@staix/agent-hub 0.25.0 → 0.27.0

package/docs/specs/2026-11-01-research-campaigns-design.md

@@ -218,14 +218,14 @@ Protocol approval:
 - This block lives only in the untracked `.agenthub/config.local.json`. A tracked or shared file naming it throws at load, the `checks.remote` precedent.
 - It is added to `ALL_MACHINE_LOCAL` and is a structural tier-2 key for `ahub settings edit`. Its writes are person only.
 - `name` follows the id rule. At most 16 runners.
-- Revocation sets `revoked: true`. The key is kept, so old receipts still show who signed them, but a revoked key verifies nothing new.
+- Revocation sets `revoked: true`. The key is kept, so old receipts still show who signed them, but a revoked key verifies nothing new. Readback retains the key identity that verified the stored receipt and reports its current status separately (active, revoked, replaced or unavailable); a later config change never rewrites the receipt's as-of-signing provenance.
 - The hub stores no private key.
 
 ### AttemptReceiptV1
 
 The runner signs `"agent-hub.runner-receipt/v1\0" + canonical JSON of the receipt body` with Ed25519. The hub verifies with `node:crypto`.
 
-The body is `{ receiptId, runner, projectId, attemptId, protocolHash, codeCommit, imageDigest, containers: [{ id, role: "candidate" | "evaluator" | "other" }], mounts: [{ container, path, readOnly }], network: "none" | "restricted" | "open", resourceLimits, startedAt, endedAt, exitStatus, outputs: [{ name, sha256 }], metricsFile?: { name, sha256 } }`.
+The body is `{ receiptId, runner, projectId, attemptId, protocolHash, codeCommit, imageDigest, containers: [{ id, role: "candidate" | "evaluator" | "other" }], mounts: [{ container, path, readOnly }], network: "none" | "restricted" | "open", resourceLimits, startedAt, endedAt, exitStatus, outputs: [{ name, sha256 }], metricsFile?: { name, sha256 } }`. The identity fields `receiptId`, `runner`, `projectId`, `attemptId` and `protocolHash` are required; all observed fields are optional and an omitted observation remains `unknown`.
 
 Verification refuses before any write when any of these holds:
 - the runner is unknown or revoked;
@@ -236,7 +236,7 @@ Verification refuses before any write when any of these holds:
 
 Each mount also carries `purpose: "evaluator-code" | "evaluator-data" | "candidate-output" | "other"`.
 
-A verified receipt appends one `attestation` event, and its fields are `runner-attested`. `sealed` becomes verified only when every condition holds:
+A verified receipt appends one host-generated `attestation` event, and its fields are `runner-attested`. The declared event parser refuses caller-supplied attestation events. Runner fields are projected per receipt, separately from declared and host-observed evidence; missing fields remain `unknown`. A matching `codeCommit` may attest the match only when the protocol names that exact commit. For a deliverable-based protocol, the signed commit remains an independent runner claim and the code-to-deliverable match stays `unknown`; it is never a host observation. `sealed` becomes verified only when every condition holds:
 - at least one container has role `candidate` and at least one has role `evaluator`, and their ids are disjoint and unique;
 - every mount's `container` names a listed container;
 - at least one mount has purpose `evaluator-code` or `evaluator-data` and is on an evaluator container;
@@ -244,7 +244,9 @@ A verified receipt appends one `attestation` event, and its fields are `runner-a
 
 Missing, empty or inconsistent isolation evidence leaves `sealed` declared or unverified, never verified.
 
-A receipt with a known `receiptId` and identical bytes is a no-op. The same `receiptId` with different bytes refuses.
+A receipt with a known `receiptId` and identical canonical signed bytes (canonical receipt body and signature) is a no-op, including after its signing key is revoked, replaced or removed. Replay returns the stored proof without a new verification, event or write. The same `receiptId` with different canonical signed bytes refuses. Any new receipt id must pass verification against the current registration and key status; an unknown or revoked key therefore admits nothing new.
+
+The stored receipt, its `attestation` event and the first incompatible database-format marker advance share one transaction. Readers support hub.db format 2 while opening a fresh or legacy database keeps baseline format 1; only the first successful receipt insertion advances it to format 2. A rejected receipt or failed transaction advances nothing. The `research_runners` recovery floor protects both stored receipts and a raw runner config key independently of the earlier research recovery floors. Release-equality integrity includes the stored receipt count and row digest only when receipts exist. Accepted registrations and raw key presence remain config/feature-floor inputs, not board-state equality inputs, so pending file edits and legacy snapshots without runner rows can release normally.
 
 ### Delivery
 
@@ -265,15 +267,16 @@ All new tables live in `hub.db`, created in the `Board` constructor with `CREATE
 | `research_protocols` | `hash` | campaign id and revision, body JSON, by, at |
 | `research_plans` | `hash` | campaign id, body JSON, by, at |
 | `research_attempts` | `attempt_id`, unique `(project, idempotency_key)` | protocol hash, task id, phase, retry_of, reproduces, by, at |
-| `research_attempt_events` | `(attempt_id, seq)`, unique `receipt_id` when present | kind, provenance, body JSON, at |
+| `research_attempt_events` | `(attempt_id, seq)`, unique `(project, idempotency_key)` | kind, authority-derived provenance, body JSON (receipt id for an attestation), at |
+| `research_runner_receipts` | `receipt_id`, unique `(attempt_id, event_seq)` | canonical receipt, signature, signing public key, body hash, by, at, private |
 
-`board.hasResearchState()` reports whether any row exists. Readback is paginated: at most 50 rows per call, with a cursor.
+`board.hasResearchState()` reports whether any row exists. Campaign, attempt and event readback is paginated: at most 50 primary rows per page, with a cursor. The runner slice bounds signed receipts to 64 per attempt and projects them separately; a later expansion needs a reviewed receipt-page contract.
 
 ## Wire names
 
 | Surface | Name | Who |
 |---|---|---|
-| CLI | `ahub study draft <parent> <contract.json>`, `study revise <id> <revision> <contract.json>`, `study approve <id> <revision>`, `study close <id> <revision> --reason`, `study show [<id> | --after <id>] [--json]`, `study experiments [--campaign <id>] [--json]`, `study attest <attempt> <field> <value>`, `study receipt <file>` | approve, attest and receipt are person only; draft and revise are person or planner; show is anyone |
+| CLI | `ahub study draft <parent> <contract.json>`, `study revise <id> <revision> <contract.json>`, `study approve <id> <revision>`, `study close <id> <revision> --reason`, `study show [<id> | --after <id>] [--json]`, `study experiments (--campaign <id> [--after <n>] | --attempt <ra-id> | --plan <hash> --baseline <ra-id> --variant <ra-id>) [--json]`, `study attest <attempt> <field> <value>`, `study receipt <file>` | approve, attest and receipt are person only; draft and revise are person or planner; show and experiments are anyone. `experiments` ships in #602 in exactly those three closed forms; `attest` and `receipt` are not built yet (see the #602 row) |
 | Hub tools | `hub_study_draft` and `hub_study_revise` (configured planner only, through `planningAuthority`; they store drafts and never approve), `hub_study_show` (read-only; no id lists this project's campaigns as receipts, one page of at most 50 as `{ campaigns, next? }`, and `after` continues from the `next` of the previous page), `hub_study_handoff` (bound task owner), `hub_experiment_record` (`kind`: `protocol`, `plan`, `attempt`, `event` or `receipt`; task owner), `hub_experiment_show` (read-only) | none of them approves or attests |
 | CLI (person only) | `ahub study approve-protocol <hash>` | person |
 | Control | `study` (console role, CLI only) | person |
@@ -296,6 +299,17 @@ Each slice amends this spec in its own PR if it must differ, and updates `docs/d
 | #601 | #930 T3, AC5 and AC6 | `ahub study` draft, revise, approve, close and show; `hub_study_draft`, `hub_study_revise`, `hub_study_show` and `hub_study_handoff`; the privacy stubs; role guidance in `templates/`; the three-source, two-peer example |
 | #602 | #932 T3, AC5 and AC6 | `ahub study experiments`, `attest` and `receipt`; `hub_experiment_show`; the synthetic CPU-only fixture; the rerun checklist in `docs/profiles.md` |
 
+**As built in the #602 PR (amended here, because the build differs from this row).** Built: `ahub study experiments` in its three closed forms, the read-only `hub_experiment_show` (a read for every local peer, in `STUDY_TOOLS`, the read-only tool lists and `SESSION_READ_OPS`), the synthetic CPU-only fixture `test/research-experiments-fixture.test.ts`, and the person-authored rerun checklist, which lives in `docs/operations.md` ("Experiment readback") with a pointer from `docs/profiles.md`. Not built, and not needed for AC5 or AC6: `ahub study attest`, `ahub study receipt` and the `hub_experiment_record` tool. `Tasks.experimentRecord` and its receipt kind exist and are tested, but no tool, daemon case or CLI calls them yet, so until that slice lands the readback shows only what a test or a later slice recorded. Each of those writers needs its own authority review (person-only attest and receipt, task-owner record) and is a separate change.
+
+**Task 615 record relay.** `hub_experiment_record` passes the whole inert envelope to
+`Tasks.experimentRecord` with the authenticated caller identity. Its five existing kinds are `protocol`,
+`plan`, `attempt`, `event` and `receipt`. Ordinary records require the current in-progress owner of a bound
+unit in the current approved campaign; the person may relay a signed runner receipt through the existing
+`USER` branch. This is not a new attestation or approval authority. All PII turns refuse before dispatch,
+read-only callers cannot mutate, and arguments/results are excluded from hub-managed memory capture.
+The relay returns the method's bounded record metadata only and performs no execution, signing or
+verification itself. `ahub study attest` and `ahub study receipt` remain separate, unimplemented forms.
+
 ## Departures from the issues
 
 - Runner registration is person only in V1. #1018 proposed "the person or conductor". A public key is a trust root, so the conductor path is deferred until a reviewed change gives it the same confirmation as other trust settings.

package/docs/verification/2026-11-01-0.26.0.md

@@ -0,0 +1,54 @@
+# 0.26.0 release verification
+
+This record covers release preparation and source review. It claims no installation, no running-hub upgrade to 0.26.0 and no live TUI launch.
+
+## Candidate
+
+Version 0.26.0, prepared from main f14cb83b (6 commits since v0.25.0, 3 of them `feat`; bump rule: minor). The release commits carry the version, the CHANGELOG section, the bundle and the documentation stamps.
+
+## Reviews
+
+Pull requests named by the commits since v0.25.0: #1052, #1051, #1050, #1046, #1049, #1045.
+
+Each merged after a claude `hub_review` approval with exact-head CI green, no unresolved review thread and no pending change request:
+
+- #1045 (task 607, staged upgrades): approved at 54298320, exact-head CI run 41284968505. The board bound the approval to 5b55eaa7, because hub 0.23.1 refuses in_review re-files; the verdict note names the delta to 54298320.
+- #1049 (task 614, re-review an approved task at a new head): approved at c0768919, run 41288118624.
+- #1046 (task 608, default agent set): approved at 855d1c4e, run 41290278469 (the aggregate jobs re-run on attempt 2 to refresh GitHub's rollup). The board bound it to 5bb4d8ca; the verdict note names the delta.
+- #1050 (task 600, signed runner receipts): approved at 1333c1ec, run 41298012917, after two Important findings were fixed. The board bound it to 0be7de7d; the verdict note names the main merge in between.
+- #1051 (task 613, ORCA_* scrub): approved at b9e544ab, run 41304275881, after two Important test-rule findings were fixed.
+- #1052 (task 610, sticky project runtime and capture pruning): approved at de1cf56c, run 41306542595 attempt 2 (attempt 1 stopped at the CI admission step before any test), after three Important findings were fixed.
+
+Independent OCR read-only reviews ran on #1045, #1050 and #1052.
+
+## Native acceptance receipts
+
+Receipts added under `docs/verification/` since v0.25.0: none.
+
+This list is read from the repository, never written by hand. Native acceptance and the person's release consent are separate records: consent is `ahub sdlc authorize-release 0.26.0`, person only, and is not recorded in this file. The tag run refuses without it.
+
+## Document review
+
+Stale at preparation (`node scripts/check-docs.mjs`): README.md, docs/agent-notes/{README,adapters,benchmarks,budget,bus,daemon,tasks,tests}.md, docs/operations.md, docs/quickstart.md, docs/security.md and src/cli/help.ts. Most were stamped at aaccc30b; benchmarks.md at ce8da3ec. Three independent read-only reviews read each one against the diff of its covered sources since its stamp. They found:
+
+- README.md: control protocol 17 (accepts 16), `ahub up` opening claude and codex, per-project `ahub upgrade` with the CLI and plugin updated separately, and the report link.
+- docs/quickstart.md: the v0.26.0 tag, per-project upgrade, and a new "Upgrading to 0.26.0" section.
+- src/cli/help.ts: `init` inheriting `start.agents`, `research.runners` under `settings edit`, and the doctor pruning rows. src/cli/main.ts gained `--project` in the upgrade usage line.
+- docs/operations.md: the guide header (0.26.0, protocols 16 through 17), the "planned 0.26.0" table row, re-file and withdrawal of approved tasks (#1047), `research_runners` in the upgrade floors, the `start.agents` settings row, and `ALL_MACHINE_LOCAL`.
+- docs/security.md: `start.agents` in the machine-local list.
+- adapters.md: `start.upStart` as a fixed-builtin field. daemon.md: scoped receipts at schema 3, and scope paths for the new runtime, schema, protocol-window and default-agent modules. tasks.md: scope paths for research-runner.ts and task-approval.ts. tests.md: the preload named, and a workstation-only remote-run sentence removed.
+- AGENTS.md "Area notes" and docs/verified.json: the same new paths.
+- README.md (notes), benchmarks.md, budget.md and bus.md: accurate as they were.
+
+All 13 were then restamped at 362859ec with `release-prepare.ts restamp --reviewed`.
+
+## Checks
+
+On release/0.26.0 after the restamp: `node scripts/check-docs.mjs --require-fresh` printed `docs: OK (0 stale documents)`; `bun x tsc --noEmit` exited 0; `bun scripts/build.mjs --check` exited 0 (the bundle diff is the version string only); `node scripts/check-package.mjs` printed `package: OK (723 files, @staix/agent-hub@0.26.0)`. The release PR's exact-head CI run is the full test gate.
+
+## Known gaps, not blocking
+
+- No local full test suite: heavy tests run off the workstation, and the release PR's exact-head CI is the gate. Each merged PR had its own exact-head CI green (see Reviews).
+- No running-hub upgrade to 0.26.0, no live TUI launch and no live check of `ahub up` opening the default agents in a real terminal; those are covered only by tests with stubs.
+- The scoped-upgrade guarantee (a project's recorded runtime survives restart) starts with 0.26.0 CLIs; an older published CLI ignores the record. This ceiling is documented in docs/operations.md.
+- One single non-reproducible failure of test/terminal-launch-daemon.test.ts "#482 ..." was seen in a remote full run of #1051; it passed in reruns, in CI and on main, and is treated as a timing flake.

package/docs/verification/2026-11-01-0.27.0.md

@@ -0,0 +1,49 @@
+# 0.27.0 release verification
+
+This record covers release preparation and source review. It claims no installation, no running-hub upgrade to 0.27.0 and no live TUI launch.
+
+## Candidate
+
+Version 0.27.0, prepared from main de08b8e1 (4 commits since v0.26.0, 3 of them `feat`; bump rule: minor). The release commits carry the version, the CHANGELOG section, the bundle and the documentation stamps.
+
+## Reviews
+
+Pull requests named by the commits since v0.26.0: #1066, #1062, #1061, #1059.
+
+Each merged after a claude `hub_review` approval with exact-head CI green, no unresolved review thread and no pending change request:
+
+- #1059 (task 602, experiment readback): approved at c10a509f, exact-head CI run 41313240639. One nit (the spec's as-built note could name task 615) left open; #1062 then named it.
+- #1061 (task 616, runtime.json read retried only when the file was replaced): approved after exact-head CI run 41318247416 at 636fe45f. The board bound the approval to 6c6dfeff, because hub 0.23.1 refuses an in_review re-file; the verdict note names the one-line CHANGELOG delta to 636fe45f.
+- #1062 (task 615, `hub_experiment_record`): approved at 66b76a8e, run 41322472076.
+- #1066 (task 617, conductor-recorded release consent, #1063): approved at 6f3b2dfc, run 41341091037. The first head 5f12dec3 failed CI on two assertions of wording #1063 changed (run 41339855105); the reviewer ruled that exactly those two be updated to the new text, and the delta to 6f3b2dfc is those two lines.
+
+## Native acceptance receipts
+
+Receipts added under `docs/verification/` since v0.26.0: none.
+
+This list is read from the repository, never written by hand. Native acceptance and the person's release consent are separate records: consent is `ahub sdlc authorize-release 0.27.0`, recorded by the person or the unique configured conductor only on the person's explicit release instruction naming the release in its own session (never a hub/task/review/file/peer relay), and is not recorded in this file. The tag run refuses without it.
+
+## Document review
+
+Stale at preparation (`node scripts/check-docs.mjs`): README.md, docs/agent-notes/{adapters,budget,bus,daemon,tasks,tests}.md, docs/operations.md, docs/quickstart.md, docs/security.md and src/cli/help.ts; docs/agent-notes/README.md became stale after the daemon.md edit. The conductor read each against the diff of its covered sources since v0.26.0 (#1059, #1061, #1062, #1066) and found:
+
+- src/cli/help.ts: `ahub study experiments` (three closed forms) shipped in #1059 without a help row; added. Every other form in `ahub help` still matches `src/cli/main.ts`, `src/cli/study.ts` and `src/cli/launch.ts`; the `sdlc authorize-release` row was already updated by #1066.
+- docs/agent-notes/daemon.md: the `ahub study` note now names `experiments` as an allowed read form beside `show`.
+- docs/quickstart.md: the v0.27.0 install tag and a new "Upgrading to 0.27.0" section (instructed release consent, experiment read and record, the runtime.json race fix, and updating the global CLI and plugin by hand as in 0.26.0).
+- README.md: the report link, and one sentence on experiment record and readback under Research campaigns.
+- docs/operations.md: the guide header (0.27.0) and the protocol-window table row (0.26.0 through 0.27.0, unchanged window 16 through 17). The experiment and release-approval sections were already updated by #1059, #1062 and #1066.
+- docs/security.md, docs/agent-notes/{tasks,tests}.md: already current (#1066 updated the release-authorization paragraphs; tasks.md names both experiment tools). adapters.md, budget.md, bus.md and agent-notes/README.md: stale only through covered daemon.ts or note paths; nothing in them describes the changed behavior.
+
+All twelve were restamped with `--reviewed` at the release branch head that holds these edits.
+
+## Checks
+
+- `node scripts/check-docs.mjs --require-fresh`: `docs: OK (0 stale documents)` on the release branch.
+- `bun test test/help.test.ts test/completion.test.ts` after the help row: 24 pass, 0 fail.
+- `bun x tsc --noEmit`, `bun scripts/build.mjs --check` and `node scripts/check-package.mjs`: run by the release PR's exact-head CI, together with the full suite on ubuntu and macOS and the seeded guards (heavy checks run only on CI or dgx02 on this machine).
+
+## Known gaps, not blocking
+
+- No installation and no running-hub upgrade to 0.27.0 is claimed here. The running hub on this machine is 0.23.1, so the conductor-recorded consent of #1063 is not live yet; this release's consent is the person's own `ahub sdlc authorize-release 0.27.0`.
+- No live receipt for `hub_experiment_record` or the instructed-consent path; both are covered by daemon-level tests only.
+- Issue #418 was closed with its managed-Pi live leg waived (owner decision 2026-11-02); a post-close Pi smoke on hub 0.23.1 (tasks 618, 619) passed spec read, memory read and one remote isolated check, Linux evidence only.

package/docs/verified.json

@@ -2,7 +2,7 @@
   "schemaVersion": 1,
   "documents": {
     "README.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "package.json",
         "src/",
@@ -11,14 +11,14 @@
       ]
     },
     "docs/security.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "src/",
         "templates/"
       ]
     },
     "docs/operations.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "package.json",
         "src/",
@@ -35,7 +35,7 @@
       ]
     },
     "docs/quickstart.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "package.json",
         "src/",
@@ -43,7 +43,7 @@
       ]
     },
     "docs/agent-notes/adapters.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "src/adapters/",
         "src/pi/",
@@ -81,7 +81,7 @@
       ]
     },
     "docs/agent-notes/benchmarks.md": {
-      "verifiedAgainst": "ce8da3ec141f7ef17e2e1cd6a8104ddc36304efe",
+      "verifiedAgainst": "362859ec83ca659483423393174a294a5c40bb90",
       "paths": [
         "scripts/benchmarks/",
         "test/benchmarks/",
@@ -93,7 +93,7 @@
       ]
     },
     "docs/agent-notes/budget.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "src/hub/budget.ts",
         "src/cli/statusline-tee.ts",
@@ -117,7 +117,7 @@
       ]
     },
     "docs/agent-notes/bus.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "src/hub/bus.ts",
         "src/hub/envelope.ts",
@@ -132,7 +132,7 @@
       ]
     },
     "docs/agent-notes/daemon.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "src/hub/daemon.ts",
         "src/hub/control-client.ts",
@@ -210,7 +210,16 @@
         "src/hub/session-identity.ts",
         "src/hub/provenance.ts",
         "src/hub/channel-project.ts",
-        "src/hub/project.ts"
+        "src/hub/project.ts",
+        "src/hub/project-runtime-state.ts",
+        "src/hub/project-runtime.ts",
+        "src/hub/runtime-capture-prune.ts",
+        "src/hub/runtime-prune-health.ts",
+        "src/hub/db-schema.ts",
+        "src/hub/protocol-window.ts",
+        "src/hub/start-agents.ts",
+        "src/cli/start-agents-run.ts",
+        "src/cli/runtime-version-warning.ts"
       ]
     },
     "docs/agent-notes/local-worker.md": {
@@ -234,7 +243,7 @@
       ]
     },
     "docs/agent-notes/tasks.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "src/hub/tasks.ts",
         "src/hub/board.ts",
@@ -276,11 +285,13 @@
         "src/hub/folder-trigger.ts",
         "src/hub/handoff.ts",
         "src/cli/handoff-args.ts",
-        "src/cli/handoff-output.ts"
+        "src/cli/handoff-output.ts",
+        "src/hub/task-approval.ts",
+        "src/hub/research-runner.ts"
       ]
     },
     "docs/agent-notes/tests.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "test/",
         "scripts/check.sh",
@@ -304,11 +315,12 @@
         "scripts/progress-tee.sh",
         "scripts/release-prepare.ts",
         "scripts/release-tag.ts",
-        "scripts/lib/release-plan.ts"
+        "scripts/lib/release-plan.ts",
+        "src/hub/orca-env.ts"
       ]
     },
     "docs/agent-notes/README.md": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "src/cli/console-state.ts",
         "src/cli/attention.ts",
@@ -317,7 +329,7 @@
       ]
     },
     "src/cli/help.ts": {
-      "verifiedAgainst": "aaccc30bd32653ba1925220334445e020be21732",
+      "verifiedAgainst": "c3f379ce1ce1c4c1f7b5442c78fd8c534ff12ec0",
       "paths": [
         "src/cli/main.ts",
         "src/cli/launch.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@staix/agent-hub",
-  "version": "0.25.0",
+  "version": "0.27.0",
   "description": "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   "license": "MIT",
   "type": "module",

package/plugins/agent-hub/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hub",
-  "version": "0.25.0",
+  "version": "0.27.0",
   "description": "Channel between Claude Code and the agent-hub daemon: peer messages from Codex, Kimi and the local worker arrive as channel events; hub_send replies.",
   "author": {
     "name": "Young Joon Lee",