@tt-a1i/hive 1.3.4 → 1.4.2

package/CHANGELOG.md

@@ -2,6 +2,53 @@
 
 All notable user-facing changes will be documented in this file.
 
+## 1.4.2 - 2026-05-27
+
+Demo video, worker naming, and small UI polish.
+
+- Adds a Bilibili demo video entry to the sidebar footer and replaces the demo
+  workspace mockup with the actual demo video embed.
+- Links the Hive logo and version in the topbar to `hivehq.dev`.
+- Uses role glyph avatars for workers instead of two-letter placeholders.
+- Auto-fills a generated worker name when the Add Member dialog opens and
+  prevents the name from regenerating while the dialog stays open.
+- Trims random worker-name pools to well-known figures for clearer,
+  localized names.
+- Improves the empty Tasks panel with a stronger add-task call to action.
+- Serves the sidebar Bilibili icon from a packaged static asset instead of an
+  inline data URL.
+
+## 1.4.1 - 2026-05-26
+
+Private release-source housekeeping.
+
+- Keeps the packaged product release train on the private release-source
+  repository.
+- Adds attribution and trademark notices to the packaged npm tarball.
+- Documents the private/public repository split so future release work does
+  not accidentally expose internal implementation notes or unreleased product
+  work.
+- Stabilizes the manual startup-command smoke test under full-suite PTY load.
+
+## 1.4.0 - 2026-05-22
+
+Template marketplace and agent picker polish.
+
+- Adds a bilingual template marketplace to the Add Member flow, with English
+  and Chinese agent libraries, category filters, search, and one-click import
+  into custom role instructions.
+- Ships the marketplace templates inside the npm package under
+  `dist/vendor/marketplace`, so the library works from packaged installs
+  without fetching remote content.
+- Polishes the marketplace drawer/card design for denser browsing, clearer
+  imported states, stronger search ergonomics, and better Chinese/English
+  category labels.
+- Keeps the Tasks side panel aligned with the Team Members panel width for a
+  more predictable two-panel layout.
+- Shows the selected CLI's brand mark in the Agent CLI picker, while keeping a
+  terminal glyph for generic custom commands.
+- Removes stale Biome suppression comments from marketplace-related UI code.
+
 ## 1.3.4 - 2026-05-21
 
 Terminal performance and Tasks panel polish.

package/NOTICE

@@ -0,0 +1,15 @@
+Hive
+Copyright (c) 2026 Shaokun Tu (tt-a1i) and contributors.
+
+This product includes software licensed under the Business Source License 1.1.
+See LICENSE.BSL for the source license and LICENSE for historical Apache-2.0
+terms that apply only to versions covered by that file.
+
+Redistributions, forks, and modified versions must preserve this notice and
+the applicable license files. The Hive name, logo, and visual identity are
+covered by the trademark guidelines in TRADEMARK.md and are not granted by the
+source license.
+
+Hive includes optional marketplace prompt snapshots from third-party projects.
+Their upstream license files are preserved under the packaged vendor
+marketplace directories when those snapshots are included in a release.

package/README.en.md

@@ -318,6 +318,32 @@ polishing the multi-agent collaboration workflow, Windows support, and clearer
 orchestration observability. Try it out and open issues — feedback shapes what
 gets prioritized next.
 
+## On the roadmap: cross-agent long-term memory
+
+<p align="center">
+  <a href="https://github.com/EverMind-AI/EverOS">
+    <img src="https://avatars.githubusercontent.com/EverMind-AI" width="72" alt="EverMind / EverOS" />
+  </a>
+</p>
+
+Single-agent memory already exists, but the styles diverge:
+
+- **Claude Code's [Auto Dream](https://claudefa.st/blog/guide/mechanics/auto-dream)** is **batch / offline** — invoked via `/dream` (or on a 24h timer), Claude consolidates JSONL session logs in the cloud, merges duplicates, extracts patterns, and proposes a new memory file for you to review and adopt. REM-sleep style, with a clean wake/sleep separation.
+- **Hermes Agent** runs the opposite playbook — **embedded and in-stride**. Every N turns it forks a background sub-agent to review the recent exchange and writes directly into a **multi-organ local store**: `MEMORY.md` (facts/rules) · `USER.md` (who-you-are) · SQLite + FTS5 (episodic search) · Honcho (third-person model) · `skills/` (procedural memory). The agent is allowed to edit its own skill files in stride — memory and capability are the same thing.
+
+But these are all **per-agent** memories. Hive coordinates *teams* of agents, so the next step is wiring them together: let the whole team **share one long-term memory store** — what Worker A learned today becomes context the Orchestrator can dispatch to Worker B tomorrow.
+
+We're planning to back this with **[EverOS](https://github.com/EverMind-AI/EverOS)**
+— an open-source long-term memory OS from [EverMind](https://evermind.ai/),
+currently SOTA on the LoCoMo / LongMemEval / HaluMem memory benchmarks.
+Its four-layer architecture (Agentic / Memory / Index / API+MCP) maps
+cleanly onto Hive's multi-PTY model: each agent keeps its in-CLI memory,
+team-level facts flow through EverOS, and the Orchestrator joins both
+when dispatching.
+
+Track progress at [#6](https://github.com/tt-a1i/hive/issues/6) — drop a
++1 or comment with your use case to influence priority.
+
 ## A different form factor: squad
 
 If you'd rather have **pure CLI, zero background process, and the ability to
@@ -328,6 +354,17 @@ per agent. The two projects don't replace each other; pick by workflow:
 - **Hive** — visual workbench, one-click restart, workspace sidebar, easier to demo to a team
 - **squad** — lives in tmux, SSH remote dev, no extra background process, Windows servers
 
+## Acknowledgements
+
+The built-in template marketplace ships snapshots of two community-maintained prompt libraries, both distributed under their upstream MIT licenses:
+
+- English (used when the UI is set to EN): [`msitarzewski/agency-agents`](https://github.com/msitarzewski/agency-agents)
+- Chinese (used when the UI is set to 中文): [`jnMetaCode/agency-agents-zh`](https://github.com/jnMetaCode/agency-agents-zh)
+
+Upstream content is mirrored verbatim, license files are kept under `vendor/marketplace/<lang>/LICENSE`, and snapshots are refreshed by `pnpm sync:marketplace` before each Hive release.
+
 ## License
 
-Hive is open source under the Business Source License 1.1. Personal use, internal deployment, embedding, and forks are permitted — see [LICENSE.BSL](LICENSE.BSL) for the exact boundary.
+Hive source is available under the Business Source License 1.1. Personal use, internal deployment, embedding, and forks are permitted — see [LICENSE.BSL](LICENSE.BSL) for the exact boundary.
+
+Forks and redistributions must preserve [NOTICE](NOTICE), [LICENSE.BSL](LICENSE.BSL), and the applicable license files. The Hive name, logo, and visual identity are not licensed by the source license; see [TRADEMARK.md](TRADEMARK.md) for brand usage boundaries.

package/README.md

@@ -241,6 +241,25 @@ pnpm release:dry
 
 Hive 目前处于 alpha 阶段，核心流程已可用。当前重点是继续打磨多 Agent 协作体验、Windows 支持和更清晰的调度可观测性。欢迎试用、提 issue——反馈会直接影响后续节奏。
 
+## 在路上：跨 Agent 的长时记忆
+
+<p align="center">
+  <a href="https://github.com/EverMind-AI/EverOS">
+    <img src="https://avatars.githubusercontent.com/EverMind-AI" width="72" alt="EverMind / EverOS" />
+  </a>
+</p>
+
+单 agent 现在已经各有各的"记忆"了——但风格其实差很多：
+
+- **Claude Code 的 [Auto Dream](https://claudefa.st/blog/guide/mechanics/auto-dream)（俗称"做梦"）** 走 **离线批处理** 路线：`/dream` 触发（或 24h 自动），Claude 在云端把 JSONL 会话归并去重抽模式，产出新版本 memory 库给你审查再采纳——像人类的 REM 睡眠，**清醒 / 睡眠二相**。
+- **Hermes Agent** 反过来走 **嵌入式 / 在场** 路线：不睡，每 N 轮对话后台 fork 一个 sub-agent review，结果直接落进本地的 **多层记忆**——`MEMORY.md`（事实/规则）·`USER.md`（用户画像）·SQLite + FTS5（情景检索）·Honcho（第三人称表征）·`skills/`（程序性记忆）——而且 agent 允许边走边改自己的 skill 文件，记忆和能力是一回事。
+
+但 **这些都是单 agent 内部的记忆**。Hive 是多 agent 协作工作台，下一步要做的事是把它们打通：让整支团队 **共享一座长时记忆库**——Worker A 今天踩的坑，明天 Orchestrator 派给 Worker B 时能自动调来当上下文。
+
+底层我们计划接 **[EverOS](https://github.com/EverMind-AI/EverOS)**（[EverMind](https://evermind.ai/) 出品的开源长时记忆 OS，目前在 LoCoMo / LongMemEval / HaluMem 三个记忆 benchmark 上 SOTA）当跨 agent 的记忆后端。它的四层架构（Agentic / Memory / Index / API+MCP）跟 Hive 的多 PTY 协作模型很搭：每个 agent 各跑各的 CLI session，团队级的事实和模式凝在 EverOS，Orchestrator 派单时一并喂给 worker。
+
+进度跟踪：[#6](https://github.com/tt-a1i/hive/issues/6)——想看进度或提建议，在 issue 留 +1。
+
 ## 另一种形态：squad
 
 如果你更喜欢 **纯 CLI、零后台进程、能直接在 SSH 进的远端服务器上跑** 的形态，[squad](https://github.com/mco-org/squad) 是同一个想法的另一条路线——SQLite 当通信层，每个 agent 各自开一个终端。两个项目互不替代，按工作流挑就行：
@@ -248,6 +267,17 @@ Hive 目前处于 alpha 阶段，核心流程已可用。当前重点是继续
 - **Hive** — 想要可视化工作台、一键重启、侧边栏切 workspace、给团队演示
 - **squad** — 活在 tmux 里、SSH 远端开发、不想跑额外后台进程、Windows server
 
+## 鸣谢
+
+Hive 的"模板市场"内置了两份社区角色 prompt 库的快照，两份都按各自上游的 MIT 许可分发：
+
+- 英文版（界面切到 EN 时使用）：[`msitarzewski/agency-agents`](https://github.com/msitarzewski/agency-agents)
+- 中文版（界面切到中文时使用）：[`jnMetaCode/agency-agents-zh`](https://github.com/jnMetaCode/agency-agents-zh)
+
+上游内容未做修改，许可证文本保留在 `vendor/marketplace/<lang>/LICENSE`；快照通过 `pnpm sync:marketplace` 在 hive 发版前刷新。
+
 ## License
 
-Hive 在 Business Source License 1.1 下开源。个人使用、内部部署、嵌入、fork 都可以；详细边界见 [LICENSE.BSL](LICENSE.BSL)。
+Hive 源码在 Business Source License 1.1 下提供。个人使用、内部部署、嵌入、fork 都可以；详细边界见 [LICENSE.BSL](LICENSE.BSL)。
+
+Fork 或再分发版本必须保留 [NOTICE](NOTICE)、[LICENSE.BSL](LICENSE.BSL) 和相关许可证文件。Hive 名称、logo 和视觉识别不随源码许可证授权；品牌使用边界见 [TRADEMARK.md](TRADEMARK.md)。

package/TRADEMARK.md

@@ -0,0 +1,41 @@
+# Trademark Guidelines
+
+These guidelines apply to the Hive name, logo, icons, visual identity, and
+other brand assets owned by Shaokun Tu (tt-a1i).
+
+The source license for Hive grants rights to use, modify, and distribute the
+software under the terms of LICENSE.BSL. It does not grant trademark rights.
+
+## Permitted Uses
+
+You may:
+
+- Refer to Hive by name when describing compatibility, attribution, or that a
+  project is based on Hive.
+- Use phrases such as "forked from Hive", "based on Hive", or "compatible with
+  Hive" when the relationship is accurate.
+- Link to the upstream Hive repository and documentation.
+
+## Uses That Need Permission
+
+You need prior written permission to:
+
+- Use the Hive name, logo, or icons as the primary name or identity of a fork,
+  distribution, hosted service, or commercial product.
+- Present a fork or derivative work in a way that suggests it is official,
+  endorsed, sponsored, or maintained by tt-a1i.
+- Register domains, social accounts, packages, apps, or marketplaces names that
+  are likely to confuse users about whether they are official Hive properties.
+- Use Hive brand assets in paid advertising, product packaging, or hosted
+  service branding.
+
+## Forks And Derivative Products
+
+Forks should use a distinct product name and distinct visual identity. They
+must preserve the applicable license files and NOTICE file, and should clearly
+state that they are independent from upstream Hive unless a separate written
+agreement says otherwise.
+
+These guidelines do not change the software license. If there is a conflict
+between this document and LICENSE.BSL, LICENSE.BSL controls software license
+rights and this document controls brand usage.

package/dist/src/cli/hive.js

@@ -65,6 +65,26 @@ const maybePrintUpdateHint = async (versionService) => {
         return;
     console.log(`Hive update available: ${info.current_version} -> ${info.latest_version}. Run: ${info.install_hint}`);
 };
+const isListenError = (error) => error instanceof Error && typeof error.code === 'string';
+const formatPortInUseMessage = (port) => [
+    `Hive could not start because port ${port} is already in use.`,
+    '',
+    'Another Hive instance may already be running:',
+    `  http://127.0.0.1:${port}`,
+    '',
+    'Options:',
+    '  - Open the existing Hive window.',
+    '  - Stop the process using that port:',
+    `      lsof -tiTCP:${port} -sTCP:LISTEN | xargs kill`,
+    '  - Start Hive on another port:',
+    `      hive --port ${port + 1}`,
+].join('\n');
+const formatListenError = (error, requestedPort) => {
+    if (isListenError(error) && error.code === 'EADDRINUSE') {
+        return new Error(formatPortInUseMessage(error.port ?? requestedPort));
+    }
+    return error;
+};
 export const runHiveCommand = async (argv, options = {}) => {
     const port = parsePort(argv);
     const dataDir = resolveDataDir();
@@ -76,13 +96,19 @@ export const runHiveCommand = async (argv, options = {}) => {
         }),
         versionService,
     });
-    app.server.listen(port, '127.0.0.1');
-    await Promise.race([
-        once(app.server, 'listening'),
-        once(app.server, 'error').then(([error]) => {
-            throw error;
-        }),
-    ]);
+    try {
+        app.server.listen(port, '127.0.0.1');
+        await Promise.race([
+            once(app.server, 'listening'),
+            once(app.server, 'error').then(([error]) => {
+                throw error;
+            }),
+        ]);
+    }
+    catch (error) {
+        await app.store.close();
+        throw formatListenError(error, port);
+    }
     const address = app.server.address();
     if (!address || typeof address === 'string') {
         throw new Error('Server did not bind to an inet port');
@@ -146,7 +172,7 @@ if (isMainModule) {
     }
     else {
         runHiveCommand(argv).catch((error) => {
-            console.error(error);
+            console.error(error instanceof Error ? error.message : error);
             process.exit(1);
         });
     }

package/dist/src/server/app.d.ts

@@ -8,10 +8,11 @@ interface CreateAppOptions {
     store: RuntimeStore;
     pickFolderService?: () => Promise<PickFolderResponse>;
     openWorkspaceService?: OpenWorkspaceService;
+    packageVersionReader?: () => string;
     tasksFileService?: TasksFileService;
     versionService?: VersionService;
 }
-export declare const createApp: ({ store, pickFolderService, openWorkspaceService, tasksFileService, versionService, }: CreateAppOptions) => {
+export declare const createApp: ({ store, pickFolderService, openWorkspaceService, packageVersionReader, tasksFileService, versionService, }: CreateAppOptions) => {
     server: import("http").Server<typeof IncomingMessage, typeof ServerResponse>;
     store: RuntimeStore;
 };

package/dist/src/server/app.js

@@ -7,6 +7,7 @@ import { pickFolder } from './fs-pick-folder.js';
 import { HttpError } from './http-errors.js';
 import { assertLocalRequest } from './local-request-guard.js';
 import { openWorkspace } from './open-target-commands.js';
+import { readPackageVersion } from './package-version.js';
 import { matchRoute } from './routes.js';
 import { createTasksFileService } from './tasks-file.js';
 import { createTerminalWebSocketServer } from './terminal-ws-server.js';
@@ -87,8 +88,64 @@ const sendJson = (response, statusCode, body) => {
     response.setHeader('content-type', 'application/json; charset=utf-8');
     response.end(JSON.stringify(body));
 };
-export const createApp = ({ store, pickFolderService = pickFolder, openWorkspaceService = (input) => openWorkspace(input), tasksFileService = createTasksFileService(), versionService = createVersionService(), }) => {
+const escapeHtml = (value) => value
+    .replaceAll('&', '&')
+    .replaceAll('<', '&lt;')
+    .replaceAll('>', '&gt;')
+    .replaceAll('"', '&quot;')
+    .replaceAll("'", '&#39;');
+const createVersionMismatchBody = (runtimeVersion, installedVersion) => `<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>Restart Hive</title>
+    <style>
+      :root { color-scheme: dark; font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; }
+      body { align-items: center; background: #0d0f12; color: #f4f4f5; display: flex; justify-content: center; margin: 0; min-height: 100vh; }
+      main { border: 1px solid rgba(255,255,255,.12); border-radius: 14px; background: #17191d; box-shadow: 0 18px 64px rgba(0,0,0,.4); max-width: 520px; padding: 28px; }
+      h1 { font-size: 22px; line-height: 1.2; margin: 0 0 10px; }
+      p { color: #a1a1aa; font-size: 14px; line-height: 1.6; margin: 0 0 14px; }
+      code { background: rgba(255,255,255,.08); border: 1px solid rgba(255,255,255,.1); border-radius: 6px; color: #e5e7eb; padding: 2px 6px; }
+    </style>
+  </head>
+  <body>
+    <main>
+      <h1>Restart Hive</h1>
+      <p>Hive was updated on disk while this runtime process was still running.</p>
+      <p>Running runtime: <code>${escapeHtml(runtimeVersion)}</code><br />Installed package: <code>${escapeHtml(installedVersion)}</code></p>
+      <p>Stop the current <code>hive</code> process and start it again to load the new UI and API together.</p>
+    </main>
+  </body>
+</html>`;
+const readVersionMismatch = (runtimeVersion, packageVersionReader) => {
+    const installedVersion = packageVersionReader();
+    if (runtimeVersion === 'unknown' ||
+        installedVersion === 'unknown' ||
+        installedVersion === runtimeVersion) {
+        return null;
+    }
+    return { installedVersion, runtimeVersion };
+};
+const sendVersionMismatchJson = (response, mismatch) => {
+    sendJson(response, 409, {
+        code: 'runtime_version_mismatch',
+        current_version: mismatch.runtimeVersion,
+        error: 'Hive was updated on disk. Restart the running hive process to use the new version.',
+        installed_version: mismatch.installedVersion,
+    });
+};
+const sendVersionMismatchPage = (response, request, mismatch) => {
+    response.statusCode = 409;
+    response.setHeader('content-type', 'text/html; charset=utf-8');
+    response.setHeader('cache-control', 'no-store');
+    response.end(request.method === 'HEAD'
+        ? undefined
+        : createVersionMismatchBody(mismatch.runtimeVersion, mismatch.installedVersion));
+};
+export const createApp = ({ store, pickFolderService = pickFolder, openWorkspaceService = (input) => openWorkspace(input), packageVersionReader = readPackageVersion, tasksFileService = createTasksFileService(), versionService = createVersionService(), }) => {
     const staticDir = process.env.HIVE_STATIC_DIR ?? getDefaultStaticDir();
+    const runtimeVersion = packageVersionReader();
     const staticAvailablePromise = canServeStatic(staticDir);
     const server = createServer(async (request, response) => {
         const method = request.method ?? 'GET';
@@ -110,10 +167,20 @@ export const createApp = ({ store, pickFolderService = pickFolder, openWorkspace
                 return;
             }
             if (isReservedPath(url.pathname)) {
+                const mismatch = readVersionMismatch(runtimeVersion, packageVersionReader);
+                if (mismatch) {
+                    sendVersionMismatchJson(response, mismatch);
+                    return;
+                }
                 sendJson(response, 404, { error: 'Not found' });
                 return;
             }
             if (await staticAvailablePromise) {
+                const mismatch = readVersionMismatch(runtimeVersion, packageVersionReader);
+                if (mismatch) {
+                    sendVersionMismatchPage(response, request, mismatch);
+                    return;
+                }
                 const served = await sendStatic(response, staticDir, url.pathname, request);
                 if (served)
                     return;

package/dist/src/server/hive-team-guidance.js

@@ -31,6 +31,7 @@ const ORCHESTRATOR_RULES = [
     '普通、低风险、几分钟内能直接完成的小任务可以自己做；不要为了形式感派 worker。需要并行、长时间执行、独立 review/test、专门角色，或 user 明确要求 worker/成员处理时，再用 `team send`。',
     '如果只有一个可用 worker，直接用 `team send <worker-name> "<task>"` 派给它；不要把选择题丢回给 user。',
     '当 user 要你“让 worker ...”时，必须用 `team send <worker-name> "<task>"` 派给 Hive worker。',
+    '派单时如果任务明显需要某种角色能力（例如代码评审、测试、安全审查），但 `team list` 中没有匹配 role 的成员，可以在回复 user 的自然语言部分（而非 `team send` 的任务正文）末尾用一句话建议添加该角色，例如：“如果这类任务后续会变多，可以考虑添加一个 reviewer”。仅在明显缺失时提；同一缺口在 user 未响应前不要重复建议。',
     '方向变更或 user 明确取消某个未完成派单时，使用 `team cancel --dispatch <id> "<reason>"` 显式关闭旧 dispatch；不要只用自然语言说“取消”。',
     '不要使用你所在 CLI 的内置 subagent / 子代理工具（如 Task / Explore 等）来代替 Hive worker；它们不会出现在 Hive UI，也不会更新 Hive 调度状态。',
     '`team list` 返回的 `last_pty_line` 是该 worker PTY 终端的最后一行原始输出（含任意 stdout / help / 控制序列噪声），**不是** worker 的正式汇报。正式汇报只来自 stdin 注入的 `[Hive 系统消息：来自 @<name> 的汇报]` 或 `[Hive 系统消息：来自 @<name> 的状态更新]`——只把这两种来源当作 reply。',

package/dist/src/server/marketplace-store.d.ts

@@ -0,0 +1,38 @@
+export type MarketplaceLanguage = 'en' | 'zh';
+export interface MarketplaceAgentEntry {
+    path: string;
+    category: string;
+    name: string;
+    displayName?: string;
+    nameOverflows?: boolean;
+    description: string;
+    emoji: string | null;
+    color: string | null;
+    vibe: string | null;
+}
+export interface MarketplaceManifest {
+    source: {
+        repo: string;
+        commit: string;
+        fetched_at: string;
+    };
+    language: MarketplaceLanguage;
+    categories: string[];
+    agents: MarketplaceAgentEntry[];
+}
+export interface MarketplaceAgentDetail {
+    path: string;
+    frontmatter: Record<string, unknown>;
+    body: string;
+}
+export declare class MarketplaceNotFoundError extends Error {
+    constructor(message: string);
+}
+export declare const isMarketplaceLanguage: (value: unknown) => value is MarketplaceLanguage;
+/**
+ * Where on disk the bundled marketplace lives. Tests inject a fixture via
+ * `HIVE_MARKETPLACE_VENDOR_ROOT` (mirrors fs-sandbox's HIVE_FS_BROWSE_ROOT).
+ */
+export declare const getMarketplaceVendorRoot: () => string;
+export declare const loadManifest: (language: MarketplaceLanguage) => MarketplaceManifest;
+export declare const readAgent: (language: MarketplaceLanguage, relativePath: string) => MarketplaceAgentDetail;

package/dist/src/server/marketplace-store.js

@@ -0,0 +1,85 @@
+// Marketplace store — read-only access to the bundled `vendor/marketplace/`
+// snapshot of upstream agent prompt repos (one per UI language).
+//
+// **Vendor path invariant**: `new URL('../../vendor/marketplace', import.meta.url)`
+// resolves the same in dev and dist because `tsconfig.json` has `rootDir: "."`.
+//   - dev: this file is `src/server/marketplace-store.ts` → repo-root `vendor/`
+//   - dist: this file is `dist/src/server/marketplace-store.js` → `dist/vendor/`
+//
+// The build hook (`scripts/prepare-build-artifacts.mjs`) copies the source-of-
+// truth `vendor/marketplace/` into `dist/vendor/marketplace/` at pack time. If
+// either the `rootDir` setting or the build hook changes, that invariant must
+// be re-verified — there is no fallback path.
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import matter from 'gray-matter';
+import { isPathWithinRoot } from './fs-sandbox.js';
+export class MarketplaceNotFoundError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'MarketplaceNotFoundError';
+    }
+}
+const SUPPORTED_LANGUAGES = new Set(['en', 'zh']);
+export const isMarketplaceLanguage = (value) => typeof value === 'string' && SUPPORTED_LANGUAGES.has(value);
+const defaultVendorRoot = () => fileURLToPath(new URL('../../vendor/marketplace', import.meta.url));
+/**
+ * Where on disk the bundled marketplace lives. Tests inject a fixture via
+ * `HIVE_MARKETPLACE_VENDOR_ROOT` (mirrors fs-sandbox's HIVE_FS_BROWSE_ROOT).
+ */
+export const getMarketplaceVendorRoot = () => {
+    const override = process.env.HIVE_MARKETPLACE_VENDOR_ROOT;
+    return override && override.length > 0 ? resolve(override) : defaultVendorRoot();
+};
+const languageRoot = (language, vendorRoot = getMarketplaceVendorRoot()) => resolve(vendorRoot, language);
+const manifestCache = new Map();
+const agentCache = new Map();
+export const loadManifest = (language) => {
+    const vendorRoot = getMarketplaceVendorRoot();
+    const cacheKey = `${vendorRoot}\0${language}`;
+    const cached = manifestCache.get(cacheKey);
+    if (cached)
+        return cached;
+    const manifestPath = resolve(languageRoot(language, vendorRoot), 'manifest.json');
+    if (!existsSync(manifestPath)) {
+        throw new MarketplaceNotFoundError(`Marketplace manifest missing for language: ${language}`);
+    }
+    const raw = readFileSync(manifestPath, 'utf8');
+    const manifest = JSON.parse(raw);
+    manifestCache.set(cacheKey, manifest);
+    return manifest;
+};
+export const readAgent = (language, relativePath) => {
+    if (!relativePath.endsWith('.md')) {
+        throw new MarketplaceNotFoundError(`Marketplace agent path must end with .md: ${relativePath}`);
+    }
+    const vendorRoot = getMarketplaceVendorRoot();
+    const root = languageRoot(language, vendorRoot);
+    const candidate = resolve(root, relativePath);
+    if (!isPathWithinRoot(root, candidate)) {
+        throw new MarketplaceNotFoundError(`Marketplace agent path escapes language root: ${relativePath}`);
+    }
+    if (!existsSync(candidate)) {
+        throw new MarketplaceNotFoundError(`Marketplace agent not found: ${language}/${relativePath}`);
+    }
+    // Guard against upstream pushing a directory whose name ends in `.md` —
+    // the suffix check would pass, existsSync would pass, but readFileSync
+    // would throw EISDIR. Surface as a 404 instead of a 500.
+    if (!statSync(candidate).isFile()) {
+        throw new MarketplaceNotFoundError(`Marketplace agent not a file: ${language}/${relativePath}`);
+    }
+    const cacheKey = `${vendorRoot}\0${language}\0${relativePath}`;
+    const cached = agentCache.get(cacheKey);
+    if (cached)
+        return cached;
+    const raw = readFileSync(candidate, 'utf8');
+    const parsed = matter(raw);
+    const detail = {
+        path: relativePath,
+        frontmatter: parsed.data,
+        body: parsed.content,
+    };
+    agentCache.set(cacheKey, detail);
+    return detail;
+};

package/dist/src/server/routes-marketplace.d.ts

@@ -0,0 +1,2 @@
+import type { RouteDefinition } from './route-types.js';
+export declare const marketplaceRoutes: RouteDefinition[];

package/dist/src/server/routes-marketplace.js

@@ -0,0 +1,54 @@
+import { isMarketplaceLanguage, loadManifest, MarketplaceNotFoundError, readAgent, } from './marketplace-store.js';
+import { route, sendJson } from './route-helpers.js';
+import { requireUiTokenFromRequest } from './ui-auth-helpers.js';
+const readLanguageParam = (request) => {
+    const url = new URL(request.url ?? '/', 'http://127.0.0.1');
+    return url.searchParams.get('lang');
+};
+const readPathParam = (request) => {
+    const url = new URL(request.url ?? '/', 'http://127.0.0.1');
+    return url.searchParams.get('path') ?? '';
+};
+export const marketplaceRoutes = [
+    route('GET', '/api/marketplace/manifest', ({ request, response, store }) => {
+        requireUiTokenFromRequest(request, store.validateUiToken);
+        const lang = readLanguageParam(request);
+        if (!isMarketplaceLanguage(lang)) {
+            sendJson(response, 400, { error: 'Invalid or missing lang parameter (expected en|zh)' });
+            return;
+        }
+        try {
+            sendJson(response, 200, loadManifest(lang));
+        }
+        catch (error) {
+            if (error instanceof MarketplaceNotFoundError) {
+                sendJson(response, 404, { error: error.message });
+                return;
+            }
+            throw error;
+        }
+    }),
+    route('GET', '/api/marketplace/agent', ({ request, response, store }) => {
+        requireUiTokenFromRequest(request, store.validateUiToken);
+        const lang = readLanguageParam(request);
+        if (!isMarketplaceLanguage(lang)) {
+            sendJson(response, 400, { error: 'Invalid or missing lang parameter (expected en|zh)' });
+            return;
+        }
+        const relativePath = readPathParam(request);
+        if (!relativePath) {
+            sendJson(response, 400, { error: 'Missing path parameter' });
+            return;
+        }
+        try {
+            sendJson(response, 200, readAgent(lang, relativePath));
+        }
+        catch (error) {
+            if (error instanceof MarketplaceNotFoundError) {
+                sendJson(response, 404, { error: error.message });
+                return;
+            }
+            throw error;
+        }
+    }),
+];

package/dist/src/server/routes.js

@@ -1,6 +1,7 @@
 import { matchPath } from './route-helpers.js';
 import { dispatchRoutes } from './routes-dispatches.js';
 import { fsRoutes } from './routes-fs.js';
+import { marketplaceRoutes } from './routes-marketplace.js';
 import { openWorkspaceRoutes } from './routes-open-workspace.js';
 import { runtimeRoutes } from './routes-runtime.js';
 import { settingsRoutes } from './routes-settings.js';
@@ -20,6 +21,7 @@ const routes = [
     ...runtimeRoutes,
     ...teamRoutes,
     ...fsRoutes,
+    ...marketplaceRoutes,
 ];
 export const matchRoute = (method, pathname) => {
     for (const routeDefinition of routes) {

package/dist/src/server/workspace-store-mutations.js

@@ -24,9 +24,11 @@ export const getWorkerByNameRecord = (workspaces, workspaceId, workerName) => {
     return worker;
 };
 export const markAgentStarted = (workspaces, workspaceId, agentId) => {
-    const pendingTaskCount = getAgentRecord(workspaces, workspaceId, agentId).pendingTaskCount;
-    getAgentRecord(workspaces, workspaceId, agentId).status =
-        getStatusFromPendingCount(pendingTaskCount);
+    // Worker status tracks "is this agent currently working", not "are there
+    // pending tasks". A freshly started PTY hasn't done anything yet, even if
+    // dispatch ledger replayed pendingTaskCount > 0 during hydration. The next
+    // team send will flip status to 'working' via markTaskDispatched.
+    getAgentRecord(workspaces, workspaceId, agentId).status = 'idle';
 };
 export const markAgentStopped = (workspaces, workspaceId, agentId) => {
     getAgentRecord(workspaces, workspaceId, agentId).status = 'stopped';

package/dist/vendor/marketplace/en/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 AgentLand Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/vendor/marketplace/en/SOURCES.md

@@ -0,0 +1,12 @@
+# Source attribution
+
+This directory mirrors [msitarzewski/agency-agents](https://github.com/msitarzewski/agency-agents) at commit `783f6a72bfd7f3135700ac273c619d92821b419a`.
+
+- Language: en
+- Agents: 184
+- Synced: 2026-05-22T12:26:20.094Z
+- License: MIT (see LICENSE in this directory)
+
+All markdown content is unmodified from upstream. Hive only filters out top-level
+meta files (READMEs, CATALOG, etc.) and parses YAML frontmatter to build the
+manifest. To refresh, run `pnpm sync:marketplace` at the hive repo root.