@staix/agent-hub 0.7.2 → 0.7.4

package/CHANGELOG.md

@@ -2,6 +2,15 @@
 
 ## Unreleased
 
+## 0.7.4
+
+- A Claude session that never persisted a transcript (zero turns) no longer wedges an upgrade at restore: when the original transcript is absent, the coordinator accepts the fresh session the operator attached, because nothing was preserved and nothing is lost. Sessions with a transcript keep the strict identity check; Codex stays strict in all cases (#21).
+
+## 0.7.3
+
+- A peer that detaches mid-upgrade no longer wedges the recovery: readiness ignores a now-offline peer's stale identity (a reattach with a different thread still blocks), an already-exited terminal is closed as a no-op instead of being waited on, and resume can drive the operation to release once the peer returns (#21).
+- The check.sh leak guard matches tmp test roots only, so a real hub in a directory starting with `ahub-` no longer trips it (#56).
+
 ## 0.7.2
 
 - Local inference defaults to a bounded Ollama MLX runtime: `ahub models setup/start/stop` manages it, the configured context is advertised to Pi, and the legacy standalone MLX runtime needs an explicit legacy provider (#51, #52).

package/README.md

@@ -4,7 +4,7 @@ Native multi-agent hub for one developer's machine: Claude Code, Codex, Kimi Cod
 hub-owned local-LLM worker collaborate as peers in independent project directories, with
 task-aware model routing (Switchyard) in front of a self-hosted gateway (OmniRoute).
 
-Status: 0.7.2, control protocol 10. Durable delivery records distinguish queued
+Status: 0.7.4, control protocol 10. Durable delivery records distinguish queued
 work from uncertain execution. The [smoke checklist](docs/smoke.md) records
 verified paths and remaining prerequisites.
 
@@ -28,7 +28,7 @@ cd <your project> && ahub init && ahub up && ahub tail
 Or install the same version from GitHub:
 
 ```bash
-bun add -g github:STAIxBWLB/agent-hub#v0.7.2 && ahub setup
+bun add -g github:STAIxBWLB/agent-hub#v0.7.4 && ahub setup
 ```
 
 The installed commands remain `ahub` and `agent-hub`.

package/docs/operations.md

@@ -1,6 +1,6 @@
 # Operations guide
 
-This guide describes ahub 0.7.2 and control protocol 10. Live verification
+This guide describes ahub 0.7.4 and control protocol 10. Live verification
 results and remaining prerequisites are recorded separately in [the smoke ledger](smoke.md).
 
 ## Install and start
@@ -182,27 +182,27 @@ For an upgrade from 0.6.4 (protocol 9) or 0.7.0, use the patched coordinator wit
 replacing the global CLI prematurely. Run from the project directory:
 
 ```bash
-bunx --package @staix/agent-hub@0.7.2 ahub upgrade --to 0.7.2 --dry-run
-bunx --package @staix/agent-hub@0.7.2 ahub upgrade --to 0.7.2 --yes
+bunx --package @staix/agent-hub@0.7.4 ahub upgrade --to 0.7.4 --dry-run
+bunx --package @staix/agent-hub@0.7.4 ahub upgrade --to 0.7.4 --yes
 ```
 
 The coordinator verifies and retains the exact target package, preserves its
 own source, and promotes the global CLI only after restored projects pass
 readback. Do not use the old protocol-9 coordinator to target protocol 10.
 
-Once the installed CLI is 0.7.2, review the current project or all registered
+Once the installed CLI is 0.7.4, review the current project or all registered
 projects first:
 
 ```bash
 ahub restart --dry-run
-ahub upgrade --to 0.7.2 --dry-run
+ahub upgrade --to 0.7.4 --dry-run
 ```
 
 Apply only after reviewing the plan:
 
 ```bash
 ahub restart --yes
-ahub upgrade --to 0.7.2 --yes
+ahub upgrade --to 0.7.4 --yes
 ahub recovery status <operation-id>
 ahub recovery resume <operation-id>
 ahub recovery abort <operation-id>

package/docs/quickstart.md

@@ -17,7 +17,7 @@ ahub setup                                # installs the Claude Code channel plu
 Or use the matching GitHub release:
 
 ```bash
-bun add -g github:STAIxBWLB/agent-hub#v0.7.2
+bun add -g github:STAIxBWLB/agent-hub#v0.7.4
 ahub setup
 ```
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@staix/agent-hub",
-  "version": "0.7.2",
+  "version": "0.7.4",
   "description": "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   "license": "MIT",
   "type": "module",

package/plugins/agent-hub/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-hub",
-  "version": "0.7.2",
+  "version": "0.7.4",
   "description": "Channel between Claude Code and the agent-hub daemon: peer messages from Codex, Kimi and the local worker arrive as channel events; hub_send replies.",
   "author": {
     "name": "Young Joon Lee",

package/plugins/agent-hub/server.js

@@ -15727,7 +15727,7 @@ class ControlClient {
 // package.json
 var package_default = {
   name: "@staix/agent-hub",
-  version: "0.7.2",
+  version: "0.7.4",
   description: "Native multi-agent hub: Claude Code, Codex, Kimi Code, Pi and local inference as peers in one project",
   license: "MIT",
   type: "module",

package/src/cli/upgrade-runtime.ts

@@ -1,4 +1,5 @@
 import { cpSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync } from "node:fs";
+import { homedir } from "node:os";
 import { join, resolve } from "node:path";
 import { randomUUID } from "node:crypto";
 import { ControlClient, PROTOCOL, RECOVERY_SOURCE_PROTOCOLS, readControl } from "../hub/control-client.ts";
@@ -13,6 +14,17 @@ import { refreshManager } from "../hub/manager.ts";
 export const PACKAGE_ROOT = resolve(import.meta.dir, "../..");
 const orcaExecutable = () => process.env.ORCA_CLI_COMMAND || (process.env.ORCA_DEV_REPO_ROOT ? "orca-dev" : process.platform === "linux" && !process.env.ORCA_TERMINAL_HANDLE ? "orca-ide" : "orca");
 
+/**
+ * Claude Code persists a transcript at projects/<slug>/<sessionId>.jsonl under its config
+ * dir, creating the project directory only with the first persisted turn; the slug replaces
+ * every non-alphanumeric character of the project root with '-'.
+ */
+function claudeTranscriptExists(binding: TerminalBinding): boolean {
+  const config = binding.launch.env.CLAUDE_CONFIG_DIR ?? join(homedir(), ".claude");
+  const slug = binding.projectRoot.replace(/[^a-zA-Z0-9]/g, "-");
+  return existsSync(join(config, "projects", slug, `${binding.sessionId}.jsonl`));
+}
+
 function terminalOptions(run: RunCommand = runCommand): TerminalRecoveryOptions {
   return { orcaExecutable: orcaExecutable(), runner: async (args) => {
     const result = await run([orcaExecutable(), ...args], { timeoutMs: 610_000 });
@@ -224,13 +236,26 @@ export function makeRecoveryDriver(run: RunCommand = runCommand): RecoveryDriver
           }
           progress.terminals[key] = true; save(); continue;
         }
+        // A peer whose TUI already exited left nothing to close: the source reports it
+        // detached, and inventory silence is the same proof the pending-reconcile path
+        // accepts. No mutation is issued for a terminal that no longer exists (#21).
+        const attached = (await inspectRecovery(planned.project)).peers.find((item) => item.id === binding.peer);
+        if (attached?.state === "offline") {
+          const result = await run([orcaExecutable(), "terminal", "list", "--json"]);
+          const inventory = JSON.parse(result.stdout);
+          const rows = inventory.result?.terminals;
+          if (result.code !== 0 || inventory.ok !== true || !Array.isArray(rows) || inventory.result?.truncated ||
+              rows.some((t: any) => t.handle === binding.handle || t.incarnationId === binding.incarnationId)) {
+            throw new Error(`${binding.peer}: terminal close outcome needs manual reconciliation`);
+          }
+          progress.terminals[key] = true; save(); continue;
+        }
         const idle = await waitForIdle(binding, 600_000, terminalOptions(run));
         if (!idle.satisfied) throw new Error(`${binding.peer}: terminal is not verified idle; source retained`);
         const source = await inspectRecovery(planned.project);
         if (source.instanceId !== planned.source.instanceId || source.recovery?.operationId !== op.id || !source.recovery.ready) {
           throw new Error("source preparation expired or changed while waiting for the terminal; no terminal was closed");
-        }
-        // Refresh the same prepared lease immediately before the terminal effect. Preserve
+        }        // Refresh the same prepared lease immediately before the terminal effect. Preserve
         // the original peer roster, including any terminal already closed in this operation.
         await control(planned.project, "prepare", op.id, planned.source.instanceId!);
         progress.terminals[key] = "pending"; save();
@@ -273,10 +298,20 @@ export function makeRecoveryDriver(run: RunCommand = runCommand): RecoveryDriver
         if (progress.terminals[key] === "pending") {
           const observed = await inspectRecovery(planned.project);
           const peer = observed.peers.find((p) => p.id === original.peer);
-          if ((original.peer === "codex" ? peer?.threadId : peer?.sessionId) !== original.sessionId) {
-            throw new Error(`${original.peer}: terminal creation outcome is uncertain; attach the original session manually, then resume`);
+          const attached = original.peer === "codex" ? peer?.threadId : peer?.sessionId;
+          let expected = original;
+          if (attached !== original.sessionId) {
+            // #21: a Claude session that never got a first turn has no transcript on disk,
+            // so `claude --resume S` can never succeed and nothing it stood for is lost by
+            // accepting the fresh attach. A session WITH a transcript keeps the strict
+            // identity check. Codex stays strict too: its rollout jsonl is written when the
+            // thread starts, so an unrestorable thread should not exist.
+            if (original.peer !== "claude" || !peer || peer.state === "offline" || !attached || claudeTranscriptExists(original)) {
+              throw new Error(`${original.peer}: terminal creation outcome is uncertain; attach the original session manually, then resume`);
+            }
+            expected = { ...original, sessionId: attached };
           }
-          const existing = await revalidateTerminal(planned, progress, original, false);
+          const existing = await revalidateTerminal(planned, progress, expected, false);
           progress.terminals[key] = existing; save(); continue;
         }
         const entrypoint = join(op.targetRoot!, "src/cli/main.js");

package/src/hub/daemon.ts

@@ -471,6 +471,11 @@ export async function startDaemon(opts: DaemonOptions) {
     return recoveryPeerSnapshot.every((saved) => {
       const now = current[saved.id];
       if (!now) return true; // a detached peer is checked by the coordinator before terminal close
+      // A peer that went offline detached; it is not a changed conversation (#21). It is
+      // compared again the moment it reattaches, and release refuses while a peer that was
+      // online at the snapshot is still offline, so skipping the comparison cannot hide an
+      // identity change - it only keeps a detach from wedging readiness forever.
+      if (now.state === "offline") return true;
       if (saved.threadId && saved.threadId !== now.threadId) return false;
       // Kimi/local rebuild a fresh worker with task context on the target; native
       // Claude and Pi sessions must keep their exact identities across restoration.