@mu-crew/mu 4.1.0 → 4.2.0

package/dist/{cli-TV3N47AZ.js → cli-72EJ3CKW.js}

@@ -41,7 +41,7 @@ import {
   steerStallHandler,
   waitForEvents,
   waitWithActions
-} from "./chunk-4ULY3ZKO.js";
+} from "./chunk-3ZLI6YTV.js";
 import {
   FRONTIER_MAX_DEPTH,
   HumanNeededInvalidError,
@@ -101,7 +101,7 @@ import {
   taskRecordCut,
   taskToOutput,
   workstreamIdOf
-} from "./chunk-SS7NQSSZ.js";
+} from "./chunk-RVWNQLFE.js";
 import {
   AgentAbortNeedsCtlError,
   AgentAbortTimeoutError,
@@ -127,6 +127,11 @@ import {
   CTL_OPS,
   CTL_SOCK_ENV,
   CURRENT_SCHEMA_VERSION,
+  CarrierJobKeptError,
+  CarrierJobUnresolvedError,
+  CarrierJobUnstoppedError,
+  CarrierStopFailedError,
+  CarrierStopRefusedError,
   ClaimerNotRegisteredError,
   CloseNeedsEvidenceError,
   CrossWorkstreamEdgeError,
@@ -149,6 +154,7 @@ import {
   HostChannelBusyError,
   HostCheckFailedError,
   HostExistsError,
+  HostHandbackError,
   HostInUseError,
   HostNotFoundError,
   HostProfileError,
@@ -260,8 +266,10 @@ import {
   gitToplevel,
   groupIdFromPrefix,
   headSha,
+  hostMuleStarter,
   hostStarter,
   interruptAgent,
+  isAgentListArgv,
   isCommandGate,
   isJsonMode,
   isScratchWorkstream,
@@ -273,6 +281,7 @@ import {
   lastClaimActor,
   latestSeq,
   listAgents,
+  listCarrierJobs,
   listDelegates,
   listEmptyWorkstreams,
   listForgetCandidates,
@@ -349,7 +358,7 @@ import {
   workstreamRevision,
   worktreePath,
   worktreesRoot
-} from "./chunk-UCZPJX7K.js";
+} from "./chunk-SFV5RPZW.js";
 import {
   defaultStateDir
 } from "./chunk-PZ5GOCWH.js";
@@ -3900,7 +3909,10 @@ function classifyError(err) {
   if (err instanceof NameAmbiguousError || // A host profile that exists, is at its channel cap, or still holds channels.
   err instanceof HostExistsError || err instanceof HostChannelBusyError || // A remote worktree close refuses to remove (dirty, uncollected HEAD, moved).
   err instanceof RemoteCloseRefusedError || // A recovery record that is ambiguous, claimed, changed or pinned to another profile.
-  err instanceof RemoteRecoveryRefusedError || err instanceof HostInUseError || err instanceof AgentExistsError || err instanceof AgentNameExhaustedError || err instanceof TaskExistsError || err instanceof BackupTargetExistsError || err instanceof TaskAutoRefusedError || err instanceof TaskBriefMissingError || err instanceof DelegateCallConflictError || err instanceof DelegateStateError || err instanceof TaskAlreadyOwnedError || err instanceof TaskHasOpenBlockersError || // Substate refusals (ts_4): a park from the wrong phase, a claim on a
+  err instanceof RemoteRecoveryRefusedError || // A recorded job handle whose stop template changed, or whose profile is gone: nothing ran.
+  err instanceof CarrierStopRefusedError || // A respawn of a name whose older incarnation's job was never stopped.
+  err instanceof CarrierJobUnstoppedError || // A lease close with no handle it can stop, or a reservation it had to keep.
+  err instanceof CarrierJobUnresolvedError || err instanceof CarrierJobKeptError || err instanceof HostInUseError || err instanceof AgentExistsError || err instanceof AgentNameExhaustedError || err instanceof TaskExistsError || err instanceof BackupTargetExistsError || err instanceof TaskAutoRefusedError || err instanceof TaskBriefMissingError || err instanceof DelegateCallConflictError || err instanceof DelegateStateError || err instanceof TaskAlreadyOwnedError || err instanceof TaskHasOpenBlockersError || // Substate refusals (ts_4): a park from the wrong phase, a claim on a
   // parked task, a pair outside TASK_SUBSTATES.
   err instanceof TaskParkStateError || err instanceof TaskParkedError || err instanceof HumanTaskError || err instanceof TaskInTriageError || err instanceof InvalidSubstateError || err instanceof TaskNotInWorkstreamError || err instanceof AgentNotInWorkstreamError || err instanceof AgentSendUnsupportedError || err instanceof CycleError || err instanceof CrossWorkstreamEdgeError || err instanceof WorktreeDirtyError || err instanceof WorktreeBranchExistsError || err instanceof WorktreeHeldError || err instanceof WorktreePathNotEmptyError || err instanceof WorktreeVcsRequiredError || err instanceof ClaimerNotRegisteredError || err instanceof SchemaTooOldError || err instanceof SchemaTooNewError || err instanceof SqliteTooOldError || err instanceof SyncSourceTooNewError || err instanceof DbInsideSyncDirError || err instanceof SyncDirForeignError || err instanceof WorkstreamExistsError || err instanceof WorkstreamRevisionMismatchError || err instanceof RevisionMismatchError || err instanceof WorkstreamHasAgentsError || err instanceof WorkstreamPanesLiveError || err instanceof WorkstreamSessionLiveError || // Rebuild refuses to overwrite an existing target or to write onto
   // the source DB: both are name/state collisions, not usage errors.
@@ -3959,9 +3971,13 @@ function classifyError(err) {
   if (err instanceof AgentAbortTimeoutError) {
     return { label: "timeout", exitCode: 5 };
   }
-  if (err instanceof RemotePrepareError || err instanceof RemoteCollectError) {
+  if (err instanceof RemotePrepareError || err instanceof RemoteCollectError || // The stop template ran and did not prove the job stopped: the host's answer, substrate.
+  err instanceof CarrierStopFailedError) {
     return { label: "remote host", exitCode: 5 };
   }
+  if (err instanceof HostHandbackError) {
+    return { label: "human needed", exitCode: 5 };
+  }
   if (err instanceof HostCheckFailedError) {
     return { label: "host check", exitCode: 5 };
   }
@@ -4052,7 +4068,7 @@ function emitError(err) {
       agentId: err.agentId
     });
   }
-  const humanNoMux = err instanceof NoMultiplexerError && isStateVerbArgv(process.argv) && !process.argv.some((a) => a === "--json" || a.startsWith("--json="));
+  const humanNoMux = err instanceof NoMultiplexerError && (isStateVerbArgv(process.argv) || isAgentListArgv(process.argv)) && !process.argv.some((a) => a === "--json" || a.startsWith("--json="));
   if (isJsonMode() && !humanNoMux) {
     const extra = {};
     if (usageCmd) extra.usage = usageLines(usageCmd);
@@ -4073,7 +4089,8 @@ function emitError(err) {
       error: errClass,
       message: cleanMessage,
       exit: exitCode,
-      ...Object.keys(extra).length > 0 ? { extra } : {}
+      ...Object.keys(extra).length > 0 ? { extra } : {},
+      ...err instanceof HostHandbackError ? { data: { handback: true, host: err.host, template: err.field, detail: err.detail } } : {}
     });
     return exitCode;
   }
@@ -4179,12 +4196,20 @@ function findCommandForArgv(root, argv) {
 }
 
 // src/cli/agent-close.ts
+function carrierJobWorkstreams(db, name) {
+  return listCarrierJobs(db).filter((j) => j.name === name).map((j) => j.workstream);
+}
+var hasCarrierJob = (db, ws, name) => carrierJobWorkstreams(db, name).includes(ws);
 async function closeScope(db, name, explicit) {
   if (explicit !== void 0 || injectedWorkstream() !== void 0) {
     return resolveWorkstream(explicit);
   }
   const matches = [
-    .../* @__PURE__ */ new Set([...findEntityWorkstreams(db, "agent", name), ...recoveryWorkstreams(db, name)])
+    .../* @__PURE__ */ new Set([
+      ...findEntityWorkstreams(db, "agent", name),
+      ...recoveryWorkstreams(db, name),
+      ...carrierJobWorkstreams(db, name)
+    ])
   ].sort();
   if (matches.length >= 2) throw new NameAmbiguousError(name, matches, "agent");
   const only = matches[0];
@@ -4193,19 +4218,21 @@ async function closeScope(db, name, explicit) {
 async function cmdClose(db, rawName, opts = {}) {
   const name = applyQualifiedRef(rawName, opts);
   const ws = await closeScope(db, name, opts.workstream);
-  if (opts.recovery === void 0 && recoveriesFor(db, ws, name).length === 0) {
+  if (opts.recovery === void 0 && recoveriesFor(db, ws, name).length === 0 && !hasCarrierJob(db, ws, name)) {
     assertAgentInWorkstream(db, name, opts.workstream ?? ws);
   }
   const discard = opts.discard === true;
   const keepBranch = opts.keepBranch === true;
   const recoveryId = opts.recovery;
   const force = opts.force === true;
+  const abandonJob = opts.abandonJob === true;
   if (opts.if === void 0) {
     const p = await previewClose(db, name, {
       workstream: ws,
       discard,
       keepBranch,
-      ...recoveryId === void 0 ? {} : { recoveryId }
+      ...recoveryId === void 0 ? {} : { recoveryId },
+      ...abandonJob ? { abandonJob: true } : {}
     });
     if (p.kind !== "none" && !p.refusesDirty && p.recovery?.refusal == null) {
       setNextOutcome({
@@ -4220,7 +4247,8 @@ async function cmdClose(db, rawName, opts = {}) {
           ...p.recovery === null ? [] : ["--recovery", String(p.recovery.id)],
           ...discard ? ["--discard"] : [],
           ...keepBranch ? ["--keep-branch"] : [],
-          ...force ? ["--force"] : []
+          ...force ? ["--force"] : [],
+          ...abandonJob ? ["--abandon-job"] : []
         ],
         revision: p.revision
       });
@@ -4238,19 +4266,29 @@ async function cmdClose(db, rawName, opts = {}) {
     ...discard ? { discard: true } : {},
     ...keepBranch ? { keepBranch: true } : {},
     ...force ? { force: true } : {},
+    ...abandonJob ? { abandonJob: true } : {},
     ...recoveryId === void 0 ? {} : { recoveryId }
   });
   if (opts.json) {
     emitJson({ agentName: name, ...result });
     return;
   }
-  if (!result.killedPane && !result.deletedRow && result.worktree === null) {
+  const jobs = result.carrierJobs ?? [];
+  if (!result.killedPane && !result.deletedRow && result.worktree === null && jobs.length === 0) {
     console.log(pc.dim(`no agent named ${name} (already closed?)`));
     return;
   }
   console.log(
-    result.recovery === void 0 ? `Closed ${pc.bold(name)}` : `Closed the remote worktree ${pc.bold(name)} left (recovery ${result.recovery.id})`
+    result.recovery !== void 0 ? `Closed the remote worktree ${pc.bold(name)} left (recovery ${result.recovery.id})` : !result.killedPane && result.worktree === null ? `Closed the lease job ${pc.bold(name)} left` : `Closed ${pc.bold(name)}`
   );
+  for (const j of jobs) {
+    const what = j.job === null ? "lease reservation" : `job ${j.job}`;
+    console.log(
+      pc.dim(
+        j.action === "stopped" ? `  ${what} on ${j.host} stopped` : j.action === "abandon" ? `  ${what} on ${j.host} abandoned without a stop: it may still run there` : `  ${what} on ${j.host} released (its carrier was never launched)`
+      )
+    );
+  }
   if (result.worktree !== null) {
     const w = result.worktree;
     console.log(
@@ -4261,11 +4299,28 @@ async function cmdClose(db, rawName, opts = {}) {
     for (const warn of w.warnings ?? []) console.error(pc.yellow(`warning: ${warn}`));
   }
 }
+function printCarrierJob(p) {
+  const j = p.carrierJob;
+  if (j === null) return;
+  const what = j.job !== null ? `job ${j.job}` : `a lease reservation with no job handle (launch ${j.launch}, pane ${j.paneId ?? "none"}${j.reason === null ? "" : `, ${j.reason}`})`;
+  console.log(
+    p.abandonJob ? pc.yellow(
+      `  ${what} on ${j.host}: --abandon-job drops it WITHOUT a stop (the job may keep running; the job file is left)`
+    ) : j.job !== null ? `  ${what} on ${j.host}: stopped (its stop template) before anything else; a failed stop keeps everything` : `  ${what} on ${j.host}: released only if its carrier was never launched; otherwise the close refuses (then --abandon-job)`
+  );
+}
 function printClosePreview(p) {
   if (p.kind === "none") {
     console.log(pc.dim(`no agent named ${p.agentName} (already closed?)`));
     return;
   }
+  if (p.kind === "lease-job") {
+    console.log(
+      `${pc.bold(p.agentName)} has no agent row, only a lease job reservation (rev ${p.revision}): no pane is killed, no task changes`
+    );
+    printCarrierJob(p);
+    return;
+  }
   if (p.kind === "recovery" && p.recovery !== null && p.remote !== null) {
     const head = p.remote.collectedHead;
     console.log(
@@ -4274,6 +4329,7 @@ function printClosePreview(p) {
     console.log(
       `  remote worktree ${p.remote.path} on ${p.remote.host}: removed only if clean and at ${p.remote.base.slice(0, 12)}${head === null ? "" : ` or ${head.slice(0, 12)} (collected)`}; otherwise it refuses${p.keepBranch ? " (--keep-branch: unmerged commits go on a remote branch first; dirty still refuses)" : ""}`
     );
+    printCarrierJob(p);
     if (p.recovery.refusal !== null)
       console.log(pc.yellow(`  would refuse: ${p.recovery.refusal}`));
     return;
@@ -4281,6 +4337,7 @@ function printClosePreview(p) {
   console.log(
     p.kind === "agent" ? `Close ${pc.bold(p.agentName)}? pane ${p.paneId} will be killed and its row removed (rev ${p.revision})` : `${pc.bold(p.agentName)} has no agent row, only a registered worktree (rev ${p.revision})`
   );
+  printCarrierJob(p);
   for (const t of p.ownedTasks) {
     console.log(`  owns ${t.ref} (${t.status}${t.reverts ? ": goes back to OPEN" : ""})`);
   }
@@ -4315,6 +4372,9 @@ function wireCloseCommand(agent) {
   ).option(
     "--force",
     "close past what you vouch for: a pane mu cannot ask, or a worktree a process writes in or no scan can check (a cwd or reader there only warns); never overrides a live pane or uncommitted work"
+  ).option(
+    "--abandon-job",
+    "a lease job whose host is gone for good: drop its handle WITHOUT stopping it (logged with host and handle; the job may keep running). --force never skips the stop"
   ).option("--if <rev>", "apply the preview with this revision", parseNonNegativeInt).option(...WORKSTREAM_OPT).option(...JSON_OPT).action(function(name) {
     const opts = this.opts();
     return handle((db) => cmdClose(db, name, opts), this)();
@@ -4653,7 +4713,7 @@ async function parseWaitRef(db, raw, scope, legacy = {}) {
     return { kind, workstream, id: parsed.name };
   }
   if (getAgent(db, parsed.name, workstream) === void 0) {
-    const { AgentNotFoundError: AgentNotFoundError2 } = await import("./errors-GRONKWFS.js");
+    const { AgentNotFoundError: AgentNotFoundError2 } = await import("./errors-LY4OZVQU.js");
     throw new AgentNotFoundError2(parsed.name);
   }
   return {
@@ -7916,8 +7976,11 @@ function wireAgentCommands(program2) {
     const opts = this.opts();
     return handle((db) => cmdRead(db, name, opts), this)();
   });
-  agent.command("list").description("List agents in the current workstream (reconciled with the active mux)").option(...WORKSTREAM_OPT).option(...JSON_OPT).action(function() {
+  agent.command("list").description(
+    "List agents in the current workstream (reconciled with the active mux). One JSON document by default; --table for the human table"
+  ).option(...WORKSTREAM_OPT).option(...JSON_OPT).option("--table", "print the human table instead of the JSON document").action(function() {
     const opts = this.opts();
+    opts.json = opts.json === true || opts.table !== true;
     return handle((db) => cmdList(db, opts), this)();
   });
   agent.command("show <name>").description("Show an agent: registry row + recent scrollback (last N lines, default 20)").option("-n, --lines <n>", "how many scrollback lines to show (default 20)", parseLines).option(...WORKSTREAM_OPT).option(...JSON_OPT).action(function(name) {
@@ -8041,7 +8104,7 @@ function openDashboardOrHelp(program2) {
     (syncDb) => withShutdown(syncDb, async (shutdown) => {
       const key = "NODE_ENV";
       process.env[key] ??= "production";
-      const { runDashboard } = await import("./tui-FUBQ326D.js");
+      const { runDashboard } = await import("./tui-3ZPLSLDW.js");
       const first = program2.opts().workstream?.[0];
       await runDashboard({ dbPath: defaultDbPath(), syncDb, shutdown, initialWorkstream: first });
     }),
@@ -10166,6 +10229,31 @@ async function ctlSocketsDoctorCheck(agents, opts = {}) {
   }
   return { check, agents: reports };
 }
+function leaseJobHints(db) {
+  const agentIds = new Set(
+    db.prepare("SELECT id FROM agents").all().map((r) => r.id)
+  );
+  const named = db.prepare(
+    `SELECT 1 FROM agents a JOIN workstreams w ON w.id = a.workstream_id
+      WHERE w.name = ? AND a.name = ?`
+  );
+  return listCarrierJobs(db).filter(
+    (j) => j.agentId === null ? named.get(j.workstream, j.name) === void 0 : !agentIds.has(j.agentId)
+  ).map((j) => ({
+    workstream: j.workstream,
+    name: j.name,
+    host: j.host,
+    job: j.job,
+    launch: j.launch,
+    agentId: j.agentId,
+    reason: j.reason,
+    close: `mu agent close ${j.name} -w ${j.workstream}`
+  }));
+}
+function leaseJobHintLine(h) {
+  const what = h.job !== null ? `job ${h.job}` : `no job handle (launch ${h.launch}${h.reason === null ? "" : `, ${h.reason}`})`;
+  return `${h.workstream}/${h.name} on ${h.host}: ${what}, agent ${h.agentId === null ? "never bound" : "gone"}: ${h.close}`;
+}
 
 // src/dormant.ts
 var FINISHED_IDLE_DAYS = 14;
@@ -10483,6 +10571,11 @@ state (workstream=${ws})`));
     console.log("");
     for (const line2 of oldDelegates.remediation) console.log(`  ${line2}`);
   }
+  const leaseJobs = leaseJobHints(db);
+  console.log(
+    `  ${"lease-job".padEnd(16)} : ${leaseJobs.length === 0 ? `${pc.green("ok")} ${pc.dim("no lease job reservation outlives its agent")}` : `${pc.yellow("hint")} ${pc.dim(`${leaseJobs.length} lease job reservation(s) whose agent is gone; each close stops its job (a host gone for good: --abandon-job)`)}`}`
+  );
+  for (const h of leaseJobs) console.log(pc.dim(`      ${leaseJobHintLine(h)}`));
   console.log(pc.bold("\ndisk"));
   const disk = checkDiskRecon(db);
   if (printHazards(disk)) sawHazard = true;
@@ -10695,6 +10788,7 @@ async function cmdDoctorJson(db, opts = {}) {
       workstreams: findDormantWorkstreams(db, { currentWorkstream }),
       thresholds: { finishedIdleDays: FINISHED_IDLE_DAYS, abandonedIdleDays: ABANDONED_IDLE_DAYS }
     },
+    leaseJobs: leaseJobHints(db),
     oldDelegates: (() => {
       const h = checkOldDelegates(db);
       return {
@@ -10808,7 +10902,9 @@ function cmdHostAdd(db, name, opts) {
     exec: opts.exec,
     fetch: opts.fetch,
     repo: opts.repo ?? null,
-    max_sessions: opts.maxSessions ?? null
+    max_sessions: opts.maxSessions ?? null,
+    transport: opts.transport ?? "session",
+    stop: opts.stop ?? null
   });
   if (isJsonMode()) {
     emitJson({ host });
@@ -10828,9 +10924,15 @@ function cmdHostList(db) {
   }
   const held = /* @__PURE__ */ new Map();
   for (const c of listHostChannels(db)) held.set(c.host, (held.get(c.host) ?? 0) + 1);
-  const t = muTable({ head: ["HOST", "DEFAULT REPO", "CHANNELS"] });
+  const t = muTable({ head: ["HOST", "TRANSPORT", "STOP", "DEFAULT REPO", "CHANNELS"] });
   for (const h of hosts) {
-    t.push([h.name, h.repo ?? "-", `${held.get(h.name) ?? 0}/${h.max_sessions ?? "\u221E"}`]);
+    t.push([
+      h.name,
+      h.transport,
+      h.stop ?? "-",
+      h.repo ?? "-",
+      `${held.get(h.name) ?? 0}/${h.max_sessions ?? "\u221E"}`
+    ]);
   }
   console.log(t.toString());
 }
@@ -10842,9 +10944,10 @@ function cmdHostShow(db, name) {
     return;
   }
   console.log(
-    `${pc.bold(host.name)}  default repo ${host.repo ?? "-"}  max-sessions ${host.max_sessions ?? "none"}`
+    `${pc.bold(host.name)}  transport ${host.transport}  default repo ${host.repo ?? "-"}  max-sessions ${host.max_sessions ?? "none"}`
   );
   for (const f of ["shell", "exec", "fetch"]) console.log(`  ${f.padEnd(6)} ${host[f]}`);
+  if (host.stop !== null) console.log(`  ${"stop".padEnd(6)} ${host.stop}`);
   console.log(
     channels.length === 0 ? "  channels: none held" : `  channels: ${channels.map(channelLine).join("; ")}`
   );
@@ -10858,8 +10961,11 @@ function cmdHostRm(db, name) {
   console.log(removed ? `removed host ${name}` : `no host profile named ${name}`);
 }
 function cmdHostInit(name, opts) {
-  if (opts.ssh !== true) {
-    throw new UsageError("host init needs a starter kind: --ssh");
+  if (opts.ssh === true && opts.mule === true) {
+    throw new UsageError("host init takes one starter kind: --ssh or --mule");
+  }
+  if (opts.ssh !== true && opts.mule !== true) {
+    throw new UsageError("host init needs a starter kind: --ssh or --mule");
   }
   if (!isValidHostName(name)) {
     throw new UsageError(
@@ -10867,20 +10973,24 @@ function cmdHostInit(name, opts) {
       { showHelp: false }
     );
   }
-  const s = hostStarter(name);
+  const lease = opts.mule === true;
+  const s = lease ? hostMuleStarter(name) : hostStarter(name);
   const command2 = [
-    `mu host add ${name}`,
+    `mu host add ${name}${lease ? " --transport lease" : ""}`,
     `--shell ${shellQuote(s.shell)}`,
     `--exec ${shellQuote(s.exec)}`,
+    ...s.stop === void 0 ? [] : [`--stop ${shellQuote(s.stop)}`],
     `--fetch ${shellQuote(s.fetch)}`,
-    "--max-sessions 1"
+    ...lease ? [] : ["--max-sessions 1"]
   ].join(" \\\n  ");
   if (isJsonMode()) {
-    emitJson({ host: name, ...s, command: command2 });
+    emitJson({ host: name, ...lease ? { transport: "lease" } : {}, ...s, command: command2 });
     return;
   }
   console.log(`# Starter for ${name}. Edit it, then run it: mu runs none of this.`);
-  console.log(`# ${name} is the ssh target; ~/.ssh/config decides the rest.`);
+  console.log(
+    lease ? `# ${name} is mule's host; a lease worker holds no ssh session (docs/guide/remote.md).` : `# ${name} is the ssh target; ~/.ssh/config decides the rest.`
+  );
   console.log(command2);
 }
 async function cmdHostCheck(db, name, opts) {
@@ -10898,6 +11008,7 @@ async function cmdHostCheck(db, name, opts) {
     const mark = s.ok === true ? pc.green("ok  ") : s.ok === false ? pc.red("FAIL") : pc.dim("skip");
     console.log(`${mark} ${s.step.padEnd(9)} ${s.detail}`);
   }
+  for (const w of report.warnings) console.log(`${pc.yellow("warn")} ${w}`);
   if (!report.ok) throw failedError(report);
 }
 function failedError(report) {
@@ -10911,10 +11022,16 @@ function wireHostCommands(program2) {
     "Host profiles: command templates for a remote host. mu never connects and knows no ssh flags; it fills your templates and runs them with /bin/sh -c"
   );
   host.command("add <name>").description(
-    "Store a machine-local host profile of command templates: --shell opens the pane, --exec runs one remote command, --fetch brings commits home. Placeholders {env} {cmd} {local_sock} {remote_sock} {cwd}; grammar in docs/guide/remote.md."
+    "Store a machine-local host profile: --shell opens the pane, --exec runs one remote command, --fetch brings commits home. --transport lease adds --stop and {job_file}/{job}; grammar in docs/guide/remote.md."
   ).requiredOption("--shell <template>", "pane command template (opens the remote shell)").requiredOption("--exec <template>", "template that runs one remote command ({cmd})").requiredOption("--fetch <template>", "local template that fetches commits home ({cwd})").option(
     "--repo <path>",
     "default remote repo for `agent spawn --host` without --root (a profile names a machine, not a repo)"
+  ).option(
+    "--transport <kind>",
+    "session (default: the pane holds an ssh) or lease (the pane is a carrier owning a detached remote job; needs --stop and {job_file} in --shell)"
+  ).option(
+    "--stop <template>",
+    "lease only: ends a job given its handle ({job}, required; {cwd} is `.`). Must be idempotent: exit 0 for a job already ended"
   ).option(
     "--max-sessions <n>",
     "cap on channels mu holds to this host at once (panes, --exec, --fetch)",
@@ -10926,20 +11043,22 @@ function wireHostCommands(program2) {
   host.command("list").description("List host profiles with channels held / cap").option(...JSON_OPT).action(function() {
     return handle(async (db) => cmdHostList(db), this)();
   });
-  host.command("show <name>").description("Show a profile's templates and the channels it holds, with their holders").option(...JSON_OPT).action(function(name) {
+  host.command("show <name>").description(
+    "Show a profile's transport, templates and the channels it holds, with their holders"
+  ).option(...JSON_OPT).action(function(name) {
     return handle(async (db) => cmdHostShow(db, name), this)();
   });
   host.command("rm <name>").description("Remove a profile. Refuses while it holds a channel (close those agents first)").option(...JSON_OPT).action(function(name) {
     return handle(async (db) => cmdHostRm(db, name), this)();
   });
   host.command("init <name>").description(
-    "Print a starter `mu host add` for ssh (the socket forward, `$SHELL -ilc`, identity env inside the command) for you to edit. Prints only: mu never runs it and never connects."
-  ).option("--ssh", "print the ssh starter").option(...JSON_OPT).action(function(name) {
+    "Print a starter `mu host add` for you to edit: --ssh (the socket forward, `$SHELL -ilc`, identity env inside the command) or --mule (a lease profile for a session-capped host). Prints only: mu never runs it and never connects."
+  ).option("--ssh", "print the ssh starter").option("--mule", "print the lease starter for a session-capped host (a mule carrier)").option(...JSON_OPT).action(function(name) {
     const opts = this.opts();
     return handle(async () => cmdHostInit(name, opts), this)();
   });
   host.command("check <name>").description(
-    "Run the profile's --exec under one channel: host answers, the repo (--root, else the default) is git, pi runs, `pi list` names mu. --agent also probes that agent's control socket. Exit 5 if a step fails; retries nothing."
+    "Run the profile's --exec under one channel: host answers, repo is git, pi runs, `pi list` names mu. A lease profile's templates are checked too (stop expanded, not run). --agent probes its control socket and job. Exit 5 on failure."
   ).option("--agent <name>", "also probe this agent's control socket (the forward rides its pane)").option("--root <path>", "the remote repo the repo step checks (default: the profile's)").option(...WORKSTREAM_OPT).option(...JSON_OPT).action(function(name) {
     const opts = this.optsWithGlobals();
     return handle((db) => cmdHostCheck(db, name, opts), this)();
@@ -12468,4 +12587,4 @@ export {
   truncate,
   truncateFront
 };
-//# sourceMappingURL=cli-TV3N47AZ.js.map
+//# sourceMappingURL=cli-72EJ3CKW.js.map