@cmgmyr/hive 1.10.1 → 1.11.1

package/README.md

@@ -70,6 +70,7 @@ hive is a personal daily-driver tool, released low-key. It is single-user by des
 | [Dashboard](docs/dashboard.md) | The generated dashboard: enabling it, where it lives, what it shows |
 | [Install details](docs/install.md) | The interpreter pin, iTerm settings, the status line, MCP scope, codex workers, updating, uninstalling |
 | [Troubleshooting](docs/troubleshooting.md) | Common errors and their fixes |
+| [Security](docs/security.md) | What hive runs, writes and fetches on your machine, with the code to check |
 | [Tools](docs/tools.md) | The MCP tools: what each does and when to use it |
 | [tmux settings](docs/tmux.md) | Attach modes, pane options, and what to put in `~/.tmux.conf` |
 | [Development](docs/development.md) | Building and testing hive itself |

package/claude-plugin/crew/model.mjs

@@ -121,6 +121,8 @@ export function buildCrewView(snapshot, previousView, nowMs) {
   const { wakes } = snapshot;
   const workers = snapshot.lanes.filter((l) => l.worker).length;
   const footer = [{ text: nextLine(wakes.next, nowMs) }];
+  const questionsPending = snapshot.questions?.pending ?? 0;
+  if (questionsPending > 0) footer.push({ text: `questions pending: ${questionsPending}` });
   if (wakes.watching.length > 0) footer.push({ text: `watching: ${wakes.watching.map(watchText).join(", ")}` });
   else if (workers > 0 && !covered(snapshot)) footer.push({ text: "unwatched: no standing watch on running workers", amber: true });
   return {

package/dist/build-info.json

@@ -1 +1 @@
-{"version":"1.10.1","sha":"47de74a","dirty":false,"build_id":"8d90ac219e940dac865c9770e28e1686dbed96d3d7ec219884aa4b6aa328dab5"}
+{"version":"1.11.1","sha":"59218ca","dirty":false,"build_id":"caa5cf415058468f8a1cd7152eac5af2255c5aed0e53f33e637bd75e3200fda0"}

package/dist/cli.js

@@ -17,6 +17,7 @@ import { dataDir, db, migrate, storeSchemaAhead } from "./db.js";
 import { cacheIsStale, queryUpdate, readCachedUpdate, refreshUpdate, shouldAutoRefresh, updateLine } from "./updateCheck.js";
 import { checkoutUpgradeSteps, detectInstallShape, globalUpgradeSteps } from "./upgrade.js";
 import { isLowHeadroom, orphanLoginShellDetails, ptyHeadroom } from "./ptys.js";
+import { staleHiveServers } from "./staleServers.js";
 import { addProject, agentProjectPin, assertQueenCrossProjectWrite, captureQueenWriteIdentity, currentActor, effectiveProjectId, findProjectForCwd, findProjectForDir, getProjectByPath, gitPrimaryRoot, getProject, listProjects, QUEEN_PROFILE, queenHomeDir, registeredAncestor, takeRegistrationNotice, } from "./context.js";
 import { confirmQueenWrite, listQueenAudit } from "./queenAudit.js";
 import { formatRowCounts, projectRowCounts, removeProject } from "./projectRemove.js";
@@ -37,8 +38,10 @@ import { collectCrew, crewStoreProblem } from "./crew.js";
 import { describeVisibility, formatLocal, processCounts } from "./dashboard.js";
 import { runningCommandRow, runningCommandRows, snapshotProcesses, stopAllProcesses, stopLine, stopProcess, STOP_REASONS, } from "./processes.js";
 import { activeProfile, agentVarKeys, BUILT_IN_PROJECT_YML, configHash, loadProjectYml, mergedProjectVars, NO_PROFILE, PROJECT_YML_KEYS, resolveCommandDir, resolveFirstMessage, } from "./projectYml.js";
-import { writeProjectPosture } from "./brief.js";
-import { carriesNameFlag, harnessFor, hasTranscriptSignal, paneClassifierFor, transcriptDirFor } from "./harnesses.js";
+import { appendClaudeLeadArgs, crewPluginDir, isTrusted, leadIdentityEnv, renderLeadPosture } from "./leadLaunch.js";
+import { handoffStatusSegment } from "./leadHandoff.js";
+import { cmdLeadHandoff, runHandoffGrace, runHandoffStart } from "./leadHandoffCli.js";
+import { harnessFor, hasTranscriptSignal, paneClassifierFor, transcriptDirFor } from "./harnesses.js";
 import { codexHomeDir, codexInstructionsPhrase, ensureCodexHome, reapCodexHome } from "./codexHome.js";
 import { FIRST_MESSAGE_SHA_ENV, firstMessageDigest } from "./firstMessage.js";
 import { ageSecondsSince, deriveProvenance, describeForHuman, describeLastLogEvent, humanizeAge, lastLogEvent, lastPermissionMode, reportsAgentStateLog, } from "./stateProvenance.js";
@@ -46,6 +49,7 @@ import { awaitingFirstPromptSql } from "./firstPrompt.js";
 import { checkoutRoot, createProfile, forkProfile, PROFILE_FILES, ProfileError, profileExists, profileFileNames, profileNames, profileStatus, readProfileFile, referencedPads, referencedPaths, renderProfileFile, resolveProfileFile, REWRITE_THRESHOLD, templateVars, userProfilesDir, } from "./profiles.js";
 import { getTodoDetail, listTodoSummaries, OPEN_BLOCKERS_SQL, TODO_STATUSES, } from "./tools/todos.js";
 import { createPad, getActivePadByName, listActivePads, overwritePadContent, } from "./tools/pads.js";
+import { answerQuestion, listQuestions } from "./questions.js";
 function usage() {
     console.log(`hive — run a crew of Claude Code and Codex workers from one lead session
 
@@ -74,7 +78,7 @@ Usage:
                              snapshot; read-only, writes nothing
   hive portfolio [--json]    one row per registered project: lane, lead, workers,
                              todos, needs-human count, wakes; read-only
-  hive queen-audit           confirmed queen writes, newest first; 30-day history
+  hive queen-audit           queen writes and refused calls, newest first; 30-day history
     [--project-id <id>]      filter the target project (queen only across projects)
     [--limit <n>] [--json]   default 20, maximum 100; JSON prints one object
   hive next [--print]        attach to the lead of the project that needs you most
@@ -99,6 +103,10 @@ Usage:
   hive todos [--all] [--status <s>] [--tag <t>]
                              list this project's todos; open work by default
   hive todo <id>             print one todo in full, comments included
+  hive questions [--json]   list pending and defaulted questions
+  hive answer <id> <answer> [--notes <text>]
+                             record an answer to a pending question
+                             use -- before an answer that starts with a dash
   hive backups               list automatic store snapshots
   hive restore <name> [--yes] [--force]  overwrite the live store from a snapshot
   hive project rm <id|path> [--yes]
@@ -109,6 +117,7 @@ Usage:
   hive kickoff [--explain]   SessionStart hook output; silent unless this is a lead checkout
   hive profile [list|path|fork|create|read]  standing instructions shared across projects
   hive statusline            one-line store summary; silent outside hive projects
+  hive lead-handoff          a lead confirms its persisted handoff pad (run from a handoff request)
 
 hive lead reads hive.yml from the project root when present; hive init
 writes this starter file (uncomment what you need):
@@ -204,12 +213,6 @@ async function ensureTrusted(projectId, name, command, dir, env) {
     db.prepare("INSERT OR IGNORE INTO command_trust (project_id, name, config_hash) VALUES (?, ?, ?)").run(projectId, name, hash);
     return true;
 }
-function isTrusted(projectId, name, command, dir, env) {
-    const hash = configHash(name, command, dir, env);
-    return !!db
-        .prepare("SELECT 1 FROM command_trust WHERE project_id = ? AND name = ? AND config_hash = ?")
-        .get(projectId, name, hash);
-}
 function startYmlCommand(project, name, proc, config) {
     if (isReservedAgentName(name)) {
         return `skipped: "lead" is reserved for this project's lead session and cannot be used as a process name`;
@@ -426,18 +429,9 @@ async function cmdLead(argv) {
         // Posture is rendered once, then delivered through whichever channel this harness has: a
         // claude lead gets it as --append-system-prompt-file below; a codex lead gets the identical
         // text as config.toml's developer_instructions, built after ensureLeadRow (it needs leadActorId).
-        const profile = activeProfile(config);
-        let renderedPosture = null;
-        let postureSource;
-        if (profile) {
-            const posture = resolveProfileFile(profile, "posture.md");
-            if (!posture) {
-                console.log(`! profile "${profile}" has no posture.md on this machine; starting without it.`);
-            }
-            else {
-                renderedPosture = renderProfileFile(profile, "posture.md", mergedProjectVars(config)) ?? "";
-                postureSource = posture.source;
-            }
+        const { profile, rendered: renderedPosture, source: postureSource } = renderLeadPosture(config);
+        if (profile && renderedPosture === null) {
+            console.log(`! profile "${profile}" has no posture.md on this machine; starting without it.`);
         }
         if (leadHarness.needsHome) {
             // Wired below, once leadActorId is known - a codex lead's hooks/posture/triage all live in
@@ -451,21 +445,19 @@ async function cmdLead(argv) {
             }
         }
         else {
-            if (!carriesNameFlag(leadCommand.trim().split(/\s+/))) {
-                leadCommand += ` --name ${shellQuote(project.name)}`;
-            }
-            leadCommand += ` ${leadHarness.briefDelivery.settingsArgs(hooksPath).map(shellQuote).join(" ")}`;
-            if (config?.lead_sidebar === true && leadHarness.name === "claude") {
-                leadCommand += ` ${["--plugin-dir", crewPluginDir()].map(shellQuote).join(" ")}`;
-            }
+            ({ command: leadCommand, promptSuffix } = appendClaudeLeadArgs({
+                command: leadCommand,
+                harness: leadHarness,
+                projectId: project.id,
+                projectName: project.name,
+                hooksPath,
+                sidebarPluginDir: config?.lead_sidebar === true && leadHarness.name === "claude" ? crewPluginDir() : null,
+                posture: renderedPosture,
+                firstMessage,
+            }));
             if (renderedPosture !== null) {
-                const posturePath = writeProjectPosture(project.id, renderedPosture);
-                leadCommand += ` ${leadHarness.briefDelivery.systemPromptArgs(posturePath).map(shellQuote).join(" ")}`;
                 console.log(`- profile: ${profile} (${postureSource} posture; see it with: hive posture)`);
             }
-            if (leadHarness.initialPromptArgs && firstMessage !== "") {
-                promptSuffix = ` ${leadHarness.initialPromptArgs(firstMessage).map(shellQuote).join(" ")}`;
-            }
         }
         const windowName = project.name;
         const { agentId: leadAgentId, actorId: leadActorId, previousTarget, previousSocket, previousPanePid, previousCommand, previousCodexHome, casExpected, casSocket, casPid, } = ensureLeadRow(project, leadCommand);
@@ -475,14 +467,7 @@ async function cmdLead(argv) {
         // actually starts under it) and correct regardless of whether this invocation ends up creating
         // a pane or adopting one. Which home ends up orphaned - this one, or the previous invocation's -
         // is decided after createdPane is known, below.
-        const leadEnv = {
-            HIVE_AGENT_ID: leadActorId,
-            HIVE_AGENT_NAME: LEAD_NAME,
-            HIVE_LEAD: "1",
-            HIVE_DATA_DIR: dataDir,
-            HIVE_PROJECT_LOCK: "",
-            HIVE_PROJECT_PATH: "",
-        };
+        const leadEnv = leadIdentityEnv(leadActorId);
         let newCodexHomeKey;
         if (leadHarness.needsHome) {
             newCodexHomeKey = randomUUID();
@@ -1288,9 +1273,6 @@ function cmdProfile(argv) {
         throw e;
     }
 }
-function crewPluginDir() {
-    return join(checkoutRoot, "claude-plugin", "crew");
-}
 const DASHBOARD_OPENED_KV_KEY = "hive:dashboard_opened";
 const DASHBOARD_OPENED_TTL_SECONDS = 8 * 60 * 60;
 function maybeOpenDashboard(project, dashboardEnabled) {
@@ -1436,6 +1418,8 @@ function resolveNamedProcess(argv, verb) {
 }
 const LEAD_PANE_EXITED_HOOK = "pane-exited";
 const LEAD_PANE_EXITED_VERB = "lead-pane-exited";
+const LEAD_HANDOFF_GRACE_VERB = "lead-handoff-grace";
+const LEAD_HANDOFF_START_VERB = "lead-handoff-start";
 // tmux runs a hook with the SERVER's environment and no login shell, so a bare `hive` resolves to
 // nothing (the iTerm rule in .claude/rules/tmux-and-panes.md) and HIVE_DATA_DIR is not there at all
 // - without it the backstop would open the DEFAULT store and find no project. Absolute interpreter,
@@ -2364,6 +2348,18 @@ function cmdDoctor(argv) {
         }
         return `${dataDir} (schema v${n})`;
     });
+    check("stale hive servers", () => {
+        const { applied_at: appliedAt } = db.prepare("SELECT MAX(applied_at) AS applied_at FROM migrations").get();
+        const result = staleHiveServers(appliedAt, dataDir);
+        if ("skipped" in result) {
+            info("stale hive servers", `check skipped: ${result.skipped}`);
+            return "check skipped";
+        }
+        for (const server of result.servers) {
+            warn("stale hive server", `pid ${server.pid} started ${server.startedAt} (parent pid ${server.ppid}: ${server.parentCommand ?? "unknown"})`, `command: ${server.command}`, "restart that session to load the current build");
+        }
+        return `${result.servers.length} stale server${result.servers.length === 1 ? "" : "s"}`;
+    });
     check("hooks file", () => ensureHooksFile());
     const here = findProjectForCwd();
     reportDispatcher();
@@ -2810,11 +2806,13 @@ function cmdStatusline() {
         parts.push("store ahead (update hive)");
     let turns = null;
     let budget = null;
+    let handoff = null;
     try {
         const actorId = process.env.HIVE_AGENT_ID;
         if (actorId) {
-            const lead = db.prepare("SELECT 1 AS lead FROM agents WHERE project_id = ? AND actor_id = ? AND kind = 'lead' AND status = 'running'").get(project.id, actorId);
+            const lead = db.prepare("SELECT id AS lead FROM agents WHERE project_id = ? AND actor_id = ? AND kind = 'lead' AND status = 'running'").get(project.id, actorId);
             if (lead) {
+                handoff = handoffStatusSegment(lead.lead);
                 let inputPath = "";
                 if (!process.stdin.isTTY) {
                     try {
@@ -2834,6 +2832,8 @@ function cmdStatusline() {
         const color = budget === null ? "" : turns >= budget.stop ? "\x1b[31m" : turns >= budget.warn ? "\x1b[33m" : "";
         parts.push(`${color}turns ${turns}${color ? "\x1b[0m" : ""}`);
     }
+    if (handoff !== null)
+        parts.push(handoff);
     console.log(`\x1b[33m⬡\x1b[0m \x1b[2mhive:\x1b[0m ${parts.join(" \x1b[2m·\x1b[0m ")}`);
 }
 function padSlug(name) {
@@ -2857,19 +2857,20 @@ function canonicalPath(path) {
 function nextCandidates() {
     const queenRoot = canonicalPath(join(storeDir(), "queen"));
     const byCount = (a, b) => b - a;
+    const waitsOnYou = (p) => p.needs_human + p.questions_pending;
     return collectPortfolio()
-        .projects.filter((p) => (p.lane === "waiting_on_you" || p.lane === "stuck" || (p.lane === "moving" && p.needs_human > 0)) &&
+        .projects.filter((p) => (p.lane === "waiting_on_you" || p.lane === "stuck" || (p.lane === "moving" && waitsOnYou(p) > 0)) &&
         canonicalPath(p.root) !== queenRoot)
         .sort((a, b) => {
-        const tier = (p) => (p.lane === "waiting_on_you" ? 0 : p.needs_human > 0 ? 1 : 2);
+        const tier = (p) => (p.lane === "waiting_on_you" ? 0 : waitsOnYou(p) > 0 ? 1 : 2);
         if (tier(a) !== tier(b))
             return tier(a) - tier(b);
         if (a.lane === "waiting_on_you") {
-            return (byCount(a.needs_human, b.needs_human) ||
+            return (byCount(waitsOnYou(a), waitsOnYou(b)) ||
                 a.last_activity_at.localeCompare(b.last_activity_at) ||
                 a.id - b.id);
         }
-        return (byCount(a.needs_human, b.needs_human) ||
+        return (byCount(waitsOnYou(a), waitsOnYou(b)) ||
             byCount(a.todos.blocked_in_progress, b.todos.blocked_in_progress) ||
             byCount(a.wakes.overdue, b.wakes.overdue) ||
             byCount(a.workers.needs_input, b.workers.needs_input) ||
@@ -2948,7 +2949,7 @@ function cmdQueenAudit(argv) {
         return;
     }
     if (report.entries.length === 0) {
-        console.log("No queen actions recorded.");
+        console.log("No queen audit entries recorded.");
         return;
     }
     for (const entry of report.entries) {
@@ -3006,7 +3007,7 @@ function cmdPortfolio(argv) {
             `  lead ${leadText(p)}; workers ${w.working} working, ${w.idle} idle, ${w.needs_input} needs input, ` +
             `${w.other} other, ${w.unreachable} unreachable, ${w.unconfirmed} unconfirmed\n` +
             `  todos ${t.open} open, ${t.in_progress} in progress, ${t.blocked} blocked, ${t.high} high; ` +
-            `needs human ${p.needs_human}; wakes ${p.wakes.pending} pending, ${p.wakes.overdue} overdue\n` +
+            `needs human ${p.needs_human}; questions ${p.questions_pending} pending; wakes ${p.wakes.pending} pending, ${p.wakes.overdue} overdue\n` +
             `  last activity ${p.last_activity_at} UTC`);
     }
     const l = report.totals.lanes;
@@ -3314,6 +3315,70 @@ function cmdTodo(argv) {
         }
     }
 }
+function cmdQuestions(argv) {
+    const parsed = parseArgs(argv, { flags: ["--json"] });
+    if (parsed.positional.length > 0)
+        parsed.unknown.push(parsed.positional[0]);
+    rejectUnknownFlags("questions", parsed, "--json");
+    const project = resolveProjectForRead("questions");
+    const questions = listQuestions(project.id);
+    if (parsed.flags.has("--json")) {
+        console.log(JSON.stringify({ questions }));
+        return;
+    }
+    if (questions.length === 0) {
+        console.log("No pending or defaulted questions.");
+        return;
+    }
+    for (const q of questions) {
+        console.log(`#${q.id} [${q.state}] ${q.header}`);
+        console.log(`Question: ${q.question}`);
+        console.log(`Default: ${q.default_answer}`);
+        if (q.options) {
+            console.log("Options:");
+            for (const option of q.options) {
+                console.log(`  ${option.label}${option.recommended ? " (Recommended)" : ""}: ${option.description}`);
+            }
+        }
+    }
+}
+function cmdAnswer(argv) {
+    const endOfFlags = argv.indexOf("--");
+    const optionArgs = endOfFlags === -1 ? argv : argv.slice(0, endOfFlags);
+    if (optionArgs.filter((arg) => arg === "--notes").length > 1) {
+        console.error("hive answer: --notes may be passed only once.");
+        process.exit(1);
+    }
+    const parsed = parseArgs(argv, { valued: ["--notes"] });
+    rejectUnknownFlags("answer", parsed, "--notes <text>");
+    requireFlagValues("answer", parsed);
+    if (parsed.values.has("--notes") && parsed.values.get("--notes") === undefined) {
+        console.error("hive answer: --notes requires a value.");
+        process.exit(1);
+    }
+    if (parsed.positional.length !== 2) {
+        console.error("hive answer: usage: hive answer <positive id> <one answer argument> [--notes <text>]");
+        process.exit(1);
+    }
+    const [rawId, answer] = parsed.positional;
+    if (!/^\d+$/.test(rawId) || !Number.isSafeInteger(Number(rawId)) || Number(rawId) <= 0) {
+        console.error(`hive answer: question id must be a positive safe integer, got ${JSON.stringify(rawId)}.`);
+        process.exit(1);
+    }
+    const project = resolveProjectForRead("answer");
+    const id = Number(rawId);
+    const receipt = answerQuestion(project.id, currentActor(), id, answer, parsed.values.get("--notes"));
+    console.log(`Question #${receipt.question_id} answered.`);
+    if (receipt.wake_id === null) {
+        console.log(`No wake queued: ${receipt.wake_skipped ?? "the asking session could not be reached"}.`);
+    }
+    else if (receipt.wake_rerouted_to) {
+        console.log(`Wake #${receipt.wake_id} queued for ${receipt.wake_rerouted_to}; the asker is not running.`);
+    }
+    else {
+        console.log(`Wake #${receipt.wake_id} queued for the asking session.`);
+    }
+}
 function cmdPads() {
     const project = resolveProjectForRead("pads");
     const pads = listActivePads(project.id);
@@ -3435,7 +3500,10 @@ if (command === "--version" || command === "-v") {
 const COMMANDS = [
     "lead", "queen", "queen-audit", "init", "attach", "start", "stop", "show", "hide", "status", "portfolio", "crew", "next", "setup", "upgrade", "doctor",
     LEAD_PANE_EXITED_VERB,
-    "pads", "pad", "todos", "todo", "backups", "restore", "project", "runbook", "posture", "profile", "kickoff", "statusline",
+    LEAD_HANDOFF_GRACE_VERB,
+    LEAD_HANDOFF_START_VERB,
+    "lead-handoff",
+    "pads", "pad", "todos", "todo", "questions", "answer", "backups", "restore", "project", "runbook", "posture", "profile", "kickoff", "statusline",
 ];
 if (!COMMANDS.includes(command)) {
     if (command.startsWith("--")) {
@@ -3475,6 +3543,15 @@ try {
         case LEAD_PANE_EXITED_VERB:
             cmdLeadPaneExited(rest);
             break;
+        case "lead-handoff":
+            process.exitCode = await cmdLeadHandoff(rest);
+            break;
+        case LEAD_HANDOFF_GRACE_VERB:
+            process.exitCode = await runHandoffGrace(rest);
+            break;
+        case LEAD_HANDOFF_START_VERB:
+            process.exitCode = await runHandoffStart(rest);
+            break;
         case "show":
             cmdShow(rest);
             break;
@@ -3517,6 +3594,12 @@ try {
         case "todo":
             cmdTodo(rest);
             break;
+        case "questions":
+            cmdQuestions(rest);
+            break;
+        case "answer":
+            cmdAnswer(rest);
+            break;
         case "backups":
             cmdBackups();
             break;

package/dist/context.js

@@ -5,6 +5,8 @@ import { basename, dirname, join, resolve, sep } from "node:path";
 import { storeDir } from "./dataDir.js";
 import { db } from "./db.js";
 import { LEAD_KIND } from "./spawn.js";
+import { rowOwnership } from "./tmux.js";
+import { recordQueenRefusal } from "./queenAudit.js";
 let selectedId = null;
 let cachedActorId = null;
 let lastTouchMs = 0;
@@ -24,7 +26,7 @@ export function currentActor() {
         return cachedActorId;
     }
     const envId = process.env.HIVE_AGENT_ID;
-    const id = envId ?? `user:${userInfo().username}`;
+    const id = envId ?? `${HUMAN_ACTOR_PREFIX}${userInfo().username}`;
     const name = process.env.HIVE_AGENT_NAME ?? id;
     const kind = envId ? "agent" : "human";
     db.prepare(`INSERT INTO actors (id, name, kind, tmux_pane) VALUES (?, ?, ?, ?)
@@ -294,6 +296,30 @@ export function captureQueenWriteIdentity(targetProjectId) {
         return null;
     return { actor_id: process.env.HIVE_AGENT_ID, home_project_id: home };
 }
+export function resolveQueenLeadTarget(operation, targetProjectId, ref, resolve) {
+    if (!captureQueenWriteIdentity(targetProjectId))
+        return resolve();
+    let agent;
+    try {
+        agent = resolve();
+    }
+    catch (e) {
+        throw queenRefusal(operation, targetProjectId, `recipient ${JSON.stringify(ref)} could not be resolved: ${e instanceof Error ? e.message : String(e)}`);
+    }
+    const ownership = rowOwnership(agent);
+    const problem = agent.project_id !== targetProjectId
+        ? `Agent ${agent.id} ("${agent.name}") belongs to project ${agent.project_id}, not project ${targetProjectId}`
+        : agent.kind !== LEAD_KIND
+            ? `Agent ${agent.id} ("${agent.name}") is kind "${agent.kind}", not a lead`
+            : agent.status !== "running"
+                ? `Agent ${agent.id} ("${agent.name}") is ${agent.status}, not running`
+                : ownership !== "live"
+                    ? `Agent ${agent.id} ("${agent.name}") does not own a live pane (ownership: ${ownership})`
+                    : null;
+    if (problem)
+        throw queenRefusal(operation, targetProjectId, problem);
+    return agent;
+}
 export const QUEEN_REACH = {
     whoami: "read",
     help: "read",
@@ -330,6 +356,11 @@ export const QUEEN_REACH = {
     todo_unblock: "home",
     kv_set: "home",
     kv_delete: "home",
+    question_ask: "home",
+    question_get: "home",
+    question_list: "home",
+    question_update: "home",
+    question_answer: "home",
     lease_acquire: "home",
     lease_release: "home",
     agent_spawn: "home",
@@ -374,7 +405,7 @@ function foreignWriteProblem(reach, targetProjectId, args) {
             const lead = runningLead(targetProjectId);
             if (!lead)
                 return "that project has no running lead to address";
-            if (!namesLead(args.deliver_to, lead)) {
+            if (args.deliver_to == null) {
                 return `deliver_to must name that project's running lead ("${lead.name}" or agent id ${lead.id})`;
             }
             return null;
@@ -397,8 +428,8 @@ function foreignWriteProblem(reach, targetProjectId, args) {
             const lead = runningLead(targetProjectId);
             if (!lead)
                 return "that project has no running lead to address";
-            if (!namesLead(args.agent_id ?? args.name, lead)) {
-                return `the recipient must be that project's running lead ("${lead.name}" or agent id ${lead.id})`;
+            if (args.agent_id == null && args.name == null) {
+                return `the recipient must name that project's running lead ("${lead.name}" or agent id ${lead.id})`;
             }
             return null;
         }
@@ -441,7 +472,20 @@ export function assertQueenToolCall(tool, args) {
 function queenRefusal(operation, targetProjectId, problem) {
     const target = targetProjectId === null ? null : getProject(targetProjectId);
     const where = target ? `in project ${target.id} ("${target.name}")` : "outside the queen's own project";
-    return new Error(`${QUEEN_REFUSAL}: the queen cannot run ${operation} ${where}: ${problem}. Into another project the ` +
+    const refusal = new Error(`${QUEEN_REFUSAL}: the queen cannot run ${operation} ${where}: ${problem}. Into another project the ` +
         "queen may only todo_create, todo_comment, send text or wakes to its running lead, start its lead " +
         "with `hive lead <path>`, and run project_prune or `hive project rm` on it. Everything else there is its lead's to do.");
+    if (targetProjectId !== null) {
+        const identity = captureQueenWriteIdentity(targetProjectId);
+        if (identity) {
+            try {
+                recordQueenRefusal(operation, targetProjectId, problem, identity);
+            }
+            catch {
+                // A refusal must survive an unavailable audit write.
+            }
+        }
+    }
+    return refusal;
 }
+export const HUMAN_ACTOR_PREFIX = "user:";

package/dist/crew.js

@@ -5,6 +5,7 @@ import { awaitingFirstPrompt } from "./firstPrompt.js";
 import { heldReasonLabel } from "./heldLabel.js";
 import { harnessFor, paneClassifierFor } from "./harnesses.js";
 import { NEEDS_HUMAN_TAG } from "./portfolio.js";
+import { pendingQuestionCount } from "./questions.js";
 import { loadProjectYml } from "./projectYml.js";
 import { parseTags } from "./result.js";
 import { ACTIVE_TIMER_WHERE } from "./scheduler.js";
@@ -20,6 +21,8 @@ export function crewStoreProblem(database = db) {
     const columns = database.prepare("SELECT name FROM pragma_table_info('agents')").all();
     if (!columns.some((c) => c.name === "todo_id"))
         return "the store predates the worker-to-todo link (agents.todo_id)";
+    if (!tables.has("questions"))
+        return "the store has no questions table";
     return null;
 }
 function isoUtc(value) {
@@ -235,12 +238,26 @@ function tokenize(segment) {
     return tokens;
 }
 const ENV_ASSIGNMENT = /^[A-Za-z_][A-Za-z0-9_]*=/;
+const SHELL_PREFIX_KEYWORDS = new Set(["if", "elif", "while", "until", "do", "then", "else", "!", "{"]);
+const SHELL_HEADER_KEYWORDS = new Set(["for", "select", "case"]);
+const SHELL_CLOSING_KEYWORDS = new Set(["done", "fi", "esac", "}"]);
 function toSegment(segment) {
     const tokens = tokenize(segment);
     let start = 0;
     while (start < tokens.length && ENV_ASSIGNMENT.test(tokens[start]))
         start++;
-    const rest = tokens.slice(start);
+    let rest = tokens.slice(start);
+    while (rest.length > 0) {
+        if (SHELL_HEADER_KEYWORDS.has(rest[0]) || SHELL_CLOSING_KEYWORDS.has(rest[0])) {
+            rest = [];
+            break;
+        }
+        if (!SHELL_PREFIX_KEYWORDS.has(rest[0]))
+            break;
+        rest = rest.slice(1);
+        while (rest.length > 0 && ENV_ASSIGNMENT.test(rest[0]))
+            rest = rest.slice(1);
+    }
     return { tokens: rest[0] === "cd" ? [] : rest, writes: writesToFile(segment) };
 }
 function segmentsOf(command) {
@@ -272,7 +289,7 @@ function matchesPrefix(tokens, matcher) {
     return tokens.length >= matcher.tokens.length && matcher.tokens.every((re, i) => re.test(tokens[i]));
 }
 const READING_EXES = new Set(["rg", "grep", "cat", "head", "tail", "sed"]);
-const FALLBACK_SKIP = new Set(["printf", "echo", "true", ":"]);
+const FALLBACK_SKIP = new Set(["printf", "echo", "true", ":", "[", "[[", "test"]);
 const NODE_RUNNERS = new Set(["npm", "pnpm", "yarn"]);
 const TEST_BINARIES = new Set(["pest", "phpunit", "vitest", "jest"]);
 const BUILD_BINARIES = new Set(["pint", "phpstan"]);
@@ -482,6 +499,7 @@ export function collectCrew(project, now) {
         read_at: now.toISOString(),
         lanes,
         needs_you: needsYou,
+        questions: { pending: pendingQuestionCount(project.id) },
         wakes: {
             pending: pending.length,
             next: pending[0]

package/dist/dashboard.js

@@ -1,4 +1,5 @@
 import { createHash } from "node:crypto";
+import { createRequire } from "node:module";
 import { db } from "./db.js";
 import { getProject } from "./context.js";
 export const describeVisibility = (visibility) => visibility === null ? "running" : visibility === "window" ? "own window" : visibility;
@@ -12,6 +13,7 @@ export function processCounts(procs) {
 }
 import { awaitingFirstPrompt } from "./firstPrompt.js";
 import { SLUG_MAX_LEN, cutToUnitBudget } from "./slug.js";
+const requireFromHere = createRequire(import.meta.url);
 export const TODO_CAP = 100;
 export const AGENT_CAP = 50;
 export const WAKE_CAP = 50;
@@ -449,6 +451,45 @@ function renderWakesSection(index, projectId) {
     const body = renderCappedList(shown.length, all.length, "pending wakes", "wakes", rows, emptyState("No pending wakes.", "Scheduled and idle-triggered check-ins from wake_set show up here."));
     return section(index, "wakes", "Wakes", `${all.length} pending`, "bell", String(shown.length), body);
 }
+function questionAge(createdAt) {
+    const timestamp = Date.parse(`${createdAt.replace(" ", "T")}Z`);
+    if (!Number.isFinite(timestamp))
+        return "unknown";
+    const seconds = Math.max(0, Math.floor((Date.now() - timestamp) / 1000));
+    if (seconds >= 86400)
+        return `${Math.floor(seconds / 86400)}d ago`;
+    if (seconds >= 3600)
+        return `${Math.floor(seconds / 3600)}h ago`;
+    if (seconds >= 60)
+        return `${Math.floor(seconds / 60)}m ago`;
+    return "now";
+}
+function renderQuestionsSection(index, projectId) {
+    // A static import of questions.js cycles through tools/wakes.ts and scheduler.ts.
+    const { listQuestions, pendingQuestionCount } = requireFromHere("./questions.js");
+    const questions = listQuestions(projectId);
+    if (questions.length === 0)
+        return "";
+    const pendingCount = pendingQuestionCount(projectId);
+    const rows = questions.map((question) => {
+        const options = question.kind === "free_text"
+            ? '<p class="question-options">free text</p>'
+            : `<ul class="question-options">${(question.options ?? []).map((option) => `<li>${prose(option.label)}${option.recommended ? ' <span class="recommended">recommended</span>' : ""}` +
+                `<span class="question-option-description">${prose(option.description)}</span></li>`).join("")}</ul>`;
+        const ref = question.ref ? `<span class="question-ref">${question.ref.kind === "todo" ? "todo" : "PR"} #${question.ref.number}</span>` : "";
+        const state = question.state === "defaulted"
+            ? '<span class="question-state">defaulted - proceeding on the default</span>'
+            : '<span class="question-state">pending</span>';
+        return (`<li class="question" data-question="${question.id}"><div class="question-head">${mono(`#${question.id}`)} ` +
+            `<strong>${escapeHtml(question.header)}</strong> ${state}</div>` +
+            `<p class="question-text">${prose(question.question)}</p>${options}` +
+            `<p class="question-default">Default answer: ${prose(question.default_answer)}</p>` +
+            `<p class="question-meta">Asked by ${mono(question.asker)} · ${escapeHtml(questionAge(question.created_at))}` +
+            `${ref ? ` · ${ref}` : ""}</p>` +
+            `<p class="question-answer">To answer: <code>hive answer ${question.id}</code></p></li>`);
+    }).join("\n");
+    return section(index, "questions", "Questions", `${pendingCount} pending`, "inbox", String(pendingCount), `<ul class="question-list">${rows}</ul>`);
+}
 function fetchCommentActivity(projectId) {
     const rows = db
         .prepare(`SELECT c.id, c.body, c.author, c.created_at, t.id AS todo_id, t.title AS todo_title,
@@ -682,6 +723,15 @@ export const SECTION_STYLE = `
   .priority-low { color: var(--fg-subtle); }
   .blockers { font-size: 0.8125rem; color: var(--fg-muted); margin: 0 0 0.45rem 0.6rem; }
   .wake-body { color: var(--fg); font-size: 0.875rem; overflow-wrap: anywhere; }
+  .question-list { display: grid; gap: 0.85rem; list-style: none; margin: 0; padding: 0; }
+  .question { border-bottom: 1px solid var(--border); padding-bottom: 0.85rem; overflow-wrap: anywhere; }
+  .question:last-child { border-bottom: 0; padding-bottom: 0; }
+  .question-head, .question-meta, .question-answer, .question-default, .question-text, .question-options { margin: 0.2rem 0; }
+  .question-head, .question-meta, .question-answer { font-size: 0.8125rem; }
+  .question-state, .question-ref, .recommended { color: var(--fg-muted); font-size: 0.75rem; }
+  .question-options { padding-left: 1.2rem; }
+  .question-option-description { display: block; padding-left: 0.5rem; color: var(--fg-muted); }
+  .question-text { overflow-wrap: anywhere; white-space: pre-wrap; }
   .activity-body { font-size: 0.8125rem; color: var(--fg-muted); white-space: pre-wrap;
     overflow-wrap: anywhere; margin-top: 0.1rem; }
 
@@ -1171,7 +1221,9 @@ function buildDashboard(projectId, procs) {
     const project = fetchProject(projectId);
     const stats = fetchDayStats(projectId);
     const index = [];
+    const questionsSection = renderQuestionsSection(index, projectId);
     const cards = [
+        ...(questionsSection ? [questionsSection] : []),
         renderThroughputSection(index, stats),
         renderBoardSection(index, projectId),
         renderTodosSection(index, projectId),