squadrant 0.23.0 → 0.24.0

package/dist/index.js

@@ -225,7 +225,12 @@ var init_config = __esm({
 
 // packages/shared/dist/provider-preset.js
 function isProviderPresetId(v2) {
-  return v2 === "a" || v2 === "b" || v2 === "c" || v2 === "d";
+  return v2 === "a" || v2 === "b" || v2 === "c";
+}
+function normalizePresetId(v2) {
+  if (v2 === "d")
+    return "c";
+  return isProviderPresetId(v2) ? v2 : void 0;
 }
 function presetCrewRouting(id) {
   const base = (tier) => {
@@ -248,17 +253,10 @@ function presetCrewRouting(id) {
         { ...base("daily"), agent: "opencode", model: OPENCODE_MODEL }
       ];
     case "c":
-      return [
-        { ...base("extreme"), agent: "claude", backend: "proxy", model: ROUTER_PRESET_MODEL },
-        { ...base("hard"), agent: "claude", backend: "proxy", model: ROUTER_PRESET_MODEL },
-        codex("mobile"),
-        { ...base("daily"), agent: "opencode", model: OPENCODE_MODEL }
-      ];
-    case "d":
       return ["extreme", "hard", "mobile", "daily"].map(codex);
   }
 }
-function providerPresetDefaults(id, router) {
+function providerPresetDefaults(id) {
   switch (id) {
     case "a":
       return {
@@ -287,28 +285,6 @@ function providerPresetDefaults(id, router) {
       };
     }
     case "c": {
-      if (!router) {
-        throw new Error("preset C (claude harness + router backend) requires a router config \u2014 set defaults.router first");
-      }
-      const routed = { agent: "claude", backend: "proxy", model: ROUTER_PRESET_MODEL };
-      return {
-        roles: {
-          command: { ...routed },
-          captain: { ...routed },
-          crew: { ...routed },
-          exploration: { ...routed },
-          side: { ...routed }
-        },
-        // Auto mode's classifier is hardcoded to Sonnet 5 and fails closed on a
-        // router upstream — every claude session must use a manual mode so the
-        // U7 gate owns the prompt.
-        permissions: { command: "default", captain: "default", crew: "default" },
-        crewRouting: { rules: presetCrewRouting("c") },
-        router,
-        gate: { mode: "on" }
-      };
-    }
-    case "d": {
       const codex = { agent: "codex" };
       return {
         roles: {
@@ -319,7 +295,7 @@ function providerPresetDefaults(id, router) {
           side: { ...codex }
         },
         permissions: {},
-        crewRouting: { rules: presetCrewRouting("d") }
+        crewRouting: { rules: presetCrewRouting("c") }
       };
     }
   }
@@ -329,13 +305,11 @@ function detectProviderPresetId(config) {
   if (crew?.agent === "opencode")
     return "b";
   if (crew?.agent === "codex")
-    return "d";
-  if (crew?.backend && crew.backend !== "native")
     return "c";
   return "a";
 }
 function applyProviderPreset(config, id, opts) {
-  const preset = providerPresetDefaults(id, opts.router);
+  const preset = providerPresetDefaults(id);
   const next = structuredClone(config);
   const changes = [];
   if (opts.overwrite) {
@@ -361,21 +335,9 @@ function applyProviderPreset(config, id, opts) {
     next.defaults.permissions = { ...preset.permissions };
     changes.push("defaults.permissions");
   }
-  if (preset.router) {
-    if (opts.overwrite || next.defaults.router === void 0) {
-      next.defaults.router = structuredClone(preset.router);
-      changes.push("defaults.router");
-    }
-  }
-  if (preset.gate) {
-    if (opts.overwrite || next.defaults.gate === void 0) {
-      next.defaults.gate = { ...preset.gate };
-      changes.push("defaults.gate");
-    }
-  }
   return { config: next, changes };
 }
-var PROVIDER_PRESETS, ROUTER_PRESET_MODEL, DEFAULT_ROUTER_KIND, DEFAULT_ROUTER_BASE_URL, OPENCODE_MODEL;
+var PROVIDER_PRESETS, OPENCODE_MODEL;
 var init_provider_preset = __esm({
   "packages/shared/dist/provider-preset.js"() {
     init_config();
@@ -394,20 +356,11 @@ var init_provider_preset = __esm({
       },
       {
         id: "c",
-        label: "Claude harness + router backend (advanced)",
-        summary: "Claude harness against a router upstream. The U7 gate replaces auto mode.",
-        requiresAnthropic: false
-      },
-      {
-        id: "d",
         label: "Codex (ChatGPT Pro)",
         summary: "All roles run on the codex harness.",
         requiresAnthropic: false
       }
     ];
-    ROUTER_PRESET_MODEL = "deepseek-v4.1-flash";
-    DEFAULT_ROUTER_KIND = "opencode-go";
-    DEFAULT_ROUTER_BASE_URL = "https://opencode.ai/zen/go";
     OPENCODE_MODEL = "opencode-go/deepseek-v4.1-flash";
   }
 });
@@ -1661,15 +1614,12 @@ __export(dist_exports, {
   DEFAULT_CONFIG_PATH: () => DEFAULT_CONFIG_PATH,
   DEFAULT_CREW_ROUTING_RULES: () => DEFAULT_CREW_ROUTING_RULES,
   DEFAULT_NOTIFY: () => DEFAULT_NOTIFY,
-  DEFAULT_ROUTER_BASE_URL: () => DEFAULT_ROUTER_BASE_URL,
-  DEFAULT_ROUTER_KIND: () => DEFAULT_ROUTER_KIND,
   GATE_ENGINES: () => GATE_ENGINES,
   GATE_MODES: () => GATE_MODES,
   GATE_POLICIES: () => GATE_POLICIES,
   MANAGED_TARGETS: () => MANAGED_TARGETS,
   PROVIDER_PRESETS: () => PROVIDER_PRESETS,
   ROUTER_KINDS: () => ROUTER_KINDS,
-  ROUTER_PRESET_MODEL: () => ROUTER_PRESET_MODEL,
   SAFE_KINDS: () => SAFE_KINDS,
   SOCKET_CONTROL_MODE_PATH: () => SOCKET_CONTROL_MODE_PATH,
   SPOKE_SUBDIRS: () => SPOKE_SUBDIRS,
@@ -1726,6 +1676,7 @@ __export(dist_exports, {
   mirrorDir: () => mirrorDir,
   mirrorFlat: () => mirrorFlat,
   needsCheck: () => needsCheck,
+  normalizePresetId: () => normalizePresetId,
   notifyIfUpdateAvailable: () => notifyIfUpdateAvailable,
   parseSection: () => parseSection,
   parseThinkingLevel: () => parseThinkingLevel,
@@ -5448,8 +5399,10 @@ async function resolveAndPersistOpencodeCaptain(opts) {
     sleep: opts.sleep,
     fetchImpl: opts.fetchImpl
   });
-  if (!sessionId)
+  if (!sessionId) {
+    opts.log?.(`opencode captain session resolution timed out for ${opts.project} (${opts.directory}) \u2014 captain.json has no session id yet; the daemon's own re-resolve fills it in once a session appears`);
     return null;
+  }
   writeCaptainAddress(opts.stateRoot, opts.project, {
     agent: "opencode",
     port: opts.port,
@@ -5469,6 +5422,33 @@ var init_opencode_session = __esm({
 function discoverCaptainSurface(surfaces, captainTitle) {
   return surfaces.find((s) => s.title === captainTitle) ?? null;
 }
+async function reresolveOpencodeAddress(rec) {
+  const live = discoverLiveOpencodeServer({ directory: rec.directory, sessionId: rec.sessionId });
+  const port = live?.port ?? rec.port;
+  if (port === void 0)
+    return null;
+  const newest = newestSessionInDirectory(await listSessions(port), rec.directory, Date.parse(rec.launchedAt));
+  const sessionId = newest ?? live?.sessionId ?? rec.sessionId;
+  if (!sessionId || port === rec.port && sessionId === rec.sessionId)
+    return null;
+  return { port, sessionId };
+}
+async function healStaleOpencodeAddress(stateRoot, project, log, logPrefix) {
+  const rec = readCaptainAddress(stateRoot, project);
+  if (!rec)
+    return false;
+  const resolved = await reresolveOpencodeAddress(rec);
+  if (!resolved)
+    return false;
+  const current = readCaptainAddress(stateRoot, project);
+  if (!current || current.launchedAt !== rec.launchedAt) {
+    log(`captain-channel ${project}: skipped stale-address heal \u2014 a newer launch record won the race`);
+    return false;
+  }
+  writeCaptainAddress(stateRoot, project, { ...current, port: resolved.port, sessionId: resolved.sessionId });
+  log(`captain-channel ${project}: ${logPrefix} \u2192 port ${resolved.port}`);
+  return true;
+}
 async function reapOrphanedCrews(store, project, isSurfaceAlive) {
   let reaped = 0;
   for (const r of store.list(project)) {
@@ -5693,27 +5673,7 @@ function createDelivery(ctx, daemonCmux, isSurfaceAlive) {
                 log(`captain-channel ${project}: threw, falling back to pane \u2014 ${e.message}`);
               }
               if (agent === "opencode" && mode !== "off") {
-                const rec = readCaptainAddress(stateRoot, project);
-                let healed = false;
-                if (rec?.port) {
-                  const fresh = newestSessionInDirectory(await listSessions(rec.port), rec.directory, Date.parse(rec.launchedAt));
-                  if (fresh && fresh !== rec.sessionId) {
-                    writeCaptainAddress(stateRoot, project, { ...rec, sessionId: fresh });
-                    healed = true;
-                  }
-                }
-                if (!healed && rec) {
-                  const live = discoverLiveOpencodeServer({ directory: rec.directory, sessionId: rec.sessionId });
-                  if (live && (live.port !== rec.port || live.sessionId && live.sessionId !== rec.sessionId)) {
-                    writeCaptainAddress(stateRoot, project, {
-                      ...rec,
-                      port: live.port,
-                      sessionId: live.sessionId ?? rec.sessionId
-                    });
-                    log(`captain-channel ${project}: re-resolved opencode address \u2192 port ${live.port}`);
-                    healed = true;
-                  }
-                }
+                const healed = await healStaleOpencodeAddress(stateRoot, project, log, "re-resolved opencode address");
                 if (healed) {
                   try {
                     const retry = await deliverToCaptain(project, text, { channel: picked, mode, log });
@@ -6571,11 +6531,15 @@ function parseCommand(text) {
   }
   return entry.build(args);
 }
-var WRITABLE_CONFIG_KEYS, EFFORT_MODES, REGISTRY;
+var WRITABLE_CONFIG_KEYS, EFFORT_MODES, GATE_MODES2, CONFIG_VALUE_VALIDATORS, REGISTRY;
 var init_commands = __esm({
   "packages/core/dist/telegram/commands.js"() {
-    WRITABLE_CONFIG_KEYS = ["defaults.effort"];
+    WRITABLE_CONFIG_KEYS = ["defaults.effort", "defaults.gate.mode"];
     EFFORT_MODES = /* @__PURE__ */ new Set(["max", "balance", "low"]);
+    GATE_MODES2 = /* @__PURE__ */ new Set(["on", "off", "auto"]);
+    CONFIG_VALUE_VALIDATORS = {
+      "defaults.gate.mode": { valid: GATE_MODES2, usage: "usage: /config set defaults.gate.mode <on|off|auto>" }
+    };
     REGISTRY = {
       status: { usage: "/status", build: () => ok("status", ["status"]) },
       projects: { usage: "/projects", build: () => ok("projects", ["projects", "list"]) },
@@ -6622,6 +6586,10 @@ var init_commands = __esm({
                 message: `\u26D4 '${key}' is not writable over Telegram. Allowed: ${WRITABLE_CONFIG_KEYS.join(", ")}`
               };
             }
+            const validator = CONFIG_VALUE_VALIDATORS[key];
+            if (validator && !validator.valid.has(value)) {
+              return usage("config", validator.usage);
+            }
             return ok("config", ["config", "set", key, value]);
           }
           return usage("config", "usage: /config get <key> | /config set <key> <value>");
@@ -9119,7 +9087,7 @@ var init_permission_gate = __esm({
 });
 
 // packages/core/dist/auto-gate.js
-import { createAutoGate, projectGateConfig } from "@squadrant-ai/auto-gate";
+import { createAutoGate, projectGateConfig, resolveApiKey } from "@squadrant-ai/auto-gate";
 function gateForProjection(config) {
   const gate = config.defaults.gate;
   if (!gate)
@@ -9133,6 +9101,9 @@ function gateForProjection(config) {
     out.deny = gate.deny;
   return out;
 }
+function hasAutoGateCredential(env = process.env, home) {
+  return Boolean(resolveApiKey({ env, ...home !== void 0 ? { home } : {} }));
+}
 function createSquadrantAutoGate(deps) {
   const env = deps.env ?? process.env;
   const taskId = env.SQUADRANT_CREW_TASK_ID;
@@ -10107,6 +10078,7 @@ __export(dist_exports2, {
   freshTrace: () => freshTrace,
   gateCacheKey: () => gateCacheKey,
   getDaemonPid: () => getDaemonPid,
+  hasAutoGateCredential: () => hasAutoGateCredential,
   hasModalOptionList: () => hasModalOptionList,
   healCmdFor: () => healCmdFor,
   inboundBody: () => inboundBody,
@@ -16454,27 +16426,6 @@ function promptLine(question) {
     });
   });
 }
-async function resolveRouter(config, opts, isTTY) {
-  if (config.defaults?.router) return config.defaults.router;
-  let kind = opts.routerKind;
-  let baseUrl = opts.routerBaseUrl;
-  let apiKeyEnv = opts.routerApiKeyEnv;
-  if (isTTY && (!kind || !baseUrl)) {
-    const k = await promptLine(chalk4.cyan(`    Router kind [${DEFAULT_ROUTER_KIND}]: `));
-    kind = kind ?? (k || DEFAULT_ROUTER_KIND);
-    const b = await promptLine(chalk4.cyan(`    Router base URL [${DEFAULT_ROUTER_BASE_URL}]: `));
-    baseUrl = baseUrl ?? (b || DEFAULT_ROUTER_BASE_URL);
-    const e = await promptLine(chalk4.cyan("    Env var holding the API key (optional): "));
-    apiKeyEnv = apiKeyEnv ?? (e || void 0);
-  }
-  const resolvedKind = kind && isRouterKind(kind) ? kind : DEFAULT_ROUTER_KIND;
-  const resolvedBase = baseUrl || DEFAULT_ROUTER_BASE_URL;
-  if (!isTTY && !opts.routerBaseUrl) {
-    console.log(chalk4.dim(`    - no router flags given; defaulting to ${resolvedKind} (${resolvedBase})`));
-    console.log(chalk4.dim("      set a credential: squadrant config set defaults.router.apiKeyEnv <VAR>"));
-  }
-  return { kind: resolvedKind, baseUrl: resolvedBase, ...apiKeyEnv ? { apiKeyEnv } : {} };
-}
 async function askProvider(current, auth) {
   console.log(chalk4.bold("\n    Choose your provider:"));
   for (const p of PROVIDER_PRESETS) {
@@ -16483,10 +16434,10 @@ async function askProvider(current, auth) {
     console.log(chalk4.dim(`         ${p.summary}`));
   }
   if (!auth.authenticated) {
-    console.log(chalk4.yellow("\n    \u26A0 No Anthropic credential detected \u2014 preset a will not work; consider b or c."));
+    console.log(chalk4.yellow("\n    \u26A0 No Anthropic credential detected \u2014 preset a will not work; consider b."));
   }
   const answer = (await promptLine(chalk4.cyan(`
-    Provider [a/b/c/d] (default ${current}): `))).toLowerCase();
+    Provider [a/b/c] (default ${current}): `))).toLowerCase();
   if (!answer) return current;
   if (isProviderPresetId(answer)) return answer;
   console.log(chalk4.yellow(`    \u26A0 Unknown choice '${answer}' \u2014 keeping '${current}'.`));
@@ -16495,9 +16446,9 @@ async function askProvider(current, auth) {
 function warnIfNoAnthropic(preset, auth) {
   if (preset !== "a" || auth.authenticated) return;
   console.log(chalk4.yellow("    \u26A0 No Anthropic credential detected (`claude auth status`)."));
-  console.log(chalk4.dim("      Preset A (Claude Pro/Max or an API key) may not work \u2014 consider preset b or c."));
+  console.log(chalk4.dim("      Preset A (Claude Pro/Max or an API key) may not work \u2014 consider preset b."));
 }
-var initCommand = new Command2("init").description("Guided first-time setup: provider, hub vault, agents, plugins, projects (re-run-safe)").option("--hub <path>", "Hub vault path", "~/squadrant-hub").option("--preset <id>", "provider preset: a|b|c|d (non-interactive)").option("--router-kind <kind>", "router kind for --preset c (opencode-go|openrouter|ccr|litellm|custom)").option("--router-base-url <url>", "router base URL for --preset c").option("--router-api-key-env <env>", "env var holding the router credential for --preset c").action(async (opts) => {
+var initCommand = new Command2("init").description("Guided first-time setup: provider, hub vault, agents, plugins, projects (re-run-safe)").option("--hub <path>", "Hub vault path", "~/squadrant-hub").option("--preset <id>", "provider preset: a|b|c (non-interactive; d accepted as a deprecated alias for c)").action(async (opts) => {
   const hubPath = resolveHome(opts.hub);
   const pkgRoot = findPackageRoot();
   const configDir = path23.join(os13.homedir(), ".config", "squadrant");
@@ -16505,9 +16456,9 @@ var initCommand = new Command2("init").description("Guided first-time setup: pro
   console.log(chalk4.bold("\nSquadrant Init\n"));
   let explicitPreset;
   if (opts.preset !== void 0) {
-    const candidate = opts.preset.toLowerCase();
-    if (!isProviderPresetId(candidate)) {
-      console.error(chalk4.red(`  \u2718 Unknown --preset '${opts.preset}'. Valid values: a, b, c, d`));
+    const candidate = normalizePresetId(opts.preset.toLowerCase());
+    if (!candidate) {
+      console.error(chalk4.red(`  \u2718 Unknown --preset '${opts.preset}'. Valid values: a, b, c`));
       process.exitCode = 1;
       return;
     }
@@ -16517,7 +16468,7 @@ var initCommand = new Command2("init").description("Guided first-time setup: pro
     console.log("  Run these steps to get started:\n");
     console.log(chalk4.bold("  1/5  Hub vault + provider"));
     console.log(chalk4.cyan(`       squadrant init --hub ${opts.hub}`));
-    console.log(chalk4.dim("       Choose a provider: squadrant init --preset a|b|c|d"));
+    console.log(chalk4.dim("       Choose a provider: squadrant init --preset a|b|c"));
     console.log(chalk4.bold("\n  2/5  Agent + projection setup"));
     console.log("       (handled automatically by: " + chalk4.cyan("squadrant init") + ")");
     console.log(chalk4.bold("\n  3/5  Plugins \u2014 open Claude Code and run:"));
@@ -16563,9 +16514,8 @@ var initCommand = new Command2("init").description("Guided first-time setup: pro
   let appliedChanges = [];
   if (chosenPreset) {
     const label = PROVIDER_PRESETS.find((p) => p.id === chosenPreset)?.label ?? chosenPreset;
-    const router = chosenPreset === "c" ? await resolveRouter(config, opts, isTTY) : void 0;
     const overwrite = !configExists || explicitPreset !== void 0;
-    const result = applyProviderPreset(config, chosenPreset, { router, overwrite });
+    const result = applyProviderPreset(config, chosenPreset, { overwrite });
     appliedChanges = result.changes;
     config = result.config;
     console.log(chalk4.bold(`
@@ -20175,7 +20125,7 @@ var launchCommand = new Command14("launch").description(
             sessionId: priorRecord?.sessionId
           });
           if (!live) return;
-          const sessionId = live.sessionId ?? priorRecord?.sessionId;
+          const sessionId = live.sessionId ?? (live.port === priorRecord?.port ? priorRecord?.sessionId : void 0);
           if (priorRecord && priorRecord.port === live.port && priorRecord.sessionId === sessionId) return;
           writeCaptainAddress(stateRoot, projectName, {
             agent: "opencode",
@@ -20189,13 +20139,20 @@ var launchCommand = new Command14("launch").description(
           console.log(chalk15.green(`  \u2714 Workspace '${name}' created`));
           if (!projectName) return;
           if (isOpencodeCaptain && captainPort) {
+            writeCaptainAddress(stateRoot, projectName, {
+              agent: "opencode",
+              port: captainPort,
+              directory: realpathOrSelf(cwd),
+              launchedAt
+            });
             void resolveAndPersistOpencodeCaptain({
               stateRoot,
               project: projectName,
               port: captainPort,
               directory: realpathOrSelf(cwd),
               launchedAt,
-              sessionId: opencodeResumeSessionId
+              sessionId: opencodeResumeSessionId,
+              log: (m) => console.error(chalk15.yellow(`  \u26A0 ${m}`))
             }).catch(() => {
             });
           } else if (role === "captain") {
@@ -22585,6 +22542,7 @@ init_dist2();
 init_dist();
 init_dist3();
 import { Command as Command32 } from "commander";
+import chalk33 from "chalk";
 var SOCK4 = DAEMON_SOCK_PATH;
 async function runAutoGateClaudeHook(o) {
   const make = o.deps.createAutoGate ?? createSquadrantAutoGate;
@@ -22669,10 +22627,60 @@ async function runGatePermissionRequest(deps) {
   return evaluation;
 }
 var DEFAULT_EVENT = "permission-request";
+function runGateModeGet(configPath = DEFAULT_CONFIG_PATH, env = process.env) {
+  const config = loadConfig(configPath);
+  const mode = resolveGateMode(env, config.defaults.gate);
+  const source = env.SQUADRANT_GATE !== void 0 && isGateMode(env.SQUADRANT_GATE) ? "env" : config.defaults.gate?.mode && isGateMode(config.defaults.gate.mode) ? "config" : "default";
+  return { mode, source };
+}
+function runGateModeSet(value, configPath = DEFAULT_CONFIG_PATH) {
+  if (!isGateMode(value)) {
+    throw new Error(`Invalid gate mode '${value}'. Valid values: ${GATE_MODES.join(" | ")}`);
+  }
+  const config = loadConfig(configPath);
+  const old = config.defaults.gate?.mode && isGateMode(config.defaults.gate.mode) ? config.defaults.gate.mode : "auto";
+  config.defaults.gate = { ...config.defaults.gate, mode: value };
+  saveConfig(config, configPath);
+  return { old, next: value };
+}
+function runGateStatus(configPath = DEFAULT_CONFIG_PATH, env = process.env) {
+  const config = loadConfig(configPath);
+  const { mode, source } = runGateModeGet(configPath, env);
+  const engine = resolveGateEngine(env, config.defaults.gate);
+  const model = resolveClassifierModel(env, config);
+  const credentialPresent = engine === "auto-gate" ? hasAutoGateCredential(env) : Boolean(config.defaults.router?.apiKey ?? (config.defaults.router?.apiKeyEnv ? env[config.defaults.router.apiKeyEnv] : void 0));
+  return { mode, source, engine, model, credentialPresent };
+}
 function gateCommand() {
   const gate = new Command32("gate").description(
-    "(internal) hook-based permission gate for router-backed crew/side sessions (#782)"
+    "Permission gate (#782/#854): get/set defaults.gate.mode; 'claude <event>' is an internal hook handler"
   );
+  gate.command("mode [value]").description("Get or set the permission gate mode (on | off | auto)").action((value) => {
+    if (value === void 0) {
+      const result2 = runGateModeGet();
+      console.log(chalk33.bold("Gate mode:"), chalk33.cyan(result2.mode), chalk33.dim(`(${result2.source})`));
+      return;
+    }
+    let result;
+    try {
+      result = runGateModeSet(value);
+    } catch (e) {
+      console.error(chalk33.red(e.message));
+      process.exit(1);
+    }
+    console.log(chalk33.green(`\u2714 gate mode: ${result.old} \u2192 ${result.next}`));
+    console.log(chalk33.dim("No daemon bounce needed \u2014 defaults.gate.mode is read live."));
+    if (isGateMode(process.env.SQUADRANT_GATE ?? "") && process.env.SQUADRANT_GATE !== result.next) {
+      console.log(chalk33.yellow(`Note: SQUADRANT_GATE=${process.env.SQUADRANT_GATE} in this session still overrides the config value.`));
+    }
+  });
+  gate.command("status").description("Show the effective gate mode, engine, classifier model, and credential presence").action(() => {
+    const result = runGateStatus();
+    console.log(chalk33.bold("Gate mode:"), chalk33.cyan(result.mode), chalk33.dim(`(${result.source})`));
+    console.log(chalk33.bold("Engine:"), result.engine);
+    console.log(chalk33.bold("Classifier model:"), result.model ?? chalk33.dim("(unset)"));
+    console.log(chalk33.bold("Credential:"), result.credentialPresent ? chalk33.green("present") : chalk33.yellow("absent"));
+  });
   gate.command("claude <event>", { hidden: true }).description("internal: classify a claude PermissionRequest with the configured router model").action(async (event) => {
     let stdin = "";
     try {
@@ -22826,7 +22834,7 @@ init_dist();
 init_dist2();
 import path34 from "path";
 import { Command as Command34 } from "commander";
-import chalk33 from "chalk";
+import chalk34 from "chalk";
 function detectCurrentProject(config, cwd = process.cwd()) {
   for (const [name, proj] of Object.entries(config.projects)) {
     const projPath = resolveHome(proj.path);
@@ -22866,21 +22874,21 @@ function visibleItems(items, includeDone) {
 function stateColor(state) {
   switch (state) {
     case "done":
-      return chalk33.green;
+      return chalk34.green;
     case "cancelled":
-      return chalk33.dim;
+      return chalk34.dim;
     case "blocked":
-      return chalk33.red;
+      return chalk34.red;
     case "paused":
-      return chalk33.yellow;
+      return chalk34.yellow;
     default:
-      return chalk33.cyan;
+      return chalk34.cyan;
   }
 }
 function printItem(item, indent) {
   const color = stateColor(item.state);
-  const line = "  ".repeat(indent) + `${chalk33.dim(item.id)}  ${item.title}  ${color(`[${item.state}]`)}` + (indent === 0 ? chalk33.dim(`  (${item.project})`) : "");
-  console.log(TERMINAL_WORK_STATES.has(item.state) ? chalk33.dim(line) : line);
+  const line = "  ".repeat(indent) + `${chalk34.dim(item.id)}  ${item.title}  ${color(`[${item.state}]`)}` + (indent === 0 ? chalk34.dim(`  (${item.project})`) : "");
+  console.log(TERMINAL_WORK_STATES.has(item.state) ? chalk34.dim(line) : line);
 }
 function printTree(items) {
   const { roots, childrenOf } = groupByParent(items);
@@ -22899,15 +22907,15 @@ var startCmd = new Command34("start").description("Start a new work item").argum
   purgeExpiredWorkItems(store);
   const project = opts.project ?? detectCurrentProject(config);
   if (!project) {
-    console.error(chalk33.red("No --project given and cwd is not inside a registered project."));
+    console.error(chalk34.red("No --project given and cwd is not inside a registered project."));
     process.exit(1);
   }
   if (opts.parent && !findWorkItemById(store, opts.parent)) {
-    console.error(chalk33.red(`Parent work item '${opts.parent}' not found.`));
+    console.error(chalk34.red(`Parent work item '${opts.parent}' not found.`));
     process.exit(1);
   }
   const item = createWorkItem(store, { project, title, parent: opts.parent ?? null, tags: opts.tag });
-  console.log(chalk33.green(`\u2713 ${item.id}`) + `  ${item.title}` + chalk33.dim(`  (${item.project})`));
+  console.log(chalk34.green(`\u2713 ${item.id}`) + `  ${item.title}` + chalk34.dim(`  (${item.project})`));
 });
 var listCmd2 = new Command34("list").description("List work items").option("--project <name>", "scope to one project").option("--all", "list across every project").option("--tree", "render parent/child nesting").option("--include-done", "include done/cancelled items").action((opts) => {
   const config = loadConfig();
@@ -22921,14 +22929,14 @@ var listCmd2 = new Command34("list").description("List work items").option("--pr
   } else {
     const project = detectCurrentProject(config);
     if (!project) {
-      console.error(chalk33.red("cwd is not inside a registered project \u2014 pass --project or --all."));
+      console.error(chalk34.red("cwd is not inside a registered project \u2014 pass --project or --all."));
       process.exit(1);
     }
     items = store.list(project);
   }
   items = visibleItems(items, opts.includeDone ?? false);
   if (items.length === 0) {
-    console.log(chalk33.dim("\nNo work items.\n"));
+    console.log(chalk34.dim("\nNo work items.\n"));
     return;
   }
   console.log();
@@ -22942,15 +22950,15 @@ function closeCommand(name, state, flag, key, desc) {
     purgeExpiredWorkItems(store);
     const item = closeWorkItem(store, id, state, { note: opts[key] });
     if (!item) {
-      console.error(chalk33.red(`Work item '${id}' not found.`));
+      console.error(chalk34.red(`Work item '${id}' not found.`));
       process.exit(1);
     }
-    console.log(chalk33.green(`\u2713 ${item.id}`) + `  ${item.title}  ${chalk33.dim(`[${item.state}]`)}`);
+    console.log(chalk34.green(`\u2713 ${item.id}`) + `  ${item.title}  ${chalk34.dim(`[${item.state}]`)}`);
     if (state === "done") {
       const openChildren = findOpenChildren(store, item.id);
       if (openChildren.length > 0) {
         const names = openChildren.map((c) => `${c.id} [${c.state}]`).join(", ");
-        console.log(chalk33.yellow(`\u26A0 still has ${openChildren.length} unfinished child item(s): ${names}`));
+        console.log(chalk34.yellow(`\u26A0 still has ${openChildren.length} unfinished child item(s): ${names}`));
       }
     }
   });
@@ -23433,7 +23441,7 @@ handoffCommand.command("facts <project>").description(
 init_dist();
 init_dist3();
 import { Command as Command36 } from "commander";
-import chalk34 from "chalk";
+import chalk35 from "chalk";
 var KNOWN_AGENTS = ["claude", "opencode", "codex", "gemini"];
 function normalized(p) {
   return p.replace(/\/+$/, "");
@@ -23486,7 +23494,7 @@ async function collectSessions(drivers) {
 }
 var sessionsCommand = new Command36("sessions").description("List live agent sessions squadrant can introspect (read-only; claude + opencode)").option("--json", "emit machine-readable JSON").option("--agent <name>", `filter to one agent (${KNOWN_AGENTS.join("|")})`).option("--project <name>", "filter to one registered project").option("--live-only", "drop sessions whose process is dead (status: stale)").action(async (opts) => {
   if (opts.agent && !KNOWN_AGENTS.includes(opts.agent)) {
-    console.error(chalk34.red(`
+    console.error(chalk35.red(`
   \u2718 Unknown agent '${opts.agent}'. Known agents: ${KNOWN_AGENTS.join(", ")}
 `));
     process.exit(1);
@@ -23494,7 +23502,7 @@ var sessionsCommand = new Command36("sessions").description("List live agent ses
   const config = loadConfig();
   if (opts.project && !(opts.project in config.projects)) {
     const known = Object.keys(config.projects).sort().join(", ") || "(none registered)";
-    console.error(chalk34.red(`
+    console.error(chalk35.red(`
   \u2718 Unknown project '${opts.project}'. Known projects: ${known}
 `));
     process.exit(1);
@@ -23510,7 +23518,7 @@ var sessionsCommand = new Command36("sessions").description("List live agent ses
   };
   const { rows, unsupported } = await collectSessions(drivers);
   if (opts.agent && unsupported.includes(opts.agent)) {
-    console.error(chalk34.red(`
+    console.error(chalk35.red(`
   \u2718 Agent '${opts.agent}' does not support session introspection.
 `));
     process.exit(1);
@@ -23526,7 +23534,7 @@ var sessionsCommand = new Command36("sessions").description("List live agent ses
   } else {
     console.log(formatSessionTable(filtered));
     if (!opts.agent && unsupported.length > 0) {
-      console.error(chalk34.dim(`(unsupported for session introspection: ${unsupported.join(", ")})`));
+      console.error(chalk35.dim(`(unsupported for session introspection: ${unsupported.join(", ")})`));
     }
   }
 });
@@ -23538,7 +23546,7 @@ init_dist3();
 import os20 from "os";
 import path38 from "path";
 import { Command as Command37 } from "commander";
-import chalk35 from "chalk";
+import chalk36 from "chalk";
 
 // packages/cli/src/lib/whoami.ts
 function projectForCwd(cwd, projects) {
@@ -23697,7 +23705,7 @@ var whoamiCommand = new Command37("whoami").description("Show the agent session
   } else {
     console.log(formatWhoami(result));
     if (!result.ok) {
-      console.error(chalk35.yellow("\n  Could not identify a squadrant agent session for this invocation."));
+      console.error(chalk36.yellow("\n  Could not identify a squadrant agent session for this invocation."));
     }
   }
   if (!result.ok) process.exitCode = 1;