external-subagent 0.1.4 → 0.1.5

package/cli/commands/config.mjs

@@ -2,6 +2,9 @@ import { readConfig } from '../config/read.mjs';
 import { updateConfig, writeConfig } from '../config/write.mjs';
 import { SUBAGENT_IDS } from '../config/schema.mjs';
 import { CliError } from '../errors.mjs';
+import { atomicWrite } from '../fs-atomic.mjs';
+import { hasInstalledService } from '../install/service-activation.mjs';
+import { launchAgentPlist } from '../install/service-macos.mjs';
 
 const CONFIG_INPUT_FIELDS = new Set(['operation', 'patch', 'key']);
 const GET_KEYS = new Set([
@@ -85,6 +88,17 @@ export function parseConfigArgs(args) {
   throw new CliError('INVALID_ARGUMENT', `unsupported config operation: ${operation}`, 2);
 }
 
+// A config change moves the very values the installed LaunchAgent forwards to
+// launchd (subagent homes, config revision), so every successful write also
+// regenerates the service definition from the new config.  Only the file is
+// rewritten — launchd picks the environment up at its next load, so a running
+// daemon is never restarted or disturbed here.
+function refreshServiceDefinition(paths) {
+  if (!hasInstalledService(paths)) return false;
+  atomicWrite(paths.launchAgent, launchAgentPlist(paths), 0o600);
+  return true;
+}
+
 export function configCommand(paths, input = {}) {
   rejectUnknownInput(input);
   const operation = input.operation ?? 'get';
@@ -98,7 +112,8 @@ export function configCommand(paths, input = {}) {
     for (const [agent, value] of Object.entries(input.patch.subagents || {})) {
       if (value === null || typeof value !== 'object' || Array.isArray(value)) throw new CliError('CONFIG_INVALID', `subagents.${agent} must be an object`, 2);
     }
-    return { config: updateConfig(paths.config, (latest) => mergePatch(latest, input.patch)) };
+    const config = updateConfig(paths.config, (latest) => mergePatch(latest, input.patch));
+    return { config, service_definition_refreshed: refreshServiceDefinition(paths) };
   }
   if (operation === 'show') {
     if (input.patch !== undefined || input.key !== undefined) throw new CliError('INVALID_ARGUMENT', 'config show does not accept key or patch', 2);
@@ -106,7 +121,8 @@ export function configCommand(paths, input = {}) {
   }
   if (operation === 'unset') {
     if (input.patch !== undefined || typeof input.key !== 'string') throw new CliError('INVALID_ARGUMENT', 'config unset requires exactly one supported key', 2);
-    return { config: updateConfig(paths.config, (latest) => mergePatch(latest, unsetPatch(input.key))) };
+    const config = updateConfig(paths.config, (latest) => mergePatch(latest, unsetPatch(input.key)));
+    return { config, service_definition_refreshed: refreshServiceDefinition(paths) };
   }
   if (operation === 'get') {
     if (input.patch !== undefined) throw new CliError('INVALID_ARGUMENT', 'config get does not accept patch', 2);

package/cli/constants.mjs

@@ -8,7 +8,7 @@ const IS_DEBUG_VARIANT = process.env.EXTERNAL_SUBAGENT_VARIANT === 'debug';
 
 export const PRODUCT_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debug' : 'external-subagent';
 export const PRODUCT_ID = IS_DEBUG_VARIANT ? 'external_subagent_debug' : 'external_subagent';
-export const VERSION = '0.1.4';
+export const VERSION = '0.1.5';
 export const LAUNCH_AGENT_LABEL = IS_DEBUG_VARIANT ? 'com.external-subagent-debug.daemon' : 'com.external-subagent.daemon';
 export const DAEMON_BIN_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debugd' : 'external-subagentd';
 export const MCP_BIN_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debug-mcp' : 'external-subagent-mcp';

package/cli/install/service-activation.mjs

@@ -4,7 +4,7 @@ import { atomicWrite } from '../fs-atomic.mjs';
 import { CliError } from '../errors.mjs';
 import { callDaemon } from '../rpc.mjs';
 import { LAUNCH_AGENT_LABEL } from '../constants.mjs';
-import { launchctl } from './service-macos.mjs';
+import { launchAgentPlist, launchctl } from './service-macos.mjs';
 
 const xml = (s) => s.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');
 const unxml = (s) => s.replaceAll('&lt;', '<').replaceAll('&gt;', '>').replaceAll('&amp;', '&');
@@ -15,8 +15,11 @@ export function hasInstalledService(paths) {
   return Boolean(paths.launchAgent && fs.existsSync(paths.launchAgent));
 }
 
-// The service definition is the executable entry: change only its first argv,
-// retaining the installed configuration/environment and rollback bytes exactly.
+// The service definition is derived from the CURRENT config: activation
+// regenerates the whole plist (environment, revision, runtime forwarding) so a
+// reconfigured installation can never keep serving stale launchd environment.
+// Only rollback restores the previous definition bytes — the exact known state
+// the service ran before — with its executable repointed.
 export async function activateService(paths, candidate, options = {}) {
   const control = options.launchctl || launchctl;
   const rpc = options.callDaemon || callDaemon;
@@ -93,17 +96,21 @@ export async function activateService(paths, candidate, options = {}) {
     } while (Date.now() < deadline);
     throw new CliError('SERVICE_UNLOAD_TIMEOUT', 'launchd service remained registered after bootout');
   };
-  const writeProgram = (entryPath) => atomicWrite(paths.launchAgent, Buffer.from(oldPlist.toString().replace(program, (_, a, b, c) => `${a}${xml(entryPath)}${c}`)), 0o600);
+  const writeDefinition = (entryPath) => atomicWrite(paths.launchAgent, launchAgentPlist(paths, {
+    daemonPath: entryPath,
+    ...(options.zcodeRuntime !== undefined ? { zcodeRuntime: options.zcodeRuntime } : {}),
+  }), 0o600);
+  const restoreDefinition = (entryPath) => atomicWrite(paths.launchAgent, Buffer.from(oldPlist.toString().replace(program, (_, a, b, c) => `${a}${xml(entryPath)}${c}`)), 0o600);
   const rollbackService = async () => {
     await unload();
     const previous = rollbackExecutable();
-    writeProgram(previous.path);
+    restoreDefinition(previous.path);
     await control(['bootstrap', `gui/${process.getuid()}`, paths.launchAgent]);
     return healthy({ path: previous.path, sha256: previous.sha256, version: oldStatus?.identity?.daemon?.version }, oldPid, oldStatus?.service_generation);
   };
   try {
     await unload();
-    writeProgram(candidate.path);
+    writeDefinition(candidate.path);
     await control(['bootstrap', `gui/${process.getuid()}`, paths.launchAgent]);
     const health = await healthy(candidate, oldPid, oldStatus?.service_generation);
       return {

package/cli/install/service-macos.mjs

@@ -28,7 +28,10 @@ export function runtimeObservations(paths, options = {}) {
 }
 
 export function launchAgentPlist(paths, options = {}) {
-  const daemon = nativeBinary(DAEMON_BIN_NAME);
+  // An activation carries its own verified daemon artifact (the retained
+  // payload copy), so the entry may be pinned explicitly; every other caller
+  // derives it from the installed package.
+  const daemon = options.daemonPath || nativeBinary(DAEMON_BIN_NAME);
   const config = readConfig(paths.config);
   const { runtime_path: dshRuntime, home: dshHome, profile: dshProfile, version: dshVersion } = config.subagents.dsh;
   const { runtime_path: codexRuntime, home: codexHome } = config.subagents.codex;

package/npm/native/darwin-arm64/payload.json

@@ -1,20 +1,20 @@
 {
   "schema_version": 1,
   "product": "external-subagent",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "platform": "darwin-arm64",
   "files": [
     {
       "name": "external-subagentd",
-      "bytes": 9332032,
+      "bytes": 9443072,
       "mode": "755",
-      "sha256": "68bda5d29cdf6c78335575f3e69e5016eff6842e95884d7085d1cf1db2e6f383"
+      "sha256": "1c6048c4202733b81a5b80cab82bee3a0a7071f90341f8bf2948707bf794e067"
     },
     {
       "name": "external-subagent-mcp",
       "bytes": 937840,
       "mode": "755",
-      "sha256": "5d2d9739a777053ee792c61c3d01c8b6c94f01e131bc735d00802eb558b24223"
+      "sha256": "07f4d3949165419fba81c66ef4fd631615490a13dcf8b12a1c6859762e0396af"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "external-subagent",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Manage bounded ZCode, DeepSeek Harness (DSH), and Codex subagent tasks through a local MCP service for any local host (Codex, ZCode, or a custom MCP client)",
   "type": "module",
   "license": "MIT",