squadrant 0.17.1 → 0.18.1

package/dist/index.js

@@ -9,15 +9,87 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
-// packages/shared/dist/config.js
+// packages/shared/dist/lib/config-io.js
 import fs from "fs";
 import path from "path";
+function tightenModeSync(p, expectedMode) {
+  try {
+    if (!fs.existsSync(p))
+      return;
+    const stat2 = fs.statSync(p);
+    const currentMode = stat2.mode & 4095;
+    if ((currentMode & ~expectedMode) !== 0) {
+      fs.chmodSync(p, expectedMode);
+      if (!didLogMigration) {
+        console.warn(`\x1B[33m\u26A0\x1B[0m squadrant: tightened config file permissions (security fix #668)`);
+        didLogMigration = true;
+      }
+    }
+  } catch {
+  }
+}
+function writeConfigFileSync(filePath, content) {
+  ensureDirSync(path.dirname(filePath));
+  fs.writeFileSync(filePath, content, { mode: 384 });
+  tightenModeSync(filePath, 384);
+}
+function ensureDirSync(dirPath) {
+  if (dirPath !== CONFIG_DIR && !dirPath.startsWith(CONFIG_DIR + path.sep)) {
+    fs.mkdirSync(dirPath, { recursive: true });
+    return;
+  }
+  fs.mkdirSync(dirPath, { recursive: true, mode: 448 });
+  let current = dirPath;
+  while (current === CONFIG_DIR || current.startsWith(CONFIG_DIR + path.sep)) {
+    tightenModeSync(current, 448);
+    if (current === CONFIG_DIR)
+      break;
+    const parent = path.dirname(current);
+    if (parent === current)
+      break;
+    current = parent;
+  }
+}
+function readConfigFileSync(filePath) {
+  return fs.readFileSync(filePath, "utf-8");
+}
+function migrateConfigPermsSync() {
+  if (migrationRun)
+    return;
+  migrationRun = true;
+  tightenModeSync(CONFIG_DIR, 448);
+  tightenModeSync(path.join(CONFIG_DIR, "config.json"), 384);
+  const projectsDir = path.join(CONFIG_DIR, "projects");
+  tightenModeSync(projectsDir, 448);
+  try {
+    if (fs.existsSync(projectsDir)) {
+      const files = fs.readdirSync(projectsDir);
+      for (const file of files) {
+        if (file.endsWith(".json")) {
+          tightenModeSync(path.join(projectsDir, file), 384);
+        }
+      }
+    }
+  } catch {
+  }
+}
+var didLogMigration, migrationRun;
+var init_config_io = __esm({
+  "packages/shared/dist/lib/config-io.js"() {
+    init_config();
+    didLogMigration = false;
+    migrationRun = false;
+  }
+});
+
+// packages/shared/dist/config.js
+import path2 from "path";
 import os from "os";
 import chalk from "chalk";
 function getDefaultConfig() {
   return {
     commandName: "\u{1F3DB}\uFE0F command",
-    hubVault: path.join(os.homedir(), "squadrant-hub"),
+    hubVault: path2.join(os.homedir(), "squadrant-hub"),
     projects: {},
     agents: {
       claude: { cli: "claude", driver: "claude" }
@@ -61,13 +133,14 @@ function getDefaultConfig() {
     },
     metrics: {
       enabled: true,
-      path: path.join(CONFIG_DIR, "metrics.json")
+      path: path2.join(CONFIG_DIR, "metrics.json")
     }
   };
 }
 function loadConfig(configPath = DEFAULT_CONFIG_PATH) {
+  migrateConfigPermsSync();
   try {
-    const raw = fs.readFileSync(configPath, "utf-8");
+    const raw = readConfigFileSync(configPath);
     const config = JSON.parse(raw);
     if (config.defaults.models && !config.defaults.roles) {
       const m = config.defaults.models;
@@ -92,34 +165,32 @@ function loadConfig(configPath = DEFAULT_CONFIG_PATH) {
   }
 }
 function saveConfig(config, configPath = DEFAULT_CONFIG_PATH) {
-  const dir = path.dirname(configPath);
-  fs.mkdirSync(dir, { recursive: true });
-  fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+  writeConfigFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
 }
 function resolveHome(p) {
   return p.startsWith("~") ? p.replace("~", os.homedir()) : p;
 }
-var CONFIG_DIR, DEFAULT_CONFIG_PATH;
+var DEFAULT_CONFIG_PATH, CONFIG_DIR;
 var init_config = __esm({
   "packages/shared/dist/config.js"() {
-    CONFIG_DIR = path.join(os.homedir(), ".config", "squadrant");
-    DEFAULT_CONFIG_PATH = path.join(CONFIG_DIR, "config.json");
+    init_config_io();
+    DEFAULT_CONFIG_PATH = process.env.SQUADRANT_CONFIG || path2.join(os.homedir(), ".config", "squadrant", "config.json");
+    CONFIG_DIR = path2.dirname(DEFAULT_CONFIG_PATH);
   }
 });
 
 // packages/shared/dist/project-config.js
-import fs2 from "fs";
 import os2 from "os";
-import path2 from "path";
+import path3 from "path";
 function defaultRoot() {
-  return path2.join(os2.homedir(), ".config", "squadrant");
+  return path3.join(os2.homedir(), ".config", "squadrant");
 }
 function projectConfigPath(name, root = defaultRoot()) {
-  return path2.join(root, "projects", `${name}.json`);
+  return path3.join(root, "projects", `${name}.json`);
 }
 function loadProjectOverride(name, root = defaultRoot()) {
   try {
-    return JSON.parse(fs2.readFileSync(projectConfigPath(name, root), "utf-8"));
+    return JSON.parse(readConfigFileSync(projectConfigPath(name, root)));
   } catch {
     return {};
   }
@@ -136,8 +207,7 @@ function deepMerge(base, patch) {
 function saveProjectOverride(name, patch, root = defaultRoot()) {
   const merged = deepMerge(loadProjectOverride(name, root), patch);
   const file = projectConfigPath(name, root);
-  fs2.mkdirSync(path2.dirname(file), { recursive: true });
-  fs2.writeFileSync(file, JSON.stringify(merged, null, 2) + "\n");
+  writeConfigFileSync(file, JSON.stringify(merged, null, 2) + "\n");
 }
 function crewRank(tier) {
   return CREW_RANK[tier];
@@ -162,6 +232,7 @@ function resolveNotify(globalNotify, override) {
 var DEFAULT_NOTIFY, CREW_RANK;
 var init_project_config = __esm({
   "packages/shared/dist/project-config.js"() {
+    init_config_io();
     DEFAULT_NOTIFY = { active: false, cap: true, crew: "alert_only" };
     CREW_RANK = { none: 0, done_only: 1, alert_only: 2, all: 3 };
   }
@@ -234,22 +305,22 @@ function defaultCmuxConfigPath() {
   return join(homedir(), ".config", "cmux", "cmux.json");
 }
 function ensureSocketAutomation(opts = {}) {
-  const path34 = opts.path ?? defaultCmuxConfigPath();
-  if (!existsSync(path34)) {
-    mkdirSync(dirname(path34), { recursive: true });
-    writeFileSync(path34, MINIMAL_TEMPLATE);
-    return { path: path34, changed: true, alreadySet: false };
+  const path35 = opts.path ?? defaultCmuxConfigPath();
+  if (!existsSync(path35)) {
+    mkdirSync(dirname(path35), { recursive: true });
+    writeFileSync(path35, MINIMAL_TEMPLATE);
+    return { path: path35, changed: true, alreadySet: false };
   }
-  const text = readFileSync(path34, "utf-8");
+  const text = readFileSync(path35, "utf-8");
   const current = parse(text)?.automation?.socketControlMode;
   if (current === AUTOMATION_MODE) {
-    return { path: path34, changed: false, alreadySet: true };
+    return { path: path35, changed: false, alreadySet: true };
   }
   const edits = modify(text, [...SOCKET_CONTROL_MODE_PATH], AUTOMATION_MODE, {
     formattingOptions: { insertSpaces: true, tabSize: 2 }
   });
-  writeFileSync(path34, applyEdits(text, edits));
-  return { path: path34, changed: true, alreadySet: false };
+  writeFileSync(path35, applyEdits(text, edits));
+  return { path: path35, changed: true, alreadySet: false };
 }
 var SOCKET_CONTROL_MODE_PATH, AUTOMATION_MODE, MINIMAL_TEMPLATE;
 var init_cmux_config = __esm({
@@ -396,15 +467,15 @@ writeFileSync(resultFile, JSON.stringify(result));
 });
 
 // packages/shared/dist/lib/cmux-autoconfig.js
-import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync3, mkdirSync as mkdirSync2, rmSync as rmSync2 } from "fs";
+import { existsSync as existsSync4, rmSync as rmSync2 } from "fs";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname2, join as join4 } from "path";
+import { join as join4 } from "path";
 function defaultStatePath() {
   return join4(homedir3(), ".config", "squadrant", "state", "cmux-autoconfig.json");
 }
-function readState(path34) {
+function readState(path35) {
   try {
-    return JSON.parse(readFileSync4(path34, "utf-8"));
+    return JSON.parse(readConfigFileSync(path35));
   } catch {
     return {};
   }
@@ -420,8 +491,7 @@ async function ensureCmuxAutoConfig(opts = {}) {
   if (needsRestart) {
     const already = readState(statePath2).promptedRestart === true;
     if (!already) {
-      mkdirSync2(dirname2(statePath2), { recursive: true });
-      writeFileSync3(statePath2, JSON.stringify({ promptedRestart: true }));
+      writeConfigFileSync(statePath2, JSON.stringify({ promptedRestart: true }));
       promptedThisRun = true;
     }
   } else if (verdict === "reachable") {
@@ -441,6 +511,7 @@ var init_cmux_autoconfig = __esm({
   "packages/shared/dist/lib/cmux-autoconfig.js"() {
     init_cmux_config();
     init_cmux_probe();
+    init_config_io();
   }
 });
 
@@ -624,8 +695,8 @@ var init_config_version = __esm({
 });
 
 // packages/shared/dist/lib/update-check.js
-import fs3 from "fs";
-import path3 from "path";
+import fs2 from "fs";
+import path4 from "path";
 import os3 from "os";
 import https from "https";
 function isUpdateCheckDisabled(config, env = process.env) {
@@ -648,8 +719,25 @@ function isNewerVersion(latest, current) {
     return lb > cb;
   return lc > cc;
 }
-function formatUpdateNotice(latest, current) {
-  return `\u2B06 squadrant ${latest} available (you have ${current}) \u2014 npm i -g squadrant@latest`;
+function detectInstallManager(modulePath = import.meta.url) {
+  if (modulePath.includes("Library/pnpm/") || modulePath.includes("/pnpm/"))
+    return "pnpm";
+  if (modulePath.includes("/yarn/global/node_modules/"))
+    return "yarn";
+  return "npm";
+}
+function upgradeCommandFor(manager) {
+  switch (manager) {
+    case "pnpm":
+      return "pnpm add -g squadrant@latest";
+    case "yarn":
+      return "yarn global add squadrant@latest";
+    case "npm":
+      return "npm i -g squadrant@latest";
+  }
+}
+function formatUpdateNotice(latest, current, modulePath = import.meta.url) {
+  return `\u2B06 squadrant ${latest} available (you have ${current}) \u2014 ${upgradeCommandFor(detectInstallManager(modulePath))}`;
 }
 async function fetchLatestVersion(requestFn = requestJson, timeoutMs = FETCH_TIMEOUT_MS) {
   const timeout = new Promise((resolve4) => {
@@ -681,15 +769,15 @@ async function checkForUpdate(opts) {
 }
 function readUpdateCheckState(statePath2 = UPDATE_CHECK_STATE_PATH) {
   try {
-    return JSON.parse(fs3.readFileSync(statePath2, "utf-8"));
+    return JSON.parse(fs2.readFileSync(statePath2, "utf-8"));
   } catch {
     return void 0;
   }
 }
 function writeUpdateCheckState(state, statePath2 = UPDATE_CHECK_STATE_PATH) {
   try {
-    fs3.mkdirSync(path3.dirname(statePath2), { recursive: true });
-    fs3.writeFileSync(statePath2, JSON.stringify(state, null, 2) + "\n");
+    fs2.mkdirSync(path4.dirname(statePath2), { recursive: true });
+    fs2.writeFileSync(statePath2, JSON.stringify(state, null, 2) + "\n");
   } catch {
   }
 }
@@ -720,7 +808,7 @@ ${line}
 var UPDATE_CHECK_STATE_PATH, REGISTRY_URL, CHECK_INTERVAL_MS, FAILURE_RETRY_MS, FETCH_TIMEOUT_MS, requestJson;
 var init_update_check = __esm({
   "packages/shared/dist/lib/update-check.js"() {
-    UPDATE_CHECK_STATE_PATH = path3.join(os3.homedir(), ".config", "squadrant", "update-check.json");
+    UPDATE_CHECK_STATE_PATH = path4.join(os3.homedir(), ".config", "squadrant", "update-check.json");
     REGISTRY_URL = "https://registry.npmjs.org/squadrant/latest";
     CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
     FAILURE_RETRY_MS = 60 * 60 * 1e3;
@@ -752,10 +840,10 @@ var init_update_check = __esm({
 
 // packages/shared/dist/lib/git-worktree.js
 import { execFileSync as execFileSync2 } from "child_process";
-import fs4 from "fs";
-import path4 from "path";
+import fs3 from "fs";
+import path5 from "path";
 function worktreePath(repoRoot, worktreeDir, project, name) {
-  return path4.resolve(repoRoot, worktreeDir, `${project}-${name}`);
+  return path5.resolve(repoRoot, worktreeDir, `${project}-${name}`);
 }
 function crewBranch(name) {
   return `crew/${name}`;
@@ -764,15 +852,21 @@ function ensureSpotlightExcluded(repoRoot, worktreeDir) {
   if (process.platform !== "darwin")
     return;
   try {
-    const dir = path4.resolve(repoRoot, worktreeDir);
-    fs4.mkdirSync(dir, { recursive: true });
-    const marker = path4.join(dir, ".metadata_never_index");
-    if (!fs4.existsSync(marker))
-      fs4.writeFileSync(marker, "");
+    const dir = path5.resolve(repoRoot, worktreeDir);
+    fs3.mkdirSync(dir, { recursive: true });
+    const marker = path5.join(dir, ".metadata_never_index");
+    if (!fs3.existsSync(marker))
+      fs3.writeFileSync(marker, "");
   } catch {
   }
 }
 function resolveWorktreeBase(repoRoot, fallback = "develop") {
+  try {
+    const head = execFileSync2("git", ["-C", repoRoot, "rev-parse", "--abbrev-ref", "HEAD"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
+    if (head && head !== "HEAD")
+      return head;
+  } catch {
+  }
   try {
     const ref = execFileSync2("git", ["-C", repoRoot, "symbolic-ref", "refs/remotes/origin/HEAD"], { stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
     const m = ref.match(/^refs\/remotes\/origin\/(.+)$/);
@@ -824,35 +918,39 @@ function addWorktree(spec) {
   return wt;
 }
 function installWorktreeDependencies(wt) {
-  if (!fs4.existsSync(path4.join(wt, "package.json")))
+  if (!fs3.existsSync(path5.join(wt, "package.json")))
     return;
-  if (fs4.existsSync(path4.join(wt, "pnpm-lock.yaml"))) {
+  if (fs3.existsSync(path5.join(wt, "pnpm-lock.yaml"))) {
     execFileSync2("pnpm", ["-C", wt, "install", "--frozen-lockfile"], { stdio: "pipe" });
-  } else if (fs4.existsSync(path4.join(wt, "yarn.lock"))) {
+  } else if (fs3.existsSync(path5.join(wt, "yarn.lock"))) {
     execFileSync2("yarn", ["install", "--frozen-lockfile"], { cwd: wt, stdio: "pipe" });
-  } else if (fs4.existsSync(path4.join(wt, "package-lock.json"))) {
+  } else if (fs3.existsSync(path5.join(wt, "package-lock.json"))) {
     execFileSync2("npm", ["ci"], { cwd: wt, stdio: "pipe" });
-  } else if (fs4.existsSync(path4.join(wt, "bun.lockb"))) {
+  } else if (fs3.existsSync(path5.join(wt, "bun.lockb"))) {
     execFileSync2("bun", ["install", "--frozen-lockfile"], { cwd: wt, stdio: "pipe" });
   } else {
     process.stderr.write(`worktree ${wt}: package.json present but no lockfile \u2014 dependencies not installed; local typechecks/tests may resolve against the main checkout instead of this worktree.
 `);
   }
 }
-function removeWorktree(repoRoot, wtPath) {
+function worktreeDirtyFiles(wtPath) {
   try {
-    execFileSync2("git", ["-C", repoRoot, "worktree", "remove", wtPath], { stdio: "pipe" });
+    return execFileSync2("git", ["-C", wtPath, "status", "--porcelain", "--untracked-files=all"], { stdio: ["ignore", "pipe", "ignore"] }).toString().split("\n").map((l) => l.slice(3).trim()).filter(Boolean);
   } catch {
-    execFileSync2("git", ["-C", repoRoot, "worktree", "remove", "--force", wtPath], { stdio: "pipe" });
+    return [];
   }
 }
+function removeWorktree(repoRoot, wtPath, opts) {
+  const args = ["-C", repoRoot, "worktree", "remove", ...opts?.force ? ["--force"] : [], wtPath];
+  execFileSync2("git", args, { stdio: "pipe" });
+}
 var init_git_worktree = __esm({
   "packages/shared/dist/lib/git-worktree.js"() {
   }
 });
 
 // packages/shared/dist/lib/resolve-text-input.js
-import fs5 from "fs";
+import fs4 from "fs";
 async function readAllStdin() {
   const chunks = [];
   for await (const chunk of process.stdin) {
@@ -864,7 +962,7 @@ function flagName(label) {
   return label === "task" ? "--task-file" : "--message-file";
 }
 async function resolveTextInput(opts, deps) {
-  const readFile6 = deps?.readFile ?? ((p) => fs5.readFileSync(p, "utf8"));
+  const readFile6 = deps?.readFile ?? ((p) => fs4.readFileSync(p, "utf8"));
   const readStdin3 = deps?.readStdin ?? readAllStdin;
   if (opts.filePath) {
     if (opts.filePath === "-") {
@@ -892,75 +990,75 @@ var init_resolve_text_input = __esm({
 });
 
 // packages/shared/dist/lib/runtime-sync.js
-import fs6 from "fs";
-import path5 from "path";
+import fs5 from "fs";
+import path6 from "path";
 function copyIfDifferent(src, dest) {
-  if (fs6.existsSync(dest)) {
-    if (fs6.readFileSync(src).equals(fs6.readFileSync(dest)))
+  if (fs5.existsSync(dest)) {
+    if (fs5.readFileSync(src).equals(fs5.readFileSync(dest)))
       return false;
   }
-  fs6.copyFileSync(src, dest);
+  fs5.copyFileSync(src, dest);
   return true;
 }
 function mirrorDir(src, dest) {
-  fs6.mkdirSync(dest, { recursive: true });
-  const srcEntries = fs6.readdirSync(src, { withFileTypes: true });
+  fs5.mkdirSync(dest, { recursive: true });
+  const srcEntries = fs5.readdirSync(src, { withFileTypes: true });
   const srcNames = new Set(srcEntries.map((e) => e.name));
   for (const entry of srcEntries) {
-    const srcPath = path5.join(src, entry.name);
-    const destPath = path5.join(dest, entry.name);
+    const srcPath = path6.join(src, entry.name);
+    const destPath = path6.join(dest, entry.name);
     if (entry.isDirectory()) {
       mirrorDir(srcPath, destPath);
     } else {
       copyIfDifferent(srcPath, destPath);
     }
   }
-  for (const entry of fs6.readdirSync(dest, { withFileTypes: true })) {
+  for (const entry of fs5.readdirSync(dest, { withFileTypes: true })) {
     if (!srcNames.has(entry.name)) {
-      fs6.rmSync(path5.join(dest, entry.name), { recursive: true, force: true });
+      fs5.rmSync(path6.join(dest, entry.name), { recursive: true, force: true });
     }
   }
 }
 function mirrorFlat(src, dest, match, chmod) {
-  fs6.mkdirSync(dest, { recursive: true });
-  const matched = fs6.readdirSync(src, { withFileTypes: true }).filter((e) => e.isFile() && match.test(e.name)).map((e) => e.name);
+  fs5.mkdirSync(dest, { recursive: true });
+  const matched = fs5.readdirSync(src, { withFileTypes: true }).filter((e) => e.isFile() && match.test(e.name)).map((e) => e.name);
   const matchedSet = new Set(matched);
   for (const name of matched) {
-    const destPath = path5.join(dest, name);
-    const copied = copyIfDifferent(path5.join(src, name), destPath);
+    const destPath = path6.join(dest, name);
+    const copied = copyIfDifferent(path6.join(src, name), destPath);
     if (copied && chmod !== void 0)
-      fs6.chmodSync(destPath, chmod);
+      fs5.chmodSync(destPath, chmod);
   }
-  for (const entry of fs6.readdirSync(dest, { withFileTypes: true })) {
+  for (const entry of fs5.readdirSync(dest, { withFileTypes: true })) {
     if (!matchedSet.has(entry.name)) {
-      fs6.rmSync(path5.join(dest, entry.name), { recursive: true, force: true });
+      fs5.rmSync(path6.join(dest, entry.name), { recursive: true, force: true });
     }
   }
 }
 function mirrorPluginSubset(src, dest, skills) {
-  fs6.mkdirSync(dest, { recursive: true });
-  mirrorDir(path5.join(src, ".claude-plugin"), path5.join(dest, ".claude-plugin"));
-  const skillsDest = path5.join(dest, "skills");
-  fs6.mkdirSync(skillsDest, { recursive: true });
+  fs5.mkdirSync(dest, { recursive: true });
+  mirrorDir(path6.join(src, ".claude-plugin"), path6.join(dest, ".claude-plugin"));
+  const skillsDest = path6.join(dest, "skills");
+  fs5.mkdirSync(skillsDest, { recursive: true });
   for (const name of skills) {
-    const skillSrc = path5.join(src, "skills", name);
-    if (fs6.existsSync(skillSrc))
-      mirrorDir(skillSrc, path5.join(skillsDest, name));
+    const skillSrc = path6.join(src, "skills", name);
+    if (fs5.existsSync(skillSrc))
+      mirrorDir(skillSrc, path6.join(skillsDest, name));
   }
-  for (const entry of fs6.readdirSync(skillsDest, { withFileTypes: true })) {
+  for (const entry of fs5.readdirSync(skillsDest, { withFileTypes: true })) {
     if (!skills.includes(entry.name)) {
-      fs6.rmSync(path5.join(skillsDest, entry.name), { recursive: true, force: true });
+      fs5.rmSync(path6.join(skillsDest, entry.name), { recursive: true, force: true });
     }
   }
 }
 function ensureRuntimeSynced(opts) {
   const targets = opts.targets ?? MANAGED_TARGETS;
   for (const t of targets) {
-    const srcDir = path5.join(opts.sourceRoot, t.srcRel);
+    const srcDir = path6.join(opts.sourceRoot, t.srcRel);
     try {
-      if (!fs6.existsSync(srcDir))
+      if (!fs5.existsSync(srcDir))
         continue;
-      const destDir = path5.join(opts.runtimeRoot, t.name);
+      const destDir = path6.join(opts.runtimeRoot, t.name);
       if (t.mode === "tree") {
         mirrorDir(srcDir, destDir);
       } else if (t.mode === "flat") {
@@ -977,7 +1075,7 @@ function ensureRuntimeSynced(opts) {
 var CREW_SKILLS, MANAGED_TARGETS;
 var init_runtime_sync = __esm({
   "packages/shared/dist/lib/runtime-sync.js"() {
-    CREW_SKILLS = ["karpathy-principles"];
+    CREW_SKILLS = ["karpathy-principles", "takeover", "handback"];
     MANAGED_TARGETS = [
       { name: "plugin", srcRel: "plugin", mode: "tree" },
       { name: "plugin-crew", srcRel: "plugin", mode: "subset", skills: CREW_SKILLS },
@@ -1028,8 +1126,8 @@ var init_tool_compat = __esm({
 });
 
 // packages/shared/dist/lib/canonical-source.js
-import fs7 from "fs";
-import path6 from "path";
+import fs6 from "fs";
+import path7 from "path";
 function parseSkill(raw) {
   const match = raw.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/);
   if (!match)
@@ -1070,10 +1168,10 @@ async function readSkills(driver, skillsDir) {
 function readRoleTemplates(opts) {
   if (!opts.pkgRoot)
     return "";
-  const reader = opts.readFile ?? ((p) => fs7.readFileSync(p, "utf-8"));
+  const reader = opts.readFile ?? ((p) => fs6.readFileSync(p, "utf-8"));
   const sections = [];
   for (const { file, heading } of ROLE_TEMPLATES) {
-    const full = path6.join(opts.pkgRoot, "templates", file);
+    const full = path7.join(opts.pkgRoot, "templates", file);
     let body = "";
     try {
       body = reader(full);
@@ -1110,8 +1208,8 @@ var init_canonical_source = __esm({
 
 // packages/shared/dist/lib/daily-logs.js
 import { execSync } from "child_process";
-import fs8 from "fs";
-import path7 from "path";
+import fs7 from "fs";
+import path8 from "path";
 import matter from "gray-matter";
 function iso(d) {
   return d.toISOString().slice(0, 10);
@@ -1163,7 +1261,7 @@ function getGitCommits(projectPath, dateStr) {
 }
 function getGitCommitsInRange(projectPath, since, until) {
   const resolved = resolveHome(projectPath);
-  if (!fs8.existsSync(path7.join(resolved, ".git")))
+  if (!fs7.existsSync(path8.join(resolved, ".git")))
     return [];
   const untilArg = until ? ` --until="${until}"` : "";
   try {
@@ -1177,7 +1275,7 @@ function getGitCommitsInRange(projectPath, since, until) {
 }
 function getMergedPRsInRange(projectPath, since, until) {
   const resolved = resolveHome(projectPath);
-  if (!fs8.existsSync(path7.join(resolved, ".git")))
+  if (!fs7.existsSync(path8.join(resolved, ".git")))
     return [];
   const untilArg = until ? ` --until="${until}"` : "";
   try {
@@ -1237,6 +1335,7 @@ var init_daemon_keys = __esm({
 var dist_exports = {};
 __export(dist_exports, {
   AUTOMATION_MODE: () => AUTOMATION_MODE,
+  CONFIG_DIR: () => CONFIG_DIR,
   CREW_SKILLS: () => CREW_SKILLS,
   DEFAULT_CONFIG_PATH: () => DEFAULT_CONFIG_PATH,
   DEFAULT_NOTIFY: () => DEFAULT_NOTIFY,
@@ -1260,7 +1359,9 @@ __export(dist_exports, {
   defaultCmuxConfigPath: () => defaultCmuxConfigPath,
   defaultStatePath: () => defaultStatePath,
   detectDrift: () => detectDrift,
+  detectInstallManager: () => detectInstallManager,
   ensureCmuxAutoConfig: () => ensureCmuxAutoConfig,
+  ensureDirSync: () => ensureDirSync,
   ensureRuntimeSynced: () => ensureRuntimeSynced,
   ensureSocketAutomation: () => ensureSocketAutomation,
   ensureSpokeLayout: () => ensureSpokeLayout,
@@ -1279,6 +1380,7 @@ __export(dist_exports, {
   iso: () => iso,
   loadConfig: () => loadConfig,
   loadProjectOverride: () => loadProjectOverride,
+  migrateConfigPermsSync: () => migrateConfigPermsSync,
   mirrorDir: () => mirrorDir,
   mirrorFlat: () => mirrorFlat,
   needsCheck: () => needsCheck,
@@ -1286,6 +1388,7 @@ __export(dist_exports, {
   parseSection: () => parseSection,
   probeCmuxDaemonDirect: () => probeCmuxDaemonDirect,
   projectConfigPath: () => projectConfigPath,
+  readConfigFileSync: () => readConfigFileSync,
   readDailyLog: () => readDailyLog,
   readProjectLevelSource: () => readProjectLevelSource,
   readStamp: () => readStamp,
@@ -1302,7 +1405,9 @@ __export(dist_exports, {
   saveConfig: () => saveConfig,
   saveProjectOverride: () => saveProjectOverride,
   withStamp: () => withStamp,
+  worktreeDirtyFiles: () => worktreeDirtyFiles,
   worktreePath: () => worktreePath,
+  writeConfigFileSync: () => writeConfigFileSync,
   writeUpdateCheckState: () => writeUpdateCheckState
 });
 var init_dist = __esm({
@@ -1324,6 +1429,7 @@ var init_dist = __esm({
     init_config_drift();
     init_config_version();
     init_update_check();
+    init_config_io();
     init_git_worktree();
     init_resolve_text_input();
     init_runtime_sync();
@@ -1361,7 +1467,21 @@ function nextPendingMonitor(current, ev, now) {
 }
 function reduce(rec, ev, now) {
   if (ev.type === "task.reopened") {
-    return { ...rec, state: "working", question: void 0, error: void 0, lastHeartbeat: now, lastEvent: ev.type };
+    return { ...rec, state: "working", question: void 0, error: void 0, lastHeartbeat: now, lastEvent: ev.type, workingStretchStartedAt: now };
+  }
+  if (ev.type === "crew.takeover.started") {
+    if (rec.operatorHold)
+      return { ...rec, lastHeartbeat: now, lastEvent: ev.type };
+    return {
+      ...rec,
+      operatorHold: { since: now, ...ev.note !== void 0 ? { note: ev.note } : {} },
+      lastHeartbeat: now,
+      lastEvent: ev.type
+    };
+  }
+  if (ev.type === "crew.takeover.ended") {
+    const { operatorHold: _dropped, ...rest } = rec;
+    return { ...rest, lastHeartbeat: now, lastEvent: ev.type };
   }
   if (TERMINAL_STATES.has(rec.state))
     return rec;
@@ -1377,8 +1497,9 @@ function reduce(rec, ev, now) {
         // resuming after a blocked→reply clears the question
         pendingTool: void 0,
         // #354: a new turn closes any prior tool window
-        pendingMonitor: void 0
+        pendingMonitor: void 0,
         // #594a: same reset — a new turn moots any prior watch
+        workingStretchStartedAt: now
       };
     case "task.progress": {
       const pendingTool = nextPendingTool(rec.pendingTool, ev, now);
@@ -1549,6 +1670,8 @@ function firePush(deps, project, prev, next, event, lastCaptainTurnAt) {
     return;
   if (!ATTENTION_STATES.has(next.state))
     return;
+  if (next.operatorHold)
+    return;
   if (next.state === "awaiting-input" && lastCaptainTurnAt != null && deps.now() - lastCaptainTurnAt <= IDLE_DEBOUNCE_MS) {
     return;
   }
@@ -1757,9 +1880,32 @@ function createDaemon(deps) {
           store.delete(r.project, r.id);
           continue;
         }
+        if (r.operatorHold) {
+          const threshold = (deps.takeoverNudgeHours ?? 6) * 36e5;
+          const holdAge = t - r.operatorHold.since;
+          if (holdAge > threshold) {
+            const timeSinceLastNudge = t - (r.operatorHold.lastNudgeAt ?? 0);
+            if (timeSinceLastNudge > threshold) {
+              const hrs = Math.round(holdAge / 36e5);
+              const tag = crewTag(r);
+              const message = `CREW HELD-LONG ${tag} \u2014 held ${hrs}h. Ask the operator whether it is still in use. Do not release it yourself.`;
+              store.put({ ...r, operatorHold: { ...r.operatorHold, lastNudgeAt: t } });
+              if (deps.notify) {
+                try {
+                  const p = deps.notify({ project: r.project, message, record: r, event: { type: "task.progress", id: r.id } });
+                  if (p && typeof p.catch === "function")
+                    p.catch(() => {
+                    });
+                } catch {
+                }
+              }
+            }
+          }
+        }
         if (!TERMINAL_STATES.has(r.state) && !isStickyAttention(r.state)) {
           const ceiling = deps.taskTimeoutMs ?? DEFAULT_TASK_TIMEOUT_MS;
-          if (t - r.createdAt > ceiling) {
+          const refTime = r.workingStretchStartedAt ?? r.createdAt;
+          if (t - refTime > ceiling) {
             const prevState = r.state;
             const tag = crewTag(r);
             const hrs = Math.round(ceiling / 36e5);
@@ -1913,14 +2059,17 @@ var init_reduce = __esm({
       "task.reconcile-failed",
       "task.cancelled",
       "task.session.ended",
-      "task.first-turn.confirmed"
+      "task.first-turn.confirmed",
       // #466: delivery confirmation
+      "crew.takeover.started",
+      "crew.takeover.ended"
+      // #649: operator takeover
     ]);
   }
 });
 
 // packages/core/dist/mailbox.js
-import { promises as fs9 } from "fs";
+import { promises as fs8 } from "fs";
 import { join as join5 } from "path";
 import { randomUUID } from "crypto";
 function inboxDir(stateRoot) {
@@ -1937,7 +2086,7 @@ async function listRotatedOldestFirst(stateRoot, project) {
   const dir = inboxDir(stateRoot);
   let entries;
   try {
-    entries = await fs9.readdir(dir);
+    entries = await fs8.readdir(dir);
   } catch {
     return [];
   }
@@ -1946,7 +2095,7 @@ async function listRotatedOldestFirst(stateRoot, project) {
 }
 async function readMaxSeqFromFile(file) {
   try {
-    const buf = await fs9.readFile(file, "utf-8");
+    const buf = await fs8.readFile(file, "utf-8");
     if (!buf.trim())
       return 0;
     const lines = buf.trim().split("\n");
@@ -1987,12 +2136,12 @@ function withProjectLock(project, fn) {
 function appendEntry(stateRoot, project, build) {
   return withProjectLock(project, async () => {
     const dir = inboxDir(stateRoot);
-    await fs9.mkdir(dir, { recursive: true });
+    await fs8.mkdir(dir, { recursive: true });
     const file = logPath(stateRoot, project);
     const lastSeq = await readMaxSeq(stateRoot, project);
     const seq = lastSeq + 1;
     const entry = build(seq);
-    await fs9.appendFile(file, JSON.stringify(entry) + "\n", { encoding: "utf-8" });
+    await fs8.appendFile(file, JSON.stringify(entry) + "\n", { encoding: "utf-8" });
     return seq;
   });
 }
@@ -2023,7 +2172,7 @@ function cursorPath(stateRoot, project, subscriber) {
 async function readCursor(opts) {
   let buf;
   try {
-    buf = await fs9.readFile(cursorPath(opts.stateRoot, opts.project, opts.subscriber), "utf-8");
+    buf = await fs8.readFile(cursorPath(opts.stateRoot, opts.project, opts.subscriber), "utf-8");
   } catch (e) {
     if (e.code === "ENOENT")
       return null;
@@ -2050,7 +2199,7 @@ async function waitForCaptainDelivery(opts) {
   }
 }
 async function writeCursor(opts) {
-  await fs9.mkdir(inboxDir(opts.stateRoot), { recursive: true });
+  await fs8.mkdir(inboxDir(opts.stateRoot), { recursive: true });
   const dest = cursorPath(opts.stateRoot, opts.project, opts.subscriber);
   const tmp = `${dest}.${process.pid}.${randomUUID()}.tmp`;
   const data = {
@@ -2058,7 +2207,7 @@ async function writeCursor(opts) {
     subscriber: opts.subscriber,
     updatedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const handle = await fs9.open(tmp, "w");
+  const handle = await fs8.open(tmp, "w");
   try {
     await handle.writeFile(JSON.stringify(data), { encoding: "utf-8" });
     await handle.sync();
@@ -2066,9 +2215,9 @@ async function writeCursor(opts) {
     await handle.close();
   }
   try {
-    await fs9.rename(tmp, dest);
+    await fs8.rename(tmp, dest);
   } catch (e) {
-    await fs9.unlink(tmp).catch(() => {
+    await fs8.unlink(tmp).catch(() => {
     });
     throw e;
   }
@@ -2079,7 +2228,7 @@ async function* readFromCursor(opts) {
   for (const file of files) {
     let buf;
     try {
-      buf = await fs9.readFile(file, "utf-8");
+      buf = await fs8.readFile(file, "utf-8");
     } catch (e) {
       if (e.code === "ENOENT")
         continue;
@@ -2105,7 +2254,7 @@ async function mailboxStats(stateRoot, project) {
   let sizeBytes = 0;
   for (const f of [file, ...rotated]) {
     try {
-      sizeBytes += (await fs9.stat(f)).size;
+      sizeBytes += (await fs8.stat(f)).size;
     } catch (e) {
       if (e.code !== "ENOENT")
         throw e;
@@ -2121,7 +2270,7 @@ async function mailboxStats(stateRoot, project) {
 }
 async function oldestEntryAgeMs(file) {
   try {
-    const buf = await fs9.readFile(file, "utf-8");
+    const buf = await fs8.readFile(file, "utf-8");
     const firstLine2 = buf.split("\n").find((l) => l.trim());
     if (!firstLine2)
       return 0;
@@ -2136,7 +2285,7 @@ async function rotateIfNeeded(opts) {
     const file = logPath(opts.stateRoot, opts.project);
     let size = 0;
     try {
-      size = (await fs9.stat(file)).size;
+      size = (await fs8.stat(file)).size;
     } catch (e) {
       if (e.code === "ENOENT")
         return { rotated: false };
@@ -2152,22 +2301,22 @@ async function rotateIfNeeded(opts) {
       const dst = `${file}.${n + 1}`;
       if (n + 1 > opts.keepCount) {
         try {
-          await fs9.unlink(src);
+          await fs8.unlink(src);
         } catch (e) {
           if (e.code !== "ENOENT")
             throw e;
         }
       } else {
         try {
-          await fs9.rename(src, dst);
+          await fs8.rename(src, dst);
         } catch (e) {
           if (e.code !== "ENOENT")
             throw e;
         }
       }
     }
-    await fs9.rename(file, `${file}.1`);
-    await fs9.writeFile(file, "", { encoding: "utf-8" });
+    await fs8.rename(file, `${file}.1`);
+    await fs8.writeFile(file, "", { encoding: "utf-8" });
     return { rotated: true, from: file, to: `${file}.1` };
   });
 }
@@ -2180,7 +2329,7 @@ var init_mailbox = __esm({
 
 // packages/core/dist/protocol.js
 import { createServer, createConnection } from "net";
-import { existsSync as existsSync5, unlinkSync } from "fs";
+import { existsSync as existsSync5, unlinkSync, chmodSync } from "fs";
 function encodeMsg(obj) {
   return JSON.stringify(obj) + "\n";
 }
@@ -2293,6 +2442,12 @@ function startServer(sockPath, handlerOrCallbacks, onListenError = defaultListen
     });
   });
   server.on("error", onListenError);
+  server.on("listening", () => {
+    try {
+      chmodSync(sockPath, 384);
+    } catch {
+    }
+  });
   server.listen(sockPath);
   return server;
 }
@@ -2476,7 +2631,7 @@ var init_liveness2 = __esm({
 });
 
 // packages/core/dist/store.js
-import { mkdirSync as mkdirSync3, readFileSync as readFileSync5, readdirSync, renameSync, writeFileSync as writeFileSync4, existsSync as existsSync6, rmSync as rmSync3, statSync } from "fs";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync4, readdirSync, renameSync, writeFileSync as writeFileSync3, existsSync as existsSync6, rmSync as rmSync3, statSync } from "fs";
 import { join as join6, resolve, sep } from "path";
 function safeSegment(kind, s) {
   if (typeof s !== "string" || s.length === 0) {
@@ -2502,10 +2657,10 @@ function createStore(root) {
   const taskFile = (p, id) => assertUnderRoot(join6(projDir(p), `${safeSegment("id", id)}.json`));
   return {
     put(rec) {
-      mkdirSync3(projDir(rec.project), { recursive: true });
+      mkdirSync2(projDir(rec.project), { recursive: true });
       const dest = taskFile(rec.project, rec.id);
       const tmp = `${dest}.tmp`;
-      writeFileSync4(tmp, JSON.stringify(rec, null, 2));
+      writeFileSync3(tmp, JSON.stringify(rec, null, 2));
       renameSync(tmp, dest);
     },
     get(project, id) {
@@ -2513,7 +2668,7 @@ function createStore(root) {
       if (!existsSync6(f))
         return void 0;
       try {
-        return JSON.parse(readFileSync5(f, "utf-8"));
+        return JSON.parse(readFileSync4(f, "utf-8"));
       } catch {
         return void 0;
       }
@@ -2524,7 +2679,7 @@ function createStore(root) {
         return [];
       return readdirSync(d).filter((n) => n.endsWith(".json")).map((n) => {
         try {
-          return JSON.parse(readFileSync5(join6(d, n), "utf-8"));
+          return JSON.parse(readFileSync4(join6(d, n), "utf-8"));
         } catch {
           return void 0;
         }
@@ -2562,7 +2717,7 @@ var init_store = __esm({
 import { homedir as homedir4 } from "os";
 import { join as join7, resolve as resolve2, sep as sep2 } from "path";
 import { randomBytes } from "crypto";
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync6, readdirSync as readdirSync2, renameSync as renameSync2, writeFileSync as writeFileSync5, existsSync as existsSync7, rmSync as rmSync4, statSync as statSync2 } from "fs";
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync5, readdirSync as readdirSync2, renameSync as renameSync2, writeFileSync as writeFileSync4, existsSync as existsSync7, rmSync as rmSync4, statSync as statSync2 } from "fs";
 function defaultWorkRoot() {
   return join7(homedir4(), ".config", "squadrant", "work");
 }
@@ -2590,10 +2745,10 @@ function createWorkStore(root = defaultWorkRoot()) {
   const itemFile = (p, id) => assertUnderRoot(join7(projDir(p), `${safeSegment2("id", id)}.json`));
   return {
     put(item) {
-      mkdirSync4(projDir(item.project), { recursive: true });
+      mkdirSync3(projDir(item.project), { recursive: true });
       const dest = itemFile(item.project, item.id);
       const tmp = `${dest}.tmp`;
-      writeFileSync5(tmp, JSON.stringify(item, null, 2));
+      writeFileSync4(tmp, JSON.stringify(item, null, 2));
       renameSync2(tmp, dest);
     },
     get(project, id) {
@@ -2601,7 +2756,7 @@ function createWorkStore(root = defaultWorkRoot()) {
       if (!existsSync7(f))
         return void 0;
       try {
-        return JSON.parse(readFileSync6(f, "utf-8"));
+        return JSON.parse(readFileSync5(f, "utf-8"));
       } catch {
         return void 0;
       }
@@ -2612,7 +2767,7 @@ function createWorkStore(root = defaultWorkRoot()) {
         return [];
       return readdirSync2(d).filter((n) => n.endsWith(".json") && !n.endsWith(".json.tmp")).map((n) => {
         try {
-          return JSON.parse(readFileSync6(join7(d, n), "utf-8"));
+          return JSON.parse(readFileSync5(join7(d, n), "utf-8"));
         } catch {
           return void 0;
         }
@@ -2756,15 +2911,15 @@ var init_snapshot = __esm({
 
 // packages/core/dist/launchd.js
 import { execFileSync as execFileSync3 } from "child_process";
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync6, readFileSync as readFileSync7, existsSync as existsSync8, openSync, writeSync, closeSync, unlinkSync as unlinkSync2, constants } from "fs";
+import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync5, readFileSync as readFileSync6, existsSync as existsSync8, openSync, writeSync, closeSync, unlinkSync as unlinkSync2, constants } from "fs";
 import { homedir as homedir5 } from "os";
-import { dirname as dirname3, join as join8 } from "path";
+import { dirname as dirname2, join as join8 } from "path";
 import { fileURLToPath } from "url";
 function plistPath() {
   return join8(homedir5(), "Library", "LaunchAgents", `${LABEL}.plist`);
 }
 function daemonEntryPath() {
-  const p = join8(dirname3(fileURLToPath(import.meta.url)), "squadrantd.js");
+  const p = join8(dirname2(fileURLToPath(import.meta.url)), "squadrantd.js");
   if (!existsSync8(p)) {
     throw new Error(`daemonEntryPath: compiled entry not found at '${p}'; run 'npm run build' \u2014 a src-tree or missing path in the launchd plist causes a MODULE_NOT_FOUND crash-loop (#259)`);
   }
@@ -2773,10 +2928,28 @@ function daemonEntryPath() {
 function xmlEscape(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
-function sanitizePathForPlist(path34) {
+function xmlUnescape(s) {
+  return s.replace(/&quot;/g, '"').replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
+}
+function parseProgramArgs(plistXml) {
+  const m = plistXml.match(/<key>ProgramArguments<\/key>\s*<array><string>([^<]*)<\/string><string>([^<]*)<\/string><\/array>/);
+  if (!m)
+    return null;
+  return { nodeBin: xmlUnescape(m[1]), daemonEntry: xmlUnescape(m[2]) };
+}
+function detectForeignInstall(parsed, thisEntry, registeredEntryExists) {
+  if (!parsed)
+    return null;
+  if (parsed.daemonEntry === thisEntry)
+    return null;
+  if (!registeredEntryExists)
+    return null;
+  return { registeredEntry: parsed.daemonEntry, thisEntry };
+}
+function sanitizePathForPlist(path35) {
   const seen = /* @__PURE__ */ new Set();
   const stable = [];
-  for (const p of path34.split(":")) {
+  for (const p of path35.split(":")) {
     if (!p)
       continue;
     if (p.includes("/.claude/plugins/"))
@@ -2795,7 +2968,7 @@ function resolveAgentBinDirs() {
       const out = execFileSync3("which", [bin], { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] });
       const resolved = out.trim();
       if (resolved)
-        dirs.push(dirname3(resolved));
+        dirs.push(dirname2(resolved));
     } catch {
     }
   }
@@ -2857,7 +3030,7 @@ function tryAcquireDaemonLock() {
   const lp = daemonLockPath();
   if (existsSync8(lp)) {
     try {
-      const pid = parseInt(readFileSync7(lp, "utf-8").trim(), 10);
+      const pid = parseInt(readFileSync6(lp, "utf-8").trim(), 10);
       if (!Number.isFinite(pid) || pid <= 0) {
         unlinkSync2(lp);
       } else {
@@ -2894,17 +3067,19 @@ function computeDaemonDrift(nodeBin) {
   const p = plistPath();
   const entry = daemonEntryPath();
   const desired = renderPlist(nodeBin, entry, buildDaemonPath(process.env.PATH ?? ""));
-  const current = existsSync8(p) ? readFileSync7(p, "utf-8") : null;
+  const current = existsSync8(p) ? readFileSync6(p, "utf-8") : null;
   const uid = process.getuid?.() ?? 0;
   const target = `gui/${uid}/${LABEL}`;
   const changed = current !== desired;
   const programChanged = current !== null && changed && !current.includes(programArgsBlock(nodeBin, entry));
-  return { plistPath: p, target, desired, current, changed, programChanged };
+  const parsedCurrent = current !== null ? parseProgramArgs(current) : null;
+  const foreignInstall = detectForeignInstall(parsedCurrent, entry, parsedCurrent !== null && existsSync8(parsedCurrent.daemonEntry));
+  return { plistPath: p, target, desired, current, changed, programChanged, foreignInstall };
 }
 function applyDaemonDrift(drift) {
   if (drift.changed) {
-    mkdirSync5(dirname3(drift.plistPath), { recursive: true });
-    writeFileSync6(drift.plistPath, drift.desired);
+    mkdirSync4(dirname2(drift.plistPath), { recursive: true });
+    writeFileSync5(drift.plistPath, drift.desired);
   }
   if (drift.programChanged) {
     try {
@@ -2940,7 +3115,12 @@ function ensureDaemon(nodeBin = process.execPath, opts = {}) {
     return;
   }
   try {
-    applyDaemonDrift(computeDaemonDrift(nodeBin));
+    const drift = computeDaemonDrift(nodeBin);
+    if (drift.foreignInstall) {
+      process.stderr.write(printForeignInstallError(drift.foreignInstall));
+      return;
+    }
+    applyDaemonDrift(drift);
   } catch (e) {
     process.stderr.write(`[squadrant] warn: ensureDaemon failed (${e instanceof Error ? e.message : e})
 `);
@@ -2948,6 +3128,13 @@ function ensureDaemon(nodeBin = process.execPath, opts = {}) {
     releaseDaemonLock();
   }
 }
+function printForeignInstallError(foreign) {
+  return `[squadrant] refusing to restart the daemon: the registered launchd config belongs to a DIFFERENT squadrant install than this one.
+  registered install: ${foreign.registeredEntry}
+  this install:        ${foreign.thisEntry}
+  Two squadrant installs on this machine will keep fighting over the daemon (#670). Uninstall the one you don't use, then run \`squadrant heal daemon\` to reconcile.
+`;
+}
 function reregisterDaemon(nodeBin = process.execPath) {
   if (!tryAcquireDaemonLock())
     return;
@@ -3111,7 +3298,7 @@ var init_gate = __esm({
 });
 
 // packages/core/dist/daemon/liveness-registry.js
-import { writeFileSync as writeFileSync7, readFileSync as readFileSync8, renameSync as renameSync3 } from "fs";
+import { writeFileSync as writeFileSync6, readFileSync as readFileSync7, renameSync as renameSync3 } from "fs";
 var LivenessRegistry;
 var init_liveness_registry = __esm({
   "packages/core/dist/daemon/liveness-registry.js"() {
@@ -3125,13 +3312,13 @@ var init_liveness_registry = __esm({
         this.path = opts.path;
         this.readFile = opts.readFile ?? ((p) => {
           try {
-            return readFileSync8(p, "utf-8");
+            return readFileSync7(p, "utf-8");
           } catch {
             return void 0;
           }
         });
         this.writeFile = opts.writeFile ?? ((p, c) => {
-          writeFileSync7(`${p}.tmp`, c);
+          writeFileSync6(`${p}.tmp`, c);
           renameSync3(`${p}.tmp`, p);
         });
       }
@@ -3184,7 +3371,7 @@ var init_liveness_registry = __esm({
 import { homedir as homedir6 } from "os";
 import { join as join9 } from "path";
 import { spawn as realSpawn } from "child_process";
-import { writeFileSync as writeFileSync8, mkdirSync as mkdirSync6 } from "fs";
+import { writeFileSync as writeFileSync7, mkdirSync as mkdirSync5 } from "fs";
 function defaultIsPidAlive(pid) {
   try {
     process.kill(pid, 0);
@@ -3198,14 +3385,16 @@ function buildContext(opts) {
   const sockPath = opts.sockPath ?? join9(homedir6(), ".config", "squadrant", "squadrant.sock");
   const store = createStore(stateRoot);
   const bootedAt = Date.now();
-  const taskTimeoutMs = loadConfig().defaults.taskTimeoutMs;
+  const config = loadConfig();
+  const taskTimeoutMs = config.defaults.taskTimeoutMs;
+  const takeoverNudgeHours = config.defaults.takeoverNudgeHours;
   const isPidAlive = opts.isPidAlive ?? defaultIsPidAlive;
   const spawn2 = opts.spawn ?? realSpawn;
   const resultsDir = join9(stateRoot, "_results");
-  mkdirSync6(resultsDir, { recursive: true });
+  mkdirSync5(resultsDir, { recursive: true });
   const writeResult = (id, payload) => {
     const p = join9(resultsDir, `${id}.txt`);
-    writeFileSync8(p, payload);
+    writeFileSync7(p, payload);
     return p;
   };
   const log = (m) => process.stderr.write(`[squadrantd] ${(/* @__PURE__ */ new Date()).toISOString()} ${m}
@@ -3218,6 +3407,7 @@ function buildContext(opts) {
     bootedAt,
     lastSweepAt: { value: null },
     taskTimeoutMs,
+    takeoverNudgeHours,
     isPidAlive,
     spawn: spawn2,
     resultsDir,
@@ -3950,7 +4140,7 @@ var init_server = __esm({
 // packages/core/dist/daemon/snapshot-gather.js
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { join as join10 } from "path";
-import { statSync as statSync3, openSync as openSync2, readSync, closeSync as closeSync2, readdirSync as readdirSync3, readFileSync as readFileSync9 } from "fs";
+import { statSync as statSync3, openSync as openSync2, readSync, closeSync as closeSync2, readdirSync as readdirSync3, readFileSync as readFileSync8 } from "fs";
 function distBuiltAt() {
   try {
     return statSync3(SELF_PATH).mtimeMs;
@@ -3958,10 +4148,10 @@ function distBuiltAt() {
     return 0;
   }
 }
-function gatherLogStats(path34, now, windowMs) {
+function gatherLogStats(path35, now, windowMs) {
   let sizeBytes = 0;
   try {
-    sizeBytes = statSync3(path34).size;
+    sizeBytes = statSync3(path35).size;
   } catch {
     return { errorCount: 0, sizeBytes: 0, windowMs };
   }
@@ -3972,7 +4162,7 @@ function gatherLogStats(path34, now, windowMs) {
   const len = sizeBytes - start;
   let text = "";
   try {
-    const fd = openSync2(path34, "r");
+    const fd = openSync2(path35, "r");
     try {
       const buf = Buffer.alloc(len);
       readSync(fd, buf, 0, len, start);
@@ -4013,7 +4203,7 @@ function gatherStoreStats(store, stateRoot, project) {
       if (!n.endsWith(".json"))
         continue;
       try {
-        JSON.parse(readFileSync9(join10(dir, n), "utf-8"));
+        JSON.parse(readFileSync8(join10(dir, n), "utf-8"));
       } catch {
         corruptCount++;
       }
@@ -4048,7 +4238,7 @@ var init_snapshot_gather = __esm({
 });
 
 // packages/core/dist/daemon/start.js
-import { join as join11, dirname as dirname4 } from "path";
+import { join as join11, dirname as dirname3 } from "path";
 import { readdir } from "fs/promises";
 function startDaemon(ctx, opts, pkgVersion) {
   const { stateRoot, store, log, isPidAlive, resultsDir, taskTimeoutMs, inFlightHeadlessIds, activeHeadlessKills, broadcast, cancelPromotionsFor } = ctx;
@@ -4068,6 +4258,7 @@ function startDaemon(ctx, opts, pkgVersion) {
     isPidAlive,
     notify,
     taskTimeoutMs,
+    takeoverNudgeHours: ctx.takeoverNudgeHours,
     isSurfaceAlive: surfaceProbe,
     resendFirstTurn: ctx.resendFirstTurn,
     launchHeadless: opts.launchHeadless,
@@ -4123,7 +4314,7 @@ function startDaemon(ctx, opts, pkgVersion) {
     return out;
   }
   async function gatherSnapshotInputs(now) {
-    const logPath2 = join11(dirname4(stateRoot), "squadrantd.log");
+    const logPath2 = join11(dirname3(stateRoot), "squadrantd.log");
     const tier2Projects = opts.registeredProjects ?? Object.keys(loadConfig().projects);
     const projects = await Promise.all(tier2Projects.map(async (project) => {
       const cursor = await readCursor({ stateRoot, project, subscriber: CURSOR_SUBSCRIBER2 });
@@ -4328,35 +4519,33 @@ var init_start = __esm({
 
 // packages/core/dist/session-freshness.js
 import crypto from "crypto";
-import fs10 from "fs";
-import path8 from "path";
+import fs9 from "fs";
+import path9 from "path";
 function loadSessions(sessionsPath) {
   try {
-    return JSON.parse(fs10.readFileSync(sessionsPath, "utf-8"));
+    return JSON.parse(readConfigFileSync(sessionsPath));
   } catch {
     return { workspaces: {} };
   }
 }
 function saveSessions(sessionsPath, sessions) {
-  const dir = path8.dirname(sessionsPath);
-  fs10.mkdirSync(dir, { recursive: true });
-  fs10.writeFileSync(sessionsPath, JSON.stringify(sessions, null, 2) + "\n");
+  writeConfigFileSync(sessionsPath, JSON.stringify(sessions, null, 2) + "\n");
 }
 function computeTemplateHash(role, templatesDir) {
   const hash = crypto.createHash("sha256");
-  const roleFile = path8.join(templatesDir, `${role}.claude.md`);
-  const legacyRoleFile = path8.join(templatesDir, `${role}.CLAUDE.md`);
-  if (fs10.existsSync(roleFile)) {
-    hash.update(fs10.readFileSync(roleFile, "utf-8"));
-  } else if (fs10.existsSync(legacyRoleFile)) {
-    hash.update(fs10.readFileSync(legacyRoleFile, "utf-8"));
+  const roleFile = path9.join(templatesDir, `${role}.claude.md`);
+  const legacyRoleFile = path9.join(templatesDir, `${role}.CLAUDE.md`);
+  if (fs9.existsSync(roleFile)) {
+    hash.update(fs9.readFileSync(roleFile, "utf-8"));
+  } else if (fs9.existsSync(legacyRoleFile)) {
+    hash.update(fs9.readFileSync(legacyRoleFile, "utf-8"));
   }
-  const pluginSkillsDir = path8.join(templatesDir, "..", "plugin", "skills");
-  if (fs10.existsSync(pluginSkillsDir)) {
-    for (const skill of fs10.readdirSync(pluginSkillsDir).sort()) {
-      const skillFile = path8.join(pluginSkillsDir, skill, "SKILL.md");
-      if (fs10.existsSync(skillFile)) {
-        hash.update(fs10.readFileSync(skillFile, "utf-8"));
+  const pluginSkillsDir = path9.join(templatesDir, "..", "plugin", "skills");
+  if (fs9.existsSync(pluginSkillsDir)) {
+    for (const skill of fs9.readdirSync(pluginSkillsDir).sort()) {
+      const skillFile = path9.join(pluginSkillsDir, skill, "SKILL.md");
+      if (fs9.existsSync(skillFile)) {
+        hash.update(fs9.readFileSync(skillFile, "utf-8"));
       }
     }
   }
@@ -4388,6 +4577,7 @@ function recordSession(workspaceName, role, opts) {
 }
 var init_session_freshness = __esm({
   "packages/core/dist/session-freshness.js"() {
+    init_dist();
   }
 });
 
@@ -4777,17 +4967,16 @@ var init_format = __esm({
 });
 
 // packages/core/dist/telegram/state.js
-import fs11 from "fs";
-import path9 from "path";
+import path10 from "path";
 function statePath(stateRoot) {
-  return path9.join(stateRoot, "telegram-state.json");
+  return path10.join(stateRoot, "telegram-state.json");
 }
 function topicKey(project, scope = "project") {
   return `${project}::${scope}`;
 }
 function loadState(stateRoot) {
   try {
-    const raw = fs11.readFileSync(statePath(stateRoot), "utf-8");
+    const raw = readConfigFileSync(statePath(stateRoot));
     const data = JSON.parse(raw);
     const result = {
       offset: typeof data.offset === "number" ? data.offset : 0,
@@ -4802,8 +4991,7 @@ function loadState(stateRoot) {
   }
 }
 function saveState(stateRoot, s) {
-  fs11.mkdirSync(stateRoot, { recursive: true });
-  fs11.writeFileSync(statePath(stateRoot), JSON.stringify(s, null, 2) + "\n");
+  writeConfigFileSync(statePath(stateRoot), JSON.stringify(s, null, 2) + "\n");
 }
 function setTopic(stateRoot, project, topicId, scope = "project") {
   const s = loadState(stateRoot);
@@ -4837,6 +5025,7 @@ function findProjectByThread(stateRoot, threadId) {
 }
 var init_state = __esm({
   "packages/core/dist/telegram/state.js"() {
+    init_dist();
   }
 });
 
@@ -4988,7 +5177,7 @@ var init_tiers = __esm({
 
 // packages/core/dist/telegram/bridge.js
 import os4 from "os";
-import path10 from "path";
+import path11 from "path";
 function parseNotifyPref(text) {
   const parts = text.trim().split(/\s+/);
   if (stripBotMention(parts[0] ?? "").toLowerCase() !== "/notify")
@@ -5015,7 +5204,7 @@ function notifyToggle(text) {
 }
 function createTelegramBridge(opts) {
   const { cfg, stateRoot, client, appendCaptainMessage: appendCaptainMessage2, log, ensureCaptainAlive, runCommand, sendReply } = opts;
-  const configRoot = opts.configRoot ?? path10.join(os4.homedir(), ".config", "squadrant");
+  const configRoot = opts.configRoot ?? path11.join(os4.homedir(), ".config", "squadrant");
   const pollMs = cfg.pollMs ?? 1e3;
   let running = false;
   let lastSuccessfulPollAt = null;
@@ -5146,14 +5335,14 @@ function createTelegramBridge(opts) {
   }
   function currentEffort() {
     try {
-      return loadConfig(path10.join(configRoot, "config.json")).defaults.effort ?? "balance";
+      return loadConfig(path11.join(configRoot, "config.json")).defaults.effort ?? "balance";
     } catch {
       return "balance";
     }
   }
   function projectNames() {
     try {
-      return Object.keys(loadConfig(path10.join(configRoot, "config.json")).projects);
+      return Object.keys(loadConfig(path11.join(configRoot, "config.json")).projects);
     } catch {
       return [];
     }
@@ -5421,7 +5610,7 @@ var init_restart_daemon = __esm({
 });
 
 // packages/core/dist/telegram/setup.js
-import fs12 from "fs";
+import fs10 from "fs";
 function resolveSetupGroup(existingSupergroupId, opts) {
   if (existingSupergroupId !== void 0 && !opts.redetect)
     return "reuse";
@@ -5472,7 +5661,7 @@ function writeTelegramConfig(configPath, opts) {
   let config;
   let raw = null;
   try {
-    raw = fs12.readFileSync(configPath, "utf-8");
+    raw = fs10.readFileSync(configPath, "utf-8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       throw new Error(`refusing to overwrite unreadable config at ${configPath}: ${String(err)}`);
@@ -5500,10 +5689,11 @@ function writeTelegramConfig(configPath, opts) {
   if (remoteControl !== void 0)
     next.remoteControl = remoteControl;
   config.telegram = next;
-  fs12.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
+  writeConfigFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
 }
 var init_setup = __esm({
   "packages/core/dist/telegram/setup.js"() {
+    init_dist();
     init_state();
     init_bot_commands();
     init_restart_daemon();
@@ -5829,7 +6019,7 @@ var init_launch_workspace = __esm({
 });
 
 // packages/core/dist/side-session.js
-import fs13 from "fs";
+import fs11 from "fs";
 function sideTitleFor(project, name) {
   return `\u{1F5D2} ${project}:${name}`;
 }
@@ -5931,7 +6121,7 @@ async function runSideClose(runtime, workspaceId, project, name, projPath, workt
   await runtime.closePane(pane);
   if (projPath) {
     const wtPath = worktreePath(projPath, worktreeDir, project, name);
-    if (fs13.existsSync(wtPath)) {
+    if (fs11.existsSync(wtPath)) {
       try {
         removeWorktree(projPath, wtPath);
       } catch (e) {
@@ -5951,9 +6141,9 @@ var init_side_session = __esm({
 });
 
 // packages/core/dist/crew-spawn.js
-import fs14 from "fs";
+import fs12 from "fs";
 import os5 from "os";
-import path11 from "path";
+import path12 from "path";
 async function listCrewPanes(runtime, workspaceId, project) {
   const surfaces = await runtime.listSurfaces(workspaceId);
   return surfaces.filter((s) => s.title && isCrewTitle(project, s.title));
@@ -6008,18 +6198,23 @@ async function runCrewSpawn(input, config, deps) {
     }
   }
   const name = input.name ?? nextAutoName(existingTitles, input.project);
+  let base = "";
+  if (!input.shared) {
+    base = resolveWorktreeBase(proj.path);
+    deps.onBaseResolved?.(base);
+  }
   const spawnCwd = !input.shared ? addWorktree({
     repoRoot: proj.path,
     worktreeDir: config.defaults.worktreeDir ?? ".worktrees",
     project: input.project,
     name,
-    base: resolveWorktreeBase(proj.path)
+    base
   }) : proj.path;
   let firstTurnTask = input.task;
   if (input.taskFile && input.taskFile !== "-" && !input.shared) {
-    const absTaskFile = path11.resolve(input.taskFile);
-    const basename = path11.basename(absTaskFile);
-    fs14.copyFileSync(absTaskFile, path11.join(spawnCwd, basename));
+    const absTaskFile = path12.resolve(input.taskFile);
+    const basename = path12.basename(absTaskFile);
+    fs12.copyFileSync(absTaskFile, path12.join(spawnCwd, basename));
     firstTurnTask = `Read ./${basename} to get your task brief, then execute it.`;
   }
   const route = !input.agentExplicit && !input.model ? resolveCrewRoute(input.task, config) : null;
@@ -6032,8 +6227,8 @@ async function runCrewSpawn(input, config, deps) {
     throw new Error(`Unknown agent '${agentName}'. Known: claude, codex, gemini, opencode.`);
   }
   if (agentName === "codex") {
-    const codexRoleFile = path11.join(TEMPLATES_DIR, `crew.${agent.templateSuffix}.md`);
-    const roleInstructions = fs14.existsSync(codexRoleFile) ? fs14.readFileSync(codexRoleFile, "utf8") : void 0;
+    const codexRoleFile = path12.join(TEMPLATES_DIR, `crew.${agent.templateSuffix}.md`);
+    const roleInstructions = fs12.existsSync(codexRoleFile) ? fs12.readFileSync(codexRoleFile, "utf8") : void 0;
     return runCodexInteractiveSpawn({
       project: input.project,
       task: input.task,
@@ -6049,7 +6244,7 @@ async function runCrewSpawn(input, config, deps) {
       sendCodexFirstTurn: deps.sendCodexFirstTurn
     });
   }
-  const promptFile = path11.join(TEMPLATES_DIR, `crew.${agent.templateSuffix}.md`);
+  const promptFile = path12.join(TEMPLATES_DIR, `crew.${agent.templateSuffix}.md`);
   const interactive = agent.name === "claude" || agent.name === "opencode";
   const crewRole = config.defaults.roles?.crew;
   const configModel = crewRole && crewRole.agent === agent.name ? crewRole.model : void 0;
@@ -6181,7 +6376,7 @@ ${buildCompletionProtocol(rec.id, input.project)}`, preLaunchScreen, {
 function pickMostRecentTask(tasks) {
   return tasks.reduce((a, b) => (b.createdAt ?? 0) > (a.createdAt ?? 0) ? b : a);
 }
-async function runCrewSend(project, name, message, runtime, workspaceId, deps) {
+async function runCrewSend(project, name, message, runtime, workspaceId, deps, opts) {
   const crew = await findCrewPane(runtime, workspaceId, project, name);
   if (!crew) {
     throw new Error(`Crew '${name}' not found for ${project}. Run 'squadrant crew list ${project}'.`);
@@ -6190,9 +6385,17 @@ async function runCrewSend(project, name, message, runtime, workspaceId, deps) {
   if (deps.isBlockedByModal && await deps.isBlockedByModal(crew)) {
     throw new Error(blockedByModalMessage());
   }
+  let task;
   try {
     const matches = (await deps.listTasks(project)).filter((t) => t.name === name);
-    const task = matches.length > 0 ? pickMostRecentTask(matches) : void 0;
+    task = matches.length > 0 ? pickMostRecentTask(matches) : void 0;
+  } catch {
+  }
+  if (task && task.operatorHold && !opts?.force) {
+    const heldForMin = Math.round((Date.now() - task.operatorHold.since) / 6e4);
+    throw new Error(`Crew '${name}' is under operator takeover (held ${heldForMin}m${task.operatorHold.note ? `: ${task.operatorHold.note}` : ""}). The operator is working in that tab \u2014 sending a message disrupts their conversation. Ask them to run 'squadrant crew handback ${project} ${name}', or pass --force if they told you to.`);
+  }
+  try {
     if (task) {
       if (TERMINAL_STATES.has(task.state)) {
         await deps.emitEvent(project, { type: "task.reopened", id: task.id });
@@ -6218,23 +6421,60 @@ async function runCrewRead(project, name, runtime, workspaceId) {
   }
   return runtime.readPaneScreen(crew);
 }
-async function runCrewClose(project, name, runtime, workspaceId, deps) {
+function buildRecoveryHint(sessId, provider, worktreeCwd) {
+  if (!sessId || !worktreeCwd)
+    return "";
+  if (provider === "claude") {
+    const escaped = worktreeCwd.replace(/[^a-zA-Z0-9]/g, "-");
+    const transcriptPath = path12.join(os5.homedir(), ".claude", "projects", escaped, `${sessId}.jsonl`);
+    return `
+transcript: ${transcriptPath}
+resume:     claude --resume ${sessId}   (run from the worktree path above)
+`;
+  }
+  return "";
+}
+async function runCrewClose(project, name, runtime, workspaceId, deps, opts) {
   const sleep3 = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const projRoot = loadConfig().projects[project]?.path;
-  let taskId;
-  let worktreeCwd;
+  let matches = [];
   try {
-    let matches = (await deps.listTasks(project)).filter((t) => t.name === name);
+    matches = (await deps.listTasks(project)).filter((t) => t.name === name);
     for (let attempt = 0; attempt < CLOSE_LOOKUP_RETRIES && matches.length === 0; attempt++) {
       await sleep3(CLOSE_LOOKUP_RETRY_DELAY_MS);
       matches = (await deps.listTasks(project)).filter((t) => t.name === name);
     }
-    if (matches.length > 0) {
-      const primary = pickMostRecentTask(matches);
-      taskId = primary.id;
-      if (primary.cwd && projRoot && primary.cwd !== projRoot) {
-        worktreeCwd = primary.cwd;
-      }
+  } catch {
+  }
+  let taskId;
+  let worktreeCwd;
+  let sessId;
+  let provider;
+  if (matches.length > 0) {
+    const primary = pickMostRecentTask(matches);
+    taskId = primary.id;
+    sessId = primary.sessionId;
+    provider = primary.provider;
+    if (primary.cwd && projRoot && primary.cwd !== projRoot) {
+      worktreeCwd = primary.cwd;
+    }
+    if (primary.operatorHold && !opts?.force) {
+      const heldForMin = Math.round((Date.now() - primary.operatorHold.since) / 6e4);
+      throw new Error(`Crew '${name}' is under operator takeover (held ${heldForMin}m${primary.operatorHold.note ? `: ${primary.operatorHold.note}` : ""}). The operator is working in that tab \u2014 closing it kills their session and prunes the worktree. Ask them to run 'squadrant crew handback ${project} ${name}', or pass --force if they told you to.`);
+    }
+  }
+  if (worktreeCwd && projRoot) {
+    const dirty = worktreeDirtyFiles(worktreeCwd);
+    if (dirty.length > 0 && !opts?.force) {
+      const transcriptStr = buildRecoveryHint(sessId, provider, worktreeCwd);
+      throw new Error(`Worktree '${worktreeCwd}' has uncommitted files:
+${dirty.map((f) => `  ${f}`).join("\n")}
+Why are they uncommitted? Commit them, or pass --force to destroy them.
+${transcriptStr}`);
+    }
+  }
+  if (matches.length > 0) {
+    try {
       for (const task of matches) {
         if (!TERMINAL_STATES.has(task.state)) {
           await deps.emitEvent(project, { type: "task.cancelled", id: task.id, reason: "closed by captain" });
@@ -6243,8 +6483,8 @@ async function runCrewClose(project, name, runtime, workspaceId, deps) {
           await deps.closeCodexThread(task.id);
         }
       }
+    } catch {
     }
-  } catch {
   }
   const crew = await findCrewPane(runtime, workspaceId, project, name);
   if (crew) {
@@ -6257,12 +6497,16 @@ async function runCrewClose(project, name, runtime, workspaceId, deps) {
   }
   if (worktreeCwd && projRoot) {
     try {
-      removeWorktree(projRoot, worktreeCwd);
+      removeWorktree(projRoot, worktreeCwd, opts);
     } catch (e) {
       process.stderr.write(`(worktree remove failed: ${e.message})
 `);
     }
   }
+  const hint = buildRecoveryHint(sessId, provider, worktreeCwd);
+  if (hint) {
+    process.stdout.write(hint);
+  }
 }
 async function runCrewList(project, runtime, workspaceId) {
   const crews = await listCrewPanes(runtime, workspaceId, project);
@@ -6278,8 +6522,8 @@ var init_crew_spawn = __esm({
     init_crew_routing();
     init_crew_protocol();
     init_crew_lifecycle();
-    TEMPLATES_DIR = path11.join(os5.homedir(), ".config", "squadrant", "templates");
-    STATE_ROOT = path11.join(os5.homedir(), ".config", "squadrant", "state");
+    TEMPLATES_DIR = path12.join(os5.homedir(), ".config", "squadrant", "templates");
+    STATE_ROOT = path12.join(os5.homedir(), ".config", "squadrant", "state");
     CLOSE_LOOKUP_RETRIES = 3;
     CLOSE_LOOKUP_RETRY_DELAY_MS = 150;
   }
@@ -6377,6 +6621,7 @@ __export(dist_exports2, {
   deliverStartupPrompt: () => deliverStartupPrompt,
   deliverable: () => deliverable,
   deriveCaptainState: () => deriveCaptainState,
+  detectForeignInstall: () => detectForeignInstall,
   detectGroupAndUser: () => detectGroupAndUser,
   detectGroupId: () => detectGroupId,
   discoverCaptainSurface: () => discoverCaptainSurface,
@@ -6416,7 +6661,9 @@ __export(dist_exports2, {
   notifyToggle: () => notifyToggle,
   parseCommand: () => parseCommand,
   parseNotifyPref: () => parseNotifyPref,
+  parseProgramArgs: () => parseProgramArgs,
   plistPath: () => plistPath,
+  printForeignInstallError: () => printForeignInstallError,
   programArgsBlock: () => programArgsBlock,
   projectHealth: () => projectHealth,
   purgeExpiredWorkItems: () => purgeExpiredWorkItems,
@@ -7168,13 +7415,13 @@ var init_notifiers = __esm({
 });
 
 // packages/workspaces/dist/workspaces/obsidian.js
-import fs15 from "fs/promises";
+import fs13 from "fs/promises";
 import { existsSync as existsSync10 } from "fs";
-import path12 from "path";
+import path13 from "path";
 function resolveInRoot(root, relative) {
-  const joined = path12.resolve(root, relative);
-  const normalized = path12.resolve(root) + path12.sep;
-  if (joined !== path12.resolve(root) && !joined.startsWith(normalized)) {
+  const joined = path13.resolve(root, relative);
+  const normalized = path13.resolve(root) + path13.sep;
+  if (joined !== path13.resolve(root) && !joined.startsWith(normalized)) {
     throw new Error(`Path '${relative}' escapes workspace root`);
   }
   return joined;
@@ -7193,16 +7440,16 @@ function createObsidianDriver(scope) {
       };
     },
     async read(rel) {
-      return fs15.readFile(resolveInRoot(root, rel), "utf-8");
+      return fs13.readFile(resolveInRoot(root, rel), "utf-8");
     },
     async write(rel, content) {
       const abs = resolveInRoot(root, rel);
-      await fs15.mkdir(path12.dirname(abs), { recursive: true });
-      await fs15.writeFile(abs, content);
+      await fs13.mkdir(path13.dirname(abs), { recursive: true });
+      await fs13.writeFile(abs, content);
     },
     async exists(rel) {
       try {
-        await fs15.access(resolveInRoot(root, rel));
+        await fs13.access(resolveInRoot(root, rel));
         return true;
       } catch {
         return false;
@@ -7210,13 +7457,13 @@ function createObsidianDriver(scope) {
     },
     async list(rel) {
       try {
-        return await fs15.readdir(resolveInRoot(root, rel));
+        return await fs13.readdir(resolveInRoot(root, rel));
       } catch {
         return [];
       }
     },
     async mkdir(rel) {
-      await fs15.mkdir(resolveInRoot(root, rel), { recursive: true });
+      await fs13.mkdir(resolveInRoot(root, rel), { recursive: true });
     }
   };
 }
@@ -7480,7 +7727,7 @@ var init_store_fingerprint = __esm({
 });
 
 // packages/workspaces/dist/cmux-daemon/daemon-cmux.js
-import { readdirSync as readdirSync4, readFileSync as readFileSync10 } from "fs";
+import { readdirSync as readdirSync4, readFileSync as readFileSync9 } from "fs";
 import { join as join14 } from "path";
 import { homedir as homedir9 } from "os";
 var DaemonCmux;
@@ -7553,7 +7800,7 @@ var init_daemon_cmux = __esm({
         } catch (e) {
           throw new Error(`liveness: could not read cmux state dir ${dir}: ${e.message}`);
         }
-        return readLivenessSnapshot(files, (f) => readFileSync10(join14(dir, f), "utf-8"), projects);
+        return readLivenessSnapshot(files, (f) => readFileSync9(join14(dir, f), "utf-8"), projects);
       }
     };
   }
@@ -7562,7 +7809,7 @@ var init_daemon_cmux = __esm({
 // packages/workspaces/dist/cmux-daemon/cmux-store-source.js
 import { join as join15 } from "path";
 import { homedir as homedir10 } from "os";
-import { watch, readdirSync as readdirSync5, readFileSync as readFileSync11, existsSync as existsSync11 } from "fs";
+import { watch, readdirSync as readdirSync5, readFileSync as readFileSync10, existsSync as existsSync11 } from "fs";
 function parseLifecycleState(s) {
   if (s === "running" || s === "idle" || s === "needsInput" || s === "unknown") {
     return s;
@@ -7584,9 +7831,9 @@ function defaultListFiles(dir) {
     return [];
   }
 }
-function defaultReadFile(path34) {
+function defaultReadFile(path35) {
   try {
-    return readFileSync11(path34, "utf-8");
+    return readFileSync10(path35, "utf-8");
   } catch {
     return void 0;
   }
@@ -7740,7 +7987,7 @@ var init_cmux_store_source = __esm({
 // packages/workspaces/dist/native-hooks/native-hook-source.js
 import { join as join16 } from "path";
 import { homedir as homedir11 } from "os";
-import { mkdirSync as mkdirSync7, readFileSync as readFileSync12, writeFileSync as writeFileSync9 } from "fs";
+import { mkdirSync as mkdirSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync8 } from "fs";
 function installClaudeHooks(opts = {}) {
   const settingsPath = opts.settingsPath ?? join16(homedir11(), ".claude", "settings.json");
   const hookCmd = opts.hookCmd ?? DEFAULT_HOOK_CMD;
@@ -7836,16 +8083,16 @@ function extractDetail(sub, payload) {
   }
   return void 0;
 }
-function defaultReadFile2(path34) {
+function defaultReadFile2(path35) {
   try {
-    return readFileSync12(path34, "utf-8");
+    return readFileSync11(path35, "utf-8");
   } catch {
     return void 0;
   }
 }
-function defaultWriteFile(path34, content) {
-  mkdirSync7(path34.replace(/\/[^/]+$/, ""), { recursive: true });
-  writeFileSync9(path34, content, "utf-8");
+function defaultWriteFile(path35, content) {
+  mkdirSync6(path35.replace(/\/[^/]+$/, ""), { recursive: true });
+  writeFileSync8(path35, content, "utf-8");
 }
 var CLAUDE_HOOK_EVENTS, DEFAULT_HOOK_CMD, NativeHookSource;
 var init_native_hook_source = __esm({
@@ -8464,8 +8711,8 @@ var init_registry4 = __esm({
 });
 
 // packages/agents/dist/drivers/launch-cmd.js
-import fs16 from "fs";
-import path13 from "path";
+import fs14 from "fs";
+import path14 from "path";
 function buildAgentCmd(agentName, registry, role, fresh, permissionMode, model, templatesDir) {
   const driver = registry.getDriver(agentName);
   if (driver.name === "claude") {
@@ -8481,27 +8728,27 @@ function buildAgentCmd(agentName, registry, role, fresh, permissionMode, model,
       cmd += ` --model ${model}`;
     }
     if (templatesDir) {
-      const roleFile2 = path13.join(templatesDir, `${role}.claude.md`);
-      const legacyRoleFile = path13.join(templatesDir, `${role}.CLAUDE.md`);
-      const actualRoleFile = fs16.existsSync(roleFile2) ? roleFile2 : fs16.existsSync(legacyRoleFile) ? legacyRoleFile : null;
+      const roleFile2 = path14.join(templatesDir, `${role}.claude.md`);
+      const legacyRoleFile = path14.join(templatesDir, `${role}.CLAUDE.md`);
+      const actualRoleFile = fs14.existsSync(roleFile2) ? roleFile2 : fs14.existsSync(legacyRoleFile) ? legacyRoleFile : null;
       if (actualRoleFile) {
         cmd += ` --append-system-prompt-file ${actualRoleFile}`;
       }
-      const pluginDir = path13.join(templatesDir, "..", "plugin");
-      if (fs16.existsSync(pluginDir)) {
+      const pluginDir = path14.join(templatesDir, "..", "plugin");
+      if (fs14.existsSync(pluginDir)) {
         cmd += ` --plugin-dir ${pluginDir}`;
       }
     }
     return cmd;
   }
-  const roleFile = templatesDir ? path13.join(templatesDir, `${role}.${driver.templateSuffix}.md`) : void 0;
+  const roleFile = templatesDir ? path14.join(templatesDir, `${role}.${driver.templateSuffix}.md`) : void 0;
   return driver.buildCommand({
     prompt: `You are a squadrant ${role}. Read your instructions from ${roleFile ?? role} and begin.`,
     workdir: process.cwd(),
     role,
     model,
     autoApprove: true,
-    promptFile: roleFile && fs16.existsSync(roleFile) ? roleFile : void 0
+    promptFile: roleFile && fs14.existsSync(roleFile) ? roleFile : void 0
   });
 }
 var init_launch_cmd = __esm({
@@ -8524,7 +8771,7 @@ var init_drivers = __esm({
 
 // packages/agents/dist/projection/cursor.js
 import { mkdir, readFile, writeFile } from "fs/promises";
-import path14 from "path";
+import path15 from "path";
 import os6 from "os";
 function renderMdc(source) {
   const skillSections = source.skills.map((s) => `## Skill: ${s.name}
@@ -8573,7 +8820,7 @@ function createCursorEmitter() {
       if (scope === "user") {
         return [
           {
-            path: path14.join(os6.homedir(), ".cursor/rules/squadrant-global.mdc"),
+            path: path15.join(os6.homedir(), ".cursor/rules/squadrant-global.mdc"),
             shared: false,
             format: "mdc"
           }
@@ -8583,7 +8830,7 @@ function createCursorEmitter() {
         return [];
       return [
         {
-          path: path14.join(projectRoot, ".cursor/rules/squadrant.mdc"),
+          path: path15.join(projectRoot, ".cursor/rules/squadrant.mdc"),
           shared: false,
           format: "mdc"
         }
@@ -8600,7 +8847,7 @@ function createCursorEmitter() {
           diff: buildDiff(existing, generated)
         };
       }
-      await mkdir(path14.dirname(dest.path), { recursive: true });
+      await mkdir(path15.dirname(dest.path), { recursive: true });
       await writeFile(dest.path, generated, "utf-8");
       return {
         written: true,
@@ -8651,7 +8898,7 @@ var init_marker = __esm({
 
 // packages/agents/dist/projection/codex.js
 import { mkdir as mkdir2, readFile as readFile2, writeFile as writeFile2 } from "fs/promises";
-import path15 from "path";
+import path16 from "path";
 import os7 from "os";
 function renderMarkdown(source) {
   const skillSections = source.skills.map((s) => `## Skill: ${s.name}
@@ -8676,7 +8923,7 @@ function createCodexEmitter() {
     destinations(scope, projectRoot) {
       if (scope === "user") {
         return [{
-          path: path15.join(os7.homedir(), ".codex/AGENTS.md"),
+          path: path16.join(os7.homedir(), ".codex/AGENTS.md"),
           shared: true,
           format: "markdown"
         }];
@@ -8684,7 +8931,7 @@ function createCodexEmitter() {
       if (!projectRoot)
         return [];
       return [{
-        path: path15.join(projectRoot, "AGENTS.md"),
+        path: path16.join(projectRoot, "AGENTS.md"),
         shared: true,
         format: "markdown"
       }];
@@ -8705,7 +8952,7 @@ ${existing ?? ""}
 ${generated}`
         };
       }
-      await mkdir2(path15.dirname(dest.path), { recursive: true });
+      await mkdir2(path16.dirname(dest.path), { recursive: true });
       await writeFile2(dest.path, generated, "utf-8");
       return {
         written: true,
@@ -8723,7 +8970,7 @@ var init_codex2 = __esm({
 
 // packages/agents/dist/projection/gemini.js
 import { mkdir as mkdir3, readFile as readFile3, writeFile as writeFile3 } from "fs/promises";
-import path16 from "path";
+import path17 from "path";
 import os8 from "os";
 function renderMarkdown2(source) {
   const skillSections = source.skills.map((s) => `## Skill: ${s.name}
@@ -8748,7 +8995,7 @@ function createGeminiEmitter() {
     destinations(scope, projectRoot) {
       if (scope === "user") {
         return [{
-          path: path16.join(os8.homedir(), ".gemini/GEMINI.md"),
+          path: path17.join(os8.homedir(), ".gemini/GEMINI.md"),
           shared: true,
           format: "markdown"
         }];
@@ -8756,7 +9003,7 @@ function createGeminiEmitter() {
       if (!projectRoot)
         return [];
       return [{
-        path: path16.join(projectRoot, "GEMINI.md"),
+        path: path17.join(projectRoot, "GEMINI.md"),
         shared: true,
         format: "markdown"
       }];
@@ -8777,7 +9024,7 @@ ${existing ?? ""}
 ${generated}`
         };
       }
-      await mkdir3(path16.dirname(dest.path), { recursive: true });
+      await mkdir3(path17.dirname(dest.path), { recursive: true });
       await writeFile3(dest.path, generated, "utf-8");
       return {
         written: true,
@@ -8795,7 +9042,7 @@ var init_gemini2 = __esm({
 
 // packages/agents/dist/projection/opencode.js
 import { mkdir as mkdir4, readFile as readFile4, writeFile as writeFile4 } from "fs/promises";
-import path17 from "path";
+import path18 from "path";
 import os9 from "os";
 function renderMarkdown3(source) {
   const skillSections = source.skills.map((s) => `## Skill: ${s.name}
@@ -8820,7 +9067,7 @@ function createOpencodeEmitter() {
     destinations(scope, projectRoot) {
       if (scope === "user") {
         return [{
-          path: path17.join(os9.homedir(), ".config", "opencode", "AGENTS.md"),
+          path: path18.join(os9.homedir(), ".config", "opencode", "AGENTS.md"),
           shared: true,
           format: "markdown"
         }];
@@ -8828,7 +9075,7 @@ function createOpencodeEmitter() {
       if (!projectRoot)
         return [];
       return [{
-        path: path17.join(projectRoot, "AGENTS.md"),
+        path: path18.join(projectRoot, "AGENTS.md"),
         shared: true,
         format: "markdown"
       }];
@@ -8849,7 +9096,7 @@ ${existing ?? ""}
 ${generated}`
         };
       }
-      await mkdir4(path17.dirname(dest.path), { recursive: true });
+      await mkdir4(path18.dirname(dest.path), { recursive: true });
       await writeFile4(dest.path, generated, "utf-8");
       return {
         written: true,
@@ -9708,7 +9955,7 @@ var init_sse_bridge = __esm({
 
 // packages/agents/dist/interactive/claude.js
 import { execSync as execSync7 } from "child_process";
-import { readFileSync as readFileSync13 } from "fs";
+import { readFileSync as readFileSync12 } from "fs";
 import { homedir as homedir14 } from "os";
 import { join as join19 } from "path";
 function probeClaudeSettingsFlag() {
@@ -9772,7 +10019,7 @@ function deriveTranscriptPath(sessionId, cwd) {
 }
 function readLastAssistantText(transcriptPath) {
   try {
-    const raw = readFileSync13(transcriptPath, "utf-8");
+    const raw = readFileSync12(transcriptPath, "utf-8");
     const lines = raw.split(/\r?\n/);
     for (let i = lines.length - 1; i >= 0; i--) {
       const line = lines[i].trim();
@@ -9814,8 +10061,8 @@ function resolveLastAssistantText(payload) {
   const derived = deriveTranscriptPath(p?.session_id, cwd);
   if (derived)
     candidates.push(derived);
-  for (const path34 of candidates) {
-    const text = readLastAssistantText(path34);
+  for (const path35 of candidates) {
+    const text = readLastAssistantText(path35);
     if (text != null)
       return text;
   }
@@ -10269,8 +10516,8 @@ var require_daemon_exports = {};
 __export(require_daemon_exports, {
   requireDaemon: () => requireDaemon
 });
-import { join as join25 } from "path";
-import { homedir as homedir20 } from "os";
+import { join as join22 } from "path";
+import { homedir as homedir17 } from "os";
 async function requireDaemon(sockPath = DEFAULT_SOCK_PATH3) {
   const isLive = await isDaemonSocketLive(sockPath);
   if (!isLive) {
@@ -10281,89 +10528,250 @@ var DEFAULT_SOCK_PATH3;
 var init_require_daemon = __esm({
   "packages/cli/src/lib/require-daemon.ts"() {
     init_dist2();
-    DEFAULT_SOCK_PATH3 = join25(homedir20(), ".config", "squadrant", "squadrant.sock");
+    DEFAULT_SOCK_PATH3 = join22(homedir17(), ".config", "squadrant", "squadrant.sock");
   }
 });
 
-// packages/cli/src/index.ts
-init_dist();
-init_dist2();
-import { Command as Command35 } from "commander";
-import { readFileSync as readFileSync16, existsSync as existsSync13, writeFileSync as writeFileSync12 } from "fs";
-import { fileURLToPath as fileURLToPath6 } from "url";
-import { dirname as dirname9, join as join30 } from "path";
-import { homedir as homedir22 } from "os";
-
-// packages/cli/src/commands/doctor.ts
-init_dist();
-init_dist();
-init_dist();
-init_dist3();
-import { Command } from "commander";
-import { execSync as execSync8 } from "child_process";
-import fs17 from "fs";
-import { stat } from "fs/promises";
-import path18 from "path";
-import chalk3 from "chalk";
-
-// packages/cli/src/commands/health-view.ts
-init_dist2();
-init_dist2();
-import { homedir as homedir12 } from "os";
-import { join as join17 } from "path";
-import chalk2 from "chalk";
-var SOCK = join17(homedir12(), ".config", "squadrant", "squadrant.sock");
-async function queryHealth(project) {
-  try {
-    const reply = await sendRequest(SOCK, { kind: "health", project });
-    return Array.isArray(reply) ? reply : [];
-  } catch {
-    return null;
-  }
+// packages/cli/src/commands/runtime.ts
+var runtime_exports = {};
+__export(runtime_exports, {
+  buildRegistry: () => buildRegistry,
+  needRef: () => needRef,
+  resolveTarget: () => resolveTarget,
+  runRuntimeSend: () => runRuntimeSend,
+  runtimeCommand: () => runtimeCommand
+});
+import { Command as Command8 } from "commander";
+import chalk9 from "chalk";
+function buildRegistry() {
+  return new RuntimeRegistry({
+    cmux: createCmuxDriver()
+  });
 }
-function healthIcon(state) {
-  switch (state) {
-    case "alive":
-      return "\u2714";
-    case "stale":
-      return "\u2022";
-    case "gone":
-      return "\u2718";
-    case "stopped":
-      return "\u23FB";
-    case "unknown":
-      return "\u25CB";
+function resolveTarget(registry, config, target, useCommand) {
+  if (useCommand) {
+    return {
+      driver: registry.global(config),
+      workspaceName: config.commandName
+    };
   }
-}
-function colorState(state) {
-  switch (state) {
-    case "alive":
-      return chalk2.green(state);
-    case "stale":
-      return chalk2.yellow(state);
-    case "gone":
-      return chalk2.red(state);
-    // stopped = intentional shutdown, not a fault — magenta, never alarm-red.
-    case "stopped":
-      return chalk2.magenta(state);
-    case "unknown":
-      return chalk2.dim(state);
+  if (!target) {
+    throw new Error("Missing target: pass a project name or use --command");
   }
+  const proj = config.projects[target];
+  if (!proj) {
+    throw new Error(`Project '${target}' not found. Run 'squadrant projects list'.`);
+  }
+  return {
+    driver: registry.forProject(target, config),
+    workspaceName: proj.captainName
+  };
 }
-function healthRow(c, now) {
-  const head = `${healthIcon(c.state)} ${c.kind.padEnd(8)} ${c.ref.padEnd(16)} ${c.state.padEnd(8)} ${ageText(c.lastSeenMs, now)}`;
-  return c.detail ? `${head}  ${c.detail}` : head;
-}
-function printServiceHealth(rows, now = Date.now()) {
-  console.log(chalk2.bold("\nService Health\n"));
-  if (rows == null) {
-    console.log(`  ${chalk2.red("\u2718")} daemon unreachable \u2014 squadrant liveness is unknown`);
-    console.log(`         ${chalk2.cyan("\u2192")} ${chalk2.dim("Run: squadrant heal daemon")}`);
-    return;
+async function needRef(resolved) {
+  const ref = await resolved.driver.status(resolved.workspaceName);
+  if (!ref) {
+    throw new Error(`Workspace '${resolved.workspaceName}' is not running`);
   }
-  if (rows.length === 0) {
-    console.log(chalk2.dim("  no registered projects"));
-    return;
+  return ref.id;
+}
+async function runRuntimeSend(arg1, arg2, opts, confirmOpts) {
+  const config = loadConfig();
+  const registry = buildRegistry();
+  if (opts.command && arg2 !== void 0) {
+    throw new Error("With --command, pass only the message (not a project name)");
+  }
+  const target = opts.command ? void 0 : arg1;
+  const message = opts.command ? arg1 : arg2;
+  if (!message) throw new Error("Message is required");
+  const { requireDaemon: requireDaemon2 } = await Promise.resolve().then(() => (init_require_daemon(), require_daemon_exports));
+  const { appendCaptainMessage: appendCaptainMessage2, waitForCaptainDelivery: waitForCaptainDelivery2 } = await Promise.resolve().then(() => (init_dist2(), dist_exports2));
+  await requireDaemon2();
+  const resolved = resolveTarget(registry, config, target, !!opts.command);
+  await needRef(resolved);
+  const finalProject = opts.command ? config.commandName : target;
+  const { join: join31, dirname: dirname9 } = await import("path");
+  const { DEFAULT_CONFIG_PATH: DEFAULT_CONFIG_PATH2 } = await Promise.resolve().then(() => (init_dist(), dist_exports));
+  const stateRoot = join31(dirname9(DEFAULT_CONFIG_PATH2), "state");
+  const seq = await appendCaptainMessage2({
+    stateRoot,
+    project: finalProject,
+    text: message,
+    source: "cli"
+  });
+  const timeoutMs = confirmOpts?.timeoutMs ?? SEND_CONFIRM_TIMEOUT_MS;
+  const delivered = await waitForCaptainDelivery2({
+    stateRoot,
+    project: finalProject,
+    seq,
+    timeoutMs,
+    pollMs: confirmOpts?.pollMs ?? SEND_CONFIRM_POLL_MS
+  });
+  if (!delivered) {
+    throw new Error(
+      `Message queued for '${finalProject}' (seq=${seq}) but delivery was not confirmed within ${Math.round(timeoutMs / 1e3)}s. It may still be pending \u2014 check with 'squadrant runtime read-screen ${finalProject}${opts.command ? " --command" : ""}'.`
+    );
+  }
+}
+var runtimeCommand, SEND_CONFIRM_TIMEOUT_MS, SEND_CONFIRM_POLL_MS;
+var init_runtime2 = __esm({
+  "packages/cli/src/commands/runtime.ts"() {
+    init_dist();
+    init_dist3();
+    runtimeCommand = new Command8("runtime").description("Interact with the runtime layer (workspaces). Bridges bash scripts to the RuntimeDriver.");
+    runtimeCommand.command("status").description("Print 'running' or 'stopped' for a target; exit 0 if running, 1 if not").argument("[target]", "Project name").option("--command", "Target the command workspace instead of a project captain").action(async (target, opts) => {
+      const config = loadConfig();
+      const registry = buildRegistry();
+      try {
+        const resolved = resolveTarget(registry, config, target, !!opts.command);
+        const ref = await resolved.driver.status(resolved.workspaceName);
+        if (ref) {
+          console.log("running");
+          process.exit(0);
+        } else {
+          console.log("stopped");
+          process.exit(1);
+        }
+      } catch (err) {
+        console.error(chalk9.red(err.message));
+        process.exit(2);
+      }
+    });
+    SEND_CONFIRM_TIMEOUT_MS = 15e3;
+    SEND_CONFIRM_POLL_MS = 500;
+    runtimeCommand.command("send").description("Send a message to a target workspace AND commit with Enter. With --command, the first positional is the message.").argument("<arg1>", "Project name, or the message when --command is used").argument("[arg2]", "Message (when target is a project). Omit when using --command.").option("--command", "Target the command workspace").action(async (arg1, arg2, opts) => {
+      try {
+        await runRuntimeSend(arg1, arg2, opts);
+        console.log(chalk9.green("\u2714 Delivered (confirmed)"));
+      } catch (err) {
+        console.error(chalk9.red(err.message));
+        process.exit(1);
+      }
+    });
+    runtimeCommand.command("list").description("List all workspaces from the global runtime").option("-j, --json", "Output as JSON").action(async (opts) => {
+      const config = loadConfig();
+      const registry = buildRegistry();
+      const driver = registry.global(config);
+      const refs = await driver.list();
+      if (opts.json) {
+        console.log(JSON.stringify(refs, null, 2));
+      } else {
+        for (const r of refs) {
+          console.log(`${r.id}	${r.name}	${r.status}`);
+        }
+      }
+    });
+    runtimeCommand.command("read-screen").description("Print a terminal snapshot of a target workspace").argument("[target]", "Project name").option("--command", "Target the command workspace").action(async (target, opts) => {
+      const config = loadConfig();
+      const registry = buildRegistry();
+      try {
+        const resolved = resolveTarget(registry, config, target, !!opts.command);
+        const ref = await needRef(resolved);
+        const screen = await resolved.driver.readScreen(ref);
+        process.stdout.write(screen);
+      } catch (err) {
+        console.error(chalk9.red(err.message));
+        process.exit(1);
+      }
+    });
+    runtimeCommand.command("stop").description("Stop a target workspace").argument("[target]", "Project name").option("--command", "Target the command workspace").action(async (target, opts) => {
+      const config = loadConfig();
+      const registry = buildRegistry();
+      try {
+        const resolved = resolveTarget(registry, config, target, !!opts.command);
+        const ref = await resolved.driver.status(resolved.workspaceName);
+        if (!ref) {
+          console.log(chalk9.yellow(`Workspace '${resolved.workspaceName}' already stopped`));
+          return;
+        }
+        await resolved.driver.stop(ref.id);
+        console.log(chalk9.green(`\u2714 Stopped ${resolved.workspaceName}`));
+      } catch (err) {
+        console.error(chalk9.red(err.message));
+        process.exit(1);
+      }
+    });
+  }
+});
+
+// packages/cli/src/index.ts
+init_dist();
+init_dist2();
+import { Command as Command35 } from "commander";
+import { existsSync as existsSync13, readFileSync as readFileSync15 } from "fs";
+import { fileURLToPath as fileURLToPath6 } from "url";
+import { dirname as dirname8, join as join30 } from "path";
+import { homedir as homedir22 } from "os";
+
+// packages/cli/src/commands/doctor.ts
+init_dist();
+init_dist();
+init_dist();
+init_dist3();
+import { Command } from "commander";
+import { execSync as execSync8 } from "child_process";
+import fs15 from "fs";
+import { stat } from "fs/promises";
+import path19 from "path";
+import chalk3 from "chalk";
+
+// packages/cli/src/commands/health-view.ts
+init_dist2();
+init_dist2();
+import { homedir as homedir12 } from "os";
+import { join as join17 } from "path";
+import chalk2 from "chalk";
+var SOCK = join17(homedir12(), ".config", "squadrant", "squadrant.sock");
+async function queryHealth(project) {
+  try {
+    const reply = await sendRequest(SOCK, { kind: "health", project });
+    return Array.isArray(reply) ? reply : [];
+  } catch {
+    return null;
+  }
+}
+function healthIcon(state) {
+  switch (state) {
+    case "alive":
+      return "\u2714";
+    case "stale":
+      return "\u2022";
+    case "gone":
+      return "\u2718";
+    case "stopped":
+      return "\u23FB";
+    case "unknown":
+      return "\u25CB";
+  }
+}
+function colorState(state) {
+  switch (state) {
+    case "alive":
+      return chalk2.green(state);
+    case "stale":
+      return chalk2.yellow(state);
+    case "gone":
+      return chalk2.red(state);
+    // stopped = intentional shutdown, not a fault — magenta, never alarm-red.
+    case "stopped":
+      return chalk2.magenta(state);
+    case "unknown":
+      return chalk2.dim(state);
+  }
+}
+function healthRow(c, now) {
+  const head = `${healthIcon(c.state)} ${c.kind.padEnd(8)} ${c.ref.padEnd(16)} ${c.state.padEnd(8)} ${ageText(c.lastSeenMs, now)}`;
+  return c.detail ? `${head}  ${c.detail}` : head;
+}
+function printServiceHealth(rows, now = Date.now()) {
+  console.log(chalk2.bold("\nService Health\n"));
+  if (rows == null) {
+    console.log(`  ${chalk2.red("\u2718")} daemon unreachable \u2014 squadrant liveness is unknown`);
+    console.log(`         ${chalk2.cyan("\u2192")} ${chalk2.dim("Run: squadrant heal daemon")}`);
+    return;
+  }
+  if (rows.length === 0) {
+    console.log(chalk2.dim("  no registered projects"));
+    return;
   }
   const byProject = /* @__PURE__ */ new Map();
   for (const c of rows) {
@@ -10406,7 +10814,7 @@ function settingsHaveAgentTeams() {
   try {
     const home = process.env.HOME || "";
     const settings = JSON.parse(
-      fs17.readFileSync(`${home}/.claude/settings.json`, "utf-8")
+      fs15.readFileSync(`${home}/.claude/settings.json`, "utf-8")
     );
     return settings?.env?.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS === "1";
   } catch {
@@ -10417,7 +10825,7 @@ function pluginInstalled(pluginKey) {
   try {
     const home = process.env.HOME || "";
     const plugins = JSON.parse(
-      fs17.readFileSync(
+      fs15.readFileSync(
         `${home}/.claude/plugins/installed_plugins.json`,
         "utf-8"
       )
@@ -10439,6 +10847,43 @@ function tryGetVersion(cmd) {
     return "";
   }
 }
+function candidateGlobalInstalls(roots) {
+  const out = [];
+  if (roots.npm) out.push({ manager: "npm", packageJsonPath: path19.join(roots.npm, "squadrant", "package.json") });
+  if (roots.pnpm) out.push({ manager: "pnpm", packageJsonPath: path19.join(roots.pnpm, "squadrant", "package.json") });
+  if (roots.yarn) out.push({ manager: "yarn", packageJsonPath: path19.join(roots.yarn, "node_modules", "squadrant", "package.json") });
+  return out;
+}
+function findInstalledSquadrants(candidates, readVersion) {
+  const out = [];
+  for (const c of candidates) {
+    const version = readVersion(c.packageJsonPath);
+    if (version) out.push({ manager: c.manager, packageJsonPath: c.packageJsonPath, version });
+  }
+  return out;
+}
+function formatDuplicateInstallWarning(installs) {
+  if (installs.length <= 1) return null;
+  const lines = installs.map((i) => `    ${i.manager}: ${i.packageJsonPath} (v${i.version})`);
+  return `Multiple squadrant installs detected:
+${lines.join("\n")}
+    Two installs fight over the daemon plist (#670) \u2014 uninstall the one you don't use, then run \`squadrant heal daemon\`.`;
+}
+function readPackageVersion(packageJsonPath) {
+  try {
+    const pkg2 = JSON.parse(fs15.readFileSync(packageJsonPath, "utf-8"));
+    return typeof pkg2.version === "string" ? pkg2.version : null;
+  } catch {
+    return null;
+  }
+}
+function tryGetGlobalRoot(cmd, args) {
+  try {
+    return execSync8(`${cmd} ${args.join(" ")}`, { encoding: "utf-8", stdio: ["ignore", "pipe", "ignore"] }).trim() || void 0;
+  } catch {
+    return void 0;
+  }
+}
 function check(label, pass, hint) {
   const icon = pass ? chalk3.green("\u2714 PASS") : chalk3.red("\u2718 FAIL");
   console.log(`  ${icon}  ${label}`);
@@ -10462,7 +10907,7 @@ var doctorCommand = new Command("doctor").description("Check system health and p
   ));
   results.push(check(
     "Obsidian installed",
-    commandExists("obsidian") || fs17.existsSync("/Applications/Obsidian.app"),
+    commandExists("obsidian") || fs15.existsSync("/Applications/Obsidian.app"),
     "Install from: https://obsidian.md"
   ));
   results.push(check(
@@ -10556,7 +11001,7 @@ var doctorCommand = new Command("doctor").description("Check system health and p
     const emitter = projectionRegistry.get(name);
     const [userDest] = emitter.destinations("user");
     if (!userDest) continue;
-    const dir = path18.dirname(userDest.path);
+    const dir = path19.dirname(userDest.path);
     let status;
     try {
       await stat(dir);
@@ -10569,7 +11014,7 @@ var doctorCommand = new Command("doctor").description("Check system health and p
   results.push(
     check(
       "Squadrant config exists",
-      fs17.existsSync(
+      fs15.existsSync(
         process.env.SQUADRANT_CONFIG || `${process.env.HOME}/.config/squadrant/config.json`
       ),
       "Run: squadrant init"
@@ -10582,6 +11027,16 @@ var doctorCommand = new Command("doctor").description("Check system health and p
 ${passed === total ? chalk3.green("All checks passed") : chalk3.yellow(`${passed}/${total} checks passed`)}
 `
   );
+  const installCandidates = candidateGlobalInstalls({
+    npm: tryGetGlobalRoot("npm", ["root", "-g"]),
+    pnpm: tryGetGlobalRoot("pnpm", ["root", "-g"]),
+    yarn: tryGetGlobalRoot("yarn", ["global", "dir"])
+  });
+  const duplicateWarning = formatDuplicateInstallWarning(findInstalledSquadrants(installCandidates, readPackageVersion));
+  if (duplicateWarning) {
+    console.log(`
+${chalk3.yellow("\u26A0 WARN")}  ${duplicateWarning}`);
+  }
   printServiceHealth(await queryHealth());
   console.log(chalk3.bold("\nTool Version Compat\n"));
   const toolVersionMap = {
@@ -10643,16 +11098,16 @@ init_dist();
 init_dist3();
 init_dist();
 import { Command as Command2 } from "commander";
-import fs18 from "fs";
-import path19 from "path";
+import fs16 from "fs";
+import path20 from "path";
 import os10 from "os";
 import readline from "readline";
 import chalk4 from "chalk";
 
 // packages/cli/src/lib/per-crew-settings.ts
 init_dist4();
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync14, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname5, join as join20 } from "path";
+import { mkdirSync as mkdirSync7, readFileSync as readFileSync13, writeFileSync as writeFileSync9 } from "fs";
+import { dirname as dirname4, join as join20 } from "path";
 import { homedir as homedir15 } from "os";
 var CREW_PERMISSION_ALLOWLIST = [
   // git — read + safe mutations (reset/clean/config intentionally excluded)
@@ -10745,28 +11200,28 @@ function mergeCrewPermissions(settings) {
 }
 function writePerCrewSettingsLocal(o) {
   const dir = join20(o.projectCwd, ".claude");
-  mkdirSync8(dir, { recursive: true });
+  mkdirSync7(dir, { recursive: true });
   const file = join20(dir, "settings.local.json");
   let existing = {};
   try {
-    const raw = healStaleCockpitRefs(readFileSync14(file, "utf-8"));
+    const raw = healStaleCockpitRefs(readFileSync13(file, "utf-8"));
     existing = JSON.parse(raw);
   } catch {
   }
   const withHooks = mergeClaudeHooks(existing, o.hookCmd ?? "squadrant crew _hook");
   const merged = mergeCrewPermissions(withHooks);
-  writeFileSync10(file, JSON.stringify(merged, null, 2));
+  writeFileSync9(file, JSON.stringify(merged, null, 2));
   return file;
 }
 var DEFAULT_GLOBAL_OPENCODE_CONFIG_PATH = join20(homedir15(), ".config", "opencode", "opencode.json");
 function ensureGlobalOpencodeConfig(configPath = DEFAULT_GLOBAL_OPENCODE_CONFIG_PATH) {
-  mkdirSync8(dirname5(configPath), { recursive: true });
+  mkdirSync7(dirname4(configPath), { recursive: true });
   const defaultConfig = {
     $schema: "https://opencode.ai/config.json",
     model: "anthropic/claude-sonnet-4-5"
   };
   try {
-    writeFileSync10(configPath, JSON.stringify(defaultConfig, null, 2) + "\n", { flag: "wx" });
+    writeFileSync9(configPath, JSON.stringify(defaultConfig, null, 2) + "\n", { flag: "wx" });
     return configPath;
   } catch (err) {
     if (err.code === "EEXIST") return null;
@@ -10775,7 +11230,7 @@ function ensureGlobalOpencodeConfig(configPath = DEFAULT_GLOBAL_OPENCODE_CONFIG_
 }
 function writePerCrewOpencodeConfig(o) {
   const dir = join20(o.stateRoot, o.project, o.taskId);
-  mkdirSync8(dir, { recursive: true });
+  mkdirSync7(dir, { recursive: true });
   const file = join20(dir, "opencode.json");
   const config = {
     permission: {
@@ -10791,29 +11246,29 @@ function writePerCrewOpencodeConfig(o) {
       external_directory: { "**": "allow" }
     }
   };
-  writeFileSync10(file, JSON.stringify(config, null, 2));
+  writeFileSync9(file, JSON.stringify(config, null, 2));
   return file;
 }
 
 // packages/cli/src/commands/init.ts
 init_dist4();
 function findPackageRoot() {
-  let dir = path19.dirname(new URL(import.meta.url).pathname);
+  let dir = path20.dirname(new URL(import.meta.url).pathname);
   while (dir !== "/") {
-    if (fs18.existsSync(path19.join(dir, "package.json"))) return dir;
-    dir = path19.dirname(dir);
+    if (fs16.existsSync(path20.join(dir, "package.json"))) return dir;
+    dir = path20.dirname(dir);
   }
   return process.cwd();
 }
 function copyDirRecursive(src, dest) {
-  fs18.mkdirSync(dest, { recursive: true });
-  for (const entry of fs18.readdirSync(src, { withFileTypes: true })) {
-    const srcPath = path19.join(src, entry.name);
-    const destPath = path19.join(dest, entry.name);
+  fs16.mkdirSync(dest, { recursive: true });
+  for (const entry of fs16.readdirSync(src, { withFileTypes: true })) {
+    const srcPath = path20.join(src, entry.name);
+    const destPath = path20.join(dest, entry.name);
     if (entry.isDirectory()) {
       copyDirRecursive(srcPath, destPath);
     } else {
-      fs18.copyFileSync(srcPath, destPath);
+      fs16.copyFileSync(srcPath, destPath);
     }
   }
 }
@@ -10833,7 +11288,7 @@ function promptLine(question) {
 var initCommand = new Command2("init").description("Guided first-time setup: hub vault, agents, plugins, projects (re-run-safe)").option("--hub <path>", "Hub vault path", "~/squadrant-hub").action(async (opts) => {
   const hubPath = resolveHome(opts.hub);
   const pkgRoot = findPackageRoot();
-  const configDir = path19.join(os10.homedir(), ".config", "squadrant");
+  const configDir = path20.join(os10.homedir(), ".config", "squadrant");
   const isTTY = process.stdin.isTTY === true;
   console.log(chalk4.bold("\nSquadrant Init\n"));
   if (!isTTY) {
@@ -10859,8 +11314,8 @@ var initCommand = new Command2("init").description("Guided first-time setup: hub
   }
   const wsRegistry = new WorkspaceRegistry({ obsidian: createObsidianDriver });
   try {
-    if (fs18.existsSync(DEFAULT_CONFIG_PATH)) {
-      const existing = JSON.parse(fs18.readFileSync(DEFAULT_CONFIG_PATH, "utf-8"));
+    if (fs16.existsSync(DEFAULT_CONFIG_PATH)) {
+      const existing = JSON.parse(fs16.readFileSync(DEFAULT_CONFIG_PATH, "utf-8"));
       wsRegistry.get(existing.workspace ?? "obsidian");
     }
   } catch (err) {
@@ -10868,7 +11323,7 @@ var initCommand = new Command2("init").description("Guided first-time setup: hub
     return;
   }
   stepHeader(1, 5, "Hub vault");
-  if (fs18.existsSync(DEFAULT_CONFIG_PATH)) {
+  if (fs16.existsSync(DEFAULT_CONFIG_PATH)) {
     console.log(chalk4.yellow("    \u26A0 Config already exists, skipping creation"));
   } else {
     const config = getDefaultConfig();
@@ -10876,37 +11331,37 @@ var initCommand = new Command2("init").description("Guided first-time setup: hub
     saveConfig(config);
     console.log(chalk4.green(`    \u2714 Config created at ${DEFAULT_CONFIG_PATH}`));
   }
-  const hubTemplate = path19.join(pkgRoot, "obsidian", "hub");
-  if (fs18.existsSync(hubPath)) {
+  const hubTemplate = path20.join(pkgRoot, "obsidian", "hub");
+  if (fs16.existsSync(hubPath)) {
     console.log(chalk4.yellow(`    \u26A0 Hub vault already exists at ${hubPath}`));
-  } else if (fs18.existsSync(hubTemplate)) {
+  } else if (fs16.existsSync(hubTemplate)) {
     copyDirRecursive(hubTemplate, hubPath);
     console.log(chalk4.green(`    \u2714 Hub vault scaffolded at ${hubPath}`));
   } else {
-    fs18.mkdirSync(hubPath, { recursive: true });
+    fs16.mkdirSync(hubPath, { recursive: true });
     console.log(chalk4.yellow(`    \u26A0 Hub template not found; created empty directory at ${hubPath}`));
   }
-  const hubDashboardSrc = path19.join(pkgRoot, "obsidian", "hub", "dashboard.md");
-  const hubDashboardDest = path19.join(hubPath, "dashboard.md");
-  if (fs18.existsSync(hubDashboardSrc)) {
-    fs18.copyFileSync(hubDashboardSrc, hubDashboardDest);
+  const hubDashboardSrc = path20.join(pkgRoot, "obsidian", "hub", "dashboard.md");
+  const hubDashboardDest = path20.join(hubPath, "dashboard.md");
+  if (fs16.existsSync(hubDashboardSrc)) {
+    fs16.copyFileSync(hubDashboardSrc, hubDashboardDest);
     console.log(chalk4.green(`    \u2714 Dashboard refreshed`));
   }
-  fs18.mkdirSync(path19.join(hubPath, "projects"), { recursive: true });
+  fs16.mkdirSync(path20.join(hubPath, "projects"), { recursive: true });
   ensureRuntimeSynced({ sourceRoot: pkgRoot, runtimeRoot: configDir });
   console.log(chalk4.green(`    \u2714 Runtime assets synced to ${configDir}`));
   stepHeader(2, 5, "Agent + projection setup");
-  const settingsPath = path19.join(os10.homedir(), ".claude", "settings.json");
+  const settingsPath = path20.join(os10.homedir(), ".claude", "settings.json");
   try {
     let settings = {};
-    if (fs18.existsSync(settingsPath)) {
-      settings = JSON.parse(fs18.readFileSync(settingsPath, "utf-8"));
+    if (fs16.existsSync(settingsPath)) {
+      settings = JSON.parse(fs16.readFileSync(settingsPath, "utf-8"));
     }
     const env = settings.env || {};
     if (env.CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS !== "1") {
       settings.env = { ...env, CLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS: "1" };
-      fs18.mkdirSync(path19.dirname(settingsPath), { recursive: true });
-      fs18.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
+      fs16.mkdirSync(path20.dirname(settingsPath), { recursive: true });
+      fs16.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + "\n");
       console.log(chalk4.green("    \u2714 Agent Teams enabled in ~/.claude/settings.json"));
     } else {
       console.log(chalk4.green("    \u2714 Agent Teams already enabled"));
@@ -10958,7 +11413,7 @@ var initCommand = new Command2("init").description("Guided first-time setup: hub
     chalk4.cyan("    Absolute path to your first project (Enter to skip): ")
   );
   if (projectPath) {
-    const projectName = path19.basename(projectPath);
+    const projectName = path20.basename(projectPath);
     console.log(chalk4.bold(`
     Run this to register it:`));
     console.log(chalk4.cyan(`      squadrant projects add ${projectName} ${projectPath}
@@ -10986,8 +11441,8 @@ var initCommand = new Command2("init").description("Guided first-time setup: hub
 init_dist();
 init_dist2();
 import { Command as Command3 } from "commander";
-import fs19 from "fs";
-import path20 from "path";
+import fs17 from "fs";
+import path21 from "path";
 import chalk5 from "chalk";
 function restartAfterProjectsAdd(opts) {
   const doRestart = opts.doRestart ?? restartDaemonIfRunning;
@@ -10999,22 +11454,22 @@ function restartAfterProjectsAdd(opts) {
   }
 }
 function findPackageRoot2() {
-  let dir = path20.dirname(new URL(import.meta.url).pathname);
+  let dir = path21.dirname(new URL(import.meta.url).pathname);
   while (dir !== "/") {
-    if (fs19.existsSync(path20.join(dir, "package.json"))) return dir;
-    dir = path20.dirname(dir);
+    if (fs17.existsSync(path21.join(dir, "package.json"))) return dir;
+    dir = path21.dirname(dir);
   }
   return process.cwd();
 }
 function copyDirRecursive2(src, dest) {
-  fs19.mkdirSync(dest, { recursive: true });
-  for (const entry of fs19.readdirSync(src, { withFileTypes: true })) {
-    const srcPath = path20.join(src, entry.name);
-    const destPath = path20.join(dest, entry.name);
+  fs17.mkdirSync(dest, { recursive: true });
+  for (const entry of fs17.readdirSync(src, { withFileTypes: true })) {
+    const srcPath = path21.join(src, entry.name);
+    const destPath = path21.join(dest, entry.name);
     if (entry.isDirectory()) {
       copyDirRecursive2(srcPath, destPath);
     } else {
-      fs19.copyFileSync(srcPath, destPath);
+      fs17.copyFileSync(srcPath, destPath);
     }
   }
 }
@@ -11050,7 +11505,7 @@ var addCmd = new Command3("add").description("Register a project").argument("<na
     process.exit(1);
   }
   const resolvedPath = resolveHome(projectPath);
-  if (!fs19.existsSync(path20.join(resolvedPath, ".git"))) {
+  if (!fs17.existsSync(path21.join(resolvedPath, ".git"))) {
     console.log(chalk5.yellow(`
   \u26A0 No .git found at ${resolvedPath}. Make sure this is the project root, not a parent directory.
 `));
@@ -11103,7 +11558,7 @@ var addCmd = new Command3("add").description("Register a project").argument("<na
   \u26A0 Group '${group}' already has '${primary[0]}' as primary. Overriding.`));
     }
   }
-  const spokeVault = opts.spoke ? resolveHome(opts.spoke) : path20.join(config.hubVault, "spokes", name);
+  const spokeVault = opts.spoke ? resolveHome(opts.spoke) : path21.join(config.hubVault, "spokes", name);
   const project = {
     path: resolvedPath,
     captainName,
@@ -11118,20 +11573,20 @@ var addCmd = new Command3("add").description("Register a project").argument("<na
   \u2714 Project '${name}' registered`));
   restartAfterProjectsAdd({ noRestart: opts.restart === false });
   const pkgRoot = findPackageRoot2();
-  const spokeTemplate = path20.join(pkgRoot, "obsidian", "spoke");
-  if (fs19.existsSync(spokeVault)) {
+  const spokeTemplate = path21.join(pkgRoot, "obsidian", "spoke");
+  if (fs17.existsSync(spokeVault)) {
     console.log(chalk5.yellow(`  \u26A0 Spoke vault already exists at ${spokeVault}, skipping scaffold`));
-  } else if (fs19.existsSync(spokeTemplate)) {
+  } else if (fs17.existsSync(spokeTemplate)) {
     copyDirRecursive2(spokeTemplate, spokeVault);
-    const statusPath = path20.join(spokeVault, "status.md");
-    if (fs19.existsSync(statusPath)) {
-      const content = fs19.readFileSync(statusPath, "utf-8");
+    const statusPath = path21.join(spokeVault, "status.md");
+    if (fs17.existsSync(statusPath)) {
+      const content = fs17.readFileSync(statusPath, "utf-8");
       const updated = content.replace(/^project: unnamed/m, `project: ${name}`);
-      fs19.writeFileSync(statusPath, updated);
+      fs17.writeFileSync(statusPath, updated);
     }
     console.log(chalk5.green(`  \u2714 Spoke vault scaffolded at ${spokeVault}`));
   } else {
-    fs19.mkdirSync(spokeVault, { recursive: true });
+    fs17.mkdirSync(spokeVault, { recursive: true });
     console.log(chalk5.yellow(`  \u26A0 Spoke template not found; created empty dir at ${spokeVault}`));
   }
   console.log("");
@@ -11200,10 +11655,10 @@ init_dist4();
 init_dist();
 import { Command as Command5 } from "commander";
 import { execSync as execSync9 } from "child_process";
-import path21 from "path";
+import path22 from "path";
 import os11 from "os";
 import chalk7 from "chalk";
-var TEMPLATES_DIR2 = path21.join(os11.homedir(), ".config", "squadrant", "templates");
+var TEMPLATES_DIR2 = path22.join(os11.homedir(), ".config", "squadrant", "templates");
 var TASK_PROMPTS = {
   briefing: "Run your daily briefing using the squadrant:command-ops skill. Read all spoke handoffs, yesterday's logs, current status; produce a concise cross-project briefing; save to {hubVault}/daily-logs/YYYY-MM-DD.md; then exit.",
   "learnings-review": "Run a learnings review using the squadrant:command-ops skill. Scan {spokeVault}/learnings across all projects, identify cross-project patterns, propose captured-skill or fix actions, and exit when done.",
@@ -11236,7 +11691,7 @@ async function runCommandSpawn(input) {
   if (!agent) {
     throw new Error(`Unknown agent '${agentName}'. Known: claude, codex, gemini, opencode.`);
   }
-  const promptFile = path21.join(TEMPLATES_DIR2, `command.${agent.templateSuffix}.md`);
+  const promptFile = path22.join(TEMPLATES_DIR2, `command.${agent.templateSuffix}.md`);
   const cliCommand = agent.buildCommand({
     prompt,
     workdir: process.cwd(),
@@ -11264,21 +11719,21 @@ init_dist();
 init_dist3();
 init_dist4();
 init_dist2();
-import { Command as Command9 } from "commander";
-import chalk9 from "chalk";
+import { Command as Command10 } from "commander";
+import chalk10 from "chalk";
 
 // packages/cli/src/commands/crew-control.ts
 init_dist2();
 init_dist2();
 init_dist();
 init_dist4();
-import { Command as Command8 } from "commander";
+import { Command as Command9 } from "commander";
 import { createConnection as createConnection3 } from "net";
 import { randomUUID as randomUUID4 } from "crypto";
 import { execFileSync as execFileSync6 } from "child_process";
-import { homedir as homedir17 } from "os";
-import { join as join22 } from "path";
-import { mkdirSync as mkdirSync9, writeFileSync as writeFileSync11 } from "fs";
+import { homedir as homedir18 } from "os";
+import { join as join23 } from "path";
+import { mkdirSync as mkdirSync8, writeFileSync as writeFileSync10 } from "fs";
 
 // packages/cli/src/commands/crew-output.ts
 function tailLines(text, maxLines = 40, maxBytes = 4096) {
@@ -11328,7 +11783,26 @@ function formatCompactTasks(records, opts) {
   if (opts.compact === false) {
     return JSON.stringify(records, null, 2);
   }
-  return records.map(formatTaskLine).join("\n");
+  const active = records.filter((r) => !r.operatorHold);
+  const held = records.filter((r) => r.operatorHold);
+  let out = "";
+  if (active.length > 0) {
+    if (held.length > 0) out += `active (${active.length}):
+`;
+    out += active.map((r) => (held.length > 0 ? "  " : "") + formatTaskLine(r)).join("\n");
+  }
+  if (held.length > 0) {
+    if (out) out += "\n";
+    out += `HELD BY OPERATOR (${held.length}) \u2014 not counted toward maxCrew:
+`;
+    out += held.map((r) => {
+      const m = Math.round((Date.now() - r.operatorHold.since) / 6e4);
+      const hm = m >= 60 ? `${Math.floor(m / 60)}h${m % 60}m` : `${m}m`;
+      const note = r.operatorHold.note ? ` \xB7 "${r.operatorHold.note}"` : "";
+      return `  ${formatTaskLine(r)} \xB7 held ${hm}${note}`;
+    }).join("\n");
+  }
+  return out;
 }
 
 // packages/cli/src/commands/crew-attach.ts
@@ -11576,7 +12050,7 @@ var crewChatCommand = new Command7("chat").description("[DEPRECATED] alias for `
 });
 
 // packages/cli/src/commands/crew-control.ts
-var SOCK2 = join22(homedir17(), ".config", "squadrant", "squadrant.sock");
+var SOCK2 = join23(homedir18(), ".config", "squadrant", "squadrant.sock");
 var CODEX_FIRST_TURN_DELAY_MS = 1500;
 async function sendCodexFirstTurn(taskId, text) {
   await new Promise((r) => setTimeout(r, CODEX_FIRST_TURN_DELAY_MS));
@@ -11640,6 +12114,40 @@ function buildGateResolveRequest(o) {
     payload: { text: o.message, ...decision ? { decision } : {} }
   };
 }
+async function runCrewTakeover(mode, opts, deps) {
+  const taskId = opts.taskId ?? process.env.SQUADRANT_CREW_TASK_ID;
+  let project = opts.project ?? process.env.SQUADRANT_CREW_PROJECT;
+  let target;
+  if (taskId) {
+    if (!project) {
+      throw new Error("not running under a crew (SQUADRANT_CREW_PROJECT unset)");
+    }
+    const tasks = await deps.listTasks(project);
+    target = tasks.find((t) => t.id === taskId);
+    if (!target) throw new Error(`Task '${taskId}' not found for project '${project}'`);
+  } else if (project && opts.crew) {
+    const tasks = await deps.listTasks(project);
+    target = resolveApproveTarget(tasks, opts.crew) || void 0;
+    if (!target) throw new Error(`Crew '${opts.crew}' not found for ${project}. Run 'squadrant crew list ${project}'.`);
+  } else {
+    throw new Error("must provide either <project> <crew> or --task-id");
+  }
+  const nameDisp = project && opts.crew ? `${project}/${opts.crew}` : target.name ? `${target.project}/${target.name}` : `${target.project}/${target.id}`;
+  if (mode === "start") {
+    const event = { type: "crew.takeover.started", id: target.id, ...opts.note !== void 0 ? { note: opts.note } : {} };
+    await deps.emitEvent(target.project, event);
+    const msg = `CREW TAKEOVER [${nameDisp}] \u2014 operator is driving this tab. Do not send, do not close, do not act on its signals until handback.`;
+    await deps.runtimeSend(target.project, msg);
+    deps.printSuccess(msg);
+  } else {
+    const event = { type: "crew.takeover.ended", id: target.id };
+    await deps.emitEvent(target.project, event);
+    const msg = `CREW HANDBACK [${nameDisp}] \u2014 operator returned control. State: ${target.state}. Run 'squadrant crew read ${target.project} ${target.name || target.id}' before acting; the tab has history you did not see.`;
+    await deps.runtimeSend(target.project, msg);
+    deps.printSuccess(msg);
+  }
+  return target;
+}
 async function squadrantdCall(req) {
   try {
     return await sendRequest(SOCK2, req);
@@ -11683,10 +12191,10 @@ function buildSignalRequest(signal, o) {
   return { kind: "event", project, event };
 }
 function defaultWriteResult(id, payload) {
-  const dir = join22(homedir17(), ".config", "squadrant", "state", "_results");
-  mkdirSync9(dir, { recursive: true });
-  const file = join22(dir, `${id}.txt`);
-  writeFileSync11(file, payload);
+  const dir = join23(homedir18(), ".config", "squadrant", "state", "_results");
+  mkdirSync8(dir, { recursive: true });
+  const file = join23(dir, `${id}.txt`);
+  writeFileSync10(file, payload);
   return file;
 }
 async function runCrewSignal(signal, o, deps) {
@@ -11865,6 +12373,60 @@ function addControlPlaneCrewCommands(crew) {
 `);
     } catch (e) {
       process.stderr.write(`${e.message}
+`);
+      process.exit(1);
+    }
+  });
+  crew.command("takeover [project] [crewName]").description("Take over a crew's tab explicitly, suppressing captain action until handback (#649)").option("--task-id <id>", "Explicit task id (overrides SQUADRANT_CREW_TASK_ID env)").option("--note <note>", "Optional note explaining the takeover").action(async (project, crewName, opts) => {
+    try {
+      await runCrewTakeover("start", { project, crew: crewName, taskId: opts.taskId, note: opts.note }, {
+        listTasks: async (p) => await squadrantdCall({ kind: "list", project: p }),
+        emitEvent: async (p, event) => {
+          await squadrantdCall({ kind: "event", project: p, event });
+        },
+        runtimeSend: async (p, msg) => {
+          const { runRuntimeSend: runRuntimeSend2 } = await Promise.resolve().then(() => (init_runtime2(), runtime_exports));
+          await runRuntimeSend2(p, msg, {});
+        },
+        printError: (msg) => {
+          process.stderr.write(`${msg}
+`);
+        },
+        printSuccess: (msg) => {
+          process.stdout.write(`\u2714 ${msg}
+`);
+        }
+      });
+      process.exit(0);
+    } catch (e) {
+      process.stderr.write(`${e.message}
+`);
+      process.exit(1);
+    }
+  });
+  crew.command("handback [project] [crewName]").description("Return control of a held crew tab to the captain (#649)").option("--task-id <id>", "Explicit task id (overrides SQUADRANT_CREW_TASK_ID env)").action(async (project, crewName, opts) => {
+    try {
+      await runCrewTakeover("end", { project, crew: crewName, taskId: opts.taskId }, {
+        listTasks: async (p) => await squadrantdCall({ kind: "list", project: p }),
+        emitEvent: async (p, event) => {
+          await squadrantdCall({ kind: "event", project: p, event });
+        },
+        runtimeSend: async (p, msg) => {
+          const { runRuntimeSend: runRuntimeSend2 } = await Promise.resolve().then(() => (init_runtime2(), runtime_exports));
+          await runRuntimeSend2(p, msg, {});
+        },
+        printError: (msg) => {
+          process.stderr.write(`${msg}
+`);
+        },
+        printSuccess: (msg) => {
+          process.stdout.write(`\u2714 ${msg}
+`);
+        }
+      });
+      process.exit(0);
+    } catch (e) {
+      process.stderr.write(`${e.message}
 `);
       process.exit(1);
     }
@@ -11872,7 +12434,7 @@ function addControlPlaneCrewCommands(crew) {
   crew.addCommand(crewAttachCommand);
   crew.addCommand(crewChatCommand);
 }
-var crewControlCommand = new Command8("crew").description("Dispatch and track crew via the squadrant control plane");
+var crewControlCommand = new Command9("crew").description("Dispatch and track crew via the squadrant control plane");
 addControlPlaneCrewCommands(crewControlCommand);
 
 // packages/cli/src/commands/crew.ts
@@ -11904,13 +12466,14 @@ async function runCrewSpawn2(input) {
       await squadrantdCall({ kind: "event", project: p, event });
     },
     onRouted: (route) => console.log(
-      chalk9.dim(
+      chalk10.dim(
         `routed: tier=${route.tier} \u2192 ${route.agent}${route.model ? `/${route.model}` : ""} (rule: "${route.matchedRule}")`
       )
-    )
+    ),
+    onBaseResolved: (base) => console.log(chalk10.dim(`base: ${base}`))
   });
 }
-async function runCrewSend2(project, name, message) {
+async function runCrewSend2(project, name, message, opts) {
   const { runtime, workspaceId } = await resolveCaptainWorkspace(project);
   return runCrewSend(project, name, message, runtime, workspaceId, {
     listTasks: async (p) => await squadrantdCall({ kind: "list", project: p }),
@@ -11922,13 +12485,13 @@ async function runCrewSend2(project, name, message) {
     sendToPane: (pane, msg) => confirmedSendToPane(runtime, pane, msg),
     // #516: side-effect-free modal precheck, run before any daemon-state emit.
     isBlockedByModal: (pane) => paneHasOpenModal(runtime, pane)
-  });
+  }, opts);
 }
 async function runCrewRead2(project, name) {
   const { runtime, workspaceId } = await resolveCaptainWorkspace(project);
   return runCrewRead(project, name, runtime, workspaceId);
 }
-async function runCrewClose2(project, name) {
+async function runCrewClose2(project, name, opts) {
   const { runtime, workspaceId } = await resolveCaptainWorkspace(project);
   return runCrewClose(project, name, runtime, workspaceId, {
     listTasks: async (p) => await squadrantdCall({ kind: "list", project: p }),
@@ -11938,13 +12501,13 @@ async function runCrewClose2(project, name) {
     closeCodexThread: async (taskId) => {
       await squadrantdCall({ kind: "codex-close", taskId });
     }
-  });
+  }, opts);
 }
 async function runCrewList2(project) {
   const { runtime, workspaceId } = await resolveCaptainWorkspace(project);
   return runCrewList(project, runtime, workspaceId);
 }
-var crewCommand = new Command9("crew").description(
+var crewCommand = new Command10("crew").description(
   "Spawn and manage interactive crew sessions next to the project's captain"
 );
 crewCommand.command("spawn").description(
@@ -11970,9 +12533,9 @@ crewCommand.command("spawn").description(
         // into the isolated worktree root for relative-path access.
         ...opts.taskFile && opts.taskFile !== "-" ? { taskFile: opts.taskFile } : {}
       });
-      console.log(chalk9.green(`\u2714 Crew '${pane.title}' spawned (${pane.surfaceId})`));
+      console.log(chalk10.green(`\u2714 Crew '${pane.title}' spawned (${pane.surfaceId})`));
     } catch (err) {
-      console.error(chalk9.red(err.message));
+      console.error(chalk10.red(err.message));
       process.exit(1);
     }
   }
@@ -11981,24 +12544,48 @@ crewCommand.command("list").description("List live crew sessions for a project")
   try {
     const crews = await runCrewList2(project);
     if (crews.length === 0) {
-      console.log(chalk9.yellow(`No live crew sessions for ${project}.`));
+      console.log(chalk10.yellow(`No live crew sessions for ${project}.`));
       return;
     }
+    const tasks = await squadrantdCall({ kind: "list", project }).catch(() => []);
+    const active = [];
+    const held = [];
     for (const c of crews) {
-      console.log(`  ${c.name}  (${c.surfaceId})`);
+      const task = tasks.find((t2) => t2.name === c.name);
+      const t = task ? resolveApproveTarget(tasks, c.name) : void 0;
+      if (t?.operatorHold) {
+        held.push({ c, t });
+      } else {
+        active.push({ c, t });
+      }
+    }
+    if (active.length > 0) {
+      console.log(`active (${active.length}):`);
+      for (const { c, t } of active) {
+        console.log(`  ${c.name.padEnd(10)} ${t ? t.state : "unknown"}  (${c.surfaceId})`);
+      }
+    }
+    if (held.length > 0) {
+      console.log(`HELD BY OPERATOR (${held.length}) \u2014 not counted toward maxCrew:`);
+      for (const { c, t } of held) {
+        const m = Math.round((Date.now() - t.operatorHold.since) / 6e4);
+        const hm = m >= 60 ? `${Math.floor(m / 60)}h${m % 60}m` : `${m}m`;
+        const note = t.operatorHold.note ? ` \xB7 "${t.operatorHold.note}"` : "";
+        console.log(`  ${c.name.padEnd(10)} ${t.state} \xB7 held ${hm}${note}  (${c.surfaceId})`);
+      }
     }
   } catch (err) {
-    console.error(chalk9.red(err.message));
+    console.error(chalk10.red(err.message));
     process.exit(1);
   }
 });
-crewCommand.command("send").description("Send a follow-up message to an existing crew session").argument("<project>", "Project name").argument("<name>", "Crew name (e.g. crew-1)").argument("[message]", "Message to send (omit with --message-file)").option("--message-file <path>", "Read message from file instead of positional arg ('-' for stdin)").action(async (project, name, message, opts) => {
+crewCommand.command("send").description("Send a follow-up message to an existing crew session").argument("<project>", "Project name").argument("<name>", "Crew name (e.g. crew-1)").argument("[message]", "Message to send (omit with --message-file)").option("--message-file <path>", "Read message from file instead of positional arg ('-' for stdin)").option("--force", "override an operator takeover (only when the operator told you to)", false).action(async (project, name, message, opts) => {
   try {
     const resolvedMessage = await resolveTextInput({ positional: message, filePath: opts.messageFile, label: "message" });
-    await runCrewSend2(project, name, resolvedMessage);
-    console.log(chalk9.green(`\u2714 Sent to ${project}:${name}`));
-  } catch (err) {
-    console.error(chalk9.red(err.message));
+    await runCrewSend2(project, name, resolvedMessage, opts);
+    console.log(chalk10.green(`\u2714 Sent to ${project}:${name}`));
+  } catch (e) {
+    console.error(chalk10.red(e.message));
     process.exit(1);
   }
 });
@@ -12008,16 +12595,16 @@ crewCommand.command("read").description("Read the current screen of a crew sessi
     const out = opts.full ? screen : tailLines(screen, Number(opts.lines ?? 40));
     console.log(out);
   } catch (err) {
-    console.error(chalk9.red(err.message));
+    console.error(chalk10.red(err.message));
     process.exit(1);
   }
 });
-crewCommand.command("close").description("Shutdown a crew session (closes its tab)").argument("<project>", "Project name").argument("<name>", "Crew name").action(async (project, name) => {
+crewCommand.command("close").description("Shutdown a crew session (closes its tab)").argument("<project>", "Project name").argument("<name>", "Crew name").option("--force", "override an operator takeover (only when the operator told you to)", false).action(async (project, name, opts) => {
   try {
-    await runCrewClose2(project, name);
-    console.log(chalk9.green(`\u2714 Closed ${project}:${name}`));
+    await runCrewClose2(project, name, opts);
+    console.log(chalk10.green(`\u2714 Closed ${project}:${name}`));
   } catch (err) {
-    console.error(chalk9.red(err.message));
+    console.error(chalk10.red(err.message));
     process.exit(1);
   }
 });
@@ -12025,8 +12612,8 @@ crewCommand.command("close").description("Shutdown a crew session (closes its ta
 // packages/cli/src/commands/diff.ts
 init_dist();
 init_dist3();
-import { Command as Command10 } from "commander";
-import chalk10 from "chalk";
+import { Command as Command11 } from "commander";
+import chalk11 from "chalk";
 import { execFileSync as execFileSync7 } from "child_process";
 import readline2 from "readline";
 function resolveDiffTarget(tasks, crew, projectPath) {
@@ -12143,7 +12730,7 @@ async function openCrewDiff(project, proj, crew, opts, runtime, workspaceId) {
       const label = sources.length > 1 ? "staged or unstaged" : sources[0];
       console.log(`No ${label} changes on ${branchLabel}.`);
     } else {
-      console.log(chalk10.dim(`Opened ${opened} working-tree diff(s) (${sources.join(", ")}) for ${branchLabel}.`));
+      console.log(chalk11.dim(`Opened ${opened} working-tree diff(s) (${sources.join(", ")}) for ${branchLabel}.`));
     }
     return;
   }
@@ -12166,7 +12753,7 @@ async function openCrewDiff(project, proj, crew, opts, runtime, workspaceId) {
     lastTurn: opts.lastTurn,
     source: "branch"
   });
-  console.log(chalk10.dim(`Opened ${branchLabel} vs ${base} in cmux diff.`));
+  console.log(chalk11.dim(`Opened ${branchLabel} vs ${base} in cmux diff.`));
 }
 async function runDiff(project, crewArg, opts) {
   const config = loadConfig();
@@ -12187,7 +12774,7 @@ async function runDiff(project, crewArg, opts) {
       return;
     }
     await runtime.showPatch({ workspaceId, patch, title, layout: opts.layout, focus: opts.focus });
-    console.log(chalk10.dim(`Opened ${title} in cmux diff.`));
+    console.log(chalk11.dim(`Opened ${title} in cmux diff.`));
     return;
   }
   let crew;
@@ -12213,7 +12800,7 @@ async function runDiff(project, crewArg, opts) {
   }
   await openCrewDiff(project, proj, crew, opts, runtime, workspaceId);
 }
-var diffCommand = new Command10("diff").description("Open a crew's branch diff, a PR, or a ref comparison in cmux's native diff viewer \u2014 no VSCode required (#596/#604)").argument("<project>", "Project name (must be registered)").argument("[crew]", "Crew name (e.g. crew-1); omit with no other flags to pick from live crews").option("--pr <n>", "Review a PR: wraps `gh pr diff <n>` (mutually exclusive with crew/--base/--head)").option("--base <ref>", "Base ref for a --head ref comparison (merge-base diff)").option("--head <ref>", "Head ref for a --base ref comparison").option("--against <ref>", "Alias: diff <ref>...HEAD (mutually exclusive with --base/--head)").option("--layout <mode>", "split (default) or unified", "split").option("--last-turn", "diff only changes since the crew's last agent turn", false).option("--no-focus", "open the diff pane without stealing focus").option("--staged", "show only staged (index) changes \u2014 VSCode's 'Staged Changes' panel (#599)", false).option("--unstaged", "show only unstaged working-tree changes \u2014 VSCode's 'Changes' panel (#599)", false).option("--working", "show both staged and unstaged changes (mid-task working-tree review, #599)", false).action(runDiff);
+var diffCommand = new Command11("diff").description("Open a crew's branch diff, a PR, or a ref comparison in cmux's native diff viewer \u2014 no VSCode required (#596/#604)").argument("<project>", "Project name (must be registered)").argument("[crew]", "Crew name (e.g. crew-1); omit with no other flags to pick from live crews").option("--pr <n>", "Review a PR: wraps `gh pr diff <n>` (mutually exclusive with crew/--base/--head)").option("--base <ref>", "Base ref for a --head ref comparison (merge-base diff)").option("--head <ref>", "Head ref for a --base ref comparison").option("--against <ref>", "Alias: diff <ref>...HEAD (mutually exclusive with --base/--head)").option("--layout <mode>", "split (default) or unified", "split").option("--last-turn", "diff only changes since the crew's last agent turn", false).option("--no-focus", "open the diff pane without stealing focus").option("--staged", "show only staged (index) changes \u2014 VSCode's 'Staged Changes' panel (#599)", false).option("--unstaged", "show only unstaged working-tree changes \u2014 VSCode's 'Changes' panel (#599)", false).option("--working", "show both staged and unstaged changes (mid-task working-tree review, #599)", false).action(runDiff);
 
 // packages/cli/src/commands/side.ts
 init_dist();
@@ -12222,12 +12809,12 @@ init_dist4();
 init_dist3();
 init_dist();
 init_dist2();
-import { Command as Command11 } from "commander";
-import fs20 from "fs";
-import path22 from "path";
+import { Command as Command12 } from "commander";
+import fs18 from "fs";
+import path23 from "path";
 import os12 from "os";
-import chalk11 from "chalk";
-var TEMPLATES_DIR3 = path22.join(os12.homedir(), ".config", "squadrant", "templates");
+import chalk12 from "chalk";
+var TEMPLATES_DIR3 = path23.join(os12.homedir(), ".config", "squadrant", "templates");
 async function runSideSpawn2(input) {
   const config = loadConfig();
   const proj = config.projects[input.project];
@@ -12251,7 +12838,7 @@ async function runSideSpawn2(input) {
     throw new Error(`Unknown agent '${agentName}'. Known: claude, codex, gemini, opencode.`);
   }
   const sideModel = sideRole?.model;
-  const promptFile = path22.join(
+  const promptFile = path23.join(
     TEMPLATES_DIR3,
     `side.${input.role}.${agent.templateSuffix}.md`
   );
@@ -12259,7 +12846,7 @@ async function runSideSpawn2(input) {
     prompt: input.topic,
     workdir: spawnCwd,
     role: "side",
-    promptFile: fs20.existsSync(promptFile) ? promptFile : void 0,
+    promptFile: fs18.existsSync(promptFile) ? promptFile : void 0,
     interactive: true,
     permissionMode: config.defaults.permissions?.crew ?? "auto",
     ...sideModel ? { model: sideModel } : {}
@@ -12288,7 +12875,7 @@ async function runSideClose2(project, name) {
     config.defaults.worktreeDir ?? ".worktrees"
   );
 }
-var sideCommand = new Command11("side").description(
+var sideCommand = new Command12("side").description(
   "Spawn and manage side-sessions (research/debug) \u2014 fresh-context tabs off the daemon lifecycle"
 );
 sideCommand.command("spawn").description(
@@ -12313,9 +12900,9 @@ sideCommand.command("spawn").description(
         direction: opts.direction,
         agent: opts.agent
       });
-      console.log(chalk11.green(`\u2714 Side session '${pane.title}' spawned (${pane.surfaceId})`));
+      console.log(chalk12.green(`\u2714 Side session '${pane.title}' spawned (${pane.surfaceId})`));
     } catch (err) {
-      console.error(chalk11.red(err.message));
+      console.error(chalk12.red(err.message));
       process.exit(1);
     }
   }
@@ -12324,14 +12911,14 @@ sideCommand.command("list").description("List live side-sessions for a project")
   try {
     const sessions = await runSideList2(project);
     if (sessions.length === 0) {
-      console.log(chalk11.yellow(`No live side-sessions for ${project}.`));
+      console.log(chalk12.yellow(`No live side-sessions for ${project}.`));
       return;
     }
     for (const s of sessions) {
       console.log(`  ${s.name}  (${s.surfaceId})`);
     }
   } catch (err) {
-    console.error(chalk11.red(err.message));
+    console.error(chalk12.red(err.message));
     process.exit(1);
   }
 });
@@ -12344,9 +12931,9 @@ sideCommand.command("send").description("Send a follow-up message to an existing
         label: "message"
       });
       await runSideSend2(project, name, resolvedMessage);
-      console.log(chalk11.green(`\u2714 Sent to ${project}:${name}`));
+      console.log(chalk12.green(`\u2714 Sent to ${project}:${name}`));
     } catch (err) {
-      console.error(chalk11.red(err.message));
+      console.error(chalk12.red(err.message));
       process.exit(1);
     }
   }
@@ -12354,9 +12941,9 @@ sideCommand.command("send").description("Send a follow-up message to an existing
 sideCommand.command("close").description("Close a side-session (closes its tab)").argument("<project>", "Project name").argument("<name>", "Session name").action(async (project, name) => {
   try {
     await runSideClose2(project, name);
-    console.log(chalk11.green(`\u2714 Closed ${project}:${name}`));
+    console.log(chalk12.green(`\u2714 Closed ${project}:${name}`));
   } catch (err) {
-    console.error(chalk11.red(err.message));
+    console.error(chalk12.red(err.message));
     process.exit(1);
   }
 });
@@ -12364,11 +12951,11 @@ sideCommand.command("close").description("Close a side-session (closes its tab)"
 // packages/cli/src/commands/dashboard.ts
 init_dist();
 init_dist3();
-import { Command as Command12 } from "commander";
+import { Command as Command13 } from "commander";
 import { execSync as execSync10 } from "child_process";
-import { homedir as homedir19 } from "os";
-import { join as join24 } from "path";
-import chalk13 from "chalk";
+import { homedir as homedir20 } from "os";
+import { join as join25 } from "path";
+import chalk14 from "chalk";
 
 // packages/web/dist/read-status.js
 function deriveState(tasks) {
@@ -12445,14 +13032,14 @@ async function readAllStatuses(deps) {
 }
 
 // packages/web/dist/render.js
-import chalk12 from "chalk";
+import chalk13 from "chalk";
 var ICON = {
-  idle: chalk12.green,
-  busy: chalk12.cyan,
-  blocked: chalk12.yellow,
-  errored: chalk12.red,
-  offline: chalk12.dim,
-  unknown: chalk12.gray
+  idle: chalk13.green,
+  busy: chalk13.cyan,
+  blocked: chalk13.yellow,
+  errored: chalk13.red,
+  offline: chalk13.dim,
+  unknown: chalk13.gray
 };
 var ICON_CHAR = {
   idle: "\u25CF",
@@ -12495,10 +13082,10 @@ function renderDashboard(rows, opts) {
   const width = opts.width ?? 100;
   const lines = [];
   lines.push("");
-  lines.push("  " + chalk12.bold("\u{1F4CA} Squadrant Dashboard") + "  " + chalk12.dim(opts.now));
+  lines.push("  " + chalk13.bold("\u{1F4CA} Squadrant Dashboard") + "  " + chalk13.dim(opts.now));
   lines.push("");
   if (rows.length === 0) {
-    lines.push("  " + chalk12.yellow("No projects registered. Add one with: squadrant projects add <name> <path>"));
+    lines.push("  " + chalk13.yellow("No projects registered. Add one with: squadrant projects add <name> <path>"));
     lines.push("");
     return lines.join("\n");
   }
@@ -12509,22 +13096,22 @@ function renderDashboard(rows, opts) {
   const excerptW = Math.max(20, width - FIXED);
   for (const r of rows) {
     const icon = ICON[r.state](ICON_CHAR[r.state]);
-    const name = chalk12.cyan(pad(r.project, NAME_W));
+    const name = chalk13.cyan(pad(r.project, NAME_W));
     const state = ICON[r.state](pad(r.state, STATE_W));
     const age = pad(formatAge(r.lastChecked, opts.now), AGE_W);
-    const excerpt = chalk12.dim(truncate(firstLine(r.excerpt), excerptW));
+    const excerpt = chalk13.dim(truncate(firstLine(r.excerpt), excerptW));
     lines.push(`  ${icon} ${name} ${state} ${age} \u2502 ${excerpt}`);
   }
   lines.push("");
-  lines.push(chalk12.dim("  Refreshes every 10s \xB7 Ctrl+C to exit"));
+  lines.push(chalk13.dim("  Refreshes every 10s \xB7 Ctrl+C to exit"));
   lines.push("");
   return lines.join("\n");
 }
 
 // packages/web/dist/sync-hub.js
 init_dist();
-import fs21 from "fs";
-import path23 from "path";
+import fs19 from "fs";
+import path24 from "path";
 function buildMirrorMarkdown(s) {
   const fenced = "```";
   return [
@@ -12550,15 +13137,15 @@ function buildMirrorMarkdown(s) {
 function syncHub(deps) {
   if (!deps.config.hubVault)
     return [];
-  const writeFile5 = deps.writeFile ?? ((p, c) => fs21.writeFileSync(p, c));
-  const mkdir5 = deps.mkdir ?? ((p) => fs21.mkdirSync(p, { recursive: true }));
-  const projectsDir = path23.join(resolveHome(deps.config.hubVault), "projects");
+  const writeFile5 = deps.writeFile ?? ((p, c) => fs19.writeFileSync(p, c));
+  const mkdir5 = deps.mkdir ?? ((p) => fs19.mkdirSync(p, { recursive: true }));
+  const projectsDir = path24.join(resolveHome(deps.config.hubVault), "projects");
   mkdir5(projectsDir);
   const out = [];
   for (const s of deps.statuses) {
     if (s.state === "unknown")
       continue;
-    const hubPath = path23.join(projectsDir, `${s.project}.md`);
+    const hubPath = path24.join(projectsDir, `${s.project}.md`);
     try {
       writeFile5(hubPath, buildMirrorMarkdown(s));
       out.push({ project: s.project, hubPath });
@@ -12580,9 +13167,9 @@ function mergeSnapshot(daemon, external, now) {
 // packages/web/dist/probes.js
 init_dist();
 init_dist();
-import { join as join23 } from "path";
-import { homedir as homedir18 } from "os";
-import { existsSync as existsSync12, readFileSync as readFileSync15 } from "fs";
+import { join as join24 } from "path";
+import { homedir as homedir19 } from "os";
+import { existsSync as existsSync12, readFileSync as readFileSync14 } from "fs";
 import { execFile as execFile4 } from "child_process";
 var DEFAULT_TIMEOUT_MS = 2e3;
 var AGENT_CLIS = ["claude", "codex", "gemini", "opencode"];
@@ -12618,7 +13205,7 @@ function vaultProbe(run, dir) {
       return { state: "unknown", detail: "no vault configured" };
     if (!run.pathExists(dir))
       return { state: "gone", detail: "vault directory missing" };
-    if (!run.pathExists(join23(dir, ".obsidian")))
+    if (!run.pathExists(join24(dir, ".obsidian")))
       return { state: "gone", detail: "no .obsidian/ (not a vault)" };
     return { state: "alive" };
   } catch {
@@ -12686,13 +13273,13 @@ async function runExternalProbes(run, timeoutMs = DEFAULT_TIMEOUT_MS) {
   const sessions = probeSessions(run);
   return { cmux: cmux2, agentClis, vaults, config: { parseable, projectPaths, sessions } };
 }
-var SESSIONS_PATH = join23(homedir18(), ".config", "squadrant", "sessions.json");
+var SESSIONS_PATH = join24(homedir19(), ".config", "squadrant", "sessions.json");
 function onPath(cli) {
   const dirs = (process.env.PATH ?? "").split(":").filter(Boolean);
-  return dirs.some((d) => existsSync12(join23(d, cli)));
+  return dirs.some((d) => existsSync12(join24(d, cli)));
 }
 function readSessionsHashes() {
-  const raw = JSON.parse(readFileSync15(SESSIONS_PATH, "utf-8"));
+  const raw = JSON.parse(readFileSync14(SESSIONS_PATH, "utf-8"));
   const hashes = Object.values(raw.workspaces ?? {}).map((w) => w.templateHash).filter((h) => typeof h === "string" && h.length > 0);
   return [...new Set(hashes)];
 }
@@ -13597,7 +14184,7 @@ async function startWebServer(opts) {
 
 // packages/cli/src/commands/dashboard.ts
 init_dist();
-var SOCK3 = join24(homedir19(), ".config", "squadrant", "squadrant.sock");
+var SOCK3 = join25(homedir20(), ".config", "squadrant", "squadrant.sock");
 function detectCurrentWorkspace2() {
   const out = execSync10(`"${resolveCmuxBin()}" current-workspace`, { encoding: "utf-8" }).trim();
   const match = out.match(/workspace:\d+/);
@@ -13639,10 +14226,10 @@ async function runDashboardWeb(input) {
     sockPath: SOCK3,
     runners: defaultProbeRunners()
   });
-  console.log(chalk13.green(`\u2714 Squadrant system dashboard \u2192 http://127.0.0.1:${handle.port}`));
-  console.log(chalk13.dim(`  polling the daemon every ${input.interval}s \xB7 localhost only \xB7 read-only \xB7 Ctrl-C to stop`));
+  console.log(chalk14.green(`\u2714 Squadrant system dashboard \u2192 http://127.0.0.1:${handle.port}`));
+  console.log(chalk14.dim(`  polling the daemon every ${input.interval}s \xB7 localhost only \xB7 read-only \xB7 Ctrl-C to stop`));
 }
-var dashboardCommand = new Command12("dashboard").description("Live status grid of all projects (derived from daemon task state)").option("--once", "Print one snapshot and exit (used by --pane's refresh loop)").option("--pane", "Open a refreshing sidebar pane in the current cmux workspace").option("--web", "Serve the live system-health web dashboard on 127.0.0.1 (HTTP + SSE)").option("--port <port>", "Port for --web (default 7878)", (v) => parseInt(v, 10), 7878).option("--direction <dir>", "Pane split direction (right|left|up|down)", "right").option("--interval <seconds>", "Daemon poll interval for --web (default 5); refresh interval for --pane (default 10)", (v) => parseInt(v, 10)).action(async (opts) => {
+var dashboardCommand = new Command13("dashboard").description("Live status grid of all projects (derived from daemon task state)").option("--once", "Print one snapshot and exit (used by --pane's refresh loop)").option("--pane", "Open a refreshing sidebar pane in the current cmux workspace").option("--web", "Serve the live system-health web dashboard on 127.0.0.1 (HTTP + SSE)").option("--port <port>", "Port for --web (default 7878)", (v) => parseInt(v, 10), 7878).option("--direction <dir>", "Pane split direction (right|left|up|down)", "right").option("--interval <seconds>", "Daemon poll interval for --web (default 5); refresh interval for --pane (default 10)", (v) => parseInt(v, 10)).action(async (opts) => {
   try {
     if (opts.web) {
       await runDashboardWeb({ port: opts.port, interval: opts.interval ?? 5 });
@@ -13650,12 +14237,12 @@ var dashboardCommand = new Command12("dashboard").description("Live status grid
     }
     if (opts.pane) {
       const pane = await runDashboardPane({ direction: opts.direction, interval: opts.interval ?? 10 });
-      console.log(chalk13.green(`\u2714 Dashboard pane opened in ${pane.workspaceId} ${pane.surfaceId}`));
+      console.log(chalk14.green(`\u2714 Dashboard pane opened in ${pane.workspaceId} ${pane.surfaceId}`));
       return;
     }
     await runDashboardOnce();
   } catch (err) {
-    console.error(chalk13.red(err.message));
+    console.error(chalk14.red(err.message));
     process.exit(1);
   }
 });
@@ -13666,12 +14253,12 @@ dashboardCommand.command("sync-hub").description("Mirror each spoke status.md in
     return;
   }
   if (results.length === 0) {
-    console.log(chalk13.dim("\n  No mirrors written (no projects with usable status.md, or hubVault unset).\n"));
+    console.log(chalk14.dim("\n  No mirrors written (no projects with usable status.md, or hubVault unset).\n"));
     return;
   }
-  console.log(chalk13.bold("\n  \u{1F4CA} Hub mirror sync\n"));
+  console.log(chalk14.bold("\n  \u{1F4CA} Hub mirror sync\n"));
   for (const r of results) {
-    console.log(`  ${chalk13.green("\u2714")} ${chalk13.cyan(r.project.padEnd(16))} \u2192 ${chalk13.dim(r.hubPath)}`);
+    console.log(`  ${chalk14.green("\u2714")} ${chalk14.cyan(r.project.padEnd(16))} \u2192 ${chalk14.dim(r.hubPath)}`);
   }
   console.log("");
 });
@@ -13681,12 +14268,12 @@ init_dist();
 init_dist4();
 init_dist3();
 init_dist2();
-import { Command as Command13 } from "commander";
+import { Command as Command14 } from "commander";
 import { execSync as execSync11 } from "child_process";
-import fs22 from "fs";
-import path24 from "path";
+import fs20 from "fs";
+import path25 from "path";
 import os13 from "os";
-import chalk14 from "chalk";
+import chalk15 from "chalk";
 
 // packages/cli/src/commands/launch-interactive.ts
 import checkbox, { Separator } from "@inquirer/checkbox";
@@ -13763,20 +14350,20 @@ async function selectCaptainsInteractive(entries, yesterday = getYesterday()) {
 // packages/cli/src/commands/launch.ts
 init_dist2();
 var CMUX_APP = "/Applications/cmux.app";
-var TEMPLATES_DIR4 = path24.join(os13.homedir(), ".config", "squadrant", "templates");
-var SESSIONS_PATH2 = path24.join(os13.homedir(), ".config", "squadrant", "sessions.json");
+var TEMPLATES_DIR4 = path25.join(os13.homedir(), ".config", "squadrant", "templates");
+var SESSIONS_PATH2 = path25.join(os13.homedir(), ".config", "squadrant", "sessions.json");
 function ensureCmuxReady(headless) {
   if (headless || isInsideCmux()) return;
-  console.log(chalk14.yellow("\n  Not running inside cmux. Opening cmux app...\n"));
+  console.log(chalk15.yellow("\n  Not running inside cmux. Opening cmux app...\n"));
   execSync11(`open "${CMUX_APP}"`, { stdio: "inherit" });
-  console.log(chalk14.bold("  Run `squadrant launch` from inside a cmux workspace.\n"));
+  console.log(chalk15.bold("  Run `squadrant launch` from inside a cmux workspace.\n"));
   process.exit(0);
 }
-var launchCommand = new Command13("launch").description(
+var launchCommand = new Command14("launch").description(
   "Launch a project captain (with project arg) or all captains (--all). Use `squadrant command` for one-shot Command tasks."
 ).argument("[project]", "Project name to launch captain for").option("--fresh", "Start a new session instead of resuming the last one").option("--keep", "Resume the latest session even on a new day / after a template change").option("--all", "Launch all captain workspaces").option("--headless", "Skip the interactive cmux-app requirement (used by the daemon to boot captains without a terminal)").action(async (project, opts) => {
   if (opts.fresh && opts.keep) {
-    console.error(chalk14.red("\n  \u2718 --fresh and --keep are mutually exclusive\n"));
+    console.error(chalk15.red("\n  \u2718 --fresh and --keep are mutually exclusive\n"));
     process.exit(1);
   }
   const config = loadConfig();
@@ -13824,29 +14411,29 @@ var launchCommand = new Command13("launch").description(
             return null;
           }
         },
-        onFreshReason: (reason) => console.log(chalk14.cyan(`  \u21BB ${reason}`)),
-        onStoppingStale: (name) => console.log(chalk14.yellow(`  Closing stale workspace '${name}' for fresh start`)),
-        onAlreadyExists: (name) => console.log(chalk14.yellow(`  Workspace '${name}' already exists \u2014 switching to it`)),
-        onCreated: (name) => console.log(chalk14.green(`  \u2714 Workspace '${name}' created`))
+        onFreshReason: (reason) => console.log(chalk15.cyan(`  \u21BB ${reason}`)),
+        onStoppingStale: (name) => console.log(chalk15.yellow(`  Closing stale workspace '${name}' for fresh start`)),
+        onAlreadyExists: (name) => console.log(chalk15.yellow(`  Workspace '${name}' already exists \u2014 switching to it`)),
+        onCreated: (name) => console.log(chalk15.green(`  \u2714 Workspace '${name}' created`))
       });
     } catch (err) {
-      console.error(chalk14.red(`  \u2718 Failed: ${err.message}`));
+      console.error(chalk15.red(`  \u2718 Failed: ${err.message}`));
       hadFailure = true;
     }
   }
   if (opts.all) {
     const hubPath = resolveHome(config.hubVault);
-    fs22.mkdirSync(hubPath, { recursive: true });
-    console.log(chalk14.bold("\nLaunching all captain workspaces\n"));
+    fs20.mkdirSync(hubPath, { recursive: true });
+    console.log(chalk15.bold("\nLaunching all captain workspaces\n"));
     for (const [name, proj] of Object.entries(config.projects)) {
       const projPath = resolveHome(proj.path);
       const spokePath = resolveHome(proj.spokeVault);
-      if (!fs22.existsSync(spokePath)) {
+      if (!fs20.existsSync(spokePath)) {
         const spokeDriver = new WorkspaceRegistry({ obsidian: createObsidianDriver }).forProject(name, config);
         await ensureSpokeLayout(spokeDriver);
-        console.log(chalk14.cyan(`  \u2714 Created spoke vault at ${spokePath}`));
+        console.log(chalk15.cyan(`  \u2714 Created spoke vault at ${spokePath}`));
       }
-      console.log(chalk14.bold(`
+      console.log(chalk15.bold(`
   Captain: ${proj.captainName} (${name})`));
       await launchOne(proj.captainName, "captain", projPath, config.defaults.permissions?.captain || "auto", false, true, name);
     }
@@ -13854,7 +14441,7 @@ var launchCommand = new Command13("launch").description(
   } else if (!project) {
     if (!process.stdin.isTTY || !process.stdout.isTTY) {
       console.error(
-        chalk14.red(
+        chalk15.red(
           "\n  \u2718 Specify a project name, or pass --all to launch every captain.\n    For one-shot Command tasks, use `squadrant command --task <briefing|learnings-review|wiki-aggregate>`.\n"
         )
       );
@@ -13869,22 +14456,22 @@ var launchCommand = new Command13("launch").description(
     }));
     const selected = await selectCaptainsInteractive(entries);
     if (selected.length === 0) {
-      console.log(chalk14.yellow("\n  No captains selected.\n"));
+      console.log(chalk15.yellow("\n  No captains selected.\n"));
       return;
     }
-    console.log(chalk14.bold(`
+    console.log(chalk15.bold(`
 Launching ${selected.length} captain workspace(s) in parallel
 `));
     await Promise.all(selected.map(async (name) => {
       const proj = config.projects[name];
       const projPath = resolveHome(proj.path);
       const spokePath = resolveHome(proj.spokeVault);
-      if (!fs22.existsSync(spokePath)) {
+      if (!fs20.existsSync(spokePath)) {
         const spokeDriver = new WorkspaceRegistry({ obsidian: createObsidianDriver }).forProject(name, config);
         await ensureSpokeLayout(spokeDriver);
-        console.log(chalk14.cyan(`  \u2714 Created spoke vault at ${spokePath}`));
+        console.log(chalk15.cyan(`  \u2714 Created spoke vault at ${spokePath}`));
       }
-      console.log(chalk14.bold(`
+      console.log(chalk15.bold(`
   Captain: ${proj.captainName} (${name})`));
       await launchOne(proj.captainName, "captain", projPath, config.defaults.permissions?.captain || "auto", false, true, name);
     }));
@@ -13892,7 +14479,7 @@ Launching ${selected.length} captain workspace(s) in parallel
   } else {
     if (!config.projects[project]) {
       console.error(
-        chalk14.red(
+        chalk15.red(
           `
   \u2718 Project '${project}' not found. Run 'squadrant projects list' to see registered projects.
 `
@@ -13903,13 +14490,13 @@ Launching ${selected.length} captain workspace(s) in parallel
     const proj = config.projects[project];
     const projPath = resolveHome(proj.path);
     const spokePath = resolveHome(proj.spokeVault);
-    if (!fs22.existsSync(spokePath)) {
+    if (!fs20.existsSync(spokePath)) {
       const spokeDriver = new WorkspaceRegistry({ obsidian: createObsidianDriver }).forProject(project, config);
       await ensureSpokeLayout(spokeDriver);
-      console.log(chalk14.cyan(`  \u2714 Created spoke vault at ${spokePath}`));
+      console.log(chalk15.cyan(`  \u2714 Created spoke vault at ${spokePath}`));
     }
     console.log(
-      chalk14.bold(
+      chalk15.bold(
         `
 Launching captain workspace for '${project}' (${proj.captainName})
 `
@@ -13923,8 +14510,8 @@ Launching captain workspace for '${project}' (${proj.captainName})
 // packages/cli/src/commands/shutdown.ts
 init_dist();
 init_dist3();
-import { Command as Command14 } from "commander";
-import chalk15 from "chalk";
+import { Command as Command15 } from "commander";
+import chalk16 from "chalk";
 init_dist();
 function nameVariants(name) {
   const stripped = name.replace(/^⚓\s+/, "").trim();
@@ -13937,23 +14524,23 @@ async function closeMatching(runtime, variants, label) {
   const failed = [];
   if (matches.length === 0) {
     console.log(
-      chalk15.yellow(`  \u26A0 Workspace '${label}' not found \u2014 already closed?`)
+      chalk16.yellow(`  \u26A0 Workspace '${label}' not found \u2014 already closed?`)
     );
     return { closed, failed };
   }
   for (const ws of matches) {
     try {
       await runtime.stop(ws.id);
-      console.log(chalk15.green(`  \u2714 Closed: ${ws.name}`));
+      console.log(chalk16.green(`  \u2714 Closed: ${ws.name}`));
       closed.push(ws.name);
     } catch {
-      console.log(chalk15.red(`  \u2718 Failed to close: ${ws.name}`));
+      console.log(chalk16.red(`  \u2718 Failed to close: ${ws.name}`));
       failed.push(ws.name);
     }
   }
   return { closed, failed };
 }
-var shutdownCommand = new Command14("shutdown").description(
+var shutdownCommand = new Command15("shutdown").description(
   "Shutdown command + all captain workspaces (no args) or one captain workspace"
 ).argument("[project]", "Project name to shut down captain for").action(async (project) => {
   const config = loadConfig();
@@ -13969,11 +14556,11 @@ var shutdownCommand = new Command14("shutdown").description(
     const allVariants = /* @__PURE__ */ new Set([...captainVariants, ...commandVariants]);
     const squadrantWorkspaces = workspaces.filter((w) => allVariants.has(w.name));
     if (squadrantWorkspaces.length === 0) {
-      console.log(chalk15.yellow("\nNo squadrant workspaces found to close.\n"));
+      console.log(chalk16.yellow("\nNo squadrant workspaces found to close.\n"));
       return;
     }
     console.log(
-      chalk15.bold(
+      chalk16.bold(
         `
 Shutting down ${squadrantWorkspaces.length} workspace(s)...
 `
@@ -13993,9 +14580,9 @@ Shutting down ${squadrantWorkspaces.length} workspace(s)...
     for (const ws of squadrantWorkspaces) {
       try {
         await globalRuntime.stop(ws.id);
-        console.log(chalk15.green(`  \u2714 Closed: ${ws.name}`));
+        console.log(chalk16.green(`  \u2714 Closed: ${ws.name}`));
       } catch {
-        console.log(chalk15.red(`  \u2718 Failed to close: ${ws.name}`));
+        console.log(chalk16.red(`  \u2718 Failed to close: ${ws.name}`));
       }
     }
     console.log("");
@@ -14003,7 +14590,7 @@ Shutting down ${squadrantWorkspaces.length} workspace(s)...
   }
   if (!config.projects[project]) {
     console.error(
-      chalk15.red(
+      chalk16.red(
         `
   \u2718 Project '${project}' not found. Run 'squadrant projects list' to see registered projects.
 `
@@ -14014,7 +14601,7 @@ Shutting down ${squadrantWorkspaces.length} workspace(s)...
   const captainName = config.projects[project].captainName;
   const runtime = runtimes.forProject(project, config);
   console.log(
-    chalk15.bold(`
+    chalk16.bold(`
 Shutting down captain workspace for '${project}'...
 `)
   );
@@ -14038,25 +14625,25 @@ Shutting down captain workspace for '${project}'...
 
 // packages/cli/src/commands/feedback.ts
 init_dist();
-import { Command as Command15 } from "commander";
-import fs23 from "fs";
+import { Command as Command16 } from "commander";
+import fs21 from "fs";
 import os14 from "os";
-import path25 from "path";
+import path26 from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { execSync as execSync12 } from "child_process";
-import chalk16 from "chalk";
+import chalk17 from "chalk";
 var REPO_URL = "https://github.com/tu11aa/squadrant";
 function readPkgVersion() {
   try {
-    const pkgPath = path25.join(path25.dirname(fileURLToPath3(import.meta.url)), "..", "package.json");
-    return JSON.parse(fs23.readFileSync(pkgPath, "utf-8")).version ?? "unknown";
+    const pkgPath = path26.join(path26.dirname(fileURLToPath3(import.meta.url)), "..", "package.json");
+    return JSON.parse(fs21.readFileSync(pkgPath, "utf-8")).version ?? "unknown";
   } catch {
     return "unknown";
   }
 }
 function readMetrics(metricsPath) {
   try {
-    return JSON.parse(fs23.readFileSync(metricsPath, "utf-8"));
+    return JSON.parse(fs21.readFileSync(metricsPath, "utf-8"));
   } catch {
     return {};
   }
@@ -14092,21 +14679,21 @@ function buildIssueUrl(metrics, squadrantVersion) {
   });
   return `${REPO_URL}/issues/new?${params.toString()}`;
 }
-var feedbackCommand = new Command15("feedback").description("Open a pre-filled GitHub issue for feedback or bug reports").action(() => {
+var feedbackCommand = new Command16("feedback").description("Open a pre-filled GitHub issue for feedback or bug reports").action(() => {
   const config = loadConfig();
-  const metricsPath = config.metrics?.path || path25.join(os14.homedir(), ".config", "squadrant", "metrics.json");
+  const metricsPath = config.metrics?.path || path26.join(os14.homedir(), ".config", "squadrant", "metrics.json");
   const metrics = readMetrics(metricsPath);
   const version = readStamp(config) ?? readPkgVersion();
   const issueUrl = buildIssueUrl(metrics, version);
-  console.log(chalk16.bold("\nOpening feedback issue in browser...\n"));
-  console.log(chalk16.dim(`  URL: ${issueUrl.substring(0, 80)}...
+  console.log(chalk17.bold("\nOpening feedback issue in browser...\n"));
+  console.log(chalk17.dim(`  URL: ${issueUrl.substring(0, 80)}...
 `));
   try {
     execSync12(`open "${issueUrl}"`, { stdio: "ignore" });
-    console.log(chalk16.green("  \u2714 Browser opened\n"));
+    console.log(chalk17.green("  \u2714 Browser opened\n"));
   } catch {
-    console.log(chalk16.yellow("  \u26A0 Could not open browser automatically."));
-    console.log(`  Open manually: ${chalk16.cyan(issueUrl)}
+    console.log(chalk17.yellow("  \u26A0 Could not open browser automatically."));
+    console.log(`  Open manually: ${chalk17.cyan(issueUrl)}
 `);
   }
 });
@@ -14115,8 +14702,8 @@ var feedbackCommand = new Command15("feedback").description("Open a pre-filled G
 init_dist();
 init_dist();
 init_dist3();
-import { Command as Command16 } from "commander";
-import chalk17 from "chalk";
+import { Command as Command17 } from "commander";
+import chalk18 from "chalk";
 function getDateStr(yesterday) {
   return iso(daysAgo(yesterday ? 1 : 0));
 }
@@ -14135,7 +14722,7 @@ function formatStandup(standups, dateStr, raw) {
   const lines = [];
   const header = `Standup \u2014 ${dateStr}`;
   if (!raw) {
-    lines.push(chalk17.bold(`
+    lines.push(chalk18.bold(`
 ${header}
 `));
   } else {
@@ -14145,12 +14732,12 @@ ${header}
   let hasBlockers = false;
   for (const s of standups) {
     if (!raw) {
-      lines.push(chalk17.cyan.bold(`## ${s.name}`));
+      lines.push(chalk18.cyan.bold(`## ${s.name}`));
     } else {
       lines.push(`## ${s.name}`);
     }
     if (s.gitCommits.length > 0) {
-      lines.push(!raw ? chalk17.green("Done:") : "**Done:**");
+      lines.push(!raw ? chalk18.green("Done:") : "**Done:**");
       for (const commit of s.gitCommits) {
         lines.push(`  - ${commit}`);
       }
@@ -14162,7 +14749,7 @@ ${header}
         if (match) {
           const items = match[1].trim().split("\n").filter((l) => l.trim().startsWith("-"));
           if (items.length > 0 && section === "Tomorrow") {
-            lines.push(!raw ? chalk17.blue("Next:") : "**Next:**");
+            lines.push(!raw ? chalk18.blue("Next:") : "**Next:**");
             for (const item of items) lines.push(`  ${item.trim()}`);
           }
         }
@@ -14170,19 +14757,19 @@ ${header}
     }
     if (s.blockers.length > 0) {
       hasBlockers = true;
-      lines.push(!raw ? chalk17.red("Blocked:") : "**Blocked:**");
+      lines.push(!raw ? chalk18.red("Blocked:") : "**Blocked:**");
       for (const b of s.blockers) {
         lines.push(`  - ${b}`);
       }
     }
     if (s.gitCommits.length === 0 && !s.dailyLog) {
-      lines.push(!raw ? chalk17.dim("  (no activity)") : "  (no activity)");
+      lines.push(!raw ? chalk18.dim("  (no activity)") : "  (no activity)");
     }
     lines.push("");
   }
   const totalCommits = standups.reduce((sum, s) => sum + s.gitCommits.length, 0);
   if (!raw) {
-    lines.push(chalk17.dim(`--- ${totalCommits} commits${hasBlockers ? ", HAS BLOCKERS" : ""} (task tracking: no data source \u2014 #630) ---
+    lines.push(chalk18.dim(`--- ${totalCommits} commits${hasBlockers ? ", HAS BLOCKERS" : ""} (task tracking: no data source \u2014 #630) ---
 `));
   } else {
     lines.push(`---
@@ -14191,12 +14778,12 @@ ${header}
   }
   return lines.join("\n");
 }
-var standupCommand = new Command16("standup").description("Generate daily standup report from spoke vault data and git logs (zero tokens)").option("-p, --project <name>", "Show standup for a specific project only").option("-a, --all", "Show all projects (default)").option("-y, --yesterday", "Show yesterday's standup instead of today").option("-r, --raw", "Output raw markdown (for pasting into Slack/chat)").action(async (opts) => {
+var standupCommand = new Command17("standup").description("Generate daily standup report from spoke vault data and git logs (zero tokens)").option("-p, --project <name>", "Show standup for a specific project only").option("-a, --all", "Show all projects (default)").option("-y, --yesterday", "Show yesterday's standup instead of today").option("-r, --raw", "Output raw markdown (for pasting into Slack/chat)").action(async (opts) => {
   const config = loadConfig();
   const registry = new WorkspaceRegistry({ obsidian: createObsidianDriver });
   const projects = Object.entries(config.projects);
   if (projects.length === 0) {
-    console.log(chalk17.yellow("\nNo projects registered. Use: squadrant projects add <name> <path>\n"));
+    console.log(chalk18.yellow("\nNo projects registered. Use: squadrant projects add <name> <path>\n"));
     return;
   }
   const dateStr = getDateStr(!!opts.yesterday);
@@ -14205,7 +14792,7 @@ var standupCommand = new Command16("standup").description("Generate daily standu
   if (opts.project) {
     const match = projects.find(([name]) => name === opts.project);
     if (!match) {
-      console.error(chalk17.red(`Project "${opts.project}" not found.`));
+      console.error(chalk18.red(`Project "${opts.project}" not found.`));
       process.exit(1);
     }
     targets = [match];
@@ -14223,8 +14810,8 @@ var standupCommand = new Command16("standup").description("Generate daily standu
 init_dist();
 init_dist();
 init_dist3();
-import { Command as Command17 } from "commander";
-import chalk18 from "chalk";
+import { Command as Command18 } from "commander";
+import chalk19 from "chalk";
 function dedupe(items) {
   const seen = /* @__PURE__ */ new Set();
   const out = [];
@@ -14280,7 +14867,7 @@ function formatRetro(retros, fromStr, toStr, raw) {
   const lines = [];
   const header = `Retro \u2014 ${fromStr} \u2192 ${toStr}`;
   lines.push(raw ? `# ${header}
-` : chalk18.bold(`
+` : chalk19.bold(`
 ${header}
 `));
   let totalCommits = 0;
@@ -14290,39 +14877,39 @@ ${header}
     totalCommits += r.commits.length;
     totalPRs += r.mergedPRs.length;
     totalShipped += r.shipped.length;
-    lines.push(raw ? `## ${r.name}` : chalk18.cyan.bold(`## ${r.name}`));
-    renderList(lines, r.shipped, raw, "Shipped", chalk18.green);
+    lines.push(raw ? `## ${r.name}` : chalk19.cyan.bold(`## ${r.name}`));
+    renderList(lines, r.shipped, raw, "Shipped", chalk19.green);
     if (r.mergedPRs.length > 0) {
-      lines.push(raw ? `**PRs merged:**` : chalk18.green("PRs merged:"));
+      lines.push(raw ? `**PRs merged:**` : chalk19.green("PRs merged:"));
       for (const pr of r.mergedPRs) lines.push(`  - ${pr}`);
     }
-    renderList(lines, r.inProgress, raw, "In Progress", chalk18.yellow);
-    renderList(lines, r.blocked, raw, "Blocked", chalk18.red);
-    renderList(lines, r.decisions, raw, "Key Decisions", chalk18.magenta);
+    renderList(lines, r.inProgress, raw, "In Progress", chalk19.yellow);
+    renderList(lines, r.blocked, raw, "Blocked", chalk19.red);
+    renderList(lines, r.decisions, raw, "Key Decisions", chalk19.magenta);
     const metricBits = [
       `${r.commits.length} commits`,
       `${r.mergedPRs.length} PRs merged`,
       `${r.shipped.length} shipped`
     ];
-    lines.push(raw ? `*${metricBits.join(" \xB7 ")}*` : chalk18.dim(`  ${metricBits.join(" \xB7 ")}`));
+    lines.push(raw ? `*${metricBits.join(" \xB7 ")}*` : chalk19.dim(`  ${metricBits.join(" \xB7 ")}`));
     if (r.shipped.length === 0 && r.commits.length === 0 && r.mergedPRs.length === 0 && r.inProgress.length === 0 && r.blocked.length === 0) {
-      lines.push(raw ? "_(no activity in this window)_" : chalk18.dim("  (no activity in this window)"));
+      lines.push(raw ? "_(no activity in this window)_" : chalk19.dim("  (no activity in this window)"));
     }
     lines.push("");
   }
   const summary = `${totalShipped} items shipped \xB7 ${totalCommits} commits \xB7 ${totalPRs} PRs merged`;
   lines.push(raw ? `---
 *${summary}*
-` : chalk18.dim(`--- ${summary} ---
+` : chalk19.dim(`--- ${summary} ---
 `));
   return lines.join("\n");
 }
-var retroCommand = new Command17("retro").description("Generate a retro (weekly/sprint summary) from daily logs and git (zero tokens)").option("-w, --week", "Trailing 7 days (default)").option("-s, --sprint [days]", "Custom window of N days (default 14 if N omitted)").option("-p, --project <name>", "Retro for a single project").option("-a, --all", "All projects (default)").option("-r, --raw", "Raw markdown output (for pasting into Slack/Obsidian)").action(async (opts) => {
+var retroCommand = new Command18("retro").description("Generate a retro (weekly/sprint summary) from daily logs and git (zero tokens)").option("-w, --week", "Trailing 7 days (default)").option("-s, --sprint [days]", "Custom window of N days (default 14 if N omitted)").option("-p, --project <name>", "Retro for a single project").option("-a, --all", "All projects (default)").option("-r, --raw", "Raw markdown output (for pasting into Slack/Obsidian)").action(async (opts) => {
   const config = loadConfig();
   const registry = new WorkspaceRegistry({ obsidian: createObsidianDriver });
   const projects = Object.entries(config.projects);
   if (projects.length === 0) {
-    console.log(chalk18.yellow("\nNo projects registered. Use: squadrant projects add <name> <path>\n"));
+    console.log(chalk19.yellow("\nNo projects registered. Use: squadrant projects add <name> <path>\n"));
     return;
   }
   let windowDays = 7;
@@ -14339,7 +14926,7 @@ var retroCommand = new Command17("retro").description("Generate a retro (weekly/
   if (opts.project) {
     const match = projects.find(([name]) => name === opts.project);
     if (!match) {
-      console.error(chalk18.red(`Project "${opts.project}" not found.`));
+      console.error(chalk19.red(`Project "${opts.project}" not found.`));
       process.exit(1);
     }
     targets = [match];
@@ -14352,153 +14939,8 @@ var retroCommand = new Command17("retro").description("Generate a retro (weekly/
   console.log(formatRetro(retros, fromStr, toStr, raw));
 });
 
-// packages/cli/src/commands/runtime.ts
-init_dist();
-init_dist3();
-import { Command as Command18 } from "commander";
-import chalk19 from "chalk";
-function buildRegistry() {
-  return new RuntimeRegistry({
-    cmux: createCmuxDriver()
-  });
-}
-function resolveTarget(registry, config, target, useCommand) {
-  if (useCommand) {
-    return {
-      driver: registry.global(config),
-      workspaceName: config.commandName
-    };
-  }
-  if (!target) {
-    throw new Error("Missing target: pass a project name or use --command");
-  }
-  const proj = config.projects[target];
-  if (!proj) {
-    throw new Error(`Project '${target}' not found. Run 'squadrant projects list'.`);
-  }
-  return {
-    driver: registry.forProject(target, config),
-    workspaceName: proj.captainName
-  };
-}
-async function needRef(resolved) {
-  const ref = await resolved.driver.status(resolved.workspaceName);
-  if (!ref) {
-    throw new Error(`Workspace '${resolved.workspaceName}' is not running`);
-  }
-  return ref.id;
-}
-var runtimeCommand = new Command18("runtime").description("Interact with the runtime layer (workspaces). Bridges bash scripts to the RuntimeDriver.");
-runtimeCommand.command("status").description("Print 'running' or 'stopped' for a target; exit 0 if running, 1 if not").argument("[target]", "Project name").option("--command", "Target the command workspace instead of a project captain").action(async (target, opts) => {
-  const config = loadConfig();
-  const registry = buildRegistry();
-  try {
-    const resolved = resolveTarget(registry, config, target, !!opts.command);
-    const ref = await resolved.driver.status(resolved.workspaceName);
-    if (ref) {
-      console.log("running");
-      process.exit(0);
-    } else {
-      console.log("stopped");
-      process.exit(1);
-    }
-  } catch (err) {
-    console.error(chalk19.red(err.message));
-    process.exit(2);
-  }
-});
-var SEND_CONFIRM_TIMEOUT_MS = 15e3;
-var SEND_CONFIRM_POLL_MS = 500;
-async function runRuntimeSend(arg1, arg2, opts, confirmOpts) {
-  const config = loadConfig();
-  const registry = buildRegistry();
-  if (opts.command && arg2 !== void 0) {
-    throw new Error("With --command, pass only the message (not a project name)");
-  }
-  const target = opts.command ? void 0 : arg1;
-  const message = opts.command ? arg1 : arg2;
-  if (!message) throw new Error("Message is required");
-  const { requireDaemon: requireDaemon2 } = await Promise.resolve().then(() => (init_require_daemon(), require_daemon_exports));
-  const { appendCaptainMessage: appendCaptainMessage2, waitForCaptainDelivery: waitForCaptainDelivery2 } = await Promise.resolve().then(() => (init_dist2(), dist_exports2));
-  await requireDaemon2();
-  const resolved = resolveTarget(registry, config, target, !!opts.command);
-  await needRef(resolved);
-  const finalProject = opts.command ? config.commandName : target;
-  const { join: join31, dirname: dirname10 } = await import("path");
-  const { DEFAULT_CONFIG_PATH: DEFAULT_CONFIG_PATH2 } = await Promise.resolve().then(() => (init_dist(), dist_exports));
-  const stateRoot = join31(dirname10(DEFAULT_CONFIG_PATH2), "state");
-  const seq = await appendCaptainMessage2({
-    stateRoot,
-    project: finalProject,
-    text: message,
-    source: "cli"
-  });
-  const timeoutMs = confirmOpts?.timeoutMs ?? SEND_CONFIRM_TIMEOUT_MS;
-  const delivered = await waitForCaptainDelivery2({
-    stateRoot,
-    project: finalProject,
-    seq,
-    timeoutMs,
-    pollMs: confirmOpts?.pollMs ?? SEND_CONFIRM_POLL_MS
-  });
-  if (!delivered) {
-    throw new Error(
-      `Message queued for '${finalProject}' (seq=${seq}) but delivery was not confirmed within ${Math.round(timeoutMs / 1e3)}s. It may still be pending \u2014 check with 'squadrant runtime read-screen ${finalProject}${opts.command ? " --command" : ""}'.`
-    );
-  }
-}
-runtimeCommand.command("send").description("Send a message to a target workspace AND commit with Enter. With --command, the first positional is the message.").argument("<arg1>", "Project name, or the message when --command is used").argument("[arg2]", "Message (when target is a project). Omit when using --command.").option("--command", "Target the command workspace").action(async (arg1, arg2, opts) => {
-  try {
-    await runRuntimeSend(arg1, arg2, opts);
-    console.log(chalk19.green("\u2714 Delivered (confirmed)"));
-  } catch (err) {
-    console.error(chalk19.red(err.message));
-    process.exit(1);
-  }
-});
-runtimeCommand.command("list").description("List all workspaces from the global runtime").option("-j, --json", "Output as JSON").action(async (opts) => {
-  const config = loadConfig();
-  const registry = buildRegistry();
-  const driver = registry.global(config);
-  const refs = await driver.list();
-  if (opts.json) {
-    console.log(JSON.stringify(refs, null, 2));
-  } else {
-    for (const r of refs) {
-      console.log(`${r.id}	${r.name}	${r.status}`);
-    }
-  }
-});
-runtimeCommand.command("read-screen").description("Print a terminal snapshot of a target workspace").argument("[target]", "Project name").option("--command", "Target the command workspace").action(async (target, opts) => {
-  const config = loadConfig();
-  const registry = buildRegistry();
-  try {
-    const resolved = resolveTarget(registry, config, target, !!opts.command);
-    const ref = await needRef(resolved);
-    const screen = await resolved.driver.readScreen(ref);
-    process.stdout.write(screen);
-  } catch (err) {
-    console.error(chalk19.red(err.message));
-    process.exit(1);
-  }
-});
-runtimeCommand.command("stop").description("Stop a target workspace").argument("[target]", "Project name").option("--command", "Target the command workspace").action(async (target, opts) => {
-  const config = loadConfig();
-  const registry = buildRegistry();
-  try {
-    const resolved = resolveTarget(registry, config, target, !!opts.command);
-    const ref = await resolved.driver.status(resolved.workspaceName);
-    if (!ref) {
-      console.log(chalk19.yellow(`Workspace '${resolved.workspaceName}' already stopped`));
-      return;
-    }
-    await resolved.driver.stop(ref.id);
-    console.log(chalk19.green(`\u2714 Stopped ${resolved.workspaceName}`));
-  } catch (err) {
-    console.error(chalk19.red(err.message));
-    process.exit(1);
-  }
-});
+// packages/cli/src/index.ts
+init_runtime2();
 
 // packages/cli/src/commands/workspace.ts
 init_dist();
@@ -14539,9 +14981,9 @@ workspaceCommand.command("read").description("Print the contents of a scope-rela
   const config = loadConfig();
   const registry = buildRegistry2();
   try {
-    const { projectTarget, path: path34 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
+    const { projectTarget, path: path35 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
     const driver = resolveDriver(registry, config, projectTarget, !!opts.hub);
-    const content = await driver.read(path34);
+    const content = await driver.read(path35);
     process.stdout.write(content);
   } catch (err) {
     console.error(chalk20.red(err.message));
@@ -14553,26 +14995,26 @@ workspaceCommand.command("write").description("Write content to a scope-relative
   const registry = buildRegistry2();
   try {
     let projectTarget;
-    let path34;
+    let path35;
     let rawContent;
     if (opts.hub) {
       if (arg3 !== void 0) {
         throw new Error("With --hub, pass only the path and content");
       }
       projectTarget = void 0;
-      path34 = arg1;
+      path35 = arg1;
       rawContent = arg2;
     } else {
       if (arg3 === void 0) {
         throw new Error("Missing content \u2014 usage: <project> <path> <content>");
       }
       projectTarget = arg1;
-      path34 = arg2;
+      path35 = arg2;
       rawContent = arg3;
     }
     const driver = resolveDriver(registry, config, projectTarget, !!opts.hub);
     const payload = rawContent === "-" ? await readStdin() : rawContent;
-    await driver.write(path34, payload);
+    await driver.write(path35, payload);
   } catch (err) {
     console.error(chalk20.red(err.message));
     process.exit(1);
@@ -14582,9 +15024,9 @@ workspaceCommand.command("list").description("List entries in a scope-relative d
   const config = loadConfig();
   const registry = buildRegistry2();
   try {
-    const { projectTarget, path: path34 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
+    const { projectTarget, path: path35 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
     const driver = resolveDriver(registry, config, projectTarget, !!opts.hub);
-    const entries = await driver.list(path34);
+    const entries = await driver.list(path35);
     for (const entry of entries) console.log(entry);
   } catch (err) {
     console.error(chalk20.red(err.message));
@@ -14595,9 +15037,9 @@ workspaceCommand.command("exists").description("Exit 0 if path exists, 1 if not"
   const config = loadConfig();
   const registry = buildRegistry2();
   try {
-    const { projectTarget, path: path34 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
+    const { projectTarget, path: path35 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
     const driver = resolveDriver(registry, config, projectTarget, !!opts.hub);
-    const ok2 = await driver.exists(path34);
+    const ok2 = await driver.exists(path35);
     process.exit(ok2 ? 0 : 1);
   } catch (err) {
     console.error(chalk20.red(err.message));
@@ -14608,9 +15050,9 @@ workspaceCommand.command("mkdir").description("Recursively create a scope-relati
   const config = loadConfig();
   const registry = buildRegistry2();
   try {
-    const { projectTarget, path: path34 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
+    const { projectTarget, path: path35 } = resolveTargetAndPath(arg1, arg2, !!opts.hub);
     const driver = resolveDriver(registry, config, projectTarget, !!opts.hub);
-    await driver.mkdir(path34);
+    await driver.mkdir(path35);
   } catch (err) {
     console.error(chalk20.red(err.message));
     process.exit(1);
@@ -14649,8 +15091,8 @@ init_dist3();
 init_dist();
 import { Command as Command21 } from "commander";
 import chalk22 from "chalk";
-import fs24 from "fs";
-import path26 from "path";
+import fs22 from "fs";
+import path27 from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 function parseScope(v) {
   if (v !== "user" && v !== "project") {
@@ -14659,10 +15101,10 @@ function parseScope(v) {
   return v;
 }
 function findPackageRoot3() {
-  let dir = path26.dirname(fileURLToPath4(import.meta.url));
+  let dir = path27.dirname(fileURLToPath4(import.meta.url));
   while (dir !== "/" && dir !== "") {
-    if (fs24.existsSync(path26.join(dir, "package.json"))) return dir;
-    dir = path26.dirname(dir);
+    if (fs22.existsSync(path27.join(dir, "package.json"))) return dir;
+    dir = path27.dirname(dir);
   }
   return process.cwd();
 }
@@ -14857,12 +15299,12 @@ init_dist();
 init_dist();
 init_dist2();
 import { Command as Command23 } from "commander";
-import fs25 from "fs";
+import fs23 from "fs";
 import { fileURLToPath as fileURLToPath5 } from "url";
-import { dirname as dirname6, join as join26 } from "path";
+import { dirname as dirname5, join as join26 } from "path";
 import chalk23 from "chalk";
 function runConfigCheck(opts) {
-  const raw = JSON.parse(fs25.readFileSync(opts.configPath, "utf-8"));
+  const raw = JSON.parse(fs23.readFileSync(opts.configPath, "utf-8"));
   const def = getDefaultConfig();
   const items = detectDrift(raw, def);
   let working = raw;
@@ -14879,7 +15321,7 @@ function runConfigCheck(opts) {
     stamped = true;
   }
   if (opts.fix || opts.accept || stamped) {
-    fs25.writeFileSync(opts.configPath, JSON.stringify(working, null, 2) + "\n");
+    writeConfigFileSync(opts.configPath, JSON.stringify(working, null, 2) + "\n");
   }
   return { items, applied, remaining, stamped };
 }
@@ -14950,7 +15392,7 @@ function printItems(items) {
 var configCommand = new Command23("config").description("Inspect and reconcile squadrant config");
 configCommand.command("check").description("Detect config drift vs the current default schema").option("--fix", "Apply the safe tier (add missing, remove deprecated)", false).option("--accept", "Stamp the current version without changing config (dismiss advisories)", false).option("--json", "Output drift items as JSON", false).action((opts) => {
   const pkgVersion = readPkgVersion2();
-  if (!fs25.existsSync(DEFAULT_CONFIG_PATH)) {
+  if (!fs23.existsSync(DEFAULT_CONFIG_PATH)) {
     console.log(chalk23.yellow("No config found \u2014 run `squadrant init` first."));
     return;
   }
@@ -14995,8 +15437,8 @@ configCommand.command("set").description("Write a config value by dotted key (e.
   }
 });
 function readPkgVersion2() {
-  const pkgPath = join26(dirname6(fileURLToPath5(import.meta.url)), "..", "package.json");
-  return JSON.parse(fs25.readFileSync(pkgPath, "utf-8")).version;
+  const pkgPath = join26(dirname5(fileURLToPath5(import.meta.url)), "..", "package.json");
+  return JSON.parse(fs23.readFileSync(pkgPath, "utf-8")).version;
 }
 
 // packages/cli/src/commands/heal.ts
@@ -15020,6 +15462,15 @@ function buildHealStatus(components) {
 }
 async function runHealStatus(opts) {
   const { project, json, stdout, stderr } = opts;
+  const isDaemonAlive = opts.isDaemonAlive ?? (() => isDaemonSocketLive(SOCK));
+  if (!await isDaemonAlive()) {
+    if (json) {
+      stdout.write(JSON.stringify({ healthy: false, daemonUnreachable: true, components: [] }) + "\n");
+    } else {
+      stderr.write("daemon unreachable \u2014 start the daemon first (squadrant heal daemon)\n");
+    }
+    return 1;
+  }
   let rows;
   try {
     rows = await opts.queryHealth(project);
@@ -15149,17 +15600,18 @@ var groupCommand = new Command26("group").description("Cross-project intra-group
 // packages/cli/src/commands/ping.ts
 init_dist();
 init_dist2();
-import { join as join27, dirname as dirname7 } from "path";
+init_runtime2();
+init_require_daemon();
+import { join as join27, dirname as dirname6 } from "path";
 import { Command as Command27 } from "commander";
 import chalk27 from "chalk";
-init_require_daemon();
 async function runPing(project, message) {
   const config = loadConfig();
   const registry = buildRegistry();
   const resolved = resolveTarget(registry, config, project, false);
   await requireDaemon();
   await needRef(resolved);
-  const stateRoot = join27(dirname7(DEFAULT_CONFIG_PATH), "state");
+  const stateRoot = join27(dirname6(DEFAULT_CONFIG_PATH), "state");
   await appendCaptainMessage({
     stateRoot,
     project,
@@ -15236,8 +15688,8 @@ var cmuxCommand = new Command28("cmux").description("cmux integration helpers").
 // packages/cli/src/commands/effort.ts
 init_dist();
 init_dist2();
-import fs26 from "fs";
-import path27 from "path";
+import fs24 from "fs";
+import path28 from "path";
 import { Command as Command29 } from "commander";
 import chalk29 from "chalk";
 var VALID_EFFORTS = ["max", "balance", "low"];
@@ -15280,9 +15732,9 @@ function effortScopeLabel(projectName) {
 }
 function canonical(p) {
   try {
-    return fs26.realpathSync(p);
+    return fs24.realpathSync(p);
   } catch {
-    return path27.resolve(p);
+    return path28.resolve(p);
   }
 }
 async function notifyCaptainsOfEffort(effort, config, driver, cwd = process.cwd(), append, scopeProject, projectConfigRoot) {
@@ -15332,7 +15784,7 @@ var effortCommand = new Command29("effort").description("Get or set the crew tok
     const config = loadConfig();
     const registry = new RuntimeRegistry2({ cmux: createCmuxDriver2() });
     const driver = registry.global(config);
-    const stateRoot = path27.join(path27.dirname(DEFAULT_CONFIG_PATH), "state");
+    const stateRoot = path28.join(path28.dirname(DEFAULT_CONFIG_PATH), "state");
     const append = (project, text) => appendCaptainMessage({ stateRoot, project, text, source: "daemon" });
     await notifyCaptainsOfEffort(effort, config, driver, process.cwd(), append, options.project);
   } catch {
@@ -15342,13 +15794,13 @@ var effortCommand = new Command29("effort").description("Get or set the crew tok
 
 // packages/cli/src/commands/tokens.ts
 init_dist();
-import fs27 from "fs";
-import path28 from "path";
+import fs25 from "fs";
+import path29 from "path";
 import os15 from "os";
 import readline3 from "readline";
 import { Command as Command30 } from "commander";
 import chalk30 from "chalk";
-var CLAUDE_PROJECTS_DIR = path28.join(os15.homedir(), ".claude", "projects");
+var CLAUDE_PROJECTS_DIR = path29.join(os15.homedir(), ".claude", "projects");
 function parseTranscriptLine(rawLine) {
   const line = rawLine.trim();
   if (!line) return { timestamp: null, usage: null };
@@ -15398,7 +15850,7 @@ function foldTranscriptLine(agg, rawLine, state) {
 async function aggregateTranscriptFile(filePath) {
   const agg = emptySessionAggregate();
   const state = { lastCacheRead: null };
-  const rl = readline3.createInterface({ input: fs27.createReadStream(filePath), crlfDelay: Infinity });
+  const rl = readline3.createInterface({ input: fs25.createReadStream(filePath), crlfDelay: Infinity });
   for await (const line of rl) {
     foldTranscriptLine(agg, line, state);
   }
@@ -15466,22 +15918,22 @@ function buildRoleReport(role, sessions) {
 }
 async function readdirSafe(dir) {
   try {
-    return await fs27.promises.readdir(dir);
+    return await fs25.promises.readdir(dir);
   } catch {
     return [];
   }
 }
 async function listJsonlFiles(dir) {
   const entries = await readdirSafe(dir);
-  return entries.filter((e) => e.endsWith(".jsonl")).map((e) => path28.join(dir, e));
+  return entries.filter((e) => e.endsWith(".jsonl")).map((e) => path29.join(dir, e));
 }
 async function findTranscriptDirs(claudeProjectsDir, captainSlug) {
   const entries = await readdirSafe(claudeProjectsDir);
   const captainDirs = [];
   const crewDirs = [];
   for (const entry of entries) {
-    if (entry === captainSlug) captainDirs.push(path28.join(claudeProjectsDir, entry));
-    else if (isCrewDirName(entry, captainSlug)) crewDirs.push(path28.join(claudeProjectsDir, entry));
+    if (entry === captainSlug) captainDirs.push(path29.join(claudeProjectsDir, entry));
+    else if (isCrewDirName(entry, captainSlug)) crewDirs.push(path29.join(claudeProjectsDir, entry));
   }
   return { captainDirs, crewDirs };
 }
@@ -15633,12 +16085,12 @@ var tokensCommand = new Command30("tokens").description(
 // packages/cli/src/commands/telegram.ts
 init_dist();
 init_dist2();
-import { join as join28, dirname as dirname8 } from "path";
+import { join as join28, dirname as dirname7 } from "path";
 import { emitKeypressEvents } from "readline";
 import { Command as Command31 } from "commander";
 import chalk31 from "chalk";
 function defaultStateRoot() {
-  return join28(dirname8(DEFAULT_CONFIG_PATH), "state");
+  return join28(dirname7(DEFAULT_CONFIG_PATH), "state");
 }
 async function questionMasked() {
   return new Promise((resolve4) => {
@@ -15968,8 +16420,8 @@ import { join as join29 } from "path";
 import { homedir as homedir21 } from "os";
 
 // packages/cli/src/lib/captain-session-registry.ts
-import fs28 from "fs";
-import path29 from "path";
+import fs26 from "fs";
+import path30 from "path";
 
 // packages/cli/src/lib/handoff-facts.ts
 var STALE_FETCH_WARNING_MS = 24 * 60 * 60 * 1e3;
@@ -16020,15 +16472,15 @@ function assembleHandoffFacts(live, claudeMem, gapSessions, checkpoint, now, ext
 // packages/cli/src/lib/captain-session-registry.ts
 var CAPTAIN_SESSION_REGISTRY_FILE = "captain-sessions.jsonl";
 function appendCaptainSession(spokeVault, record) {
-  fs28.mkdirSync(spokeVault, { recursive: true });
-  const file = path29.join(spokeVault, CAPTAIN_SESSION_REGISTRY_FILE);
-  fs28.appendFileSync(file, JSON.stringify(record) + "\n");
+  fs26.mkdirSync(spokeVault, { recursive: true });
+  const file = path30.join(spokeVault, CAPTAIN_SESSION_REGISTRY_FILE);
+  fs26.appendFileSync(file, JSON.stringify(record) + "\n");
 }
 function readCaptainSessionRegistry(spokeVault) {
-  const file = path29.join(spokeVault, CAPTAIN_SESSION_REGISTRY_FILE);
-  if (!fs28.existsSync(file)) return [];
+  const file = path30.join(spokeVault, CAPTAIN_SESSION_REGISTRY_FILE);
+  if (!fs26.existsSync(file)) return [];
   const records = [];
-  for (const line of fs28.readFileSync(file, "utf-8").split("\n")) {
+  for (const line of fs26.readFileSync(file, "utf-8").split("\n")) {
     if (!line.trim()) continue;
     try {
       records.push(JSON.parse(line));
@@ -16131,13 +16583,13 @@ function hooksCommand() {
 // packages/cli/src/commands/work.ts
 init_dist();
 init_dist2();
-import path30 from "path";
+import path31 from "path";
 import { Command as Command33 } from "commander";
 import chalk32 from "chalk";
 function detectCurrentProject(config, cwd = process.cwd()) {
   for (const [name, proj] of Object.entries(config.projects)) {
     const projPath = resolveHome(proj.path);
-    if (cwd === projPath || cwd.startsWith(projPath + path30.sep)) return name;
+    if (cwd === projPath || cwd.startsWith(projPath + path31.sep)) return name;
   }
   return void 0;
 }
@@ -16269,14 +16721,14 @@ var workCommand = new Command33("work").description("Track your own in-flight wo
 // packages/cli/src/commands/handoff.ts
 init_dist();
 import { Command as Command34 } from "commander";
-import path33 from "path";
+import path34 from "path";
 import os16 from "os";
 
 // packages/cli/src/lib/handoff-live-repo.ts
 init_dist();
 import { execFileSync as execFileSync8 } from "child_process";
-import fs29 from "fs";
-import path31 from "path";
+import fs27 from "fs";
+import path32 from "path";
 
 // packages/cli/src/lib/handoff-branch-state.ts
 function tryRun(runner, cmd, args, cwd) {
@@ -16395,7 +16847,7 @@ function gatherOpenPRs(runner, projectPath) {
   }
 }
 function gatherLiveCrews(tasks) {
-  return tasks.filter((t) => !TERMINAL_STATES.has(t.state)).map((t) => ({ name: t.name ?? t.id, state: t.state, task: t.task, question: t.question }));
+  return tasks.filter((t) => !TERMINAL_STATES.has(t.state)).map((t) => ({ name: t.name ?? t.id, state: t.state, task: t.task, question: t.question, operatorHold: t.operatorHold }));
 }
 function ghAheadOfBase(runner, projectPath, nameWithOwner, base, branch) {
   return tryInt(
@@ -16415,7 +16867,7 @@ function localAheadOfBase(runner, projectPath, base) {
 }
 function readFetchAgeMs(projectPath, now) {
   try {
-    const stat2 = fs29.statSync(path31.join(projectPath, ".git", "FETCH_HEAD"));
+    const stat2 = fs27.statSync(path32.join(projectPath, ".git", "FETCH_HEAD"));
     return Math.max(0, now - stat2.mtime.getTime());
   } catch {
     return null;
@@ -16486,7 +16938,7 @@ function gatherLiveRepoState(projectPath, fallbackBaseBranch, tasks, runner = de
 
 // packages/cli/src/lib/handoff-claude-mem.ts
 import { createRequire } from "module";
-import fs30 from "fs";
+import fs28 from "fs";
 var { DatabaseSync } = createRequire(import.meta.url)("node:sqlite");
 var CLAUDE_MEM_RECENCY_LIMIT = 20;
 function decisionText(row) {
@@ -16500,7 +16952,7 @@ function decisionText(row) {
   return row.narrative ?? "";
 }
 function queryClaudeMem(dbPath, project) {
-  if (!fs30.existsSync(dbPath)) return null;
+  if (!fs28.existsSync(dbPath)) return null;
   let db;
   try {
     db = new DatabaseSync(dbPath, { readOnly: true });
@@ -16543,7 +16995,7 @@ function queryClaudeMem(dbPath, project) {
 }
 
 // packages/cli/src/lib/handoff-transcript.ts
-import fs31 from "fs";
+import fs29 from "fs";
 var TRANSCRIPT_BYTE_CAP = 2e5;
 function tailOf(content, byteCap) {
   const buf = Buffer.from(content, "utf-8");
@@ -16572,27 +17024,27 @@ function extractMessages(tailText) {
   return { lastUserMessage, lastAssistantText };
 }
 function extractTranscriptTail(transcriptPath, byteCap = TRANSCRIPT_BYTE_CAP) {
-  if (!fs31.existsSync(transcriptPath)) return null;
-  const content = fs31.readFileSync(transcriptPath, "utf-8");
+  if (!fs29.existsSync(transcriptPath)) return null;
+  const content = fs29.readFileSync(transcriptPath, "utf-8");
   const { lastUserMessage, lastAssistantText } = extractMessages(tailOf(content, byteCap));
-  const mtimeIso = fs31.statSync(transcriptPath).mtime.toISOString();
+  const mtimeIso = fs29.statSync(transcriptPath).mtime.toISOString();
   return { path: transcriptPath, mtimeIso, lastUserMessage, lastAssistantText };
 }
 
 // packages/cli/src/lib/handoff-archive.ts
-import fs32 from "fs";
-import path32 from "path";
+import fs30 from "fs";
+import path33 from "path";
 function readNewestArchivedHandoff(spokeVault, now) {
-  const dir = path32.join(spokeVault, "handoffs");
-  if (!fs32.existsSync(dir)) return null;
-  const candidates = fs32.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".json")).map((e) => {
-    const full = path32.join(dir, e.name);
-    return { name: e.name, full, mtime: fs32.statSync(full).mtime };
+  const dir = path33.join(spokeVault, "handoffs");
+  if (!fs30.existsSync(dir)) return null;
+  const candidates = fs30.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile() && e.name.endsWith(".json")).map((e) => {
+    const full = path33.join(dir, e.name);
+    return { name: e.name, full, mtime: fs30.statSync(full).mtime };
   }).sort((a, b) => b.mtime.getTime() - a.mtime.getTime());
   for (const candidate of candidates) {
     let content;
     try {
-      content = JSON.parse(fs32.readFileSync(candidate.full, "utf-8"));
+      content = JSON.parse(fs30.readFileSync(candidate.full, "utf-8"));
     } catch {
       continue;
     }
@@ -16602,7 +17054,7 @@ function readNewestArchivedHandoff(spokeVault, now) {
 }
 
 // packages/cli/src/commands/handoff.ts
-var CLAUDE_MEM_DB_PATH = path33.join(os16.homedir(), ".claude-mem", "claude-mem.db");
+var CLAUDE_MEM_DB_PATH = path34.join(os16.homedir(), ".claude-mem", "claude-mem.db");
 async function defaultFetchTasks(project) {
   return await squadrantdCall({ kind: "list", project });
 }
@@ -16661,8 +17113,8 @@ init_dist();
 init_dist();
 init_dist();
 init_dist();
-var __dirname = dirname9(fileURLToPath6(import.meta.url));
-var pkg = JSON.parse(readFileSync16(join30(__dirname, "..", "package.json"), "utf-8"));
+var __dirname = dirname8(fileURLToPath6(import.meta.url));
+var pkg = JSON.parse(readFileSync15(join30(__dirname, "..", "package.json"), "utf-8"));
 ensureRuntimeSynced({
   sourceRoot: join30(__dirname, ".."),
   runtimeRoot: join30(homedir22(), ".config", "squadrant")
@@ -16671,11 +17123,11 @@ if (process.argv[2] !== "config") {
   try {
     const cfgPath = join30(homedir22(), ".config", "squadrant", "config.json");
     if (existsSync13(cfgPath)) {
-      const cfg = JSON.parse(readFileSync16(cfgPath, "utf-8"));
+      const cfg = JSON.parse(readConfigFileSync(cfgPath));
       if (needsCheck(cfg, pkg.version)) {
         const items = detectDrift(cfg, getDefaultConfig());
         if (items.length === 0) {
-          writeFileSync12(cfgPath, JSON.stringify(withStamp(cfg, pkg.version), null, 2) + "\n");
+          writeConfigFileSync(cfgPath, JSON.stringify(withStamp(cfg, pkg.version), null, 2) + "\n");
         } else {
           const from = cfg._squadrantVersion ?? "an earlier version";
           process.stderr.write(