fraim-hub 2.0.287 → 2.0.288

package/dist/src/ai-hub/hosts.js

@@ -82,6 +82,22 @@ function parseSeekMentoringSignal(line) {
                 return sig;
         }
     }
+    // Copilot CLI shape (issue #1399): { type: 'tool.execution_start', data: {
+    // mcpServerName, mcpToolName, arguments } }. Live-verified via a direct
+    // spike against the installed CLI under --output-format json (see
+    // docs/rfcs/1399-copilot-host-chattiness-technical-design.md) — Copilot
+    // reports the MCP server and tool name as separate, unambiguous fields
+    // rather than a qualifier string, so this reads data.mcpToolName directly
+    // instead of going through canonicalToolName's __/./: splitting.
+    if (obj.type === 'tool.execution_start' && typeof obj.data === 'object' && obj.data !== null) {
+        const data = obj.data;
+        if (isFraimTool(data.mcpToolName, 'seekMentoring')) {
+            const args = normalizeToolArgs(data.arguments) || undefined;
+            const sig = extractSignalFromArgs(args);
+            if (sig)
+                return sig;
+        }
+    }
     // Claude Code shape: tool_use blocks live inside parsed.message.content.
     // The name is MCP-prefixed (e.g. 'mcp__fraim__seekMentoring').
     const candidates = [obj];
@@ -133,6 +149,16 @@ function parseFraimJobLoadSignal(line) {
                 return sig;
         }
     }
+    // Copilot CLI shape (issue #1399): see parseSeekMentoringSignal's Copilot
+    // block above for the field-shape rationale.
+    if (obj.type === 'tool.execution_start' && typeof obj.data === 'object' && obj.data !== null) {
+        const data = obj.data;
+        if (isFraimTool(data.mcpToolName, 'get_fraim_job')) {
+            const sig = readFraimJobFromArgs(data.arguments);
+            if (sig)
+                return sig;
+        }
+    }
     // Claude Code shape: tool_use blocks live inside message.content with
     // an MCP-prefixed name such as mcp__fraim__get_fraim_job.
     const candidates = [obj];
@@ -289,6 +315,14 @@ function parseAgentIdentitySignal(line) {
             return readAgentFromArgs(normalizeToolArgs(item.arguments) || undefined);
         }
     }
+    // Copilot CLI shape (issue #1399): see parseSeekMentoringSignal's Copilot
+    // block for the field-shape rationale.
+    if (obj.type === 'tool.execution_start' && typeof obj.data === 'object' && obj.data !== null) {
+        const data = obj.data;
+        if (isFraimTool(data.mcpToolName, 'fraim_connect')) {
+            return readAgentFromArgs(normalizeToolArgs(data.arguments) || undefined);
+        }
+    }
     // Claude Code shape.
     const candidates = [obj];
     if (typeof obj.message === 'object' && obj.message !== null) {
@@ -1434,7 +1468,12 @@ function buildStartPlan(hostId, message, sessionId) {
         const browser = sharedBrowserHostConfig('copilot');
         return {
             command: COPILOT_BINARY,
-            args: ['--yolo', ...browser.args],
+            // Issue #1399: request Copilot's structured JSONL output mode
+            // (one JSON object per line) instead of its default human-
+            // readable terminal rendering, so parseHostLine can classify
+            // tool calls/results/deltas separately from genuine reply text
+            // instead of pattern-matching rendered chrome characters.
+            args: ['--yolo', '--output-format', 'json', ...browser.args],
             stdin: transformHeadlessFraimMessage(message, 'start'),
             env: browser.env,
         };
@@ -1495,7 +1534,8 @@ function buildContinuePlan(hostId, sessionId, message) {
         const browser = sharedBrowserHostConfig('copilot');
         return {
             command: COPILOT_BINARY,
-            args: ['--yolo', '--resume', sessionId, ...browser.args],
+            // Issue #1399: see buildStartPlan's copilot branch for rationale.
+            args: ['--yolo', '--output-format', 'json', '--resume', sessionId, ...browser.args],
             stdin: transformHeadlessFraimMessage(message, 'continue'),
             env: browser.env,
         };
@@ -1562,9 +1602,10 @@ function buildDirectStartPlan(hostId, message, sessionId) {
     }
     if (hostId === 'copilot') {
         // Direct (A/B) mode for Copilot: headless, no FRAIM MCP wiring.
+        // Issue #1399: --output-format json for the same reason as buildStartPlan.
         return {
             command: COPILOT_BINARY,
-            args: ['--yolo'],
+            args: ['--yolo', '--output-format', 'json'],
             stdin: DIRECT_PREAMBLE + message,
         };
     }
@@ -1608,9 +1649,10 @@ function buildDirectContinuePlan(hostId, sessionId, message) {
     }
     if (hostId === 'copilot') {
         // Direct continue mode for Copilot: resume session, no FRAIM MCP wiring.
+        // Issue #1399: --output-format json for the same reason as buildStartPlan.
         return {
             command: COPILOT_BINARY,
-            args: ['--yolo', '--resume', sessionId],
+            args: ['--yolo', '--output-format', 'json', '--resume', sessionId],
             stdin: DIRECT_PREAMBLE + message,
         };
     }
@@ -1723,31 +1765,69 @@ function parseHostLine(hostId, line) {
     if (hostId === 'antigravity') {
         return withSignal({ raw: trimmed });
     }
-    // GitHub Copilot CLI output: JSON stream where each event carries a `type`
-    // field. Known event shapes (from the agentic CLI stream):
-    //   { "type": "session.started", "session_id": "..." }  — session id
-    //   { "type": "message", "role": "assistant", "content": "..." }  — reply text
-    //   { "type": "turn.completed", "usage": { ... } }  — token usage (same shape as Codex)
-    // For any JSON event not matching the above, signal scanning (seekMentoring,
-    // agent identity) still runs because withSignal is applied to every parsed result.
-    // Non-JSON lines from Copilot are treated as plain-text employee messages.
+    // GitHub Copilot CLI output (issue #1399): Hub invokes Copilot with
+    // --output-format json (see buildStartPlan's copilot branch), which
+    // reports every event as one JSON object per line. Two shapes from the
+    // original #531 integration are kept as defensive fallbacks — never
+    // confirmed against real traffic, but harmless to keep recognizing if a
+    // future CLI version or mode emits them:
+    //   { "type": "session.started", "session_id": "..." }
+    //   { "type": "message", "role": "assistant", "content": "..." }
+    // The real vocabulary below was captured via a live spike against the
+    // installed CLI binary (see "Spike Findings" in
+    // docs/rfcs/1399-copilot-host-chattiness-technical-design.md):
+    //   { "type": "assistant.message", "data": { "content": "...", "toolRequests": [...] } }
+    //     — the genuine reply. data.content is the message text; toolRequests
+    //     is metadata about an about-to-run tool call, not display text.
+    //   { "type": "result", "sessionId": "...", "exitCode": 0, "usage": {...} }
+    //     — terminal turn/session summary. This is the only place sessionId
+    //     was observed in a single-shot run (no early session-id event fired).
+    //   { "type": "tool.execution_start" | "tool.execution_complete", "data": {...} },
+    //   { "type": "model.tool_execution", "data": {...} }
+    //     — tool invocation and result. Diagnostic only, never a message.
+    //     seekMentoring/get_fraim_job/fraim_connect signal extraction (via
+    //     withSignal below) reads the call arguments off tool.execution_start's
+    //     data.arguments/data.mcpServerName/data.mcpToolName.
+    //   { "type": "assistant.message_delta" | "assistant.tool_call_delta", ...,
+    //     "ephemeral": true }
+    //     — streaming deltas. The CLI's own schema marks these ephemeral, an
+    //     explicit signal (not a heuristic) that they are safe to drop.
+    //   session.*/model.*/user.message/assistant.turn_*/assistant.idle
+    //     — setup, bookkeeping, and input-echo diagnostics.
+    // Any other/unrecognized type, and any line that fails JSON.parse entirely,
+    // fails CLOSED (raw only) — matching Codex's and Claude's existing
+    // fail-closed default. This replaces the prior fail-OPEN catch-all that
+    // promoted arbitrary unrecognized Copilot text (in practice, ~80% of a
+    // real run's lines — the CLI's own tool-call/result terminal rendering) to
+    // a manager-visible message.
     if (hostId === 'copilot') {
+        let parsed;
         try {
-            const parsed = JSON.parse(trimmed);
-            if (parsed.type === 'session.started' && typeof parsed.session_id === 'string' && parsed.session_id.length > 0) {
-                return withSignal({ sessionId: parsed.session_id, raw: trimmed });
-            }
-            if (parsed.type === 'message' && parsed.role === 'assistant' && typeof parsed.content === 'string') {
-                return withSignal({ message: parsed.content, raw: trimmed });
-            }
-            // All other JSON events: apply signal scanning and surface as raw.
-            return withSignal({ raw: trimmed });
+            parsed = JSON.parse(trimmed);
         }
         catch {
-            // Non-JSON line from Copilot: treat as a plain-text employee message,
-            // same pattern as Gemini CLI's non-JSON output.
-            return withSignal({ message: trimmed, raw: trimmed });
+            return withSignal({ raw: trimmed });
+        }
+        if (!parsed || typeof parsed !== 'object')
+            return withSignal({ raw: trimmed });
+        if (parsed.type === 'session.started' && typeof parsed.session_id === 'string' && parsed.session_id.length > 0) {
+            return withSignal({ sessionId: parsed.session_id, raw: trimmed });
+        }
+        if (parsed.type === 'message' && parsed.role === 'assistant' && typeof parsed.content === 'string') {
+            return withSignal({ message: parsed.content, raw: trimmed });
+        }
+        if (parsed.type === 'assistant.message') {
+            const content = typeof parsed.data?.content === 'string' ? parsed.data.content : undefined;
+            return content ? withSignal({ message: content, raw: trimmed }) : withSignal({ raw: trimmed });
         }
+        if (parsed.type === 'result') {
+            const sessionId = typeof parsed.sessionId === 'string' && parsed.sessionId.length > 0 ? parsed.sessionId : undefined;
+            return withSignal({ sessionId, raw: trimmed });
+        }
+        // tool.execution_start/complete, model.tool_execution, the *_delta
+        // events, and session/model/user/turn bookkeeping all fall here:
+        // diagnostic-only, but still signal-scanned by withSignal above.
+        return withSignal({ raw: trimmed });
     }
     try {
         const parsed = JSON.parse(trimmed);

package/dist/src/ai-hub/server.js

@@ -37,6 +37,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.findAvailablePortExcluding = exports.findAvailablePort = exports.AiHubServer = exports.HubConnectorStatusStore = exports.HostConfigStore = exports.DeploymentStore = void 0;
+exports.selfHealBrokenManagedAgents = selfHealBrokenManagedAgents;
 exports.configureFraimForHubAgent = configureFraimForHubAgent;
 exports.hubCommandVersion = hubCommandVersion;
 exports.buildOpenFileInvocation = buildOpenFileInvocation;
@@ -1699,6 +1700,35 @@ function hubAgentOption(hubId) {
     const frId = HUB_TO_FIRST_RUN_ID[hubId];
     return frId ? types_1.FIRST_RUN_AGENT_OPTIONS.find((o) => o.id === frId) : undefined;
 }
+const defaultSelfHealDeps = {
+    checkHealth: agent_cli_health_checks_1.checkAgentCliHealthByCommand,
+    install: (option, systemPath) => (0, managed_agent_install_1.installManagedAgent)(option, systemPath, { runProcess: hubRunProcess, commandVersion: hubCommandVersion }),
+    invalidateCache: hosts_1.invalidateEmployeeDetectionCache,
+};
+async function selfHealBrokenManagedAgents(deps = defaultSelfHealDeps) {
+    for (const hubId of ['claude', 'codex']) {
+        try {
+            const health = await deps.checkHealth(hubId);
+            if (!health || health.status !== 'error')
+                continue;
+            const details = health.details;
+            if (!details?.managedPath || details.managedVersion)
+                continue;
+            const option = hubAgentOption(hubId);
+            if (!option || !option.installPackage)
+                continue;
+            console.warn(`[ai-hub] self-heal: ${option.label}'s FRAIM-managed install is broken (${health.message}) — attempting automatic reinstall`);
+            const systemPath = (0, managed_agent_paths_1.stripManagedAgentBinDirsFromPath)(process.env.PATH);
+            await deps.install({ label: option.label, installPackage: option.installPackage, launchCommand: option.launchCommand }, systemPath);
+            deps.invalidateCache();
+            const verified = await deps.checkHealth(hubId);
+            console.warn(`[ai-hub] self-heal: ${option.label} reinstall ${verified?.status === 'error' ? 'did NOT fix it — manual reinstall needed' : 'succeeded'}`);
+        }
+        catch (error) {
+            console.warn(`[ai-hub] self-heal check failed for ${hubId}:`, error instanceof Error ? error.message : String(error));
+        }
+    }
+}
 /**
  * Issue #747: after the Hub installs an agent CLI, run the `add-ide` command for that agent so the
  * FRAIM MCP (plus slash commands / rules) is wired into its config and its first run works.
@@ -2699,6 +2729,17 @@ class AiHubServer {
         void (0, hosts_1.detectEmployeesAsync)({ force: true }).catch((error) => {
             console.warn('[ai-hub] agent availability priming failed:', error?.message || error);
         });
+        // Issue #1412: fire-and-forget self-heal of any broken FRAIM-managed CLI
+        // install (e.g. an interrupted Claude Code/Codex update left a
+        // non-executable launcher). Never blocks or fails startup. Skipped in
+        // NODE_ENV=test so the test suite's many short-lived Hub instances never
+        // trigger a real `npm install -g`, matching this file's existing
+        // NODE_ENV-gated test-safety pattern (see hubCommandVersion/hubRunProcess).
+        if (process.env.NODE_ENV !== 'test') {
+            void selfHealBrokenManagedAgents().catch((error) => {
+                console.warn('[ai-hub] self-heal pass failed:', error?.message || error);
+            });
+        }
         // Issue #578: rehydrate active scheduled deployments from disk. Test and preview
         // servers that inject a fake host but not a deployment store should not run the
         // user's real scheduled deployments from the default store.
@@ -6083,6 +6124,13 @@ class AiHubServer {
                         if (reviewApprovalSystemEventText)
                             current.events.push((0, hosts_1.createHubEvent)('system', reviewApprovalSystemEventText));
                         current.events.push((0, hosts_1.createHubEvent)('system', 'No resumable session - starting a fresh agent turn from conversation context.'));
+                        // Issue #1373 (Defect 2): nextJobRecommendations can only be stale
+                        // here — it is only ever set at retrospective (issue #848), and a
+                        // job that just received coaching has not reached retrospective
+                        // again yet. Clear it at send-time so a coached Done job stops
+                        // offering next-job recommendations immediately, not only once the
+                        // resumed session's next seekMentoring signal arrives.
+                        current.nextJobRecommendations = null;
                     });
                     const startedFresh = this.runRegistry.get(run.id);
                     if (startedFresh)
@@ -6139,6 +6187,9 @@ class AiHubServer {
                     current.messages.push((0, hosts_1.createHubMessage)('manager', prepared.display || message, deliveryStatus));
                     if (reviewApprovalSystemEventText)
                         current.events.push((0, hosts_1.createHubEvent)('system', reviewApprovalSystemEventText));
+                    // Issue #1373 (Defect 2): see the no-session branch above for why
+                    // this can only be stale at coaching-send time.
+                    current.nextJobRecommendations = null;
                 });
                 const started = this.runRegistry.get(run.id);
                 if (started)
@@ -6281,18 +6332,28 @@ class AiHubServer {
                     messages: persistedConversation ? persistedMessagesForRun(persistedConversation) : [],
                     events: resumeEvents,
                     eventLogRefs: persistedConversation?.eventLogRefs || [],
-                    // Only carry phase state forward when the prior run was interrupted mid-job
-                    // (status !== 'completed'). A completed conversation is a finished run;
-                    // resuming the session starts a fresh job, so the tracker must be blank.
-                    currentPhase: persistedConversation?.status !== 'completed' ? (persistedRun?.currentPhase || null) : null,
-                    phaseHistory: persistedConversation?.status !== 'completed' ? (persistedRun?.phaseHistory || []) : [],
-                    phaseVisits: persistedConversation?.status !== 'completed' ? (persistedRun?.phaseVisits || []) : [],
+                    // Issue #1373: a conversation is permanently scoped to one job for its
+                    // lifetime, including after that job's conversation is marked
+                    // 'completed' — a coaching turn sent to a Done job resumes the SAME
+                    // job's phase history, it does not start unrelated new work. Always
+                    // carry the persisted run projection forward regardless of the
+                    // conversation's prior status. If the resumed session genuinely has
+                    // nothing left to do, it simply reaches the same completed state
+                    // again on its own the next time seekMentoring reports its phase.
+                    currentPhase: persistedRun?.currentPhase || null,
+                    phaseHistory: persistedRun?.phaseHistory || [],
+                    phaseVisits: persistedRun?.phaseVisits || [],
                     totals: persistedRun?.totals || emptyTotals(),
                     lastStatusChangeAt: now,
-                    runDiscriminant: persistedConversation?.status !== 'completed' ? (persistedRun?.runDiscriminant || undefined) : undefined,
+                    runDiscriminant: persistedRun?.runDiscriminant || undefined,
                     // Issue #1357: consult custom persona owner before falling back to catalog.
                     personaKey: getCustomPersonaForJob(projectPath, jobId) ?? getHubPersonaForJob(jobId),
                     continuityDecision: conversationId ? 'same_continuity' : 'new_conversation',
+                    // Issue #1373 (Defect 2): nextJobRecommendations are only ever set at
+                    // retrospective/completion (issue #848); a resumed run has not reached
+                    // retrospective, so this is always null here. Explicit for readability
+                    // and to make the invariant visible next to the Defect 1 fix above.
+                    nextJobRecommendations: null,
                 };
                 host_session_state_1.hostSessionState.applySession(run, { configuredAgentId: configuredAgent.id, baseHostId: hostId }, sessionId, { sourceRunId: run.id, status: resolvedHostSession?.status || 'suspect' });
                 // Continue-turn message (FRAIM invocation for the job + instructions) plus

package/dist/src/cli/doctor/checks/agent-cli-health-checks.js

@@ -97,6 +97,27 @@ async function runAgentCliHealthCheck(cli) {
         : managedPath === ambientPath
             ? ambientVersion
             : probeVersion(managedPath);
+    // Issue #1412: a resolved file that fails to execute at all (e.g. an
+    // interrupted update left a non-executable fallback launcher) is a harder
+    // failure than drift — `getSystemCommandPath()` only proves the file
+    // exists, not that it can run. Without this check, a single broken install
+    // with nothing else on PATH to disagree with (ambientPath === managedPath,
+    // both versions null) falls straight through the mismatch check below and
+    // reads as "consistent". Check this before computing npm-global/drift
+    // details that don't matter once the CLI can't run at all.
+    const brokenPath = ambientPath && !ambientVersion
+        ? ambientPath
+        : managedPath && !managedVersion
+            ? managedPath
+            : null;
+    if (brokenPath) {
+        return {
+            status: 'error',
+            message: `${cli.label} is installed at ${brokenPath} but failed to run (\`${cli.command} --version\` produced no output). An interrupted or partial update may have left a non-functional launcher.`,
+            suggestion: `Reinstall ${cli.label}, then run "${cli.command} --version" again to confirm it's fixed.`,
+            details: { ambientPath, ambientVersion, managedPath, managedVersion },
+        };
+    }
     const npmGlobalBinDirs = (0, managed_agent_paths_1.resolveNpmGlobalBinDirs)();
     const npmGlobalPath = npmGlobalBinDirs.length > 0
         ? (0, command_resolution_1.getSystemCommandPath)(cli.command, npmGlobalBinDirs.join(path_1.default.delimiter))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fraim-hub",
-  "version": "2.0.287",
+  "version": "2.0.288",
   "description": "FRAIM Hub local companion package.",
   "author": "Sid Mathur <sid.mathur@gmail.com>",
   "homepage": "https://github.com/mathursrus/FRAIM#readme",
@@ -210,7 +210,7 @@
     "electron-updater": "^6.8.9",
     "express": "^5.2.1",
     "extract-zip": "^2.0.1",
-    "fraim": "2.0.287",
+    "fraim": "2.0.288",
     "mongodb": "^7.0.0",
     "node-cron": "4.2.1",
     "node-edge-tts": "^1.2.10",

package/public/ai-hub/script.js

@@ -15,11 +15,12 @@ const TREE_WIDTH_MIN = 176;
 const TREE_WIDTH_MAX = 380;
 const TREE_WIDTH_DEFAULT = 216;
 const PAGE_SCOPED_JOBS = new Set(['organization-onboarding', 'manager-agreements', 'project-onboarding', 'organizational-learning-synthesis', 'create-hub-configured-agent']);
-// Jobs scoped to the Company/Manager area — never shown in the Projects workspace rail.
-// These are the truly area-only jobs. Issue #702: persona jobs (e.g. Ashley's) are NOT
-// listed here — a persona can run a job from a project OR from the Manager tab, and a
-// run's placement is decided per-invocation by conv.invokedArea, not by job id.
-const AREA_SCOPED_JOBS = new Set(['organization-onboarding', 'organizational-learning-synthesis', 'manager-agreements', 'create-hub-configured-agent']);
+// Issue #1408: there is no fixed per-job-id area home. Every job's placement, including
+// organization-onboarding/organizational-learning-synthesis/manager-agreements/
+// create-hub-configured-agent, is decided per-invocation by conv.invokedArea/convScope,
+// exactly like persona jobs (e.g. Ashley's, #702) always were. A conversation renders
+// wherever it was actually started; forcing these job ids to a fixed home regardless of
+// invokedArea left runs started from the "wrong" tab unreachable from either rail.
 // Issue #702: personas whose home is the MANAGER tab because their work is inherently
 // cross-project and manager-facing (not project work). Per the spec (R1b), Ashley — the
 // AI Executive Assistant — is Manager-scoped. Every other hired persona works inside
@@ -1426,10 +1427,11 @@ async function hydrateConversationsFromServer() {
   const enc = encodeURIComponent(projectPath);
   const pickActive = (list, serverActiveId) => {
     const activeCandidates = [state.activeId, serverActiveId].filter(Boolean);
-    // Area-scoped jobs must not become the Projects workspace active conversation —
-    // they are shown in their own Company/Manager panels via tfActiveOrgConv/tfActiveMgrConv.
-    const projectConv = (id) => list.find((c) => c.id === id && !AREA_SCOPED_JOBS.has(c.jobId));
-    const firstProjectConv = list.find((c) => !AREA_SCOPED_JOBS.has(c.jobId));
+    // Issue #1408: a manager/company-scoped conversation must not become the Projects
+    // workspace active conversation — it's shown in its own Company/Manager panel via
+    // tfActiveOrgConv/tfActiveMgrConv instead. Decided by scope, not by job id.
+    const projectConv = (id) => list.find((c) => c.id === id && convScope(c) === 'project');
+    const firstProjectConv = list.find((c) => convScope(c) === 'project');
     const bestActive = activeCandidates.map(projectConv).find(Boolean) || firstProjectConv || null;
     state.activeId = bestActive ? bestActive.id : null;
   };
@@ -2341,8 +2343,8 @@ function renderRail() {
   const list = allProjectConversations.filter((conv) =>
     (!state.selectedPersonaKey || conv.personaKey === state.selectedPersonaKey) &&
     !isManagedDelegationChild(conv) &&
-    !AREA_SCOPED_JOBS.has(conv.jobId) &&
-    // #702/#708: manager/company-scoped runs surface on those tabs, not in a project.
+    // #702/#708/#1408: manager/company-scoped runs surface on those tabs, not in a
+    // project, decided by scope alone — no job id is ever excluded from Projects.
     convScope(conv) === 'project'
   );
 
@@ -9045,21 +9047,24 @@ function buildConfiguredAgentForm(agent, opts) {
   if (agent?.command?.command) {
     command.value = agent.command.command;
   }
-  // Legacy `setupScript`-shaped agents are NOT translated into a synthesized
-  // command string here. A dot-sourced line like `. <path> <args>` parses as
-  // a valid-looking command, but sourcing a script and launching the base
+  // Setup-script profiles display a launch preview in the same Command field
+  // but still round-trip as setupScript unless the user edits the preview.
+  // Sourcing a script and launching the base
   // agent with extra flags are structurally different operations — the
   // launch decorator only ever keeps the trailing flags of `command` and
   // discards the leading token, so a script path placed there is silently
   // dropped as a bogus flag rather than ever sourced (PR #1209 review).
-  // Leaving Command blank and round-tripping the existing `setupScript`
-  // unchanged on save (below) keeps the agent working; typing a real single
-  // command here is a deliberate migration away from the script.
   const legacySetupScript = !agent?.command && agent?.setupScript ? agent.setupScript : null;
+  const legacyLaunchPreview = legacySetupScript
+    ? configuredAgentSetupLaunchPreview(legacySetupScript, agent.baseHostId)
+    : '';
+  if (legacyLaunchPreview) {
+    command.value = legacyLaunchPreview;
+  }
   const commandHint = document.createElement('p');
   commandHint.className = 'configured-agent-command-hint';
   commandHint.textContent = legacySetupScript
-    ? `This agent currently uses a legacy setup script (${legacySetupScript.command}). Leave Command blank to keep it working as-is, or enter the single command a terminal user would type to migrate away from the script.`
+    ? 'This preview shows the setup script Hub runs before the agent. Internal Hub flags are hidden; edit it only to replace this setup-script profile with a plain command.'
     : 'Reference where a secret resolves at runtime (a file, a keychain, an already-set env var) — never paste a literal secret value here.';
 
   form.appendChild(configuredAgentField('ID', id));
@@ -9102,13 +9107,14 @@ function buildConfiguredAgentForm(agent, opts) {
       );
       if (!proceed) return;
     }
+    const shouldPreserveLegacySetup = !!legacySetupScript && (!commandValue || commandValue === legacyLaunchPreview);
     const body = {
       id: id.value.trim(),
       label: label.value.trim(),
       baseHostId: baseHost.value,
       description: description.value.trim(),
       enabled: enabled.checked,
-      ...(commandValue ? {
+      ...(!shouldPreserveLegacySetup && commandValue ? {
         command: {
           runner: configuredAgentPlatformRunner(),
           command: commandValue,
@@ -9142,6 +9148,19 @@ function configuredAgentPlatformRunner() {
   return /Windows/i.test(platform) ? 'powershell' : 'bash';
 }
 
+function configuredAgentSetupLaunchPreview(setupScript, baseHostId) {
+  if (!setupScript?.command || !baseHostId) return '';
+  const args = Array.isArray(setupScript.args) ? setupScript.args : [];
+  const quote = (value) => {
+    const text = String(value || '');
+    return `"${text.replace(/"/g, '\\"')}"`;
+  };
+  const setupInvocation = [quote(setupScript.command), ...args.map(quote)].join(' ');
+  return setupScript.runner === 'powershell'
+    ? `. ${setupInvocation}; ${baseHostId}`
+    : `source ${setupInvocation}; ${baseHostId}`;
+}
+
 // Mirrors the server-side check in configured-agent-command.ts's
 // commandContainsLiteralSecret so the user sees the warning before the
 // request round-trips, not only after.
@@ -10976,10 +10995,10 @@ function tfShowArea(area) {
   tf.area = area;
 
   if (area === 'projects') {
-    // Restore the saved Projects conv; discard it if it turned out to be area-scoped.
+    // Restore the saved Projects conv; discard it if it turned out to be manager/company-scoped.
     const savedId = state.areaActiveId.projects || null;
     const savedConv = savedId && Object.values(state.conversations || {}).flat().find((c) => c.id === savedId);
-    state.activeId = (savedConv && !AREA_SCOPED_JOBS.has(savedConv.jobId)) ? savedId : null;
+    state.activeId = (savedConv && convScope(savedConv) === 'project') ? savedId : null;
     // Return the shared .page to the Projects workspace and reset Company/Manager hosts.
     tfEnsurePageInArea('projects');
     for (const el of document.querySelectorAll('.area-conv-host')) el.hidden = true;
@@ -13007,11 +13026,16 @@ function tfActiveOrgConv() {
 }
 
 // #594 R2: return the manager-scoped conversation to show in Manager area.
-// #702: manager-tab runs are those invoked from the manager area (any persona job),
-// plus the area-only manager-agreements job (older runs predate invokedArea). An active
-// manager-invoked run surfaces in the Manager conversation host (Coach panel included).
+// #702/#1408: manager-tab runs are those invoked from the manager area (any persona job,
+// including manager-agreements), decided by scope alone. A pre-scope-tracking legacy
+// manager-agreements record with no scope field falls back to convScope()'s 'project'
+// default and won't be picked here; it's still reachable, just not as this tab's
+// single "most active" spotlight. An active manager-invoked run surfaces in the
+// Manager conversation host (Coach panel included).
 function tfActiveMgrConv() {
-  const convs = Object.values(state.conversations || {}).flat().filter((c) => c && (convScope(c) === 'manager' || c.jobId === 'manager-agreements'));
+  // Issue #1408: no job-id exception — a manager-agreements run only counts here if it
+  // was genuinely invoked from the Manager tab (convScope(c) === 'manager').
+  const convs = Object.values(state.conversations || {}).flat().filter((c) => c && convScope(c) === 'manager');
   return (
     tfMostRecentMatch(convs, (c) => c.status === 'running') ||
     tfMostRecentMatch(convs, (c) => c.status === 'waiting') ||