squadrant 0.21.0 → 0.21.1

package/dist/squadrantd.js

@@ -3471,6 +3471,11 @@ function assertBackendUsable(o) {
 function shouldBuildRouterService(router, isVitest) {
   return !!router && !isVitest;
 }
+function claudeEnvShadowsRouter(claudeEnv) {
+  if (!claudeEnv)
+    return [];
+  return Object.keys(claudeEnv).filter((key) => key.startsWith("ANTHROPIC_"));
+}
 var init_router_resolution = __esm({
   "packages/core/dist/router-resolution.js"() {
     init_dist();
@@ -3497,6 +3502,14 @@ function buildRouterEnv(creds, model) {
     env.ANTHROPIC_MODEL = model;
   return env;
 }
+function mergeClaudeEnvRouterSettings(routerEnv, claudeEnv) {
+  const merged = { ...routerEnv };
+  for (const [key, value] of Object.entries(claudeEnv ?? {})) {
+    if (!key.startsWith("ANTHROPIC_"))
+      merged[key] = value;
+  }
+  return merged;
+}
 function formatCustomHeaders(headers) {
   const entries = Object.entries(headers ?? {});
   if (entries.length === 0)
@@ -3810,10 +3823,18 @@ async function runCrewSpawn(input, config, deps) {
   if (agentName === "claude") {
     let routerEnv = {};
     if (backend !== "native") {
+      if (!deps.writeRouterSettings) {
+        throw new Error(`backend '${backend}' requires a per-spawn --settings writer to outrank defaults.claudeEnv, but the spawn path has none \u2014 refusing to launch a routed session that would silently bypass the router shim`);
+      }
       if (!deps.routerCredentials) {
         throw new Error(`backend '${backend}' requires router credentials, but the spawn path has no daemon credentials provider`);
       }
       routerEnv = buildRouterEnv(await deps.routerCredentials({ project: input.project, backend }), crewModel);
+      const shadowed = claudeEnvShadowsRouter(config.defaults.claudeEnv);
+      if (shadowed.length > 0) {
+        process.stderr.write(`\u26A0\uFE0F  backend '${backend}' selected but defaults.claudeEnv sets ${shadowed.join(", ")} \u2014 these would shadow the router shim. Overriding via a per-spawn --settings env block (outranks ~/.claude/settings.json).
+`);
+      }
     }
     ensureSocksDir();
     const messagingSocketPath = path9.join(CC_SOCKS_DIR, `squadrant-${randomUUID3()}.sock`);
@@ -3826,6 +3847,12 @@ async function runCrewSpawn(input, config, deps) {
       name,
       messagingSocketPath
     });
+    const routerSettingsPath = Object.keys(routerEnv).length > 0 ? deps.writeRouterSettings({
+      stateRoot: STATE_ROOT,
+      project: input.project,
+      taskId: rec.id,
+      env: mergeClaudeEnvRouterSettings(routerEnv, config.defaults.claudeEnv)
+    }) : void 0;
     let hooksInstalled = false;
     try {
       deps.writeSettingsLocal(spawnCwd);
@@ -3841,18 +3868,25 @@ async function runCrewSpawn(input, config, deps) {
       messagingSocketPath,
       // Permission mode is config-driven so squadrant can default crews to 'auto'
       // or keep the semi-automatic 'acceptEdits' gate. Falls back to 'acceptEdits'.
-      permissionMode: config.defaults.permissions?.crew ?? "acceptEdits",
+      // #772: a router-backed crew MUST use 'default' — 'auto' makes the built-in
+      // Sonnet-5 classifier own PermissionRequest and the gate yields, which is
+      // exactly the fail-closed dead end U7 exists to fix. The rubric owns the
+      // permission mode for a routed spawn; the operator's config cannot override
+      // it back into the broken path.
+      permissionMode: backend !== "native" ? "default" : config.defaults.permissions?.crew ?? "acceptEdits",
       // #708: self-describing name so ListAgents/the registry can tell this
       // crew apart from an unrelated session instead of an auto-derived cwd
       // basename (only the claude driver reads this — other agents ignore it).
       sessionName: crewSessionName(input.project, name),
       ...crewModel ? { model: crewModel } : {},
-      ...crewThinking ? { thinking: crewThinking } : {}
+      ...crewThinking ? { thinking: crewThinking } : {},
+      ...routerSettingsPath ? { settingsPath: routerSettingsPath } : {}
     });
     const direction2 = input.direction ?? "tab";
     const title2 = titleFor(input.project, name);
     const pane2 = await deps.runtime.newPane({ workspaceId: captain.id, direction: direction2, title: title2 });
-    const envPrefix = `SQUADRANT_CREW_TASK_ID=${rec.id} SQUADRANT_CREW_PROJECT=${input.project}`;
+    const gateEnv = backend !== "native" ? " SQUADRANT_GATE=on" : "";
+    const envPrefix = `SQUADRANT_CREW_TASK_ID=${rec.id} SQUADRANT_CREW_PROJECT=${input.project}${gateEnv}`;
     const routerPrefix = Object.keys(routerEnv).length > 0 ? ` ${renderEnvAssignments(routerEnv)}` : "";
     await deps.runtime.sendToPane(pane2, `cd ${shellQuote(spawnCwd)} && ${envPrefix}${routerPrefix} ${niceCrewCommand(cliCommand2)}`);
     const preLaunchScreen = await deps.runtime.readPaneScreen(pane2) ?? "";
@@ -6760,6 +6794,26 @@ function writeJson(res, status, body) {
   res.writeHead(status, { "content-type": "application/json" });
   res.end(JSON.stringify(body));
 }
+function pathnameOf(url) {
+  if (!url)
+    return "";
+  const q = url.indexOf("?");
+  return q === -1 ? url : url.slice(0, q);
+}
+function modelsList(ids) {
+  const data = ids.map((id) => ({
+    type: "model",
+    id,
+    display_name: id,
+    created_at: "1970-01-01T00:00:00Z"
+  }));
+  return {
+    data,
+    has_more: false,
+    first_id: ids[0] ?? null,
+    last_id: ids[ids.length - 1] ?? null
+  };
+}
 function buildUpstreamHeaders(req, upstream, stream) {
   const headers = {
     "content-type": "application/json",
@@ -6788,6 +6842,7 @@ function createRouterShim(opts) {
   let lastError;
   let upstreamReachable = true;
   const upstreamUrl = joinUrl(opts.upstream.baseUrl, "/v1/messages");
+  const advertisedModels = new Set(opts.models ?? []);
   function emitUsage(u) {
     try {
       opts.onUsage?.(u);
@@ -6817,6 +6872,8 @@ function createRouterShim(opts) {
     const body = parsed;
     const wantsStream = body.stream === true;
     const model = typeof body.model === "string" ? body.model : void 0;
+    if (model)
+      advertisedModels.add(model);
     const sanitized = sanitizeRequest(body, opts.upstream);
     let upstreamRes;
     try {
@@ -6889,8 +6946,20 @@ function createRouterShim(opts) {
       emitUsage(usage2);
     writeJson(res, upstreamRes.status, upstreamBody);
   }
+  async function handleCountTokens(req, res) {
+    let text;
+    try {
+      text = await readBody(req);
+    } catch {
+      const e = anthropicError(400, "invalid_request_error", "malformed request body");
+      writeJson(res, e.status, e.body);
+      return;
+    }
+    writeJson(res, 200, { input_tokens: Math.max(1, Math.ceil(text.length / 4)) });
+  }
   function handler(req, res) {
-    if (req.method === "POST" && req.url === "/v1/messages") {
+    const path23 = pathnameOf(req.url);
+    if (req.method === "POST" && path23 === "/v1/messages") {
       void handleMessages(req, res).catch((err) => {
         log(`router internal error: ${err instanceof Error ? err.message : String(err)}`);
         if (!res.headersSent) {
@@ -6902,7 +6971,18 @@ function createRouterShim(opts) {
       });
       return;
     }
-    if (req.method === "GET" && req.url === "/healthz") {
+    if (req.method === "POST" && path23 === "/v1/messages/count_tokens") {
+      void handleCountTokens(req, res).catch(() => {
+        if (!res.headersSent)
+          writeJson(res, 502, anthropicError(502, "api_error", "router internal error").body);
+      });
+      return;
+    }
+    if (req.method === "GET" && path23 === "/v1/models") {
+      writeJson(res, 200, modelsList([...advertisedModels]));
+      return;
+    }
+    if (req.method === "GET" && path23 === "/healthz") {
       writeJson(res, 200, { ready: server?.listening === true, upstreamReachable, lastError });
       return;
     }
@@ -7027,12 +7107,17 @@ function createRouterService(router, projects, deps = {}) {
     tokenByProject.set(p, t);
     projectTokens.set(t, p);
   }
+  const models = [
+    ...deps.models ?? [],
+    ...Object.values(router.models ?? {}).map((m) => m.upstream)
+  ];
   const ledger = createUsageLedger();
   const shim = createRouterShim({
     upstream,
     projectTokens,
     port: router.port ?? 0,
     log,
+    models,
     onUsage: (u) => ledger.record(u),
     ...deps.fetch ? { fetch: deps.fetch } : {}
   });
@@ -7095,12 +7180,53 @@ var init_router = __esm({
   }
 });
 
+// packages/core/dist/captain-router.js
+async function prepareCaptainRoute(o) {
+  assertBackendUsable({ backend: o.backend, agent: o.agentName, router: o.config.defaults.router });
+  if (o.backend === "native") {
+    return { backend: "native", model: o.model, permissionMode: o.configuredPermissionMode, env: {} };
+  }
+  if (!o.deps.routerCredentials) {
+    throw new Error(`captain launch: backend '${o.backend}' requires router credentials from the daemon, but this launch path has no credentials provider`);
+  }
+  if (!o.deps.writeRouterSettings) {
+    throw new Error(`captain launch: backend '${o.backend}' requires a per-spawn --settings writer to outrank defaults.claudeEnv, but this launch path has none \u2014 refusing to launch a routed captain that would silently bypass the router shim`);
+  }
+  const model = resolveRouterModel(o.model, o.agentName, o.config.defaults.router);
+  const creds = await o.deps.routerCredentials({ project: o.project, backend: o.backend });
+  const routerEnv = buildRouterEnv(creds, model);
+  const shadowed = claudeEnvShadowsRouter(o.config.defaults.claudeEnv);
+  if (shadowed.length > 0) {
+    o.warn?.(`backend '${o.backend}' selected but defaults.claudeEnv sets ${shadowed.join(", ")} \u2014 these would shadow the router shim. Overriding via a per-spawn --settings env block (outranks ~/.claude/settings.json).`);
+  }
+  const settingsPath = o.deps.writeRouterSettings({
+    stateRoot: o.stateRoot,
+    project: o.project,
+    taskId: "captain",
+    env: mergeClaudeEnvRouterSettings(routerEnv, o.config.defaults.claudeEnv)
+  });
+  return {
+    backend: o.backend,
+    model,
+    permissionMode: "default",
+    env: { ...routerEnv, SQUADRANT_GATE: "on" },
+    settingsPath
+  };
+}
+var init_captain_router = __esm({
+  "packages/core/dist/captain-router.js"() {
+    init_dist();
+    init_router_resolution();
+    init_env();
+  }
+});
+
 // packages/core/dist/permission-gate.js
 import { createHash } from "crypto";
 import { mkdirSync as mkdirSync7, readFileSync as readFileSync11, renameSync as renameSync4, writeFileSync as writeFileSync10, unlinkSync as unlinkSync4 } from "fs";
 import { dirname as dirname5, join as join15 } from "path";
 function isGateSession(env) {
-  return Boolean(env.SQUADRANT_CREW_TASK_ID) || env[SIDE_SESSION_ENV] === "1";
+  return Boolean(env.SQUADRANT_CREW_TASK_ID) || env[SIDE_SESSION_ENV] === "1" || env.SQUADRANT_ROLE === "captain";
 }
 function resolveGateMode(env, gate) {
   const fromEnv = env.SQUADRANT_GATE;
@@ -7296,7 +7422,15 @@ async function callClassifier(o) {
       return "ask";
     }
     const data = await res.json();
+    if (data?.stop_reason === "max_tokens") {
+      o.log?.("gate: classifier exhausted max_tokens before a verdict \u2014 asking");
+      return "ask";
+    }
     const text = Array.isArray(data?.content) ? data.content.filter((b) => b?.type === "text" && typeof b.text === "string").map((b) => b.text).join(" ") : "";
+    if (!text.trim()) {
+      o.log?.("gate: classifier returned no text verdict \u2014 asking");
+      return "ask";
+    }
     return parseClassifierVerdict(text);
   } catch (e) {
     o.log?.(`gate: classifier unavailable (${e.message}) \u2014 asking`);
@@ -7315,7 +7449,7 @@ ${toolPayload}`).digest("hex");
 }
 async function evaluatePermissionRequest(input) {
   if (!isGateSession(input.env)) {
-    return { decision: "yield", reason: "not a squadrant crew/side session" };
+    return { decision: "yield", reason: "not a squadrant crew/side/captain session" };
   }
   const gate = input.config.defaults.gate;
   const mode = resolveGateMode(input.env, gate);
@@ -7401,7 +7535,7 @@ var init_permission_gate = __esm({
     DEFAULT_CACHE_TTL_MS = 10 * 60 * 1e3;
     DEFAULT_CACHE_MAX_ENTRIES = 500;
     DEFAULT_CLASSIFIER_TIMEOUT_MS = 5e3;
-    CLASSIFIER_MAX_TOKENS = 8;
+    CLASSIFIER_MAX_TOKENS = 256;
     MAX_PAYLOAD_CHARS = 2e3;
     DEFAULT_GATE_DENY_RULES = [
       // Flag-order-agnostic: both recursive and force must be present, in any order,
@@ -8328,6 +8462,7 @@ __export(dist_exports, {
   captainSocketPath: () => captainSocketPath,
   checkFact: () => checkFact,
   classifyHealth: () => classifyHealth,
+  claudeEnvShadowsRouter: () => claudeEnvShadowsRouter,
   closeWorkItem: () => closeWorkItem,
   computeTemplateHash: () => computeTemplateHash,
   consumeExitMarker: () => consumeExitMarker,
@@ -8428,6 +8563,7 @@ __export(dist_exports, {
   makeGate: () => makeGate,
   maskToken: () => maskToken,
   matchTier1Deny: () => matchTier1Deny,
+  mergeClaudeEnvRouterSettings: () => mergeClaudeEnvRouterSettings,
   mintToken: () => mintToken,
   nameFromTitle: () => nameFromTitle,
   newestSessionInDirectory: () => newestSessionInDirectory,
@@ -8442,6 +8578,7 @@ __export(dist_exports, {
   parseProgramArgs: () => parseProgramArgs,
   plistPath: () => plistPath,
   pollNewestSessionInDirectory: () => pollNewestSessionInDirectory,
+  prepareCaptainRoute: () => prepareCaptainRoute,
   printForeignInstallError: () => printForeignInstallError,
   printVersionUpgradeNotice: () => printVersionUpgradeNotice,
   probeCaptainChannel: () => probeCaptainChannel,
@@ -8574,6 +8711,7 @@ var init_dist2 = __esm({
     init_router();
     init_crew_routing();
     init_router_resolution();
+    init_captain_router();
     init_permission_gate();
     init_restart_daemon();
     init_group_dispatch();