@tt-a1i/hive 1.5.0 → 1.7.0

package/CHANGELOG.md

@@ -2,6 +2,45 @@
 
 All notable user-facing changes will be documented in this file.
 
+## 1.7.0 - 2026-06-05
+
+Hermes joins the roster.
+
+- Adds Hermes as a fifth built-in CLI agent preset alongside Claude Code,
+  Codex, OpenCode, and Gemini: available as an Orchestrator or Worker, in
+  `team spawn --cli hermes`, and in the workflow CLI allowlist.
+- Hermes runs YOLO via `--yolo` and resumes sessions via
+  `--resume <session_id>`; crash recovery (Layer A) captures its session id
+  from the CLI's own startup output through a new stdout-based capture
+  source.
+- Existing installs pick the preset up automatically via a database
+  migration — no manual setup beyond having `hermes` on your PATH.
+
+## 1.6.0 - 2026-06-02
+
+Orchestrator controls, worker visibility, and protocol-trust fixes.
+
+- Adds a Stop control to the running Orchestrator pane so a runaway Orchestrator
+  can be halted from the UI (the default is auto-approve, so this is the only
+  in-UI kill switch).
+- Surfaces per-worker queue depth and a latest-activity line on worker cards,
+  with a legend on the working badge clarifying that Hive does not auto-detect
+  stalls — the terminal is the source of truth.
+- Redelivers worker reports the Orchestrator missed: a report is no longer
+  silently lost when the Orchestrator is down or restarting; it is queued and
+  redelivered on the next report or `team list`.
+- Stops injecting the crash-recovery handover after a deliberate Stop and
+  Restart, so the Orchestrator is not handed stale open tasks it was meant to
+  drop.
+- Adds an outbound completion webhook setting: Hive POSTs a small JSON payload
+  to a URL you choose when a worker reports or a workflow finishes — wire it to
+  Slack, ntfy, Feishu, and the like.
+- Adds opt-in structured output to workflow `agent()` via `outputSchema`, so
+  fan-out/verify scripts receive a parsed object instead of parsing free text.
+- Adds `team next`: tasks in `.hive/tasks.md` can carry an optional
+  `[needs: #2]` dependency, and `team next` returns the tasks that are unblocked
+  now.
+
 ## 1.5.0 - 2026-05-31
 
 Workflow runtime, experimental team automation, and Codex reliability.

package/README.en.md

@@ -9,7 +9,7 @@
 </p>
 
 **Hive is a browser-native workbench where a team of agents works together — one orchestrates, the rest execute, all on your laptop.** The orchestrator
-is a real `claude` / `codex` / `opencode` / `gemini` process — not you, and
+is a real `claude` / `codex` / `opencode` / `gemini` / `hermes` process — not you, and
 not a script — and so are the workers it dispatches to. Every agent runs as
 a real PTY on your machine, talks through a small `team` protocol that Hive
 injects into each agent's shell, and shares a markdown task graph at
@@ -123,6 +123,18 @@ First-run flow:
 5. Ask the Orchestrator to delegate work. It sends tasks with
    `team send <worker-name> "<task>"`; workers report back with `team report`.
 
+If you want the Orchestrator to size the team itself, leave **Auto-staff**
+enabled (it is on by default). It can `team spawn` the right temporary mix of
+coders, testers, and reviewers for the task, then Hive dismisses those
+temporary workers when their work is done.
+
+For stronger automation, enable the experimental **Workflows** toggle in
+settings. The Orchestrator can then author and run multi-agent workflows that
+fan out across implementation, review, testing, or other stages. The topbar
+**Workflows** panel shows runs, phase results, logs, schedules, and stop
+controls. The same panel also lets you choose which CLI workflow-created
+agents use by default and which CLIs they are allowed to use.
+
 ## How It Works
 
 ```text
@@ -164,6 +176,7 @@ Three details matter:
 | Codex | `codex` | `--dangerously-bypass-approvals-and-sandbox` | `resume <session_id>` |
 | OpenCode | `opencode` | Config-driven in `~/.config/opencode/opencode.json` | `--session <session_id>` |
 | Gemini | `gemini` | `--yolo` | `--resume <session_id>` |
+| Hermes | `hermes` | `--yolo` | `--resume <session_id>` |
 | Custom | Any executable | User configured | User configured |
 
 Hive does not install these CLIs for you. Install and authenticate them in the
@@ -175,8 +188,17 @@ same shell environment you use to start Hive.
 - Orchestrator and worker terminals backed by real PTYs.
 - Add Worker flow with role presets for coder, reviewer, tester, and fully
   custom prompts and commands — wire any CLI agent into the role you need.
+- Auto-staff (experimental, on by default): the Orchestrator can create
+  temporary coders, testers, and reviewers based on the task, and Hive cleans
+  them up after their dispatch reports back.
+- Workflows (experimental, off by default): the Orchestrator can run
+  multi-stage, multi-agent workflows while Hive shows runs, logs, results,
+  schedules, and stop controls in the Workflows panel.
+- Workflow CLI policy: choose the default CLI for workflow-created agents and
+  restrict which CLIs workflow scripts may launch.
 - `.hive/tasks.md` editor with external-file conflict handling.
 - Background PTY preservation and best-effort native session resume.
+- A What's New dialog after upgrades with curated release highlights.
 - Local SQLite metadata under `~/.config/hive` by default, or `$HIVE_DATA_DIR`
   when set.
 

package/README.md

@@ -8,7 +8,7 @@
   <img src="./assets/hive-hero.png" alt="Hive 本机多 agent 协作工作台" />
 </p>
 
-**Hive 是浏览器里的 Agent 协作工作台——一群 Agent 在你本机各自开工，一个当 Orchestrator 派活、归总进展，其余各司其职。** Orchestrator 本身就是一个真实的 `claude` / `codex` / `opencode` / `gemini` 进程——不是你、也不是脚本——它派单的 Worker 同样是真 CLI agent。所有 agent 都是本机真实的 PTY 进程，通过 Hive 注入到 shell 里的小型 `team` 协议互相通信，共享 `<workspace>/.hive/tasks.md` 这份 markdown 任务图。
+**Hive 是浏览器里的 Agent 协作工作台——一群 Agent 在你本机各自开工，一个当 Orchestrator 派活、归总进展，其余各司其职。** Orchestrator 本身就是一个真实的 `claude` / `codex` / `opencode` / `gemini` / `hermes` 进程——不是你、也不是脚本——它派单的 Worker 同样是真 CLI agent。所有 agent 都是本机真实的 PTY 进程，通过 Hive 注入到 shell 里的小型 `team` 协议互相通信，共享 `<workspace>/.hive/tasks.md` 这份 markdown 任务图。
 
 写代码、做调研、起草文档、做翻译——凡是能拆给一群人协作的脑力活，都可以让一群 Agent 合伙干。
 
@@ -84,6 +84,10 @@ PWA 只是 UI 壳，Hive 后端仍需要在终端里跑着。如果启动 PWA
 4. 在 Team Members 面板里添加 Worker。
 5. 跟 Orchestrator 说一声让它派活，它会用 `team send <worker-name> "<task>"` 发任务，Worker 完事后用 `team report` 回报。
 
+想让 Orchestrator 自己决定团队规模，可以保留 **自动组队** 开关开启（默认开启）：它会按任务需要临时 `team spawn` 合适数量的 coder / tester / reviewer，任务结束后自动收回临时成员。
+
+想试更强的自动化，可以在右上角设置里开启实验性的 **Workflow** 开关。开启后，Orchestrator 可以编写并运行多 agent workflow，把一个目标拆成 fan-out / review / test 等阶段；顶部的 **Workflows** 面板会显示运行记录、阶段结果、定时任务和停止按钮。Workflow 创建的新 agent 默认使用哪种 CLI、允许使用哪些 CLI，也可以在 Workflows 面板里配置。
+
 ## 工作方式
 
 ```text
@@ -122,6 +126,7 @@ Workspace 任务图：
 | Codex | `codex` | `--dangerously-bypass-approvals-and-sandbox` | `resume <session_id>` |
 | OpenCode | `opencode` | 由 `~/.config/opencode/opencode.json` 配置 | `--session <session_id>` |
 | Gemini | `gemini` | `--yolo` | `--resume <session_id>` |
+| Hermes | `hermes` | `--yolo` | `--resume <session_id>` |
 | 自定义 | 任意可执行文件 | 自己配 | 自己配 |
 
 Hive 不替你安装这些 CLI。请在启动 Hive 的同一个 shell 环境里先装好、登录好。
@@ -131,8 +136,12 @@ Hive 不替你安装这些 CLI。请在启动 Hive 的同一个 shell 环境里
 - Workspace 侧边栏，方便在多个本机项目之间切换。
 - Orchestrator 和 Worker 终端都是真实 PTY 支撑的。
 - Add Worker 预置 coder / reviewer / tester 等角色模板，也支持完全自定义 prompt 与命令——把任何 CLI agent 编排成你需要的角色。
+- 自动组队（实验性，默认开启）：Orchestrator 可以根据任务动态创建临时 coder / tester / reviewer，完成后自动回收。
+- Workflows（实验性，默认关闭）：Orchestrator 可以运行多阶段、多 agent 的 workflow，Hive 在 Workflows 面板里展示运行、日志、结果、定时任务和停止控制。
+- Workflow CLI 策略：为 workflow 创建的 agent 选择默认 CLI，并限制允许使用的 CLI，避免脚本误启未配置的 agent。
 - `.hive/tasks.md` 编辑器，带外部文件冲突处理。
 - PTY 后台保留 + 尽力使用各 CLI 原生 session 恢复。
+- 升级后的 What's New 弹窗，用简短 release highlights 告诉你新版改了什么。
 - 元数据存在本机 SQLite，默认在 `~/.config/hive`，或者通过 `$HIVE_DATA_DIR` 指定。
 
 Hive **不**提供 sandbox 隔离、多用户认证、云端托管，也不自带任何 agent 模型。它只负责调度你已经在用的本机 CLI。

package/dist/src/cli/team.js

@@ -9,8 +9,9 @@ const REQUIRED_ENV_KEYS = [
 const TEAM_USAGE = [
     'Usage:',
     '  team list',
+    '  team next   (tasks in .hive/tasks.md that are unblocked now — those whose [needs: #n] deps are all done)',
     '  team send <worker-name> "<task>"',
-    '  team spawn <role> [--name <name>] [--cli <claude|codex|opencode|gemini>] [--ephemeral]',
+    '  team spawn <role> [--name <name>] [--cli <claude|codex|opencode|gemini|hermes>] [--ephemeral]',
     '  team dismiss <worker-name>',
     "  team workflow run --stdin [--args '<JSON>']   (script from stdin — for multi-line scripts)",
     '  team workflow run --inline "<source>" [--args \'<JSON>\']',
@@ -243,6 +244,22 @@ export const runTeamCommand = async (argv) => {
         console.log(JSON.stringify(await response.json()));
         return;
     }
+    if (command === 'next') {
+        const env = getHiveEnv();
+        const baseUrl = getBaseUrl(env);
+        const response = await fetchRuntime(baseUrl, `/api/workspaces/${env.HIVE_PROJECT_ID}/tasks/next`, {
+            method: 'GET',
+            headers: {
+                'x-hive-agent-id': env.HIVE_AGENT_ID,
+                'x-hive-agent-token': env.HIVE_AGENT_TOKEN,
+            },
+        });
+        if (!response.ok) {
+            await throwHttpError(response);
+        }
+        console.log(JSON.stringify(await response.json()));
+        return;
+    }
     if (command === 'send') {
         const [workerName, ...taskParts] = args;
         const task = taskParts.join(' ').trim();
@@ -274,7 +291,7 @@ export const runTeamCommand = async (argv) => {
     if (command === 'spawn') {
         const role = args[0];
         if (!role || role.startsWith('--')) {
-            throw new Error('Usage: team spawn <role> [--name <name>] [--cli <claude|codex|opencode|gemini>] [--ephemeral]\n' +
+            throw new Error('Usage: team spawn <role> [--name <name>] [--cli <claude|codex|opencode|gemini|hermes>] [--ephemeral]\n' +
                 '  Default: persistent member (lives until you `team dismiss` it).\n' +
                 '  --ephemeral: auto-dismiss after the next dispatch report (one-shot worker).');
         }

package/dist/src/server/agent-run-bootstrap.d.ts

@@ -60,6 +60,10 @@ export declare const buildAgentRunBootstrap: (workspace: WorkspaceSummary, agent
         };
         knownSessionIds: Set<string>;
         root: string;
+    } | {
+        knownSessionIds: Set<string>;
+        env?: never;
+        root?: never;
     } | undefined;
     startConfig: AgentLaunchConfigInput;
     startEnv: {
@@ -69,8 +73,9 @@ export declare const buildAgentRunBootstrap: (workspace: WorkspaceSummary, agent
         HIVE_AGENT_TOKEN: string;
     };
 };
-export declare const startAgentRunCapture: ({ agentId, sessionCaptureSnapshot, sessionStore, startConfig, workspace, }: {
+export declare const startAgentRunCapture: ({ agentId, getRunOutput, sessionCaptureSnapshot, sessionStore, startConfig, workspace, }: {
     agentId: string;
+    getRunOutput?: () => string | null;
     sessionCaptureSnapshot: SessionCaptureSnapshot | undefined;
     sessionStore: AgentSessionStorePort;
     startConfig: AgentLaunchConfigInput;

package/dist/src/server/agent-run-bootstrap.js

@@ -84,10 +84,13 @@ export const buildAgentRunBootstrap = (workspace, agentId, config, sessionStore,
         },
     };
 };
-export const startAgentRunCapture = ({ agentId, sessionCaptureSnapshot, sessionStore, startConfig, workspace, }) => {
+export const startAgentRunCapture = ({ agentId, getRunOutput, sessionCaptureSnapshot, sessionStore, startConfig, workspace, }) => {
     if (!sessionCaptureSnapshot || !startConfig.sessionIdCapture)
         return;
-    void captureSessionIdForCapture(workspace.path, startConfig.sessionIdCapture, sessionCaptureSnapshot, (sessionId) => {
+    const captureSnapshot = startConfig.sessionIdCapture.source === 'stdout_regex' && getRunOutput
+        ? { ...sessionCaptureSnapshot, getOutput: getRunOutput }
+        : sessionCaptureSnapshot;
+    void captureSessionIdForCapture(workspace.path, startConfig.sessionIdCapture, captureSnapshot, (sessionId) => {
         sessionStore.setLastSessionId(workspace.id, agentId, sessionId);
     }, SESSION_CAPTURE_TIMEOUT_MS);
 };

package/dist/src/server/agent-run-starter.d.ts

@@ -6,6 +6,7 @@ import type { AgentSessionStorePort } from './agent-runtime-ports.js';
 import type { LiveAgentRun } from './agent-runtime-types.js';
 import type { AgentTokenRegistry } from './agent-tokens.js';
 import type { CommandPresetRecord } from './command-preset-store.js';
+import { type FeatureFlags } from './feature-flags.js';
 import type { LiveRunRegistry } from './live-run-registry.js';
 import type { RestartPolicy } from './restart-policy.js';
 interface AgentRunStarterInput {
@@ -18,12 +19,10 @@ interface AgentRunStarterInput {
     getCommandPreset: (id: string) => CommandPresetRecord | undefined;
     getAgent: ((workspaceId: string, agentId: string) => AgentSummary | undefined) | undefined;
     restartPolicy: RestartPolicy;
-    /** Experimental workflow gate — gates the `team workflow` line + the
-     *  workflow-authoring rule in the orchestrator's startup prompt. */
-    getWorkflowsEnabled?: () => boolean;
-    /** Experimental auto-staff gate (default on) — gates the team-sizing rule
-     *  in the orchestrator's startup prompt. */
-    getAutostaffEnabled?: () => boolean;
+    /** Resolves the live experimental flags for the orchestrator's startup
+     *  prompt (`workflowsEnabled` gates the `team workflow` line + authoring
+     *  rule; `autostaffEnabled` gates the team-sizing rule). */
+    getFlags?: () => FeatureFlags;
 }
-export declare const createAgentRunStarter: ({ agentManager, registry, onAgentExit, store, sessionStore, tokenRegistry, getCommandPreset, getAgent, restartPolicy, getWorkflowsEnabled, getAutostaffEnabled, }: AgentRunStarterInput) => (workspace: WorkspaceSummary, agentId: string, config: AgentLaunchConfigInput, hivePort: string) => Promise<LiveAgentRun>;
+export declare const createAgentRunStarter: ({ agentManager, registry, onAgentExit, store, sessionStore, tokenRegistry, getCommandPreset, getAgent, restartPolicy, getFlags, }: AgentRunStarterInput) => (workspace: WorkspaceSummary, agentId: string, config: AgentLaunchConfigInput, hivePort: string) => Promise<LiveAgentRun>;
 export {};

package/dist/src/server/agent-run-starter.js

@@ -1,8 +1,9 @@
 import { buildAgentRunBootstrap, startAgentRunCapture } from './agent-run-bootstrap.js';
 import { handleAgentRunExit } from './agent-run-exit-handler.js';
 import { buildAgentStartupInstructions } from './agent-startup-instructions.js';
+import { FEATURE_FLAGS_ALL_OFF } from './feature-flags.js';
 import { createPostStartInputWriter, isInteractiveAgentCommand } from './post-start-input-writer.js';
-export const createAgentRunStarter = ({ agentManager, registry, onAgentExit, store, sessionStore, tokenRegistry, getCommandPreset, getAgent, restartPolicy, getWorkflowsEnabled, getAutostaffEnabled, }) => async (workspace, agentId, config, hivePort) => {
+export const createAgentRunStarter = ({ agentManager, registry, onAgentExit, store, sessionStore, tokenRegistry, getCommandPreset, getAgent, restartPolicy, getFlags, }) => async (workspace, agentId, config, hivePort) => {
     if (!agentManager)
         throw new Error('Agent manager is required to start agents');
     const agent = getAgent?.(workspace.id, agentId);
@@ -84,7 +85,21 @@ export const createAgentRunStarter = ({ agentManager, registry, onAgentExit, sto
         registry.clearPendingExitCode(run.runId);
         return liveRun;
     }
-    startAgentRunCapture({ agentId, sessionCaptureSnapshot, sessionStore, startConfig, workspace });
+    startAgentRunCapture({
+        agentId,
+        getRunOutput: () => {
+            try {
+                return agentManager.getRun(run.runId).output;
+            }
+            catch {
+                return null;
+            }
+        },
+        sessionCaptureSnapshot,
+        sessionStore,
+        startConfig,
+        workspace,
+    });
     const postStartWriter = createPostStartInputWriter(agentManager, startConfig.interactiveCommand ?? startConfig.command);
     queueMicrotask(() => {
         try {
@@ -102,8 +117,7 @@ export const createAgentRunStarter = ({ agentManager, registry, onAgentExit, sto
                 void postStartWriter(run.runId, buildAgentStartupInstructions({
                     agent,
                     workspace,
-                    workflowsEnabled: getWorkflowsEnabled?.() ?? false,
-                    autostaffEnabled: getAutostaffEnabled?.() ?? false,
+                    flags: getFlags?.() ?? FEATURE_FLAGS_ALL_OFF,
                 })).catch(() => {
                     // The agent may have exited before post-start guidance could be written.
                 });

package/dist/src/server/agent-runtime-contract.d.ts

@@ -34,5 +34,15 @@ export interface AgentRuntime {
     }) => void;
     writeUserInputPrompt: (workspaceId: string, text: string) => void;
     writeSystemMessageToAgent: (workspaceId: string, agentId: string, text: string) => void;
+    /** Awaitable report delivery — rejects if the orchestrator PTY write fails,
+     *  so the caller can persist the report to the redelivery outbox. */
+    deliverReportToOrchestrator: (workspaceId: string, workerName: string, text: string, artifacts: string[], input?: {
+        requireActiveRun?: boolean;
+    }) => Promise<void>;
+    /** Awaitable opaque delivery — used to drain the report outbox so an entry
+     *  is marked delivered only after the PTY write resolves. */
+    deliverSystemMessageToAgent: (workspaceId: string, agentId: string, text: string, input?: {
+        requireActiveRun?: boolean;
+    }) => Promise<void>;
 }
 export type { StartAgentOptions };

package/dist/src/server/agent-runtime-stop-run.d.ts

@@ -1,4 +1,4 @@
 import type { AgentManager } from './agent-manager.js';
 import type { LiveAgentRun } from './agent-runtime-types.js';
 import type { LiveRunRegistry } from './live-run-registry.js';
-export declare const stopLiveRun: (agentManager: AgentManager | undefined, registry: LiveRunRegistry, syncRun: (run: LiveAgentRun) => LiveAgentRun, runId: string) => void;
+export declare const stopLiveRun: (agentManager: AgentManager | undefined, registry: LiveRunRegistry, syncRun: (run: LiveAgentRun) => LiveAgentRun, runId: string, onUserStop?: (runId: string) => void) => void;

package/dist/src/server/agent-runtime-stop-run.js

@@ -1,4 +1,4 @@
-export const stopLiveRun = (agentManager, registry, syncRun, runId) => {
+export const stopLiveRun = (agentManager, registry, syncRun, runId, onUserStop) => {
     if (!agentManager) {
         throw new Error('Agent manager is required to stop agents');
     }
@@ -12,5 +12,8 @@ export const stopLiveRun = (agentManager, registry, syncRun, runId) => {
     else if (['error', 'exited'].includes(agentManager.getRun(runId).status)) {
         return;
     }
+    // Reaching here means the run was genuinely live and we are about to kill it
+    // at the user's request — distinct from a crash that already ended the run.
+    onUserStop?.(runId);
     agentManager.stopRun(runId);
 };

package/dist/src/server/agent-runtime.d.ts

@@ -3,6 +3,7 @@ import type { AgentManager } from './agent-manager.js';
 import type { AgentRuntime } from './agent-runtime-contract.js';
 import type { AgentRunStorePort, AgentSessionStorePort } from './agent-runtime-ports.js';
 import type { CommandPresetRecord } from './command-preset-store.js';
+import type { FeatureFlags } from './feature-flags.js';
 import { type RestartPolicy } from './restart-policy.js';
-export declare const createAgentRuntime: (agentManager: AgentManager | undefined, agentRunStore: AgentRunStorePort, sessionStore: AgentSessionStorePort, getCommandPreset: (id: string) => CommandPresetRecord | undefined, onAgentExit: (workspaceId: string, agentId: string) => void, restartPolicy?: RestartPolicy, getAgent?: (workspaceId: string, agentId: string) => AgentSummary | undefined, getWorkflowsEnabled?: () => boolean, getAutostaffEnabled?: () => boolean) => AgentRuntime;
+export declare const createAgentRuntime: (agentManager: AgentManager | undefined, agentRunStore: AgentRunStorePort, sessionStore: AgentSessionStorePort, getCommandPreset: (id: string) => CommandPresetRecord | undefined, onAgentExit: (workspaceId: string, agentId: string) => void, restartPolicy?: RestartPolicy, getAgent?: (workspaceId: string, agentId: string) => AgentSummary | undefined, getFlags?: () => FeatureFlags) => AgentRuntime;
 export type { AgentRuntime };

package/dist/src/server/agent-runtime.js

@@ -10,7 +10,7 @@ import { createAgentStdinDispatcher } from './agent-stdin-dispatcher.js';
 import { createAgentTokenRegistry } from './agent-tokens.js';
 import { createLiveRunRegistry } from './live-run-registry.js';
 import { createNoopRestartPolicy } from './restart-policy.js';
-export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, getCommandPreset, onAgentExit, restartPolicy = createNoopRestartPolicy(), getAgent, getWorkflowsEnabled, getAutostaffEnabled) => {
+export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, getCommandPreset, onAgentExit, restartPolicy = createNoopRestartPolicy(), getAgent, getFlags) => {
     const registry = createLiveRunRegistry();
     const launchCache = createAgentLaunchCache(agentRunStore);
     const tokenRegistry = createAgentTokenRegistry();
@@ -29,7 +29,7 @@ export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, ge
         getWorkspaceId: launchCache.getWorkspaceId,
         registry,
         syncRun,
-        ...(getWorkflowsEnabled ? { getWorkflowsEnabled } : {}),
+        ...(getFlags ? { getFlags } : {}),
     });
     const startLiveRun = createAgentRunStarter({
         agentManager,
@@ -41,8 +41,7 @@ export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, ge
         getCommandPreset,
         getAgent,
         restartPolicy,
-        ...(getWorkflowsEnabled ? { getWorkflowsEnabled } : {}),
-        ...(getAutostaffEnabled ? { getAutostaffEnabled } : {}),
+        ...(getFlags ? { getFlags } : {}),
     });
     return {
         async close() {
@@ -106,7 +105,7 @@ export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, ge
             return startPromise;
         },
         stopAgentRun(runId) {
-            stopLiveRun(agentManager, registry, syncRun, runId);
+            stopLiveRun(agentManager, registry, syncRun, runId, (stoppedRunId) => restartPolicy.markUserStopped(stoppedRunId));
         },
         validateAgentToken: tokenRegistry.validate,
         writeReportPrompt(workspaceId, workerName, _workerId, text, artifacts, input = {}) {
@@ -127,5 +126,11 @@ export const createAgentRuntime = (agentManager, agentRunStore, sessionStore, ge
         writeSystemMessageToAgent(workspaceId, agentId, text) {
             stdinDispatcher.writeSystemMessageToAgent(workspaceId, agentId, text);
         },
+        deliverReportToOrchestrator(workspaceId, workerName, text, artifacts, input = {}) {
+            return stdinDispatcher.deliverReportToOrchestrator(workspaceId, workerName, text, artifacts, input);
+        },
+        deliverSystemMessageToAgent(workspaceId, agentId, text, input = {}) {
+            return stdinDispatcher.deliverSystemMessageToAgent(workspaceId, agentId, text, input);
+        },
     };
 };

package/dist/src/server/agent-startup-instructions.d.ts

@@ -1,4 +1,5 @@
 import type { AgentSummary, WorkspaceSummary } from '../shared/types.js';
+import { type FeatureFlags } from './feature-flags.js';
 export declare const buildAgentSessionBindingMarker: ({ agent, workspace, }: {
     agent: AgentSummary;
     workspace: WorkspaceSummary;
@@ -7,14 +8,12 @@ export declare const buildAgentLegacyIdentityMarker: ({ agent, workspace, }: {
     agent: AgentSummary;
     workspace: WorkspaceSummary;
 }) => string;
-export declare const buildAgentStartupInstructions: ({ agent, workspace, workflowsEnabled, autostaffEnabled, }: {
+export declare const buildAgentStartupInstructions: ({ agent, workspace, flags, }: {
     agent: AgentSummary;
     workspace: WorkspaceSummary;
-    /** Experimental workflow gate. When off, the startup prompt omits the
-     *  `team workflow` command + the workflow-authoring rule so a fresh
-     *  orchestrator isn't told to run a command the runtime rejects. */
-    workflowsEnabled?: boolean;
-    /** Experimental auto-staff gate (default on). When on, the orchestrator is
-     *  told it may size the team to the task up front. */
-    autostaffEnabled?: boolean;
+    /** Live experimental flags. `workflowsEnabled` gates the `team workflow`
+     *  command line + the workflow-authoring rule (so a fresh orchestrator isn't
+     *  told to run a command the runtime rejects); `autostaffEnabled` gates the
+     *  team-sizing rule. Omitted → all off. */
+    flags?: FeatureFlags;
 }) => string;

package/dist/src/server/agent-startup-instructions.js

@@ -1,8 +1,10 @@
+import { FEATURE_FLAGS_ALL_OFF } from './feature-flags.js';
 import { getHiveTeamRules } from './hive-team-guidance.js';
 import { TASKS_RELATIVE_PATH } from './tasks-file.js';
 export const buildAgentSessionBindingMarker = ({ agent, workspace, }) => `Hive session binding: workspace_id=${workspace.id}; agent_id=${agent.id}`;
 export const buildAgentLegacyIdentityMarker = ({ agent, workspace, }) => `You are ${agent.name} (${agent.role}) in workspace ${workspace.name}.`;
-export const buildAgentStartupInstructions = ({ agent, workspace, workflowsEnabled = false, autostaffEnabled = false, }) => {
+export const buildAgentStartupInstructions = ({ agent, workspace, flags = FEATURE_FLAGS_ALL_OFF, }) => {
+    const { workflowsEnabled } = flags;
     const lines = [
         '<hive-message kind="startup">',
         '',
@@ -17,14 +19,14 @@ export const buildAgentStartupInstructions = ({ agent, workspace, workflowsEnabl
         '',
     ];
     if (agent.role === 'orchestrator') {
-        lines.push('Your responsibilities:', '- Respond to the user directly; clarify the goal and break it into dispatchable tasks', `- Maintain ${TASKS_RELATIVE_PATH}`, '- Dispatch by worker name and drive the next step from each report', '', 'Available team commands:', '- team list', '- team send "<worker-name>" "<task>"', '- team spawn <role> [--name <n>] [--cli claude|codex|opencode|gemini] [--ephemeral]', '- team cancel --dispatch <id> "<reason>"', ...(workflowsEnabled
+        lines.push('Your responsibilities:', '- Respond to the user directly; clarify the goal and break it into dispatchable tasks', `- Maintain ${TASKS_RELATIVE_PATH}`, '- Dispatch by worker name and drive the next step from each report', '', 'Available team commands:', '- team list', '- team send "<worker-name>" "<task>"', '- team spawn <role> [--name <n>] [--cli claude|codex|opencode|gemini|hermes] [--ephemeral]', '- team cancel --dispatch <id> "<reason>"', ...(workflowsEnabled
             ? [
                 '- team workflow run --stdin   (fan-out / staged work — see .hive/PROTOCOL.md for the DSL)',
             ]
-            : []), '', 'Always dispatch by worker name, never by worker id.', 'Always cancel an open dispatch by its dispatch id.', '', 'Hive worker dispatch rules:', ...getHiveTeamRules(agent, workflowsEnabled, autostaffEnabled));
+            : []), '', 'Always dispatch by worker name, never by worker id.', 'Always cancel an open dispatch by its dispatch id.', '', 'Hive worker dispatch rules:', ...getHiveTeamRules(agent, flags));
     }
     else {
-        lines.push('Available team commands:', '- team report "<result>" [--dispatch <id>] [--artifact <path>]    report done / failed / blocked', '- team report --stdin [--dispatch <id>] [--artifact <path>]       same, body read from stdin (multi-line / quotes / special chars)', '- team status "<state>" [--artifact <path>]                       mid-task progress / standby / connected status', '- team status --stdin [--artifact <path>]                         same, body read from stdin', '- team list                                                       list the workspace workers (with status)', '- team --help                                                     command syntax only; NOT a way to report', '', 'Syntax notes:', '- The body is the first positional argument; flag order is free: `team report "result" --dispatch X` and `team report --dispatch X "result"` are both valid.', "- Long bodies (multi-line / quotes / shell metacharacters) always go through `--stdin`, piped in via your shell (POSIX: a quoted heredoc `<<'EOF' … EOF` to stop $var / backtick expansion; Windows cmd: `type body.txt |` or `< body.txt`). `--stdin` only reads from stdin and relies on no shell syntax of its own.", '- On error the CLI also prints USAGE — fix the arguments against it.', '', 'When a task is done you MUST run `team report "<result>"`.', 'Failure, blocked, or partial completion are also reported with `team report "<current state and reason>"`.', 'When no task is in progress, report connection / standby / blocked state with `team status "<state>"`.', 'Do not call team send; workers cannot dispatch to each other.', '', 'Hive worker boundaries:', ...getHiveTeamRules(agent, workflowsEnabled, autostaffEnabled));
+        lines.push('Available team commands:', '- team report "<result>" [--dispatch <id>] [--artifact <path>]    report done / failed / blocked', '- team report --stdin [--dispatch <id>] [--artifact <path>]       same, body read from stdin (multi-line / quotes / special chars)', '- team status "<state>" [--artifact <path>]                       mid-task progress / standby / connected status', '- team status --stdin [--artifact <path>]                         same, body read from stdin', '- team list                                                       list the workspace workers (with status)', '- team --help                                                     command syntax only; NOT a way to report', '', 'Syntax notes:', '- The body is the first positional argument; flag order is free: `team report "result" --dispatch X` and `team report --dispatch X "result"` are both valid.', "- Long bodies (multi-line / quotes / shell metacharacters) always go through `--stdin`, piped in via your shell (POSIX: a quoted heredoc `<<'EOF' … EOF` to stop $var / backtick expansion; Windows cmd: `type body.txt |` or `< body.txt`). `--stdin` only reads from stdin and relies on no shell syntax of its own.", '- On error the CLI also prints USAGE — fix the arguments against it.', '', 'When a task is done you MUST run `team report "<result>"`.', 'Failure, blocked, or partial completion are also reported with `team report "<current state and reason>"`.', 'When no task is in progress, report connection / standby / blocked state with `team status "<state>"`.', 'Do not call team send; workers cannot dispatch to each other.', '', 'Hive worker boundaries:', ...getHiveTeamRules(agent, flags));
     }
     lines.push('', '</hive-message>', '');
     return lines.join('\n');

package/dist/src/server/agent-stdin-dispatcher.d.ts

@@ -1,6 +1,7 @@
 import type { AgentManager } from './agent-manager.js';
 import type { AgentLaunchConfigInput } from './agent-run-store.js';
 import type { LiveAgentRun } from './agent-runtime-types.js';
+import { type FeatureFlags } from './feature-flags.js';
 import type { LiveRunRegistry } from './live-run-registry.js';
 interface AgentStdinDispatcherInput {
     agentManager: AgentManager | undefined;
@@ -8,16 +9,17 @@ interface AgentStdinDispatcherInput {
     getWorkspaceId: (agentId: string) => string | undefined;
     registry: LiveRunRegistry;
     syncRun: (run: LiveAgentRun) => LiveAgentRun;
-    /** Whether the experimental workflow feature is on. Controls whether the
-     *  orchestrator reminder tail mentions `team workflow`. Defaults to off. */
-    getWorkflowsEnabled?: () => boolean;
+    /** Resolves the live experimental flags. The orchestrator reminder tail
+     *  appended to every injected message reads `workflowsEnabled` from it.
+     *  Optional; omitted → all flags off. */
+    getFlags?: () => FeatureFlags;
 }
-export declare const buildOrchestratorReportPayload: (workerName: string, text: string, artifacts: string[], workflowsEnabled?: boolean) => string;
-export declare const buildOrchestratorStatusPayload: (workerName: string, text: string, artifacts: string[], workflowsEnabled?: boolean) => string;
-export declare const buildOrchestratorUserInputPayload: (text: string, workflowsEnabled?: boolean) => string;
+export declare const buildOrchestratorReportPayload: (workerName: string, text: string, artifacts: string[], flags?: FeatureFlags) => string;
+export declare const buildOrchestratorStatusPayload: (workerName: string, text: string, artifacts: string[], flags?: FeatureFlags) => string;
+export declare const buildOrchestratorUserInputPayload: (text: string, flags?: FeatureFlags) => string;
 export declare const buildWorkerDispatchPayload: (fromAgentName: string, workerDescription: string, dispatchId: string, text: string) => string;
 export declare const buildWorkerCancelPayload: (dispatchId: string, reason: string) => string;
-export declare const createAgentStdinDispatcher: ({ agentManager, getLaunchConfig, getWorkspaceId, registry, syncRun, getWorkflowsEnabled, }: AgentStdinDispatcherInput) => {
+export declare const createAgentStdinDispatcher: ({ agentManager, getLaunchConfig, getWorkspaceId, registry, syncRun, getFlags, }: AgentStdinDispatcherInput) => {
     writeReportPrompt(workspaceId: string, workerName: string, text: string, artifacts: string[], input?: {
         requireActiveRun?: boolean;
     }): void;
@@ -33,5 +35,16 @@ export declare const createAgentStdinDispatcher: ({ agentManager, getLaunchConfi
      *  Used by the workflow runner to notify the triggering orchestrator
      *  when a run finishes (mirrors Claude Code's <task-notification>). */
     writeSystemMessageToAgent(workspaceId: string, agentId: string, text: string): void;
+    /** Awaitable report delivery — same payload as writeReportPrompt but the
+     *  promise is returned so the caller can persist the report to the
+     *  redelivery outbox if the orchestrator PTY write rejects. */
+    deliverReportToOrchestrator(workspaceId: string, workerName: string, text: string, artifacts: string[], input?: {
+        requireActiveRun?: boolean;
+    }): Promise<void>;
+    /** Awaitable opaque delivery — used to drain the report outbox so an entry
+     *  is marked delivered only after the PTY write actually resolves. */
+    deliverSystemMessageToAgent(workspaceId: string, agentId: string, text: string, input?: {
+        requireActiveRun?: boolean;
+    }): Promise<void>;
 };
 export {};

package/dist/src/server/agent-stdin-dispatcher.js

@@ -1,21 +1,22 @@
+import { FEATURE_FLAGS_ALL_OFF } from './feature-flags.js';
 import { buildOrchestratorReminderTail, buildWorkerReminderTail } from './hive-team-guidance.js';
 import { PtyInactiveError } from './http-errors.js';
 import { createPostStartInputWriter } from './post-start-input-writer.js';
-export const buildOrchestratorReportPayload = (workerName, text, artifacts, workflowsEnabled = false) => {
+export const buildOrchestratorReportPayload = (workerName, text, artifacts, flags = FEATURE_FLAGS_ALL_OFF) => {
     const lines = [`<hive-message kind="report" from="@${workerName}">`, text];
     for (const artifact of artifacts)
         lines.push(`artifact: ${artifact}`);
-    lines.push('</hive-message>', '', buildOrchestratorReminderTail(workflowsEnabled), '');
+    lines.push('</hive-message>', '', buildOrchestratorReminderTail(flags), '');
     return lines.join('\n');
 };
-export const buildOrchestratorStatusPayload = (workerName, text, artifacts, workflowsEnabled = false) => {
+export const buildOrchestratorStatusPayload = (workerName, text, artifacts, flags = FEATURE_FLAGS_ALL_OFF) => {
     const lines = [`<hive-message kind="status" from="@${workerName}">`, text];
     for (const artifact of artifacts)
         lines.push(`artifact: ${artifact}`);
-    lines.push('</hive-message>', '', buildOrchestratorReminderTail(workflowsEnabled), '');
+    lines.push('</hive-message>', '', buildOrchestratorReminderTail(flags), '');
     return lines.join('\n');
 };
-export const buildOrchestratorUserInputPayload = (text, workflowsEnabled = false) => [text, '', buildOrchestratorReminderTail(workflowsEnabled), ''].join('\n');
+export const buildOrchestratorUserInputPayload = (text, flags = FEATURE_FLAGS_ALL_OFF) => [text, '', buildOrchestratorReminderTail(flags), ''].join('\n');
 export const buildWorkerDispatchPayload = (fromAgentName, workerDescription, dispatchId, text) => [
     `<hive-message kind="dispatch" from="@${fromAgentName}">`,
     '',
@@ -44,8 +45,8 @@ export const buildWorkerCancelPayload = (dispatchId, reason) => [
     '</hive-message>',
     '',
 ].join('\n');
-export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getWorkspaceId, registry, syncRun, getWorkflowsEnabled, }) => {
-    const workflowsEnabled = () => getWorkflowsEnabled?.() ?? false;
+export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getWorkspaceId, registry, syncRun, getFlags, }) => {
+    const flags = () => getFlags?.() ?? FEATURE_FLAGS_ALL_OFF;
     const chains = new Map();
     const getChain = (agentId) => {
         let chain = chains.get(agentId);
@@ -156,10 +157,10 @@ export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getW
     };
     return {
         writeReportPrompt(workspaceId, workerName, text, artifacts, input = {}) {
-            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorReportPayload(workerName, text, artifacts, workflowsEnabled()), input));
+            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorReportPayload(workerName, text, artifacts, flags()), input));
         },
         writeStatusPrompt(workspaceId, workerName, text, artifacts, input = {}) {
-            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorStatusPayload(workerName, text, artifacts, workflowsEnabled()), input));
+            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorStatusPayload(workerName, text, artifacts, flags()), input));
         },
         writeSendPrompt(workspaceId, workerId, dispatchId, fromAgentName, workerDescription, text) {
             return writeToActiveAgentRun(workspaceId, workerId, buildWorkerDispatchPayload(fromAgentName, workerDescription, dispatchId, text), { requireActiveRun: true });
@@ -168,7 +169,7 @@ export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getW
             swallowQueuedFailure(writeToActiveAgentRun(workspaceId, workerId, buildWorkerCancelPayload(dispatchId, reason), input));
         },
         writeUserInputPrompt(workspaceId, text) {
-            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorUserInputPayload(text, workflowsEnabled())));
+            swallowQueuedFailure(writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorUserInputPayload(text, flags())));
         },
         /** Generic: deliver an opaque text block to a specific agent's PTY.
          *  Used by the workflow runner to notify the triggering orchestrator
@@ -176,5 +177,16 @@ export const createAgentStdinDispatcher = ({ agentManager, getLaunchConfig, getW
         writeSystemMessageToAgent(workspaceId, agentId, text) {
             swallowQueuedFailure(writeToActiveAgentRun(workspaceId, agentId, text));
         },
+        /** Awaitable report delivery — same payload as writeReportPrompt but the
+         *  promise is returned so the caller can persist the report to the
+         *  redelivery outbox if the orchestrator PTY write rejects. */
+        deliverReportToOrchestrator(workspaceId, workerName, text, artifacts, input = {}) {
+            return writeToActiveAgentRun(workspaceId, `${workspaceId}:orchestrator`, buildOrchestratorReportPayload(workerName, text, artifacts, flags()), input);
+        },
+        /** Awaitable opaque delivery — used to drain the report outbox so an entry
+         *  is marked delivered only after the PTY write actually resolves. */
+        deliverSystemMessageToAgent(workspaceId, agentId, text, input = {}) {
+            return writeToActiveAgentRun(workspaceId, agentId, text, input);
+        },
     };
 };

package/dist/src/server/command-preset-defaults.js

@@ -2,6 +2,7 @@ import { CLAUDE_DEFAULT_YOLO_ARGS } from './claude-command-defaults.js';
 const CODEX_DEFAULT_YOLO_ARGS = ['--dangerously-bypass-approvals-and-sandbox'];
 const OPENCODE_DEFAULT_YOLO_ARGS = [];
 const GEMINI_DEFAULT_YOLO_ARGS = ['--yolo'];
+const HERMES_DEFAULT_YOLO_ARGS = ['--yolo'];
 export const BUILTIN_COMMAND_PRESETS = [
     {
         command: 'claude',
@@ -47,5 +48,16 @@ export const BUILTIN_COMMAND_PRESETS = [
         },
         yoloArgsTemplate: GEMINI_DEFAULT_YOLO_ARGS,
     },
+    {
+        command: 'hermes',
+        displayName: 'Hermes',
+        id: 'hermes',
+        resumeArgsTemplate: '--resume {session_id}',
+        sessionIdCapture: {
+            pattern: String.raw `Session:\s*([A-Za-z0-9_-]+)`,
+            source: 'stdout_regex',
+        },
+        yoloArgsTemplate: HERMES_DEFAULT_YOLO_ARGS,
+    },
 ];
 export const getBuiltinCommandPreset = (id) => BUILTIN_COMMAND_PRESETS.find((preset) => preset.id === id);