@tt-a1i/hive 1.5.0 → 1.6.0

package/CHANGELOG.md

@@ -2,6 +2,31 @@
 
 All notable user-facing changes will be documented in this file.
 
+## 1.6.0 - 2026-06-02
+
+Orchestrator controls, worker visibility, and protocol-trust fixes.
+
+- Adds a Stop control to the running Orchestrator pane so a runaway Orchestrator
+  can be halted from the UI (the default is auto-approve, so this is the only
+  in-UI kill switch).
+- Surfaces per-worker queue depth and a latest-activity line on worker cards,
+  with a legend on the working badge clarifying that Hive does not auto-detect
+  stalls — the terminal is the source of truth.
+- Redelivers worker reports the Orchestrator missed: a report is no longer
+  silently lost when the Orchestrator is down or restarting; it is queued and
+  redelivered on the next report or `team list`.
+- Stops injecting the crash-recovery handover after a deliberate Stop and
+  Restart, so the Orchestrator is not handed stale open tasks it was meant to
+  drop.
+- Adds an outbound completion webhook setting: Hive POSTs a small JSON payload
+  to a URL you choose when a worker reports or a workflow finishes — wire it to
+  Slack, ntfy, Feishu, and the like.
+- Adds opt-in structured output to workflow `agent()` via `outputSchema`, so
+  fan-out/verify scripts receive a parsed object instead of parsing free text.
+- Adds `team next`: tasks in `.hive/tasks.md` can carry an optional
+  `[needs: #2]` dependency, and `team next` returns the tasks that are unblocked
+  now.
+
 ## 1.5.0 - 2026-05-31
 
 Workflow runtime, experimental team automation, and Codex reliability.

package/README.en.md

@@ -123,6 +123,18 @@ First-run flow:
 5. Ask the Orchestrator to delegate work. It sends tasks with
    `team send <worker-name> "<task>"`; workers report back with `team report`.
 
+If you want the Orchestrator to size the team itself, leave **Auto-staff**
+enabled (it is on by default). It can `team spawn` the right temporary mix of
+coders, testers, and reviewers for the task, then Hive dismisses those
+temporary workers when their work is done.
+
+For stronger automation, enable the experimental **Workflows** toggle in
+settings. The Orchestrator can then author and run multi-agent workflows that
+fan out across implementation, review, testing, or other stages. The topbar
+**Workflows** panel shows runs, phase results, logs, schedules, and stop
+controls. The same panel also lets you choose which CLI workflow-created
+agents use by default and which CLIs they are allowed to use.
+
 ## How It Works
 
 ```text
@@ -175,8 +187,17 @@ same shell environment you use to start Hive.
 - Orchestrator and worker terminals backed by real PTYs.
 - Add Worker flow with role presets for coder, reviewer, tester, and fully
   custom prompts and commands — wire any CLI agent into the role you need.
+- Auto-staff (experimental, on by default): the Orchestrator can create
+  temporary coders, testers, and reviewers based on the task, and Hive cleans
+  them up after their dispatch reports back.
+- Workflows (experimental, off by default): the Orchestrator can run
+  multi-stage, multi-agent workflows while Hive shows runs, logs, results,
+  schedules, and stop controls in the Workflows panel.
+- Workflow CLI policy: choose the default CLI for workflow-created agents and
+  restrict which CLIs workflow scripts may launch.
 - `.hive/tasks.md` editor with external-file conflict handling.
 - Background PTY preservation and best-effort native session resume.
+- A What's New dialog after upgrades with curated release highlights.
 - Local SQLite metadata under `~/.config/hive` by default, or `$HIVE_DATA_DIR`
   when set.
 

package/README.md

@@ -84,6 +84,10 @@ PWA 只是 UI 壳，Hive 后端仍需要在终端里跑着。如果启动 PWA
 4. 在 Team Members 面板里添加 Worker。
 5. 跟 Orchestrator 说一声让它派活，它会用 `team send <worker-name> "<task>"` 发任务，Worker 完事后用 `team report` 回报。
 
+想让 Orchestrator 自己决定团队规模，可以保留 **自动组队** 开关开启（默认开启）：它会按任务需要临时 `team spawn` 合适数量的 coder / tester / reviewer，任务结束后自动收回临时成员。
+
+想试更强的自动化，可以在右上角设置里开启实验性的 **Workflow** 开关。开启后，Orchestrator 可以编写并运行多 agent workflow，把一个目标拆成 fan-out / review / test 等阶段；顶部的 **Workflows** 面板会显示运行记录、阶段结果、定时任务和停止按钮。Workflow 创建的新 agent 默认使用哪种 CLI、允许使用哪些 CLI，也可以在 Workflows 面板里配置。
+
 ## 工作方式
 
 ```text
@@ -131,8 +135,12 @@ Hive 不替你安装这些 CLI。请在启动 Hive 的同一个 shell 环境里
 - Workspace 侧边栏，方便在多个本机项目之间切换。
 - Orchestrator 和 Worker 终端都是真实 PTY 支撑的。
 - Add Worker 预置 coder / reviewer / tester 等角色模板，也支持完全自定义 prompt 与命令——把任何 CLI agent 编排成你需要的角色。
+- 自动组队（实验性，默认开启）：Orchestrator 可以根据任务动态创建临时 coder / tester / reviewer，完成后自动回收。
+- Workflows（实验性，默认关闭）：Orchestrator 可以运行多阶段、多 agent 的 workflow，Hive 在 Workflows 面板里展示运行、日志、结果、定时任务和停止控制。
+- Workflow CLI 策略：为 workflow 创建的 agent 选择默认 CLI，并限制允许使用的 CLI，避免脚本误启未配置的 agent。
 - `.hive/tasks.md` 编辑器，带外部文件冲突处理。
 - PTY 后台保留 + 尽力使用各 CLI 原生 session 恢复。
+- 升级后的 What's New 弹窗，用简短 release highlights 告诉你新版改了什么。
 - 元数据存在本机 SQLite，默认在 `~/.config/hive`，或者通过 `$HIVE_DATA_DIR` 指定。
 
 Hive **不**提供 sandbox 隔离、多用户认证、云端托管，也不自带任何 agent 模型。它只负责调度你已经在用的本机 CLI。

package/dist/src/cli/team.js

@@ -9,6 +9,7 @@ const REQUIRED_ENV_KEYS = [
 const TEAM_USAGE = [
     'Usage:',
     '  team list',
+    '  team next   (tasks in .hive/tasks.md that are unblocked now — those whose [needs: #n] deps are all done)',
     '  team send <worker-name> "<task>"',
     '  team spawn <role> [--name <name>] [--cli <claude|codex|opencode|gemini>] [--ephemeral]',
     '  team dismiss <worker-name>',
@@ -243,6 +244,22 @@ export const runTeamCommand = async (argv) => {
         console.log(JSON.stringify(await response.json()));
         return;
     }
+    if (command === 'next') {
+        const env = getHiveEnv();
+        const baseUrl = getBaseUrl(env);
+        const response = await fetchRuntime(baseUrl, `/api/workspaces/${env.HIVE_PROJECT_ID}/tasks/next`, {
+            method: 'GET',
+            headers: {
+                'x-hive-agent-id': env.HIVE_AGENT_ID,
+                'x-hive-agent-token': env.HIVE_AGENT_TOKEN,
+            },
+        });
+        if (!response.ok) {
+            await throwHttpError(response);
+        }
+        console.log(JSON.stringify(await response.json()));
+        return;
+    }
     if (command === 'send') {
         const [workerName, ...taskParts] = args;
         const task = taskParts.join(' ').trim();

package/dist/src/server/agent-run-starter.d.ts

@@ -6,6 +6,7 @@ import type { AgentSessionStorePort } from './agent-runtime-ports.js';
 import type { LiveAgentRun } from './agent-runtime-types.js';
 import type { AgentTokenRegistry } from './agent-tokens.js';
 import type { CommandPresetRecord } from './command-preset-store.js';
+import { type FeatureFlags } from './feature-flags.js';
 import type { LiveRunRegistry } from './live-run-registry.js';
 import type { RestartPolicy } from './restart-policy.js';
 interface AgentRunStarterInput {
@@ -18,12 +19,10 @@ interface AgentRunStarterInput {
     getCommandPreset: (id: string) => CommandPresetRecord | undefined;
     getAgent: ((workspaceId: string, agentId: string) => AgentSummary | undefined) | undefined;
     restartPolicy: RestartPolicy;
-    /** Experimental workflow gate — gates the `team workflow` line + the
-     *  workflow-authoring rule in the orchestrator's startup prompt. */
-    getWorkflowsEnabled?: () => boolean;
-    /** Experimental auto-staff gate (default on) — gates the team-sizing rule
-     *  in the orchestrator's startup prompt. */
-    getAutostaffEnabled?: () => boolean;
+    /** Resolves the live experimental flags for the orchestrator's startup
+     *  prompt (`workflowsEnabled` gates the `team workflow` line + authoring
+     *  rule; `autostaffEnabled` gates the team-sizing rule). */
+    getFlags?: () => FeatureFlags;
 }
-export declare const createAgentRunStarter: ({ agentManager, registry, onAgentExit, store, sessionStore, tokenRegistry, getCommandPreset, getAgent, restartPolicy, getWorkflowsEnabled, getAutostaffEnabled, }: AgentRunStarterInput) => (workspace: WorkspaceSummary, agentId: string, config: AgentLaunchConfigInput, hivePort: string) => Promise<LiveAgentRun>;
+export declare const createAgentRunStarter: ({ agentManager, registry, onAgentExit, store, sessionStore, tokenRegistry, getCommandPreset, getAgent, restartPolicy, getFlags, }: AgentRunStarterInput) => (workspace: WorkspaceSummary, agentId: string, config: AgentLaunchConfigInput, hivePort: string) => Promise<LiveAgentRun>;
 export {};

package/dist/src/server/agent-run-starter.js

@@ -1,8 +1,9 @@
 import { buildAgentRunBootstrap, startAgentRunCapture } from './agent-run-bootstrap.js';
 import { handleAgentRunExit } from './agent-run-exit-handler.js';
 import { buildAgentStartupInstructions } from './agent-startup-instructions.js';
+import { FEATURE_FLAGS_ALL_OFF } from './feature-flags.js';
 import { createPostStartInputWriter, isInteractiveAgentCommand } from './post-start-input-writer.js';
-export const createAgentRunStarter = ({ agentManager, registry, onAgentExit, store, sessionStore, tokenRegistry, getCommandPreset, getAgent, restartPolicy, getWorkflowsEnabled, getAutostaffEnabled, }) => async (workspace, agentId, config, hivePort) => {
+export const createAgentRunStarter = ({ agentManager, registry, onAgentExit, store, sessionStore, tokenRegistry, getCommandPreset, getAgent, restartPolicy, getFlags, }) => async (workspace, agentId, config, hivePort) => {
     if (!agentManager)
         throw new Error('Agent manager is required to start agents');
     const agent = getAgent?.(workspace.id, agentId);
@@ -102,8 +103,7 @@ export const createAgentRunStarter = ({ agentManager, registry, onAgentExit, sto
                 void postStartWriter(run.runId, buildAgentStartupInstructions({
                     agent,
                     workspace,
-                    workflowsEnabled: getWorkflowsEnabled?.() ?? false,
-                    autostaffEnabled: getAutostaffEnabled?.() ?? false,
+                    flags: getFlags?.() ?? FEATURE_FLAGS_ALL_OFF,
                 })).catch(() => {
                     // The agent may have exited before post-start guidance could be written.
                 });

package/dist/src/server/agent-runtime-contract.d.ts

@@ -34,5 +34,15 @@ export interface AgentRuntime {
     }) => void;
     writeUserInputPrompt: (workspaceId: string, text: string) => void;
     writeSystemMessageToAgent: (workspaceId: string, agentId: string, text: string) => void;
+    /** Awaitable report delivery — rejects if the orchestrator PTY write fails,
+     *  so the caller can persist the report to the redelivery outbox. */
+    deliverReportToOrchestrator: (workspaceId: string, workerName: string, text: string, artifacts: string[], input?: {
+        requireActiveRun?: boolean;
+    }) => Promise<void>;
+    /** Awaitable opaque delivery — used to drain the report outbox so an entry
+     *  is marked delivered only after the PTY write resolves. */
+    deliverSystemMessageToAgent: (workspaceId: string, agentId: string, text: string, input?: {
+        requireActiveRun?: boolean;
+    }) => Promise<void>;
 }
 export type { StartAgentOptions };

package/dist/src/server/agent-runtime-stop-run.d.ts

@@ -1,4 +1,4 @@
 import type { AgentManager } from './agent-manager.js';
 import type { LiveAgentRun } from './agent-runtime-types.js';
 import type { LiveRunRegistry } from './live-run-registry.js';
-export declare const stopLiveRun: (agentManager: AgentManager | undefined, registry: LiveRunRegistry, syncRun: (run: LiveAgentRun) => LiveAgentRun, runId: string) => void;
+export declare const stopLiveRun: (agentManager: AgentManager | undefined, registry: LiveRunRegistry, syncRun: (run: LiveAgentRun) => LiveAgentRun, runId: string, onUserStop?: (runId: string) => void) => void;

package/dist/src/server/agent-runtime-stop-run.js

@@ -1,4 +1,4 @@
-export const stopLiveRun = (agentManager, registry, syncRun, runId) => {
+export const stopLiveRun = (agentManager, registry, syncRun, runId, onUserStop) => {
     if (!agentManager) {
         throw new Error('Agent manager is required to stop agents');
     }
@@ -12,5 +12,8 @@ export const stopLiveRun = (agentManager, registry, syncRun, runId) => {
     else if (['error', 'exited'].includes(agentManager.getRun(runId).status)) {
         return;
     }
+    // Reaching here means the run was genuinely live and we are about to kill it
+    // at the user's request — distinct from a crash that already ended the run.
+    onUserStop?.(runId);
     agentManager.stopRun(runId);
 };

package/dist/src/server/agent-runtime.d.ts

@@ -3,6 +3,7 @@ import type { AgentManager } from './agent-manager.js';
 import type { AgentRuntime } from './agent-runtime-contract.js';
 import type { AgentRunStorePort, AgentSessionStorePort } from './agent-runtime-ports.js';
 import type { CommandPresetRecord } from './command-preset-store.js';
+import type { FeatureFlags } from './feature-flags.js';
 import { type RestartPolicy } from './restart-policy.js';
-export declare const createAgentRuntime: (agentManager: AgentManager | undefined, agentRunStore: AgentRunStorePort, sessionStore: AgentSessionStorePort, getCommandPreset: (id: string) => CommandPresetRecord | undefined, onAgentExit: (workspaceId: string, agentId: string) => void, restartPolicy?: RestartPolicy, getAgent?: (workspaceId: string, agentId: string) => AgentSummary | undefined, getWorkflowsEnabled?: () => boolean, getAutostaffEnabled?: () => boolean) => AgentRuntime;
+export declare const createAgentRuntime: (agentManager: AgentManager | undefined, agentRunStore: AgentRunStorePort, sessionStore: AgentSessionStorePort, getCommandPreset: (id: string) => CommandPresetRecord | undefined, onAgentExit: (workspaceId: string, agentId: string) => void, restartPolicy?: RestartPolicy, getAgent?: (workspaceId: string, agentId: string) => AgentSummary | undefined, getFlags?: () => FeatureFlags) => AgentRuntime;
 export type { AgentRuntime };

package/dist/src/server/agent-runtime.js

@@ -10,7 +10,7 @@ import { createAgentStdinDispatcher } from './agent-stdin-dispatcher.js';
 import { createAgentTokenRegistry } from './agent-tokens.js';
 import { createLiveRunRegistry } from './live-run-registry.js';
 import { createNoopRestartPolicy } from './restart-policy.js';
-export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, getCommandPreset, onAgentExit, restartPolicy = createNoopRestartPolicy(), getAgent, getWorkflowsEnabled, getAutostaffEnabled) => {
+export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, getCommandPreset, onAgentExit, restartPolicy = createNoopRestartPolicy(), getAgent, getFlags) => {
     const registry = createLiveRunRegistry();
     const launchCache = createAgentLaunchCache(agentRunStore);
     const tokenRegistry = createAgentTokenRegistry();
@@ -29,7 +29,7 @@ export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, ge
         getWorkspaceId: launchCache.getWorkspaceId,
         registry,
         syncRun,
-        ...(getWorkflowsEnabled ? { getWorkflowsEnabled } : {}),
+        ...(getFlags ? { getFlags } : {}),
     });
     const startLiveRun = createAgentRunStarter({
         agentManager,
@@ -41,8 +41,7 @@ export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, ge
         getCommandPreset,
         getAgent,
         restartPolicy,
-        ...(getWorkflowsEnabled ? { getWorkflowsEnabled } : {}),
-        ...(getAutostaffEnabled ? { getAutostaffEnabled } : {}),
+        ...(getFlags ? { getFlags } : {}),
     });
     return {
         async close() {
@@ -106,7 +105,7 @@ export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, ge
             return startPromise;
         },
         stopAgentRun(runId) {
-            stopLiveRun(agentManager, registry, syncRun, runId);
+            stopLiveRun(agentManager, registry, syncRun, runId, (stoppedRunId) => restartPolicy.markUserStopped(stoppedRunId));
         },
         validateAgentToken: tokenRegistry.validate,
         writeReportPrompt(workspaceId, workerName, _workerId, text, artifacts, input = {}) {
@@ -127,5 +126,11 @@ export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, ge
         writeSystemMessageToAgent(workspaceId, agentId, text) {
             stdinDispatcher.writeSystemMessageToAgent(workspaceId, agentId, text);
         },
+        deliverReportToOrchestrator(workspaceId, workerName, text, artifacts, input = {}) {
+            return stdinDispatcher.deliverReportToOrchestrator(workspaceId, workerName, text, artifacts, input);
+        },
+        deliverSystemMessageToAgent(workspaceId, agentId, text, input = {}) {
+            return stdinDispatcher.deliverSystemMessageToAgent(workspaceId, agentId, text, input);
+        },
     };
 };

package/dist/src/server/agent-startup-instructions.d.ts

@@ -1,4 +1,5 @@
 import type { AgentSummary, WorkspaceSummary } from '../shared/types.js';
+import { type FeatureFlags } from './feature-flags.js';
 export declare const buildAgentSessionBindingMarker: ({ agent, workspace, }: {
     agent: AgentSummary;
     workspace: WorkspaceSummary;
@@ -7,14 +8,12 @@ export declare const buildAgentLegacyIdentityMarker: ({ agent, workspace, }: {
     agent: AgentSummary;
     workspace: WorkspaceSummary;
 }) => string;
-export declare const buildAgentStartupInstructions: ({ agent, workspace, workflowsEnabled, autostaffEnabled, }: {
+export declare const buildAgentStartupInstructions: ({ agent, workspace, flags, }: {
     agent: AgentSummary;
     workspace: WorkspaceSummary;
-    /** Experimental workflow gate. When off, the startup prompt omits the
-     *  `team workflow` command + the workflow-authoring rule so a fresh
-     *  orchestrator isn't told to run a command the runtime rejects. */
-    workflowsEnabled?: boolean;
-    /** Experimental auto-staff gate (default on). When on, the orchestrator is
-     *  told it may size the team to the task up front. */
-    autostaffEnabled?: boolean;
+    /** Live experimental flags. `workflowsEnabled` gates the `team workflow`
+     *  command line + the workflow-authoring rule (so a fresh orchestrator isn't
+     *  told to run a command the runtime rejects); `autostaffEnabled` gates the
+     *  team-sizing rule. Omitted → all off. */
+    flags?: FeatureFlags;
 }) => string;

package/dist/src/server/agent-startup-instructions.js

@@ -1,8 +1,10 @@
+import { FEATURE_FLAGS_ALL_OFF } from './feature-flags.js';
 import { getHiveTeamRules } from './hive-team-guidance.js';
 import { TASKS_RELATIVE_PATH } from './tasks-file.js';
 export const buildAgentSessionBindingMarker = ({ agent, workspace, }) => `Hive session binding: workspace_id=${workspace.id}; agent_id=${agent.id}`;
 export const buildAgentLegacyIdentityMarker = ({ agent, workspace, }) => `You are ${agent.name} (${agent.role}) in workspace ${workspace.name}.`;
-export const buildAgentStartupInstructions = ({ agent, workspace, workflowsEnabled = false, autostaffEnabled = false, }) => {
+export const buildAgentStartupInstructions = ({ agent, workspace, flags = FEATURE_FLAGS_ALL_OFF, }) => {
+    const { workflowsEnabled } = flags;
     const lines = [
         '<hive-message kind="startup">',
         '',
@@ -21,10 +23,10 @@ export const buildAgentStartupInstructions = ({ agent, workspace, workflowsEnabl
             ? [
                 '- team workflow run --stdin   (fan-out / staged work — see .hive/PROTOCOL.md for the DSL)',
             ]
-            : []), '', 'Always dispatch by worker name, never by worker id.', 'Always cancel an open dispatch by its dispatch id.', '', 'Hive worker dispatch rules:', ...getHiveTeamRules(agent, workflowsEnabled, autostaffEnabled));
+            : []), '', 'Always dispatch by worker name, never by worker id.', 'Always cancel an open dispatch by its dispatch id.', '', 'Hive worker dispatch rules:', ...getHiveTeamRules(agent, flags));
     }
     else {
-        lines.push('Available team commands:', '- team report "<result>" [--dispatch <id>] [--artifact <path>]    report done / failed / blocked', '- team report --stdin [--dispatch <id>] [--artifact <path>]       same, body read from stdin (multi-line / quotes / special chars)', '- team status "<state>" [--artifact <path>]                       mid-task progress / standby / connected status', '- team status --stdin [--artifact <path>]                         same, body read from stdin', '- team list                                                       list the workspace workers (with status)', '- team --help                                                     command syntax only; NOT a way to report', '', 'Syntax notes:', '- The body is the first positional argument; flag order is free: `team report "result" --dispatch X` and `team report --dispatch X "result"` are both valid.', "- Long bodies (multi-line / quotes / shell metacharacters) always go through `--stdin`, piped in via your shell (POSIX: a quoted heredoc `<<'EOF' … EOF` to stop $var / backtick expansion; Windows cmd: `type body.txt |` or `< body.txt`). `--stdin` only reads from stdin and relies on no shell syntax of its own.", '- On error the CLI also prints USAGE — fix the arguments against it.', '', 'When a task is done you MUST run `team report "<result>"`.', 'Failure, blocked, or partial completion are also reported with `team report "<current state and reason>"`.', 'When no task is in progress, report connection / standby / blocked state with `team status "<state>"`.', 'Do not call team send; workers cannot dispatch to each other.', '', 'Hive worker boundaries:', ...getHiveTeamRules(agent, workflowsEnabled, autostaffEnabled));
+        lines.push('Available team commands:', '- team report "<result>" [--dispatch <id>] [--artifact <path>]    report done / failed / blocked', '- team report --stdin [--dispatch <id>] [--artifact <path>]       same, body read from stdin (multi-line / quotes / special chars)', '- team status "<state>" [--artifact <path>]                       mid-task progress / standby / connected status', '- team status --stdin [--artifact <path>]                         same, body read from stdin', '- team list                                                       list the workspace workers (with status)', '- team --help                                                     command syntax only; NOT a way to report', '', 'Syntax notes:', '- The body is the first positional argument; flag order is free: `team report "result" --dispatch X` and `team report --dispatch X "result"` are both valid.', "- Long bodies (multi-line / quotes / shell metacharacters) always go through `--stdin`, piped in via your shell (POSIX: a quoted heredoc `<<'EOF' … EOF` to stop $var / backtick expansion; Windows cmd: `type body.txt |` or `< body.txt`). `--stdin` only reads from stdin and relies on no shell syntax of its own.", '- On error the CLI also prints USAGE — fix the arguments against it.', '', 'When a task is done you MUST run `team report "<result>"`.', 'Failure, blocked, or partial completion are also reported with `team report "<current state and reason>"`.', 'When no task is in progress, report connection / standby / blocked state with `team status "<state>"`.', 'Do not call team send; workers cannot dispatch to each other.', '', 'Hive worker boundaries:', ...getHiveTeamRules(agent, flags));
     }
     lines.push('', '</hive-message>', '');
     return lines.join('\n');

package/dist/src/server/agent-stdin-dispatcher.d.ts

@@ -1,6 +1,7 @@
 import type { AgentManager } from './agent-manager.js';
 import type { AgentLaunchConfigInput } from './agent-run-store.js';
 import type { LiveAgentRun } from './agent-runtime-types.js';
+import { type FeatureFlags } from './feature-flags.js';
 import type { LiveRunRegistry } from './live-run-registry.js';
 interface AgentStdinDispatcherInput {
     agentManager: AgentManager | undefined;
@@ -8,16 +9,17 @@ interface AgentStdinDispatcherInput {
     getWorkspaceId: (agentId: string) => string | undefined;
     registry: LiveRunRegistry;
     syncRun: (run: LiveAgentRun) => LiveAgentRun;
-    /** Whether the experimental workflow feature is on. Controls whether the
-     *  orchestrator reminder tail mentions `team workflow`. Defaults to off. */
-    getWorkflowsEnabled?: () => boolean;
+    /** Resolves the live experimental flags. The orchestrator reminder tail
+     *  appended to every injected message reads `workflowsEnabled` from it.
+     *  Optional; omitted → all flags off. */
+    getFlags?: () => FeatureFlags;
 }
-export declare const buildOrchestratorReportPayload: (workerName: string, text: string, artifacts: string[], workflowsEnabled?: boolean) => string;
-export declare const buildOrchestratorStatusPayload: (workerName: string, text: string, artifacts: string[], workflowsEnabled?: boolean) => string;
-export declare const buildOrchestratorUserInputPayload: (text: string, workflowsEnabled?: boolean) => string;
+export declare const buildOrchestratorReportPayload: (workerName: string, text: string, artifacts: string[], flags?: FeatureFlags) => string;
+export declare const buildOrchestratorStatusPayload: (workerName: string, text: string, artifacts: string[], flags?: FeatureFlags) => string;
+export declare const buildOrchestratorUserInputPayload: (text: string, flags?: FeatureFlags) => string;
 export declare const buildWorkerDispatchPayload: (fromAgentName: string, workerDescription: string, dispatchId: string, text: string) => string;
 export declare const buildWorkerCancelPayload: (dispatchId: string, reason: string) => string;
-export declare const createAgentStdinDispatcher: ({ agentManager, getLaunchConfig, getWorkspaceId, registry, syncRun, getWorkflowsEnabled, }: AgentStdinDispatcherInput) => {
+export declare const createAgentStdinDispatcher: ({ agentManager, getLaunchConfig, getWorkspaceId, registry, syncRun, getFlags, }: AgentStdinDispatcherInput) => {
     writeReportPrompt(workspaceId: string, workerName: string, text: string, artifacts: string[], input?: {
         requireActiveRun?: boolean;
     }): void;
@@ -33,5 +35,16 @@ export declare const createAgentStdinDispatcher: ({ agentManager, getLaunchConfi
      *  Used by the workflow runner to notify the triggering orchestrator
      *  when a run finishes (mirrors Claude Code's <task-notification>). */
     writeSystemMessageToAgent(workspaceId: string, agentId: string, text: string): void;
+    /** Awaitable report delivery — same payload as writeReportPrompt but the
+     *  promise is returned so the caller can persist the report to the
+     *  redelivery outbox if the orchestrator PTY write rejects. */
+    deliverReportToOrchestrator(workspaceId: string, workerName: string, text: string, artifacts: string[], input?: {
+        requireActiveRun?: boolean;
+    }): Promise<void>;
+    /** Awaitable opaque delivery — used to drain the report outbox so an entry
+     *  is marked delivered only after the PTY write actually resolves. */
+    deliverSystemMessageToAgent(workspaceId: string, agentId: string, text: string, input?: {
+        requireActiveRun?: boolean;
+    }): Promise<void>;
 };
 export {};

package/dist/src/server/agent-stdin-dispatcher.js

@@ -1,21 +1,22 @@
+import { FEATURE_FLAGS_ALL_OFF } from './feature-flags.js';
 import { buildOrchestratorReminderTail, buildWorkerReminderTail } from './hive-team-guidance.js';
 import { PtyInactiveError } from './http-errors.js';
 import { createPostStartInputWriter } from './post-start-input-writer.js';
-export const buildOrchestratorReportPayload = (workerName, text, artifacts, workflowsEnabled = false) => {
+export const buildOrchestratorReportPayload = (workerName, text, artifacts, flags = FEATURE_FLAGS_ALL_OFF) => {
     const lines = [`<hive-message kind="report" from="@${workerName}">`, text];
     for (const artifact of artifacts)
         lines.push(`artifact: ${artifact}`);
-    lines.push('</hive-message>', '', buildOrchestratorReminderTail(workflowsEnabled), '');
+    lines.push('</hive-message>', '', buildOrchestratorReminderTail(flags), '');
     return lines.join('\n');
 };
-export const buildOrchestratorStatusPayload = (workerName, text, artifacts, workflowsEnabled = false) => {
+export const buildOrchestratorStatusPayload = (workerName, text, artifacts, flags = FEATURE_FLAGS_ALL_OFF) => {
     const lines = [`<hive-message kind="status" from="@${workerName}">`, text];
     for (const artifact of artifacts)
         lines.push(`artifact: ${artifact}`);
-    lines.push('</hive-message>', '', buildOrchestratorReminderTail(workflowsEnabled), '');
+    lines.push('</hive-message>', '', buildOrchestratorReminderTail(flags), '');
     return lines.join('\n');
 };
-export const buildOrchestratorUserInputPayload = (text, workflowsEnabled = false) => [text, '', buildOrchestratorReminderTail(workflowsEnabled), ''].join('\n');
+export const buildOrchestratorUserInputPayload = (text, flags = FEATURE_FLAGS_ALL_OFF) => [text, '', buildOrchestratorReminderTail(flags), ''].join('\n');
 export const buildWorkerDispatchPayload = (fromAgentName, workerDescription, dispatchId, text) => [
     `<hive-message kind="dispatch" from="@${fromAgentName}">`,
     '',
@@ -44,8 +45,8 @@ export const buildWorkerCancelPayload = (dispatchId, reason) => [
     '</hive-message>',
     '',
 ].join('\n');
-export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getWorkspaceId, registry, syncRun, getWorkflowsEnabled, }) => {
-    const workflowsEnabled = () => getWorkflowsEnabled?.() ?? false;
+export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getWorkspaceId, registry, syncRun, getFlags, }) => {
+    const flags = () => getFlags?.() ?? FEATURE_FLAGS_ALL_OFF;
     const chains = new Map();
     const getChain = (agentId) => {
         let chain = chains.get(agentId);
@@ -156,10 +157,10 @@ export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getW
     };
     return {
         writeReportPrompt(workspaceId, workerName, text, artifacts, input = {}) {
-            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorReportPayload(workerName, text, artifacts, workflowsEnabled()), input));
+            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorReportPayload(workerName, text, artifacts, flags()), input));
         },
         writeStatusPrompt(workspaceId, workerName, text, artifacts, input = {}) {
-            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorStatusPayload(workerName, text, artifacts, workflowsEnabled()), input));
+            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorStatusPayload(workerName, text, artifacts, flags()), input));
         },
         writeSendPrompt(workspaceId, workerId, dispatchId, fromAgentName, workerDescription, text) {
             return writeToActiveAgentRun(workspaceId, workerId, buildWorkerDispatchPayload(fromAgentName, workerDescription, dispatchId, text), { requireActiveRun: true });
@@ -168,7 +169,7 @@ export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getW
             swallowQueuedFailure(writeToActiveAgentRun(workspaceId, workerId, buildWorkerCancelPayload(dispatchId, reason), input));
         },
         writeUserInputPrompt(workspaceId, text) {
-            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorUserInputPayload(text, workflowsEnabled())));
+            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorUserInputPayload(text, flags())));
         },
         /** Generic: deliver an opaque text block to a specific agent's PTY.
          *  Used by the workflow runner to notify the triggering orchestrator
@@ -176,5 +177,16 @@ export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getW
         writeSystemMessageToAgent(workspaceId, agentId, text) {
             swallowQueuedFailure(writeToActiveAgentRun(workspaceId, agentId, text));
         },
+        /** Awaitable report delivery — same payload as writeReportPrompt but the
+         *  promise is returned so the caller can persist the report to the
+         *  redelivery outbox if the orchestrator PTY write rejects. */
+        deliverReportToOrchestrator(workspaceId, workerName, text, artifacts, input = {}) {
+            return writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorReportPayload(workerName, text, artifacts, flags()), input);
+        },
+        /** Awaitable opaque delivery — used to drain the report outbox so an entry
+         *  is marked delivered only after the PTY write actually resolves. */
+        deliverSystemMessageToAgent(workspaceId, agentId, text, input = {}) {
+            return writeToActiveAgentRun(workspaceId, agentId, text, input);
+        },
     };
 };

package/dist/src/server/feature-flags.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Every experimental feature flag resolved into one snapshot.
+ *
+ * Threading this bag through the prompt-build call graph — instead of one
+ * `getX` accessor per flag — is the whole point of this module: a new flag adds
+ * a field here and is read at the one site that needs it, without touching any
+ * of the carriers in between (agent-runtime → run-starter / restart-policy /
+ * tasks-watcher → the pure builders in hive-team-guidance).
+ *
+ * Each flag keeps its own storage semantics and doc in its own file
+ * ([[workflow-feature]], [[team-autostaff]]); this module only composes them.
+ */
+export interface FeatureFlags {
+    /** Workflow runtime — `team workflow`, the scheduler, the Drawer, and the
+     *  orchestrator guidance that teaches them. Default OFF. */
+    workflowsEnabled: boolean;
+    /** Auto-staff orchestrator guidance — size the team to the task up front
+     *  rather than one worker at a time. Default ON. */
+    autostaffEnabled: boolean;
+}
+/**
+ * Conservative all-off snapshot. Use as the parameter default wherever a
+ * builder is called without flags — it preserves the per-flag `= false`
+ * defaults the builders carried before this registry existed.
+ *
+ * This is NOT the storage default: an ABSENT `team.autostaff` key reads back
+ * ON via {@link readFeatureFlags}. Only an OMITTED argument falls back to off,
+ * which is the safe choice (never inject guidance for a flag nobody resolved).
+ */
+export declare const FEATURE_FLAGS_ALL_OFF: FeatureFlags;
+interface AppStateReader {
+    getAppState: (key: string) => {
+        value: string | null;
+    } | undefined;
+}
+/**
+ * Read every flag from app_state into one snapshot, each with its own storage
+ * default (workflows off-when-absent, auto-staff on-when-absent). Called fresh
+ * each time so a Settings toggle takes effect without restarting the runtime.
+ */
+export declare const readFeatureFlags: (settings: AppStateReader) => FeatureFlags;
+export {};

package/dist/src/server/feature-flags.js

@@ -0,0 +1,24 @@
+import { AUTOSTAFF_ENABLED_KEY, readAutostaffEnabled } from './team-autostaff.js';
+import { readWorkflowEnabled, WORKFLOW_ENABLED_KEY } from './workflow-feature.js';
+/**
+ * Conservative all-off snapshot. Use as the parameter default wherever a
+ * builder is called without flags — it preserves the per-flag `= false`
+ * defaults the builders carried before this registry existed.
+ *
+ * This is NOT the storage default: an ABSENT `team.autostaff` key reads back
+ * ON via {@link readFeatureFlags}. Only an OMITTED argument falls back to off,
+ * which is the safe choice (never inject guidance for a flag nobody resolved).
+ */
+export const FEATURE_FLAGS_ALL_OFF = {
+    workflowsEnabled: false,
+    autostaffEnabled: false,
+};
+/**
+ * Read every flag from app_state into one snapshot, each with its own storage
+ * default (workflows off-when-absent, auto-staff on-when-absent). Called fresh
+ * each time so a Settings toggle takes effect without restarting the runtime.
+ */
+export const readFeatureFlags = (settings) => ({
+    workflowsEnabled: readWorkflowEnabled(settings.getAppState(WORKFLOW_ENABLED_KEY)?.value ?? null),
+    autostaffEnabled: readAutostaffEnabled(settings.getAppState(AUTOSTAFF_ENABLED_KEY)?.value ?? null),
+});

package/dist/src/server/hive-team-guidance.d.ts

@@ -1,4 +1,5 @@
 import type { AgentSummary } from '../shared/types.js';
+import { type FeatureFlags } from './feature-flags.js';
 import { type WorkflowCliPolicy } from './workflow-cli-policy.js';
 /**
  * Tail reminder appended to every message that flows INTO the orchestrator
@@ -17,7 +18,7 @@ import { type WorkflowCliPolicy } from './workflow-cli-policy.js';
  * the workflow DSL live in `.hive/PROTOCOL.md`, which agents re-read on demand.
  * A long banner on every turn is itself the noise this envelope exists to beat.
  */
-export declare const buildOrchestratorReminderTail: (workflowsEnabled: boolean) => string;
+export declare const buildOrchestratorReminderTail: ({ workflowsEnabled }: FeatureFlags) => string;
 /**
  * Tail reminder appended to dispatches sent TO a worker. Reinforces the
  * worker identity (so the agent does not regress into its normal CLI
@@ -25,7 +26,7 @@ export declare const buildOrchestratorReminderTail: (workflowsEnabled: boolean)
  * with dispatch_id pre-bound.
  */
 export declare const buildWorkerReminderTail: (dispatchId: string) => string;
-export declare const getHiveTeamRules: (agent: Pick<AgentSummary, "role">, workflowsEnabled?: boolean, autostaffEnabled?: boolean) => readonly string[];
+export declare const getHiveTeamRules: (agent: Pick<AgentSummary, "role">, flags?: FeatureFlags) => readonly string[];
 /**
  * Workspace-local protocol cheat sheet written to `.hive/PROTOCOL.md`. Agents
  * are explicitly trained to look at project root markdown when confused, so
@@ -35,4 +36,4 @@ export declare const getHiveTeamRules: (agent: Pick<AgentSummary, "role">, workf
  * syntax and the workflow DSL reference — the always-on injections only carry
  * the lean core rules and point here.
  */
-export declare const buildProtocolDoc: (cliPolicy?: WorkflowCliPolicy, workflowsEnabled?: boolean, autostaffEnabled?: boolean) => string;
+export declare const buildProtocolDoc: (cliPolicy?: WorkflowCliPolicy, flags?: FeatureFlags) => string;