@staix/agent-hub 0.29.0 → 0.30.0

package/plugins/agent-hub/server.js

@@ -305,13 +305,13 @@ var init_compat = __esm(() => {
   COMPAT = {
     pi: {
       label: "Pi",
-      verified: ["1.4.0"],
+      verified: ["1.4.0", "1.5.0"],
       gate: "contract",
       probe: ["pi", "--version"],
       config: "pi.cmd",
       parse: (out) => plain(out.trim()),
-      trustNote: "The model-free extension load, RPC session identity and managed tool receipt path were checked on 1.4.0. Permissions remain host-owned; account-backed inference and another version's extension contract are unverified.",
-      receipt: "docs/verification/2026-10-26-pi-140-compat.md"
+      trustNote: "The model-free extension load, RPC session identity and managed tool receipt path were checked on 1.4.0 and 1.5.0. Permissions remain host-owned; account-backed inference and another version's extension contract are unverified.",
+      receipt: "docs/verification/2026-11-03-pi-150-compat.md"
     },
     "claude-implementer": {
       label: "Claude headless implementer",
@@ -361,23 +361,23 @@ var init_compat = __esm(() => {
     },
     agy: {
       label: "agy",
-      verified: ["1.4.2", "1.4.7"],
+      verified: ["1.4.2", "1.4.7", "1.4.12"],
       line: { min: "1.4.0", below: "1.5.0" },
       gate: "contract",
       probe: ["agy", "--version"],
       parse: (out) => plain(out.trim()),
-      trustNote: "Only 1.4.2 and 1.4.7 are T0-verified; the plugin MCP and hook contract of another version is unverified.",
-      receipt: "docs/verification/2026-10-26-agy-1.4.7.md"
+      trustNote: "Only 1.4.2, 1.4.7 and 1.4.12 are T0-verified; the plugin MCP and hook contract of another version is unverified.",
+      receipt: "docs/verification/2026-11-03-agy-1.4.12-launcher-nonce.md"
     },
     qwen: {
       label: "Qwen Code",
-      verified: ["0.25.0", "0.26.0", "0.26.1", "0.26.4"],
+      verified: ["0.25.0", "0.26.0", "0.26.1", "0.26.4", "0.26.5"],
       gate: "contract",
       probe: ["qwen", "--version"],
       config: "qwen_cmd",
       parse: (out) => plain(out.trim()),
-      trustNote: "Native ACP identity, mode ids and permission callbacks were re-checked without inference on 0.26.4; real model turns remain unverified. Another version may change those contracts.",
-      receipt: "docs/verification/2026-10-31-qwen-0264-acp.md"
+      trustNote: "Native ACP identity, mode ids and permission callbacks were re-checked without inference on 0.26.4 and 0.26.5; real model turns remain unverified. Another version may change those contracts.",
+      receipt: "docs/verification/2026-11-03-qwen-0265-acp.md"
     },
     "qwen-dual": {
       label: "Qwen Code dual-output TUI",
@@ -7288,6 +7288,101 @@ var init_pi = __esm(() => {
     currentReply;
     sessionId = "";
     sessionFile = "";
+    observedTitle;
+    titleRevision = -1;
+    titleEpoch = 0;
+    nativeTitleEpoch;
+    get sessionTitle() {
+      return this.acceptingTools && this.verifiedOwner() ? this.observedTitle : undefined;
+    }
+    get titleSession() {
+      return this.nativeSession;
+    }
+    async setSessionTitle(title, onlyIfUnnamed, current) {
+      const invalid = (error, mayHaveApplied = false) => ({ ok: false, reason: "invalid", error, ...mayHaveApplied ? { mayHaveApplied: true } : {} });
+      if (typeof title !== "string" || !title.trim() || [...title].length > 80 || typeof onlyIfUnnamed !== "boolean")
+        return invalid("Session title must contain 1-80 normalized characters and use a conditional-write flag; correct the title request and try again.");
+      if (this.stopping || this.state === "offline")
+        return invalid("Pi session is offline or stopped; start or reconnect Pi and check ahub status before naming it.");
+      const session = this.sessionId, generation = this.budgetGeneration, owner = this.sessionGeneration, epoch = this.titleEpoch;
+      if (!owner || !this.verifiedOwner())
+        return invalid("Pi native session owner is unverified; reconnect the retained Pi session and check ahub status before naming it.");
+      if (!this.acceptingTools)
+        return invalid("Pi session is detached or running a personal turn; reconnect its current hub session and check ahub status before naming it.");
+      const valid = () => {
+        try {
+          return this.acceptingTools && this.verifiedOwner() && this.sessionGeneration === owner && this.sessionId === session && this.budgetGeneration === generation && this.titleEpoch === epoch && current?.() !== false;
+        } catch {
+          return false;
+        }
+      };
+      if (!valid())
+        return invalid("Pi session, turn or title admission changed before dispatch; check ahub status before retrying in the current public session.");
+      let dispatched = false;
+      try {
+        const result = await this.sendTui({ type: "set_session_title", title, onlyIfUnnamed, sessionId: session, generation, ...this.nativeTitleEpoch ? { titleEpoch: this.nativeTitleEpoch } : {} }, valid, () => {
+          dispatched = true;
+        });
+        if (!valid())
+          return invalid("Pi session, turn or title admission changed after dispatch; the title may have been applied; check ahub status before retrying.", true);
+        if (result?.ok === false && result.reason === "invalid") {
+          if (result.cause === "session")
+            return invalid("Pi native session changed before the title write; check ahub status and reconnect the current session before retrying.");
+          if (result.cause === "generation")
+            return invalid("Pi native turn changed before the title write; wait for the current turn and check ahub status before retrying.");
+          if (result.cause === "arguments")
+            return invalid("Pi rejected invalid title command arguments; use a 1-80 character normalized title and retry in the current session.");
+          if (result.cause === "native_unavailable")
+            return invalid("Pi native title API is unavailable; restart Pi with the supported hub extension and check ahub status before retrying.");
+          if (result.cause === "native_failed")
+            return invalid("Pi native title API failed without confirming the write; the title may have been applied; check ahub status before retrying.", true);
+          if (result.cause === "native_readback")
+            return invalid("Pi native title readback did not confirm the write; the title may have been applied; check ahub status before retrying.", true);
+        }
+        if (result?.sessionId !== session || typeof result.sessionName !== "string" || this.nativeTitleEpoch !== undefined && result.titleEpoch !== this.nativeTitleEpoch)
+          return invalid("Pi title acknowledgement did not confirm the current native slot; the title may have been applied; check ahub status before retrying.", true);
+        this.observeTitle(result.sessionName, result.titleRevision, result.titleEpoch);
+        if (result.ok === false && result.reason === "already_named")
+          return { ok: false, reason: "already_named", error: "This session already has a title; keep it or ask the person to rename it with ahub title." };
+        if (result.ok === true && result.sessionName === title)
+          return { ok: true };
+        return invalid("Pi native title write or readback was not confirmed; the title may have been applied; check ahub status before retrying.", true);
+      } catch (error) {
+        const timeout = error instanceof Error && error.message.includes("acknowledgement timed out");
+        if (dispatched)
+          return invalid(`Pi title ${timeout ? "acknowledgement timed out" : "bridge command failed after dispatch"}; the title may have been applied; check ahub status before retrying.`, true);
+        return invalid(`Pi title ${timeout ? "command expired" : "admission changed or bridge failed"} before dispatch; check ahub status before retrying in the current session.`);
+      }
+    }
+    observeTitle(value, revision, epoch) {
+      if (this.nativeTitleEpoch !== undefined && epoch !== this.nativeTitleEpoch)
+        return;
+      if (typeof revision === "number" && Number.isSafeInteger(revision) && revision >= 0) {
+        if (revision < this.titleRevision)
+          return;
+        this.titleRevision = revision;
+      }
+      if (value === undefined)
+        value = "";
+      if (typeof value !== "string")
+        return;
+      if (value)
+        this.noteActivity();
+      if (this.observedTitle !== value) {
+        this.observedTitle = value;
+        this.onDoing?.("title", value);
+      }
+    }
+    observeSnapshotTitle(snapshot, before, beforeEpoch) {
+      if (this.titleEpoch !== beforeEpoch || snapshot.titleEpoch !== undefined && snapshot.titleEpoch !== this.nativeTitleEpoch)
+        return false;
+      if (snapshot.titleRevision === undefined && this.titleRevision !== before)
+        return false;
+      if (typeof snapshot.titleRevision === "number" && snapshot.titleRevision < this.titleRevision)
+        return false;
+      this.observeTitle(snapshot.sessionName, snapshot.titleRevision, snapshot.titleEpoch ?? this.nativeTitleEpoch);
+      return true;
+    }
     executionBudgetTimer;
     executionAbort;
     budgetStops = new Map;
@@ -7406,12 +7501,15 @@ var init_pi = __esm(() => {
         throw new Error("Pi must settle before session capture");
       if (this.sessionFile && existsSync7(this.sessionFile))
         return this.recoveryMetadata();
+      const titleRevisionBefore = this.titleRevision, titleEpochBefore = this.titleEpoch;
       const snapshot = this.opts.mode === "headless" ? (await this.waitRpc("get_state", 15000)).data : await this.sendTui({ type: "get_session_state" });
       if (this.state !== "idle" || this.activeTools || snapshot?.sessionId !== this.sessionId || snapshot?.sessionFile !== this.sessionFile)
         throw new Error("Pi source session changed during capture");
+      if (!this.observeSnapshotTitle(snapshot, titleRevisionBefore, titleEpochBefore))
+        throw new Error("Pi source session title changed during capture; retry with a fresh native session snapshot");
       const empty = this.opts.mode === "headless" ? snapshot.messageCount === 0 && snapshot.pendingMessageCount === 0 && snapshot.isStreaming === false && snapshot.isCompacting !== true && !snapshot.sessionName : snapshot.empty === true && snapshot.idle === true;
       if (!empty || this.activityObserved || this.persistedOnce)
-        throw new Error("Pi session history is not persisted; refusing to recreate it");
+        throw new Error("Pi session history is not persisted; refusing to recreate it. Exchange one message or start a new session, then retry");
       this.emptyResumeVerified = true;
       const captured = this.recoveryMetadata();
       if (typeof captured.sessionId === "string" && !captured.sessionFile)
@@ -7598,6 +7696,10 @@ var init_pi = __esm(() => {
         await this.preflight();
       this.terminalOwnerObservation = undefined;
       this.stopping = false;
+      this.observedTitle = undefined;
+      this.titleRevision = -1;
+      this.nativeTitleEpoch = undefined;
+      this.onDoing?.("reset");
       this.rosterDetached = false;
       this.rosterUnownedRun = false;
       this.requestedStopReason = undefined;
@@ -7698,6 +7800,7 @@ var init_pi = __esm(() => {
         this.fail(new Error(`pi exited with ${signal ? `signal ${signal}` : `code ${code}`}`));
         this.reportExit(exit);
       });
+      const titleRevisionBefore = this.titleRevision, titleEpochBefore = this.titleEpoch;
       const state = await this.waitRpc("get_state", 15000);
       if (state.success !== true || typeof state.data?.sessionId !== "string" || typeof state.data?.sessionFile !== "string" || !state.data.sessionId || !state.data.sessionFile)
         throw new Error("Pi get_state did not prove session identity");
@@ -7718,6 +7821,7 @@ var init_pi = __esm(() => {
       this.persistedOnce = existsSync7(this.sessionFile);
       if (this.opts.sessionId && this.sessionId !== this.opts.sessionId || this.opts.sessionFile && this.sessionFile !== this.opts.sessionFile)
         throw new Error("Pi startup session identity mismatch");
+      this.observeSnapshotTitle(state.data, titleRevisionBefore, titleEpochBefore);
       this.started = true;
       this.setState("idle");
     }
@@ -7807,11 +7911,13 @@ var init_pi = __esm(() => {
       if (this.pendingPromptId)
         throw new Error("Pi prompt admission is still pending; wait before reverifying the retained terminal");
       const epoch = this.rosterEpoch, lifecycle = this.rosterLifecycleRevision, session = this.sessionId, file = this.sessionFile;
+      const titleRevisionBefore = this.titleRevision, titleEpochBefore = this.titleEpoch;
       const snapshot = await this.sendTui({ type: "get_session_state" });
       if (epoch !== this.rosterEpoch || this.stopping || !this.verifiedOwner() || this.activeTools || snapshot?.sessionId !== session || snapshot?.sessionFile !== file || typeof snapshot?.idle !== "boolean")
         throw new Error("Pi roster return could not verify the current native session");
       if (lifecycle !== this.rosterLifecycleRevision)
         throw new Error("Pi native activity changed during roster return; retry with a fresh session snapshot");
+      this.observeSnapshotTitle(snapshot, titleRevisionBefore, titleEpochBefore);
       this.rosterDetached = false;
       this.hubPromptId = undefined;
       this.hubPromptGeneration = undefined;
@@ -7962,12 +8068,14 @@ var init_pi = __esm(() => {
         attempted = true;
         if (deliveryId)
           this.activeDeliveryIds.add(deliveryId);
+        const message = [envs.some((env) => env.private || remoteEnvelope(env)) ? undefined : this.opts.titlePreface?.(), renderDigest(envs, true)].filter(Boolean).join(`
+`);
         if (this.opts.mode === "tui") {
-          const pending = this.sendTui({ type: "prompt", message: renderDigest(envs, true) });
+          const pending = this.sendTui({ type: "prompt", message });
           promptId = this.pendingPromptId;
           await pending;
         } else
-          await this.sendRpc({ type: "prompt", message: renderDigest(envs, true) });
+          await this.sendRpc({ type: "prompt", message });
         if (promptId !== undefined && promptId !== this.pendingPromptId)
           return;
         if (this.fencedPrompt && this.rosterDetached) {
@@ -8144,6 +8252,10 @@ var init_pi = __esm(() => {
           this.opts.log?.(`[${this.id}] Pi session identity mismatch`);
           return;
         }
+        this.titleRevision = -1;
+        this.titleEpoch++;
+        this.nativeTitleEpoch = typeof event.titleEpoch === "string" && event.titleEpoch ? event.titleEpoch : undefined;
+        this.observeTitle(event.sessionName, event.titleRevision, event.titleEpoch);
         this.rememberTerminalOwner();
         this.startOwnerMonitor();
         if (this.opts.mode === "tui") {
@@ -8151,7 +8263,13 @@ var init_pi = __esm(() => {
           this.setState("idle");
         }
       }
+      if ((event.type === "session_title" || event.type === "agent_start" && Object.hasOwn(event, "sessionName")) && event.sessionId === this.sessionId && this.verifiedOwner())
+        this.observeTitle(event.sessionName, event.titleRevision, event.titleEpoch);
       if (event.type === "session_shutdown") {
+        this.observedTitle = undefined;
+        this.titleRevision = -1;
+        this.nativeTitleEpoch = undefined;
+        this.onDoing?.("reset");
         const exit = this.exitMetadata("session_shutdown");
         this.shutdownExit ??= exit;
         this.stopping = true;
@@ -8291,9 +8409,19 @@ var init_pi = __esm(() => {
       }
     }
     nextTuiCommand(timeout) {
-      const next = this.tuiQueue.shift();
-      if (next)
-        return Promise.resolve(next);
+      let next = this.tuiQueue.shift();
+      while (next) {
+        const pending = this.tuiCommands.get(String(next.id));
+        if (pending && pending.current?.() !== false) {
+          pending.onDispatch?.();
+          return Promise.resolve(next);
+        }
+        if (pending) {
+          this.tuiCommands.delete(String(next.id));
+          pending.reject(new Error("Pi session title admission changed before dispatch"));
+        }
+        next = this.tuiQueue.shift();
+      }
       return new Promise((resolvePromise) => {
         const entry = { resolve: resolvePromise, timer: setTimeout(() => {
           const i = this.tuiWaiters.indexOf(entry);
@@ -8304,7 +8432,9 @@ var init_pi = __esm(() => {
         this.tuiWaiters.push(entry);
       });
     }
-    sendTui(command) {
+    sendTui(command, current, onDispatch) {
+      if (current?.() === false)
+        return Promise.reject(new Error("Pi session title admission changed before dispatch"));
       const id = `ahub-${++this.seq}`;
       const fenced = this.fencedPrompt && command.type === "prompt";
       if (fenced) {
@@ -8319,7 +8449,7 @@ var init_pi = __esm(() => {
           this.tuiQueue = this.tuiQueue.filter((queued) => queued.id !== id);
           reject(new Error(`Pi TUI ${String(command.type)} acknowledgement timed out`));
         }, 30000);
-        this.tuiCommands.set(id, { command: wire, resolve: (value) => {
+        this.tuiCommands.set(id, { command: wire, current, onDispatch, resolve: (value) => {
           clearTimeout(timer);
           resolvePromise(value);
         }, reject: (error) => {
@@ -8329,6 +8459,7 @@ var init_pi = __esm(() => {
         const waiter = this.tuiWaiters.shift();
         if (waiter) {
           clearTimeout(waiter.timer);
+          onDispatch?.();
           waiter.resolve(wire);
         } else
           this.tuiQueue.push(wire);
@@ -12502,7 +12633,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@staix/agent-hub",
-    version: "0.29.0",
+    version: "0.30.0",
     description: "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
     license: "MIT",
     type: "module",
@@ -12519,7 +12650,7 @@ var init_package = __esm(() => {
       bun: ">=1.4.2"
     },
     dependencies: {
-      "@staix/agent-mem": "0.20.0"
+      "@staix/agent-mem": "0.20.1"
     },
     devDependencies: {
       "@modelcontextprotocol/sdk": "^1.27.1",
@@ -12746,7 +12877,7 @@ function profileTaskTools(profile = "dev", stages, criteria = false) {
     if (customProfile && tool.name === "hub_task_propose")
       properties.class = { type: "string", enum: [...new Set([...Object.keys(data.classes), ...PROFILE_CLASS_NAMES.filter((v) => projectProfile("dev").classes[v])])] };
     if (customProfile && properties.plan && tool.name !== "hub_task_accept" && tool.name !== "hub_experiment_record")
-      properties.plan = { ...plan, properties: { ...Object.fromEntries(data.plan_keys.map((key) => [key, plan.properties[key] ?? list(key === "sections" ? "document heading anchors, such as report.md#methods" : key === "sources" ? "citation ids, DOI or source URL ids" : "short claim ids to verify")])) } };
+      properties.plan = { ...plan, properties: { ...Object.fromEntries(data.plan_keys.map((key) => [key, plan.properties[key] ?? list(key === "sections" ? "document heading anchors, such as report.md#methods" : key === "sources" ? "registered src:<16 hex> source ids; list available ids with ahub source list" : "short claim ids to verify")])) } };
     if (customProfile && tool.name === "hub_task_done" && data.name !== "dev") {
       const summaryProp = properties.summary;
       properties.summary = {
@@ -12756,7 +12887,7 @@ function profileTaskTools(profile = "dev", stages, criteria = false) {
     }
     if (customProfile && tool.name === "hub_backlog_split") {
       const parts = properties.parts;
-      const selectedPlan = { ...plan, properties: { ...Object.fromEntries(data.plan_keys.map((key) => [key, plan.properties[key] ?? list(key === "sections" ? "document heading anchors, such as report.md#methods" : key === "sources" ? "citation ids, DOI or source URL ids" : "short claim ids to verify")])) } };
+      const selectedPlan = { ...plan, properties: { ...Object.fromEntries(data.plan_keys.map((key) => [key, plan.properties[key] ?? list(key === "sections" ? "document heading anchors, such as report.md#methods" : key === "sources" ? "registered src:<16 hex> source ids; list available ids with ahub source list" : "short claim ids to verify")])) } };
       properties.parts = { ...parts, items: { ...parts.items, properties: { ...parts.items.properties, plan: selectedPlan } } };
     }
     if (criteria && properties.plan && tool.name !== "hub_experiment_record") {
@@ -12784,7 +12915,7 @@ var IMPLEMENTER_HUB_TOOL_NAMES, IMPLEMENTER_PERMISSION_TOOL, ACTIONABLE_MESSAGE_
   name,
   description,
   inputSchema: { type: "object", properties: name === "hub_review" || name === "hub_task_propose" ? { ...properties, request_id: toolWriteRequestId } : properties, required, additionalProperties: false }
-}), STUDY_TOOLS, HANDOFF_TOOLS, BOUNDED_TASK_TOOLS, CAPABILITY_TOOLS, TASK_TOOLS, PLANNER_REVIEW_TOOLS, TASK_TOOL_NAMES, CONDUCTOR_TOOLS, CONDUCTOR_TOOL_NAMES, READ_ONLY_PROJECT_TOOLS, ROLE_TEXT, DEFAULT_ROLES;
+}), STUDY_TOOLS, HANDOFF_TOOLS, BOUNDED_TASK_TOOLS, CAPABILITY_TOOLS, TASK_TOOLS, PLANNER_REVIEW_TOOLS, SESSION_TITLE_TOOL, TASK_TOOL_NAMES, CONDUCTOR_TOOLS, CONDUCTOR_TOOL_NAMES, READ_ONLY_PROJECT_TOOLS, ROLE_TEXT, DEFAULT_ROLES;
 var init_hub_tools = __esm(() => {
   init_test_integrity();
   init_sdlc();
@@ -12847,7 +12978,7 @@ var init_hub_tools = __esm(() => {
     },
     additionalProperties: false
   };
-  acceptPlan = { ...plan, properties: { ...plan.properties, sections: list("document heading anchors, such as report.md#methods"), sources: list("citation ids, DOI or source URL ids"), claims: list("short claim ids to verify") } };
+  acceptPlan = { ...plan, properties: { ...plan.properties, sections: list("document heading anchors, such as report.md#methods"), sources: list("registered src:<16 hex> source ids; list available ids with ahub source list"), claims: list("short claim ids to verify") } };
   STUDY_TOOLS = new Set(["hub_study_draft", "hub_study_revise", "hub_study_show", "hub_experiment_show", "hub_experiment_record", "hub_study_handoff"]);
   HANDOFF_TOOLS = new Set(["hub_task_handoff", "hub_task_handoffs"]);
   BOUNDED_TASK_TOOLS = new Set(["hub_task_spec", "hub_check_start", "hub_check_result", "hub_check_cancel"]);
@@ -12916,10 +13047,11 @@ var init_hub_tools = __esm(() => {
     tool2("hub_plan_review", "Record a planner review against the task planning revision and host-read issue edit time. Configured planner or person only; never accepts caller issue timestamps.", { id: id2, revision: { type: "integer", minimum: 0 }, reason: { ...str2, maxLength: 1000 }, ...costPlanProperties }, ["id", "revision", "reason"]),
     tool2("hub_sdlc_costs", "Read bounded review and CI cost metrics for linked merged PRs. Planner/person only; metadata only, no board writes.", { repo: str2 }),
     tool2("hub_sdlc_metrics", "Read SDLC metrics from board history: time from acceptance to plan, first review and merge, first-pass approval and rework rounds, first-pass CI and same-head reruns, stale-head re-reviews, stalls, and the control band tiers when sdlc.toml sets [bands]. Planner/person only; read-only, no model and no GitHub issue.", { since: str2 }),
-    tool2("hub_backlog_return_untouched", "Return accepted but untouched work to the backlog with its history and planning retained. Refuses execution/branch/commit evidence; planner or person only.", { id: id2, revision: { type: "integer", minimum: 0 }, reason: { ...str2, maxLength: 1000 } }, ["id", "revision", "reason"])
+    tool2("hub_backlog_return_untouched", "Return accepted but untouched work to the backlog with its history and planning retained. Optional fields.reserved changes the reservation atomically before capacity is released; null clears it. Refuses execution/branch/commit evidence; planner or person only, and a person's reservation requires the person.", { id: id2, revision: { type: "integer", minimum: 0 }, reason: { ...str2, maxLength: 1000 }, fields: { type: "object", properties: { reserved: { type: ["string", "null"], minLength: 1, maxLength: 32 } }, additionalProperties: false } }, ["id", "revision", "reason"])
   ];
   TASK_TOOLS.push(...PLANNER_REVIEW_TOOLS);
-  TASK_TOOL_NAMES = new Set(TASK_TOOLS.map((t) => t.name));
+  SESSION_TITLE_TOOL = tool2("hub_set_title", "Name your own session once the task is clear. Only an unnamed session accepts the first agent name; the person may replace it. Private contexts refuse the write. No task, branch or instance is renamed.", { title: { type: "string", description: "1-80 characters after doingText normalization (one line, controls removed, surrounding whitespace trimmed)" } }, ["title"]);
+  TASK_TOOL_NAMES = new Set([...TASK_TOOLS.map((t) => t.name), SESSION_TITLE_TOOL.name]);
   CONDUCTOR_TOOLS = [
     tool2("hub_status", "Inspect public team state, holds, quota windows, task counts and pending approval peer/tool/age. Only the configured conductor may use this tool.", {}),
     tool2("hub_task_show", "Read a task's public view and history, its done summary and check result included. PII tasks remain stubs. Only the conductor, the configured planner and the task's current owner and reviewer may use this tool.", { id: id2 }, ["id"]),
@@ -13030,6 +13162,32 @@ var init_local_worker = __esm(() => {
     deliveryOnly = true;
     hubOwned = true;
     history = [];
+    title = "";
+    get sessionTitle() {
+      return this.title;
+    }
+    get titleSession() {
+      return this.sessionId;
+    }
+    async setSessionTitle(title, onlyIfUnnamed, current) {
+      if (typeof title !== "string" || !title.trim() || [...title].length > 80 || typeof onlyIfUnnamed !== "boolean")
+        return { ok: false, reason: "invalid", error: "Session title must contain 1-80 normalized characters and use a conditional-write flag; correct the title request and try again." };
+      if (this.state === "offline")
+        return { ok: false, reason: "invalid", error: "Local worker session is offline; start the peer and check ahub status before naming it." };
+      let admitted = false;
+      try {
+        admitted = current?.() !== false;
+      } catch {}
+      if (!admitted)
+        return { ok: false, reason: "invalid", error: "Session title admission changed before the write; check ahub status and retry only in the current public session." };
+      if (onlyIfUnnamed && this.title)
+        return { ok: false, reason: "already_named", error: "This session already has a title; keep it or ask the person to rename it with ahub title." };
+      this.title = title;
+      try {
+        this.onDoing?.("title", title);
+      } catch {}
+      return { ok: true };
+    }
     sessionId = `agent-hub-local-${randomUUID7()}`;
     routes;
     warnedLegacyRoutes = new Set;
@@ -13060,7 +13218,7 @@ var init_local_worker = __esm(() => {
             throw new Error("route belongs to an ended turn");
           if (signal.aborted)
             throw new Error("turn cancelled before model request");
-          const tools = judge ? undefined : [...this.toolSchemas(), ...this.opts.taskTool ? [...profileTaskTools(this.opts.profile, this.opts.sdlcStages, this.opts.sdlcCriteria).filter((tool) => tool.name !== "hub_delivery_retry"), ...CONDUCTOR_TOOLS].map(asFunction) : []];
+          const tools = judge ? undefined : [...this.toolSchemas(), ...this.opts.taskTool ? [...profileTaskTools(this.opts.profile, this.opts.sdlcStages, this.opts.sdlcCriteria).filter((tool) => tool.name !== "hub_delivery_retry"), ...CONDUCTOR_TOOLS].concat(SESSION_TITLE_TOOL).map(asFunction) : []];
           const result = await this.opts.omni.chat({ model, messages, ...tools ? { tools } : {}, ...judge ? { max_tokens: maxTokens ?? 2048 } : {} }, { signal, ...pii ? { onCampusOnly: true } : {} });
           this.recordUsage(result, model, task);
           if (generation !== this.turn)
@@ -13113,7 +13271,8 @@ var init_local_worker = __esm(() => {
       this.setState("busy");
       if (deliveryId)
         this.delivery({ id: deliveryId, state: "accepted" });
-      const msgs = [{ role: "user", content: renderDigest(envs, true) }];
+      const msgs = [{ role: "user", content: [envs.some((env) => env.private || remoteEnvelope(env)) ? undefined : this.opts.titlePreface?.(), renderDigest(envs, true)].filter(Boolean).join(`
+`) }];
       const progress = { sideEffects: 0, last: "" };
       const requestedPolicy = this.opts.turnPolicy?.(envs);
       const policy = envs.some((env) => env.private) ? { ...requestedPolicy, pii: true } : requestedPolicy;
@@ -13250,7 +13409,7 @@ var init_local_worker = __esm(() => {
               this.abort?.abort();
               throw new ApprovalWaitStop(this.approvalStopReason);
             }
-            if (!remoteTurn)
+            if (!remoteTurn && name !== "hub_set_title")
               this.observeTool(call, output, policy, `${this.sessionId}.${turn}.${step}`);
             if (name !== "hub_send" && name !== "doc_read" && name !== "web_fetch" && !TASK_TOOL_NAMES.has(name) && !CONDUCTOR_TOOL_NAMES.has(name))
               capture?.observe({ tool: call.function.name, args: call.function.arguments, output, id: call.id, sourceId: `${this.sessionId}.${turn}.${step}.${captureInvocation++}`, paths: touchedPaths(call.function.name, safeParse(call.function.arguments)) });
@@ -13385,7 +13544,7 @@ var init_local_worker = __esm(() => {
       }
       const fixedModel = policy?.fixedModel ?? this.opts.fixedModel;
       const task = policy?.task === undefined ? undefined : Number(policy.task);
-      const tools = [...this.toolSchemas(), ...this.opts.taskTool ? [...profileTaskTools(this.opts.profile, this.opts.sdlcStages, this.opts.sdlcCriteria).filter((tool) => tool.name !== "hub_delivery_retry"), ...CONDUCTOR_TOOLS].map(asFunction) : []];
+      const tools = [...this.toolSchemas(), ...this.opts.taskTool ? [...profileTaskTools(this.opts.profile, this.opts.sdlcStages, this.opts.sdlcCriteria).filter((tool) => tool.name !== "hub_delivery_retry"), ...CONDUCTOR_TOOLS].concat(SESSION_TITLE_TOOL).map(asFunction) : []];
       const signal = this.abort.signal;
       const messages = [{ role: "system", content: system(this.opts.cwd, this.opts.preamble) }, ...this.history, ...turnMsgs];
       const routed = await this.hubCall(route, messages, policy, signal);
@@ -15912,6 +16071,8 @@ var init_builtin_metadata = __esm(() => {
       projection: { roleRank: 4, startRank: 0, helpRank: 6, plannerEligible: false },
       api: 1,
       kind: "pi",
+      title: "hub",
+      titlePersistence: "native",
       enabledSwitchStartOnly: true,
       displayName: "Pi",
       family: "pi",
@@ -15936,6 +16097,7 @@ var init_builtin_metadata = __esm(() => {
       projection: { roleRank: 3, helpRank: 7, plannerEligible: false },
       api: 1,
       kind: "local",
+      title: "hub",
       displayName: "Local worker",
       family: "local",
       transport: "hub-native",
@@ -16543,6 +16705,8 @@ function assertNativeCapabilityScope(definition) {
     return;
   const declared = (block, key) => block !== undefined && (key in block);
   const restricted = [
+    ["title", definition.title !== undefined],
+    ["titlePersistence", definition.titlePersistence !== undefined],
     ["start.acpCommand", declared(definition.start, "acpCommand")],
     ["attach.admission", declared(definition.attach, "admission")],
     ["budget.resetSoftTokensOnResume", declared(definition.budget, "resetSoftTokensOnResume")],

package/src/adapters/compat.ts

@@ -29,11 +29,11 @@ export interface CompatPolicy {
 
 const plain = (text: string) => text.length <= 64 && /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(text) ? text : undefined;
 export const COMPAT = {
-  // Receipt: docs/verification/2026-10-26-pi-140-compat.md
-  pi: { label: "Pi", verified: ["1.4.0"], gate: "contract", probe: ["pi", "--version"], config: "pi.cmd",
+  // Receipts: docs/verification/2026-10-26-pi-140-compat.md (1.4.0); docs/verification/2026-11-03-pi-150-compat.md (1.5.0)
+  pi: { label: "Pi", verified: ["1.4.0", "1.5.0"], gate: "contract", probe: ["pi", "--version"], config: "pi.cmd",
     parse: out => plain(out.trim()),
-    trustNote: "The model-free extension load, RPC session identity and managed tool receipt path were checked on 1.4.0. Permissions remain host-owned; account-backed inference and another version's extension contract are unverified.",
-    receipt: "docs/verification/2026-10-26-pi-140-compat.md" },
+    trustNote: "The model-free extension load, RPC session identity and managed tool receipt path were checked on 1.4.0 and 1.5.0. Permissions remain host-owned; account-backed inference and another version's extension contract are unverified.",
+    receipt: "docs/verification/2026-11-03-pi-150-compat.md" },
   // Transport receipts: docs/verification/2026-10-23-headless-claude-permissions.md; 2.1.310: docs/verification/2026-10-26-claude-implementer-2.1.310.md; 2.1.314 (transport and wrapper): docs/verification/2026-10-31-claude-implementer-2.1.314.md; 2.1.316: docs/verification/2026-10-31-claude-implementer-2.1.316.md; host-wrapper receipt below repeats with them.
   "claude-implementer": { label: "Claude headless implementer", verified: ["2.1.309", "2.1.310", "2.1.314", "2.1.316"], gate: "contract", probe: ["claude", "--version"],
     parse: out => plain(out.trim().replace(/ \(Claude Code\)$/, "")),
@@ -53,14 +53,14 @@ export const COMPAT = {
     parse: out => { try { const v = JSON.parse(out).semver; return typeof v === "string" ? plain(v) : undefined; } catch { return undefined; } },
     trustNote: "The ACP, serve and MCP contract was verified on 0.98.1 and 0.99.1 and steering on 0.99.0 and 0.99.1; an untested version may change them.",
     receipt: "docs/verification/2026-10-26-jcode-0.99.1.md" },
-  agy: { label: "agy", verified: ["1.4.2", "1.4.7"], line: { min: "1.4.0", below: "1.5.0" }, gate: "contract", probe: ["agy", "--version"],
+  agy: { label: "agy", verified: ["1.4.2", "1.4.7", "1.4.12"], line: { min: "1.4.0", below: "1.5.0" }, gate: "contract", probe: ["agy", "--version"],
     parse: out => plain(out.trim()),
-    trustNote: "Only 1.4.2 and 1.4.7 are T0-verified; the plugin MCP and hook contract of another version is unverified.",
-    receipt: "docs/verification/2026-10-26-agy-1.4.7.md" },
-  qwen: { label: "Qwen Code", verified: ["0.25.0", "0.26.0", "0.26.1", "0.26.4"], gate: "contract", probe: ["qwen", "--version"], config: "qwen_cmd",
+    trustNote: "Only 1.4.2, 1.4.7 and 1.4.12 are T0-verified; the plugin MCP and hook contract of another version is unverified.",
+    receipt: "docs/verification/2026-11-03-agy-1.4.12-launcher-nonce.md" },
+  qwen: { label: "Qwen Code", verified: ["0.25.0", "0.26.0", "0.26.1", "0.26.4", "0.26.5"], gate: "contract", probe: ["qwen", "--version"], config: "qwen_cmd",
     parse: out => plain(out.trim()),
-    trustNote: "Native ACP identity, mode ids and permission callbacks were re-checked without inference on 0.26.4; real model turns remain unverified. Another version may change those contracts.",
-    receipt: "docs/verification/2026-10-31-qwen-0264-acp.md" },
+    trustNote: "Native ACP identity, mode ids and permission callbacks were re-checked without inference on 0.26.4 and 0.26.5; real model turns remain unverified. Another version may change those contracts.",
+    receipt: "docs/verification/2026-11-03-qwen-0265-acp.md" },
   // Receipt: docs/verification/2026-10-25-qwen-dual-output-t0.md. The dual-output contract (input file, event file, can_use_tool control requests) is its own entry:
   // the ACP receipts of the headless `qwen` entry say nothing about it, so that entry is not widened and this one carries no `line`.
   "qwen-dual": { label: "Qwen Code dual-output TUI", verified: ["0.26.1"], gate: "contract", probe: ["qwen", "--version"], config: "qwen_cmd",

package/src/adapters/definitions/builtin-metadata.ts

@@ -119,7 +119,7 @@ export const NATIVE_BUILTIN_DEFINITIONS_WITHOUT_QWEN: readonly AdapterDefinition
   },
   {
     projection: { roleRank: 4, startRank: 0, helpRank: 6, plannerEligible: false },
-    api: 1, kind: "pi", enabledSwitchStartOnly: true, displayName: "Pi", family: "pi", transport: "hub-native",
+    api: 1, kind: "pi", title: "hub", titlePersistence: "native", enabledSwitchStartOnly: true, displayName: "Pi", family: "pi", transport: "hub-native",
     roles: implementerRoles, defaultOnRoster: false, trust: { onPrem: false, hubSandboxed: true },
     start: { create: createPi, exclusiveStartRefusal: "Pi start is in progress; inspect status before retrying", refreshTools: true, explicitHeadlessMode: true, daemonPort: "pi-rpc", forms: dualForms, defaultForm: "tui", conductorStartable: true, upStart: { allowed: true }, autoStart: "pi.auto_start", conductorStartArgs: piConductorStartArgs, hubSwitches: [], ownedFlags: [] },
     identity: { mcp: "env" }, instances: { mode: "headless" },
@@ -132,7 +132,7 @@ export const NATIVE_BUILTIN_DEFINITIONS_WITHOUT_QWEN: readonly AdapterDefinition
   },
   {
     projection: { roleRank: 3, helpRank: 7, plannerEligible: false },
-    api: 1, kind: "local", displayName: "Local worker", family: "local", transport: "hub-native",
+    api: 1, kind: "local", title: "hub", displayName: "Local worker", family: "local", transport: "hub-native",
     roles: implementerRoles, defaultOnRoster: true, trust: { onPrem: true, hubSandboxed: true },
     start: { create: createLocal, reconfigureWhileAttached: true, refreshTools: true, daemonPort: "local-worker", forms: headlessForms, defaultForm: "headless", conductorStartable: true, upStart: { allowed: true }, hubSwitches: [], ownedFlags: [] },
     identity: { mcp: "env" }, instances: { mode: "headless" },

package/src/adapters/local-worker.ts

@@ -5,8 +5,8 @@ import type { StaySwitchPolicy } from "../models/route/stage.ts";
 import type { ToolObservation } from "../models/route/signals.ts";
 import { randomUUID } from "node:crypto";
 import { MAX_HOP, remoteEnvelope, renderDigest, replyAudience, replyParent, STANDING_INSTRUCTION, USER, type Envelope, type EnvelopeOpts, type PeerId } from "../hub/envelope.ts";
-import { CONDUCTOR_TOOL_NAMES, CONDUCTOR_TOOLS, TASK_TOOL_NAMES, TASK_TOOLS, profileTaskTools } from "../hub/hub-tools.ts";
-import { BasePeer } from "../hub/peers.ts";
+import { CONDUCTOR_TOOL_NAMES, CONDUCTOR_TOOLS, TASK_TOOL_NAMES, TASK_TOOLS, profileTaskTools, SESSION_TITLE_TOOL } from "../hub/hub-tools.ts";
+import { BasePeer, type SessionTitleResult } from "../hub/peers.ts";
 import type { PublishResult } from "../hub/bus.ts";
 import { profile, proxyEnv, type SandboxNetwork } from "../local/sandbox.ts";
 import type { DocReadPort } from "../local/doc-read.ts";
@@ -22,6 +22,8 @@ export interface LocalOptions {
   profile?: import("../hub/profiles.ts").ProfileSelection;
   sdlcStages?: readonly string[];
   sdlcCriteria?: boolean;
+  /** Host-owned conditional instruction, sampled once per delivered turn. */
+  titlePreface?: () => string | undefined;
   cwd: string;
   omni: OmniRoute;
   /** In-process hub route id; legacy routes use the fixed model. */
@@ -82,6 +84,20 @@ export class LocalPeer extends BasePeer {
   readonly deliveryOnly: boolean = true;
   readonly hubOwned: boolean = true;
   private readonly history: ChatMessage[] = [];
+  private title = "";
+  get sessionTitle(): string { return this.title; }
+  get titleSession(): string { return this.sessionId; }
+  async setSessionTitle(title: string, onlyIfUnnamed: boolean, current?: () => boolean): Promise<SessionTitleResult> {
+    if (typeof title !== "string" || !title.trim() || [...title].length > 80 || typeof onlyIfUnnamed !== "boolean") return { ok: false, reason: "invalid", error: "Session title must contain 1-80 normalized characters and use a conditional-write flag; correct the title request and try again." };
+    if (this.state === "offline") return { ok: false, reason: "invalid", error: "Local worker session is offline; start the peer and check ahub status before naming it." };
+    let admitted = false;
+    try { admitted = current?.() !== false; } catch { /* host admission failure is a refusal */ }
+    if (!admitted) return { ok: false, reason: "invalid", error: "Session title admission changed before the write; check ahub status and retry only in the current public session." };
+    if (onlyIfUnnamed && this.title) return { ok: false, reason: "already_named", error: "This session already has a title; keep it or ask the person to rename it with ahub title." };
+    this.title = title;
+    try { this.onDoing?.("title", title); } catch { /* observation failure cannot undo the saved local title */ }
+    return { ok: true };
+  }
   private readonly sessionId = `agent-hub-local-${randomUUID()}`;
   private readonly routes: HubRouteRuntime;
   private readonly warnedLegacyRoutes = new Set<string>();
@@ -113,7 +129,7 @@ export class LocalPeer extends BasePeer {
         await this.requireBudget(envs, "model_calls");
         if (generation !== this.turn) throw new Error("route belongs to an ended turn");
         if (signal.aborted) throw new Error("turn cancelled before model request");
-        const tools = judge ? undefined : [...this.toolSchemas(), ...(this.opts.taskTool ? [...profileTaskTools(this.opts.profile, this.opts.sdlcStages, this.opts.sdlcCriteria).filter(tool => tool.name !== "hub_delivery_retry"), ...CONDUCTOR_TOOLS].map(asFunction) : [])];
+        const tools = judge ? undefined : [...this.toolSchemas(), ...(this.opts.taskTool ? [...profileTaskTools(this.opts.profile, this.opts.sdlcStages, this.opts.sdlcCriteria).filter(tool => tool.name !== "hub_delivery_retry"), ...CONDUCTOR_TOOLS].concat(SESSION_TITLE_TOOL).map(asFunction) : [])];
         const result = await this.opts.omni.chat({ model, messages, ...(tools ? { tools } : {}), ...(judge ? { max_tokens: maxTokens ?? 2048 } : {}) }, { signal, ...(pii ? { onCampusOnly: true } : {}) });
         this.recordUsage(result, model, task);
         if (generation !== this.turn) throw new Error("route belongs to an ended turn");
@@ -165,7 +181,7 @@ export class LocalPeer extends BasePeer {
     if (deliveryId) this.delivery({ id: deliveryId, state: "accepted" });
     // The turn works on its own message list and joins the history only as a whole, so a failed or aborted turn can
     // never leave a tool call without its result (strict servers reject that history forever after).
-    const msgs: ChatMessage[] = [{ role: "user", content: renderDigest(envs, true) }];
+    const msgs: ChatMessage[] = [{ role: "user", content: [envs.some(env => env.private || remoteEnvelope(env)) ? undefined : this.opts.titlePreface?.(), renderDigest(envs, true)].filter(Boolean).join("\n") }];
     const progress = { sideEffects: 0, last: "" };
     const requestedPolicy = this.opts.turnPolicy?.(envs);
     const policy = envs.some(env => env.private) ? { ...requestedPolicy, pii: true } : requestedPolicy;
@@ -288,7 +304,7 @@ export class LocalPeer extends BasePeer {
           const result: ChatMessage = { role: "tool", tool_call_id: call.id, content: output, is_error: toolResultFailed(name, output) };
           msgs.push(result); results.push(result);
           if (this.approvalStopReason) { this.abort?.abort(); throw new ApprovalWaitStop(this.approvalStopReason); }
-          if (!remoteTurn) this.observeTool(call, output, policy, `${this.sessionId}.${turn}.${step}`);
+          if (!remoteTurn && name !== "hub_set_title") this.observeTool(call, output, policy, `${this.sessionId}.${turn}.${step}`);
           // Hub tool arguments/results are not capture evidence; Tasks owns its screened memory writes.
           // doc_read text is converted document content (a converter can surface hidden text), never memory evidence: not captured, whatever the turn.
           // web_fetch text is a third party's page and its URL is the model's own request: neither is memory evidence either (#515b).
@@ -401,7 +417,7 @@ export class LocalPeer extends BasePeer {
     }
     const fixedModel = policy?.fixedModel ?? this.opts.fixedModel;
     const task = policy?.task === undefined ? undefined : Number(policy.task);
-    const tools = [...this.toolSchemas(), ...(this.opts.taskTool ? [...profileTaskTools(this.opts.profile, this.opts.sdlcStages, this.opts.sdlcCriteria).filter(tool => tool.name !== "hub_delivery_retry"), ...CONDUCTOR_TOOLS].map(asFunction) : [])];
+    const tools = [...this.toolSchemas(), ...(this.opts.taskTool ? [...profileTaskTools(this.opts.profile, this.opts.sdlcStages, this.opts.sdlcCriteria).filter(tool => tool.name !== "hub_delivery_retry"), ...CONDUCTOR_TOOLS].concat(SESSION_TITLE_TOOL).map(asFunction) : [])];
     const signal = this.abort!.signal;
     const messages: ChatMessage[] = [{ role: "system", content: system(this.opts.cwd, this.opts.preamble) }, ...this.history, ...turnMsgs];
     const routed = await this.hubCall(route, messages, policy, signal);