@staix/agent-hub 0.25.0 → 0.27.0

package/plugins/agent-hub/server.js

@@ -806,6 +806,12 @@ var init_agy_mcp = __esm(() => {
   MAX_CONFIG_BYTES = 256 * 1024;
 });
 
+// src/hub/orca-env.ts
+var ORCA_LAUNCHER_ENV;
+var init_orca_env = __esm(() => {
+  ORCA_LAUNCHER_ENV = Object.freeze(["ORCA_CLI_COMMAND", "ORCA_DEV_REPO_ROOT", "ORCA_TERMINAL_HANDLE", "ORCA_WORKTREE_ID"]);
+});
+
 // src/hub/child-process.ts
 function childEnv(source = process.env) {
   const env = { ...source };
@@ -1066,6 +1072,7 @@ var PS, PS_OPTIONS, own = (text) => {
   proc.stderr?.destroy();
 }, emptied;
 var init_child_process = __esm(() => {
+  init_orca_env();
   PS = ["ps", "-axo", "pid=,ppid=,pgid=,stat=,lstart=,command="];
   PS_OPTIONS = { env: { ...process.env, LC_ALL: "C", TZ: "UTC" }, detached: true };
   emptied = new WeakSet;
@@ -5896,8 +5903,13 @@ var init_launch = __esm(() => {
   init_child_process();
 });
 
+// src/hub/recovery-error.ts
+var init_recovery_error = __esm(() => {
+  init_envelope();
+});
+
 // src/hub/recovery-store.ts
-import { chmodSync, existsSync as existsSync5, mkdirSync as mkdirSync6, readFileSync as readFileSync5, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "fs";
+import { chmodSync, existsSync as existsSync5, linkSync, lstatSync as lstatSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync5, renameSync as renameSync4, rmSync as rmSync4, writeFileSync as writeFileSync6 } from "fs";
 import { randomUUID as randomUUID4 } from "crypto";
 function atomicPrivateJSON(file, value) {
   const temporary = `${file}.${randomUUID4()}.tmp`;
@@ -5912,6 +5924,7 @@ function atomicPrivateJSON(file, value) {
 }
 var init_recovery_store = __esm(() => {
   init_project();
+  init_recovery_error();
   init_process_signature();
 });
 
@@ -5985,11 +5998,11 @@ var init_permission_mode = __esm(() => {
 });
 
 // src/hub/path-policy.ts
-import { accessSync, constants as constants4, lstatSync as lstatSync8, opendirSync, readlinkSync, statSync as statSync2 } from "fs";
+import { accessSync, constants as constants4, lstatSync as lstatSync9, opendirSync, readlinkSync, statSync as statSync2 } from "fs";
 import { dirname as dirname7, isAbsolute as isAbsolute5, join as join11, relative as relative3, resolve as resolve8, sep as sep2 } from "path";
 function existing(path) {
   try {
-    lstatSync8(path);
+    lstatSync9(path);
     return true;
   } catch (error) {
     if (error.code === "ENOENT")
@@ -6038,7 +6051,7 @@ function directAliasTarget(path) {
         return;
       ancestor = parent;
     }
-    if (!lstatSync8(ancestor).isSymbolicLink())
+    if (!lstatSync9(ancestor).isSymbolicLink())
       return;
     target = resolve8(dirname7(ancestor), readlinkSync(ancestor), relative3(ancestor, target));
   }
@@ -6515,7 +6528,7 @@ var init_text_projection = __esm(() => {
 });
 
 // src/local/doc-read.ts
-import { lstatSync as lstatSync9 } from "fs";
+import { lstatSync as lstatSync10 } from "fs";
 import { extname } from "path";
 function docRead(file, shown, args, port, cwd) {
   const projections = port.projections();
@@ -6525,7 +6538,7 @@ function docRead(file, shown, args, port, cwd) {
   }
   let st;
   try {
-    st = lstatSync9(file);
+    st = lstatSync10(file);
   } catch {
     return `error: ${shown} cannot be read`;
   }
@@ -6848,7 +6861,7 @@ var init_web_fetch = __esm(() => {
 });
 
 // src/local/tools.ts
-import { lstatSync as lstatSync10, mkdirSync as mkdirSync8, readFileSync as readFileSync7, statSync as statSync3, writeFileSync as writeFileSync7 } from "fs";
+import { lstatSync as lstatSync11, mkdirSync as mkdirSync8, readFileSync as readFileSync7, statSync as statSync3, writeFileSync as writeFileSync7 } from "fs";
 import { dirname as dirname10, join as join13, relative as relative4, resolve as resolve10 } from "path";
 function guardPath(ctx, path, mode) {
   const root = realPath(ctx.cwd);
@@ -6871,7 +6884,7 @@ function guardPath(ctx, path, mode) {
     throw new Error(`${path} is on the secrets denylist`);
   if (mode === "write" && (isHubWritePath(rel) || inside && isHubWritePath(typed)))
     throw new Error(`${path} is not writable by the local worker`);
-  if (mode === "write" && ctx.readOnly?.length && (lstatSync10(real, { throwIfNoEntry: false })?.nlink ?? 1) > 1)
+  if (mode === "write" && ctx.readOnly?.length && (lstatSync11(real, { throwIfNoEntry: false })?.nlink ?? 1) > 1)
     throw new Error("hardlinked write target cannot be verified with data.readonly");
   if (mode === "write" && matchesPolicy(root, path, ctx.readOnly ?? []))
     throw new Error("target is protected by data.readonly");
@@ -7045,7 +7058,7 @@ ${preview(content)}`, "write", ctx.signal, file, undefined, String(a.path), a),
 }
 var APPROVAL_EXPIRED_TEXT = "error: approval expired: no person answered; do not retry this call; hand the task off or stop", ApprovalWaitStop, approvalError = (picked, denied) => picked === true ? undefined : picked === "expired" ? APPROVAL_EXPIRED_TEXT : picked === "aborted" ? "error: approval withdrawn because the turn ended; no operation was executed" : denied, lexists = (p) => {
   try {
-    lstatSync10(p);
+    lstatSync11(p);
     return true;
   } catch {
     return false;
@@ -10695,7 +10708,7 @@ var init_shipped_roles = __esm(() => {
 
 // src/hub/roles.ts
 import { createHash as createHash6 } from "crypto";
-import { constants as constants5, closeSync as closeSync6, fstatSync as fstatSync5, lstatSync as lstatSync11, openSync as openSync6, readSync as readSync4, readdirSync as readdirSync2 } from "fs";
+import { constants as constants5, closeSync as closeSync6, fstatSync as fstatSync5, lstatSync as lstatSync12, openSync as openSync6, readSync as readSync4, readdirSync as readdirSync2 } from "fs";
 import { join as join15 } from "path";
 function parseRole(text, stem, layer) {
   if (Buffer.byteLength(text) > 8192 || text.includes("\r") || !ID.test(stem))
@@ -10777,7 +10790,7 @@ function loadRoleCatalog(cwd) {
   try {
     const config = join15(cwd, ".agenthub"), dir = join15(config, "roles");
     for (const path of [config, dir]) {
-      const stat = lstatSync11(path);
+      const stat = lstatSync12(path);
       if (!stat.isDirectory() || stat.isSymbolicLink())
         throw new Error("unsafe role directory");
     }
@@ -10871,6 +10884,14 @@ var init_packs = __esm(() => {
   init_workflow();
 });
 
+// src/hub/research-runner.ts
+var BODY, RUNNER_RECEIPT_DOMAIN;
+var init_research_runner = __esm(() => {
+  init_packs();
+  BODY = 64 * 1024;
+  RUNNER_RECEIPT_DOMAIN = "agent-hub.runner-receipt/v1" + String.fromCharCode(0);
+});
+
 // node_modules/@staix/agent-mem/src/memory/mutation.ts
 var mutations;
 var init_mutation = __esm(() => {
@@ -11890,12 +11911,13 @@ var init_deliverables = __esm(() => {
 });
 
 // src/hub/research-experiments.ts
-var BODY;
+var BODY2;
 var init_research_experiments = __esm(() => {
   init_src();
   init_packs();
+  init_research_runner();
   init_deliverables();
-  BODY = 64 * 1024;
+  BODY2 = 64 * 1024;
 });
 
 // src/hub/task-code-symbols.ts
@@ -11904,24 +11926,98 @@ var init_task_code_symbols = __esm(() => {
   HOST_CODE_SYMBOLS = Symbol("host task code symbols");
 });
 
+// package.json
+var package_default;
+var init_package = __esm(() => {
+  package_default = {
+    name: "@staix/agent-hub",
+    version: "0.27.0",
+    description: "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
+    license: "MIT",
+    type: "module",
+    bin: {
+      ahub: "src/cli/main.js",
+      "agent-hub": "src/cli/main.js"
+    },
+    scripts: {
+      check: "scripts/check.sh",
+      build: "bun scripts/build.mjs",
+      test: "bun test"
+    },
+    engines: {
+      bun: ">=1.4.2"
+    },
+    dependencies: {
+      "@staix/agent-mem": "0.18.0"
+    },
+    devDependencies: {
+      "@modelcontextprotocol/sdk": "^1.27.1",
+      "@types/bun": "^1.3.0",
+      typescript: "^5.8.0"
+    },
+    files: [
+      ".claude-plugin",
+      "src",
+      "src/pet/window.jxa.js",
+      "src/pet/window.html",
+      "plugins",
+      "templates",
+      "scripts/check-docs.mjs",
+      "docs",
+      "README.md",
+      "LICENSE",
+      "CHANGELOG.md",
+      "THIRD_PARTY_NOTICES.md",
+      "LICENSES"
+    ],
+    repository: {
+      type: "git",
+      url: "git+https://github.com/STAIxBWLB/agent-hub.git"
+    },
+    homepage: "https://github.com/STAIxBWLB/agent-hub",
+    publishConfig: {
+      access: "public"
+    },
+    exports: {
+      "./adapter": "./src/adapters/public.ts",
+      "./conformance": "./src/adapters/conformance/index.ts",
+      "./ui-plugin": "./src/ui/plugin.ts"
+    }
+  };
+});
+
+// src/version.ts
+var VERSION;
+var init_version = __esm(() => {
+  init_package();
+  VERSION = package_default.version;
+});
+// src/hub/db-schema.ts
+var init_db_schema = __esm(() => {
+  init_version();
+});
+
 // src/hub/planning.ts
 var init_planning = __esm(() => {
   init_sdlc();
 });
+
 // src/hub/research-campaign.ts
-var BODY2;
+var BODY3;
 var init_research_campaign = __esm(() => {
   init_packs();
-  BODY2 = 64 * 1024;
+  BODY3 = 64 * 1024;
 });
 
 // src/hub/board.ts
 var CLASSES2, PLAN_KEYS, ALL_PLAN_KEYS, OUTCOMES_KEPT_MS;
 var init_board = __esm(() => {
+  init_research_runner();
   init_packs();
   init_research_experiments();
   init_task_code_symbols();
   init_plan_conformance();
+  init_db_schema();
   init_planning();
   init_envelope();
   init_review_findings();
@@ -12077,7 +12173,7 @@ function profileTaskTools(profile = "dev", stages, criteria = false) {
     }
     if (customProfile && tool.name === "hub_task_propose")
       properties.class = { type: "string", enum: [...new Set([...Object.keys(data.classes), ...PROFILE_CLASS_NAMES.filter((v) => projectProfile("dev").classes[v])])] };
-    if (customProfile && properties.plan && tool.name !== "hub_task_accept")
+    if (customProfile && properties.plan && tool.name !== "hub_task_accept" && tool.name !== "hub_experiment_record")
       properties.plan = { ...plan, properties: { ...Object.fromEntries(data.plan_keys.map((key) => [key, plan.properties[key] ?? list(key === "sections" ? "document heading anchors, such as report.md#methods" : key === "sources" ? "citation ids, DOI or source URL ids" : "short claim ids to verify")])) } };
     if (customProfile && tool.name === "hub_task_done" && data.name !== "dev") {
       const summaryProp = properties.summary;
@@ -12091,7 +12187,7 @@ function profileTaskTools(profile = "dev", stages, criteria = false) {
       const selectedPlan = { ...plan, properties: { ...Object.fromEntries(data.plan_keys.map((key) => [key, plan.properties[key] ?? list(key === "sections" ? "document heading anchors, such as report.md#methods" : key === "sources" ? "citation ids, DOI or source URL ids" : "short claim ids to verify")])) } };
       properties.parts = { ...parts, items: { ...parts.items, properties: { ...parts.items.properties, plan: selectedPlan } } };
     }
-    if (criteria && properties.plan) {
+    if (criteria && properties.plan && tool.name !== "hub_experiment_record") {
       const current = properties.plan;
       properties.plan = { ...current, properties: { ...current.properties, ...costPlanProperties, ...evidencePlanProperties } };
     }
@@ -12124,7 +12220,7 @@ var init_hub_tools = __esm(() => {
   init_roles();
   init_registry();
   init_envelope();
-  IMPLEMENTER_HUB_TOOL_NAMES = Object.freeze(["hub_task_accept", "hub_task_decline", "hub_task_done", "hub_checkpoint", "hub_send", "hub_task_show", "hub_task_propose", "hub_remember", "hub_inbox", "hub_permission_request", "hub_study_show", "hub_study_handoff"]);
+  IMPLEMENTER_HUB_TOOL_NAMES = Object.freeze(["hub_task_accept", "hub_task_decline", "hub_task_done", "hub_checkpoint", "hub_send", "hub_task_show", "hub_task_propose", "hub_remember", "hub_inbox", "hub_permission_request", "hub_study_show", "hub_experiment_show", "hub_experiment_record", "hub_study_handoff"]);
   IMPLEMENTER_PERMISSION_TOOL = {
     name: "hub_permission_request",
     description: "Native permission prompt for this current owned child. The person allows once or denies; failure is deny.",
@@ -12178,7 +12274,7 @@ var init_hub_tools = __esm(() => {
     additionalProperties: false
   };
   acceptPlan = { ...plan, properties: { ...plan.properties, sections: list("document heading anchors, such as report.md#methods"), sources: list("citation ids, DOI or source URL ids"), claims: list("short claim ids to verify") } };
-  STUDY_TOOLS = new Set(["hub_study_draft", "hub_study_revise", "hub_study_show", "hub_study_handoff"]);
+  STUDY_TOOLS = new Set(["hub_study_draft", "hub_study_revise", "hub_study_show", "hub_experiment_show", "hub_experiment_record", "hub_study_handoff"]);
   HANDOFF_TOOLS = new Set(["hub_task_handoff", "hub_task_handoffs"]);
   BOUNDED_TASK_TOOLS = new Set(["hub_task_spec", "hub_check_start", "hub_check_result", "hub_check_cancel"]);
   CAPABILITY_TOOLS = new Set(["hub_capabilities", "hub_capabilities_publish", "hub_invoke"]);
@@ -12196,6 +12292,8 @@ var init_hub_tools = __esm(() => {
     tool2("hub_study_draft", "Store a research campaign contract as a DRAFT revision 1 on an approved parent task. Configured planners only; it creates no task, dispatches nothing and never approves (only the person approves, with ahub study approve). The contract is data: question, scope, exclusions, sourceIds, units, deliverableSections, stopPolicy and an optional budget.", { parentTaskId: id2, contract: { type: "object" } }, ["parentTaskId", "contract"]),
     tool2("hub_study_revise", "Store the next DRAFT revision of a research campaign with the revision you read. Configured planners only; a stale revision refuses, and a draft holds older bound work until the person approves it. Never approves.", { id: str2, revision: { type: "integer", minimum: 1 }, contract: { type: "object" } }, ["id", "revision", "contract"]),
     tool2("hub_study_show", "Read a research campaign's coverage and stop projection: per unit round, state, handoff completeness and budget support, and why dispatch is held. Read-only. A private campaign, task or source shows ids, counts and states only, never its question, scope, path or excerpt. Give no id to list this project's campaigns, at most 50 per call: when the reply carries `next`, pass it as `after` for the following page.", { id: str2, after: str2 }),
+    tool2("hub_experiment_record", "Record experiment metadata for your current in-progress campaign unit: protocol, attempt, event or comparison plan, or relay a signed runner receipt. The hub validates ownership, sources, campaign and signatures. It runs no command, starts no experiment and contacts no runner. Refused during a PII turn.", { kind: { type: "string", enum: ["protocol", "attempt", "event", "plan", "receipt"] }, taskId: id2, protocol: { type: "object" }, attempt: { type: "object" }, attemptId: str2, idempotencyKey: str2, event: { type: "object" }, plan: { type: "object" }, receipt: { type: "object" }, signature: str2 }, ["kind"]),
+    tool2("hub_experiment_show", "Read the experiment attempts of a research campaign, one attempt, or one baseline/variant comparison under a recorded plan. Read-only: it runs no command and reads no file. Every metric, hash and setting says where it came from (declared by an agent, host-observed, runner-attested or person-attested); a declared value is never shown as observed, failed, cancelled and unknown attempts stay in the counts, and a repeat is never an independent reproduction. A private campaign, task or source shows ids, counts and states only. Give campaignId (with after to page, at most 50 rows), or attemptId, or planHash with baselineAttemptId and variantAttemptId.", { campaignId: str2, attemptId: str2, after: { type: "integer", minimum: 0 }, eventAfter: { type: "integer", minimum: 0 }, limit: { type: "integer", minimum: 1, maximum: 50 }, planHash: str2, baselineAttemptId: str2, variantAttemptId: str2 }),
     tool2("hub_task_handoff", "Hand work that belongs to ANOTHER project that runs agent-hub to that project's board. Use it instead of implementing it from this session: a feature or behavior change first needs a spec issue in that project (pass its number as issue); a mechanical chore (an exact version pin, a regenerated file) goes straight to a task. The target is a registered project (its root or id) whose hub is running; it is not queued. Planner, conductor or person only. Never for a [pii] task or during a private turn. You learn the task's state changes as kind task messages.", { project: str2, title: str2, class: { type: "string", description: "task class, default implement" }, detail: str2, paths: { type: "array", items: str2, description: "repository-relative paths in the TARGET project" }, issue: { type: "integer", minimum: 1, description: "the target repository's issue number" }, task: { type: "integer", minimum: 1, description: "your own task in THIS project that this work comes from; a [pii] task is refused" } }, ["project", "title"]),
     tool2("hub_task_handoffs", "List what this project handed to other projects, with the last state each target reported. Read-only.", {}),
     tool2("hub_study_handoff", "Record the handoff for the research unit you currently own and have in progress: evidence per source, unresolved questions, contradictions and limitations, or insufficientEvidence. Only the bound owner; every required field must be present. Not a task completion.", { handoff: { type: "object" } }, ["handoff"]),
@@ -12256,7 +12354,7 @@ var init_hub_tools = __esm(() => {
     tool2("hub_peer_release", "Release only the conductor hold you placed. Never lifts a person's hold or a budget pause.", { peer: str2 }, ["peer"])
   ];
   CONDUCTOR_TOOL_NAMES = new Set(CONDUCTOR_TOOLS.map((t) => t.name));
-  READ_ONLY_PROJECT_TOOLS = Object.freeze(["hub_capabilities", "hub_send", "hub_inbox", "hub_delivery_done", "hub_review", "hub_task_show", "hub_task_list", "hub_study_show", "hub_memory_search", "hub_memory_show", "hub_memory_graph", "hub_source_read", "hub_status"]);
+  READ_ONLY_PROJECT_TOOLS = Object.freeze(["hub_capabilities", "hub_send", "hub_inbox", "hub_delivery_done", "hub_review", "hub_task_show", "hub_task_list", "hub_study_show", "hub_experiment_show", "hub_memory_search", "hub_memory_show", "hub_memory_graph", "hub_source_read", "hub_status"]);
   ROLE_TEXT = {
     conductor: "conductor: plan and split work into tasks with owners, watch the team with hub_status, move stalled work, and ensure every task is reviewed (review it yourself only if you also hold reviewer). Report results and open decisions to the person. Do not implement tasks you handed out. Never ask a peer to answer an approval; ask the person for human-only actions. You may release only holds you placed, never human holds or budget pauses.",
     planner: "planner: break work into tasks with hub_task_propose (one outcome each, the right class, paths in refs, and after: [ids] for work that must wait for other tasks) instead of doing everything yourself.",
@@ -13012,7 +13110,7 @@ var WITHHELD = "Claude implementer turn failed (details withheld)";
 
 // src/adapters/claude-implementer.ts
 import { randomUUID as randomUUID9 } from "crypto";
-import { lstatSync as lstatSync12, mkdtempSync as mkdtempSync5, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "fs";
+import { lstatSync as lstatSync13, mkdtempSync as mkdtempSync5, rmSync as rmSync6, writeFileSync as writeFileSync8 } from "fs";
 import { tmpdir as tmpdir5 } from "os";
 import { join as join17 } from "path";
 function provenVersion(binding) {
@@ -13070,7 +13168,7 @@ function claudeImplementerArgs(turn, mcp, settings, prompt, model) {
 async function proveClaudeImplementer(peer, command) {
   const binary = Bun.which(command[0], { PATH: process.env.PATH }) ?? command[0];
   const fingerprint = () => {
-    const file = realPath(binary), stat = lstatSync12(file);
+    const file = realPath(binary), stat = lstatSync13(file);
     return [file, stat.dev, stat.ino, stat.size, stat.mtimeMs, stat.ctimeMs].join(":");
   };
   const binding = fingerprint(), home = mkdtempSync5(join17(tmpdir5(), "ahub-claude-proof-"));
@@ -13625,7 +13723,7 @@ var init_reviewer_variants = __esm(() => {
 });
 
 // src/adapters/agy/hooks.ts
-import { closeSync as closeSync7, constants as constants6, fstatSync as fstatSync6, lstatSync as lstatSync13, openSync as openSync7, readSync as readSync5 } from "fs";
+import { closeSync as closeSync7, constants as constants6, fstatSync as fstatSync6, lstatSync as lstatSync14, openSync as openSync7, readSync as readSync5 } from "fs";
 import { homedir as homedir5 } from "os";
 import { isAbsolute as isAbsolute6, join as join18, relative as relative5 } from "path";
 import { createHash as createHash7 } from "crypto";
@@ -13673,7 +13771,7 @@ function readAgyTranscript(session, transcript) {
     let cursor = home;
     for (const name of relative5(home, transcript).split("/")) {
       cursor = join18(cursor, name);
-      if (lstatSync13(cursor).isSymbolicLink())
+      if (lstatSync14(cursor).isSymbolicLink())
         return empty;
     }
     fd = openSync7(transcript, constants6.O_RDONLY | constants6.O_NOFOLLOW);
@@ -15107,6 +15205,7 @@ var init_builtin_metadata = __esm(() => {
         version: claudeObservedVersion,
         ...CLAUDE_LAUNCH_POLICY,
         conductorStartable: true,
+        upStart: { allowed: true, default: true },
         unattended: true,
         hubSwitches: switches,
         ownedFlags: Object.freeze(["--dangerously-load-development-channels", "--dangerously-skip-permissions"])
@@ -15148,6 +15247,7 @@ var init_builtin_metadata = __esm(() => {
         version: codexObservedVersion,
         ...CODEX_LAUNCH_POLICY,
         conductorStartable: true,
+        upStart: { allowed: true, default: true },
         unattended: true,
         hubSwitches: switches,
         ownedFlags: Object.freeze(["--remote", "--remote-auth-token-env", "--yolo", "--dangerously-bypass-approvals-and-sandbox"])
@@ -15173,7 +15273,7 @@ var init_builtin_metadata = __esm(() => {
       roles: implementerRoles,
       defaultOnRoster: true,
       trust: { onPrem: false, hubSandboxed: false },
-      start: { create: createKimi, acpCommand: kimiAcpCommand, explicitHeadlessMode: true, planCommand: () => "ahub kimi", daemonPort: "acp", forms: dualForms, defaultForm: "tui", conductorStartable: true, hubSwitches: [], ownedFlags: [] },
+      start: { create: createKimi, acpCommand: kimiAcpCommand, explicitHeadlessMode: true, planCommand: () => "ahub kimi", daemonPort: "acp", forms: dualForms, defaultForm: "tui", conductorStartable: true, upStart: { allowed: true }, hubSwitches: [], ownedFlags: [] },
       identity: { mcp: "acp-session" },
       instances: { mode: "headless" },
       attach: {
@@ -15207,7 +15307,7 @@ var init_builtin_metadata = __esm(() => {
       roles: implementerRoles,
       defaultOnRoster: false,
       trust: { onPrem: false, hubSandboxed: true },
-      start: { create: createPi, exclusiveStartRefusal: "Pi start is in progress; inspect status before retrying", refreshTools: true, explicitHeadlessMode: true, daemonPort: "pi-rpc", forms: dualForms, defaultForm: "tui", conductorStartable: true, autoStart: "pi.auto_start", conductorStartArgs: piConductorStartArgs, hubSwitches: [], ownedFlags: [] },
+      start: { create: createPi, exclusiveStartRefusal: "Pi start is in progress; inspect status before retrying", refreshTools: true, explicitHeadlessMode: true, daemonPort: "pi-rpc", forms: dualForms, defaultForm: "tui", conductorStartable: true, upStart: { allowed: true }, autoStart: "pi.auto_start", conductorStartArgs: piConductorStartArgs, hubSwitches: [], ownedFlags: [] },
       identity: { mcp: "env" },
       instances: { mode: "headless" },
       permission: { grants: { ...hubGrants } },
@@ -15230,7 +15330,7 @@ var init_builtin_metadata = __esm(() => {
       roles: implementerRoles,
       defaultOnRoster: true,
       trust: { onPrem: true, hubSandboxed: true },
-      start: { create: createLocal, reconfigureWhileAttached: true, refreshTools: true, daemonPort: "local-worker", forms: headlessForms, defaultForm: "headless", conductorStartable: true, hubSwitches: [], ownedFlags: [] },
+      start: { create: createLocal, reconfigureWhileAttached: true, refreshTools: true, daemonPort: "local-worker", forms: headlessForms, defaultForm: "headless", conductorStartable: true, upStart: { allowed: true }, hubSwitches: [], ownedFlags: [] },
       identity: { mcp: "env" },
       instances: { mode: "headless" },
       permission: { grants: { ...hubGrants } },
@@ -15253,7 +15353,7 @@ var init_builtin_metadata = __esm(() => {
       optional: true,
       defaultOnRoster: false,
       trust: { onPrem: false, hubSandboxed: false },
-      start: { create: createJcode, preflight: jcodeStartPreflight, daemonPort: "owned-acp", forms: dualForms, defaultForm: "tui", explicitHeadlessMode: true, conductorStartable: true, hubSwitches: [], ownedFlags: [] },
+      start: { create: createJcode, preflight: jcodeStartPreflight, daemonPort: "owned-acp", forms: dualForms, defaultForm: "tui", explicitHeadlessMode: true, conductorStartable: true, upStart: { allowed: true }, hubSwitches: [], ownedFlags: [] },
       identity: { mcp: "project-file" },
       instances: { mode: "headless", nativeHome: true },
       permission: { unmanaged: "Jcode native policy is unmanaged; no hub mode mapping", grants: {
@@ -15411,6 +15511,7 @@ var init_qwen = __esm(() => {
       forms: ["headless"],
       defaultForm: "headless",
       conductorStartable: true,
+      upStart: { allowed: false, refusal: "the hub never opens its TUI, and a Qwen is started only by ahub qwen" },
       hubSwitches: [],
       ownedFlags: [],
       preflight: (request) => request.form !== undefined && request.form !== "headless" && request.form !== "tui" ? "unknown Qwen mode; usage: ahub qwen [--mode headless|tui]" : undefined,
@@ -15838,6 +15939,7 @@ function assertNativeCapabilityScope(definition) {
     ["start.daemonPort pi-rpc", definition.start.daemonPort === "pi-rpc"],
     ["start.daemonPort qwen-dual", definition.start.daemonPort === "qwen-dual"],
     ["start.createTui", declared(definition.start, "createTui")],
+    ["start.upStart", declared(definition.start, "upStart")],
     ["routing", definition.routing !== undefined],
     ["projection", definition.projection !== undefined],
     ["instances.nativeHome", declared(definition.instances, "nativeHome")],
@@ -22924,7 +23026,7 @@ init_registry();
 // src/hub/config-trust.ts
 init_child_process();
 init_git();
-import { lstatSync as lstatSync14, statSync as statSync5 } from "fs";
+import { lstatSync as lstatSync15, statSync as statSync5 } from "fs";
 import { dirname as dirname12, join as join28 } from "path";
 var MACHINE_LOCAL = [
   "kimi_cmd",
@@ -22953,7 +23055,7 @@ var MACHINE_LOCAL = [
   "corpus.paths",
   "invocation"
 ];
-var ALL_MACHINE_LOCAL = [...MACHINE_LOCAL, "rooms", "tasks.queue_backpressure", "context.max_assignment_used", "action_policy", "protect_instruction_files", "qwen_cmd", "jcode_cmd", "jcode_home", "jcode_provider_profile", "adapters", "adapter_modules", "text_projection", "instances"];
+var ALL_MACHINE_LOCAL = [...MACHINE_LOCAL, "research.runners", "rooms", "tasks.queue_backpressure", "context.max_assignment_used", "action_policy", "protect_instruction_files", "qwen_cmd", "jcode_cmd", "jcode_home", "jcode_provider_profile", "start.agents", "adapters", "adapter_modules", "text_projection", "instances"];
 function configRefusal(cwd, name) {
   const tracked = configTracked(cwd, name);
   return tracked === undefined ? `git could not confirm that .agenthub/${name} is untracked` : tracked ? `.agenthub/${name} is committed to git` : undefined;
@@ -23032,11 +23134,40 @@ function readAdapterModuleDeclarations(cwd, layers) {
 init_project();
 import { readFileSync as readFileSync14 } from "fs";
 import { join as join29, resolve as resolve17 } from "path";
+
+// src/hub/protocol-window.ts
+function protocolWindow(v, vMin) {
+  if (typeof v !== "number" || !Number.isSafeInteger(v) || v <= 0)
+    return;
+  const minimum = vMin === undefined ? v : vMin;
+  if (typeof minimum !== "number" || !Number.isSafeInteger(minimum) || minimum <= 0 || minimum > v)
+    return;
+  return { v, vMin: minimum };
+}
+function negotiateProtocol(local, remote) {
+  if (!local || typeof local !== "object" || Array.isArray(local) || !remote || typeof remote !== "object" || Array.isArray(remote))
+    return;
+  const a = protocolWindow(local.v, local.vMin), b = protocolWindow(remote.v, remote.vMin);
+  if (!a || !b)
+    return;
+  const highest = Math.min(a.v, b.v);
+  return highest >= Math.max(a.vMin, b.vMin) ? highest : undefined;
+}
+
+// src/hub/control-client.ts
 function stateDirFor(cwd) {
   return projectContext(cwd).stateDir;
 }
-var PROTOCOL = 16;
-var RECOVERY_SOURCE_PROTOCOLS = [9, 10, 11, 12, 13, 14, 15, PROTOCOL];
+var PROTOCOL = 17;
+var PROTOCOL_MIN = 16;
+var RECOVERY_SOURCE_PROTOCOLS = [9, 10, 11, 12, 13, 14, 15, 16, PROTOCOL];
+function controlProtocolWindow(descriptor) {
+  const legacy = protocolWindow(descriptor.protocol);
+  const window = protocolWindow(descriptor.protocolMax ?? descriptor.protocol, descriptor.protocolMin ?? descriptor.protocol);
+  if (!legacy || !window || legacy.v < window.vMin || legacy.v > window.v)
+    return;
+  return window;
+}
 function readControl(stateDir) {
   try {
     const status = JSON.parse(readFileSync14(join29(stateDir, "status.json"), "utf8"));
@@ -23051,6 +23182,8 @@ function readControl(stateDir) {
       instanceId: status.instanceId,
       cwd: status.cwd,
       protocol: status.protocol,
+      protocolMin: status.protocolMin,
+      protocolMax: status.protocolMax,
       pid: status.pid,
       features: Array.isArray(status.features) ? status.features.filter((feature) => typeof feature === "string") : [],
       ...startModes ? { startModes } : {},
@@ -23071,6 +23204,7 @@ class ControlClient {
   ws;
   features = [];
   sessionId;
+  protocol;
   welcomeInstanceId;
   get instanceId() {
     return this.welcomeInstanceId;
@@ -23097,8 +23231,8 @@ class ControlClient {
         instancePins.delete(key);
     };
   }
-  static connect(stateDir, hello, timeoutMs = 3000, protocol = PROTOCOL) {
-    if (!RECOVERY_SOURCE_PROTOCOLS.includes(protocol))
+  static connect(stateDir, hello, timeoutMs = 3000, protocol) {
+    if (protocol !== undefined && !RECOVERY_SOURCE_PROTOCOLS.includes(protocol))
       return Promise.reject(new Error(`unsupported recovery source protocol ${protocol}`));
     const control = readControl(stateDir);
     if (!control)
@@ -23107,9 +23241,13 @@ class ControlClient {
     if (pin && (control.instanceId !== pin.instanceId || hello.instanceId !== undefined && hello.instanceId !== pin.instanceId)) {
       return Promise.reject(new Error("delegated audit consumer changed; refusing a connection to its replacement"));
     }
-    if (control.protocol !== undefined && control.protocol !== protocol) {
-      return Promise.reject(Object.assign(new Error(`wire version mismatch: hub speaks ${control.protocol}, CLI speaks ${protocol}; stop it with its matching CLI, then upgrade and restart`), { code: 4426 }));
-    }
+    const local = protocolWindow(protocol ?? PROTOCOL, protocol ?? PROTOCOL_MIN);
+    const versioned = control.protocol !== undefined || control.protocolMin !== undefined || control.protocolMax !== undefined;
+    const remote = versioned ? controlProtocolWindow(control) : undefined;
+    const selected = versioned ? remote && negotiateProtocol(local, remote) : protocol ?? PROTOCOL_MIN;
+    const mismatch = () => Object.assign(new Error(`wire version mismatch: hub speaks ${control.protocolMax ?? control.protocol}, CLI speaks ${protocol ?? PROTOCOL}; stop it with its matching CLI, then upgrade and restart`), { code: 4426 });
+    if (selected === undefined)
+      return Promise.reject(mismatch());
     if (hello.projectId && hello.projectId !== control.projectId || hello.instanceId && hello.instanceId !== control.instanceId || hello.projectRoot && hello.projectRoot !== control.cwd) {
       return Promise.reject(Object.assign(new Error("hub project or instance does not match the selected project"), { code: 4404 }));
     }
@@ -23151,12 +23289,15 @@ class ControlClient {
         client.pending.delete(msg.rid);
         done(msg);
       };
-      ws.onopen = () => void client.request({ t: "hello", v: protocol, token: control.token, ...hello, ...expected }, timeoutMs).then((reply) => {
+      ws.onopen = () => void client.request({ t: "hello", token: control.token, ...hello, ...expected, v: selected, vMin: remote?.vMin === undefined ? selected : Math.max(local.vMin, remote.vMin) }, timeoutMs).then((reply) => {
         if (reply.t !== "welcome" || reply.ok === false)
           return refuse(new Error(reply.error ?? "hub refused handshake"));
         if (expected.projectId && reply.projectId !== expected.projectId || expected.instanceId && reply.instanceId !== expected.instanceId || expected.projectRoot && reply.cwd !== expected.projectRoot) {
           return refuse(Object.assign(new Error("connected hub has a different project or instance"), { code: 4404 }));
         }
+        if (reply.protocol !== undefined && reply.protocol !== selected)
+          return refuse(mismatch());
+        client.protocol = selected;
         client.features = Object.freeze(Array.isArray(reply.features) ? reply.features.filter((feature) => typeof feature === "string") : []);
         client.welcomeInstanceId = typeof reply.instanceId === "string" && reply.instanceId ? reply.instanceId : undefined;
         client.sessionId = typeof reply.session === "string" && reply.session.length <= 64 ? reply.session : undefined;
@@ -23239,10 +23380,12 @@ class ControlClient {
 
 // src/hub/conductor.ts
 init_registry();
+init_db_schema();
 init_hub_tools();
 init_envelope();
 
 // src/hub/tasks.ts
+init_research_runner();
 init_queue_backpressure();
 
 // src/hub/memory-symbols.ts
@@ -23275,7 +23418,9 @@ init_git();
 
 // src/hub/tasks.ts
 init_spec_read();
+
 // src/hub/schedules.ts
+init_db_schema();
 var MIN_EVERY_MS = 15 * 60000;
 var MAX_EVERY_MS = 365 * 86400000;
 var KEYS = new Set(["id", "every", "cron", "tz", "class", "title", "detail", "sources", "owner", "queue"]);
@@ -23289,68 +23434,10 @@ var INTAKE_MAX_ANSWER = 64 * 1024;
 // src/hub/tasks.ts
 init_sdlc_metrics();
 init_security_baseline();
-// package.json
-var package_default = {
-  name: "@staix/agent-hub",
-  version: "0.25.0",
-  description: "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
-  license: "MIT",
-  type: "module",
-  bin: {
-    ahub: "src/cli/main.js",
-    "agent-hub": "src/cli/main.js"
-  },
-  scripts: {
-    check: "scripts/check.sh",
-    build: "bun scripts/build.mjs",
-    test: "bun test"
-  },
-  engines: {
-    bun: ">=1.4.2"
-  },
-  dependencies: {
-    "@staix/agent-mem": "0.18.0"
-  },
-  devDependencies: {
-    "@modelcontextprotocol/sdk": "^1.27.1",
-    "@types/bun": "^1.3.0",
-    typescript: "^5.8.0"
-  },
-  files: [
-    ".claude-plugin",
-    "src",
-    "src/pet/window.jxa.js",
-    "src/pet/window.html",
-    "plugins",
-    "templates",
-    "scripts/check-docs.mjs",
-    "docs",
-    "README.md",
-    "LICENSE",
-    "CHANGELOG.md",
-    "THIRD_PARTY_NOTICES.md",
-    "LICENSES"
-  ],
-  repository: {
-    type: "git",
-    url: "git+https://github.com/STAIxBWLB/agent-hub.git"
-  },
-  homepage: "https://github.com/STAIxBWLB/agent-hub",
-  publishConfig: {
-    access: "public"
-  },
-  exports: {
-    "./adapter": "./src/adapters/public.ts",
-    "./conformance": "./src/adapters/conformance/index.ts",
-    "./ui-plugin": "./src/ui/plugin.ts"
-  }
-};
-
-// src/version.ts
-var VERSION = package_default.version;
+init_version();
 
 // src/hub/no-writes.ts
-var OWNER_TOOL_EFFECTS = new Set(["hub_task_propose", "hub_task_decline", "hub_task_done", "hub_task_cancel", "hub_task_assign", "hub_task_escalate", "hub_review", "hub_checkpoint", "hub_remember", "hub_memory_correct", "hub_check_start", "hub_check_cancel", "hub_sdlc_record", "hub_plan_review", "hub_backlog_plan", "hub_backlog_pull", "hub_backlog_undo", "hub_backlog_split", "hub_backlog_return_untouched", "hub_release_new", "hub_release_configure", "hub_release_assign", "hub_release_cut", "hub_study_handoff"]);
+var OWNER_TOOL_EFFECTS = new Set(["hub_task_propose", "hub_task_decline", "hub_task_done", "hub_task_cancel", "hub_task_assign", "hub_task_escalate", "hub_review", "hub_checkpoint", "hub_remember", "hub_memory_correct", "hub_check_start", "hub_check_cancel", "hub_sdlc_record", "hub_plan_review", "hub_backlog_plan", "hub_backlog_pull", "hub_backlog_undo", "hub_backlog_split", "hub_backlog_return_untouched", "hub_release_new", "hub_release_configure", "hub_release_assign", "hub_release_cut", "hub_study_handoff", "hub_experiment_record"]);
 
 // src/hub/github-import.ts
 init_sdlc();
@@ -23405,7 +23492,7 @@ var LEARNING_DEFAULTS = { windowMs: 30 * 24 * 3600000, threshold: 3, maxGroups:
 init_deliverables();
 
 // src/hub/deliverable-files.ts
-import { constants as constants8, lstatSync as lstatSync15 } from "fs";
+import { constants as constants8, lstatSync as lstatSync16 } from "fs";
 init_tools();
 init_deny();
 init_permission_mode();
@@ -23466,6 +23553,7 @@ init_tool_refusal();
 // src/hub/peer-doing.ts
 var TITLE_READ_MAX = 1024 * 1024;
 var TITLE_LINE_MAX = 64 * 1024;
+
 // src/hub/instances.ts
 import { types as types4 } from "util";
 init_project();
@@ -32106,7 +32194,7 @@ init_registry();
 // src/hub/instance-execution.ts
 init_git();
 init_project();
-import { lstatSync as lstatSync16 } from "fs";
+import { lstatSync as lstatSync17 } from "fs";
 import { join as join31, resolve as resolve19 } from "path";
 var refuse = (reason) => {
   throw new Error(`instance execution workspace refused: ${reason}`);
@@ -32149,7 +32237,7 @@ function resolveInstanceExecutionCwd(projectRoot, id, declarations, roles, adapt
   try {
     root = realPath(projectRoot);
     cwd = realPath(resolve19(root, declaration.worktree));
-    if (!lstatSync16(root).isDirectory() || !lstatSync16(cwd).isDirectory())
+    if (!lstatSync17(root).isDirectory() || !lstatSync17(cwd).isDirectory())
       return refuse("workspace is not a directory");
   } catch {
     return refuse("workspace paths are unavailable");
@@ -32220,6 +32308,7 @@ function channelProject(cwd, env, policyRoles) {
 }
 
 // src/adapters/claude-channel.ts
+init_version();
 init_hub_tools();
 init_envelope();