@staix/agent-hub 0.12.23 → 0.12.24

package/docs/verification/2026-10-13-0.12.24.md

@@ -0,0 +1,94 @@
+# 0.12.24 release verification
+
+This record describes release preparation and source verification. These checks do not certify tagging, package publication, global installation or a live upgrade; operational receipts are recorded separately.
+
+## Source and document review
+
+The candidate includes the reviewed project-board/planner stack, optional hub memory, console/dashboard attention characters, and fixture/automatic-port fixes. Control protocol remains 16. Research tracks remain open; implementation does not establish native account ingestion, model consumption, measured effects, physical font/tmux behavior or the two-release planner cycle.
+
+The documentation review reconciles README and Quickstart install/version examples with package metadata; Operations with the shipped board, character and recovery commands; Security with the closed Tasks/dashboard actions, body-free attention and optional hub-memory persistence/sync boundaries. Earlier phase-pending character/board wording was removed. Private task and external-source rescreens remain fail-closed.
+
+Area-note contracts were checked against their current implementations and retained: native transport/permission/generation fences; benchmark source/model/restoration evidence; independent budget/manual/recovery holds; bus delivery/retry/sanitization; exact-row console navigation and controlled recovery; guarded local tools/Git; model privacy and unchanged routing; Tasks authority/projection/atomicity; and named green-before-mutated testing. The model routing/privacy contract remains unchanged; ScreenRecord adds an explicit inherited source without inventing a new screening verdict or latency. The background note continues to describe the exact-row regression without introducing instructions.
+
+Documentation stamps identify reviewed source ancestry, not runtime proof. All 14 entries require fresh committed readback before tagging. A later covered-source change requires another review and stamp.
+
+## Recorded checks
+
+- Approved Board fixture canonical-path correction: 7 pass, 0 fail, 46 assertions. Original assertions and production project/instance checks retained.
+- Latest related split/pull/import/CLI/card suite: 49 pass, 0 fail, 232 assertions. Typecheck passed.
+- The undo mutation guard: green original, named assertion detected after mutation. Original object assertion retained with a preceding non-null assertion; classifier unchanged.
+- Official frozen-lockfile build run 38352373600: generated plugin 0.12.24, 593 KB bundle, equal to the admitted local build after dependency installation. Initial 594 KB build resolved parent-worktree dependencies and differed only in generated dependency path comments; freshness correctly refused it. Full freshness/tarball/test and mutation gates remain required for the final release head.
+- PR #362 merged as 702219c1 after exact-head Linux/macOS checks, 297 mutation guards, completed Codex/OCR review and final merge fence. Reviewed and merged whole trees agree. Owned branch/worktree cleaned.
+- Earlier character/dashboard delivery: PR #373 and #374 merged after their exact-head checks and 268/277 guards. Issues #369 and #375 closed with their documented source evidence; original failed port-listener identity remains unknown.
+
+## Remaining verification
+
+- Final stacked PR heads: complete both platform checks and all mutation guards, current reviews, resolved threads, separate successful merge fence, merge-tree equality and cleanup.
+- Final release PR: fresh document readback, full platform/tarball/bundle/tests and mutation gates, current review, merge commit preserving stamp ancestry.
+- Tag and publication: release workflow and package/release artifact readback.
+- Installation and live activation: installed version/plugin and current registered runtime/instance readback. Human-console identity restrictions still apply; no agent-marker stripping or console impersonation has been performed.
+- Native/account/research legs remain unverified unless separately recorded with actual evidence.
+
+## Later source corrections
+
+After the 7acd75c candidate, source review added planner WIP/hold checks to automatic reroutes, refusal of split undo with child-scoped memory entries, explicit inherited PII provenance, and a 2 MiB GitHub-intake reader ceiling covering the worst-case escaped 33-row sentinel page. Default SDLC reads retain 256 KiB. Four named mutation guards and actual state/reader regression cases cover these corrections; current-head results are pending.
+
+The admitted local full gate at 7acd75c completed with 2598 pass, 0 fail, 188563 assertions, no current-invocation daemon leaks and `check: OK`. This certifies that earlier candidate, not the later source corrections. Documentation contracts were rechecked for these additions before restamping.
+
+The output-ceiling change preserves the existing third `cwd` argument and adds an optional fourth byte ceiling, forwarded through the Tasks project-scoped reader. Corrected import unit/task/actual CLI suites: 10 pass, 0 fail, 53 assertions; typecheck passed. Prior latest related suite: 56 pass, 0 fail, 269 assertions. Final release full gates remain required.
+
+The terminal board uses the same preserved visible-row context for column placement and stage rendering. Actual Board suites: 8 pass, 0 fail, 47 assertions; typecheck passed. Seven focused mutation probes (automatic WIP, child memory, inherited PII, escaped import output, effective rank, proposed-parent order and plan privacy) each recorded green→named assertion detection. The stage snapshot guard and all final-head full gates remain required.
+
+The admitted full gate at 91e654e9 completed with 2603 pass, 0 fail, 188580 assertions, no current-invocation daemon leaks and `check: OK`. Later review corrections preserve explicit person reservation provenance across pull undo, preflight accepted automatic handoffs and roster previews with shared WIP/hold constraints, and persist memory-reference attempts before external writes. The new legacy-note fixture metadata correction was explicitly approved; its assertions and the production validator remain unchanged. Current split21/0 (77 assertions) and WIP11/0 (60 assertions), with their typechecks, passed. Latest full-head gates remain required.
+
+Memory file-mode documentation now states exactly what the source sets: new segments request 0600, index.db receives best-effort chmod, and SQLite sidecars/existing modes have no per-file 0600 guarantee. The directory is explicitly chmodded 0700. No production memory permissions were altered.
+
+The WIP assignment guard now exercises actual automatic rescreen admission after a clear privacy verdict; independent offline preflight remains covered by its original regression. Current WIP12/0 (62 assertions), typecheck and its named mutation probe passed. The strict manifest rejected an empty replacement in a new guard; it was replaced by an equivalent nonempty boolean mutation without changing the classifier or assertions.
+
+Latest integrated planner/split/sweep/settings/schema checks: 52 pass, 0 fail, 257 assertions; import/CLI/column/table checks: 21 pass, 0 fail, 104 assertions. Typechecks passed. Twelve related mutation probes each recorded green→named assertion detection. The owner-approved sweep fixture retains all assertions while making non-target peers unavailable/busy as intended. The WIP settings assertion now checks defined refusal before its original string matcher, with classifier unchanged. Phone source-fixture proof is recorded separately; native/account/measurement claims remain unverified. Final plugin freshness and full release-head gates remain required.
+
+The latest propagated source candidate passed 219 related tests with 0 failures and 1163 assertions, plus typecheck and official plugin build/freshness. The owner-approved dependency recovery fixture completes its parent before approval; all assertions and production state guards remain intact. Seven recent mutation probes detected their named assertions, including recovered readiness and prerequisite reachability. The prerequisite seed now disables actual reachability rather than a redundant bypass; classifier and original regression remain unchanged. Historical full gate at 6435857b passed 2615 tests, 0 failures and 188614 assertions with `check: OK`; it does not certify these later changes. Final current-head full gates remain required.
+
+The admitted full gate at 4ed6cfaf passed 2621 tests, 0 failures and 188629 assertions, with no invocation-owned daemon leaks and `check: OK`. Subsequent review found pending WIP editor initialization, dot-prefixed repository validation and phase-checklist child references. Their focused suites passed 5/0 (39 assertions), 6/0 (35 assertions), and 24/0 (86 assertions), with typechecks and three named mutation probes. The owner approved a single Tasks pull in the new checklist fixture before recording lifecycle evidence; all assertions and state guards remain. These later changes require fresh full-head gates.
+
+The recovered-redo regression now passes through declined ownerless To Do and reassignment after alternative WIP clears: 15 pass, 0 fail, 71 assertions; typecheck and its green/mutated assertion guard passed. The owner-approved fixture uses a valid persisted in_review-to-changes_requested snapshot, reflecting interruption before reopen. The production Board state table now permits declined changes_requested-to-proposed, with Tasks authority intact; no assertion was weakened. Official plugin build/freshness passed. Numeric release examples now use --release-id rather than shell-sensitive unquoted hash ids. Final exact-head gates remain required.
+
+The admitted full gate at cb0ee364 passed 2625 tests, 0 failures and 188651 assertions, no invocation-owned daemon leaks, and `check: OK`. Subsequent cut-unknown and child-budget corrections passed 9/0 (24 assertions) and 25/0 (93 assertions), both typechecks and named mutation guards. The owner approved replacing the unsupported Codex budget fixture peer with instrumented local; all assertions and the production instrumented-peer constraint remain. The child budget remains intact on refusal, and disabling it permits otherwise-unused child undo. These later changes need current-head full gates. Actual cb0ee364 document stamps were independently confirmed ancestors for all 14 entries and fresh; an unresolvable 4cd18a4 reported by review was not the PR head.
+
+The admitted full gate at 44f6be01 passed 2627 tests, 0 failures and 188660 assertions, with no invocation-owned daemon leaks and `check: OK`. Later independent review found a deterministic privacy race across routing-pattern reload during split screening. Captured child/parent privacy signals now survive final revalidation; 26 split tests passed with 0 failures and 97 assertions, typecheck passed, and both the new policy-reload guard and the retargeted existing plan-privacy guard detected their named assertions. All original assertions/classification rules remain. Current-head full gates remain required for this later correction.
+
+The inverse policy-reload case is now covered: a pattern added while a clear model screen is pending records regex-private history/telemetry from captured final deterministic signals. Split27/0 (100 assertions), typecheck, final-provenance guard and both earlier policy-retention/plan-privacy guards passed. Original assertions and strict classifier remain. Current-head gates are required.
+
+The outer split HTTP boundary now allocates a native per-request bound above manager forwarding without altering ordinary action allocation. Its approved observed-deadline fixture passed 1 test/0 failures, 8 assertions (26ms), retaining all earlier session/TCP/count assertions and adding deadline scope checks. Bun 1.4.2 pending-handler idle expiry did not reproduce at 23 seconds even with explicit idleTimeout=1; this evidence is recorded rather than claimed as natural expiry. Current typecheck/mutation/full gates remain required because local compilation admission was deferred.
+
+Fresh UI source6d311a51 was recaptured in the single approved Space44. Visual review exposed a clipped phone Cut control despite document width390; source now stacks phone split grids. Same-space recapture confirmed all visible form controls inside panels, full calendar controls in both themes, unknown-cut wording, pending WIP2/0/inherit and Save payload2, keyboard Pull, and all nine PNG contents were viewed. Space44 finished exactly once and its server stopped. Historical1bb byte-identity wording is withdrawn; the source-qualified phone report and smoke ledger supersede only source-fixture pending evidence.
+
+The release macOS gate at 75a8896c failed the original ACP #160 idle assertion: a native mode acknowledgement could return before cancelled-prompt cleanup. The source now awaits the existing bounded cancellation gate after that acknowledgement. Original and new regression cases passed (2 pass, 0 fail, 23 assertions), typecheck passed, and the new mutation guard recorded green then named assertion detection. The owner approved the new fixture marker correction to the fake's existing CANCEL_WAIT branch; production deadlines and all original assertions remain unchanged. The manager unconfirmed-reply guard now checks its scalar contract before the original object assertion, avoiding timeout text in the mutation diagnostic without changing the classifier. Its named test and mutation probe passed. These focused receipts do not certify the forthcoming full release head.
+
+Full gate 0b476561 failed the existing ACP #304 test (2630 pass, 1 fail; no current-invocation daemon leaks), also reproduced in Linux CI. The unconditional cleanup wait interfered with still-unreported cancelled prompts. The corrected source waits only after observing that prompt response. ACP suite: 99 pass, 0 fail, 633 assertions; typecheck passed. The approved fixture now batches the cancellation and mode replies into one stdout write, reproducing queued cleanup deterministically. Its original run passed and its mutation, removing the cleanup wait entirely, failed the named assertion. The earlier Promise.resolve mutation survived because it retained a microtask delay; that result was not accepted as verification. Final full gates remain required for the corrected head.
+
+Full gate at44830bb1 passed2631 tests,0 failures,188679 assertions,429.06s, no invocation-owned daemon leaks and `check: OK`; Linux/macOS CI also passed. Subsequent review found memory-reference bookkeeping resetting idle sweeps. The corrected pure sweep calculation skips that marker and preserves activity identity through all three ladder steps for proposed/in-progress/in-review tasks. Related suite12/0,80 assertions, typecheck and named mutation detection passed. Current covered-source stamps were reviewed again; final gates must cover this later correction.
+
+Full gate at `6b54e974` passed 2632 tests, 0 failures and 188691 assertions in 425.22 s, with no invocation-owned daemon leaks and `check: OK`. Later review found a split-reason policy-reload privacy gap. The source now retains initial and final deterministic reason privacy, including the parent privacy boundary. The split suite passed 28 tests and 109 assertions; typecheck and a named mutation guard passed. Both policy-add and policy-remove cases preserve withheld history after later policy removal. Final gates remain required for this corrected source.
+
+Import review identified CSV quote stripping in `gh --label` beyond the already-refused comma case. Quote-containing labels now fail before the reader is called. GitHub import suite: 7 pass, 0 fail, 39 assertions; typecheck and a named mutation probe passed. The parent split PR head is unchanged by this import correction. Final release gates remain required.
+
+Full gate at `fb34d7aa` passed 2634 tests, 0 failures and 188704 assertions in 418.85 s, with no invocation-owned daemon leaks and `check: OK`. The Linux mutation gate then rejected an otherwise correct manager assertion because the fixture path contained the seed ID suffix `timeout`. Renaming that ID to `split-manager-unconfirmed-reply` preserves production code, assertions, mutation and classifier. The actual seededCheck runner, including its named-path checkout, hang watcher and process-leak checks, passed the selected green/mutated pair. Earlier lightweight focused runners had omitted the ID from their paths and could not reveal this diagnostic interaction.
+
+A subsequent quiet-bookkeeping audit fixed ask evidence: both displayed last activity and note privacy now select the latest non-marker entry. Ask suite: 10 pass, 0 fail, 61 assertions; typecheck and the actual seededCheck runner mutation pair passed. The review of remaining direct latest-history reads distinguished immediate Board/transition return values from evidence selection. The unrelated release ancestry claim referenced306e272, while current GitHub/local395ff567 passed committed freshness and all14 ancestor checks; that thread was answered with exact-head evidence. Final gates remain required for this later ask correction.
+
+Local full gate at `9bec0c04` passed 2635 tests, 0 failures and 188712 assertions in 410.10 s, with no invocation-owned daemon leaks and `check: OK`. Subsequent import review found that the final awaited staging operation could cross the total deadline yet return complete=true. The post-await deadline check now retains confirmed task IDs and reports partial=true/complete=false. Import task suite: 6 pass, 0 fail, 24 assertions; typecheck and actual seededCheck runner mutation proof passed. Final CI must cover this later correction.
+
+Post-insert import recovery now retains confirmed IDs after later bookkeeping errors and preserves the planner Backlog notice. A failed canonical identity readback remains unconfirmed. Import task suite: 8 pass, 0 fail, 34 assertions; typecheck and three actual seededCheck runner guard pairs passed (7.051 s). PR #364 merged as `21ec2cf0` from reviewed `dbf3015b` after both platform checks, 352 guards, resolved reviews and a separate merge fence. Whole-tree equality and root main fast-forward were verified; its owned worktree and local/remote branch were removed. Final downstream CI remains required.
+
+A follow-up import audit reproduced loss of earlier confirmed IDs when a later canonical lookup threw outside the per-issue catch. Moving lookup and profile preparation inside that failure boundary fixes the rejected-promise case. The new regression failed before the source fix, then the import task suite passed 9 tests and 37 assertions. Typecheck and four actual seededCheck runner guard pairs passed (9.393 s), covering deadline, post-write identity, planner notice and lookup progress.
+
+Release audit projection was bounded after review identified repeated cross-release ID arrays and history scans. Task scope is grouped once, approval dates are read once per task, sorted date indexes give exact counts, and each category previews at most32 IDs. Dashboard task-state lookup is shared across release cards, and rendered truncation text includes exact totals. Board/DOM suites21/0,88 assertions and typecheck passed before stack merge; four actual seededCheck guards verified cut/unknown semantics, preview size and history-read work. The16-release/96-task fixture verifies counts, own-scope exclusion and strict cut boundaries. Final merged-stack checks remain required.
+
+A real DOM update-cache regression reproduced stale blocked counts when an outside prerequisite became approved without changing release rows. The refresh key now includes task states. The regression failed before the fix, then all12 source DOM tests passed (54 assertions); typecheck and the actual runner mutation guard passed. PR #365 merged as `ae334cd9` from `b2f0f720` after both platforms, 367 guards and a separate fresh fence. Whole-tree equality, root main fast-forward, child-base retarget and owned worktree/branch cleanup were verified.
+
+The older macOS run at `bead65d5` failed the crash-recovery fixture after observing the Kimi report but before the following Claude report was appended. The production recovery loop reports both recorded peers; the owner-approved fixture now waits for both exact reports before retaining all original assertions and the existing bounded wait. Focused recovery: 1 pass, 0 fail, 15 assertions; typecheck passed. No production recovery or identity policy changed.
+
+## Post-merge tag preflight
+
+Release PR #376 merged as `230833b4ef9df745552f292ffd6965e4b261ce24`; its full tree equals verified head `7568c395`. The pre-tag committed documentation gate then reported four stale entries (adapters, daemon, tasks and security). Their covered source trees are byte-identical to their previous stamps, but Git path-history simplification in the merged graph includes previously reviewed merge commits `65583963`, `f4555ce0`, `810fee78` and `bc8a215b`. The four documents were rechecked against the merged source and restamped to `230833b4`. No checker, covered scope, production source or assertion changed. The tag remains withheld until the corrective PR passes the full gates and its merge passes the pre-tag checks.

package/docs/verification/2026-10-13-board-phone.md

@@ -0,0 +1,31 @@
+# Project board phone-width source fixture verification
+
+Source: 6d311a51dccd41d3703079175cac65a487189b15. This is source-fixture evidence, not an installed/native/account run. No byte-identity claim is made for later candidates; any later UI or rendering change requires current evidence.
+
+The actual loopback startDashboard implementation served synthetic task, peer, release and guidance data through its normal ticket/session/CSP path. Its action callback refused production changes. The explicitly approved refresh used only Ego Space 44. That same space was retained after finding date-control clipping, then reused for the source fix and finished exactly once after successful visual review. The fixture server exited and ready.json was removed.
+
+At 1440x1000 and 390x844 (light and dark), document width equalled viewport width; all five column headings and six cards were present. Role and release guidance appeared in accessible card names. Tab from the first card reached Pull into To Do. All nine PNG contents were viewed for readable layout and controls.
+
+The earlier c37a9aeb capture exposed clipping despite document width 390: release-cut ended at x434 outside its panel. At phone width, split form grids now use one column. Every visible split form control stays within the panel; the release date controls span x37..353 within panel x18..372. Both themes show complete date text and calendar buttons. The release-cut unknown text wraps visibly. Pending WIP editors show 2, 0 and inheritance as an empty input; pressing Save sends tasks.wip_limits.codex=2 to the refusing fixture callback.
+
+## Captures
+
+- board-1440-light.png: SHA256 8345fb637ab467af6a649da5ea61c48c466181de4fd6147b8bd7425289cd5035.
+- board-390-light.png: SHA256 00cd5685c2f57b64cd6208a9a3e8af6c6130b31a4ef59ba30e3c5aacad9c98fd.
+- board-390-dark.png: SHA256 d99603964afaedb7846fa134cbb2de58bc4b2d3bfa0c11819cf171ea72e0228c.
+- release-390-light.png: SHA256 49983dc8c536c9ea070ca7440691b0c9b080dcef085f9d65513181b92f484895.
+- release-390-dark.png: SHA256 59ce16d7a7e61b15e868f77d9db90a60dfbfdf23cdb4c9d6bf874082130ff4c5.
+- dates-390-light.png: SHA256 22f9e1a57b6902fde7019cdcbd9bd8e9ff38b3d10c009b48fc54108a7c17a3c9.
+- dates-390-dark.png: SHA256 97e6e4dec27975034333e72226179bfdbf548850c08ff803b87191bb8dc2fc77.
+- settings-390-light.png: SHA256 04a0eb0f0134f3fa582f7f694f700fd51d21a8873eb8e29bfbb74a3f5900e122.
+- settings-390-dark.png: SHA256 8e7a8b44ce73cce8751b34a7e86464f45bba77ebdcf8dc009ab1ca3cae3c256c.
+
+## Historical scope
+
+The 1bbced04/Space 39 captures establish only their original source-fixture result. They do not establish later pending-WIP or release-cut rendering. The earlier broader byte-identity statement is withdrawn; this refresh supplies current evidence for the source named above.
+
+Native planner grooming across two releases, real-account import, model ingestion, measured effects, native terminal glyph width and tmux remain unverified. Browser theme changed only through the fixture page dataset; no shared theme cookie was written.
+
+## Later audit preview text
+
+A later rendering change bounds release audit examples and adds exact-total text such as showing32 of96. Current DOM tests verify both known and unknown audit labels and totals. The phone layout styles are unchanged, but the PNGs above predate this suffix and do not constitute a new visual capture of truncated audit content.

package/docs/verification/2026-10-13-fsmonitor-fixture-attribution.md

@@ -0,0 +1,19 @@
+# Fsmonitor fixture attribution (#369)
+
+## Evidence
+
+- Failed macOS run: [38340462476](https://github.com/STAIxBWLB/agent-hub/actions/runs/38340462476). The original full-gate failure and diagnostic replay 20 are retained separately from the 19 passing replays.
+- Artifact: `docs-git-diagnostics-0addbb4290934a59299c3e66144445567a4462f9`, `git-20.jsonl` and `test-20.log`. Versions: Git 2.55.0, Bun 1.4.2, Node 22.23.2.
+- The marker writer is a descendant of fixture `commit -qm "Record reviewed documentation"`, through detached auto maintenance, repack, and pack-objects with `--indexed-objects`. Root trace SID: `20261013T031954.147942Z-H0482c2ec-P000098b4`.
+- The fixture configured the trap at 03:19:54.169372 UTC. Pack-objects started at 03:19:54.178275 and spawned the trap at 03:19:54.179892. The checker first Git invocation started at 03:19:54.215564 with `core.fsmonitor=false`. The only trap invocation belongs to fixture maintenance, before checker startup.
+
+## Correction
+
+- The owner approved the exact fixture exception: add `-c maintenance.auto=false -c gc.auto=0` to fixture Git invocations. This prevents fixture-owned detached jobs from crossing the checker observation window.
+- All original assertions, the planted trap, production checker behavior, and user Git configuration remain unchanged. No unrelated process was stopped.
+- A new deterministic regression traces fixture commits with aggressive repository-local gc settings and requires no maintenance child. Explicit pack controls prove `core.fsmonitor=false` keeps the marker absent and the enabled trap writes it.
+
+## Verification
+
+- Actual local document-check suite: 14 pass, 0 fail, 72 assertions, including the new regression and both controls.
+- Exact final-head Linux/macOS/full seeded gates and current-head review remain required before issue closure. Earlier passing runs are not a correction receipt. No native deployment is claimed by this report.

package/docs/verified.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "documents": {
     "README.md": {
-      "verifiedAgainst": "e3313ddb1673edc91fb567793e42723d441e53f2",
+      "verifiedAgainst": "22993206f309720e714cbd7c045aadaef9ac9ba1",
       "paths": [
         "package.json",
         "src/",
@@ -11,14 +11,14 @@
       ]
     },
     "docs/security.md": {
-      "verifiedAgainst": "e3313ddb1673edc91fb567793e42723d441e53f2",
+      "verifiedAgainst": "230833b4ef9df745552f292ffd6965e4b261ce24",
       "paths": [
         "src/",
         "templates/"
       ]
     },
     "docs/operations.md": {
-      "verifiedAgainst": "e3313ddb1673edc91fb567793e42723d441e53f2",
+      "verifiedAgainst": "22993206f309720e714cbd7c045aadaef9ac9ba1",
       "paths": [
         "package.json",
         "src/",
@@ -35,7 +35,7 @@
       ]
     },
     "docs/quickstart.md": {
-      "verifiedAgainst": "e3313ddb1673edc91fb567793e42723d441e53f2",
+      "verifiedAgainst": "22993206f309720e714cbd7c045aadaef9ac9ba1",
       "paths": [
         "package.json",
         "src/",
@@ -43,7 +43,7 @@
       ]
     },
     "docs/agent-notes/adapters.md": {
-      "verifiedAgainst": "e3313ddb1673edc91fb567793e42723d441e53f2",
+      "verifiedAgainst": "230833b4ef9df745552f292ffd6965e4b261ce24",
       "paths": [
         "src/adapters/",
         "src/pi/",
@@ -62,7 +62,7 @@
       ]
     },
     "docs/agent-notes/benchmarks.md": {
-      "verifiedAgainst": "88d49207d57a43e8beed8dbf95ad4a0283495b43",
+      "verifiedAgainst": "042c440e23452d62b5aaaf86330431fe0b16baba",
       "paths": [
         "scripts/benchmarks/",
         "test/benchmarks/",
@@ -74,7 +74,7 @@
       ]
     },
     "docs/agent-notes/budget.md": {
-      "verifiedAgainst": "e3313ddb1673edc91fb567793e42723d441e53f2",
+      "verifiedAgainst": "6dcc7fe00c38f13613bcf53524fa3d1527a708e5",
       "paths": [
         "src/hub/budget.ts",
         "src/cli/statusline-tee.ts",
@@ -86,7 +86,7 @@
       ]
     },
     "docs/agent-notes/bus.md": {
-      "verifiedAgainst": "e3313ddb1673edc91fb567793e42723d441e53f2",
+      "verifiedAgainst": "6dcc7fe00c38f13613bcf53524fa3d1527a708e5",
       "paths": [
         "src/hub/bus.ts",
         "src/hub/envelope.ts",
@@ -98,7 +98,7 @@
       ]
     },
     "docs/agent-notes/daemon.md": {
-      "verifiedAgainst": "e3313ddb1673edc91fb567793e42723d441e53f2",
+      "verifiedAgainst": "230833b4ef9df745552f292ffd6965e4b261ce24",
       "paths": [
         "src/hub/daemon.ts",
         "src/hub/control-client.ts",
@@ -135,7 +135,7 @@
       ]
     },
     "docs/agent-notes/local-worker.md": {
-      "verifiedAgainst": "88d49207d57a43e8beed8dbf95ad4a0283495b43",
+      "verifiedAgainst": "6dcc7fe00c38f13613bcf53524fa3d1527a708e5",
       "paths": [
         "src/adapters/local-worker.ts",
         "src/local/",
@@ -146,7 +146,7 @@
       ]
     },
     "docs/agent-notes/models.md": {
-      "verifiedAgainst": "88d49207d57a43e8beed8dbf95ad4a0283495b43",
+      "verifiedAgainst": "6dcc7fe00c38f13613bcf53524fa3d1527a708e5",
       "paths": [
         "src/models/",
         "src/hub/inference.ts",
@@ -155,7 +155,7 @@
       ]
     },
     "docs/agent-notes/tasks.md": {
-      "verifiedAgainst": "e3313ddb1673edc91fb567793e42723d441e53f2",
+      "verifiedAgainst": "230833b4ef9df745552f292ffd6965e4b261ce24",
       "paths": [
         "src/hub/tasks.ts",
         "src/hub/board.ts",
@@ -172,7 +172,7 @@
       ]
     },
     "docs/agent-notes/tests.md": {
-      "verifiedAgainst": "e3313ddb1673edc91fb567793e42723d441e53f2",
+      "verifiedAgainst": "8ffd8babb35b5970c881f81babe951ed70d3f387",
       "paths": [
         "test/",
         "scripts/check.sh",
@@ -189,6 +189,15 @@
         "src/models/mlx.ts",
         "src/cli/upgrade-interactive.ts"
       ]
+    },
+    "docs/agent-notes/README.md": {
+      "verifiedAgainst": "6dcc7fe00c38f13613bcf53524fa3d1527a708e5",
+      "paths": [
+        "src/cli/console-state.ts",
+        "src/cli/attention.ts",
+        "test/console-attention.test.ts",
+        "docs/agent-notes/daemon.md"
+      ]
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@staix/agent-hub",
-  "version": "0.12.23",
+  "version": "0.12.24",
   "description": "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   "license": "MIT",
   "type": "module",
@@ -26,6 +26,7 @@
     "src",
     "plugins",
     "templates",
+    "scripts/check-docs.mjs",
     "docs",
     "README.md",
     "LICENSE",

package/plugins/agent-hub/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hub",
-  "version": "0.12.23",
+  "version": "0.12.24",
   "description": "Channel between Claude Code and the agent-hub daemon: peer messages from Codex, Kimi and the local worker arrive as channel events; hub_send replies.",
   "author": {
     "name": "Young Joon Lee",

package/plugins/agent-hub/ROLE-NOTICE.md

@@ -0,0 +1,26 @@
+# Role catalog attribution
+
+Selected role guidance is adapted from msitarzewski/agency-agents at f99f6aa910a442b0197b768ce0ea7751e35e2060. Each adapted definition names its upstream path. The other three research definitions are original agent-hub guidance. Upstream persona, code samples and autonomy claims are excluded.
+
+MIT License
+
+Copyright (c) 2025 AgentLand Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+