@staix/agent-hub 0.12.28 → 0.12.30

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@staix/agent-hub",
-  "version": "0.12.28",
+  "version": "0.12.30",
   "description": "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   "license": "MIT",
   "type": "module",
@@ -14,7 +14,10 @@
     "test": "bun test"
   },
   "engines": {
-    "bun": ">=1.3.0"
+    "bun": ">=1.4.2"
+  },
+  "dependencies": {
+    "@staix/agent-mem": "0.3.0"
   },
   "devDependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",

package/plugins/agent-hub/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hub",
-  "version": "0.12.28",
+  "version": "0.12.30",
   "description": "Channel between Claude Code and the agent-hub daemon: peer messages from Codex, Kimi and the local worker arrive as channel events; hub_send replies.",
   "author": {
     "name": "Young Joon Lee",

package/plugins/agent-hub/server.js

@@ -6922,24 +6922,16 @@ var require_dist = __commonJS(function(exports, module) {
 
 // src/hub/control-client.ts
 import { readFileSync as readFileSync2 } from "fs";
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 
 // src/hub/project.ts
-import { existsSync, lstatSync, readFileSync, realpathSync } from "fs";
-import { basename, dirname, isAbsolute, join, resolve } from "path";
-
-// src/hub/git.ts
-import { spawnSync } from "child_process";
-var SAFE_CONFIG = ["core.fsmonitor=false", "core.hooksPath=/dev/null", "diff.external=", "core.pager=cat", "credential.helper=", "core.askpass="];
-var CREDENTIAL_KEYS = new Set(["credential.helper=", "core.askpass="]);
-var hubGitArgv = (args, opts = {}) => ["git", "--no-pager", ...SAFE_CONFIG.filter((c) => !opts.credentials || !CREDENTIAL_KEYS.has(c)).flatMap((c) => ["-c", c]), ...args];
-var hubGitEnv = (env = process.env) => ({ ...env, GIT_TERMINAL_PROMPT: "0" });
-function hubGitSync(args, options) {
-  const argv = hubGitArgv(args);
-  return spawnSync(argv[0], argv.slice(1), { ...options, env: hubGitEnv(options.env ?? process.env) });
-}
+import { existsSync, lstatSync, readFileSync } from "fs";
+import { dirname as dirname2, isAbsolute, join as join2, resolve as resolve2 } from "path";
 
-// src/hub/project.ts
+// node_modules/@staix/agent-mem/src/memory/platform.ts
+import { realpathSync } from "fs";
+import { basename, dirname, join, resolve, sep } from "path";
+import { spawnSync, execFileSync } from "child_process";
 var canonical = (path) => {
   const absolute = resolve(path);
   try {
@@ -6949,21 +6941,42 @@ var canonical = (path) => {
     return parent === absolute ? absolute : join(canonical(parent), basename(absolute));
   }
 };
+function canonicalPath(path) {
+  return canonical(path);
+}
+var SAFE_CONFIG = ["core.fsmonitor=false", "core.hooksPath=/dev/null", "diff.external=", "core.pager=cat", "credential.helper=", "core.askpass="];
+var CREDENTIAL_KEYS = new Set(["credential.helper=", "core.askpass="]);
+var memoryGitArgv = (args, opts = {}) => ["git", "--no-pager", ...SAFE_CONFIG.filter((c) => !opts.credentials || !CREDENTIAL_KEYS.has(c)).flatMap((c) => ["-c", c]), ...args];
+function memoryGitEnv(env = process.env, options = {}) {
+  const result = { ...env, GIT_TERMINAL_PROMPT: "0" };
+  if (options.repositoryIsolation) {
+    for (const key of Object.keys(result))
+      if (["GIT_DIR", "GIT_COMMON_DIR", "GIT_WORK_TREE", "GIT_INDEX_FILE", "GIT_OBJECT_DIRECTORY", "GIT_ALTERNATE_OBJECT_DIRECTORIES", "GIT_NAMESPACE", "GIT_PREFIX", "GIT_SHALLOW_FILE", "GIT_GRAFT_FILE", "GIT_REPLACE_REF_BASE", "GIT_CONFIG_COUNT", "GIT_CONFIG_PARAMETERS"].includes(key) || /^GIT_CONFIG_(KEY|VALUE)_/.test(key))
+        delete result[key];
+    result.GIT_NO_REPLACE_OBJECTS = "1";
+  }
+  return result;
+}
+function memoryGitSync(args, options) {
+  const argv = memoryGitArgv(args);
+  return spawnSync(argv[0], argv.slice(1), { ...options, env: memoryGitEnv(options.env ?? process.env) });
+}
+// src/hub/project.ts
 function gitRoot(dir) {
-  const result = hubGitSync(["-C", dir, "rev-parse", "--show-toplevel"], { encoding: "utf8" });
+  const result = memoryGitSync(["-C", dir, "rev-parse", "--show-toplevel"], { encoding: "utf8" });
   if (result.status !== 0)
     return;
   const root = result.stdout.trim();
-  return root ? canonical(root) : undefined;
+  return root ? canonicalPath(root) : undefined;
 }
 function hasConfig(dir) {
-  return existsSync(join(dir, ".agenthub", "config.json"));
+  return existsSync(join2(dir, ".agenthub", "config.json"));
 }
 function projectRoot(cwd) {
-  const input = isAbsolute(cwd) ? cwd : resolve(cwd);
+  const input = isAbsolute(cwd) ? cwd : resolve2(cwd);
   let dir;
   try {
-    dir = canonical(input);
+    dir = canonicalPath(input);
     if (!lstatSync(dir).isDirectory())
       throw new Error(`${cwd} is not a directory`);
   } catch (error) {
@@ -6971,27 +6984,27 @@ function projectRoot(cwd) {
   }
   const boundary = gitRoot(dir);
   const stop = boundary ?? parseRoot(dir);
-  for (let current = dir;; current = dirname(current)) {
+  for (let current = dir;; current = dirname2(current)) {
     if (hasConfig(current))
-      return canonical(current);
-    if (current === stop || current === dirname(current))
+      return canonicalPath(current);
+    if (current === stop || current === dirname2(current))
       break;
   }
   return boundary ?? dir;
 }
 function parseRoot(dir) {
   let current = dir;
-  while (dirname(current) !== current)
-    current = dirname(current);
+  while (dirname2(current) !== current)
+    current = dirname2(current);
   return current;
 }
 function stateMarker(stateDir) {
-  for (const file of [join(stateDir, "project.json"), join(stateDir, "status.json")]) {
+  for (const file of [join2(stateDir, "project.json"), join2(stateDir, "status.json")]) {
     try {
       const value = JSON.parse(readFileSync(file, "utf8"));
       const root = value.root ?? value.cwd;
       if (typeof root === "string")
-        return canonical(root);
+        return canonicalPath(root);
     } catch {}
   }
   return;
@@ -7000,15 +7013,15 @@ function projectContext(cwd, env = process.env) {
   const root = projectRoot(cwd);
   const override = env.AGENTHUB_STATE_DIR?.trim();
   if (!override)
-    return { root, stateDir: canonical(join(root, ".agenthub", "state")) };
+    return { root, stateDir: canonicalPath(join2(root, ".agenthub", "state")) };
   const declared = env.AGENTHUB_PROJECT_DIR?.trim();
-  const stateDir = canonical(override);
+  const stateDir = canonicalPath(override);
   const recorded = stateMarker(stateDir);
   if (recorded === root)
     return { root, stateDir };
-  if (!recorded && declared && canonical(declared) === root)
+  if (!recorded && declared && canonicalPath(declared) === root)
     return { root, stateDir };
-  return { root, stateDir: canonical(join(root, ".agenthub", "state")) };
+  return { root, stateDir: canonicalPath(join2(root, ".agenthub", "state")) };
 }
 
 // src/hub/control-client.ts
@@ -7019,8 +7032,8 @@ var PROTOCOL = 16;
 var RECOVERY_SOURCE_PROTOCOLS = [9, 10, 11, 12, 13, 14, 15, PROTOCOL];
 function readControl(stateDir) {
   try {
-    const status = JSON.parse(readFileSync2(join2(stateDir, "status.json"), "utf8"));
-    const token = readFileSync2(join2(stateDir, "control-token"), "utf8").trim();
+    const status = JSON.parse(readFileSync2(join3(stateDir, "status.json"), "utf8"));
+    const token = readFileSync2(join3(stateDir, "control-token"), "utf8").trim();
     if (!Number.isInteger(status.controlPort) || status.controlPort < 1 || status.controlPort > 65535 || !token)
       return;
     return {
@@ -7318,7 +7331,7 @@ var OUTCOMES_KEPT_MS = 7 * 24 * 3600000;
 // src/hub/roles.ts
 import { createHash } from "crypto";
 import { constants, closeSync, fstatSync, lstatSync as lstatSync2, openSync, readSync, readdirSync } from "fs";
-import { join as join3 } from "path";
+import { join as join4 } from "path";
 
 // templates/roles/dev/software-architect.md
 var software_architect_default = `---
@@ -7738,7 +7751,7 @@ function loadRoleCatalog(cwd) {
   if (!cwd)
     return { roles, errors };
   try {
-    const config = join3(cwd, ".agenthub"), dir = join3(config, "roles");
+    const config = join4(cwd, ".agenthub"), dir = join4(config, "roles");
     for (const path of [config, dir]) {
       const stat = lstatSync2(path);
       if (!stat.isDirectory() || stat.isSymbolicLink())
@@ -7750,7 +7763,7 @@ function loadRoleCatalog(cwd) {
     for (const file of files) {
       const id = file.slice(0, -3);
       try {
-        roles.set(id, parseRole(projectRole(join3(dir, file)), id, "project"));
+        roles.set(id, parseRole(projectRole(join4(dir, file)), id, "project"));
       } catch {
         errors.push({ id: ID.test(id) ? id : "invalid-file-id", reason: "invalid or unsafe project role" });
       }
@@ -16153,11 +16166,11 @@ class StdioServerTransport {
 
 // src/adapters/claude-channel.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 // package.json
 var package_default = {
   name: "@staix/agent-hub",
-  version: "0.12.28",
+  version: "0.12.30",
   description: "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   license: "MIT",
   type: "module",
@@ -16171,7 +16184,10 @@ var package_default = {
     test: "bun test"
   },
   engines: {
-    bun: ">=1.3.0"
+    bun: ">=1.4.2"
+  },
+  dependencies: {
+    "@staix/agent-mem": "0.3.0"
   },
   devDependencies: {
     "@modelcontextprotocol/sdk": "^1.27.1",
@@ -16265,7 +16281,11 @@ var TASK_TOOLS = [
   tool("hub_task_list", "The task board. PII tasks show as [pii].", { state: { type: "string", enum: ["proposed", "in_progress", "in_review", "approved", "changes_requested"] }, ready: { type: "boolean", description: "only proposed tasks with nothing left to wait for" } }),
   tool("hub_review", "Give your verdict on a task you were asked to review: map the changed signatures and call sites to the task's plan or detail, read the check result (hub_task_show has it, with the done summary), and list what is unmet. Two changes_requested in a row move the task to another peer.", { id, head: { type: "string", description: "full SHA actually reviewed; enforce binds approval to the current PR head" }, verdict: { type: "string", enum: ["approved", "changes_requested"] }, note: str, unmet: { type: "array", items: str, description: "each requirement of the plan or detail that the change does not meet" } }, ["id", "verdict"]),
   tool("hub_checkpoint", "Answer a checkpoint request from the hub (quota or context window pressure): what you were doing, what is half done, what whoever continues must know. Write the same to .agenthub/checkpoint.md first if you can.", { summary: str, request_id: { type: "string", description: "The request id supplied by a context checkpoint request; required for context checkpoints" } }, ["summary"]),
-  tool("hub_remember", "Save a decision, finding, contract or fail to the memory all agents share (the hub's memory and claude-mem); the other agents also get it with their next message. A fail is an approach you tried that does not work, and why: the most useful note, it stops the others spending their quota on it. Do not retry what a fail note rules out without new evidence. Conclusions worth recalling, not chatter. A note on an open task is short-term until the task is approved, when its decisions, contracts and fails become long-term; horizon long keeps it now, scope shared lets the person's other projects find it.", { text: str, title: str, kind: { type: "string", enum: [...NOTE_KINDS] }, task: id, horizon: { type: "string", enum: ["short", "long"] }, scope: { type: "string", enum: ["project", "shared"] } }, ["text"])
+  tool("hub_memory_search", "Search daemon-scoped visible memory, fails first. Query <=200 UTF-8 bytes; default 8, max 20 lines; whole output <=4 KB. Incomplete excerpts are marked. No project argument.", { query: { type: "string", maxLength: 200, description: "At most 200 UTF-8 bytes, enforced by the daemon" }, limit: { type: "integer", minimum: 1, maximum: 20 } }, ["query"]),
+  tool("hub_memory_show", "Read up to 8 visible memory ids or unique prefixes (6..64 UTF-8 bytes each). Original ids redirect; unavailable ids share one refusal. Whole output <=8 KB.", { ids: { type: "array", minItems: 1, maxItems: 8, items: { type: "string", minLength: 6, maxLength: 64, description: "6 to 64 UTF-8 bytes" } } }, ["ids"]),
+  tool("hub_memory_graph", "Read screened memory neighbourhoods, fails first. Up to 8 starts (<=200 UTF-8 bytes each), 1 or 2 hops; default 60/max 120 nodes, max 240 edges, whole output <=6 KB. No project argument.", { starts: { type: "array", minItems: 1, maxItems: 8, items: { type: "string", minLength: 1, maxLength: 200, description: "At most 200 UTF-8 bytes" } }, hops: { type: "integer", enum: [1, 2] }, limit: { type: "integer", minimum: 1, maximum: 120 } }, ["starts"]),
+  tool("hub_memory_correct", "Propose a correction to a visible memory entry. This creates a machine-local candidate only; a person accepts or rejects it with amem review. It never edits a note. id is an exact id or unique visible prefix; text and reason must each fit 4000 UTF-8 bytes.", { id: str, text: str, reason: str }, ["id", "text", "reason"]),
+  tool("hub_remember", "Save a decision, finding, contract or fail to the memory all agents share (the hub's memory and claude-mem); the other agents also get it with their next message. A fail is an approach you tried that does not work, and why: the most useful note, it stops the others spending their quota on it. Do not retry what a fail note rules out without new evidence. Conclusions worth recalling, not chatter. For kind fail, optional approach, symptom, cause, evidence and retry_when strings compose fixed labeled text; text may be omitted when structured fields are supplied. The complete text must fit 4000 UTF-8 bytes and is refused, never truncated, when oversized. A note on an open task is short-term until the task is approved, when its decisions, contracts and fails become long-term; horizon long keeps it now, scope shared lets the person's other projects find it.", { text: str, approach: str, symptom: str, cause: str, evidence: str, retry_when: str, title: str, kind: { type: "string", enum: [...NOTE_KINDS] }, task: id, horizon: { type: "string", enum: ["short", "long"] }, scope: { type: "string", enum: ["project", "shared"] } })
 ];
 var TASK_TOOL_NAMES = new Set(TASK_TOOLS.map((t) => t.name));
 var CONDUCTOR_TOOLS = [
@@ -16328,7 +16348,7 @@ var channel = !toolsMode && process.env.AGENTHUB_CHANNEL === "1";
 function roles() {
   const read = (name) => {
     try {
-      return JSON.parse(readFileSync3(join4(projectRoot2, ".agenthub", name), "utf8")).roles ?? {};
+      return JSON.parse(readFileSync3(join5(projectRoot2, ".agenthub", name), "utf8")).roles ?? {};
     } catch {
       return {};
     }
@@ -16341,7 +16361,7 @@ function sessionProfile() {
     for (const name of ["config.json", "config.local.json"]) {
       let data;
       try {
-        data = JSON.parse(readFileSync3(join4(projectRoot2, ".agenthub", name), "utf8"));
+        data = JSON.parse(readFileSync3(join5(projectRoot2, ".agenthub", name), "utf8"));
       } catch (error) {
         if (error.code === "ENOENT")
           continue;
@@ -16368,7 +16388,7 @@ function sessionRoles() {
     const read = (name) => {
       let raw;
       try {
-        raw = JSON.parse(readFileSync3(join4(projectRoot2, ".agenthub", name), "utf8")).catalog_roles;
+        raw = JSON.parse(readFileSync3(join5(projectRoot2, ".agenthub", name), "utf8")).catalog_roles;
       } catch {
         return {};
       }
@@ -16397,7 +16417,7 @@ var HELD = `another session is attached to the hub as "${peerId}"; this one is s
 var INBOX_CAP = 200;
 function peerHeld() {
   try {
-    const status = JSON.parse(readFileSync3(join4(stateDir, "status.json"), "utf8"));
+    const status = JSON.parse(readFileSync3(join5(stateDir, "status.json"), "utf8"));
     const peer = status.peers?.[peerId];
     if (channel && peer?.toolsOnly && !peer.claiming)
       return false;

package/src/cli/console-state.ts

@@ -29,7 +29,9 @@ export interface ConsoleState {
   approvals: Approval[]; events: ConsoleEvent[]; peers: Record<string, any>; budget: Record<string, any>;
   tasks: any[]; tasksKnown?: boolean; taskCounts?: Record<string, number>; queue: any[]; detail?: Detail; detailOffset: number; help: boolean; notice: string; noticeAt?: number; noticeTone?: Tone;
   peerFilter?: string; kindFilter?: string; project?: string;
-  confirm?: { type: "permission"; id: string; option: string; peer: string } | { type: "command"; args: string[] } | { type: "permission_default"; peer: string; source: string };
+  taskSelection?: number; queueSelection?: string;
+  actionLock?: { prefix: string[]; id: string; revision: number; state: string; owner?: string; reserved?: string; reviewer?: string; waiting?: boolean };
+  confirm?: { type: "permission"; id: string; option: string; peer: string } | { type: "command"; args: string[]; prompt?: string } | { type: "permission_default"; peer: string; source: string };
   optionChoice?: string;
   modeChoice?: string;
   permissionDefaults: PermissionDefault[];
@@ -319,8 +321,8 @@ const KEYS: [string, string[]][] = [
   ["Panels", ["1-5 panel", "Left/Right panel", "j/k or Up/Down move", "Enter view", "j/k scroll a view"]],
   ["Approvals", ["a allow (then y)", "d deny", "v view", "[ ] select"]],
   ["Peers", ["p pause", "r resume", "m permission mode"]],
-  ["Tasks", ["a assign (then y)", "r review"]],
-  ["Queue", ["r resolve (reason, then y)"]],
+  ["Tasks", ["a assign/reviewer (then y)", "u unassign (then y)", "r review (in review)"]],
+  ["Queue", ["r resolve (reason, then y)", "queued=discard, needs_review=retry"]],
   ["Events", ["f peer filter", "g kind filter"]],
 ];
 /** The `?` key table: one group per panel, its keys kept whole and packed into the width after the group column. */
@@ -372,7 +374,7 @@ export function parseConsoleCommand(input: string): string[] {
 }
 export function commandNeedsConfirmation(args: string[]): boolean {
   const positional = args.filter(arg => arg !== "--yes");
-  return (positional[0] === "permission" && positional[2] === "never-ask") || (args[0] === "task" && args[1] === "assign") || (args[0] === "queue" && args[1] === "resolve") || (args[0] === "permit" && args[2] !== "deny");
+  return (positional[0] === "permission" && positional[2] === "never-ask") || (args[0] === "task" && ["assign", "unassign"].includes(args[1] ?? "")) || (args[0] === "queue" && args[1] === "resolve") || (args[0] === "permit" && args[2] !== "deny");
 }
 export function panelRows(s: ConsoleState): any[] {
   if (s.panel === 1) return Object.entries(s.peers).map(([id, peer]) => ({ id, ...peer, budget: s.budget[id] }));
@@ -385,8 +387,38 @@ export function panelRows(s: ConsoleState): any[] {
   return s.events.filter(e => (!s.peerFilter || e.peer === s.peerFilter) && (!s.kindFilter || e.kind === s.kindFilter));
 }
 export const selectedApproval = (s: ConsoleState) => s.approvals.find(a => a.id === s.approvalId);
-/** The selected row: the Approvals panel's is the selected request (-1 when none is). */
-const selection = (s: ConsoleState) => s.panel === 2 ? s.approvals.findIndex(a => a.id === s.approvalId) : s.selection;
+/** The selected row: approvals and refreshed Tasks/Queue rows are bound by id, never by a replacement row. */
+const selection = (s: ConsoleState) => {
+  if (s.panel === 2) return s.approvals.findIndex(a => a.id === s.approvalId);
+  if (s.panel === 3 && s.taskSelection !== undefined) return panelRows(s).findIndex(row => row.id === s.taskSelection);
+  if (s.panel === 4 && s.queueSelection !== undefined) return panelRows(s).findIndex(row => row.id === s.queueSelection);
+  return s.selection;
+};
+export const selectedPanelRow = (s: ConsoleState): any | undefined => panelRows(s)[selection(s)];
+export function captureConsoleSelection(s: ConsoleState, byIndex = false): void {
+  const row = byIndex ? panelRows(s)[s.selection] : selectedPanelRow(s);
+  if (s.panel === 3 && row) s.taskSelection = Number(row.id);
+  if (s.panel === 4 && row) s.queueSelection = String(row.id);
+}
+const commandFlag = (args: string[], name: string) => { const at = args.indexOf(name); return at < 0 ? undefined : args[at + 1]; };
+function validateLockedCommand(lock: NonNullable<ConsoleState["actionLock"]>, args: string[]): void {
+  const revisions = args.flatMap((arg, index) => arg === "--revision" ? [args[index + 1]] : []);
+  if (args[0] !== lock.prefix[0] || args[1] !== lock.prefix[1] || args[2] !== lock.id || revisions.length !== 1 || revisions[0] !== String(lock.revision)) {
+    throw new Error("the selected id and revision cannot be edited; start again from the row");
+  }
+}
+function lockedCommandPrompt(lock: NonNullable<ConsoleState["actionLock"]>, args: string[]): string {
+  if (lock.prefix[0] === "queue") {
+    const action = commandFlag(args, "--action") ?? "resolve";
+    return `${action} delivery ${lock.id} at revision ${lock.revision}${action === "completed" ? "; this asserts external effects" : action === "discard" ? "; no task or native turn is cancelled" : ""}`;
+  }
+  const role = commandFlag(args, "--role") ?? "owner";
+  if (lock.prefix[1] === "assign") return `assign ${role} on task #${lock.id} at revision ${lock.revision}${lock.waiting && role === "owner" ? " as a reservation until dependencies approve" : ""}`;
+  const affected = role === "owner" ? [lock.owner, lock.reserved].filter(Boolean).join(" and ") : lock.reviewer ?? "none";
+  const resulting = role === "owner" ? "proposed" : lock.state;
+  const guidance = role === "reviewer" && lock.state !== "in_review" ? "; later completion without a reviewer may approve directly" : lock.state === "in_review" ? `; use ahub review ${lock.id}` : "";
+  return `unassign ${role} ${affected} on task #${lock.id} at revision ${lock.revision} -> ${resulting}${guidance}; native work and uncertain deliveries are not stopped or resolved`;
+}
 export function reduceConsole(state: ConsoleState, key: string, now = Date.now()): { state: ConsoleState; effects: ConsoleEffect[] } {
   const attentionKeyBlocked = !!(state.confirm || state.optionChoice || state.modeChoice || state.help || state.editing || state.input);
   // A notice answers the key before this one; one that pruning raises now stays.
@@ -427,24 +459,29 @@ export function reduceConsole(state: ConsoleState, key: string, now = Date.now()
   }
   if (s.help && s.mode === "panels" && !["?", "\x1b", "q"].includes(key)) return done(); // the key table is modal
   if (s.editing || s.input) {
-    if (key === "\x1b") { s.input = ""; s.editing = false; }
+    if (key === "\x1b") { s.input = ""; s.editing = false; s.actionLock = undefined; }
     else if (key === "\x7f" || key === "\b") s.input = Array.from(s.input).slice(0, -1).join("");
     else if (key === "\x15") s.input = "";
     else if (key === "\x1b[A" || key === "\x1b[B") {
       s.historyIndex = Math.max(0, Math.min(s.history.length, s.historyIndex + (key === "\x1b[A" ? -1 : 1)));
       s.input = s.history[s.historyIndex] ?? "";
     } else if (key === "\r" || key === "\n") {
-      const input = s.input; s.input = ""; s.editing = false;
+      const input = s.input, lock = s.actionLock; s.input = ""; s.editing = false; s.actionLock = undefined;
       if (!input.trim()) return done();
       try {
         const parsed = parseConsoleCommand(input);
         const args = parsed[0] === "permission" ? [...parsed.filter(arg => arg !== "--yes"), ...(parsed.includes("--yes") ? ["--yes"] : [])] : parsed;
         if (args[0] === "queue" && args[1] === "resolve") {
-          const reason = args.indexOf("--reason");
+          const reason = args.indexOf("--reason"), action = commandFlag(args, "--action");
           if (reason < 0 || !args[reason + 1]?.trim()) throw new Error("queue resolve requires --reason");
+          if (!["completed", "retry", "discard"].includes(action ?? "")) throw new Error("queue resolve requires --action completed|retry|discard");
+        }
+        if (lock) {
+          validateLockedCommand(lock, args);
+          if (lock.prefix[0] === "task" && !["owner", "reviewer"].includes(commandFlag(args, "--role") ?? "owner")) throw new Error("role must be owner or reviewer");
         }
         s.history = [...s.history, input].slice(-100); s.historyIndex = s.history.length;
-        if (commandNeedsConfirmation(args)) s.confirm = { type: "command", args };
+        if (commandNeedsConfirmation(args)) s.confirm = { type: "command", args, ...(lock ? { prompt: lockedCommandPrompt(lock, args) } : {}) };
         else effects.push({ type: "command", args });
       } catch (error) { notify(s, String((error as Error).message), now); }
     } else if (!key.startsWith("\x1b")) s.input += terminalText(key).replace(/\n/g, "");
@@ -482,7 +519,7 @@ export function reduceConsole(state: ConsoleState, key: string, now = Date.now()
       const selected = rows.findIndex(row => row.id === item.id);
       if (selected >= 0) { s.panel = 3; s.selection = selected; navigated = true; }
     }
-    if (navigated) { s.detail = undefined; s.requestDetail = undefined; }
+    if (navigated) { captureConsoleSelection(s, true); s.detail = undefined; s.requestDetail = undefined; }
     else {
       const command = attentionCommand(item);
       const text = `${item.kind}${item.peer ? ` ${item.peer}` : ""}${item.id ? ` ${item.id}` : ""}: ${command}`;
@@ -493,7 +530,7 @@ export function reduceConsole(state: ConsoleState, key: string, now = Date.now()
   }
   if (key === "\t") { s.mode = s.mode === "panels" ? "stream" : "panels"; s.detail = undefined; s.requestDetail = undefined; return done(); }
   if (key === ":") { s.editing = true; return done(); }
-  const switchPanel = (panel: number) => { s.panel = panel; s.selection = 0; s.detail = undefined; s.requestDetail = undefined; return done(); };
+  const switchPanel = (panel: number) => { s.panel = panel; s.selection = 0; s.taskSelection = undefined; s.queueSelection = undefined; s.detail = undefined; s.requestDetail = undefined; return done(); };
   if (s.mode === "panels" && /^[1-5]$/.test(key) && !s.optionChoice) return switchPanel(Number(key));
   // Right and Left are the digit of the next or previous tab, wrapping at both ends (#309); the same guards as the
   // digits apply (the confirm, mode-choice, key-table and editing branches above returned already).
@@ -508,6 +545,7 @@ export function reduceConsole(state: ConsoleState, key: string, now = Date.now()
     if (s.detail !== undefined || s.requestDetail) { s.detailOffset = Math.max(0, s.detailOffset + (["j", "\x1b[B"].includes(key) ? 1 : -1)); return done(); }
     s.selection = Math.max(0, Math.min(panelRows(s).length - 1, selection(s) + (["j", "\x1b[B"].includes(key) ? 1 : -1)));
     if (s.panel === 2) s.approvalId = s.approvals[s.selection]?.id;
+    captureConsoleSelection(s, true);
     return done();
   }
   if (key === "[" || key === "]") {
@@ -537,10 +575,11 @@ export function reduceConsole(state: ConsoleState, key: string, now = Date.now()
     if (key === "v" && s.mode === "stream") { effects.push({ type: "print", text: permissionText(approval), kind: "permission", tone: "attention" }); return done(); }
     if (key === "v") { s.requestDetail = approval.id; s.detailOffset = 0; return done(); }
   }
-  const row = panelRows(s)[selection(s)];
+  const row = selectedPanelRow(s);
   // With a detail open the keys act on the item it shows (its id), never on what a refresh moved under the selection;
   // a detail that is only a message names no item.
-  const item = s.detail === undefined ? row?.id : typeof s.detail === "object" ? s.detail.id : undefined;
+  const selected = s.detail === undefined ? row : typeof s.detail === "object" ? s.detail : undefined;
+  const item = selected?.id;
   if (s.mode === "panels" && row && s.detail === undefined && (key === "\r" || key === "\n")) {
     if (s.panel === 3 || s.panel === 4) effects.push({ type: "show", panel: s.panel, id: String(row.id) });
     else if (s.panel === 2) { s.requestDetail = row.id; s.detailOffset = 0; } // the row is the selected request
@@ -557,9 +596,28 @@ export function reduceConsole(state: ConsoleState, key: string, now = Date.now()
       return done();
     }
     const prefill = s.panel === 1 && key === "p" ? `pause ${item}` : s.panel === 1 && key === "r" ? `resume ${item}` :
-      s.panel === 3 && key === "a" ? `task assign ${item} ` : s.panel === 3 && key === "r" ? `review ${item} ` :
-      s.panel === 4 && key === "r" ? `queue resolve ${item} --action retry --reason ` : undefined;
+      s.panel === 3 && key === "r" && selected.state === "in_review" ? `review ${item} ` : undefined;
     if (prefill) { s.input = prefill; s.editing = true; return done(); }
+    if (s.panel === 3 && (key === "a" || key === "u")) {
+      if (!["proposed", "in_progress", "in_review", "changes_requested"].includes(selected.state)) return done();
+      const revision = selected.flowRevision, role = selected.state === "in_review" || key === "u" && !selected.owner && !selected.reserved && selected.reviewer ? "reviewer" : "owner";
+      if (!Number.isSafeInteger(revision) || revision < 0) { notify(s, "task row actions need flowRevision; upgrade the hub", now); return done(); }
+      if (key === "u" && (role === "owner" && !selected.owner && !selected.reserved || role === "reviewer" && !selected.reviewer)) { notify(s, `task #${item}: no ${role} to unassign`, now); return done(); }
+      const listed = s.tasks.find(task => task.id === item), ready = listed?.ready ?? selected.ready;
+      const waiting = selected.state === "proposed" && ready !== true && Array.isArray(selected.deps) && selected.deps.length > 0;
+      s.actionLock = { prefix: ["task", key === "a" ? "assign" : "unassign"], id: String(item), revision, state: String(selected.state), ...(selected.owner ? { owner: String(selected.owner) } : {}), ...(selected.reserved ? { reserved: String(selected.reserved) } : {}), ...(selected.reviewer ? { reviewer: String(selected.reviewer) } : {}), waiting };
+      s.input = key === "a" ? `task assign ${item} ${role === "reviewer" ? "--role reviewer " : ""}--revision ${revision} ` : `task unassign ${item} --role ${role} --revision ${revision}`;
+      s.editing = true; return done();
+    }
+    if (s.panel === 4 && key === "r") {
+      if (!["queued", "needs_review"].includes(selected.state)) return done();
+      const revision = selected.revision;
+      if (!Number.isSafeInteger(revision) || revision < 0) { notify(s, "queue row actions need a delivery revision; upgrade the hub", now); return done(); }
+      const action = selected.state === "queued" ? "discard" : "retry";
+      s.actionLock = { prefix: ["queue", "resolve"], id: String(item), revision, state: String(selected.state) };
+      s.input = `queue resolve ${item} --action ${action} --revision ${revision} --reason `;
+      s.editing = true; return done();
+    }
   }
   if (s.mode === "panels" && s.panel === 5 && (key === "f" || key === "g")) {
     const field = key === "f" ? "peer" : "kind"; const current = key === "f" ? s.peerFilter : s.kindFilter;
@@ -646,6 +704,21 @@ export function table(head: string[], rows: Span[][], columns: number, explicitW
     return { ...cell, text: text + " ".repeat(Math.max(0, widths[i]! - Bun.stringWidth(text)) + (i === head.length - 1 ? 0 : 2)) };
   }));
 }
+function taskHints(row: any): string[] {
+  if (!["proposed", "in_progress", "in_review", "changes_requested"].includes(row.state)) return [];
+  const review = row.state === "in_review";
+  const hints = [review ? "a reviewer" : "a assign"];
+  if (review ? row.reviewer : row.owner || row.reserved) hints.push("u unassign");
+  if (review) hints.push("r review");
+  return hints;
+}
+function panelContext(s: ConsoleState, row: any): string[] {
+  if (!row) return [];
+  if (s.panel === 1) return ["p pause", "r resume", "m permission mode"];
+  if (s.panel === 3) return taskHints(row);
+  if (s.panel === 4) return [row.state === "queued" ? "r discard" : "r resolve"];
+  return [];
+}
 /** The footer's key hint: only keys that act in this mode, panel and state. */
 function hint(s: ConsoleState, columns: number): string {
   const pending = selectedApproval(s) ? ["a allow", "d deny"] : [];
@@ -653,9 +726,8 @@ function hint(s: ConsoleState, columns: number): string {
   if (s.help) return "? or Esc close  q quit";
   const approvals = s.panel === 2 ? pending : [];
   if (s.detail !== undefined || s.requestDetail) return [...approvals, "j/k scroll", "Esc back", "? keys", "q quit"].join("  ");
-  const rows = panelRows(s); const row = rows[selection(s)];
-  const context = !row ? [] : s.panel === 1 ? ["p pause", "r resume", "m permission mode"] : s.panel === 3 ? ["a assign", "r review"] : s.panel === 4 ? ["r resolve"] : [];
-  const text = [...approvals, ...context, ...(s.panel === 5 ? ["f peer", "g kind"] : []), ...(rows.length ? ["j/k move"] : []), ...(row ? ["Enter view"] : []), "? keys", ": command", "Tab stream", "q quit"].join("  ");
+  const rows = panelRows(s); const row = selectedPanelRow(s);
+  const text = [...approvals, ...panelContext(s, row), ...(s.panel === 5 ? ["f peer", "g kind"] : []), ...(rows.length ? ["j/k move"] : []), ...(row ? ["Enter view"] : []), "? keys", ": command", "Tab stream", "q quit"].join("  ");
   return s.panel === 1 && Bun.stringWidth(text) > columns ? text.replace("m permission mode", "m mode").replace("j/k move", "j/k").replace(": command", ": cmd") : text;
 }
 /** The project, then the tabs: the active one in brackets, pending approvals and held deliveries counted. */
@@ -705,7 +777,7 @@ export function renderConsoleLines(s: ConsoleState, columns: number, rows = 24,
   const permission = selectedApproval(s);
   let prompt = s.editing ? `: ${s.input}` : hint(s, columns);
   if (s.confirm?.type === "permission") prompt = `allow ${quoted(s.confirm.option)} for ${s.confirm.peer} (request ${s.confirm.id})? y/N`;
-  if (s.confirm?.type === "command") prompt = `${s.confirm.args.join(" ")}? y/N`;
+  if (s.confirm?.type === "command") prompt = `${s.confirm.prompt ?? s.confirm.args.join(" ")}? y/N`;
   if (s.modeChoice) prompt = `permission ${s.modeChoice}: 1 ask  2 ask-when-needed  3 never-ask  Esc cancel`;
   const choice = s.optionChoice ? s.approvals.find(a => a.id === s.optionChoice) : undefined;
   if (choice) prompt = `allow request ${choice.id} (${choice.peer}) with: ${allowOptions(choice).map((o, i) => `${i + 1} ${quoted(o.name)}`).join("  ")}  Esc cancel`;

package/src/cli/console.ts

@@ -4,7 +4,7 @@ import { StringDecoder } from "node:string_decoder";
 import type { ControlClient } from "../hub/control-client.ts";
 import { contextLine } from "./status-lines.ts";
 import { renderTailEvent } from "./tail-render.ts";
-import { syncPermissionDefaults, permissionDefaultText, approvalFrom, initialConsoleState, keyTable, notify, paint, panelRows, permissionText, plural, pruneApprovals, reduceConsole, renderConsoleLines, resolveColor, stateTone, streamTokens, wrapStreamTokens, terminalText, wrap } from "./console-state.ts";
+import { syncPermissionDefaults, permissionDefaultText, approvalFrom, initialConsoleState, keyTable, notify, paint, permissionText, plural, pruneApprovals, reduceConsole, renderConsoleLines, resolveColor, stateTone, streamTokens, wrapStreamTokens, terminalText, wrap, captureConsoleSelection, selectedPanelRow } from "./console-state.ts";
 import type { ConsoleEffect, ConsoleEvent, Detail, Tone } from "./console-state.ts";
 import type { BusEvent } from "../hub/bus.ts";
 import { consoleNeeds, attentionFacts } from "./attention.ts";
@@ -28,6 +28,8 @@ export interface ConsoleOptions {
   terminal?: ConsoleTerminal;
   color?: boolean;
   noPet?: boolean;
+  /** Explicit delegation inherited only by this console's ahub subprocesses. */
+  liveTest?: boolean;
   /** Injected command runner must use argv, closed stdin, and return a cancellation handle. */
   runCommand?: (args: string[], output: (text: string) => void, done: () => void, columns?: number) => (() => void);
   pollMs?: number;
@@ -80,7 +82,7 @@ export async function runConsole(options: ConsoleOptions): Promise<void> {
   let lastAct = 0; let lastBell = -Infinity;
   let columns = options.columns ?? terminal.columns; let rows = options.rows ?? terminal.rows;
   let active = true; let inAlternate = false; let plain = !terminal.isTTY || columns < 80 || rows < 24;
-  let polling = false; let childRunning = false; let cancelChild: (() => void) | undefined;
+  let polling = false; let refreshPending = false; let childRunning = false; let cancelChild: (() => void) | undefined;
   const priorPush = client.onPush; const priorClose = client.onClose; const priorRaw = !!terminal.isRaw;
   const removers: (() => void)[] = []; const timers: ReturnType<typeof setInterval>[] = [];
   let resolveDone: () => void = () => {}; const done = new Promise<void>(resolve => { resolveDone = resolve; });
@@ -157,8 +159,20 @@ export async function runConsole(options: ConsoleOptions): Promise<void> {
     safeWrite(`${reason ? reason + "\n" : ""}Left console; the hub keeps running (ahub kill stops it).\n`);
     resolveDone();
   };
+  const reconcileDetail = () => {
+    if (state.detail === undefined || typeof state.detail !== "object" || (state.panel !== 3 && state.panel !== 4)) return;
+    const id = state.detail.id;
+    if (id === undefined || id === null) return;
+    const key = state.panel === 3 ? "flowRevision" : "revision", rows = state.panel === 3 ? state.tasks : state.queue;
+    const fresh = rows.find(row => String(row.id) === String(id));
+    if (!fresh || state.detail[key] !== fresh[key]) {
+      state.detail = undefined; state.detailOffset = 0;
+      notice(`detail ${id} changed or is no longer available`);
+    }
+  };
   const refresh = async () => {
-    if (polling || !active) return; polling = true;
+    if (polling || !active) { if (active) refreshPending = true; return; }
+    polling = true;
     try {
       const panels = state.mode === "panels" && !plain;
       const replies = await Promise.all([
@@ -167,6 +181,7 @@ export async function runConsole(options: ConsoleOptions): Promise<void> {
       ]);
       if (!active) return;
       const [status, budget, tasks, queue, ready] = replies;
+      captureConsoleSelection(state);
       if (status.status?.tasks && status.ok !== false) state.taskCounts = status.status.tasks;
       if (status.status?.peers) state.peers = Object.fromEntries(Object.entries(status.status.peers).map(([peer, value]) => [peer, { ...(value as object), ...status.status.roleInfo?.[peer] }]));
       if (status.status && status.ok !== false) {
@@ -182,13 +197,17 @@ export async function runConsole(options: ConsoleOptions): Promise<void> {
           state.tasksKnown = true;
         } }
       if (queue?.ok && state.mode === "panels" && Array.isArray(queue.deliveries)) state.queue = queue.deliveries;
+      reconcileDetail();
       const error = replies.find(reply => reply.ok === false)?.error; if (error) notice(String(error));
       draw();
     } catch (error) { if (active) { notice(String((error as Error).message)); draw(); } }
-    finally { polling = false; }
+    finally {
+      polling = false;
+      if (refreshPending) { refreshPending = false; void refresh(); }
+    }
   };
   const run = options.runCommand ?? ((args, output, finished, commandColumns) => {
-    const child = Bun.spawn([process.execPath, fileURLToPath(new URL("./main.ts", import.meta.url)), "--project", options.cwd, ...args], {
+    const child = Bun.spawn([process.execPath, fileURLToPath(new URL("./main.ts", import.meta.url)), "--project", options.cwd, ...(options.liveTest ? ["--live-test"] : []), ...args], {
       cwd: options.cwd, stdin: "ignore", stdout: "pipe", stderr: "pipe",
       env: { ...process.env, COLUMNS: String(commandColumns), NO_COLOR: "1" },
     });
@@ -221,7 +240,7 @@ export async function runConsole(options: ConsoleOptions): Promise<void> {
       const result = await client.request(action.panel === 3 ? { t: "task", op: "task_show", args: { id: action.id } } : { t: "queue", op: "show", id: action.id }, 3000);
       // A late reply is for the panel and row it was asked for: once the person has moved on, it would show one item
       // while the keys act on another, so it is dropped.
-      if (!active || state.mode !== "panels" || state.panel !== action.panel || state.help || state.detail !== undefined || String(panelRows(state)[state.selection]?.id) !== action.id) return;
+      if (!active || state.mode !== "panels" || state.panel !== action.panel || state.help || state.detail !== undefined || String(selectedPanelRow(state)?.id) !== action.id) return;
       state.detailOffset = 0;
       state.detail = result.ok === false ? String(result.error) : action.panel === 3 ? labeled(String(result.text)) : result.delivery ?? "delivery not found";
       draw(); return;

package/src/cli/help.ts

@@ -11,6 +11,7 @@ const SECTIONS: [string, [usage: string, description: string][]][] = [
     ["ahub projects remove <id>", "forget a stopped registration (keeps project files)"],
     ["ahub setup [--yes]", "install or update the Claude Code channel plugin from this package, then run doctor"],
     ["ahub init [--profile dev|research|writing|general] [--shadow] [--dry-run --json]", "preview or write .agenthub/config.json and the AGENTS.md marker block (drops a legacy CLAUDE.md block)"],
+    ["ahub --live-test [--project <path|id>] <command> [args...]", "user-authorized operational console delegation; ordinary calls retain peer identity; person-authored content refuses"],
     ["ahub help [command]", "this help, or one command's entries; also --help and -h"],
     ["ahub version | --version", "print the installed version"],
   ]],
@@ -64,7 +65,7 @@ const SECTIONS: [string, [usage: string, description: string][]][] = [
     ["ahub pause|resume <peer>", "hold a peer's deliveries in its queue / release them"],
     ["ahub queue list [--peer <id>] [--json] [--color=auto|always|never]", "inspect durable deliveries"],
     ["ahub queue show <delivery-id> [--json] [--color=auto|always|never]", "inspect one delivery and revision"],
-    ["ahub queue resolve <delivery-id> --action completed|retry|discard --reason <text>", "release a delivery held as needs_review: mark it completed, retry it or discard it"],
+    ["ahub queue resolve <delivery-id> --action completed|retry|discard --reason <text> [--revision N]", "resolve a queued or needs_review delivery; --revision binds the displayed row instead of a fresh show"],
   ]],
   ["Tasks and review", [
     ["ahub board import github --label <label> [--milestone <milestone>] [--repo <owner/repo>]", "person only: read bounded open issues into deduplicated Backlog; never writes GitHub"],
@@ -77,7 +78,8 @@ const SECTIONS: [string, [usage: string, description: string][]][] = [
     ["ahub backlog pull|return <id>", "person only: pull backlog into To Do or return ownerless proposed work; --backlog on task propose stages unoffered work"],
     ["ahub task show|escalate <id>", "full task with history (PII text included) / hand it to the next peer in escalate_to"],
     ["ahub task role <id> <role|none>", "person only: change bounded catalog guidance on an open task; routing and authority are unchanged"],
-    ["ahub task assign <id> <peer> [--role owner|reviewer]", "name the owner (default) or reviewer; a task that still waits reserves its owner"],
+    ["ahub task assign <id> <peer> [--role owner|reviewer] [--revision N]", "name the owner (default) or reviewer; a task that still waits reserves its owner; --revision refuses stale console actions"],
+    ["ahub task unassign <id> [--role owner|reviewer] [--revision N]", "person only: remove the owner/reservation or reviewer without routing a replacement or stopping native work"],
     ["ahub task label <id> ok|regressed|reverted|incomplete|wrong|abandoned", "your later verdict on an approved task, kept in the research records (research must be on)"],
     ["ahub review <id> approved|changes_requested [note...] [--unmet <item>]...", "give a review verdict on a task"],
     ["ahub route explain <id>", "why a task went where it went, its reserved owner included"],