@staix/agent-hub 0.12.36 → 0.12.38

package/docs/verification/2026-10-20-0.12.38.md

@@ -0,0 +1,56 @@
+# 0.12.38 release verification
+
+This record covers release preparation and source review. It does not claim publication, installation, a running-hub restart or native/live acceptance.
+
+## Candidate
+
+Version 0.12.38, control protocol 16 (unchanged), from merged main `c26b4495`. The person directed the release on 2026-10-20.
+
+- #533 (PR #539, hub task #234): Kimi joins the fresh reviewer pool with `review_mode: "fresh"` and Kimi Code 2.2.0. It runs in a private `KIMI_CODE_HOME` with a clean working directory and exactly two task-bound hub tools. A replaced review can no longer be read or approved by the old child.
+- #479 (PR #541, hub task #192): a released recovery hold clears the hub deferral mode after its flush, so later notices are not deferred by mistake.
+- #542 D2/D3 (PR #544, hub task #243): guarded config changes waiting for a reload stay visible in status, the console and Settings, and a peer start warns `config retained: <keys>; run ahub settings reload`.
+- #519 follow-up (PR #545, hub task #239): a fresh Codex review refused for an unusable credential root names its path class without the path or contents.
+- #542 D1 (PR #546, hub task #242): a reply past the hop cap reports the hop cap, not "no other peers attached".
+- #485 (PR #543, hub tasks #241 and #249): Antigravity (`agy`) as an optional, off-roster, pull-only implementer/verifier peer launched by the person, with typed native hooks bound to one daemon, launch, session and project.
+- Still open (unchanged from 0.12.37): live native clients, installed managed-Pi #418 AC8 (#142), #438 AC7, the native console settings leg (#439 AC5), real upgrades with reattach (#463) and with a managed terminal and cancelled rows (#478), a live fresh Codex review with a real account, and a live split of a real memory home (#536).
+- New open legs:
+  - The agy live TUI/account leg: attach, the plugin MCP tool inventory, a `hub_send` round trip, the launch slot released on terminal close, and native hook phases (#485, hub task #251, after the person's `ahub upgrade`).
+  - Kimi's interactive-TUI coexistence and usage checks (#533, `docs/smoke.md`).
+- Deferred: agy native reads into Facts (#555), split from #249 as a feature gap.
+
+## Reviews
+
+| PR | Final head | Review | CI |
+| --- | --- | --- | --- |
+| #539 (#533) | 3ca48159 | planner review with connector threads answered | exact head, success |
+| #541 (#479) | 54fed4c4 | planner review | exact head, success |
+| #544 (#542 D2/D3) | 860a3b4c | planner review with connector threads answered | exact head, success |
+| #545 (#519) | cb1de56f | planner review | exact head, success |
+| #546 (#542 D1) | 48b1a44c | planner review | exact head, success |
+| #543 (#485) | abbe87e0 | source step approved at 6c8c0c70 (#241); integration merge and four fix rounds reviewed by the planner (#249): six connector threads, five fixed red-first and one deferred to #555; affected tests 38 pass, 1 skip, 0 fail at abbe87e0 | exact head, success on Ubuntu and macOS with all four seeded shards; the local full check was deferred twice by host admission (Maru-owned dotfiles jobs), so CI on both platforms is the full gate |
+
+## Document review
+
+Eleven documents were stale against the 0.12.37 stamps (`9a4869c5`). Two fresh-context reviewers read them against the six PRs above. One took the person-facing documents and the other the agent notes, `AGENTS.md` and the stamp paths. Each applied its own edits after the planner spot-checked its claims against the code.
+
+| Document | Result | Checked claims and correction |
+| --- | --- | --- |
+| `README.md` | corrected | Status 0.12.38 (protocol 16 unchanged); Antigravity listed as optional; the verification link; open legs add the agy live TUI leg (#251) and Kimi's TUI coexistence and usage checks (#533). |
+| `docs/quickstart.md` | corrected | Install pin `v0.12.38`; "Upgrading to 0.12.38": restart Claude for the hop-cap reply (#546), agy via `ahub roster add agy` and `ahub agy` (#485), Kimi fresh reviewer with `review_mode: "fresh"` and Kimi Code 2.2.0 (#533), retained config (#542); the 0.12.37 notes kept for upgrades from 0.12.36 or earlier. |
+| `docs/operations.md` | corrected | Fresh reviewer pool adds Kimi (declaration, start command, isolation paragraph, declared-kind modulo); the agy reviewer slot reason; a new "Optional Antigravity (agy) peer" section (launcher refusals, owned plugin files, pull-only, role ceiling, unmanaged native permissions). |
+| `docs/security.md` | corrected | Credential-root refusal names only the path class (#545); the fresh Kimi reviewer is a native tool-authority boundary, not a sandbox (#533); agy's posture: unmanaged native tools, role ceiling, launcher-owned plugin files, socket-bound hook authority, 1 MiB hook input cap (#485). |
+| `docs/agent-notes/adapters.md` | corrected | Scope adds `native-hook-launch.ts`, `peer-catalog.ts` and the `agy`/`kimi`/`jcode` MCP writers; `isSupportedPeer` for declared instances; the full test list for adding a peer and `builtinCliEntries`; TUI launchers include agy; the isolation receipt for `nativePolicy` backends, the `taskMcp` port, `admit` and `watchCurrent` (#533); agy launcher refusals (#543); the reviewer-pool rule moved to `tasks.md`. |
+| `docs/agent-notes/bus.md` | corrected | Report a send from `Bus.publishResult` and print the hop-cap notice (#546); agy is pull-only; a successful recovery release clears `deferHub` after the flush (#541). |
+| `docs/agent-notes/daemon.md` | corrected | Scope adds `native-hook-launch.ts`, `src/cli/output.ts`, `src/ui/index.html`; retained config and `cli.launchConfigKeys` (#544); launchers take the accepted start mode; facts-hook native mode and refusal of plain `facts` for a `factsHook` peer; the `native_hook_launch`/`native_facts` control protocol (#543). |
+| `docs/agent-notes/tasks.md` | corrected | `routing.allowedRoles` role ceiling (#543); review authority bound to head and revision through `reviewBindingCurrent` (#533); the reviewer-pool declared-kind modulo rule. |
+| `docs/agent-notes/tests.md` | corrected | Hang bounds per OS live in `check.yml`; Kimi reviewer fakes set `KIMI_CODE_HOME`; agy tests use a fake `agy` on PATH and a temporary `HOME`. |
+| `docs/agent-notes/budget.md` | no change | The changed paths touch no quota, pause or handoff rule; agy has no budget block, and the Kimi reviewer variant keeps its base kind's account. |
+| `docs/agent-notes/README.md` | no change | Stale only because `console-state.ts` gained the retained-config summary; its index still matches the notes. |
+
+`AGENTS.md` lists the new adapter and daemon paths; `docs/verified.json` adds them to the `adapters.md` and `daemon.md` stamp paths.
+
+## Checks
+
+- Each merged PR's exact-head CI passed (table above). The release branch is main `c26b4495` plus the version, release notes and document corrections; the bundle is rebuilt with the pinned Bun 1.4.2 and is fresh; `tsc` is clean.
+- The eleven stale stamps are restamped to the release commit `adf2d5fd` (reviewed against main `c26b4495`; the release commit adds only the version, notes and documents); `node scripts/check-docs.mjs` reports 0 stale documents. `--require-fresh` runs again on the merged main before the tag.
+- Exact-head CI on the release PR.

package/docs/verified.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "documents": {
     "README.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "package.json",
         "src/",
@@ -11,14 +11,14 @@
       ]
     },
     "docs/security.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "src/",
         "templates/"
       ]
     },
     "docs/operations.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "package.json",
         "src/",
@@ -35,7 +35,7 @@
       ]
     },
     "docs/quickstart.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "package.json",
         "src/",
@@ -43,7 +43,7 @@
       ]
     },
     "docs/agent-notes/adapters.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "src/adapters/",
         "src/pi/",
@@ -60,11 +60,16 @@
         "src/hub/start-mode.ts",
         "src/hub/terminal-open.ts",
         "test/registry-guard.test.ts",
-        "test/registry-guard.baseline.json"
+        "test/registry-guard.baseline.json",
+        "src/hub/native-hook-launch.ts",
+        "src/hub/peer-catalog.ts",
+        "src/cli/agy-mcp.ts",
+        "src/cli/kimi-mcp.ts",
+        "src/cli/jcode-mcp.ts"
       ]
     },
     "docs/agent-notes/benchmarks.md": {
-      "verifiedAgainst": "03209040585a57c7c0a1f2b81f6be814df88267c",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "scripts/benchmarks/",
         "test/benchmarks/",
@@ -76,7 +81,7 @@
       ]
     },
     "docs/agent-notes/budget.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "src/hub/budget.ts",
         "src/cli/statusline-tee.ts",
@@ -93,7 +98,7 @@
       ]
     },
     "docs/agent-notes/bus.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "src/hub/bus.ts",
         "src/hub/envelope.ts",
@@ -107,7 +112,7 @@
       ]
     },
     "docs/agent-notes/daemon.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "src/hub/daemon.ts",
         "src/hub/control-client.ts",
@@ -154,7 +159,11 @@
         "src/hub/instance-config.ts",
         "src/hub/instance-execution.ts",
         "src/hub/usage.ts",
-        "src/hub/claude-state.ts"
+        "src/hub/claude-state.ts",
+        "src/hub/memory-profile.ts",
+        "src/hub/native-hook-launch.ts",
+        "src/cli/output.ts",
+        "src/ui/index.html"
       ]
     },
     "docs/agent-notes/local-worker.md": {
@@ -179,7 +188,7 @@
       ]
     },
     "docs/agent-notes/tasks.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "src/hub/tasks.ts",
         "src/hub/board.ts",
@@ -196,11 +205,14 @@
         "src/hub/settled-roles.ts",
         "src/adapters/definitions/builtin-metadata.ts",
         "src/hub/bus.ts",
-        "src/hub/review-brief.ts"
+        "src/hub/review-brief.ts",
+        "src/hub/reviewer-pool.ts",
+        "src/hub/reviewer-pool-config.ts",
+        "src/hub/release-admission.ts"
       ]
     },
     "docs/agent-notes/tests.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "test/",
         "scripts/check.sh",
@@ -219,7 +231,7 @@
       ]
     },
     "docs/agent-notes/README.md": {
-      "verifiedAgainst": "24b1637b6d6a964bd53708b3330ff442afe63f4e",
+      "verifiedAgainst": "adf2d5fd2fc2e9f5ce5b5e9daf594269de227238",
       "paths": [
         "src/cli/console-state.ts",
         "src/cli/attention.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@staix/agent-hub",
-  "version": "0.12.36",
+  "version": "0.12.38",
   "description": "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   "license": "MIT",
   "type": "module",
@@ -17,7 +17,7 @@
     "bun": ">=1.4.2"
   },
   "dependencies": {
-    "@staix/agent-mem": "0.3.1"
+    "@staix/agent-mem": "0.4.0"
   },
   "devDependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",

package/plugins/agent-hub/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hub",
-  "version": "0.12.36",
+  "version": "0.12.38",
   "description": "Channel between Claude Code and the agent-hub daemon: peer messages from Codex, Kimi and the local worker arrive as channel events; hub_send replies.",
   "author": {
     "name": "Young Joon Lee",