@cmgmyr/hive 1.11.6 → 1.11.7

package/dist/build-info.json

@@ -1 +1 @@
-{"version":"1.11.6","sha":"b4e9fb0","dirty":false,"build_id":"fb0debbc0e5e030650660c10505b25c26e60160403f384ce900920146e639961"}
+{"version":"1.11.7","sha":"4861c81","dirty":false,"build_id":"2b159fa2c2519fbd7edef9cf4396ac349c3fb25ec433f76a9b91c5ad98188f43"}

package/dist/claudeWake.js

@@ -1,14 +1,62 @@
 import { createConnection } from "node:net";
+import { join } from "node:path";
+import { db } from "./db.js";
+import { loadProjectYml } from "./projectYml.js";
+export { DELIVERY_METHOD } from "./wakeSql.js";
 export const CROSS_SESSION_CLOSE = "</cross-session-message>";
+export const ENVELOPE_OPEN = '<cross-session-message from="';
+export const ENVELOPE_SENDER_CLOSE = '" from-name="hive">';
 export const SOCKET_WAKE_FOOTER = "Automated hive wake. Do not reply to this sender.";
-const SOCKET_WRITE_BOUND_MS = 1000;
+export const SOCKET_MESSAGE_FOOTER = "Automated hive worker message. Do not reply to this socket sender.";
+export const SOCKET_WRITE_BOUND_MS = 1000;
+export const SOCKET_CONFIRM_GRACE_SECONDS = 60;
 export function senderAddress(socketPath) {
     const encoded = socketPath.replace(/[^A-Za-z0-9/._-]/gu, (c) => [...Buffer.from(c)].map((b) => `%${b.toString(16).toUpperCase().padStart(2, "0")}`).join(""));
     return `uds:${encoded}`;
 }
-function claudeWakeFrame(senderAddress, text) {
-    const content = `<cross-session-message from="${senderAddress}" from-name="hive">\n${text}\n${CROSS_SESSION_CLOSE}`;
-    return JSON.stringify({ type: "user", from: senderAddress, message: { role: "user", content } }) + "\n";
+export function socketSenderAddress(dir) {
+    return senderAddress(join(dir, "wake-sender.sock"));
+}
+function claudeWakeFrame(sender, text) {
+    const content = `${ENVELOPE_OPEN}${sender}${ENVELOPE_SENDER_CLOSE}\n${text}\n${CROSS_SESSION_CLOSE}`;
+    return JSON.stringify({ type: "user", from: sender, message: { role: "user", content } }) + "\n";
+}
+export function quietMessagingOn(projectId) {
+    const project = db.prepare("SELECT path FROM projects WHERE id = ?").get(projectId);
+    return project !== undefined && loadProjectYml(project.path).config?.quiet_messaging === true;
+}
+export function promptMarkerEvidenceSql(markerAt) {
+    const evPrompt = "(CASE WHEN json_valid(ev.payload) THEN COALESCE(json_extract(ev.payload, '$.prompt'), '') ELSE ev.payload END)";
+    const headerEnd = `instr(${evPrompt}, char(10))`;
+    return `(${markerAt(evPrompt, "1")}\n               OR (${headerEnd} > ${ENVELOPE_OPEN.length + ENVELOPE_SENDER_CLOSE.length}
+                   AND substr(${evPrompt}, 1, ${ENVELOPE_OPEN.length}) = '${ENVELOPE_OPEN}'
+                   AND substr(${evPrompt}, ${headerEnd} - ${ENVELOPE_SENDER_CLOSE.length}, ${ENVELOPE_SENDER_CLOSE.length}) = '${ENVELOPE_SENDER_CLOSE}'
+                   AND instr(substr(${evPrompt}, ${ENVELOPE_OPEN.length + 1}, ${headerEnd} - ${ENVELOPE_OPEN.length + ENVELOPE_SENDER_CLOSE.length + 1}), '"') = 0
+                   AND ${markerAt(evPrompt, `${headerEnd} + 1`)}
+                   AND instr(${evPrompt}, char(10) || '${CROSS_SESSION_CLOSE}') > ${headerEnd}))`;
+}
+export function hiveWorkerEnvelopeLikeSql(promptSql) {
+    return `(${promptSql} LIKE '${ENVELOPE_OPEN}%${ENVELOPE_SENDER_CLOSE}' || char(10) || '[hive:worker %] [message #%,%' || char(10) || '${CROSS_SESSION_CLOSE}%')`;
+}
+export function isHiveWorkerEnvelope(prompt) {
+    const p = prompt.toLowerCase();
+    const open = ENVELOPE_OPEN.toLowerCase().replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+    const senderClose = ENVELOPE_SENDER_CLOSE.toLowerCase().replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+    const close = CROSS_SESSION_CLOSE.toLowerCase().replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+    return new RegExp(`^${open}[\\s\\S]*${senderClose}\\n\\[hive:worker [\\s\\S]*\\] \\[message #[\\s\\S]*,[\\s\\S]*\\n${close}`).test(p);
+}
+export function socketGraceDue(actorId, attemptAt, panePid, readTurn) {
+    const firstStop = db
+        .prepare("SELECT MIN(created_at) AS t FROM agent_state_log WHERE actor_id = ? AND event = 'stop' AND created_at >= ?")
+        .get(actorId, attemptAt).t;
+    let from = firstStop;
+    if (from === null) {
+        const turn = readTurn();
+        if (turn !== null && turn.state === "working" && turn.pane_pid === panePid)
+            return false;
+        from = attemptAt;
+    }
+    return db.prepare("SELECT (julianday('now') - julianday(?)) * 86400 >= ? AS due").get(from, SOCKET_CONFIRM_GRACE_SECONDS).due === 1;
 }
 // True only for a completed local write. The socket sends no ack, so true never means the lead read it.
 export function postClaudeWake(options) {

package/dist/cli.js

@@ -23,8 +23,8 @@ import { confirmQueenWrite, listQueenAudit } from "./queenAudit.js";
 import { formatRowCounts, projectRowCounts, removeProject } from "./projectRemove.js";
 import { ensureHooksFile, ensureLeadHooksFile } from "./hooks.js";
 import { errorMessage, registrationNoticeText, withTrailingNewline } from "./result.js";
-import { socketAwaitingWhere, dashboardFileContained, describeStall, HELD_REASON_UNCLASSIFIABLE_PANE_PREFIX, HELD_REASON_UNSUBMITTED_INPUT_PREFIX, janitor, resolveDashboardFile, generateQueenDashboardNow, transcriptStaleness, } from "./scheduler.js";
-import { ACTIVE_TIMER_WHERE } from "./wakeSql.js";
+import { dashboardFileContained, describeStall, janitor, resolveDashboardFile, generateQueenDashboardNow, transcriptStaleness, } from "./scheduler.js";
+import { ACTIVE_TIMER_WHERE, HELD_REASON_UNCLASSIFIABLE_PANE_PREFIX, HELD_REASON_UNSUBMITTED_INPUT_PREFIX, heldWakeWhere, socketAwaitingWhere, } from "./wakeSql.js";
 import { readTurnCount } from "./turnCount.js";
 import { leadSessionEnded } from "./leadState.js";
 import { heldReasonLabel } from "./heldLabel.js";
@@ -390,14 +390,11 @@ function reportMigrationResult(result) {
         console.error(`! ${warning}`);
 }
 async function cmdLead(argv) {
-    const unknownFlag = argv.find((a) => a.startsWith("--") && a !== "--no-dashboard" && a !== "--detach");
-    if (unknownFlag !== undefined) {
-        console.error(`hive lead: unknown flag "${unknownFlag}". Flags are --no-dashboard and --detach.`);
-        process.exit(1);
-    }
-    const noDashboard = argv.includes("--no-dashboard");
-    const detach = argv.includes("--detach");
-    const path = argv.find((a) => !a.startsWith("--"));
+    const parsed = parseArgs(argv, { flags: ["--no-dashboard", "--detach"] });
+    rejectUnknownFlags("lead", parsed, "--no-dashboard and --detach");
+    const noDashboard = parsed.flags.has("--no-dashboard");
+    const detach = parsed.flags.has("--detach");
+    const path = parsed.positional[0];
     let registrationNotice = null;
     try {
         const project = resolveProjectForWrite("hive lead", path, (text) => {
@@ -1163,6 +1160,8 @@ function profileSizeAdvisory(name, file) {
 }
 function cmdProfile(argv) {
     const [sub, ...rest] = argv;
+    if (sub?.startsWith("-"))
+        rejectUnknownFlags("profile", parseArgs(argv, {}), "none");
     try {
         switch (sub) {
             case undefined:
@@ -1340,12 +1339,9 @@ function openDashboardOnce(project, dashboardFile) {
     }
 }
 function cmdAttach(argv) {
-    const unknownFlag = argv.find((a) => a.startsWith("--"));
-    if (unknownFlag !== undefined) {
-        console.error(`hive attach: unknown flag "${unknownFlag}". hive attach takes no flags.`);
-        process.exit(1);
-    }
-    const path = argv.find((a) => !a.startsWith("--"));
+    const parsed = parseArgs(argv, {});
+    rejectUnknownFlags("attach", parsed, "none");
+    const path = parsed.positional[0];
     const project = resolveProjectForWrite("hive attach", path);
     maybeOpenDashboard(project, !!loadProjectYml(project.path).config?.dashboard);
     const session = sessionName();
@@ -1496,8 +1492,7 @@ const leadPaneExitedHookArmed = () => globalHooks(LEAD_PANE_EXITED_HOOK).some((e
 function cmdLeadPaneExited(argv) {
     try {
         const parsed = parseArgs(argv, {});
-        if (parsed.unknown.length > 0)
-            return;
+        rejectUnknownFlags("lead-pane-exited", parsed, "none");
         const pane = parsed.positional[0];
         if (!pane)
             return;
@@ -2315,14 +2310,13 @@ function reportEffectiveConfig(loaded) {
             : `${autoAttach} (default; set with \`hive setup --auto-attach\`; source: built-in)`);
 }
 function cmdDoctor(argv) {
-    const strict = argv.includes("--strict");
-    doctorVerbose = argv.includes("--verbose");
-    const KNOWN_DOCTOR_FLAGS = new Set(["--strict", "--verbose"]);
-    const unknown = argv.find((a) => !KNOWN_DOCTOR_FLAGS.has(a));
-    if (unknown !== undefined) {
-        console.error(`hive doctor: unknown argument "${unknown}". Flags are --strict and --verbose.`);
-        process.exit(1);
-    }
+    const parsed = parseArgs(argv, { flags: ["--strict", "--verbose"] });
+    const unexpected = argv.find((arg) => arg !== "--strict" && arg !== "--verbose");
+    if (unexpected !== undefined)
+        parsed.unknown = [unexpected];
+    rejectUnknownFlags("doctor", parsed, "--strict and --verbose");
+    const strict = parsed.flags.has("--strict");
+    doctorVerbose = parsed.flags.has("--verbose");
     reportMigrationResult(migrateLegacyConfig());
     let failures = 0;
     const fail = (label, ...lines) => {
@@ -2801,13 +2795,13 @@ function cmdStatusline() {
     const held = db
         .prepare(`WITH chosen AS (
          SELECT held_reason, first_held_at FROM wakes
-          WHERE project_id = ? AND ${ACTIVE_TIMER_WHERE} AND held_at IS NOT NULL
+          WHERE project_id = ? AND ${ACTIVE_TIMER_WHERE} AND ${heldWakeWhere()}
           ORDER BY (held_reason LIKE ?) DESC, (held_reason LIKE ?) ASC,
                    first_held_at IS NULL ASC, first_held_at ASC
           LIMIT 1
        )
        SELECT
-         (SELECT COUNT(*) FROM wakes WHERE project_id = ? AND ${ACTIVE_TIMER_WHERE} AND held_at IS NOT NULL) AS n,
+         (SELECT COUNT(*) FROM wakes WHERE project_id = ? AND ${ACTIVE_TIMER_WHERE} AND ${heldWakeWhere()}) AS n,
          (SELECT held_reason FROM chosen) AS held_reason,
          (SELECT first_held_at FROM chosen) AS first_held_at`)
         .get(project.id, `${HELD_REASON_UNSUBMITTED_INPUT_PREFIX}%`, `${HELD_REASON_UNCLASSIFIABLE_PANE_PREFIX}%`, project.id);
@@ -3256,11 +3250,26 @@ function requireFlagValues(command, parsed) {
     process.exit(1);
 }
 function cmdTodos(argv) {
+    const parsed = parseArgs(argv, { flags: ["--all"], valued: ["--status", "--tag"] });
+    for (const flag of ["--status", "--tag"]) {
+        const index = argv.indexOf(flag);
+        const value = index === -1 ? undefined : argv[index + 1];
+        if (index === -1 || (value !== undefined && !value.startsWith("--")))
+            continue;
+        if (flag === "--status") {
+            console.log(`Usage: hive todos --status <s>  where <s> is one of: ${TODO_STATUSES.join(", ")}`);
+        }
+        else {
+            console.log("Usage: hive todos --tag <t>");
+        }
+        process.exit(1);
+    }
+    rejectUnknownFlags("todos", parsed, "--all, --status <status>, --tag <tag>");
+    requireFlagValues("todos", parsed);
     const project = resolveProjectForRead("todos");
-    const all = argv.includes("--all");
-    const statusIdx = argv.indexOf("--status");
-    const status = flagValue(argv, "--status");
-    if (statusIdx !== -1 && (status === undefined || status.startsWith("--"))) {
+    const all = parsed.flags.has("--all");
+    const status = parsed.values.get("--status");
+    if (parsed.values.has("--status") && status === undefined) {
         console.log(`Usage: hive todos --status <s>  where <s> is one of: ${TODO_STATUSES.join(", ")}`);
         process.exit(1);
     }
@@ -3268,9 +3277,8 @@ function cmdTodos(argv) {
         console.log(`Unknown status "${status}". Valid: ${TODO_STATUSES.join(", ")}`);
         process.exit(1);
     }
-    const tagIdx = argv.indexOf("--tag");
-    const tag = flagValue(argv, "--tag");
-    if (tagIdx !== -1 && (tag === undefined || tag.startsWith("--"))) {
+    const tag = parsed.values.get("--tag");
+    if (parsed.values.has("--tag") && tag === undefined) {
         console.log("Usage: hive todos --tag <t>");
         process.exit(1);
     }
@@ -3300,8 +3308,10 @@ function cmdTodos(argv) {
     }
 }
 function cmdTodo(argv) {
+    const parsed = parseArgs(argv, {});
+    rejectUnknownFlags("todo", parsed, "none");
     const project = resolveProjectForRead("todo");
-    const id = Number(argv.find((a) => !a.startsWith("--")));
+    const id = Number(parsed.positional[0]);
     if (!Number.isInteger(id)) {
         console.log("Usage: hive todo <id>  (run inside the project)");
         process.exit(1);
@@ -3505,6 +3515,8 @@ let rest = args.slice(1);
 if (command === "--help" || command === "-h" || command === "help")
     usage();
 if (command === "--version" || command === "-v") {
+    const parsed = parseArgs(rest, { flags: ["--check"] });
+    rejectUnknownFlags("version", parsed, "--check");
     const { line, drift } = versionInfo();
     console.log(line);
     if (drift)
@@ -3584,6 +3596,7 @@ try {
             cmdHide(rest);
             break;
         case "status":
+            rejectUnknownFlags("status", parseArgs(rest, {}), "none");
             cmdStatus();
             break;
         case "portfolio":
@@ -3608,6 +3621,7 @@ try {
             cmdDoctor(rest);
             break;
         case "pads":
+            rejectUnknownFlags("pads", parseArgs(rest, {}), "none");
             cmdPads();
             break;
         case "pad":
@@ -3626,6 +3640,7 @@ try {
             cmdAnswer(rest);
             break;
         case "backups":
+            rejectUnknownFlags("backups", parseArgs(rest, {}), "none");
             cmdBackups();
             break;
         case "restore":
@@ -3634,19 +3649,29 @@ try {
         case "project":
             await cmdProject(rest);
             break;
-        case "runbook":
-            cmdRunbook(rest[0]);
+        case "runbook": {
+            const parsed = parseArgs(rest, {});
+            rejectUnknownFlags("runbook", parsed, "none");
+            cmdRunbook(parsed.positional[0]);
             break;
-        case "posture":
-            cmdPosture(rest[0]);
+        }
+        case "posture": {
+            const parsed = parseArgs(rest, {});
+            rejectUnknownFlags("posture", parsed, "none");
+            cmdPosture(parsed.positional[0]);
             break;
+        }
         case "profile":
             cmdProfile(rest);
             break;
-        case "kickoff":
+        case "kickoff": {
+            const parsed = parseArgs(rest, { flags: ["--explain", "--codex"] });
+            rejectUnknownFlags("kickoff", parsed, "--explain, --codex");
             await (await import("./kickoff.js")).runKickoff(rest);
             break;
+        }
         case "statusline":
+            rejectUnknownFlags("statusline", parseArgs(rest, {}), "none");
             cmdStatusline();
             break;
         default:

package/dist/crew.js

@@ -1,6 +1,7 @@
+import { parseStoreTimestamp } from "./storeClock.js";
 import { db } from "./db.js";
 import { isLinkedWorktree } from "./context.js";
-import { awaitingFirstPrompt } from "./firstPrompt.js";
+import { finishedIdle } from "./firstPrompt.js";
 import { heldReasonLabel } from "./heldLabel.js";
 import { harnessFor, paneClassifierFor } from "./harnesses.js";
 import { NEEDS_HUMAN_TAG } from "./portfolio.js";
@@ -29,7 +30,7 @@ export function crewStoreProblem(database = db) {
 function isoUtc(value) {
     if (!value)
         return null;
-    const date = new Date(/(Z|[+-]\d\d:?\d\d)$/.test(value) ? value : `${value.replace(" ", "T")}Z`);
+    const date = new Date(parseStoreTimestamp(value));
     return Number.isNaN(date.getTime()) ? null : date.toISOString();
 }
 const WAKE_LABEL_MAX = 60;
@@ -452,7 +453,7 @@ export function collectCrew(project, now) {
                 age_seconds: Math.max(0, Math.floor((now.getTime() - Date.parse(isoUtc(row.created_at) ?? "")) / 1000) || 0),
                 activity,
                 context_fill: kind ? readContextFill(kind, worker) : null,
-                your_turn: row.agent_state === "idle" && !awaitingFirstPrompt(row),
+                your_turn: finishedIdle(row),
                 commits_ahead: commitsByCwd.get(row.cwd) ?? null,
             },
         });

package/dist/dashboard.js

@@ -4,6 +4,7 @@ import { ACTIVE_TIMER_WHERE } from "./wakeSql.js";
 import { db } from "./db.js";
 import { ACTIVE_TODO_SQL, NOT_COMPLETED_TODO_SQL, OPEN_BLOCKERS_SQL } from "./todoScope.js";
 import { getProject } from "./context.js";
+import { parseStoreTimestamp } from "./storeClock.js";
 export const describeVisibility = (visibility) => visibility === null ? "running" : visibility === "window" ? "own window" : visibility;
 export function processCounts(procs) {
     return {
@@ -13,7 +14,7 @@ export function processCounts(procs) {
         notStarted: procs.filter((p) => !p.running).length,
     };
 }
-import { awaitingFirstPrompt } from "./firstPrompt.js";
+import { finishedIdle } from "./firstPrompt.js";
 import { SLUG_MAX_LEN, cutToUnitBudget } from "./slug.js";
 export const TODO_CAP = 100;
 export const AGENT_CAP = 50;
@@ -55,7 +56,7 @@ function formatDate(d) {
 export function formatLocal(utc) {
     if (!utc)
         return "-";
-    const d = new Date(`${utc.replace(" ", "T")}Z`);
+    const d = new Date(parseStoreTimestamp(utc));
     if (Number.isNaN(d.getTime()))
         return utc;
     return formatDate(d);
@@ -70,7 +71,7 @@ function timeEl(utc) {
 function shortWhenEl(utc) {
     if (!utc)
         return '<span class="muted">-</span>';
-    const d = new Date(`${utc.replace(" ", "T")}Z`);
+    const d = new Date(parseStoreTimestamp(utc));
     if (Number.isNaN(d.getTime()))
         return `<span class="time">${escapeHtml(utc)}</span>`;
     const local = formatDate(d);
@@ -97,7 +98,7 @@ function agentStatusLevel(state) {
     return "warn";
 }
 function agentStateBadge(a) {
-    return awaitingFirstPrompt(a) && a.agent_state === "idle"
+    return a.agent_state === "idle" && !finishedIdle(a)
         ? statusBadge("live", "idle (no assignment yet)")
         : statusBadge(agentStatusLevel(a.agent_state), a.agent_state);
 }
@@ -448,7 +449,7 @@ function renderWakesSection(index, projectId) {
     return section(index, "wakes", "Wakes", `${all.length} pending`, "bell", String(shown.length), body);
 }
 function questionAge(createdAt) {
-    const timestamp = Date.parse(`${createdAt.replace(" ", "T")}Z`);
+    const timestamp = parseStoreTimestamp(createdAt);
     if (!Number.isFinite(timestamp))
         return "unknown";
     const seconds = Math.max(0, Math.floor((Date.now() - timestamp) / 1000));

package/dist/etime.js

@@ -0,0 +1,37 @@
+export function parseEtimeSeconds(value) {
+    const dayForm = /^(\d+)-(\d{1,2}):(\d{2}):(\d{2})$/.exec(value);
+    const digitForm = /^(\d+)$/.exec(value);
+    const fields = dayForm ? dayForm.slice(1).map(Number) : value.split(":").map(Number);
+    if (!dayForm &&
+        !digitForm &&
+        ((fields.length === 2 && !/^\d+:\d+$/.test(value)) ||
+            (fields.length === 3 && !/^\d+:\d+:\d+$/.test(value)) ||
+            (fields.length !== 2 && fields.length !== 3))) {
+        return null;
+    }
+    if (fields.some((field) => !Number.isSafeInteger(field) || field < 0))
+        return null;
+    let total;
+    if (digitForm) {
+        total = fields[0];
+    }
+    else if (dayForm) {
+        const [days, hours, minutes, seconds] = fields;
+        if (hours > 23 || minutes > 59 || seconds > 59)
+            return null;
+        total = ((days * 24 + hours) * 60 + minutes) * 60 + seconds;
+    }
+    else if (fields.length === 2) {
+        const [minutes, seconds] = fields;
+        if (seconds > 59)
+            return null;
+        total = minutes * 60 + seconds;
+    }
+    else {
+        const [hours, minutes, seconds] = fields;
+        if (minutes > 59 || seconds > 59)
+            return null;
+        total = (hours * 60 + minutes) * 60 + seconds;
+    }
+    return Number.isSafeInteger(total) ? total : null;
+}

package/dist/firstPrompt.js

@@ -4,3 +4,9 @@ export function awaitingFirstPrompt(row) {
 export function awaitingFirstPromptSql(alias) {
     return `${alias}.resumed_at != ''`;
 }
+export function finishedIdle(row) {
+    return row.agent_state === "idle" && !awaitingFirstPrompt(row);
+}
+export function finishedIdleSql(alias) {
+    return `${alias}.agent_state = 'idle' AND NOT (${awaitingFirstPromptSql(alias)})`;
+}

package/dist/heldLabel.js

@@ -1,4 +1,4 @@
-import { HELD_REASON_CONVERSATION, HELD_REASON_LEAD_PANE_DEAD, isLeadRowClosedHold, isUnclassifiablePaneHold, isUnsubmittedInputHold, wasHeldForPaneIdentity, } from "./scheduler.js";
+import { HELD_REASON_CONVERSATION, HELD_REASON_LEAD_PANE_DEAD, isLeadRowClosedHold, isUnclassifiablePaneHold, isUnsubmittedInputHold, wasHeldForPaneIdentity, } from "./wakeSql.js";
 // test/docs.test.mjs fails if a label here is missing from docs/install.md. It checks
 // presence only: docs/install.md also counts the set in prose, and nothing guards that number.
 export const HELD_REASON_LABELS = ["typing", "talking", "needs you", "blocked"];

package/dist/leadHandoff.js

@@ -1,7 +1,9 @@
 import { createHash } from "node:crypto";
 import { db } from "./db.js";
+import { MESSAGE_RETENTION, MESSAGE_STATUS } from "./leadMessage.js";
+import { HELD_REASON_HANDOFF, LOG_RETENTION, handoffSocketInFlightWhere, pendingOneShotWhere, } from "./wakeSql.js";
 import { harnessFor, paneClassifierFor } from "./harnesses.js";
-import { casHandoff, HELD_REASON_HANDOFF, handoffHoldsAutomation, nowSql, olderThan, PASS_TIMEOUT_SECONDS, PRE_RESPAWN_STATES, passPolicy, quotedPolicy, readActiveHandoff, readHandoff, STOP_HOLD_CAP_SECONDS, SUCCESSOR_NOT_READY, } from "./leadHandoffState.js";
+import { casHandoff, handoffHoldsAutomation, nowSql, olderThan, PASS_TIMEOUT_SECONDS, PRE_RESPAWN_STATES, passPolicy, quotedPolicy, readActiveHandoff, readHandoff, STOP_HOLD_CAP_SECONDS, SUCCESSOR_NOT_READY, } from "./leadHandoffState.js";
 import { holdsHumanInput, paneInCopyMode, rowOwnership, tmuxSocketPath } from "./tmux.js";
 import { readLeadSafetySnapshot } from "./leadState.js";
 import { readTurnCount } from "./turnCount.js";
@@ -94,7 +96,7 @@ const failTransaction = db.transaction((id, failure, from, where) => {
     if (!casHandoff(id, from, { state: "failed", failure, owner_token: null, owner_pid: null }, where))
         return false;
     db.prepare(`UPDATE wakes SET cancelled_at = datetime('now'), held_reason = ?
-      WHERE id = (SELECT request_wake_id FROM lead_handoffs WHERE id = ?) AND fired_at IS NULL AND cancelled_at IS NULL`).run(`lead handoff #${id} failed: ${failure}`, id);
+      WHERE id = (SELECT request_wake_id FROM lead_handoffs WHERE id = ?) AND ${pendingOneShotWhere()}`).run(`lead handoff #${id} failed: ${failure}`, id);
     return true;
 });
 export function failHandoff(id, failure, from = PRE_RESPAWN_STATES, where = {}) {
@@ -158,13 +160,12 @@ export function requestBody(row, turns) {
 // Automated deliveries to the lead other than the handoff's own request wakes.
 export function automationBlocker(lead, seconds) {
     const inFlight = db
-        .prepare(`SELECT 1 AS hit FROM agent_messages WHERE to_agent_id = ? AND delivery_status IN ('socket-pending', 'fallback-claimed')
-        AND created_at >= datetime('now', '-7 days')
+        .prepare(`SELECT 1 AS hit FROM agent_messages WHERE to_agent_id = ? AND delivery_status IN (?, ?)
+        AND created_at >= datetime('now', ?)
        UNION ALL
-       SELECT 1 FROM wakes WHERE deliver_actor = ? AND body NOT LIKE ? AND fired_at IS NOT NULL AND cancelled_at IS NULL
-        AND delivery_method LIKE 'socket%' AND confirmed_at IS NULL AND socket_attempt_at >= datetime('now', '-7 days')
+       SELECT 1 FROM wakes WHERE deliver_actor = ? AND body NOT LIKE ? AND ${handoffSocketInFlightWhere()}
        LIMIT 1`)
-        .get(lead.id, lead.actor_id, `${REQUEST_BODY_PREFIX}%`);
+        .get(lead.id, MESSAGE_STATUS.socketPending, MESSAGE_STATUS.fallbackClaimed, MESSAGE_RETENTION, lead.actor_id, `${REQUEST_BODY_PREFIX}%`, LOG_RETENTION);
     if (inFlight !== undefined)
         return "a delivery to the lead is still in flight";
     if (seconds === null)
@@ -204,7 +205,7 @@ const requestTransaction = db.transaction((row, lead, turns) => {
     const waiting = current.request_wake_id === null
         ? undefined
         : db
-            .prepare("SELECT id FROM wakes WHERE id = ? AND due_at IS NULL AND fired_at IS NULL AND cancelled_at IS NULL")
+            .prepare(`SELECT id FROM wakes WHERE id = ? AND due_at IS NULL AND ${pendingOneShotWhere()}`)
             .get(current.request_wake_id);
     let wakeId;
     if (waiting !== undefined) {
@@ -435,12 +436,12 @@ export function handoffInjection(leadActor) {
         .prepare("SELECT name, agent_state FROM agents WHERE project_id = ? AND kind = 'agent' AND status = 'running' ORDER BY id")
         .all(lead.project_id);
     const pending = db
-        .prepare("SELECT COUNT(*) AS n FROM wakes WHERE deliver_actor = ? AND fired_at IS NULL AND cancelled_at IS NULL")
+        .prepare(`SELECT COUNT(*) AS n FROM wakes WHERE deliver_actor = ? AND ${pendingOneShotWhere()}`)
         .get(lead.actor_id).n;
     const heldWakes = db.prepare("SELECT COUNT(*) AS n FROM wakes WHERE deliver_actor = ? AND held_reason = ? AND cancelled_at IS NULL").get(lead.actor_id, HELD_REASON_HANDOFF).n;
     const heldMessages = db
-        .prepare("SELECT COUNT(*) AS n FROM agent_messages WHERE to_agent_id = ? AND delivery_status = 'fallback-pending' AND created_at >= datetime('now', '-7 days')")
-        .get(lead.id).n;
+        .prepare("SELECT COUNT(*) AS n FROM agent_messages WHERE to_agent_id = ? AND delivery_status = ? AND created_at >= datetime('now', ?)")
+        .get(lead.id, MESSAGE_STATUS.fallbackPending, MESSAGE_RETENTION).n;
     const lines = [`[hive] LEAD HANDOFF: pad "${HANDOFF_PAD_NAME}" #${pad.id} revision ${pad.revision}, written ${pad.updated_at} UTC.`];
     {
         lines.push(`Handed off by session ${row.predecessor_session_id} at turn ${row.predecessor_turns ?? "?"} (${row.reason}, pass ${row.pass})` +

package/dist/leadHandoffCli.js

@@ -21,13 +21,28 @@ function flags(argv, names) {
     const out = {};
     for (let i = 0; i < argv.length; i++) {
         const name = argv[i].replace(/^--/, "");
-        if (!argv[i].startsWith("--") || !names.includes(name) || argv[i + 1] === undefined)
+        if (!argv[i].startsWith("--") || !names.includes(name) || argv[i + 1] === undefined) {
             return `unexpected argument "${argv[i]}"`;
+        }
         out[name] = argv[++i];
     }
     const absent = names.filter((n) => out[n] === undefined);
     return absent.length > 0 ? `missing --${absent.join(", --")}` : out;
 }
+function rejectUnknownFlag(argv, command, names, flagsText) {
+    const known = new Set(names.map((name) => `--${name}`));
+    for (let i = 0; i < argv.length; i++) {
+        if (known.has(argv[i])) {
+            i++;
+            continue;
+        }
+        if (argv[i].startsWith("-")) {
+            console.error(`hive ${command}: unknown argument "${argv[i]}". Flags are ${flagsText}.`);
+            return true;
+        }
+    }
+    return false;
+}
 const intFlag = (value) => (/^\d+$/.test(value) ? Number(value) : null);
 function runningLeadById(id) {
     return db
@@ -36,6 +51,8 @@ function runningLeadById(id) {
         .get(id);
 }
 export async function cmdLeadHandoff(argv) {
+    if (rejectUnknownFlag(argv, "lead-handoff", ["request", "pad", "revision"], "--request <id>, --pad <id>, --revision <n>"))
+        return 1;
     const refuse = (why) => {
         console.error(`hive lead-handoff: ${why}. This session stays as it is.`);
         return 1;
@@ -152,6 +169,8 @@ const sleepMs = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 // `hive lead-handoff-grace`: the one detached owner of an attempt. It never outlives a changed
 // attempt or token, and after it claims the respawn it never repeats the kill.
 export async function runHandoffGrace(argv) {
+    if (rejectUnknownFlag(argv, "lead-handoff-grace", ["request", "attempt", "token"], "--request <id>, --attempt <n>, --token <token>"))
+        return 1;
     try {
         return await graceLoop(argv);
     }
@@ -245,6 +264,8 @@ async function graceLoop(argv) {
 // `hive lead-handoff-start`: runs in the respawned pane before Claude. It publishes the successor's
 // pid on the same lead row by CAS against the predecessor, and only then lets the shell exec Claude.
 export async function runHandoffStart(argv) {
+    if (rejectUnknownFlag(argv, "lead-handoff-start", ["request", "attempt", "token"], "--request <id>, --attempt <n>, --token <token>"))
+        return 1;
     const parsed = flags(argv, ["request", "attempt", "token"]);
     const refuse = (why, id) => {
         if (id !== undefined) {

package/dist/leadHandoffState.js

@@ -1,4 +1,5 @@
 import { db } from "./db.js";
+export { HELD_REASON_HANDOFF } from "./wakeSql.js";
 export const PRE_RESPAWN_STATES = ["pending", "wind_down", "requested", "grace", "postponed"];
 export const PASS_TIMEOUT_SECONDS = 10 * 60;
 export const STOP_HOLD_CAP_SECONDS = 15 * 60;
@@ -53,8 +54,6 @@ export function readHandoffGate(leadAgentId) {
         ? null
         : { requestId: row.id, requestWakeId: row.request_wake_id, holdAutomation: handoffHoldsAutomation(row) };
 }
-export const HELD_REASON_HANDOFF = "the lead is handing off to a fresh session; held through the wind-down and the successor's boot, and delivered to " +
-    "the lead row once the successor completes its first turn, or when the handoff fails or releases its hold";
 // A wake addressed to a lead row is held while that lead's handoff holds automation, except the
 // current request wake itself, which still passes every human-input and ownership guard.
 export function handoffHoldsWake(wakeId, deliverRowId) {

package/dist/leadMessage.js

@@ -1,4 +1,5 @@
 import { db } from "./db.js";
+import { DELIVERY_METHOD } from "./claudeWake.js";
 import { cutToUnitBudget, flatten } from "./slug.js";
 // 300 sits in the empty band between the two measured populations (todo 475): the largest lead-bound
 // message anyone has argued must arrive whole is 143 bytes, and the smallest real worker report is 440.
@@ -14,6 +15,18 @@ export const MESSAGE_RETENTION = "-7 days";
 // direction. Far above any observed rate, and lower than agent_state_log's 20,000 because a row here
 // holds unbounded message text rather than a hook payload.
 export const MESSAGE_MAX_ROWS = 5_000;
+export const MESSAGE_STATUS = {
+    socketPending: "socket-pending",
+    fallbackPending: "fallback-pending",
+    fallbackClaimed: "fallback-claimed",
+    complete: "complete",
+    failed: "failed",
+};
+export const MESSAGE_METHOD = {
+    socket: DELIVERY_METHOD.socket,
+    pty: DELIVERY_METHOD.pty,
+    ptyAfterSocketTimeout: DELIVERY_METHOD.ptyAfterSocketTimeout,
+};
 export const DELIVERY_FIELDS = [
     "delivery_status",
     "delivery_method",