@staix/agent-hub 0.14.0 → 0.16.0

package/docs/verification/2026-10-25-0.16.0.md

@@ -0,0 +1,82 @@
+# 0.16.0 release verification
+
+This record covers release preparation and source review. It claims no installation, running-hub restart or live TUI launch.
+
+## Candidate
+
+Version 0.16.0, built from merged main 0ba9bc09. The release commit 267f39c0 carries the version, CHANGELOG section and bundle, and every document stamp names it. The person directed the release on 2026-10-25. It includes features, so the minor version is bumped (AGENTS.md, Releasing step 1). It ships with agent-mem 0.7.0, which was published first through its tag workflow and read back from the registry (version, tarball and integrity; `latest` 0.7.0) and from its GitHub Release body.
+
+- Always-ask slice 3 (#750): the local worker, Pi and Codex command approvals are classed. A throwing gate asks deny-only. `gh api graphql` is classed by operation (#761), and the literal words around a shell expansion are classed, failing closed where the opaque part can change the class (#763).
+- Memory:
+  - the hub uses the amem library for recall and capture, with no claude-mem worker calls (#752);
+  - verified symbol anchors and `ahub doctor --stale-anchors` (#769);
+  - bounded preparation that keeps historical recall (#770);
+  - current-head code neighbours for graphs and briefs (#771);
+  - the exact agent-mem pin is 0.7.0 (this release's pin PR), passing the hub's own command names.
+- Planner authority: task and release planner bindings are persisted, with up to 8 planners and the `task_planners` floor (#755). Backlog phase dependencies and issue planning (#766). The board-changed notice skips its author, coalesces per planner and is fyi weight when no plan review is needed (#767).
+- Deliverables: `ahub deliverables` and the dashboard badge (#753).
+- Budget: window kinds, source precedence and per-peer notes (#749).
+- The Codex 0.164.0 reviewer is verified with a model-free production receipt (#768).
+- CI: `closing-refs` fails a PR that would close an issue its text only mentions (#760).
+- The project daemon stops through its normal stop on SIGHUP and SIGQUIT too, so memory sync git (detached since agent-mem 0.7.0) never outlives it (#438, #773).
+- The hardcoded operational constants are inventoried and classified (#764). This changes no runtime behaviour.
+- The live receipt of hub-settled held deliveries and peer retries is recorded (#434 AC8, #772).
+
+Still open:
+- agent-hub backlog #436: serve the hub brief and plan guard from the agent-mem library (agent-mem#40 AC6, hub half).
+- The memory sync log fix (#401, PR #748), which waits on the person.
+- agent-mem#40 #425 and #426, the agent-mem backlog #433 and #437, and agent-mem#48 AC3 (three green Ubuntu runs on main).
+
+## Reviews
+
+The planner reviewed every PR. Where a PR changed permissions, process ownership, privacy or memory authority, an independent read-only reviewer also checked it with isolated probes. Every codex-connector thread was fixed or answered, and resolved, before merge. Each PR merged only after CI was green on both OSes at its reviewed head.
+
+| PR | Merge | Review | CI |
+| --- | --- | --- | --- |
+| #749 (#285) | c1ac6368 | Budget window kinds and notes | exact head, success |
+| #750 (#636 s3) | 9fdea5b1 | Always-ask for local, Pi and Codex | exact head, success |
+| #752 (agent-mem#13 P4) | 1e5da2a4 | amem library recall and capture, no claude-mem worker | exact head, success |
+| #753 (#317, #509) | 6f676ac4 | Deliverables list and badge | exact head, success |
+| #755 (#525) | 18d4cb15 | Planner authority persistence | exact head, success |
+| #761 (#756) | dffc4e44 | `gh api graphql` and run/workflow classing | exact head, success |
+| #763 (#762) | 3d939950 | Shell-expansion classing | exact head, success |
+| #766 (#759) | d9e9c546 | Backlog phase dependencies, issue planning | exact head, success |
+| #767 (#758) | ec226720 | Board-changed notice weight and coalescing | exact head, success |
+| #768 (#757) | fd7aee22 | Codex 0.164.0 reviewer receipt | exact head, success |
+| #769 (#684 p3) | 49fef8b6 | Symbol anchors, stale-anchor inspection | exact head, success |
+| #770 (#684) | 066fbe0d | Bounded preparation, historical recall | exact head, success |
+| #771 (#684 p4) | 3d7ed633 | Current-head code neighbours | exact head, success |
+| #764 (#489 H0) | 7c1d2065 | Constants inventory; two rounds | exact head, success |
+| #772 (#434 AC8) | 8e22f56a | Evidence doc; summary reconciled with its tables | exact head, success |
+| #773 (#438) | 6c7fb8bd | Two rounds: stop on four signals, no SIGQUIT core dump; the test timeout kept under the 20 s ceiling | exact head, success |
+| #774 (pin) | 0ba9bc09 | Pin agent-mem 0.7.0. The hub passes its command names; the pinned-version tests and the generation-review placeholder test follow 0.7.0; help lists the person-only --history/--as-of; a new test pins the person gate. Reviewed by an independent read-only reviewer: the codex-review route was unavailable, because the planner was at its WIP cap with #401 | exact head, success |
+
+## Document review
+
+Fourteen documents were stale against the 0.15.0 stamps (ea32305f, and 88caef80 for local-worker.md). Read-only reviewers in four groups checked each one against `git log <stamp>..HEAD` over its paths and the PRs above, and corrected what was wrong.
+
+| Document | Result | Checked claims and correction |
+| --- | --- | --- |
+| `README.md` | corrected | Status 0.16.0 and the verification link. Up to 8 planners with per-task binding (#755), `ahub deliverables` (#753), amem in process with no claude-mem worker (#752), always-ask for local, Pi and Codex (#750). |
+| `docs/quickstart.md` | corrected | Install pin `v0.16.0`. A new "Upgrading to 0.16.0" section: always-ask slice 3, shell-expansion and graphql classing, the memory library, planner lists and the `task_planners` floor, deliverables, budget kinds, code neighbours and `--stale-anchors`, Codex 0.164.0, and `ahub upgrade`. The agent-mem pin is 0.7.0. |
+| `docs/security.md` | corrected | Always-ask coverage and limits after slice 3 (#750). Memory checkpoints and `ask --remember` save candidates only (#752). Code neighbours (#769, #771). Deliverables are person-only (#753). Planner authority (#755). The pin is 0.7.0. |
+| `docs/operations.md` | corrected | The agent-mem pin is 0.7.0. CI hang limits (macOS 1440 s in 30 min). The closing-refs workflow. Always-ask literal-prefix and shell-expansion classing. Deliverables. The #758 notice. Planners edit only the cards they plan. Dropped the "after it is released" wording for #759 and #684 phases 3-4. |
+| `src/cli/help.ts` | corrected | Every command, subcommand and flag compared with main.ts, launch.ts, settings-edit.ts and the native and configured-ACP entries. The `ahub budget` description names each number's kind and source (#749). tsc and help.test pass. |
+| `docs/agent-notes/adapters.md` | corrected | Local and Pi classing at the host execution root; a throwing gate asks deny-only; the Codex interception scope, and pending classed waits denied on stop, watchdog, detach, adoption or turn end (#750). |
+| `docs/agent-notes/daemon.md` | corrected | The `action_policy` enforcement list (#750). The planner setting of 1 to 8 ids (#755). The in-process amem client and shutdown order (#752). Memory symbols and stale anchors (#769, #770). Code neighbours (#771). The scope gains the memory modules and `src/cli/memory.ts`. The memory sync stop rule came with #773. |
+| `docs/agent-notes/budget.md` | corrected | windowKind as the only classifier; gating and headroom precedence; no-quota peers as information only; the scope gains window-kind.ts and budget-notes.ts (#749). |
+| `docs/agent-notes/tasks.md` | corrected | Completion-note symbol anchors (#769, #771). Naming a planner is refused for closed or PII work (#755). Backlog identity-change screening and a truncated grooming walk (#766). |
+| `docs/agent-notes/tests.md` | corrected | The closing-refs rule (#760). MemoryClient is the in-process amem store; FakeMemoryClient for worker-shaped tests (#752). |
+| `docs/agent-notes/local-worker.md` | corrected | Permit wrappers pass parsed arguments for always-ask (#750). Capture `sourceId` and project-relative paths for read, write and edit only (#752). |
+| `docs/agent-notes/README.md` | corrected | Background only: why closing-refs exists and what it can't reach. |
+| `docs/agent-notes/bus.md` | no change | bus.ts changed only a comment; the envelope plan-review refs are additive; the #767 coalescing rule lives in tasks.md. |
+| `docs/agent-notes/benchmarks.md` | no change | #750 adds an optional permit input that the benchmark permit ignores; there is no action gate there. |
+
+The AGENTS.md area lists and the `docs/verified.json` paths gain the release's new files: changed-tests.mjs, check-closing-refs.mjs and closing-refs.yml (Tests); window-kind.ts and budget-notes.ts (Budget); the memory symbol, code-neighbour and stale-anchor modules and `src/cli/memory.ts` (Daemon).
+
+## Known gaps, not blocking
+
+- `docs/operations.md` still says "native memory remains shared according to claude-mem aliases". The code behind it is agent-mem's `projectChain`, and this release didn't change it.
+- `memory.worker_url` is still listed as a machine-local key. The config loaders accept it, but it's ignored at runtime.
+- Some agent-mem 0.7.0 messages still name `amem` under `ahub memory` (the sync remote hint, and the --all-projects and --to refusals): the library takes no command names there. This is an upstream follow-up.
+- The live legs are the person's: a real local or Pi classed prompt (a private turn included), a real Codex command-approval prompt, the `task_planners` refusal on downgrade, and the dashboard Deliverables chip and Code neighbours toggle.

package/docs/verified.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "documents": {
     "README.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "package.json",
         "src/",
@@ -11,14 +11,14 @@
       ]
     },
     "docs/security.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "src/",
         "templates/"
       ]
     },
     "docs/operations.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "package.json",
         "src/",
@@ -35,7 +35,7 @@
       ]
     },
     "docs/quickstart.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "package.json",
         "src/",
@@ -43,7 +43,7 @@
       ]
     },
     "docs/agent-notes/adapters.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "src/adapters/",
         "src/pi/",
@@ -69,11 +69,13 @@
         "src/cli/configured-acp-entry.ts",
         "src/cli/preview.ts",
         "src/hub/roster.ts",
-        "src/hub/instances.ts"
+        "src/hub/instances.ts",
+        "src/hub/action-enforce.ts",
+        "src/hub/permission-payload.ts"
       ]
     },
     "docs/agent-notes/benchmarks.md": {
-      "verifiedAgainst": "88caef80a31cf63ec182881e2c9bb48b0844e7e8",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "scripts/benchmarks/",
         "test/benchmarks/",
@@ -85,7 +87,7 @@
       ]
     },
     "docs/agent-notes/budget.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "src/hub/budget.ts",
         "src/cli/statusline-tee.ts",
@@ -100,11 +102,16 @@
         "src/hub/instance-budget.ts",
         "src/hub/claude-state.ts",
         "src/adapters/definitions/native-channel-state.ts",
-        "src/hub/usage-rollup.ts"
+        "src/hub/usage-rollup.ts",
+        "src/adapters/kimi-wire-usage.ts",
+        "src/hub/kimi-usage.ts",
+        "src/hub/token-window.ts",
+        "src/hub/window-kind.ts",
+        "src/hub/budget-notes.ts"
       ]
     },
     "docs/agent-notes/bus.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "src/hub/bus.ts",
         "src/hub/envelope.ts",
@@ -119,7 +126,7 @@
       ]
     },
     "docs/agent-notes/daemon.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "src/hub/daemon.ts",
         "src/hub/control-client.ts",
@@ -178,11 +185,19 @@
         "src/cli/memory.ts",
         "src/adapters/definitions/native-channel-state.ts",
         "src/hub/task-code-group.ts",
-        "src/cli/status-lines.ts"
+        "src/cli/status-lines.ts",
+        "src/hub/config-tier.ts",
+        "src/hub/config-edit.ts",
+        "src/hub/config-edit-host.ts",
+        "src/hub/claude-launch-proof.ts",
+        "src/hub/memory-symbols.ts",
+        "src/hub/memory-code-overlay.ts",
+        "src/hub/memory-code-head.ts",
+        "src/hub/memory-stale-anchors.ts"
       ]
     },
     "docs/agent-notes/local-worker.md": {
-      "verifiedAgainst": "88caef80a31cf63ec182881e2c9bb48b0844e7e8",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "src/adapters/local-worker.ts",
         "src/local/",
@@ -202,7 +217,7 @@
       ]
     },
     "docs/agent-notes/tasks.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "src/hub/tasks.ts",
         "src/hub/board.ts",
@@ -231,11 +246,14 @@
         "src/hub/review-findings.ts",
         "src/hub/plan-conformance.ts",
         "src/hub/sdlc-metrics.ts",
-        "src/hub/spec-read.ts"
+        "src/hub/spec-read.ts",
+        "src/hub/workflow.ts",
+        "src/hub/deliverables.ts",
+        "src/hub/deliverable-files.ts"
       ]
     },
     "docs/agent-notes/tests.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "test/",
         "scripts/check.sh",
@@ -250,11 +268,14 @@
         "src/local/sandbox.ts",
         "src/models/mlx.ts",
         "src/cli/upgrade-interactive.ts",
-        "src/adapters/conformance/"
+        "src/adapters/conformance/",
+        "scripts/changed-tests.mjs",
+        "scripts/check-closing-refs.mjs",
+        ".github/workflows/closing-refs.yml"
       ]
     },
     "docs/agent-notes/README.md": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "src/cli/console-state.ts",
         "src/cli/attention.ts",
@@ -263,7 +284,7 @@
       ]
     },
     "src/cli/help.ts": {
-      "verifiedAgainst": "d21a9ccc0a7916f5fb885343c3a585e813027d67",
+      "verifiedAgainst": "267f39c008428b3a3fc7ae67c64198ef0f93bbee",
       "paths": [
         "src/cli/main.ts",
         "src/cli/launch.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@staix/agent-hub",
-  "version": "0.14.0",
+  "version": "0.16.0",
   "description": "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   "license": "MIT",
   "type": "module",
@@ -17,7 +17,7 @@
     "bun": ">=1.4.2"
   },
   "dependencies": {
-    "@staix/agent-mem": "0.4.0"
+    "@staix/agent-mem": "0.7.0"
   },
   "devDependencies": {
     "@modelcontextprotocol/sdk": "^1.27.1",

package/plugins/agent-hub/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hub",
-  "version": "0.14.0",
+  "version": "0.16.0",
   "description": "Channel between Claude Code and the agent-hub daemon: peer messages from Codex, Kimi and the local worker arrive as channel events; hub_send replies.",
   "author": {
     "name": "Young Joon Lee",