@cmgmyr/hive 1.10.1 → 1.11.1

package/dist/db.js

@@ -430,6 +430,150 @@ ALTER TABLE agent_messages ADD COLUMN sender_tag TEXT;
 CREATE INDEX idx_agent_messages_delivery ON agent_messages(delivery_status, id) WHERE delivery_status IS NOT NULL;
 `,
     `ALTER TABLE agents ADD COLUMN todo_id INTEGER REFERENCES todos(id) ON DELETE SET NULL;`,
+    `
+ALTER TABLE lead_turn_state ADD COLUMN snapshot_pane_pid TEXT NOT NULL DEFAULT '';
+ALTER TABLE lead_turn_state ADD COLUMN snapshot_session_id TEXT NOT NULL DEFAULT '';
+ALTER TABLE lead_turn_state ADD COLUMN prompt_seq INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE lead_turn_state ADD COLUMN human_prompt_seq INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE lead_turn_state ADD COLUMN human_prompt_at TEXT;
+ALTER TABLE lead_turn_state ADD COLUMN transcript_path TEXT NOT NULL DEFAULT '';
+ALTER TABLE lead_turn_state ADD COLUMN stop_prompt_seq INTEGER;
+ALTER TABLE lead_turn_state ADD COLUMN stop_background TEXT;
+ALTER TABLE lead_turn_state ADD COLUMN stop_at TEXT;
+
+CREATE TABLE lead_handoffs (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  project_id INTEGER NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+  lead_agent_id INTEGER NOT NULL REFERENCES agents(id) ON DELETE CASCADE,
+  pane_target TEXT NOT NULL,
+  tmux_socket TEXT NOT NULL DEFAULT '',
+  predecessor_pane_pid TEXT NOT NULL,
+  predecessor_session_id TEXT NOT NULL,
+  reason TEXT NOT NULL CHECK (reason IN ('warn', 'stop')),
+  state TEXT NOT NULL CHECK (state IN ('pending', 'wind_down', 'requested', 'grace', 'postponed',
+    'respawning', 'started', 'completed', 'failed', 'ambiguous')),
+  pass INTEGER NOT NULL DEFAULT 1,
+  request_reason TEXT CHECK (request_reason IN ('warn', 'stop')),
+  pass_started_at TEXT,
+  request_wake_id INTEGER,
+  attempt INTEGER NOT NULL DEFAULT 0,
+  owner_token TEXT,
+  owner_pid INTEGER,
+  grace_seconds INTEGER,
+  grace_started_at TEXT,
+  human_prompt_baseline INTEGER,
+  pad_id INTEGER,
+  pad_revision INTEGER,
+  pad_length INTEGER,
+  pad_sha256 TEXT,
+  respawn_claimed_at TEXT,
+  predecessor_turns INTEGER,
+  hold_since TEXT,
+  hold_released_at TEXT,
+  blocked_reason TEXT,
+  successor_pane_pid TEXT,
+  successor_session_id TEXT,
+  delivered_pad_id INTEGER,
+  delivered_pad_revision INTEGER,
+  started_at TEXT,
+  completed_at TEXT,
+  failure TEXT,
+  created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%d %H:%M:%f', 'now')),
+  updated_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%d %H:%M:%f', 'now'))
+);
+CREATE UNIQUE INDEX idx_lead_handoffs_epoch
+  ON lead_handoffs(project_id, lead_agent_id, predecessor_pane_pid, predecessor_session_id);
+CREATE UNIQUE INDEX idx_lead_handoffs_active
+  ON lead_handoffs(lead_agent_id) WHERE state NOT IN ('completed', 'failed');
+`,
+    `
+CREATE TRIGGER fence_handoff_held_claim
+BEFORE UPDATE OF fire_count, delivery_method ON wakes
+FOR EACH ROW
+WHEN (NEW.fire_count > OLD.fire_count
+      OR (NEW.delivery_method IS 'pty-after-socket-timeout'
+          AND OLD.delivery_method IS NOT 'pty-after-socket-timeout'
+          AND NEW.typed_at IS NULL))
+  AND EXISTS (
+    SELECT 1 FROM lead_handoffs h
+     WHERE h.lead_agent_id = (SELECT a.id FROM agents a
+                               WHERE a.actor_id = NEW.deliver_actor
+                               ORDER BY (a.status = 'running') DESC,
+                                        a.id DESC
+                               LIMIT 1)
+       AND h.state NOT IN ('completed', 'failed')
+       AND h.request_wake_id IS NOT NEW.id
+       AND (h.state = 'grace'
+            OR (h.hold_released_at IS NULL AND (
+                  h.state IN ('respawning', 'ambiguous', 'wind_down')
+                  OR (h.state = 'requested'
+                      AND (h.reason = 'stop' OR h.pass >= 2))
+                  OR (h.state = 'postponed' AND h.reason = 'stop'))))
+       AND (julianday('now') - julianday(h.updated_at)) * 86400 < 3600)
+BEGIN
+  SELECT RAISE(IGNORE);
+END;
+`,
+    `DROP TRIGGER fence_handoff_held_claim;`,
+    `
+CREATE TRIGGER fence_handoff_held_claim
+BEFORE UPDATE OF fire_count, delivery_method ON wakes
+FOR EACH ROW
+WHEN (NEW.fire_count > OLD.fire_count
+      OR (NEW.delivery_method IS 'pty-after-socket-timeout'
+          AND OLD.delivery_method IS NOT 'pty-after-socket-timeout'
+          AND NEW.typed_at IS NULL))
+  AND EXISTS (
+    SELECT 1 FROM lead_handoffs h
+     WHERE h.lead_agent_id = (SELECT a.id FROM agents a
+                               WHERE a.actor_id = NEW.deliver_actor
+                               ORDER BY (a.status = 'running') DESC,
+                                        a.id DESC
+                               LIMIT 1)
+       AND h.state NOT IN ('completed', 'failed')
+       AND h.request_wake_id IS NOT NEW.id
+       AND (h.state IN ('grace', 'started')
+            OR (h.hold_released_at IS NULL AND (
+                  h.state IN ('respawning', 'ambiguous', 'wind_down')
+                  OR (h.state = 'requested'
+                      AND (h.reason = 'stop' OR h.pass >= 2))
+                  OR (h.state = 'postponed' AND h.reason = 'stop'))))
+       AND (julianday('now') - julianday(h.updated_at)) * 86400 < 3600)
+BEGIN
+  SELECT RAISE(IGNORE);
+END;
+`,
+    `
+CREATE TABLE questions (
+  id INTEGER PRIMARY KEY AUTOINCREMENT,
+  project_id INTEGER NOT NULL REFERENCES projects(id) ON DELETE CASCADE,
+  asker TEXT NOT NULL,
+  kind TEXT NOT NULL CHECK (kind IN ('choice', 'free_text')),
+  question TEXT NOT NULL CHECK (trim(question) != ''),
+  header TEXT NOT NULL CHECK (trim(header) != ''),
+  options TEXT,
+  default_answer TEXT NOT NULL CHECK (trim(default_answer) != ''),
+  ref_kind TEXT CHECK (ref_kind IN ('todo', 'pr')),
+  ref_number INTEGER CHECK (ref_number > 0),
+  state TEXT NOT NULL DEFAULT 'pending' CHECK (state IN ('pending', 'answered', 'defaulted', 'withdrawn')),
+  answer TEXT,
+  notes TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_by TEXT NOT NULL,
+  answered_by TEXT,
+  CHECK ((ref_kind IS NULL) = (ref_number IS NULL)),
+  CHECK ((kind = 'choice') = (options IS NOT NULL))
+);
+CREATE UNIQUE INDEX idx_questions_pending_ref ON questions(project_id, ref_kind, ref_number)
+  WHERE state = 'pending' AND ref_kind IS NOT NULL;
+CREATE INDEX idx_questions_project_state ON questions(project_id, state, id);
+`,
+    `
+ALTER TABLE queen_audit ADD COLUMN outcome TEXT NOT NULL DEFAULT 'confirmed'
+  CHECK (outcome IN ('confirmed', 'refused'));
+ALTER TABLE queen_audit ADD COLUMN problem TEXT NOT NULL DEFAULT '';
+`,
 ];
 export function storeSchemaAhead(database) {
     try {

package/dist/help.js

@@ -40,6 +40,9 @@ KV — small shared status values (with optional TTL)
 LEASES — advisory expiring claims on shared state
   lease_acquire, lease_release
 
+QUESTIONS — open questions for the human, recorded in the store
+  question_ask, question_get, question_list, question_update, question_answer
+
 PROJECTS — scope management
   project_list, project_add, project_select, project_prune
 
@@ -246,6 +249,9 @@ Delivery contract:
   and the next action. Plain English, no markup.
   Waking your OWN lead pane is the exception: it is not cold, so carry the
   action and the ids and point at where the detail lives.
+  With lead_turn_budget.auto_handoff on, a lead past its warn budget gets
+  a "hive lead handoff request #N" wake: follow its steps, then run
+  hive lead-handoff. A human prompt during the grace postpones it.
 
 Receiving wake-ups:
   Spawned workers can always receive (deliver_to their name or id).
@@ -378,6 +384,27 @@ todo_list without marking anything done.`,
 
 Use kv for values another session needs to discover: current branch, a port,
 a phase flag. Use pads for anything longer than a line or two.`,
+    questions: `QUESTIONS — open questions for the human, recorded in the store
+
+  question_ask(kind, question, header, default_answer, options?, ref?) —
+    record a question. kind=choice takes 2-4 options (label, description,
+    recommended; exactly one recommended, and default_answer is its label).
+    kind=free_text takes no options. header is 12 characters or fewer. ref
+    ({kind: "todo"|"pr", number}) is the dedupe key: asking again with a ref
+    that has a pending question in this project updates that row. The
+    receipt lists similar pending questions so you can question_update one.
+  question_get(question_id) — one question, any state, with its answer
+  question_list() — pending questions, then defaulted ones, oldest first
+  question_update(question_id, ...) — edit a pending question's text, or set
+    state to defaulted (you acted on your default) or withdrawn (moot)
+  question_answer(question_id, answer, notes?) — record the human's answer
+    to a pending or defaulted question
+
+hive stores the question; it never puts it to the human. Render it in your
+own turn. Answering queues a wake to the asker carrying the question,
+answer and notes, unless the answerer is the asker or the asker cannot be
+reached; the answer is kept either way. Nothing expires or defaults on its
+own: only the asker or the human moves a question out of pending.`,
     leases: `LEASES — advisory expiring claims on shared state
 
   lease_acquire(key, ttl_seconds) — non-blocking; returns the holder if

package/dist/hook.js

@@ -177,6 +177,13 @@ async function stopProcessesForEndedLead(actorId, payload) {
         .get(actorId);
     if (!row)
         return;
+    // A deliberate handoff's predecessor ending is not the lead ending; its successor keeps the crew.
+    const lead = db.prepare("SELECT id FROM agents WHERE actor_id = ? AND kind = 'lead' AND status = 'running'").get(actorId);
+    if (lead !== undefined) {
+        const { predecessorFence } = await import("./leadState.js");
+        if (predecessorFence(lead.id, payload.session_id))
+            return;
+    }
     // Imported here and nowhere above: harnesses.ts itself pulls tmux at module scope, and every
     // other event in this file runs on every turn of every session without needing any of it.
     const { harnessFor } = await import("./harnesses.js");
@@ -313,7 +320,8 @@ try {
         if (!guarded)
             state = applyWorkerTransition(actorId, event);
         // A lead's turn state is its own table; agents.agent_state stays worker-only.
-        if (process.env.HIVE_LEAD === "1" && (event === "prompt" || event === "stop" || event === "session_end")) {
+        if (process.env.HIVE_LEAD === "1" &&
+            ["prompt", "stop", "session_end"].includes(event)) {
             try {
                 const { applyLeadHook } = await import("./leadState.js");
                 applyLeadHook(actorId, event, readPayload(), () => waitingOnSubagents(actorId, readPayload()));
@@ -321,6 +329,18 @@ try {
             catch {
             }
         }
+        if (event === "stop" && process.env.HIVE_LEAD === "1") {
+            try {
+                const started = db
+                    .prepare(`SELECT 1 AS hit FROM lead_handoffs h JOIN agents a ON a.id = h.lead_agent_id
+              WHERE a.actor_id = ? AND a.kind = 'lead' AND h.state = 'started'`)
+                    .get(actorId);
+                if (started !== undefined)
+                    (await import("./leadHandoff.js")).completeHandoffOnStop(actorId);
+            }
+            catch {
+            }
+        }
         if (event === "session_start" && process.env.HIVE_LEAD === "1") {
             try {
                 await registerLeadMessagingSocket(actorId);
@@ -340,7 +360,17 @@ try {
             reconcileTranscriptPath(actorId, hookPayload);
             db.prepare("UPDATE actors SET last_seen_at = datetime('now') WHERE id = ?").run(actorId);
         }
-        record(actorId, event, state ?? UNCHANGED);
+        let logState = state ?? UNCHANGED;
+        if (event === "prompt" && process.env.HIVE_LEAD === "1") {
+            try {
+                const { isHiveFirstMessage, FIRST_MESSAGE_LOG_STATE } = await import("./leadState.js");
+                if (isHiveFirstMessage(readPayload()))
+                    logState = FIRST_MESSAGE_LOG_STATE;
+            }
+            catch {
+            }
+        }
+        record(actorId, event, logState);
     }
 }
 catch {

package/dist/index.js

@@ -10,6 +10,7 @@ import { registerTodos } from "./tools/todos.js";
 import { registerKv } from "./tools/kv.js";
 import { registerLeases } from "./tools/leases.js";
 import { registerWakes } from "./tools/wakes.js";
+import { registerQuestions } from "./tools/questions.js";
 import { registerQueenAudit } from "./tools/queenAudit.js";
 import { registerPrompts } from "./prompts.js";
 import { schedulerIntervalMs, startScheduler } from "./scheduler.js";
@@ -34,6 +35,7 @@ registerTodos(server);
 registerKv(server);
 registerLeases(server);
 registerWakes(server);
+registerQuestions(server);
 registerQueenAudit(server);
 registerPrompts(server);
 startScheduler(schedulerIntervalMs());

package/dist/kickoff.js

@@ -97,6 +97,20 @@ async function digest(projectPath, profile, warnings) {
     lines.push("", "Standing process for this project: run `hive runbook`.");
     return truncate(lines.join("\n"), CONTEXT_BUDGET);
 }
+// Lead-only: a worker returned above, and a session hive did not start as a lead gets nothing.
+async function leadHandoffText() {
+    const actor = process.env.HIVE_AGENT_ID;
+    if (process.env.HIVE_LEAD !== "1" || !actor)
+        return null;
+    try {
+        const { migrate } = await import("./db.js");
+        migrate();
+        return (await import("./leadHandoff.js")).handoffInjection(actor);
+    }
+    catch {
+        return null;
+    }
+}
 // Shared with `hive lead`, which passes the first message on the command line only when this holds.
 export async function kickoffGate(dir) {
     const { activeProfile, DEFAULT_LEAD_BRANCHES, loadProjectYml } = await import("./projectYml.js");
@@ -128,13 +142,20 @@ export async function evaluate(cwd, opts = {}) {
     catch {
         return { fired: false, reason: "cwd does not exist" };
     }
+    const handoff = await leadHandoffText();
+    const handoffOnly = (warnings) => ({
+        fired: true,
+        payload: JSON.stringify({ hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: handoff } }),
+        warnings,
+    });
     const gate = await kickoffGate(dir);
     if (!gate.ok)
-        return { fired: false, reason: gate.reason, warnings: gate.warnings };
+        return handoff === null ? { fired: false, reason: gate.reason, warnings: gate.warnings } : handoffOnly(gate.warnings);
     const { config, warnings, sources, profile } = gate;
     const context = await digest(dir, profile, warnings);
-    if (context == null)
-        return { fired: false, reason: "not a registered hive project root", warnings };
+    if (context == null) {
+        return handoff === null ? { fired: false, reason: "not a registered hive project root", warnings } : handoffOnly(warnings);
+    }
     // Codex's SessionStartHookSpecificOutputWire is additionalProperties:false and permits only
     // hookEventName/additionalContext - initialUserMessage inside it fails the whole payload
     // ("SessionStart Failed"), silently dropping the board too. Measured, todo 567 comment 1864.
@@ -145,13 +166,15 @@ export async function evaluate(cwd, opts = {}) {
     const build = (text) => JSON.stringify({
         hookSpecificOutput: {
             hookEventName: "SessionStart",
-            additionalContext: text,
+            additionalContext: handoff === null ? text : `${text}\n\n${handoff}`,
             ...(hookMessage === null ? {} : { initialUserMessage: hookMessage }),
         },
     });
     let payload = build(context);
-    if (payload.length > OUTPUT_BUDGET) {
-        const overflow = payload.length - OUTPUT_BUDGET;
+    // The handoff rides outside the digest budget: only the digest is ever cut to fit.
+    const budget = OUTPUT_BUDGET + (handoff === null ? 0 : JSON.stringify(handoff).length);
+    if (payload.length > budget) {
+        const overflow = payload.length - budget;
         payload = build(truncate(context, Math.max(0, context.length - overflow - 32)));
     }
     return { fired: true, payload, warnings, firstMessage: first };