squadrant 0.19.3 → 0.19.5

package/dist/index.js

@@ -1587,6 +1587,11 @@ function reduce(rec, ev, now) {
       return stampAttempt(base, { resumeRef: ev.resumeRef }, now);
     case "task.turn.started":
       return { ...stampAttempt(base, {}, now), state: "working", pendingTool: void 0, pendingMonitor: void 0 };
+    case "task.turn.failed":
+    // #763: a crew's turn died on an API error (StopFailure hook). Anti-#2576:
+    // NOT task.failed — a hook may never terminalize a task. Falls through to
+    // the exact same turn-boundary transition as task.turn.completed below;
+    // only the notify message (reduce.ts formatMessage) differs.
     case "task.turn.completed":
       if (isStickyAttention(rec.state))
         return { ...rec, lastHeartbeat: now, lastEvent: ev.type };
@@ -1702,6 +1707,9 @@ function formatMessage(rec, event) {
       return `CREW STALLED ${tag}: no heartbeat in ${rec.heartbeatBudgetMs}ms`;
     }
     case "awaiting-input":
+      if (event?.type === "task.turn.failed") {
+        return `CREW TURN FAILED ${tag}: API error ended the turn (not a stall) \u2014 ${event.error}`;
+      }
       return `CREW IDLE ${tag}: turn ended, awaiting your reply.`;
     default:
       return null;
@@ -2111,6 +2119,7 @@ var init_reduce = __esm({
       "task.session",
       "task.turn.started",
       "task.turn.completed",
+      "task.turn.failed",
       "task.delta",
       "task.input.requested",
       "task.approval.requested",
@@ -3022,6 +3031,26 @@ function parseProgramArgs(plistXml) {
     return null;
   return { nodeBin: xmlUnescape(m[1]), daemonEntry: xmlUnescape(m[2]) };
 }
+function isVersionUpgrade(registeredEntry, thisEntry) {
+  const a = registeredEntry.split("/");
+  const b = thisEntry.split("/");
+  if (a.length !== b.length)
+    return false;
+  let diffIndex = -1;
+  for (let i = 0; i < a.length; i++) {
+    if (a[i] !== b[i]) {
+      if (diffIndex !== -1)
+        return false;
+      diffIndex = i;
+    }
+  }
+  if (diffIndex === -1)
+    return false;
+  const versionedSegment = /^(.+)@([^@]+)$/;
+  const ma = a[diffIndex].match(versionedSegment);
+  const mb = b[diffIndex].match(versionedSegment);
+  return ma !== null && mb !== null && ma[1] === mb[1] && ma[2] !== mb[2];
+}
 function detectForeignInstall(parsed, thisEntry, registeredEntryExists) {
   if (!parsed)
     return null;
@@ -3029,7 +3058,11 @@ function detectForeignInstall(parsed, thisEntry, registeredEntryExists) {
     return null;
   if (!registeredEntryExists)
     return null;
-  return { registeredEntry: parsed.daemonEntry, thisEntry };
+  return {
+    registeredEntry: parsed.daemonEntry,
+    thisEntry,
+    isUpgrade: isVersionUpgrade(parsed.daemonEntry, thisEntry)
+  };
 }
 function sanitizePathForPlist(path36) {
   const seen = /* @__PURE__ */ new Set();
@@ -3196,7 +3229,7 @@ function forceKickstartAndVerify(target, opts = {}) {
   const pollDelayMs = opts.pollDelayMs ?? 300;
   const kickstartRetries = opts.kickstartRetries ?? 10;
   const kickstartRetryDelayMs = opts.kickstartRetryDelayMs ?? 300;
-  const pidBefore = getDaemonPid(target);
+  const pidBefore = opts.pidBefore !== void 0 ? opts.pidBefore : getDaemonPid(target);
   let kickstartError = null;
   for (let i = 0; i < kickstartRetries; i++) {
     try {
@@ -3233,6 +3266,9 @@ function forceKickstartAndVerify(target, opts = {}) {
 function isOperatorInitiatedCommand(topLevelArg) {
   return topLevelArg !== void 0 && OPERATOR_INITIATED_COMMANDS.has(topLevelArg);
 }
+function isReadOnlyCrewCommand(argv) {
+  return argv[2] === "crew" && argv[3] !== void 0 && READ_ONLY_CREW_SUBCOMMANDS.has(argv[3]);
+}
 function ensureDaemon(nodeBin = process.execPath, opts = {}) {
   if (restartInFlight)
     return;
@@ -3253,8 +3289,10 @@ function ensureDaemon(nodeBin = process.execPath, opts = {}) {
   try {
     const drift = computeDaemonDrift(nodeBin);
     if (drift.foreignInstall) {
-      process.stderr.write(printForeignInstallError(drift.foreignInstall));
-      return;
+      const decision = decideForeignInstall(drift.foreignInstall);
+      process.stderr.write(decision.message);
+      if (!decision.proceed)
+        return;
     }
     applyDaemonDrift(drift);
   } catch (e) {
@@ -3264,6 +3302,12 @@ function ensureDaemon(nodeBin = process.execPath, opts = {}) {
     releaseDaemonLock();
   }
 }
+function decideForeignInstall(foreign) {
+  if (foreign.isUpgrade) {
+    return { proceed: true, message: printVersionUpgradeNotice(foreign) };
+  }
+  return { proceed: false, message: printForeignInstallError(foreign) };
+}
 function printForeignInstallError(foreign) {
   return `[squadrant] refusing to restart the daemon: the registered launchd config belongs to a DIFFERENT squadrant install than this one.
   registered install: ${foreign.registeredEntry}
@@ -3271,14 +3315,19 @@ function printForeignInstallError(foreign) {
   Two squadrant installs on this machine will keep fighting over the daemon (#670). Uninstall the one you don't use, then run \`squadrant heal daemon\` to reconcile.
 `;
 }
+function printVersionUpgradeNotice(foreign) {
+  return `[squadrant] upgraded plist: ${foreign.registeredEntry} -> ${foreign.thisEntry}
+`;
+}
 function reregisterDaemon(nodeBin = process.execPath, kickstartOpts = {}) {
   if (!tryAcquireDaemonLock()) {
     throw new Error("could not acquire the daemon lock \u2014 another squadrant process is already restarting the daemon");
   }
   try {
     const drift = computeDaemonDrift(nodeBin);
+    const pidBeforeReconcile = getDaemonPid(drift.target);
     reconcilePlistAndService(drift);
-    const result = forceKickstartAndVerify(drift.target, kickstartOpts);
+    const result = forceKickstartAndVerify(drift.target, { ...kickstartOpts, pidBefore: pidBeforeReconcile });
     if (!result.restarted) {
       throw new Error(`daemon did not restart (pid before=${result.pidBefore ?? "none"}, after=${result.pidAfter ?? "none"}) \u2014 \`launchctl kickstart -k ${drift.target}\` ran but the pid never changed`);
     }
@@ -3287,13 +3336,14 @@ function reregisterDaemon(nodeBin = process.execPath, kickstartOpts = {}) {
     releaseDaemonLock();
   }
 }
-var LABEL, AGENT_BINS, restartInFlight, OPERATOR_INITIATED_COMMANDS;
+var LABEL, AGENT_BINS, restartInFlight, OPERATOR_INITIATED_COMMANDS, READ_ONLY_CREW_SUBCOMMANDS;
 var init_launchd = __esm({
   "packages/core/dist/launchd.js"() {
     LABEL = "com.squadrant.daemon";
     AGENT_BINS = ["cmux", "claude", "opencode", "codex", "gemini", "node"];
     restartInFlight = false;
     OPERATOR_INITIATED_COMMANDS = /* @__PURE__ */ new Set(["launch", "init"]);
+    READ_ONLY_CREW_SUBCOMMANDS = /* @__PURE__ */ new Set(["list", "read", "tasks"]);
   }
 });
 
@@ -3990,6 +4040,51 @@ var init_captain_delivery = __esm({
   }
 });
 
+// packages/core/dist/daemon/down-alert.js
+function pad2(n) {
+  return String(n).padStart(2, "0");
+}
+function formatLocalDateTime(d) {
+  return `${d.getFullYear()}-${pad2(d.getMonth() + 1)}-${pad2(d.getDate())} ${pad2(d.getHours())}:${pad2(d.getMinutes())}`;
+}
+function formatTzOffset(d) {
+  const offMin = -d.getTimezoneOffset();
+  const sign = offMin >= 0 ? "+" : "-";
+  const abs = Math.abs(offMin);
+  const hh = pad2(Math.floor(abs / 60));
+  const mm = abs % 60;
+  return mm === 0 ? `${sign}${hh}` : `${sign}${hh}:${pad2(mm)}`;
+}
+function formatDownAlertText(opts) {
+  const start = new Date(opts.startTs);
+  const end = new Date(opts.endTs);
+  return `\u26A0\uFE0F daemon was down ${formatLocalDateTime(start)} \u2192 ${formatLocalDateTime(end)} (${formatTzOffset(end)}), ${opts.minutes} min (last exit reason=${opts.reasonText})`;
+}
+function formatRelative(ms) {
+  const minutes = Math.round(ms / 6e4);
+  if (minutes < 60)
+    return `${minutes} min`;
+  const hours = Math.floor(minutes / 60);
+  const remMinutes = minutes % 60;
+  if (hours < 24)
+    return remMinutes > 0 ? `${hours}h ${remMinutes}m` : `${hours}h`;
+  const days = Math.floor(hours / 24);
+  const remHours = hours % 24;
+  return remHours > 0 ? `${days}d ${remHours}h` : `${days}d`;
+}
+function stalePrefix(generatedAtMs, deliveredAtMs) {
+  const ageMs = deliveredAtMs - generatedAtMs;
+  if (ageMs <= STALE_ALERT_THRESHOLD_MS)
+    return null;
+  return `[stale \u2014 generated ${formatRelative(ageMs)} ago] `;
+}
+var STALE_ALERT_THRESHOLD_MS;
+var init_down_alert = __esm({
+  "packages/core/dist/daemon/down-alert.js"() {
+    STALE_ALERT_THRESHOLD_MS = 60 * 60 * 1e3;
+  }
+});
+
 // packages/core/dist/control-channel.js
 function fallsBackToPane(o) {
   return o.status === "gone" || o.status === "unsupported";
@@ -4142,12 +4237,20 @@ function ensureSocksDir(dir = CC_SOCKS_DIR) {
   if ((fs9.statSync(dir).mode & 511) !== 448)
     fs9.chmodSync(dir, 448);
 }
-async function pollFirstTurnConfirmedAt(getTaskRecord, project, id) {
-  const deadline = Date.now() + FIRST_TURN_HOOK_CONFIRM_WINDOW_MS;
+async function pollFirstTurnConfirmedAt(getTaskRecord, project, id, scrapeSettled, cancel) {
+  let scrapeSettledAt;
+  const markSettled = () => {
+    scrapeSettledAt ??= Date.now();
+  };
+  scrapeSettled.then(markSettled, markSettled);
+  const hardDeadline = Date.now() + FIRST_TURN_HOOK_CONFIRM_MAX_MS;
   for (; ; ) {
+    if (cancel.stopped)
+      return false;
     const rec = await getTaskRecord(project, id).catch(() => void 0);
     if (rec?.firstTurnConfirmedAt)
       return true;
+    const deadline = scrapeSettledAt !== void 0 ? Math.min(hardDeadline, scrapeSettledAt + FIRST_TURN_HOOK_CONFIRM_GRACE_MS) : hardDeadline;
     if (Date.now() >= deadline)
       return false;
     await new Promise((r) => setTimeout(r, FIRST_TURN_HOOK_POLL_INTERVAL_MS));
@@ -4329,7 +4432,9 @@ async function runCrewSpawn(input, config, deps) {
 
 ${buildCompletionProtocol(rec.id, input.project)}`, preLaunchScreen);
     const scrapeDelivered = sendPromise.then((r) => r.delivered).catch(() => false);
-    const delivered = hooksInstalled && deps.getTaskRecord ? await firstTrueOrBothFalse(scrapeDelivered, pollFirstTurnConfirmedAt(deps.getTaskRecord, input.project, rec.id)) : await scrapeDelivered;
+    const cancelHookPoll = { stopped: false };
+    const delivered = hooksInstalled && deps.getTaskRecord ? await firstTrueOrBothFalse(scrapeDelivered, pollFirstTurnConfirmedAt(deps.getTaskRecord, input.project, rec.id, scrapeDelivered, cancelHookPoll)) : await scrapeDelivered;
+    cancelHookPoll.stopped = true;
     if (!delivered) {
       process.stderr.write(`\u26A0\uFE0F  First turn not delivered for crew '${name}' \u2014 use 'squadrant crew send ${input.project} ${name}' to re-send the task.
 `);
@@ -4611,7 +4716,7 @@ async function runCrewList(project, runtime, workspaceId) {
     surfaceId: c.surfaceId
   }));
 }
-var CC_SOCKS_DIR, FIRST_TURN_INLINE_MAX_BYTES, TEMPLATES_DIR, STATE_ROOT, FIRST_TURN_HOOK_CONFIRM_WINDOW_MS, FIRST_TURN_HOOK_POLL_INTERVAL_MS, CLOSE_LOOKUP_RETRIES, CLOSE_LOOKUP_RETRY_DELAY_MS;
+var CC_SOCKS_DIR, FIRST_TURN_INLINE_MAX_BYTES, TEMPLATES_DIR, STATE_ROOT, FIRST_TURN_HOOK_CONFIRM_GRACE_MS, FIRST_TURN_HOOK_CONFIRM_MAX_MS, FIRST_TURN_HOOK_POLL_INTERVAL_MS, CLOSE_LOOKUP_RETRIES, CLOSE_LOOKUP_RETRY_DELAY_MS;
 var init_crew_spawn = __esm({
   "packages/core/dist/crew-spawn.js"() {
     init_control_channel();
@@ -4623,7 +4728,8 @@ var init_crew_spawn = __esm({
     FIRST_TURN_INLINE_MAX_BYTES = 1200;
     TEMPLATES_DIR = path9.join(os4.homedir(), ".config", "squadrant", "templates");
     STATE_ROOT = path9.join(os4.homedir(), ".config", "squadrant", "state");
-    FIRST_TURN_HOOK_CONFIRM_WINDOW_MS = 1e5;
+    FIRST_TURN_HOOK_CONFIRM_GRACE_MS = 15e3;
+    FIRST_TURN_HOOK_CONFIRM_MAX_MS = 18e4;
     FIRST_TURN_HOOK_POLL_INTERVAL_MS = 2e3;
     CLOSE_LOOKUP_RETRIES = 3;
     CLOSE_LOOKUP_RETRY_DELAY_MS = 150;
@@ -4869,7 +4975,13 @@ function createDelivery(ctx, daemonCmux, isSurfaceAlive) {
               log(`delivery seq=${entry.seq} kind=${entry.kind} outcome=stale-terminal-deliver`);
             }
           }
-          const result = await d.deliver(entry, async (text, sendOpts) => {
+          let deliverEntry = entry;
+          if (entry.kind === "captain.message" && entry.payload?.source === "daemon" && entry.message) {
+            const prefix = stalePrefix(new Date(entry.ts).getTime(), Date.now());
+            if (prefix)
+              deliverEntry = { ...entry, message: `${prefix}${entry.message}` };
+          }
+          const result = await d.deliver(deliverEntry, async (text, sendOpts) => {
             let handledByChannel = false;
             try {
               const mode = ctx.captainChannelMode?.() ?? "off";
@@ -4961,6 +5073,7 @@ var init_delivery_loop = __esm({
     init_defer_delivery();
     init_dist();
     init_interactive_probe();
+    init_down_alert();
     init_liveness2();
     init_captain_channel();
     CURSOR_SUBSCRIBER = "captain";
@@ -5395,8 +5508,8 @@ function startDaemon(ctx, opts, pkgVersion) {
   log(`boot pid=${process.pid} version=${pkgVersion} socket=${ctx.sockPath} stateRoot=${stateRoot}`);
   const bootTs = (/* @__PURE__ */ new Date()).toISOString();
   {
-    const sendDownAlert = (minutes, reasonText) => {
-      const text = `\u26A0\uFE0F daemon was down for ${minutes} min (last exit reason=${reasonText})`;
+    const sendDownAlert = (startTs, endTs, minutes, reasonText) => {
+      const text = formatDownAlertText({ startTs, endTs, minutes, reasonText });
       const alertProjects = opts.registeredProjects ?? Object.keys(loadConfig().projects);
       for (const project of alertProjects) {
         appendCaptainMessage({ stateRoot, project, text, source: "daemon" }).catch((e) => log(`boot-gap alert failed project=${project}: ${e.message}`));
@@ -5407,13 +5520,13 @@ function startDaemon(ctx, opts, pkgVersion) {
     if (marker) {
       log(`previous exit ts=${marker.ts} reason=${marker.reason} gap=${((gapMs ?? 0) / 1e3).toFixed(1)}s`);
       if ((gapMs ?? 0) > 6e4)
-        sendDownAlert(Math.round((gapMs ?? 0) / 6e4), marker.reason);
+        sendDownAlert(marker.ts, bootTs, Math.round((gapMs ?? 0) / 6e4), marker.reason);
     } else if (prevRunning) {
       const lastHeartbeatMs = new Date(prevRunning.lastHeartbeatTs).getTime();
       const uncleanGapMs = Math.max(0, Date.now() - lastHeartbeatMs);
       log(`previous exit: UNCLEAN (no marker; last heartbeat ${prevRunning.lastHeartbeatTs}, gap=${(uncleanGapMs / 1e3).toFixed(1)}s)`);
       if (uncleanGapMs > 6e4) {
-        sendDownAlert(Math.round(uncleanGapMs / 6e4), "unclean/unknown \u2014 no exit marker, likely SIGKILL/OOM/power-loss");
+        sendDownAlert(prevRunning.lastHeartbeatTs, bootTs, Math.round(uncleanGapMs / 6e4), "unclean/unknown \u2014 no exit marker, likely SIGKILL/OOM/power-loss");
       }
     } else {
       log("previous exit: none (clean or first boot)");
@@ -5535,6 +5648,7 @@ var init_start = __esm({
     init_server();
     init_mailbox();
     init_exit_marker();
+    init_down_alert();
     init_liveness2();
     init_dist();
     init_snapshot_gather();
@@ -7504,6 +7618,7 @@ __export(dist_exports2, {
   OPERATOR_INITIATED_COMMANDS: () => OPERATOR_INITIATED_COMMANDS,
   PROBE_QUIET_MS: () => PROBE_QUIET_MS,
   PROTOCOL_VERSION: () => PROTOCOL_VERSION,
+  READ_ONLY_CREW_SUBCOMMANDS: () => READ_ONLY_CREW_SUBCOMMANDS,
   STALE_THRESHOLD_MS: () => STALE_THRESHOLD_MS,
   TERMINAL_RECORD_KEEP_PER_PROJECT: () => TERMINAL_RECORD_KEEP_PER_PROJECT,
   TERMINAL_RECORD_TTL_MS: () => TERMINAL_RECORD_TTL_MS,
@@ -7552,6 +7667,7 @@ __export(dist_exports2, {
   crewTag: () => crewTag,
   daemonEntryPath: () => daemonEntryPath,
   daemonLockPath: () => daemonLockPath,
+  decideForeignInstall: () => decideForeignInstall,
   decodeFrames: () => decodeFrames,
   defaultIsPidAlive: () => defaultIsPidAlive,
   defaultListenError: () => defaultListenError,
@@ -7593,9 +7709,11 @@ __export(dist_exports2, {
   isDaemonSocketLive: () => isDaemonSocketLive,
   isNotifyActive: () => isNotifyActive,
   isOperatorInitiatedCommand: () => isOperatorInitiatedCommand,
+  isReadOnlyCrewCommand: () => isReadOnlyCrewCommand,
   isSideTitle: () => isSideTitle,
   isStickyAttention: () => isStickyAttention,
   isTurnAccepted: () => isTurnAccepted,
+  isVersionUpgrade: () => isVersionUpgrade,
   kickstartArgv: () => kickstartArgv,
   launchOneWorkspace: () => launchOneWorkspace,
   loadSessions: () => loadSessions,
@@ -7612,6 +7730,7 @@ __export(dist_exports2, {
   parseProgramArgs: () => parseProgramArgs,
   plistPath: () => plistPath,
   printForeignInstallError: () => printForeignInstallError,
+  printVersionUpgradeNotice: () => printVersionUpgradeNotice,
   programArgsBlock: () => programArgsBlock,
   projectHealth: () => projectHealth,
   purgeExpiredWorkItems: () => purgeExpiredWorkItems,
@@ -9109,6 +9228,10 @@ function mapSubToLifecycle(sub) {
       return "needsInput";
     case "ask-question":
       return "needsInput";
+    case "permission-request":
+      return "needsInput";
+    case "stop-failure":
+      return "idle";
     case "session-end":
       return "session-end";
     default:
@@ -9150,7 +9273,13 @@ var init_native_hook_source = __esm({
       ["Stop", "stop"],
       ["Notification", "notification"],
       ["PreToolUse", "ask-question", "AskUserQuestion"],
-      ["SessionEnd", "session-end"]
+      ["SessionEnd", "session-end"],
+      // #760: fires ~6s before the matching Notification, carrying tool_name +
+      // tool_input directly — a strictly better task.blocked source.
+      ["PermissionRequest", "permission-request"],
+      // #763: the turn died on an API error — today squadrant has no source for
+      // this at all; without it the watchdog reports a plain stall (wrong story).
+      ["StopFailure", "stop-failure"]
     ];
     DEFAULT_HOOK_CMD = "squadrant hooks";
     NativeHookSource = class {
@@ -9297,9 +9426,12 @@ async function confirmedSendToPane(runtime, pane, message) {
   let sawDraft = await settleInputBox(runtime, pane);
   await runtime.sendKeyToPane(pane, "Enter");
   let repasted = false;
+  let screenMoved = false;
   for (let attempt = 0; attempt < SUBMIT_RETRY_LIMIT; attempt++) {
     await new Promise((r) => setTimeout(r, POST_SEND_CHECK_MS));
     const afterScreen = await runtime.readPaneScreen(pane) ?? "";
+    if (afterScreen !== preSendScreen)
+      screenMoved = true;
     const draft = parseDraftFromScreen(afterScreen);
     if (draft !== "" && draft !== null)
       sawDraft = true;
@@ -9310,7 +9442,7 @@ async function confirmedSendToPane(runtime, pane, message) {
     const settled = await settleInputBox(runtime, pane);
     if (settled)
       sawDraft = true;
-    if (!sawDraft && !repasted) {
+    if (!sawDraft && !repasted && !screenMoved) {
       repasted = true;
       await runtime.pasteToPane(pane, message);
     }
@@ -9374,9 +9506,12 @@ async function sendFirstTurnWhenReady(runtime, pane, task, preLaunchScreen, acce
   await runtime.sendKeyToPane(pane, "Enter");
   const retryLimit = acceptanceConfig?.retryLimit ?? SUBMIT_RETRY_LIMIT;
   let repasted = false;
+  let screenMoved = false;
   for (let attempt = 0; attempt < retryLimit; attempt++) {
     await new Promise((r) => setTimeout(r, POST_SEND_CHECK_MS));
     const afterScreen = await runtime.readPaneScreen(pane) ?? "";
+    if (afterScreen !== preSendScreen)
+      screenMoved = true;
     const draft = parseDraftFromScreen(afterScreen);
     if (draft !== "" && draft !== null)
       sawDraft = true;
@@ -9387,13 +9522,13 @@ async function sendFirstTurnWhenReady(runtime, pane, task, preLaunchScreen, acce
     const settled = await settleInputBox(runtime, pane);
     if (settled)
       sawDraft = true;
-    if (!sawDraft && !repasted) {
+    if (!sawDraft && !repasted && !screenMoved) {
       repasted = true;
       await runtime.pasteToPane(pane, task);
     }
     await runtime.sendKeyToPane(pane, "Enter");
   }
-  if (!sawDraft) {
+  if (!sawDraft && !screenMoved) {
     return confirmedSendToPane(runtime, pane, task);
   }
   return { delivered: false };
@@ -9509,12 +9644,12 @@ function createClaudeDriver() {
       if (opts.settingsPath) {
         cmd += ` --settings ${opts.settingsPath}`;
       }
-      if (opts.messagingSocketPath) {
-        cmd += ` --messaging-socket-path ${opts.messagingSocketPath}`;
-      }
       const pluginSubdir = opts.role === "crew" ? "plugin-crew" : "plugin";
       const pluginDir = `${process.env.HOME}/.config/squadrant/${pluginSubdir}`;
       cmd += ` --plugin-dir ${pluginDir}`;
+      if (opts.messagingSocketPath) {
+        cmd += ` --messaging-socket-path ${opts.messagingSocketPath}`;
+      }
       if (!opts.interactive) {
         cmd += ` -p "${opts.prompt.replace(/"/g, '\\"')}"`;
       }
@@ -11273,6 +11408,70 @@ function decideCaptainMemoryWrite(toolName, toolInput, env, homeDir) {
     return { decision: "allow" };
   return { decision: "deny", reason: DENY_REASON };
 }
+function resolveTurnId(payload) {
+  const id = payload?.prompt_id;
+  return typeof id === "string" && id.trim() ? id : "hook-stop";
+}
+function logStopPermissionMode(payload, taskId) {
+  const mode = payload?.permission_mode;
+  if (typeof mode === "string" && mode) {
+    console.error(`[squadrant] hook: Stop permission_mode=${mode} task=${taskId}`);
+  }
+}
+function classifyNotification(payload) {
+  const p = payload;
+  const msg = typeof p?.message === "string" ? p.message : "";
+  const notificationType = typeof p?.notification_type === "string" ? p.notification_type : null;
+  if (notificationType === "permission_prompt" || notificationType === "worker_permission_prompt") {
+    return { kind: "blocked", question: msg || "crew awaiting permission" };
+  }
+  if (notificationType === "agent_needs_input") {
+    return { kind: "input-requested", question: msg || "crew needs input" };
+  }
+  if (notificationType != null) {
+    return { kind: "progress" };
+  }
+  if (msg && isPermissionNotification(msg)) {
+    return { kind: "blocked", question: msg };
+  }
+  return { kind: "progress" };
+}
+function summarizeToolInput(toolName, toolInput) {
+  if (typeof toolName !== "string" || !toolName)
+    return "a tool call";
+  const input = toolInput;
+  if (!input || typeof input !== "object")
+    return toolName;
+  const hintField = FILE_PATH_FIELD_BY_TOOL[toolName] ?? (toolName === "Bash" ? "command" : void 0);
+  const raw = hintField ? input[hintField] : void 0;
+  if (typeof raw === "string" && raw) {
+    const short = raw.length > TOOL_INPUT_HINT_LEN ? `${raw.slice(0, TOOL_INPUT_HINT_LEN)}\u2026` : raw;
+    return `${toolName}(${short})`;
+  }
+  return toolName;
+}
+function formatPermissionRequestQuestion(payload) {
+  const p = payload;
+  return `crew needs permission to run ${summarizeToolInput(p?.tool_name, p?.tool_input)}`;
+}
+function hasActiveBackgroundWork(payload) {
+  const p = payload;
+  const tasks = p?.background_tasks;
+  if (Array.isArray(tasks) && tasks.length > 0)
+    return true;
+  const crons = p?.session_crons;
+  if (Array.isArray(crons) && crons.length > 0)
+    return true;
+  return false;
+}
+function redactApiError(error) {
+  if (typeof error !== "string" || !error.trim())
+    return "unknown API error";
+  let scrubbed = error.trim();
+  for (const re of SECRET_PATTERNS)
+    scrubbed = scrubbed.replace(re, "[redacted]");
+  return scrubbed.length > MAX_API_ERROR_LEN ? `${scrubbed.slice(0, MAX_API_ERROR_LEN)}\u2026` : scrubbed;
+}
 function mapClaudeHookToEvent(event, payload, taskId) {
   switch (event) {
     case "PreToolUse": {
@@ -11280,7 +11479,7 @@ function mapClaudeHookToEvent(event, payload, taskId) {
       if (toolName !== "AskUserQuestion")
         return null;
       const question = formatAskUserQuestionPrompt(payload?.tool_input) ?? "crew opened an AskUserQuestion prompt (options unavailable)";
-      return { type: "task.input.requested", id: taskId, requestId: nextAskUserQuestionRequestId++, question };
+      return { type: "task.input.requested", id: taskId, requestId: nextHookRequestId++, question };
     }
     case "Stop": {
       const text = resolveLastAssistantText(payload);
@@ -11288,15 +11487,36 @@ function mapClaudeHookToEvent(event, payload, taskId) {
       if (question) {
         return { type: "task.blocked", id: taskId, reason: "crew asked a question (auto-detected)", question };
       }
-      return { type: "task.turn.completed", id: taskId, turnId: "hook-stop" };
+      if (hasActiveBackgroundWork(payload)) {
+        return { type: "task.progress", id: taskId, note: "stop-background-work" };
+      }
+      logStopPermissionMode(payload, taskId);
+      return { type: "task.turn.completed", id: taskId, turnId: resolveTurnId(payload) };
     }
+    case "StopFailure":
+      return {
+        type: "task.turn.failed",
+        id: taskId,
+        turnId: resolveTurnId(payload),
+        error: redactApiError(payload?.error)
+      };
     case "Notification": {
-      const msg = payload?.message;
-      if (typeof msg === "string" && isPermissionNotification(msg)) {
-        return { type: "task.blocked", id: taskId, reason: "crew awaiting permission (notification hook)", question: msg };
+      const cls = classifyNotification(payload);
+      if (cls.kind === "blocked") {
+        return { type: "task.blocked", id: taskId, reason: "crew awaiting permission (notification hook)", question: cls.question };
+      }
+      if (cls.kind === "input-requested") {
+        return { type: "task.input.requested", id: taskId, requestId: nextHookRequestId++, question: cls.question };
       }
       return { type: "task.progress", id: taskId, note: "notification" };
     }
+    case "PermissionRequest":
+      return {
+        type: "task.blocked",
+        id: taskId,
+        reason: "crew awaiting permission (permission-request hook)",
+        question: formatPermissionRequestQuestion(payload)
+      };
     case "SessionEnd":
       return { type: "task.session.ended", id: taskId };
     case "SubagentStop":
@@ -11308,14 +11528,14 @@ function mapClaudeHookToEvent(event, payload, taskId) {
       return null;
   }
 }
-var EVENTS, MATCHED_EVENTS, nextAskUserQuestionRequestId, CAPTAIN_MEMORY_PATH_RE, DENY_REASON, FILE_PATH_FIELD_BY_TOOL, claudeInteractive;
+var EVENTS, MATCHED_EVENTS, nextHookRequestId, CAPTAIN_MEMORY_PATH_RE, DENY_REASON, FILE_PATH_FIELD_BY_TOOL, TOOL_INPUT_HINT_LEN, SECRET_PATTERNS, MAX_API_ERROR_LEN, claudeInteractive;
 var init_claude3 = __esm({
   "packages/agents/dist/interactive/claude.js"() {
-    EVENTS = ["Stop", "SubagentStop", "SessionEnd", "PostToolUse", "Notification", "UserPromptSubmit"];
+    EVENTS = ["Stop", "SubagentStop", "SessionEnd", "PostToolUse", "Notification", "UserPromptSubmit", "PermissionRequest", "StopFailure"];
     MATCHED_EVENTS = [
       ["PreToolUse", "AskUserQuestion"]
     ];
-    nextAskUserQuestionRequestId = Date.now();
+    nextHookRequestId = Date.now();
     CAPTAIN_MEMORY_PATH_RE = /\.claude\/projects\/.*\/memory\//;
     DENY_REASON = "Crews do not write captain memory. Put the finding in your done/blocked message; the captain decides what is durable (#556).";
     FILE_PATH_FIELD_BY_TOOL = {
@@ -11324,6 +11544,16 @@ var init_claude3 = __esm({
       MultiEdit: "file_path",
       NotebookEdit: "notebook_path"
     };
+    TOOL_INPUT_HINT_LEN = 80;
+    SECRET_PATTERNS = [
+      /sk-ant-[A-Za-z0-9_-]{10,}/g,
+      // Anthropic API key
+      /gh[pousr]_[A-Za-z0-9]{10,}/g,
+      // GitHub token
+      /\b\d{6,}:[A-Za-z0-9_-]{20,}\b/g
+      // Telegram bot token shape
+    ];
+    MAX_API_ERROR_LEN = 300;
     claudeInteractive = {
       provider: "claude",
       tier: "strong",
@@ -12287,6 +12517,7 @@ __export(dist_exports4, {
   buildAgentCmd: () => buildAgentCmd,
   buildCodexDeveloperInstructions: () => buildCodexDeveloperInstructions,
   buildUserEnvelope: () => buildUserEnvelope,
+  classifyNotification: () => classifyNotification,
   classifyPaneTail: () => classifyPaneTail2,
   claudeInteractive: () => claudeInteractive,
   createClaudeDriver: () => createClaudeDriver,
@@ -12303,8 +12534,10 @@ __export(dist_exports4, {
   deriveTranscriptPath: () => deriveTranscriptPath,
   detectTrailingQuestion: () => detectTrailingQuestion2,
   formatAskUserQuestionPrompt: () => formatAskUserQuestionPrompt,
+  formatPermissionRequestQuestion: () => formatPermissionRequestQuestion,
   getHeadlessAdapter: () => getHeadlessAdapter,
   getInteractiveAdapter: () => getInteractiveAdapter,
+  hasActiveBackgroundWork: () => hasActiveBackgroundWork,
   isPermissionNotification: () => isPermissionNotification,
   mapClaudeHookToEvent: () => mapClaudeHookToEvent,
   mergeClaudeHooks: () => mergeClaudeHooks,
@@ -12315,6 +12548,8 @@ __export(dist_exports4, {
   readClaudeStatus: () => readClaudeStatus,
   readClaudeStatusByCwd: () => readClaudeStatusByCwd,
   readClaudeStatusBySocketPath: () => readClaudeStatusBySocketPath,
+  redactApiError: () => redactApiError,
+  resolveTurnId: () => resolveTurnId,
   runHeadless: () => runHeadless,
   shouldReattachCodex: () => shouldReattachCodex,
   toLifecycleSnapshot: () => toLifecycleSnapshot,
@@ -18805,10 +19040,14 @@ function mapHookSub(sub, payload, taskId) {
       return { type: "task.first-turn.confirmed", id: taskId };
     case "stop":
       return mapClaudeHookToEvent("Stop", payload, taskId);
+    case "stop-failure":
+      return mapClaudeHookToEvent("StopFailure", payload, taskId);
     case "notification":
       return mapClaudeHookToEvent("Notification", payload, taskId);
     case "ask-question":
       return mapClaudeHookToEvent("PreToolUse", payload, taskId);
+    case "permission-request":
+      return mapClaudeHookToEvent("PermissionRequest", payload, taskId);
     case "session-end":
       return mapClaudeHookToEvent("SessionEnd", payload, taskId);
     default:
@@ -19310,6 +19549,49 @@ function queryClaudeMem(dbPath, project) {
 // packages/cli/src/lib/handoff-transcript.ts
 import fs31 from "fs";
 var TRANSCRIPT_BYTE_CAP = 2e5;
+var DIGEST_BYTE_CAP = 8 * 1024;
+var PROMPT_TRUNCATE_CHARS = 300;
+var ASSISTANT_TRUNCATE_CHARS = 300;
+function truncate2(text, maxChars) {
+  const trimmed = text.trim();
+  return trimmed.length <= maxChars ? trimmed : `${trimmed.slice(0, maxChars)}\u2026`;
+}
+var ISSUE_OR_PR_REF_RE = /#\d+/g;
+var COMMIT_REF_RE = /\b[0-9a-f]{7,40}\b/gi;
+function findRefs(text) {
+  const refs = [];
+  for (const m of text.matchAll(ISSUE_OR_PR_REF_RE)) refs.push(m[0]);
+  for (const m of text.matchAll(COMMIT_REF_RE)) {
+    const token = m[0];
+    if (/[0-9]/.test(token) && /[a-f]/i.test(token)) refs.push(token.toLowerCase());
+  }
+  return refs;
+}
+function byteSize(value) {
+  return Buffer.byteLength(JSON.stringify(value), "utf-8");
+}
+function capDigest(digest, capBytes = DIGEST_BYTE_CAP) {
+  if (byteSize(digest) <= capBytes) return digest;
+  const capped = {
+    ...digest,
+    userPrompts: [...digest.userPrompts],
+    assistantTexts: [...digest.assistantTexts],
+    filesTouched: [...digest.filesTouched],
+    refs: [...digest.refs],
+    truncated: true
+  };
+  let dropFromPrompts = true;
+  while (byteSize(capped) > capBytes && (capped.userPrompts.length > 0 || capped.assistantTexts.length > 0)) {
+    const target = dropFromPrompts && capped.userPrompts.length > 0 ? capped.userPrompts : capped.assistantTexts;
+    if (target.length > 0) target.shift();
+    dropFromPrompts = !dropFromPrompts;
+  }
+  while (byteSize(capped) > capBytes && (capped.filesTouched.length > 0 || capped.refs.length > 0)) {
+    if (capped.filesTouched.length > 0) capped.filesTouched.shift();
+    else capped.refs.shift();
+  }
+  return capped;
+}
 function tailOf(content, byteCap) {
   const buf = Buffer.from(content, "utf-8");
   if (buf.length <= byteCap) return content;
@@ -19319,6 +19601,15 @@ function tailOf(content, byteCap) {
 function extractMessages(tailText) {
   let lastUserMessage = null;
   let lastAssistantText = null;
+  const userPrompts = [];
+  const assistantTexts = [];
+  const toolCalls = {};
+  const filesTouched = /* @__PURE__ */ new Set();
+  const refs = /* @__PURE__ */ new Set();
+  let currentTurnText = null;
+  const collectRefs = (text) => {
+    for (const ref of findRefs(text)) refs.add(ref);
+  };
   for (const line of tailText.split("\n")) {
     if (!line.trim()) continue;
     let obj;
@@ -19328,20 +19619,48 @@ function extractMessages(tailText) {
       continue;
     }
     if (obj.type === "user" && typeof obj.message?.content === "string") {
+      if (currentTurnText !== null) {
+        assistantTexts.push(truncate2(currentTurnText, ASSISTANT_TRUNCATE_CHARS));
+        currentTurnText = null;
+      }
       lastUserMessage = obj.message.content;
+      userPrompts.push(truncate2(obj.message.content, PROMPT_TRUNCATE_CHARS));
+      collectRefs(obj.message.content);
     } else if (obj.type === "assistant" && Array.isArray(obj.message?.content)) {
-      const texts = obj.message.content.filter((b) => b.type === "text" && typeof b.text === "string").map((b) => b.text);
-      if (texts.length > 0) lastAssistantText = texts.join("\n");
-    }
-  }
-  return { lastUserMessage, lastAssistantText };
+      const blocks = obj.message.content;
+      const texts = blocks.filter((b) => b.type === "text" && typeof b.text === "string").map((b) => b.text);
+      if (texts.length > 0) {
+        currentTurnText = texts.join("\n");
+        lastAssistantText = currentTurnText;
+        collectRefs(currentTurnText);
+      }
+      for (const block of blocks) {
+        if (block.type !== "tool_use" || typeof block.name !== "string") continue;
+        toolCalls[block.name] = (toolCalls[block.name] ?? 0) + 1;
+        const filePath = block.input?.file_path;
+        if (typeof filePath === "string") filesTouched.add(filePath);
+      }
+    }
+  }
+  if (currentTurnText !== null) {
+    assistantTexts.push(truncate2(currentTurnText, ASSISTANT_TRUNCATE_CHARS));
+  }
+  const digest = capDigest({
+    userPrompts,
+    assistantTexts,
+    toolCalls,
+    filesTouched: [...filesTouched],
+    refs: [...refs],
+    truncated: false
+  });
+  return { lastUserMessage, lastAssistantText, digest };
 }
 function extractTranscriptTail(transcriptPath, byteCap = TRANSCRIPT_BYTE_CAP) {
   if (!fs31.existsSync(transcriptPath)) return null;
   const content = fs31.readFileSync(transcriptPath, "utf-8");
-  const { lastUserMessage, lastAssistantText } = extractMessages(tailOf(content, byteCap));
+  const { lastUserMessage, lastAssistantText, digest } = extractMessages(tailOf(content, byteCap));
   const mtimeIso = fs31.statSync(transcriptPath).mtime.toISOString();
-  return { path: transcriptPath, mtimeIso, lastUserMessage, lastAssistantText };
+  return { path: transcriptPath, mtimeIso, lastUserMessage, lastAssistantText, digest };
 }
 
 // packages/cli/src/lib/handoff-archive.ts
@@ -19457,7 +19776,7 @@ if (process.argv[2] !== "config") {
   } catch {
   }
 }
-if (!process.env.SQUADRANT_DAEMON_SKIP) {
+if (!process.env.SQUADRANT_DAEMON_SKIP && !isReadOnlyCrewCommand(process.argv)) {
   ensureDaemon(void 0, { operatorInitiated: isOperatorInitiatedCommand(process.argv[2]) });
 }
 var program = new Command35();