@naisys/hub 3.0.0-beta.37 → 3.0.0-beta.38

package/dist/handlers/hubAgentService.js

@@ -1,6 +1,29 @@
-import { AgentPeekRequestSchema, AgentRunCommandRequestSchema, AgentRunPauseRequestSchema, AgentStartRequestSchema, AgentStopRequestSchema, HubEvents, } from "@naisys/hub-protocol";
+import { hashToken } from "@naisys/common-node";
+import { AgentPeekRequestSchema, AgentRunCommandRequestSchema, AgentRunPauseRequestSchema, AgentStartInboundSchema, AgentStopRequestSchema, HubEvents, } from "@naisys/hub-protocol";
+import { randomBytes } from "crypto";
 /** Handles agent_start requests by routing them to the least-loaded eligible host */
 export function createHubAgentService(naisysServer, { hubDb }, logService, heartbeatService, sendMailService, hostRegistrar) {
+    /**
+     * Mint a fresh runtime API key for a user, rotating any prior key. Plaintext
+     * is returned only here and travels once over the AGENT_START message; the
+     * DB only stores the hash. Keys persist across hub restarts/crashes/updates;
+     * revocation lives on the user disable/archive/delete paths and on graceful
+     * AGENT_STOP.
+     */
+    async function issueRuntimeApiKey(userId) {
+        const token = randomBytes(32).toString("hex");
+        await hubDb.users.update({
+            where: { id: userId },
+            data: { api_key_hash: hashToken(token) },
+        });
+        return token;
+    }
+    async function revokeRuntimeApiKey(userId) {
+        await hubDb.users.update({
+            where: { id: userId },
+            data: { api_key_hash: null },
+        });
+    }
     /** Find the least-loaded eligible host for a given user */
     async function findBestHost(startUserId) {
         // Look up which hosts this user is assigned to
@@ -52,30 +75,61 @@ export function createHubAgentService(naisysServer, { hubDb }, logService, heart
         });
         return !!user?.enabled && !user?.archived;
     }
+    /** Run the start preconditions and pick a host. */
+    async function decideStartAgent(userId) {
+        if (!(await isAgentEnabled(userId))) {
+            return { kind: "fail", error: `Agent ${userId} is disabled` };
+        }
+        if (heartbeatService.findHostsForAgent(userId).length > 0) {
+            return { kind: "fail", error: `Agent ${userId} is already running` };
+        }
+        const bestHostId = await findBestHost(userId);
+        if (bestHostId === null) {
+            return {
+                kind: "fail",
+                error: `No eligible hosts are online for user ${userId}`,
+            };
+        }
+        return { kind: "go", bestHostId };
+    }
+    /**
+     * Issue a runtime key and send AGENT_START. Stranded keys from a failed
+     * send or failed response stay in the DB until the next AGENT_START for
+     * that user rotates them, or the user is disabled/archived/deleted — the
+     * agent process that would have used the key never started, so there's
+     * nobody to authenticate with it in the meantime.
+     */
+    async function dispatchAgentStart(args) {
+        const { bestHostId, payload, onResponse } = args;
+        const startUserId = payload.startUserId;
+        const runtimeApiKey = await issueRuntimeApiKey(startUserId);
+        const sent = naisysServer.sendMessage(bestHostId, HubEvents.AGENT_START, { ...payload, runtimeApiKey }, (response) => {
+            if (response.success) {
+                heartbeatService.addStartedAgent(bestHostId, startUserId);
+            }
+            onResponse(response);
+        });
+        return { sent };
+    }
     /** Try to start an agent on the best available host (fire-and-forget) */
     async function tryStartAgent(startUserId) {
         try {
-            if (!(await isAgentEnabled(startUserId))) {
-                logService.log(`[Hub:Agents] Auto-start: agent ${startUserId} is disabled or archived`);
-                return false;
-            }
-            const bestHostId = await findBestHost(startUserId);
-            if (bestHostId === null) {
-                logService.log(`[Hub:Agents] Auto-start: no eligible host for user ${startUserId}`);
+            const decision = await decideStartAgent(startUserId);
+            if (decision.kind === "fail") {
+                logService.log(`[Hub:Agents] Auto-start: ${decision.error}`);
                 return false;
             }
-            const sent = naisysServer.sendMessage(bestHostId, HubEvents.AGENT_START, {
-                startUserId,
-            }, (response) => {
-                if (response.success) {
-                    heartbeatService.addStartedAgent(bestHostId, startUserId);
-                }
-                else {
-                    logService.error(`[Hub:Agents] Auto-start failed for user ${startUserId}: ${response.error}`);
-                }
+            const { sent } = await dispatchAgentStart({
+                bestHostId: decision.bestHostId,
+                payload: { startUserId },
+                onResponse: (response) => {
+                    if (!response.success) {
+                        logService.error(`[Hub:Agents] Auto-start failed for user ${startUserId}: ${response.error}`);
+                    }
+                },
             });
             if (sent) {
-                logService.log(`[Hub:Agents] Auto-start: sent start for user ${startUserId} to host ${bestHostId}`);
+                logService.log(`[Hub:Agents] Auto-start: sent start for user ${startUserId} to host ${decision.bestHostId}`);
             }
             return sent;
         }
@@ -86,51 +140,33 @@ export function createHubAgentService(naisysServer, { hubDb }, logService, heart
     }
     naisysServer.registerEvent(HubEvents.AGENT_START, async (hostId, data, ack) => {
         try {
-            const parsed = AgentStartRequestSchema.parse(data);
-            const requesterUserId = parsed.requesterUserId;
-            if (!(await isAgentEnabled(parsed.startUserId))) {
-                ack({
-                    success: false,
-                    error: `Agent ${parsed.startUserId} is disabled`,
-                });
-                return;
-            }
-            const bestHostId = await findBestHost(parsed.startUserId);
-            if (bestHostId === null) {
-                ack({
-                    success: false,
-                    error: `No eligible hosts are online for user ${parsed.startUserId}`,
-                });
+            const parsed = AgentStartInboundSchema.parse(data);
+            const decision = await decideStartAgent(parsed.startUserId);
+            if (decision.kind === "fail") {
+                ack({ success: false, error: decision.error });
                 return;
             }
-            if (!requesterUserId) {
-                ack({
-                    success: false,
-                    error: `Missing requesterUserId in agent_start request for user ${parsed.startUserId}`,
-                });
-                return;
-            }
-            // Forward the start request to the selected host
-            const sent = naisysServer.sendMessage(bestHostId, HubEvents.AGENT_START, {
-                startUserId: parsed.startUserId,
-                taskDescription: parsed.taskDescription,
-                sourceHostId: hostId,
-            }, (response) => {
-                if (response.success) {
-                    heartbeatService.addStartedAgent(bestHostId, parsed.startUserId);
-                }
-                // Reverse-ack with the response from the host (including success status and any error message) back to the original requester
-                ack(response);
-                // Send task description mail after successful start to avoid
-                // orphaned mails from failed start attempts
-                if (response.success && parsed.taskDescription) {
-                    void sendTaskMail(parsed.startUserId, requesterUserId, parsed.taskDescription);
-                }
+            const { sent } = await dispatchAgentStart({
+                bestHostId: decision.bestHostId,
+                payload: {
+                    startUserId: parsed.startUserId,
+                    taskDescription: parsed.taskDescription,
+                    sourceHostId: hostId,
+                },
+                onResponse: (response) => {
+                    // Reverse-ack with the response from the host (including success status and any error message) back to the original requester
+                    ack(response);
+                    // Send task description mail after successful start to avoid
+                    // orphaned mails from failed start attempts
+                    if (response.success && parsed.taskDescription) {
+                        void sendTaskMail(parsed.startUserId, parsed.requesterUserId, parsed.taskDescription);
+                    }
+                },
             });
             if (!sent) {
                 ack({
                     success: false,
-                    error: `Failed to send to host ${bestHostId}`,
+                    error: `Failed to send to host ${decision.bestHostId}`,
                 });
             }
         }
@@ -176,6 +212,9 @@ export function createHubAgentService(naisysServer, { hubDb }, logService, heart
                 }, (response) => {
                     if (response.success) {
                         heartbeatService.removeStoppedAgent(targetHostId, parsed.userId);
+                        revokeRuntimeApiKey(parsed.userId).catch((err) => {
+                            logService.error(`[Hub:Agents] Failed to revoke runtime key for user ${parsed.userId} on stop: ${err}`);
+                        });
                     }
                     // Ack with the first response
                     if (!acked) {

package/dist/handlers/hubAttachmentService.js

@@ -1,10 +1,8 @@
-import { mimeFromFilename } from "@naisys/common";
-import { extractBearerToken } from "@naisys/common-node";
-import { createHash, randomBytes } from "crypto";
-import { createReadStream, createWriteStream, existsSync, mkdirSync, renameSync, statSync, unlinkSync, } from "fs";
+import { extractBearerToken, generateAttachmentPublicId, getHubAttachmentPath, hashToken, MAX_HUB_ATTACHMENT_SIZE, sendAttachmentResponse, } from "@naisys/common-node";
+import { createHash } from "crypto";
+import { createWriteStream, existsSync, mkdirSync, renameSync, unlinkSync, } from "fs";
 import { join } from "path";
 import { pipeline, Writable } from "stream";
-const MAX_FILE_SIZE = 10 * 1024 * 1024; // 10 MB
 /**
  * HTTP attachment upload/download service.
  * Registers Fastify routes for `/hub/attachments` paths.
@@ -12,7 +10,9 @@ const MAX_FILE_SIZE = 10 * 1024 * 1024; // 10 MB
 export function createHubAttachmentService(fastify, { hubDb }, logService) {
     const naisysFolder = process.env.NAISYS_FOLDER || "";
     async function resolveUserByApiKey(apiKey) {
-        const user = await hubDb.users.findUnique({ where: { api_key: apiKey } });
+        const user = await hubDb.users.findUnique({
+            where: { api_key_hash: hashToken(apiKey) },
+        });
         return user?.id ?? null;
     }
     // Upload route — encapsulated so the raw content-type parser doesn't leak
@@ -49,9 +49,9 @@ export function createHubAttachmentService(fastify, { hubDb }, logService) {
                 if (isNaN(fileSize) || fileSize <= 0) {
                     return reply.code(400).send({ error: "Invalid filesize" });
                 }
-                if (fileSize > MAX_FILE_SIZE) {
+                if (fileSize > MAX_HUB_ATTACHMENT_SIZE) {
                     return reply.code(413).send({
-                        error: `File too large. Max size: ${MAX_FILE_SIZE} bytes`,
+                        error: `File too large. Max size: ${MAX_HUB_ATTACHMENT_SIZE} bytes`,
                     });
                 }
                 const userId = await resolveUserByApiKey(apiKey);
@@ -71,7 +71,7 @@ export function createHubAttachmentService(fastify, { hubDb }, logService) {
                     const sizeChecker = new Writable({
                         write(chunk, _encoding, callback) {
                             bytesWritten += chunk.length;
-                            if (bytesWritten > MAX_FILE_SIZE) {
+                            if (bytesWritten > MAX_HUB_ATTACHMENT_SIZE) {
                                 callback(new Error("File exceeds size limit"));
                                 return;
                             }
@@ -116,10 +116,8 @@ export function createHubAttachmentService(fastify, { hubDb }, logService) {
                         error: `Hash mismatch. Expected: ${fileHash}, got: ${computedHash}`,
                     });
                 }
-                // Move to content-addressable path: attachments/hub/<first2>/<next2>/<fullhash>
-                const storageDir = join(naisysFolder, "attachments", "hub", computedHash.slice(0, 2), computedHash.slice(2, 4));
+                const { storageDir, storagePath } = getHubAttachmentPath(naisysFolder, computedHash);
                 mkdirSync(storageDir, { recursive: true });
-                const storagePath = join(storageDir, computedHash);
                 if (existsSync(storagePath)) {
                     // Dedup: identical file already on disk, discard temp
                     try {
@@ -132,10 +130,9 @@ export function createHubAttachmentService(fastify, { hubDb }, logService) {
                 else {
                     renameSync(tmpPath, storagePath);
                 }
-                // Create DB record
                 const record = await hubDb.attachments.create({
                     data: {
-                        public_id: randomBytes(8).toString("base64url").slice(0, 10),
+                        public_id: generateAttachmentPublicId(),
                         filepath: storagePath,
                         filename,
                         file_size: bytesWritten,
@@ -174,22 +171,7 @@ export function createHubAttachmentService(fastify, { hubDb }, logService) {
         if (!attachment) {
             return reply.code(404).send({ error: "Attachment not found" });
         }
-        if (!existsSync(attachment.filepath)) {
-            return reply
-                .code(404)
-                .send({ error: "Attachment file missing from disk" });
-        }
-        const stat = statSync(attachment.filepath);
-        const contentType = mimeFromFilename(attachment.filename);
-        const disposition = contentType.startsWith("image/")
-            ? "inline"
-            : "attachment";
-        reply
-            .header("Content-Type", contentType)
-            .header("Content-Disposition", `${disposition}; filename="${attachment.filename.replace(/"/g, '\\"')}"`)
-            .header("Content-Length", stat.size);
-        const readStream = createReadStream(attachment.filepath);
-        return reply.send(readStream);
+        return sendAttachmentResponse(reply, attachment.filepath, attachment.filename);
     }
     fastify.get("/hub/attachments/:publicId/:filename", async (request, reply) => {
         try {

package/dist/handlers/hubHeartbeatService.js

@@ -64,7 +64,9 @@ export function createHubHeartbeatService(naisysServer, { hubDb }, logService) {
             logService.error(`[Hub:Heartbeat] Error updating heartbeat for host ${hostId}: ${error}`);
         }
     });
-    // Clean up tracking when a host disconnects
+    // Clean up tracking when a host disconnects. Runtime API keys are not
+    // touched here — they're rotated on the next AGENT_START and revoked
+    // explicitly on user disable/archive/delete.
     naisysServer.registerEvent(HubEvents.CLIENT_DISCONNECTED, (hostId) => {
         hostActiveAgents.delete(hostId);
         hostActiveSessions.delete(hostId);

package/dist/handlers/hubUserService.js

@@ -10,7 +10,6 @@ export function createHubUserService(naisysServer, { hubDb }, logService) {
                 enabled: true,
                 config: true,
                 lead_user_id: true,
-                api_key: true,
                 user_hosts: {
                     select: { host_id: true },
                 },
@@ -25,7 +24,6 @@ export function createHubUserService(naisysServer, { hubDb }, logService) {
             assignedHostIds: u.user_hosts.length > 0
                 ? u.user_hosts.map((uh) => uh.host_id)
                 : undefined,
-            apiKey: u.api_key || undefined,
         }));
         return { success: true, users };
     }

package/dist/naisysHub.js

@@ -43,8 +43,9 @@ export const startHub = async (startupType, startSupervisor, plugins, startupAge
         await seedAgentConfigs(hubDatabaseService, logService, agentPath);
         // Create host registrar for tracking NAISYS instance connections
         const hostRegistrar = await createHostRegistrar(hubDatabaseService);
-        // Create Fastify instance (TLS is handled by the reverse proxy)
-        const fastify = Fastify({ pluginTimeout: 60_000 });
+        // trustProxy: TLS terminates at the reverse proxy, so honor X-Forwarded-*
+        // headers — otherwise request.protocol reads the internal http hop.
+        const fastify = Fastify({ pluginTimeout: 60_000, trustProxy: true });
         // Register HTTP attachment upload/download routes
         createHubAttachmentService(fastify, hubDatabaseService, logService);
         // Attach Socket.IO to the underlying HTTP server.
@@ -89,7 +90,9 @@ export const startHub = async (startupType, startSupervisor, plugins, startupAge
             const supervisorModule = "@naisys/supervisor";
             const { supervisorPlugin, bootstrapSupervisor } = (await import(supervisorModule));
             const resetSuperAdminPasskey = wizardRan
-                ? await promptResetSuperAdminPasskey("Supervisor Setup")
+                ? await promptResetSuperAdminPasskey("Supervisor Setup", {
+                    defaultReset: !process.argv.includes("--setup"),
+                })
                 : false;
             // Bootstrap before plugin register so the operator prompt isn't bounded by pluginTimeout and doesn't interleave with hub connection logs.
             await bootstrapSupervisor({ resetSuperAdminPasskey });
@@ -105,6 +108,21 @@ export const startHub = async (startupType, startSupervisor, plugins, startupAge
         if (startupType === "hosted") {
             logService.disableConsole();
         }
+        let shutdownPromise = null;
+        async function runShutdown() {
+            try {
+                heartbeatService.cleanup();
+                await io.close();
+                await fastify.close();
+            }
+            finally {
+                await hubDatabaseService.disconnect();
+            }
+        }
+        const shutdown = () => {
+            shutdownPromise ??= runShutdown();
+            return shutdownPromise;
+        };
         // Hosted mode: parent process owns signal handling
         if (startupType === "standalone") {
             let shuttingDown = false;
@@ -116,8 +134,7 @@ export const startHub = async (startupType, startSupervisor, plugins, startupAge
                 shuttingDown = true;
                 logService.log(`[Hub] Shutting down (${signal})...`);
                 try {
-                    await io.close();
-                    await fastify.close();
+                    await shutdown();
                 }
                 catch (err) {
                     console.error("[Hub] Error during shutdown:", err);
@@ -127,7 +144,7 @@ export const startHub = async (startupType, startSupervisor, plugins, startupAge
             process.on("SIGTERM", () => void handleShutdown("SIGTERM"));
             process.on("SIGINT", () => void handleShutdown("SIGINT"));
         }
-        return { serverPort };
+        return { serverPort, shutdown };
     }
     catch (err) {
         console.error("[Hub] Failed to start hub server:", err);

package/dist/services/agentRegistrar.js

@@ -1,6 +1,6 @@
 import { adminAgentConfig, toUrlSafeKey } from "@naisys/common";
 import { loadAgentConfigs } from "@naisys/common-node";
-import { randomBytes, randomUUID } from "crypto";
+import { randomUUID } from "crypto";
 /** Seeds agent configs from YAML files into an empty database. Skips if users already exist. */
 export async function seedAgentConfigs({ hubDb }, logService, startupAgentPath) {
     // Check if users table already has rows (seed-once pattern)
@@ -38,7 +38,6 @@ async function seedUsersToDatabase(hubDb, logService, users) {
                 username: safeUsername,
                 title: user.config.title,
                 config: JSON.stringify({ ...user.config, username: safeUsername }),
-                api_key: randomBytes(32).toString("hex"),
             },
         });
         loaderIdToDbId.set(user.userId, dbUser.id);

package/npm-shrinkwrap.json

@@ -1,17 +1,17 @@
 {
   "name": "@naisys/hub",
-  "version": "3.0.0-beta.37",
+  "version": "3.0.0-beta.38",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@naisys/hub",
-      "version": "3.0.0-beta.37",
+      "version": "3.0.0-beta.38",
       "dependencies": {
-        "@naisys/common": "3.0.0-beta.37",
-        "@naisys/common-node": "3.0.0-beta.37",
-        "@naisys/hub-database": "3.0.0-beta.37",
-        "@naisys/hub-protocol": "3.0.0-beta.37",
+        "@naisys/common": "3.0.0-beta.38",
+        "@naisys/common-node": "3.0.0-beta.38",
+        "@naisys/hub-database": "3.0.0-beta.38",
+        "@naisys/hub-protocol": "3.0.0-beta.38",
         "commander": "^14.0.3",
         "dotenv": "^17.3.1",
         "fastify": "^5.8.2",
@@ -24,7 +24,7 @@
         "node": ">=22.0.0"
       },
       "peerDependencies": {
-        "@naisys/supervisor": "3.0.0-beta.37"
+        "@naisys/supervisor": "3.0.0-beta.38"
       },
       "peerDependenciesMeta": {
         "@naisys/supervisor": {
@@ -189,32 +189,32 @@
       "license": "MIT"
     },
     "node_modules/@naisys/common": {
-      "version": "3.0.0-beta.37",
-      "resolved": "https://registry.npmjs.org/@naisys/common/-/common-3.0.0-beta.37.tgz",
-      "integrity": "sha512-b0XfCadaPcfewmK9b649WD+ZGB86Uk9BjTrx/tLSgd5Nbx7L6NuzTqTnDFScdeCmtyPk4oUGAzATmXwKTM8bew==",
+      "version": "3.0.0-beta.38",
+      "resolved": "https://registry.npmjs.org/@naisys/common/-/common-3.0.0-beta.38.tgz",
+      "integrity": "sha512-YJIawcV12XNgzQz/QcM2oAYhu4O4V55tHm0JZrEdmBt2GS33VsGIVJqhDtg3sVWvtsDfh8QkK7EjwPEvgj7fzA==",
       "dependencies": {
         "semver": "^7.7.4",
         "zod": "^4.3.6"
       }
     },
     "node_modules/@naisys/common-node": {
-      "version": "3.0.0-beta.37",
-      "resolved": "https://registry.npmjs.org/@naisys/common-node/-/common-node-3.0.0-beta.37.tgz",
-      "integrity": "sha512-V4yyA79G93OSqZ+6l5FWoMqnATE2It78VkGyziNTqcrv2CIf8UDGbds7hHV+bp/0VplNe6BrZ4P7quYvgyCeeQ==",
+      "version": "3.0.0-beta.38",
+      "resolved": "https://registry.npmjs.org/@naisys/common-node/-/common-node-3.0.0-beta.38.tgz",
+      "integrity": "sha512-dNVvY+gWzBx4I+3chvNl74MgrcxVBFpPB+0acYSl7bcINvhqmbqLMYryR4AwOvU+dc09GDbpgugE6EWIQnn/zA==",
       "dependencies": {
-        "@naisys/common": "3.0.0-beta.37",
+        "@naisys/common": "3.0.0-beta.38",
         "better-sqlite3": "^12.6.2",
         "js-yaml": "^4.1.1",
         "pino": "^10.3.1"
       }
     },
     "node_modules/@naisys/hub-database": {
-      "version": "3.0.0-beta.37",
-      "resolved": "https://registry.npmjs.org/@naisys/hub-database/-/hub-database-3.0.0-beta.37.tgz",
-      "integrity": "sha512-PI8Jj4niCc6agObLWpP+Am8nrNcwAAk77/OmZmUWq1ZiBW+m5C60PFdfBvzLEZX/6G/JOb0VvI9oLpzFD6VRKg==",
+      "version": "3.0.0-beta.38",
+      "resolved": "https://registry.npmjs.org/@naisys/hub-database/-/hub-database-3.0.0-beta.38.tgz",
+      "integrity": "sha512-h+e50Qjg389ewSKU2jAisexlmajEAK34lMz6FKWd8Hog/PI6v3BYKB/8wgL2HmI78apmHIjh1FRW3NQNF+D8rw==",
       "dependencies": {
-        "@naisys/common": "3.0.0-beta.37",
-        "@naisys/common-node": "3.0.0-beta.37",
+        "@naisys/common": "3.0.0-beta.38",
+        "@naisys/common-node": "3.0.0-beta.38",
         "@prisma/adapter-better-sqlite3": "^7.5.0",
         "@prisma/client": "^7.5.0",
         "better-sqlite3": "^12.6.2",
@@ -222,11 +222,11 @@
       }
     },
     "node_modules/@naisys/hub-protocol": {
-      "version": "3.0.0-beta.37",
-      "resolved": "https://registry.npmjs.org/@naisys/hub-protocol/-/hub-protocol-3.0.0-beta.37.tgz",
-      "integrity": "sha512-hJ7kr4WT6TfCmVQFPCfnjC4Sjp7DehuZ4la+z5/MZ3AEm6Ds/WxqcoPOf1F47y6uZA70WhnVHvAt/dci0dO8Ow==",
+      "version": "3.0.0-beta.38",
+      "resolved": "https://registry.npmjs.org/@naisys/hub-protocol/-/hub-protocol-3.0.0-beta.38.tgz",
+      "integrity": "sha512-HLNcDmbdQVDeOxQlohoSrQdz/EXvNKx16BZVEovlwixuGCfINgweOkjtr4qypHO0peHPD0p1ayBa2QAjRrSY5Q==",
       "dependencies": {
-        "@naisys/common": "3.0.0-beta.37",
+        "@naisys/common": "3.0.0-beta.38",
         "zod": "^4.3.6"
       }
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naisys/hub",
-  "version": "3.0.0-beta.37",
+  "version": "3.0.0-beta.38",
   "description": "NAISYS Hub - Adds persistence and multi-instance coordination to NAISYS",
   "type": "module",
   "main": "dist/naisysHub.js",
@@ -31,7 +31,7 @@
     "!dist/**/*.d.ts.map"
   ],
   "peerDependencies": {
-    "@naisys/supervisor": "3.0.0-beta.37"
+    "@naisys/supervisor": "3.0.0-beta.38"
   },
   "peerDependenciesMeta": {
     "@naisys/supervisor": {
@@ -39,10 +39,10 @@
     }
   },
   "dependencies": {
-    "@naisys/common": "3.0.0-beta.37",
-    "@naisys/common-node": "3.0.0-beta.37",
-    "@naisys/hub-database": "3.0.0-beta.37",
-    "@naisys/hub-protocol": "3.0.0-beta.37",
+    "@naisys/common": "3.0.0-beta.38",
+    "@naisys/common-node": "3.0.0-beta.38",
+    "@naisys/hub-database": "3.0.0-beta.38",
+    "@naisys/hub-protocol": "3.0.0-beta.38",
     "commander": "^14.0.3",
     "dotenv": "^17.3.1",
     "fastify": "^5.8.2",