@leftoff/cli 0.9.18-beta.3 → 0.9.18-beta.5

package/bin/pty-host-main.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import y from"node:fs";import it from"node:net";import W from"node:path";import M from"node:fs";import N from"node:path";import{spawn as Z,execFile as ut}from"node:child_process";import{createRequire as q}from"node:module";import{StringDecoder as Q}from"node:string_decoder";var wt=2*1024*1024;var gt=192*1024;var yt=64*1024;var tt=String.raw`
+import y from"node:fs";import it from"node:net";import W from"node:path";import C from"node:fs";import P from"node:path";import{spawn as Z,execFile as ut}from"node:child_process";import{createRequire as q}from"node:module";import{StringDecoder as Q}from"node:string_decoder";var wt=2*1024*1024;var gt=192*1024;var yt=64*1024;var tt=String.raw`
 import os, sys, pty, select, struct, fcntl, termios, signal
 cols, rows = int(sys.argv[1]), int(sys.argv[2])
 argv = sys.argv[3:]
@@ -51,16 +51,16 @@ while True:
 st = os.waitpid(pid, 0)[1]
 code = os.waitstatus_to_exitcode(st)
 sys.exit(code if code >= 0 else 128 - code)
-`;function et({platform:t=process.platform,exists:n=c=>{try{return M.statSync(c).isFile()}catch{return!1}},isDir:o=c=>{try{return M.statSync(c).isDirectory()}catch{return!1}}}={}){return(t==="darwin"?["/opt/homebrew/bin/python3","/usr/local/bin/python3",...o("/Library/Developer/CommandLineTools")||o("/Applications/Xcode.app")?["/usr/bin/python3"]:[]]:["/usr/bin/python3","/usr/local/bin/python3","/bin/python3"]).find(n)||null}function st(t){return{kind:"node-pty",spawn({file:n,args:o,cwd:c,env:a,cols:d,rows:e}){let r=t.spawn(n,o,{name:"xterm-256color",cols:d,rows:e,cwd:c,env:a});return{pid:r.pid,onData:s=>r.onData(s),onExit:s=>r.onExit(({exitCode:p,signal:u})=>s({code:p,signal:u||null})),write:s=>r.write(s),resize:(s,p)=>{try{r.resize(s,p)}catch{}},kill:(s="SIGHUP")=>{try{r.kill(s)}catch{}}}}}}function U(t,{spawnImpl:n=Z}={}){return{kind:"python",spawn({file:o,args:c,cwd:a,env:d,cols:e,rows:r}){let s=n(t,["-c",tt,String(e),String(r),o,...c],{cwd:a,env:d,stdio:["pipe","pipe","pipe","pipe"]}),p=new Q("utf8"),u=[],H=[],j=!1;s.stdout.on("data",i=>{let h=p.write(i);if(h)for(let b of u)b(h)}),s.stderr.on("data",i=>{let h=String(i);for(let b of u)b(h)});let R=s.stdio[3];for(let i of[s.stdin,R])i&&i.on("error",()=>{});let G=(i,h)=>{if(j)return;j=!0;let b=p.end();if(b)for(let P of u)P(b);for(let P of H)P({code:i??null,signal:h||null})};s.on("exit",(i,h)=>setTimeout(()=>G(i,h),20)),s.on("error",i=>{for(let h of u)h(`\r
+`;function et({platform:t=process.platform,exists:n=c=>{try{return C.statSync(c).isFile()}catch{return!1}},isDir:o=c=>{try{return C.statSync(c).isDirectory()}catch{return!1}}}={}){return(t==="darwin"?["/opt/homebrew/bin/python3","/usr/local/bin/python3",...o("/Library/Developer/CommandLineTools")||o("/Applications/Xcode.app")?["/usr/bin/python3"]:[]]:["/usr/bin/python3","/usr/local/bin/python3","/bin/python3"]).find(n)||null}function st(t){return{kind:"node-pty",spawn({file:n,args:o,cwd:c,env:a,cols:d,rows:e}){let r=t.spawn(n,o,{name:"xterm-256color",cols:d,rows:e,cwd:c,env:a});return{pid:r.pid,onData:s=>r.onData(s),onExit:s=>r.onExit(({exitCode:p,signal:u})=>s({code:p,signal:u||null})),write:s=>r.write(s),resize:(s,p)=>{try{r.resize(s,p)}catch{}},kill:(s="SIGHUP")=>{try{r.kill(s)}catch{}}}}}}function U(t,{spawnImpl:n=Z}={}){return{kind:"python",spawn({file:o,args:c,cwd:a,env:d,cols:e,rows:r}){let s=n(t,["-c",tt,String(e),String(r),o,...c],{cwd:a,env:d,stdio:["pipe","pipe","pipe","pipe"]}),p=new Q("utf8"),u=[],H=[],j=!1;s.stdout.on("data",i=>{let h=p.write(i);if(h)for(let b of u)b(h)}),s.stderr.on("data",i=>{let h=String(i);for(let b of u)b(h)});let A=s.stdio[3];for(let i of[s.stdin,A])i&&i.on("error",()=>{});let G=(i,h)=>{if(j)return;j=!0;let b=p.end();if(b)for(let F of u)F(b);for(let F of H)F({code:i??null,signal:h||null})};s.on("exit",(i,h)=>setTimeout(()=>G(i,h),20)),s.on("error",i=>{for(let h of u)h(`\r
 [terminal] `+i.message+`\r
-`);G(127,null)});let V={SIGHUP:1,SIGINT:2,SIGKILL:9,SIGTERM:15};return{pid:s.pid,onData:i=>u.push(i),onExit:i=>H.push(i),write:i=>{try{s.stdin.write(i)}catch{}},resize:(i,h)=>{try{R.write("R "+i+" "+h+`
-`)}catch{}},kill:(i="SIGHUP")=>{try{R.write("K "+(V[i]||1)+`
-`)}catch{}if(i==="SIGKILL")try{s.kill("SIGKILL")}catch{}}}}}}function nt(t,{platform:n=process.platform,arch:o=process.arch,stat:c=d=>M.statSync(d),chmod:a=(d,e)=>M.chmodSync(d,e)}={}){let d=[];for(let e of[N.join(t,"prebuilds",n+"-"+o,"spawn-helper"),N.join(t,"build","Release","spawn-helper")]){let r;try{r=c(e)}catch{continue}if(!(!r.isFile()||(r.mode&73)===73))try{a(e,r.mode&511|493),d.push(e)}catch{}}return d}function rt(t,n){if(!n)return t;let o=t;return{get kind(){return o.kind},spawn(c){try{return o.spawn(c)}catch(a){if(o!==t)throw a;return o=n(),o.spawn(c)}}}}function K({requireImpl:t=q(import.meta.url),python:n=et(),env:o=process.env}={}){let c=null;if(o.LEFTOFF_TERM_BACKEND!=="python")try{let a=t("node-pty");try{nt(N.dirname(t.resolve("node-pty/package.json")))}catch{}return rt(st(a),n?()=>U(n):null)}catch(a){c=a}return n?U(n):{kind:null,why:"No terminal backend: node-pty isn’t installed"+(c&&!/Cannot find module/.test(c.message)?" ("+String(c.message).split(`
+`);G(127,null)});let V={SIGHUP:1,SIGINT:2,SIGKILL:9,SIGTERM:15};return{pid:s.pid,onData:i=>u.push(i),onExit:i=>H.push(i),write:i=>{try{s.stdin.write(i)}catch{}},resize:(i,h)=>{try{A.write("R "+i+" "+h+`
+`)}catch{}},kill:(i="SIGHUP")=>{try{A.write("K "+(V[i]||1)+`
+`)}catch{}if(i==="SIGKILL")try{s.kill("SIGKILL")}catch{}}}}}}function nt(t,{platform:n=process.platform,arch:o=process.arch,stat:c=d=>C.statSync(d),chmod:a=(d,e)=>C.chmodSync(d,e)}={}){let d=[];for(let e of[P.join(t,"prebuilds",n+"-"+o,"spawn-helper"),P.join(t,"build","Release","spawn-helper")]){let r;try{r=c(e)}catch{continue}if(!(!r.isFile()||(r.mode&73)===73))try{a(e,r.mode&511|493),d.push(e)}catch{}}return d}function rt(t,n){if(!n)return t;let o=t;return{get kind(){return o.kind},spawn(c){try{return o.spawn(c)}catch(a){if(o!==t)throw a;return o=n(),o.spawn(c)}}}}function K({requireImpl:t=q(import.meta.url),python:n=et(),env:o=process.env}={}){let c=null;if(o.LEFTOFF_TERM_BACKEND!=="python")try{let a=t("node-pty");try{nt(P.dirname(t.resolve("node-pty/package.json")))}catch{}return rt(st(a),n?()=>U(n):null)}catch(a){c=a}return n?U(n):{kind:null,why:"No terminal backend: node-pty isn’t installed"+(c&&!/Cannot find module/.test(c.message)?" ("+String(c.message).split(`
 `)[0]+")":"")+" and there’s no python3. Run `leftoff upgrade`, or install python3."}}var X=process.argv[2],l;try{l=JSON.parse(y.readFileSync(X,"utf8"))}catch(t){process.stderr.write("pty-host: no spec: "+t.message+`
-`),process.exit(2)}try{y.rmSync(X,{force:!0})}catch{}var{id:_,dir:B}=l,v=W.join(B,_+".sock"),F=W.join(B,_+".json"),ot=l.bufferMax||2*1024*1024,E=t=>process.stderr.write(new Date().toISOString()+" "+_+" "+t+`
-`);process.on("SIGHUP",()=>{});process.on("SIGPIPE",()=>{});var T=K({env:l.env||process.env});T.kind||(E("no backend: "+T.why),process.exit(3));var f;try{f=T.spawn({file:l.file,args:l.args||[],cwd:l.cwd,env:l.env||process.env,cols:l.cols||80,rows:l.rows||24})}catch(t){E("spawn failed: "+t.message),process.exit(4)}var k=[],C=0,x=0,m=!1,O=null,S=null,J=!1,w=l.cols||80,g=l.rows||24,L={v:1,id:_,hostPid:process.pid,pid:f.pid||null,cwd:l.cwd,createdAt:new Date().toISOString(),cols:w,rows:g,backend:T.kind,...l.meta||{}},D=()=>{try{let t=F+".tmp";y.writeFileSync(t,JSON.stringify({...L,cols:w,rows:g,exited:m,code:O}),{mode:384}),y.renameSync(t,F)}catch(t){E("meta: "+t.message)}},I=new Set,A=t=>{let n=JSON.stringify(t)+`
-`;for(let o of I)if(o.ready)try{o.write(n)}catch{}},$=()=>[...I].filter(t=>t.ready).map(t=>({role:t.role,...t.info||{}}));f.onData(t=>{for(k.push(t),C+=t.length,x+=t.length;C>ot&&k.length>1;)C-=k[0].length,k.shift();A({t:"out",d:t,end:x})});var ct=null;f.onExit(({code:t,signal:n})=>{m=!0,O=t??null,S=n||null,E("program exited ("+O+(S?", "+S:"")+")"),D(),A({t:"exit",code:O,signal:S}),ct=setTimeout(Y,J?300:l.linger==null?3e4:l.linger)});function Y(){for(let t of I)try{t.end()}catch{}try{z.close()}catch{}for(let t of[v,F])try{y.rmSync(t,{force:!0})}catch{}setTimeout(()=>process.exit(0),50)}try{y.rmSync(v,{force:!0})}catch{}var z=it.createServer(t=>{t.setEncoding("utf8");let n="";I.add(t),t.on("data",c=>{n+=c;let a;for(;(a=n.indexOf(`
-`))>=0;){let d=n.slice(0,a);n=n.slice(a+1);let e;try{e=JSON.parse(d)}catch{continue}if(e.t==="hello"){t.role=e.role==="attach"?"attach":"daemon",t.info=e.role==="attach"?{pid:Number(e.pid)||null,tty:e.tty?String(e.tty).slice(0,80):null,term:e.term&&typeof e.term=="object"?e.term:null}:{},t.ready=!0;let r=k.join("");k=r?[r]:[];let s=x-C,p=typeof e.since=="number"&&e.since>=s&&e.since<=x?e.since:s;t.write(JSON.stringify({t:"hello",id:_,pid:f.pid||null,start:s,end:x,exited:m,code:O,signal:S,cols:w,rows:g,meta:L})+`
+`),process.exit(2)}try{y.rmSync(X,{force:!0})}catch{}var{id:_,dir:B}=l,v=W.join(B,_+".sock"),N=W.join(B,_+".json"),ot=l.bufferMax||2*1024*1024,E=t=>process.stderr.write(new Date().toISOString()+" "+_+" "+t+`
+`);process.on("SIGHUP",()=>{});process.on("SIGPIPE",()=>{});var I=K({env:l.env||process.env});I.kind||(E("no backend: "+I.why),process.exit(3));var f;try{f=I.spawn({file:l.file,args:l.args||[],cwd:l.cwd,env:l.env||process.env,cols:l.cols||80,rows:l.rows||24})}catch(t){E("spawn failed: "+t.message),process.exit(4)}var k=[],M=0,x=0,m=!1,O=null,S=null,J=!1,w=l.cols||80,g=l.rows||24,L={v:1,id:_,hostPid:process.pid,pid:f.pid||null,cwd:l.cwd,createdAt:new Date().toISOString(),cols:w,rows:g,backend:I.kind,...l.meta||{}},D=()=>{try{let t=N+".tmp";y.writeFileSync(t,JSON.stringify({...L,cols:w,rows:g,exited:m,code:O}),{mode:384}),y.renameSync(t,N)}catch(t){E("meta: "+t.message)}},T=new Set,R=t=>{let n=JSON.stringify(t)+`
+`;for(let o of T)if(o.ready)try{o.write(n)}catch{}},$=()=>[...T].filter(t=>t.ready).map(t=>({role:t.role,...t.info||{}}));f.onData(t=>{for(k.push(t),M+=t.length,x+=t.length;M>ot&&k.length>1;)M-=k[0].length,k.shift();R({t:"out",d:t,end:x})});var ct=null;f.onExit(({code:t,signal:n})=>{m=!0,O=t??null,S=n||null,E("program exited ("+O+(S?", "+S:"")+")"),D(),R({t:"exit",code:O,signal:S}),ct=setTimeout(Y,J?300:l.linger==null?3e4:l.linger)});function Y(){for(let t of T)try{t.end()}catch{}try{z.close()}catch{}for(let t of[v,N])try{y.rmSync(t,{force:!0})}catch{}setTimeout(()=>process.exit(0),50)}try{y.rmSync(v,{force:!0})}catch{}var z=it.createServer(t=>{t.setEncoding("utf8");let n="";T.add(t),t.on("data",c=>{n+=c;let a;for(;(a=n.indexOf(`
+`))>=0;){let d=n.slice(0,a);n=n.slice(a+1);let e;try{e=JSON.parse(d)}catch{continue}if(e.t==="hello"){t.role=e.role==="attach"?"attach":"daemon",t.info=e.role==="attach"?{pid:Number(e.pid)||null,tty:e.tty?String(e.tty).slice(0,80):null,term:e.term&&typeof e.term=="object"?e.term:null}:{},t.ready=!0;let r=k.join("");k=r?[r]:[];let s=x-M,p=typeof e.since=="number"&&e.since>=s&&e.since<=x?e.since:s;t.write(JSON.stringify({t:"hello",id:_,pid:f.pid||null,start:s,end:x,exited:m,code:O,signal:S,cols:w,rows:g,meta:L})+`
 `);let u=r.slice(p-s);u&&t.write(JSON.stringify({t:"out",d:u,end:x})+`
 `),m&&t.write(JSON.stringify({t:"exit",code:O,signal:S})+`
-`),A({t:"clients",list:$()})}else if(e.t==="in"){if(!m)try{f.write(String(e.d||""))}catch{}}else if(e.t==="resize"){let r=Math.max(2,Math.min(1e3,Number(e.c)||w)),s=Math.max(1,Math.min(500,Number(e.r)||g));if(r!==w||s!==g){w=r,g=s;try{f.resize(w,g)}catch{}}}else if(e.t==="kill")if(J=!0,m)Y();else{try{f.kill(e.sig||"SIGHUP")}catch{}setTimeout(()=>{if(!m)try{f.kill("SIGKILL")}catch{}},3e3).unref()}else if(e.t==="meta"&&e.patch&&typeof e.patch=="object"){for(let[r,s]of Object.entries(e.patch))/^(title|kind|sessionId|run|startCwd|renamed)$/.test(r)&&(L[r]=s);D()}}});let o=()=>{I.delete(t)&&A({t:"clients",list:$()})};t.on("close",o),t.on("error",o)}),lt=process.umask(127);z.listen(v,()=>{process.umask(lt);try{y.chmodSync(v,384)}catch{}D(),E("listening ("+T.kind+", pid "+f.pid+")")});z.on("error",t=>{E("socket: "+t.message);try{f.kill("SIGHUP")}catch{}process.exit(5)});
+`),R({t:"clients",list:$()})}else if(e.t==="in"){if(!m)try{f.write(String(e.d||""))}catch{}}else if(e.t==="resize"){let r=Math.max(2,Math.min(1e3,Number(e.c)||w)),s=Math.max(1,Math.min(500,Number(e.r)||g));if(r!==w||s!==g){w=r,g=s;try{f.resize(w,g)}catch{}}}else if(e.t==="kill")if(J=!0,m)Y();else{try{f.kill(e.sig||"SIGHUP")}catch{}setTimeout(()=>{if(!m)try{f.kill("SIGKILL")}catch{}},3e3).unref()}else if(e.t==="meta"&&e.patch&&typeof e.patch=="object"){for(let[r,s]of Object.entries(e.patch))/^(title|kind|sessionId|run|startCwd|renamed)$/.test(r)&&(L[r]=s);D()}}});let o=()=>{T.delete(t)&&R({t:"clients",list:$()})};t.on("close",o),t.on("error",o)}),lt=process.umask(127);z.listen(v,()=>{process.umask(lt);try{y.chmodSync(v,384)}catch{}D(),E("listening ("+I.kind+", pid "+f.pid+")")});z.on("error",t=>{E("socket: "+t.message);try{f.kill("SIGHUP")}catch{}process.exit(5)});

package/mod/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "leftoff",
-  "version": "0.9.18-beta.3",
+  "version": "0.9.18-beta.5",
   "description": "Leftoff (formerly Checkpoints): WTF was I working on? Tracks every Claude Code session on this machine, writes a 3-line checkpoint when one goes quiet, and adds /cp (checkpoint now), /cp-name and a /leftoff pane. Talks to the local Leftoff daemon on 127.0.0.1:7429 and falls back to writing markdown in ~/checkpoints.",
   "author": {
     "name": "One Silly App"

package/mod/hooks/register.js

@@ -26,9 +26,13 @@ const PANE_ID = 'checkpoints'
 const POST_TIMEOUT_MS = 800
 const END_TIMEOUT_MS = 1000
 const MODEL_TIMEOUT_MS = 20000
+const STOP_GRACE_MS = 2500 // 2026-11-03 how long a completed turn waits for its Stop before the mod reports the end itself
+const SKIP_GRACE_MS = 4000 // 2026-11-03 how long a mod event waits for its classic twin before that classic event counts as passed over
+const START_SKIP_GRACE_MS = 15000 // the same for SessionStart (a cold start can be slow)
+const PERM_GRACE_MS = 1500 // how long a permission prompt tool.check saw waits for classic.PermissionRequest before the mod reports it
 
 // Module state. $.state is not used: the pane redraws with $.ui.invalidate.
-const MOD_VERSION = '0.9.18-beta.3' // keep in step with .claude-plugin/plugin.json
+const MOD_VERSION = '0.9.18-beta.5' // keep in step with .claude-plugin/plugin.json
 
 const st = {
   internal: false,
@@ -69,6 +73,15 @@ const st = {
   listSig: null, // v0.5.1: the signature of this session's lists Claude last heard about
   listPending: false, // a list was saved or ticked here: tell Claude with the next prompt
   paneNeeds: 0, // sessions that need you (the pane's top line)
+  turnStartAt: 0, // 2026-11-03 when this process's current turn started (turn.start)
+  stopAt: 0, // and when a Stop last came (classic.Stop)
+  // 2026-11-03 Claude Code 2.1.31x passes every classic.* event of a plugin you
+  // installed over when its built-in cc-plugin-sec-default is seated first (a
+  // Team or Enterprise plan, or managed settings): see SKIP_GRACE_MS below.
+  classicSeen: false, // a classic.* hook of this mod ran in this process
+  hooksSkipped: null, // the classic events we saw passed over, as last told to the daemon
+  permAt: 0, // when classic.PermissionRequest last ran
+  watchAsks: {}, // tool_use_id -> { tool, at, reported, done }: permission prompts tool.check saw
 }
 
 // Millisecond precision: the daemon dedupes events per (sessionId, type, at).
@@ -230,7 +243,7 @@ async function readRepo($, cwd) {
 
 async function heartbeat($) {
   if (st.internal || !st.sessionId) return
-  const res = await sendOrSpool($, 'heartbeat', { inTurn: !!(st.record && st.record.inTurn) })
+  const res = await sendOrSpool($, 'heartbeat', { inTurn: !!(st.record && st.record.inTurn), ...(st.hooksSkipped && st.hooksSkipped.length ? { hooksSkipped: st.hooksSkipped } : {}) })
   if (res && !st.modHealthSent) await reportModHealth($)
   if (res && st.daemonTitle) await noteTitle($, st.daemonTitle)
   else if (res && st.tabTitle && !(st.record && st.record.inTurn)) await applyTabTitle($, null) // the marker came (it never goes: tabMarkerKept), or a rename that had to wait
@@ -243,6 +256,99 @@ async function heartbeat($) {
   }
 }
 
+// 2026-11-03 a turn completed and no Stop came for it within STOP_GRACE_MS:
+// report its end (once; nothing when this process doesn't hold a turn open).
+async function stopFallback($, completedAt, reason) {
+  if (st.internal || !st.sessionId) return
+  if (st.stopAt && st.stopAt >= (st.turnStartAt || 0)) return // its Stop came
+  if (!(st.record && st.record.inTurn)) return
+  st.stopAt = Date.now()
+  await sendOrSpool($, 'turn_completed', { endReason: String(reason || 'end').slice(0, 40), settledBy: 'mod', completedAt: new Date(completedAt).toISOString() })
+}
+
+// ---------------------------------------------------------------- passed-over classic hooks (2026-11-03)
+//
+// Claude Code 2.1.31x seats its built-in "cc-plugin-sec-default" outermost on
+// a Team or Enterprise plan or a machine with managed settings, and its hooks
+// module answers every classic.* event with next.to(e, "append"): the event
+// jumps past the user tier, where a plugin you installed (this one) sits, so
+// none of our classic.* hooks run (Claude Code then says "leftoff: its
+// classic.Stop hook was skipped. "cc-plugin-sec-default" runs first and sent
+// the event on past it."). Our other events are untouched: session.start,
+// prompt.submit, turn.start, turn.complete, tool.check and tool.call.
+// So: each of those notes the classic event that should come with it; when it
+// doesn't come within the grace and no classic hook has run in this process at
+// all, the classic event counts as passed over and the daemon hears which.
+function sawClassic($, name) {
+  if (name === 'PermissionRequest') st.permAt = Date.now()
+  if (st.classicSeen) return
+  st.classicSeen = true
+  if (st.hooksSkipped && st.hooksSkipped.length) { // a slow SessionStart we counted out too early, a setting changed: they run
+    st.hooksSkipped = []
+    sendOrSpool($, 'heartbeat', { hooksSkipped: [], fromMod: true }).catch(() => {})
+  }
+}
+
+function expectClassic($, name, graceMs) {
+  if (st.classicSeen || st.internal) return
+  $.clock.after(graceMs || SKIP_GRACE_MS, () => { noteSkipped($, name).catch(() => {}) })
+}
+
+async function noteSkipped($, name) {
+  if (st.classicSeen || st.internal || !st.sessionId) return
+  const cur = st.hooksSkipped || []
+  if (cur.includes(name)) return
+  st.hooksSkipped = cur.concat(name)
+  await sendOrSpool($, 'heartbeat', { hooksSkipped: st.hooksSkipped, fromMod: true })
+}
+
+// A permission prompt, seen from tool.check: next(e) is the whole check
+// (rules, modes, other plugins' hooks, Claude Code's own), and { decision: "ask" }
+// with approver "person" is the terminal's permission dialog (a host such as
+// headless answers "host"; no approver means it is never asked). We only
+// look: the answer goes back as it came. Reported as Claude Code's own
+// permission_prompt notification would be, unless classic.PermissionRequest
+// ran for it (then permissionHook has put it on the board, answerable there).
+function watchAsk($, e) {
+  if (st.internal || st.headless || !st.sessionId) return
+  const at = Date.now()
+  const id = String(e.tool_use_id || (String(e.tool || '') + '@' + at))
+  st.watchAsks[id] = { tool: e.tool, at, reported: false, done: false }
+  expectClassic($, 'PermissionRequest')
+  $.clock.after(PERM_GRACE_MS, () => { reportAsk($, id, e).catch(() => {}) })
+}
+
+async function reportAsk($, id, e) {
+  const w = st.watchAsks[id]
+  if (!w || w.done) return
+  if (st.permAt >= w.at) { delete st.watchAsks[id]; return } // its PermissionRequest hook ran: the board has it
+  w.reported = true
+  await sendOrSpool($, 'notification', {
+    notificationType: 'permission_prompt', message: clip(askMessage(e.tool), 200), tool: e.tool || null, fromMod: true,
+    ...(st.hooksSkipped && st.hooksSkipped.length ? { hooksSkipped: st.hooksSkipped } : {}),
+  })
+}
+
+function askMessage(tool) {
+  if (tool === 'AskUserQuestion') return 'Claude has a question for you'
+  return 'Claude needs your permission to use ' + (tool || 'a tool')
+}
+
+// The prompt went away: the tool runs (tool.call) or the turn is over. Says so
+// only for prompts the mod reported (an activity the board reads as a tool
+// that ran, which ends "Needs you" for a permission prompt).
+async function settleAsks($, toolUseId, tool) {
+  let reported = false
+  for (const id of Object.keys(st.watchAsks)) {
+    const w = st.watchAsks[id]
+    if (toolUseId !== undefined && (toolUseId ? id !== String(toolUseId) : w.tool !== tool)) continue
+    w.done = true
+    if (w.reported) reported = true
+    delete st.watchAsks[id]
+  }
+  if (reported) await sendOrSpool($, 'activity', { kind: 'tool', phase: 'post', tool: tool || null, fromMod: true })
+}
+
 // The commands, in the order they're tried. Claude Code 2.1.295's built-ins
 // own /checkpoint (an alias of /rewind) and /name (an alias of /rename), so
 // ours share a /cp prefix; each command lists fallbacks in case a later
@@ -1029,6 +1135,7 @@ export function register(on, options) {
       st.heartbeat = $.clock.every(60000, () => { heartbeat($).catch(() => {}); startReplyLoop($) })
       st.ready = true
       startReplyLoop($)
+      expectClassic($, 'SessionStart', START_SKIP_GRACE_MS) // 2026-11-03 passed over? (sawClassic)
     } catch {}
     // Commands last, each on its own: a taken name throws, so a
     // clash costs only that command, and registerCommands reports it.
@@ -1037,6 +1144,7 @@ export function register(on, options) {
   })
 
   on('classic.SessionStart', async ($, e, next) => {
+    sawClassic($, 'SessionStart')
     if (!(await internalOnce($)) && !st.internal && e.session_id) {
       let parentSessionId
       if (st.sessionId && e.session_id !== st.sessionId) {
@@ -1069,6 +1177,7 @@ export function register(on, options) {
   })
 
   on('classic.UserPromptSubmit', async ($, e, next) => {
+    sawClassic($, 'UserPromptSubmit')
     await sendOrSpool($, 'activity', { kind: 'prompt', prompt: clip(e.prompt || '', 300), sessionTitle: e.session_title && e.session_title === st.tabTitle ? null : e.session_title, ...moved(e) }) // our own /rename isn't a name you chose
     return next(e)
   })
@@ -1078,11 +1187,13 @@ export function register(on, options) {
   // context entry: the list, its numbers, and `leftoff todo done <list> <n>`.
   // Context goes on the event before next(); on the result it would be too late.
   on('prompt.submit', async ($, e, next) => {
+    expectClassic($, 'UserPromptSubmit')
     const ctx = await listContextFor($)
     return next(ctx ? { ...e, context: [...(Array.isArray(e.context) ? e.context : []), ctx] } : e)
   })
 
   on('turn.start', async ($, e, next) => {
+    st.turnStartAt = Date.now()
     await sendOrSpool($, 'turn_started', {})
     return next(e)
   })
@@ -1090,11 +1201,21 @@ export function register(on, options) {
   on('turn.complete', async ($, e, next) => {
     // classic.Stop reports a normal end with its details; Stop doesn't fire for
     // an interrupted or failed turn, so those are reported here.
+    await settleAsks($, undefined).catch(() => {}) // 2026-11-03 a permission prompt the mod reported is over with the turn
     if (e.reason === 'aborted' || e.reason === 'error' || e.reason === 'refusal') await sendOrSpool($, 'turn_completed', { endReason: e.reason })
+    // 2026-11-03 Claude Code doesn't run every Stop for every end of a turn
+    // (2.1.317: a turn its loop ends runs Stop without the in-process hooks,
+    // and a tool can end a turn), and then this turn stayed open on the board
+    // for good. If no Stop came for this turn shortly after it completed, the
+    // end is reported from here; a Stop that comes later is the same turn
+    // (the daemon doesn't count it twice).
+    else { const at = Date.now(); $.clock.after(STOP_GRACE_MS, () => { stopFallback($, at, e.reason).catch(() => {}) }); expectClassic($, 'Stop') }
     return next(e)
   })
 
   on('classic.Stop', async ($, e, next) => {
+    sawClassic($, 'Stop')
+    st.stopAt = Date.now()
     // v0.5.1: a checklist of 3+ in this reply (a cheap regex, no model) -> the
     // board's card offers "Claude wrote a 7-step list · Save". Nothing is saved here.
     const listHint = listHintFrom(e.last_assistant_message || '', { fallback: st.daemonTitle || null })
@@ -1118,20 +1239,36 @@ export function register(on, options) {
   })
 
   on('classic.Notification', async ($, e, next) => {
+    sawClassic($, 'Notification')
     await sendOrSpool($, 'notification', { notificationType: e.notification_type || null, message: clip(e.message || '', 200), ...moved(e) })
     return next(e)
   })
 
-  on('classic.PermissionRequest', permissionHook)
+  on('classic.PermissionRequest', async ($, e, next) => { sawClassic($, 'PermissionRequest'); return permissionHook($, e, next) })
+
+  // 2026-11-03 a permission prompt, seen whether or not classic.PermissionRequest
+  // reaches us (see watchAsk): we only look, and hand the answer back as it came.
+  on('tool.check', async ($, e, next) => {
+    const r = await next(e)
+    try { if (r && r.decision === 'ask' && e && e.approver === 'person') watchAsk($, e) } catch {}
+    return r
+  })
+
+  // The tool runs: a prompt the mod reported for it was answered in the terminal.
+  on('tool.call', async ($, e, next) => {
+    if (e && Object.keys(st.watchAsks).length) await settleAsks($, e.tool_use_id || null, e.tool).catch(() => {})
+    return next(e)
+  })
 
   on('classic.PostToolUse', async ($, e, next) => {
+    sawClassic($, 'PostToolUse')
     await toolRan($, e)
     const m = moved(e) // EnterWorktree, or a cd: say so now, not at the end of the turn
     if (m.cwd || m.transcriptPath) await sendOrSpool($, 'activity', { kind: 'cwd', ...m })
     return next(e)
   })
 
-  on('classic.PostToolUseFailure', async ($, e, next) => { await toolRan($, e); return next(e) })
+  on('classic.PostToolUseFailure', async ($, e, next) => { sawClassic($, 'PostToolUseFailure'); await toolRan($, e); return next(e) })
 
   on('session.end', async ($, e, next) => {
     // About 1.5 s shared by every SessionEnd hook: post and go. The daemon makes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leftoff/cli",
-  "version": "0.9.18-beta.3",
+  "version": "0.9.18-beta.5",
   "description": "Leftoff: WTF was I working on? Tracks every Claude Code session, writes a 3-line checkpoint when one goes quiet, and gives you a daily digest and a board, on your Mac and (optionally) your phone.",
   "keywords": [
     "claude",

package/ui/app.css

@@ -5274,6 +5274,18 @@ code .file-ref-off { font-size: inherit; }
 .wt-sf .wt-snip + .wt-snip { border-top: 1px dashed var(--line); }
 .wt-sf .wt-snip-h { margin: 0; padding: 4px 10px; }
 @media (pointer: fine) { .wt-sf > summary { min-height: 34px; } .wt-sfa-b { min-height: 32px; } }
+/* 2026-11-03 a file a step shares with an earlier one: folded, with a quiet way back to where it's open */
+.wt-also { display: inline-flex; align-items: center; gap: 4px; align-self: stretch; padding: 0 6px; font-size: 12px; color: var(--text2); text-decoration: none; white-space: nowrap; }
+.wt-also .ic { width: 13px; height: 13px; color: var(--muted); }
+.wt-also:hover { color: var(--text); text-decoration: underline; text-underline-offset: 2px; }
+.wt-also:focus-visible { outline: 2px solid var(--accent); outline-offset: -2px; border-radius: 6px; }
+.wt-sf-also > summary .wt-sf-p { color: var(--text2); }
+/* the lines the step's refs name, when it shows a hunk whole: the rest steps back */
+.wt-gd-focus .gd-row:not(.wt-focus), .wt-gd-focus .gd-half:not(.wt-focus):not(.gd-empty) { opacity: .55; }
+.wt-gd-focus .gd-row.wt-focus .gd-n, .wt-gd-focus .gd-half.wt-focus .gd-gut { box-shadow: inset 2px 0 0 var(--muted); }
+.wt-focus-w { display: inline-flex; align-items: center; gap: 6px; }
+.wt-focus-g { width: 2px; height: 12px; border-radius: 1px; background: var(--muted); }
+.wt-snip-none { margin: 0; padding: 10px; font-size: 12.5px; }
 /* "changed since": a half-filled circle and the words (the stale bar uses the same glyph) */
 .wt-chg { flex: none; display: inline-flex; align-items: center; gap: 5px; height: 20px; padding: 1px 7px 0; box-sizing: border-box; border: 1px dashed var(--line-strong); border-radius: 6px; font-size: 11.5px; font-weight: 600; line-height: 1; color: var(--text2); }
 .wt-chg-g { flex: none; width: 9px; height: 9px; border-radius: 50%; border: 1.5px solid currentColor; background: linear-gradient(90deg, currentColor 50%, transparent 50%); box-sizing: border-box; }
@@ -5378,3 +5390,46 @@ code .file-ref-off { font-size: inherit; }
 .wid-path .wt-nots, .wid-path .wt-pre { font-family: var(--sans, inherit); }
 .wid-scope-n { display: flex; gap: 6px; align-items: flex-start; }
 .wid-scope-n .ic { width: 13px; height: 13px; flex: none; margin-top: 2px; }
+
+/* 2026-11-03 "hooks not reporting": a quiet note beside the session's pills (a dashed ring plus words) */
+.sub .s-hooks { display: inline-flex; align-items: center; gap: 5px; margin-left: 4px; font-size: 12px; color: var(--muted); white-space: nowrap; }
+.sub .s-hooks-ring { width: 8px; height: 8px; border-radius: 50%; border: 1.5px dashed currentColor; box-sizing: border-box; flex: none; }
+.fs-head .sub > .s-hooks { height: 22px; vertical-align: middle; }
+.fs-side.is-scrolled .fs-head .sub > .s-hooks { display: none; }
+/* 2026-11-03 which hooks were skipped and why: the same note, its words cut short on a narrow header (the whole in its tip) */
+.sub .s-hooks-skip { max-width: min(420px, 100%); min-width: 0; }
+.sub .s-hooks-skip .s-hooks-t { overflow: hidden; text-overflow: ellipsis; min-width: 0; }
+
+/* 2026-11-03 "Let me answer prompts here" (ui/hook-fix.js): the hooks-skipped note's way out. Centered; a bottom sheet on a phone. */
+.sub .s-hooks-fix { margin-left: 6px; min-height: 44px; padding: 0 10px; border: 1px solid var(--btn-line); border-radius: 8px; background: transparent; color: var(--accent); font: inherit; font-size: 12px; cursor: pointer; white-space: nowrap; }
+@media (pointer: fine) { .sub .s-hooks-fix { min-height: 32px; padding: 0 9px; } }
+.sub .s-hooks-fix:hover { background: var(--btn-hover); }
+.sub .s-hooks-fix:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+.fs-side.is-scrolled .fs-head .sub > .s-hooks-fix { display: none; }
+.sub .s-hooks-applied .s-hooks-ring { border-style: dotted; }
+.hf-back { position: fixed; inset: 0; z-index: 400; background: rgba(0,0,0,.45); display: flex; align-items: center; justify-content: center; padding: 16px; }
+.hf-modal { width: min(560px, 100%); max-height: calc(100dvh - 32px); overflow: auto; background: var(--card); border: 1px solid var(--line-strong); border-radius: var(--radius); box-shadow: var(--toast-shadow); padding: 16px 18px 14px; color: var(--text2); }
+.hf-grab { display: none; }
+.hf-head { display: flex; align-items: center; justify-content: space-between; gap: 10px; margin-bottom: 6px; }
+.hf-head h2 { margin: 0; font-size: 15px; font-weight: 600; color: var(--text); text-transform: none; letter-spacing: normal; }
+.hf-p { margin: 8px 0; font-size: 13px; line-height: 1.5; }
+.hf-quiet { color: var(--muted); font-size: 12.5px; }
+.hf-file code, .hf-p code { font-size: 12px; overflow-wrap: anywhere; }
+.hf-file { margin: 4px 0; }
+.hf-code { margin: 6px 0; padding: 10px 12px; background: var(--field); border: 1px solid var(--line); border-radius: 8px; font-size: 12px; line-height: 1.45; overflow: auto; white-space: pre; color: var(--text); user-select: all; }
+.hf-mark { display: inline-block; width: 9px; height: 9px; margin-right: 7px; vertical-align: 0; box-sizing: border-box; }
+.hf-mark-ok { border-radius: 50%; background: var(--green); }
+.hf-mark-admin { border-radius: 2px; border: 1.5px solid var(--yellow); transform: rotate(45deg); }
+.hf-mark-off { border-radius: 50%; border: 1.5px dashed var(--muted); }
+.hf-ign { margin-top: 10px; padding-top: 6px; border-top: 1px solid var(--line); }
+.hf-acts { display: flex; justify-content: flex-end; gap: 8px; margin-top: 12px; flex-wrap: wrap; }
+.hf-acts .btn, .hf-x { min-height: 44px; min-width: 44px; justify-content: center; }
+@media (pointer: fine) { .hf-acts .btn, .hf-x { min-height: 32px; min-width: 32px; } }
+.hf-modal .btn:focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }
+@media (max-width: 640px) {
+  .hf-back { align-items: flex-end; padding: 0; }
+  .hf-modal { width: 100%; max-height: 88dvh; border-radius: var(--radius) var(--radius) 0 0; border-bottom: none; padding: 8px 16px calc(14px + env(safe-area-inset-bottom)); }
+  .hf-grab { display: block; width: 36px; height: 4px; border-radius: 2px; background: var(--line-strong); margin: 2px auto 8px; }
+  .hf-acts { justify-content: stretch; }
+  .hf-acts .btn { flex: 1 1 auto; }
+}

package/ui/app.js

@@ -39,6 +39,7 @@ import { createScrollKeep } from './scroll-keep.js' // 0.9.18 every scroll box k
 import { needsLine, needsItems, needsStrip, needPanel, agentNeedPanel, httpsOnly, agentReplyButton, agentChipHtml, cardBadge, questionAnswer, turnsHtml, dismissedHtml, askDocked, askDockHtml, askSlimHtml, askRows, askBottom } from './needs.js'
 import { SUMMARY_EXAMPLES, LENGTH_CHOICES } from './summary-examples.js'
 import { mdInline, renderSection } from './changelog-md.js'
+import { hooksFixButtonHtml, openHookFix } from './hook-fix.js' // 2026-11-03 "Let me answer prompts here"
 import { crumbHtml, metaLineHtml, detailsHtml, detailsOpen, rememberDetails, branchTileHtml } from './session-head.js' // 0.9.11: the session page's smaller head
 import { projectHref, threadHref, projectPageHtml, askPageHtml, threadHtml as askThreadHtml, recentAsksHtml, fillAsk, pickupState, paletteProjectItems, scopeOfSession, askHref, sessionAskHtml, sessionAskScope, sessionAskToken, scopeHref, pickListHtml, pickFull, PICK_MAX, ARCHIVE_UNDO_MS } from './ask.js' // Ask about a project (roadmap #4)
 import { cardPrsHtml, sessionPrsSection, prsPageHtml, prsBodyHtml, prRowHtml, prRows, readPrFilter, prsHash, prCopyClick } from './prs.js'
@@ -54,7 +55,7 @@ import { TABS_KEY, layoutFor, parseStored, serialize, openTab, promote, remember
 import { fsSideHtml, createSideStore, railHtml, createWidthStore, clampSideWidth, sideMax, SIDE_W_STEP, SIDE_W_DEFAULT, WIDE_MIN } from './fs-side.js'
 import { fileReach, gateFileRefs } from './file-reach.js' // 2026-10-29 a path links only when its file can be read
 import { createFoldStore, foldHtml, relPath, rootsOf, filesTouchedHtml, dropJunkCps, statusStripHtml, answeredHtml, whereWords } from './side-fold.js' // 2026-10-29 a calmer session panel
-import { walkthroughHtml, hydrateWalkthrough, fmToggle, eyeCountHtml, reviewedSet, stepAfter, visibleSteps, stepPos, toMarkdown, toHtmlDoc, exportName, revNextState, revNextLabel, REVNEXT_TIP, REVFINISH_TIP, sfState, sfSet, patchFor, readingOrder, SPLIT_MIN, RAIL_MIN as WT_SIDE_MIN, RAIL_MAX as WT_SIDE_MAX, RAIL_DEFAULT as WT_SIDE_DEFAULT, fileScopeStore, scopeAskLine } from './semdiff.js' // 0.9.17 Walk me through it
+import { walkthroughHtml, hydrateWalkthrough, fmToggle, eyeCountHtml, reviewedSet, stepAfter, visibleSteps, stepPos, toMarkdown, toHtmlDoc, exportName, revNextState, revNextLabel, REVNEXT_TIP, REVFINISH_TIP, sfState, sfSet, patchFor, readingOrder, uniqueStepIds, SPLIT_MIN, RAIL_MIN as WT_SIDE_MIN, RAIL_MAX as WT_SIDE_MAX, RAIL_DEFAULT as WT_SIDE_DEFAULT, fileScopeStore, scopeAskLine } from './semdiff.js' // 0.9.17 Walk me through it
 import { rowsOf, pickLine, dragTo, describePicks, refsPrompt } from './walk-lines.js' // 2026-10-30 line refs for Ask
 import { spotsFor, nextSpotIndex, spotCountWords } from './walk-spots.js' // 2026-10-30 Next spot
 import { walkButtonHtml, sizeLineHtml, popContent, initPops } from './walk-pop.js' // 0.9.18 Walk me through it's size line and popover
@@ -468,6 +469,26 @@ const liveBadge = (s) => (ownerOffline(s) ? '' : liveBadgeHtml(s)) // 0.9.14: an
 // The status pill beside it: a live session that is only waiting shows just Live (never "dormant").
 // 0.9.14: another Mac that's asleep or unreachable: "offline · last seen 12m ago" instead (never "needs you").
 const statusPill = (s) => { if (ownerOffline(s)) return offlinePill(s); const st = cardPills(s).status; return st ? pill(st, s) : '' }
+// 2026-11-03 Claude Code's own hook events never came for this session (only the mod's), so its turns
+// are read from the transcript: a quiet note, a dashed ring plus words, the why in the tip
+const HOOKS_QUIET_TIP = 'Claude Code’s hooks aren’t reaching Leftoff for this session, so its prompts and turn ends are read from the transcript instead (a few seconds late). Restarting Claude Code in this folder, or leftoff doctor, usually brings them back.'
+// 2026-11-03 and when Leftoff knows which (Claude Code passed them over: a plugin seated ahead of Leftoff's
+// sends them on past it), the note says which and why; the daemon writes the words (src/hook-skips.js)
+const hooksQuietHtml = (s) => {
+  if (!s || s.endedAt) return ''
+  const k = s.hooksSkipped
+  if (k && k.label) return '<span class="s-hooks s-hooks-skip' + (k.applied ? ' s-hooks-applied' : '') + '" data-tip="' + esc(k.tip || k.label) + '"><span class="s-hooks-ring" aria-hidden="true"></span><span class="s-hooks-t">' + esc(k.label) + '</span></span>' + hooksFixButtonHtml(s, { esc }) // 2026-11-03 applied: "restart Claude Code to apply", no button
+  return s.hooksQuiet ? '<span class="s-hooks" data-tip="' + esc(HOOKS_QUIET_TIP) + '"><span class="s-hooks-ring" aria-hidden="true"></span>hooks not reporting</span>' : ''
+}
+// the note's button: the sheet with the managed-settings lines (ui/hook-fix.js)
+document.addEventListener('click', (e) => {
+  const b = e.target.closest && e.target.closest('[data-hookfix]')
+  if (!b) return
+  e.preventDefault()
+  const sid = b.dataset.hookfix
+  const s = (state.session && state.session.id === sid ? state.session : null) || (state.sessions || []).find((x) => x.id === sid) || { id: sid }
+  openHookFix({ session: s, from: b, api, esc, toast, thisMachine: state.health && state.health.machine })
+})
 const offlinePill = (s) => { const w = offlineLine(s); return '<span class="pill s-offline" data-tip="' + esc(offlineTip(s, w, { was: offlineWas(s) })) + '">' + esc(w) + '</span>' }
 
 const fmtCode = (x) => esc(x).replace(/`([^`]+)`/g, '<code>$1</code>')
@@ -1142,6 +1163,7 @@ async function wtCheck(sid) {
     const r = await api('POST', '/v1/sessions/' + encodeURIComponent(sid) + '/walkthrough', wtBody(sid, { stale: true, peek: true }), { timeoutMs: 60000 })
     const had = wtUi.data.get(k)
     if (r && r.status === 'ok' && had && !wtUi.loading.has(k) && (r.fingerprint !== had.fingerprint || JSON.stringify(r.stale || null) !== JSON.stringify(had.stale || null))) {
+      if (r && Array.isArray(r.steps)) uniqueStepIds(r.steps) // a walkthrough from an older Mac: two steps could share an id
       wtUi.data.set(k, r)
       if (wtUi.sid === sid) { wtUi.sig = ''; wtFill(wtSession(sid)) }
     }
@@ -1215,6 +1237,7 @@ async function wtLoad(sid, { fresh = false, update = false, peek = false } = {})
   wtFill(wtSession(sid))
   try {
     const r = await api('POST', '/v1/sessions/' + encodeURIComponent(sid) + '/walkthrough', wtBody(sid, { ...(fresh ? { fresh: true } : {}), ...(fresh || update ? {} : { stale: true }), ...(peek && !fresh && !update ? { peek: true } : {}) }), { timeoutMs: 480000 }) // the session's agent: up to ~3 min a read
+    if (r && Array.isArray(r.steps)) uniqueStepIds(r.steps) // a walkthrough from an older Mac: two steps could share an id
     wtUi.data.set(k, r)
     if (r && r.status === 'ok') { const st = (r.steps || [])[0]; if (st && !wtUi.cur.has(k)) wtUi.cur.set(k, st.id) }
     // 2026-10-30 a new walkthrough comes with its marks (the ones carried over from the one before)
@@ -1339,18 +1362,21 @@ function wtRevNext() {
   if (!done) wtReviewed(sid, step, { force: true, advance: false })
   wtSlideGo(st.to)
 }
-function wtGo(sid, step, { group = null } = {}) {
+function wtGo(sid, step, { group = null, file = null } = {}) {
   const node = wtUi.node; if (!node) return
   if (group && node.querySelector('#wtDeck')) { const d = node.querySelector('#wtDeck'), sk = d.lastElementChild; if (sk && !sk.dataset.step && sk.dataset.slide !== '0') wtSlideGo(Number(sk.dataset.slide)) }
   if (group) { const g = node.querySelector('#wt-g-' + CSS.escape(group)); if (g) { g.open = true; g.scrollIntoView({ block: 'start', behavior: reducedMotion() ? 'auto' : 'smooth' }) } return }
   const k = wtKey(sid)
   const deck = node.querySelector('#wtDeck')
-  if (deck) { const sl = [...deck.children].findIndex((x) => x.dataset.step === step); if (sl >= 0) { wtUi.cur.set(k, step); wtSlideGo(sl) } return } // 0.9.18 the slideshow: that step's slide
+  // 2026-11-03 "Also in step N": that step's row for the file, opened, is where it lands
+  const fileRow = () => { if (!file) return null; const d = node.querySelector('details.wt-sf[data-sfk="' + CSS.escape(step + '|' + file) + '"]'); if (d && !d.open) d.open = true; return d }
+  if (deck) { const sl = [...deck.children].findIndex((x) => x.dataset.step === step); if (sl >= 0) { wtUi.cur.set(k, step); wtSlideGo(sl); const d = fileRow(); if (d) d.scrollIntoView({ block: 'nearest', behavior: 'auto' }) } return } // 0.9.18 the slideshow: that step's slide
   wtUi.cur.set(k, step)
   for (const a of node.querySelectorAll('article.wt-st')) a.classList.toggle('cur', a.dataset.step === step)
   for (const a of node.querySelectorAll('.wt-fm-i[data-step]')) a.classList.toggle('cur', a.dataset.step === step)
   const el = node.querySelector('#wt-' + CSS.escape(step))
-  if (el) { el.scrollIntoView({ block: 'start', behavior: reducedMotion() ? 'auto' : 'smooth' }); el.focus({ preventScroll: true }) }
+  const row = fileRow()
+  if (el) { (row || el).scrollIntoView({ block: 'start', behavior: reducedMotion() ? 'auto' : 'smooth' }); el.focus({ preventScroll: true }) }
   const data = wtUi.data.get(k); const n = node.querySelector('#wtPnavN'); if (n && data) n.textContent = stepPos(data.steps, { filter: wtUi.filter, cur: step })
 }
 // 0.9.18 the walkthrough as slides (ui/semdiff.js deckHtml): "Show all" (kept per device)
@@ -2880,7 +2906,7 @@ function sessionPageHtml(s, { spv = null, live: liveV = null, lists = null } = {
   const head = '<div class="pagehead s-head fs-head" data-sid="' + esc(s.id) + '"><div class="fs-head-row">' +
     '<button type="button" class="fs-side-x" data-action="fs-side" aria-expanded="true" aria-controls="fsSide" aria-label="Hide the session panel" data-tip="Hide panel (⌘\\)">' + icon('chevron-right') + '</button>' +
     title + (acts0 ? '<div class="fs-hacts">' + acts0 + '</div>' : '') + '</div>' +
-    '<div class="sub">' + glyphFor(s, { cls: 'head-sg' }) + statusPill(s) + liveBadge(s) + termPillHtml(s, { esc }) + (isDone(s) ? doneChipHtml(s, { icon, esc }) : archivedChipHtml(s)) + projChip(s) + wtChips(s) + (s.titleSource ? '<span class="s-tsrc">' + esc(s.titleSource === 'prompt' ? 'named from the first prompt' : s.titleSource === 'fallback' ? 'named from your prompt' : s.titleSource + ' title') + '</span>' : '') + '</div></div>' +
+    '<div class="sub">' + glyphFor(s, { cls: 'head-sg' }) + statusPill(s) + liveBadge(s) + termPillHtml(s, { esc }) + hooksQuietHtml(s) + (isDone(s) ? doneChipHtml(s, { icon, esc }) : archivedChipHtml(s)) + projChip(s) + wtChips(s) + (s.titleSource ? '<span class="s-tsrc">' + esc(s.titleSource === 'prompt' ? 'named from the first prompt' : s.titleSource === 'fallback' ? 'named from your prompt' : s.titleSource + ' title') + '</span>' : '') + '</div></div>' +
     // 2026-10-29: the head above (title row, the status and Live chips) stays pinned while the panel scrolls; these scroll
     (where.length ? '<div class="fs-where fs-repo" data-tip="' + esc(wherePath ? wherePath + (branch ? ' · ' + branch : '') : where.join(' · ')) + '">' + icon('folder') + '<span>' + esc(where.join(' · ')) + '</span></div>' : '') +
     '<div class="fs-where">' + icon('monitor') + '<span>' + esc(mEmoji(s.machine) + ' ' + s.machine) + '</span><span class="faint">· ' + esc(ago(s.lastActivityAt)) + '</span></div>'
@@ -8543,7 +8569,7 @@ document.addEventListener('click', async (ev) => {
       const sm = d.querySelector('summary'); if (sm) sm.focus({ preventScroll: true })
       return
     }
-    if (action === 'wt-go') { ev.preventDefault(); return wtGo(wtUi.sid, btn.dataset.step || null, { group: btn.dataset.group || null }) }
+    if (action === 'wt-go') { ev.preventDefault(); ev.stopPropagation(); return wtGo(wtUi.sid, btn.dataset.step || null, { group: btn.dataset.group || null, file: btn.dataset.file || null }) }
     if (action === 'wt-step') return wtStep(Number(btn.dataset.dir) || 1)
     // 2026-10-30 walkthrough round 3
     if (action === 'wt-dmode') { try { if (btn.dataset.mode === 'split') localStorage.setItem('lo-wt-split', '1'); else localStorage.removeItem('lo-wt-split') } catch {} wtUi.sig = ''; return void wtFill(wtSession(wtUi.sid)) }

package/ui/hook-fix.js

@@ -0,0 +1,109 @@
+// 2026-11-03 "Let me answer prompts here": the hooks-skipped note's way out.
+// Claude Code's Security default runs ahead of the plugins you install (Team or
+// Enterprise, managed settings, a managed MCP file) and sends Stop and
+// permission prompts on past Leftoff. Claude Code ignores appendPlugins in
+// your own ~/.claude/settings.json while it's seated (2.1.317), so the sheet
+// shows the managed-settings lines and where they go, with Copy; Leftoff
+// writes none of it. The one change it can make: take Leftoff's own entry
+// back out of your settings when Claude Code ignores it there (an explicit
+// Remove, this Mac's own browser or a trusted paired device, never on a
+// managed Mac). Another Mac's session: run leftoff doctor --fix there.
+// Centered on a desktop, a bottom sheet on a phone.
+
+export function hooksFixButtonHtml(s, { esc }) {
+  const k = s && s.hooksSkipped
+  if (!k || !k.label || k.applied || s.endedAt) return ''
+  return '<button type="button" class="s-hooks-fix" data-hookfix="' + esc(s.id) + '" data-tip="Why Leftoff can’t answer this session’s prompts from the board, and the settings line that lets it">Let me answer prompts here</button>'
+}
+
+let open = null
+
+export function closeHookFix() {
+  if (!open) return
+  const { back, from, onKey, sid } = open
+  open = null
+  document.removeEventListener('keydown', onKey, true)
+  back.remove()
+  document.documentElement.classList.remove('hf-open')
+  // the header may have been redrawn while the sheet was up: its button for this session now
+  const to = from && from.isConnected ? from : sid ? document.querySelector('[data-hookfix="' + CSS.escape(sid) + '"]') : null
+  if (to) try { to.focus({ preventScroll: true }) } catch {}
+}
+
+const copyText = async (t) => { try { await navigator.clipboard.writeText(t); return true } catch { return false } }
+
+// st: GET /v1/hook-order. -> the sheet's body
+export function hookFixBodyHtml(st, { esc, session = null, thisMachine = null } = {}) {
+  if (session && session.isLocal === false) {
+    const mac = session.machine || 'that Mac'
+    return '<p class="hf-p">This session runs on <b>' + esc(mac) + '</b>, and the settings that decide the plugin order are that Mac’s. Run this there; it says what to add, and why:</p>' +
+      '<div class="hf-code-row"><pre class="hf-code hf-cmd">leftoff doctor --fix</pre></div>' +
+      '<div class="hf-acts"><button type="button" class="btn hf-copy" data-copy="leftoff doctor --fix">Copy</button><button type="button" class="btn primary hf-close">Close</button></div>'
+  }
+  if (!st || st.error) return '<p class="hf-p">Couldn’t read this Mac’s Claude Code settings' + (st && st.error ? ' (' + esc(st.error) + ')' : '') + '. <code>leftoff doctor --fix</code> in a terminal says the same.</p><div class="hf-acts"><button type="button" class="btn primary hf-close">Close</button></div>'
+  let h = ''
+  if (!st.seated) {
+    h += '<p class="hf-p"><span class="hf-mark hf-mark-ok" aria-hidden="true"></span>Nothing here puts a plugin ahead of Leftoff’s hooks' + (thisMachine ? ' on ' + esc(thisMachine) : '') + ' right now. A session that started before a change may still show the note; restart Claude Code there.</p>'
+  } else if (st.placed) {
+    h += '<p class="hf-p"><span class="hf-mark hf-mark-ok" aria-hidden="true"></span><b>Managed settings already seat Leftoff</b> right after Claude Code’s Security default. Restart Claude Code sessions that started before that, and their prompts come here.</p>'
+  } else {
+    h += '<p class="hf-p">' + esc(st.words) + '</p>'
+    h += '<p class="hf-p hf-who"><span class="hf-mark hf-mark-admin" aria-hidden="true"></span>' + (st.managed ? 'Ask whoever manages Claude Code here to ' : 'An admin (on your own Mac, that’s you, with sudo) can ') + (st.snippet.merge ? 'merge this into' : 'put this in') + ':</p>'
+    h += '<div class="hf-file"><code>' + esc(st.snippet.file) + '</code></div>'
+    h += '<pre class="hf-code">' + esc(st.snippet.json) + '</pre>'
+    h += '<p class="hf-p hf-quiet">' + esc(st.snippet.note) + '. Then restart Claude Code. Leftoff never writes managed settings.</p>'
+  }
+  if (st.ignoredEntry) {
+    h += '<div class="hf-ign"><p class="hf-p"><span class="hf-mark hf-mark-off" aria-hidden="true"></span>Your <code>' + esc(st.ignoredEntry.file) + '</code> lists Leftoff in ' + esc(st.ignoredEntry.keys.join(' and ')) + ', which Claude Code ignores here. Removing it changes nothing in Claude Code.</p>' +
+      (st.canUnfix ? '<p class="hf-p hf-quiet">Remove takes out only Leftoff’s entry and keeps a backup in ~/.config/checkpoints/backups.</p>' : '<p class="hf-p hf-quiet">This Mac has managed settings, so Leftoff changes nothing in ~/.claude; delete the entry by hand if you like.</p>') + '</div>'
+  }
+  h += '<div class="hf-acts">' +
+    (st.ignoredEntry && st.canUnfix ? '<button type="button" class="btn hf-unfix">Remove the ignored entry</button>' : '') +
+    (st.seated && !st.placed ? '<button type="button" class="btn hf-copy" data-copy="' + esc(st.snippet.json) + '">Copy</button>' : '') +
+    '<button type="button" class="btn primary hf-close">' + (st.seated && !st.placed ? 'Done' : 'Close') + '</button></div>'
+  return h
+}
+
+export async function openHookFix({ session, from = null, api, esc, toast = () => {}, thisMachine = null } = {}) {
+  closeHookFix()
+  const back = document.createElement('div')
+  back.className = 'hf-back'
+  back.innerHTML = '<div class="hf-modal" role="dialog" aria-modal="true" aria-labelledby="hfTitle"><div class="hf-grab" aria-hidden="true"></div>' +
+    '<div class="hf-head"><h2 id="hfTitle">Let Leftoff answer prompts here</h2><button type="button" class="btn x hf-x" aria-label="Close">✕</button></div>' +
+    '<div class="hf-body"><p class="hf-p hf-quiet">Reading this Mac’s Claude Code settings…</p></div></div>'
+  document.body.appendChild(back)
+  document.documentElement.classList.add('hf-open')
+  const onKey = (e) => {
+    if (e.key === 'Escape') { e.preventDefault(); e.stopPropagation(); closeHookFix(); return }
+    if (e.key === 'Tab') { // keep focus inside
+      const f = [...back.querySelectorAll('button:not([disabled])')]
+      if (!f.length) return
+      const i = f.indexOf(document.activeElement)
+      if (e.shiftKey && i <= 0) { e.preventDefault(); f[f.length - 1].focus() } else if (!e.shiftKey && i === f.length - 1) { e.preventDefault(); f[0].focus() }
+    }
+  }
+  open = { back, from, onKey, sid: session && session.id }
+  document.addEventListener('keydown', onKey, true)
+  const body = back.querySelector('.hf-body')
+  const paint = (st) => {
+    body.innerHTML = hookFixBodyHtml(st, { esc, session, thisMachine })
+    const first = back.querySelector('.hf-copy, .hf-close')
+    if (first) try { first.focus({ preventScroll: true }) } catch {}
+  }
+  back.addEventListener('click', async (e) => {
+    if (e.target === back || e.target.closest('.hf-x, .hf-close')) { closeHookFix(); return }
+    const c = e.target.closest('.hf-copy')
+    if (c) { const ok = await copyText(c.dataset.copy || ''); c.textContent = ok ? 'Copied' : 'Select and copy'; setTimeout(() => { if (c.isConnected) c.textContent = 'Copy' }, 1800); return }
+    const u = e.target.closest('.hf-unfix')
+    if (u) {
+      u.disabled = true; u.textContent = 'Removing…'
+      try {
+        const r = await api('POST', '/v1/hook-order/unfix', { yes: true })
+        paint(r.state)
+        toast(r.wrote ? 'Removed Leftoff’s entry from ' + r.file + (r.backup ? ' (backup kept)' : '') + '. Restart open Claude Code sessions.' : 'Nothing to remove.', 5000)
+      } catch (err) { u.disabled = false; u.textContent = 'Remove the ignored entry'; toast((err && err.message) || 'Couldn’t change it.', 5000) }
+    }
+  })
+  if (session && session.isLocal === false) { paint(null); return }
+  try { paint(await api('GET', '/v1/hook-order?fresh=1')) } catch (err) { paint({ error: (err && err.message) || 'no answer' }) }
+}