Conversation converged with lead's worker-tasks UNEXECUTED, then worktree cleanup destroyed the uncommitted work

[kokevidaurre]

Live hit 2026-06-12 (design-system on app#38, transcript 'design system/mqb25aqr.md'): the lead's turn ended with a ```plan block delegating commit+push+PR to the worker, marked STATUS: DONE — the conversation CONVERGED at turns=1 without ever running the worker, and the run's worktree was auto-removed, destroying the lead's uncommitted file changes (no harvest fired).

Three compounding failures:

1. Convergence treated the lead's 'STATUS: DONE' as terminal even though its plan block contained undispatched worker tasks — plan-with-tasks should force at least one worker turn (or exit non-zero 'plan not executed').
2. Worktree cleanup removed a tree with UNCOMMITTED changes — cleanup must harvest or refuse (the fix(providers): harvest executor work from worktrees — output must never be lost #825 harvest path didn't fire for conversation worktrees).
3. The lead hit 'git commands blocked by permission mode' and adapted by delegating — but the permission set for leads vs workers in conversation worktrees seems misconfigured (lead could edit files but not commit; worker never got the chance).

Also noticed: squads with display_name containing a space ('design system') write transcripts to a space-named directory and show 'squads run design system' in hints — pathing footgun.

Work product was reconstructed manually from the transcript this time. Milestone: v0.8.x trustworthy execution (pairs with #872, hq#456).

🤖 Generated with Claude Code