opencode-sesh 0.2.1 → 0.3.0

package/AGENTS.md

@@ -35,7 +35,12 @@ HOME=/tmp/fakehome bash install.sh   # installer smoke test (never touches ~/.co
 ## Layout
 
 - `bin/` — flat; no subdirs. Scripts resolve siblings from their own location.
-  Never hardcode install paths.
+  Never hardcode install paths. `sesh-waiting.sh` owns the needs-input query
+  (shared heuristic with the TUI sidebar copy, marked `NEEDS_INPUT_SQL` in
+  both); `sesh-prune.sh` archives stale sessions. Reads go through
+  `sqlite3 -readonly` (or `opencode db`); the single archive `UPDATE` in
+  `sesh-prune.sh` is the only sanctioned direct write (no archive endpoint
+  exists — deletes stay on `opencode session delete`).
 - `tui/sesh-panel.tsx` — SolidJS panel, `/** @jsxImportSource @opentui/solid */`.
 - `opencode/tools/sesh-list.ts` — the agent-facing `sesh-list` tool.
 - `scripts/changelog.sh` — release tooling: drafts `[Unreleased]` from
@@ -135,6 +140,9 @@ Resume happens in place (`exec` after `cd` to the session's cwd).
   a row and ctrl+x deletes one (armed, then confirmed). The section lists every
   session without a row cap and flex-grows to fill the sidebar, with overflow
   scrolling inside; the picker remains the place for transcript search.
+  Sessions waiting on the user (unanswered questions, stuck runs) pin a
+  **Needs input** group above the directories, with the count in the heading —
+  same `NEEDS_INPUT_SQL` heuristic as `bin/sesh-waiting.sh`.
 - **Picker:** a custom dialog (not `DialogSelect`) grouped by
   project/directory, recency-ordered, resume via
   `api.route.navigate("session", …)`. `ctrl+o` and the command palette open it;

package/CHANGELOG.md

@@ -7,6 +7,20 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.0] - 2026-09-24
+
+### Added
+
+- Needs-input triage: sessions with unanswered agent questions or runs stuck
+  mid-tool pin a **Needs input** group above the sidebar directories (count in
+  the heading), and `sesh --needs-input [--json]` lists the same set in the
+  terminal. Detection reads the opencode store directly, so it works for every
+  session, not just ones owned by the current server.
+- `sesh prune [--older-than 30d] [--dry-run] [--yes] [--delete]` archives stale
+  sessions so the list stays triageable. Pinned sessions, sessions waiting on
+  you, fork children and already-archived sessions are never touched;
+  archiving is reversible, `--delete` hard-deletes through the opencode CLI,
+  and non-TTY runs need `--yes`.
 ## [0.2.1] - 2026-09-24
 
 ### Changed
@@ -225,7 +239,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Fixture-database regression suite, TypeScript typechecking, and ShellCheck in
   CI.
 
-[Unreleased]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.2.1...HEAD
+[Unreleased]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.3.0...HEAD
+[0.3.0]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.2.1...v0.3.0
 [0.2.1]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.2.0...v0.2.1
 [0.2.0]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.1.7...v0.2.0
 [0.1.7]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.1.6...v0.1.7

package/README.md

@@ -127,7 +127,15 @@ matches nothing says so instead of showing an empty screen.
 
 Flags: `--cwd` (current directory only), `--limit N` (default: all),
 `--archived`, `--print` (print `id<TAB>cwd` instead of resuming), `--fork`,
-`--json` (with `--print`, emit JSON), `--query TEXT`, `--check`.
+`--json` (with `--print`, emit JSON), `--query TEXT`, `--check`,
+`--needs-input` (list sessions waiting on you instead of opening the picker).
+
+`sesh prune [--older-than 30d] [--dry-run] [--yes] [--delete]` archives stale
+sessions (not updated within the threshold) so the list stays triageable.
+Pinned sessions, sessions waiting on you, fork children and already-archived
+sessions are never touched; archiving is reversible, while `--delete`
+hard-deletes through `opencode session delete`. Without `--dry-run`, a TTY run
+confirms first and a non-TTY run needs `--yes`.
 
 Because `--print` just emits the id and directory, `sesh` doubles as a scriptable
 session lookup:
@@ -162,6 +170,9 @@ the list from the keyboard instead of the mouse (`↑`/`↓` to move, Enter to o
 Ctrl-P to preview, Option-S/Option-D to pin, Ctrl-X to delete, Esc to leave). Pinned
 sessions appear ahead of the rest; the section lists every session and scrolls
 to fill the sidebar, so click **▾ hide** to collapse it when you need the room.
+Sessions waiting on you (unanswered agent questions, runs stuck mid-tool) pin
+themselves to a **Needs input** group above the directories, with the count in
+the heading; `sesh --needs-input` lists the same set in the terminal.
 Hovering a row while keyboard navigation is active selects it for the next
 shortcut. The full picker is one keystroke away.
 

package/bin/sesh

@@ -22,5 +22,9 @@ case ${1:-} in
     shift
     exec bash "$SCRIPT_DIR/../install.sh" --uninstall "$@"
     ;;
+  prune)
+    shift
+    exec bash "$SCRIPT_DIR/sesh-prune.sh" "$@"
+    ;;
 esac
 exec "$SCRIPT_DIR/sesh.sh" "$@"

package/bin/sesh-prune.sh

@@ -0,0 +1,175 @@
+#!/usr/bin/env bash
+# Archive (or, with --delete, hard-delete) stale sessions: not updated within
+# the threshold, never pinned, never waiting on the user, never already
+# archived, never a fork child.
+#
+# Archive is the default because it is reversible; hard deletes go through
+# `opencode session delete` so its own safeguards apply. The archive itself
+# is a single atomic UPDATE through the same sqlite3-or-`opencode db` read
+# path the list commands use — there is no archive endpoint in the opencode
+# API or CLI, so a direct write is the only route (deletes stay on the CLI).
+#
+# Usage: sesh-prune.sh [--older-than 30d] [--dry-run] [--yes] [--delete]
+#   --older-than Nd|Nh|Nw (bare N means days; default 30d)
+#   --dry-run lists candidates and changes nothing
+#   without --dry-run, a TTY run confirms first; a non-TTY run needs --yes
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+OPENCODE_BIN=${SESH_OPENCODE:-opencode}
+
+older_than=30d
+dry_run=0
+assume_yes=0
+hard_delete=0
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --older-than) older_than=${2:-}; shift ;;
+    --older-than=*) older_than=${1#--older-than=} ;;
+    --dry-run) dry_run=1 ;;
+    --yes|-y) assume_yes=1 ;;
+    --delete) hard_delete=1 ;;
+    --help) echo "usage: ${0##*/} [--older-than 30d] [--dry-run] [--yes] [--delete]"; exit 0 ;;
+    *) echo "unknown option: $1" >&2; exit 2 ;;
+  esac
+  shift
+done
+
+if [[ "$older_than" =~ ^([0-9]+)([dhw])?$ ]]; then
+  amount=$((10#${BASH_REMATCH[1]}))
+  unit=${BASH_REMATCH[2]:-d}
+  [ "$amount" -gt 0 ] || { echo "--older-than must be positive" >&2; exit 2; }
+else
+  echo "--older-than takes Nd, Nh or Nw (bare N means days)" >&2
+  exit 2
+fi
+case "$unit" in
+  h) threshold_ms=$((amount * 3600000)) ;;
+  d) threshold_ms=$((amount * 86400000)) ;;
+  w) threshold_ms=$((amount * 604800000)) ;;
+esac
+NOW_MS=$(python3 -c 'import time; print(int(time.time() * 1000))' 2>/dev/null || echo "$(( $(date +%s) * 1000 ))")
+CUTOFF=$((NOW_MS - threshold_ms))
+
+resolve_db() {
+  if [ -n "${SESH_DB:-}" ]; then printf '%s\n' "$SESH_DB"; return 0; fi
+  local from_cli=''
+  if command -v "$OPENCODE_BIN" >/dev/null 2>&1; then
+    from_cli=$("$OPENCODE_BIN" db path 2>/dev/null || true)
+  fi
+  if [ -n "$from_cli" ] && [ -f "$from_cli" ]; then printf '%s\n' "$from_cli"; return 0; fi
+  if [ -f "$HOME/.local/share/opencode/opencode.db" ]; then printf '%s\n' "$HOME/.local/share/opencode/opencode.db"; return 0; fi
+  return 1
+}
+
+SQLITE_BIN=''
+if [ -n "${SESH_SQLITE:-}" ]; then
+  SQLITE_BIN=$SESH_SQLITE
+elif command -v sqlite3 >/dev/null 2>&1; then
+  SQLITE_BIN=sqlite3
+fi
+
+DB_PATH=$(resolve_db) || { echo 'sesh: session database unavailable' >&2; exit 1; }
+[ -f "$DB_PATH" ] || { echo 'sesh: session database unavailable' >&2; exit 1; }
+
+if [ -n "$SQLITE_BIN" ]; then
+  query() { "$SQLITE_BIN" -json -readonly "$DB_PATH" "$1"; }
+  write_db() { "$SQLITE_BIN" "$DB_PATH" "$1"; }
+else
+  command -v "$OPENCODE_BIN" >/dev/null 2>&1 || { echo 'sesh: neither sqlite3 nor opencode is available' >&2; exit 1; }
+  query() { "$OPENCODE_BIN" db "$1" --format json; }
+  write_db() { "$OPENCODE_BIN" db "$1" --format json > /dev/null; }
+fi
+
+JQ_BIN=${SESH_JQ:-$(command -v jq || true)}
+[ -n "$JQ_BIN" ] || { echo 'sesh: jq is required' >&2; exit 1; }
+
+CANDIDATES=$(query "SELECT id, directory, title, time_updated AS updated FROM session WHERE time_updated < $CUTOFF AND COALESCE(time_archived, 0) = 0 AND parent_id IS NULL ORDER BY time_updated ASC;")
+# sqlite3 -json prints nothing (not []) when no rows match.
+[ -n "$CANDIDATES" ] || CANDIDATES='[]'
+PINS=$("$SCRIPT_DIR/sesh-pins.sh" read 2>/dev/null || printf '{"sessions":[],"directories":[]}')
+WAITING_IDS=$(bash "$SCRIPT_DIR/sesh-waiting.sh" --json 2>/dev/null | "$JQ_BIN" -r '.[].id' || true)
+[ -n "$WAITING_IDS" ] || WAITING_IDS='__none__'
+
+ELIGIBLE=$(printf '%s' "$CANDIDATES" | "$JQ_BIN" -c --slurpfile _pins <(printf '%s' "$PINS") --arg waiting "$WAITING_IDS" '
+  ($waiting | split("\n") | map(select(. != "" and . != "__none__"))) as $waiting_ids
+  | [ .[]
+      | .id as $id
+      | .directory as $dir
+      | select($id | test("^ses_[A-Za-z0-9]+$"))
+      | select(([$_pins[0].sessions[]] | index($id) | not))
+      | select(([$_pins[0].directories[]] | index($dir) | not))
+      | select(($waiting_ids | index($id) | not))
+    ]
+')
+COUNT=$(printf '%s' "$ELIGIBLE" | "$JQ_BIN" -r 'length')
+VERB=Archive
+[ "$hard_delete" = 0 ] || VERB=Delete
+
+if [ "$COUNT" = 0 ]; then
+  echo "Nothing to prune older than $older_than."
+  exit 0
+fi
+
+printf '%s' "$ELIGIBLE" | "$JQ_BIN" -r --argjson now "$NOW_MS" '
+  def ago(ms): ((($now - ms) / 1000) | floor) as $s
+    | if $s < 3600 then "\($s / 60 | floor)m"
+      elif $s < 86400 then "\($s / 3600 | floor)h"
+      else "\($s / 86400 | floor)d" end;
+  .[] | "\(.id)\t\(.title // "untitled")\t\(ago(.updated)) ago"
+' | while IFS=$'\t' read -r id title age; do
+  printf '%s  %s  \033[90m%s\033[0m\n' "$id" "$title" "$age"
+done
+
+if [ "$dry_run" = 1 ]; then
+  printf '%s %s session(s) older than %s (--dry-run: nothing changed).\n' "$VERB" "$COUNT" "$older_than" >&2
+  exit 0
+fi
+
+if [ "$assume_yes" = 0 ]; then
+  if [ -t 0 ]; then
+    printf '%s' "$VERB $COUNT session(s) older than $older_than? [y/N] "
+    reply=''
+    IFS= read -r -n 1 reply || reply=''
+    printf '\n'
+    case "$reply" in
+      y|Y) ;;
+      *) echo 'Cancelled; nothing was changed.'; exit 0 ;;
+    esac
+  else
+    echo "Refusing to prune $COUNT session(s): pass --yes when stdin is not a terminal." >&2
+    exit 2
+  fi
+fi
+
+if [ "$hard_delete" = 0 ]; then
+  IDS=$(printf '%s' "$ELIGIBLE" | "$JQ_BIN" -r '.[].id')
+  IN_LIST=''
+  for id in $IDS; do
+    case "$id" in
+      ses_[A-Za-z0-9]*) IN_LIST="$IN_LIST'$id'," ;;
+      *) echo "Refusing: unexpected session id shape." >&2; exit 1 ;;
+    esac
+  done
+  IN_LIST=${IN_LIST%,}
+  write_db "UPDATE session SET time_archived = $NOW_MS WHERE id IN ($IN_LIST);"
+  echo "Archived $COUNT session(s) older than $older_than."
+else
+  command -v "$OPENCODE_BIN" >/dev/null 2>&1 || { echo 'sesh: opencode executable is unavailable for deletes.' >&2; exit 1; }
+  failed=0
+  done_count=0
+  for id in $(printf '%s' "$ELIGIBLE" | "$JQ_BIN" -r '.[].id'); do
+    case "$id" in
+      ses_[A-Za-z0-9]*) ;;
+      *) echo "Refusing: unexpected session id shape." >&2; exit 1 ;;
+    esac
+    if "$OPENCODE_BIN" session delete "$id" >/dev/null 2>&1; then
+      done_count=$((done_count + 1))
+    else
+      echo "Could not delete $id." >&2
+      failed=$((failed + 1))
+    fi
+  done
+  echo "Deleted $done_count session(s) older than $older_than."
+  [ "$failed" = 0 ] || exit 1
+fi

package/bin/sesh-waiting.sh

@@ -0,0 +1,127 @@
+#!/usr/bin/env bash
+# List sessions waiting on the user: unanswered agent questions and runs
+# stuck with a tool still marked running. Server-independent: it reads the
+# opencode SQLite store directly, so it sees every session — not just ones
+# owned by a running TUI server, whose in-memory permission/question state
+# is invisible cross-project.
+#
+# A session waits when it is not archived, is not a fork child, and either
+#   - has a `question` tool part that never completed with no later user
+#     message in the same session (awaiting an answer, errored included), or
+#   - has a `tool` part still marked `running` older than STUCK_AFTER_MS
+#     (awaiting approval, or orphaned by a dead server).
+#
+# Usage: sesh-waiting.sh [--json]
+#   default prints a human table; --json prints [{id,reason,title,directory,updated}]
+# Keep NEEDS_INPUT_SQL in sync with the TUI sidebar copy in tui/sesh-panel.tsx.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+OPENCODE_BIN=${SESH_OPENCODE:-opencode}
+JSON=0
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --json) JSON=1 ;;
+    --help) echo "usage: ${0##*/} [--json]"; exit 0 ;;
+    *) echo "unknown option: $1" >&2; exit 2 ;;
+  esac
+  shift
+done
+
+resolve_db() {
+  if [ -n "${SESH_DB:-}" ]; then printf '%s\n' "$SESH_DB"; return 0; fi
+  local from_cli=''
+  if command -v "$OPENCODE_BIN" >/dev/null 2>&1; then
+    from_cli=$("$OPENCODE_BIN" db path 2>/dev/null || true)
+  fi
+  if [ -n "$from_cli" ] && [ -f "$from_cli" ]; then printf '%s\n' "$from_cli"; return 0; fi
+  if [ -f "$HOME/.local/share/opencode/opencode.db" ]; then printf '%s\n' "$HOME/.local/share/opencode/opencode.db"; return 0; fi
+  return 1
+}
+
+SQLITE_BIN=''
+if [ -n "${SESH_SQLITE:-}" ]; then
+  SQLITE_BIN=$SESH_SQLITE
+elif command -v sqlite3 >/dev/null 2>&1; then
+  SQLITE_BIN=sqlite3
+fi
+
+DB_PATH=$(resolve_db) || { echo 'sesh: session database unavailable' >&2; exit 1; }
+[ -f "$DB_PATH" ] || { echo 'sesh: session database unavailable' >&2; exit 1; }
+
+NOW_MS=$(python3 -c 'import time; print(int(time.time() * 1000))' 2>/dev/null || date +%s000)
+STUCK_BEFORE=$((NOW_MS - 600000))
+
+# NEEDS_INPUT_SQL (shared heuristic — keep in sync with tui/sesh-panel.tsx).
+read -r -d '' QUERY <<SQL || true
+SELECT s.id AS id, s.directory AS directory, s.title AS title, s.time_updated AS updated,
+  CASE WHEN EXISTS (
+    SELECT 1 FROM part p
+    WHERE p.session_id = s.id
+      AND json_extract(p.data, '\$.type') = 'tool'
+      AND json_extract(p.data, '\$.tool') = 'question'
+      AND COALESCE(json_extract(p.data, '\$.state.status'), 'pending') != 'completed'
+      AND NOT EXISTS (
+        SELECT 1 FROM message m
+        WHERE m.session_id = s.id
+          AND json_extract(m.data, '\$.role') = 'user'
+          AND m.time_created > p.time_created)
+  ) THEN 'question' ELSE 'stuck' END AS reason
+FROM session s
+WHERE COALESCE(s.time_archived, 0) = 0
+  AND s.parent_id IS NULL
+  AND (EXISTS (
+    SELECT 1 FROM part p
+    WHERE p.session_id = s.id
+      AND json_extract(p.data, '\$.type') = 'tool'
+      AND json_extract(p.data, '\$.tool') = 'question'
+      AND COALESCE(json_extract(p.data, '\$.state.status'), 'pending') != 'completed'
+      AND NOT EXISTS (
+        SELECT 1 FROM message m
+        WHERE m.session_id = s.id
+          AND json_extract(m.data, '\$.role') = 'user'
+          AND m.time_created > p.time_created)
+  ) OR EXISTS (
+    SELECT 1 FROM part p2
+    WHERE p2.session_id = s.id
+      AND json_extract(p2.data, '\$.type') = 'tool'
+      AND json_extract(p2.data, '\$.state.status') = 'running'
+      AND p2.time_created < $STUCK_BEFORE))
+ORDER BY s.time_updated DESC;
+SQL
+
+if [ -n "$SQLITE_BIN" ]; then
+  # Read-only: sesh never writes the store on this path (archive writes go
+  # through `opencode db`, hard deletes through `opencode session delete`).
+  ROWS=$("$SQLITE_BIN" -json -readonly "$DB_PATH" "$QUERY")
+else
+  command -v "$OPENCODE_BIN" >/dev/null 2>&1 || { echo 'sesh: neither sqlite3 nor opencode is available' >&2; exit 1; }
+  ROWS=$("$OPENCODE_BIN" db "$QUERY" --format json)
+fi
+
+# sqlite3 -json prints nothing (not []) when no rows match.
+[ -n "$ROWS" ] || ROWS='[]'
+
+if [ "$JSON" = 1 ]; then
+  printf '%s\n' "$ROWS"
+  exit 0
+fi
+
+JQ_BIN=${SESH_JQ:-$(command -v jq || true)}
+[ -n "$JQ_BIN" ] || { echo 'sesh: jq is required for the table view (or use --json)' >&2; exit 1; }
+COUNT=$(printf '%s' "$ROWS" | "$JQ_BIN" -r 'length')
+if [ "$COUNT" = 0 ]; then
+  echo 'No sessions are waiting on you.'
+  exit 0
+fi
+printf '%s' "$ROWS" | "$JQ_BIN" -r --argjson now "$NOW_MS" '
+  def ago(ms): ((($now - ms) / 1000) | floor) as $s
+    | if $s < 60 then "now"
+      elif $s < 3600 then "\($s / 60 | floor)m"
+      elif $s < 86400 then "\($s / 3600 | floor)h"
+      else "\($s / 86400 | floor)d" end;
+  def reason(t): if t == "question" then "awaiting answer" else "run stuck" end;
+  .[] | "\(.id)\t\(reason(.reason))\t\(.title // "untitled")\t\(.directory)\t\(ago(.updated)) ago"
+' | while IFS=$'\t' read -r id reason title dir age; do
+  printf '%s  \033[33m%s\033[0m  %s  \033[90m%s · %s\033[0m\n' "$id" "$reason" "$title" "$dir" "$age"
+done

package/bin/sesh.sh

@@ -54,6 +54,17 @@ if [ "${1:-}" = --check ]; then
   exit 0
 fi
 
+# Triage listing, not the picker: sessions with unanswered agent questions
+# or runs stuck mid-tool. Never starts fzf or the refresh worker.
+if [ "${1:-}" = --needs-input ]; then
+  shift
+  case "${1:-}" in
+    '') exec bash "$SCRIPT_DIR/sesh-waiting.sh" ;;
+    --json) exec bash "$SCRIPT_DIR/sesh-waiting.sh" --json ;;
+    *) echo "usage: sesh --needs-input [--json]" >&2; exit 2 ;;
+  esac
+fi
+
 scope_value=''
 picker_limit=0
 picker_archived=0

package/install.sh

@@ -236,7 +236,9 @@ for path in \
   bin/sesh-list.sh \
   bin/sesh-preview.sh \
   bin/sesh-delete.sh \
+  bin/sesh-prune.sh \
   bin/sesh-refresh-worker.sh \
+  bin/sesh-waiting.sh \
   bin/sesh-shortcuts.sh \
   opencode/tools/sesh-list.ts \
   tui/sesh-panel.tsx \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-sesh",
-  "version": "0.2.1",
+  "version": "0.3.0",
   "type": "module",
   "description": "Browse, search, preview and resume opencode sessions from the terminal and the TUI.",
   "license": "MIT",

package/tui/sesh-panel.tsx

@@ -326,6 +326,68 @@ async function openTranscriptDb(): Promise<any | undefined> {
   }
 }
 
+// NEEDS_INPUT_SQL: sessions waiting on the user (shared heuristic — keep in
+// sync with bin/sesh-waiting.sh). A session waits when it is not archived,
+// is not a fork child, and either has an unanswered `question` tool part or
+// a `tool` part still marked running older than STUCK_AFTER_MS (awaiting
+// approval, or orphaned by a dead server). Server-independent on purpose:
+// the TUI sync layer only sees permission/question state for sessions owned
+// by the current server, which is invisible cross-project.
+const STUCK_AFTER_MS = 600000
+const NEEDS_INPUT_SQL = (stuckBefore: number) => `
+SELECT s.id AS id,
+  CASE WHEN EXISTS (
+    SELECT 1 FROM part p
+    WHERE p.session_id = s.id
+      AND json_extract(p.data, '$.type') = 'tool'
+      AND json_extract(p.data, '$.tool') = 'question'
+      AND COALESCE(json_extract(p.data, '$.state.status'), 'pending') != 'completed'
+      AND NOT EXISTS (
+        SELECT 1 FROM message m
+        WHERE m.session_id = s.id
+          AND json_extract(m.data, '$.role') = 'user'
+          AND m.time_created > p.time_created)
+  ) THEN 'question' ELSE 'stuck' END AS reason
+FROM session s
+WHERE COALESCE(s.time_archived, 0) = 0
+  AND s.parent_id IS NULL
+  AND (EXISTS (
+    SELECT 1 FROM part p
+    WHERE p.session_id = s.id
+      AND json_extract(p.data, '$.type') = 'tool'
+      AND json_extract(p.data, '$.tool') = 'question'
+      AND COALESCE(json_extract(p.data, '$.state.status'), 'pending') != 'completed'
+      AND NOT EXISTS (
+        SELECT 1 FROM message m
+        WHERE m.session_id = s.id
+          AND json_extract(m.data, '$.role') = 'user'
+          AND m.time_created > p.time_created)
+  ) OR EXISTS (
+    SELECT 1 FROM part p2
+    WHERE p2.session_id = s.id
+      AND json_extract(p2.data, '$.type') = 'tool'
+      AND json_extract(p2.data, '$.state.status') = 'running'
+      AND p2.time_created < ${stuckBefore}))
+ORDER BY s.time_updated DESC`
+
+async function queryWaitingIds(db: any): Promise<Map<string, string>> {
+  const rows = (db.query(NEEDS_INPUT_SQL(Date.now() - STUCK_AFTER_MS)).all() ?? []) as {
+    id: unknown
+    reason: unknown
+  }[]
+  const out = new Map<string, string>()
+  for (const row of rows) {
+    if (
+      typeof row?.id === "string" &&
+      SESSION_ID_PATTERN.test(row.id) &&
+      (row.reason === "question" || row.reason === "stuck")
+    ) {
+      out.set(row.id, row.reason)
+    }
+  }
+  return out
+}
+
 function addTranscript(index: Map<string, string>, sid: string, data: string): void {
   try {
     const part = JSON.parse(data) as { type?: unknown; text?: unknown }
@@ -597,6 +659,7 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
   const [navActive, setNavActive] = createSignal(false)
   const [cursor, setCursor] = createSignal(0)
   const [pendingDelete, setPendingDelete] = createSignal<string>()
+  const [waiting, setWaiting] = createSignal<Map<string, string>>(new Map())
   let confirmTimer: ReturnType<typeof setTimeout> | undefined
   const currentID = createMemo(() => {
     const route = props.api.route.current
@@ -620,6 +683,19 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
         // say so when there is nothing at all to show
         if (alive && entries().length === 0) setLoadFailed(true)
       }
+      try {
+        const db = await openTranscriptDb()
+        if (db) {
+          try {
+            const ids = await queryWaitingIds(db)
+            if (alive) setWaiting(ids)
+          } finally {
+            db.close()
+          }
+        }
+      } catch {
+        // leave the previous waiting set in place rather than flashing
+      }
     }
     void load()
     const clock = setInterval(() => void load(), POLL_MS)
@@ -641,9 +717,27 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
   const shownEntries = createMemo(() => filteredEntries())
   const remaining = createMemo(() => Math.max(0, filteredEntries().length - shownEntries().length))
 
+  const NEEDS_INPUT_DIR = "__needs_input__"
+  const waitingEntries = createMemo(() => {
+    const ids = waiting()
+    return shownEntries().filter((entry) => ids.has(entry.id))
+  })
+  const waitingReason = (id: string) => (waiting().get(id) === "question" ? "awaiting answer" : "run stuck")
+
   const tree = createMemo<TreeRow[]>(() => {
+    const rows: TreeRow[] = []
+    const pending = waitingEntries()
+    if (pending.length > 0) {
+      rows.push({ kind: "group", dir: NEEDS_INPUT_DIR, label: "Needs input", count: pending.length })
+      if (!collapsed()[NEEDS_INPUT_DIR]) {
+        for (let i = 0; i < pending.length; i++) {
+          rows.push({ kind: "item", entry: pending[i], last: i === pending.length - 1 })
+        }
+      }
+    }
     const groups = new Map<string, Entry[]>()
     for (const entry of shownEntries()) {
+      if (waiting().has(entry.id)) continue
       const list = groups.get(entry.dir) ?? []
       list.push(entry)
       groups.set(entry.dir, list)
@@ -656,7 +750,6 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
           pins.directories.includes(group.dir) ? 2 : group.list.some((entry) => pins.sessions.includes(entry.id)) ? 1 : 0
         return rank(b) - rank(a) || b.updated - a.updated
       })
-    const rows: TreeRow[] = []
     for (const group of ordered) {
       rows.push({ kind: "group", dir: group.dir, label: prettyDir(group.dir, home), count: group.list.length })
       if (collapsed()[group.dir]) continue
@@ -961,6 +1054,9 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
             {query().trim() ? ` (${filteredEntries().length}/${entries().length})` : ` (${entries().length})`}
           </span>
           <span style={{ fg: theme().accent }}>{navActive() ? " · nav" : ""}</span>
+          <Show when={waitingEntries().length > 0}>
+            <span style={{ fg: theme().warning }}> · {waitingEntries().length} need input</span>
+          </Show>
         </text>
         <text flexShrink={0} style={{ fg: theme().textMuted }} onMouseDown={toggleSection}>
           {sectionCollapsed() ? "▸ show" : "▾ hide"}
@@ -1065,7 +1161,15 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
                   matchColor={theme().warning}
                 />
                 <text flexShrink={0} style={{ fg: isPendingDelete(row.entry.id) ? theme().error : theme().textMuted }}>
-                  {isPendingDelete(row.entry.id) ? "ctrl+x again" : ago(row.entry.updated)}
+                  {isPendingDelete(row.entry.id) ? (
+                    "ctrl+x again"
+                  ) : waiting().has(row.entry.id) ? (
+                    <span>
+                      {ago(row.entry.updated)} · <span style={{ fg: theme().warning }}>{waitingReason(row.entry.id)}</span>
+                    </span>
+                  ) : (
+                    ago(row.entry.updated)
+                  )}
                 </text>
               </box>
             )