@cmgmyr/hive 1.11.3 → 1.11.4

package/dist/abi.js

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from "node:fs";
 import { createRequire } from "node:module";
 import { dirname, join } from "node:path";
-import { cliPath, dispatcherPath, readDispatcher } from "./dispatcher.js";
+import { cliPath, dispatcherPath, readDispatcher, repinCommand } from "./dispatcher.js";
 const requireFromHere = createRequire(import.meta.url);
 export function classifyAddonLoadError(error) {
     return /NODE_MODULE_VERSION \d+|Module did not self-register/i.test(error) ? "mismatch" : "load";
@@ -129,7 +129,7 @@ export function abiFixLines(status, pinned) {
     if (status.failure === "napi") {
         const need = status.nodeApiRequired;
         const range = need === null ? null : nodeRangeForNodeApi(need);
-        const good = pinned ? `"${pinned}"` : `<a Node matching ${range ?? "that Node-API level"}>`;
+        const good = pinned ?? `<a Node matching ${range ?? "that Node-API level"}>`;
         return [
             `better-sqlite3's addon is built against Node-API ${need}${range ? `, which only Node ${range} provides` : ""}.`,
             `This interpreter provides Node-API ${describeNodeApi(status.nodeApi)}, so the addon cannot load here.`,
@@ -141,7 +141,7 @@ export function abiFixLines(status, pinned) {
             "",
             `Run hive under a Node matching ${range ?? "that Node-API level"}, and re-pin the \`hive\` command`,
             "to it (setup pins whatever Node runs it, so it has to be that one):",
-            `  ${good} "${cliPath()}" setup`,
+            `  ${repinCommand(good, cliPath())}`,
         ];
     }
     if (status.failure === "missing") {
@@ -164,7 +164,7 @@ export function abiFixLines(status, pinned) {
     if (status.failure !== "mismatch") {
         return ["Build it:  npm install && npm run build"];
     }
-    const good = pinned ? `"${pinned}"` : "<the Node that built it>";
+    const good = pinned ?? "<the Node that built it>";
     return [
         "better-sqlite3's addon is ABI-locked to the Node that compiled it, and a Node",
         "version manager resolves `node` from the working directory, so a `cd` is enough",
@@ -172,10 +172,12 @@ export function abiFixLines(status, pinned) {
         "",
         "Run hive under the Node it was built for, and re-pin the `hive` command to it",
         "(setup pins whatever Node runs it, so it has to be that one):",
-        `  ${good} "${cliPath()}" setup`,
+        `  ${repinCommand(good, cliPath())}`,
         "",
-        "Or rebuild the addon for the Node you are on, and re-pin to that:",
-        "  npm install && npm run build && hive setup",
+        "Rebuilding is not the fix for the supported addon. Update hive, then re-pin this CLI:",
+        "  Global install: npm install -g @cmgmyr/hive",
+        "  Checkout: npm install && npm run build",
+        `  ${repinCommand(good, cliPath())}`,
     ];
 }
 function workingInterpreterFromDispatcher() {

package/dist/build-info.json

@@ -1 +1 @@
-{"version":"1.11.3","sha":"959b92c","dirty":false,"build_id":"9ec08cbe1418fce5591b6a2d0373e6bd5173810edd4f572aa06bdd23e49bdd11"}
+{"version":"1.11.4","sha":"be85c43","dirty":false,"build_id":"002d81642b9604f453a66605e3bc23656ad7b425069e016be8bfda87d6e532d1"}

package/dist/cli.js

@@ -3,14 +3,14 @@ import { execFileSync, spawn, spawnSync } from "node:child_process";
 import { randomUUID } from "node:crypto";
 import { chmodSync, existsSync, linkSync, lstatSync, mkdirSync, readdirSync, readFileSync, realpathSync, unlinkSync, writeFileSync, } from "node:fs";
 import { homedir, tmpdir } from "node:os";
-import { join, resolve, sep } from "node:path";
+import { dirname, join, resolve, sep } from "node:path";
 import { createInterface } from "node:readline/promises";
 import { pathToFileURL } from "node:url";
 import { checkAbi, describeAbi, describeInterpreter, nodeRangeForNodeApi, requiredNodeApi } from "./abi.js";
 import { versionInfo } from "./version.js";
 import { claudeConfigDir } from "./claudeDir.js";
 import { ATTACH_MODES, AUTO_ATTACH_MODES, attachMode, isAttachMode, isAutoAttach, migrateLegacyConfig, resolvedAutoAttach, setAttachMode, setAutoAttach, } from "./config.js";
-import { cliPath, dispatcherDir, dispatcherPath, dispatcherScript, durabilityLines, firstHiveOnPath, linkedWorktreePin, pathAdvice, readDispatcher, } from "./dispatcher.js";
+import { cliPath, dispatcherDir, dispatcherPath, dispatcherScript, durabilityLines, firstHiveOnPath, linkedWorktreePin, pathAdvice, repinCommand, readDispatcher, } from "./dispatcher.js";
 import { codexConfigPath, codexHiveRegistrations, codexRegistrationProblem, hiveRegistrations, registrationOffer, registrationProblem, } from "./mcpConfig.js";
 import { DEFAULT_DATA_DIR, storeDir } from "./dataDir.js";
 import { dataDir, db, migrate, storeSchemaAhead } from "./db.js";
@@ -1889,7 +1889,7 @@ function reportDispatcher() {
     }
     info("dispatcher", `${dispatcher.file} -> ${dispatcher.node ?? "an exec line hive cannot parse"}`);
     if (!dispatcher.node || !dispatcher.cli) {
-        gatingWarn("dispatcher", "written by another version of hive; re-run `hive setup` to refresh it.");
+        gatingWarn("dispatcher", "written by another version of hive; use this re-pin command to refresh it:", `  ${repinCommand(process.execPath, cliPath())}`);
     }
     else if (!existsSync(dispatcher.node)) {
         const need = requiredNodeApi();
@@ -1907,7 +1907,7 @@ function reportDispatcher() {
         gatingWarn("dispatcher", `pinned to a linked git worktree, which this repo tears down: ${dispatcher.cli}`, "A worktree teardown leaves `hive` failing with MODULE_NOT_FOUND, and running `hive setup`", "to repair it just re-pins the same worktree, since that shim is what runs the command.", `Re-pin from the durable checkout instead: "${dispatcher.node}" "${repairCli}" setup`);
     }
     else if (dispatcher.node !== process.execPath || dispatcher.cli !== cliPath()) {
-        gatingWarn("dispatcher", "pinned to a different build than this CLI is running.", `this run: ${process.execPath} ${cliPath()}`, "Re-pin after a rebuild: npm run build && hive setup");
+        gatingWarn("dispatcher", "pinned to a different build than this CLI is running.", `this run: ${process.execPath} ${cliPath()}`, `Re-pin after a rebuild: ${repinCommand(process.execPath, cliPath())}`);
     }
     if (onPath !== dispatcher.file)
         gatingWarn("dispatcher", ...pathAdvice(dispatcherDir(), dispatcher.file));
@@ -2005,8 +2005,12 @@ function reportPtyHeadroom(orphans) {
     const scratchHeld = orphans ? orphans.live + orphans.wedged : 0;
     const livePanes = db.prepare("SELECT COUNT(*) AS n FROM agents WHERE status = 'running'").get()
         .n;
-    warn("ptys", `${headroom.allocated} of ${headroom.max} in use (${free} free), below the safety margin${overrideNote}`, shellsLine, `${scratchHeld} orphaned scratch tmux server(s) still holding a socket (detail in the scratch tmux servers check)`, `${livePanes} pane(s) recorded 'running' in hive's own store (leads and workers, this machine)`, "reap the orphaned shells and scratch servers with `node scripts/sweep-scratch.mjs` (dry run by default, " +
-        "`--kill` to act)");
+    warn("ptys", `${headroom.allocated} of ${headroom.max} in use (${free} free), below the safety margin${overrideNote}`, shellsLine, `${scratchHeld} orphaned scratch tmux server(s) still holding a socket (detail in the scratch tmux servers check)`, `${livePanes} pane(s) recorded 'running' in hive's own store (leads and workers, this machine)`, ...(existsSync(join(dirname(cliPath()), "..", "scripts", "sweep-scratch.mjs"))
+        ? [
+            "reap the orphaned shells and scratch servers with `node scripts/sweep-scratch.mjs` (dry run by default, " +
+                "`--kill` to act)",
+        ]
+        : []));
 }
 function reportOrphanTmuxServers(orphans) {
     if (!orphans)

package/dist/dispatcher.js

@@ -10,6 +10,9 @@ export const cliPath = () => fileURLToPath(new URL("./cli.js", import.meta.url))
 function shQuote(s) {
     return `'${s.replace(/'/g, `'\\''`)}'`;
 }
+export function repinCommand(node, cli) {
+    return `${shQuote(node)} ${shQuote(cli)} setup`;
+}
 export function dispatcherScript(node, cli) {
     return [
         "#!/bin/sh",
@@ -17,7 +20,7 @@ export function dispatcherScript(node, cli) {
         "# Written by `hive setup`. It runs hive under one fixed interpreter, so a",
         "# version manager resolving `node` per directory cannot land hive on a Node",
         "# better-sqlite3's addon refuses to load under.",
-        "# Regenerate after every update: npm install && npm run build && hive setup",
+        `# Regenerate after every update: ${repinCommand(node, cli)}`,
         `exec ${shQuote(node)} ${shQuote(cli)} "$@"`,
         "",
     ].join("\n");

package/dist/help.js

@@ -7,10 +7,10 @@ one project-scoped state store: pads, todos, kv, leases.
 Call help(topic="<name>") for details. Topics: ${Object.keys(HELP_TOPICS).join(", ")}.
 
 Scope resolution for project-scoped tools:
-  pass project_id for a one-off override
-  otherwise hive uses the project selected in this session
-  otherwise it auto-detects from the working directory, or auto-selects a
-  single registered project
+  resolution order is project_id override, session selection, worker pin,
+  then working directory; a git worktree or subdirectory resolves to its
+  primary checkout, and an unmatched directory becomes a new project
+  instead of falling back to an unrelated one
 
 Quick start:
   1. whoami — see your actor id and effective project
@@ -46,6 +46,9 @@ QUESTIONS — open questions for the human, recorded in the store
 PROJECTS — scope management
   project_list, project_add, project_select, project_prune
 
+QUEEN AUDIT — confirmed queen writes and refused cross-project guard calls
+  queen_audit_list(project_id?, limit?)
+
 ACTORS — who is writing
   actor_prune`;
 }
@@ -131,7 +134,7 @@ If the human asks to change how work runs here, that is an edit to the
 runbook (fork it first), not a pad write.`,
     agents: `AGENTS — spawn and drive worker sessions in tmux
 
-  agent_spawn(name?, model?, command?, extra_args?, read_only?, cwd?, placement?, layout?) —
+  agent_spawn(name?, model?, command?, extra_args?, harness?, read_only?, cwd?, placement?, layout?, todo_id?) —
     start a worker (default command: claude) in session hive-main.
     placement="split" (default) tiles the worker as a pane in the lead's
     window so the whole crew shares one screen; placement="window" gives it
@@ -169,7 +172,7 @@ runbook (fork it first), not a pad write.`,
     stays agent:N, so older pad writes and todo comments still point here.
     A live claude worker is told to retitle its own session, which arrives as
     a user turn: rename between assignments, not mid-task.
-  agent_park(name|agent_id) — END OF DAY. Kill the pane, mark the row PARKED
+  agent_park(name|agent_id, confirm_self?) — END OF DAY. Kill the pane, mark the row PARKED
     rather than plain closed, record the branch, and hand back a board line
     plus the one call that brings the lane back. Use this instead of
     agent_close whenever the lane is PAUSED rather than finished: "closed"
@@ -179,7 +182,7 @@ runbook (fork it first), not a pad write.`,
     with the same actor_id and its full prior context. It does not send
     the assignment; agent_send it afterwards. Read the pane before
     believing any wake about a worker you just resumed.
-  agent_close(name|agent_id) — kill the worker's pane and mark closed. Capture
+  agent_close(name|agent_id, confirm_self?, row_only?) — kill the worker's pane and mark closed. Capture
     handoffs first; output is not retained. Self-close needs confirm_self.
     On a PARKED row (by agent_id) it releases the park instead, which is how
     you abandon a lane you have decided not to resume. row_only=true marks
@@ -239,8 +242,9 @@ its turn), waiting (needs permission or input). Non-claude commands show
     interval used for firings after this one. Only body can be edited on an
     idle wake (from wake_when_idle); delay_seconds/repeat_every_seconds
     apply to a delay wake (from wake_set) only.
-  wake_cancel(wake_id) — cancel a pending wake-up you own
-  wake_list() — pending wake-ups in this project
+  wake_cancel(wake_id) — cancel a pending wake-up you own, or any pending
+    wake-up in this project when you are a running lead
+  wake_list() — pending wake-ups and recently delivered one-shot wakes
 
 Delivery contract:
   When a wake-up fires, its body is typed into the target session's terminal
@@ -338,7 +342,7 @@ place.`,
   pad_append(pad_id, content, expected_revision?) — add to the end
   pad_edit(pad_id, old_text, new_text, expected_revision?) — replace one
     unique literal occurrence; include enough context to disambiguate
-  pad_list(query?, tags?, include_archived?) — summaries without content;
+  pad_list(query?, tags?, include_archived?, limit?, offset?) — summaries without content;
     query matches names and content and returns a snippet
   pad_archive(pad_id, archived?) — archive frees the name for a new active
     pad; content stays readable by pad_id. archived=false unarchives.
@@ -401,10 +405,12 @@ a phase flag. Use pads for anything longer than a line or two.`,
     to a pending or defaulted question
 
 hive stores the question; it never puts it to the human. Render it in your
-own turn. Answering queues a wake to the asker carrying the question,
-answer and notes, unless the answerer is the asker or the asker cannot be
-reached; the answer is kept either way. Nothing expires or defaults on its
-own: only the asker or the human moves a question out of pending.`,
+own turn. Answering queues a wake to the asker carrying the question, answer
+and notes, or reroutes it to the project's running lead when the asker has
+no running row. It skips wake delivery when you are the asker, no eligible
+target is running, or the target cannot be resolved. The answer stays
+readable either way. Nothing expires or defaults on its own: only the asker
+or the human moves a question out of pending.`,
     leases: `LEASES — advisory expiring claims on shared state
 
   lease_acquire(key, ttl_seconds) — non-blocking; returns the holder if

package/dist/kvValue.js

@@ -0,0 +1,8 @@
+export function decodeKvValue(value) {
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return value;
+    }
+}

package/dist/scheduler.js

@@ -4,6 +4,7 @@ import { existsSync, lstatSync, mkdirSync, realpathSync, renameSync, statSync, u
 import { createHash } from "node:crypto";
 import { dirname, join, sep } from "node:path";
 import { dataDir, db, storeReplaced } from "./db.js";
+import { decodeKvValue } from "./kvValue.js";
 import { maybeBackupHourly } from "./backup.js";
 import { renderDashboardForWrite } from "./dashboard.js";
 import { snapshotProcesses } from "./processes.js";
@@ -183,11 +184,11 @@ function reportDeadProcess(agent, snapshot) {
         // interrupted between the two is not reported as a crash.
         if (stoppingMarkerLive(agent.project_id, agent.id))
             return;
-        const lead = stmt(`SELECT actor_id, tmux_target, tmux_socket, pane_pid FROM agents
+        const lead = stmt(`SELECT actor_id, tmux_target, tmux_socket, pane_pid, command FROM agents
         WHERE project_id = ? AND kind = ? AND status = 'running' ORDER BY id DESC LIMIT 1`).get(agent.project_id, LEAD_KIND);
         // Never mint a notice hive could not deliver: with no live lead pane there is nobody this could
         // ever reach, and the row would sit in wakes forever.
-        if (!lead?.tmux_target || rowOwnership(lead, snapshot) !== "live")
+        if (!lead?.tmux_target || !screenClassifiable(lead.command) || rowOwnership(lead, snapshot) !== "live")
             return;
         insertNotice({ project_id: agent.project_id, owner: lead.actor_id }, lead.actor_id, lead.tmux_target, deadProcessBody(agent.name), null);
     }
@@ -410,19 +411,22 @@ function renderQueenPage(queenId) {
 const QUEEN_PAGE_CLAIM_KEY = "hive:queen-page-claim";
 const QUEEN_PAGE_MARK_KEY = "hive:queen-page-mark";
 function claimQueenPageAttempt(queenId) {
-    bestEffortRun("INSERT OR IGNORE INTO kv (project_id, key, value, updated_at) VALUES (?, ?, '', '1970-01-01 00:00:00')", queenId, QUEEN_PAGE_CLAIM_KEY);
+    bestEffortRun("INSERT OR IGNORE INTO kv (project_id, key, value, updated_at) VALUES (?, ?, ?, '1970-01-01 00:00:00')", queenId, QUEEN_PAGE_CLAIM_KEY, JSON.stringify(""));
     return (stmt(`UPDATE kv SET updated_at = datetime('now')
        WHERE project_id = ? AND key = ?
          AND updated_at <= datetime('now', '-${DASHBOARD_MIN_INTERVAL_SECONDS} seconds')`).run(queenId, QUEEN_PAGE_CLAIM_KEY).changes === 1);
 }
 function readQueenPageMark(queenId) {
     const row = stmt("SELECT value FROM kv WHERE project_id = ? AND key = ?").get(queenId, QUEEN_PAGE_MARK_KEY);
-    return row?.value ?? null;
+    if (!row)
+        return null;
+    const value = decodeKvValue(row.value);
+    return typeof value === "string" ? value : row.value;
 }
 function publishQueenPage(queenId, target, page) {
     writeDashboardAtomically(target, page.html);
     bestEffortRun(`INSERT INTO kv (project_id, key, value) VALUES (?, ?, ?)
-     ON CONFLICT(project_id, key) DO UPDATE SET value = excluded.value, updated_at = datetime('now')`, queenId, QUEEN_PAGE_MARK_KEY, page.hash);
+     ON CONFLICT(project_id, key) DO UPDATE SET value = excluded.value, updated_at = datetime('now')`, queenId, QUEEN_PAGE_MARK_KEY, JSON.stringify(page.hash));
 }
 export function generateQueenDashboardNow() {
     try {
@@ -494,6 +498,24 @@ function driveOwnLeadHandoff() {
     catch {
     }
 }
+function isolated(label, task) {
+    const report = (err) => {
+        try {
+            console.error(`[scheduler] ${label} failed: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        catch {
+        }
+    };
+    try {
+        const result = task();
+        if (result !== null && typeof result === "object" && "then" in result) {
+            return Promise.resolve(result).then(() => { }, report);
+        }
+    }
+    catch (err) {
+        report(err);
+    }
+}
 export async function tick(snapshot) {
     if (ticking)
         return;
@@ -506,14 +528,15 @@ export async function tick(snapshot) {
         }
         if (snapshot === undefined)
             snapshot = liveTargets();
-        janitor(snapshot);
-        if (snapshot)
-            reportRunningBuildChange(snapshot);
-        driveOwnLeadHandoff();
-        checkConfirmations();
-        pruneStateLog();
-        maybeBackupHourly(db, dataDir);
-        maybeGenerateDashboards();
+        const tickSnapshot = snapshot;
+        isolated("janitor", () => janitor(tickSnapshot));
+        if (tickSnapshot)
+            isolated("running-build check", () => reportRunningBuildChange(tickSnapshot));
+        isolated("lead handoff", driveOwnLeadHandoff);
+        isolated("wake confirmations", checkConfirmations);
+        isolated("state-log pruning", pruneStateLog);
+        isolated("hourly backup", () => maybeBackupHourly(db, dataDir));
+        isolated("dashboard generation", maybeGenerateDashboards);
         const now = stmt("SELECT datetime('now') AS now").get().now;
         const candidates = stmt(`SELECT wakes.*, ${DELIVER_ROW_COLUMNS}
          FROM wakes ${DELIVER_SOCKET_JOIN}
@@ -524,18 +547,20 @@ export async function tick(snapshot) {
        )`).all();
         const choices = new Map();
         for (const timer of candidates) {
-            if (timer.kind === "delay") {
-                await fireDelay(timer, snapshot, choices);
-                continue;
-            }
-            const leadWatch = leadSubscription(timer.id);
-            if (leadWatch !== null)
-                await maybeFireLeadWatch(timer, leadWatch, snapshot, now, choices);
-            else
-                await maybeFireIdle(timer, snapshot, now, choices);
+            await isolated(`timer ${timer.id}`, async () => {
+                if (timer.kind === "delay") {
+                    await fireDelay(timer, tickSnapshot, choices);
+                    return;
+                }
+                const leadWatch = leadSubscription(timer.id);
+                if (leadWatch !== null)
+                    await maybeFireLeadWatch(timer, leadWatch, tickSnapshot, now, choices);
+                else
+                    await maybeFireIdle(timer, tickSnapshot, now, choices);
+            });
         }
-        await retryUnconfirmedSocketWakes(snapshot, choices);
-        await retryQuietLeadMessages(snapshot);
+        await isolated("unconfirmed socket wake retry", () => retryUnconfirmedSocketWakes(tickSnapshot, choices));
+        await isolated("quiet lead message retry", () => retryQuietLeadMessages(tickSnapshot));
     }
     catch {
     }
@@ -972,6 +997,8 @@ function alreadyToldAbout(timerId, agentId, blockedSince) {
 const CONDITION_IDLE = "idle";
 const CONDITION_GONE = "gone";
 const NOTICE_RETRY_AFTER = "-60 seconds";
+const spentUntypedNotice = (alias) => `${alias}.fired_at IS NOT NULL AND COALESCE(${alias}.typed_at, ${alias}.socket_attempt_at) IS NULL ` +
+    `AND ${alias}.cancelled_at IS NULL AND ${alias}.fired_at < datetime('now', '${NOTICE_RETRY_AFTER}')`;
 const NOTICE_MAX_AGE = "-1 hours";
 const ROSTER_STILL_GOING = 8;
 const FINISHED_SHOWN_CAP = ROSTER_STILL_GOING;
@@ -979,8 +1006,7 @@ const STANDING_EXPIRED_NOTE = "this standing watch has expired and nothing is wa
 const unreported = (condition, episode) => `NOT EXISTS (
     SELECT 1 FROM wake_idle_notices n LEFT JOIN wakes nt ON nt.id = n.notice_wake_id
      WHERE n.wake_id = ? AND n.agent_id = a.id AND n.condition = '${condition}' AND n.episode = ${episode}
-       AND NOT (nt.fired_at IS NOT NULL AND COALESCE(nt.typed_at, nt.socket_attempt_at) IS NULL AND nt.cancelled_at IS NULL
-                AND nt.fired_at < datetime('now', '${NOTICE_RETRY_AFTER}')))`;
+       AND NOT (${spentUntypedNotice("nt")}))`;
 const CREW_COLUMNS = `a.id, a.name, a.actor_id, a.tmux_target, a.tmux_socket, a.pane_pid, a.agent_state,
    a.state_changed_at, a.status, a.command, a.kind, a.resumed_at, a.closed_at,
    a.cwd, a.session_id, a.transcript_path`;
@@ -1218,12 +1244,11 @@ function standingNoticeBody(timer, finished, totalFinished, carriedTotal, span)
     return lines.join("\n");
 }
 function rearmSpentEpisode(timerId, agentId, condition, episode) {
-    stmt(`DELETE FROM wake_idle_notices
+    return stmt(`DELETE FROM wake_idle_notices
       WHERE wake_id = ? AND agent_id = ? AND condition = ? AND episode = ?
         AND notice_wake_id IS NOT NULL
         AND EXISTS (SELECT 1 FROM wakes t WHERE t.id = wake_idle_notices.notice_wake_id
-                      AND t.fired_at IS NOT NULL AND COALESCE(t.typed_at, t.socket_attempt_at) IS NULL AND t.cancelled_at IS NULL
-                      AND t.fired_at < datetime('now', '${NOTICE_RETRY_AFTER}'))`).run(timerId, agentId, condition, episode);
+                      AND ${spentUntypedNotice("t")})`).run(timerId, agentId, condition, episode).changes > 0;
 }
 function claimEpisode(timerId, agentId, condition, episode) {
     return (stmt(`INSERT OR IGNORE INTO wake_idle_notices (wake_id, agent_id, condition, episode)
@@ -1366,11 +1391,15 @@ const claimStallBatch = db.transaction((timer, tell, candidates, observedAt) =>
         return false;
     const won = [];
     for (const c of candidates) {
-        if (c.row.agent_state === "waiting" && !claimBlockNotice(timer.id, c.row.id, c.row.episode))
+        const rearmed = rearmSpentEpisode(timer.id, c.row.id, CONDITION_STALL, c.row.episode);
+        if (!claimEpisode(timer.id, c.row.id, CONDITION_STALL, c.row.episode))
             continue;
-        rearmSpentEpisode(timer.id, c.row.id, CONDITION_STALL, c.row.episode);
-        if (claimEpisode(timer.id, c.row.id, CONDITION_STALL, c.row.episode))
-            won.push(c);
+        if (c.row.agent_state === "waiting" && !rearmed && !claimBlockNotice(timer.id, c.row.id, c.row.episode)) {
+            stmt(`DELETE FROM wake_idle_notices
+            WHERE wake_id = ? AND agent_id = ? AND condition = ? AND episode = ? AND notice_wake_id IS NULL`).run(timer.id, c.row.id, CONDITION_STALL, c.row.episode);
+            continue;
+        }
+        won.push(c);
     }
     if (won.length === 0)
         return false;
@@ -2164,10 +2193,21 @@ async function deliver(timer, note, choices, typedSeen, firstHeldAt, owner, fall
             return;
         if (firing !== null && !pasted)
             dropRepeatingFiring(timer, firing, err);
-        if (!(err instanceof PaneOwnershipLost))
-            throw err;
-        if (firing === null || pasted)
-            recordLostAfterClaim(timer, pasted, err.message, firing);
+        if (err instanceof PaneOwnershipLost) {
+            if (firing === null || pasted) {
+                recordLostAfterClaim(timer, pasted, err instanceof Error ? err.message : String(err), firing);
+            }
+            return;
+        }
+        if (pasted) {
+            const repairableNotice = stmt(`SELECT 1 FROM wake_idle_notices n JOIN wakes w ON w.id = n.notice_wake_id
+          WHERE n.notice_wake_id = ? AND w.fired_at IS NOT NULL
+            AND COALESCE(w.typed_at, w.socket_attempt_at) IS NULL AND w.cancelled_at IS NULL
+          LIMIT 1`).get(timer.id);
+            if (pasted && repairableNotice === undefined) {
+                recordLostAfterClaim(timer, pasted, err instanceof Error ? err.message : String(err), firing);
+            }
+        }
         return;
     }
     finally {

package/dist/tools/agents.js

@@ -996,6 +996,7 @@ export function registerAgents(server) {
             const classifier = renameHarness.paneClassifier;
             const { awaitingChoice, tail } = classifier.choiceCheck(agent.tmux_target);
             const box = awaitingChoice === false ? classifier.inputBoxState(agent.tmux_target) : null;
+            const inCopyMode = paneInCopyMode(agent.tmux_target);
             if (awaitingChoice === true) {
                 heldNote =
                     "Not retitled: the pane is waiting on a choice, so typing /rename would answer it instead of setting the title. Clear the prompt first (agent_send with keys), then retry.";
@@ -1017,6 +1018,11 @@ export function registerAgents(server) {
                     `Not retitled: the pane's input box holds unsubmitted text, so /rename would be pasted onto the end of it and submitted as prose rather than run as a command. The row IS renamed - it is "${newName}" now - and only the pane's own title was left alone. Clear the line with agent_send(keys: ["C-a", "C-k"]) once you can attribute the text, then call agent_rename(name: "${newName}", new_name: "${newName}") to retitle the pane.`;
                 heldTail = tail;
             }
+            else if (inCopyMode === true) {
+                heldNote =
+                    `Not retitled: the pane is in tmux copy mode, so /rename would not reach its prompt. The row IS renamed - it is "${newName}" now - and only the pane's own title was left alone. Leave copy mode (press q or Escape there), then call agent_rename(name: "${newName}", new_name: "${newName}") to retitle the pane.`;
+                heldTail = tail;
+            }
             else {
                 let pasted = false;
                 try {
@@ -1191,6 +1197,7 @@ export function registerAgents(server) {
         const agent = resolveQueenLeadTarget("agent_send", project.id, args.agent_id ?? args.name, () => findAgent(project.id, args));
         requireLive(agent);
         const target = agent.tmux_target;
+        const identity = paneIdentity(agent);
         const auditIdentity = captureQueenWriteIdentity(project.id);
         let outgoing = args.text ?? "";
         const tag = senderTag(project.id, currentActor());
@@ -1241,10 +1248,9 @@ export function registerAgents(server) {
                 }
                 if (args.wait_ms == null)
                     return quiet;
-                await sleep(Math.min(Math.max(args.wait_ms, 250), 10000));
+                await sleep(args.wait_ms);
                 try {
-                    if (observeOwnership(agent) !== "live")
-                        throw new Error("not live");
+                    requireStillOwned(agent.id, identity, "agent_send");
                     return { ...quiet, tail: capturePane(target, 15) };
                 }
                 catch {
@@ -1342,7 +1348,6 @@ export function registerAgents(server) {
                 outgoing = tag + args.text;
             let pasted = false;
             let buffered = false;
-            const identity = paneIdentity(agent);
             try {
                 await sendText(target, outgoing, submitting, () => {
                     pasted = true;
@@ -1376,9 +1381,10 @@ export function registerAgents(server) {
             throw new Error("Pass text or keys.");
         }
         if (args.wait_ms != null) {
-            await sleep(Math.min(Math.max(args.wait_ms, 250), 10000));
+            await sleep(args.wait_ms);
             let tailField;
             try {
+                requireStillOwned(agent.id, identity, "agent_send");
                 tailField = { tail: capturePane(target, 15) };
             }
             catch {

package/dist/tools/kv.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { db } from "../db.js";
 import { currentActor, effectiveProjectId } from "../context.js";
 import { run } from "../result.js";
+import { decodeKvValue } from "../kvValue.js";
 import { idParam, projectIdParam } from "./params.js";
 function purgeExpired(projectId) {
     db.prepare("DELETE FROM kv WHERE project_id = ? AND expires_at IS NOT NULL AND expires_at < datetime('now')").run(projectId);
@@ -56,7 +57,7 @@ export function registerKv(server) {
             project_id: projectId,
             key: row.key,
             found: true,
-            value: JSON.parse(row.value),
+            value: decodeKvValue(row.value),
             updated_by: row.updated_by,
             updated_at: row.updated_at,
             expires_at: row.expires_at,
@@ -76,9 +77,9 @@ export function registerKv(server) {
         purgeExpired(projectId);
         let sql = "SELECT * FROM kv WHERE project_id = ?";
         const params = [projectId];
-        if (args.prefix) {
-            sql += " AND key LIKE ?";
-            params.push(`${args.prefix}%`);
+        if (args.prefix !== undefined) {
+            sql += " AND substr(key, 1, length(?)) = ?";
+            params.push(args.prefix, args.prefix);
         }
         sql += " ORDER BY key";
         const rows = db.prepare(sql).all(...params);
@@ -86,7 +87,7 @@ export function registerKv(server) {
             project_id: projectId,
             entries: rows.map((r) => ({
                 key: r.key,
-                value: JSON.parse(r.value),
+                value: decodeKvValue(r.value),
                 updated_by: r.updated_by,
                 updated_at: r.updated_at,
                 expires_at: r.expires_at,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmgmyr/hive",
-  "version": "1.11.3",
+  "version": "1.11.4",
   "description": "Run a crew of Claude Code and Codex workers from one lead session: visible tmux panes, exact state from hooks, one local SQLite store.",
   "type": "module",
   "bin": {