@clipboard-health/groundcrew 4.0.2 → 4.1.0

package/README.md

@@ -83,15 +83,17 @@ In Linear, assign tickets to yourself and add an `agent-*` label (`agent-claude`
 crew init [--global | --local] [--force] [--dry-run]     # create a crew.config.ts
 crew doctor                                              # check setup
 crew status [<TICKET>]                                   # inspect current state or one ticket
-crew run                                                 # one-shot dispatch
+crew run                                                 # one-shot orchestration
 crew run --watch                                         # poll forever
-crew run --ticket <TICKET>                               # dispatch one ticket
+crew start <TICKET>                                      # provision + launch one ticket now
 crew setup repos [<repo>...] [--dry-run]                 # clone known repos via gh
-crew interrupt <TICKET> [--reason <text>]                # stop workspace, keep worktree
+crew stop <TICKET> [--reason <text>]                     # stop workspace, keep worktree
 crew resume <TICKET>                                     # reopen a paused ticket
 crew cleanup <TICKET>                                    # tear down every worktree for a ticket
 ```
 
+Deprecated aliases still work but print a warning and will be removed in the next major version: `crew interrupt` → `crew stop`, `crew run --ticket <TICKET>` → `crew start <TICKET>`, `crew doctor --ticket <TICKET>` → `crew status <TICKET>`.
+
 ## Configuration
 
 Two keys are required; everything else has a default.
@@ -109,7 +111,7 @@ The branch prefix (`<prefix>-<TICKET>`) is derived from `os.userInfo().username`
 - `agent-claude`, `agent-codex`, `agent-<name>` → that model.
 - `agent-any` → the model with the most available session capacity.
 - Unknown `agent-<name>` → falls back to `models.default` with a warning.
-- No `agent-*` label → ignored by `crew run`. Dispatch on demand with `crew run --ticket <TICKET>` (also falls back to `models.default`).
+- No `agent-*` label → ignored by `crew run`. Dispatch on demand with `crew start <TICKET>` (also falls back to `models.default`).
 - Todo tickets blocked by non-terminal blockers are skipped until their blockers reach a terminal status.
 
 Status classification uses Linear's workflow `state.type` (`unstarted`, `started`, `completed`, `canceled`, `duplicate`), so renamed status columns work without configuration. Parent issues with children are ignored — sub-issues are the work items.
@@ -136,12 +138,12 @@ Resolution order: `GROUNDCREW_CONFIG` → cosmiconfig project-walk from cwd (any
 | `orchestrator.maximumInProgress`        | `4`                 | Cap on in-progress tickets at once for this `crew` instance.                                                                                                                                                                                                                                                                                                            |
 | `orchestrator.pollIntervalMilliseconds` | `120_000`           | Poll interval in `--watch` mode.                                                                                                                                                                                                                                                                                                                                        |
 | `orchestrator.sessionLimitPercentage`   | `85`                | Number in `(0, 100]`. A model whose codexbar session window exceeds this percentage is skipped that tick.                                                                                                                                                                                                                                                               |
-| `models.default`                        | `"claude"`          | Tiebreak for `agent-any` resolution and fallback for explicit but unknown `agent-*` labels. Also used by `crew run --ticket <TICKET>` for unlabeled tickets. `crew run` without `--ticket` ignores unlabeled tickets and does not apply this default. Must exist in `models.definitions`.                                                                               |
+| `models.default`                        | `"claude"`          | Tiebreak for `agent-any` resolution and fallback for explicit but unknown `agent-*` labels. Also used by `crew start <TICKET>` for unlabeled tickets. `crew run` ignores unlabeled tickets and does not apply this default. Must exist in `models.definitions`.                                                                                                         |
 | `models.definitions`                    | `{ claude, codex }` | Agent definitions. Additive merge with shipped defaults.                                                                                                                                                                                                                                                                                                                |
 | `models.definitions.<name>.cmd`         | —                   | Shell command launched for the model. Runs in the worktree through the resolved `local.runner`. `{{worktree}}` is replaced before launch; `{{sandbox}}` expands to the sbx sandbox name under the sdx runner and an empty string otherwise.                                                                                                                             |
 | `models.definitions.<name>.color`       | —                   | Color for the workspace status pill (cmux only; tmux silently drops it).                                                                                                                                                                                                                                                                                                |
 | `models.definitions.<name>.usage`       | optional            | If set, codexbar usage is fetched for this model and gated by `sessionLimitPercentage`. Falls back to default when unset, with gating enabled for known models. When `usage.codexbar.source` is omitted, groundcrew uses `oauth` for Codex/Claude on macOS, `auto` for other macOS providers, and `cli` elsewhere. Set to `{ disabled: true }` to disable usage gating. |
-| `models.definitions.<name>.sandbox`     | optional            | Docker Sandboxes binding for the model. Required at launch when `local.runner` resolves to `sdx`. Fields: `agent` (required sbx agent name), `template`, `kits`, `setupCommand` (override for the inside-sandbox setup script).                                                                                                                                         |
+| `models.definitions.<name>.sandbox`     | optional            | Docker Sandboxes binding for the model. Required at launch when `local.runner` resolves to `sdx`. Fields: `agent` (required sbx agent name) and `setupCommand` (override for the inside-sandbox setup script). Groundcrew assumes the `groundcrew-<agent>` sandbox already exists.                                                                                      |
 | `models.definitions.<name>.disabled`    | optional            | When set to exactly `true`, drops the named shipped default (`claude` or `codex`). Doctor skips probing it; `agent-<name>` labels fall back to `models.default` with a warning.                                                                                                                                                                                         |
 | `prompts.initial`                       | unattended template | First message sent to the agent. Placeholders: `{{ticket}}`, `{{worktree}}`, `{{title}}`, `{{description}}`. Override this from `crew.config.ts` for team-specific statuses, tools, plugins, or review loops.                                                                                                                                                           |
 | `workspaceKind`                         | `"auto"`            | Terminal session manager. `"auto"` picks `cmux` when on PATH, else `tmux`. Set to `"cmux"` or `"tmux"` to fail loudly when the chosen backend is missing.                                                                                                                                                                                                               |
@@ -186,9 +188,17 @@ Watch `${XDG_CACHE_HOME:-$HOME/.cache}/clearance/clearance.log` for `DENY` lines
 <details>
 <summary>Docker Sandboxes (sdx) setup</summary>
 
-Each model that runs under `sdx` needs a `sandbox: { agent: "<sbx-agent>" }` block in `crew.config.ts`. Groundcrew names sandboxes `groundcrew-<agent>` (e.g. `groundcrew-claude`) and reuses one sandbox per agent across repos and tickets. First-time agent auth happens inside the sandbox the first time it launches. To bootstrap manually instead, run `sbx create --name groundcrew-<agent> <agent> <projectDir>` once.
+Each model that runs under `sdx` needs a `sandbox: { agent: "<sbx-agent>" }` block in `crew.config.ts`. Groundcrew addresses the sandbox as `groundcrew-<agent>` (e.g. `groundcrew-claude`) and reuses one existing sandbox per agent across repos and tickets.
+
+First-time setup is manual:
+
+```bash
+sbx create --name groundcrew-claude claude <projectDir>
+sbx exec -it groundcrew-claude claude auth login
+sbx exec -it groundcrew-claude gh auth login
+```
 
-Groundcrew auto-creates sandboxes when missing but never deletes them — they persist across tickets and `crew cleanup`. Auth state lives inside the sandbox, so deleting it forces a re-login. Manage with `sbx ls` / `sbx rm`.
+Replace `claude` with the sbx agent for the model and `<projectDir>` with `workspace.projectDir` from `crew.config.ts`. Manage lifecycle and auth with `sbx` directly (`sbx ls`, `sbx exec`, `sbx rm`). Groundcrew does not create, authenticate, regenerate, list, or remove sandboxes.
 
 </details>
 
@@ -234,21 +244,30 @@ In Progress (state.type=started) — Multi-event extractor: year inference can p
 
 </details>
 
-### `crew interrupt <TICKET>`
+### `crew start <TICKET>`
+
+Launches one ticket immediately, bypassing orchestrator eligibility. Use it to dispatch a specific ticket on demand — including unlabeled tickets that `crew run` ignores. (Replaces the deprecated `crew run --ticket <TICKET>`.)
+
+```bash
+crew start HRD-442
+crew start HRD-442 --dry-run
+```
+
+### `crew stop <TICKET>`
 
-Stops a live workspace pane while preserving the ticket worktree and branch. The manual pause button for cases where you need terminal capacity back, want to stop an agent that's going in the wrong direction, or need to inspect the diff before letting another agent continue.
+Stops a live workspace pane while preserving the ticket worktree and branch. The manual pause button for cases where you need terminal capacity back, want to stop an agent that's going in the wrong direction, or need to inspect the diff before letting another agent continue. (Replaces the deprecated `crew interrupt <TICKET>`.)
 
 ```bash
-crew interrupt HRD-442 --reason "wrong implementation direction"
+crew stop HRD-442 --reason "wrong implementation direction"
 crew status HRD-442
 crew resume HRD-442
 ```
 
-The command closes the cmux/tmux workspace if present, records local run state, and never tears down the worktree. If the workspace was already gone but the worktree is still present, interrupt records that fact so status can show the preserved branch.
+The command closes the cmux/tmux workspace if present, records local run state, and never tears down the worktree. If the workspace was already gone but the worktree is still present, stop records that fact so status can show the preserved branch.
 
 ### `crew resume <TICKET>`
 
-Reopens an existing ticket worktree with a continuation prompt. Resume never creates a new worktree; if none exists it fails and leaves re-dispatch to `crew run --ticket <ticket>`.
+Reopens an existing ticket worktree with a continuation prompt. Resume never creates a new worktree; if none exists it fails and leaves re-dispatch to `crew start <ticket>`.
 
 The resume prompt tells the agent to inspect git status and diff before editing, includes the previous interrupt reason when recorded, and reuses the recorded model, repository, branch, runner, sandbox, and workspace backend. When no run-state file exists but a worktree does, resume falls back to Linear resolution for the model and ticket context.
 

package/crew.config.example.ts

@@ -73,24 +73,11 @@ export default {
   // // macOS when you need an agent to use Docker safely.
   // local: { runner: "auto" },
   //
-  // // Additional auth recipes for `crew sandbox auth <model> <tool>`. The
-  // // shipped recipes (claude/codex/cursor agents + github tool) are merged
-  // // with whatever you declare here; your recipe wins on key collision.
-  // // Describe each tool's in-sandbox login + status commands and a regex
-  // // that matches its logged-in output. Omit `kind` for cross-cutting
-  // // tools that should appear in every sandbox's picker; set
-  // // `kind: "agent"` to scope a recipe to a single sbx agent.
-  // sandbox: {
-  //   authRecipes: {
-  //     gcloud: {
-  //       displayName: "gcloud",
-  //       binary: "gcloud",
-  //       loginArgs: ["auth", "login", "--no-launch-browser"],
-  //       statusArgs: ["auth", "list", "--filter=status:ACTIVE", "--format=value(account)"],
-  //       authenticatedPattern: /@/,
-  //     },
-  //   },
-  // },
+  // // Groundcrew does not create or authenticate sdx sandboxes. For an sdx
+  // // model, create the matching sandbox yourself before first launch:
+  // //   sbx create --name groundcrew-claude claude ~/dev/groundcrew
+  // //   sbx exec -it groundcrew-claude claude auth login
+  // //   sbx exec -it groundcrew-claude gh auth login
   //
   // prompts: {
   //   // Keep personal workflow instructions next to this config, for example

package/dist/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AA6MA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsCvD"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAuQA,wBAAsB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CvD"}

package/dist/cli.js

@@ -5,16 +5,27 @@ import { initConfigCli } from "./commands/init.js";
 import { interruptWorkspaceCli } from "./commands/interruptWorkspace.js";
 import { orchestrate } from "./commands/orchestrator.js";
 import { resumeWorkspaceCli } from "./commands/resumeWorkspace.js";
-import { sandboxCli } from "./commands/sandbox/index.js";
 import { setupReposCli } from "./commands/setupRepos.js";
 import { setupWorkspaceCli } from "./commands/setupWorkspace.js";
 import { statusCli } from "./commands/status.js";
 import { createDefaultUpgradeCliOptions, upgradeCli } from "./commands/upgrade.js";
 import { computeUpgradeNudge, defaultUpgradeCheckCachePath, fetchLatestVersion, } from "./lib/upgrade.js";
-import { errorMessage, readEnvironmentVariable, readTicketArgument, writeError, writeOutput, } from "./lib/util.js";
+import { errorMessage, parseDryRunPositionals, readEnvironmentVariable, readTicketArgument, writeError, writeOutput, } from "./lib/util.js";
 const NUDGE_TTL_MS = 6 * 60 * 60 * 1000;
 const NUDGE_FETCH_TIMEOUT_MS = 1000;
+const REMOVED_SANDBOX_COMMAND_MESSAGE = [
+    "`crew sandbox` is no longer supported.",
+    "Groundcrew now launches agents inside existing sbx sandboxes but does not list, create, regenerate, authenticate, or remove them.",
+    "Use the manual `sbx` workflow in README.md#docker-sandboxes-sdx-setup, then keep `models.definitions.<model>.sandbox.agent` in crew.config.ts so launches can address the existing sandbox.",
+].join("\n");
 const requireFromCli = createRequire(import.meta.url);
+/**
+ * Prints a deprecation warning to stderr naming the canonical command and that
+ * the old form is removed in the next major, then lets the caller proceed.
+ */
+function warnDeprecated(forms) {
+    writeError(`crew ${forms.oldForm} is deprecated and will be removed in the next major version; use crew ${forms.newForm} instead.`);
+}
 function setupUsage() {
     return "Usage: crew setup repos [--dry-run] [<repo>...]";
 }
@@ -54,6 +65,16 @@ async function runCli(argv) {
         await orchestrate({ watch, dryRun });
         return;
     }
+    warnDeprecated({ oldForm: "run --ticket", newForm: "start" });
+    await setupWorkspaceCli(ticket, { dryRun });
+}
+const START_USAGE = "crew start <ticket> [--dry-run]";
+async function startCli(argv) {
+    const { dryRun, positionals } = parseDryRunPositionals(argv, START_USAGE);
+    const [ticket, ...extras] = positionals;
+    if (ticket === undefined || ticket.length === 0 || extras.length > 0) {
+        throw new Error(`Usage: ${START_USAGE}`);
+    }
     await setupWorkspaceCli(ticket, { dryRun });
 }
 async function upgradeCliInvoke(argv) {
@@ -80,7 +101,23 @@ async function maybeRunUpgradeNudge(metadata) {
         writeError(message);
     }
 }
+function doctorTicketAlias(argv) {
+    if (argv[0] !== "--ticket") {
+        return undefined;
+    }
+    const ticket = readTicketArgument(argv, 0, "doctor");
+    if (argv.length > 2) {
+        throw new Error("Usage: crew status [<ticket>]");
+    }
+    return ticket;
+}
 async function doctorCli(argv) {
+    const aliasTicket = doctorTicketAlias(argv);
+    if (aliasTicket !== undefined) {
+        warnDeprecated({ oldForm: "doctor --ticket", newForm: "status" });
+        await statusCli([aliasTicket]);
+        return;
+    }
     if (argv.length > 0) {
         throw new Error("Usage: crew doctor");
     }
@@ -94,10 +131,15 @@ const SUBCOMMANDS = {
         invoke: initConfigCli,
     },
     run: {
-        summary: "Run the orchestrator (one-shot by default), or provision one ticket with --ticket",
-        usage: "[--watch] [--dry-run] [--ticket <ticket>]",
+        summary: "Run the orchestrator: poll sources and start eligible tickets (one-shot by default)",
+        usage: "[--watch] [--dry-run]",
         invoke: runCli,
     },
+    start: {
+        summary: "Launch one ticket immediately, bypassing eligibility",
+        usage: "<ticket> [--dry-run]",
+        invoke: startCli,
+    },
     doctor: {
         summary: "Verify host prerequisites (PATH tools, config validity, Linear reachability)",
         usage: "",
@@ -113,21 +155,25 @@ const SUBCOMMANDS = {
         usage: "[--force] <ticket>",
         invoke: cleanupWorkspaceCli,
     },
-    interrupt: {
+    stop: {
         summary: "Stop a live ticket workspace while preserving its worktree",
         usage: "<ticket> [--reason <text>]",
         invoke: interruptWorkspaceCli,
     },
+    interrupt: {
+        summary: "Deprecated alias for `crew stop`",
+        usage: "<ticket> [--reason <text>]",
+        deprecated: true,
+        invoke: async (argv) => {
+            warnDeprecated({ oldForm: "interrupt", newForm: "stop" });
+            await interruptWorkspaceCli(argv);
+        },
+    },
     resume: {
         summary: "Reopen an existing ticket worktree with a continuation prompt",
         usage: "<ticket>",
         invoke: resumeWorkspaceCli,
     },
-    sandbox: {
-        summary: "Manage Docker Sandboxes (sbx) for configured models",
-        usage: "<list|ensure|regenerate|auth|rm> [...args]",
-        invoke: sandboxCli,
-    },
     setup: {
         summary: "Project-level setup commands (currently: repos)",
         usage: "repos [--dry-run] [<repo>...]",
@@ -148,6 +194,9 @@ function printHelp() {
     writeOutput("");
     writeOutput("Commands:");
     for (const [name, command] of Object.entries(SUBCOMMANDS)) {
+        if (command.deprecated === true) {
+            continue;
+        }
         writeOutput(`  ${name.padEnd(width)}  ${command.summary}`);
         writeOutput(`  ${" ".repeat(width)}  → crew ${name} ${command.usage}`);
     }
@@ -174,6 +223,11 @@ export async function run(argv) {
         writeOutput(packageVersion());
         return;
     }
+    if (subcommand === "sandbox") {
+        writeError(REMOVED_SANDBOX_COMMAND_MESSAGE);
+        process.exitCode = 1;
+        return;
+    }
     const command = SUBCOMMANDS[subcommand];
     if (!command) {
         writeError(`Unknown command: ${subcommand}\n`);

package/dist/commands/interruptWorkspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interruptWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/interruptWorkspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAMnE,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAuGD,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzE"}
+{"version":3,"file":"interruptWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/interruptWorkspace.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAMnE,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAqGD,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,IAAI,CAAC,CAyBf;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzE"}

package/dist/commands/interruptWorkspace.js

@@ -15,20 +15,20 @@ function parseArguments(argv) {
         if (argument === "--reason") {
             const value = argv[index + 1];
             if (value === undefined || value.length === 0 || value.startsWith("-")) {
-                throw new Error("crew interrupt --reason: reason text is required");
+                throw new Error("crew stop --reason: reason text is required");
             }
             reason = value;
             index += 1;
             continue;
         }
         if (argument.startsWith("-")) {
-            throw new Error(`Unknown option: ${argument}\nUsage: crew interrupt <ticket> [--reason <text>]`);
+            throw new Error(`Unknown option: ${argument}\nUsage: crew stop <ticket> [--reason <text>]`);
         }
         positionals.push(argument);
     }
     const [ticket, ...extras] = positionals;
     if (ticket === undefined || ticket.length === 0 || extras.length > 0) {
-        throw new Error("Usage: crew interrupt <ticket> [--reason <text>]");
+        throw new Error("Usage: crew stop <ticket> [--reason <text>]");
     }
     return { ticket: ticket.toLowerCase(), ...(reason === undefined ? {} : { reason }) };
 }

package/dist/commands/resumeWorkspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resumeWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/resumeWorkspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAcnE,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB;AA6HD,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA6Df;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE"}
+{"version":3,"file":"resumeWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/resumeWorkspace.ts"],"names":[],"mappings":"AACA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAcnE,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;CAChB;AA6HD,wBAAsB,eAAe,CACnC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CA4Df;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAGtE"}

package/dist/commands/resumeWorkspace.js

@@ -1,6 +1,6 @@
 import { fetchResolvedIssue } from "../lib/boardSource.js";
 import { loadConfig } from "../lib/config.js";
-import { ensureAgentSandbox, openAgentWorkspace, prepareAgentLaunch } from "../lib/agentLaunch.js";
+import { openAgentWorkspace, prepareAgentLaunch } from "../lib/agentLaunch.js";
 import { buildLaunchCommand } from "../lib/launchCommand.js";
 import { readRunState, recordRunState } from "../lib/runState.js";
 import { removeStagedPrompt, stageBuildSecrets, stagePromptText, stageWorkspaceLaunchCommand, } from "../lib/stagedLaunch.js";
@@ -117,7 +117,6 @@ export async function resumeWorkspace(config, options) {
         text: renderResumePrompt(context),
     });
     const secretsFile = stageBuildSecrets(stagedPrompt.directory);
-    await ensureAgentSandbox({ config, definition, sandboxName });
     const launchCommand = buildLaunchCommand({
         definition,
         promptFile: stagedPrompt.file,

package/dist/commands/setupRepos.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setupRepos.d.ts","sourceRoot":"","sources":["../../src/commands/setupRepos.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAInE,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AAEvF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,oDAAoD;IACpD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,wEAAwE;IACxE,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,wCAAwC;IACxC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,EAAE,CAAC;IACzC,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;CACpB;AA6JD,wBAAsB,UAAU,CAC9B,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CA0D3B;AAwBD,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAajE"}
+{"version":3,"file":"setupRepos.d.ts","sourceRoot":"","sources":["../../src/commands/setupRepos.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAInE,MAAM,WAAW,iBAAiB;IAChC,gDAAgD;IAChD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AAEvF,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,kBAAkB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kDAAkD;IAClD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,oDAAoD;IACpD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4CAA4C;IAC5C,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,wEAAwE;IACxE,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,wCAAwC;IACxC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAA;KAAE,EAAE,CAAC;IACzC,mEAAmE;IACnE,SAAS,EAAE,OAAO,CAAC;CACpB;AA6JD,wBAAsB,UAAU,CAC9B,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAAC,gBAAgB,CAAC,CA0D3B;AAcD,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAajE"}

package/dist/commands/setupRepos.js

@@ -10,7 +10,7 @@ import { dirname, isAbsolute, relative, resolve } from "node:path";
 import { runCommandAsync } from "../lib/commandRunner.js";
 import { loadConfig } from "../lib/config.js";
 import { which } from "../lib/host.js";
-import { errorMessage, log, writeOutput } from "../lib/util.js";
+import { errorMessage, log, parseDryRunPositionals, writeOutput } from "../lib/util.js";
 function emptyResult() {
     return {
         existing: [],
@@ -190,18 +190,7 @@ export async function setupRepos(config, options) {
     return result;
 }
 function parseArguments(argv) {
-    let dryRun = false;
-    const positionals = [];
-    for (const argument of argv) {
-        if (argument === "--dry-run") {
-            dryRun = true;
-            continue;
-        }
-        if (argument.startsWith("-")) {
-            throw new Error(`Unknown option: ${argument}\nUsage: crew setup repos [--dry-run] [<repo>...]`);
-        }
-        positionals.push(argument);
-    }
+    const { dryRun, positionals } = parseDryRunPositionals(argv, "crew setup repos [--dry-run] [<repo>...]");
     const options = { dryRun };
     if (positionals.length > 0) {
         options.only = positionals;

package/dist/commands/setupWorkspace.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setupWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/setupWorkspace.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAenE,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAWD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAqBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,EAC9B,UAAU,GAAE,wBAA6B,GACxC,OAAO,CAAC,IAAI,CAAC,CA6Gf;AAwHD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,IAAI,CAAC,CAoBf"}
+{"version":3,"file":"setupWorkspace.d.ts","sourceRoot":"","sources":["../../src/commands/setupWorkspace.ts"],"names":[],"mappings":"AAEA,OAAO,EAAc,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAenE,UAAU,aAAa;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAWD,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAqBD,wBAAsB,cAAc,CAClC,MAAM,EAAE,cAAc,EACtB,OAAO,EAAE,qBAAqB,EAC9B,UAAU,GAAE,wBAA6B,GACxC,OAAO,CAAC,IAAI,CAAC,CAsGf;AAwHD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,IAAI,CAAC,CAoBf"}

package/dist/commands/setupWorkspace.js

@@ -1,7 +1,7 @@
 import { rmSync } from "node:fs";
 import { fetchResolvedIssue } from "../lib/boardSource.js";
 import { loadConfig } from "../lib/config.js";
-import { ensureAgentSandbox, openAgentWorkspace, prepareAgentLaunch } from "../lib/agentLaunch.js";
+import { openAgentWorkspace, prepareAgentLaunch } from "../lib/agentLaunch.js";
 import { buildLaunchCommand } from "../lib/launchCommand.js";
 import { createLinearIssueStatusUpdater } from "../lib/linearIssueStatus.js";
 import { recordRunState } from "../lib/runState.js";
@@ -80,12 +80,6 @@ export async function setupWorkspace(config, options, runOptions = {}) {
         const stagedPrompt = stagePrompt({ config, ticket, ticketDetails, worktreeName });
         promptDir = stagedPrompt.directory;
         const secretsFile = stageBuildSecrets(promptDir);
-        await ensureAgentSandbox({
-            config,
-            definition,
-            sandboxName,
-            ...(signal === undefined ? {} : { signal }),
-        });
         const launchCommand = buildLaunchCommand({
             definition,
             promptFile: stagedPrompt.file,

package/dist/lib/agentLaunch.d.ts

@@ -10,12 +10,6 @@ export declare function prepareAgentLaunch(input: {
     purpose: "runs" | "resumes";
     signal?: AbortSignal;
 }): Promise<PreparedAgentLaunch>;
-export declare function ensureAgentSandbox(input: {
-    config: ResolvedConfig;
-    definition: ModelDefinition;
-    sandboxName: string | undefined;
-    signal?: AbortSignal;
-}): Promise<void>;
 export declare function openAgentWorkspace(input: {
     config: ResolvedConfig;
     name: string;

package/dist/lib/agentLaunch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentLaunch.d.ts","sourceRoot":"","sources":["../../src/lib/agentLaunch.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAOhF,UAAU,mBAAmB;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6B/B;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,eAAe,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhB;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB"}
+{"version":3,"file":"agentLaunch.d.ts","sourceRoot":"","sources":["../../src/lib/agentLaunch.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAOhF,UAAU,mBAAmB;IAC3B,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;CACjC;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,eAAe,CAAC;IAC5B,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6B/B;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,MAAM,EAAE,cAAc,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,GAAG,OAAO,CAAC,IAAI,CAAC,CAUhB"}

package/dist/lib/agentLaunch.js

@@ -1,8 +1,7 @@
-import { resolve } from "node:path";
 import { ensureClearance } from "@clipboard-health/clearance";
-import { ensureSandbox, sandboxNameFor } from "./dockerSandbox.js";
 import { detectHostCapabilities } from "./host.js";
 import { assertLocalRunnerRequirements, resolveLocalRunner } from "./localRunner.js";
+import { sandboxNameFor } from "./sandboxName.js";
 import { log, sleep } from "./util.js";
 import { workspaces } from "./workspaces.js";
 export async function prepareAgentLaunch(input) {
@@ -31,16 +30,6 @@ export async function prepareAgentLaunch(input) {
         : undefined;
     return { runner, sandboxName };
 }
-export async function ensureAgentSandbox(input) {
-    if (input.sandboxName !== undefined && input.definition.sandbox !== undefined) {
-        await ensureSandbox({
-            sandboxName: input.sandboxName,
-            sandbox: input.definition.sandbox,
-            mountPath: resolve(input.config.workspace.projectDir),
-            gitDefaults: input.config.sandbox.gitDefaults,
-        }, input.signal);
-    }
-}
 export async function openAgentWorkspace(input) {
     const spec = {
         name: input.name,

package/dist/lib/cmuxAdapter.d.ts

@@ -0,0 +1,8 @@
+/**
+ * cmux Workspace backend. cmux is the macOS TUI; workspaces surface in its
+ * own app, so `accessHint` has nothing concise to emit. cmux can paint a
+ * per-workspace status pill, which `open` applies best-effort.
+ */
+import { type Adapter } from "./workspaceAdapter.ts";
+export declare const cmuxAdapter: Adapter;
+//# sourceMappingURL=cmuxAdapter.d.ts.map

package/dist/lib/cmuxAdapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cmuxAdapter.d.ts","sourceRoot":"","sources":["../../src/lib/cmuxAdapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,KAAK,OAAO,EAIb,MAAM,uBAAuB,CAAC;AAG/B,eAAO,MAAM,WAAW,EAAE,OA6EzB,CAAC"}

package/dist/lib/cmuxAdapter.js

@@ -0,0 +1,163 @@
+/**
+ * cmux Workspace backend. cmux is the macOS TUI; workspaces surface in its
+ * own app, so `accessHint` has nothing concise to emit. cmux can paint a
+ * per-workspace status pill, which `open` applies best-effort.
+ */
+import { isSignalAborted, runWorkspaceCommand, } from "./workspaceAdapter.js";
+import { errorMessage, log } from "./util.js";
+export const cmuxAdapter = {
+    async open(spec, signal) {
+        const output = await runWorkspaceCommand("cmux", [
+            "--json",
+            "new-workspace",
+            "--name",
+            spec.name,
+            "--cwd",
+            spec.cwd,
+            "--command",
+            spec.command,
+        ], signal);
+        const workspaceId = extractCmuxOpenId(output);
+        if (workspaceId === undefined) {
+            log(`cmux new-workspace returned unrecognized output for ${spec.name}; if a workspace was created, run \`cmux close-workspace\` manually.`);
+            throw new Error(`Unexpected cmux output: ${output}`);
+        }
+        if (spec.status !== undefined) {
+            try {
+                await applyCmuxStatus(workspaceId, spec.status, signal);
+            }
+            catch (error) {
+                // Status pills are best-effort. cmux v2+ dropped `set-status` entirely,
+                // so swallow that specific gap silently; surface anything else so a real
+                // regression doesn't hide behind the same swallow.
+                if (!isCmuxSetStatusUnsupported(error)) {
+                    log(`cmux set-status failed for ${spec.name} (continuing): ${errorMessage(error)}`);
+                }
+            }
+        }
+    },
+    async list(signal) {
+        const raw = await listCmuxRaw(signal);
+        return raw?.map((ws) => ({ name: ws.title }));
+    },
+    async close(name, signal) {
+        const raw = await listCmuxRaw(signal);
+        if (raw === undefined) {
+            // cmux v2 `workspace.close` rejects titles, so forwarding `name`
+            // would always fail. The list failure has already been logged by
+            // `listCmuxRaw`; bail rather than guarantee a downstream error.
+            log(`cmux close-workspace skipped for ${name}: list-workspaces failed, no usable id`);
+            return { kind: "unavailable" };
+        }
+        const match = raw.find((ws) => ws.title === name);
+        if (match === undefined) {
+            return { kind: "missing" };
+        }
+        try {
+            await closeCmuxWorkspace(match.id, signal);
+            return { kind: "closed" };
+        }
+        catch (error) {
+            if (isSignalAborted(signal)) {
+                throw error;
+            }
+            const remaining = await listCmuxRaw(signal);
+            if (remaining === undefined) {
+                return { kind: "unavailable", error };
+            }
+            const isStillPresent = remaining.some((ws) => ws.title === name);
+            if (!isStillPresent) {
+                return { kind: "closed" };
+            }
+            throw error;
+        }
+    },
+    accessHint(_name) {
+        // cmux is a TUI; users surface workspaces by launching the cmux app,
+        // not a shell command. No useful hint to emit.
+        // oxlint-disable-next-line unicorn/no-useless-undefined -- explicit signal that the backend has no hint
+        return undefined;
+    },
+};
+function parseCmuxList(output) {
+    // oxlint-disable-next-line typescript/no-unsafe-type-assertion -- cmux --json list-workspaces always emits this shape
+    const parsed = JSON.parse(output);
+    const items = [];
+    /* v8 ignore next @preserve -- cmux always emits a workspaces field; default keeps the loop safe */
+    for (const ws of parsed.workspaces ?? []) {
+        if (typeof ws.title !== "string" || ws.title.length === 0) {
+            continue;
+        }
+        const id = pickCmuxId(ws);
+        if (id === undefined) {
+            log(`cmux list-workspaces returned workspace "${ws.title}" without a usable id or ref; skipping`);
+            continue;
+        }
+        items.push({ title: ws.title, id });
+    }
+    return items;
+}
+/**
+ * The stable workspace handle cmux v2 expects in JSON-RPC params. Prefer
+ * the UUID; fall back to the legacy `workspace:N` short ref when older
+ * cmux builds don't surface it. Returns `undefined` when neither is
+ * available — cmux v2 `workspace.close` rejects titles, so we must never
+ * forward `title` as a workspace handle.
+ */
+function pickCmuxId(ws) {
+    if (typeof ws.id === "string" && ws.id.length > 0) {
+        return ws.id;
+    }
+    if (typeof ws.ref === "string" && ws.ref.length > 0) {
+        return ws.ref;
+    }
+    return undefined;
+}
+async function listCmuxRaw(signal) {
+    try {
+        return parseCmuxList(await runWorkspaceCommand("cmux", ["--json", "list-workspaces"], signal));
+    }
+    catch (error) {
+        if (isSignalAborted(signal)) {
+            throw error;
+        }
+        log(`cmux list-workspaces failed: ${errorMessage(error)}`);
+        return undefined;
+    }
+}
+function extractCmuxOpenId(output) {
+    try {
+        // oxlint-disable-next-line typescript/no-unsafe-type-assertion -- cmux --json prints a workspace_id/ref object
+        const parsed = JSON.parse(output);
+        const uuid = parsed.workspace_id ?? parsed.id ?? "";
+        if (uuid.length > 0) {
+            return uuid;
+        }
+        const ref = parsed.workspace_ref ?? parsed.ref ?? "";
+        if (ref.length > 0) {
+            return ref;
+        }
+    }
+    catch {
+        /* not JSON; fall through to regex */
+    }
+    const match = /workspace:\d+/.exec(output);
+    return match ? match[0] : undefined;
+}
+async function applyCmuxStatus(workspaceId, status, signal) {
+    const arguments_ = ["set-status", "model", status.text];
+    if (status.icon !== undefined) {
+        arguments_.push("--icon", status.icon);
+    }
+    if (status.color !== undefined) {
+        arguments_.push("--color", status.color);
+    }
+    arguments_.push("--workspace", workspaceId);
+    await runWorkspaceCommand("cmux", arguments_, signal);
+}
+async function closeCmuxWorkspace(workspaceId, signal) {
+    await runWorkspaceCommand("cmux", ["close-workspace", "--workspace", workspaceId], signal);
+}
+function isCmuxSetStatusUnsupported(error) {
+    return errorMessage(error).includes('unknown command "set-status"');
+}