload {
     shadowSpeakOn?: SpeakOnTrigger[];
     /** User ID for cloud persistence */
     userId?: string;
+    /** Include ACK/DONE workflow conventions in agent instructions (default: false) */
+    includeWorkflowConventions?: boolean;
 }
 export interface SpawnPolicyDecision {
     allowed: boolean;

package/packages/protocol/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/protocol",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Wire protocol types and framing for Agent Relay",
   "type": "module",
   "main": "dist/index.js",

package/packages/resiliency/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/resiliency",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Health monitoring, logging, metrics, and crash resilience utilities for Agent Relay",
   "type": "module",
   "main": "dist/index.js",

package/packages/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/sdk",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Lightweight SDK for agent-to-agent communication via Agent Relay",
   "type": "module",
   "main": "dist/index.js",
@@ -55,7 +55,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@agent-relay/protocol": "2.0.5"
+    "@agent-relay/protocol": "2.0.6"
   },
   "engines": {
     "node": ">=18.0.0"

package/packages/spawner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/spawner",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Agent spawning types and utilities for Agent Relay",
   "type": "module",
   "main": "dist/index.js",

package/packages/state/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/state",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Agent state persistence for non-hook CLIs (Codex, Gemini, etc.)",
   "type": "module",
   "main": "dist/index.js",

package/packages/storage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/storage",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Storage adapters and interfaces for Relay message/session persistence",
   "type": "module",
   "main": "dist/index.js",
@@ -56,7 +56,7 @@
     }
   },
   "dependencies": {
-    "@agent-relay/protocol": "2.0.5"
+    "@agent-relay/protocol": "2.0.6"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",

package/packages/telemetry/dist/client.js

@@ -77,6 +77,7 @@ export function initTelemetry(options = {}) {
         host: posthogConfig.host,
         flushAt: 10,
         flushInterval: 10000,
+        disableGeoip: false, // CLI runs on user's machine, so IP is correct for geo
     });
     commonProps = buildCommonProperties();
     anonymousId = getAnonymousId();

package/packages/telemetry/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/telemetry",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Anonymous telemetry for Agent Relay usage analytics",
   "type": "module",
   "main": "dist/index.js",

package/packages/trajectory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/trajectory",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Trajectory integration utilities (trail/PDERO) for Relay",
   "type": "module",
   "main": "dist/index.js",
@@ -22,7 +22,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@agent-relay/config": "2.0.5"
+    "@agent-relay/config": "2.0.6"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",

package/packages/user-directory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/user-directory",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "User directory service for agent-relay (per-user credential storage)",
   "type": "module",
   "main": "dist/index.js",
@@ -22,7 +22,7 @@
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@agent-relay/resiliency": "2.0.5"
+    "@agent-relay/resiliency": "2.0.6"
   },
   "devDependencies": {
     "@types/node": "^22.19.3",

package/packages/utils/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/utils",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "Shared utilities for agent-relay: logging, name generation, command resolution, update checking",
   "type": "module",
   "main": "dist/index.js",

package/packages/wrapper/dist/relay-pty-orchestrator.js

@@ -93,6 +93,10 @@ export class RelayPtyOrchestrator extends BaseWrapper {
     constructor(config) {
         super(config);
         this.config = config;
+        // Validate agent name to prevent path traversal attacks
+        if (config.name.includes('..') || config.name.includes('/') || config.name.includes('\\')) {
+            throw new Error(`Invalid agent name: "${config.name}" contains path traversal characters`);
+        }
         // Get project paths (used for logs and local mode)
         const projectPaths = getProjectPaths(config.cwd);
         // Canonical outbox path - agents ALWAYS write here (transparent symlink in workspace mode)
@@ -141,8 +145,9 @@ export class RelayPtyOrchestrator extends BaseWrapper {
                 localSocketPath = tmpSocketPath;
             }
             this.socketPath = localSocketPath;
-            // No legacy path needed for local mode
-            this._legacyOutboxPath = this._outboxPath;
+            // Legacy path for backwards compat (older agents might still use /tmp/relay-outbox)
+            // Even in local mode, we need this symlink for agents with stale instructions
+            this._legacyOutboxPath = `/tmp/relay-outbox/${config.name}`;
         }
         if (this.socketPath.length > MAX_SOCKET_PATH_LENGTH) {
             throw new Error(`Socket path exceeds ${MAX_SOCKET_PATH_LENGTH} chars: ${this.socketPath.length}`);
@@ -224,31 +229,31 @@ export class RelayPtyOrchestrator extends BaseWrapper {
                 mkdirSync(this._outboxPath, { recursive: true });
             }
             this.log(` Created outbox directory: ${this._outboxPath}`);
-            // In workspace mode, create symlinks so agents can use canonical path
-            if (this._workspaceId) {
-                // Helper to create a symlink, cleaning up existing path first
-                const createSymlinkSafe = (linkPath, targetPath) => {
-                    const linkParent = dirname(linkPath);
-                    if (!existsSync(linkParent)) {
-                        mkdirSync(linkParent, { recursive: true });
-                    }
-                    if (existsSync(linkPath)) {
-                        try {
-                            const stats = lstatSync(linkPath);
-                            if (stats.isSymbolicLink() || stats.isFile()) {
-                                unlinkSync(linkPath);
-                            }
-                            else if (stats.isDirectory()) {
-                                rmSync(linkPath, { recursive: true, force: true });
-                            }
+            // Helper to create a symlink, cleaning up existing path first
+            const createSymlinkSafe = (linkPath, targetPath) => {
+                const linkParent = dirname(linkPath);
+                if (!existsSync(linkParent)) {
+                    mkdirSync(linkParent, { recursive: true });
+                }
+                if (existsSync(linkPath)) {
+                    try {
+                        const stats = lstatSync(linkPath);
+                        if (stats.isSymbolicLink() || stats.isFile()) {
+                            unlinkSync(linkPath);
                         }
-                        catch {
-                            // Ignore cleanup errors
+                        else if (stats.isDirectory()) {
+                            rmSync(linkPath, { recursive: true, force: true });
                         }
                     }
-                    symlinkSync(targetPath, linkPath);
-                    this.log(` Created symlink: ${linkPath} -> ${targetPath}`);
-                };
+                    catch {
+                        // Ignore cleanup errors
+                    }
+                }
+                symlinkSync(targetPath, linkPath);
+                this.log(` Created symlink: ${linkPath} -> ${targetPath}`);
+            };
+            // In workspace mode, create symlinks so agents can use canonical path
+            if (this._workspaceId) {
                 // Symlink canonical path (~/.agent-relay/outbox/{name}) -> workspace path
                 // This is the PRIMARY symlink - agents write to canonical path, relay-pty watches workspace path
                 if (this._canonicalOutboxPath !== this._outboxPath) {
@@ -259,6 +264,10 @@ export class RelayPtyOrchestrator extends BaseWrapper {
                     createSymlinkSafe(this._legacyOutboxPath, this._outboxPath);
                 }
             }
+            // In local mode, also create legacy symlink for backwards compat with stale instructions
+            if (!this._workspaceId && this._legacyOutboxPath !== this._outboxPath) {
+                createSymlinkSafe(this._legacyOutboxPath, this._outboxPath);
+            }
         }
         catch (err) {
             this.logError(` Failed to set up outbox: ${err.message}`);
@@ -1485,10 +1494,10 @@ EOF
 \`\`\`
 Then output: \`->relay-file:spawn\`
 
-**Protocol Tips:**
-- Always ACK when you receive a task: "ACK: Brief description"
-- Send DONE when complete: "DONE: What was accomplished"
-- Keep your lead informed of progress
+**Message Format:**
+- \`TO: AgentName\` for direct messages
+- \`TO: *\` to broadcast to all agents
+- \`TO: #channel\` for channel messages
 
 📖 See **AGENTS.md** in the project root for full protocol documentation.`;
         this.log(` Sending periodic protocol reminder (session: ${sessionDurationMinutes}m)`);

package/packages/wrapper/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-relay/wrapper",
-  "version": "2.0.5",
+  "version": "2.0.6",
   "description": "CLI agent wrappers for Agent Relay - tmux, pty integration",
   "type": "module",
   "main": "dist/index.js",
@@ -30,11 +30,11 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@agent-relay/api-types": "2.0.5",
-    "@agent-relay/protocol": "2.0.5",
-    "@agent-relay/config": "2.0.5",
-    "@agent-relay/continuity": "2.0.5",
-    "@agent-relay/resiliency": "2.0.5"
+    "@agent-relay/api-types": "2.0.6",
+    "@agent-relay/protocol": "2.0.6",
+    "@agent-relay/config": "2.0.6",
+    "@agent-relay/continuity": "2.0.6",
+    "@agent-relay/resiliency": "2.0.6"
   },
   "devDependencies": {
     "typescript": "^5.9.3",