docs: sync to current state of the world

claude.md scratchpad rewritten — folds in pronouns option,
extra MCP servers + flakeInputs forwarding, ask_operator
on sub-agents, dashboard compose box with @-mentions, new-
session button, cwd=/state for claude turns, meta-mutex +
stale-lock cleanup.

readme picks up the operator pronouns option example,
the dashboard compose box description, the new slash
commands list, the deployed-sha chip, the per-agent UI
gains new-session.

docs/web-ui.md gains:
- a fuller MESS4GE FL0W description that calls out the
  compose box, sticky @-mention recipient, /op-send, and
  the manager-name swap
- /op-send in the dashboard endpoint table
- new-session button + /new-session slash command in the
  per-agent surface
- compact endpoint now notes 'same session shape as a normal
  turn'

docs/turn-loop.md:
- new-session one-shot, cwd=/state with CLAUDE.md auto-load
  walking upward, operator-pronouns substitution
- sub-agent tool list grows ask_operator
- new 'Extra MCP servers (per-agent)' section documenting
  hyperhive.extraMcpServers + the flakeInputs forwarding
  pattern

docs/turn-loop.md

@@ -45,6 +45,18 @@ sessions in `~/.claude/projects/`, which is bind-mounted
 persistently). Auto-compact and auto-memory are disabled via
 `--settings` because hyperhive owns compaction (`/compact` on
 overflow, retry once; operator can also force one via `/api/compact`).
+A one-shot `--continue` suppression is available via
+`POST /api/new-session` (or `/new-session` slash command in the
+per-agent terminal) — `Bus::take_skip_continue()` flips an
+`AtomicBool` once per turn, the next claude invocation drops
+`--continue`, every subsequent turn resumes normal behaviour.
+
+The child runs with `cwd = /state` (when the bind exists; falls
+back to the parent's cwd in dev), so any relative path in a tool
+call (`Read foo.md`, `Bash ls`, `Write notes.md`) lands in the
+agent's durable bind-mounted dir. CLAUDE.md auto-load walks
+upward from `/state` — drop a per-agent CLAUDE.md there if you
+want long-term hints that survive destroy/recreate.
 
 The wake prompt is intentionally minimal: just the popped message's
 `from`/`body`, plus an inline `({unread} more pending — drain via
@@ -68,8 +80,11 @@ socket at `/run/hive/` once at startup:
 - `claude-settings.json` — the `--settings` blob (auto-compact and
   auto-memory off, effortLevel medium).
 - `claude-system-prompt.md` — rendered from
-  `hive-ag3nt/prompts/{agent,manager}.md` with `{label}`
-  substituted. Passed via `--system-prompt-file`.
+  `hive-ag3nt/prompts/{agent,manager}.md` with `{label}` and
+  `{operator_pronouns}` substituted. Pronouns come from
+  `HIVE_OPERATOR_PRONOUNS` env (set by the meta flake from
+  `services.hive-c0re.operatorPronouns`, default `she/her`).
+  Passed via `--system-prompt-file`.
 
 The shared per-turn plumbing lives in `hive_ag3nt::turn::{write_mcp_config,
 write_settings, write_system_prompt, run_turn, drive_turn,
@@ -92,6 +107,25 @@ it as a stdio child via `--mcp-config`. The hyperhive socket name is
   omitted). Agents use a long wait to park their turn waiting for
   work instead of busy-looping with short polls — they wake
   instantly when a message arrives.
+- `ask_operator(question, options?, multi?, ttl_seconds?)` —
+  surface a question on the dashboard. Same shape as the manager's;
+  answer routes back to the asker's own inbox as
+  `HelperEvent::OperatorAnswered` via `coord.notify_agent`.
+
+### Extra MCP servers (per-agent)
+
+Each agent's NixOS config can declare additional MCP servers via
+`hyperhive.extraMcpServers.<key> = { command, args, env,
+allowedTools }`. The module writes the map to
+`/etc/hyperhive/extra-mcp.json`; the harness reads it at boot and
+merges every entry into `--mcp-config` (under `mcpServers.<key>`)
+and `--allowedTools` (as `mcp__<key>__<pattern>`). The agent's
+flake.nix forwards every flake input to `agent.nix` as the
+`flakeInputs` module arg, so external MCP-server flakes are pulled
+in by adding them to `inputs.*` and referenced as
+`flakeInputs.<name>.packages.${pkgs.system}.default` — the
+resolved sha lands in the agent's own `flake.lock` and rolls up to
+meta's.
 
 ### Manager tools (in addition to send/recv)
 

docs/web-ui.md

@@ -74,7 +74,21 @@ the previous process's socket release resolves itself.
 6. **P3NDING APPR0VALS** — the queue. The R3QU3ST SP4WN form
    lives at the top of this section since submitting it
    immediately queues an approval that lands directly below.
-7. **MESS4GE FL0W** — live broker SSE tail.
+7. **MESS4GE FL0W** — live broker SSE tail (newest-first).
+   Each row is one broker event — `sent` or `delivered` — with
+   `from → to: body`; per-agent thinking / tool calls / claude
+   chatter stay out of this view, only what passes through
+   hive-c0re's broker. Below the stream sits a terminal-style
+   compose box: `@name` picks the recipient (sticky across
+   sends via localStorage; auto-complete from the live
+   container list, Tab/Enter to confirm), starting a message
+   with `@<name> body` retargets in one stroke, plain text
+   sends to the sticky recipient. `POST /op-send` drops
+   `{from:"operator", to, body}` into the broker — same shape
+   any sub-agent sees as a regular inbox message. Manager is
+   addressed as `@manager` (the broker recipient string), not
+   `@hm1nd` (the container name); the auto-complete swaps
+   automatically.
 
 ### Container row
 
@@ -140,6 +154,9 @@ not ours.
   the sentinel `[cancelled]`. Same code path as a real answer.
 - `POST /request-spawn` — queue a Spawn approval.
 - `POST /update-all` — rebuild every stale container.
+- `POST /op-send` (`to=<name>`, `body=<text>`) — drop an
+  operator-authored message into `<name>`'s inbox. Used by the
+  compose textbox under MESS4GE FL0W.
 - `GET /api/journal/{name}?unit=&lines=` — journalctl viewer for
   a managed container.
 - `GET /api/agent-config/{name}` — read-only view of the applied
@@ -158,7 +175,7 @@ Layout, top to bottom:
 - Title with `↑ DASHB04RD` back-link (new tab) + `↻ R3BU1LD`.
 - Status section (online / needs login / login-in-progress).
 - **State row**: state badge + model chip + last-turn timing +
-  cancel-turn button.
+  cancel-turn button + new-session button.
   - State badge: `💤 idle` / `🧠 thinking` / `📦 compacting` /
     `○ offline` / `… booting`, with an age suffix (`12s`,
     `2m 14s`). Driven from `/api/state.turn_state` +
@@ -170,6 +187,11 @@ Layout, top to bottom:
     turn ends, computed from the state-since deltas.
   - `■ cancel turn` button: visible only while state=thinking,
     POSTs `/api/cancel`.
+  - `↻ new session` button: always visible, amber. Confirms
+    via `window.confirm()` then POSTs `/api/new-session` to
+    arm a one-shot Bus flag — the next turn drops
+    `--continue`, starting a fresh claude session. Subsequent
+    turns resume normal `--continue`.
 - Inbox `<details>` block (collapsed): `inbox · N` — last 30
   messages addressed to this agent, fetched via
   `AgentRequest::Recent { limit: 30 }`. (Separate from
@@ -238,6 +260,9 @@ Slash commands today:
   Takes effect on the next turn; persisted to
   `/state/hyperhive-model` so the override survives harness
   restart / rebuild.
+- `/new-session` — `POST /api/new-session` (confirms first).
+  Arms a one-shot on the Bus; next turn runs without
+  `--continue`, dropping the resume session entirely.
 
 Unknown `/foo` shows an error row instead of being silently sent.
 
@@ -246,7 +271,11 @@ Unknown `/foo` shows an error row instead of being silently sent.
 - `POST /send` — operator-injected message into this agent's inbox.
 - `POST /login/{start,code,cancel}` — claude OAuth login flow.
 - `POST /api/cancel` — SIGINT the in-flight claude turn.
-- `POST /api/compact` — run `/compact` on the persistent session.
+- `POST /api/compact` — run `/compact` on the persistent session
+  (same MCP config + system prompt + allowed tools as a normal
+  turn — only the stdin payload differs).
 - `POST /api/model` (`model=<name>`) — switch the model for
   future turns.
+- `POST /api/new-session` — arm a one-shot for the next turn to
+  drop `--continue`.
 - `GET /events/history` — replay buffer for the terminal.