squadrant 0.22.0 → 0.23.0

package/dist/index.js

@@ -98,6 +98,9 @@ function isGateMode(v2) {
 function isGatePolicy(v2) {
   return GATE_POLICIES.includes(v2);
 }
+function isGateEngine(v2) {
+  return GATE_ENGINES.includes(v2);
+}
 function isThinkingLevel(v2) {
   return THINKING_LEVELS.includes(v2);
 }
@@ -198,13 +201,14 @@ function saveConfig(config, configPath = DEFAULT_CONFIG_PATH) {
 function resolveHome(p) {
   return p.startsWith("~") ? p.replace("~", os.homedir()) : p;
 }
-var ROUTER_KINDS, GATE_MODES, GATE_POLICIES, THINKING_LEVELS, CONTROL_CHANNEL_MODES, DEFAULT_CONFIG_PATH, CONFIG_DIR, DAEMON_SOCK_PATH, DEFAULT_CREW_ROUTING_RULES;
+var ROUTER_KINDS, GATE_MODES, GATE_POLICIES, GATE_ENGINES, THINKING_LEVELS, CONTROL_CHANNEL_MODES, DEFAULT_CONFIG_PATH, CONFIG_DIR, DAEMON_SOCK_PATH, DEFAULT_CREW_ROUTING_RULES;
 var init_config = __esm({
   "packages/shared/dist/config.js"() {
     init_config_io();
     ROUTER_KINDS = ["opencode-go", "openrouter", "ccr", "litellm", "custom"];
     GATE_MODES = ["on", "off", "auto"];
     GATE_POLICIES = ["deny-dangerous", "ask-on-doubt"];
+    GATE_ENGINES = ["router", "auto-gate"];
     THINKING_LEVELS = ["low", "medium", "high", "xhigh", "max"];
     CONTROL_CHANNEL_MODES = /* @__PURE__ */ new Set(["off", "shadow", "on"]);
     DEFAULT_CONFIG_PATH = process.env.SQUADRANT_CONFIG || path2.join(os.homedir(), ".config", "squadrant", "config.json");
@@ -1659,6 +1663,7 @@ __export(dist_exports, {
   DEFAULT_NOTIFY: () => DEFAULT_NOTIFY,
   DEFAULT_ROUTER_BASE_URL: () => DEFAULT_ROUTER_BASE_URL,
   DEFAULT_ROUTER_KIND: () => DEFAULT_ROUTER_KIND,
+  GATE_ENGINES: () => GATE_ENGINES,
   GATE_MODES: () => GATE_MODES,
   GATE_POLICIES: () => GATE_POLICIES,
   MANAGED_TARGETS: () => MANAGED_TARGETS,
@@ -1705,6 +1710,7 @@ __export(dist_exports, {
   isBackendMode: () => isBackendMode,
   isCacheStale: () => isCacheStale,
   isDaemonCachedKey: () => isDaemonCachedKey,
+  isGateEngine: () => isGateEngine,
   isGateMode: () => isGateMode,
   isGatePolicy: () => isGatePolicy,
   isNewerVersion: () => isNewerVersion,
@@ -2027,10 +2033,11 @@ function formatDelegationReport(rec, originProject, targetProject) {
       return null;
   }
 }
-function firePush(deps, project, prev, next, event, lastCaptainTurnAt) {
+function firePush(deps, project, prev, next, event, lastCaptainTurnAt, prevRec) {
   if (!deps.notify)
     return;
-  if (prev === next.state)
+  const questionChanged = prev === "blocked" && next.state === "blocked" && prevRec != null && (prevRec.question ?? "").trim() !== (next.question ?? "").trim();
+  if (prev === next.state && !questionChanged)
     return;
   if (!ATTENTION_STATES.has(next.state))
     return;
@@ -2068,6 +2075,7 @@ function createDaemon(deps) {
   const { store, now } = deps;
   const lastCaptainTurnAt = /* @__PURE__ */ new Map();
   const quietNotifiedAt = /* @__PURE__ */ new Map();
+  const blockedRenudgedFor = /* @__PURE__ */ new Map();
   const resendAttemptedAt = /* @__PURE__ */ new Map();
   const firstTurnUndeliveredBudgetMs = deps.firstTurnUndeliveredBudgetMs ?? DEFAULT_FIRST_TURN_UNDELIVERED_BUDGET_MS;
   const firstTurnResendCooldownMs = deps.firstTurnResendCooldownMs ?? DEFAULT_FIRST_TURN_RESEND_COOLDOWN_MS;
@@ -2088,7 +2096,7 @@ function createDaemon(deps) {
     const next = reduce(cur, event, now());
     if (next !== cur) {
       store.put(next);
-      firePush(deps, project, cur.state, next, event, lastCaptainTurnAt.get(next.id));
+      firePush(deps, project, cur.state, next, event, lastCaptainTurnAt.get(next.id), cur);
     }
     return next;
   }
@@ -2240,6 +2248,8 @@ function createDaemon(deps) {
       }
       const recoveryPromises = [];
       for (const r of store.listAll()) {
+        if (r.state !== "blocked")
+          blockedRenudgedFor.delete(r.id);
         if (TERMINAL_STATES.has(r.state) && t - r.lastHeartbeat > TERMINAL_RECORD_TTL_MS) {
           store.delete(r.project, r.id);
           continue;
@@ -2302,6 +2312,27 @@ function createDaemon(deps) {
             continue;
           }
         }
+        if (r.state === "blocked" && !r.operatorHold) {
+          const threshold = deps.blockedRenudgeMs ?? DEFAULT_BLOCKED_RENUDGE_MS;
+          const blockedFor = t - r.lastHeartbeat;
+          const episodeKey = r.question ?? "";
+          if (blockedFor > threshold && blockedRenudgedFor.get(r.id) !== episodeKey) {
+            blockedRenudgedFor.set(r.id, episodeKey);
+            if (deps.notify) {
+              const tag = crewTag(r);
+              const mins = Math.max(1, Math.round(blockedFor / 6e4));
+              const message = `CREW BLOCKED REMINDER ${tag}: still blocked ~${mins}min (reminder \u2014 same question, not a new one): ${(r.question ?? "(no question)").trim()}`;
+              const synthEvent = { type: "task.blocked", id: r.id, reason: "renudge", question: r.question ?? "" };
+              try {
+                const p = deps.notify({ project: r.project, message, record: r, event: synthEvent });
+                if (p && typeof p.catch === "function")
+                  p.catch(() => {
+                  });
+              } catch {
+              }
+            }
+          }
+        }
         if (r.mode === "interactive" && r.state === "submitted" && !r.firstTurnConfirmedAt) {
           const undeliveredMs = t - r.createdAt;
           if (undeliveredMs > firstTurnUndeliveredBudgetMs) {
@@ -2391,7 +2422,7 @@ function createDaemon(deps) {
     }
   };
 }
-var DEFAULT_FIRST_TURN_UNDELIVERED_BUDGET_MS, DEFAULT_FIRST_TURN_RESEND_COOLDOWN_MS, DEFAULT_TASK_TIMEOUT_MS, TERMINAL_RECORD_TTL_MS, TERMINAL_RECORD_KEEP_PER_PROJECT, ATTENTION_STATES, REAPABLE_SURFACE_STATES, IDLE_DEBOUNCE_MS, KNOWN_EVENT_TYPES;
+var DEFAULT_FIRST_TURN_UNDELIVERED_BUDGET_MS, DEFAULT_FIRST_TURN_RESEND_COOLDOWN_MS, DEFAULT_BLOCKED_RENUDGE_MS, DEFAULT_TASK_TIMEOUT_MS, TERMINAL_RECORD_TTL_MS, TERMINAL_RECORD_KEEP_PER_PROJECT, ATTENTION_STATES, REAPABLE_SURFACE_STATES, IDLE_DEBOUNCE_MS, KNOWN_EVENT_TYPES;
 var init_reduce = __esm({
   "packages/core/dist/daemon/reduce.js"() {
     init_dist();
@@ -2399,6 +2430,7 @@ var init_reduce = __esm({
     init_watchdog();
     DEFAULT_FIRST_TURN_UNDELIVERED_BUDGET_MS = 12e4;
     DEFAULT_FIRST_TURN_RESEND_COOLDOWN_MS = 6e4;
+    DEFAULT_BLOCKED_RENUDGE_MS = 30 * 60 * 1e3;
     DEFAULT_TASK_TIMEOUT_MS = 8 * 60 * 60 * 1e3;
     TERMINAL_RECORD_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
     TERMINAL_RECORD_KEEP_PER_PROJECT = 20;
@@ -4529,8 +4561,11 @@ function buildRouterEnv(creds, model) {
     if (headers)
       env.ANTHROPIC_CUSTOM_HEADERS = headers;
   }
-  if (model)
+  if (model) {
     env.ANTHROPIC_MODEL = model;
+    env.CLAUDE_CODE_SUBAGENT_MODEL = model;
+    env.ANTHROPIC_SMALL_FAST_MODEL = model;
+  }
   return env;
 }
 function mergeClaudeEnvRouterSettings(routerEnv, claudeEnv) {
@@ -8693,6 +8728,12 @@ function resolveGateMode(env, gate) {
     return fromEnv;
   return gate?.mode && isGateMode(gate.mode) ? gate.mode : "auto";
 }
+function resolveGateEngine(env, gate) {
+  const fromEnv = env.SQUADRANT_GATE_ENGINE;
+  if (fromEnv !== void 0 && isGateEngine(fromEnv))
+    return fromEnv;
+  return gate?.engine && isGateEngine(gate.engine) ? gate.engine : "router";
+}
 function resolveGatePolicy(env, gate) {
   const fromEnv = env.SQUADRANT_GATE_POLICY;
   if (fromEnv !== void 0 && isGatePolicy(fromEnv))
@@ -9077,6 +9118,59 @@ var init_permission_gate = __esm({
   }
 });
 
+// packages/core/dist/auto-gate.js
+import { createAutoGate, projectGateConfig } from "@squadrant-ai/auto-gate";
+function gateForProjection(config) {
+  const gate = config.defaults.gate;
+  if (!gate)
+    return {};
+  const out = {};
+  if (gate.mode)
+    out.mode = gate.mode;
+  if (gate.tools)
+    out.tools = gate.tools;
+  if (gate.deny)
+    out.deny = gate.deny;
+  return out;
+}
+function createSquadrantAutoGate(deps) {
+  const env = deps.env ?? process.env;
+  const taskId = env.SQUADRANT_CREW_TASK_ID;
+  const project = deps.project ?? env.SQUADRANT_CREW_PROJECT;
+  const mode = resolveGateMode(env, deps.config.defaults.gate);
+  const projected = projectGateConfig({ gate: { ...gateForProjection(deps.config), mode } });
+  const enabled = mode === "on";
+  const blockedSignal = async (ctx) => {
+    if (!taskId || !project || !deps.sendBlocked)
+      return;
+    const event = {
+      type: "task.blocked",
+      id: taskId,
+      reason: ctx.reason,
+      question: `crew needs permission to run ${ctx.tool}`
+    };
+    await deps.sendBlocked(project, event);
+  };
+  const host = createAutoGate({
+    config: projected,
+    readIntent: (p) => readUserIntent(p) ?? void 0,
+    blockedSignal,
+    ...deps.decide ? { decide: deps.decide } : {},
+    ...project ? { project } : {},
+    env,
+    log: deps.log
+  });
+  if (!enabled) {
+    return { config: host.config, decideClaudeHookPayload: async () => void 0 };
+  }
+  return host;
+}
+var init_auto_gate = __esm({
+  "packages/core/dist/auto-gate.js"() {
+    init_permission_gate();
+  }
+});
+
 // packages/core/dist/group-dispatch.js
 import { randomUUID as randomUUID4 } from "crypto";
 import { createConnection as createConnection2 } from "net";
@@ -9483,10 +9577,11 @@ async function runCrewAnswer(project, name, option, runtime, workspaceId, deps,
   if (!crew) {
     throw new Error(`Crew '${name}' not found for ${project}. Run 'squadrant crew list ${project}'.`);
   }
-  const options = await deps.readModalOptions(crew);
-  if (!options) {
+  const modal = await deps.readModalOptions(crew);
+  if (!modal || modal.options.length === 0) {
     throw new Error(`Crew '${name}' has no interactive option prompt visible right now \u2014 nothing to answer. Read its screen with 'squadrant crew read ${project} ${name}' to check its state.`);
   }
+  const options = modal.options;
   const target = resolveOption(options, option);
   if (opts?.expect && !target.label.toLowerCase().includes(opts.expect.toLowerCase())) {
     throw new Error(`Refusing: option ${target.index} is "${target.label}", which does not contain expected text "${opts.expect}". Option order is model-generated and can shift between renders \u2014 re-check with 'squadrant crew read ${project} ${name}'.
@@ -9498,7 +9593,9 @@ ${describeOptions(options)}`);
   log(`\u2192 selecting ${target.index}. "${target.label}"`);
   const current = options.find((o) => o.highlighted) ?? options[0];
   const steps = target.index - current.index;
-  const key = steps >= 0 ? "Down" : "Up";
+  const forwardKey = modal.axis === "horizontal" ? "Right" : "Down";
+  const backwardKey = modal.axis === "horizontal" ? "Left" : "Up";
+  const key = steps >= 0 ? forwardKey : backwardKey;
   for (let i = 0; i < Math.abs(steps); i++) {
     await runtime.sendKeyToPane(crew, key);
   }
@@ -9870,6 +9967,7 @@ __export(dist_exports2, {
   CREW_GONE_MS: () => CREW_GONE_MS,
   CREW_STALE_MS: () => CREW_STALE_MS,
   CaptainDelivery: () => CaptainDelivery,
+  DEFAULT_BLOCKED_RENUDGE_MS: () => DEFAULT_BLOCKED_RENUDGE_MS,
   DEFAULT_FIRST_TURN_RESEND_COOLDOWN_MS: () => DEFAULT_FIRST_TURN_RESEND_COOLDOWN_MS,
   DEFAULT_FIRST_TURN_UNDELIVERED_BUDGET_MS: () => DEFAULT_FIRST_TURN_UNDELIVERED_BUDGET_MS,
   DEFAULT_GATE_DENY_RULES: () => DEFAULT_GATE_DENY_RULES,
@@ -9952,6 +10050,7 @@ __export(dist_exports2, {
   createRouterService: () => createRouterService,
   createRouterShim: () => createRouterShim,
   createRunCommand: () => createRunCommand,
+  createSquadrantAutoGate: () => createSquadrantAutoGate,
   createStore: () => createStore,
   createSurfaceLivenessProbe: () => createSurfaceLivenessProbe,
   createTelegramBridge: () => createTelegramBridge,
@@ -10093,6 +10192,7 @@ __export(dist_exports2, {
   resolveCurrentProject: () => resolveCurrentProject,
   resolveGate: () => resolveGate,
   resolveGateDenyRules: () => resolveGateDenyRules,
+  resolveGateEngine: () => resolveGateEngine,
   resolveGateMode: () => resolveGateMode,
   resolveGatePolicy: () => resolveGatePolicy,
   resolveGateTools: () => resolveGateTools,
@@ -10198,6 +10298,7 @@ var init_dist2 = __esm({
     init_router_resolution();
     init_captain_router();
     init_permission_gate();
+    init_auto_gate();
     init_restart_daemon();
     init_group_dispatch();
     init_launch_workspace();
@@ -13683,6 +13784,37 @@ function parseModalOptions(screen) {
   }
   return options.length > 0 ? options : null;
 }
+function parseOpencodePermissionOptions(screen) {
+  if (!screen)
+    return null;
+  if (!/△\s*Permission required/.test(screen))
+    return null;
+  const lines = screen.split(/\r?\n/);
+  const bar = lines.find((l) => /⇆\s*select/.test(l));
+  if (!bar)
+    return null;
+  let region = bar.split("\u21C6")[0];
+  const fullscreenIdx = region.toLowerCase().lastIndexOf("fullscreen");
+  if (fullscreenIdx !== -1) {
+    region = region.slice(0, fullscreenIdx).replace(/\s+\S+\s*$/, "");
+  }
+  region = region.replace(/^[\s┃│╭╮╰╯|]+/, "").trim();
+  if (!region)
+    return null;
+  const labels = region.split(/\s{2,}/).map((s) => s.trim()).filter(Boolean);
+  if (labels.length === 0)
+    return null;
+  return labels.map((label, i) => ({ index: i + 1, label, highlighted: i === 0 }));
+}
+function parseModal(screen) {
+  const claude = parseModalOptions(screen);
+  if (claude)
+    return { options: claude, axis: "vertical" };
+  const opencode = parseOpencodePermissionOptions(screen);
+  if (opencode)
+    return { options: opencode, axis: "horizontal" };
+  return null;
+}
 function readInputBoxRaw(screen, opts) {
   if (!screen)
     return null;
@@ -14892,6 +15024,47 @@ function removeCommandHandlers(entries, command) {
   }
   return removed;
 }
+function isForeignAutoGateCommand(command) {
+  if (typeof command !== "string")
+    return false;
+  if (command.includes(FOREIGN_AUTO_GATE_MARKER))
+    return true;
+  const first = command.trim().split(/\s+/)[0] ?? "";
+  return /(^|[/\\])auto-gate$/.test(first);
+}
+function findForeignGateHandlers(entries) {
+  const found = [];
+  for (const entry of entries) {
+    const hooks = entry?.hooks;
+    if (!Array.isArray(hooks))
+      continue;
+    for (const h of hooks) {
+      const cmd = h?.command;
+      if (isForeignAutoGateCommand(cmd))
+        found.push(cmd);
+    }
+  }
+  return found;
+}
+function removeForeignGateHandlers(entries) {
+  const removed = [];
+  for (let i = entries.length - 1; i >= 0; i--) {
+    const entry = entries[i];
+    if (!Array.isArray(entry?.hooks))
+      continue;
+    entry.hooks = entry.hooks.filter((h) => {
+      const cmd = h?.command;
+      if (isForeignAutoGateCommand(cmd)) {
+        removed.push(cmd);
+        return false;
+      }
+      return true;
+    });
+    if (entry.hooks.length === 0)
+      entries.splice(i, 1);
+  }
+  return removed;
+}
 function installClaudeHooks(opts = {}) {
   const settingsPath = opts.settingsPath ?? join25(homedir13(), ".claude", "settings.json");
   const hookCmd = opts.hookCmd ?? DEFAULT_HOOK_CMD;
@@ -14929,6 +15102,23 @@ function installClaudeHooks(opts = {}) {
         changed = true;
         migrated.push(`${eventName}/${sub}`);
       }
+      const foreign = findForeignGateHandlers(entries);
+      if (foreign.length > 0) {
+        if (opts.gateMode === "on") {
+          const removed = removeForeignGateHandlers(entries);
+          if (removed.length > 0)
+            changed = true;
+          for (const command2 of removed) {
+            log(`native-hook: removed foreign auto-gate PermissionRequest handler in ${settingsPath} [#P6 \xA715#5]: ${command2}`);
+            opts.recordGateAction?.({ action: "removed-foreign-gate", command: command2 });
+          }
+        } else {
+          for (const command2 of foreign) {
+            log(`native-hook: foreign auto-gate PermissionRequest handler present in ${settingsPath} but squadrant's gate is '${opts.gateMode ?? "auto"}' (not 'on') \u2014 foreign entry left untouched [#P6 \xA715#5]: ${command2}`);
+            opts.recordGateAction?.({ action: "left-foreign-gate", command: command2 });
+          }
+        }
+      }
     }
     const alreadyPresent = entries.some((m) => Array.isArray(m.hooks) && m.hooks.some((h) => typeof h.command === "string" && h.command === command));
     if (!alreadyPresent) {
@@ -14959,11 +15149,55 @@ function installClaudeHooks(opts = {}) {
       changed = true;
     }
   }
+  if (typeof settings.env === "object" && settings.env !== null && !Array.isArray(settings.env)) {
+    if (reconcileSubagentModels(settings.env, log))
+      changed = true;
+  }
   if (changed) {
     writeFile6(settingsPath, JSON.stringify(settings, null, 2));
   }
   return settingsPath;
 }
+function isCustomUpstream(baseUrl) {
+  if (typeof baseUrl !== "string" || baseUrl.length === 0)
+    return false;
+  try {
+    return new URL(baseUrl).hostname.toLowerCase() !== "api.anthropic.com";
+  } catch {
+    return false;
+  }
+}
+function isAnthropicModelId(value) {
+  if (typeof value !== "string")
+    return false;
+  const v2 = value.trim().toLowerCase();
+  return v2 === "sonnet" || v2 === "opus" || v2 === "haiku" || v2.startsWith("claude-");
+}
+function reconcileSubagentModels(env, log) {
+  if (!isCustomUpstream(env.ANTHROPIC_BASE_URL))
+    return false;
+  const model = env.ANTHROPIC_MODEL;
+  if (typeof model !== "string" || model.length === 0)
+    return false;
+  let changed = false;
+  for (const key of [SUBAGENT_MODEL_KEY, SMALL_FAST_MODEL_KEY]) {
+    const current = env[key];
+    if (current === void 0) {
+      env[key] = model;
+      changed = true;
+      log(`native-hook: set ${key}='${model}' to match ANTHROPIC_MODEL on a custom upstream`);
+    } else if (isAnthropicModelId(current)) {
+      if (current !== model) {
+        env[key] = model;
+        changed = true;
+        log(`native-hook: aligned ${key} '${String(current)}' \u2192 '${model}' for a custom upstream`);
+      }
+    } else {
+      log(`native-hook: ${key} '${String(current)}' is a custom model id \u2014 left untouched`);
+    }
+  }
+  return changed;
+}
 function mapSubToLifecycle(sub) {
   switch (sub) {
     case "session-start":
@@ -15013,7 +15247,7 @@ function defaultWriteFile(path39, content) {
   mkdirSync8(path39.replace(/\/[^/]+$/, ""), { recursive: true });
   writeFileSync11(path39, content, "utf-8");
 }
-var CLAUDE_HOOK_EVENTS, DEFAULT_HOOK_CMD, GATE_HOOK_CMD, NativeHookSource;
+var CLAUDE_HOOK_EVENTS, DEFAULT_HOOK_CMD, GATE_HOOK_CMD, FOREIGN_AUTO_GATE_MARKER, SUBAGENT_MODEL_KEY, SMALL_FAST_MODEL_KEY, NativeHookSource;
 var init_native_hook_source = __esm({
   "packages/workspaces/dist/native-hooks/native-hook-source.js"() {
     CLAUDE_HOOK_EVENTS = [
@@ -15033,6 +15267,9 @@ var init_native_hook_source = __esm({
     ];
     DEFAULT_HOOK_CMD = "squadrant hooks";
     GATE_HOOK_CMD = "squadrant gate";
+    FOREIGN_AUTO_GATE_MARKER = "auto-gate-managed";
+    SUBAGENT_MODEL_KEY = "CLAUDE_CODE_SUBAGENT_MODEL";
+    SMALL_FAST_MODEL_KEY = "ANTHROPIC_SMALL_FAST_MODEL";
     NativeHookSource = class {
       name = "native-hook";
       hookInstall;
@@ -15166,7 +15403,7 @@ async function paneHasOpenModal(runtime, pane) {
 }
 async function readModalOptions(runtime, pane) {
   const screen = await runtime.readPaneScreen(pane) ?? "";
-  return parseModalOptions(screen);
+  return parseModal(screen);
 }
 async function confirmedSendToPane(runtime, pane, message) {
   const preSendScreen = await runtime.readPaneScreen(pane) ?? "";
@@ -22349,6 +22586,30 @@ init_dist();
 init_dist3();
 import { Command as Command32 } from "commander";
 var SOCK4 = DAEMON_SOCK_PATH;
+async function runAutoGateClaudeHook(o) {
+  const make = o.deps.createAutoGate ?? createSquadrantAutoGate;
+  const autoGate = make({
+    config: o.config,
+    env: o.env,
+    ...o.project ? { project: o.project } : {},
+    ...o.deps.sendEvent ? { sendBlocked: o.deps.sendEvent } : {},
+    log: o.log
+  });
+  const out = await autoGate.decideClaudeHookPayload(o.deps.rawPayload ?? "");
+  if (out === void 0) {
+    o.log("gate auto-gate: ask/yield \u2014 normal dialog");
+    return { decision: "ask", tier: 2, reason: "auto-gate: ask/yield" };
+  }
+  o.stdout(out);
+  let decision = "allow";
+  try {
+    const parsed = JSON.parse(out);
+    if (parsed?.hookSpecificOutput?.decision?.behavior === "deny") decision = "deny";
+  } catch {
+  }
+  o.log(`gate auto-gate ${decision}`);
+  return { decision, tier: 2, reason: "auto-gate" };
+}
 async function runGatePermissionRequest(deps) {
   const env = deps.env ?? process.env;
   const payload = deps.payload ?? {};
@@ -22363,6 +22624,10 @@ async function runGatePermissionRequest(deps) {
   const log = deps.log ?? ((m) => process.stderr.write(`[squadrant] ${m}
 `));
   const config = deps.config ?? (deps.loadConfigFn ?? loadConfig)();
+  const gate = config.defaults.gate;
+  if (resolveGateMode(env, gate) === "on" && resolveGateEngine(env, gate) === "auto-gate") {
+    return runAutoGateClaudeHook({ deps, env, config, project, stdout, log });
+  }
   const cwd = deps.cwd ?? (typeof p.cwd === "string" && p.cwd ? p.cwd : env.SQUADRANT_CREW_CWD ?? process.cwd());
   const transcriptPath = typeof p.transcript_path === "string" && p.transcript_path ? p.transcript_path : deriveTranscriptPath(
     typeof p.session_id === "string" ? p.session_id : "",
@@ -22426,6 +22691,7 @@ function gateCommand() {
     }
     await runGatePermissionRequest({
       payload,
+      rawPayload: stdin,
       env: process.env,
       stdout: (s) => process.stdout.write(s),
       sendEvent: async (project, ev) => {
@@ -22508,6 +22774,7 @@ function hooksCommand() {
     if (sub === "permission-request") {
       await runGatePermissionRequest({
         payload,
+        rawPayload: stdin,
         env: process.env,
         stdout: (s) => process.stdout.write(s),
         sendEvent: async (project2, ev2) => {