overmind-mcp 2.7.0 → 2.8.1

package/dist/bin/overmind-client.js

@@ -0,0 +1,221 @@
+/**
+ * overmind-client.ts — Native Node.js client for Overmind HTTP MCP
+ * ═══════════════════════════════════════════════════════════════════
+ *
+ * Import this module to programmatically control agents.
+ * No MCP library needed — raw HTTP + JSON-RPC 2.0.
+ *
+ * Usage:
+ *   npm run build && node dist/overmind-client.js
+ *
+ * Or import in your TypeScript:
+ *   import { OvermindClient } from './overmind-client.js';
+ */
+const DEFAULT_BASE = 'http://localhost:3099/mcp';
+const DEFAULT_AUTH = process.env.OVERMIND_AUTH || 'changeme';
+const HEALTH_URL = 'http://localhost:3099/health';
+// ─── JSON-RPC helpers ─────────────────────────────────────────────────────────
+function jsonrpc(id, method, params = {}) {
+    return { jsonrpc: '2.0', id, method, params };
+}
+async function callMcp(url, auth, method, params, timeoutMs = 60_000) {
+    const res = await fetch(url, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            'Accept': 'application/json, text/event-stream',
+            'Authorization': `Bearer ${auth}`,
+        },
+        body: JSON.stringify(jsonrpc(Date.now(), method, params)),
+        signal: AbortSignal.timeout(timeoutMs),
+    });
+    if (!res.ok) {
+        throw new Error(`HTTP ${res.status} ${res.statusText}`);
+    }
+    // SSE stream — read all chunks
+    const text = await res.text();
+    // Parse SSE: each line is "data: {json}"
+    const lines = text.split('\n');
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (trimmed.startsWith('data: ')) {
+            const data = JSON.parse(trimmed.slice(6));
+            if (data.result)
+                return { result: data.result };
+            if (data.error)
+                return { error: data.error };
+        }
+    }
+    throw new Error('No result in SSE response');
+}
+// ─── OvermindClient ───────────────────────────────────────────────────────────
+export class OvermindClient {
+    url;
+    auth;
+    id = 0;
+    nextId() { return ++this.id; }
+    constructor(opts = {}) {
+        this.url = opts.url ?? DEFAULT_BASE;
+        this.auth = opts.auth ?? DEFAULT_AUTH;
+    }
+    // ─── Health ──────────────────────────────────────────────────────────────
+    async health() {
+        try {
+            const res = await fetch(HEALTH_URL, {
+                headers: { 'Authorization': `Bearer ${this.auth}` },
+                signal: AbortSignal.timeout(3000),
+            });
+            return res.ok;
+        }
+        catch {
+            return false;
+        }
+    }
+    // ─── Agent CRUD ──────────────────────────────────────────────────────────
+    /** Create a new agent definition (stored in registry) */
+    async createAgent(opts) {
+        const res = await callMcp(this.url, this.auth, 'tools/call', {
+            name: 'create_agent',
+            arguments: opts,
+        });
+        if ('error' in res)
+            throw new Error(`create_agent failed: ${res.error?.message}`);
+        return { name: opts.name, runner: opts.runner };
+    }
+    /** List all registered agents */
+    async listAgents() {
+        const res = await callMcp(this.url, this.auth, 'tools/call', {
+            name: 'list_agents',
+            arguments: {},
+        });
+        if ('error' in res)
+            throw new Error(`list_agents failed: ${res.error?.message}`);
+        const text = res.result.content[0].text;
+        // Parse the markdown list
+        return text.split('\n').filter(l => l.trim().startsWith('- ')).map(l => l.trim().slice(2));
+    }
+    /** Delete an agent from the registry */
+    async deleteAgent(name) {
+        const res = await callMcp(this.url, this.auth, 'tools/call', {
+            name: 'delete_agent',
+            arguments: { agentName: name },
+        });
+        if ('error' in res)
+            throw new Error(`delete_agent failed: ${res.error?.message}`);
+    }
+    // ─── Run agents ─────────────────────────────────────────────────────────
+    /**
+     * Run a single agent and wait for its output.
+     * Timeout is per-agent, not global.
+     */
+    async runAgent(opts) {
+        const start = Date.now();
+        const res = await callMcp(this.url, this.auth, 'tools/call', {
+            name: 'run_agent',
+            arguments: {
+                agentName: opts.agentName,
+                prompt: opts.prompt,
+                timeoutMs: opts.timeoutMs ?? 90_000,
+            },
+        }, opts.timeoutMs ?? 120_000);
+        if ('error' in res) {
+            return { agentName: opts.agentName, runner: 'claude', output: '', error: res.error?.message, durationMs: Date.now() - start };
+        }
+        const result = res.result;
+        return {
+            agentName: opts.agentName,
+            runner: 'claude',
+            output: result.content?.[0]?.text ?? '',
+            sessionId: result.sessionId,
+            durationMs: Date.now() - start,
+        };
+    }
+    /**
+     * Run multiple agents in parallel. Returns results in the same order.
+     */
+    async runPool(agents) {
+        return Promise.all(agents.map(a => this.runAgent({ agentName: a.name, prompt: a.prompt, timeoutMs: a.timeoutMs })));
+    }
+    // ─── Lifecycle control ──────────────────────────────────────────────────
+    /** Get status of a running agent (reads from RAM, no disk I/O) */
+    async agentStatus(agentName, runner) {
+        const res = await callMcp(this.url, this.auth, 'tools/call', {
+            name: 'agent_control',
+            arguments: { agentName, runner, action: 'status' },
+        });
+        if ('error' in res)
+            return `Error: ${res.error?.message}`;
+        const text = res.result.content[0].text;
+        return text;
+    }
+    /** Stream output from a running agent (non-blocking) */
+    async agentStream(agentName, runner) {
+        const res = await callMcp(this.url, this.auth, 'tools/call', {
+            name: 'agent_control',
+            arguments: { agentName, runner, action: 'stream' },
+        });
+        if ('error' in res)
+            return { output: `Error: ${res.error?.message}`, isComplete: true };
+        const text = res.result.content[0].text;
+        const isComplete = text.includes('isComplete: true') || text.includes('**isComplete:** true');
+        return { output: text, isComplete };
+    }
+    /** Wait for an agent to finish (blocking, polls every 1s) */
+    async agentWait(agentName, timeoutMs = 900_000, runner) {
+        const res = await callMcp(this.url, this.auth, 'tools/call', {
+            name: 'agent_control',
+            arguments: { agentName, runner, action: 'wait', timeoutMs },
+        }, timeoutMs + 10_000);
+        if ('error' in res)
+            return `Error: ${res.error?.message}`;
+        return res.result.content[0].text;
+    }
+    /** Kill a running agent */
+    async agentKill(agentName, runner) {
+        const res = await callMcp(this.url, this.auth, 'tools/call', {
+            name: 'agent_control',
+            arguments: { agentName, runner, action: 'kill' },
+        });
+        if ('error' in res)
+            return `Error: ${res.error?.message}`;
+        return res.result.content[0].text;
+    }
+}
+// ─── CLI demo ────────────────────────────────────────────────────────────────
+async function demo() {
+    const client = new OvermindClient();
+    console.log('\n═══ Overmind Client Demo ═══\n');
+    // Health
+    const ok = await client.health();
+    console.log(`[health] ${ok ? '✓' : '✗'} Overmind MCP server`);
+    // List agents
+    const agents = await client.listAgents();
+    console.log(`[list_agents] ${agents.length} agents registered`);
+    // Demo: create + run a probe agent
+    const TEST_AGENT = 'client_demo_probe';
+    try {
+        await client.createAgent({
+            name: TEST_AGENT,
+            runner: 'claude',
+            prompt: 'Réponds exactement: PONG',
+        });
+        console.log(`[create_agent] ${TEST_AGENT} créé`);
+        const result = await client.runAgent({
+            agentName: TEST_AGENT,
+            prompt: 'PING',
+            timeoutMs: 30_000,
+        });
+        console.log(`[run_agent] ✓ (${result.durationMs}ms)`);
+        console.log(`  Output: ${result.output.slice(0, 120).trim()}`);
+        await client.deleteAgent(TEST_AGENT);
+        console.log(`[delete_agent] ${TEST_AGENT} supprimé`);
+    }
+    catch (e) {
+        console.error('[demo] Erreur:', e);
+    }
+}
+// Run demo if executed directly
+demo().catch(console.error);
+// Export for use as module
+export { OvermindClient as default };
+//# sourceMappingURL=overmind-client.js.map

package/dist/bin/overmind-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"overmind-client.js","sourceRoot":"","sources":["../../src/bin/overmind-client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACjD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,UAAU,CAAC;AAC7D,MAAM,UAAU,GAAI,8BAA8B,CAAC;AAEnD,iFAAiF;AAEjF,SAAS,OAAO,CAAC,EAAU,EAAE,MAAc,EAAE,SAAkC,EAAE;IAC/E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,GAAW,EACX,IAAY,EACZ,MAAc,EACd,MAA+B,EAC/B,SAAS,GAAG,MAAM;IAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,QAAQ,EAAE,qCAAqC;YAC/C,eAAe,EAAE,UAAU,IAAI,EAAE;SAClC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;KACvC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,+BAA+B;IAC/B,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,yCAAyC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAChD,IAAI,IAAI,CAAC,KAAK;gBAAG,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAA0C,EAAE,CAAC;QACrF,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;AAC/C,CAAC;AAiBD,iFAAiF;AAEjF,MAAM,OAAO,cAAc;IACjB,GAAG,CAAS;IACZ,IAAI,CAAS;IACb,EAAE,GAAG,CAAC,CAAC;IACP,MAAM,KAAa,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAE9C,YAAY,OAAwC,EAAE;QACpD,IAAI,CAAC,GAAG,GAAK,IAAI,CAAC,GAAG,IAAM,YAAY,CAAC;QACxC,IAAI,CAAC,IAAI,GAAI,IAAI,CAAC,IAAI,IAAK,YAAY,CAAC;IAC1C,CAAC;IAED,4EAA4E;IAE5E,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,UAAU,EAAE;gBAClC,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE,EAAE;gBACnD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,OAAO,GAAG,CAAC,EAAE,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC3B,CAAC;IAED,4EAA4E;IAE5E,yDAAyD;IACzD,KAAK,CAAC,WAAW,CAAC,IAIjB;QACC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE;YAC3D,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,IAAI;SAChB,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;IAClD,CAAC;IAED,iCAAiC;IACjC,KAAK,CAAC,UAAU;QACd,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE;YAC3D,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,EAAE;SACd,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,GAAI,GAAG,CAAC,MAA+C,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,0BAA0B;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,wCAAwC;IACxC,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE;YAC3D,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;SAC/B,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,2EAA2E;IAE3E;;;OAGG;IACH,KAAK,CAAC,QAAQ,CAAC,IAId;QACC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE;YAC3D,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE;gBACT,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,MAAM,EAAK,IAAI,CAAC,MAAM;gBACtB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM;aACpC;SACF,EAAE,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC;QAE9B,IAAI,OAAO,IAAI,GAAG,EAAE,CAAC;YACnB,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAChI,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAmE,CAAC;QACvF,OAAO;YACL,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE;YACvC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;SAC/B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,MAKZ;QACA,OAAO,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAChG,CAAC;IACJ,CAAC;IAED,2EAA2E;IAE3E,kEAAkE;IAClE,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,MAAmB;QACtD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE;YAC3D,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,GAAG;YAAE,OAAO,UAAU,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAI,GAAG,CAAC,MAA+C,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,MAAmB;QACtD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE;YAC3D,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;SACnD,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,GAAG;YAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACxF,MAAM,IAAI,GAAI,GAAG,CAAC,MAA+C,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC;QAC9F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACtC,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,SAAS,GAAG,OAAO,EAAE,MAAmB;QACzE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE;YAC3D,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE;SAC5D,EAAE,SAAS,GAAG,MAAM,CAAC,CAAC;QACvB,IAAI,OAAO,IAAI,GAAG;YAAE,OAAO,UAAU,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC1D,OAAQ,GAAG,CAAC,MAA+C,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;IAED,2BAA2B;IAC3B,KAAK,CAAC,SAAS,CAAC,SAAiB,EAAE,MAAmB;QACpD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE;YAC3D,IAAI,EAAE,eAAe;YACrB,SAAS,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;SACjD,CAAC,CAAC;QACH,IAAI,OAAO,IAAI,GAAG;YAAE,OAAO,UAAU,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAC1D,OAAQ,GAAG,CAAC,MAA+C,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;CACF;AAED,gFAAgF;AAEhF,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;IAEpC,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAEhD,SAAS;IACT,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,sBAAsB,CAAC,CAAC;IAE9D,cAAc;IACd,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,MAAM,oBAAoB,CAAC,CAAC;IAEhE,mCAAmC;IACnC,MAAM,UAAU,GAAG,mBAAmB,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,WAAW,CAAC;YACvB,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,QAAQ;YAChB,MAAM,EAAE,0BAA0B;SACnC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,OAAO,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC;YACnC,SAAS,EAAE,UAAU;YACrB,MAAM,EAAE,MAAM;YACd,SAAS,EAAE,MAAM;SAClB,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,kBAAkB,MAAM,CAAC,UAAU,KAAK,CAAC,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAE/D,MAAM,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,kBAAkB,UAAU,WAAW,CAAC,CAAC;IAEvD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,gCAAgC;AAChC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAE5B,2BAA2B;AAC3B,OAAO,EAAE,cAAc,IAAI,OAAO,EAAE,CAAC"}

package/dist/lib/agent_lifecycle.d.ts

@@ -0,0 +1,91 @@
+/**
+ * agent_lifecycle.ts — Lightweight in-memory agent lifecycle manager
+ * =================================================================
+ *
+ * Single source of truth for LIVE agent state during execution.
+ * No disk I/O, no async on the hot path.
+ *
+ * Two layers working together:
+ *   - agent_lifecycle (RAM): outputBuffer, status, sessionId, PID → O(1) access
+ *   - processRegistry (disk): persistence, sweeper, OS-level kill
+ *
+ * Design goals:
+ *   - appendLiveOutput() → O(1) in-memory string concat, zero disk I/O
+ *   - agent_control     → direct Map read, no disk poll
+ *   - 10+ agents        → all in RAM, zero contention
+ *   - wait()            → AbortController-based, instant resolution
+ */
+import { ChildProcess } from 'child_process';
+export type LifecycleStatus = 'running' | 'done' | 'failed' | 'orphaned';
+export interface LiveAgent {
+    pid: number;
+    runner: string;
+    agentName: string;
+    sessionId: string;
+    status: LifecycleStatus;
+    outputBuffer: string;
+    exitCode: number | null;
+    startedAt: number;
+    lastOutputAt: number;
+    abortController?: AbortController;
+    cleanupFn: () => Promise<void>;
+    childRef: ChildProcess | null;
+}
+/**
+ * Register a new running agent. Call once per spawn.
+ */
+export declare function registerLiveAgent(agent: {
+    pid: number;
+    runner: string;
+    agentName: string;
+    sessionId: string;
+    abortController?: AbortController;
+    cleanupFn: () => Promise<void>;
+    childRef: ChildProcess | null;
+}): void;
+/**
+ * Append a text chunk to the agent's ring buffer. O(1).
+ */
+export declare function appendLiveOutput(pid: number, chunk: string): void;
+/**
+ * Update sessionId after the runner resolves it from the JSON response.
+ */
+export declare function linkLiveSession(pid: number, sessionId: string): void;
+/**
+ * Transition an agent to a terminal state.
+ * Resolves any pending wait() via AbortController.abort().
+ */
+export declare function setLiveStatus(pid: number, status: LifecycleStatus, exitCode?: number | null): void;
+/**
+ * Unregister and remove from map. Called after 'exit' event in the runner.
+ */
+export declare function unregisterLiveAgent(pid: number): void;
+/**
+ * Get a live agent by agentName (+ optionally by runner).
+ */
+export declare function getLiveAgent(agentName: string, runner?: string): LiveAgent | undefined;
+/**
+ * Get a live agent by PID.
+ */
+export declare function getLiveAgentByPid(pid: number): LiveAgent | undefined;
+/**
+ * All currently running agents.
+ */
+export declare function getRunningAgents(): LiveAgent[];
+/**
+ * Agent counts.
+ */
+export declare function getAgentCount(): {
+    running: number;
+    total: number;
+};
+/**
+ * Attach an AbortController to a running agent (for wait() resolution).
+ */
+export declare function setLiveAbortController(pid: number, ac: AbortController): void;
+/**
+ * Drain all agents — called on SIGTERM/SIGINT.
+ * Best-effort cleanup of all running processes.
+ */
+export declare function drainAllAgents(): Promise<void>;
+//# sourceMappingURL=agent_lifecycle.d.ts.map

package/dist/lib/agent_lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent_lifecycle.d.ts","sourceRoot":"","sources":["../../src/lib/agent_lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,MAAM,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEzE,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,eAAe,CAAC;IACxB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;CAC/B;AAoBD;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,QAAQ,EAAE,YAAY,GAAG,IAAI,CAAC;CAC/B,GAAG,IAAI,CAoBP;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAKjE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAKpE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,eAAe,EACvB,QAAQ,GAAE,MAAM,GAAG,IAAW,GAC7B,IAAI,CASN;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAMrD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAOtF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAEpE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,SAAS,EAAE,CAE9C;AAED;;GAEG;AACH,wBAAgB,aAAa,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAMlE;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,eAAe,GAAG,IAAI,CAG7E;AAED;;;GAGG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpD"}

package/dist/lib/agent_lifecycle.js

@@ -0,0 +1,155 @@
+/**
+ * agent_lifecycle.ts — Lightweight in-memory agent lifecycle manager
+ * =================================================================
+ *
+ * Single source of truth for LIVE agent state during execution.
+ * No disk I/O, no async on the hot path.
+ *
+ * Two layers working together:
+ *   - agent_lifecycle (RAM): outputBuffer, status, sessionId, PID → O(1) access
+ *   - processRegistry (disk): persistence, sweeper, OS-level kill
+ *
+ * Design goals:
+ *   - appendLiveOutput() → O(1) in-memory string concat, zero disk I/O
+ *   - agent_control     → direct Map read, no disk poll
+ *   - 10+ agents        → all in RAM, zero contention
+ *   - wait()            → AbortController-based, instant resolution
+ */
+const MAX_BUFFER = 256 * 1024;
+// ─── In-memory store ───────────────────────────────────────────────────────────
+const lifecycleMap = new Map();
+const sessionIndex = new Map(); // sessionId → pid
+// ─── Ring-buffer ───────────────────────────────────────────────────────────────
+function appendToRing(existing, chunk) {
+    const combined = existing + chunk;
+    return combined.length > MAX_BUFFER
+        ? combined.slice(-MAX_BUFFER)
+        : combined;
+}
+// ─── Lifecycle API ─────────────────────────────────────────────────────────────
+/**
+ * Register a new running agent. Call once per spawn.
+ */
+export function registerLiveAgent(agent) {
+    // Evict any stale entry for the same agentName that is still 'running'
+    for (const [pid, a] of lifecycleMap) {
+        if (a.agentName === agent.agentName && a.status === 'running') {
+            a.status = 'orphaned';
+            lifecycleMap.delete(pid);
+        }
+    }
+    const live = {
+        ...agent,
+        status: 'running',
+        outputBuffer: '',
+        exitCode: null,
+        startedAt: Date.now(),
+        lastOutputAt: Date.now(),
+    };
+    lifecycleMap.set(agent.pid, live);
+    if (agent.sessionId)
+        sessionIndex.set(agent.sessionId, agent.pid);
+}
+/**
+ * Append a text chunk to the agent's ring buffer. O(1).
+ */
+export function appendLiveOutput(pid, chunk) {
+    const agent = lifecycleMap.get(pid);
+    if (!agent)
+        return;
+    agent.outputBuffer = appendToRing(agent.outputBuffer, chunk);
+    agent.lastOutputAt = Date.now();
+}
+/**
+ * Update sessionId after the runner resolves it from the JSON response.
+ */
+export function linkLiveSession(pid, sessionId) {
+    const agent = lifecycleMap.get(pid);
+    if (!agent)
+        return;
+    agent.sessionId = sessionId;
+    sessionIndex.set(sessionId, pid);
+}
+/**
+ * Transition an agent to a terminal state.
+ * Resolves any pending wait() via AbortController.abort().
+ */
+export function setLiveStatus(pid, status, exitCode = null) {
+    const agent = lifecycleMap.get(pid);
+    if (!agent)
+        return;
+    agent.status = status;
+    agent.exitCode = exitCode;
+    agent.lastOutputAt = Date.now();
+    if (status !== 'running' && agent.abortController) {
+        agent.abortController.abort();
+    }
+}
+/**
+ * Unregister and remove from map. Called after 'exit' event in the runner.
+ */
+export function unregisterLiveAgent(pid) {
+    const agent = lifecycleMap.get(pid);
+    if (agent) {
+        if (agent.sessionId)
+            sessionIndex.delete(agent.sessionId);
+        lifecycleMap.delete(pid);
+    }
+}
+/**
+ * Get a live agent by agentName (+ optionally by runner).
+ */
+export function getLiveAgent(agentName, runner) {
+    for (const agent of lifecycleMap.values()) {
+        if (agent.agentName === agentName && (runner === undefined || agent.runner === runner)) {
+            return agent;
+        }
+    }
+    return undefined;
+}
+/**
+ * Get a live agent by PID.
+ */
+export function getLiveAgentByPid(pid) {
+    return lifecycleMap.get(pid);
+}
+/**
+ * All currently running agents.
+ */
+export function getRunningAgents() {
+    return [...lifecycleMap.values()].filter((a) => a.status === 'running');
+}
+/**
+ * Agent counts.
+ */
+export function getAgentCount() {
+    let running = 0;
+    for (const a of lifecycleMap.values()) {
+        if (a.status === 'running')
+            running++;
+    }
+    return { running, total: lifecycleMap.size };
+}
+/**
+ * Attach an AbortController to a running agent (for wait() resolution).
+ */
+export function setLiveAbortController(pid, ac) {
+    const agent = lifecycleMap.get(pid);
+    if (agent)
+        agent.abortController = ac;
+}
+/**
+ * Drain all agents — called on SIGTERM/SIGINT.
+ * Best-effort cleanup of all running processes.
+ */
+export async function drainAllAgents() {
+    for (const agent of lifecycleMap.values()) {
+        if (agent.status === 'running') {
+            try {
+                await agent.cleanupFn();
+            }
+            catch { /* best-effort */ }
+        }
+    }
+}
+//# sourceMappingURL=agent_lifecycle.js.map

package/dist/lib/agent_lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent_lifecycle.js","sourceRoot":"","sources":["../../src/lib/agent_lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAqBH,MAAM,UAAU,GAAG,GAAG,GAAG,IAAI,CAAC;AAE9B,kFAAkF;AAElF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAqB,CAAC;AAClD,MAAM,YAAY,GAAI,IAAI,GAAG,EAAkB,CAAC,CAAC,kBAAkB;AAEnE,kFAAkF;AAElF,SAAS,YAAY,CAAC,QAAgB,EAAE,KAAa;IACnD,MAAM,QAAQ,GAAG,QAAQ,GAAG,KAAK,CAAC;IAClC,OAAO,QAAQ,CAAC,MAAM,GAAG,UAAU;QACjC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC;QAC7B,CAAC,CAAC,QAAQ,CAAC;AACf,CAAC;AAED,kFAAkF;AAElF;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAQjC;IACC,uEAAuE;IACvE,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,YAAY,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9D,CAAC,CAAC,MAAM,GAAG,UAAU,CAAC;YACtB,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAc;QACtB,GAAG,KAAK;QACR,MAAM,EAAE,SAAS;QACjB,YAAY,EAAE,EAAE;QAChB,QAAQ,EAAE,IAAI;QACd,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;KACzB,CAAC;IAEF,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,SAAS;QAAE,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,KAAa;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,KAAK,CAAC,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IAC7D,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAClC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,SAAiB;IAC5D,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC;IAC5B,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAW,EACX,MAAuB,EACvB,WAA0B,IAAI;IAE9B,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC1B,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAClD,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,KAAK,CAAC,SAAS;YAAE,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1D,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,MAAe;IAC7D,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;YACvF,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,OAAO,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;AAC1E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa;IAC3B,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,GAAW,EAAE,EAAmB;IACrE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK;QAAE,KAAK,CAAC,eAAe,GAAG,EAAE,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC;gBAAC,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/lib/config.d.ts

@@ -24,34 +24,13 @@ export interface ConfigType {
     HARD_TIMEOUT_MS: number;
     KEEPALIVE_INTERVAL_MS: number;
 }
+declare let PKG_VERSION: string;
+export { PKG_VERSION };
 export declare const DEFAULT_CONFIG: ConfigType;
-export declare const CONFIG: {
-    CLAUDE: {
-        CORE: string;
-        PERMISSIONS: string;
-        PATHS: {
-            SETTINGS: string;
-            MCP: string;
-        };
-    };
-    KILO: {
-        CORE: string;
-        DEFAULT_MODEL: string;
-        PATHS: {
-            SETTINGS: string;
-        };
-    };
-    HERMES: {
-        CORE: string;
-        PATHS: {
-            SETTINGS: string;
-        };
-    };
-    TIMEOUT_MS: number;
-    HARD_TIMEOUT_MS: number;
-    KEEPALIVE_INTERVAL_MS: number;
-};
+export declare const CONFIG: ConfigType;
 export declare function resetWorkspaceCache(): void;
+/** Validate agent name to prevent path traversal */
+export declare function isValidAgentName(name: string): boolean;
 export declare function getWorkspaceDir(): string;
 export declare function resolveConfigPath(configPath: string, workspaceDirOverride?: string): string;
 export declare function updateConfig(newSettingsPath?: string, newMcpPath?: string): void;

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC;YACjB,GAAG,EAAE,MAAM,CAAC;SACb,CAAC;KACH,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,CAAC;IACF,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAKD,eAAO,MAAM,cAAc,EAAE,UAyB5B,CAAC;AAEF,eAAO,MAAM,MAAM;YAxDT;QACN,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC;YACjB,GAAG,EAAE,MAAM,CAAC;SACb,CAAC;KACH;UACK;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC;KACH;YACO;QACN,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC;KACH;gBACW,MAAM;qBACD,MAAM;2BACA,MAAM;CAiCY,CAAC;AAI5C,wBAAgB,mBAAmB,SAElC;AAED,wBAAgB,eAAe,IAAI,MAAM,CA0DxC;AAKD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,CAa3F;AAED,wBAAgB,YAAY,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,QAGzE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC;YACjB,GAAG,EAAE,MAAM,CAAC;SACb,CAAC;KACH,CAAC;IACF,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM,CAAC;QACb,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,CAAC;IACF,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE;YACL,QAAQ,EAAE,MAAM,CAAC;SAClB,CAAC;KACH,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;CAC/B;AAQD,QAAA,IAAI,WAAW,QAAU,CAAC;AAM1B,OAAO,EAAE,WAAW,EAAE,CAAC;AAEvB,eAAO,MAAM,cAAc,EAAE,UAyB5B,CAAC;AAGF,eAAO,MAAM,MAAM,EAAE,UAAuD,CAAC;AAI7E,wBAAgB,mBAAmB,SAElC;AAED,oDAAoD;AACpD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,wBAAgB,eAAe,IAAI,MAAM,CA2DxC;AAKD,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,CAkB3F;AAED,wBAAgB,YAAY,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,QAGzE"}

package/dist/lib/config.js

@@ -5,16 +5,26 @@ import { fileURLToPath } from 'url';
 import { loadEnvQuietly } from './loadEnv.js';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
+// Version read from package.json at build time
+import { createRequire } from 'module';
+const require = createRequire(import.meta.url);
+let PKG_VERSION = '2.7.0';
+try {
+    const pkg = require('../../package.json');
+    PKG_VERSION = pkg.version || PKG_VERSION;
+}
+catch { /* fallback */ }
+export { PKG_VERSION };
 export const DEFAULT_CONFIG = {
-    TIMEOUT_MS: 900000, // 15 minutes (was 50min — zombies undetected for too long)
-    KEEPALIVE_INTERVAL_MS: 900000, // 15 minutes
+    TIMEOUT_MS: 900000, // 15 minutes
+    KEEPALIVE_INTERVAL_MS: 300000, // 5 minutes (must be < TIMEOUT_MS to actually extend)
     HARD_TIMEOUT_MS: 60000, // 1 minute extra after keepalive
     CLAUDE: {
         CORE: '--output-format json',
-        PERMISSIONS: '--dangerously-skip-permissions',
+        PERMISSIONS: '--dangerously-skip-permissions', // Feature: autonomous mode by default
         PATHS: {
             SETTINGS: './.claude/settings.json',
-            MCP: '.mcp.json', // Will be resolved dynamically
+            MCP: '.mcp.json',
         },
     },
     KILO: {
@@ -31,11 +41,16 @@ export const DEFAULT_CONFIG = {
         },
     },
 };
-export const CONFIG = { ...DEFAULT_CONFIG };
+// Deep clone to prevent shared references with DEFAULT_CONFIG
+export const CONFIG = JSON.parse(JSON.stringify(DEFAULT_CONFIG));
 let cachedWorkspaceDir = null;
 export function resetWorkspaceCache() {
     cachedWorkspaceDir = null;
 }
+/** Validate agent name to prevent path traversal */
+export function isValidAgentName(name) {
+    return /^[a-zA-Z0-9_-]+$/.test(name) && name.length > 0 && name.length <= 128;
+}
 export function getWorkspaceDir() {
     if (cachedWorkspaceDir && process.env.NODE_ENV !== 'test')
         return cachedWorkspaceDir;
@@ -44,14 +59,12 @@ export function getWorkspaceDir() {
         workspaceDir = path.resolve(process.env.OVERMIND_WORKSPACE);
     }
     else {
-        // 2. Local Project mode if config exists in current working directory
         const cwd = process.cwd();
         if (fs.existsSync(path.join(cwd, '.mcp.json')) ||
             fs.existsSync(path.join(cwd, '.mcp.local.json'))) {
             workspaceDir = cwd;
         }
         else {
-            // 3. Search up the tree
             let current = cwd;
             while (path.dirname(current) !== current) {
                 if (fs.existsSync(path.join(current, '.mcp.json')) ||
@@ -62,19 +75,23 @@ export function getWorkspaceDir() {
                 current = path.dirname(current);
             }
             if (!workspaceDir) {
-                // 4. Auto-detect from code location
                 const codeRoot = path.resolve(__dirname, '../..');
                 if (fs.existsSync(path.join(codeRoot, '.mcp.json')) ||
                     fs.existsSync(path.join(codeRoot, '.mcp.local.json'))) {
                     workspaceDir = codeRoot;
                 }
                 else {
-                    // 4. Global fallback
                     const homedir = os.homedir();
                     workspaceDir = path.join(homedir, '.overmind-mcp');
-                    if (!fs.existsSync(workspaceDir)) {
-                        fs.mkdirSync(workspaceDir, { recursive: true });
-                        fs.writeFileSync(path.join(workspaceDir, '.mcp.json'), JSON.stringify({ mcpServers: {} }, null, 2));
+                    try {
+                        if (!fs.existsSync(workspaceDir)) {
+                            fs.mkdirSync(workspaceDir, { recursive: true });
+                            fs.writeFileSync(path.join(workspaceDir, '.mcp.json'), JSON.stringify({ mcpServers: {} }, null, 2));
+                        }
+                    }
+                    catch {
+                        // Permission errors — fall back to cwd
+                        workspaceDir = cwd;
                     }
                 }
             }
@@ -93,6 +110,10 @@ export function resolveConfigPath(configPath, workspaceDirOverride) {
         return configPath;
     const workspaceDir = workspaceDirOverride || getWorkspaceDir();
     const fullPath = path.resolve(workspaceDir, configPath);
+    // Prevent path traversal beyond workspace
+    if (!fullPath.startsWith(path.resolve(workspaceDir))) {
+        throw new Error(`Path traversal detected: ${configPath} resolves outside workspace`);
+    }
     // Special handling for MCP config to support .local variant
     if (configPath === '.mcp.json' && !fs.existsSync(fullPath)) {
         const localPath = path.resolve(workspaceDir, '.mcp.local.json');