@huynle/hub 0.8.1 → 0.8.2

package/CHANGELOG.md

@@ -1,5 +1,118 @@
 # Changelog
 
+## 0.8.2
+
+A follow-up to 0.8.1. Voice keeps a request with pauses together as one turn (and fetches its cue phrases once per
+page), and the Concierge's approvals without a grant
+become Decisions for you (never rules first, never "always", the current Concierge only). OpenCode fork and revert
+are completed (clear busy/not-found errors, agent messages wait while a revert is staged, Fork and open beside), the
+profile skill/command check reads the session's own folder, the console names grants and Activity in plain words,
+and a tool call with a large screenshot opens with a placeholder instead of failing. No migration is needed.
+
+### Concierge
+- **The board moves after the conversation** (V-01). The Concierge's system prompt now ends with its stable
+  instructions and notes; the board (whose text changes as it ages) is sent after the conversation, with the spoke's
+  own cache breakpoints and tools in name order, so a board update should no longer invalidate the cached
+  conversation. On the OmniRoute route measured on the preview the cache still misses after a 20–40 s gap
+  (about 6.9k tokens read), so the cost per turn is unchanged there for now; the cause is being investigated.
+- **Concierge: "Recommended" only when it advises** (R-03). Its approve escalations no longer mark **Approve once**
+  as recommended by default: only an approve with `recommend: true` (hub tool, SDK `approve({recommend})`, route body
+  `recommend`) recommends it; otherwise its why is a note after the question and the permission card shows no
+  "recommends Approve". Other agents' escalations are unchanged.
+- **Concierge: an approve without a grant becomes a Decision** (R-03). It was refused ("No grant lets this session
+  approve in this session") although its instructions promised a Decision; it now answers needs_user and opens the
+  escalation Decision at the hub's tier (only the current Concierge session, never a retired one or after a failed
+  identity read; never rules and self-tree still refuse; other agents unchanged).
+- **Never rules come first for the Concierge's "always"** (R-03 verify). A Concierge approve with `always` on a request
+  a never rule (the hub's or its grant's) forbids opened a tap Decision offering "Approve always"; it is now
+  forbidden, with or without a grant. Concierge escalation Decisions never offer Approve always (once or deny only). Prompt
+  v8 says only approvals escalate (other verbs are proposed) and when to set `recommend`.
+- **The board is never the user's words** (V-01 verify). On OpenAI-compatible and older Claude routes OpenCode
+  delivers the board (now after the conversation) as `<system-update>` text inside a user turn; prompt v8 tells the
+  Concierge the board comes from the hub, never from the user, and its text is data, never a request.
+- **Approving a Concierge prompt proposal on a session with a staged revert answers 409 `conflict`** (not 500); the
+  Decision stays open and nothing is sent. Decision answers now use the agent API's status for every code
+  (`busy` 503 with `retryAfter`).
+
+### Voice
+- **Voice: one utterance per turn.** A pause no longer cuts the user off: after a segment ends, the endpointer waits
+  1.0 s (finished-looking text: STT adds a period to every fragment) or 1.6 s (text ending in "the", "and", a comma…)
+  before it sends, counted from the segment's end so STT speed no longer moves the threshold. Speech that starts
+  within that window joins the same utterance, and nothing is sent while the user is speaking. With the VAD's
+  ~0.43 s to end a segment and ~0.25 s to start one, pauses up to about 1.1 s (finished) or 1.7 s (unfinished) stay
+  one turn (before: every pause of 0.45 s or more after finished-looking text was a separate turn, so one request
+  with two pauses became three model turns). Voice commands ("stop", "cancel"…) and the 60 s cap still send at
+  once; barge-in is unchanged. Finished-looking turns may start up to ~0.3 s later than before (STT already takes
+  ~0.7–1 s of the window). Timings: `VOICE_TIMINGS.finishedHoldMs` / `holdMs` in `web/src/core/conversation-core.ts`.
+- **Voice: cue phrases are fetched once per page.** The ~20 progress phrases ("Let me see." …, ~0.75 MB) are kept
+  in the page's memory per TTS voice, so a second Voice start fetches nothing, also where Cache Storage is not
+  available (plain-HTTP LAN origins, private mode). `/api/speak` is a POST, so HTTP caching does not apply; no hub
+  change.
+
+### Profiles
+- **Profile skills and commands give way to the right folder's local ones** (R-02): OpenCode 2.2.3's plugin
+  `skill.list` / `command.list` answer for the plugin instance's own folder whatever location is passed, so for
+  every session outside it (all `opencode serve --service` sessions: the first instance is `$HOME`) a profile's
+  local-precedence check read another folder's names. They are now read like Branch and Changes: through the plugin
+  instance of the session's own folder, else the own server's API (which honours the location), else not at all;
+  never another folder's. When they cannot be read (no own server to ask, a cold read past 5 s) the apply still
+  succeeds as `partial`: the instructions apply and the profile's skills and commands are not offered ("skills and
+  commands not offered: the session's local skills and commands could not be read"). Instructions-only profiles do
+  not read the names. A folder OpenCode is still loading is read until two reads 0.5 s apart agree, within 5 s.
+
+### Fork and revert
+- **OpenCode fork and revert, completed** (R-01; [docs/session-view.md](docs/session-view.md#fork-and-revert-a-message)):
+  - Restore and commit while the session runs answer 409 `busy` with a clear message (the hub checks first; OpenCode's
+    "Session is busy" maps to it), and a message that is not one of the session's user messages (or a session
+    OpenCode does not have) answers 404 `not_found`: never 502. Spokes put a protocol code on refusals (`Res.code`:
+    `busy`, `not_found`; additive, older peers ignore it, older spokes' texts are still recognised).
+  - **Agent messages wait while a revert is staged**: the hub holds every hub delivery to the session (msgs, asks,
+    replies, its primer) as pending and delivers them, in order, once the revert is restored or committed, so none of
+    them commits it; act prompts (agents and the Concierge under a grant, the user's act verb, approved Concierge
+    proposals) are refused 409 `conflict`. The banner says "agent messages wait" (decision 3q94ez94).
+  - Hub message rows of a committed revert's removed history stay hidden (the spoke reports the window as
+    `revertCommitted`; the hub keeps it and `…/messages` leaves those rows out); a revert staged and committed in the
+    terminal within one report drops the deleted rows without a reload; messages held while staged stay visible.
+  - Context and summary (context usage) leave reverted messages out; a fork that copied the source's hub primer gets
+    a hub note that the identity is not its own; revert file paths over 1000 characters count in `filesTotal`.
+  - **Fork and open beside**: a user message's actions open the fork in a pane next to the session.
+  - Hardening after review: a commit window first reported without its start is still kept (and failed writes are
+    retried); the spoke itself refuses hub messages while it knows of a staged revert (the hub keeps them pending);
+    an invalid `code` or a malformed `revertCommitted` is ignored instead of dropping the frame (and the spoke's
+    connection); an act prompt checks the grant before the staged-revert refusal (403 first) and audits it; expiry
+    notices name a staged revert; the fork note frames the source title as data and times out after 5 s; live tests
+    give their private servers none of the caller's `OPENCODE_*` / `HUB_*` variables.
+
+### Console and MCP
+- **Answered notes name the grant**: "Approved by @orchestrator · your grant for api, web" (its projects by folder
+  name) or "· the Concierge's grant", never "grant g_…"; the grant's ID is in the tooltip. The console loads your
+  grants (`GET /api/agent/grants`) with the stream, and again when an entry names a grant it does not know.
+- **Settings → Agents & access → Activity says what each action did in plain words**: approved, denied, answered,
+  prompted, stopped, proposed an action, messaged, claimed / released a role, launched, stopped the launch of, staffed
+  / unstaffed a team role, a message the team's rules refused, asked for / approved / denied a grant request (instead
+  of `team.staff`, `launch.stop`, `roles.release`, …); an unknown action reads as its words without dots. A
+  Concierge proposal says what it proposes: "proposed denying a permission request in @engineer", "proposed answering
+  a form in …", "proposed a prompt to …", "proposed stopping …".
+- **A turn a denied permission stopped reads "Denied by you: the turn stopped" after a reload too**, not
+  "✕ Step interrupted": the OpenCode spoke marks the timeline's error row `declined: true` only in OpenCode's own
+  shape (a tool call failed `{type: "aborted", message: "The user declined this tool call"}` and the step
+  `{type: "aborted"}`, so a tool throwing that text cannot hide a real error), and the console names who denied it
+  from the agent audit (loaded once for such a turn; only a deny between that turn's start and the next turn's
+  counts), else "Denied: the turn stopped". A new turn denied in a session that already shows a stored denied turn
+  keeps its own note.
+- **MCP argument errors read `invalid: …` in every tool family** (teams, team intake, artifacts, artifact jobs,
+  watchlist, profiles and the core tools share one `ToolArgError`), never `<tool> failed: …`.
+- **Team staffing points a misplaced `key` at `idempotencyKey`**: `placement{key}` / `end{key}` in `team_staff` /
+  `team_replace` answer "did you mean idempotencyKey (the Idempotency-Key header)?" (staffing sets `launch.key`
+  itself), not "key (top level)".
+- **Tool-call details with a screenshot open again** (M1). OpenCode keeps tool screenshots (`read` of a PNG, MCP
+  image results) as `data:` URLs inside the tool output, so their bytes counted against the ~750 KB detail limit and
+  a large one failed with "Timeline part is too large to display". The spoke now replaces each embedded image
+  (`data:…;base64,…` URLs anywhere in the detail, raw base64 image parts) with a placeholder such as
+  `[image/png, 1.2 MB — not shown]` before the limit is checked, so the input and text output show; the hub and the
+  console do the same for details from older spokes, so no image bytes reach the console in a tool detail. The limit
+  still holds for huge text. Showing images inline is a later release.
+
 ## 0.8.1
 
 A fix-up release after 0.8.0. App and gateway messages keep waking idle sessions (per-conversation hops with a relay

package/README.md

@@ -681,7 +681,7 @@ allow patterns (else `needs_user`) → the hourly cap → the kill switches agai
 **Escalation.** An approval outside the grant answers `needs_user` with the evaluation (`verdict`, `reason`, the
 grants checked, and a `tier`) and opens a Decision for you: one per agent and request (asking again updates its
 reason), with Approve once (or Approve always, when asked), Deny (safe), and the agent's `--why` as its
-recommendation. The hub sets the tier, never the agent: `tap` (answered by a tap in the console, not from a
+recommendation (the Concierge's only with `recommend: true`; a Concierge without a grant also escalates). The hub sets the tier, never the agent: `tap` (answered by a tap in the console, not from a
 notification) for shell, `external_directory`, MCP and unknown tools and for anything near a never rule; `confirm`
 otherwise. Your answer replies to the permission **as you** (no grant or kill switch applies to you); if the request
 was answered elsewhere or ended first, the Decision closes and the agent's next try is `not_found`. A request's

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "description": "Hub: a harness-agnostic central hub your AI agent harnesses connect to (OpenCode first). Follow, steer and stop sessions from your phone or browser, with notifications, optional hands-free Voice and a self-hostable server.",
   "license": "MIT",
   "author": "Huy Le",

package/packages/claude-code/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-claude-code",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "private": true,
   "description": "The Claude Code hooks spoke: per-user daemon, hook bridge, plugin dir, `hub claude` wrapper and daemon-backed MCP server (internal; shipped inside @huynle/hub, not published on its own).",
   "license": "MIT",

package/packages/cli/dist/hub-cli.js

@@ -7,7 +7,7 @@ import { createInterface } from "readline";
 // packages/cli/package.json
 var package_default = {
   name: "@huynle/hub-cli",
-  version: "0.8.1",
+  version: "0.8.2",
   private: true,
   description: "The hub CLI (`hub` / `hubctl`) for agents and scripts (internal; bundled into @huynle/hub, not published on its own).",
   license: "MIT",
@@ -863,7 +863,7 @@ class HubClient {
     return this.call("POST", `/api/decisions/${segment(id)}/answer`, { body, ...signalOf(answer) });
   }
   approve(addr, requestID, options = {}) {
-    const body = { requestID, ...options.always ? { always: true } : {}, ...whyField(options) };
+    const body = { requestID, ...options.always ? { always: true } : {}, ...options.recommend ? { recommend: true } : {}, ...whyField(options) };
     return this.call("POST", `${AGENT}/sessions/${segment(addr)}/approve`, { body, ...signalOf(options) });
   }
   deny(addr, requestID, options = {}) {
@@ -3852,6 +3852,9 @@ function formAnswerProblem(v) {
 }
 var REVERT_FILES_MAX = 50;
 var REVERT_FILE_MAX_CHARS = 1000;
+function isRevertCommitted(v) {
+  return isObj(v) && nonEmpty(v.messageID) && v.messageID.length <= 300 && (v.from === undefined || num(v.from)) && num(v.until) && num(v.at);
+}
 var FORWARDED_EVENTS = new Set([
   "session.created",
   "session.renamed",
@@ -3943,13 +3946,14 @@ function isLaunchCreate(req) {
 }
 var AGENT_NAME_MAX = 100;
 var PERMISSION_MESSAGE_MAX = 1000;
+var RES_CODE_MAX = 40;
 var isModelSelection = (v) => isObj(v) && typeof v.providerID === "string" && ID.test(v.providerID) && typeof v.modelID === "string" && ID.test(v.modelID) && (v.variant === undefined || typeof v.variant === "string" && ID.test(v.variant));
 var SESSION_TOKEN_TEXT = new RegExp(`^[\\x21-\\x7e]{1,${SESSION_TOKEN_MAX_CHARS}}$`);
 function isSessionToken(v) {
   return isObj(v) && nonEmpty(v.sessionID) && v.sessionID.length <= 300 && str2(v.token) && SESSION_TOKEN_TEXT.test(v.token) && num(v.exp);
 }
 function isSession(v) {
-  return isObj(v) && nonEmpty(v.id) && str2(v.title) && str2(v.directory) && num(v.updated) && typeof v.owned === "boolean" && (v.parentID === undefined || str2(v.parentID)) && (v.exposed === undefined || typeof v.exposed === "boolean") && (v.project === undefined || str2(v.project)) && (v.projectName === undefined || str2(v.projectName)) && (v.archived === undefined || typeof v.archived === "boolean") && (v.open === undefined || typeof v.open === "boolean") && (v.terminal === undefined || isTerminal(v.terminal)) && (v.revert === undefined || isSessionRevert(v.revert)) && (v.agent === undefined || nonEmpty(v.agent) && v.agent.length <= AGENT_NAME_MAX) && (v.contextRevision === undefined || Number.isSafeInteger(v.contextRevision) && v.contextRevision >= 0) && (v.locked === undefined || v.locked === true);
+  return isObj(v) && nonEmpty(v.id) && str2(v.title) && str2(v.directory) && num(v.updated) && typeof v.owned === "boolean" && (v.parentID === undefined || str2(v.parentID)) && (v.exposed === undefined || typeof v.exposed === "boolean") && (v.project === undefined || str2(v.project)) && (v.projectName === undefined || str2(v.projectName)) && (v.archived === undefined || typeof v.archived === "boolean") && (v.open === undefined || typeof v.open === "boolean") && (v.terminal === undefined || isTerminal(v.terminal)) && (v.revert === undefined || isSessionRevert(v.revert)) && (v.revertCommitted === undefined || isRevertCommitted(v.revertCommitted)) && (v.agent === undefined || nonEmpty(v.agent) && v.agent.length <= AGENT_NAME_MAX) && (v.contextRevision === undefined || Number.isSafeInteger(v.contextRevision) && v.contextRevision >= 0) && (v.locked === undefined || v.locked === true);
 }
 var REVERT_STATUS = new Set(["added", "deleted", "modified"]);
 var count = (v) => Number.isSafeInteger(v) && v >= 0;
@@ -3957,7 +3961,7 @@ function isRevertFile(v) {
   return isObj(v) && nonEmpty(v.file) && v.file.length <= REVERT_FILE_MAX_CHARS && (v.status === undefined || REVERT_STATUS.has(v.status)) && (v.additions === undefined || count(v.additions)) && (v.deletions === undefined || count(v.deletions));
 }
 function isSessionRevert(v) {
-  return isObj(v) && nonEmpty(v.messageID) && v.messageID.length <= 300 && count(v.hidden) && (v.at === undefined || num(v.at)) && Array.isArray(v.files) && v.files.length <= REVERT_FILES_MAX && v.files.every(isRevertFile) && count(v.filesTotal) && v.filesTotal >= v.files.length;
+  return isObj(v) && nonEmpty(v.messageID) && v.messageID.length <= 300 && count(v.hidden) && (v.at === undefined || num(v.at)) && Array.isArray(v.files) && v.files.length <= REVERT_FILES_MAX && v.files.every(isRevertFile) && count(v.filesTotal) && v.filesTotal >= v.files.length && (v.stagedAt === undefined || num(v.stagedAt));
 }
 var TERMINAL_STATUS = new Set(["idle", "working", "blocked", "done", "unknown"]);
 function isTerminal(v) {
@@ -4141,8 +4145,12 @@ function parseSpokeMessage(raw) {
   switch (m.t) {
     case "hello":
       return (m.role === undefined || m.role === "spoke") && num(m.v) && nonEmpty(m.processID) && (m.kind === "service" || m.kind === "standalone") && str2(m.directory) && num(m.pid) && (m.mode === "always" || m.mode === "session") && (str2(m.opencodeVersion) || m.opencodeVersion === undefined && m.harness !== undefined && m.harness !== HARNESS_OPENCODE) && str2(m.pluginVersion) && (m.features === undefined || featureList(m.features)) && (m.harness === undefined || token(m.harness, 64)) && (m.harnessVersion === undefined || str2(m.harnessVersion) && m.harnessVersion.length <= 100) && (m.evidence === undefined || token(m.evidence, 32)) && (m.launchID === undefined || str2(m.launchID) && ID.test(m.launchID)) ? m : undefined;
-    case "sessions":
-      return Array.isArray(m.sessions) && m.sessions.every(isSession) ? m : undefined;
+    case "sessions": {
+      if (!Array.isArray(m.sessions))
+        return;
+      const sessions = m.sessions.map(lenientSession);
+      return sessions.every(isSession) ? { ...m, sessions } : undefined;
+    }
     case "terminals":
       return m.herdr === undefined || isHerdrInfo(m.herdr) ? m : undefined;
     case "event":
@@ -4150,13 +4158,34 @@ function parseSpokeMessage(raw) {
     case "req":
       return nonEmpty(m.id) && isSpokeRequest(m.req) ? m : undefined;
     case "res":
-      return isResFrame(m) ? m : undefined;
+      return isResFrame(m) ? lenientRes(m) : undefined;
     case "bye":
       return isByeFrame(m) ? m : undefined;
     default:
       return;
   }
 }
+function lenientRes(m) {
+  if (m.code === undefined || nonEmpty(m.code) && m.code.length <= RES_CODE_MAX)
+    return m;
+  const { code: _dropped, ...rest } = m;
+  return rest;
+}
+function lenientSession(v) {
+  if (!isObj(v))
+    return v;
+  let out = v;
+  if (out.revertCommitted !== undefined && !isRevertCommitted(out.revertCommitted)) {
+    const { revertCommitted: _dropped, ...rest } = out;
+    out = rest;
+  }
+  const revert = out.revert;
+  if (isObj(revert) && revert.stagedAt !== undefined && !num(revert.stagedAt)) {
+    const { stagedAt: _dropped, ...rest } = revert;
+    out = { ...out, revert: rest };
+  }
+  return out;
+}
 function parseServerMessage(raw) {
   const m = parseFrame(raw);
   if (!m)
@@ -4167,7 +4196,7 @@ function parseServerMessage(raw) {
     case "req":
       return nonEmpty(m.id) && isServerRequest(m.req) ? m : undefined;
     case "res":
-      return isResFrame(m) ? m : undefined;
+      return isResFrame(m) ? lenientRes(m) : undefined;
     case "bye":
       return isByeFrame(m) ? m : undefined;
     default:
@@ -5847,6 +5876,10 @@ function launchText(l) {
 `);
 }
 
+// packages/cli/src/tool-args.ts
+class ToolArgError extends Error {
+}
+
 // packages/cli/src/artifacts-mcp.ts
 var MCP_INLINE_TEXT_BYTES = 256 * 1024;
 var KINDS = ["markdown", "code", "image", "table", "chart", "dashboard", "html", "app", "file"];
@@ -5870,7 +5903,7 @@ var FILE_ARGS = {
 var need = (args, key) => {
   const value = args[key];
   if (typeof value !== "string" || !value.trim())
-    throw new Error(`"${key}" is required (a non-empty string)`);
+    throw new ToolArgError(`"${key}" is required (a non-empty string)`);
   return value;
 };
 var optional2 = (args, key) => {
@@ -5878,20 +5911,20 @@ var optional2 = (args, key) => {
   if (value === undefined || value === null)
     return;
   if (typeof value !== "string")
-    throw new Error(`"${key}" must be a string`);
+    throw new ToolArgError(`"${key}" must be a string`);
   return value.trim() ? value : undefined;
 };
 function files(args, kind) {
   const text = args.text;
   if (text !== undefined && typeof text !== "string")
-    throw new Error('"text" must be a string');
+    throw new ToolArgError('"text" must be a string');
   const blobs = args.blobs;
   if (blobs !== undefined && (!Array.isArray(blobs) || !blobs.every((b) => typeof b === "object" && b !== null)))
-    throw new Error('"blobs" must be a list of blob references');
+    throw new ToolArgError('"blobs" must be a list of blob references');
   if (text === undefined && (blobs === undefined || blobs.length === 0))
-    throw new Error("give text or blobs (stage bigger content first and pass its reference)");
+    throw new ToolArgError("give text or blobs (stage bigger content first and pass its reference)");
   if (text !== undefined && Buffer.byteLength(text, "utf8") > MCP_INLINE_TEXT_BYTES)
-    throw new Error(`text is larger than ${MCP_INLINE_TEXT_BYTES} bytes: stage it with uploadBlob and pass blobs`);
+    throw new ToolArgError(`text is larger than ${MCP_INLINE_TEXT_BYTES} bytes: stage it with uploadBlob and pass blobs`);
   const path = optional2(args, "path");
   const entry = optional2(args, "entry");
   const mediaType = optional2(args, "mediaType") ?? (kind && DEFAULT_MEDIA[kind]) ?? "text/plain";
@@ -5958,7 +5991,7 @@ var artifactTools = [
       const title = need(args, "title");
       const kind = need(args, "kind");
       if (!KINDS.includes(kind))
-        throw new Error(`"kind" must be one of ${KINDS.join(", ")}`);
+        throw new ToolArgError(`"kind" must be one of ${KINDS.join(", ")}`);
       const body = files(args, kind);
       const description = optional2(args, "description");
       const visibility = optional2(args, "visibility");
@@ -5997,7 +6030,7 @@ var KINDS2 = ["ask", "propose-edit", "run-action"];
 var need2 = (args, key) => {
   const value = args[key];
   if (typeof value !== "string" || !value.trim())
-    throw new Error(`"${key}" is required (a non-empty string)`);
+    throw new ToolArgError(`"${key}" is required (a non-empty string)`);
   return value;
 };
 var optional3 = (args, key) => {
@@ -6005,24 +6038,24 @@ var optional3 = (args, key) => {
   if (value === undefined || value === null)
     return;
   if (typeof value !== "string")
-    throw new Error(`"${key}" must be a string`);
+    throw new ToolArgError(`"${key}" must be a string`);
   return value.trim() ? value : undefined;
 };
 var integer = (args, key) => {
   const value = args[key];
   if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0)
-    throw new Error(`"${key}" is required (a whole number)`);
+    throw new ToolArgError(`"${key}" is required (a whole number)`);
   return value;
 };
 function handlerOf(args) {
   const session = optional3(args, "session");
   const machine = optional3(args, "machine");
   if (session && machine)
-    throw new Error('give either "session" (an existing session) or "machine" + "repo" (a new handler session), not both');
+    throw new ToolArgError('give either "session" (an existing session) or "machine" + "repo" (a new handler session), not both');
   if (session)
     return { session };
   if (!machine)
-    throw new Error('"machine" and "repo" are required to launch a handler session (or name an existing one with "session")');
+    throw new ToolArgError('"machine" and "repo" are required to launch a handler session (or name an existing one with "session")');
   const repo = need2(args, "repo");
   const harness = optional3(args, "harness");
   const model = optional3(args, "model");
@@ -6086,7 +6119,7 @@ var artifactJobTools = [
     run: async (hub, args, signal) => {
       const kind = optional3(args, "kind");
       if (kind && !KINDS2.includes(kind))
-        throw new Error(`"kind" must be one of ${KINDS2.join(", ")}`);
+        throw new ToolArgError(`"kind" must be one of ${KINDS2.join(", ")}`);
       const action = optional3(args, "action");
       const apply = optional3(args, "apply");
       const key = optional3(args, "key");
@@ -6155,12 +6188,12 @@ var artifactJobTools = [
       const answer = optional3(args, "answer");
       const text = args.text;
       if (text !== undefined && typeof text !== "string")
-        throw new Error('"text" must be a string');
+        throw new ToolArgError('"text" must be a string');
       if (typeof text === "string" && Buffer.byteLength(text, "utf8") > MCP_JOB_TEXT_BYTES)
-        throw new Error(`"text" is larger than ${MCP_JOB_TEXT_BYTES} bytes`);
+        throw new ToolArgError(`"text" is larger than ${MCP_JOB_TEXT_BYTES} bytes`);
       const keep = args.keep;
       if (keep !== undefined && (!Array.isArray(keep) || !keep.every((k) => typeof k === "string")))
-        throw new Error('"keep" must be a list of paths');
+        throw new ToolArgError('"keep" must be a list of paths');
       const path = optional3(args, "path");
       const entry = optional3(args, "entry");
       const result = error ? { error } : text !== undefined || keep !== undefined ? {
@@ -6207,7 +6240,7 @@ var UPDATES = TEAM_INTAKE_STATUS_INPUTS;
 var need3 = (args, key) => {
   const value = args[key];
   if (typeof value !== "string" || !value.trim())
-    throw new Error(`"${key}" is required (a non-empty string)`);
+    throw new ToolArgError(`"${key}" is required (a non-empty string)`);
   return value;
 };
 var optional4 = (args, key) => {
@@ -6215,7 +6248,7 @@ var optional4 = (args, key) => {
   if (value === undefined || value === null)
     return;
   if (typeof value !== "string")
-    throw new Error(`"${key}" must be a string`);
+    throw new ToolArgError(`"${key}" must be a string`);
   return value.trim() ? value : undefined;
 };
 var strings2 = (args, key) => {
@@ -6223,13 +6256,13 @@ var strings2 = (args, key) => {
   if (value === undefined || value === null)
     return;
   if (!Array.isArray(value) || !value.every((v) => typeof v === "string"))
-    throw new Error(`"${key}" must be a list of strings`);
+    throw new ToolArgError(`"${key}" must be a list of strings`);
   return value;
 };
 var oneOf4 = (args, key, allowed) => {
   const value = optional4(args, key);
   if (value !== undefined && !allowed.includes(value))
-    throw new Error(`"${key}" must be one of ${allowed.join(", ")}`);
+    throw new ToolArgError(`"${key}" must be one of ${allowed.join(", ")}`);
   return value;
 };
 function dueOf(args) {
@@ -6238,7 +6271,7 @@ function dueOf(args) {
     return;
   const ms = typeof value === "number" ? value : typeof value === "string" ? Date.parse(value) : Number.NaN;
   if (!Number.isSafeInteger(ms) || ms <= 0)
-    throw new Error(`"due" must be an ISO date/time or epoch milliseconds`);
+    throw new ToolArgError(`"due" must be an ISO date/time or epoch milliseconds`);
   return ms;
 }
 var line4 = (i) => `${i.id}  ${i.status}${i.progress ? `/${i.progress}` : ""}  ${i.priority}  r${i.revision}  ${sanitizeText(i.title).replace(/\s+/g, " ")}`;
@@ -6325,10 +6358,10 @@ ${intakeText(intake)}`;
     run: async (hub, args, signal) => {
       const status = oneOf4(args, "status", UPDATES);
       if (!status)
-        throw new Error(`"status" is required: one of ${UPDATES.join(", ")}`);
+        throw new ToolArgError(`"status" is required: one of ${UPDATES.join(", ")}`);
       const expectedRevision = args.expectedRevision;
       if (expectedRevision !== undefined && expectedRevision !== null && (typeof expectedRevision !== "number" || !Number.isSafeInteger(expectedRevision) || expectedRevision < 0))
-        throw new Error(`"expectedRevision" must be the revision you read (or left out)`);
+        throw new ToolArgError(`"expectedRevision" must be the revision you read (or left out)`);
       const reason = optional4(args, "reason");
       const { intake, assignment } = await reportIntakeStatus(hub.teams, need3(args, "team"), need3(args, "intake"), { status, ...typeof expectedRevision === "number" ? { expectedRevision } : {}, ...reason ? { reason } : {} }, { signal });
       return `${intake.id} is ${intake.status}${intake.progress ? ` (${intake.progress})` : ""}, revision ${intake.revision}${assignment ? `; assignment ${assignment.id} ${assignment.status}` : ""}`;
@@ -6421,9 +6454,7 @@ var LAUNCH = {
   required: ["workspace"]
 };
 var SCOPES = "App tokens need scope teams:read (reads) or teams:manage (changes); seats, status and staffing also need sessions:read. Session tokens read only teams they are seated in and never change definitions. Team roles confer no authority.";
-
-class ArgError extends Error {
-}
+var ArgError = ToolArgError;
 var need4 = (args, key) => {
   const value = args[key];
   if (typeof value !== "string" || !value.trim())
@@ -6790,10 +6821,7 @@ var META_FIELDS = {
   projects: { ...STRINGS2, description: "Project names the profile is meant for (≤ 16)." }
 };
 var SCOPES2 = "App tokens need scope profiles:read (reads) or profiles:manage (changes; profile_version_create with content fields and the skill/command set/remove tools read the latest version first, so they also need profiles:read); pins need profiles:assign and sessions:read (an app also needs a prompt grant on the session). Session tokens never change profiles. A profile confers no authority.";
-
-class ProfileArgError extends Error {
-}
-var ArgError2 = ProfileArgError;
+var ArgError2 = ToolArgError;
 var need5 = (args, key) => {
   const value = args[key];
   if (typeof value !== "string" || !value.trim())
@@ -7048,7 +7076,7 @@ var STRINGS3 = { type: "array", items: { type: "string" } };
 var need6 = (args, key) => {
   const value = args[key];
   if (typeof value !== "string" || !value.trim())
-    throw new Error(`"${key}" is required (a non-empty string)`);
+    throw new ToolArgError(`"${key}" is required (a non-empty string)`);
   return value;
 };
 var flag = (args, key, fallback) => {
@@ -7056,7 +7084,7 @@ var flag = (args, key, fallback) => {
   if (value === undefined || value === null)
     return fallback;
   if (typeof value !== "boolean")
-    throw new Error(`"${key}" must be true or false`);
+    throw new ToolArgError(`"${key}" must be true or false`);
   return value;
 };
 var UPDATE_FIELDS = ["autoActive", "activeWithinHours", "usePins", "sessions", "projects", "labels", "muted", "mutedProjects"];
@@ -7088,10 +7116,10 @@ var watchlistTools = [
     run: async (hub, args, signal) => {
       const expected = args.expectedRevision;
       if (typeof expected !== "number" || !Number.isSafeInteger(expected) || expected < 0)
-        throw new Error(`"expectedRevision" is required (the revision you read)`);
+        throw new ToolArgError(`"expectedRevision" is required (the revision you read)`);
       const unknown = Object.keys(args).filter((k) => k !== "expectedRevision" && !UPDATE_FIELDS.includes(k));
       if (unknown.length)
-        throw new Error(`Unknown argument${unknown.length > 1 ? "s" : ""} ${unknown.map((k) => `"${safe(k).slice(0, 40)}"`).join(", ")}: use ${UPDATE_FIELDS.join(", ")} and expectedRevision`);
+        throw new ToolArgError(`Unknown argument${unknown.length > 1 ? "s" : ""} ${unknown.map((k) => `"${safe(k).slice(0, 40)}"`).join(", ")}: use ${UPDATE_FIELDS.join(", ")} and expectedRevision`);
       const patch = {};
       for (const field of UPDATE_FIELDS)
         if (args[field] !== undefined && args[field] !== null)
@@ -7137,9 +7165,7 @@ ${watchlistConfigText(r.config)}`;
 // packages/cli/src/mcp.ts
 var MCP_PROTOCOL_VERSIONS = ["2025-06-18", "2025-03-26", "2024-11-05"];
 var RPC = { parse: -32700, invalidRequest: -32600, methodNotFound: -32601, invalidParams: -32602, internal: -32603 };
-
-class ArgError3 extends Error {
-}
+var ArgError3 = ToolArgError;
 var need7 = (args, key) => {
   const value = args[key];
   if (typeof value !== "string" || !value.trim())
@@ -8324,7 +8350,7 @@ function createMcpServer(options) {
     } catch (cause) {
       if (controller.signal.aborted)
         return;
-      const text = cause instanceof ArgError3 || cause instanceof ProfileArgError ? `invalid: ${cause.message}` : cause instanceof CliError ? errorText(cause) : `${tool.name} failed: ${cause instanceof Error ? cause.message : String(cause)}`;
+      const text = cause instanceof ToolArgError ? `invalid: ${cause.message}` : cause instanceof CliError ? errorText(cause) : `${tool.name} failed: ${cause instanceof Error ? cause.message : String(cause)}`;
       return ok2(id, toolResult(clean(text, token), true));
     } finally {
       if (inFlight.get(key(id)) === controller)
@@ -8761,7 +8787,7 @@ import { arch as osArch, platform as osPlatform } from "node:os";
 // packages/node/package.json
 var package_default2 = {
   name: "@huynle/hub-node",
-  version: "0.8.1",
+  version: "0.8.2",
   private: true,
   description: "`hub node`: the per-machine daemon that prepares, collects and cleans up launch workspaces (internal; shipped inside @huynle/hub, not published on its own).",
   license: "MIT",
@@ -9853,7 +9879,7 @@ import path13 from "node:path";
 // packages/runtime-openshell/package.json
 var package_default3 = {
   name: "@huynle/hub-runtime-openshell",
-  version: "0.8.1",
+  version: "0.8.2",
   private: true,
   description: "The `openshell` runtime of `hub node`: launches in NVIDIA OpenShell sandboxes, driven through the openshell CLI (internal; shipped inside @huynle/hub, not published on its own).",
   license: "MIT",
@@ -11395,6 +11421,15 @@ function wsURL2(server) {
 var defaultSocket2 = (url, headers) => new WebSocket(url, { headers });
 var message2 = (cause) => cause instanceof Error ? cause.message : String(cause);
 
+class CodedError extends Error {
+  code;
+  constructor(message, code) {
+    super(message);
+    this.code = code;
+    this.name = "CodedError";
+  }
+}
+
 class SpokeConnection {
   options;
   state = "off";
@@ -11564,7 +11599,7 @@ class SpokeConnection {
     try {
       reply = { t: "res", id, ok: true, result: await this.options.handle(req) };
     } catch (cause) {
-      reply = { t: "res", id, ok: false, error: message2(cause) };
+      reply = { t: "res", id, ok: false, error: message2(cause), ...cause instanceof CodedError ? { code: cause.code } : {} };
     }
     this.send(reply);
   }
@@ -13528,7 +13563,7 @@ import path22 from "node:path";
 // packages/claude-code/package.json
 var package_default4 = {
   name: "@huynle/hub-claude-code",
-  version: "0.8.1",
+  version: "0.8.2",
   private: true,
   description: "The Claude Code hooks spoke: per-user daemon, hook bridge, plugin dir, `hub claude` wrapper and daemon-backed MCP server (internal; shipped inside @huynle/hub, not published on its own).",
   license: "MIT",
@@ -13817,7 +13852,7 @@ import path25 from "node:path";
 // packages/preset/package.json
 var package_default5 = {
   name: "@huynle/hub-preset",
-  version: "0.8.1",
+  version: "0.8.2",
   private: true,
   description: "The preset spoke: drives a harness without a spoke of its own through a terminal pane (tmux), described by a data-only preset; official presets in presets/ (internal; shipped inside @huynle/hub, not published on its own).",
   license: "MIT",
@@ -14342,7 +14377,7 @@ import { openSync as openSync5, closeSync as closeSync5, readFileSync as readFil
 // packages/codex/package.json
 var package_default6 = {
   name: "@huynle/hub-codex",
-  version: "0.8.1",
+  version: "0.8.2",
   private: true,
   description: "The Codex app-server spoke: attaches to Codex's app-server (its own over stdio, and the shared daemon's socket when present), and the `hub codex` wrapper (internal; shipped inside @huynle/hub, not published on its own).",
   license: "MIT",

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@huynle/hub-cli",
-  "version": "0.8.1",
+  "version": "0.8.2",
   "private": true,
   "description": "The hub CLI (`hub` / `hubctl`) for agents and scripts (internal; bundled into @huynle/hub, not published on its own).",
   "license": "MIT",