@staix/agent-hub 0.20.0 → 0.21.0

package/docs/verification/2026-10-27-0.19.0.md

@@ -12,7 +12,7 @@ What changed (see `CHANGELOG.md` for the full list):
 - Agent CLI drift: a daily public-source watch and a planner notice for unverified installed versions (#849, #855); a native version gate for Pi (#843: #847); new verified versions for agy, Jcode, kimi-review, headless Qwen and claude-implementer (#850, #851, #856, #858, #859).
 - Planner work-ready notices (#785: #842) and the lockfile-keyed dependency volume for the remote runner (#793: #846).
 - Sandbox protection for submodule git dirs and `config.worktree` (#862, #866), the Qwen background-task notice fix (#861), conductor error preservation (#812: #839).
-- CI: the suite watchdog stops on lost progress (#516: #870) and CI admission retries a transient GitHub 5xx or 429 (#872: #873).
+- CI: the suite watchdog stops on lost progress (task 516: #870) and CI admission retries a transient GitHub 5xx or 429 (#872: #873).
 
 ## Reviews
 
@@ -31,7 +31,7 @@ Every PR below merged after its hub review, with bot review threads answered and
 | #850 (#843) | cbbe23bd | 2 |
 | #851 (#843) | 0431abff | 1 |
 | #853 (#852) | 4f52cbd4 | 4 |
-| #854 (#515) | 661eb9a1 | 2 |
+| #854 (task 515) | 661eb9a1 | 2 |
 | #855 | 58525a1b | 5 |
 | #856 (#843) | 21fb4a56 | 2 |
 | #857 (#845) | 1ad9b7c7 | 2 |
@@ -42,11 +42,11 @@ Every PR below merged after its hub review, with bot review threads answered and
 | #862 | 3cfefa05 | 4 |
 | #866 (#865) | e02aa141 | 4 |
 | #868 (#867) | 125e82f1 | 2 |
-| #870 (#516) | 8ea5d00b | 4 |
+| #870 (task 516) | 8ea5d00b | 4 |
 | #871 | ae22bb1b | 2 |
 | #873 (#872) | 08590801 | 5 |
 
-Two merges were bound to a hub approval at an earlier head of the same change: #870 (hub task #516 approved at f8ee3e52, merged at d5e16a3c, a rebase onto main with only CHANGELOG context differing) and #873 (hub task #525 approved at a159cc37, merged at 44344f23 after `gh pr update-branch` merged main into it). Each merge was pinned with `--match-head-commit` to the head whose CI was green. #857's first macOS leg and three #873 macOS runs were killed by the pre-#870 1440 s total budget or hit the `test/path-policy.test.ts` hardlink flake below; none of those failures was in the changed code.
+Two merges were bound to a hub approval at an earlier head of the same change: #870 (hub task 516 approved at f8ee3e52, merged at d5e16a3c, a rebase onto main with only CHANGELOG context differing) and #873 (hub task 525 approved at a159cc37, merged at 44344f23 after `gh pr update-branch` merged main into it). Each merge was pinned with `--match-head-commit` to the head whose CI was green. #857's first macOS leg and three #873 macOS runs were killed by the pre-#870 1440 s total budget or hit the `test/path-policy.test.ts` hardlink flake below; none of those failures was in the changed code.
 
 ## Document review
 
@@ -64,7 +64,7 @@ Fourteen documents were stale against the 0.18.0 stamps (af22ee0d). Each was rec
 | `docs/agent-notes/tests.md` | corrected | Scope gains `scripts/progress-tee.sh` (#870); the CI admission retry bound for a 429 or 5xx (#873); Pi fakes must answer `--version` (#847); daemon tests with a GitHub origin and a headless implementer pass `shellDefaultBranchProbe` (#857). History moved to the notes README. |
 | `docs/agent-notes/tasks.md` | corrected | Scope gains `review-scope.ts`, `sdlc-merge.ts`, `sdlc-mirror.ts`; the planner work-ready notice rule (#842); `Tasks.bindShellBranch` as a board writer (#857). Review-scope history moved to the notes README. |
 | `docs/agent-notes/daemon.md` | corrected | Conductor operational refusals (#839); scope gains `agent-drift.ts` and `cli/agents.ts` (#855); validation of instance `model` and `review_scope` (#848, #853). |
-| `docs/agent-notes/README.md` | corrected | Background for the 0.19.0 rules (#852 classifier history, #843 fixtures, #516 watchdog). |
+| `docs/agent-notes/README.md` | corrected | Background for the 0.19.0 rules (#852 classifier history, #843 fixtures, task 516 watchdog). |
 | `docs/agent-notes/benchmarks.md` | no change | The benchmark driver builds `PiPeer` directly, so the #847 preflight does not apply; #862/#866 are covered by the existing `profile()` change rule. |
 | `docs/agent-notes/budget.md` | no change | No budget path changed; the headless implementer still uses `budget.account: "claude"`. |
 | `docs/agent-notes/bus.md` | no change | No `bus.ts` change; the new notices use the existing publish and withdraw paths. |

package/docs/verification/2026-10-28-claude-2.1.311-2.1.312-bash-permission.json

@@ -0,0 +1,635 @@
+{
+  "date": "2026-10-28",
+  "sourceHead": "243d4b535404d911ea2b1c728352d4abd82e5ea6",
+  "producer": "claude-permission-transport-native.py",
+  "producerSha256": "8f8885f7153b3a236f3b3f8ce49a344b908f2af3b3aba8b064762d82d1ecf12a",
+  "fixtureMcp": true,
+  "productionDaemon": false,
+  "hostWrapperRewriting": false,
+  "account": false,
+  "inference": false,
+  "results": [
+    {
+      "mode": "transport",
+      "cases": [
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "allow",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": true,
+          "toolResultErrors": [
+            false
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 0
+            }
+          ],
+          "elapsedSeconds": 0.356,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "deny",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 1
+            }
+          ],
+          "elapsedSeconds": 0.311,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "missing-tool",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 1,
+          "stoppedExternally": false,
+          "mcpCalls": 0,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [],
+          "elapsedSeconds": 0.315,
+          "requests": 1,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "hook-deny",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 1
+            }
+          ],
+          "elapsedSeconds": 0.368,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "hook-allow",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": true,
+          "toolResultErrors": [
+            false
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 0
+            }
+          ],
+          "elapsedSeconds": 0.35,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "mcp-error",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 0
+            }
+          ],
+          "elapsedSeconds": 0.365,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "disconnect",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 0
+            }
+          ],
+          "elapsedSeconds": 0.256,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "pending",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": null,
+          "stoppedExternally": true,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [],
+          "resultFrame": [],
+          "elapsedSeconds": 25.013,
+          "requests": 1,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "deadline",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 1
+            }
+          ],
+          "elapsedSeconds": 0.416,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "allow",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": true,
+          "toolResultErrors": [
+            false
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 0
+            }
+          ],
+          "elapsedSeconds": 0.368,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "deny",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 1
+            }
+          ],
+          "elapsedSeconds": 0.366,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "missing-tool",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 1,
+          "stoppedExternally": false,
+          "mcpCalls": 0,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [],
+          "elapsedSeconds": 0.312,
+          "requests": 1,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "hook-deny",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 1
+            }
+          ],
+          "elapsedSeconds": 0.36,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "hook-allow",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": true,
+          "toolResultErrors": [
+            false
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 0
+            }
+          ],
+          "elapsedSeconds": 0.365,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "mcp-error",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 0
+            }
+          ],
+          "elapsedSeconds": 0.302,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "disconnect",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 0
+            }
+          ],
+          "elapsedSeconds": 0.252,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "pending",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": null,
+          "stoppedExternally": true,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [],
+          "resultFrame": [],
+          "elapsedSeconds": 25.007,
+          "requests": 1,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "deadline",
+          "tool": "Bash",
+          "rewriteBash": false,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 1
+            }
+          ],
+          "elapsedSeconds": 0.426,
+          "requests": 2,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        }
+      ],
+      "certified": true,
+      "account": false,
+      "inference": false,
+      "tool": "Bash",
+      "rewriteBash": false,
+      "serverName": "agent-hub",
+      "permissionTool": "hub_permission_request",
+      "requireToolUseId": true
+    },
+    {
+      "mode": "rewrite",
+      "cases": [
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "allow",
+          "tool": "Bash",
+          "rewriteBash": true,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": true,
+          "toolResultErrors": [
+            false
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 0
+            }
+          ],
+          "elapsedSeconds": 0.324,
+          "requests": 2,
+          "originalCommandExecuted": false,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.311",
+          "binarySha256": "85d8c08707fcfd1e78ffa0204eefbc6ec9e4fe22f375fb2767ef85d957ed3161",
+          "case": "deny",
+          "tool": "Bash",
+          "rewriteBash": true,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 1
+            }
+          ],
+          "elapsedSeconds": 0.31,
+          "requests": 2,
+          "originalCommandExecuted": false,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "allow",
+          "tool": "Bash",
+          "rewriteBash": true,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": true,
+          "toolResultErrors": [
+            false
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 0
+            }
+          ],
+          "elapsedSeconds": 0.363,
+          "requests": 2,
+          "originalCommandExecuted": false,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        },
+        {
+          "version": "2.1.312",
+          "binarySha256": "6b5ec691195e551b02c41df9f7d723f4ea61eaa03c2df90acefe3736f1aeb620",
+          "case": "deny",
+          "tool": "Bash",
+          "rewriteBash": true,
+          "serverName": "agent-hub",
+          "permissionTool": "hub_permission_request",
+          "requireToolUseId": true,
+          "nativeExit": 0,
+          "stoppedExternally": false,
+          "mcpCalls": 1,
+          "fileWritten": false,
+          "toolResultErrors": [
+            true
+          ],
+          "resultFrame": [
+            {
+              "is_error": false,
+              "denials": 1
+            }
+          ],
+          "elapsedSeconds": 0.308,
+          "requests": 2,
+          "originalCommandExecuted": false,
+          "passed": true,
+          "nativeGroupEmpty": true,
+          "binaryUnchanged": true
+        }
+      ],
+      "certified": true,
+      "account": false,
+      "inference": false,
+      "tool": "Bash",
+      "rewriteBash": true,
+      "serverName": "agent-hub",
+      "permissionTool": "hub_permission_request",
+      "requireToolUseId": true
+    }
+  ]
+}