opencode-sesh 0.2.1 → 0.4.0

package/AGENTS.md

@@ -35,7 +35,16 @@ HOME=/tmp/fakehome bash install.sh   # installer smoke test (never touches ~/.co
 ## Layout
 
 - `bin/` — flat; no subdirs. Scripts resolve siblings from their own location.
-  Never hardcode install paths.
+  Never hardcode install paths. `sesh-waiting.sh` owns the needs-input query
+  (shared heuristic with the TUI sidebar copy, marked `NEEDS_INPUT_SQL` in
+  both); `sesh-prune.sh` archives stale sessions; `sesh-costs.sh` sums
+  assistant-message cost per directory; `sesh-retitle.sh` renames placeholder
+  titles. Reads go through `sqlite3 -readonly` (or `opencode db`); the direct
+  `UPDATE`s in `sesh-prune.sh` (archive) and `sesh-retitle.sh` (title) are the
+  only sanctioned writes — neither has a CLI or API endpoint, and hard deletes
+  stay on `opencode session delete`.
+- `contrib/` — caller-side integrations (currently cmux). Nothing here may add
+  window management to sesh itself.
 - `tui/sesh-panel.tsx` — SolidJS panel, `/** @jsxImportSource @opentui/solid */`.
 - `opencode/tools/sesh-list.ts` — the agent-facing `sesh-list` tool.
 - `scripts/changelog.sh` — release tooling: drafts `[Unreleased]` from
@@ -135,6 +144,9 @@ Resume happens in place (`exec` after `cd` to the session's cwd).
   a row and ctrl+x deletes one (armed, then confirmed). The section lists every
   session without a row cap and flex-grows to fill the sidebar, with overflow
   scrolling inside; the picker remains the place for transcript search.
+  Sessions waiting on the user (unanswered questions, stuck runs) pin a
+  **Needs input** group above the directories, with the count in the heading —
+  same `NEEDS_INPUT_SQL` heuristic as `bin/sesh-waiting.sh`.
 - **Picker:** a custom dialog (not `DialogSelect`) grouped by
   project/directory, recency-ordered, resume via
   `api.route.navigate("session", …)`. `ctrl+o` and the command palette open it;

package/CHANGELOG.md

@@ -7,6 +7,39 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.0] - 2026-09-24
+
+### Added
+
+- `sesh costs [--days N] [--json]` sums assistant-message cost per project, with
+  a recent window beside the lifetime total, so a day's work reads as a
+  per-project record.
+- `sesh retitle [--dry-run] [--yes]` replaces auto-generated placeholder titles
+  (`New session - …`) with the start of the session's first user message. Only
+  placeholder titles are touched.
+- `contrib/cmux/` documents driving sesh from cmux: command-palette entries,
+  shortcuts, resuming a session in its own workspace, and a global "resume from
+  anywhere" hotkey. The glue is caller-side; sesh stays terminal-agnostic.
+
+### Changed
+
+- Search now weights results: a title match outranks a transcript-only match and
+  the current project rises while a query is active. Pins still win outright,
+  and the idle list keeps pure pin+recency ordering.
+## [0.3.0] - 2026-09-24
+
+### Added
+
+- Needs-input triage: sessions with unanswered agent questions or runs stuck
+  mid-tool pin a **Needs input** group above the sidebar directories (count in
+  the heading), and `sesh --needs-input [--json]` lists the same set in the
+  terminal. Detection reads the opencode store directly, so it works for every
+  session, not just ones owned by the current server.
+- `sesh prune [--older-than 30d] [--dry-run] [--yes] [--delete]` archives stale
+  sessions so the list stays triageable. Pinned sessions, sessions waiting on
+  you, fork children and already-archived sessions are never touched;
+  archiving is reversible, `--delete` hard-deletes through the opencode CLI,
+  and non-TTY runs need `--yes`.
 ## [0.2.1] - 2026-09-24
 
 ### Changed
@@ -225,7 +258,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Fixture-database regression suite, TypeScript typechecking, and ShellCheck in
   CI.
 
-[Unreleased]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.2.1...HEAD
+[Unreleased]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.4.0...HEAD
+[0.4.0]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.3.0...v0.4.0
+[0.3.0]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.2.1...v0.3.0
 [0.2.1]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.2.0...v0.2.1
 [0.2.0]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.1.7...v0.2.0
 [0.1.7]: https://github.com/ozandogrultan/opencode-sesh/compare/v0.1.6...v0.1.7

package/README.md

@@ -127,7 +127,27 @@ matches nothing says so instead of showing an empty screen.
 
 Flags: `--cwd` (current directory only), `--limit N` (default: all),
 `--archived`, `--print` (print `id<TAB>cwd` instead of resuming), `--fork`,
-`--json` (with `--print`, emit JSON), `--query TEXT`, `--check`.
+`--json` (with `--print`, emit JSON), `--query TEXT`, `--check`,
+`--needs-input` (list sessions waiting on you instead of opening the picker).
+
+`sesh prune [--older-than 30d] [--dry-run] [--yes] [--delete]` archives stale
+sessions (not updated within the threshold) so the list stays triageable.
+Pinned sessions, sessions waiting on you, fork children and already-archived
+sessions are never touched; archiving is reversible, while `--delete`
+hard-deletes through `opencode session delete`. Without `--dry-run`, a TTY run
+confirms first and a non-TTY run needs `--yes`.
+
+`sesh costs [--days N] [--json]` sums assistant-message cost per project, with a
+recent window beside the lifetime total, so a day's work reads as a
+per-project record.
+
+`sesh retitle [--dry-run] [--yes]` replaces auto-generated placeholder titles
+(`New session - …`) with the start of the session's first user message. Only
+placeholder titles are touched, and the same dry-run/`--yes` gating applies.
+
+When searching, title matches outrank transcript-only matches and the current
+project rises, so the list answers "where was that thing I worked on" before it
+answers "what is newest". Pins still win outright.
 
 Because `--print` just emits the id and directory, `sesh` doubles as a scriptable
 session lookup:
@@ -162,6 +182,9 @@ the list from the keyboard instead of the mouse (`↑`/`↓` to move, Enter to o
 Ctrl-P to preview, Option-S/Option-D to pin, Ctrl-X to delete, Esc to leave). Pinned
 sessions appear ahead of the rest; the section lists every session and scrolls
 to fill the sidebar, so click **▾ hide** to collapse it when you need the room.
+Sessions waiting on you (unanswered agent questions, runs stuck mid-tool) pin
+themselves to a **Needs input** group above the directories, with the count in
+the heading; `sesh --needs-input` lists the same set in the terminal.
 Hovering a row while keyboard navigation is active selects it for the next
 shortcut. The full picker is one keystroke away.
 
@@ -184,6 +207,13 @@ All variables are optional.
 | `SESH_CACHE_DIR` | `~/.cache/sesh` | persistent search-index cache |
 | `SESH_PINS_FILE` | `${XDG_DATA_HOME:-~/.local/share}/sesh/pins.json` | shared persistent session/directory pins |
 
+## Integrations
+
+sesh is terminal-agnostic on purpose: it has no window-management code. The
+[`contrib/cmux/`](contrib/cmux/README.md) directory shows how to drive it from
+cmux — command-palette entries, shortcuts, resuming a session in its own
+workspace, and a global "resume from anywhere" hotkey — all caller-side.
+
 ## How it works
 
 `bin/sesh-list.sh` is the only `bin/` script that reads the opencode session

package/ROADMAP.md

@@ -0,0 +1,61 @@
+# Roadmap
+
+Productivity bets for sesh, roughly ordered by payoff. Status is tracked here
+as items land.
+
+## 1. Needs-input triage (done)
+
+**Problem:** with 100+ sessions, the bottleneck is not finding a session but
+knowing which ones are *waiting on you* (unanswered agent questions, stale
+runs awaiting approval) versus done versus dead. Today that means polling rows
+by hand.
+
+**Approach:** server-independent detection straight from the opencode SQLite
+store, so it works for every session, not just ones owned by the current TUI
+server (whose in-memory permission/question state is invisible cross-project):
+
+- a `question` tool part that is not `completed` with no later user message in
+  the same session → awaiting an answer;
+- a `tool` part stuck in `running` older than ~10 minutes → awaiting approval
+  or orphaned by a dead server.
+
+**Surfaces:** a "Needs input" section pinned above the directory groups in the
+TUI sidebar, plus a terminal listing (`sesh --needs-input`).
+
+## 2. Stale-session pruning (done)
+
+**Problem:** the list grows without bound (127+ rows), which slows scanning
+and bloats the transcript search index with archaeology.
+
+**Approach:** `sesh prune --older-than 30d` archives (never deletes) sessions
+older than the threshold: never pinned ones, never ones flagged as needing
+input. Archive is reversible; `--delete` stays the explicit hard-delete path
+through the existing two-step confirm. Interactive runs confirm with a
+candidate summary; non-TTY runs require `--yes`; `--dry-run` lists only.
+
+## 3. sesh ↔ cmux bridge (done)
+
+**Approach:** kept caller-side. sesh has no window-management code (a hard
+repo rule), so [`contrib/cmux/`](contrib/cmux/README.md) ships the cmux
+actions, shortcuts and a `--print --json` recipe that resumes a session in its
+own workspace. cmux calls sesh; sesh never calls cmux.
+
+## 4. Per-project cost digest (done)
+
+`sesh costs [--days N] [--json]` sums assistant-message cost per directory with
+a recent window beside the lifetime total, so a day's work reads as a
+per-project record. Message-level summing (not `session.cost`) keeps a
+half-finished day from dragging in a session's earlier history.
+
+## 5. Resume from anywhere (done)
+
+Covered by the same contrib recipes: `sesh --print --json` resolves a session
+non-interactively, so a cmux action, skhd binding or launcher can resume a
+specific session — or open the picker — from any context.
+
+## Smaller items (done)
+
+- Search weighting: title matches outrank transcript-only matches and the
+  current project rises while a query is active; pins still win outright.
+- `sesh retitle [--dry-run] [--yes]` replaces placeholder titles
+  (`New session - …`) with the start of the first user message.

package/bin/sesh

@@ -22,5 +22,17 @@ case ${1:-} in
     shift
     exec bash "$SCRIPT_DIR/../install.sh" --uninstall "$@"
     ;;
+  prune)
+    shift
+    exec bash "$SCRIPT_DIR/sesh-prune.sh" "$@"
+    ;;
+  costs)
+    shift
+    exec bash "$SCRIPT_DIR/sesh-costs.sh" "$@"
+    ;;
+  retitle)
+    shift
+    exec bash "$SCRIPT_DIR/sesh-retitle.sh" "$@"
+    ;;
 esac
 exec "$SCRIPT_DIR/sesh.sh" "$@"

package/bin/sesh-costs.sh

@@ -0,0 +1,103 @@
+#!/usr/bin/env bash
+# Per-directory cost digest: what each project spent in a recent window and
+# over its lifetime, so a day's work reads as a per-project record.
+#
+# Cost is summed from assistant-message `cost` (not `session.cost`) so a
+# partially-completed day does not drag a session's whole history into the
+# window — the same reason the TUI statusline differs from `session.cost`.
+#
+# Usage: sesh-costs.sh [--days N] [--json]
+#   --days N   window in days (default 1); 0 means lifetime only
+#   --json     machine-readable rows
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+OPENCODE_BIN=${SESH_OPENCODE:-opencode}
+days=1
+emit_json=0
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --days) days=${2:-}; shift ;;
+    --days=*) days=${1#--days=} ;;
+    --json) emit_json=1 ;;
+    --help) echo "usage: ${0##*/} [--days N] [--json]"; exit 0 ;;
+    *) echo "unknown option: $1" >&2; exit 2 ;;
+  esac
+  shift
+done
+case "$days" in ''|*[!0-9]*) echo "--days must be a non-negative integer" >&2; exit 2;; esac
+
+resolve_db() {
+  if [ -n "${SESH_DB:-}" ]; then printf '%s\n' "$SESH_DB"; return 0; fi
+  local from_cli=''
+  if command -v "$OPENCODE_BIN" >/dev/null 2>&1; then
+    from_cli=$("$OPENCODE_BIN" db path 2>/dev/null || true)
+  fi
+  if [ -n "$from_cli" ] && [ -f "$from_cli" ]; then printf '%s\n' "$from_cli"; return 0; fi
+  if [ -f "$HOME/.local/share/opencode/opencode.db" ]; then printf '%s\n' "$HOME/.local/share/opencode/opencode.db"; return 0; fi
+  return 1
+}
+
+SQLITE_BIN=''
+if [ -n "${SESH_SQLITE:-}" ]; then
+  SQLITE_BIN=$SESH_SQLITE
+elif command -v sqlite3 >/dev/null 2>&1; then
+  SQLITE_BIN=sqlite3
+fi
+
+DB_PATH=$(resolve_db) || { echo 'sesh: session database unavailable' >&2; exit 1; }
+[ -f "$DB_PATH" ] || { echo 'sesh: session database unavailable' >&2; exit 1; }
+
+NOW_MS=$(python3 -c 'import time; print(int(time.time() * 1000))' 2>/dev/null || echo "$(( $(date +%s) * 1000 ))")
+CUTOFF=$((NOW_MS - days * 86400000))
+
+# One pass over assistant messages; the window filter is a cheap CASE so the
+# lifetime total and the window total come back together.
+ROWS_QUERY="
+SELECT s.directory AS directory,
+  ROUND(SUM(CASE WHEN m.time_created >= $CUTOFF THEN COALESCE(json_extract(m.data, '\$.cost'), 0) ELSE 0 END), 4) AS window_cost,
+  ROUND(SUM(COALESCE(json_extract(m.data, '\$.cost'), 0)), 4) AS lifetime_cost,
+  COUNT(DISTINCT s.id) AS sessions,
+  SUM(CASE WHEN m.time_created >= $CUTOFF THEN COALESCE(json_extract(m.data, '\$.tokens.input'), 0) + COALESCE(json_extract(m.data, '\$.tokens.output'), 0) ELSE 0 END) AS window_tokens
+FROM message m
+JOIN session s ON s.id = m.session_id
+WHERE json_extract(m.data, '\$.role') = 'assistant'
+  AND json_extract(m.data, '\$.cost') IS NOT NULL
+GROUP BY s.directory
+ORDER BY lifetime_cost DESC;"
+
+if [ -n "$SQLITE_BIN" ]; then
+  ROWS=$("$SQLITE_BIN" -json -readonly "$DB_PATH" "$ROWS_QUERY")
+else
+  command -v "$OPENCODE_BIN" >/dev/null 2>&1 || { echo 'sesh: neither sqlite3 nor opencode is available' >&2; exit 1; }
+  ROWS=$("$OPENCODE_BIN" db "$ROWS_QUERY" --format json)
+fi
+[ -n "$ROWS" ] || ROWS='[]'
+
+if [ "$emit_json" = 1 ]; then
+  printf '%s\n' "$ROWS"
+  exit 0
+fi
+
+JQ_BIN=${SESH_JQ:-$(command -v jq || true)}
+[ -n "$JQ_BIN" ] || { echo 'sesh: jq is required for the table view (or use --json)' >&2; exit 1; }
+
+HOME_DIR=${HOME:-}
+printf '%s' "$ROWS" | "$JQ_BIN" -r --arg home "$HOME_DIR" --argjson days "$days" '
+  def pretty: if . == null or . == "" then "other"
+    elif ($home != "" and startswith($home + "/")) then "~" + .[$home | length:]
+    else . end;
+  def money:
+    if . == 0 then "—"
+    else ((.*100 | round | tostring) as $c
+      | "$" + (if ($c | length) == 1 then "0.0" + $c
+               elif ($c | length) == 2 then "0." + $c
+               else $c[0:-2] + "." + $c[-2:] end))
+    end;
+  (map(select(.lifetime_cost > 0)) | sort_by(-.lifetime_cost)) as $rows
+  | if ($rows | length) == 0 then "No assistant cost recorded."
+    else
+      (["WINDOW" + (if $days == 0 then "" else "(\($days)d)" end), "LIFETIME", "SESS", "DIRECTORY"] | @tsv),
+      ($rows[] | [((.window_cost) | money), ((.lifetime_cost) | money), (.sessions | tostring), (.directory | pretty)] | @tsv)
+    end
+' | column -t -s $'\t'

package/bin/sesh-list.sh

@@ -157,7 +157,7 @@ render() {
   {
     [ -n "$notice" ] && printf '\t\tunknown\t%s%s%s\t\tnotice:action\n' "$YELLOW" "$notice" "$RESET"
     [ -n "$state" ] && [ "$state" != fresh ] && printf '\t\tunknown\t%s%s%s\t\tnotice:live-state\n' "$YELLOW" "$state" "$RESET"
-    "$JQ_BIN" -sr --argjson pins "$("${BASH_SOURCE[0]%/*}/sesh-pins.sh" read)" --arg green "$GREEN" --arg cyan "$CYAN" --arg gray "$GRAY" --arg magenta "$MAGENTA" --arg red "$RED" --arg bold "$BOLD" --arg yellow "$YELLOW" --arg reset "$RESET" --arg query "$QUERY" --arg home "$HOME" --arg selected "$SELECTED_ID" '
+    "$JQ_BIN" -sr --argjson pins "$("${BASH_SOURCE[0]%/*}/sesh-pins.sh" read)" --arg green "$GREEN" --arg cyan "$CYAN" --arg gray "$GRAY" --arg magenta "$MAGENTA" --arg red "$RED" --arg bold "$BOLD" --arg yellow "$YELLOW" --arg reset "$RESET" --arg query "$QUERY" --arg home "$HOME" --arg cwd "$PWD" --arg selected "$SELECTED_ID" '
       def ago($epoch):
         ((now - ($epoch | tonumber)) | floor) as $s
         | if $s < 60 then "now" elif $s < 3600 then "\($s / 60 | floor)m" elif $s < 86400 then "\($s / 3600 | floor)h" else "\($s / 86400 | floor)d" end;
@@ -181,11 +181,19 @@ render() {
          else empty end),
         ($matched
        | group_by(.cwd)
+       # Search relevance, not just recency: a title hit outranks a
+       # transcript-only hit, and the current project rises while a query is
+       # active. Both are query-gated so the idle list keeps pure pin+recency
+       # ordering (the scope toggle, not this, is what narrows the list).
        | map({cwd: .[0].cwd, updated: (map(.updatedEpoch) | max),
               pinDirectory: (.[0].cwd as $dir | $pins.directories | index($dir) != null),
               pinSession: (any(.[]; .sessionId as $id | $pins.sessions | index($id) != null)),
-              items: (sort_by([(.sessionId as $id | $pins.sessions | index($id) != null), .updatedEpoch]) | reverse)})
-       | sort_by([.pinDirectory, .pinSession, .updated]) | reverse
+              current: (($q != "") and (.[0].cwd == $cwd)),
+              titleHit: (($q != "") and any(.[]; (.title | ascii_downcase | contains($q)))),
+              items: (sort_by([(.sessionId as $id | $pins.sessions | index($id) != null),
+                               (if $q != "" then (.title | ascii_downcase | contains($q)) else false end),
+                               .updatedEpoch]) | reverse)})
+       | sort_by([.pinDirectory, .pinSession, .current, .titleHit, .updated]) | reverse
        | .[] as $g
        | (["", "", "unknown", ($magenta + (if $g.pinDirectory then "★ " else "" end) + ($g.cwd | homepath | gsub("[\u0000-\u001f\u007f-\u009f]";" ")) + $reset), $g.cwd, ("hdr:" + $g.cwd)] | @tsv),
         ($g.items | to_entries[] | .key as $i | .value as $s

package/bin/sesh-prune.sh

@@ -0,0 +1,175 @@
+#!/usr/bin/env bash
+# Archive (or, with --delete, hard-delete) stale sessions: not updated within
+# the threshold, never pinned, never waiting on the user, never already
+# archived, never a fork child.
+#
+# Archive is the default because it is reversible; hard deletes go through
+# `opencode session delete` so its own safeguards apply. The archive itself
+# is a single atomic UPDATE through the same sqlite3-or-`opencode db` read
+# path the list commands use — there is no archive endpoint in the opencode
+# API or CLI, so a direct write is the only route (deletes stay on the CLI).
+#
+# Usage: sesh-prune.sh [--older-than 30d] [--dry-run] [--yes] [--delete]
+#   --older-than Nd|Nh|Nw (bare N means days; default 30d)
+#   --dry-run lists candidates and changes nothing
+#   without --dry-run, a TTY run confirms first; a non-TTY run needs --yes
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+OPENCODE_BIN=${SESH_OPENCODE:-opencode}
+
+older_than=30d
+dry_run=0
+assume_yes=0
+hard_delete=0
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --older-than) older_than=${2:-}; shift ;;
+    --older-than=*) older_than=${1#--older-than=} ;;
+    --dry-run) dry_run=1 ;;
+    --yes|-y) assume_yes=1 ;;
+    --delete) hard_delete=1 ;;
+    --help) echo "usage: ${0##*/} [--older-than 30d] [--dry-run] [--yes] [--delete]"; exit 0 ;;
+    *) echo "unknown option: $1" >&2; exit 2 ;;
+  esac
+  shift
+done
+
+if [[ "$older_than" =~ ^([0-9]+)([dhw])?$ ]]; then
+  amount=$((10#${BASH_REMATCH[1]}))
+  unit=${BASH_REMATCH[2]:-d}
+  [ "$amount" -gt 0 ] || { echo "--older-than must be positive" >&2; exit 2; }
+else
+  echo "--older-than takes Nd, Nh or Nw (bare N means days)" >&2
+  exit 2
+fi
+case "$unit" in
+  h) threshold_ms=$((amount * 3600000)) ;;
+  d) threshold_ms=$((amount * 86400000)) ;;
+  w) threshold_ms=$((amount * 604800000)) ;;
+esac
+NOW_MS=$(python3 -c 'import time; print(int(time.time() * 1000))' 2>/dev/null || echo "$(( $(date +%s) * 1000 ))")
+CUTOFF=$((NOW_MS - threshold_ms))
+
+resolve_db() {
+  if [ -n "${SESH_DB:-}" ]; then printf '%s\n' "$SESH_DB"; return 0; fi
+  local from_cli=''
+  if command -v "$OPENCODE_BIN" >/dev/null 2>&1; then
+    from_cli=$("$OPENCODE_BIN" db path 2>/dev/null || true)
+  fi
+  if [ -n "$from_cli" ] && [ -f "$from_cli" ]; then printf '%s\n' "$from_cli"; return 0; fi
+  if [ -f "$HOME/.local/share/opencode/opencode.db" ]; then printf '%s\n' "$HOME/.local/share/opencode/opencode.db"; return 0; fi
+  return 1
+}
+
+SQLITE_BIN=''
+if [ -n "${SESH_SQLITE:-}" ]; then
+  SQLITE_BIN=$SESH_SQLITE
+elif command -v sqlite3 >/dev/null 2>&1; then
+  SQLITE_BIN=sqlite3
+fi
+
+DB_PATH=$(resolve_db) || { echo 'sesh: session database unavailable' >&2; exit 1; }
+[ -f "$DB_PATH" ] || { echo 'sesh: session database unavailable' >&2; exit 1; }
+
+if [ -n "$SQLITE_BIN" ]; then
+  query() { "$SQLITE_BIN" -json -readonly "$DB_PATH" "$1"; }
+  write_db() { "$SQLITE_BIN" "$DB_PATH" "$1"; }
+else
+  command -v "$OPENCODE_BIN" >/dev/null 2>&1 || { echo 'sesh: neither sqlite3 nor opencode is available' >&2; exit 1; }
+  query() { "$OPENCODE_BIN" db "$1" --format json; }
+  write_db() { "$OPENCODE_BIN" db "$1" --format json > /dev/null; }
+fi
+
+JQ_BIN=${SESH_JQ:-$(command -v jq || true)}
+[ -n "$JQ_BIN" ] || { echo 'sesh: jq is required' >&2; exit 1; }
+
+CANDIDATES=$(query "SELECT id, directory, title, time_updated AS updated FROM session WHERE time_updated < $CUTOFF AND COALESCE(time_archived, 0) = 0 AND parent_id IS NULL ORDER BY time_updated ASC;")
+# sqlite3 -json prints nothing (not []) when no rows match.
+[ -n "$CANDIDATES" ] || CANDIDATES='[]'
+PINS=$("$SCRIPT_DIR/sesh-pins.sh" read 2>/dev/null || printf '{"sessions":[],"directories":[]}')
+WAITING_IDS=$(bash "$SCRIPT_DIR/sesh-waiting.sh" --json 2>/dev/null | "$JQ_BIN" -r '.[].id' || true)
+[ -n "$WAITING_IDS" ] || WAITING_IDS='__none__'
+
+ELIGIBLE=$(printf '%s' "$CANDIDATES" | "$JQ_BIN" -c --slurpfile _pins <(printf '%s' "$PINS") --arg waiting "$WAITING_IDS" '
+  ($waiting | split("\n") | map(select(. != "" and . != "__none__"))) as $waiting_ids
+  | [ .[]
+      | .id as $id
+      | .directory as $dir
+      | select($id | test("^ses_[A-Za-z0-9]+$"))
+      | select(([$_pins[0].sessions[]] | index($id) | not))
+      | select(([$_pins[0].directories[]] | index($dir) | not))
+      | select(($waiting_ids | index($id) | not))
+    ]
+')
+COUNT=$(printf '%s' "$ELIGIBLE" | "$JQ_BIN" -r 'length')
+VERB=Archive
+[ "$hard_delete" = 0 ] || VERB=Delete
+
+if [ "$COUNT" = 0 ]; then
+  echo "Nothing to prune older than $older_than."
+  exit 0
+fi
+
+printf '%s' "$ELIGIBLE" | "$JQ_BIN" -r --argjson now "$NOW_MS" '
+  def ago(ms): ((($now - ms) / 1000) | floor) as $s
+    | if $s < 3600 then "\($s / 60 | floor)m"
+      elif $s < 86400 then "\($s / 3600 | floor)h"
+      else "\($s / 86400 | floor)d" end;
+  .[] | "\(.id)\t\(.title // "untitled")\t\(ago(.updated)) ago"
+' | while IFS=$'\t' read -r id title age; do
+  printf '%s  %s  \033[90m%s\033[0m\n' "$id" "$title" "$age"
+done
+
+if [ "$dry_run" = 1 ]; then
+  printf '%s %s session(s) older than %s (--dry-run: nothing changed).\n' "$VERB" "$COUNT" "$older_than" >&2
+  exit 0
+fi
+
+if [ "$assume_yes" = 0 ]; then
+  if [ -t 0 ]; then
+    printf '%s' "$VERB $COUNT session(s) older than $older_than? [y/N] "
+    reply=''
+    IFS= read -r -n 1 reply || reply=''
+    printf '\n'
+    case "$reply" in
+      y|Y) ;;
+      *) echo 'Cancelled; nothing was changed.'; exit 0 ;;
+    esac
+  else
+    echo "Refusing to prune $COUNT session(s): pass --yes when stdin is not a terminal." >&2
+    exit 2
+  fi
+fi
+
+if [ "$hard_delete" = 0 ]; then
+  IDS=$(printf '%s' "$ELIGIBLE" | "$JQ_BIN" -r '.[].id')
+  IN_LIST=''
+  for id in $IDS; do
+    case "$id" in
+      ses_[A-Za-z0-9]*) IN_LIST="$IN_LIST'$id'," ;;
+      *) echo "Refusing: unexpected session id shape." >&2; exit 1 ;;
+    esac
+  done
+  IN_LIST=${IN_LIST%,}
+  write_db "UPDATE session SET time_archived = $NOW_MS WHERE id IN ($IN_LIST);"
+  echo "Archived $COUNT session(s) older than $older_than."
+else
+  command -v "$OPENCODE_BIN" >/dev/null 2>&1 || { echo 'sesh: opencode executable is unavailable for deletes.' >&2; exit 1; }
+  failed=0
+  done_count=0
+  for id in $(printf '%s' "$ELIGIBLE" | "$JQ_BIN" -r '.[].id'); do
+    case "$id" in
+      ses_[A-Za-z0-9]*) ;;
+      *) echo "Refusing: unexpected session id shape." >&2; exit 1 ;;
+    esac
+    if "$OPENCODE_BIN" session delete "$id" >/dev/null 2>&1; then
+      done_count=$((done_count + 1))
+    else
+      echo "Could not delete $id." >&2
+      failed=$((failed + 1))
+    fi
+  done
+  echo "Deleted $done_count session(s) older than $older_than."
+  [ "$failed" = 0 ] || exit 1
+fi

package/bin/sesh-retitle.sh

@@ -0,0 +1,141 @@
+#!/usr/bin/env bash
+# Give auto-generated session titles a readable first line.
+#
+# opencode titles most sessions itself; a few keep their placeholder
+# ("New session - <ISO>") because they ended before a title was derived. This
+# replaces just those placeholders with the start of the session's first user
+# message, so the row scans like the rest of the list.
+#
+# It only ever touches titles matching the placeholder pattern, and the value
+# it overwrites carries no information (a timestamp), so nothing recoverable is
+# lost. The write is a single direct UPDATE through the same sqlite3-or-
+# `opencode db` path as `sesh prune` — opencode exposes no title endpoint in
+# the CLI, so a direct write is the only route.
+#
+# Usage: sesh-retitle.sh [--dry-run] [--yes] [--max-words N]
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+OPENCODE_BIN=${SESH_OPENCODE:-opencode}
+dry_run=0
+assume_yes=0
+max_words=8
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --dry-run) dry_run=1 ;;
+    --yes|-y) assume_yes=1 ;;
+    --max-words) max_words=${2:-}; shift ;;
+    --max-words=*) max_words=${1#--max-words=} ;;
+    --help) echo "usage: ${0##*/} [--dry-run] [--yes] [--max-words N]"; exit 0 ;;
+    *) echo "unknown option: $1" >&2; exit 2 ;;
+  esac
+  shift
+done
+case "$max_words" in ''|*[!0-9]*) echo "--max-words must be a positive integer" >&2; exit 2;; esac
+[ "$max_words" -gt 0 ] || { echo "--max-words must be positive" >&2; exit 2; }
+
+resolve_db() {
+  if [ -n "${SESH_DB:-}" ]; then printf '%s\n' "$SESH_DB"; return 0; fi
+  local from_cli=''
+  if command -v "$OPENCODE_BIN" >/dev/null 2>&1; then
+    from_cli=$("$OPENCODE_BIN" db path 2>/dev/null || true)
+  fi
+  if [ -n "$from_cli" ] && [ -f "$from_cli" ]; then printf '%s\n' "$from_cli"; return 0; fi
+  if [ -f "$HOME/.local/share/opencode/opencode.db" ]; then printf '%s\n' "$HOME/.local/share/opencode/opencode.db"; return 0; fi
+  return 1
+}
+
+SQLITE_BIN=''
+if [ -n "${SESH_SQLITE:-}" ]; then
+  SQLITE_BIN=$SESH_SQLITE
+elif command -v sqlite3 >/dev/null 2>&1; then
+  SQLITE_BIN=sqlite3
+fi
+
+DB_PATH=$(resolve_db) || { echo 'sesh: session database unavailable' >&2; exit 1; }
+[ -f "$DB_PATH" ] || { echo 'sesh: session database unavailable' >&2; exit 1; }
+
+if [ -n "$SQLITE_BIN" ]; then
+  query() { "$SQLITE_BIN" -json -readonly "$DB_PATH" "$1"; }
+  write_db() { "$SQLITE_BIN" "$DB_PATH" "$1"; }
+else
+  command -v "$OPENCODE_BIN" >/dev/null 2>&1 || { echo 'sesh: neither sqlite3 nor opencode is available' >&2; exit 1; }
+  query() { "$OPENCODE_BIN" db "$1" --format json; }
+  write_db() { "$OPENCODE_BIN" db "$1" --format json > /dev/null; }
+fi
+
+JQ_BIN=${SESH_JQ:-$(command -v jq || true)}
+[ -n "$JQ_BIN" ] || { echo 'sesh: jq is required' >&2; exit 1; }
+
+# The first user text part per placeholder-titled session, cleaned into a
+# candidate: image chips and markdown noise dropped, whitespace collapsed,
+# first `max_words` words kept.
+CANDIDATES=$(query "
+SELECT s.id AS id, s.directory AS directory, s.title AS old_title,
+  (SELECT p.data FROM part p
+     JOIN message m ON m.id = p.message_id
+     WHERE p.session_id = s.id
+       AND json_extract(p.data, '\$.type') = 'text'
+       AND json_extract(m.data, '\$.role') = 'user'
+     ORDER BY p.time_created ASC LIMIT 1) AS first_part
+FROM session s
+WHERE s.title LIKE 'New session - %'
+   OR TRIM(COALESCE(s.title, '')) = ''
+ORDER BY s.time_updated DESC;")
+[ -n "$CANDIDATES" ] || CANDIDATES='[]'
+
+PLAN=$(printf '%s' "$CANDIDATES" | "$JQ_BIN" -c --argjson words "$max_words" '
+  def derive:
+    (.first_part // "")
+    | (try (fromjson | .text) catch "")
+    | gsub("\\[Image #[0-9]+\\]"; " ")
+    | gsub("[#*_`>]"; " ")
+    | gsub("\\s+"; " ")
+    | sub("^ +"; "") | sub(" +$"; "")
+    | (split(" ") | map(select(. != "")))
+    | (if length == 0 then "" else .[0:$words] | join(" ") end)
+    | if length > 60 then .[0:57] + "..." else . end;
+  [ .[] | .new_title = derive | select(.new_title != "") ]')
+COUNT=$(printf '%s' "$PLAN" | "$JQ_BIN" -r 'length')
+
+if [ "$COUNT" = 0 ]; then
+  echo "No placeholder-titled sessions with a usable first message."
+  exit 0
+fi
+
+printf '%s' "$PLAN" | "$JQ_BIN" -r '
+  .[] | "\(.id)\t\(.new_title)\t\(.old_title)"' | while IFS=$'\t' read -r id new old; do
+  printf '%s\n  \033[90m%s\033[0m\n  → %s\n' "$id" "$old" "$new"
+done
+
+if [ "$dry_run" = 1 ]; then
+  printf 'Retitle %s session(s) (--dry-run: nothing changed).\n' "$COUNT" >&2
+  exit 0
+fi
+
+if [ "$assume_yes" = 0 ]; then
+  if [ -t 0 ]; then
+    printf 'Retitle %s session(s)? [y/N] ' "$COUNT"
+    reply=''
+    IFS= read -r -n 1 reply || reply=''
+    printf '\n'
+    case "$reply" in
+      y|Y) ;;
+      *) echo 'Cancelled; nothing was changed.'; exit 0 ;;
+    esac
+  else
+    echo "Refusing to retitle $COUNT session(s): pass --yes when stdin is not a terminal." >&2
+    exit 2
+  fi
+fi
+
+# Escape single quotes for the SQL string literal; ids are validated by shape.
+sql_escape() { printf '%s' "$1" | sed "s/'/''/g"; }
+printf '%s' "$PLAN" | "$JQ_BIN" -r '.[] | [.id, .new_title] | @tsv' | while IFS=$'\t' read -r id new; do
+  case "$id" in
+    ses_[A-Za-z0-9]*) ;;
+    *) echo "Refusing: unexpected session id shape." >&2; exit 1 ;;
+  esac
+  write_db "UPDATE session SET title = '$(sql_escape "$new")' WHERE id = '$id' AND (title LIKE 'New session - %' OR TRIM(COALESCE(title, '')) = '');"
+done
+echo "Retitled $COUNT session(s)."

package/bin/sesh-waiting.sh

@@ -0,0 +1,127 @@
+#!/usr/bin/env bash
+# List sessions waiting on the user: unanswered agent questions and runs
+# stuck with a tool still marked running. Server-independent: it reads the
+# opencode SQLite store directly, so it sees every session — not just ones
+# owned by a running TUI server, whose in-memory permission/question state
+# is invisible cross-project.
+#
+# A session waits when it is not archived, is not a fork child, and either
+#   - has a `question` tool part that never completed with no later user
+#     message in the same session (awaiting an answer, errored included), or
+#   - has a `tool` part still marked `running` older than STUCK_AFTER_MS
+#     (awaiting approval, or orphaned by a dead server).
+#
+# Usage: sesh-waiting.sh [--json]
+#   default prints a human table; --json prints [{id,reason,title,directory,updated}]
+# Keep NEEDS_INPUT_SQL in sync with the TUI sidebar copy in tui/sesh-panel.tsx.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+OPENCODE_BIN=${SESH_OPENCODE:-opencode}
+JSON=0
+while [ "$#" -gt 0 ]; do
+  case "$1" in
+    --json) JSON=1 ;;
+    --help) echo "usage: ${0##*/} [--json]"; exit 0 ;;
+    *) echo "unknown option: $1" >&2; exit 2 ;;
+  esac
+  shift
+done
+
+resolve_db() {
+  if [ -n "${SESH_DB:-}" ]; then printf '%s\n' "$SESH_DB"; return 0; fi
+  local from_cli=''
+  if command -v "$OPENCODE_BIN" >/dev/null 2>&1; then
+    from_cli=$("$OPENCODE_BIN" db path 2>/dev/null || true)
+  fi
+  if [ -n "$from_cli" ] && [ -f "$from_cli" ]; then printf '%s\n' "$from_cli"; return 0; fi
+  if [ -f "$HOME/.local/share/opencode/opencode.db" ]; then printf '%s\n' "$HOME/.local/share/opencode/opencode.db"; return 0; fi
+  return 1
+}
+
+SQLITE_BIN=''
+if [ -n "${SESH_SQLITE:-}" ]; then
+  SQLITE_BIN=$SESH_SQLITE
+elif command -v sqlite3 >/dev/null 2>&1; then
+  SQLITE_BIN=sqlite3
+fi
+
+DB_PATH=$(resolve_db) || { echo 'sesh: session database unavailable' >&2; exit 1; }
+[ -f "$DB_PATH" ] || { echo 'sesh: session database unavailable' >&2; exit 1; }
+
+NOW_MS=$(python3 -c 'import time; print(int(time.time() * 1000))' 2>/dev/null || date +%s000)
+STUCK_BEFORE=$((NOW_MS - 600000))
+
+# NEEDS_INPUT_SQL (shared heuristic — keep in sync with tui/sesh-panel.tsx).
+read -r -d '' QUERY <<SQL || true
+SELECT s.id AS id, s.directory AS directory, s.title AS title, s.time_updated AS updated,
+  CASE WHEN EXISTS (
+    SELECT 1 FROM part p
+    WHERE p.session_id = s.id
+      AND json_extract(p.data, '\$.type') = 'tool'
+      AND json_extract(p.data, '\$.tool') = 'question'
+      AND COALESCE(json_extract(p.data, '\$.state.status'), 'pending') != 'completed'
+      AND NOT EXISTS (
+        SELECT 1 FROM message m
+        WHERE m.session_id = s.id
+          AND json_extract(m.data, '\$.role') = 'user'
+          AND m.time_created > p.time_created)
+  ) THEN 'question' ELSE 'stuck' END AS reason
+FROM session s
+WHERE COALESCE(s.time_archived, 0) = 0
+  AND s.parent_id IS NULL
+  AND (EXISTS (
+    SELECT 1 FROM part p
+    WHERE p.session_id = s.id
+      AND json_extract(p.data, '\$.type') = 'tool'
+      AND json_extract(p.data, '\$.tool') = 'question'
+      AND COALESCE(json_extract(p.data, '\$.state.status'), 'pending') != 'completed'
+      AND NOT EXISTS (
+        SELECT 1 FROM message m
+        WHERE m.session_id = s.id
+          AND json_extract(m.data, '\$.role') = 'user'
+          AND m.time_created > p.time_created)
+  ) OR EXISTS (
+    SELECT 1 FROM part p2
+    WHERE p2.session_id = s.id
+      AND json_extract(p2.data, '\$.type') = 'tool'
+      AND json_extract(p2.data, '\$.state.status') = 'running'
+      AND p2.time_created < $STUCK_BEFORE))
+ORDER BY s.time_updated DESC;
+SQL
+
+if [ -n "$SQLITE_BIN" ]; then
+  # Read-only: sesh never writes the store on this path (archive writes go
+  # through `opencode db`, hard deletes through `opencode session delete`).
+  ROWS=$("$SQLITE_BIN" -json -readonly "$DB_PATH" "$QUERY")
+else
+  command -v "$OPENCODE_BIN" >/dev/null 2>&1 || { echo 'sesh: neither sqlite3 nor opencode is available' >&2; exit 1; }
+  ROWS=$("$OPENCODE_BIN" db "$QUERY" --format json)
+fi
+
+# sqlite3 -json prints nothing (not []) when no rows match.
+[ -n "$ROWS" ] || ROWS='[]'
+
+if [ "$JSON" = 1 ]; then
+  printf '%s\n' "$ROWS"
+  exit 0
+fi
+
+JQ_BIN=${SESH_JQ:-$(command -v jq || true)}
+[ -n "$JQ_BIN" ] || { echo 'sesh: jq is required for the table view (or use --json)' >&2; exit 1; }
+COUNT=$(printf '%s' "$ROWS" | "$JQ_BIN" -r 'length')
+if [ "$COUNT" = 0 ]; then
+  echo 'No sessions are waiting on you.'
+  exit 0
+fi
+printf '%s' "$ROWS" | "$JQ_BIN" -r --argjson now "$NOW_MS" '
+  def ago(ms): ((($now - ms) / 1000) | floor) as $s
+    | if $s < 60 then "now"
+      elif $s < 3600 then "\($s / 60 | floor)m"
+      elif $s < 86400 then "\($s / 3600 | floor)h"
+      else "\($s / 86400 | floor)d" end;
+  def reason(t): if t == "question" then "awaiting answer" else "run stuck" end;
+  .[] | "\(.id)\t\(reason(.reason))\t\(.title // "untitled")\t\(.directory)\t\(ago(.updated)) ago"
+' | while IFS=$'\t' read -r id reason title dir age; do
+  printf '%s  \033[33m%s\033[0m  %s  \033[90m%s · %s\033[0m\n' "$id" "$reason" "$title" "$dir" "$age"
+done

package/bin/sesh.sh

@@ -54,6 +54,17 @@ if [ "${1:-}" = --check ]; then
   exit 0
 fi
 
+# Triage listing, not the picker: sessions with unanswered agent questions
+# or runs stuck mid-tool. Never starts fzf or the refresh worker.
+if [ "${1:-}" = --needs-input ]; then
+  shift
+  case "${1:-}" in
+    '') exec bash "$SCRIPT_DIR/sesh-waiting.sh" ;;
+    --json) exec bash "$SCRIPT_DIR/sesh-waiting.sh" --json ;;
+    *) echo "usage: sesh --needs-input [--json]" >&2; exit 2 ;;
+  esac
+fi
+
 scope_value=''
 picker_limit=0
 picker_archived=0

package/contrib/cmux/README.md

@@ -0,0 +1,59 @@
+# sesh ↔ cmux
+
+Optional glue for running sesh inside [cmux](https://cmux.dev). Nothing here is
+bundled into the picker: sesh has no window-management code, and these recipes
+keep it that way. cmux calls sesh; sesh never calls cmux.
+
+## Command palette + shortcuts
+
+Merge [`cmux.json.snippet`](cmux.json.snippet) into `~/.config/cmux/cmux.json`
+(or `.cmux/cmux.json` in a project), then `cmux reload-config` (Cmd+Shift+,).
+You get:
+
+| Action | Shortcut | What it does |
+| --- | --- | --- |
+| `sesh.picker` | Cmd+Shift+S | Open the picker in a new tab |
+| `sesh.needs` | Cmd+Shift+I | List sessions waiting on you |
+| `sesh.costs` | — | Per-project spend digest |
+
+Paste only the actions you want; the `ui.newWorkspace` block is optional.
+
+## Resume a session in its own cmux workspace
+
+The picker resumes in place (it `cd`s and `exec`s opencode). To instead open a
+session in a **new cmux workspace** at its directory, shell out to cmux after
+resolving the session with sesh's scriptable lookup:
+
+```bash
+sesh --print --json --query "auth refactor" \
+  | jq -r '[.sessionId, .cwd] | @tsv' \
+  | while IFS=$'\t' read -r id cwd; do
+      cmux new-workspace --cwd "$cwd" --command "opencode --session $id"
+    done
+```
+
+Wrap that in a cmux `command` action (as above) or a shell function; it is
+caller-side on purpose, so sesh stays terminal-agnostic.
+
+## Needs-input triage from cmux
+
+`sesh --needs-input` prints (or `--json` emits) the sessions with unanswered
+agent questions or runs stuck mid-tool. Bind it to a shortcut and it becomes
+the "what is blocked on me right now" view without opening the picker.
+
+## Global hotkey (resume from anywhere)
+
+sesh is a normal CLI, so any system-wide launcher works — a cmux `shortcut`, an
+`skhd` binding, a Raycast/Hammerspoon script:
+
+```bash
+# skhd example: Cmd+Shift+S opens the picker in a new cmux workspace
+cmd + shift - s : cmux new-workspace --command "sesh"
+```
+
+Because `--print --json` resolves a session non-interactively, the same hook can
+resume a specific session without any UI:
+
+```bash
+cmd + alt - r : cmux new-workspace --command "opencode --session $(sesh --print --json --limit 1 | jq -r .sessionId)"
+```

package/contrib/cmux/cmux.json.snippet

@@ -0,0 +1,38 @@
+{
+  "actions": {
+    "sesh.picker": {
+      "type": "command",
+      "title": "sesh — session picker",
+      "subtitle": "Fuzzy-find and resume any opencode session",
+      "command": "sesh",
+      "target": "newTabInCurrentPane",
+      "palette": true,
+      "shortcut": "cmd+shift+s"
+    },
+    "sesh.needs": {
+      "type": "command",
+      "title": "sesh — needs input",
+      "subtitle": "Sessions waiting on you (questions, stuck runs)",
+      "command": "sesh --needs-input",
+      "target": "newTabInCurrentPane",
+      "palette": true,
+      "shortcut": "cmd+shift+i"
+    },
+    "sesh.costs": {
+      "type": "command",
+      "title": "sesh — cost digest",
+      "subtitle": "Spend per project, today and lifetime",
+      "command": "sesh costs",
+      "target": "newTabInCurrentPane",
+      "palette": true
+    }
+  },
+  "ui": {
+    "newWorkspace": {
+      "contextMenu": [
+        { "action": "sesh.picker", "title": "Resume a session" },
+        { "type": "separator" }
+      ]
+    }
+  }
+}

package/install.sh

@@ -235,8 +235,12 @@ for path in \
   bin/sesh.sh \
   bin/sesh-list.sh \
   bin/sesh-preview.sh \
+  bin/sesh-costs.sh \
   bin/sesh-delete.sh \
+  bin/sesh-prune.sh \
   bin/sesh-refresh-worker.sh \
+  bin/sesh-retitle.sh \
+  bin/sesh-waiting.sh \
   bin/sesh-shortcuts.sh \
   opencode/tools/sesh-list.ts \
   tui/sesh-panel.tsx \

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencode-sesh",
-  "version": "0.2.1",
+  "version": "0.4.0",
   "type": "module",
   "description": "Browse, search, preview and resume opencode sessions from the terminal and the TUI.",
   "license": "MIT",
@@ -26,12 +26,14 @@
   },
   "files": [
     "bin/",
+    "contrib/",
     "opencode/",
     "themes/",
     "tui/",
     "install.sh",
     "AGENTS.md",
-    "CHANGELOG.md"
+    "CHANGELOG.md",
+    "ROADMAP.md"
   ],
   "publishConfig": {
     "access": "public"

package/tui/sesh-panel.tsx

@@ -326,6 +326,68 @@ async function openTranscriptDb(): Promise<any | undefined> {
   }
 }
 
+// NEEDS_INPUT_SQL: sessions waiting on the user (shared heuristic — keep in
+// sync with bin/sesh-waiting.sh). A session waits when it is not archived,
+// is not a fork child, and either has an unanswered `question` tool part or
+// a `tool` part still marked running older than STUCK_AFTER_MS (awaiting
+// approval, or orphaned by a dead server). Server-independent on purpose:
+// the TUI sync layer only sees permission/question state for sessions owned
+// by the current server, which is invisible cross-project.
+const STUCK_AFTER_MS = 600000
+const NEEDS_INPUT_SQL = (stuckBefore: number) => `
+SELECT s.id AS id,
+  CASE WHEN EXISTS (
+    SELECT 1 FROM part p
+    WHERE p.session_id = s.id
+      AND json_extract(p.data, '$.type') = 'tool'
+      AND json_extract(p.data, '$.tool') = 'question'
+      AND COALESCE(json_extract(p.data, '$.state.status'), 'pending') != 'completed'
+      AND NOT EXISTS (
+        SELECT 1 FROM message m
+        WHERE m.session_id = s.id
+          AND json_extract(m.data, '$.role') = 'user'
+          AND m.time_created > p.time_created)
+  ) THEN 'question' ELSE 'stuck' END AS reason
+FROM session s
+WHERE COALESCE(s.time_archived, 0) = 0
+  AND s.parent_id IS NULL
+  AND (EXISTS (
+    SELECT 1 FROM part p
+    WHERE p.session_id = s.id
+      AND json_extract(p.data, '$.type') = 'tool'
+      AND json_extract(p.data, '$.tool') = 'question'
+      AND COALESCE(json_extract(p.data, '$.state.status'), 'pending') != 'completed'
+      AND NOT EXISTS (
+        SELECT 1 FROM message m
+        WHERE m.session_id = s.id
+          AND json_extract(m.data, '$.role') = 'user'
+          AND m.time_created > p.time_created)
+  ) OR EXISTS (
+    SELECT 1 FROM part p2
+    WHERE p2.session_id = s.id
+      AND json_extract(p2.data, '$.type') = 'tool'
+      AND json_extract(p2.data, '$.state.status') = 'running'
+      AND p2.time_created < ${stuckBefore}))
+ORDER BY s.time_updated DESC`
+
+async function queryWaitingIds(db: any): Promise<Map<string, string>> {
+  const rows = (db.query(NEEDS_INPUT_SQL(Date.now() - STUCK_AFTER_MS)).all() ?? []) as {
+    id: unknown
+    reason: unknown
+  }[]
+  const out = new Map<string, string>()
+  for (const row of rows) {
+    if (
+      typeof row?.id === "string" &&
+      SESSION_ID_PATTERN.test(row.id) &&
+      (row.reason === "question" || row.reason === "stuck")
+    ) {
+      out.set(row.id, row.reason)
+    }
+  }
+  return out
+}
+
 function addTranscript(index: Map<string, string>, sid: string, data: string): void {
   try {
     const part = JSON.parse(data) as { type?: unknown; text?: unknown }
@@ -597,6 +659,7 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
   const [navActive, setNavActive] = createSignal(false)
   const [cursor, setCursor] = createSignal(0)
   const [pendingDelete, setPendingDelete] = createSignal<string>()
+  const [waiting, setWaiting] = createSignal<Map<string, string>>(new Map())
   let confirmTimer: ReturnType<typeof setTimeout> | undefined
   const currentID = createMemo(() => {
     const route = props.api.route.current
@@ -620,6 +683,19 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
         // say so when there is nothing at all to show
         if (alive && entries().length === 0) setLoadFailed(true)
       }
+      try {
+        const db = await openTranscriptDb()
+        if (db) {
+          try {
+            const ids = await queryWaitingIds(db)
+            if (alive) setWaiting(ids)
+          } finally {
+            db.close()
+          }
+        }
+      } catch {
+        // leave the previous waiting set in place rather than flashing
+      }
     }
     void load()
     const clock = setInterval(() => void load(), POLL_MS)
@@ -641,9 +717,27 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
   const shownEntries = createMemo(() => filteredEntries())
   const remaining = createMemo(() => Math.max(0, filteredEntries().length - shownEntries().length))
 
+  const NEEDS_INPUT_DIR = "__needs_input__"
+  const waitingEntries = createMemo(() => {
+    const ids = waiting()
+    return shownEntries().filter((entry) => ids.has(entry.id))
+  })
+  const waitingReason = (id: string) => (waiting().get(id) === "question" ? "awaiting answer" : "run stuck")
+
   const tree = createMemo<TreeRow[]>(() => {
+    const rows: TreeRow[] = []
+    const pending = waitingEntries()
+    if (pending.length > 0) {
+      rows.push({ kind: "group", dir: NEEDS_INPUT_DIR, label: "Needs input", count: pending.length })
+      if (!collapsed()[NEEDS_INPUT_DIR]) {
+        for (let i = 0; i < pending.length; i++) {
+          rows.push({ kind: "item", entry: pending[i], last: i === pending.length - 1 })
+        }
+      }
+    }
     const groups = new Map<string, Entry[]>()
     for (const entry of shownEntries()) {
+      if (waiting().has(entry.id)) continue
       const list = groups.get(entry.dir) ?? []
       list.push(entry)
       groups.set(entry.dir, list)
@@ -656,7 +750,6 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
           pins.directories.includes(group.dir) ? 2 : group.list.some((entry) => pins.sessions.includes(entry.id)) ? 1 : 0
         return rank(b) - rank(a) || b.updated - a.updated
       })
-    const rows: TreeRow[] = []
     for (const group of ordered) {
       rows.push({ kind: "group", dir: group.dir, label: prettyDir(group.dir, home), count: group.list.length })
       if (collapsed()[group.dir]) continue
@@ -961,6 +1054,9 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
             {query().trim() ? ` (${filteredEntries().length}/${entries().length})` : ` (${entries().length})`}
           </span>
           <span style={{ fg: theme().accent }}>{navActive() ? " · nav" : ""}</span>
+          <Show when={waitingEntries().length > 0}>
+            <span style={{ fg: theme().warning }}> · {waitingEntries().length} need input</span>
+          </Show>
         </text>
         <text flexShrink={0} style={{ fg: theme().textMuted }} onMouseDown={toggleSection}>
           {sectionCollapsed() ? "▸ show" : "▾ hide"}
@@ -1065,7 +1161,15 @@ function SidebarSessions(props: { api: TuiPluginApi } & PinProps) {
                   matchColor={theme().warning}
                 />
                 <text flexShrink={0} style={{ fg: isPendingDelete(row.entry.id) ? theme().error : theme().textMuted }}>
-                  {isPendingDelete(row.entry.id) ? "ctrl+x again" : ago(row.entry.updated)}
+                  {isPendingDelete(row.entry.id) ? (
+                    "ctrl+x again"
+                  ) : waiting().has(row.entry.id) ? (
+                    <span>
+                      {ago(row.entry.updated)} · <span style={{ fg: theme().warning }}>{waitingReason(row.entry.id)}</span>
+                    </span>
+                  ) : (
+                    ago(row.entry.updated)
+                  )}
                 </text>
               </box>
             )