fraim-hub 2.0.275 → 2.0.276

package/dist/src/ai-hub/configured-agent-command.js

@@ -0,0 +1,152 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseConfiguredCommand = parseConfiguredCommand;
+exports.describeConfiguredCommandInvocationProblem = describeConfiguredCommandInvocationProblem;
+exports.commandContainsLiteralSecret = commandContainsLiteralSecret;
+exports.decorateHostPlanWithConfiguredAgent = decorateHostPlanWithConfiguredAgent;
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const project_fraim_paths_1 = require("../core/utils/project-fraim-paths");
+const BASH_ENV_PREFIX = /^([A-Za-z_][A-Za-z0-9_]*)=(?:\$\([^)]*\)|"[^"]*"|'[^']*'|\S*)\s+/;
+// The value may be a parenthesized PowerShell expression followed by a
+// property-access chain (e.g. `(Get-Content ... | ConvertFrom-Json).api_key`),
+// a quoted string, or a bare token — always terminated by the statement `;`.
+const POWERSHELL_ENV_PREFIX = /^\$env:[A-Za-z_][A-Za-z0-9_]*\s*=\s*(?:\([^)]*\)(?:\.[A-Za-z_][A-Za-z0-9_]*)*|"[^"]*"|'[^']*'|\S+?)\s*;\s*/;
+function parseConfiguredCommand(runner, commandText) {
+    let rest = String(commandText || '').trim();
+    const prefixPattern = runner === 'powershell' ? POWERSHELL_ENV_PREFIX : BASH_ENV_PREFIX;
+    let prefixEnd = 0;
+    while (true) {
+        const match = rest.slice(prefixEnd).match(prefixPattern);
+        if (!match)
+            break;
+        prefixEnd += match[0].length;
+    }
+    const envPrefixText = rest.slice(0, prefixEnd).trim();
+    const invocation = rest.slice(prefixEnd).trim();
+    const tokens = tokenizeShellLike(invocation);
+    return { envPrefixText, extraArgs: tokens.slice(1), invocationHead: tokens[0] || '' };
+}
+// Reviewer finding (PR #1209, Round 3): parseConfiguredCommand's leniency is
+// intentional for *parsing* (it never throws), but that leniency means a
+// structurally wrong command — most dangerously a shell built-in like `.`
+// (source) or `source` at the head, meant to load a setup script into the
+// current shell — parses "successfully" into a garbage invocationHead that
+// decorateHostPlanWithConfiguredAgent then silently discards, appending only
+// the path/args that followed it as bogus positional arguments to the real
+// agent binary instead of ever sourcing the script. Since the invocation
+// head is always discarded and replaced with Hub's own known base binary,
+// the only way to catch this class of error is to check, at readiness time,
+// that what the user typed there actually was that same base binary — not
+// to attempt to execute or otherwise interpret it.
+function describeConfiguredCommandInvocationProblem(parsed, baseHostId) {
+    if (!parsed.invocationHead) {
+        return 'Command has no invocation to run after the environment prefix.';
+    }
+    if (parsed.invocationHead !== baseHostId) {
+        return `Command must invoke "${baseHostId}" (found "${parsed.invocationHead}"). A setup script should be registered as a setup script, not composed into this field — see hub-configured-agent-setup.md.`;
+    }
+    return null;
+}
+function tokenizeShellLike(text) {
+    const tokens = [];
+    const re = /"([^"]*)"|'([^']*)'|(\S+)/g;
+    let match;
+    while ((match = re.exec(text)) !== null) {
+        tokens.push(match[1] ?? match[2] ?? match[3]);
+    }
+    return tokens;
+}
+// Issue #1201 (R2.3): UX safety net only — flags what pattern-matches as a
+// literal high-entropy secret pasted into the command field. Not a substitute
+// for the routing skill never generating such a command in the first place.
+const LITERAL_SECRET_TOKEN = /^[A-Za-z0-9+/_.=-]{20,}$/;
+function commandContainsLiteralSecret(commandText) {
+    for (const token of String(commandText || '').split(/\s+/)) {
+        const eq = token.indexOf('=');
+        if (eq <= 0)
+            continue;
+        const value = token.slice(eq + 1);
+        if (!value || value.startsWith('$') || value.startsWith('`') || value.startsWith('('))
+            continue;
+        if (LITERAL_SECRET_TOKEN.test(value))
+            return true;
+    }
+    return false;
+}
+// The env-prefix assignment is evaluated as a bash "temporary environment"
+// directly attached to the `exec` command on the same line (`VAR=$(...) exec
+// "$@"`), not as a separate statement before it. A bare `VAR=value` on its
+// own line only sets a local shell variable — it is NOT exported, so it
+// would silently vanish from the real binary's environment once `exec`
+// replaces this process image. Attaching it to the same command line is
+// exactly what a terminal user's `VAR=$(...) codex ...` already does.
+const BASH_LAUNCH_WRAPPER = [
+    '#!/usr/bin/env bash',
+    'set -e',
+    'if [ -n "$FRAIM_CONFIGURED_AGENT_ENV_PREFIX" ]; then',
+    '  eval "$FRAIM_CONFIGURED_AGENT_ENV_PREFIX exec \\"\\$@\\""',
+    'else',
+    '  exec "$@"',
+    'fi',
+    '',
+].join('\n');
+const POWERSHELL_LAUNCH_WRAPPER = [
+    '$ErrorActionPreference = "Stop"',
+    'if ($env:FRAIM_CONFIGURED_AGENT_ENV_PREFIX) {',
+    '  Invoke-Expression $env:FRAIM_CONFIGURED_AGENT_ENV_PREFIX',
+    '}',
+    '$exe = $args[0]',
+    'if ($args.Length -gt 1) { $rest = $args[1..($args.Length - 1)] } else { $rest = @() }',
+    '& $exe @rest',
+    'exit $LASTEXITCODE',
+    '',
+].join('\r\n');
+// Writes the small, fixed wrapper script that lets a configured-agent's
+// env-prefix (which may contain `$(...)`/`(...)` substitutions) resolve in a
+// real shell at spawn time, then `exec`s Hub's own required invocation with
+// the parsed extra CLI args appended. Content-checked so it self-heals like
+// any other FRAIM-generated artifact (issue #1206 precedent) rather than
+// silently going stale if regenerated with different logic.
+//
+// Security review (issue #1201): written under the per-user FRAIM home
+// (`getUserFraimDirPath()`), NOT `os.tmpdir()`. A predictable filename in a
+// shared, world-writable OS temp directory is a symlink-race target on
+// multi-user machines — another local user could pre-place a symlink at the
+// predictable path, and `fs.writeFileSync` would follow it and overwrite an
+// arbitrary file the *victim* user can write to. The per-user FRAIM home is
+// not shared across OS accounts, closing that class of attack.
+function ensureConfiguredAgentLaunchWrapper(runner) {
+    const content = runner === 'bash' ? BASH_LAUNCH_WRAPPER : POWERSHELL_LAUNCH_WRAPPER;
+    const filePath = path_1.default.join((0, project_fraim_paths_1.getUserFraimDirPath)(), runner === 'bash' ? 'hub-configured-agent-launch.sh' : 'hub-configured-agent-launch.ps1');
+    const existing = fs_1.default.existsSync(filePath) ? fs_1.default.readFileSync(filePath, 'utf8') : null;
+    if (existing !== content) {
+        fs_1.default.writeFileSync(filePath, content, { encoding: 'utf8', mode: 0o755 });
+    }
+    return filePath;
+}
+function decorateHostPlanWithConfiguredAgent(plan, agent, agentEnv = {}) {
+    if (!agent)
+        return plan;
+    const withEnv = { ...plan, env: { ...(plan.env || {}), ...agentEnv } };
+    if (!agent.command)
+        return withEnv;
+    const parsed = parseConfiguredCommand(agent.command.runner, agent.command.command);
+    if (!parsed.envPrefixText && parsed.extraArgs.length === 0)
+        return withEnv;
+    const wrapperPath = ensureConfiguredAgentLaunchWrapper(agent.command.runner);
+    const realInvocation = [plan.command, ...plan.args, ...parsed.extraArgs];
+    const decoratedEnv = { ...withEnv.env, FRAIM_CONFIGURED_AGENT_ENV_PREFIX: parsed.envPrefixText };
+    if (agent.command.runner === 'bash') {
+        return { ...withEnv, command: 'bash', args: [wrapperPath, ...realInvocation], env: decoratedEnv };
+    }
+    return {
+        ...withEnv,
+        command: 'powershell.exe',
+        args: ['-NoProfile', '-ExecutionPolicy', 'Bypass', '-File', wrapperPath, ...realInvocation],
+        env: decoratedEnv,
+    };
+}

package/dist/src/ai-hub/configured-agents.js

@@ -3,18 +3,18 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AiHubConfiguredAgentStore = void 0;
+exports.describeConfiguredCommandInvocationProblem = exports.decorateHostPlanWithConfiguredAgent = exports.commandContainsLiteralSecret = exports.parseConfiguredCommand = exports.AiHubConfiguredAgentStore = void 0;
 exports.synthesizeDefaultConfiguredAgents = synthesizeDefaultConfiguredAgents;
 exports.checkConfiguredAgentAvailability = checkConfiguredAgentAvailability;
 exports.checkConfiguredAgentReadiness = checkConfiguredAgentReadiness;
 exports.projectConfiguredAgent = projectConfiguredAgent;
 exports.resolveConfiguredAgentForHost = resolveConfiguredAgentForHost;
 exports.resolveConfiguredAgentEnv = resolveConfiguredAgentEnv;
-exports.decorateHostPlanWithConfiguredAgent = decorateHostPlanWithConfiguredAgent;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const child_process_1 = require("child_process");
 const project_fraim_paths_1 = require("../core/utils/project-fraim-paths");
+const configured_agent_command_1 = require("./configured-agent-command");
 const VALID_HOSTS = ['codex', 'claude', 'gemini', 'copilot'];
 const ENV_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
 function nowIso() {
@@ -48,6 +48,9 @@ function normalizeAgent(input) {
     const setupScript = normalizeSetupScript(input.setupScript);
     if (input.setupScript && !setupScript)
         return { ok: false, error: 'Setup script command is required.' };
+    const command = normalizeCommand(input.command);
+    if (input.command && !command)
+        return { ok: false, error: 'Command is required.' };
     const createdAt = input.createdAt || nowIso();
     return {
         ok: true,
@@ -57,6 +60,7 @@ function normalizeAgent(input) {
             ...(input.description && String(input.description).trim() ? { description: String(input.description).trim() } : {}),
             baseHostId,
             enabled: input.enabled !== false,
+            ...(command ? { command } : {}),
             ...(setupScript ? { setupScript } : {}),
             createdAt,
             updatedAt: nowIso(),
@@ -77,6 +81,24 @@ function normalizeSetupScript(value) {
         timeoutMs: typeof value.timeoutMs === 'number' && value.timeoutMs > 0 ? Math.min(value.timeoutMs, 120_000) : 30_000,
     };
 }
+// Issue #1201 (R2.1): the single-text-field setup surface. `runner` is an
+// internal execution detail — callers that omit it get the current platform's
+// default shell so the UI never has to ask the user to pick one.
+function normalizeCommand(value) {
+    if (!value)
+        return null;
+    const command = String(value.command || '').trim();
+    if (!command)
+        return null;
+    const runner = value.runner === 'bash' || value.runner === 'powershell'
+        ? value.runner
+        : (process.platform === 'win32' ? 'powershell' : 'bash');
+    return {
+        runner,
+        command,
+        timeoutMs: typeof value.timeoutMs === 'number' && value.timeoutMs > 0 ? Math.min(value.timeoutMs, 120_000) : 30_000,
+    };
+}
 function synthesizeDefaultConfiguredAgents(employees) {
     const timestamp = '1970-01-01T00:00:00.000Z';
     return employees
@@ -152,7 +174,12 @@ function checkConfiguredAgentAvailability(agent, employees, env = process.env) {
         reasons.push('Configured agent is disabled.');
     if (!employee?.available)
         reasons.push(`${employee?.label || agent.baseHostId} is not available on this machine.`);
-    if (agent.setupScript) {
+    if (agent.command) {
+        if (!agent.command.command.trim()) {
+            reasons.push('Command is empty.');
+        }
+    }
+    else if (agent.setupScript) {
         const command = agent.setupScript.command;
         const isPathLike = /[\\/]/.test(command) || /^[A-Za-z]:[\\/]/.test(command);
         if (isPathLike && !fs_1.default.existsSync(command)) {
@@ -160,13 +187,35 @@ function checkConfiguredAgentAvailability(agent, employees, env = process.env) {
         }
     }
     else if (!agent.id.endsWith('-default')) {
-        warnings.push('No setup script configured; this profile launches the base CLI unchanged.');
+        warnings.push('No command configured; this profile launches the base CLI unchanged.');
     }
     return { id: agent.id, label: agent.label, baseHostId: agent.baseHostId, enabled: agent.enabled, available: reasons.length === 0, reasons, warnings };
 }
 function checkConfiguredAgentReadiness(agent, employees, env = process.env) {
     const check = checkConfiguredAgentAvailability(agent, employees, env);
-    if (!check.available || !agent.setupScript)
+    if (!check.available)
+        return check;
+    if (agent.command) {
+        try {
+            const parsed = (0, configured_agent_command_1.parseConfiguredCommand)(agent.command.runner, agent.command.command);
+            const problem = (0, configured_agent_command_1.describeConfiguredCommandInvocationProblem)(parsed, agent.baseHostId);
+            if (problem) {
+                return { ...check, available: false, reasons: [...check.reasons, problem] };
+            }
+            return check;
+        }
+        catch (error) {
+            return {
+                ...check,
+                available: false,
+                reasons: [
+                    ...check.reasons,
+                    error instanceof Error ? error.message : 'Configured agent command could not be parsed.',
+                ],
+            };
+        }
+    }
+    if (!agent.setupScript)
         return check;
     try {
         resolveConfiguredAgentEnv(agent);
@@ -191,6 +240,7 @@ function projectConfiguredAgent(agent, employees) {
         ...(agent.description ? { description: agent.description } : {}),
         baseHostId: agent.baseHostId,
         enabled: agent.enabled,
+        ...(agent.command ? { command: { ...agent.command } } : {}),
         ...(agent.setupScript ? { setupScript: { ...agent.setupScript, args: [...(agent.setupScript.args || [])] } } : {}),
         createdAt: agent.createdAt,
         updatedAt: agent.updatedAt,
@@ -295,11 +345,13 @@ function filterSafeEnv(env) {
     }
     return safe;
 }
-function decorateHostPlanWithConfiguredAgent(plan, agent, agentEnv = {}) {
-    if (!agent)
-        return plan;
-    return {
-        ...plan,
-        env: { ...(plan.env || {}), ...agentEnv },
-    };
-}
+// Issue #1201: command parsing, secret detection, and launch decoration for
+// the single-command configured-agent surface live in their own module
+// (kept a cohesive, separately-testable unit rather than growing this file
+// past the 500-line quality threshold) — re-exported here so existing
+// callers importing from `./configured-agents` are unaffected.
+var configured_agent_command_2 = require("./configured-agent-command");
+Object.defineProperty(exports, "parseConfiguredCommand", { enumerable: true, get: function () { return configured_agent_command_2.parseConfiguredCommand; } });
+Object.defineProperty(exports, "commandContainsLiteralSecret", { enumerable: true, get: function () { return configured_agent_command_2.commandContainsLiteralSecret; } });
+Object.defineProperty(exports, "decorateHostPlanWithConfiguredAgent", { enumerable: true, get: function () { return configured_agent_command_2.decorateHostPlanWithConfiguredAgent; } });
+Object.defineProperty(exports, "describeConfiguredCommandInvocationProblem", { enumerable: true, get: function () { return configured_agent_command_2.describeConfiguredCommandInvocationProblem; } });

package/dist/src/ai-hub/hub-latest-version.js

@@ -4,28 +4,57 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getLatestPublishedVersion = getLatestPublishedVersion;
+exports.getCachedLatestPublishedVersion = getCachedLatestPublishedVersion;
+exports.refreshLatestPublishedVersionInBackground = refreshLatestPublishedVersionInBackground;
 exports.__resetLatestVersionCache = __resetLatestVersionCache;
 const https_1 = __importDefault(require("https"));
 // Issue #755: best-effort "latest published fraim version" for the Hub's
 // update-available nudge. Cached in-process (1h TTL) and never throws — returns
 // null when offline or the registry is unreachable, so the nudge simply hides.
 const TTL_MS = 60 * 60 * 1000;
+const FAILED_RETRY_MS = 5 * 60 * 1000;
 const REGISTRY_URL = 'https://registry.npmjs.org/fraim/latest';
 let cache = { value: null, at: 0 };
+let lastAttemptAt = 0;
+let inFlight = null;
 async function getLatestPublishedVersion() {
     const now = Date.now();
     if (cache.at !== 0 && now - cache.at < TTL_MS)
         return cache.value;
-    const value = await fetchNpmLatest();
-    // Only cache successful lookups; a failed fetch retries next call rather than
-    // caching a null for an hour.
-    if (value !== null)
-        cache = { value, at: now };
-    return value ?? cache.value;
+    return refreshLatestPublishedVersion();
+}
+function getCachedLatestPublishedVersion() {
+    return cache.value;
+}
+function refreshLatestPublishedVersionInBackground() {
+    void refreshLatestPublishedVersion();
+}
+async function refreshLatestPublishedVersion() {
+    const now = Date.now();
+    if (cache.at !== 0 && now - cache.at < TTL_MS)
+        return cache.value;
+    if (inFlight)
+        return inFlight;
+    if (cache.value === null && lastAttemptAt !== 0 && now - lastAttemptAt < FAILED_RETRY_MS) {
+        return null;
+    }
+    lastAttemptAt = now;
+    inFlight = fetchNpmLatest()
+        .then((value) => {
+        if (value !== null)
+            cache = { value, at: Date.now() };
+        return value ?? cache.value;
+    })
+        .finally(() => {
+        inFlight = null;
+    });
+    return inFlight;
 }
 /** Test-only: reset the module cache. */
 function __resetLatestVersionCache() {
     cache = { value: null, at: 0 };
+    lastAttemptAt = 0;
+    inFlight = null;
 }
 function fetchNpmLatest() {
     return new Promise((resolve) => {

package/dist/src/ai-hub/server.js

@@ -2653,6 +2653,20 @@ class AiHubServer {
     configuredAgentsForCurrentMachine(employees = this.hostRuntime.detectEmployees()) {
         return this.configuredAgentStore.listWithDefaults(employees);
     }
+    // Issue #1201 (R2.3): a UX safety net, not a replacement for the routing
+    // skill's own secret-hygiene discipline — flags what pattern-matches as a
+    // literal secret pasted into the single command field, on every write path
+    // (UI form and direct API callers alike).
+    projectConfiguredAgentWithSecretWarning(agent) {
+        const projected = (0, configured_agents_1.projectConfiguredAgent)(agent, this.hostRuntime.detectEmployees());
+        if (agent.command && (0, configured_agents_1.commandContainsLiteralSecret)(agent.command.command)) {
+            return {
+                ...projected,
+                secretWarning: 'This command looks like it contains a literal secret value. Reference where the secret resolves at runtime (a file, a keychain, an env var already set) instead of pasting the value directly.',
+            };
+        }
+        return projected;
+    }
     resolveLaunchAgent(configuredAgentId, hostId, employees = this.hostRuntime.detectEmployees()) {
         const resolved = (0, configured_agents_1.resolveConfiguredAgentForHost)(configuredAgentId, hostId, this.configuredAgentsForCurrentMachine(employees));
         const check = (0, configured_agents_1.checkConfiguredAgentAvailability)(resolved.agent, employees);
@@ -4925,7 +4939,8 @@ class AiHubServer {
         // `fraim hub` CLI also queries this to confirm a running instance's version.
         this.app.get('/api/ai-hub/version', async (_req, res) => {
             const version = (0, version_utils_1.getFraimVersion)();
-            const latest = await (0, hub_latest_version_1.getLatestPublishedVersion)();
+            const latest = (0, hub_latest_version_1.getCachedLatestPublishedVersion)();
+            (0, hub_latest_version_1.refreshLatestPublishedVersionInBackground)();
             const updateAvailable = isNewerPublishedVersion(latest, version);
             const uiRuntime = await this.resolveHubUiRuntimeResponse();
             return res.json({
@@ -5304,7 +5319,7 @@ class AiHubServer {
             const result = this.configuredAgentStore.upsert(req.body);
             if (!result.ok || !result.agent)
                 return res.status(400).json({ error: result.error || 'Invalid configured agent.' });
-            return res.status(201).json((0, configured_agents_1.projectConfiguredAgent)(result.agent, this.hostRuntime.detectEmployees()));
+            return res.status(201).json(this.projectConfiguredAgentWithSecretWarning(result.agent));
         });
         this.app.put('/api/ai-hub/configured-agents/:id', (req, res) => {
             if (!this.requireTrustedHubOrigin(req, res))
@@ -5312,7 +5327,7 @@ class AiHubServer {
             const result = this.configuredAgentStore.upsert({ ...req.body, id: req.params.id });
             if (!result.ok || !result.agent)
                 return res.status(400).json({ error: result.error || 'Invalid configured agent.' });
-            return res.json((0, configured_agents_1.projectConfiguredAgent)(result.agent, this.hostRuntime.detectEmployees()));
+            return res.json(this.projectConfiguredAgentWithSecretWarning(result.agent));
         });
         this.app.delete('/api/ai-hub/configured-agents/:id', (req, res) => {
             if (!this.requireTrustedHubOrigin(req, res))
@@ -5710,10 +5725,6 @@ class AiHubServer {
                     current.messages.push((0, hosts_1.createHubMessage)('manager', prepared.display || message, deliveryStatus));
                     if (reviewApprovalSystemEventText)
                         current.events.push((0, hosts_1.createHubEvent)('system', reviewApprovalSystemEventText));
-                    // R38: mark REDIRECTING before the active child is even asked to stop, so
-                    // the UI sees the disabled/redirecting state in the very next poll.
-                    if (deliveryIntent === 'stop')
-                        current.pendingRedirect = true;
                 });
                 const started = this.runRegistry.get(run.id);
                 if (started)
@@ -5722,11 +5733,17 @@ class AiHubServer {
                 const continueLaunch = this.resolveLaunchAgent(run.configuredAgentId, run.hostId);
                 let codexMissingReasoningResumeError = false;
                 let startedCodexReviewApprovalFallback = false;
-                // R38: once the corrective continuation's own handlers see their first
-                // event, the redirect has actually started (the previous active child
-                // closed and this one spawned) — clear the transient flag so Send
-                // re-enables. A no-op for the common (non-redirect) 'after' case.
-                let redirectStarted = deliveryIntent !== 'stop';
+                // Issue #1249: once this continuation's own handlers see their first
+                // event, the turn has actually started — the previous active child
+                // closed and this one spawned. CliHostRuntime.dequeueNext drains its
+                // entire pending queue into one combined continuation whenever the
+                // active child closes, so by construction every message still
+                // carrying a deliveryStatus (queued or redirecting) at this point has
+                // just been delivered as part of this turn. Clear their badges here
+                // instead of tracking a run-level flag (removed — see the issue for
+                // why pendingRedirect was an unnecessary, bug-prone second lock on
+                // top of the ordinary "running" state). A no-op when nothing queued.
+                let turnStarted = false;
                 const child = this.hostRuntime.continueRun(run.hostId, run.projectPath, run.sessionId, message, {
                     onEvent: (event, channel) => {
                         if (run.hostId === 'codex' && reviewApprovalSystemEventText) {
@@ -5749,10 +5766,14 @@ class AiHubServer {
                                 this.applySeekMentoringSignalToRun(current, event.seekMentoring);
                             if (event.usage)
                                 applyUsageSignal(current, event.usage);
-                            if (!redirectStarted)
-                                current.pendingRedirect = false;
+                            if (!turnStarted) {
+                                for (const pending of current.messages) {
+                                    if (pending.deliveryStatus)
+                                        delete pending.deliveryStatus;
+                                }
+                            }
                         });
-                        redirectStarted = true;
+                        turnStarted = true;
                         const updated = this.runRegistry.get(run.id);
                         if (updated) {
                             this.maybeStartDelegatedChildRuns(updated);

package/dist/src/cli/setup/ide-global-integration.js

@@ -42,7 +42,8 @@ function describeOnboardingInvocationSurfaces(installedIDEs) {
 /**
  * Install Claude FRAIM discovery artifacts at the user level.
  * Writes a skill to ~/.claude/skills/fraim/SKILL.md and a compatibility command
- * to ~/.claude/commands/fraim.md. Existing user files are preserved.
+ * to ~/.claude/commands/fraim.md. Stale content from prior FRAIM versions is
+ * refreshed; already-current content is left untouched.
  */
 async function installSlashCommands(homeDir) {
     const home = homeDir || os_1.default.homedir();
@@ -50,51 +51,59 @@ async function installSlashCommands(homeDir) {
     if (!fs_1.default.existsSync(claudeDir)) {
         return;
     }
-    installFileIfMissing(path_1.default.join(claudeDir, 'skills', 'fraim', 'SKILL.md'), (0, ide_invocation_surfaces_1.buildClaudeSkillContent)(), 'Claude FRAIM skill (~/.claude/skills/fraim/SKILL.md)');
-    installFileIfMissing(path_1.default.join(claudeDir, 'commands', 'fraim.md'), (0, ide_invocation_surfaces_1.buildClaudeCommandShimContent)(), 'Claude compatibility command (~/.claude/commands/fraim.md)');
+    installOrUpdateManagedFile(path_1.default.join(claudeDir, 'skills', 'fraim', 'SKILL.md'), (0, ide_invocation_surfaces_1.buildClaudeSkillContent)(), 'Claude FRAIM skill (~/.claude/skills/fraim/SKILL.md)');
+    installOrUpdateManagedFile(path_1.default.join(claudeDir, 'commands', 'fraim.md'), (0, ide_invocation_surfaces_1.buildClaudeCommandShimContent)(), 'Claude compatibility command (~/.claude/commands/fraim.md)');
 }
 /**
  * Install FRAIM invocation artifacts for non-Claude IDEs.
  * Supports: Cursor, Codex, Grok, Gemini CLI, Copilot CLI, Windsurf, Kiro
- * Does not overwrite existing files.
+ * Stale content from prior FRAIM versions is refreshed; already-current
+ * content is left untouched.
  */
 async function installGlobalRules(homeDir) {
     const home = homeDir || os_1.default.homedir();
     const cursorDir = path_1.default.join(home, '.cursor');
     if (fs_1.default.existsSync(cursorDir)) {
-        installFileIfMissing(path_1.default.join(cursorDir, 'rules', 'fraim.mdc'), (0, ide_invocation_surfaces_1.buildCursorMentionRuleContent)(), 'Cursor FRAIM rule (~/.cursor/rules/fraim.mdc)');
+        installOrUpdateManagedFile(path_1.default.join(cursorDir, 'rules', 'fraim.mdc'), (0, ide_invocation_surfaces_1.buildCursorMentionRuleContent)(), 'Cursor FRAIM rule (~/.cursor/rules/fraim.mdc)');
     }
     const codexDir = path_1.default.join(home, '.codex');
     if (fs_1.default.existsSync(codexDir)) {
-        installFileIfMissing(path_1.default.join(codexDir, 'skills', 'fraim', 'SKILL.md'), (0, ide_invocation_surfaces_1.buildCodexSkillContent)(), 'Codex FRAIM skill (~/.codex/skills/fraim/SKILL.md)');
+        installOrUpdateManagedFile(path_1.default.join(codexDir, 'skills', 'fraim', 'SKILL.md'), (0, ide_invocation_surfaces_1.buildCodexSkillContent)(), 'Codex FRAIM skill (~/.codex/skills/fraim/SKILL.md)');
     }
     const grokDir = path_1.default.join(home, '.grok');
     if (fs_1.default.existsSync(grokDir)) {
-        installFileIfMissing(path_1.default.join(grokDir, 'skills', 'fraim', 'SKILL.md'), (0, ide_invocation_surfaces_1.buildGrokSkillContent)(), 'Grok FRAIM skill (~/.grok/skills/fraim/SKILL.md)');
+        installOrUpdateManagedFile(path_1.default.join(grokDir, 'skills', 'fraim', 'SKILL.md'), (0, ide_invocation_surfaces_1.buildGrokSkillContent)(), 'Grok FRAIM skill (~/.grok/skills/fraim/SKILL.md)');
     }
     const geminiDir = path_1.default.join(home, '.gemini');
     if (fs_1.default.existsSync(geminiDir)) {
-        installFileIfMissing(path_1.default.join(geminiDir, 'commands', 'fraim.toml'), (0, ide_invocation_surfaces_1.buildGeminiCommandContent)(), 'Gemini CLI FRAIM command (~/.gemini/commands/fraim.toml)');
+        installOrUpdateManagedFile(path_1.default.join(geminiDir, 'commands', 'fraim.toml'), (0, ide_invocation_surfaces_1.buildGeminiCommandContent)(), 'Gemini CLI FRAIM command (~/.gemini/commands/fraim.toml)');
     }
     const antigravityDir = path_1.default.join(home, '.gemini', 'antigravity');
     if (fs_1.default.existsSync(antigravityDir)) {
-        installFileIfMissing(path_1.default.join(antigravityDir, 'commands', 'fraim.md'), (0, ide_invocation_surfaces_1.buildAntigravityCommandContent)(), 'Antigravity FRAIM command (~/.gemini/antigravity/commands/fraim.md)');
+        installOrUpdateManagedFile(path_1.default.join(antigravityDir, 'commands', 'fraim.md'), (0, ide_invocation_surfaces_1.buildAntigravityCommandContent)(), 'Antigravity FRAIM command (~/.gemini/antigravity/commands/fraim.md)');
     }
     const windsurfDir = path_1.default.join(home, '.codeium', 'windsurf');
     if (fs_1.default.existsSync(windsurfDir)) {
-        installFileIfMissing(path_1.default.join(windsurfDir, 'commands', 'fraim.md'), (0, ide_invocation_surfaces_1.buildWindsurfCommandContent)(), 'Windsurf FRAIM command (~/.codeium/windsurf/commands/fraim.md)');
+        installOrUpdateManagedFile(path_1.default.join(windsurfDir, 'commands', 'fraim.md'), (0, ide_invocation_surfaces_1.buildWindsurfCommandContent)(), 'Windsurf FRAIM command (~/.codeium/windsurf/commands/fraim.md)');
     }
     const kiroDir = path_1.default.join(home, '.kiro');
     if (fs_1.default.existsSync(kiroDir)) {
-        installFileIfMissing(path_1.default.join(kiroDir, 'commands', 'fraim.md'), (0, ide_invocation_surfaces_1.buildKiroCommandContent)(), 'Kiro FRAIM command (~/.kiro/commands/fraim.md)');
+        installOrUpdateManagedFile(path_1.default.join(kiroDir, 'commands', 'fraim.md'), (0, ide_invocation_surfaces_1.buildKiroCommandContent)(), 'Kiro FRAIM command (~/.kiro/commands/fraim.md)');
     }
 }
-function installFileIfMissing(filePath, content, displayName) {
-    if (fs_1.default.existsSync(filePath)) {
-        console.log(chalk_1.default.gray(`   ${displayName.split('(')[0].trim()} already exists — skipping`));
+// These paths (~/.claude/skills/fraim/, ~/.codex/skills/fraim/, etc.) are
+// FRAIM-exclusive — nothing else writes to them — so the file is always
+// brought in line with the current generator output, the same contract
+// `ensureAgentAdapterFiles()` already uses for the equivalent project-level
+// files in agent-adapters.ts. Skipping on existence (issue #1242) permanently
+// locked in stale content from older FRAIM releases with no way to self-heal.
+function installOrUpdateManagedFile(filePath, content, displayName) {
+    const existing = fs_1.default.existsSync(filePath) ? fs_1.default.readFileSync(filePath, 'utf8') : null;
+    if (existing === content) {
+        console.log(chalk_1.default.gray(`   ${displayName.split('(')[0].trim()} already up to date — skipping`));
         return;
     }
     fs_1.default.mkdirSync(path_1.default.dirname(filePath), { recursive: true });
     fs_1.default.writeFileSync(filePath, content, 'utf8');
-    console.log(chalk_1.default.green(`   ✅ Installed ${displayName}`));
+    console.log(chalk_1.default.green(`   ✅ ${existing === null ? 'Installed' : 'Updated'} ${displayName}`));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fraim-hub",
-  "version": "2.0.275",
+  "version": "2.0.276",
   "description": "FRAIM Hub local companion package.",
   "bin": {
     "fraim-hub": "bin/fraim-hub.js",
@@ -168,7 +168,7 @@
     "electron-updater": "^6.8.9",
     "express": "^5.2.1",
     "extract-zip": "^2.0.1",
-    "fraim": "2.0.275",
+    "fraim": "2.0.276",
     "mongodb": "^7.0.0",
     "node-cron": "4.2.1",
     "node-edge-tts": "^1.2.10",

package/public/ai-hub/script.js

@@ -2803,9 +2803,6 @@ function conversationStateDotClass(conv) {
 }
 
 function conversationStateLabel(conv) {
-  // Issue #1176 R38: a "Redirect now" course-correction in flight takes
-  // priority over the ordinary Working label until the corrective turn starts.
-  if (conv && conv.pendingRedirect) return 'Redirecting';
   if (isManagedDelegationChild(conv)) {
     if (conv.status === 'running') return 'Working for Mandy';
     if (conv.status === 'completed' && conv.managedReviewStatus === 'reviewed') return 'Reviewed by Mandy';
@@ -3661,10 +3658,18 @@ function renderActive() {
   }
 
   // FRAIM messages — render into #messages via appendMessageDom (same for AB and non-AB).
-  const messageFingerprints = messages.map((message) => `${message.role || ''}\u0000${message.text || ''}\u0000${messageTimestamp(message) || ''}`);
+  // Issue #1249: include deliveryStatus in the fingerprint. Without it, a
+  // server-side badge clear (queued/redirecting -> delivered) is invisible to
+  // this diff (same role/text/timestamp), so the "Queued N" / "Redirecting
+  // now" badge would never disappear even after the server clears the field.
+  const messageFingerprints = messages.map((message) => `${message.role || ''}\u0000${message.text || ''}\u0000${messageTimestamp(message) || ''}\u0000${message.deliveryStatus ? JSON.stringify(message.deliveryStatus) : ''}`);
   const messagesMutated =
     messages.length === renderedMessageCount &&
     messageFingerprints.some((fingerprint, index) => fingerprint !== renderedMessageFingerprints[index]);
+  // Issue #1249: capture the pre-reset count so "newly arrived" below reflects
+  // genuinely new messages, not every row a messagesMutated full rebuild just
+  // re-appended (e.g. an existing message's badge disappearing).
+  const priorRenderedMessageCount = renderedMessageCount;
   if (messages.length < renderedMessageCount || messagesMutated) {
     els['messages'].innerHTML = '';
     renderedMessageCount = 0;
@@ -3676,6 +3681,10 @@ function renderActive() {
   const appendedMessages = messages.length - renderedMessageCount;
   renderedMessageCount = messages.length;
   renderedMessageFingerprints = messageFingerprints;
+  // Issue #1249 (Problem 2): a message the manager just sent while the agent
+  // was mid-turn (queued or redirecting) must be visible without the manager
+  // scrolling, even if they had scrolled up to review earlier history.
+  const hasNewPendingDeliveryMessage = messages.slice(priorRenderedMessageCount).some((message) => !!message.deliveryStatus);
   syncWorkingIndicator(conv);
   // Direct raw event log — append-only like the FRAIM micro-log, shows all
   // stdout/stderr/system events from the B run so the user sees everything.
@@ -3717,18 +3726,18 @@ function renderActive() {
   // marks a manager is stepping through. Re-emit them from find state instead of injecting once.
   if (typeof convFindRefresh === 'function') convFindRefresh();
   const shouldScrollForUpdate = switchedConv || statusChanged || appendedMessages > 0 || messagesMutated;
-  scrollThreadAfterViewportSync(conv, shouldScrollForUpdate);
+  scrollThreadAfterViewportSync(conv, shouldScrollForUpdate, hasNewPendingDeliveryMessage);
   requestAnimationFrame(() => {
     syncThreadMessageViewport();
-    scrollThreadAfterViewportSync(conv, shouldScrollForUpdate);
+    scrollThreadAfterViewportSync(conv, shouldScrollForUpdate, hasNewPendingDeliveryMessage);
   });
   setTimeout(() => {
     syncThreadMessageViewport();
-    scrollThreadAfterViewportSync(conv, shouldScrollForUpdate);
+    scrollThreadAfterViewportSync(conv, shouldScrollForUpdate, hasNewPendingDeliveryMessage);
   });
   setTimeout(() => {
     syncThreadMessageViewport();
-    scrollThreadAfterViewportSync(conv, shouldScrollForUpdate);
+    scrollThreadAfterViewportSync(conv, shouldScrollForUpdate, hasNewPendingDeliveryMessage);
   }, 50);
 
   // Issue #347 — tracker, totals, picker. The data lives on conv.run
@@ -3827,8 +3836,7 @@ function renderRunStatePill(conv) {
   // #549 R3: conversationUiState now returns 'stopped' for manager-stopped runs.
   // conversationStateLabel returns 'Stopped' for that state; toUpperCase() => 'STOPPED'.
   pill.textContent = conversationStateLabel(conv).toUpperCase();
-  // Issue #1176 R38: distinct pill treatment while a redirect is in flight.
-  pill.className = `run-state-pill ${conversationUiState(conv)}${conv.pendingRedirect ? ' redirecting' : ''}`;
+  pill.className = `run-state-pill ${conversationUiState(conv)}`;
   // #521: Stop is offered only while the employee is actively working.
   const stopBtn = els['run-stop-btn'];
   if (stopBtn) {
@@ -4949,6 +4957,9 @@ function latestEmployeeSurfaceText(conv) {
 function appendMessageDom(role, text, conv, message) {
   const article = document.createElement('article');
   article.className = 'message ' + role;
+  // Issue #1249: tag pending (queued/redirecting) rows so the scroll-anchor
+  // logic can find the whole backlog, not just the newest one.
+  if (message && message.deliveryStatus) article.dataset.pending = 'true';
 
   const meta = document.createElement('div');
   meta.className = 'message-meta';
@@ -5041,7 +5052,26 @@ function syncThreadMessageViewport() {
   messages.style.maxHeight = '';
 }
 
-function scrollThreadAfterViewportSync(conv, shouldScrollForUpdate) {
+// Issue #1249: scrolling all the way to scrollHeight only ever reveals the
+// newest message. When multiple messages are queued behind the same active
+// turn, that clips earlier queued/redirecting rows off the top of the visible
+// area — exactly the "I don't see the whole queued backlog" gap reported on
+// the PR. Anchor on the first still-pending row instead: scrollTop = min(that
+// row's offset, the absolute max scroll). When the backlog fits in one
+// screen, that offset is already >= maxScrollTop, so this clamps to the same
+// bottom-of-thread position as before (no change from prior behavior). When
+// the backlog is taller than the container and can't fully fit, this favors
+// showing it FROM THE START (so the manager sees "yes, multiple things are
+// queued, here's the first one") instead of only ever showing the tail end.
+function pendingBacklogScrollTop(host) {
+  const firstPending = host.querySelector('.message[data-pending="true"]');
+  if (!firstPending) return host.scrollHeight;
+  const backlogTop = firstPending.getBoundingClientRect().top - host.getBoundingClientRect().top + host.scrollTop;
+  const maxScrollTop = host.scrollHeight - host.clientHeight;
+  return Math.max(0, Math.min(backlogTop, maxScrollTop));
+}
+
+function scrollThreadAfterViewportSync(conv, shouldScrollForUpdate, forceBottom) {
   const latest = activeConversation();
   if (!latest || latest.id !== conv.id) return;
   const host = els['messages'];
@@ -5050,8 +5080,11 @@ function scrollThreadAfterViewportSync(conv, shouldScrollForUpdate) {
     // #936: re-evaluate nearBottom at call time so deferred invocations respect
     // any scroll the user made between the render tick and this callback.
     const nearBottom = host.scrollHeight - host.scrollTop - host.clientHeight < 80;
-    if (nearBottom) {
-      host.scrollTop = host.scrollHeight;
+    // Issue #1249: a message the manager just sent while the agent was
+    // mid-turn (queued or redirecting) must be visible without the manager
+    // having to scroll, even if they had scrolled up to review history.
+    if (nearBottom || forceBottom) {
+      host.scrollTop = pendingBacklogScrollTop(host);
     }
     return;
   } else if (shouldScrollForUpdate) {
@@ -5095,13 +5128,6 @@ function syncSendButton() {
     els['send'].disabled = true;
     return;
   }
-  // Issue #1176 R38: block a second submission while a "Redirect now" is
-  // in flight (the active child hasn't closed yet), so the manager can't fire
-  // a duplicate correction on top of one already stopping the current turn.
-  if (conv && conv.pendingRedirect) {
-    els['send'].disabled = true;
-    return;
-  }
   // Send is enabled as soon as the host session exists. We deliberately
   // do NOT gate on status='running' — the manager should be able to
   // coach mid-run (which is exactly what /api/ai-hub/runs/:id/messages
@@ -7987,9 +8013,6 @@ function foldRunIntoConversation(conv, run) {
   if (run.managedByRunId !== undefined) conv.managedByRunId = run.managedByRunId;
   if (run.managedByPersonaKey !== undefined) conv.managedByPersonaKey = run.managedByPersonaKey;
   if (run.humanCoachingDisabled !== undefined) conv.humanCoachingDisabled = run.humanCoachingDisabled;
-  // Issue #1176: transient REDIRECTING flag, cleared server-side once the
-  // corrective continuation actually starts — just mirror it every poll.
-  conv.pendingRedirect = !!run.pendingRedirect;
   if (run.managedReviewStatus !== undefined) conv.managedReviewStatus = run.managedReviewStatus;
   if ((conv.createdAt === undefined || conv.createdAt === null) && run.createdAt !== undefined && run.createdAt !== null) {
     conv.createdAt = run.createdAt;
@@ -8545,7 +8568,8 @@ function renderConfiguredAgentsPanel() {
     const meta = document.createElement('div');
     meta.className = 'configured-agent-meta';
     const parts = [`CLI: ${agent.baseHostId}`];
-    if (agent.setupScript?.command) parts.push(`setup: ${agent.setupScript.command}`);
+    if (agent.command?.command) parts.push(`command: ${agent.command.command}`);
+    else if (agent.setupScript?.command) parts.push(`setup: ${agent.setupScript.command}`);
     meta.textContent = parts.join(' | ');
 
     const detail = document.createElement('div');
@@ -8712,13 +8736,6 @@ function configuredAgentField(labelText, control) {
   return label;
 }
 
-function configuredAgentTextarea(value) {
-  const textarea = document.createElement('textarea');
-  textarea.rows = 2;
-  textarea.value = (value || []).join('\n');
-  return textarea;
-}
-
 function buildConfiguredAgentForm(agent) {
   const form = document.createElement('form');
   form.className = 'configured-agent-form';
@@ -8745,33 +8762,44 @@ function buildConfiguredAgentForm(agent) {
   const enabled = document.createElement('input');
   enabled.type = 'checkbox';
   enabled.checked = agent ? agent.enabled !== false : true;
-  const scriptRunner = document.createElement('select');
-  for (const runner of ['powershell', 'bash']) {
-    const option = document.createElement('option');
-    option.value = runner;
-    option.textContent = runner;
-    scriptRunner.appendChild(option);
-  }
-  scriptRunner.value = agent?.setupScript?.runner || 'powershell';
-  const scriptCommand = document.createElement('input');
-  scriptCommand.value = agent?.setupScript?.command || '';
-  scriptCommand.placeholder = 'Path to setup script';
-  const scriptArgs = configuredAgentTextarea(agent?.setupScript?.args || []);
-  const timeout = document.createElement('input');
-  timeout.type = 'number';
-  timeout.min = '1000';
-  timeout.step = '1000';
-  timeout.value = String(agent?.setupScript?.timeoutMs || 10000);
+
+  // The setup surface is one command — literal text, including any env-var
+  // prefix and any CLI flag. No runner/args/timeout fields for the user to
+  // coordinate; runner is derived from this Hub host's own platform at save
+  // time ("implementation detail" allowance).
+  const command = document.createElement('textarea');
+  command.rows = 3;
+  command.className = 'configured-agent-command-field';
+  command.placeholder = 'codex --profile azure';
+  if (agent?.command?.command) {
+    command.value = agent.command.command;
+  }
+  // Legacy `setupScript`-shaped agents are NOT translated into a synthesized
+  // command string here. A dot-sourced line like `. <path> <args>` parses as
+  // a valid-looking command, but sourcing a script and launching the base
+  // agent with extra flags are structurally different operations — the
+  // launch decorator only ever keeps the trailing flags of `command` and
+  // discards the leading token, so a script path placed there is silently
+  // dropped as a bogus flag rather than ever sourced (PR #1209 review).
+  // Leaving Command blank and round-tripping the existing `setupScript`
+  // unchanged on save (below) keeps the agent working; typing a real single
+  // command here is a deliberate migration away from the script.
+  const legacySetupScript = !agent?.command && agent?.setupScript ? agent.setupScript : null;
+  const commandHint = document.createElement('p');
+  commandHint.className = 'configured-agent-command-hint';
+  commandHint.textContent = legacySetupScript
+    ? `This agent currently uses a legacy setup script (${legacySetupScript.command}). Leave Command blank to keep it working as-is, or enter the single command a terminal user would type to migrate away from the script.`
+    : 'Reference where a secret resolves at runtime (a file, a keychain, an already-set env var) — never paste a literal secret value here.';
 
   form.appendChild(configuredAgentField('ID', id));
   form.appendChild(configuredAgentField('Label', label));
   form.appendChild(configuredAgentField('Base tool', baseHost));
   form.appendChild(configuredAgentField('Description', description));
   form.appendChild(configuredAgentField('Enabled', enabled));
-  form.appendChild(configuredAgentField('Setup script runner', scriptRunner));
-  form.appendChild(configuredAgentField('Setup script path', scriptCommand));
-  form.appendChild(configuredAgentField('Setup script args', scriptArgs));
-  form.appendChild(configuredAgentField('Timeout ms', timeout));
+  const commandField = configuredAgentField('Command', command);
+  commandField.classList.add('configured-agent-command-wrap');
+  form.appendChild(commandField);
+  form.appendChild(commandHint);
 
   const actions = document.createElement('div');
   actions.className = 'configured-agent-form-actions';
@@ -8793,24 +8821,30 @@ function buildConfiguredAgentForm(agent) {
 
   form.addEventListener('submit', async (event) => {
     event.preventDefault();
-    const scriptCommandValue = scriptCommand.value.trim();
+    const commandValue = command.value.trim();
+    // Client-side warning before saving — a safety net, not a substitute
+    // for the routing skill never generating such a command.
+    if (commandValue && configuredAgentCommandLooksLikeSecret(commandValue)) {
+      const proceed = window.confirm(
+        'This command looks like it contains a literal secret value. Reference where the secret resolves at runtime instead. Save anyway?'
+      );
+      if (!proceed) return;
+    }
     const body = {
       id: id.value.trim(),
       label: label.value.trim(),
       baseHostId: baseHost.value,
       description: description.value.trim(),
       enabled: enabled.checked,
-      ...(scriptCommandValue ? {
-        setupScript: {
-          runner: scriptRunner.value,
-          command: scriptCommandValue,
-          args: scriptArgs.value.split(/\r?\n/).map((line) => line.trim()).filter(Boolean),
-          timeoutMs: Number(timeout.value) || 10000,
+      ...(commandValue ? {
+        command: {
+          runner: configuredAgentPlatformRunner(),
+          command: commandValue,
         },
-      } : {}),
+      } : legacySetupScript ? { setupScript: legacySetupScript } : {}),
     };
     try {
-      await requestJson(isNew
+      const saved = await requestJson(isNew
         ? '/api/ai-hub/configured-agents'
         : `/api/ai-hub/configured-agents/${encodeURIComponent(agent.id)}`, {
         method: isNew ? 'POST' : 'PUT',
@@ -8820,7 +8854,7 @@ function buildConfiguredAgentForm(agent) {
       state.configuredAgentEditingId = null;
       delete state.configuredAgentCheckResults[body.id || agent?.id];
       await refreshConfiguredAgents();
-      showStatus(`${body.label || body.id} saved.`);
+      showStatus(saved?.secretWarning || `${body.label || body.id} saved.`, !!saved?.secretWarning);
     } catch (err) {
       showStatus(err.message || 'Save failed.', true);
     }
@@ -8828,17 +8862,65 @@ function buildConfiguredAgentForm(agent) {
   return form;
 }
 
+// Runner is an internal execution detail derived from this Hub host's own
+// platform, never a field the setup surface asks the user to pick.
+function configuredAgentPlatformRunner() {
+  const platform = (typeof navigator !== 'undefined' && navigator.userAgent) || '';
+  return /Windows/i.test(platform) ? 'powershell' : 'bash';
+}
+
+// Mirrors the server-side check in configured-agent-command.ts's
+// commandContainsLiteralSecret so the user sees the warning before the
+// request round-trips, not only after.
+function configuredAgentCommandLooksLikeSecret(commandText) {
+  for (const token of String(commandText || '').split(/\s+/)) {
+    const eq = token.indexOf('=');
+    if (eq <= 0) continue;
+    const value = token.slice(eq + 1);
+    if (!value || value.startsWith('$') || value.startsWith('`') || value.startsWith('(')) continue;
+    if (/^[A-Za-z0-9+/_.=-]{20,}$/.test(value)) return true;
+  }
+  return false;
+}
+
 async function refreshConfiguredAgents() {
   const configuredAgents = await requestJson('/api/ai-hub/configured-agents');
-  if (state.bootstrap) state.bootstrap.configuredAgents = Array.isArray(configuredAgents) ? configuredAgents : [];
-  const ids = new Set((state.bootstrap?.configuredAgents || []).map((agent) => agent.id));
+  const next = Array.isArray(configuredAgents) ? configuredAgents : [];
+  if (state.bootstrap) state.bootstrap.configuredAgents = next;
+  const ids = new Set(next.map((agent) => agent.id));
   for (const id of Object.keys(state.configuredAgentCheckResults)) {
     if (!ids.has(id)) delete state.configuredAgentCheckResults[id];
   }
-  renderConfiguredAgentsPanel();
+  // A configured agent currently mid-edit in an open form in this window
+  // must not have that edit silently discarded by an incoming external
+  // change. Data is refreshed either way; only the panel/form re-render is
+  // deferred while an existing (non-`__new__`) agent is being edited.
+  const editingExisting = state.configuredAgentEditingId && state.configuredAgentEditingId !== '__new__';
+  if (!editingExisting) {
+    renderConfiguredAgentsPanel();
+  }
   renderActiveEmployeeSelect(activeConversation());
 }
 
+// An already-open Hub window must reflect a configured agent
+// registered/updated/deleted through the API by any actor (e.g. a FRAIM job
+// running in a separate terminal), without a reload or restart. Short
+// interval: this surface's own evidence showed the configured-agents API
+// responding sub-second locally, and the list is cheap to poll.
+let _bgConfiguredAgentPollHandle = null;
+async function bgRefreshConfiguredAgents() {
+  try {
+    await refreshConfiguredAgents();
+  } catch (_) { /* silent — background poll, not critical */ }
+}
+function startBgConfiguredAgentPoll() {
+  if (_bgConfiguredAgentPollHandle) return;
+  _bgConfiguredAgentPollHandle = window.setInterval(bgRefreshConfiguredAgents, 5000);
+}
+function stopBgConfiguredAgentPoll() {
+  if (_bgConfiguredAgentPollHandle) { window.clearInterval(_bgConfiguredAgentPollHandle); _bgConfiguredAgentPollHandle = null; }
+}
+
 // Also add delegate buttons to the team roster (R8-R9).
 // Called from renderTeamRoster (patched below) when managerTeam has members.
 function renderDelegateButton(personaKey) {
@@ -9365,6 +9447,10 @@ function wireEvents() {
       if (typeof tfRenderOverview === 'function' && typeof tf !== 'undefined' && tf.projectView === 'overview') tfRenderOverview();
     }, 0);
     startBgConvPoll();
+    // Keep the AI Agents panel/picker current without a reload when a
+    // configured agent is registered/updated/deleted by a separate process
+    // (e.g. a FRAIM job running in a terminal).
+    startBgConfiguredAgentPoll();
     // #769: post-Stripe checkout redirect — start hire-pending polling so the new
     // employee appears as soon as the webhook completes, without a manual reload.
     if (isHiredRedirect) beginHirePendingPoll();

package/public/ai-hub/styles.css

@@ -2001,11 +2001,6 @@ img.coach-employee-avatar { object-fit: cover; border-radius: 4px; }
   color: var(--danger);
   font-weight: 600;
 }
-/* REDIRECTING run-state pill, matching the .failed danger treatment. */
-.run-state-pill.redirecting {
-  background: color-mix(in srgb, var(--danger) 12%, transparent);
-  color: var(--danger);
-}
 /* Per-message queued/redirecting badge shown next to a manager bubble's meta row. */
 .message-delivery-badge {
   display: inline-flex;
@@ -5893,6 +5888,28 @@ img.eh-av { object-fit: cover; background: var(--surface); }
   resize: vertical;
 }
 
+.configured-agent-command-wrap {
+  grid-column: 1 / -1;
+}
+
+/* Specificity note: `.configured-agent-field textarea` already sets
+   `font: inherit` (the shorthand resets font-family too), at specificity
+   (0,1,1) — higher than a bare `.configured-agent-command-field` class
+   selector (0,1,0), which would silently lose. Scope through the parent
+   class so this rule wins. */
+.configured-agent-field .configured-agent-command-field {
+  font-family: var(--mono, monospace);
+  font-size: 12px;
+}
+
+.configured-agent-command-hint {
+  grid-column: 1 / -1;
+  margin: -4px 0 0;
+  color: var(--muted);
+  font-size: 11px;
+  line-height: 1.35;
+}
+
 .configured-agent-form-actions {
   grid-column: 1 / -1;
   justify-content: flex-end;