agent-comm-hub 0.9.0 → 0.9.1

package/README.md

@@ -430,7 +430,7 @@ const hub = startHub({ port: 18764 }, console) // returns { hub, registry, serve
 ```bash
 pnpm install
 pnpm typecheck        # tsc --noEmit (strict)
-pnpm test             # test suite (282 checks: 156 smoke + 37 setup + 11 ops + 35 herdr + 23 discover + 20 e2e)
+pnpm test             # test suite (291 checks: 165 smoke + 37 setup + 11 ops + 35 herdr + 23 discover + 20 e2e)
 npm run build:admin   # admin/ workspace (npm) → single-file assets/admin.html
 pnpm run build        # esbuild → lib/{cli,index,setup}.js (zero deps)
 pnpm pack             # build + npm pack (publishing artifact)
@@ -481,4 +481,4 @@ Tests cover registration, duplicate rejection, chat routing, sender-filtered wai
 
 ## License
 
-MIT — see [LICENSE](LICENSE). Contributions welcome: keep the 282-check suite green (`pnpm test`) and zero runtime dependencies. Architecture: [ARCHITECTURE.md](ARCHITECTURE.md).
+MIT — see [LICENSE](LICENSE). Contributions welcome: keep the 291-check suite green (`pnpm test`) and zero runtime dependencies. Architecture: [ARCHITECTURE.md](ARCHITECTURE.md).

package/README.zh.md

@@ -276,7 +276,7 @@ const hub = startHub({ port: 18764 }, console) // 返回 { hub, registry, server
 ```bash
 pnpm install
 pnpm typecheck        # tsc --noEmit（strict）
-pnpm test             # 测试套件（282 项：156 冒烟 + 37 安装器 + 11 运维 + 35 herdr + 23 发现 + 20 e2e）
+pnpm test             # 测试套件（291 项：165 冒烟 + 37 安装器 + 11 运维 + 35 herdr + 23 发现 + 20 e2e）
 npm run build:admin   # admin/ 工作区（用 npm）→ 单文件 assets/admin.html
 pnpm run build        # esbuild → lib/{cli,index,setup}.js（零依赖）
 pnpm pack             # 构建 + npm pack（发布产物）

package/agents/SKILL.md

@@ -25,7 +25,7 @@ Optional: call `bridge_register(peerId)` to claim a readable id
 
 - `bridge_chat(to, message, threadId?, ref?)` — send a chat to a peer, group
   id, or `"all"` (broadcast). `threadId` groups a multi-turn dialog; `ref`
-  marks a reply-to.
+  marks a reply-to and is capped at 5 hops per chain (see Notes).
 - `bridge_task(to, prompt, context?, deliverable?, timeoutMs?, threadId?)` —
   delegate a structured task. `timeoutMs` is a soft SLA: the hub marks the
   task `timeout` if no terminal ack arrives in time.
@@ -104,4 +104,12 @@ Follow the scenario directly (tool names stay as-is):
 - Cadence: use 10–30 s short polls when the peer is active; check
   `bridge_peers()` when unsure.
 - Task terminal states (`done`/`failed`/`rejected`/`timeout`) cannot be
-  reopened; start a new task instead of re-acking.
+  reopened; start a new task instead of re-acking.
+- **Reply chains are capped at 5 hops.** Every message carrying `ref` sits one
+  hop deeper than the message it points at, and the hub rejects the 6th with
+  `hop limit exceeded`. You only run into it when you keep replying
+  (`ref`) or re-delegating along one chain instead of starting a new message —
+  two agents answering each other's replies forever is exactly what the cap
+  exists to stop. When it happens, stop extending that chain: send a fresh
+  message with no `ref` (a new `threadId` keeps it readable as one dialog) and
+  restate the context in it, or continue with `bridge_task` for new work.

package/lib/cli.js

@@ -471,6 +471,7 @@ function decodeContent(kind, content) {
 // src/hub.ts
 var MAX_PROFILES = 512;
 var MAX_TASKS = 1024;
+var MAX_TIMER_DELAY_MS = 2147483647;
 var AgentHub = class {
   constructor(options) {
     this.options = options;
@@ -670,8 +671,9 @@ var AgentHub = class {
    * wait for acks. */
   sendTask(from, to, task) {
     const threadId = task.threadId;
-    const message = this.route(from, to, "task", JSON.stringify(task), void 0, threadId);
+    const message = this.compose(from, to, "task", JSON.stringify(task), void 0, threadId);
     this.recordTask(message, task);
+    this.dispatch(message);
     return message;
   }
   /** Send an acknowledgement back to the sender of `ref`. Updates the task
@@ -724,11 +726,17 @@ var AgentHub = class {
     this.evictOverflowTasks();
     this.options.onTaskChanged?.(this.taskOf(record.id));
   }
-  /** Arm the SLA timer for a task that supplied `timeoutMs`. */
+  /** Arm the SLA timer for a task that supplied `timeoutMs`. A deadline
+   * beyond {@link MAX_TIMER_DELAY_MS} cannot be expressed as one delay — the
+   * timer would overflow and fire after ~1 ms — so it is re-armed in segments
+   * of that size. `deadlineAt` stays the authoritative deadline and each
+   * segment recomputes the remaining time, so a long SLA is honored exactly
+   * (no drift); settling or evicting the task clears the pending segment, and
+   * clearing the timer is what ends the chain. */
   scheduleTaskTimeout(record) {
     if (record.deadlineAt === void 0) return;
-    const delay = Math.max(0, record.deadlineAt - Date.now());
-    const timer = setTimeout(() => this.fireTaskTimeout(record.id), delay);
+    const remaining = record.deadlineAt - Date.now();
+    const timer = remaining > MAX_TIMER_DELAY_MS ? setTimeout(() => this.scheduleTaskTimeout(record), MAX_TIMER_DELAY_MS) : setTimeout(() => this.fireTaskTimeout(record.id), Math.max(0, remaining));
     timer.unref?.();
     this.taskTimers.set(record.id, timer);
   }
@@ -1058,6 +1066,7 @@ var AgentHub = class {
       const m = raw;
       if (typeof m.id !== "string" || typeof m.from !== "string" || typeof m.to !== "string" || typeof m.content !== "string" || typeof m.ts !== "number") continue;
       if (KINDS.includes(m.kind) === false) continue;
+      const hop = importHop(m.hop);
       valid.push({
         id: m.id,
         from: m.from,
@@ -1067,6 +1076,7 @@ var AgentHub = class {
         ...typeof m.ref === "string" ? { ref: m.ref } : {},
         ...typeof m.channel === "string" ? { channel: m.channel } : {},
         ...typeof m.threadId === "string" ? { threadId: m.threadId } : {},
+        ...hop !== void 0 ? { hop } : {},
         ts: m.ts
       });
     }
@@ -1092,6 +1102,7 @@ var AgentHub = class {
         if (typeof raw !== "object" || raw === null) continue;
         const m = raw;
         if (typeof m.id !== "string" || typeof m.from !== "string" || typeof m.content !== "string" || typeof m.ts !== "number") continue;
+        const hop = importHop(m.hop);
         restored.push({
           id: m.id,
           from: m.from,
@@ -1101,6 +1112,7 @@ var AgentHub = class {
           ...typeof m.ref === "string" ? { ref: m.ref } : {},
           ...typeof m.channel === "string" ? { channel: m.channel } : {},
           ...typeof m.threadId === "string" ? { threadId: m.threadId } : {},
+          ...hop !== void 0 ? { hop } : {},
           ts: m.ts
         });
       }
@@ -1211,6 +1223,15 @@ var AgentHub = class {
   /** Create a message from `from` addressed to `to` and deliver it. `to` may
    *  be a peer id, {@link BROADCAST}, or a group id. */
   route(from, to, kind, content, ref, threadId) {
+    const message = this.compose(from, to, kind, content, ref, threadId);
+    this.dispatch(message);
+    return message;
+  }
+  /** Validate, build, and record a message from `from` to `to` (`to` may be a
+   *  peer id, {@link BROADCAST}, or a group id). Composing and dispatching are
+   *  separate steps because a caller may need ledger state to exist before
+   *  anything reaches a recipient — {@link sendTask} books delivery times. */
+  compose(from, to, kind, content, ref, threadId) {
     if (!this.lastSeen.has(from)) throw new Error(`sender not registered: ${from}`);
     const group = this.groups.get(to);
     if (to !== BROADCAST && group === void 0 && !this.lastSeen.has(to)) {
@@ -1238,18 +1259,25 @@ var AgentHub = class {
     };
     this.lastSeen.set(from, message.ts);
     this.remember(message);
-    if (to === BROADCAST) {
+    return message;
+  }
+  /** Fan a composed message out to its recipients: broadcast, group members,
+   *  or the single addressed peer. */
+  dispatch(message) {
+    if (message.to === BROADCAST) {
       for (const peer of this.peers()) {
-        if (peer !== from) this.deliver(peer, message);
+        if (peer !== message.from) this.deliver(peer, message);
       }
-    } else if (group !== void 0) {
+      return;
+    }
+    const group = this.groups.get(message.to);
+    if (group !== void 0) {
       for (const member of group.members) {
-        if (member !== from) this.deliver(member, message);
+        if (member !== message.from) this.deliver(member, message);
       }
-    } else {
-      this.deliver(to, message);
+      return;
     }
-    return message;
+    this.deliver(message.to, message);
   }
   /** Queue or hand off a message; wake the first matching waiter for its target.
    *  History / onMessage are recorded by the caller (route / sendToGroup) —
@@ -1284,6 +1312,9 @@ var AgentHub = class {
     this.options.onMessage?.(message);
   }
 };
+function importHop(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
+}
 function drainFrom(queue, from) {
   const kept = [];
   const drained = [];
@@ -1711,14 +1742,14 @@ function hubTools(hub, registry, options) {
     },
     {
       name: "bridge_task",
-      description: 'Delegate a structured task to another agent (peer, group, or "all"). The assignee acks with accepted | working | rejected | done | failed (bridge_ack). Track with bridge_task_status(ref) / bridge_tasks; wait for the ack with bridge_wait({ ref }). Optional timeoutMs marks the task `timeout` when the SLA expires without a terminal ack.',
+      description: 'Delegate a structured task to another agent (peer, group, or "all"). The assignee acks with accepted | working | rejected | done | failed (bridge_ack). Track with bridge_task_status(ref) / bridge_tasks; wait for the ack with bridge_wait({ ref }). Optional timeoutMs marks the task `timeout` when the SLA expires without a terminal ack; any positive duration is honored, including multi-day deadlines (the hub re-arms its timer instead of overflowing it).',
       inputSchema: schema(
         {
           to: str('Target peerId, group id, or "all" to broadcast.'),
           prompt: str("What the receiving agent should do."),
           context: optStr("Optional background information for the task."),
           deliverable: optStr("Optional expected deliverable description."),
-          timeoutMs: int("Optional soft SLA in ms; hub marks the task timeout when it expires."),
+          timeoutMs: int("Optional soft SLA in ms from now (e.g. 30000). No upper bound \u2014 a deadline past ~24.8 days is honored as well."),
           threadId: optStr("Optional conversation / workflow thread id.")
         },
         ["to", "prompt"]
@@ -1790,13 +1821,15 @@ function hubTools(hub, registry, options) {
     },
     {
       name: "bridge_task_status",
-      description: "Status of one delegated task: current ledger state (pending \u2192 accepted/working \u2192 done/failed/timeout, or rejected), the original prompt/context/deliverable, per-assignee state, and every ack event (who, status, note, progress, when). Use the task message id (the same id you pass as bridge_ack ref).",
+      description: "Status of one delegated task: current ledger state (pending \u2192 accepted/working \u2192 done/failed/timeout, or rejected), the original prompt/context/deliverable, per-assignee state, and every ack event (who, status, note, progress, when). Use the task message id (the same id you pass as bridge_ack ref). Readable by the sender, by an assignee (a group task carries the GROUP id in `to`, so its assignees read it through their assignee row) and by a group member; everyone else needs manager rights.",
       inputSchema: schema({ ref: str("Task message id (the id returned by bridge_task, also used as ack ref).") }, ["ref"]),
       handler: wrap(true, async (args, peer, sessionId) => {
         const ref = String(args.ref);
         const task = hub.taskOf(ref);
         if (task === void 0) throw new Error(`unknown task: ${ref}`);
-        if (task.from !== peer && task.to !== peer && task.to !== BROADCAST) {
+        const isAssignee = task.assignees.some((assignee) => assignee.peerId === peer);
+        const isGroupMember = hub.groupOf(task.to)?.members.includes(peer) ?? false;
+        if (task.from !== peer && task.to !== peer && task.to !== BROADCAST && !isAssignee && !isGroupMember) {
           requireManager(peer, `reading task '${ref}'`, sessionId);
         }
         return { task };
@@ -2637,7 +2670,7 @@ function readBody(req) {
 import { DatabaseSync } from "node:sqlite";
 var KIND_NAMES = ["chat", "task", "notice", "ack"];
 function messageToRow(message) {
-  return [message.id, message.from, message.to, message.kind, message.content, message.ref ?? null, message.channel ?? null, message.threadId ?? null, message.ts];
+  return [message.id, message.from, message.to, message.kind, message.content, message.ref ?? null, message.channel ?? null, message.threadId ?? null, message.ts, message.hop ?? null];
 }
 function rowToMessage(row) {
   const id = row.id;
@@ -2657,6 +2690,9 @@ function rowToMessage(row) {
     ...typeof row.ref === "string" && row.ref !== "" ? { ref: row.ref } : {},
     ...typeof row.channel === "string" && row.channel !== "" ? { channel: row.channel } : {},
     ...typeof row.thread_id === "string" && row.thread_id !== "" ? { threadId: row.thread_id } : {},
+    // Chain depth: rows written before the hop column restore without it
+    // (treated as a chain origin by importHistory — never as a bogus depth).
+    ...typeof row.hop === "number" && Number.isFinite(row.hop) && row.hop > 0 ? { hop: row.hop } : {},
     ts
   };
 }
@@ -2671,11 +2707,11 @@ var SQLiteStateStore = class {
       );
       CREATE TABLE IF NOT EXISTS messages (
         seq INTEGER PRIMARY KEY AUTOINCREMENT, id TEXT NOT NULL, from_peer TEXT NOT NULL,
-        to_peer TEXT NOT NULL, kind TEXT NOT NULL, content TEXT NOT NULL, ref TEXT, channel TEXT, thread_id TEXT, ts INTEGER NOT NULL
+        to_peer TEXT NOT NULL, kind TEXT NOT NULL, content TEXT NOT NULL, ref TEXT, channel TEXT, thread_id TEXT, ts INTEGER NOT NULL, hop INTEGER
       );
       CREATE TABLE IF NOT EXISTS mailboxes (
         peer TEXT NOT NULL, seq INTEGER PRIMARY KEY AUTOINCREMENT, id TEXT NOT NULL, from_peer TEXT NOT NULL,
-        to_peer TEXT NOT NULL, kind TEXT NOT NULL, content TEXT NOT NULL, ref TEXT, channel TEXT, thread_id TEXT, ts INTEGER NOT NULL
+        to_peer TEXT NOT NULL, kind TEXT NOT NULL, content TEXT NOT NULL, ref TEXT, channel TEXT, thread_id TEXT, ts INTEGER NOT NULL, hop INTEGER
       );
       CREATE TABLE IF NOT EXISTS groups (
         id TEXT PRIMARY KEY, name TEXT, members TEXT NOT NULL, created_by TEXT NOT NULL, created_at INTEGER NOT NULL
@@ -2685,9 +2721,11 @@ var SQLiteStateStore = class {
       );
     `);
     for (const table of ["messages", "mailboxes"]) {
-      try {
-        this.db.exec(`ALTER TABLE ${table} ADD COLUMN thread_id TEXT`);
-      } catch {
+      for (const column of ["thread_id TEXT", "hop INTEGER"]) {
+        try {
+          this.db.exec(`ALTER TABLE ${table} ADD COLUMN ${column}`);
+        } catch {
+        }
       }
     }
     log2.info(`sqlite state open: ${file}`);
@@ -2701,14 +2739,14 @@ var SQLiteStateStore = class {
   /** Insert buffered messages and re-snapshot mailboxes/profiles/groups/tasks. */
   flush(snapshot) {
     const insert = this.db.prepare(
-      "INSERT INTO messages (id, from_peer, to_peer, kind, content, ref, channel, thread_id, ts) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)"
+      "INSERT INTO messages (id, from_peer, to_peer, kind, content, ref, channel, thread_id, ts, hop) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
     );
     for (const message of this.buffer.splice(0, this.buffer.length)) {
       insert.run(...messageToRow(message));
     }
     this.db.exec("DELETE FROM mailboxes");
     const insertMail = this.db.prepare(
-      "INSERT INTO mailboxes (peer, id, from_peer, to_peer, kind, content, ref, channel, thread_id, ts) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
+      "INSERT INTO mailboxes (peer, id, from_peer, to_peer, kind, content, ref, channel, thread_id, ts, hop) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
     );
     for (const [peer, queue] of Object.entries(snapshot.mailboxes)) {
       for (const message of queue) insertMail.run(peer, ...messageToRow(message));
@@ -2801,7 +2839,7 @@ var SQLiteStateStore = class {
 
 // src/index.ts
 var SERVER_NAME = "agent-comm-hub";
-var SERVER_VERSION = "0.9.0";
+var SERVER_VERSION = "0.9.1";
 var DEFAULT_HOST = "127.0.0.1";
 var DEFAULT_PORT = 18764;
 var DEFAULT_PATH = "/mcp";
@@ -3859,7 +3897,8 @@ Hub options:
   --herdr-timeout-ms <n>     Default cap for one herdr call in ms (default 30000)
   --manager-peers <ids>      Comma-separated peer ids allowed to manage the
                              roster (rename others / kick), or "all".
-                             (default agent-hub-cli \u2014 the desktop GUI identity)
+                             (default agent-hub-cli,hub-admin \u2014 the desktop
+                             GUI and the web admin console identities)
   --state-file <path>        Persist the peer roster (aliases, client info) to
                              this JSON file so identities survive restarts
                              (default ~/.agent-comm-hub/roster.json; "off"

package/lib/index.js

@@ -472,6 +472,7 @@ function decodeContent(kind, content) {
 // src/hub.ts
 var MAX_PROFILES = 512;
 var MAX_TASKS = 1024;
+var MAX_TIMER_DELAY_MS = 2147483647;
 var AgentHub = class {
   constructor(options) {
     this.options = options;
@@ -671,8 +672,9 @@ var AgentHub = class {
    * wait for acks. */
   sendTask(from, to, task) {
     const threadId = task.threadId;
-    const message = this.route(from, to, "task", JSON.stringify(task), void 0, threadId);
+    const message = this.compose(from, to, "task", JSON.stringify(task), void 0, threadId);
     this.recordTask(message, task);
+    this.dispatch(message);
     return message;
   }
   /** Send an acknowledgement back to the sender of `ref`. Updates the task
@@ -725,11 +727,17 @@ var AgentHub = class {
     this.evictOverflowTasks();
     this.options.onTaskChanged?.(this.taskOf(record.id));
   }
-  /** Arm the SLA timer for a task that supplied `timeoutMs`. */
+  /** Arm the SLA timer for a task that supplied `timeoutMs`. A deadline
+   * beyond {@link MAX_TIMER_DELAY_MS} cannot be expressed as one delay — the
+   * timer would overflow and fire after ~1 ms — so it is re-armed in segments
+   * of that size. `deadlineAt` stays the authoritative deadline and each
+   * segment recomputes the remaining time, so a long SLA is honored exactly
+   * (no drift); settling or evicting the task clears the pending segment, and
+   * clearing the timer is what ends the chain. */
   scheduleTaskTimeout(record) {
     if (record.deadlineAt === void 0) return;
-    const delay = Math.max(0, record.deadlineAt - Date.now());
-    const timer = setTimeout(() => this.fireTaskTimeout(record.id), delay);
+    const remaining = record.deadlineAt - Date.now();
+    const timer = remaining > MAX_TIMER_DELAY_MS ? setTimeout(() => this.scheduleTaskTimeout(record), MAX_TIMER_DELAY_MS) : setTimeout(() => this.fireTaskTimeout(record.id), Math.max(0, remaining));
     timer.unref?.();
     this.taskTimers.set(record.id, timer);
   }
@@ -1059,6 +1067,7 @@ var AgentHub = class {
       const m = raw;
       if (typeof m.id !== "string" || typeof m.from !== "string" || typeof m.to !== "string" || typeof m.content !== "string" || typeof m.ts !== "number") continue;
       if (KINDS.includes(m.kind) === false) continue;
+      const hop = importHop(m.hop);
       valid.push({
         id: m.id,
         from: m.from,
@@ -1068,6 +1077,7 @@ var AgentHub = class {
         ...typeof m.ref === "string" ? { ref: m.ref } : {},
         ...typeof m.channel === "string" ? { channel: m.channel } : {},
         ...typeof m.threadId === "string" ? { threadId: m.threadId } : {},
+        ...hop !== void 0 ? { hop } : {},
         ts: m.ts
       });
     }
@@ -1093,6 +1103,7 @@ var AgentHub = class {
         if (typeof raw !== "object" || raw === null) continue;
         const m = raw;
         if (typeof m.id !== "string" || typeof m.from !== "string" || typeof m.content !== "string" || typeof m.ts !== "number") continue;
+        const hop = importHop(m.hop);
         restored.push({
           id: m.id,
           from: m.from,
@@ -1102,6 +1113,7 @@ var AgentHub = class {
           ...typeof m.ref === "string" ? { ref: m.ref } : {},
           ...typeof m.channel === "string" ? { channel: m.channel } : {},
           ...typeof m.threadId === "string" ? { threadId: m.threadId } : {},
+          ...hop !== void 0 ? { hop } : {},
           ts: m.ts
         });
       }
@@ -1212,6 +1224,15 @@ var AgentHub = class {
   /** Create a message from `from` addressed to `to` and deliver it. `to` may
    *  be a peer id, {@link BROADCAST}, or a group id. */
   route(from, to, kind, content, ref, threadId) {
+    const message = this.compose(from, to, kind, content, ref, threadId);
+    this.dispatch(message);
+    return message;
+  }
+  /** Validate, build, and record a message from `from` to `to` (`to` may be a
+   *  peer id, {@link BROADCAST}, or a group id). Composing and dispatching are
+   *  separate steps because a caller may need ledger state to exist before
+   *  anything reaches a recipient — {@link sendTask} books delivery times. */
+  compose(from, to, kind, content, ref, threadId) {
     if (!this.lastSeen.has(from)) throw new Error(`sender not registered: ${from}`);
     const group = this.groups.get(to);
     if (to !== BROADCAST && group === void 0 && !this.lastSeen.has(to)) {
@@ -1239,18 +1260,25 @@ var AgentHub = class {
     };
     this.lastSeen.set(from, message.ts);
     this.remember(message);
-    if (to === BROADCAST) {
+    return message;
+  }
+  /** Fan a composed message out to its recipients: broadcast, group members,
+   *  or the single addressed peer. */
+  dispatch(message) {
+    if (message.to === BROADCAST) {
       for (const peer of this.peers()) {
-        if (peer !== from) this.deliver(peer, message);
+        if (peer !== message.from) this.deliver(peer, message);
       }
-    } else if (group !== void 0) {
+      return;
+    }
+    const group = this.groups.get(message.to);
+    if (group !== void 0) {
       for (const member of group.members) {
-        if (member !== from) this.deliver(member, message);
+        if (member !== message.from) this.deliver(member, message);
       }
-    } else {
-      this.deliver(to, message);
+      return;
     }
-    return message;
+    this.deliver(message.to, message);
   }
   /** Queue or hand off a message; wake the first matching waiter for its target.
    *  History / onMessage are recorded by the caller (route / sendToGroup) —
@@ -1285,6 +1313,9 @@ var AgentHub = class {
     this.options.onMessage?.(message);
   }
 };
+function importHop(value) {
+  return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
+}
 function drainFrom(queue, from) {
   const kept = [];
   const drained = [];
@@ -1717,14 +1748,14 @@ function hubTools(hub, registry, options) {
     },
     {
       name: "bridge_task",
-      description: 'Delegate a structured task to another agent (peer, group, or "all"). The assignee acks with accepted | working | rejected | done | failed (bridge_ack). Track with bridge_task_status(ref) / bridge_tasks; wait for the ack with bridge_wait({ ref }). Optional timeoutMs marks the task `timeout` when the SLA expires without a terminal ack.',
+      description: 'Delegate a structured task to another agent (peer, group, or "all"). The assignee acks with accepted | working | rejected | done | failed (bridge_ack). Track with bridge_task_status(ref) / bridge_tasks; wait for the ack with bridge_wait({ ref }). Optional timeoutMs marks the task `timeout` when the SLA expires without a terminal ack; any positive duration is honored, including multi-day deadlines (the hub re-arms its timer instead of overflowing it).',
       inputSchema: schema(
         {
           to: str('Target peerId, group id, or "all" to broadcast.'),
           prompt: str("What the receiving agent should do."),
           context: optStr("Optional background information for the task."),
           deliverable: optStr("Optional expected deliverable description."),
-          timeoutMs: int("Optional soft SLA in ms; hub marks the task timeout when it expires."),
+          timeoutMs: int("Optional soft SLA in ms from now (e.g. 30000). No upper bound \u2014 a deadline past ~24.8 days is honored as well."),
           threadId: optStr("Optional conversation / workflow thread id.")
         },
         ["to", "prompt"]
@@ -1796,13 +1827,15 @@ function hubTools(hub, registry, options) {
     },
     {
       name: "bridge_task_status",
-      description: "Status of one delegated task: current ledger state (pending \u2192 accepted/working \u2192 done/failed/timeout, or rejected), the original prompt/context/deliverable, per-assignee state, and every ack event (who, status, note, progress, when). Use the task message id (the same id you pass as bridge_ack ref).",
+      description: "Status of one delegated task: current ledger state (pending \u2192 accepted/working \u2192 done/failed/timeout, or rejected), the original prompt/context/deliverable, per-assignee state, and every ack event (who, status, note, progress, when). Use the task message id (the same id you pass as bridge_ack ref). Readable by the sender, by an assignee (a group task carries the GROUP id in `to`, so its assignees read it through their assignee row) and by a group member; everyone else needs manager rights.",
       inputSchema: schema({ ref: str("Task message id (the id returned by bridge_task, also used as ack ref).") }, ["ref"]),
       handler: wrap(true, async (args, peer, sessionId) => {
         const ref = String(args.ref);
         const task = hub.taskOf(ref);
         if (task === void 0) throw new Error(`unknown task: ${ref}`);
-        if (task.from !== peer && task.to !== peer && task.to !== BROADCAST) {
+        const isAssignee = task.assignees.some((assignee) => assignee.peerId === peer);
+        const isGroupMember = hub.groupOf(task.to)?.members.includes(peer) ?? false;
+        if (task.from !== peer && task.to !== peer && task.to !== BROADCAST && !isAssignee && !isGroupMember) {
           requireManager(peer, `reading task '${ref}'`, sessionId);
         }
         return { task };
@@ -2643,7 +2676,7 @@ function readBody(req) {
 import { DatabaseSync } from "node:sqlite";
 var KIND_NAMES = ["chat", "task", "notice", "ack"];
 function messageToRow(message) {
-  return [message.id, message.from, message.to, message.kind, message.content, message.ref ?? null, message.channel ?? null, message.threadId ?? null, message.ts];
+  return [message.id, message.from, message.to, message.kind, message.content, message.ref ?? null, message.channel ?? null, message.threadId ?? null, message.ts, message.hop ?? null];
 }
 function rowToMessage(row) {
   const id = row.id;
@@ -2663,6 +2696,9 @@ function rowToMessage(row) {
     ...typeof row.ref === "string" && row.ref !== "" ? { ref: row.ref } : {},
     ...typeof row.channel === "string" && row.channel !== "" ? { channel: row.channel } : {},
     ...typeof row.thread_id === "string" && row.thread_id !== "" ? { threadId: row.thread_id } : {},
+    // Chain depth: rows written before the hop column restore without it
+    // (treated as a chain origin by importHistory — never as a bogus depth).
+    ...typeof row.hop === "number" && Number.isFinite(row.hop) && row.hop > 0 ? { hop: row.hop } : {},
     ts
   };
 }
@@ -2677,11 +2713,11 @@ var SQLiteStateStore = class {
       );
       CREATE TABLE IF NOT EXISTS messages (
         seq INTEGER PRIMARY KEY AUTOINCREMENT, id TEXT NOT NULL, from_peer TEXT NOT NULL,
-        to_peer TEXT NOT NULL, kind TEXT NOT NULL, content TEXT NOT NULL, ref TEXT, channel TEXT, thread_id TEXT, ts INTEGER NOT NULL
+        to_peer TEXT NOT NULL, kind TEXT NOT NULL, content TEXT NOT NULL, ref TEXT, channel TEXT, thread_id TEXT, ts INTEGER NOT NULL, hop INTEGER
       );
       CREATE TABLE IF NOT EXISTS mailboxes (
         peer TEXT NOT NULL, seq INTEGER PRIMARY KEY AUTOINCREMENT, id TEXT NOT NULL, from_peer TEXT NOT NULL,
-        to_peer TEXT NOT NULL, kind TEXT NOT NULL, content TEXT NOT NULL, ref TEXT, channel TEXT, thread_id TEXT, ts INTEGER NOT NULL
+        to_peer TEXT NOT NULL, kind TEXT NOT NULL, content TEXT NOT NULL, ref TEXT, channel TEXT, thread_id TEXT, ts INTEGER NOT NULL, hop INTEGER
       );
       CREATE TABLE IF NOT EXISTS groups (
         id TEXT PRIMARY KEY, name TEXT, members TEXT NOT NULL, created_by TEXT NOT NULL, created_at INTEGER NOT NULL
@@ -2691,9 +2727,11 @@ var SQLiteStateStore = class {
       );
     `);
     for (const table of ["messages", "mailboxes"]) {
-      try {
-        this.db.exec(`ALTER TABLE ${table} ADD COLUMN thread_id TEXT`);
-      } catch {
+      for (const column of ["thread_id TEXT", "hop INTEGER"]) {
+        try {
+          this.db.exec(`ALTER TABLE ${table} ADD COLUMN ${column}`);
+        } catch {
+        }
       }
     }
     log.info(`sqlite state open: ${file}`);
@@ -2707,14 +2745,14 @@ var SQLiteStateStore = class {
   /** Insert buffered messages and re-snapshot mailboxes/profiles/groups/tasks. */
   flush(snapshot) {
     const insert = this.db.prepare(
-      "INSERT INTO messages (id, from_peer, to_peer, kind, content, ref, channel, thread_id, ts) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)"
+      "INSERT INTO messages (id, from_peer, to_peer, kind, content, ref, channel, thread_id, ts, hop) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
     );
     for (const message of this.buffer.splice(0, this.buffer.length)) {
       insert.run(...messageToRow(message));
     }
     this.db.exec("DELETE FROM mailboxes");
     const insertMail = this.db.prepare(
-      "INSERT INTO mailboxes (peer, id, from_peer, to_peer, kind, content, ref, channel, thread_id, ts) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
+      "INSERT INTO mailboxes (peer, id, from_peer, to_peer, kind, content, ref, channel, thread_id, ts, hop) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)"
     );
     for (const [peer, queue] of Object.entries(snapshot.mailboxes)) {
       for (const message of queue) insertMail.run(peer, ...messageToRow(message));
@@ -2807,7 +2845,7 @@ var SQLiteStateStore = class {
 
 // src/index.ts
 var SERVER_NAME = "agent-comm-hub";
-var SERVER_VERSION = "0.9.0";
+var SERVER_VERSION = "0.9.1";
 var DEFAULT_HOST = "127.0.0.1";
 var DEFAULT_PORT = 18764;
 var DEFAULT_PATH = "/mcp";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-comm-hub",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "Generic multi-peer MCP hub: any MCP-capable agent (MiniMax Code, Claude Code, opencode, Codex, Gemini CLI, DSH, ...) connects to one local streamable-http endpoint and they chat, delegate tasks, and acknowledge in real time",
   "keywords": [
     "mcp",