@staix/agent-hub 0.12.13 → 0.12.14

package/CHANGELOG.md

@@ -4,6 +4,10 @@ Issue and pull request numbers in the entries for 0.7.7 and earlier refer to the
 
 ## Unreleased
 
+## 0.12.14
+
+- Normalize the remaining `ps lstart` identity reads to the shared pinned `LC_ALL=C`/`TZ=UTC` contract: the terminal-recovery launcher signature now goes through `processSignature`, and the MLX owner/generation identity read pins the same environment, so a record written under one timezone or locale still authenticates the same live process under another; strict PID/start/command identity and the fail-closed refusal paths are unchanged (#177).
+
 ## 0.12.13
 
 - Bind serialized original manifest copies to their own pin in study summary export: the copy's bytes verify against `original_copy_sha256` with the raw source pin kept distinct, the copy must equal the supervisor's canonical serialization of its parsed contents, and the runtime manifest may differ only by the recorded hub-version amendments; legacy provenance without the copy pin refuses explicitly instead of receiving an invented pin (#173).

package/docs/agent-notes/daemon.md

@@ -11,3 +11,4 @@ Scope: the control WS and its protocol, state files, the Claude channel's reconn
 - Adding a native peer requires testing the command emitted by the actual recovery driver, not only its inspection or launch helpers. Never let a generic non-Codex branch treat a new peer as Claude.
 - Cross-version recovery must use the authenticated source protocol for prepare/commit/abort and the target protocol after startup. Prove the transition against a real prior release before claiming compatibility.
 - A zero-turn Claude session has no transcript, so it can never be resumed: every identity gate that compares session ids (restore, coordinator verify, daemon readiness) must tolerate a fresh session while the transcript is absent and stay strict the moment one exists. The commit snapshot records `sessionPersisted` for the restored daemon, and snapshots too old to have it are re-derived from disk. Never treat "session id changed" as proof of a lost conversation without checking the transcript first.
+- The terminal-recovery launcher signature is the shared pinned `processSignature` (`src/pi/process-signature.ts`): a record written by one CLI invocation must compare equal when a later invocation re-reads the live launcher under another TZ/LC_ALL (#177). In-process `process.env` mutation does not reach Bun.spawnSync's default child environment, so cross-environment regressions are tested with real subprocesses.

package/docs/agent-notes/models.md

@@ -7,3 +7,4 @@ Scope: the model relay and its journal, the hub's own inference and its slots, O
 - Secrets stay inside `OmniRoute`: never put the key or Access values in a log line, an error message, a return value or the generated Switchyard file (the key goes by env var name).
 - Switchyard's docs drift from the released binary. Any change to `switchyardToml` is checked with the real `switchyard-server --dry-run`, not only the stand-in in `test/fakes/`.
 - Shared inference slots must recover after a hub process dies, without evicting a live owner. Cancellation has to reach slot acquisition from the relay caller, not just exist in the helper signature.
+- MLX owner and generation identity read `ps lstart` with LC_ALL=C/TZ=UTC pinned (#177): unpinned, a record written under one environment reads as a foreign process under another, and the fail-closed paths would refuse the hub's own server.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@staix/agent-hub",
-  "version": "0.12.13",
+  "version": "0.12.14",
   "description": "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   "license": "MIT",
   "type": "module",

package/plugins/agent-hub/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hub",
-  "version": "0.12.13",
+  "version": "0.12.14",
   "description": "Channel between Claude Code and the agent-hub daemon: peer messages from Codex, Kimi and the local worker arrive as channel events; hub_send replies.",
   "author": {
     "name": "Young Joon Lee",

package/plugins/agent-hub/server.js

@@ -15403,7 +15403,7 @@ class ControlClient {
 // package.json
 var package_default = {
   name: "@staix/agent-hub",
-  version: "0.12.13",
+  version: "0.12.14",
   description: "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   license: "MIT",
   type: "module",

package/src/cli/terminal-recovery.ts

@@ -2,6 +2,7 @@ import { isAbsolute, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { randomUUID } from "node:crypto";
+import { processSignature } from "../pi/process-signature.ts";
 
 /** The only terminal commands used by this adapter. Keep this list in sync with Orca's public CLI. */
 export type OrcaTerminalCommand = "list" | "show" | "wait" | "close" | "create";
@@ -226,15 +227,7 @@ function resolveOrcaExecutable(): string {
 
 function defaultProcessIdentity(pid: number): string | undefined {
   if (!Number.isInteger(pid) || pid <= 0) return undefined;
-  try {
-    const result = Bun.spawnSync(["ps", "-p", String(pid), "-o", "lstart=,comm="], { stdout: "pipe", stderr: "pipe" });
-    if (result.exitCode !== 0) return undefined;
-    const identity = result.stdout.toString().trim();
-    if (!identity) return undefined;
-    return new Bun.CryptoHasher("sha256").update(identity).digest("hex");
-  } catch {
-    return undefined;
-  }
+  return processSignature(pid);
 }
 
 function defaultRunner(executable: string): CommandRunner {

package/src/models/mlx.ts

@@ -97,7 +97,9 @@ function readOwner(runtimeDir: string): OwnerRecord | undefined {
 
 function processInfo(pid: number): ProcessSignature | undefined {
   try {
-    const result = spawnSync("ps", ["-p", String(pid), "-o", "lstart=", "-o", "command="], { encoding: "utf8" });
+    // `lstart` follows the reader's TZ and locale; pin the read so a record written by
+    // one hub invocation compares equal when a later one re-reads it elsewhere (#177).
+    const result = spawnSync("ps", ["-p", String(pid), "-o", "lstart=", "-o", "command="], { encoding: "utf8", env: { ...process.env, LC_ALL: "C", TZ: "UTC" } });
     if (result.status !== 0) return undefined;
     const line = String(result.stdout).trim();
     const match = /^(\w{3}\s+\w{3}\s+\d+\s+\d+:\d+:\d+\s+\d{4})\s+(.*)$/.exec(line);

package/src/pi/process-signature.ts

@@ -2,13 +2,14 @@ import { execFileSync } from "node:child_process";
 import { createHash } from "node:crypto";
 
 /**
- * The one process-identity contract behind the Pi owner claim and every later liveness
- * re-inspection: pid plus the `ps` rendering of its start time and command. `lstart`
- * follows the reader's TZ and locale, so the read pins LC_ALL=C and TZ=UTC, the same
- * contract as `processTable` in src/hub/child-process.ts. Without the pin a hub on one
- * timezone and its Pi child on another hash different strings for the same process and the
- * valid owner is refused at startup (#174). Only the `ps` invocation is pinned; the user's
- * own environment is untouched. Node APIs only: the extension runs inside Pi, not Bun.
+ * The one process-identity contract behind the Pi owner claim, every later liveness
+ * re-inspection, the terminal-recovery launcher signature and any other hub identity
+ * hash: pid plus the `ps` rendering of its start time and command. `lstart` follows
+ * the reader's TZ and locale, so the read pins LC_ALL=C and TZ=UTC, the same contract
+ * as `processTable` in src/hub/child-process.ts. Without the pin a writer and a reader
+ * in different environments hash different strings for the same process and the valid
+ * owner is refused (#174, #177). Only the `ps` invocation is pinned; the user's own
+ * environment is untouched. Node APIs only: the extension runs inside Pi, not Bun.
  */
 export function processSignature(pid: number): string | undefined {
   try {