@sleds/cli 0.1.43 → 0.1.45

package/dist/sleds.mjs

@@ -21,6 +21,9 @@ var p = (input, output, cacheWrite, cacheWrite1h, cacheRead) => ({ input, output
 }), OPENAI_PRICES, byLength = (t) => Object.keys(t).sort((a, b) => b.length - a.length), ANTHROPIC_KEYS, OPENAI_KEYS;
 var init_pricing = __esm(() => {
   ANTHROPIC_PRICES = {
+    "claude-opus-5-5": p(4, 20, 5, 8, 0.2),
+    "claude-sonnet-5-5": p(2, 10, 2.5, 4, 0.1),
+    "claude-haiku-5-5": p(0.1, 0.5, 0.125, 0.2, 0.01),
     "claude-fable-5-1": p(10, 50, 12.5, 20, 0.25),
     "claude-mythos-5-1": p(10, 50, 12.5, 20, 0.25),
     "claude-fable-5": p(10, 50, 12.5, 20, 1),
@@ -794,10 +797,17 @@ var init_verbs = __esm(() => {
     {
       id: "update",
       group: "meter",
-      want: "Change an item — its title, why, done, description, due day, what it sits under, or what it touches",
-      mcp: "update {project, ask?, why?, done?, smallest?, touches?, demand?, description?, due?, parent?, repos?, sensitivity?}",
+      want: "Change an item — its title, why, done, worth, description, due day, what it sits under, or what it touches",
+      mcp: "update {project, ask?, why?, done?, smallest?, touches?, demand?, worth?, carry?, description?, due?, parent?, repos?, sensitivity?}",
       app: "Work › the item › click a field",
-      how: "The filer, an approver or an admin changes an item from chat or by clicking the field in the app; every change says who and through what (via Claude · Cowork, via ChatGPT, in the app) and the record keeps before and after. A change to the ask, done or smallest marks the band stale with a Re-size at hand — never re-sized silently. A mirrored ticket is the tracker's word and is not changed here."
+      how: "The filer, an approver or an admin changes an item from chat or by clicking the field in the app; every change says who and through what (via Claude · Cowork, via ChatGPT, in the app) and the record keeps before and after. A change to the ask, done or smallest marks the band stale with a Re-size at hand — never re-sized silently. Worth is the person's word in their words ('high · Acme renewal', '$5k–20k'; null clears it); on an epic, `carry: true` puts it on each child that has none, each child's record signed the same way. A mirrored ticket is the tracker's word and is not changed here."
+    },
+    {
+      id: "reopen",
+      group: "meter",
+      want: "Put back an item that landed by mistake",
+      mcp: "reopen {project, reason}",
+      how: "SL-1819. For an item a skipped node or a wrong actual landed. It goes back on the sled it was on — or to ready on no sled, when that sled is gone from the org — the false actual is cleared and the band stands. A reopen always says why; the why goes on the item's record. The filer, an approver or an admin. Only a landed item reopens."
     },
     {
       id: "archive",
@@ -1085,7 +1095,19 @@ var init_verbs = __esm(() => {
 
 // ../../packages/shared/src/intake/forms.ts
 function norm(label) {
-  return label.replace(/[*_`~]/g, "").replace(/\(s\)/gi, "s").replace(/[:?]+\s*$/, "").replace(/\s+/g, " ").trim().toLowerCase();
+  return label.replace(/[*_`~]/g, "").replace(/\(s\)/gi, "s").replace(/[:?]+\s*$/, "").replace(/,\s*including\b.*$/i, "").replace(/\s+/g, " ").trim().toLowerCase();
+}
+function plain(s) {
+  return s.replace(/[*_`~]+/g, "").replace(/\s+/g, " ").trim();
+}
+function titleOf(s, max = 80) {
+  const t = plain(s);
+  const first = /^(.+?[.!?])(\s|$)/.exec(t)?.[1] ?? t;
+  if (first.length <= max)
+    return first;
+  const cut = first.slice(0, max);
+  const sp = cut.lastIndexOf(" ");
+  return `${(sp > max / 2 ? cut.slice(0, sp) : cut).replace(/[,;:\s]+$/, "")}…`;
 }
 function readForm(text) {
   const lines = text.split(/\r?\n/);
@@ -1097,67 +1119,84 @@ function readForm(text) {
       const line = raw.trim();
       if (!line)
         continue;
+      const bold = /^\*[^*]{2,80}\*:?$/.test(line);
+      const whole = line.length <= 80 ? slotOf(def, line) : null;
       const inline = /^\**([^:*]{2,60}?)\**\s*:\s*(.+)$/.exec(line);
-      const whole = norm(line);
-      const slotWhole = def.labels[whole];
-      const slotInline = inline ? def.labels[norm(inline[1] ?? "")] : undefined;
-      if (slotWhole) {
-        cur = { label: line.replace(/[*_]/g, "").replace(/:\s*$/, ""), slot: slotWhole, value: [] };
+      const slotInline = inline ? slotOf(def, inline[1] ?? "") : null;
+      if (whole && (bold || !inline)) {
+        cur = { label: plain(norm(line)), slot: whole, value: [] };
         found.push(cur);
         known++;
       } else if (slotInline && inline) {
-        cur = { label: (inline[1] ?? "").trim(), slot: slotInline, value: [inline[2] ?? ""] };
+        cur = { label: plain(norm(inline[1] ?? "")), slot: slotInline, value: [inline[2] ?? ""] };
         found.push(cur);
         known++;
-      } else if (/^\*[^*]{2,60}\*:?$/.test(line) && cur) {
-        cur = { label: line.replace(/[*:]/g, "").trim(), slot: null, value: [] };
+      } else if (bold && cur) {
+        cur = { label: plain(line.replace(/:$/, "")), slot: null, value: [] };
         found.push(cur);
       } else if (cur)
         cur.value.push(line);
     }
     if (known < def.min)
       continue;
-    const val = (f) => f.value.join(" ").trim();
-    const of = (slot) => found.filter((f) => f.slot === slot && val(f)).map((f) => ({ label: f.label, v: val(f) }));
-    const ask = of("ask")[0]?.v;
-    const who = of("for").map((x) => x.v);
-    const extra = found.filter((f) => f.slot === null && val(f)).map((f) => `${f.label}: ${val(f)}`);
-    const why = [who.length > 0 ? `For ${who.join(", ")}.` : "", ask ?? "", ...extra].filter(Boolean).join(" ");
-    const touches = of("touches").map((x) => `${x.label} ${x.v}`).join(" · ");
-    const n = of("demand")[0]?.v;
-    const demand = n ? /^\d+$/.test(n) ? `${n} clients affected` : n : undefined;
-    const rev = of("revenue")[0]?.v;
+    const val = (f) => plain(f.value.join(" "));
+    const one = (slot) => found.find((f) => f.slot === slot && val(f));
+    const ask = one("ask");
+    const users = one("users");
+    const sid = one("sid");
+    const loc = one("location");
+    const clients = one("clients");
+    const rev = one("revenue");
+    const n = clients ? val(clients) : "";
+    const clientsText = n ? /^\d+$/.test(n) ? `${n} client${n === "1" ? "" : "s"} affected` : `clients affected: ${n}` : "";
+    const r = rev ? val(rev) : "";
+    const revenue = YES.test(r) ? true : NO.test(r) ? false : undefined;
+    const revText = revenue === true ? "Impacting revenue" : revenue === false ? "No revenue impact" : "";
+    const unknown = found.filter((f) => f.slot === null && val(f)).map((f) => `${f.label}: ${val(f)}`);
+    const who = [
+      users ? `Users: ${val(users)}` : "",
+      sid ? `SID: ${val(sid)}` : "",
+      loc ? `Location ${val(loc)}` : "",
+      ...unknown
+    ].filter(Boolean);
+    const touches = who.join(" · ");
+    const demand = [clientsText, revText].filter(Boolean).join(" · ");
+    const details = [...who, clientsText, revText].filter(Boolean).join(" · ");
     return {
       form: def.name,
-      ...ask ? { ask } : {},
-      ...why ? { why } : {},
+      ...ask ? { ask: val(ask) } : {},
+      ...details ? { details } : {},
       ...touches ? { touches } : {},
       ...demand ? { demand } : {},
-      ...rev && YES.test(rev) ? { worth: "high · impacting revenue" } : {}
+      ...revenue !== undefined ? { revenue } : {}
     };
   }
   return null;
 }
-var FORMS, YES;
+var FORMS, YES, NO, slotOf = (def, label) => {
+  const n = norm(label);
+  for (const [re, slot] of def.labels)
+    if (re.test(n))
+      return slot;
+  return null;
+};
 var init_forms = __esm(() => {
   FORMS = [
     {
       name: "Create Tech Support Ticket",
-      labels: {
-        "users experiencing the issue": "for",
-        "user experiencing the issue": "for",
-        sids: "touches",
-        sid: "touches",
-        "location ids": "touches",
-        "location id": "touches",
-        "issue description": "ask",
-        "number of clients affected": "demand",
-        "is the issue currently impacting revenue": "revenue"
-      },
+      labels: [
+        [/^users? experiencing\b/, "users"],
+        [/^sids?\b/, "sid"],
+        [/^location ids?\b/, "location"],
+        [/^issue description\b/, "ask"],
+        [/^(?:number of )?clients? affected\b|^number of clients\b/, "clients"],
+        [/\bimpacting revenue\b|\brevenue impact\b/, "revenue"]
+      ],
       min: 3
     }
   ];
   YES = /^(yes|y|yep|true|definitely|it is)\b/i;
+  NO = /^(no|n|nope|false|not)\b/i;
 });
 
 // ../../packages/shared/src/intake/brief.ts
@@ -1235,13 +1274,14 @@ function draftBrief(input) {
   const form = readForm(text);
   const parsed = sections(text);
   const preamble = parsed.preamble;
-  const byKey = form ? { ...parsed.byKey, why: form.why, touches: form.touches, demand: form.demand } : parsed.byKey;
-  const askText = a.ask?.trim() || (form?.ask ? askFrom(form.ask, form.ask) : askFrom(text, preamble));
+  const byKey = form ? { touches: form.touches, demand: form.demand } : parsed.byKey;
+  const fromText = form?.ask ? form.ask : askFrom(text, preamble);
+  const askText = a.ask?.trim() || (fromText ? titleOf(fromText) : undefined);
   if (!askText)
     return null;
   const ask = a.ask?.trim() ? { text: clip(a.ask, MAX_ASK), from: "filer" } : { text: clip(askText, MAX_ASK), from: "artifact" };
   const pick = (k) => field(a[k], "filer") ?? field(byKey[k], "artifact");
-  const worth = worthFromAnswer(a.worth) ?? parseWorth(text) ?? worthFromAnswer(form?.worth) ?? undefined;
+  const worth = worthFromAnswer(a.worth) ?? parseWorth(text) ?? undefined;
   const sources = [...new Set((input.links ?? []).map((l) => l.trim()).filter(Boolean))].slice(0, MAX_SOURCES);
   return {
     ask,
@@ -1370,11 +1410,11 @@ var init_brief = __esm(() => {
   init_worth();
   init_forms();
   QUESTIONS = {
-    why: "Who is it for, and why now?",
-    done: "What does done look like, in your words?",
-    smallest: "What is the smallest version still worth doing?",
-    worth: "What is it worth to the business — a customer, a number, or high / medium / low?",
-    touches: "What does it touch — which product areas or systems, and where in the product would it live?",
+    why: "Who is this for, and why does it matter now?",
+    done: "How will we know it's done?",
+    smallest: "What's the smallest version that would still help?",
+    worth: "How important is this: high, medium, or low? If a specific customer is waiting on it, tell me who.",
+    touches: "Which part of the product is this about?",
     demand: "How many people have asked for this, or how often does it come up?"
   };
   REQUIRED_TO_FILE = ["why", "done"];
@@ -1635,7 +1675,8 @@ function intakePlan(g) {
     card: g.card ? [...g.card] : base.card,
     limits: [...g.limits ?? []],
     followed: [...g.followed ?? []],
-    text: g.text ?? ""
+    text: g.text ?? "",
+    ...g.references ? { references: g.references } : {}
   };
 }
 function planOpen(b, plan, extra = {}) {
@@ -1667,11 +1708,14 @@ var init_intake = __esm(() => {
   ORDER = ["why", "done", "smallest", "worth", "touches", "demand"];
   DEFAULT_CARD = CARD_FIELDS.filter((f) => f !== "product map details");
   FIELD_WORDS = [
-    ["why", /\bwho is it for\b|\bwhy now\b|\bwho (?:hits|needs|asked)\b|\bwhy\b/i],
-    ["done", /\bdone\b|\blook like\b|\bsuccess\b|\bacceptance\b/i],
+    ["why", /\bwho is (?:it|this) for\b|\bwhy now\b|\bwho (?:hits|needs|asked)\b|\bwhy\b/i],
+    ["done", /\bdone\b|\blook like\b|\bsuccess\b|\bacceptance\b|\bis fixed\b|\bit'?s fixed\b/i],
     ["smallest", /\bsmallest\b|\bminimum\b|\bmvp\b|\bsmaller version\b/i],
-    ["worth", /\bworth\b|\bvalue to\b|\bthe business\b|\brevenue\b/i],
-    ["touches", /\btouch(?:es)?\b|\bwhich (?:product|system|area)s?\b|\bwhere in the product\b/i],
+    ["worth", /\bworth\b|\bvalue to\b|\bthe business\b|\brevenue\b|\bhow important\b/i],
+    [
+      "touches",
+      /\btouch(?:es)?\b|\bwhich (?:product|system|area)s?\b|\bwhere in the product\b|\bwhich part of the product\b/i
+    ],
     ["demand", /\bhow many\b|\bhow often\b|\bcome up\b|\basked for this\b/i]
   ];
 });
@@ -2042,7 +2086,7 @@ ${state}`)}, fillcolor="${fill}", color="${border}"${style}];`);
 `)}
 `;
 }
-var ROUTE_APPROACH_MAX = 2000, PLAN_APPROACH_MAX = 1200, PLAN_LIST_MAX = 8, PLAN_LINE_MAX = 240, CONTROL, MAX_NODES = 24, DEPTH_WARN = 4, norm2 = (s) => s.trim().toUpperCase(), AREA_ROOTS, NOT_AREAS, sameRepo = (a, b) => a.length === 0 || b.length === 0 || a.some((r) => b.includes(r)), DOT_COLORS, ROUTE_DRAFT_RULE = "Draft the route: PR-sized nodes, file-disjoint where they run in parallel, each with a title, the files or areas it touches, the repo, and the nodes it waits on (by key: A, B, C…). Prefer wide waves over chains deeper than four. Make the tough calls once, so each node's session follows them: an `approach` paragraph for the whole route, and on each node a `plan` — its approach, what it `provides` that later nodes rely on (names, shapes, files), what it `expects` from the nodes it waits on, and the `doneChecks` that say it landed. Show the graph and the plans as text and ask for a yes; file nothing before it. Then `route {q, approach, nodes: [{key, title, touches, repos, blockedBy, plan: {approach, provides, expects, doneChecks}}], confirm: true}`.";
+var ROUTE_APPROACH_MAX = 2000, PLAN_APPROACH_MAX = 1200, PLAN_LIST_MAX = 8, PLAN_LINE_MAX = 240, CONTROL, MAX_NODES = 24, DEPTH_WARN = 4, norm2 = (s) => s.trim().toUpperCase(), AREA_ROOTS, NOT_AREAS, sameRepo = (a, b) => a.length === 0 || b.length === 0 || a.some((r) => b.includes(r)), DOT_COLORS, ROUTE_DRAFT_RULE = "Draft the route: PR-sized nodes, file-disjoint where they run in parallel, each with a title, the files or areas it touches, the repo, and the nodes it waits on (by key: A, B, C…). Prefer wide waves over chains deeper than four. Make the tough calls once, so each node's session follows them: an `approach` paragraph for the whole route, and on each node a `plan` — its approach, what it `provides` that later nodes rely on (names, shapes, files), what it `expects` from the nodes it waits on, and the `doneChecks` that say it landed. Show the graph and the plans as text and ask for a yes; file nothing before it. An item with children takes no nodes: its children are the work, and their order lives in their blockedBy. Then `route {q, approach, nodes: [{key, title, touches, repos, blockedBy, plan: {approach, provides, expects, doneChecks}}], confirm: true}`.";
 var init_route = __esm(() => {
   CONTROL = /[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g;
   AREA_ROOTS = new Set(["apps", "packages", "services", "libs", "crates", "modules"]);
@@ -2114,6 +2158,7 @@ var init_annotations = __esm(() => {
     finish: add("Land the work"),
     buddy: add("Pair with a buddy"),
     pickup: add("Pick up a hand-off"),
+    reopen: add("Reopen an item", true),
     update: change("Change an item", true),
     archive: change("Archive an item", true),
     withdraw: change("Withdraw a hand-off", true)
@@ -3154,6 +3199,13 @@ async function updateTool(ctx, args) {
     patch.repos = args.repos.split(/[,\s]+/).filter(Boolean);
   if (Array.isArray(args.relations))
     patch.relations = args.relations.filter(isObject4).map((r) => ({ key: str5(r.key)?.trim() ?? "", how: str5(r.how) ?? "relates" })).filter((r) => r.key && /^(blockedBy|blocks|relates|duplicates)$/.test(r.how));
+  if (args.worth === null)
+    patch.worth = null;
+  else if (typeof args.worth === "string" && args.worth.trim()) {
+    patch.worth = args.worth.trim();
+    if (args.carry === true)
+      patch.carry = true;
+  }
   if (args.sensitivity === null)
     patch.sensitivity = null;
   else if (typeof args.sensitivity === "string" && /^(public|internal|restricted)$/.test(args.sensitivity)) {
@@ -3163,7 +3215,7 @@ async function updateTool(ctx, args) {
   }
   if (Object.keys(patch).length === 0)
     return {
-      text: "Nothing to change. Pass the fields that change: ask, why, done, smallest, touches, demand, description, due, parent, repos, relations.",
+      text: "Nothing to change. Pass the fields that change: ask, why, done, smallest, touches, demand, worth, description, due, parent, repos, relations.",
       isError: true
     };
   const res = await postSaying(ctx, "/proxy/item/update", { project, ...patch }, "Could not update the item.");
@@ -3171,13 +3223,48 @@ async function updateTool(ctx, args) {
     return res.fail;
   const changed = Array.isArray(res.json.changed) ? res.json.changed.filter((x) => typeof x === "string") : [];
   const key = str5(res.json.key) ?? project;
+  const carried = carriedLine(res.json.carried);
   if (changed.length === 0)
-    return { text: `${key}: nothing differed from what is on the item.` };
+    return { text: `${key}: nothing differed from what is on the item.${carried}` };
   const stale = res.json.sizeStale === true;
   return {
-    text: `${key} updated: ${changed.join(", ")}.${stale ? " The band was sized before this change — say so, and offer to re-size (estimate with the same source)." : ""}`
+    text: `${key} updated: ${changed.join(", ")}.${carried}${stale ? " The band was sized before this change — say so, and offer to re-size (estimate with the same source)." : ""}`
+  };
+}
+async function reopenTool(ctx, args) {
+  if (!ctx.client)
+    return NOT_SET_UP;
+  const project = str5(args.project)?.trim();
+  if (!project)
+    return { text: "Which item? Pass project: its key (QW-142).", isError: true };
+  const reason = str5(args.reason)?.trim();
+  if (!reason)
+    return {
+      text: "Say why it is reopened — pass reason, one line. It goes on the item's record.",
+      isError: true
+    };
+  const res = await postSaying(ctx, "/proxy/reopen", { project, reason }, "Could not reopen the item.");
+  if ("fail" in res)
+    return res.fail;
+  const key = str5(res.json.key) ?? project;
+  const sled = str5(res.json.sled);
+  return {
+    text: `Reopened ${key} — ${sled ? `back on ${sled}'s sled` : "back to ready, on no sled"}. The false actual is cleared; the band stands.`
   };
 }
+function carriedLine(c) {
+  if (!isObject4(c))
+    return "";
+  const set = Array.isArray(c.set) ? c.set.filter((x) => typeof x === "string") : [];
+  const valued = num3(c.valued) ?? 0;
+  const skipped = num3(c.skipped) ?? 0;
+  const parts = [
+    set.length ? `worth set on ${set.length} ${set.length === 1 ? "child" : "children"} (${set.join(", ")})` : "no child took it",
+    ...valued ? [`${valued} already had a worth and kept it`] : [],
+    ...skipped ? [`${skipped} you may not change (a mirror, or not yours) — left as they were`] : []
+  ];
+  return ` ${parts.join("; ").replace(/^./, (ch) => ch.toUpperCase())}.`;
+}
 async function archiveTool(ctx, args) {
   if (!ctx.client)
     return NOT_SET_UP;
@@ -3473,9 +3560,21 @@ async function itemTool(ctx, args) {
       text: `Nothing on the sled answers to "${q}". Try the key (QW-142) or a word from the title with status.`,
       isError: true
     };
-  const md = str5(r.markdown) ?? "";
   if (asFile)
-    return { text: md, structured: { key: str5(r.key) ?? q, export: true } };
+    return { text: str5(r.markdown) ?? "", structured: { key: str5(r.key) ?? q, export: true } };
+  const envs = isObject4(r.whereLive) && Array.isArray(r.whereLive.envs) ? r.whereLive.envs : [];
+  const live = envs.filter(isObject4).filter((e) => {
+    const s = isObject4(e.state) ? e.state : null;
+    return !(s && (s.kind === "no_code" || s.state === "no_code"));
+  }).map((e) => `- ${str5(e.name) ?? str5(e.slug) ?? "?"}: ${str5(e.words) ?? ""}`);
+  const body = str5(r.markdown) ?? "";
+  const section = live.length ? `## Where it's live
+${live.join(`
+`)}
+
+` : "";
+  const title = body.match(/^# [^\n]*\n+/)?.[0] ?? "";
+  const md = `${title}${section}${body.slice(title.length)}`;
   const readiness = isObject4(r.readiness) ? r.readiness : null;
   const line = readiness ? str5(readiness.line) : undefined;
   const state = readiness ? str5(readiness.state) : undefined;
@@ -4216,6 +4315,8 @@ async function callTool(name, args, ctx) {
       return attachTool(ctx, args);
     case "update":
       return updateTool(ctx, args);
+    case "reopen":
+      return reopenTool(ctx, args);
     case "archive":
       return archiveTool(ctx, args);
     case "comment":
@@ -4621,7 +4722,7 @@ var init_server = __esm(() => {
     },
     {
       name: "route",
-      description: "The route — an item's internal order as PR-sized nodes with blockers (spec 26). With only `q`: the route as filed (each node's state, what it waits on, the ready set, where each run can be watched), or, when none is filed, the pack and the drafting rule so you draft one. Drafting: PR-sized nodes, file-disjoint where they run in parallel, each with a title, the files or areas it touches, the repo, and the nodes it waits on by key (A, B, C…); prefer wide waves over chains deeper than four. Make the tough calls once: an `approach` for the route and a `plan` on each node (its approach, what it provides to later nodes, what it expects from the nodes it waits on, its done-checks), so each node's session follows them instead of re-planning. Show the graph and the plans as text and ask for a yes; file nothing before it. Then call again with `nodes` and `confirm: true`. Re-drafting shows what changed; a node with a run or a PR is never removed. Ready is computed from landed blockers, never set. With nobody to ask (a drafting session an engine started, spec 26 §5.1): call with `nodes` and `propose: true` instead — the route is held on the item for a person's yes and nothing is filed; then stop. A read of an item with a proposal shows it as drafted, not filed.",
+      description: "The route — an item's internal order as PR-sized nodes with blockers (spec 26). With only `q`: the route as filed (each node's state, what it waits on, the ready set, where each run can be watched), or, when none is filed, the pack and the drafting rule so you draft one. Drafting: PR-sized nodes, file-disjoint where they run in parallel, each with a title, the files or areas it touches, the repo, and the nodes it waits on by key (A, B, C…); prefer wide waves over chains deeper than four. Make the tough calls once: an `approach` for the route and a `plan` on each node (its approach, what it provides to later nodes, what it expects from the nodes it waits on, its done-checks), so each node's session follows them instead of re-planning. Show the graph and the plans as text and ask for a yes; file nothing before it. Then call again with `nodes` and `confirm: true`. An item with children is refused nodes — its children are the work: set their order with blockedBy on them. The item lands only when every child has landed. Re-drafting shows what changed; a node with a run or a PR is never removed. Ready is computed from landed blockers, never set. With nobody to ask (a drafting session an engine started, spec 26 §5.1): call with `nodes` and `propose: true` instead — the route is held on the item for a person's yes and nothing is filed; then stop. A read of an item with a proposal shows it as drafted, not filed.",
       inputSchema: {
         type: "object",
         properties: {
@@ -4854,7 +4955,7 @@ var init_server = __esm(() => {
     },
     {
       name: "update",
-      description: "Change an item on the sled — its title (`ask`), why, done, smallest, touches, demand, its description (markdown: the prose the brief does not hold), its due day, which item it sits under, the repo(s) it lands in, or its sensitivity (public · internal · restricted). Pass the item's key and only the fields that change. The filer, an approver or an admin may; a mirrored ticket cannot be changed here. A change to the ask, done or smallest marks the band stale — say so, and offer to re-size. Everything you write is signed as coming through you.",
+      description: "Change an item on the sled — its title (`ask`), why, done, smallest, touches, demand, its worth, its description (markdown: the prose the brief does not hold), its due day, which item it sits under, the repo(s) it lands in, or its sensitivity (public · internal · restricted). Pass the item's key and only the fields that change. Worth is the person's word — never guess it; on an epic, `carry: true` puts it on the children that have none. The filer, an approver or an admin may; a mirrored ticket cannot be changed here. A change to the ask, done or smallest marks the band stale — say so, and offer to re-size. Everything you write is signed as coming through you.",
       inputSchema: {
         type: "object",
         properties: {
@@ -4865,6 +4966,14 @@ var init_server = __esm(() => {
           smallest: { type: "string" },
           touches: { type: "string" },
           demand: { type: "string" },
+          worth: {
+            type: ["string", "null"],
+            description: "What the person said it is worth: a level (low · medium · high · critical), dollars, a customer — e.g. 'high · Acme renewal', '$5k–20k'. Null clears it."
+          },
+          carry: {
+            type: "boolean",
+            description: "With worth: put it on this item's children that have no worth yet, each on its own record. A child with a worth keeps it."
+          },
           description: {
             type: "string",
             description: "Markdown. Links and images inline. Empty clears it."
@@ -4901,6 +5010,21 @@ var init_server = __esm(() => {
         required: ["project"]
       }
     },
+    {
+      name: "reopen",
+      description: "Put back an item that landed by mistake — a skipped node closed its route, or an actual was sent against the wrong item. It goes back on the sled it was on (or to ready, when that sled is gone), the false actual is cleared and the band stands. Pass the item's key and why: a reopen always says why, and the why goes on the item's record. The filer, an approver or an admin may. Only a landed item can be reopened.",
+      inputSchema: {
+        type: "object",
+        properties: {
+          project: { type: "string", description: "The item's key — QW-142 — or its project key." },
+          reason: {
+            type: "string",
+            description: "Why it is reopened, one line — e.g. 'a skipped node landed it; six children are open'."
+          }
+        },
+        required: ["project", "reason"]
+      }
+    },
     {
       name: "item",
       description: "Read one item whole, as one markdown document — the pack: everything an engineer or an agent needs to finish the work from this document alone. Eight parts: the ask, where the code is, how to run it (the repo's setup profile), how to know it is done (the gate), how to ship it (the playbook), what the org expects, what is known already (the Field Book — notes from earlier runs on this item, its feature and what landed beside it, the questions, the thread), and the rules of the road. Carries its readiness and whether it is packable. Pass the item's key (QW-142) or its title. Call this before building from an item, and before `check`.",
@@ -5323,9 +5447,33 @@ var init_outcome = __esm(() => {
 });
 
 // ../../packages/shared/src/slack/mention.ts
+var MENTION_HELP;
 var init_mention = __esm(() => {
   init_intake();
   init_brief();
+  MENTION_HELP = [
+    "Here's what I can do:",
+    "• *@SLEDS file this*: turn the message above into a request for engineering",
+    "• *@SLEDS status*: see where something stands",
+    "You can also ask me to *watch* or *mute* a thread, or *run QW-123*."
+  ].join(`
+`);
+});
+
+// ../../packages/shared/src/slack/copy.ts
+var init_copy = __esm(() => {
+  init_intake();
+  init_forms();
+  init_mention();
+  init_mention();
+});
+
+// ../../packages/shared/src/slack/agent.ts
+var init_agent = __esm(() => {
+  init_intake();
+  init_brief();
+  init_copy();
+  init_mention();
 });
 
 // ../../packages/shared/src/item/productHits.ts
@@ -5627,6 +5775,24 @@ var init_fieldMap = __esm(() => {
 var SEPT_30 = "/whats-new/2026-09-30", WHATS_NEW;
 var init_whatsNew = __esm(() => {
   WHATS_NEW = [
+    {
+      date: "2026-10-22",
+      title: "Policy is an org setting",
+      lede: "There is one policy for the whole org, so it now lives under Settings beside Platform keys and AI Guidance, instead of on each workspace's rail where it read as a workspace's own. Nothing in it changed; old links redirect.",
+      sections: [
+        {
+          title: "Where it went",
+          where: "Settings › Policy",
+          body: "Open your profile menu › Settings, then Policy. The page is the same: every rule as one sentence, saved as a new version. The rail's Plan group keeps Seats."
+        }
+      ],
+      also: [
+        {
+          label: "Next",
+          text: "Each workspace's Jira projects get their own pages for fields and statuses, and the org's Jira page keeps only the connection, the webhook and what SLEDS may write."
+        }
+      ]
+    },
     {
       date: "2026-10-21",
       title: "The Slack thread is the item's discussion",
@@ -5650,18 +5816,28 @@ var init_whatsNew = __esm(() => {
         {
           title: "Forms are read as fields",
           where: "Slack, filing from a workflow post",
-          body: "A support ticket form posted by a Slack workflow is read field by field: the issue description is the ask, who is affected and why go to the why, the IDs to what it touches, the count of clients to demand, and a yes on revenue to a high worth. The draft then asks only what the form did not say."
+          body: "A support ticket form posted by a Slack workflow is read field by field: the issue description is the title, the users and IDs go on one details line, and the count of clients and the revenue answer to demand. SLEDS then asks only what the form did not say."
+        },
+        {
+          title: "Replies you can read",
+          where: "Slack, filing from a thread",
+          body: `One summary message per thread, kept up to date as you answer, with the title in plain words and the form's other fields on one line. Answer several questions at once, one per line, or say which one you're answering: "done means the sync works", "high priority". Say "send it to Core" to change the team before filing. A yes with something missing asks for just that one thing.`
+        },
+        {
+          title: "A model can write the replies",
+          where: "Policy › Intake",
+          body: "Turn on Slack intake replies written by a model, Claude Haiku 5.5 by default, and it answers in the thread the way the channel's AI Guidance says: what it understood, a workaround when there is one, and the questions that matter for this kind of issue. It spends your own Anthropic key from Platform keys, up to a daily cap you set. Filing still waits for a yes, and it never sets the priority."
         },
         {
           title: "Which workspace, picked",
           where: "Slack, filing",
-          body: "A channel tied to a workspace files there. With several workspaces and none tied to the channel, SLEDS asks which, as a numbered pick: reply with the number. The Jira key is never typed — the Filed as reply shows it."
+          body: "A channel tied to a workspace files there. With several workspaces and none tied to the channel, SLEDS asks which team: reply with the number or the name. The Jira key is never typed — the Filed as reply shows it."
         }
       ],
       also: [
         {
           label: "Fixed",
-          text: "An ask filed from Slack now creates its Jira ticket in the workspace it was filed on, and the reply names the key or says why none was made."
+          text: "An ask filed from Slack now creates its Jira ticket in the workspace it was filed on, and a stated priority sets the ticket's priority. A form posted by a Slack workflow is now read field by field."
         }
       ]
     },
@@ -6297,6 +6473,56 @@ var init_pack2 = __esm(() => {
   init_prHeader();
 });
 
+// ../../packages/shared/src/deploys/deploys.ts
+function parseDeployBody(json) {
+  if (!json || typeof json !== "object" || Array.isArray(json))
+    return bad("body must be a JSON object");
+  const j = json;
+  const repo = typeof j.repo === "string" ? j.repo.trim().toLowerCase() : "";
+  if (!REPO_RE.test(repo))
+    return bad("repo must be owner/name");
+  const sha = typeof j.sha === "string" ? j.sha.trim().toLowerCase() : "";
+  if (!SHA_RE.test(sha))
+    return bad("sha must be 7–40 hex characters");
+  const environment = typeof j.environment === "string" ? j.environment.trim() : "";
+  if (!ENV_SLUG_RE.test(environment))
+    return bad("environment must be a slug: lower-case letters, digits, - and _");
+  const body = { repo, sha, environment };
+  if (j.service !== undefined && j.service !== null) {
+    const service = typeof j.service === "string" ? j.service.trim() : "";
+    if (!SERVICE_RE.test(service))
+      return bad("service must be a short name");
+    body.service = service;
+  }
+  if (j.at !== undefined && j.at !== null) {
+    const at = typeof j.at === "string" ? Date.parse(j.at) : typeof j.at === "number" ? j.at : Number.NaN;
+    if (!Number.isFinite(at))
+      return bad("at must be an ISO time");
+    body.at = at;
+  }
+  if (j.url !== undefined && j.url !== null) {
+    let ok = false;
+    if (typeof j.url === "string") {
+      try {
+        ok = new URL(j.url).protocol === "https:";
+      } catch {
+        ok = false;
+      }
+    }
+    if (!ok)
+      return bad("url must be an https link");
+    body.url = j.url;
+  }
+  return { ok: true, body };
+}
+var REPO_RE, SHA_RE, ENV_SLUG_RE, SERVICE_RE, bad = (error) => ({ ok: false, error });
+var init_deploys = __esm(() => {
+  REPO_RE = /^[a-z0-9_.-]+\/[a-z0-9_.-]+$/;
+  SHA_RE = /^[0-9a-f]{7,40}$/;
+  ENV_SLUG_RE = /^[a-z0-9][a-z0-9_-]{0,39}$/;
+  SERVICE_RE = /^[A-Za-z0-9][A-Za-z0-9_.-]{0,39}$/;
+});
+
 // ../../packages/shared/src/newrelic/newrelic.ts
 var init_newrelic = () => {};
 
@@ -6696,7 +6922,7 @@ function nodePrompt(o) {
     ...claim.pack.includes(PR_HEADER_OPEN) ? [
       `- The PR body starts with the pack's PR header block (\`${PR_HEADER_OPEN}\` … \`${PR_HEADER_CLOSE}\`, in its part 5), above everything else. The pack wrote it before your work existed: when you make a mock (a screenshot or an artifact) or write a doc, put its link on that part's line in place of \`None\` — not only lower in the body (SL-1746). When you edit the body later, keep it on top.`
     ] : [],
-    "- Run the repo's own gate before you push. Never merge: a person (or the musher, when the attachment says so) does.",
+    o.gate ? `- Run the repo's gate before you push: exactly \`${o.gate}\`, as given. Never wrap it — no \`$?\`, \`$(...)\`, \`bash -c\` or \`; echo\` around it — or it stops at a permission dialog; read its result from the exit and the output. Never merge: a person (or the musher, when the attachment says so) does.` : "- Run the repo's own gate before you push. Never merge: a person (or the musher, when the attachment says so) does.",
     "- Stay inside this node's scope. Work another node needs goes in the PR description, not in this branch.",
     `- End every comment and reply you post on the PR with the line \`${ENGINE_MARK}\`, so the engine knows it is yours and not a reviewer's.`,
     "- The approved brief and this route are the go-ahead: a person said yes to them before this session started. Build, commit, push and open the PR; a park is for a question the record does not settle, not for a go-ahead to build or push.",
@@ -7138,6 +7364,9 @@ var init_effort = __esm(() => {
   EFFORTS = ["low", "medium", "high", "xhigh", "max"];
 });
 
+// ../../packages/shared/src/workspaceLook.ts
+var init_workspaceLook = () => {};
+
 // src/settings.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve as resolve2 } from "node:path";
@@ -7682,6 +7911,8 @@ var init_src = __esm(() => {
   init_profile2();
   init_outcome();
   init_mention();
+  init_agent();
+  init_copy();
   init_productHits();
   init_model();
   init_parse();
@@ -7696,6 +7927,7 @@ var init_src = __esm(() => {
   init_cheatSheet();
   init_pack2();
   init_flags();
+  init_deploys();
   init_sentry();
   init_newrelic();
   init_musher();
@@ -7706,6 +7938,7 @@ var init_src = __esm(() => {
   init_otlp();
   init_session();
   init_effort();
+  init_workspaceLook();
 });
 
 // src/engine/json.ts
@@ -8383,6 +8616,8 @@ init_due();
 init_profile2();
 init_outcome();
 init_mention();
+init_agent();
+init_copy();
 init_productHits();
 init_model();
 init_parse();
@@ -8397,6 +8632,7 @@ init_whatsNew();
 init_cheatSheet();
 init_pack2();
 init_flags();
+init_deploys();
 init_sentry();
 init_newrelic();
 init_musher();
@@ -8407,6 +8643,7 @@ init_engine();
 init_otlp();
 init_session();
 init_effort();
+init_workspaceLook();
 
 // src/agentMcp.ts
 import { execFileSync } from "node:child_process";
@@ -9561,24 +9798,142 @@ var defer = async (o) => {
   return 0;
 };
 
+// src/commands/deploy.ts
+init_src();
+import { execFileSync as execFileSync2 } from "node:child_process";
+var DEPLOYS_URL = "https://hooks.sleds.ai/deploys";
+var USAGE = "usage: sleds deploy --env <slug> [--service <name>] [--sha <sha>] [--repo <owner/name>]";
+var FLAGS = ["env", "service", "sha", "repo"];
+var set = (x) => x?.trim() ? x.trim() : undefined;
+function repoFromRemote(remote) {
+  const m = /^(?:[a-z+]+:\/\/)?(?:[^@/]+@)?[^/:]+[:/](.+?)(?:\.git)?\/?$/i.exec(remote.trim());
+  const parts = m?.[1]?.split("/").filter(Boolean) ?? [];
+  if (parts.length < 2)
+    return null;
+  return `${parts[parts.length - 2]}/${parts[parts.length - 1]}`.toLowerCase();
+}
+function resolveDeploy(argv, env, git) {
+  const flags = {};
+  for (let i = 0;i < argv.length; i++) {
+    const a = argv[i] ?? "";
+    const m = /^--([a-z]+)(?:=(.*))?$/.exec(a);
+    const name = m?.[1];
+    if (!m || !name || !FLAGS.includes(name))
+      return { ok: false, error: `unknown argument ${a}` };
+    const value = m[2] ?? argv[++i];
+    if (!set(value))
+      return { ok: false, error: `--${name} needs a value` };
+    flags[name] = value?.trim();
+  }
+  if (!flags.env)
+    return { ok: false, error: "--env <slug> is required" };
+  const vercelRepo = set(env.VERCEL_GIT_REPO_OWNER) && set(env.VERCEL_GIT_REPO_SLUG) ? `${set(env.VERCEL_GIT_REPO_OWNER)}/${set(env.VERCEL_GIT_REPO_SLUG)}` : undefined;
+  const remote = () => {
+    const url = git(["remote", "get-url", "origin"]);
+    return url && repoFromRemote(url) || undefined;
+  };
+  const repo = flags.repo ?? set(env.GITHUB_REPOSITORY) ?? vercelRepo ?? remote();
+  if (!repo)
+    return { ok: false, error: "no repo: pass --repo owner/name (no origin remote)" };
+  const sha = flags.sha ?? set(env.SOURCE_VERSION) ?? set(env.HEROKU_SLUG_COMMIT) ?? set(env.VERCEL_GIT_COMMIT_SHA) ?? set(env.GITHUB_SHA) ?? set(git(["rev-parse", "HEAD"]) ?? undefined);
+  if (!sha)
+    return { ok: false, error: "no sha: pass --sha (not a git checkout)" };
+  return parseDeployBody({
+    repo,
+    sha,
+    environment: flags.env,
+    ...flags.service ? { service: flags.service } : {}
+  });
+}
+var defaultGit = (args) => {
+  try {
+    return execFileSync2("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).toString().trim();
+  } catch {
+    return null;
+  }
+};
+var defaultPost = async (url, token, body) => {
+  try {
+    const res = await fetch(url, {
+      method: "POST",
+      headers: { authorization: `Bearer ${token}`, "content-type": "application/json" },
+      body: JSON.stringify(body),
+      signal: AbortSignal.timeout(15000)
+    });
+    let json = null;
+    try {
+      json = await res.json();
+    } catch {}
+    return { status: res.status, json };
+  } catch (e) {
+    return { error: e instanceof Error ? e.message : String(e) };
+  }
+};
+function deployLine(body, json) {
+  const where = `${body.repo}${body.service ? ` (${body.service})` : ""} → ${body.environment}`;
+  if (typeof json.ignored === "string")
+    return `ignored: ${json.ignored}`;
+  if (json.duplicate)
+    return `${where}: already at ${body.sha.slice(0, 7)}`;
+  const prs = Array.isArray(json.newlyDeployed) ? json.newlyDeployed : [];
+  const list = prs.map((p) => `#${p.number}`).join(", ");
+  if (json.rollback)
+    return `${where}: rollback to ${body.sha.slice(0, 7)}${list ? ` (carries ${list} again)` : ""}`;
+  return prs.length ? `${where}: newly deployed ${list}` : `${where}: ${body.sha.slice(0, 7)} recorded, no newly deployed PRs`;
+}
+var deployCmd = async (o) => {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  const env = o.env ?? process.env;
+  const token = set(env.SLEDS_DEPLOY_TOKEN);
+  if (!token) {
+    error("SLEDS_DEPLOY_TOKEN is not set — mint one in Settings › Deploys");
+    return 2;
+  }
+  const resolved = resolveDeploy(o.argv, env, o.git ?? defaultGit);
+  if (!resolved.ok) {
+    error(resolved.error);
+    error(USAGE);
+    return 2;
+  }
+  const body = resolved.body;
+  const url = set(env.SLEDS_DEPLOYS_URL) ?? DEPLOYS_URL;
+  const r = await (o.post ?? defaultPost)(url, token, body);
+  if ("error" in r) {
+    error(`warning: SLEDS unreachable, deploy not recorded — ${r.error}`);
+    return 0;
+  }
+  if (r.status === 200 && r.json) {
+    log(deployLine(body, r.json));
+    return 0;
+  }
+  const why = typeof r.json?.error === "string" ? r.json.error : `HTTP ${r.status}`;
+  if (r.status >= 400 && r.status < 500) {
+    error(r.status === 401 ? `SLEDS refused the deploy token (${why})` : why);
+    return 1;
+  }
+  error(`warning: SLEDS answered ${why}, deploy not recorded`);
+  return 0;
+};
+
 // src/commands/doctor.ts
 init_src();
-import { execFileSync as execFileSync3, spawnSync as spawnSync5 } from "node:child_process";
+import { execFileSync as execFileSync4, spawnSync as spawnSync5 } from "node:child_process";
 import { randomBytes } from "node:crypto";
 import {
-  existsSync as existsSync16,
-  lstatSync,
+  existsSync as existsSync17,
+  lstatSync as lstatSync2,
   mkdtempSync,
   readFileSync as readFileSync17,
-  readlinkSync,
+  readlinkSync as readlinkSync2,
   rmSync as rmSync8,
   writeFileSync as writeFileSync17
 } from "node:fs";
 import { tmpdir } from "node:os";
-import { join as join19, resolve as resolve8 } from "node:path";
+import { join as join20, resolve as resolve9 } from "node:path";
 
 // src/agentMcp.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { existsSync as existsSync10, mkdirSync as mkdirSync9, readFileSync as readFileSync9, writeFileSync as writeFileSync9 } from "node:fs";
 import { dirname as dirname8, join as join10, resolve as resolve6 } from "node:path";
 init_settings();
@@ -9646,7 +10001,7 @@ function applyCodexMcp2(toml, home, env = process.env) {
 `;
 }
 var defaultRunClaude2 = (args) => {
-  execFileSync2("claude", args, { stdio: ["ignore", "ignore", "pipe"], timeout: 20000 });
+  execFileSync3("claude", args, { stdio: ["ignore", "ignore", "pipe"], timeout: 20000 });
 };
 async function offerMcp2(o) {
   const env = o.env ?? process.env;
@@ -10101,6 +10456,7 @@ var agentShellCommand = (o) => {
   const effort = o.effort ? ` --effort ${shq2(o.effort)}` : "";
   return `${sandboxedAgent("claude", o.sandbox, o.mainCheckout)}${hookSettingsFlag(o)}${mcpConfigFlag(o)} --permission-mode ${shq2(o.permissionMode)}${model}${effort} ${prompt}`;
 };
+var execLine = (cmd) => /^[A-Za-z_][A-Za-z0-9_]*=/.test(cmd) ? `exec env ${cmd}` : `exec ${cmd}`;
 var sandboxedAgent = (agent, sandbox, mainCheckout) => {
   const kind = sandboxAgentKind(agent);
   const line = kind === "claude" ? `${agent}${claudeAddDirFlag(mainCheckout)}` : agent;
@@ -10537,6 +10893,215 @@ function cmuxRunner(exec, deps = {}) {
   };
 }
 
+// src/runners/orca.ts
+import { existsSync as existsSync12, lstatSync, readlinkSync, writeFileSync as writeFileSync11 } from "node:fs";
+import { join as join14, resolve as resolve7 } from "node:path";
+var obj = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
+var str8 = (v) => typeof v === "string" && v.length > 0 ? v : null;
+var parseOrcaJson = (stdout) => {
+  try {
+    return obj(JSON.parse(stdout));
+  } catch {
+    return null;
+  }
+};
+var orcaError = (env) => {
+  if (!env || env.ok !== false)
+    return null;
+  const e = obj(env.error);
+  const message = str8(e?.message) ?? "Orca refused the call";
+  const code = str8(e?.code);
+  return code ? `${message} (${code})` : message;
+};
+var parseOrcaWorktree = (env) => {
+  const result = obj(env.result) ?? {};
+  return str8(obj(result.worktree)?.path) ?? str8(result.worktreePath) ?? str8(result.path);
+};
+var parseOrcaBranch = (env) => {
+  const wt = obj(obj(env.result)?.worktree);
+  const branch = str8(wt?.branch)?.replace(/^refs\/heads\//, "");
+  const head = str8(wt?.head);
+  return branch && head ? { branch, head } : null;
+};
+var parseOrcaTerminal = (env) => {
+  const result = obj(env.result) ?? {};
+  return str8(obj(result.terminal)?.handle) ?? str8(result.handle) ?? str8(result.terminalHandle) ?? null;
+};
+var orcaLauncher = (o) => `#!/bin/sh
+# sleds engine: ${o.name}
+${execLine(agentShellCommand(o))}
+`;
+var orcaCommand = (launcher) => `sh ${shq2(launcher)}; exit`;
+var GONE = /exit|clos|gone|dead|stopp|kill/i;
+var orcaTerminalLive = (status, stdout) => {
+  const env = parseOrcaJson(stdout);
+  if (str8(obj(env?.error)?.code) === "runtime_unavailable")
+    return true;
+  if (status !== 0 || !env || env.ok === false)
+    return false;
+  const t = obj(obj(env.result)?.terminal) ?? obj(env.result) ?? {};
+  if (typeof t.status === "string" && GONE.test(t.status))
+    return false;
+  if (t.exited === true || t.alive === false)
+    return false;
+  if (typeof t.exitCode === "number")
+    return false;
+  if (obj(t.exitCause))
+    return false;
+  if (t.orphaned === true && t.writable === false)
+    return false;
+  return true;
+};
+var realFs = { lstat: lstatSync, readlink: readlinkSync, exists: existsSync12 };
+var ORCA_LINK_FIX = "reinstall Orca's shell command from Orca (it links `orca` onto your PATH)";
+function danglingOrca(path, fs) {
+  for (const dir of path.split(":").filter(Boolean)) {
+    const link = join14(dir, "orca");
+    try {
+      if (!fs.lstat(link).isSymbolicLink())
+        return null;
+      const target = resolve7(dir, fs.readlink(link));
+      if (!fs.exists(target))
+        return { link, target };
+      return null;
+    } catch {}
+  }
+  return null;
+}
+function orcaPreflight(exec, path, fs = realFs) {
+  let r;
+  try {
+    r = exec("orca", ["--version"], { env: { PATH: path } });
+  } catch (e) {
+    r = { status: 127, stdout: "", stderr: e instanceof Error ? e.message : String(e) };
+  }
+  if (r.status === 0) {
+    return { ok: true, version: r.stdout.trim().split(`
+`)[0]?.trim() || "orca" };
+  }
+  const dangling = danglingOrca(path, fs);
+  if (dangling) {
+    return {
+      ok: false,
+      why: `${dangling.link} links to ${dangling.target}, which is gone`,
+      fix: ORCA_LINK_FIX
+    };
+  }
+  if (!path.split(":").includes("/usr/bin")) {
+    return { ok: false, why: "the engine's PATH has no /usr/bin", fix: "sleds engine install" };
+  }
+  if (r.status === 127) {
+    return { ok: false, why: "not installed (no `orca` on the PATH)", fix: ORCA_LINK_FIX };
+  }
+  const said = `${r.stderr}
+${r.stdout}`.split(`
+`).map((l) => l.trim()).find(Boolean);
+  return {
+    ok: false,
+    why: `\`orca --version\` failed: ${said ?? `exit ${r.status}`}`,
+    fix: "reinstall Orca, or its shell command from Orca"
+  };
+}
+var launcherPath2 = (promptFile) => `${promptFile.replace(/\.md$/, "")}.orca.sh`;
+function orcaRunner(exec, deps = {}) {
+  const writeFile = deps.writeFile ?? ((p, t) => writeFileSync11(p, t, { mode: 384 }));
+  const orca = (args, what) => {
+    const r = exec("orca", args);
+    const env = parseOrcaJson(r.stdout);
+    const refused = orcaError(env);
+    if (refused)
+      throw new Error(`${what}: ${refused}`);
+    if (r.status !== 0 || !env) {
+      throw new Error(`${what} failed: ${r.stderr.trim() || r.stdout.trim() || `exit ${r.status}`}`);
+    }
+    return env;
+  };
+  return {
+    name: "orca",
+    makesWorktree: true,
+    readsSession: true,
+    start(o) {
+      const created = orca([
+        "worktree",
+        "create",
+        "--repo",
+        `path:${o.repoPath}`,
+        "--name",
+        o.name,
+        "--base-branch",
+        `origin/${o.base ?? "main"}`,
+        "--no-parent",
+        "--json"
+      ], `orca worktree create ${o.name}`);
+      const cwd = parseOrcaWorktree(created);
+      if (!cwd) {
+        throw new Error(`orca worktree create ${o.name} returned no worktree path; the agent was not started`);
+      }
+      const launcher = launcherPath2(o.promptFile);
+      writeFile(launcher, orcaLauncher(o));
+      const shown = orca([
+        "terminal",
+        "create",
+        "--worktree",
+        `path:${cwd}`,
+        "--title",
+        o.name,
+        "--command",
+        orcaCommand(launcher),
+        "--json"
+      ], `orca terminal create ${o.name} (worktree ${cwd})`);
+      const terminal = parseOrcaTerminal(shown);
+      if (!terminal) {
+        throw new Error(`orca terminal create ${o.name} started in ${cwd} but returned no terminal handle`);
+      }
+      const own = parseOrcaBranch(created);
+      const h = { runner: "orca", id: terminal, cwd, ...own ? { own } : {} };
+      return h;
+    },
+    status(h) {
+      const r = exec("orca", ["terminal", "show", "--terminal", h.id, "--json"]);
+      return orcaTerminalLive(r.status, r.stdout) ? "running" : "exited";
+    },
+    read(h) {
+      const r = exec("orca", ["terminal", "read", "--terminal", h.id, "--limit", "200"]);
+      return r.status === 0 ? r.stdout : "";
+    },
+    send(h, text) {
+      const r = exec("orca", ["terminal", "send", "--terminal", h.id, "--text", text, "--enter"]);
+      if (r.status !== 0) {
+        throw new Error(`orca terminal send ${h.id} failed: ${r.stderr.trim() || `exit ${r.status}`}`);
+      }
+    },
+    stop(h) {
+      exec("orca", ["terminal", "close", "--terminal", h.id]);
+    },
+    watchHint(h) {
+      return `orca terminal show --terminal ${h.id}`;
+    },
+    probe() {
+      try {
+        const p = orcaPreflight(exec, process.env.PATH ?? "", deps.fs);
+        return p.ok ? null : `orca: ${p.why} — ${p.fix}`;
+      } catch {
+        return "orca: not installed";
+      }
+    },
+    removeWorktree(h, repoPath) {
+      orca(["worktree", "rm", "--worktree", `path:${h.cwd}`, "--json"], `orca worktree rm ${h.cwd}`);
+      if (!h.own)
+        return;
+      const ref = `refs/heads/${h.own.branch}`;
+      const r = exec("git", ["-C", repoPath, "update-ref", "-d", ref, h.own.head]);
+      if (r.status === 0)
+        return;
+      const still = exec("git", ["-C", repoPath, "rev-parse", "--verify", "--quiet", ref]);
+      if (still.status !== 0)
+        return;
+      return `kept Orca's branch ${h.own.branch}: ${r.stderr.trim() || `exit ${r.status}`}`;
+    }
+  };
+}
+
 // src/commands/doctor.ts
 init_settings();
 
@@ -10554,7 +11119,7 @@ import {
   writeFileSync as writeFileSync13
 } from "node:fs";
 import { hostname as hostname2 } from "node:os";
-import { join as join15, resolve as resolve7 } from "node:path";
+import { join as join16, resolve as resolve8 } from "node:path";
 
 // src/engine/beat.ts
 var BEAT_EVERY_MS = 60000;
@@ -10566,7 +11131,7 @@ function beatBody(state, flags, host = {}, cap = {}) {
     name: flags.name,
     os: host.os ?? process.platform,
     runner: flags.runner,
-    version: host.version ?? "0.1.43" ?? "dev",
+    version: host.version ?? "0.1.45" ?? "dev",
     running: live.length,
     items: live.slice(0, BEAT_ITEMS).map((r) => `${r.item}/${r.node}`),
     ...cap.atOnce !== undefined ? { atOnce: cap.atOnce } : {},
@@ -11359,7 +11924,7 @@ function jiraFromEnv(epic, gate, env = process.env) {
 init_src();
 
 // src/commands/permissionEvent.ts
-import { chmodSync as chmodSync3, mkdirSync as mkdirSync10, readFileSync as readFileSync10, renameSync as renameSync6, rmSync as rmSync3, writeFileSync as writeFileSync11 } from "node:fs";
+import { chmodSync as chmodSync3, mkdirSync as mkdirSync10, readFileSync as readFileSync10, renameSync as renameSync6, rmSync as rmSync3, writeFileSync as writeFileSync12 } from "node:fs";
 
 // src/commands/seatEvent.ts
 init_config();
@@ -11559,7 +12124,7 @@ function keysIn(states, state) {
 }
 function statesLanded(states) {
   const all = Object.values(states);
-  return all.length > 0 && all.every((s) => s === "landed" || s === "skipped");
+  return all.length > 0 && all.every((s) => s === "landed" || s === "skipped") && all.some((s) => s === "landed");
 }
 function armedTerms(armed) {
   if (!isObject8(armed))
@@ -11838,11 +12403,12 @@ function sledsSource(client, o) {
   async function draft(row, item, why) {
     const project = str6(row.project) ?? item;
     const pending = isObject8(row.route) && isObject8(row.route.redraft) ? row.route.redraft : null;
+    const runner = typeof o.runner === "function" ? o.runner() : o.runner;
     const r = await client.postFull("/proxy/route", {
       project,
       draft: "take",
       engine: o.engine,
-      ...o.runner ? { runner: o.runner } : {},
+      ...runner ? { runner } : {},
       ...o.leaseMin !== undefined ? { leaseMin: o.leaseMin } : {}
     });
     if (!r || r.status >= 300 || !r.json || r.json.ok === false) {
@@ -12370,10 +12936,10 @@ function providerFailure(screen) {
 
 // src/engine/worktree.ts
 init_src();
-import { appendFileSync, existsSync as existsSync12, mkdirSync as mkdirSync11 } from "node:fs";
-import { dirname as dirname11, isAbsolute, join as join14 } from "node:path";
+import { appendFileSync, existsSync as existsSync13, mkdirSync as mkdirSync11 } from "node:fs";
+import { dirname as dirname11, isAbsolute, join as join15 } from "node:path";
 function worktreePath(repoPath, name) {
-  return join14(repoPath, ".worktrees", name);
+  return join15(repoPath, ".worktrees", name);
 }
 var fail = (what, r) => new Error(`${what} failed: ${(r.stderr || r.stdout).trim() || `exit ${r.status}`}`);
 function defaultBranch(exec, repoPath) {
@@ -12394,7 +12960,7 @@ function defaultBranch(exec, repoPath) {
   return "main";
 }
 var realWorktreeFs = {
-  exists: existsSync12,
+  exists: existsSync13,
   append: (p, text) => {
     mkdirSync11(dirname11(p), { recursive: true });
     appendFileSync(p, text);
@@ -12408,7 +12974,7 @@ function ensureIgnored(exec, repoPath, fs = realWorktreeFs) {
   if (common.status !== 0)
     return;
   const dir = common.stdout.trim();
-  const exclude = join14(isAbsolute(dir) ? dir : join14(repoPath, dir), "info", "exclude");
+  const exclude = join15(isAbsolute(dir) ? dir : join15(repoPath, dir), "info", "exclude");
   fs.append(exclude, `
 # sleds engine: one worktree per route node
 .worktrees/
@@ -12420,7 +12986,7 @@ function ensureWorktree(exec, repoPath, branch, path, base = "main", fs = realWo
   return path;
 }
 function makeWorktree(exec, repoPath, branch, path, base, fs, log) {
-  if (fs.exists(join14(path, ".git"))) {
+  if (fs.exists(join15(path, ".git"))) {
     fastForwardUntouched(exec, path, base, log);
     return path;
   }
@@ -12493,13 +13059,13 @@ function installArgv(command) {
   return argv;
 }
 function lockfileInstall(path, exists) {
-  if (exists(join14(path, "pnpm-lock.yaml")))
+  if (exists(join15(path, "pnpm-lock.yaml")))
     return ["pnpm", "install", "--frozen-lockfile"];
-  if (exists(join14(path, "bun.lock")) || exists(join14(path, "bun.lockb")))
+  if (exists(join15(path, "bun.lock")) || exists(join15(path, "bun.lockb")))
     return ["bun", "install", "--frozen-lockfile"];
-  if (exists(join14(path, "yarn.lock")))
+  if (exists(join15(path, "yarn.lock")))
     return ["yarn", "install", "--frozen-lockfile"];
-  if (exists(join14(path, "package-lock.json")))
+  if (exists(join15(path, "package-lock.json")))
     return ["npm", "ci"];
   return null;
 }
@@ -12523,8 +13089,39 @@ function packInstallOf(pack, repo) {
   }
   return first;
 }
+function packGateOf(pack, repo) {
+  let inDone = false;
+  let first;
+  const want = repo?.trim().toLowerCase();
+  for (const line of pack.split(`
+`)) {
+    if (/^##\s/.test(line)) {
+      inDone = /^##\s+4\./.test(line);
+      continue;
+    }
+    if (!inDone)
+      continue;
+    const m = line.match(/^\s*-\s*([^:`]+?):\s*`(.+)`\s*$/);
+    if (!m?.[1] || !m[2])
+      continue;
+    const name = m[1].trim().toLowerCase();
+    if (name === "done means" || name.startsWith("try it"))
+      continue;
+    if (want && name === want)
+      return m[2];
+    first ??= m[2];
+  }
+  return first;
+}
+function gateAllowRules(gate) {
+  const whole = gate?.trim();
+  if (!whole)
+    return [];
+  const parts = whole.split(/&&|\|\||;/).map((p) => p.trim()).filter(Boolean);
+  return [...new Set([whole, ...parts])].map((c) => `Bash(${c})`);
+}
 function ensureInstalled(exec, path, fs, o = {}) {
-  if (!fs.exists(join14(path, "package.json")) || fs.exists(join14(path, "node_modules")))
+  if (!fs.exists(join15(path, "package.json")) || fs.exists(join15(path, "node_modules")))
     return null;
   const argv = installArgv(o.command) ?? lockfileInstall(path, fs.exists);
   if (!argv)
@@ -12539,7 +13136,7 @@ function ensureInstalled(exec, path, fs, o = {}) {
   return { argv, ok };
 }
 function ensureDetachedWorktree(exec, repoPath, path, base = "main", fs = realWorktreeFs) {
-  if (fs.exists(join14(path, ".git")))
+  if (fs.exists(join15(path, ".git")))
     return path;
   ensureIgnored(exec, repoPath, fs);
   const f = exec("git", ["-C", repoPath, "fetch", "origin", base]);
@@ -12615,17 +13212,17 @@ function fingerprint(text) {
   }
   return (h >>> 0).toString(16);
 }
-function sandboxFor(d, name, cwd) {
+function sandboxFor(d, name, cwd, allow) {
   if (!d.sandbox)
     return {};
   if (!d.writeSandboxSettings)
     throw new Error("sessions are sandboxed, but nothing writes their settings — not started");
-  return { sandbox: d.writeSandboxSettings(name, cwd) };
+  return { sandbox: d.writeSandboxSettings(name, cwd, allow) };
 }
-function hooksFor(d, name) {
+function hooksFor(d, name, allow) {
   if (d.sandbox || !d.writeHookSettings)
     return {};
-  return { settingsFile: d.writeHookSettings(name) };
+  return { settingsFile: d.writeHookSettings(name, allow) };
 }
 function mainCheckoutFor(d, cwd) {
   const main = d.mainCheckoutOf?.(cwd);
@@ -12686,6 +13283,8 @@ async function tick(deps) {
       deps.startBackoff = d.startBackoff;
       deps.providerHold = d.providerHold;
       deps.atOnce = d.atOnce;
+      deps.runner = d.runner;
+      deps.runnerRefused = d.runnerRefused;
     }
     removeEndedMcpConfigs(deps, made);
   }
@@ -12728,6 +13327,7 @@ async function tickOnce(d) {
   const changes = [];
   const decided = [];
   const save = () => d.writeState(state);
+  await rereadRunner(d);
   probeRunner(d);
   if (d.startBackoff && --d.startBackoff.checks <= 0)
     d.startBackoff = undefined;
@@ -13080,6 +13680,8 @@ async function tickOnce(d) {
       const worktree = d.runner.makesWorktree ? repoPath : d.ensureWorktree(d.exec, repoPath, branch, worktreePath(repoPath, name), base, packInstallOf(claim.pack, claim.repos[0])) ?? worktreePath(repoPath, name);
       const prTitle = d.prTitleOf?.(claim);
       mcpConfig = engineMcpConfigFor(d, name, claim.runToken, at, worktree);
+      const gate = packGateOf(claim.pack, claim.repos[0]);
+      const allow = gateAllowRules(gate);
       const prompt = nodePrompt({
         claim,
         branch,
@@ -13088,6 +13690,7 @@ async function tickOnce(d) {
         sledsTools: d.source.name === "sleds",
         engineMcp: Boolean(mcpConfig),
         ...prTitle ? { prTitle } : {},
+        ...gate ? { gate } : {},
         ...nodePlanContext(await briefsOf(claim.item), claim.node)
       });
       const promptFile = d.writePrompt(name, prompt);
@@ -13104,8 +13707,8 @@ async function tickOnce(d) {
         ...launch.effort && !launch.agent ? { effort: launch.effort } : {},
         ...launch.agent ? { agent: launch.agent } : {},
         ...mcpConfig ? { mcpConfig, ...d.strictMcp ? { strictMcp: true } : {} } : {},
-        ...sandboxFor(d, name, worktree),
-        ...hooksFor(d, name),
+        ...sandboxFor(d, name, worktree, allow),
+        ...hooksFor(d, name, allow),
         ...mainCheckoutFor(d, worktree),
         ...claim.group ? { group: claim.group } : {}
       };
@@ -13363,6 +13966,24 @@ function pressAnswer(d, runner, run, options, answer) {
     return false;
   }
 }
+function readFollowed(d, runner, run) {
+  if (!runner.readsSession)
+    return "";
+  let shown = "";
+  try {
+    shown = runner.read(run.handle);
+  } catch {
+    shown = "";
+  }
+  const print = fingerprint(shown);
+  if (run.seen !== print) {
+    run.seen = print;
+    run.seenAt = d.now();
+    run.seenTicks = 0;
+  } else
+    run.seenTicks = (run.seenTicks ?? 0) + 1;
+  return shown;
+}
 async function dropPermission(d, run, why) {
   const perms = permissionsOf(d.source);
   if (!run.permission || !perms || !run.runId)
@@ -13513,6 +14134,29 @@ async function rereadAtOnce(d) {
   d.atOnce = next;
   d.log(`at once now ${next}, from your engine profile`);
 }
+async function rereadRunner(d) {
+  if (!d.rereadRunner)
+    return;
+  let next = null;
+  try {
+    next = await d.rereadRunner(profileOf2(d));
+  } catch {}
+  if (next === null)
+    return;
+  if (typeof next === "string") {
+    if (d.runnerRefused !== next)
+      d.log(next);
+    d.runnerRefused = next;
+    return;
+  }
+  d.runnerRefused = undefined;
+  if (next === d.runner)
+    return;
+  const was = d.runner.name;
+  d.runner = next;
+  d.runnerHold = undefined;
+  d.log(`runner now ${next.name}, from your engine profile — new sessions start on it; running ones stay on ${was}`);
+}
 async function rereadMachine(w, d) {
   if (!w.reread)
     return;
@@ -14164,11 +14808,13 @@ async function follow(d, state, run, claim, runner, finished, attention, changes
     return true;
   await judgeLook(d, run, view);
   if (view.state === "MERGED") {
+    await dropPermission(d, run, "the PR merged");
     const landed = await ripple(d, state, run, claim, runner, pr.url, finished, decided, view.head, view.mergeCommit);
     return !landed;
   }
   if (view.state === "CLOSED") {
     d.log(`${ref(run)}: ${pr.url} was closed without a merge — let go, its session stopped`);
+    await dropPermission(d, run, "the PR closed without a merge");
     stopOpen(d, run, runner);
     return false;
   }
@@ -14188,6 +14834,8 @@ async function follow(d, state, run, claim, runner, finished, attention, changes
       kind: "review",
       what: `${view.feedback - pr.feedback} new comment${view.feedback - pr.feedback === 1 ? "" : "s"}`
     });
+  if (await settlePermission(d, runner, run, readFollowed(d, runner, run)))
+    return true;
   const tell = (text, what) => {
     let alive = false;
     try {
@@ -15057,8 +15705,8 @@ function commandRunner(template, deps = {}) {
 
 // src/runners/conductor.ts
 import { readFileSync as readFileSync11 } from "node:fs";
-var obj = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
-var str8 = (v) => typeof v === "string" && v.length > 0 ? v : null;
+var obj2 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
+var str9 = (v) => typeof v === "string" && v.length > 0 ? v : null;
 var CONDUCTOR_API = "https://api.conductor.build";
 var CLAUDE_MODELS = new Set([
   "fable-5-1",
@@ -15115,7 +15763,7 @@ var splitCurl = (stdout) => {
   const code = Number(stdout.slice(cut + 1).trim()) || 0;
   let body = null;
   try {
-    body = obj(JSON.parse(text));
+    body = obj2(JSON.parse(text));
   } catch {
     body = null;
   }
@@ -15130,7 +15778,7 @@ var messageText = (content, depth = 0) => {
     return content.map((c) => messageText(c, depth + 1)).filter(Boolean).join(`
 `);
   }
-  const o = obj(content);
+  const o = obj2(content);
   if (!o)
     return String(content);
   for (const k of ["text", "content", "message", "result"]) {
@@ -15138,12 +15786,12 @@ var messageText = (content, depth = 0) => {
     if (t)
       return t;
   }
-  return str8(o.type) ? `(${o.type}${str8(o.name) ? ` ${o.name}` : ""})` : "";
+  return str9(o.type) ? `(${o.type}${str9(o.name) ? ` ${o.name}` : ""})` : "";
 };
 var renderTranscript = (messages, keep = 40, clip = 2000) => messages.slice(-keep).map((m) => {
   const t = messageText(m.content).trim();
   const body = t.length > clip ? `${t.slice(0, clip)}…` : t;
-  return body ? `[${str8(m.type) ?? "message"}] ${body}` : "";
+  return body ? `[${str9(m.type) ?? "message"}] ${body}` : "";
 }).filter(Boolean).join(`
 
 `);
@@ -15173,7 +15821,7 @@ function conductorRunner(exec, deps = {}) {
     }
     const res = splitCurl(r.stdout);
     if (res.code < 200 || res.code >= 300 || !res.body) {
-      const why = str8(res.body?.userMessage) ?? str8(res.body?.message) ?? (res.text.trim().slice(0, 300) || "no body");
+      const why = str9(res.body?.userMessage) ?? str9(res.body?.message) ?? (res.text.trim().slice(0, 300) || "no body");
       throw new Error(`conductor ${method} ${path}: HTTP ${res.code}: ${why}`);
     }
     return res.body;
@@ -15203,15 +15851,15 @@ function conductorRunner(exec, deps = {}) {
         ...effort ? { effort } : {},
         message: prompt
       });
-      const workspace = str8(created.workspaceId);
-      const session = str8(created.sessionId);
+      const workspace = str9(created.workspaceId);
+      const session = str9(created.sessionId);
       if (!workspace || !session) {
         throw new Error(`conductor: workspace create for ${o.name} returned no workspace or session id`);
       }
-      if (!obj(created.initialMessage)) {
+      if (!obj2(created.initialMessage)) {
         api("POST", `/v0/sessions/${session}/messages`, { message: prompt });
       }
-      const link = str8(created.deepLink);
+      const link = str9(created.deepLink);
       return {
         runner: "conductor",
         id: `${workspace}/${session}`,
@@ -15233,8 +15881,8 @@ function conductorRunner(exec, deps = {}) {
       let line = "";
       try {
         const s = api("GET", `/v0/sessions/${session}/status`);
-        state = str8(s.status) ?? "unknown";
-        const err = str8(s.lastError) ?? str8(s.errorMessage);
+        state = str9(s.status) ?? "unknown";
+        const err = str9(s.lastError) ?? str9(s.errorMessage);
         line = state === "working" ? `conductor session: working (checked ${new Date(now()).toISOString()})` : `conductor session: ${state}${err ? ` — ${err}` : ""}`;
       } catch (e) {
         line = `conductor session: status unread (${e instanceof Error ? e.message : String(e)})`;
@@ -15282,7 +15930,7 @@ var headlessScript = (o, log) => {
     ...o.model ? [`--model ${shq2(o.model)}`] : [],
     ...o.effort ? [`--effort ${shq2(o.effort)}`] : []
   ].join(" ");
-  return `exec ${cmd} > ${shq2(log)} 2>&1`;
+  return `${execLine(cmd)} > ${shq2(log)} 2>&1`;
 };
 var transcriptTail = (log) => {
   const lines = log.trimEnd().split(`
@@ -15346,8 +15994,8 @@ function headlessRunner(deps = {}) {
 // src/runners/managed.ts
 init_src();
 import { readFileSync as readFileSync12 } from "node:fs";
-var obj2 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
-var str9 = (v) => typeof v === "string" && v.length > 0 ? v : null;
+var obj3 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
+var str10 = (v) => typeof v === "string" && v.length > 0 ? v : null;
 var ANTHROPIC_API = "https://api.anthropic.com";
 var MANAGED_BETA = "managed-agents-2026-04-01";
 var DEFAULT_BUDGET_USD = 25;
@@ -15422,7 +16070,7 @@ var lastIdle = (events) => {
   return null;
 };
 var pendingAsks = (events, idle) => {
-  const ids = obj2(idle?.stop_reason)?.event_ids;
+  const ids = obj3(idle?.stop_reason)?.event_ids;
   if (!Array.isArray(ids))
     return [];
   const want = new Set(ids.filter((x) => typeof x === "string"));
@@ -15443,7 +16091,7 @@ var eventMessages = (events) => {
       case "agent.custom_tool_use":
         out.push({
           type: "tool",
-          content: `(${str9(e.name) ?? "tool"}${e.evaluated_permission === "ask" ? " — waiting on a yes" : ""})`
+          content: `(${str10(e.name) ?? "tool"}${e.evaluated_permission === "ask" ? " — waiting on a yes" : ""})`
         });
         break;
       case "session.error":
@@ -15454,9 +16102,9 @@ var eventMessages = (events) => {
   return out;
 };
 var statusLine2 = (session, events, now) => {
-  const status = str9(session.status) ?? "unknown";
-  const spent = usd4(obj2(obj2(session.usage)?.list_cost)?.amount);
-  const cap = usd4(obj2(obj2(session.budget)?.max_list_cost)?.amount);
+  const status = str10(session.status) ?? "unknown";
+  const spent = usd4(obj3(obj3(session.usage)?.list_cost)?.amount);
+  const cap = usd4(obj3(obj3(session.budget)?.max_list_cost)?.amount);
   const money = spent ? ` · ${spent}${cap ? ` of ${cap}` : ""}` : "";
   if (status === "running" || status === "rescheduling") {
     return `managed session: ${status} (checked ${new Date(now).toISOString()})${money}`;
@@ -15464,10 +16112,10 @@ var statusLine2 = (session, events, now) => {
   if (status !== "idle")
     return `managed session: ${status}${money}`;
   const idle = lastIdle(events);
-  const why = str9(obj2(idle?.stop_reason)?.type);
+  const why = str10(obj3(idle?.stop_reason)?.type);
   switch (why) {
     case "requires_action": {
-      const tools = pendingAsks(events, idle).map((e) => str9(e.name) ?? "a tool").join(", ");
+      const tools = pendingAsks(events, idle).map((e) => str10(e.name) ?? "a tool").join(", ");
       return `managed session: idle — waiting on a yes for ${tools || "a tool call"} (answer yes to allow, anything else denies)${money}`;
     }
     case "budget_reached":
@@ -15501,7 +16149,7 @@ function managedRunner(exec, deps = {}) {
     }
     const res = splitCurl(r.stdout);
     if (res.code < 200 || res.code >= 300 || !res.body) {
-      const why = str9(obj2(res.body?.error)?.message) ?? str9(res.body?.message) ?? (res.text.trim().slice(0, 300) || "no body");
+      const why = str10(obj3(res.body?.error)?.message) ?? str10(res.body?.message) ?? (res.text.trim().slice(0, 300) || "no body");
       throw new Error(`managed ${method} ${path}: HTTP ${res.code}: ${why}`);
     }
     return res.body;
@@ -15513,7 +16161,7 @@ function managedRunner(exec, deps = {}) {
       const got = api("GET", `/v1/sessions/${id}/events?limit=1000${page ? `&page=${encodeURIComponent(page)}` : ""}`);
       const data = Array.isArray(got.data) ? got.data : [];
       out.push(...data);
-      page = str9(got.next_page);
+      page = str10(got.next_page);
       if (!page || data.length === 0)
         break;
     }
@@ -15576,7 +16224,7 @@ function managedRunner(exec, deps = {}) {
           }
         ]
       });
-      const id = str9(created.id);
+      const id = str10(created.id);
       if (!id)
         throw new Error(`managed: session create for ${o.name} returned no id`);
       return { runner: "managed", id, cwd: o.repoPath, log: consoleUrl(id) };
@@ -15601,7 +16249,7 @@ ${renderTranscript(eventMessages(all))}`;
       const session = api("GET", `/v1/sessions/${h.id}`);
       const all = session.status === "idle" ? events(h.id) : [];
       const idle = lastIdle(all);
-      const asks = str9(obj2(idle?.stop_reason)?.type) === "requires_action" ? pendingAsks(all, idle) : [];
+      const asks = str10(obj3(idle?.stop_reason)?.type) === "requires_action" ? pendingAsks(all, idle) : [];
       if (asks.length) {
         const allow = YES2.test(text);
         api("POST", `/v1/sessions/${h.id}/events`, {
@@ -15650,156 +16298,6 @@ ${renderTranscript(eventMessages(all))}`;
   };
 }
 
-// src/runners/orca.ts
-import { writeFileSync as writeFileSync12 } from "node:fs";
-var obj3 = (v) => v !== null && typeof v === "object" && !Array.isArray(v) ? v : null;
-var str10 = (v) => typeof v === "string" && v.length > 0 ? v : null;
-var parseOrcaJson = (stdout) => {
-  try {
-    return obj3(JSON.parse(stdout));
-  } catch {
-    return null;
-  }
-};
-var orcaError = (env) => {
-  if (!env || env.ok !== false)
-    return null;
-  const e = obj3(env.error);
-  const message = str10(e?.message) ?? "Orca refused the call";
-  const code = str10(e?.code);
-  return code ? `${message} (${code})` : message;
-};
-var parseOrcaWorktree = (env) => {
-  const result = obj3(env.result) ?? {};
-  return str10(obj3(result.worktree)?.path) ?? str10(result.worktreePath) ?? str10(result.path);
-};
-var parseOrcaBranch = (env) => {
-  const wt = obj3(obj3(env.result)?.worktree);
-  const branch = str10(wt?.branch)?.replace(/^refs\/heads\//, "");
-  const head = str10(wt?.head);
-  return branch && head ? { branch, head } : null;
-};
-var parseOrcaTerminal = (env) => {
-  const result = obj3(env.result) ?? {};
-  return str10(obj3(result.terminal)?.handle) ?? str10(result.handle) ?? str10(result.terminalHandle) ?? null;
-};
-var orcaLauncher = (o) => `#!/bin/sh
-# sleds engine: ${o.name}
-exec ${agentShellCommand(o)}
-`;
-var orcaCommand = (launcher) => `sh ${shq2(launcher)}; exit`;
-var GONE = /exit|clos|gone|dead|stopp|kill/i;
-var orcaTerminalLive = (status, stdout) => {
-  const env = parseOrcaJson(stdout);
-  if (str10(obj3(env?.error)?.code) === "runtime_unavailable")
-    return true;
-  if (status !== 0 || !env || env.ok === false)
-    return false;
-  const t = obj3(obj3(env.result)?.terminal) ?? obj3(env.result) ?? {};
-  if (typeof t.status === "string" && GONE.test(t.status))
-    return false;
-  if (t.exited === true || t.alive === false)
-    return false;
-  if (typeof t.exitCode === "number")
-    return false;
-  if (obj3(t.exitCause))
-    return false;
-  if (t.orphaned === true && t.writable === false)
-    return false;
-  return true;
-};
-var launcherPath2 = (promptFile) => `${promptFile.replace(/\.md$/, "")}.orca.sh`;
-function orcaRunner(exec, deps = {}) {
-  const writeFile = deps.writeFile ?? ((p, t) => writeFileSync12(p, t, { mode: 384 }));
-  const orca = (args, what) => {
-    const r = exec("orca", args);
-    const env = parseOrcaJson(r.stdout);
-    const refused = orcaError(env);
-    if (refused)
-      throw new Error(`${what}: ${refused}`);
-    if (r.status !== 0 || !env) {
-      throw new Error(`${what} failed: ${r.stderr.trim() || r.stdout.trim() || `exit ${r.status}`}`);
-    }
-    return env;
-  };
-  return {
-    name: "orca",
-    makesWorktree: true,
-    readsSession: true,
-    start(o) {
-      const created = orca([
-        "worktree",
-        "create",
-        "--repo",
-        `path:${o.repoPath}`,
-        "--name",
-        o.name,
-        "--base-branch",
-        `origin/${o.base ?? "main"}`,
-        "--no-parent",
-        "--json"
-      ], `orca worktree create ${o.name}`);
-      const cwd = parseOrcaWorktree(created);
-      if (!cwd) {
-        throw new Error(`orca worktree create ${o.name} returned no worktree path; the agent was not started`);
-      }
-      const launcher = launcherPath2(o.promptFile);
-      writeFile(launcher, orcaLauncher(o));
-      const shown = orca([
-        "terminal",
-        "create",
-        "--worktree",
-        `path:${cwd}`,
-        "--title",
-        o.name,
-        "--command",
-        orcaCommand(launcher),
-        "--json"
-      ], `orca terminal create ${o.name} (worktree ${cwd})`);
-      const terminal = parseOrcaTerminal(shown);
-      if (!terminal) {
-        throw new Error(`orca terminal create ${o.name} started in ${cwd} but returned no terminal handle`);
-      }
-      const own = parseOrcaBranch(created);
-      const h = { runner: "orca", id: terminal, cwd, ...own ? { own } : {} };
-      return h;
-    },
-    status(h) {
-      const r = exec("orca", ["terminal", "show", "--terminal", h.id, "--json"]);
-      return orcaTerminalLive(r.status, r.stdout) ? "running" : "exited";
-    },
-    read(h) {
-      const r = exec("orca", ["terminal", "read", "--terminal", h.id, "--limit", "200"]);
-      return r.status === 0 ? r.stdout : "";
-    },
-    send(h, text) {
-      const r = exec("orca", ["terminal", "send", "--terminal", h.id, "--text", text, "--enter"]);
-      if (r.status !== 0) {
-        throw new Error(`orca terminal send ${h.id} failed: ${r.stderr.trim() || `exit ${r.status}`}`);
-      }
-    },
-    stop(h) {
-      exec("orca", ["terminal", "close", "--terminal", h.id]);
-    },
-    watchHint(h) {
-      return `orca terminal show --terminal ${h.id}`;
-    },
-    removeWorktree(h, repoPath) {
-      orca(["worktree", "rm", "--worktree", `path:${h.cwd}`, "--json"], `orca worktree rm ${h.cwd}`);
-      if (!h.own)
-        return;
-      const ref = `refs/heads/${h.own.branch}`;
-      const r = exec("git", ["-C", repoPath, "update-ref", "-d", ref, h.own.head]);
-      if (r.status === 0)
-        return;
-      const still = exec("git", ["-C", repoPath, "rev-parse", "--verify", "--quiet", ref]);
-      if (still.status !== 0)
-        return;
-      return `kept Orca's branch ${h.own.branch}: ${r.stderr.trim() || `exit ${r.status}`}`;
-    }
-  };
-}
-
 // src/runners/tmux.ts
 var tmuxSession = (name) => `=${name}`;
 var tmuxPane = (name) => `=${name}:`;
@@ -16160,7 +16658,7 @@ function flagsFromProfile(flags, given, profile, home) {
     }
   }
   if (profile.reposDir && !has("repos-dir") && !has("repo")) {
-    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join15(home, d.slice(1)) : d).join(":");
+    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join16(home, d.slice(1)) : d).join(":");
     used.push(`repos ${profile.reposDir}`);
   }
   if (profile.mcpStrict !== undefined && !has("strict-mcp") && !has("no-strict-mcp")) {
@@ -16290,12 +16788,12 @@ function memberMcpConfigs(o, cwd) {
   });
   const claudeDir = (o.env ?? process.env).CLAUDE_CONFIG_DIR;
   return [
-    read(claudeDir ? join15(claudeDir, ".claude.json") : join15(o.home, ".claude.json")),
-    ...cwd ? [read(join15(cwd, ".mcp.json"))] : []
+    read(claudeDir ? join16(claudeDir, ".claude.json") : join16(o.home, ".claude.json")),
+    ...cwd ? [read(join16(cwd, ".mcp.json"))] : []
   ];
 }
 function engineStateDir(o, org, seat) {
-  return seatStateDir(orgStateDir(o.stateDir ?? join15(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
+  return seatStateDir(orgStateDir(o.stateDir ?? join16(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
 }
 function engineSeat(o, org) {
   try {
@@ -16322,11 +16820,11 @@ function engineDeps(o, flags, source, runner, stateName) {
   const stateDir = engineStateDir(o, flags.org, flags.seat);
   const file = statePath(stateDir, stateName);
   const mcpOrg = flags.org && engineOrg(o, flags.org).seated ? flags.org : undefined;
-  const repo = flags.repo ? resolve7(cwd, flags.repo) : undefined;
-  const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve7(cwd, d));
+  const repo = flags.repo ? resolve8(cwd, flags.repo) : undefined;
+  const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve8(cwd, d));
   const { branch, prTitle } = flags;
-  const hooksDir = join15(stateDir, "hooks");
-  const permissionMark = (name) => join15(hooksDir, `${name}.permission.json`);
+  const hooksDir = join16(stateDir, "hooks");
+  const permissionMark = (name) => join16(hooksDir, `${name}.permission.json`);
   const withHook = (name, settings) => applyPermissionHook(settings, [...o.sledsArgv ?? ["sleds"], "permission-event", "--mark", permissionMark(name)].map(shq2).join(" "));
   return {
     source,
@@ -16349,15 +16847,18 @@ function engineDeps(o, flags, source, runner, stateName) {
     ...flags.strictMcp ? { strictMcp: true } : {},
     ...flags.sandbox ? {
       sandbox: true,
-      writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd) => {
+      writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd, allow) => {
         const gitCommonDir = gitCommonDirOf(exec, cwd);
-        const dir = join15(stateDir, "sandbox");
+        const dir = join16(stateDir, "sandbox");
         mkdirSync12(dir, { recursive: true, mode: 448 });
-        const p = join15(dir, `${name}.json`);
+        const p = join16(dir, `${name}.json`);
         const walls = engineSandboxSettings(o.home, o.env ?? process.env, gitCommonDir, [
           ...SANDBOX_DEFAULT_ALLOW,
           ...flags.sandboxAllow ?? []
         ]);
+        walls.permissions.allow = [
+          ...new Set([...walls.permissions.allow, ...allow ?? []])
+        ];
         const settings = withHook(name, { ...walls });
         writeFileSync13(p, `${JSON.stringify(settings, null, 2)}
 `, { mode: 384 });
@@ -16365,10 +16866,11 @@ function engineDeps(o, flags, source, runner, stateName) {
         return { settingsFile: p, gitCommonDir };
       })
     } : {},
-    writeHookSettings: (name) => {
+    writeHookSettings: (name, allow) => {
       mkdirSync12(hooksDir, { recursive: true, mode: 448 });
-      const p = join15(hooksDir, `${name}.json`);
-      writeFileSync13(p, `${JSON.stringify(withHook(name, {}), null, 2)}
+      const p = join16(hooksDir, `${name}.json`);
+      const base = allow?.length ? { permissions: { allow: [...allow] } } : {};
+      writeFileSync13(p, `${JSON.stringify(withHook(name, base), null, 2)}
 `, { mode: 384 });
       chmodSync4(p, 384);
       return p;
@@ -16394,9 +16896,9 @@ function engineDeps(o, flags, source, runner, stateName) {
       exists
     }),
     writeMcpConfig: o.writeMcpConfig ?? ((name, runToken, worktree) => {
-      const dir = join15(stateDir, "mcp");
+      const dir = join16(stateDir, "mcp");
       mkdirSync12(dir, { recursive: true, mode: 448 });
-      const p = join15(dir, `${name}.json`);
+      const p = join16(dir, `${name}.json`);
       let others = {};
       if (flags.strictMcp && flags.mcpAllow?.length) {
         const r = mcpPassThrough(flags.mcpAllow, memberMcpConfigs(o, worktree));
@@ -16412,9 +16914,9 @@ function engineDeps(o, flags, source, runner, stateName) {
     }),
     removeMcpConfig: o.removeMcpConfig ?? ((p) => rmSync4(p, { force: true })),
     writePrompt: o.writePrompt ?? ((name, text) => {
-      const dir = join15(stateDir, "prompts");
+      const dir = join16(stateDir, "prompts");
       mkdirSync12(dir, { recursive: true, mode: 448 });
-      const p = join15(dir, `${name}.md`);
+      const p = join16(dir, `${name}.md`);
       writeFileSync13(p, text, { mode: 384 });
       return p;
     }),
@@ -16441,8 +16943,8 @@ function engineDeps(o, flags, source, runner, stateName) {
 }
 function sandboxDenyRead(home, env) {
   return {
-    dirs: [...new Set([configDir(home, env), join15(home, ".config", "sleds")])],
-    files: [...new Set([tokenPath(home, env), join15(home, ".sleds-token")])]
+    dirs: [...new Set([configDir(home, env), join16(home, ".config", "sleds")])],
+    files: [...new Set([tokenPath(home, env), join16(home, ".sleds-token")])]
   };
 }
 function engineSandboxSettings(home, env, gitCommonDir, allow) {
@@ -16457,7 +16959,7 @@ function gitCommonDirOf(exec, cwd) {
   const dir = r.status === 0 ? r.stdout.trim() : "";
   if (!dir)
     throw new Error(`git has no common dir for ${cwd}, so the sandbox has nowhere to commit`);
-  return resolve7(cwd, dir);
+  return resolve8(cwd, dir);
 }
 function pinOrg2(configJson, org) {
   if (!org)
@@ -16499,13 +17001,14 @@ async function driveEngine(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.43"
+    cliVersion: "0.1.45"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
     try {
       writeLock(lockFile, checkedAt === undefined ? lock : {
         ...lock,
+        runner: deps.runner.name,
         atOnce: deps.atOnce,
         checkedAt,
         nextCheckAt: checkedAt + flags.interval * 1000,
@@ -16811,7 +17314,7 @@ async function enginePauseCmd(o) {
 // src/commands/engineInstall.ts
 init_config();
 import {
-  existsSync as existsSync14,
+  existsSync as existsSync15,
   mkdirSync as mkdirSync14,
   readFileSync as readFileSync14,
   readdirSync as readdirSync2,
@@ -16820,13 +17323,13 @@ import {
   writeFileSync as writeFileSync15
 } from "node:fs";
 import { hostname as hostname3 } from "node:os";
-import { basename as basename4, dirname as dirname12, isAbsolute as isAbsolute2, join as join18 } from "node:path";
+import { basename as basename4, dirname as dirname12, isAbsolute as isAbsolute2, join as join19 } from "node:path";
 init_state();
 
 // src/schedule.ts
 import { spawnSync as spawnSync4 } from "node:child_process";
-import { existsSync as existsSync13, mkdirSync as mkdirSync13, rmSync as rmSync5, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join16 } from "node:path";
+import { existsSync as existsSync14, mkdirSync as mkdirSync13, rmSync as rmSync5, writeFileSync as writeFileSync14 } from "node:fs";
+import { join as join17 } from "node:path";
 var REVERT_LABEL = "ai.sleds.revert";
 var defaultExec2 = (cmd, args) => {
   const r = spawnSync4(cmd, [...args], { stdio: ["ignore", "ignore", "pipe"], encoding: "utf8" });
@@ -16834,7 +17337,7 @@ var defaultExec2 = (cmd, args) => {
     return { ok: false, stderr: r.error.message };
   return { ok: r.status === 0, stderr: r.stderr ?? "" };
 };
-var plistPath = (home) => join16(home, "Library", "LaunchAgents", `${REVERT_LABEL}.plist`);
+var plistPath = (home) => join17(home, "Library", "LaunchAgents", `${REVERT_LABEL}.plist`);
 var xmlEscape2 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 var buildLaunchdPlist = (sledsArgv, deadline) => {
   const args = [...sledsArgv, "off"].map((a) => `    <string>${xmlEscape2(a)}</string>`).join(`
@@ -16873,7 +17376,7 @@ var scheduleRevert = (d, deadlineMs) => {
   if (d.platform === "darwin") {
     const p = plistPath(d.home);
     try {
-      mkdirSync13(join16(d.home, "Library", "LaunchAgents"), { recursive: true });
+      mkdirSync13(join17(d.home, "Library", "LaunchAgents"), { recursive: true });
       d.exec("launchctl", ["unload", p]);
       writeFileSync14(p, buildLaunchdPlist(d.sledsArgv, deadline));
       const r = d.exec("launchctl", ["load", p]);
@@ -16902,7 +17405,7 @@ var scheduleRevert = (d, deadlineMs) => {
 var cancelRevert = (d, kind) => {
   if (kind === "launchd" || d.platform === "darwin") {
     const p = plistPath(d.home);
-    if (existsSync13(p)) {
+    if (existsSync14(p)) {
       d.exec("launchctl", ["unload", p]);
       rmSync5(p, { force: true });
     }
@@ -16913,16 +17416,16 @@ var cancelRevert = (d, kind) => {
 };
 
 // src/commands/engineSystemd.ts
-import { join as join17 } from "node:path";
+import { join as join18 } from "node:path";
 var BOX_ENV_UNIT_PATH = "%h/.config/sleds/box.env";
 function boxEnvPath(home) {
-  return join17(home, ".config", "sleds", "box.env");
+  return join18(home, ".config", "sleds", "box.env");
 }
 function engineUnitDir(home) {
-  return join17(home, ".config", "systemd", "user");
+  return join18(home, ".config", "systemd", "user");
 }
 function engineUnitPath(home, label) {
-  return join17(engineUnitDir(home), `${label}.service`);
+  return join18(engineUnitDir(home), `${label}.service`);
 }
 function systemdQuote(s) {
   const body = s.replace(/\\/g, "\\\\").replace(/"/g, "\\\"").replace(/\n/g, "\\n").replace(/%/g, "%%").replace(/\$/g, "$$$$");
@@ -16980,13 +17483,13 @@ function engineLabel(name, org, seat) {
   return [ENGINE_LABEL, org, seat?.trim(), name].filter((p) => Boolean(p)).map((p, i) => i === 0 ? p : engineSlug(p)).join(".");
 }
 function enginePlistPath(home, name, org, seat) {
-  return join18(home, "Library", "LaunchAgents", `${engineLabel(name, org, seat)}.plist`);
+  return join19(home, "Library", "LaunchAgents", `${engineLabel(name, org, seat)}.plist`);
 }
 function engineLogPath(stateDir, name) {
-  return join18(stateDir, `${engineSlug(name)}.log`);
+  return join19(stateDir, `${engineSlug(name)}.log`);
 }
 function engineEventsPath(stateDir, name) {
-  return join18(stateDir, `${engineSlug(name)}.events.jsonl`);
+  return join19(stateDir, `${engineSlug(name)}.events.jsonl`);
 }
 var xmlEscape3 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 function buildEnginePlist(o) {
@@ -17062,7 +17565,13 @@ function parseEnginePlist(text) {
   if (!label || array === undefined)
     return null;
   const programArgs = [...array.matchAll(/<string>([^<]*)<\/string>/g)].map((m) => xmlUnescape(m[1] ?? ""));
-  return { label: xmlUnescape(label), programArgs };
+  const envDict = /<key>EnvironmentVariables<\/key>\s*<dict>([\s\S]*?)<\/dict>/.exec(text)?.[1];
+  const path = envDict && /<key>PATH<\/key>\s*<string>([^<]*)<\/string>/.exec(envDict)?.[1];
+  return {
+    label: xmlUnescape(label),
+    programArgs,
+    ...typeof path === "string" ? { path: xmlUnescape(path) } : {}
+  };
 }
 function engineArg(programArgs, flag) {
   const at = programArgs.indexOf(`--${flag}`);
@@ -17077,7 +17586,7 @@ function readEngines(dir, suffix, manager, parse) {
   }
   const out = [];
   for (const name of names.filter((n) => n.startsWith(`${ENGINE_LABEL}.`) && n.endsWith(suffix))) {
-    const path = join18(dir, name);
+    const path = join19(dir, name);
     let parsed;
     try {
       parsed = parse(readFileSync14(path, "utf8"), name);
@@ -17097,7 +17606,7 @@ function readEngines(dir, suffix, manager, parse) {
 }
 function installedEngines(home) {
   return [
-    ...readEngines(join18(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist),
+    ...readEngines(join19(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist),
     ...readEngines(engineUnitDir(home), ".service", "systemd", (text, file) => {
       const parsed = parseEngineUnit(text);
       return parsed && { label: basename4(file, ".service"), ...parsed };
@@ -17148,7 +17657,7 @@ function engineInstall(o) {
     return installUnit({ o, parsed, label, sledsArgv, env: agentEnv, logPath, exec });
   const plist = enginePlistPath(o.home, parsed.name, parsed.org, seat);
   mkdirSync14(dirname12(plist), { recursive: true });
-  if (existsSync14(plist))
+  if (existsSync15(plist))
     exec("launchctl", ["unload", plist]);
   for (const other of installedEngines(o.home)) {
     if (other.manager !== "launchd" || other.plist === plist || other.org !== parsed.org)
@@ -17160,7 +17669,7 @@ function engineInstall(o) {
     log(`replaced ${other.label}, this engine as installed before`);
   }
   const legacy = enginePlistPath(o.home, parsed.name);
-  if (parsed.org && existsSync14(legacy)) {
+  if (parsed.org && existsSync15(legacy)) {
     const cfg = readConfig(o.home);
     if (org.sole || parsed.org === (cfg.activeOrg ?? cfg.org?.slug)) {
       exec("launchctl", ["unload", legacy]);
@@ -17190,7 +17699,7 @@ function installUnit(a) {
   const unitName = basename4(unit);
   const systemctl = (...args) => exec("systemctl", ["--user", ...args]);
   mkdirSync14(dirname12(unit), { recursive: true });
-  if (existsSync14(unit))
+  if (existsSync15(unit))
     systemctl("stop", unitName);
   for (const other of installedEngines(o.home)) {
     if (other.manager !== "systemd" || other.plist === unit || other.org !== parsed.org)
@@ -17248,7 +17757,7 @@ function engineUninstall(o) {
     ...installed.filter((e) => e.manager === manager).map((e) => e.plist),
     ...args.org ? [] : [pathOf(manager)]
   ]);
-  const file = candidates.find((p) => existsSync14(p));
+  const file = candidates.find((p) => existsSync15(p));
   if (!file) {
     log(`engine:${name} was not installed (no ${candidates[0]}).`);
     return 0;
@@ -17267,20 +17776,20 @@ function engineUninstall(o) {
 }
 
 // src/commands/musher.ts
-import { existsSync as existsSync15, mkdirSync as mkdirSync15, readFileSync as readFileSync15, rmSync as rmSync7, writeFileSync as writeFileSync16 } from "node:fs";
+import { existsSync as existsSync16, mkdirSync as mkdirSync15, readFileSync as readFileSync15, rmSync as rmSync7, writeFileSync as writeFileSync16 } from "node:fs";
 init_config();
 init_meter();
 var defaultWhich = (cmd) => {
   const path = process.env.PATH ?? "";
   for (const dir of path.split(":").filter(Boolean)) {
     const p = `${dir}/${cmd}`;
-    if (existsSync15(p))
+    if (existsSync16(p))
       return p;
   }
   return null;
 };
 var findClaude = (home, configured, which) => {
-  if (configured && existsSync15(configured))
+  if (configured && existsSync16(configured))
     return configured;
   const found = which("claude");
   if (found)
@@ -17291,13 +17800,13 @@ var findClaude = (home, configured, which) => {
     "/usr/local/bin/claude",
     `${home}/.npm-global/bin/claude`
   ])
-    if (existsSync15(p))
+    if (existsSync16(p))
       return p;
   return null;
 };
 var musherAgentState = (home, env = process.env) => {
   const plist = musherPlistPath(home, env);
-  if (!existsSync15(plist))
+  if (!existsSync16(plist))
     return { installed: false, thisSeat: false };
   try {
     const text = readFileSync15(plist, "utf8");
@@ -17394,7 +17903,7 @@ function formatDoctor(checks) {
 }
 function defaultWhich2(cmd) {
   try {
-    return execFileSync3("which", ["-a", cmd], {
+    return execFileSync4("which", ["-a", cmd], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     }).split(`
@@ -17413,7 +17922,7 @@ async function runDoctor(o) {
   ].filter(Boolean);
   const cfgDir = configDir(home, env);
   const cfg = readConfig(home);
-  const cfgExists = existsSync16(configPath(home));
+  const cfgExists = existsSync17(configPath(home));
   if (!cfgExists) {
     checks.push({
       level: "fail",
@@ -17429,7 +17938,7 @@ async function runDoctor(o) {
     });
   }
   const sPath = settingsPath(home);
-  const settings = existsSync16(sPath) ? readSettings(home) : null;
+  const settings = existsSync17(sPath) ? readSettings(home) : null;
   const pointed = settings ? readProxy(settings) : null;
   if (!settings) {
     checks.push({
@@ -17476,7 +17985,7 @@ async function runDoctor(o) {
       detail: `seat-event ${seat ? "on" : "missing"} · spec-event ${spec ? "on" : "missing"} · session-event ${session ? "on" : "missing"} · stop-event ${stop ? "on" : "missing"}`,
       fix: all ? undefined : "sleds hooks"
     });
-    const want = env.SLEDS_HOME?.trim() ? resolve8(home, env.SLEDS_HOME.trim()) : undefined;
+    const want = env.SLEDS_HOME?.trim() ? resolve9(home, env.SLEDS_HOME.trim()) : undefined;
     const cmds = sledsCommandsIn(settings);
     const wrong = cmds.filter((c) => {
       const got = bakedHome(c);
@@ -17514,7 +18023,7 @@ async function runDoctor(o) {
         fix: other.length + unpinned.length === 0 ? undefined : `${[...overrides, `SLEDS_ORG=${wantOrg}`].join(" ")} sleds hooks   (pins the status line + hooks to ${wantOrg}; use the org this Claude config is for)`
       });
     }
-    const skill = existsSync16(skillPath(home));
+    const skill = existsSync17(skillPath(home));
     checks.push({
       level: skill ? "ok" : "warn",
       name: "skill",
@@ -17548,7 +18057,7 @@ async function runDoctor(o) {
   const which = (o.which ?? defaultWhich2)("sleds");
   const stale = which.filter((p) => {
     try {
-      const target = lstatSync(p).isSymbolicLink() ? readlinkSync(p) : p;
+      const target = lstatSync2(p).isSymbolicLink() ? readlinkSync2(p) : p;
       return /\/src\/index\.ts$/.test(target) || /\.bun\/bin\/sleds$/.test(p);
     } catch {
       return false;
@@ -17683,7 +18192,7 @@ function sandboxChecks(o, env) {
         fix: "npm install -g @anthropic-ai/claude-code"
       }
     ];
-  if (!existsSync16(dir))
+  if (!existsSync17(dir))
     return [
       {
         level: "warn",
@@ -17693,12 +18202,12 @@ function sandboxChecks(o, env) {
       }
     ];
   const nonce = o.nonce ?? `sleds-probe-${randomBytes(16).toString("hex")}`;
-  const probe = join19(dir, SANDBOX_PROBE);
-  const work = mkdtempSync(join19(tmpdir(), "sleds-sandbox-"));
+  const probe = join20(dir, SANDBOX_PROBE);
+  const work = mkdtempSync(join20(tmpdir(), "sleds-sandbox-"));
   try {
     writeFileSync17(probe, `${nonce}
 `, { mode: 384 });
-    const settingsFile = join19(work, "settings.json");
+    const settingsFile = join20(work, "settings.json");
     const settings = sandboxSettings({
       denyRead: [dir],
       gitCommonDir: work,
@@ -17734,7 +18243,7 @@ function engineChecks(o, env) {
   const checks = [];
   const which = (c) => (o.which ?? defaultWhich2)(c)[0] ?? null;
   const exec = o.exec ?? defaultExec3;
-  const exists = o.exists ?? existsSync16;
+  const exists = o.exists ?? existsSync17;
   const platform = o.platform ?? process.platform;
   const mac = platform === "darwin";
   const linux = platform === "linux";
@@ -17776,6 +18285,11 @@ function engineChecks(o, env) {
       fix: mac ? "brew install tmux" : "install tmux with your package manager"
     });
   }
+  if (runner === "orca") {
+    const path = engines.find((e) => engineArg(e.programArgs, "runner") === "orca")?.path ?? env.PATH ?? "";
+    const p = orcaPreflight(exec, path, o.orcaFs);
+    checks.push(p.ok ? { level: "ok", name: "orca", detail: `${p.version} · the engine's runner` } : { level: need, name: "orca", detail: p.why, fix: p.fix });
+  }
   if (linux)
     checks.push(...boxChecks(o, env, which, need));
   if (!manager)
@@ -17865,7 +18379,7 @@ function boxChecks(o, env, which, need) {
 }
 function cmuxCheck(o, env) {
   const exec = o.exec ?? defaultExec3;
-  const bin = resolveCmuxBin(o.exists ?? existsSync16, env.PATH ?? "");
+  const bin = resolveCmuxBin(o.exists ?? existsSync17, env.PATH ?? "");
   const pw = readCmuxPassword(exec);
   const ping = pw ? exec(bin, ["ping"], { env: { CMUX_SOCKET_PASSWORD: pw } }) : exec(bin, ["ping"]);
   if (ping.status === 127)
@@ -17926,7 +18440,7 @@ function parsePmset(text) {
 }
 var defaultPmset = () => {
   try {
-    return parsePmset(execFileSync3("pmset", ["-g", "custom"], { encoding: "utf8", timeout: 2000 }));
+    return parsePmset(execFileSync4("pmset", ["-g", "custom"], { encoding: "utf8", timeout: 2000 }));
   } catch {
     return null;
   }
@@ -17956,7 +18470,7 @@ import {
   writeFileSync as writeFileSync18
 } from "node:fs";
 import { hostname as hostname4 } from "node:os";
-import { join as join20, resolve as resolve9 } from "node:path";
+import { join as join21, resolve as resolve10 } from "node:path";
 init_machine();
 init_state();
 init_meter();
@@ -18211,7 +18725,7 @@ function flagsFromProfile2(flags, given, profile, home) {
     }
   }
   if (profile.reposDir && !has("repos-dir") && !has("repo")) {
-    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join20(home, d.slice(1)) : d).join(":");
+    out.reposDir = splitReposDirs(profile.reposDir).map((d) => home && /^~(\/|$)/.test(d) ? join21(home, d.slice(1)) : d).join(":");
     used.push(`repos ${profile.reposDir}`);
   }
   if (profile.mcpStrict !== undefined && !has("strict-mcp") && !has("no-strict-mcp")) {
@@ -18301,6 +18815,29 @@ async function rereadAtOnce2(read, flags, given) {
   const profile = await read();
   return profile ? profile.atOnce ?? 1 : null;
 }
+async function rereadRunner2(read, flags, given, home) {
+  if (given.includes("runner"))
+    return null;
+  const profile = await read();
+  if (!profile)
+    return null;
+  const base = {
+    ...flags,
+    runner: "tmux",
+    runnerCmd: given.includes("runner-cmd") ? flags.runnerCmd : undefined
+  };
+  const r = flagsFromProfile2(base, given, profile, home);
+  const skipped = r.skipped.find((s) => s.startsWith("runner"));
+  if (skipped)
+    return { refused: `skipped from your engine profile: ${skipped} — fix it in Settings` };
+  const refusal = sandboxRefusal({ sandbox: flags.sandbox, runner: r.flags.runner });
+  if (refusal)
+    return { refused: `runner ${r.flags.runner} not taken — ${refusal}` };
+  return {
+    runner: r.flags.runner,
+    ...r.flags.runner === "command" && r.flags.runnerCmd ? { runnerCmd: r.flags.runnerCmd } : {}
+  };
+}
 var PROFILE_RETRY_MS2 = [2000, 5000];
 async function withProfile2(client, flags, given, home, retry) {
   let profile = await readProfile(client);
@@ -18379,12 +18916,12 @@ function memberMcpConfigs2(o, cwd) {
   });
   const claudeDir = (o.env ?? process.env).CLAUDE_CONFIG_DIR;
   return [
-    read(claudeDir ? join20(claudeDir, ".claude.json") : join20(o.home, ".claude.json")),
-    ...cwd ? [read(join20(cwd, ".mcp.json"))] : []
+    read(claudeDir ? join21(claudeDir, ".claude.json") : join21(o.home, ".claude.json")),
+    ...cwd ? [read(join21(cwd, ".mcp.json"))] : []
   ];
 }
 function engineStateDir2(o, org, seat) {
-  return seatStateDir(orgStateDir(o.stateDir ?? join20(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
+  return seatStateDir(orgStateDir(o.stateDir ?? join21(configDir(o.home, o.env ?? process.env), "engine"), org), seat);
 }
 function engineSeat2(o, org) {
   try {
@@ -18411,11 +18948,11 @@ function engineDeps2(o, flags, source, runner, stateName) {
   const stateDir = engineStateDir2(o, flags.org, flags.seat);
   const file = statePath(stateDir, stateName);
   const mcpOrg = flags.org && engineOrg2(o, flags.org).seated ? flags.org : undefined;
-  const repo = flags.repo ? resolve9(cwd, flags.repo) : undefined;
-  const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve9(cwd, d));
+  const repo = flags.repo ? resolve10(cwd, flags.repo) : undefined;
+  const reposDirs = splitReposDirs(flags.reposDir).map((d) => resolve10(cwd, d));
   const { branch, prTitle } = flags;
-  const hooksDir = join20(stateDir, "hooks");
-  const permissionMark = (name) => join20(hooksDir, `${name}.permission.json`);
+  const hooksDir = join21(stateDir, "hooks");
+  const permissionMark = (name) => join21(hooksDir, `${name}.permission.json`);
   const withHook = (name, settings) => applyPermissionHook(settings, [...o.sledsArgv ?? ["sleds"], "permission-event", "--mark", permissionMark(name)].map(shq2).join(" "));
   return {
     source,
@@ -18438,15 +18975,18 @@ function engineDeps2(o, flags, source, runner, stateName) {
     ...flags.strictMcp ? { strictMcp: true } : {},
     ...flags.sandbox ? {
       sandbox: true,
-      writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd) => {
+      writeSandboxSettings: o.writeSandboxSettings ?? ((name, cwd, allow) => {
         const gitCommonDir = gitCommonDirOf2(exec, cwd);
-        const dir = join20(stateDir, "sandbox");
+        const dir = join21(stateDir, "sandbox");
         mkdirSync16(dir, { recursive: true, mode: 448 });
-        const p = join20(dir, `${name}.json`);
+        const p = join21(dir, `${name}.json`);
         const walls = engineSandboxSettings2(o.home, o.env ?? process.env, gitCommonDir, [
           ...SANDBOX_DEFAULT_ALLOW,
           ...flags.sandboxAllow ?? []
         ]);
+        walls.permissions.allow = [
+          ...new Set([...walls.permissions.allow, ...allow ?? []])
+        ];
         const settings = withHook(name, { ...walls });
         writeFileSync18(p, `${JSON.stringify(settings, null, 2)}
 `, { mode: 384 });
@@ -18454,10 +18994,11 @@ function engineDeps2(o, flags, source, runner, stateName) {
         return { settingsFile: p, gitCommonDir };
       })
     } : {},
-    writeHookSettings: (name) => {
+    writeHookSettings: (name, allow) => {
       mkdirSync16(hooksDir, { recursive: true, mode: 448 });
-      const p = join20(hooksDir, `${name}.json`);
-      writeFileSync18(p, `${JSON.stringify(withHook(name, {}), null, 2)}
+      const p = join21(hooksDir, `${name}.json`);
+      const base = allow?.length ? { permissions: { allow: [...allow] } } : {};
+      writeFileSync18(p, `${JSON.stringify(withHook(name, base), null, 2)}
 `, { mode: 384 });
       chmodSync5(p, 384);
       return p;
@@ -18483,9 +19024,9 @@ function engineDeps2(o, flags, source, runner, stateName) {
       exists
     }),
     writeMcpConfig: o.writeMcpConfig ?? ((name, runToken, worktree) => {
-      const dir = join20(stateDir, "mcp");
+      const dir = join21(stateDir, "mcp");
       mkdirSync16(dir, { recursive: true, mode: 448 });
-      const p = join20(dir, `${name}.json`);
+      const p = join21(dir, `${name}.json`);
       let others = {};
       if (flags.strictMcp && flags.mcpAllow?.length) {
         const r = mcpPassThrough(flags.mcpAllow, memberMcpConfigs2(o, worktree));
@@ -18501,9 +19042,9 @@ function engineDeps2(o, flags, source, runner, stateName) {
     }),
     removeMcpConfig: o.removeMcpConfig ?? ((p) => rmSync9(p, { force: true })),
     writePrompt: o.writePrompt ?? ((name, text) => {
-      const dir = join20(stateDir, "prompts");
+      const dir = join21(stateDir, "prompts");
       mkdirSync16(dir, { recursive: true, mode: 448 });
-      const p = join20(dir, `${name}.md`);
+      const p = join21(dir, `${name}.md`);
       writeFileSync18(p, text, { mode: 384 });
       return p;
     }),
@@ -18530,8 +19071,8 @@ function engineDeps2(o, flags, source, runner, stateName) {
 }
 function sandboxDenyRead2(home, env) {
   return {
-    dirs: [...new Set([configDir(home, env), join20(home, ".config", "sleds")])],
-    files: [...new Set([tokenPath(home, env), join20(home, ".sleds-token")])]
+    dirs: [...new Set([configDir(home, env), join21(home, ".config", "sleds")])],
+    files: [...new Set([tokenPath(home, env), join21(home, ".sleds-token")])]
   };
 }
 function engineSandboxSettings2(home, env, gitCommonDir, allow) {
@@ -18546,7 +19087,7 @@ function gitCommonDirOf2(exec, cwd) {
   const dir = r.status === 0 ? r.stdout.trim() : "";
   if (!dir)
     throw new Error(`git has no common dir for ${cwd}, so the sandbox has nowhere to commit`);
-  return resolve9(cwd, dir);
+  return resolve10(cwd, dir);
 }
 function sandboxRefusal(flags) {
   if (!flags.sandbox)
@@ -18597,13 +19138,14 @@ async function driveEngine2(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.43"
+    cliVersion: "0.1.45"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
     try {
       writeLock(lockFile, checkedAt === undefined ? lock : {
         ...lock,
+        runner: deps.runner.name,
         atOnce: deps.atOnce,
         checkedAt,
         nextCheckAt: checkedAt + flags.interval * 1000,
@@ -18876,7 +19418,7 @@ var engineCmd = async (o) => {
       armedOnly: true,
       engine: `engine:${flags.name}`,
       ...parsed.given.includes("at-once") ? { atOnce: flags.atOnce } : {},
-      runner: runner.name,
+      runner: () => deps.runner.name,
       leaseMin: flags.lease,
       log
     });
@@ -18894,6 +19436,21 @@ var engineCmd = async (o) => {
     const started = flags;
     deps.rereadRoles = (read) => rereadRoles(read, started, parsed.given);
     deps.rereadAtOnce = (read) => rereadAtOnce2(read, started, parsed.given);
+    let current = { runner, cmd: flags.runner === "command" ? flags.runnerCmd : undefined };
+    deps.rereadRunner = async (read) => {
+      const next = await rereadRunner2(read, started, parsed.given, o.home);
+      if (!next)
+        return null;
+      if ("refused" in next)
+        return next.refused;
+      if (next.runner === current.runner.name && next.runnerCmd === current.cmd)
+        return current.runner;
+      const made = engineRunner2(o, { ...started, ...next });
+      if (!made)
+        return `runner ${next.runner} not taken — this CLI cannot start it`;
+      current = { runner: made, cmd: next.runnerCmd };
+      return made;
+    };
   }
   log(engineHeader2(terminalOf2(o).c, deps.engine, (source.name === "jira" ? `Jira epic ${flags.jira}` : pickup === "auto" ? "your sled, Pickup: Auto (it arms the next ready item)" : "the routes armed on your sled") + (flags.org ? ` · org ${flags.org}` : "") + (flags.seat ? ` · as ${flags.seat}` : ""), runner.name, flags));
   if (flags.strictMcp && flags.agent)
@@ -18903,7 +19460,6 @@ var engineCmd = async (o) => {
   let afterTick;
   if (client) {
     const send = beater(client, o.now ?? Date.now);
-    const who = { name: flags.name, runner: runner.name };
     let refused;
     const sayRefused = (r) => {
       if (!r || r.ok || !r.refused || r.refused === refused)
@@ -18914,7 +19470,7 @@ var engineCmd = async (o) => {
     afterTick = () => {
       try {
         const m = deps.machine;
-        send(beatBody(deps.readState(), who, {}, {
+        send(beatBody(deps.readState(), { name: flags.name, runner: deps.runner.name }, {}, {
           atOnce: deps.atOnce,
           ...m?.last ? { machine: m.last } : {},
           ...m?.hold && !m.off ? { hold: m.hold } : {}
@@ -19047,7 +19603,7 @@ async function enginePauseCmd2(o) {
 // src/commands/engineInstall.ts
 init_config();
 import {
-  existsSync as existsSync17,
+  existsSync as existsSync18,
   mkdirSync as mkdirSync17,
   readFileSync as readFileSync19,
   readdirSync as readdirSync4,
@@ -19056,7 +19612,7 @@ import {
   writeFileSync as writeFileSync19
 } from "node:fs";
 import { hostname as hostname5 } from "node:os";
-import { basename as basename5, dirname as dirname13, isAbsolute as isAbsolute3, join as join21 } from "node:path";
+import { basename as basename5, dirname as dirname13, isAbsolute as isAbsolute3, join as join22 } from "node:path";
 init_state();
 var ENGINE_LABEL2 = "ai.sleds.engine";
 var ENGINE_INSTALL_USAGE2 = `usage: sleds engine install [engine flags]   |   sleds engine uninstall [--name <n>] [--org <slug>]
@@ -19076,13 +19632,13 @@ function engineLabel2(name, org, seat) {
   return [ENGINE_LABEL2, org, seat?.trim(), name].filter((p) => Boolean(p)).map((p, i) => i === 0 ? p : engineSlug(p)).join(".");
 }
 function enginePlistPath2(home, name, org, seat) {
-  return join21(home, "Library", "LaunchAgents", `${engineLabel2(name, org, seat)}.plist`);
+  return join22(home, "Library", "LaunchAgents", `${engineLabel2(name, org, seat)}.plist`);
 }
 function engineLogPath2(stateDir, name) {
-  return join21(stateDir, `${engineSlug(name)}.log`);
+  return join22(stateDir, `${engineSlug(name)}.log`);
 }
 function engineEventsPath2(stateDir, name) {
-  return join21(stateDir, `${engineSlug(name)}.events.jsonl`);
+  return join22(stateDir, `${engineSlug(name)}.events.jsonl`);
 }
 var xmlEscape4 = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 function buildEnginePlist2(o) {
@@ -19158,7 +19714,13 @@ function parseEnginePlist2(text) {
   if (!label || array === undefined)
     return null;
   const programArgs = [...array.matchAll(/<string>([^<]*)<\/string>/g)].map((m) => xmlUnescape2(m[1] ?? ""));
-  return { label: xmlUnescape2(label), programArgs };
+  const envDict = /<key>EnvironmentVariables<\/key>\s*<dict>([\s\S]*?)<\/dict>/.exec(text)?.[1];
+  const path = envDict && /<key>PATH<\/key>\s*<string>([^<]*)<\/string>/.exec(envDict)?.[1];
+  return {
+    label: xmlUnescape2(label),
+    programArgs,
+    ...typeof path === "string" ? { path: xmlUnescape2(path) } : {}
+  };
 }
 function engineArg2(programArgs, flag) {
   const at = programArgs.indexOf(`--${flag}`);
@@ -19173,7 +19735,7 @@ function readEngines2(dir, suffix, manager, parse) {
   }
   const out = [];
   for (const name of names.filter((n) => n.startsWith(`${ENGINE_LABEL2}.`) && n.endsWith(suffix))) {
-    const path = join21(dir, name);
+    const path = join22(dir, name);
     let parsed;
     try {
       parsed = parse(readFileSync19(path, "utf8"), name);
@@ -19193,7 +19755,7 @@ function readEngines2(dir, suffix, manager, parse) {
 }
 function installedEngines2(home) {
   return [
-    ...readEngines2(join21(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist2),
+    ...readEngines2(join22(home, "Library", "LaunchAgents"), ".plist", "launchd", parseEnginePlist2),
     ...readEngines2(engineUnitDir(home), ".service", "systemd", (text, file) => {
       const parsed = parseEngineUnit(text);
       return parsed && { label: basename5(file, ".service"), ...parsed };
@@ -19230,8 +19792,8 @@ async function ensureReposDir(o) {
     error(REPOS_DIR_NEEDED);
     return false;
   }
-  const exists = o.exists ?? existsSync17;
-  const missing = dirs.filter((d) => !exists(/^~(\/|$)/.test(d) ? join21(o.home, d.slice(1)) : d));
+  const exists = o.exists ?? existsSync18;
+  const missing = dirs.filter((d) => !exists(/^~(\/|$)/.test(d) ? join22(o.home, d.slice(1)) : d));
   if (missing.length) {
     error(`Not a folder on this machine: ${missing.join(", ")}. ${REPOS_DIR_NEEDED}`);
     return false;
@@ -19288,7 +19850,7 @@ function engineInstall2(o) {
     return installUnit2({ o, parsed, label, sledsArgv, env: agentEnv, logPath, exec });
   const plist = enginePlistPath2(o.home, parsed.name, parsed.org, seat);
   mkdirSync17(dirname13(plist), { recursive: true });
-  if (existsSync17(plist))
+  if (existsSync18(plist))
     exec("launchctl", ["unload", plist]);
   for (const other of installedEngines2(o.home)) {
     if (other.manager !== "launchd" || other.plist === plist || other.org !== parsed.org)
@@ -19300,7 +19862,7 @@ function engineInstall2(o) {
     log(`replaced ${other.label}, this engine as installed before`);
   }
   const legacy = enginePlistPath2(o.home, parsed.name);
-  if (parsed.org && existsSync17(legacy)) {
+  if (parsed.org && existsSync18(legacy)) {
     const cfg = readConfig(o.home);
     if (org.sole || parsed.org === (cfg.activeOrg ?? cfg.org?.slug)) {
       exec("launchctl", ["unload", legacy]);
@@ -19330,7 +19892,7 @@ function installUnit2(a) {
   const unitName = basename5(unit);
   const systemctl = (...args) => exec("systemctl", ["--user", ...args]);
   mkdirSync17(dirname13(unit), { recursive: true });
-  if (existsSync17(unit))
+  if (existsSync18(unit))
     systemctl("stop", unitName);
   for (const other of installedEngines2(o.home)) {
     if (other.manager !== "systemd" || other.plist === unit || other.org !== parsed.org)
@@ -19388,7 +19950,7 @@ function engineUninstall2(o) {
     ...installed.filter((e) => e.manager === manager).map((e) => e.plist),
     ...args.org ? [] : [pathOf(manager)]
   ]);
-  const file = candidates.find((p) => existsSync17(p));
+  const file = candidates.find((p) => existsSync18(p));
   if (!file) {
     log(`engine:${name} was not installed (no ${candidates[0]}).`);
     return 0;
@@ -19530,7 +20092,7 @@ import { closeSync as closeSync3, fstatSync as fstatSync2, openSync as openSync3
 import { hostname as hostname6 } from "node:os";
 
 // src/commands/engineStatus.ts
-import { existsSync as existsSync18, readFileSync as readFileSync20 } from "node:fs";
+import { existsSync as existsSync19, readFileSync as readFileSync20 } from "node:fs";
 init_state();
 
 // src/engine/status.ts
@@ -19713,7 +20275,7 @@ function statusDir(o, engine, org) {
   const env = o.env ?? process.env;
   const which = engineOrg({ home: o.home, env }, org);
   const slug = which.seated || org ? which.slug : null;
-  const has = (d) => existsSync18(statePath(d, engine)) || existsSync18(lockPath(d, engine));
+  const has = (d) => existsSync19(statePath(d, engine)) || existsSync19(lockPath(d, engine));
   const seat = engineSeat({ home: o.home, env }, slug ?? undefined);
   const dir = engineStateDir({ ...o, env }, slug);
   const seatDir = engineStateDir({ ...o, env }, slug, seat);
@@ -19820,7 +20382,7 @@ var engineLogCmd = (o) => {
 
 // src/commands/engineProfile.ts
 init_src();
-import { existsSync as existsSync19, readFileSync as readFileSync21 } from "node:fs";
+import { existsSync as existsSync20, readFileSync as readFileSync21 } from "node:fs";
 import { hostname as hostname7 } from "node:os";
 var PROFILE_USAGE = "usage: sleds engine profile [--json]   |   sleds engine profile set <field>=<value>… [--workspace] [--json]   |   sleds engine profile set --stdin [--workspace] [--json]   |   sleds engine profile --strict-mcp [--mcp-allow <a,b>] | --no-strict-mcp [--workspace] [--json]   |   sleds engine profile --sandbox [--sandbox-allow <a,b>] | --no-sandbox [--workspace] [--json]   |   sleds engine profile set --hold on|off [--workspace] [--json]   |   sleds engine profile set cmuxPassword=<pw> | --cmux-password <pw> [--json]";
 var PROFILE_FIELDS = [
@@ -20048,7 +20610,7 @@ function localOf(o) {
   return {
     engine: `engine:${name}`,
     canInstall,
-    installed: canInstall && existsSync19(enginePlistPath(o.home, name))
+    installed: canInstall && existsSync20(enginePlistPath(o.home, name))
   };
 }
 async function engineProfileCmd(o) {
@@ -20170,7 +20732,7 @@ var keychainLine = (k) => k === "set" ? "cmuxPassword: set (Keychain)" : k === "
 
 // src/commands/engineStatus.ts
 init_state();
-import { existsSync as existsSync20, readFileSync as readFileSync22 } from "node:fs";
+import { existsSync as existsSync21, readFileSync as readFileSync22 } from "node:fs";
 import { hostname as hostname8 } from "node:os";
 var ENGINE_STATUS_USAGE = "usage: sleds engine status [--name <n>] [--org <slug>] [--json]";
 function parseStatusArgs(argv, host) {
@@ -20199,7 +20761,7 @@ function statusDir2(o, engine, org) {
   const env = o.env ?? process.env;
   const which = engineOrg({ home: o.home, env }, org);
   const slug = which.seated || org ? which.slug : null;
-  const has = (d) => existsSync20(statePath(d, engine)) || existsSync20(lockPath(d, engine));
+  const has = (d) => existsSync21(statePath(d, engine)) || existsSync21(lockPath(d, engine));
   const seat = engineSeat({ home: o.home, env }, slug ?? undefined);
   const dir = engineStateDir({ ...o, env }, slug);
   const seatDir = engineStateDir({ ...o, env }, slug, seat);
@@ -20212,7 +20774,7 @@ function statusDir2(o, engine, org) {
 }
 function readEngineStatus(stateDir, engine, host, pidAlive, seat) {
   const file = statePath(stateDir, engine);
-  const text = existsSync20(file) ? safeRead(file) : "";
+  const text = existsSync21(file) ? safeRead(file) : "";
   return engineStatus({
     engine,
     state: text ? parseState(text) : { runs: [] },
@@ -20347,10 +20909,10 @@ init_meter();
 
 // src/owed.ts
 init_config();
-import { existsSync as existsSync21, mkdirSync as mkdirSync18, readFileSync as readFileSync23, renameSync as renameSync7, writeFileSync as writeFileSync20 } from "node:fs";
-import { dirname as dirname14, join as join22 } from "node:path";
-var owedPath = (home) => join22(configDir(home), "owed.json");
-var sessionPath = (home) => join22(configDir(home), "session.json");
+import { existsSync as existsSync22, mkdirSync as mkdirSync18, readFileSync as readFileSync23, renameSync as renameSync7, writeFileSync as writeFileSync20 } from "node:fs";
+import { dirname as dirname14, join as join23 } from "node:path";
+var owedPath = (home) => join23(configDir(home), "owed.json");
+var sessionPath = (home) => join23(configDir(home), "session.json");
 var OWED_TTL_MS = 3 * 24 * 60 * 60000;
 var str13 = (v) => typeof v === "string" ? v : undefined;
 function sourceKey(s) {
@@ -20365,7 +20927,7 @@ function sourceText2(s) {
   return [`${str13(s.kind) ?? "?"} ${str13(s.project) ?? "?"}`, str13(s.doc), str13(s.item)].filter(Boolean).join(" › ");
 }
 var readJson = (p) => {
-  if (!existsSync21(p))
+  if (!existsSync22(p))
     return null;
   try {
     return JSON.parse(readFileSync23(p, "utf8"));
@@ -21395,7 +21957,7 @@ var login = async (o) => {
 // src/commands/logout.ts
 init_config();
 init_state();
-import { existsSync as existsSync22, readFileSync as readFileSync24, rmSync as rmSync11 } from "node:fs";
+import { existsSync as existsSync23, readFileSync as readFileSync24, rmSync as rmSync11 } from "node:fs";
 import { hostname as hostname10 } from "node:os";
 init_settings();
 var LOGOUT_USAGE = "usage: sleds logout [--org <slug>] [--json]";
@@ -21552,7 +22114,7 @@ async function logout(o) {
     };
   writeConfig(o.home, next);
   const tp = tokenPath(o.home, env);
-  if (existsSync22(tp) && readFileSync24(tp, "utf8").trim() === seat.token)
+  if (existsSync23(tp) && readFileSync24(tp, "utf8").trim() === seat.token)
     rmSync11(tp, { force: true });
   const active = next.activeOrg ?? next.org?.slug ?? null;
   const result = { ok: true, email, org: slug, paused, active };
@@ -21630,20 +22192,20 @@ var meter = async (o) => {
 init_config();
 init_meter();
 import { spawnSync as spawnSync7 } from "node:child_process";
-import { existsSync as existsSync23, mkdirSync as mkdirSync20, readFileSync as readFileSync25, rmSync as rmSync12, writeFileSync as writeFileSync22 } from "node:fs";
+import { existsSync as existsSync24, mkdirSync as mkdirSync20, readFileSync as readFileSync25, rmSync as rmSync12, writeFileSync as writeFileSync22 } from "node:fs";
 import { hostname as hostname11 } from "node:os";
 import { dirname as dirname15 } from "node:path";
 var defaultWhich3 = (cmd) => {
   const path = process.env.PATH ?? "";
   for (const dir of path.split(":").filter(Boolean)) {
     const p = `${dir}/${cmd}`;
-    if (existsSync23(p))
+    if (existsSync24(p))
       return p;
   }
   return null;
 };
 var findClaude2 = (home, configured, which) => {
-  if (configured && existsSync23(configured))
+  if (configured && existsSync24(configured))
     return configured;
   const found = which("claude");
   if (found)
@@ -21654,7 +22216,7 @@ var findClaude2 = (home, configured, which) => {
     "/usr/local/bin/claude",
     `${home}/.npm-global/bin/claude`
   ])
-    if (existsSync23(p))
+    if (existsSync24(p))
       return p;
   return null;
 };
@@ -21680,7 +22242,7 @@ var musherInstall = (o) => {
     ...env.CLAUDE_CONFIG_DIR ? { CLAUDE_CONFIG_DIR: env.CLAUDE_CONFIG_DIR } : {}
   };
   const exec = o.exec ?? defaultExecSync;
-  if (existsSync23(plist))
+  if (existsSync24(plist))
     exec("launchctl", ["unload", plist]);
   writeFileSync22(plist, buildMusherPlist({ sledsArgv: o.sledsArgv, env: agentEnv, logPath: musherLogPath(dir), label }));
   const r = exec("launchctl", ["load", plist]);
@@ -21701,7 +22263,7 @@ var musherUninstall = (o) => {
   const env = o.env ?? process.env;
   const plist = musherPlistPath(o.home, env);
   const exec = o.exec ?? defaultExecSync;
-  if (existsSync23(plist)) {
+  if (existsSync24(plist)) {
     exec("launchctl", ["unload", plist]);
     rmSync12(plist, { force: true });
     log(`musher removed: ${musherLabel(env)}`);
@@ -21736,7 +22298,7 @@ var musherStatus = async (o) => {
   const env = o.env ?? process.env;
   const plist = musherPlistPath(o.home, env);
   const cfg = readConfig(o.home);
-  log(existsSync23(plist) ? `agent     ${musherLabel(env)} installed (${plist})` : "agent     not installed — sleds musher --install");
+  log(existsSync24(plist) ? `agent     ${musherLabel(env)} installed (${plist})` : "agent     not installed — sleds musher --install");
   const claude = findClaude2(o.home, cfg.musher?.claudePath, o.which ?? defaultWhich3);
   log(`claude    ${claude ?? "not found — sleds musher --claude /path/to/claude"}`);
   log(`mode      ${cfg.musher?.permissionMode ?? DEFAULT_PERMISSION_MODE} · timeout ${cfg.musher?.timeoutMinutes ?? DEFAULT_TIMEOUT_MINUTES} min`);
@@ -21966,7 +22528,7 @@ var on = (o) => {
 init_config();
 init_meter();
 init_settings();
-import { existsSync as existsSync24, rmSync as rmSync13 } from "node:fs";
+import { existsSync as existsSync25, rmSync as rmSync13 } from "node:fs";
 var ORG_USAGE = "usage: sleds org list [--json]   |   sleds org use <slug>";
 var orgRows = (cfg, activeSlug) => {
   const seats = { ...cfg.orgs ?? {} };
@@ -22033,7 +22595,7 @@ var orgUse = (o) => {
   }
   writeConfig(o.home, withActiveOrg(cfg, slug, seat));
   writeTokenFile(o.home, seat.token);
-  if (existsSync24(settingsPath(o.home)) && cfg.mode !== "on") {
+  if (existsSync25(settingsPath(o.home)) && cfg.mode !== "on") {
     const settings = readSettings(o.home);
     const pointed = readProxy(settings);
     const url = pointed?.url ?? cfg.proxyUrl;
@@ -22070,7 +22632,7 @@ var orgCmd = (o) => {
 init_src();
 import { spawnSync as spawnSync8 } from "node:child_process";
 import { writeFileSync as writeFileSync23 } from "node:fs";
-import { join as join23 } from "node:path";
+import { join as join24 } from "node:path";
 function packFileName(key) {
   return `pack-${slugify(key, 80) || "item"}.md`;
 }
@@ -22098,7 +22660,7 @@ var packCmd = async (o) => {
     log(r.text);
     return 0;
   }
-  const path = join23(o.cwd ?? process.cwd(), packFileName(key));
+  const path = join24(o.cwd ?? process.cwd(), packFileName(key));
   (o.write ?? ((p, t) => writeFileSync23(p, t.endsWith(`
 `) ? t : `${t}
 `)))(path, r.text);
@@ -22224,12 +22786,81 @@ var promptEvent = async (o) => {
   return code;
 };
 
+// src/commands/reopen.ts
+var REOPEN_USAGE = 'usage: sleds reopen <key> --reason "<why it is reopened>" [--json]';
+function parseReopenArgs(argv) {
+  let key;
+  let reason = "";
+  let json = false;
+  for (let i = 0;i < argv.length; i++) {
+    const a = argv[i];
+    if (a === "--json")
+      json = true;
+    else if (a === "--reason") {
+      const value = argv[i + 1];
+      if (value === undefined || value.startsWith("--"))
+        return { error: "--reason needs a value" };
+      reason = value;
+      i++;
+    } else if (a.startsWith("--"))
+      return { error: `unknown flag ${a}` };
+    else if (key === undefined)
+      key = a;
+    else
+      return { error: `one item at a time — "${a}" is extra` };
+  }
+  if (!key)
+    return { error: "which item?" };
+  return { key, reason: reason.trim(), json };
+}
+function reopenedLine(key, j) {
+  const shown = typeof j.key === "string" ? j.key : key;
+  return typeof j.sled === "string" && j.sled ? `${shown} reopened — back on ${j.sled}'s sled` : `${shown} reopened — back to ready, on no sled`;
+}
+async function reopenCmd(o) {
+  const log = o.log ?? console.log;
+  const error = o.error ?? console.error;
+  const a = parseReopenArgs(o.argv);
+  if ("error" in a) {
+    error(a.error);
+    error(REOPEN_USAGE);
+    return 2;
+  }
+  if (!a.reason) {
+    error(`${a.key}: say why it is reopened — it goes on the item's thread`);
+    error(REOPEN_USAGE);
+    return 1;
+  }
+  const client = engineClient({ home: o.home, ...o.client ? { client: o.client } : {} });
+  if ("error" in client) {
+    error(client.error);
+    return 1;
+  }
+  const r = await client.postFull("/proxy/reopen", { project: a.key, reason: a.reason });
+  if (!r) {
+    error(`${a.key}: SLEDS unreachable — nothing reopened`);
+    return 1;
+  }
+  const ok = r.status < 300 && r.json?.ok !== false;
+  if (a.json)
+    log(JSON.stringify(r.json ?? { ok: false, error: `HTTP ${r.status}` }));
+  if (!ok) {
+    const why = typeof r.json?.error === "string" ? r.json.error : `HTTP ${r.status}`;
+    if (!a.json)
+      error(r.status === 404 && !r.json ? `${a.key}: SLEDS does not know this seat — run \`sleds init\`` : `${a.key}: ${why}`);
+    return 1;
+  }
+  if (!a.json)
+    log(reopenedLine(a.key, r.json ?? {}));
+  return 0;
+}
+
 // src/commands/route.ts
 init_src();
 import { readFileSync as readFileSync27 } from "node:fs";
 import { hostname as hostname12 } from "node:os";
 var ARM_USAGE = "usage: sleds route arm <key> [--off] [--json] [--name <engine>] [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--mode <permission-mode>] [--model <id>] [--effort <e>] [--branch '<template>'] [--pr-title '<template>'] [--repos-dir <dir>]";
-var USAGE = "usage: sleds route <key> [--long | --dot | --json]   |   sleds route arm <key> [--off] [--json]   |   sleds route answer <key>/<node> --stdin   |   sleds route propose <key> --file <nodes.json>   |   sleds route approve <key>   |   sleds route redraft <key>   |   sleds route single <key>   |   sleds route decisions [<key>] [--flagged]   |   sleds route decision <key> <id> --seen | --answer --stdin [--route accept|keep|redraft] | --keep-route | --apply [--answer --stdin] | --overrule --stdin | --ready   |   sleds route run <key> [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir>] [--mode <permission-mode>] [--model <id>] [--branch '<template>'] [--pr-title '<template>'] [--once]";
+var USAGE2 = "usage: sleds route <key> [--long | --dot | --json]   |   sleds route arm <key> [--off] [--json]   |   sleds route answer <key>/<node> --stdin   |   sleds route propose <key> --file <nodes.json>   |   sleds route approve <key>   |   sleds route redraft <key>   |   sleds route single <key>   |   sleds route decisions [<key>] [--flagged]   |   sleds route decision <key> <id> --seen | --answer --stdin [--route accept|keep|redraft] | --keep-route | --apply [--answer --stdin] | --overrule --stdin | --ready   |   sleds route run <key> [--at-once <n>] [--runner tmux|headless|command|orca|cmux] [--runner-cmd '<launcher>'] [--agent '<command>'] [--interval <s>] [--lease <min>] [--idle <min>] [--repo <path>] [--repos-dir <dir>] [--mode <permission-mode>] [--model <id>] [--branch '<template>'] [--pr-title '<template>'] [--once]";
 var ANSWER_USAGE = "usage: sleds route answer <key>/<node> <answer…>   |   sleds route answer <key>/<node> --stdin   [--json]";
 var PROPOSE_USAGE = "usage: sleds route propose <key> (--file <nodes.json> | --stdin) [--name <engine>] [--json]";
 var APPROVE_USAGE = "usage: sleds route approve <key> [--file <nodes.json>] [--json]";
@@ -22784,14 +23415,14 @@ var routeCmd = async (o) => {
   const parsed = parseEngineArgs(o.argv.filter((a) => a !== "--dot" && a !== "--long" && a !== "--json"), o.host ?? hostname12());
   if ("error" in parsed) {
     error(parsed.error);
-    error(USAGE);
+    error(USAGE2);
     return 2;
   }
   const { positional } = parsed;
   const isRun = positional[0] === "run";
   const key = isRun ? positional[1] : positional[0];
   if (!key) {
-    error(USAGE);
+    error(USAGE2);
     return 2;
   }
   if (asJson) {
@@ -23047,15 +23678,15 @@ var seatEvent = async (o) => {
 };
 
 // src/commands/seatSync.ts
-import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync25, mkdirSync as mkdirSync22, readFileSync as readFileSync28, readdirSync as readdirSync5, rmSync as rmSync16, writeFileSync as writeFileSync25 } from "node:fs";
+import { execFileSync as execFileSync5 } from "node:child_process";
+import { existsSync as existsSync26, mkdirSync as mkdirSync22, readFileSync as readFileSync28, readdirSync as readdirSync5, rmSync as rmSync16, writeFileSync as writeFileSync25 } from "node:fs";
 import { platform as platform2 } from "node:os";
-import { dirname as dirname17, join as join25 } from "node:path";
+import { dirname as dirname17, join as join26 } from "node:path";
 
 // src/cookieDb.ts
 import { copyFileSync, rmSync as rmSync15 } from "node:fs";
 import { tmpdir as tmpdir2 } from "node:os";
-import { join as join24 } from "node:path";
+import { join as join25 } from "node:path";
 var QUERY = "SELECT name, hex(encrypted_value) AS ev FROM cookies WHERE host_key LIKE '%claude.ai%'";
 var isBun = () => typeof globalThis.Bun !== "undefined";
 async function queryRows(dbPath) {
@@ -23084,7 +23715,7 @@ function nodeSqlite() {
   return mod;
 }
 async function readCookieRows(dbPath) {
-  const copy = join24(tmpdir2(), `sleds-cookies-${process.pid}-${Date.now()}.sqlite`);
+  const copy = join25(tmpdir2(), `sleds-cookies-${process.pid}-${Date.now()}.sqlite`);
   copyFileSync(dbPath, copy);
   try {
     const rows = await queryRows(copy);
@@ -23368,7 +23999,7 @@ function findFile(root, name) {
   const stack = [root];
   while (stack.length > 0) {
     const dir = stack.pop();
-    if (!dir || !existsSync25(dir))
+    if (!dir || !existsSync26(dir))
       continue;
     let entries;
     try {
@@ -23377,7 +24008,7 @@ function findFile(root, name) {
       continue;
     }
     for (const e of entries) {
-      const p = join25(dir, e.name);
+      const p = join26(dir, e.name);
       if (e.isDirectory())
         stack.push(p);
       else if (e.name === name)
@@ -23388,8 +24019,8 @@ function findFile(root, name) {
 }
 function findCookieDb(home, source) {
   const b = BROWSERS[source.browser];
-  const root = join25(home, APP_SUPPORT, b.appDir);
-  if (!existsSync25(root))
+  const root = join26(home, APP_SUPPORT, b.appDir);
+  if (!existsSync26(root))
     throw new Error(`no ${source.browser} data at ${root} (is it installed?)`);
   if (!b.profiled) {
     const db = findFile(root, "Cookies");
@@ -23397,15 +24028,15 @@ function findCookieDb(home, source) {
       throw new Error(`no cookie store under ${root}`);
     return db;
   }
-  const localStatePath = join25(root, "Local State");
-  const localState = existsSync25(localStatePath) ? readFileSync28(localStatePath, "utf8") : null;
+  const localStatePath = join26(root, "Local State");
+  const localState = existsSync26(localStatePath) ? readFileSync28(localStatePath, "utf8") : null;
   const wanted = source.profile ?? "Default";
   const { dir, ambiguous } = resolveProfileDir(localState, wanted);
   if (ambiguous)
     throw new Error(`"${wanted}" names ${ambiguous.length} ${source.browser} profiles (${ambiguous.join(", ")}) — pass the directory or the account email instead`);
   if (!dir)
     throw new Error(`no ${source.browser} profile named "${wanted}" (check chrome://version)`);
-  const db = cookieDbCandidates(join25(root, dir)).find((p) => existsSync25(p));
+  const db = cookieDbCandidates(join26(root, dir)).find((p) => existsSync26(p));
   if (!db)
     throw new Error(`profile "${dir}" has no cookie store yet (open claude.ai in it once)`);
   return db;
@@ -23415,7 +24046,7 @@ async function readCookieRowsBun(home, source) {
 }
 function keychainKey(service) {
   try {
-    return execFileSync4("security", ["find-generic-password", "-w", "-s", service], {
+    return execFileSync5("security", ["find-generic-password", "-w", "-s", service], {
       encoding: "utf8"
     }).trim();
   } catch {
@@ -23427,7 +24058,7 @@ function decryptJar(rows, safeStoragePw) {
 }
 var curlUsage = (org, cookie) => {
   try {
-    const out = execFileSync4("curl", usageCurlArgs(), {
+    const out = execFileSync5("curl", usageCurlArgs(), {
       input: usageCurlConfig(org, cookie),
       encoding: "utf8",
       maxBuffer: 8000000
@@ -23449,7 +24080,7 @@ function fetchSeatUsage(jar, org, now, run) {
 }
 function launchAgentPlist(bun, script, home, source) {
   const label = launchLabel(source);
-  const log = join25(home, ".config", "sleds", `${label.slice("ai.sleds.".length)}.log`);
+  const log = join26(home, ".config", "sleds", `${label.slice("ai.sleds.".length)}.log`);
   const esc = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
   const args = [bun, script, "seat-sync", ...sourceArgs(source)].map((a) => `    <string>${esc(a)}</string>`).join(`
 `);
@@ -23471,7 +24102,7 @@ ${args}
 `;
 }
 function plistPath2(home, source) {
-  return join25(home, "Library", "LaunchAgents", `${launchLabel(source)}.plist`);
+  return join26(home, "Library", "LaunchAgents", `${launchLabel(source)}.plist`);
 }
 function install(home, argv, source, log) {
   const bun = argv[0] ?? process.execPath;
@@ -23480,7 +24111,7 @@ function install(home, argv, source, log) {
     log("cannot resolve the sleds script path to install the timer");
     return 1;
   }
-  const dir = join25(home, "Library", "LaunchAgents");
+  const dir = join26(home, "Library", "LaunchAgents");
   mkdirSync22(dir, { recursive: true });
   const path = plistPath2(home, source);
   const tokenPath = seatTokenPath(home, source);
@@ -23492,19 +24123,19 @@ function install(home, argv, source, log) {
   }
   writeFileSync25(path, launchAgentPlist(bun, script, home, source), { mode: 384 });
   try {
-    execFileSync4("launchctl", ["unload", path], { stdio: "ignore" });
+    execFileSync5("launchctl", ["unload", path], { stdio: "ignore" });
   } catch {}
-  execFileSync4("launchctl", ["load", "-w", path]);
+  execFileSync5("launchctl", ["load", "-w", path]);
   log(`seat-sync timer installed (every ${SYNC_INTERVAL_S / 60} min) → ${path}`);
   return 0;
 }
 function uninstall(home, source, log) {
   const path = plistPath2(home, source);
   try {
-    execFileSync4("launchctl", ["unload", "-w", path], { stdio: "ignore" });
+    execFileSync5("launchctl", ["unload", "-w", path], { stdio: "ignore" });
   } catch {}
   rmSync16(seatTokenPath(home, source), { force: true });
-  log(existsSync25(path) ? `seat-sync timer removed (${path} can be deleted)` : "no seat-sync timer");
+  log(existsSync26(path) ? `seat-sync timer removed (${path} can be deleted)` : "no seat-sync timer");
   return 0;
 }
 var seatSync = async (o) => {
@@ -23776,7 +24407,7 @@ var specEvent = async (o) => {
 };
 
 // src/commands/status.ts
-import { existsSync as existsSync26 } from "node:fs";
+import { existsSync as existsSync27 } from "node:fs";
 init_config();
 init_settings();
 var HEALTH_TIMEOUT_MS2 = 4000;
@@ -23864,7 +24495,7 @@ var status3 = async (o) => {
   const log = o.log ?? console.log;
   const nowMs = (o.now ?? Date.now)();
   const cfg = readConfig(o.home);
-  const settings = existsSync26(settingsPath(o.home)) ? readSettings(o.home) : {};
+  const settings = existsSync27(settingsPath(o.home)) ? readSettings(o.home) : {};
   const inSettings = readProxy(settings);
   const picked = selectOrg(cfg, undefined, o.env ?? process.env);
   const viaEnv = picked.from === "env";
@@ -24057,7 +24688,7 @@ var announce = (o, events) => {
 
 // src/commands/stopEvent.ts
 init_meter();
-import { existsSync as existsSync27, readFileSync as readFileSync30 } from "node:fs";
+import { existsSync as existsSync28, readFileSync as readFileSync30 } from "node:fs";
 
 // src/transcript.ts
 var isObject16 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
@@ -24153,7 +24784,7 @@ async function postTranscript(o, payload, now) {
   const src = meterSource(o.home);
   if (!src)
     return false;
-  const read = o.readFile ?? ((p) => existsSync27(p) ? readFileSync30(p, "utf8") : null);
+  const read = o.readFile ?? ((p) => existsSync28(p) ? readFileSync30(p, "utf8") : null);
   let text;
   try {
     text = read(path);
@@ -24231,7 +24862,7 @@ var stopEvent = async (o) => {
 
 // src/commands/uninstall.ts
 import { spawnSync as spawnSync9 } from "node:child_process";
-import { existsSync as existsSync28, rmSync as rmSync17 } from "node:fs";
+import { existsSync as existsSync29, rmSync as rmSync17 } from "node:fs";
 init_config();
 init_meter();
 init_settings();
@@ -24244,7 +24875,7 @@ var uninstall2 = (o) => {
     (o.log ?? console.log)(`  ${codexLine}`);
   const log = o.log ?? console.log;
   const removed = [];
-  if (existsSync28(settingsPath(o.home))) {
+  if (existsSync29(settingsPath(o.home))) {
     let settings = readSettings(o.home);
     let changed = false;
     if (hasEitherKey(settings)) {
@@ -24291,18 +24922,18 @@ var uninstall2 = (o) => {
       writeSettings(o.home, settings);
   }
   for (const file of [meterCachePath(o.home), ...allSeatStatePaths(o.home)]) {
-    if (existsSync28(file)) {
+    if (existsSync29(file)) {
       rmSync17(file, { force: true });
       removed.push(file);
     }
   }
   const skill = skillDir(o.home);
-  if (existsSync28(skill)) {
+  if (existsSync29(skill)) {
     rmSync17(skill, { recursive: true, force: true });
     removed.push(skill);
   }
   const plist = musherPlistPath(o.home);
-  if (existsSync28(plist)) {
+  if (existsSync29(plist)) {
     (o.unloadAgent ?? defaultUnload)(plist);
     rmSync17(plist, { force: true });
     removed.push(`launchd agent ${musherLabel()}`);
@@ -24373,7 +25004,7 @@ var verify = async (o) => {
 };
 
 // src/commands/webhooks.ts
-var USAGE2 = "usage: sleds webhooks [--json]   |   sleds webhooks deliveries <id or name> [--json]";
+var USAGE3 = "usage: sleds webhooks [--json]   |   sleds webhooks deliveries <id or name> [--json]";
 var str14 = (x) => typeof x === "string" ? x : "";
 function ago3(at, now) {
   const m = Math.max(0, Math.floor((now - at) / 60000));
@@ -24424,7 +25055,7 @@ var webhooksCmd = async (o) => {
   const now = (o.now ?? Date.now)();
   const sub = words[0];
   if (sub && (sub !== "deliveries" || words.length !== 2)) {
-    error(USAGE2);
+    error(USAGE3);
     return 2;
   }
   const path = sub === "deliveries" ? `/proxy/webhooks/deliveries?hook=${encodeURIComponent(words[1] ?? "")}` : "/proxy/webhooks";
@@ -24457,13 +25088,13 @@ var webhooksCmd = async (o) => {
 
 // src/config.ts
 init_settings();
-import { chmodSync as chmodSync7, existsSync as existsSync29, mkdirSync as mkdirSync23, readFileSync as readFileSync31, renameSync as renameSync9, writeFileSync as writeFileSync26 } from "node:fs";
-import { join as join26, resolve as resolve10 } from "node:path";
+import { chmodSync as chmodSync7, existsSync as existsSync30, mkdirSync as mkdirSync23, readFileSync as readFileSync31, renameSync as renameSync9, writeFileSync as writeFileSync26 } from "node:fs";
+import { join as join27, resolve as resolve11 } from "node:path";
 var configDir2 = (home, env = process.env) => {
   const o = env.SLEDS_HOME?.trim();
-  return o ? resolve10(home, o) : join26(home, ".config", "sleds");
+  return o ? resolve11(home, o) : join27(home, ".config", "sleds");
 };
-var configPath2 = (home) => join26(configDir2(home), "config.json");
+var configPath2 = (home) => join27(configDir2(home), "config.json");
 var isObject17 = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var optString2 = (v) => typeof v === "string" ? v : undefined;
 var parsePriorEnv2 = (v) => {
@@ -24595,7 +25226,7 @@ var parseOrgInfo2 = (raw) => {
 };
 var readConfig2 = (home) => {
   const p = configPath2(home);
-  if (!existsSync29(p))
+  if (!existsSync30(p))
     return {};
   return parseConfig2(JSON.parse(readFileSync31(p, "utf8")));
 };
@@ -24649,15 +25280,15 @@ var defaultExec5 = (cmd, args) => {
 };
 
 // src/settings.ts
-import { dirname as dirname18, join as join27, resolve as resolve11 } from "node:path";
+import { dirname as dirname18, join as join28, resolve as resolve12 } from "node:path";
 var withSeatEnv2 = (command, home, env = process.env, org) => {
   const parts = [];
   const sh = env.SLEDS_HOME?.trim();
   const cc = env.CLAUDE_CONFIG_DIR?.trim();
   if (sh)
-    parts.push(`SLEDS_HOME=${shellWord2(resolve11(home, sh))}`);
+    parts.push(`SLEDS_HOME=${shellWord2(resolve12(home, sh))}`);
   if (cc)
-    parts.push(`CLAUDE_CONFIG_DIR=${shellWord2(resolve11(home, cc))}`);
+    parts.push(`CLAUDE_CONFIG_DIR=${shellWord2(resolve12(home, cc))}`);
   parts.push(command);
   return pinOrg4(parts.join(" "), org);
 };
@@ -24684,7 +25315,7 @@ var isSledsStopHook2 = isSledsHookFor2("stop-event");
 var isSledsPermissionHook2 = isSledsHookFor2("permission-event");
 
 // src/index.ts
-var USAGE3 = `usage: sleds <command> [options]
+var USAGE4 = `usage: sleds <command> [options]
 
 commands:
   init        Sign in through the browser, make this machine a seat, install the /sled skill
@@ -24739,6 +25370,10 @@ commands:
               --run                  start Claude Code with the pack as the first prompt
   webhooks    The org's outbound webhooks (admins); deliveries <id or name> lists one hook's
               last hundred deliveries. Registering and Redeliver stay in the app.
+  deploy      A release step's one line: tell SLEDS this commit is now running in an environment.
+              --env <slug>           the environment (required); --service <name> for a monorepo
+              --sha / --repo         else the CI's own variables, then git
+              Token from SLEDS_DEPLOY_TOKEN (Settings \u203A Deploys). SLEDS down never fails a release.
   sled --json What is on your sled (mine with each route, proposed, sent), for a front end.
               sleds sled top KEY     put KEY first on your sled; the engine picks it next
   route <key> Print an item's route: its nodes, what each waits on, what is ready, where each
@@ -24766,6 +25401,9 @@ commands:
               --mode <permission-mode>  Claude Code's (default auto; acceptEdits stops an unattended
                                      session at git push; an account without auto passes acceptEdits)
               --model <id>           Claude Code's model
+  reopen <key> Put back an item that landed by mistake (a skipped node closed its route): its
+              landing is cleared and it goes back on the sled it came off, or to ready.
+              --reason "<text>"      why \u2014 required; it goes on the item's thread (--json)
   engine      The long-running loop over the routes Run armed on your sled: takes each ready
               node, starts a session on its own branch, follows its PR to the merge (CI failures
               and review feedback go back to the session; a merge lands the node, closes the
@@ -24887,11 +25525,11 @@ var wantsHelp = (argv) => {
   return false;
 };
 var commandUsage = (cmd) => {
-  const lines = USAGE3.split(`
+  const lines = USAGE4.split(`
 `);
   const start = lines.findIndex((l) => l === `  ${cmd}` || l.startsWith(`  ${cmd} `));
   if (start === -1)
-    return USAGE3;
+    return USAGE4;
   const section = [lines[start]];
   for (const l of lines.slice(start + 1)) {
     if (!/^ {3,}\S/.test(l))
@@ -24947,8 +25585,12 @@ var main = async (argv) => {
       return packCmd({ home, argv: argv.slice(1) });
     case "webhooks":
       return webhooksCmd({ home, argv: argv.slice(1) });
+    case "deploy":
+      return deployCmd({ argv: argv.slice(1) });
     case "sled":
       return sledCmd({ home, argv: argv.slice(1) });
+    case "reopen":
+      return reopenCmd({ home, argv: argv.slice(1) });
     case "engine":
     case "route": {
       if (cmd === "engine" && argv[1] === "status")
@@ -25141,19 +25783,19 @@ var main = async (argv) => {
     case "help":
     case "--help":
     case "-h":
-      console.log(USAGE3);
+      console.log(USAGE4);
       console.log(`
 ${renderHelpText(argv[1])}`);
       return 0;
     case "version":
     case "--version":
     case "-v":
-      console.log("sleds 0.1.43");
+      console.log("sleds 0.1.45");
       return 0;
     default:
       console.error(`unknown command: ${cmd}
 `);
-      console.error(USAGE3);
+      console.error(USAGE4);
       return 1;
   }
 };