@cmgmyr/hive 1.11.5 → 1.11.6

package/dist/agentKinds.js

@@ -0,0 +1,6 @@
+export const LEAD_KIND = "lead";
+export const LEAD_ACTOR_PREFIX = `${LEAD_KIND}:`;
+export const isLeadActorId = (actorId) => actorId.startsWith(LEAD_ACTOR_PREFIX);
+export const mintLeadActorId = (agentId) => `${LEAD_ACTOR_PREFIX}${agentId}`;
+export const LEAD_NAME = LEAD_KIND;
+export const isReservedAgentName = (name) => name.toLowerCase() === LEAD_NAME;

package/dist/agentRecords.js

@@ -0,0 +1,98 @@
+import { db } from "./db.js";
+import { LEAD_KIND } from "./agentKinds.js";
+import { observationFailed, observeRowOwnership, ownershipLiveness, rowOwnership } from "./tmux.js";
+export const CLOSED_ROW_ORDER = "(parked_at != '') DESC, closed_at DESC, id DESC";
+export function getAgentRow(projectId, id, notFoundHint) {
+    const row = db.prepare("SELECT * FROM agents WHERE project_id = ? AND id = ?").get(projectId, id);
+    if (!row)
+        throw new Error(`No agent ${id} in project ${projectId}. ${notFoundHint}`);
+    return row;
+}
+function closedAgentNamed(projectId, needle) {
+    return db
+        .prepare(`SELECT id, name, kind, parked_at FROM agents WHERE project_id = ? AND status != 'running' ORDER BY ${CLOSED_ROW_ORDER}`)
+        .all(projectId).find((r) => r.name.toLowerCase() === needle);
+}
+export function findAgent(projectId, ref) {
+    if (ref.agent_id != null) {
+        return getAgentRow(projectId, ref.agent_id, "Call agent_list.");
+    }
+    if (ref.name) {
+        const rows = db
+            .prepare("SELECT * FROM agents WHERE project_id = ? AND status = 'running' ORDER BY id")
+            .all(projectId);
+        const exact = rows.filter((r) => r.name === ref.name);
+        if (exact.length === 1)
+            return exact[0];
+        if (exact.length > 1) {
+            throw new Error(`Multiple running agents named "${ref.name}". Target by agent_id instead.`);
+        }
+        const needle = ref.name.toLowerCase();
+        const sameName = rows.filter((r) => r.name.toLowerCase() === needle);
+        if (sameName.length === 1)
+            return sameName[0];
+        const closed = closedAgentNamed(projectId, needle);
+        if (closed) {
+            if (closed.parked_at) {
+                throw new Error(`Agent ${closed.id} ("${closed.name}") is PARKED, not finished - it was paused on ` +
+                    `${closed.parked_at} and its session is waiting. Bring it back with agent_resume(agent_id: ` +
+                    `${closed.id}), or abandon the park with agent_close(agent_id: ${closed.id}).`);
+            }
+            const remedy = closed.kind === LEAD_KIND ? "Run `hive lead` to start a new one" : "Spawn a new worker";
+            throw new Error(`Agent ${closed.id} ("${closed.name}") is closed. ${remedy}, or target a running one by name or agent_id.`);
+        }
+        const partial = rows.filter((r) => r.name.toLowerCase().includes(needle));
+        if (partial.length === 1)
+            return partial[0];
+        if (partial.length > 1) {
+            const candidates = partial.map((r) => `${r.name} (agent_id ${r.id})`).join(", ");
+            throw new Error(`"${ref.name}" matches ${partial.length} running agents: ${candidates}. Use the full name or agent_id.`);
+        }
+        if (/^\d+$/.test(ref.name)) {
+            const id = Number(ref.name);
+            if (Number.isSafeInteger(id)) {
+                const byId = db
+                    .prepare("SELECT * FROM agents WHERE project_id = ? AND id = ? AND status = 'running'")
+                    .get(projectId, id);
+                if (byId)
+                    return byId;
+            }
+        }
+        else if (/^[a-z]+:\d+$/i.test(ref.name)) {
+            const byActorId = db
+                .prepare("SELECT * FROM agents WHERE project_id = ? AND actor_id = ? AND status = 'running'")
+                .get(projectId, ref.name);
+            if (byActorId)
+                return byActorId;
+        }
+        throw new Error(`No running agent matching "${ref.name}" in project ${projectId}. Call agent_list.`);
+    }
+    throw new Error("Pass agent_id or name.");
+}
+export const PROBE_FAILED_NOTE = "tmux could not be probed, so liveness is unknown. Nothing was changed. Retry in a few seconds.";
+const unknownOwnershipNote = (snapshot) => observationFailed(snapshot) ? PROBE_FAILED_NOTE : UNVERIFIED_OWNERSHIP_NOTE;
+export const UNVERIFIED_OWNERSHIP_NOTE = "This row's pane cannot be verified as its own: it is on another tmux socket, or no pane pid was recorded for it, so liveness is unknown and no screen was read. Nothing was changed. If the row is stale, a human or peer lead can retire it with agent_close(row_only=true).";
+export const probeFailed = (agent) => new Error(`Agent ${agent.id} ("${agent.name}"): ${PROBE_FAILED_NOTE}`);
+// A failed probe throws rather than answering unknown, so callers keep the retry wording.
+export function observeOwnership(agent) {
+    const ownership = observeRowOwnership(agent);
+    if (ownership === "probe-failed")
+        throw probeFailed(agent);
+    return ownership;
+}
+export const REISSUED_PANE_NOTE = "Its recorded pane id now belongs to a different process (the recorded pane pid no longer matches), so its own process is gone and the pane is someone else's. Nothing was typed, read or killed there.";
+export function notOwnedError(agent, ownership) {
+    const who = `Agent ${agent.id} ("${agent.name}")`;
+    if (ownership === "gone") {
+        return new Error(`${who} has no live tmux window (its process exited or the window was killed). Close it with agent_close and spawn a new one.`);
+    }
+    if (ownership === "reissued") {
+        return new Error(`${who}: pane ownership reads reissued. ${REISSUED_PANE_NOTE} Close the row with agent_close, which retires it without touching that pane.`);
+    }
+    return new Error(`${who}: pane ownership reads unknown. ${UNVERIFIED_OWNERSHIP_NOTE}`);
+}
+export function summaryLiveness(row, snapshot) {
+    if (row.status !== "running")
+        return false;
+    return ownershipLiveness(rowOwnership(row, snapshot));
+}

package/dist/backup.js

@@ -2,7 +2,7 @@ import SqliteDb from "better-sqlite3";
 import { randomUUID } from "node:crypto";
 import { cpSync, existsSync, mkdirSync, readdirSync, renameSync, rmSync, statSync } from "node:fs";
 import { join } from "node:path";
-import { errorMessage } from "./result.js";
+import { errorMessage } from "./errors.js";
 export const BACKUP_DIRNAME = "backups";
 export function backupsDir(dataDir) {
     return join(dataDir, BACKUP_DIRNAME);

package/dist/build-info.json

@@ -1 +1 @@
-{"version":"1.11.5","sha":"486161d","dirty":false,"build_id":"3a33da919c1ac52f423bfdb530cfeda01207921e9c0fb8b262462fae1c266b12"}
+{"version":"1.11.6","sha":"b4e9fb0","dirty":false,"build_id":"fb0debbc0e5e030650660c10505b25c26e60160403f384ce900920146e639961"}

package/dist/cli.js

@@ -23,7 +23,8 @@ import { confirmQueenWrite, listQueenAudit } from "./queenAudit.js";
 import { formatRowCounts, projectRowCounts, removeProject } from "./projectRemove.js";
 import { ensureHooksFile, ensureLeadHooksFile } from "./hooks.js";
 import { errorMessage, registrationNoticeText, withTrailingNewline } from "./result.js";
-import { ACTIVE_TIMER_WHERE, socketAwaitingWhere, dashboardFileContained, describeStall, HELD_REASON_UNCLASSIFIABLE_PANE_PREFIX, HELD_REASON_UNSUBMITTED_INPUT_PREFIX, janitor, resolveDashboardFile, generateQueenDashboardNow, transcriptStaleness, } from "./scheduler.js";
+import { socketAwaitingWhere, dashboardFileContained, describeStall, HELD_REASON_UNCLASSIFIABLE_PANE_PREFIX, HELD_REASON_UNSUBMITTED_INPUT_PREFIX, janitor, resolveDashboardFile, generateQueenDashboardNow, transcriptStaleness, } from "./scheduler.js";
+import { ACTIVE_TIMER_WHERE } from "./wakeSql.js";
 import { readTurnCount } from "./turnCount.js";
 import { leadSessionEnded } from "./leadState.js";
 import { heldReasonLabel } from "./heldLabel.js";
@@ -47,9 +48,9 @@ import { FIRST_MESSAGE_SHA_ENV, firstMessageDigest } from "./firstMessage.js";
 import { ageSecondsSince, deriveProvenance, describeForHuman, describeLastLogEvent, humanizeAge, lastLogEvent, lastPermissionMode, reportsAgentStateLog, } from "./stateProvenance.js";
 import { awaitingFirstPromptSql } from "./firstPrompt.js";
 import { checkoutRoot, createProfile, forkProfile, PROFILE_FILES, ProfileError, profileExists, profileFileNames, profileNames, profileStatus, readProfileFile, referencedPads, referencedPaths, renderProfileFile, resolveProfileFile, REWRITE_THRESHOLD, templateVars, userProfilesDir, } from "./profiles.js";
-import { getTodoDetail, listTodoSummaries, TODO_STATUSES, } from "./tools/todos.js";
-import { ACTIVE_TODO_SQL, OPEN_BLOCKERS_SQL } from "./todoScope.js";
-import { createPad, getActivePadByName, listActivePads, overwritePadContent, } from "./tools/pads.js";
+import { getTodoDetail, listTodoSummaries, } from "./todos.js";
+import { ACTIVE_TODO_SQL, OPEN_BLOCKERS_SQL, TODO_STATUSES } from "./todoScope.js";
+import { createPad, getActivePadByName, listActivePads, overwritePadContent, } from "./pads.js";
 import { answerQuestion, listQuestions } from "./questions.js";
 function usage() {
     console.log(`hive — run a crew of Claude Code and Codex workers from one lead session

package/dist/context.js

@@ -3,9 +3,9 @@ import { userInfo } from "node:os";
 import { basename, dirname, join, resolve, sep } from "node:path";
 import { storeDir } from "./dataDir.js";
 import { db } from "./db.js";
-import { LEAD_KIND } from "./spawn.js";
+import { LEAD_KIND } from "./agentKinds.js";
 import { rowOwnership } from "./tmux.js";
-import { recordQueenRefusal } from "./queenAudit.js";
+import { recordQueenRefusal } from "./queenAuditStore.js";
 import { gitOut } from "./git.js";
 let selectedId = null;
 let cachedActorId = null;

package/dist/crew.js

@@ -8,7 +8,7 @@ import { ACTIVE_TODO_SQL } from "./todoScope.js";
 import { pendingQuestionCount } from "./questions.js";
 import { loadProjectYml } from "./projectYml.js";
 import { parseTags } from "./result.js";
-import { ACTIVE_TIMER_WHERE } from "./scheduler.js";
+import { ACTIVE_TIMER_WHERE } from "./wakeSql.js";
 import { reportsAgentStateLog } from "./stateProvenance.js";
 import { gitOut } from "./git.js";
 import { liveTargets, rowOwnership } from "./tmux.js";

package/dist/dashboard.js

@@ -1,5 +1,6 @@
 import { createHash } from "node:crypto";
-import { createRequire } from "node:module";
+import { listQuestions, pendingQuestionCount } from "./questions.js";
+import { ACTIVE_TIMER_WHERE } from "./wakeSql.js";
 import { db } from "./db.js";
 import { ACTIVE_TODO_SQL, NOT_COMPLETED_TODO_SQL, OPEN_BLOCKERS_SQL } from "./todoScope.js";
 import { getProject } from "./context.js";
@@ -14,7 +15,6 @@ export function processCounts(procs) {
 }
 import { awaitingFirstPrompt } from "./firstPrompt.js";
 import { SLUG_MAX_LEN, cutToUnitBudget } from "./slug.js";
-const requireFromHere = createRequire(import.meta.url);
 export const TODO_CAP = 100;
 export const AGENT_CAP = 50;
 export const WAKE_CAP = 50;
@@ -87,7 +87,6 @@ function fetchProject(projectId) {
         throw new Error(`No project ${projectId}.`);
     return row;
 }
-const PENDING_WAKE_WHERE = "cancelled_at IS NULL AND (fired_at IS NULL OR repeat_every_ms IS NOT NULL)";
 function agentStatusLevel(state) {
     if (state === "working")
         return "live";
@@ -121,7 +120,7 @@ function fetchNowAgents(projectId) {
 function fetchNextWake(projectId) {
     return db
         .prepare(`SELECT kind, due_at, max_wait_at, deliver_actor FROM wakes
-       WHERE project_id = ? AND ${PENDING_WAKE_WHERE}
+       WHERE project_id = ? AND ${ACTIVE_TIMER_WHERE}
        ORDER BY COALESCE(due_at, max_wait_at, created_at) LIMIT 1`)
         .get(projectId);
 }
@@ -428,7 +427,7 @@ function renderThroughputSection(index, stats) {
 function renderWakesSection(index, projectId) {
     const all = db
         .prepare(`SELECT id, kind, body, owner, deliver_actor, due_at, max_wait_at, fire_count, repeat_every_ms, held_at
-       FROM wakes WHERE project_id = ? AND ${PENDING_WAKE_WHERE}
+       FROM wakes WHERE project_id = ? AND ${ACTIVE_TIMER_WHERE}
        ORDER BY COALESCE(due_at, max_wait_at, created_at)`)
         .all(projectId);
     const shown = all.slice(0, WAKE_CAP);
@@ -462,8 +461,6 @@ function questionAge(createdAt) {
     return "now";
 }
 function renderQuestionsSection(index, projectId) {
-    // A static import of questions.js cycles through tools/wakes.ts and scheduler.ts.
-    const { listQuestions, pendingQuestionCount } = requireFromHere("./questions.js");
     const questions = listQuestions(projectId);
     if (questions.length === 0)
         return "";

package/dist/db.js

@@ -4,7 +4,7 @@ import { join } from "node:path";
 import { guardAbi } from "./abi.js";
 import { guardStoreDir } from "./dataDir.js";
 import { maybeBackupBeforeMigrations } from "./backup.js";
-import { errorMessage } from "./result.js";
+import { errorMessage } from "./errors.js";
 export const dataDir = guardStoreDir();
 mkdirSync(dataDir, { recursive: true });
 function sleepSync(ms) {

package/dist/errors.js

@@ -0,0 +1,3 @@
+export function errorMessage(e) {
+    return e instanceof Error ? e.message : String(e);
+}

package/dist/globalConfig.js

@@ -3,7 +3,7 @@ import { chmodSync, closeSync, lstatSync, mkdirSync, openSync, readFileSync, ren
 import { basename, dirname, join } from "node:path";
 import { isMap, parse, parseDocument } from "yaml";
 import { storeDir } from "./dataDir.js";
-import { errorMessage } from "./result.js";
+import { errorMessage } from "./errors.js";
 export const ATTACH_MODES = ["auto", "raw", "control"];
 export const AUTO_ATTACH_MODES = ["auto", "on", "off"];
 export function isAttachMode(value) {

package/dist/kickoff.js

@@ -17,9 +17,9 @@ export function truncate(text, limit) {
 async function digest(projectPath, profile, warnings) {
     const { migrate, db } = await import("./db.js");
     const { findProjectForCwd } = await import("./context.js");
-    const { ACTIVE_TIMER_WHERE } = await import("./scheduler.js");
-    const { getActivePadByName } = await import("./tools/pads.js");
     const { ACTIVE_TODO_SQL, OPEN_BLOCKERS_SQL } = await import("./todoScope.js");
+    const { ACTIVE_TIMER_WHERE } = await import("./wakeSql.js");
+    const { getActivePadByName } = await import("./pads.js");
     migrate();
     const project = findProjectForCwd();
     if (!project || project.path !== projectPath)

package/dist/leadLaunch.js

@@ -4,7 +4,7 @@ import { carriesNameFlag } from "./harnesses.js";
 import { join } from "node:path";
 import { checkoutRoot, renderProfileFile, resolveProfileFile } from "./profiles.js";
 import { activeProfile, configHash, mergedProjectVars } from "./projectYml.js";
-import { LEAD_NAME } from "./spawn.js";
+import { LEAD_NAME } from "./agentKinds.js";
 import { shellQuote } from "./tmux.js";
 // What `hive lead` and the handoff bootstrap both need to launch a claude lead: trust, posture,
 // hooks and identity env. Pane adoption and leftover cleanup stay in cmdLead.

package/dist/leadWatch.js

@@ -1,7 +1,7 @@
 import { db } from "./db.js";
 import { paneClassifierFor } from "./harnesses.js";
 import { readLeadTurnState } from "./leadState.js";
-import { LEAD_KIND } from "./spawn.js";
+import { LEAD_KIND } from "./agentKinds.js";
 import { foreignSocket, holdsHumanInput, observationFailed, rowOwnership } from "./tmux.js";
 export const LEAD_TARGET_GONE = "LEAD_TARGET_GONE";
 export const LEAD_TARGET_REISSUED = "LEAD_TARGET_REISSUED";

package/dist/pads.js

@@ -0,0 +1,70 @@
+import { db } from "./db.js";
+import { currentActor } from "./context.js";
+export function splitsSurrogatePair(content, index) {
+    if (index <= 0 || index >= content.length)
+        return false;
+    const before = content.charCodeAt(index - 1);
+    const after = content.charCodeAt(index);
+    return before >= 0xd800 && before <= 0xdbff && after >= 0xdc00 && after <= 0xdfff;
+}
+function selectPad(projectId, padId, columns) {
+    const row = db.prepare(`SELECT ${columns} FROM pads WHERE project_id = ? AND id = ?`).get(projectId, padId);
+    if (!row)
+        throw new Error(`No pad with id ${padId} in project ${projectId}. Call pad_list.`);
+    return row;
+}
+export function getPad(projectId, padId) {
+    return selectPad(projectId, padId, "*");
+}
+export function getPadMeta(projectId, padId) {
+    return selectPad(projectId, padId, "id, name, revision, archived");
+}
+function revisionMismatchError(padId, expected, current) {
+    if (current == null) {
+        return new Error(`Pad ${padId} no longer exists; it may have just been deleted by another write. Call pad_list to confirm.`);
+    }
+    return new Error(`Revision mismatch for pad ${padId}: expected ${expected}, current ${current}. Re-read with pad_read and retry.`);
+}
+function currentRevisionOrDeleted(padId) {
+    const row = db.prepare("SELECT revision FROM pads WHERE id = ?").get(padId);
+    return row?.revision ?? null;
+}
+export function assertRowChanged(padId, predicateRevision, changed) {
+    if (!changed)
+        throw revisionMismatchError(padId, predicateRevision, currentRevisionOrDeleted(padId));
+}
+export function checkRevision(pad, expected, required) {
+    if (expected == null) {
+        if (required)
+            throw new Error(`expected_revision is required to overwrite pad ${pad.id}. Current revision: ${pad.revision}. Read it first with pad_read.`);
+        return;
+    }
+    if (expected !== pad.revision)
+        throw revisionMismatchError(pad.id, expected, pad.revision);
+}
+export function bumpPad(padId, predicateRevision, set, ...params) {
+    const where = predicateRevision != null ? "id = ? AND revision = ?" : "id = ?";
+    const whereParams = predicateRevision != null ? [padId, predicateRevision] : [padId];
+    const row = db.prepare(`UPDATE pads SET ${set}, revision = revision + 1,
+       updated_by = ?, updated_at = datetime('now') WHERE ${where} RETURNING revision`).get(...params, currentActor(), ...whereParams);
+    assertRowChanged(padId, predicateRevision, row != null);
+    return row.revision;
+}
+export const APPEND_WITH_SEPARATOR_SET = "content = content || (CASE WHEN content = '' OR substr(content, -1) = char(10) THEN '' ELSE char(10) END) || ?";
+export function getActivePadByName(projectId, name) {
+    return db.prepare("SELECT * FROM pads WHERE project_id = ? AND name = ? AND archived = 0").get(projectId, name);
+}
+export function listActivePads(projectId) {
+    return db.prepare(`SELECT name, revision, length(content) AS content_length, updated_by, updated_at
+       FROM pads WHERE project_id = ? AND archived = 0 ORDER BY name`).all(projectId);
+}
+export function overwritePadContent(projectId, padId, content, expectedRevision) {
+    const pad = getPadMeta(projectId, padId);
+    checkRevision(pad, expectedRevision, true);
+    return bumpPad(padId, pad.revision, "content = ?", content);
+}
+export function createPad(projectId, name, content, tags) {
+    const row = db.prepare(`INSERT OR IGNORE INTO pads (project_id, name, content, tags, updated_by)
+       VALUES (?, ?, ?, ?, ?) RETURNING id`).get(projectId, name, content, JSON.stringify(tags), currentActor());
+    return row?.id ?? null;
+}

package/dist/portfolio.js

@@ -4,6 +4,8 @@ import { existsSync } from "node:fs";
 import { parseTags } from "./result.js";
 import { ACTIVE_TODO_SQL, OPEN_BLOCKERS_SQL } from "./todoScope.js";
 import { pendingQuestionCount } from "./questions.js";
+import { ACTIVE_TIMER_WHERE as ACTIVE_WAKE_WHERE } from "./wakeSql.js";
+export { ACTIVE_WAKE_WHERE };
 import { leadSessionEnded, readLeadTurnState } from "./leadState.js";
 import { liveTargets, ownershipLiveness, rowOwnership } from "./tmux.js";
 export const PORTFOLIO_REASONS = [
@@ -26,7 +28,6 @@ const NEEDS_HUMAN_ITEM_CAP = 5;
 const WAKE_OVERDUE_GRACE = "-5 minutes";
 const STALE_IN_PROGRESS = "-48 hours";
 const WAKE_UPCOMING = "+24 hours";
-export const ACTIVE_WAKE_WHERE = "cancelled_at IS NULL AND (fired_at IS NULL OR repeat_every_ms IS NOT NULL)";
 export function leadText(p) {
     return p.lead.state === "alive" && p.lead.turn !== "unknown"
         ? `alive, turn ${p.lead.turn === "working" ? "working" : "ended"}`

package/dist/projectRemove.js

@@ -1,6 +1,6 @@
 import { backupNow } from "./backup.js";
 import { dataDir, db } from "./db.js";
-import { LEAD_KIND } from "./spawn.js";
+import { LEAD_KIND } from "./agentKinds.js";
 import { foreignSocket, liveTargets, observationFailed, rowOwnership } from "./tmux.js";
 export const PROJECT_OWNER_TABLES = [
     "pads",

package/dist/projectYml.js

@@ -4,7 +4,7 @@ import { resolve, sep } from "node:path";
 import { parse } from "yaml";
 import { harnessNames } from "./harnesses.js";
 import { isValidProfileName } from "./profiles.js";
-import { errorMessage } from "./result.js";
+import { errorMessage } from "./errors.js";
 import { isWindowLayout, WINDOW_LAYOUTS } from "./tmux.js";
 import { globalConfigPath, isEmptyYamlDocument, readGlobalConfig, resolveAttachSetting, } from "./globalConfig.js";
 export const BUILT_IN_PROJECT_YML = Object.freeze({

package/dist/queenAudit.js

@@ -1,11 +1,8 @@
 import { captureQueenWriteIdentity, effectiveProjectId, isQueenLead } from "./context.js";
+import { insertQueenAuditRow, QUEEN_AUDIT_DEFAULT_LIMIT, QUEEN_AUDIT_MAX_LIMIT, QUEEN_AUDIT_SUMMARY_MAX, } from "./queenAuditStore.js";
 import { db } from "./db.js";
 import { cutToUnitBudget, flatten } from "./slug.js";
-export const QUEEN_AUDIT_SUMMARY_MAX = 160;
-export const QUEEN_AUDIT_DEFAULT_LIMIT = 20;
-export const QUEEN_AUDIT_MAX_LIMIT = 100;
-export const QUEEN_AUDIT_RETENTION = "-30 days";
-export const QUEEN_AUDIT_MAX_ROWS = 20_000;
+export { QUEEN_AUDIT_DEFAULT_LIMIT, QUEEN_AUDIT_MAX_LIMIT, QUEEN_AUDIT_MAX_ROWS, QUEEN_AUDIT_RETENTION, QUEEN_AUDIT_SUMMARY_MAX, recordQueenRefusal, } from "./queenAuditStore.js";
 function resource(type, value) {
     return typeof value === "number" && Number.isInteger(value) && value > 0 ? { type, id: value } : null;
 }
@@ -13,11 +10,6 @@ function removalSummary(r) {
     const counts = Object.entries((r.counts ?? {})).map(([t, n]) => `${t} ${n}`);
     return `removed project "${r.name}"${counts.length > 0 ? ` with ${counts.join(", ")}` : ""}`;
 }
-function insertQueenAuditRow(operation, targetProjectId, identity, resourceType, resourceId, summary, outcome = "confirmed", problem = "") {
-    db.prepare(`INSERT INTO queen_audit
-       (actor_id, home_project_id, target_project_id, operation, resource_type, resource_id, summary, outcome, problem)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(identity.actor_id, identity.home_project_id, targetProjectId, operation, resourceType, resourceId, summary, outcome, problem);
-}
 export const QUEEN_AUDIT_OPERATIONS = {
     todo_create: {
         mode: "database",
@@ -85,14 +77,6 @@ function insertAudit(operation, targetProjectId, args, receipt, identity) {
     const summary = text.length <= QUEEN_AUDIT_SUMMARY_MAX ? text : cutToUnitBudget(text, QUEEN_AUDIT_SUMMARY_MAX - 1) + "…";
     insertQueenAuditRow(operation, targetProjectId, identity, touched.type, touched.id, summary);
 }
-export function recordQueenRefusal(operation, targetProjectId, problem, identity) {
-    const text = flatten(problem);
-    const summaryText = `refused: ${text}`;
-    const summary = summaryText.length <= QUEEN_AUDIT_SUMMARY_MAX
-        ? summaryText
-        : cutToUnitBudget(summaryText, QUEEN_AUDIT_SUMMARY_MAX - 1) + "…";
-    insertQueenAuditRow(operation, targetProjectId, identity, "project", targetProjectId, summary, "refused", text);
-}
 export function commitQueenStateWrite(operation, targetProjectId, args, mutate) {
     const identity = captureQueenWriteIdentity(targetProjectId);
     if (!identity)

package/dist/queenAuditStore.js

@@ -0,0 +1,20 @@
+import { db } from "./db.js";
+import { cutToUnitBudget, flatten } from "./slug.js";
+export const QUEEN_AUDIT_SUMMARY_MAX = 160;
+export const QUEEN_AUDIT_DEFAULT_LIMIT = 20;
+export const QUEEN_AUDIT_MAX_LIMIT = 100;
+export const QUEEN_AUDIT_RETENTION = "-30 days";
+export const QUEEN_AUDIT_MAX_ROWS = 20_000;
+export function insertQueenAuditRow(operation, targetProjectId, identity, resourceType, resourceId, summary, outcome = "confirmed", problem = "") {
+    db.prepare(`INSERT INTO queen_audit
+       (actor_id, home_project_id, target_project_id, operation, resource_type, resource_id, summary, outcome, problem)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(identity.actor_id, identity.home_project_id, targetProjectId, operation, resourceType, resourceId, summary, outcome, problem);
+}
+export function recordQueenRefusal(operation, targetProjectId, problem, identity) {
+    const text = flatten(problem);
+    const summaryText = `refused: ${text}`;
+    const summary = summaryText.length <= QUEEN_AUDIT_SUMMARY_MAX
+        ? summaryText
+        : cutToUnitBudget(summaryText, QUEEN_AUDIT_SUMMARY_MAX - 1) + "…";
+    insertQueenAuditRow(operation, targetProjectId, identity, "project", targetProjectId, summary, "refused", text);
+}

package/dist/questions.js

@@ -1,6 +1,6 @@
 import { db } from "./db.js";
 import { HUMAN_ACTOR_PREFIX } from "./context.js";
-import { assertSafeWakeBody, resolveWakeDelivery } from "./tools/wakes.js";
+import { assertSafeWakeBody, resolveWakeDelivery } from "./wakeTarget.js";
 const QUESTION_STATE_CONFLICT = "QUESTION_STATE_CONFLICT";
 const HEADER_MAX_CHARS = 12;
 const MIN_OPTIONS = 2;

package/dist/result.js

@@ -1,7 +1,6 @@
 import { runningBuildChange, runningBuildNotice } from "./version.js";
-export function errorMessage(e) {
-    return e instanceof Error ? e.message : String(e);
-}
+import { errorMessage } from "./errors.js";
+export { errorMessage } from "./errors.js";
 function ok(data) {
     const text = typeof data === "string" ? data : JSON.stringify(data, null, 1);
     return { content: [{ type: "text", text }] };

package/dist/scheduler.js

@@ -1,4 +1,6 @@
 import { QUEEN_AUDIT_RETENTION, QUEEN_AUDIT_MAX_ROWS, recentQueenAudit } from "./queenAudit.js";
+import { ACTIVE_TIMER_WHERE } from "./wakeSql.js";
+export { ACTIVE_TIMER_WHERE } from "./wakeSql.js";
 import { runningBuildChange, runningBuildNotice, versionInfo } from "./version.js";
 import { existsSync, lstatSync, mkdirSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { createHash } from "node:crypto";
@@ -13,7 +15,8 @@ import { getProjectByPath, listProjects, queenHomeDir } from "./context.js";
 import { collectPortfolio } from "./portfolio.js";
 import { QUEEN_GENERATED_MARKER, readQueenBrief, renderQueenDashboard } from "./queenDashboard.js";
 import { COMMAND_KIND, stoppingMarkerLive } from "./processes.js";
-import { closeAgentRow, isLeadActorId, LEAD_ACTOR_PREFIX, LEAD_KIND, PaneOwnershipLost, reapCodexHomeForClosedAgent, requireStillOwned, } from "./spawn.js";
+import { closeAgentRow, PaneOwnershipLost, reapCodexHomeForClosedAgent, requireStillOwned, } from "./spawn.js";
+import { isLeadActorId, LEAD_ACTOR_PREFIX, LEAD_KIND, } from "./agentKinds.js";
 import { awaitingFirstPrompt, awaitingFirstPromptSql } from "./firstPrompt.js";
 import { evaluateLeadWatch, leadSubscription } from "./leadWatch.js";
 import { describeLiveTasks, describeOneTask, liveBackgroundTasks, STALL_BOUND_SECONDS, } from "./backgroundTasks.js";
@@ -56,7 +59,6 @@ function deliveryOwnership(row, snapshot) {
         return "closed";
     return rowOwnership(deliveryIdentity(row), snapshot);
 }
-export const ACTIVE_TIMER_WHERE = "cancelled_at IS NULL AND (fired_at IS NULL OR repeat_every_ms IS NOT NULL)";
 const SETTLE_WINDOW = "-15 seconds";
 const prepared = new Map();
 function stmt(sql) {

package/dist/spawn.js

@@ -1,6 +1,7 @@
 import { existsSync } from "node:fs";
 import { preservedRolloutPath, reapCodexHome } from "./codexHome.js";
 import { getProject } from "./context.js";
+import { LEAD_KIND, LEAD_NAME } from "./agentKinds.js";
 import { gitOut } from "./git.js";
 import { dataDir, db } from "./db.js";
 import { loadProjectYml } from "./projectYml.js";
@@ -113,13 +114,8 @@ export function asNameClash(e, name) {
     }
     return e;
 }
-export const LEAD_KIND = "lead";
-export const LEAD_ACTOR_PREFIX = `${LEAD_KIND}:`;
-export const isLeadActorId = (actorId) => actorId.startsWith(LEAD_ACTOR_PREFIX);
-export const mintLeadActorId = (agentId) => `${LEAD_ACTOR_PREFIX}${agentId}`;
+export { LEAD_ACTOR_PREFIX, LEAD_KIND, LEAD_NAME, isLeadActorId, isReservedAgentName, mintLeadActorId } from "./agentKinds.js";
 export const isRunningLeadActor = (actorId) => !!db.prepare("SELECT 1 FROM agents WHERE actor_id = ? AND kind = ? AND status = 'running'").get(actorId, LEAD_KIND);
-export const LEAD_NAME = LEAD_KIND;
-export const isReservedAgentName = (name) => name.toLowerCase() === LEAD_NAME;
 export function upsertActor(actorId, name, kind) {
     db.prepare(`INSERT INTO actors (id, name, kind) VALUES (?, ?, ?)
      ON CONFLICT(id) DO UPDATE SET name = excluded.name, last_seen_at = datetime('now')`).run(actorId, name, kind);

package/dist/todoScope.js

@@ -1,3 +1,4 @@
+export const TODO_STATUSES = ["open", "in_progress", "backlog", "completed"];
 export const ACTIVE_TODO_SQL = "t.status IN ('open', 'in_progress') AND t.archived_at IS NULL";
 export const NOT_COMPLETED_TODO_SQL = "status != 'completed'";
 export const OPEN_BLOCKERS_FROM_WHERE = `FROM todo_blockers b JOIN todos bt ON bt.id = b.blocker_id

package/dist/todos.js

@@ -0,0 +1,90 @@
+import { db } from "./db.js";
+import { matchesAnyTag, parseTags } from "./result.js";
+import { fallbackSlug } from "./slug.js";
+import { OPEN_BLOCKERS_FROM_WHERE } from "./todoScope.js";
+export const COMMENT_COUNT_SQL = `(SELECT COUNT(*) FROM todo_comments c WHERE c.todo_id = t.id)`;
+const SUMMARY_SQL = `
+  SELECT t.*,
+    (SELECT COUNT(*) ${OPEN_BLOCKERS_FROM_WHERE}) AS open_blockers,
+    ${COMMENT_COUNT_SQL} AS comment_count
+  FROM todos t`;
+export function getTodo(projectId, todoId) {
+    const row = db
+        .prepare(`${SUMMARY_SQL} WHERE t.project_id = ? AND t.id = ?`)
+        .get(projectId, todoId);
+    if (!row)
+        throw new Error(`No todo with id ${todoId} in project ${projectId}. Call todo_list.`);
+    return row;
+}
+function summarize(row) {
+    return {
+        todo_id: row.id,
+        title: row.title,
+        slug: row.slug || fallbackSlug(row.title) || `todo ${row.id}`,
+        status: row.status,
+        priority: row.priority,
+        tags: parseTags(row.tags),
+        archived: row.archived_at != null,
+        is_blocked: (row.open_blockers ?? 0) > 0,
+        open_blockers: row.open_blockers ?? 0,
+        comment_count: row.comment_count ?? 0,
+        updated_at: row.updated_at,
+    };
+}
+export function listTodoSummaries(projectId, filter = {}) {
+    const limit = Math.min(filter.limit ?? 50, 200);
+    const offset = filter.offset ?? 0;
+    let sql = `${SUMMARY_SQL} WHERE t.project_id = ?`;
+    const params = [projectId];
+    if (!filter.includeArchived) {
+        sql += " AND t.archived_at IS NULL";
+    }
+    if (filter.statuses && filter.statuses.length > 0) {
+        sql += ` AND t.status IN (${filter.statuses.map(() => "?").join(",")})`;
+        params.push(...filter.statuses);
+    }
+    if (filter.priority) {
+        sql += " AND t.priority = ?";
+        params.push(filter.priority);
+    }
+    if (filter.query) {
+        sql += " AND (t.title LIKE ? OR t.body LIKE ? OR t.slug LIKE ?)";
+        params.push(`%${filter.query}%`, `%${filter.query}%`, `%${filter.query}%`);
+    }
+    sql += " ORDER BY t.updated_at DESC";
+    let rows = db.prepare(sql).all(...params).filter((r) => matchesAnyTag(r.tags, filter.tags));
+    if (filter.isBlocked != null) {
+        rows = rows.filter((r) => ((r.open_blockers ?? 0) > 0) === filter.isBlocked);
+    }
+    return {
+        total_count: rows.length,
+        offset,
+        limit,
+        todos: rows.slice(offset, offset + limit).map(summarize),
+    };
+}
+export function getTodoDetail(projectId, todoId, includeComments) {
+    const todo = getTodo(projectId, todoId);
+    const blockers = db
+        .prepare(`SELECT t.id, t.title, t.status FROM todo_blockers b
+       JOIN todos t ON t.id = b.blocker_id WHERE b.todo_id = ?`)
+        .all(todo.id);
+    const blocking = db
+        .prepare(`SELECT t.id, t.title, t.status FROM todo_blockers b
+       JOIN todos t ON t.id = b.todo_id WHERE b.blocker_id = ?`)
+        .all(todo.id);
+    const result = {
+        ...summarize(todo),
+        body: todo.body,
+        created_at: todo.created_at,
+        completed_at: todo.completed_at,
+        blockers,
+        blocking,
+    };
+    if (includeComments) {
+        result.comments = db
+            .prepare("SELECT id, author, body, created_at FROM todo_comments WHERE todo_id = ? ORDER BY created_at")
+            .all(todo.id);
+    }
+    return result;
+}

package/dist/tools/agents.js

@@ -2,6 +2,8 @@ import { existsSync, rmSync, statSync, realpathSync } from "node:fs";
 import { randomUUID } from "node:crypto";
 import { z } from "zod";
 import { db } from "../db.js";
+import { CLOSED_ROW_ORDER, findAgent, getAgentRow, notOwnedError, observeOwnership, PROBE_FAILED_NOTE, summaryLiveness, UNVERIFIED_OWNERSHIP_NOTE } from "../agentRecords.js";
+export { CLOSED_ROW_ORDER, findAgent, getAgentRow, notOwnedError, observeOwnership, probeFailed, PROBE_FAILED_NOTE, REISSUED_PANE_NOTE, summaryLiveness, UNVERIFIED_OWNERSHIP_NOTE } from "../agentRecords.js";
 import { confirmQueenWrite } from "../queenAudit.js";
 import { captureQueenWriteIdentity, resolveQueenLeadTarget } from "../context.js";
 import { agentBriefPath, mergedBriefVars, readAgentBrief, workerBrief, workerCommandString, writeAgentBrief, } from "../brief.js";
@@ -18,21 +20,10 @@ import { agentIdentityEnv, branchAt, closeAgentRow, currentOwnership, discardOrp
 import { COMMAND_KIND, runningCommandRow, stopLine, stopProcess, STOP_REASONS } from "../processes.js";
 import { readContextTokens, readContextFill, resolveTranscriptDir } from "../transcript.js";
 import { leadSessionEnded } from "../leadState.js";
-import { capturePane, captureFinalScreen, DEFAULT_LAYOUT, cancelCopyMode, describePaneChoice, ensureAttached, findUnsafeControlChar, holdsHumanInput, liveTargets, observationFailed, observeRowOwnership, ownershipLiveness, paneCurrentCommand, paneInCopyMode, pollPaneReadiness, rowOwnership, sendText, sessionName, setRemainOnExit, sleep, TEXT_ALLOWED_CONTROL_CHARS, tmux, TmuxTimeoutError, WINDOW_LAYOUTS, } from "../tmux.js";
+import { capturePane, captureFinalScreen, DEFAULT_LAYOUT, cancelCopyMode, describePaneChoice, ensureAttached, findUnsafeControlChar, holdsHumanInput, liveTargets, observationFailed, ownershipLiveness, paneCurrentCommand, paneInCopyMode, pollPaneReadiness, rowOwnership, sendText, sessionName, setRemainOnExit, sleep, TEXT_ALLOWED_CONTROL_CHARS, tmux, TmuxTimeoutError, WINDOW_LAYOUTS, } from "../tmux.js";
 import { agentIdParam, agentNameParam, idParam, projectIdParam } from "./params.js";
 import { deriveProvenance, lastLogEvent, lastPermissionMode, reportsAgentStateLog, } from "../stateProvenance.js";
-const CLOSED_ROW_ORDER = "(parked_at != '') DESC, closed_at DESC, id DESC";
-function closedAgentNamed(projectId, needle) {
-    return db
-        .prepare(`SELECT id, name, kind, parked_at FROM agents WHERE project_id = ? AND status != 'running' ORDER BY ${CLOSED_ROW_ORDER}`)
-        .all(projectId).find((r) => r.name.toLowerCase() === needle);
-}
-function getAgentRow(projectId, id, notFoundHint) {
-    const row = db.prepare("SELECT * FROM agents WHERE project_id = ? AND id = ?").get(projectId, id);
-    if (!row)
-        throw new Error(`No agent ${id} in project ${projectId}. ${notFoundHint}`);
-    return row;
-}
+const unknownOwnershipNote = (snapshot) => observationFailed(snapshot) ? PROBE_FAILED_NOTE : UNVERIFIED_OWNERSHIP_NOTE;
 export function classifyLostCas(row) {
     return row.status !== "running" ? { outcome: "retired", parked: !!row.parked_at } : { outcome: "revived" };
 }
@@ -42,62 +33,6 @@ function revivedError(agent, live, cause, remedy) {
         (live ? " after this call's kill-pane took the old one down" : "") +
         `. ${remedy}`);
 }
-export function findAgent(projectId, ref) {
-    if (ref.agent_id != null) {
-        return getAgentRow(projectId, ref.agent_id, "Call agent_list.");
-    }
-    if (ref.name) {
-        const rows = db
-            .prepare("SELECT * FROM agents WHERE project_id = ? AND status = 'running' ORDER BY id")
-            .all(projectId);
-        const exact = rows.filter((r) => r.name === ref.name);
-        if (exact.length === 1)
-            return exact[0];
-        if (exact.length > 1) {
-            throw new Error(`Multiple running agents named "${ref.name}". Target by agent_id instead.`);
-        }
-        const needle = ref.name.toLowerCase();
-        const sameName = rows.filter((r) => r.name.toLowerCase() === needle);
-        if (sameName.length === 1)
-            return sameName[0];
-        const closed = closedAgentNamed(projectId, needle);
-        if (closed) {
-            if (closed.parked_at) {
-                throw new Error(`Agent ${closed.id} ("${closed.name}") is PARKED, not finished - it was paused on ` +
-                    `${closed.parked_at} and its session is waiting. Bring it back with agent_resume(agent_id: ` +
-                    `${closed.id}), or abandon the park with agent_close(agent_id: ${closed.id}).`);
-            }
-            const remedy = closed.kind === LEAD_KIND ? "Run `hive lead` to start a new one" : "Spawn a new worker";
-            throw new Error(`Agent ${closed.id} ("${closed.name}") is closed. ${remedy}, or target a running one by name or agent_id.`);
-        }
-        const partial = rows.filter((r) => r.name.toLowerCase().includes(needle));
-        if (partial.length === 1)
-            return partial[0];
-        if (partial.length > 1) {
-            const candidates = partial.map((r) => `${r.name} (agent_id ${r.id})`).join(", ");
-            throw new Error(`"${ref.name}" matches ${partial.length} running agents: ${candidates}. Use the full name or agent_id.`);
-        }
-        if (/^\d+$/.test(ref.name)) {
-            const id = Number(ref.name);
-            if (Number.isSafeInteger(id)) {
-                const byId = db
-                    .prepare("SELECT * FROM agents WHERE project_id = ? AND id = ? AND status = 'running'")
-                    .get(projectId, id);
-                if (byId)
-                    return byId;
-            }
-        }
-        else if (/^[a-z]+:\d+$/i.test(ref.name)) {
-            const byActorId = db
-                .prepare("SELECT * FROM agents WHERE project_id = ? AND actor_id = ? AND status = 'running'")
-                .get(projectId, ref.name);
-            if (byActorId)
-                return byActorId;
-        }
-        throw new Error(`No running agent matching "${ref.name}" in project ${projectId}. Call agent_list.`);
-    }
-    throw new Error("Pass agent_id or name.");
-}
 function findClosedAgent(projectId, ref) {
     if (ref.agent_id != null) {
         const row = getAgentRow(projectId, ref.agent_id, "Call agent_list(include_closed: true).");
@@ -190,28 +125,6 @@ function closeRowOnly(agent, confirmSelf) {
             (ownership === "unknown" ? " Anything still running in that pane was left alone." : ""),
     };
 }
-export const PROBE_FAILED_NOTE = "tmux could not be probed, so liveness is unknown. Nothing was changed. Retry in a few seconds.";
-const unknownOwnershipNote = (snapshot) => observationFailed(snapshot) ? PROBE_FAILED_NOTE : UNVERIFIED_OWNERSHIP_NOTE;
-const UNVERIFIED_OWNERSHIP_NOTE = "This row's pane cannot be verified as its own: it is on another tmux socket, or no pane pid was recorded for it, so liveness is unknown and no screen was read. Nothing was changed. If the row is stale, a human or peer lead can retire it with agent_close(row_only=true).";
-export const probeFailed = (agent) => new Error(`Agent ${agent.id} ("${agent.name}"): ${PROBE_FAILED_NOTE}`);
-// A failed probe throws rather than answering unknown, so callers keep the retry wording.
-export function observeOwnership(agent) {
-    const ownership = observeRowOwnership(agent);
-    if (ownership === "probe-failed")
-        throw probeFailed(agent);
-    return ownership;
-}
-export const REISSUED_PANE_NOTE = "Its recorded pane id now belongs to a different process (the recorded pane pid no longer matches), so its own process is gone and the pane is someone else's. Nothing was typed, read or killed there.";
-export function notOwnedError(agent, ownership) {
-    const who = `Agent ${agent.id} ("${agent.name}")`;
-    if (ownership === "gone") {
-        return new Error(`${who} has no live tmux window (its process exited or the window was killed). Close it with agent_close and spawn a new one.`);
-    }
-    if (ownership === "reissued") {
-        return new Error(`${who}: pane ownership reads reissued. ${REISSUED_PANE_NOTE} Close the row with agent_close, which retires it without touching that pane.`);
-    }
-    return new Error(`${who}: pane ownership reads unknown. ${UNVERIFIED_OWNERSHIP_NOTE}`);
-}
 // Rechecked just before a kill. "changed" skips the kill and lets the row CAS report the race.
 function stillOwnsPane(agent, action) {
     const now = currentOwnership(agent.id, paneIdentity(agent));
@@ -327,11 +240,6 @@ function nextWorkerName(projectId) {
     return `worker-${count + 1}`;
 }
 const PANE_READY_MS = Number(process.env.HIVE_SPAWN_READY_MS ?? 45_000);
-export function summaryLiveness(row, snapshot) {
-    if (row.status !== "running")
-        return false;
-    return ownershipLiveness(rowOwnership(row, snapshot));
-}
 function capturePaneQuietly(target) {
     try {
         return capturePane(target, 15);

package/dist/tools/pads.js

@@ -1,89 +1,10 @@
 import { z } from "zod";
 import { db } from "../db.js";
-import { currentActor, effectiveProjectId, resolveProject } from "../context.js";
+import { effectiveProjectId, resolveProject } from "../context.js";
 import { matchesAnyTag, parseTags, run } from "../result.js";
 import { idParam, limitParam, offsetParam, projectIdParam } from "./params.js";
-function splitsSurrogatePair(content, index) {
-    if (index <= 0 || index >= content.length)
-        return false;
-    const before = content.charCodeAt(index - 1);
-    const after = content.charCodeAt(index);
-    return before >= 0xd800 && before <= 0xdbff && after >= 0xdc00 && after <= 0xdfff;
-}
-function selectPad(projectId, padId, columns) {
-    const row = db
-        .prepare(`SELECT ${columns} FROM pads WHERE project_id = ? AND id = ?`)
-        .get(projectId, padId);
-    if (!row)
-        throw new Error(`No pad with id ${padId} in project ${projectId}. Call pad_list.`);
-    return row;
-}
-function getPad(projectId, padId) {
-    return selectPad(projectId, padId, "*");
-}
-export function getPadMeta(projectId, padId) {
-    return selectPad(projectId, padId, "id, name, revision, archived");
-}
-function revisionMismatchError(padId, expected, current) {
-    if (current == null) {
-        return new Error(`Pad ${padId} no longer exists; it may have just been deleted by another write. Call pad_list to confirm.`);
-    }
-    return new Error(`Revision mismatch for pad ${padId}: expected ${expected}, current ${current}. Re-read with pad_read and retry.`);
-}
-function currentRevisionOrDeleted(padId) {
-    const row = db.prepare("SELECT revision FROM pads WHERE id = ?").get(padId);
-    return row?.revision ?? null;
-}
-function assertRowChanged(padId, predicateRevision, changed) {
-    if (!changed) {
-        throw revisionMismatchError(padId, predicateRevision, currentRevisionOrDeleted(padId));
-    }
-}
-function checkRevision(pad, expected, required) {
-    if (expected == null) {
-        if (required) {
-            throw new Error(`expected_revision is required to overwrite pad ${pad.id}. Current revision: ${pad.revision}. Read it first with pad_read.`);
-        }
-        return;
-    }
-    if (expected !== pad.revision) {
-        throw revisionMismatchError(pad.id, expected, pad.revision);
-    }
-}
-export function bumpPad(padId, predicateRevision, set, ...params) {
-    const where = predicateRevision != null ? "id = ? AND revision = ?" : "id = ?";
-    const whereParams = predicateRevision != null ? [padId, predicateRevision] : [padId];
-    const row = db
-        .prepare(`UPDATE pads SET ${set}, revision = revision + 1,
-       updated_by = ?, updated_at = datetime('now') WHERE ${where} RETURNING revision`)
-        .get(...params, currentActor(), ...whereParams);
-    assertRowChanged(padId, predicateRevision, row != null);
-    return row.revision;
-}
-export const APPEND_WITH_SEPARATOR_SET = "content = content || (CASE WHEN content = '' OR substr(content, -1) = char(10) THEN '' ELSE char(10) END) || ?";
-export function getActivePadByName(projectId, name) {
-    return db
-        .prepare("SELECT * FROM pads WHERE project_id = ? AND name = ? AND archived = 0")
-        .get(projectId, name);
-}
-export function listActivePads(projectId) {
-    return db
-        .prepare(`SELECT name, revision, length(content) AS content_length, updated_by, updated_at
-       FROM pads WHERE project_id = ? AND archived = 0 ORDER BY name`)
-        .all(projectId);
-}
-export function overwritePadContent(projectId, padId, content, expectedRevision) {
-    const pad = getPadMeta(projectId, padId);
-    checkRevision(pad, expectedRevision, true);
-    return bumpPad(padId, pad.revision, "content = ?", content);
-}
-export function createPad(projectId, name, content, tags) {
-    const row = db
-        .prepare(`INSERT OR IGNORE INTO pads (project_id, name, content, tags, updated_by)
-       VALUES (?, ?, ?, ?, ?) RETURNING id`)
-        .get(projectId, name, content, JSON.stringify(tags), currentActor());
-    return row?.id ?? null;
-}
+import { APPEND_WITH_SEPARATOR_SET, assertRowChanged, bumpPad, checkRevision, createPad, getPad, getPadMeta, splitsSurrogatePair } from "../pads.js";
+export { APPEND_WITH_SEPARATOR_SET, assertRowChanged, bumpPad, checkRevision, createPad, getActivePadByName, getPad, getPadMeta, listActivePads, overwritePadContent, splitsSurrogatePair } from "../pads.js";
 export function registerPads(server) {
     server.registerTool("pad_write", {
         description: "Create a pad, or fully overwrite one by passing pad_id plus expected_revision. Pad names are unique per project. Prefer pad_append/pad_edit for targeted changes.",

package/dist/tools/todos.js

@@ -1,12 +1,16 @@
 import { z } from "zod";
 import { db } from "../db.js";
+import { getTodo, getTodoDetail, listTodoSummaries } from "../todos.js";
+import { TODO_STATUSES } from "../todoScope.js";
+export { COMMENT_COUNT_SQL, getTodo, getTodoDetail, listTodoSummaries } from "../todos.js";
+export { TODO_STATUSES } from "../todoScope.js";
 import { commitQueenStateWrite } from "../queenAudit.js";
 import { currentActor, effectiveProjectId, resolveProject } from "../context.js";
-import { matchesAnyTag, parseTags, run } from "../result.js";
+import { run } from "../result.js";
 import { findUnsafeControlChar } from "../tmux.js";
 import { SLUG_MAX_LEN, fallbackSlug } from "../slug.js";
 import { idParam, limitParam, offsetParam, projectIdParam } from "./params.js";
-import { NOT_COMPLETED_TODO_SQL, OPEN_BLOCKERS_FROM_WHERE, OPEN_BLOCKERS_SQL } from "../todoScope.js";
+import { NOT_COMPLETED_TODO_SQL, OPEN_BLOCKERS_SQL } from "../todoScope.js";
 const priorityParam = z.enum(["high", "medium", "low"]);
 const slugParam = z
     .string()
@@ -18,96 +22,9 @@ const slugParam = z
     .describe(`Short label, ~3-5 words (${SLUG_MAX_LEN} chars max). When set, it renders beside the id: bracketed in \`hive todos\`, \`hive todo <id>\`, and the session-start digest, and as the row's whole label in the dashboard. Left unset, those surfaces fall back to the title - shown in full in \`hive todos\`/\`hive todo <id>\`/the digest, truncated to this same length in the dashboard. Free text, not a pad-style slug. Pass "" to clear a previously-set slug back to unset.`)
     .optional();
 export { SLUG_MAX_LEN, fallbackSlug };
-export const TODO_STATUSES = ["open", "in_progress", "backlog", "completed"];
 const statusParam = z.enum(TODO_STATUSES);
 const LIVE_DEPENDENTS_SQL = `SELECT t.id AS todo_id FROM todo_blockers b JOIN todos t ON t.id = b.todo_id
    WHERE b.blocker_id = ? AND t.${NOT_COMPLETED_TODO_SQL} AND t.archived_at IS NULL`;
-export const COMMENT_COUNT_SQL = `(SELECT COUNT(*) FROM todo_comments c WHERE c.todo_id = t.id)`;
-const SUMMARY_SQL = `
-  SELECT t.*,
-    (SELECT COUNT(*) ${OPEN_BLOCKERS_FROM_WHERE}) AS open_blockers,
-    ${COMMENT_COUNT_SQL} AS comment_count
-  FROM todos t`;
-function getTodo(projectId, todoId) {
-    const row = db
-        .prepare(`${SUMMARY_SQL} WHERE t.project_id = ? AND t.id = ?`)
-        .get(projectId, todoId);
-    if (!row)
-        throw new Error(`No todo with id ${todoId} in project ${projectId}. Call todo_list.`);
-    return row;
-}
-function summarize(row) {
-    return {
-        todo_id: row.id,
-        title: row.title,
-        slug: row.slug || fallbackSlug(row.title) || `todo ${row.id}`,
-        status: row.status,
-        priority: row.priority,
-        tags: parseTags(row.tags),
-        archived: row.archived_at != null,
-        is_blocked: (row.open_blockers ?? 0) > 0,
-        open_blockers: row.open_blockers ?? 0,
-        comment_count: row.comment_count ?? 0,
-        updated_at: row.updated_at,
-    };
-}
-export function listTodoSummaries(projectId, filter = {}) {
-    const limit = Math.min(filter.limit ?? 50, 200);
-    const offset = filter.offset ?? 0;
-    let sql = `${SUMMARY_SQL} WHERE t.project_id = ?`;
-    const params = [projectId];
-    if (!filter.includeArchived) {
-        sql += " AND t.archived_at IS NULL";
-    }
-    if (filter.statuses && filter.statuses.length > 0) {
-        sql += ` AND t.status IN (${filter.statuses.map(() => "?").join(",")})`;
-        params.push(...filter.statuses);
-    }
-    if (filter.priority) {
-        sql += " AND t.priority = ?";
-        params.push(filter.priority);
-    }
-    if (filter.query) {
-        sql += " AND (t.title LIKE ? OR t.body LIKE ? OR t.slug LIKE ?)";
-        params.push(`%${filter.query}%`, `%${filter.query}%`, `%${filter.query}%`);
-    }
-    sql += " ORDER BY t.updated_at DESC";
-    let rows = db.prepare(sql).all(...params).filter((r) => matchesAnyTag(r.tags, filter.tags));
-    if (filter.isBlocked != null) {
-        rows = rows.filter((r) => ((r.open_blockers ?? 0) > 0) === filter.isBlocked);
-    }
-    return {
-        total_count: rows.length,
-        offset,
-        limit,
-        todos: rows.slice(offset, offset + limit).map(summarize),
-    };
-}
-export function getTodoDetail(projectId, todoId, includeComments) {
-    const todo = getTodo(projectId, todoId);
-    const blockers = db
-        .prepare(`SELECT t.id, t.title, t.status FROM todo_blockers b
-       JOIN todos t ON t.id = b.blocker_id WHERE b.todo_id = ?`)
-        .all(todo.id);
-    const blocking = db
-        .prepare(`SELECT t.id, t.title, t.status FROM todo_blockers b
-       JOIN todos t ON t.id = b.todo_id WHERE b.blocker_id = ?`)
-        .all(todo.id);
-    const result = {
-        ...summarize(todo),
-        body: todo.body,
-        created_at: todo.created_at,
-        completed_at: todo.completed_at,
-        blockers,
-        blocking,
-    };
-    if (includeComments) {
-        result.comments = db
-            .prepare("SELECT id, author, body, created_at FROM todo_comments WHERE todo_id = ? ORDER BY created_at")
-            .all(todo.id);
-    }
-    return result;
-}
 function transitiveBlockers(startId) {
     const seen = new Set();
     const stack = [startId];

package/dist/tools/wakes.js

@@ -1,15 +1,18 @@
 import { z } from "zod";
 import { db } from "../db.js";
+import { assertSafeWakeBody, resolveAgentRef, resolveWakeDelivery } from "../wakeTarget.js";
+export { assertSafeWakeBody, resolveAgentRef, resolveWakeDelivery } from "../wakeTarget.js";
 import { commitQueenStateWrite } from "../queenAudit.js";
-import { captureQueenWriteIdentity, currentActor, effectiveProjectId, getProject, isQueenLead, resolveQueenLeadTarget, } from "../context.js";
+import { currentActor, effectiveProjectId, getProject, isQueenLead, } from "../context.js";
 import { run } from "../result.js";
-import { findAgent, observeOwnership, notOwnedError, summaryLiveness } from "./agents.js";
-import { ACTIVE_TIMER_WHERE, LOG_RETENTION, OWNED_BY_WATCH, WATCH_SCOPE_PROJECT, seedGoneCursor, } from "../scheduler.js";
+import { summaryLiveness } from "../agentRecords.js";
+import { LOG_RETENTION, OWNED_BY_WATCH, WATCH_SCOPE_PROJECT, seedGoneCursor, } from "../scheduler.js";
+import { ACTIVE_TIMER_WHERE } from "../wakeSql.js";
 import { idParam, projectIdParam } from "./params.js";
 import { cutToUnitBudget } from "../slug.js";
 import { awaitingFirstPrompt } from "../firstPrompt.js";
 import { deriveProvenance } from "../stateProvenance.js";
-import { findUnsafeControlChar, foreignSocket, liveTargets, observationFailed, rowOwnership, TEXT_ALLOWED_CONTROL_CHARS, } from "../tmux.js";
+import { foreignSocket, liveTargets, observationFailed, rowOwnership, } from "../tmux.js";
 import { readLeadTurnState } from "../leadState.js";
 import { LEAD_TARGET_GONE, LEAD_TARGET_REISSUED, leadSubscription, paneVeto, runningLeadOf } from "../leadWatch.js";
 import { isRunningLeadActor, LEAD_KIND } from "../spawn.js";
@@ -17,67 +20,6 @@ import { commandHead, screenClassifiable } from "../harnesses.js";
 const agentRefParam = z
     .union([idParam, z.string()])
     .describe("Running agent's name (preferred), or its numeric agent id.");
-function resolveAgentRef(projectId, ref) {
-    return typeof ref === "number"
-        ? findAgent(projectId, { agent_id: ref })
-        : findAgent(projectId, { name: ref });
-}
-function refuseUnclassifiableTarget(agent) {
-    if (screenClassifiable(agent.command))
-        return;
-    throw new Error(`Agent ${agent.id} ("${agent.name}") runs ${JSON.stringify(commandHead(agent.command))}, and hive can only ` +
-        "classify a claude screen. A wake is delivered by pasting its body and pressing Enter, and the two guards " +
-        "that decide whether that is safe - a dialog on screen, unsubmitted human text in the box - both read " +
-        "claude's own chrome, so on this pane neither can answer. Delivery would type blind: into a dialog it " +
-        "answers the highlighted option, and on a shell it executes whatever the paste merged with. " +
-        "Refused here rather than at delivery, where it could only ever be held forever - a pane's harness never " +
-        "becomes classifiable, so that hold would never clear, and a timer that cannot fire is worse than an " +
-        "error you can read now. Drive this pane with agent_send(keys: [...]) instead, which is unguarded for " +
-        "exactly this reason.");
-}
-export function resolveWakeDelivery(projectId, deliverTo, queenOperation) {
-    if (deliverTo != null) {
-        const agent = queenOperation
-            ? resolveQueenLeadTarget(queenOperation, projectId, deliverTo, () => resolveAgentRef(projectId, deliverTo))
-            : resolveAgentRef(projectId, deliverTo);
-        // Before the liveness probe: the harness is a durable fact about the row, while liveness is a
-        // question about right now, so a dead bash worker should say what is actually wrong with it.
-        refuseUnclassifiableTarget(agent);
-        const ownership = agent.status === "running" ? observeOwnership(agent) : "gone";
-        if (ownership === "gone")
-            throw new Error(`Agent "${agent.name}" has no live tmux window to deliver to.`);
-        if (ownership !== "live")
-            throw notOwnedError(agent, ownership);
-        return { actor: agent.actor_id, pane: agent.tmux_target };
-    }
-    const actor = currentActor();
-    const own = db
-        .prepare("SELECT * FROM agents WHERE actor_id = ? AND status = 'running' ORDER BY id DESC LIMIT 1")
-        .get(actor);
-    if (queenOperation && !own && captureQueenWriteIdentity(projectId)) {
-        resolveQueenLeadTarget(queenOperation, projectId, deliverTo, () => {
-            throw new Error("the calling session has no running agent row to receive this wake");
-        });
-    }
-    // Checked on the ROW, not behind the liveness probe: isLive is three-state, and letting a null
-    // fall through to the TMUX_PANE branch below accepts a wake the scheduler will then hold forever
-    // against that same row's command - the never-firing timer this refusal exists to prevent.
-    const target = own && queenOperation ? resolveQueenLeadTarget(queenOperation, projectId, deliverTo, () => own) : own;
-    if (target)
-        refuseUnclassifiableTarget(target);
-    if (target) {
-        const ownership = observeOwnership(target);
-        if (ownership === "live")
-            return { actor, pane: target.tmux_target };
-        // Unknown never falls through to the ambient pane: that would bind this row's actor to a pane it may not own.
-        if (ownership === "unknown")
-            throw notOwnedError(target, ownership);
-    }
-    const pane = process.env.TMUX_PANE;
-    if (pane)
-        return { actor, pane };
-    throw new Error("This session cannot receive wake-ups: it is not running inside tmux, so nothing can be typed into its terminal. Start the lead inside tmux (run tmux, then claude; watch with tmux attach, or tmux -CC attach for iTerm's native windows), or pass deliver_to targeting a spawned agent.");
-}
 function pendingWakes(projectId) {
     return db
         .prepare(`SELECT * FROM wakes WHERE project_id = ? AND ${ACTIVE_TIMER_WHERE} ORDER BY id`)
@@ -138,16 +80,6 @@ function deliveredByNote(t) {
         : null;
 }
 export const truncateBody = (body) => body.length > 120 ? `${cutToUnitBudget(body, 120)}…` : body;
-export function assertSafeWakeBody(body) {
-    const bad = findUnsafeControlChar(body, TEXT_ALLOWED_CONTROL_CHARS);
-    if (bad) {
-        throw new Error(`body cannot contain ${bad.label} at offset ${bad.index}: it is typed literally into the target pane ` +
-            "when the wake fires, and a raw control byte reaches tmux as a keystroke instead of as text, " +
-            "silently turning the delivery into a keys call nobody chose. Tab and newline are the only control " +
-            "characters allowed - every wake in this project is multi-line prose. To send an actual keystroke " +
-            'on purpose, call agent_send(keys: [...]) against the target directly instead of scheduling it here.');
-    }
-}
 const baseWakeFields = (t, { truncate = true } = {}) => ({
     wake_id: t.id,
     kind: t.kind,

package/dist/wakeSql.js

@@ -0,0 +1 @@
+export const ACTIVE_TIMER_WHERE = "cancelled_at IS NULL AND (fired_at IS NULL OR repeat_every_ms IS NOT NULL)";

package/dist/wakeTarget.js

@@ -0,0 +1,76 @@
+import { db } from "./db.js";
+import { captureQueenWriteIdentity, currentActor, resolveQueenLeadTarget } from "./context.js";
+import { findAgent, observeOwnership, notOwnedError } from "./agentRecords.js";
+import { commandHead, screenClassifiable } from "./harnesses.js";
+import { findUnsafeControlChar, TEXT_ALLOWED_CONTROL_CHARS } from "./tmux.js";
+export function resolveAgentRef(projectId, ref) {
+    return typeof ref === "number"
+        ? findAgent(projectId, { agent_id: ref })
+        : findAgent(projectId, { name: ref });
+}
+function refuseUnclassifiableTarget(agent) {
+    if (screenClassifiable(agent.command))
+        return;
+    throw new Error(`Agent ${agent.id} ("${agent.name}") runs ${JSON.stringify(commandHead(agent.command))}, and hive can only ` +
+        "classify a claude screen. A wake is delivered by pasting its body and pressing Enter, and the two guards " +
+        "that decide whether that is safe - a dialog on screen, unsubmitted human text in the box - both read " +
+        "claude's own chrome, so on this pane neither can answer. Delivery would type blind: into a dialog it " +
+        "answers the highlighted option, and on a shell it executes whatever the paste merged with. " +
+        "Refused here rather than at delivery, where it could only ever be held forever - a pane's harness never " +
+        "becomes classifiable, so that hold would never clear, and a timer that cannot fire is worse than an " +
+        "error you can read now. Drive this pane with agent_send(keys: [...]) instead, which is unguarded for " +
+        "exactly this reason.");
+}
+export function resolveWakeDelivery(projectId, deliverTo, queenOperation) {
+    if (deliverTo != null) {
+        const agent = queenOperation
+            ? resolveQueenLeadTarget(queenOperation, projectId, deliverTo, () => resolveAgentRef(projectId, deliverTo))
+            : resolveAgentRef(projectId, deliverTo);
+        // Before the liveness probe: the harness is a durable fact about the row, while liveness is a
+        // question about right now, so a dead bash worker should say what is actually wrong with it.
+        refuseUnclassifiableTarget(agent);
+        const ownership = agent.status === "running" ? observeOwnership(agent) : "gone";
+        if (ownership === "gone")
+            throw new Error(`Agent "${agent.name}" has no live tmux window to deliver to.`);
+        if (ownership !== "live")
+            throw notOwnedError(agent, ownership);
+        return { actor: agent.actor_id, pane: agent.tmux_target };
+    }
+    const actor = currentActor();
+    const own = db
+        .prepare("SELECT * FROM agents WHERE actor_id = ? AND status = 'running' ORDER BY id DESC LIMIT 1")
+        .get(actor);
+    if (queenOperation && !own && captureQueenWriteIdentity(projectId)) {
+        resolveQueenLeadTarget(queenOperation, projectId, deliverTo, () => {
+            throw new Error("the calling session has no running agent row to receive this wake");
+        });
+    }
+    // Checked on the ROW, not behind the liveness probe: isLive is three-state, and letting a null
+    // fall through to the TMUX_PANE branch below accepts a wake the scheduler will then hold forever
+    // against that same row's command - the never-firing timer this refusal exists to prevent.
+    const target = own && queenOperation ? resolveQueenLeadTarget(queenOperation, projectId, deliverTo, () => own) : own;
+    if (target)
+        refuseUnclassifiableTarget(target);
+    if (target) {
+        const ownership = observeOwnership(target);
+        if (ownership === "live")
+            return { actor, pane: target.tmux_target };
+        // Unknown never falls through to the ambient pane: that would bind this row's actor to a pane it may not own.
+        if (ownership === "unknown")
+            throw notOwnedError(target, ownership);
+    }
+    const pane = process.env.TMUX_PANE;
+    if (pane)
+        return { actor, pane };
+    throw new Error("This session cannot receive wake-ups: it is not running inside tmux, so nothing can be typed into its terminal. Start the lead inside tmux (run tmux, then claude; watch with tmux attach, or tmux -CC attach for iTerm's native windows), or pass deliver_to targeting a spawned agent.");
+}
+export function assertSafeWakeBody(body) {
+    const bad = findUnsafeControlChar(body, TEXT_ALLOWED_CONTROL_CHARS);
+    if (bad) {
+        throw new Error(`body cannot contain ${bad.label} at offset ${bad.index}: it is typed literally into the target pane ` +
+            "when the wake fires, and a raw control byte reaches tmux as a keystroke instead of as text, " +
+            "silently turning the delivery into a keys call nobody chose. Tab and newline are the only control " +
+            "characters allowed - every wake in this project is multi-line prose. To send an actual keystroke " +
+            'on purpose, call agent_send(keys: [...]) against the target directly instead of scheduling it here.');
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cmgmyr/hive",
-  "version": "1.11.5",
+  "version": "1.11.6",
   "description": "Run a crew of Claude Code and Codex workers from one lead session: visible tmux panes, exact state from hooks, one local SQLite store.",
   "type": "module",
   "bin": {