external-subagent 0.1.4 → 0.2.0

package/cli/commands/config.mjs

@@ -2,6 +2,9 @@ import { readConfig } from '../config/read.mjs';
 import { updateConfig, writeConfig } from '../config/write.mjs';
 import { SUBAGENT_IDS } from '../config/schema.mjs';
 import { CliError } from '../errors.mjs';
+import { atomicWrite } from '../fs-atomic.mjs';
+import { hasInstalledService } from '../install/service-activation.mjs';
+import { launchAgentPlist } from '../install/service-macos.mjs';
 
 const CONFIG_INPUT_FIELDS = new Set(['operation', 'patch', 'key']);
 const GET_KEYS = new Set([
@@ -85,6 +88,17 @@ export function parseConfigArgs(args) {
   throw new CliError('INVALID_ARGUMENT', `unsupported config operation: ${operation}`, 2);
 }
 
+// A config change moves the very values the installed LaunchAgent forwards to
+// launchd (subagent homes, config revision), so every successful write also
+// regenerates the service definition from the new config.  Only the file is
+// rewritten — launchd picks the environment up at its next load, so a running
+// daemon is never restarted or disturbed here.
+function refreshServiceDefinition(paths) {
+  if (!hasInstalledService(paths)) return false;
+  atomicWrite(paths.launchAgent, launchAgentPlist(paths), 0o600);
+  return true;
+}
+
 export function configCommand(paths, input = {}) {
   rejectUnknownInput(input);
   const operation = input.operation ?? 'get';
@@ -98,7 +112,8 @@ export function configCommand(paths, input = {}) {
     for (const [agent, value] of Object.entries(input.patch.subagents || {})) {
       if (value === null || typeof value !== 'object' || Array.isArray(value)) throw new CliError('CONFIG_INVALID', `subagents.${agent} must be an object`, 2);
     }
-    return { config: updateConfig(paths.config, (latest) => mergePatch(latest, input.patch)) };
+    const config = updateConfig(paths.config, (latest) => mergePatch(latest, input.patch));
+    return { config, service_definition_refreshed: refreshServiceDefinition(paths) };
   }
   if (operation === 'show') {
     if (input.patch !== undefined || input.key !== undefined) throw new CliError('INVALID_ARGUMENT', 'config show does not accept key or patch', 2);
@@ -106,7 +121,8 @@ export function configCommand(paths, input = {}) {
   }
   if (operation === 'unset') {
     if (input.patch !== undefined || typeof input.key !== 'string') throw new CliError('INVALID_ARGUMENT', 'config unset requires exactly one supported key', 2);
-    return { config: updateConfig(paths.config, (latest) => mergePatch(latest, unsetPatch(input.key))) };
+    const config = updateConfig(paths.config, (latest) => mergePatch(latest, unsetPatch(input.key)));
+    return { config, service_definition_refreshed: refreshServiceDefinition(paths) };
   }
   if (operation === 'get') {
     if (input.patch !== undefined) throw new CliError('INVALID_ARGUMENT', 'config get does not accept patch', 2);

package/cli/constants.mjs

@@ -8,7 +8,7 @@ const IS_DEBUG_VARIANT = process.env.EXTERNAL_SUBAGENT_VARIANT === 'debug';
 
 export const PRODUCT_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debug' : 'external-subagent';
 export const PRODUCT_ID = IS_DEBUG_VARIANT ? 'external_subagent_debug' : 'external_subagent';
-export const VERSION = '0.1.4';
+export const VERSION = '0.2.0';
 export const LAUNCH_AGENT_LABEL = IS_DEBUG_VARIANT ? 'com.external-subagent-debug.daemon' : 'com.external-subagent.daemon';
 export const DAEMON_BIN_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debugd' : 'external-subagentd';
 export const MCP_BIN_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debug-mcp' : 'external-subagent-mcp';

package/cli/install/service-activation.mjs

@@ -4,7 +4,7 @@ import { atomicWrite } from '../fs-atomic.mjs';
 import { CliError } from '../errors.mjs';
 import { callDaemon } from '../rpc.mjs';
 import { LAUNCH_AGENT_LABEL } from '../constants.mjs';
-import { launchctl } from './service-macos.mjs';
+import { launchAgentPlist, launchctl } from './service-macos.mjs';
 
 const xml = (s) => s.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');
 const unxml = (s) => s.replaceAll('&lt;', '<').replaceAll('&gt;', '>').replaceAll('&amp;', '&');
@@ -15,8 +15,11 @@ export function hasInstalledService(paths) {
   return Boolean(paths.launchAgent && fs.existsSync(paths.launchAgent));
 }
 
-// The service definition is the executable entry: change only its first argv,
-// retaining the installed configuration/environment and rollback bytes exactly.
+// The service definition is derived from the CURRENT config: activation
+// regenerates the whole plist (environment, revision, runtime forwarding) so a
+// reconfigured installation can never keep serving stale launchd environment.
+// Only rollback restores the previous definition bytes — the exact known state
+// the service ran before — with its executable repointed.
 export async function activateService(paths, candidate, options = {}) {
   const control = options.launchctl || launchctl;
   const rpc = options.callDaemon || callDaemon;
@@ -93,17 +96,21 @@ export async function activateService(paths, candidate, options = {}) {
     } while (Date.now() < deadline);
     throw new CliError('SERVICE_UNLOAD_TIMEOUT', 'launchd service remained registered after bootout');
   };
-  const writeProgram = (entryPath) => atomicWrite(paths.launchAgent, Buffer.from(oldPlist.toString().replace(program, (_, a, b, c) => `${a}${xml(entryPath)}${c}`)), 0o600);
+  const writeDefinition = (entryPath) => atomicWrite(paths.launchAgent, launchAgentPlist(paths, {
+    daemonPath: entryPath,
+    ...(options.zcodeRuntime !== undefined ? { zcodeRuntime: options.zcodeRuntime } : {}),
+  }), 0o600);
+  const restoreDefinition = (entryPath) => atomicWrite(paths.launchAgent, Buffer.from(oldPlist.toString().replace(program, (_, a, b, c) => `${a}${xml(entryPath)}${c}`)), 0o600);
   const rollbackService = async () => {
     await unload();
     const previous = rollbackExecutable();
-    writeProgram(previous.path);
+    restoreDefinition(previous.path);
     await control(['bootstrap', `gui/${process.getuid()}`, paths.launchAgent]);
     return healthy({ path: previous.path, sha256: previous.sha256, version: oldStatus?.identity?.daemon?.version }, oldPid, oldStatus?.service_generation);
   };
   try {
     await unload();
-    writeProgram(candidate.path);
+    writeDefinition(candidate.path);
     await control(['bootstrap', `gui/${process.getuid()}`, paths.launchAgent]);
     const health = await healthy(candidate, oldPid, oldStatus?.service_generation);
       return {

package/cli/install/service-macos.mjs

@@ -28,7 +28,10 @@ export function runtimeObservations(paths, options = {}) {
 }
 
 export function launchAgentPlist(paths, options = {}) {
-  const daemon = nativeBinary(DAEMON_BIN_NAME);
+  // An activation carries its own verified daemon artifact (the retained
+  // payload copy), so the entry may be pinned explicitly; every other caller
+  // derives it from the installed package.
+  const daemon = options.daemonPath || nativeBinary(DAEMON_BIN_NAME);
   const config = readConfig(paths.config);
   const { runtime_path: dshRuntime, home: dshHome, profile: dshProfile, version: dshVersion } = config.subagents.dsh;
   const { runtime_path: codexRuntime, home: codexHome } = config.subagents.codex;

package/npm/native/darwin-arm64/payload.json

@@ -1,20 +1,20 @@
 {
   "schema_version": 1,
   "product": "external-subagent",
-  "version": "0.1.4",
+  "version": "0.2.0",
   "platform": "darwin-arm64",
   "files": [
     {
       "name": "external-subagentd",
-      "bytes": 9332032,
+      "bytes": 9529168,
       "mode": "755",
-      "sha256": "68bda5d29cdf6c78335575f3e69e5016eff6842e95884d7085d1cf1db2e6f383"
+      "sha256": "3ad4a342178a1550ee8c10614493d7a4f2c45588ca1a8409397fdd04e123f343"
     },
     {
       "name": "external-subagent-mcp",
       "bytes": 937840,
       "mode": "755",
-      "sha256": "5d2d9739a777053ee792c61c3d01c8b6c94f01e131bc735d00802eb558b24223"
+      "sha256": "e3ccf595590286c5718a35eeefa6ff08d0549a3acf05a828f96b98ed713b5e70"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "external-subagent",
-  "version": "0.1.4",
+  "version": "0.2.0",
   "description": "Manage bounded ZCode, DeepSeek Harness (DSH), and Codex subagent tasks through a local MCP service for any local host (Codex, ZCode, or a custom MCP client)",
   "type": "module",
   "license": "MIT",

package/schema/external-subagent-public-api.json

@@ -66,7 +66,7 @@
         "repository": { "type": "string", "minLength": 1 },
         "permission_mode": { "$ref": "#/properties/permission_mode", "description": "codex supports build/edit (workspace-write), plan (read-only), and yolo (danger-full-access), always with approvalPolicy=never." },
         "prompt": { "type": "string", "minLength": 1 },
-        "model": { "type": "string", "minLength": 1, "description": "Task model. dsh requires provider:model, split at the first colon (the model side may contain further colons; a missing colon or an empty side is rejected before any task). codex uses its own model id; zcode rejects model selection." },
+        "model": { "type": "string", "minLength": 1, "description": "Task model. dsh requires provider:model, split at the first colon (the model side may contain further colons; a missing colon or an empty side is rejected before any task). codex uses its own model id; zcode uses provider/model (a bare token keeps its backward-compatible zai/<token> reading). Omission falls back to the configured default_model for dsh and zcode, then to the provider-native model; codex requires an explicit model or agents.codex.default_model and never falls back to a provider default." },
         "effort": { "type": "string", "minLength": 1, "maxLength": 24, "pattern": "^[a-z0-9_]+$", "description": "Reasoning-effort token: 1..24 bytes of [a-z0-9_]. codex admits only low, medium, high or xhigh; zcode and dsh pass the bounded token through. Omission keeps the runtime default." },
         "write_manifest": { "type": "array", "items": { "type": "string", "minLength": 1 }, "description": "codex requires an empty or omitted write_manifest; non-empty input returns codex_write_manifest_unsupported before task creation. dsh admits a non-empty manifest in build through the guarded manifest-build composition (workspace-write sandbox, only tool-fs writable, out-of-manifest paths rejected as FS_WRITE_MANIFEST_DENIED), at most 256 entries; an explicit [\".\"] keeps the existing build composition. plan requires an empty manifest for every subagent." }
       },
@@ -95,7 +95,7 @@
     },
     "wait": {
       "type": "object",
-      "description": "Wait returns early only for an actionable pending request (permission requests need allow/deny; user-input requests carry the full embedded question and need answer with non-empty content) or a terminal result; ordinary progress, message receipts, already-responded and unsupported requests never wake it. The pending_requests output projection is capped at 100 actionable records, while the wake decision scans the full pending set. activity carries the latest text tail, a 200-char verified reasoning tail, tool calls started in the last 60 seconds, and telemetry status.",
+      "description": "Wait returns early only for an actionable pending request (permission requests need allow/deny; user-input requests carry the full embedded question and need answer with non-empty content) or a terminal result; ordinary progress, message receipts, already-responded and unsupported requests never wake it. The pending_requests output projection is capped at 100 actionable records, while the wake decision scans the full pending set. activity carries the text tail incrementally: each wait returns only the text appended since the previous wait (an empty tail means nothing new), every byte is delivered by wait at most once, and latest_text_truncated flags undelivered bytes that rolled out of the bounded window (that response degrades to the whole window); a terminal response also strips bytes repeating the embedded result page verbatim. activity also carries a 200-char verified reasoning tail, tool calls started in the last 60 seconds, and telemetry status.",
       "required": ["agent_id"],
       "properties": {
         "agent_id": { "type": "integer", "minimum": 10000000, "maximum": 99999999 },