Open Multi-Agent Files

Features

• External coding agents over ACP (#360 by @JackChen-me). OMA can now orchestrate an external coding agent over the Agent Client Protocol as a first-class team member, alongside LLM agents in the same task DAG. Declare an agent with backend: { kind: 'acp', ... } and it runs a local coding CLI (for example Claude Code via the official @agentclientprotocol/claude-agent-acp adapter) instead of an LLM, sharing the same shared memory, cascade-on-failure, and token budget as any other agent. See docs/external-agents.md (github.com).

• Orchestrator cost budget (#358 by @LambIessz). New maxCostBudget and estimateCost on orchestrator config let you set a user-defined spend cap. The estimator receives the effective model, provider, phase, and task id so you can price per model, and the cap is enforced across runAgent, runTasks, runTeam, consensus, and synthesis, mirroring the existing token-budget boundaries.

• Per-agent scoped tool credentials (#362 by @JackChen-me). New AgentConfig.credentials is a per-agent secret bag threaded into ToolUseContext.credentials. Tool code reads context.credentials?.SEARCH_API_KEY instead of closing a single shared secret over every tool, so each agent holds only the credentials it was assigned. A compromised or misbehaving subagent no longer inherits the coordinator's full access.

• Secret redaction on the persistence path (#359 by @JackChen-me). Redaction previously stopped at the observability layer, so a secret an agent emitted into its answer was scrubbed in traces but written in the clear to shared memory and any on-disk checkpoint. The new RedactingStore, a MemoryStore decorator, redacts values at the single choke point every shared-memory and checkpoint write passes through, and is structure-aware for JSON so checkpoint snapshots stay valid with only secrets masked. Closes [#339].

• MessageBus persisted in checkpoints (#363 by @LambIessz). Checkpoint and restore now carry MessageBus state (messages and per-agent read position), so a resumed run keeps its inter-agent message history. Live callback subscribers stay process-local and are not serialized. Closes [#343].

• Trace span parent linkage (#354 by @tlysanhuo). Every trace event now carries a spanId and optional parentId, with stable agent span ids so LLM and tool spans point to their owning agent span, worker agents link under their task span, and plan_ready links under the coordinator decomposition. A team run is now reconstructable as a proper span tree. Closes [#340].

Fixes

• Windows: kill the full process tree on bash timeout (#357 by @Bobuyoucrypto). A timed-out bash command on Windows now kills its full process tree with taskkill /T /F and returns promptly, instead of leaving background children alive and hanging until they exit on their own. Exit codes 124 (timeout) and 130 (abort) are reported authoritatively, and the suite now passes on Windows.

Install

npm install @open-multi-agent/core@1.10.0

New project: npm create oma-app@latest (scaffold updated to create-oma-app@0.3.1, which pins core 1.10.0).

Thanks to @LambIessz, @tlysanhuo, @Bobuyoucrypto, and @JackChen-me.