@warren-dean/code-kit 0.11.0 → 0.12.0

package/hooks/mod/register.mjs

@@ -8,6 +8,7 @@
 // the lead to review, and merging (`merge --person`). No agent reaches those: they are the mod's own
 // buttons, and the hooks refuse both commands from every agent.
 import {
+  ANSWER_ID,
   APPROVE_ID,
   NOT_CODE_KIT,
   PANE_ID,
@@ -17,7 +18,9 @@ import {
   agentsAtWork,
   shownState,
   attribution,
+  answerPane,
   approvePane,
+  commandItself,
   band,
   bandLines,
   finishedStories,
@@ -45,7 +48,16 @@ import {
   sendBackPane,
   toolLine,
 } from './panes.mjs';
-import { leadPrompt, nudgeText, restartPrompt, stallDue, stepKey, stepLabel } from './loop.mjs';
+import {
+  leadPrompt,
+  nudgeText,
+  restartPrompt,
+  stallDue,
+  stepKey,
+  stepLabel,
+  storiesInFlight,
+  withoutInFlight,
+} from './loop.mjs';
 import { goalOf, nextText } from './mission.mjs';
 import { contextOf, decisionCards } from './decisions.mjs';
 import { DEFAULT_TEAM_UI, TEAM_ID, teamFrame } from './teamview.mjs';
@@ -80,6 +92,9 @@ let ledger = {}; // the session's tokens by agent and story (USE-1)
 let rateLimits = []; // the session's limits, as session.measure last gave them
 const agentsSeen = new Map(); // agent id → its $.agent.list() entry, kept once it leaves the list
 const held = new Map(); // tool_use_id → a call held for the person (HOLD-2)
+const denied = new Map(); // tool_use_id → a call Claude Code's own permission check refused (PERM-1)
+const briefLater = new Set(); // the brief's questions the person put off this session (ASK-4)
+let answering = null; // the open Answer… box: { kind: 'question' | 'brief', question, id?, path?, text, error }
 let where = null; // { cli, cwd, interactive }, from session start
 // The lead loop (spec 05): what it did, and what it waits on.
 const loop = {
@@ -198,6 +213,8 @@ export function register(on) {
       const ran = await $.process.run(['node', cli, ...args, '--json'], { cwd });
       return ran.exitCode === 0 ? parseJson(ran.stdout) : null;
     };
+    // What a CLI run said, in a line: why it refused, for a notice.
+    const firstLine = (ran) => (ran.stderr || ran.stdout).trim().split('\n')[0];
     // A session starts with the loop running: a pause recorded by an earlier one no longer holds.
     if ((await json('loop').catch(() => null))?.paused)
       await $.process.run(['node', cli, 'loop', 'resume'], { cwd }).catch(() => {});
@@ -237,6 +254,13 @@ export function register(on) {
             : [];
         // TEAM-7: the team's claims, intents and pull requests, where the project is a team's.
         const team = valid && check.team ? await json('team') : null;
+        // ASK-2: the lead's questions waiting for the person; REPORT-3: bug reports waiting to be sent.
+        const questions = valid
+          ? ((await json('ask')) ?? []).filter((q) => q.state === 'open')
+          : [];
+        const reports = valid
+          ? ((await json('report')) ?? []).filter((r) => r.state === 'draft')
+          : [];
         // TEAM-12: the plan mirrored onto the team's Project board, at most every 10 minutes, in the
         // background: a slow GitHub never holds up the band.
         const at = await $.clock.now();
@@ -256,6 +280,10 @@ export function register(on) {
           adapters,
           check,
           team,
+          questions,
+          reports,
+          // ASK-4: the brief's open questions, less those put off this session.
+          brief: (nextStep?.brief ?? []).filter((b) => !briefLater.has(b.question)),
           base: status?.base ?? null,
         };
         if (model.state.kind === 'ok') await act.registerReviewer();
@@ -464,6 +492,8 @@ export function register(on) {
         $.ui.invalidate('ui.render');
         return {};
       },
+      // ASK-2, ASK-4, REPORT-3: a question's Answer… or a report's Read it opens its card.
+      openDecision: (line) => act.decide(line),
       // ACT-1: the confirmation, prefilled from the request.
       approve: async (line) => {
         approving = {
@@ -512,6 +542,124 @@ export function register(on) {
         await $.ui.close({ id: APPROVE_ID });
         await act.reload();
       },
+      // CARD-7: a request nobody needs any more stops waiting; nothing is approved.
+      dropRequest: async (line) => {
+        const open = model.requests?.open ?? [];
+        const same = (r) =>
+          [...r.names].sort().join() === [...line.request.names].sort().join() &&
+          (r.lane ?? r.actor) === (line.request.lane ?? line.request.actor);
+        const numbers = open.flatMap((r, i) => (same(r) ? [i + 1] : []));
+        if (!numbers.length) return;
+        const ran = await $.process.run(
+          ['node', cli, 'requests', 'drop', numbers.join(','), '--via', 'pane'],
+          { cwd },
+        );
+        notice = ran.exitCode === 0 ? null : `Nothing was dropped: ${firstLine(ran)}`;
+        await act.reload();
+      },
+      // ASK-2: the lead's option, pressed: the answer is recorded and sent to the lead.
+      answerWith: (line) => act.sendAnswer({ kind: 'question', ...line.question }, line.choice),
+      // ASK-2, ASK-4: Answer… opens a box for the person's own words.
+      answer: async (line) => {
+        answering = { kind: 'question', ...line.question, text: '', error: null };
+        await $.ui.open({ id: ANSWER_ID, title: 'Answer', focus: true, closeOnEscape: true });
+        $.ui.invalidate('ui.render');
+      },
+      answerBrief: async (line) => {
+        answering = { kind: 'brief', ...line.brief, text: '', error: null };
+        await $.ui.open({ id: ANSWER_ID, title: 'Answer', focus: true, closeOnEscape: true });
+        $.ui.invalidate('ui.render');
+      },
+      laterBrief: (line) => {
+        briefLater.add(line.brief.question);
+        model = {
+          ...model,
+          brief: (model.brief ?? []).filter((b) => b.question !== line.brief.question),
+        };
+        $.ui.invalidate('ui.render');
+      },
+      confirmAnswer: async (text) => {
+        if (!answering) return;
+        if (!text.trim()) {
+          answering = { ...answering, error: 'Type your answer: the lead builds on it.' };
+          $.ui.invalidate('ui.render');
+          return;
+        }
+        const done = await act.sendAnswer(answering, text.trim());
+        if (done) {
+          answering = null;
+          await $.ui.close({ id: ANSWER_ID });
+        }
+      },
+      cancelAnswer: async () => {
+        answering = null;
+        await $.ui.close({ id: ANSWER_ID });
+      },
+      // The answer recorded (a question's, in code-kit) and told to the lead, which carries on with it.
+      sendAnswer: async (q, text) => {
+        if (q.kind === 'question') {
+          const ran = await $.process.run(
+            ['node', cli, 'ask', 'answer', q.id, text, '--via', 'pane'],
+            { cwd },
+          );
+          if (ran.exitCode !== 0) {
+            notice = `Your answer wasn't recorded: ${firstLine(ran)}`;
+            if (answering) answering = { ...answering, error: notice };
+            $.ui.invalidate('ui.render');
+            return false;
+          }
+        }
+        notice = null;
+        const said = /[.!?]$/.test(text) ? text : `${text}.`;
+        await $.prompt.submit({
+          text:
+            q.kind === 'question'
+              ? `The person answered ${q.id} (${q.question}): ${said}${q.blocks ? ` ${q.story} no longer waits on them.` : ''} Carry on with it.`
+              : `The person answered an open question in ${q.path}, "${q.question}": ${said} Record it in the brief's decision log, take it out of the open questions, and carry on with it.`,
+        });
+        if (q.kind === 'brief') {
+          briefLater.add(q.question);
+          model = { ...model, brief: (model.brief ?? []).filter((b) => b.question !== q.question) };
+        }
+        await act.reload();
+        return true;
+      },
+      // PERM-1: a call Claude Code refused, which only the person can run or allow.
+      runDenied: async (line) => {
+        await $.prompt.fill({ text: `! ${line.denial.command}`, mode: 'replace' }).catch(() => {});
+      },
+      deniedDone: async (line) => {
+        denied.delete(line.denial.id);
+        $.ui.invalidate('ui.render');
+        await $.prompt.submit({
+          text: `The person ran it themselves, or allowed it: ${line.denial.command ?? line.denial.what} (Claude Code had refused it for ${line.denial.who}). Check it worked, and carry on.`,
+        });
+      },
+      deniedNo: async (line) => {
+        denied.delete(line.denial.id);
+        $.ui.invalidate('ui.render');
+        await $.prompt.submit({
+          text: `The person won't run ${line.denial.command ?? line.denial.what} now (Claude Code refused it for ${line.denial.who}). Don't try to get around it: carry on with other work, and if a story can't go on without it, ask with code-kit ask --blocks.`,
+        });
+      },
+      // REPORT-3: the person sends a drafted report to code-kit's GitHub, or discards it.
+      sendReport: async (line) => {
+        const ran = await $.process.run(['node', cli, 'report', 'send', line.report.id], {
+          cwd,
+          timeoutMs: 120000,
+        });
+        result = {
+          ok: ran.exitCode === 0,
+          title: ran.exitCode === 0 ? 'Report sent' : 'Report not sent',
+          text: `${ran.stdout}${ran.stderr}`.trim(),
+        };
+        await $.ui.open({ id: RESULT_ID, title: 'Report', focus: true, closeOnEscape: true });
+        await act.reload();
+      },
+      discardReport: async (line) => {
+        await $.process.run(['node', cli, 'report', 'discard', line.report.id], { cwd });
+        await act.reload();
+      },
       // HOLD-2: Approve opens ACT-1's confirmation for the held call; Refuse lets the refusal through.
       approveHeld: (line) =>
         act.approve({
@@ -790,7 +938,14 @@ export function register(on) {
           return act.submit(prompt, 'restart', story);
         }
         const ran = await $.process.run(['node', cli, 'next', '--json'], { cwd });
-        const step = ran.exitCode === 0 ? parseJson(ran.stdout) : null;
+        // LOOP-9: never a story an agent is already at work on, building or reviewing it.
+        const step =
+          ran.exitCode === 0
+            ? withoutInFlight(
+                parseJson(ran.stdout),
+                storiesInFlight(await $.agent.list().catch(() => [])),
+              )
+            : null;
         // MISSION-1: the band shows what the loop takes next.
         loop.nextStep = step;
         if (!step) {
@@ -1189,6 +1344,35 @@ export function register(on) {
   // CARD-1: the text a code-kit hook refused a call with, kept for the call's result to draw as a card.
   // HOLD-1 to HOLD-6: a refusal a person's approval would allow is held while the band asks. The hooks
   // stay the judge: the call is run again once the approval is written, and refused as before otherwise.
+  // PERM-1: Claude Code's own permission check refused a call (auto mode, a deny rule): code-kit can't
+  // approve past it, so it waits in the band for the person, who can run it themselves or allow it.
+  on('classic.PermissionDenied', async ($, e, next) => {
+    const res = await next(e);
+    const input = e.tool_input && typeof e.tool_input === 'object' ? e.tool_input : {};
+    const command =
+      e.tool_name === 'Bash' && typeof input.command === 'string' ? input.command : null;
+    const path = input.file_path ?? input.notebook_path ?? null;
+    const lane = e.agent_id ? activity.get(e.agent_id)?.lane : null;
+    denied.set(e.tool_use_id ?? `${e.tool_name}-${denied.size}`, {
+      id: e.tool_use_id ?? `${e.tool_name}-${denied.size}`,
+      who: lane ? `the ${lane} lane` : (e.agent_type ?? (e.agent_id ? 'an agent' : 'the lead')),
+      tool: e.tool_name,
+      command,
+      what: command
+        ? `\`${commandItself(command)}\``
+        : path
+          ? `${e.tool_name} on ${path}`
+          : e.tool_name,
+      reason:
+        typeof e.reason === 'string'
+          ? e.reason.trim().replace(/\s+/g, ' ').slice(0, 200) || null
+          : null,
+      at: await $.clock.now(),
+    });
+    $.ui.invalidate('ui.render');
+    return res;
+  });
+
   on('tool.call', async ($, e, next) => {
     // LOOP-3: a lane agent's tool call is activity; while it runs, the agent isn't quiet.
     const calledAt = await $.clock.now();
@@ -1567,7 +1751,7 @@ export function register(on) {
     const lines = linesNowRaw(now);
     const cards = cardsNow(now, lines);
     return lines.map((l) => {
-      const card = cards.find((c) => c.line === l);
+      const card = cards.find((c) => c.source === l);
       return card ? { ...l, context: contextOf(card) } : l;
     });
   };
@@ -1585,6 +1769,7 @@ export function register(on) {
       nextStep: loop.nextStep,
       combined: combinedNow(),
       team: model.team ?? null,
+      denied: [...denied.values()],
     });
 
   on('ui.render', { component: 'Pane', requestId: PANE_ID }, async ($, e) => {
@@ -1752,6 +1937,19 @@ export function register(on) {
     });
   });
 
+  // ASK-2, ASK-4: the person's answer, in their own words.
+  on('ui.render', { component: 'Pane', requestId: ANSWER_ID }, async ($, e) => {
+    if (!answering) return resultPane(null, $.ui.resolve(e));
+    return answerPane(answering, $.ui.resolve(e), {
+      onInput: (value) => {
+        answering = { ...answering, text: value };
+        $.ui.invalidate('ui.render');
+      },
+      onSubmit: (value) => act.confirmAnswer(value),
+      onCancel: () => act.cancelAnswer(),
+    });
+  });
+
   on('ui.render', { component: 'Pane', requestId: SETTINGS_ID }, async ($, e) =>
     settingsView(settingRows, pendingSetting, $.ui.resolve(e), {
       onChoose: (key, value) => act.chooseSetting(key, value),

package/hooks/mod/register.test.ts

@@ -157,6 +157,9 @@ function project() {
     journal: { events: [] as any[] }, // `code-kit journal --json`
     team: null as any, // `code-kit team --json`, for a team's project
     teamSince: { people: {} } as any, // `code-kit team since --json`
+    questions: [] as any[], // `code-kit ask --json`
+    reports: [] as any[], // `code-kit report --json`
+    fills: [] as string[], // what the mod put in the prompt
     holdWaits: false, // false: the hold ends at once, as if timed out (tests about cards, not hold)
     waiting: new Map<string, (answer: string) => void>(),
   };
@@ -186,7 +189,30 @@ function stub(on: any, w: World) {
         }),
       );
     if (sub === 'next') return ran(0, JSON.stringify(w.next));
+    if (sub === 'requests' && argv[3] === 'drop') {
+      w.acts.push([...argv.slice(2)]);
+      const drop = new Set(argv[4].split(',').map(Number));
+      w.requests = w.requests.filter((_, i) => !drop.has(i + 1));
+      return ran(0, 'Dropped.');
+    }
     if (sub === 'requests') return ran(0, JSON.stringify({ open: w.requests, inForce: w.inForce }));
+    if (sub === 'ask' && argv[3] === 'answer') {
+      w.acts.push([...argv.slice(2)]);
+      w.questions = w.questions.map((q) => (q.id === argv[4] ? { ...q, state: 'answered' } : q));
+      return ran(0, 'Recorded.');
+    }
+    if (sub === 'ask') return ran(0, JSON.stringify(w.questions));
+    if (sub === 'report' && ['send', 'discard'].includes(argv[3])) {
+      w.acts.push([...argv.slice(2)]);
+      w.reports = w.reports.map((r) =>
+        r.id === argv[4] ? { ...r, state: argv[3] === 'send' ? 'sent' : 'discarded' } : r,
+      );
+      return ran(
+        0,
+        argv[3] === 'send' ? 'Filed https://github.com/o/code-kit/issues/9' : 'Discarded.',
+      );
+    }
+    if (sub === 'report') return ran(0, JSON.stringify(w.reports));
     if (sub === 'verify')
       return ran(w.verifyExit, w.verifyExit ? '' : w.verifyOut, w.verifyExit ? w.verifyOut : '');
     if (sub === 'stops') return ran(0, JSON.stringify(w.stops));
@@ -321,6 +347,13 @@ function stub(on: any, w: World) {
     return { value: { agent: `code-kit:${e.name}` } };
   });
   on('prompt.read', () => ({ value: { text: w.draft, cursor: w.draft.length } }));
+  // Claude Code's own settings hooks beneath: none answer a permission denial.
+  on('classic.PermissionDenied', () => ({}));
+  on('prompt.fill', ($: any, e: any) => {
+    w.fills.push(e.text);
+    w.draft = e.text;
+    return { isFilled: true };
+  });
   on('session.send', ($: any, e: any) => {
     w.sent.push({ to: e.to, text: e.text });
     return { isDelivered: true };
@@ -513,10 +546,10 @@ test('PANE-4 with nothing changed it reads the project every 10 seconds while th
   const before = w.runs;
   await clock.advance(8000); // four quiet ticks: git only
   expect(w.runs - before).toBe(4);
-  // The fifth reads it all (check, status, next, requests, stops, queue, timeline) between two looks
-  // at git.
+  // The fifth reads it all (check, status, next, requests, stops, queue, timeline, the lead's questions
+  // and the reports waiting) between two looks at git.
   await clock.advance(2000);
-  expect(w.runs - before).toBe(13);
+  expect(w.runs - before).toBe(15);
 });
 
 test('CARD-4 outside a code-kit project, /lanes says so, opens nothing, and there is no band', async ($, on) => {
@@ -1311,6 +1344,254 @@ test('DECIDE-3 notes are labelled note, not you, and need no decision', async ($
   await band.unmount();
 });
 
+const question = (extra: any = {}) => ({
+  id: 'Q-1',
+  at: '2026-10-12T05:59:00.000Z',
+  by: 'lead',
+  question: 'Which weather provider: the Bureau of Meteorology or a commercial service?',
+  why: null,
+  story: 'ST-4',
+  blocks: true,
+  options: [
+    { label: 'Bureau of Meteorology', effect: 'Free, Australian data; we credit the Bureau.' },
+    { label: 'Commercial', effect: 'A paid key; global coverage.' },
+  ],
+  state: 'open',
+  answer: null,
+  withdrawn: null,
+  ...extra,
+});
+
+test("ASK-2 the lead's question waits in the band and as a card; an option answers it and tells the lead", async ($, on) => {
+  const w = project();
+  w.questions = [
+    question(),
+    question({
+      id: 'Q-2',
+      question: 'May sessions show your city?',
+      story: null,
+      blocks: false,
+      options: [],
+    }),
+  ];
+  await start($, on, w);
+  const band = await bandUi($);
+  expect(
+    await band.find({ type: 'Text', text: /^2 questions from the lead: Which weather provider/ }),
+  ).toBeDefined();
+  await press($, 'band-openDecision');
+  await band.unmount();
+  const ui = await pane($, PANE);
+  // One card per question, not one for both.
+  expect(await ui.find({ key: 'decision-pick-0' })).toBeDefined();
+  expect(await ui.find({ key: 'decision-pick-1' })).toBeDefined();
+  expect(await ui.find({ type: 'Text', text: 'ST-4 waits on your answer.' })).toBeDefined();
+  expect(
+    await ui.find({ type: 'Text', text: 'Free, Australian data; we credit the Bureau.' }),
+  ).toBeDefined();
+  await press($, 'decide-answerWith-0', PANE);
+  expect(w.acts).toContainEqual(['ask', 'answer', 'Q-1', 'Bureau of Meteorology', '--via', 'pane']);
+  expect(w.prompts.at(-1)).toBe(
+    'The person answered Q-1 (Which weather provider: the Bureau of Meteorology or a commercial service?): Bureau of Meteorology. ST-4 no longer waits on them. Carry on with it.',
+  );
+  await ui.unmount();
+});
+
+test("ASK-2 a question with no options, or Something else…, is answered in the person's own words", async ($, on) => {
+  const w = project();
+  w.questions = [
+    question({
+      id: 'Q-2',
+      question: 'May sessions show your city?',
+      story: null,
+      blocks: false,
+      options: [],
+    }),
+  ];
+  await start($, on, w);
+  const band = await bandUi($);
+  await press($, 'band-openDecision');
+  await band.unmount();
+  const ui = await pane($, PANE);
+  await press($, 'decide-answer', PANE);
+  expect(w.opened).toContain('code-kit-answer');
+  const box = await pane($, 'code-kit-answer');
+  await $.ui.input({ plugin: 'code-kit', key: 'answer-text', text: '' });
+  expect(
+    await box.find({ type: 'Text', text: 'Type your answer: the lead builds on it.' }),
+  ).toBeDefined();
+  await $.ui.input({
+    plugin: 'code-kit',
+    key: 'answer-text',
+    text: 'Only the suburb, never the street',
+  });
+  expect(w.acts).toContainEqual([
+    'ask',
+    'answer',
+    'Q-2',
+    'Only the suburb, never the street',
+    '--via',
+    'pane',
+  ]);
+  expect(w.prompts.at(-1)).toBe(
+    'The person answered Q-2 (May sessions show your city?): Only the suburb, never the street. Carry on with it.',
+  );
+  expect(w.closed).toContain('code-kit-answer');
+  await box.unmount();
+  await ui.unmount();
+});
+
+test("ASK-4 the brief's open questions are the person's decisions: answered to the lead, or put off for the session", async ($, on) => {
+  const w = project();
+  w.next = {
+    ...w.next,
+    brief: [
+      { question: 'Accounts: AWS, Supabase, Fly', path: 'docs/brief.md' },
+      { question: 'The product domain', path: 'docs/brief.md' },
+    ],
+  };
+  await start($, on, w);
+  const band = await bandUi($);
+  expect(
+    await band.find({
+      type: 'Text',
+      text: '2 open questions in your brief: Accounts: AWS, Supabase, Fly',
+    }),
+  ).toBeDefined();
+  await press($, 'band-openDecision');
+  await band.unmount();
+  const ui = await pane($, PANE);
+  expect(
+    await ui.find({ type: 'Text', text: 'From your brief: Accounts: AWS, Supabase, Fly' }),
+  ).toBeDefined();
+  await press($, 'decide-laterBrief', PANE);
+  expect(
+    await ui.find({ type: 'Text', text: 'From your brief: The product domain' }),
+  ).toBeDefined();
+  await press($, 'decide-answerBrief', PANE);
+  const box = await pane($, 'code-kit-answer');
+  await $.ui.input({ plugin: 'code-kit', key: 'answer-text', text: 'myaila.com.au' });
+  await box.unmount();
+  expect(w.prompts.at(-1)).toBe(
+    'The person answered an open question in docs/brief.md, "The product domain": myaila.com.au. Record it in the brief\'s decision log, take it out of the open questions, and carry on with it.',
+  );
+  await ui.unmount();
+  const after = await bandUi($);
+  expect(await after.find({ type: 'Text', text: /in your brief/ })).toBeUndefined();
+  await after.unmount();
+});
+
+test("PERM-1 a call Claude Code's own permission check refused waits for the person, who runs it or says not now", async ($, on) => {
+  const w = project();
+  await start($, on, w);
+  await $.classic.PermissionDenied({
+    tool_name: 'Bash',
+    tool_input: { command: 'pnpm db:generate && pnpm db:migrate' },
+    tool_use_id: 'tu-1',
+    reason: 'Permission for this action was denied by the Claude Code auto mode classifier.',
+  });
+  const band = await bandUi($);
+  expect(
+    await band.find({ type: 'Text', text: "Claude Code refused the lead's `pnpm db:generate`" }),
+  ).toBeDefined();
+  await press($, 'band-runDenied');
+  expect(w.fills).toEqual(['! pnpm db:generate && pnpm db:migrate']);
+  await press($, 'band-decide');
+  await band.unmount();
+  const ui = await pane($, PANE);
+  expect(
+    await ui.find({
+      type: 'Text',
+      text: /^Claude Code's own permission check refused it \(Permission for this action/,
+    }),
+  ).toBeDefined();
+  await press($, 'decide-deniedDone', PANE);
+  expect(w.prompts.at(-1)).toMatch(
+    /^The person ran it themselves, or allowed it: pnpm db:generate && pnpm db:migrate/,
+  );
+  await ui.unmount();
+  const after = await bandUi($);
+  expect(await after.find({ type: 'Text', text: /Claude Code refused/ })).toBeUndefined();
+  await after.unmount();
+});
+
+test('CARD-8 two approvals waiting are two decisions, each approved or dropped on its own', async ($, on) => {
+  const w = project();
+  w.requests = [
+    dayjs,
+    {
+      ...dayjs,
+      at: '2026-10-06T00:05:00.000Z',
+      actor: 'api-engineer',
+      lane: 'api',
+      names: ['dep-zod'],
+      what: 'npm install zod',
+    },
+  ];
+  await start($, on, w);
+  const band = await bandUi($);
+  expect(await band.find({ type: 'Text', text: '2 approvals waiting' })).toBeDefined();
+  await press($, 'band-decide');
+  await band.unmount();
+  const ui = await pane($, PANE);
+  expect(await ui.find({ key: 'decision-pick-0' })).toBeDefined();
+  expect(await ui.find({ key: 'decision-pick-1' })).toBeDefined();
+  await press($, 'decision-pick-1', PANE);
+  await press($, 'decide-dropRequest', PANE);
+  expect(w.acts).toContainEqual(['requests', 'drop', '2', '--via', 'pane']);
+  await ui.unmount();
+});
+
+test('REPORT-3 a bug report an agent drafted waits for the person, who reads it and sends it, or discards it', async ($, on) => {
+  const w = project();
+  w.reports = [
+    {
+      id: 'R-1',
+      at: '2026-10-13T00:00:00Z',
+      by: 'lead',
+      title: 'Decisions tab misses a held call',
+      fingerprint: 'ck-1',
+      body: '**What happened:** the card never showed',
+      state: 'draft',
+      sent: null,
+    },
+  ];
+  await start($, on, w);
+  const band = await bandUi($);
+  expect(
+    await band.find({
+      type: 'Text',
+      text: 'A bug report for code-kit to send: Decisions tab misses a held call',
+    }),
+  ).toBeDefined();
+  await press($, 'band-openDecision');
+  await band.unmount();
+  const ui = await pane($, PANE);
+  expect(
+    await ui.find({ type: 'Text', text: '**What happened:** the card never showed' }),
+  ).toBeDefined();
+  await press($, 'decide-sendReport', PANE);
+  expect(w.acts).toContainEqual(['report', 'send', 'R-1']);
+  expect(w.opened).toContain('code-kit-result');
+  await ui.unmount();
+});
+
+test('ASK-3 a lane whose story waits on the person reads waiting on you', async ($, on) => {
+  const w = project();
+  w.stories = w.stories.map((s: any) =>
+    s.id === 'ST-4'
+      ? { ...s, state: 'waiting on you', waitingFor: { id: 'Q-1', question: 'x' } }
+      : s,
+  );
+  await start($, on, w);
+  await lanes($);
+  const ui = await pane($, PANE);
+  expect((await ui.findAll({ type: 'Text' })).some((t: any) => /waiting on you/.test(t.text))).toBe(
+    true,
+  );
+  await ui.unmount();
+});
+
 test('JOURNAL-1 the Journal tab tells the lineage, from the request to now, with the loop and your choices in it', async ($, on) => {
   const w = project();
   w.journal = {
@@ -1527,6 +1808,34 @@ test('LOOP-1 and LOOP-2 with the lead idle, the loop dispatches every ready stor
   await ui.unmount();
 });
 
+test('LOOP-9 the loop never asks for a story an agent is still on: it waits, and goes on once the agent finishes', async ($, on) => {
+  const w = project();
+  w.next = { step: 'dispatch', args: 'ST-9', then: [] };
+  const clock = await start($, on, w);
+  await leadTurn($);
+  await settle(clock);
+  expect(w.prompts).toEqual(['Dispatch ST-9: run /code-kit:dispatch ST-9.']);
+  // Dispatched, and ST-4 still being built: next (reading only branches) offers both again.
+  w.agents = [
+    { id: 'a1', type: 'web-engineer', status: 'running', description: 'ST-4 booking form' },
+    { id: 'a2', type: 'core-engineer', status: 'running', description: 'ST-9 pricing' },
+  ];
+  w.next = { step: 'review', args: 'ST-4', then: [{ step: 'dispatch', args: 'ST-9' }] };
+  await leadTurn($, 't-2');
+  await settle(clock);
+  expect(w.prompts).toHaveLength(1);
+  const band = await bandUi($);
+  expect(
+    await band.find({ type: 'Text', text: /waiting: ST-4, ST-9 are still with their agents/ }),
+  ).toBeDefined();
+  await band.unmount();
+  // The web agent finishes: ST-4 is reviewed; ST-9 is still being built, so it isn't dispatched again.
+  w.agents = [{ ...w.agents[0], status: 'completed' }, w.agents[1]];
+  await clock.advance(2000);
+  await settle(clock);
+  expect(w.prompts.slice(1)).toEqual(['Review ST-4: run /code-kit:review ST-4.']);
+});
+
 test('LOOP-1 nothing is submitted mid-turn, or while the person has a draft, or twice for the same step', async ($, on) => {
   const w = project();
   const clock = await start($, on, w);