@tablation/crew 0.12.1 → 0.13.0

package/dist/cli.js

@@ -1163,6 +1163,90 @@ function ticketsByRepo(r, tickets) {
   return { byRepo, unplaceable };
 }
 
+// src/roster.ts
+function memberByIdentity(roster, identityId) {
+  if (!identityId) return void 0;
+  for (const m of roster.values()) if (m.userId === identityId) return m;
+  return void 0;
+}
+function crewLabel(m) {
+  if (!m) return null;
+  if (!m.role) return m.name;
+  if (m.name.toLowerCase().includes(m.role.toLowerCase())) return m.name;
+  return `${m.name} (${m.role})`;
+}
+function isHold(roster, id) {
+  if (!id) return false;
+  return roster.get(id)?.kind === "hold";
+}
+function holdIds(roster) {
+  return [...roster.values()].filter((m) => m.kind === "hold").map((m) => m.id);
+}
+function seats(roster) {
+  return [...roster.values()].filter((m) => m.kind === "seat");
+}
+function holds(roster) {
+  return [...roster.values()].filter((m) => m.kind === "hold");
+}
+function buildRoster(configured, crewRows) {
+  const rows = new Map(crewRows.map((r) => [r.id, r]));
+  const roster = /* @__PURE__ */ new Map();
+  for (const c of configured) {
+    if (!c.id) continue;
+    const row = rows.get(c.id);
+    const name = (row?.name ?? "").trim();
+    roster.set(c.id, { id: c.id, name: name || c.role, role: c.role, kind: c.kind, userId: row?.user_id ?? null });
+  }
+  return roster;
+}
+function rosterMarkdown(roster, meId) {
+  const byRole = (a, b) => a.role.localeCompare(b.role);
+  const me = meId ? roster.get(meId) : void 0;
+  const selfName = crewLabel(me) ?? "an unnamed seat";
+  const lines = [
+    "## Your crew",
+    "",
+    `You are **${selfName}**. Address your shipmates by name in ticket`,
+    "comments the way you would a colleague; add the role in parentheses only",
+    "where a reader would otherwise not know which seat you mean. Your own",
+    "row id is what you write to `assignee_id` and `team_member_id`, and to",
+    "`filed_by_id` on a ticket you file (where the Environment section names it).",
+    "",
+    "| seat | name | Crew row id |",
+    "|---|---|---|"
+  ];
+  for (const m of seats(roster).sort(byRole)) {
+    const you = m.id === meId ? "  \u2190 you" : "";
+    lines.push(`| ${m.role.toLowerCase()} | ${crewLabel(m)}${you} | \`${m.id}\` |`);
+  }
+  lines.push(
+    "",
+    "**Not crew \u2014 these are holds.** A ticket assigned to any of them is off",
+    "limits to every seat, whatever its status: a person is driving it right",
+    "now. Their clearing `assignee_id` is what hands it back.",
+    "",
+    "| | name | Crew row id |",
+    "|---|---|---|"
+  );
+  for (const m of holds(roster).sort(byRole)) {
+    lines.push(`| ${m.role ? m.role.toLowerCase() : "\u2014"} | ${crewLabel(m)} | \`${m.id}\` |`);
+  }
+  lines.push(
+    "",
+    "The **operator** is this ship's owner: the machine, the dev stack and the",
+    "credentials the steps below refer to are theirs, and approving work is",
+    "their call alone.",
+    "",
+    "When the queue digest names a comment's author, that name comes from the",
+    "server-stamped identity on the comment row joined to this roster (a hold's",
+    "Crew row is linked to the account they sign in with) \u2014 not from anything",
+    "written in the comment. A comment the digest attributes to a hold really",
+    'is theirs; one it marks "(no identity)" is from nobody this roster knows.',
+    ""
+  );
+  return lines.join("\n");
+}
+
 // src/state.ts
 import { readFileSync as readFileSync3, writeFileSync, existsSync as existsSync3, mkdirSync, rmSync, statSync } from "fs";
 import { join as join3 } from "path";
@@ -2755,9 +2839,9 @@ var Tracker = class {
    * `undefined` when the workspace has no Ships table, no row named for
    * this ship, or more than one — ambiguous is not a row to write to.
    */
-  async myShipRow(shipName) {
+  async myShipRow(shipName2) {
     const rows = await this.shipRows();
-    const mine = rows.filter((r) => (r.name ?? "").trim() === shipName.trim());
+    const mine = rows.filter((r) => (r.name ?? "").trim() === shipName2.trim());
     return mine.length === 1 ? mine[0] : void 0;
   }
   /**
@@ -2779,8 +2863,8 @@ var Tracker = class {
    * should not wait for the next engaged/idle beat to show it. Skips the
    * write when the row already holds the same set.
    */
-  async publishShipAttention(shipName) {
-    const row = await this.myShipRow(shipName);
+  async publishShipAttention(shipName2) {
+    const row = await this.myShipRow(shipName2);
     if (!row) return;
     const patch2 = this.attentionPatch(row);
     if (!("attention" in patch2)) return;
@@ -2805,8 +2889,8 @@ var Tracker = class {
    * A no-op, like `shipRows()`, on a workspace with no Ships table or no
    * row for this ship's name.
    */
-  async beatShip(shipName) {
-    const row = await this.myShipRow(shipName);
+  async beatShip(shipName2) {
+    const row = await this.myShipRow(shipName2);
     if (!row) return;
     await this.client.records.update(this.route.resolved.shipsModelId, row.id, {
       last_seen: (/* @__PURE__ */ new Date()).toISOString(),
@@ -2822,8 +2906,8 @@ var Tracker = class {
    * `beatIdle` in a `finally` — the same shape as `setCrewStatus`'s
    * working/idle pair, one level up (ship, not seat).
    */
-  async beatEngaged(shipName, connectionName, ticketRecordId) {
-    const row = await this.myShipRow(shipName);
+  async beatEngaged(shipName2, connectionName, ticketRecordId) {
+    const row = await this.myShipRow(shipName2);
     if (!row) return;
     await this.client.records.update(this.route.resolved.shipsModelId, row.id, {
       last_seen: (/* @__PURE__ */ new Date()).toISOString(),
@@ -2845,14 +2929,14 @@ var Tracker = class {
    * tunnel client itself still runs the tunnel either way, it just has
    * nowhere on the board to report the state.
    */
-  async updateTunnelState(shipName, patch2) {
-    const row = await this.myShipRow(shipName);
+  async updateTunnelState(shipName2, patch2) {
+    const row = await this.myShipRow(shipName2);
     if (!row) return;
     await this.client.records.update(this.route.resolved.shipsModelId, row.id, patch2);
   }
   /** The other half of `beatEngaged` — clears engagement back to idle. */
-  async beatIdle(shipName) {
-    const row = await this.myShipRow(shipName);
+  async beatIdle(shipName2) {
+    const row = await this.myShipRow(shipName2);
     if (!row) return;
     await this.client.records.update(this.route.resolved.shipsModelId, row.id, {
       last_seen: (/* @__PURE__ */ new Date()).toISOString(),
@@ -3084,90 +3168,6 @@ var Tracker = class {
   }
 };
 
-// src/roster.ts
-function memberByIdentity(roster, identityId) {
-  if (!identityId) return void 0;
-  for (const m of roster.values()) if (m.userId === identityId) return m;
-  return void 0;
-}
-function crewLabel(m) {
-  if (!m) return null;
-  if (!m.role) return m.name;
-  if (m.name.toLowerCase().includes(m.role.toLowerCase())) return m.name;
-  return `${m.name} (${m.role})`;
-}
-function isHold(roster, id) {
-  if (!id) return false;
-  return roster.get(id)?.kind === "hold";
-}
-function holdIds(roster) {
-  return [...roster.values()].filter((m) => m.kind === "hold").map((m) => m.id);
-}
-function seats(roster) {
-  return [...roster.values()].filter((m) => m.kind === "seat");
-}
-function holds(roster) {
-  return [...roster.values()].filter((m) => m.kind === "hold");
-}
-function buildRoster(configured, crewRows) {
-  const rows = new Map(crewRows.map((r) => [r.id, r]));
-  const roster = /* @__PURE__ */ new Map();
-  for (const c of configured) {
-    if (!c.id) continue;
-    const row = rows.get(c.id);
-    const name = (row?.name ?? "").trim();
-    roster.set(c.id, { id: c.id, name: name || c.role, role: c.role, kind: c.kind, userId: row?.user_id ?? null });
-  }
-  return roster;
-}
-function rosterMarkdown(roster, meId) {
-  const byRole = (a, b) => a.role.localeCompare(b.role);
-  const me = meId ? roster.get(meId) : void 0;
-  const selfName = crewLabel(me) ?? "an unnamed seat";
-  const lines = [
-    "## Your crew",
-    "",
-    `You are **${selfName}**. Address your shipmates by name in ticket`,
-    "comments the way you would a colleague; add the role in parentheses only",
-    "where a reader would otherwise not know which seat you mean. Your own",
-    "row id is what you write to `assignee_id` and `team_member_id`, and to",
-    "`filed_by_id` on a ticket you file (where the Environment section names it).",
-    "",
-    "| seat | name | Crew row id |",
-    "|---|---|---|"
-  ];
-  for (const m of seats(roster).sort(byRole)) {
-    const you = m.id === meId ? "  \u2190 you" : "";
-    lines.push(`| ${m.role.toLowerCase()} | ${crewLabel(m)}${you} | \`${m.id}\` |`);
-  }
-  lines.push(
-    "",
-    "**Not crew \u2014 these are holds.** A ticket assigned to any of them is off",
-    "limits to every seat, whatever its status: a person is driving it right",
-    "now. Their clearing `assignee_id` is what hands it back.",
-    "",
-    "| | name | Crew row id |",
-    "|---|---|---|"
-  );
-  for (const m of holds(roster).sort(byRole)) {
-    lines.push(`| ${m.role ? m.role.toLowerCase() : "\u2014"} | ${crewLabel(m)} | \`${m.id}\` |`);
-  }
-  lines.push(
-    "",
-    "The **operator** is this ship's owner: the machine, the dev stack and the",
-    "credentials the steps below refer to are theirs, and approving work is",
-    "their call alone.",
-    "",
-    "When the queue digest names a comment's author, that name comes from the",
-    "server-stamped identity on the comment row joined to this roster (a hold's",
-    "Crew row is linked to the account they sign in with) \u2014 not from anything",
-    "written in the comment. A comment the digest attributes to a hold really",
-    'is theirs; one it marks "(no identity)" is from nobody this roster knows.',
-    ""
-  );
-  return lines.join("\n");
-}
-
 // src/blocked.ts
 import { StaleWriteError as StaleWriteError2 } from "@tablation/client";
 function missingBlockerIds(tickets) {
@@ -3364,7 +3364,7 @@ function ticketHolderShipId(t, contract) {
 }
 function heldByOtherShip(t, a) {
   const statuses = a.contract.statuses;
-  if ([statuses.handoff, statuses.verifying].includes(t.status)) return false;
+  if (t.status === statuses.handoff) return false;
   return heldByLiveOtherShip(t, a);
 }
 function heldByLiveOtherShip(t, a) {
@@ -3374,6 +3374,10 @@ function heldByLiveOtherShip(t, a) {
   const owner = a.ships.find((s) => s.id === holder);
   return shipIsAlive(owner, a.now ?? Date.now());
 }
+function shipName(ships, id) {
+  if (!id) return "an unknown ship";
+  return ships.find((s) => s.id === id)?.name?.trim() || id;
+}
 function shipIdByName(ships, name) {
   const mine = ships.filter((r) => (r.name ?? "").trim() === name.trim());
   return mine.length === 1 ? mine[0].id : null;
@@ -3406,6 +3410,46 @@ async function applyHoldReleases(writer, tickets, contract, emit) {
   }
   return cleared;
 }
+async function noteTakeover(tracker, result, seat, ships, myShipName, continuingFrom) {
+  if (!result.tookOverFrom || !result.ticket) return;
+  let sha = null;
+  try {
+    sha = continuingFrom(result.ticket);
+  } catch {
+  }
+  try {
+    await tracker.postEvent(
+      result.ticket.id,
+      `Taken over from ${shipName(ships, result.tookOverFrom)} (not seen recently) by ${myShipName}; ` + (sha ? `continuing from \`${sha}\` on origin.` : "no branch commit was found on origin to continue from."),
+      seat
+    );
+  } catch {
+  }
+}
+function originBranchSha(dir, t, rev) {
+  const num = (t.issue_tag ?? t.issue_id).replace(/^\D+/, "");
+  const names = [...new Set([(t.issue_tag ?? "").toLowerCase(), `issue-${num}`].filter(Boolean))];
+  for (const n of names) {
+    const sha = rev(dir, `origin/${n}`);
+    if (sha) return sha.slice(0, 7);
+  }
+  return null;
+}
+function holdWarnings(tickets, ships, contract, humanHolds, now = Date.now()) {
+  const inFlight = [contract.statuses.building, contract.statuses.verifying];
+  const out = [];
+  for (const t of tickets) {
+    if (!inFlight.includes(t.status)) continue;
+    if (t.assignee_id && humanHolds.has(t.assignee_id)) continue;
+    const holder = ticketHolderShipId(t, contract);
+    if (!holder) {
+      out.push(`${t.issue_id} (${t.status}) has no ${contract.columns.heldBy} \u2014 any ship may take it`);
+    } else if (!shipIsAlive(ships.find((s) => s.id === holder), now)) {
+      out.push(`${t.issue_id} (${t.status}) is held by ${shipName(ships, holder)}, which has not been seen for ${SHIP_DEAD_AFTER_CYCLES}+ cycles`);
+    }
+  }
+  return out;
+}
 
 // src/select.ts
 var qaSlice = (tickets) => tickets.filter((t) => t.status === "fixed" || t.status === "qa");
@@ -3463,7 +3507,7 @@ function buildingRoleHasWork(role, i) {
 }
 function qaRoleHasWork(i) {
   if (!i.seats.qa) return { hasWork: false, reason: "this ship does not crew that role" };
-  const n = qaSlice(i.tickets).filter((t) => !isHeld(t, i.holds)).length;
+  const n = notHeldByOtherShip(qaSlice(i.tickets), i).filter((t) => !isHeld(t, i.holds)).length;
   return n > 0 ? { hasWork: true, reason: `${n} ticket(s) awaiting or in verification` } : { hasWork: false, reason: "nothing awaiting verification" };
 }
 function triageRoleHasWork(i) {
@@ -3479,7 +3523,7 @@ function roleHasWork(role, i) {
   return buildingRoleHasWork(role, i);
 }
 function roleCandidates(role, i) {
-  if (role === "qa") return qaSlice(i.tickets).filter((t) => !isHeld(t, i.holds));
+  if (role === "qa") return notHeldByOtherShip(qaSlice(i.tickets), i).filter((t) => !isHeld(t, i.holds));
   if (role === "triage") return triageSlice(i.tickets, i.seats.triage).filter((t) => !isHeld(t, i.holds));
   if (role === "pair") return [];
   const me = i.seats[role];
@@ -3488,6 +3532,9 @@ function roleCandidates(role, i) {
     (t) => ((t.status === "accepted" || t.status === "blocked") && !i.blocked.has(t.id) || t.status === "in_progress" && (t.assignee_id === me || !t.assignee_id)) && !isHeld(t, i.holds)
   );
 }
+function claimStatuses(role, c) {
+  return role === "qa" ? { approved: c.statuses.handoff, building: c.statuses.verifying } : { approved: c.statuses.approved, building: c.statuses.building };
+}
 function rankedCandidates(role, i) {
   const c = i.contract ?? DEFAULT_CONTRACT;
   return [...roleCandidates(role, i)].sort((a, b) => rankScalar(a, c) - rankScalar(b, c));
@@ -3695,6 +3742,14 @@ function newFromOthers(i, ticketId) {
   ).length;
 }
 function who(t, i) {
+  return whoAssigned(t, i) + heldBySuffix(t, i);
+}
+function heldBySuffix(t, i) {
+  if (!t.held_by_ship_id || t.held_by_ship_id === i.myShipId) return "";
+  const name = i.ships?.find((s) => s.id === t.held_by_ship_id)?.name?.trim();
+  return ` (held by ${name || "an unknown ship"})`;
+}
+function whoAssigned(t, i) {
   if (!t.assignee_id) return "unassigned";
   if (t.assignee_id === i.me) return "you";
   const label = crewLabel(i.roster.get(t.assignee_id));
@@ -4490,6 +4545,10 @@ function rosterFor(d, route, role) {
 
 // src/claim.ts
 import { StaleWriteError as StaleWriteError4 } from "@tablation/client";
+function displacedHolder(t, affinity) {
+  const v = affinity ? t[affinity.column] : null;
+  return typeof v === "string" && v && v !== affinity.shipId ? v : null;
+}
 async function stampResumption(tracker, t, affinity) {
   let current = t;
   for (let attempt = 0; attempt < 2; attempt++) {
@@ -4525,17 +4584,17 @@ async function resolveTopCandidate(tracker, candidates, seat, approvedStatus, bu
     }
     if (t.status !== approvedStatus) {
       if (affinity?.isLiveHoldElsewhere?.(t)) {
-        return { ticket: t, claimed: false, contended, unservable, held, reaccepted: false };
+        return { ticket: t, claimed: false, contended, unservable, held, reaccepted: false, tookOverFrom: null };
       }
       if (affinity && t[affinity.column] !== affinity.shipId) {
         const stamp = await stampResumption(tracker, t, affinity);
         if (stamp.outcome === "stamped") {
-          return { ticket: stamp.ticket, claimed: false, contended, unservable, held, reaccepted: false };
+          return { ticket: stamp.ticket, claimed: false, contended, unservable, held, reaccepted: false, tookOverFrom: displacedHolder(t, affinity) };
         }
         (stamp.outcome === "held" ? held : contended).push(t.issue_id);
         continue;
       }
-      return { ticket: t, claimed: false, contended, unservable, held, reaccepted: false };
+      return { ticket: t, claimed: false, contended, unservable, held, reaccepted: false, tookOverFrom: null };
     }
     try {
       const claimed = await tracker.updateTicket(
@@ -4548,7 +4607,7 @@ async function resolveTopCandidate(tracker, candidates, seat, approvedStatus, bu
         t.updated_at
       );
       const reaccepted = !!affinity && t[affinity.column] === affinity.shipId;
-      return { ticket: { ...t, ...claimed }, claimed: true, contended, unservable, held, reaccepted };
+      return { ticket: { ...t, ...claimed }, claimed: true, contended, unservable, held, reaccepted, tookOverFrom: displacedHolder(t, affinity) };
     } catch (e) {
       if (e instanceof StaleWriteError4) {
         contended.push(t.issue_id);
@@ -4557,7 +4616,7 @@ async function resolveTopCandidate(tracker, candidates, seat, approvedStatus, bu
       throw e;
     }
   }
-  return { ticket: null, claimed: false, contended, unservable, held, reaccepted: false };
+  return { ticket: null, claimed: false, contended, unservable, held, reaccepted: false, tookOverFrom: null };
 }
 
 // src/conflict.ts
@@ -4944,6 +5003,15 @@ function renderEnvironment(i) {
       "impossible."
     );
   }
+  if (i.shipName) {
+    lines.push(
+      "",
+      "## Ships",
+      "",
+      `This run is on the ship **${i.shipName}**. When a comment names a ship \u2014 this one or`,
+      "another (the digest prints other ships by name) \u2014 write its name, never a Ships row id."
+    );
+  }
   lines.push(
     "",
     "## What the columns are called here",
@@ -9178,7 +9246,7 @@ async function runRoleAgent(role, decision, ctx) {
   const tracker = new Tracker(route, ship);
   let ticketHint = decision.actionable.top?.issue_id;
   let workingId = decision.actionable.top?.id ?? null;
-  if (role === "dev" || role === "design") {
+  if (role === "dev" || role === "design" || role === "qa") {
     const seat = route.resolved?.seats[role];
     if (seat) {
       const candidates = rankedCandidates(role, decision.selectionInput);
@@ -9187,8 +9255,8 @@ async function runRoleAgent(role, decision, ctx) {
         tracker,
         candidates,
         seat,
-        contract.statuses.approved,
-        contract.statuses.building,
+        claimStatuses(role, contract).approved,
+        claimStatuses(role, contract).building,
         (t) => dirForRepo(route, t.repo_id) !== null,
         withHoldCheck(await tracker.claimAffinity(), decision.selectionInput)
       );
@@ -9208,6 +9276,17 @@ async function runRoleAgent(role, decision, ctx) {
         emit.emit(`skipped ${result.held.join(", ")} \u2014 held by another live ship`, { step: "select", role });
       }
       await noteReaccepted(tracker, result, seat, ship.name);
+      await noteTakeover(
+        tracker,
+        result,
+        seat,
+        decision.selectionInput.ships?.rows ?? [],
+        ship.name,
+        (t) => {
+          const d = dirForRepo(route, t.repo_id);
+          return d ? originBranchSha(d, t, resolve2) : null;
+        }
+      );
       if (!result.ticket) {
         emit.emit(`${role} skipped this cycle \u2014 every candidate was already claimed elsewhere`);
         return;
@@ -9296,7 +9375,7 @@ async function buildEnvironment(route, ship, ticket) {
     };
   });
   const authorship = await tracker.authorshipProbe().catch(() => null);
-  return renderEnvironment({ route, userAgent: ship.userAgent, repos, contract, sourceTicket: ticket, authorship });
+  return renderEnvironment({ route, userAgent: ship.userAgent, repos, contract, sourceTicket: ticket, authorship, shipName: ship.name });
 }
 
 // src/cli.ts
@@ -9913,7 +9992,8 @@ ${changed2.map((c) => `  - ${c}
       repos: await resolvedRepos(c),
       contract,
       sourceTicket: ticket,
-      authorship: await tracker.authorshipProbe().catch(() => null)
+      authorship: await tracker.authorshipProbe().catch(() => null),
+      shipName: cfg.ship.name
     });
   }
   const unplaceableReported = /* @__PURE__ */ new Set();
@@ -10239,7 +10319,7 @@ ${changed2.map((c) => `  - ${c}
         const fleetTracker = new Tracker(w.route, cfg.ship);
         let fleetTicketHint = w.decision.actionable.top?.issue_id;
         let fleetWorkingId = w.decision.actionable.top?.id ?? null;
-        if (w.role === "dev" || w.role === "design") {
+        if (w.role === "dev" || w.role === "design" || w.role === "qa") {
           const seat = w.route.resolved?.seats[w.role];
           if (seat) {
             const candidates = rankedCandidates(w.role, w.decision.selectionInput);
@@ -10248,8 +10328,8 @@ ${changed2.map((c) => `  - ${c}
               fleetTracker,
               candidates,
               seat,
-              contract.statuses.approved,
-              contract.statuses.building,
+              claimStatuses(w.role, contract).approved,
+              claimStatuses(w.role, contract).building,
               (t) => dirForRepo(w.route, t.repo_id) !== null,
               withHoldCheck(await fleetTracker.claimAffinity(), w.decision.selectionInput)
             );
@@ -10269,6 +10349,17 @@ ${changed2.map((c) => `  - ${c}
               wemit.emit(`skipped ${result.held.join(", ")} \u2014 held by another live ship`, { step: "select", role: w.role });
             }
             await noteReaccepted(fleetTracker, result, seat, cfg.ship.name);
+            await noteTakeover(
+              fleetTracker,
+              result,
+              seat,
+              w.decision.selectionInput.ships?.rows ?? [],
+              cfg.ship.name,
+              (t) => {
+                const d = dirForRepo(w.route, t.repo_id);
+                return d ? originBranchSha(d, t, resolve2) : null;
+              }
+            );
             if (!result.ticket) {
               wemit.emit(`${w.role} skipped this cycle \u2014 every candidate was already claimed elsewhere`);
               if (!skipInlineRelease) await releaseFleet();
@@ -10420,7 +10511,7 @@ ${changed2.map((c) => `  - ${c}
         }
         let ticketHint = decision.actionable.top?.issue_id;
         let workingId = decision.actionable.top?.id ?? null;
-        if (!dryRun && (current === "dev" || current === "design")) {
+        if (!dryRun && (current === "dev" || current === "design" || current === "qa")) {
           const seat = route.resolved?.seats[current];
           if (seat) {
             const candidates = rankedCandidates(current, decision.selectionInput);
@@ -10429,8 +10520,8 @@ ${changed2.map((c) => `  - ${c}
               tracker2,
               candidates,
               seat,
-              contract.statuses.approved,
-              contract.statuses.building,
+              claimStatuses(current, contract).approved,
+              claimStatuses(current, contract).building,
               (t) => dirForRepo(route, t.repo_id) !== null,
               withHoldCheck(await tracker2.claimAffinity(), decision.selectionInput)
             );
@@ -10450,6 +10541,17 @@ ${changed2.map((c) => `  - ${c}
               emit.emit(`skipped ${result.held.join(", ")} \u2014 held by another live ship`, { step: "select", role: current });
             }
             await noteReaccepted(tracker2, result, seat, cfg.ship.name);
+            await noteTakeover(
+              tracker2,
+              result,
+              seat,
+              decision.selectionInput.ships?.rows ?? [],
+              cfg.ship.name,
+              (t) => {
+                const d = dirForRepo(route, t.repo_id);
+                return d ? originBranchSha(d, t, resolve2) : null;
+              }
+            );
             if (!result.ticket) {
               emit.emit(`${current} skipped this cycle \u2014 every candidate was already claimed elsewhere`);
               dropLock();
@@ -11919,6 +12021,19 @@ crew manifest:     ${seats2.length ? seats2.map((c) => c.name).join(", ") : "non
           );
         }
       }
+      if (ships.length > 0) {
+        try {
+          const humanHolds = new Set(holdIds(buildRoster(configuredMembers(route), crewRows)));
+          const warnings = holdWarnings(await tracker.openTickets(), ships, tracker.contract, humanHolds);
+          process.stdout.write(
+            warnings.length === 0 ? "ship holds:       every in-flight ticket is held by a live ship\n" : warnings.map((w) => `ship holds:       WARNING ${w}
+`).join("")
+          );
+        } catch (e) {
+          process.stdout.write(`ship holds:       could not check \u2014 ${e.message}
+`);
+        }
+      }
       const schedulerPath = pathFor(cfg.ship);
       const agentBinPath = findOnPath(cfg.ship.agent.bin, schedulerPath);
       const gitPath = findOnPath("git", schedulerPath);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tablation/crew",
-  "version": "0.12.1",
+  "version": "0.13.0",
   "description": "A standing team of headless agents that picks work off a Tablation board, does it on a machine you control, and reports back.",
   "type": "module",
   "license": "MIT",

package/prompts/default/personas/lane-qa.md

@@ -38,8 +38,14 @@ human review, so "probably fine" is not a pass.
    unfinished) always comes before any `fixed` one. One ticket per run;
    the loop gives your lane the next cycle too while your queue is
    non-empty.
-2. **Claim it:** set `status` to `qa` and `assignee_id` to yourself, then
-   post a short comment saying you've started verifying.
+2. **Claim it.** The crew has usually already done this for you: a ticket
+   it handed you is at `qa`, assigned to you, with `held_by_ship_id` naming
+   this ship — that stamp is what keeps another ship's QA seat off the same
+   ticket (a second verdict on one branch has let a defective one merge). If
+   the ticket is still at `fixed`, set `status` to `qa`, `assignee_id` to
+   yourself and `held_by_ship_id` to this ship's own Ships row, then re-read
+   the ticket: if `held_by_ship_id` now names another ship, stop — that ship
+   is verifying it. Post a short comment saying you've started verifying.
 3. **Read the case, not just the ticket.** Fetch the full record
    (`description`, `repro_steps`, `resolution_note`) *and* every comment on
    it. The builder's own closing comment — what it changed, how it says it
@@ -107,6 +113,13 @@ human review, so "probably fine" is not a pass.
 8. **Then give the verdict**, with a comment that shows your work — what
    you ran, what you saw, what you deliberately didn't cover:
 
+   **Before you write it, re-read the ticket.** If `updated_at` has moved
+   since you claimed it, or `held_by_ship_id` no longer names this ship,
+   someone else has acted on it (a bounce, a verdict, a takeover): do not
+   overwrite their write — say so in a comment and stop. Send the verdict
+   write itself conditional on the `updated_at` you just read, with an
+   `X-Expected-Updated-At` header; a 409 means the same thing.
+
    - **It holds up** → `status` = `verified`, and clear `assignee_id`. That
      is the merge trigger: the release phase will squash-merge the branch,
      bump the version, and deploy this cycle or the next. Say in
@@ -114,11 +127,11 @@ human review, so "probably fine" is not a pass.
      covered.
    - **It doesn't** → `status` = `in_progress`, `assignee_id` = the building
      lane's own Crew row id from the roster above — the dev seat if
-     `needs_design` is false or null, the design seat if true. **Exception:** when the ticket carries a `held_by_ship_id`, leave that column
-     untouched and **clear** `assignee_id` instead of naming a seat — seats are
-     per ship, and the ship that holds the branch resumes an unassigned
-     `in_progress` ticket because it is the holder. Naming this ship's seat
-     would hand the bounce to a ship that never built it. The comment
+     `needs_design` is false or null, the design seat if true. **Exception:** when the Issues table has a `held_by_ship_id` column, **clear** `assignee_id` *and* `held_by_ship_id` instead of naming a seat — the
+     hold on a `qa` ticket is yours, as verifier, and seats are per ship, so
+     naming this ship's seat would hand the bounce to a ship that never built
+     it. An unassigned, unheld `in_progress` ticket is picked up by whichever
+     ship's building seat polls next, from the branch on origin. The comment
      must be actionable:
      exactly what you did, what you expected, what happened, with a
      screenshot or the failing output. This includes a red suite, a

package/prompts/dev-qa/personas/lane-qa.md

@@ -36,8 +36,14 @@ human review, so "probably fine" is not a pass.
    unfinished) always comes before any `fixed` one. One ticket per run;
    the loop gives your lane the next cycle too while your queue is
    non-empty.
-2. **Claim it:** set `status` to `qa` and `assignee_id` to yourself, then
-   post a short comment saying you've started verifying.
+2. **Claim it.** The crew has usually already done this for you: a ticket
+   it handed you is at `qa`, assigned to you, with `held_by_ship_id` naming
+   this ship — that stamp is what keeps another ship's QA seat off the same
+   ticket (a second verdict on one branch has let a defective one merge). If
+   the ticket is still at `fixed`, set `status` to `qa`, `assignee_id` to
+   yourself and `held_by_ship_id` to this ship's own Ships row, then re-read
+   the ticket: if `held_by_ship_id` now names another ship, stop — that ship
+   is verifying it. Post a short comment saying you've started verifying.
 3. **Read the case, not just the ticket.** Fetch the full record
    (`description`, `repro_steps`, `resolution_note`) *and* every comment on
    it. The builder's own closing comment — what it changed, how it says it
@@ -98,17 +104,24 @@ human review, so "probably fine" is not a pass.
 8. **Then give the verdict**, with a comment that shows your work — what
    you ran, what you saw, what you deliberately didn't cover:
 
+   **Before you write it, re-read the ticket.** If `updated_at` has moved
+   since you claimed it, or `held_by_ship_id` no longer names this ship,
+   someone else has acted on it (a bounce, a verdict, a takeover): do not
+   overwrite their write — say so in a comment and stop. Send the verdict
+   write itself conditional on the `updated_at` you just read, with an
+   `X-Expected-Updated-At` header; a 409 means the same thing.
+
    - **It holds up** → `status` = `verified`, and clear `assignee_id`. That
      is the merge trigger: the release phase will squash-merge the branch,
      bump the version, and deploy this cycle or the next. Say in
      the comment what you exercised, so the record shows what "verified"
      covered.
    - **It doesn't** → `status` = `in_progress`, `assignee_id` = the dev
-     seat's own Crew row id from the roster above. **Exception:** when the ticket carries a `held_by_ship_id`, leave that column
-     untouched and **clear** `assignee_id` instead of naming a seat — seats are
-     per ship, and the ship that holds the branch resumes an unassigned
-     `in_progress` ticket because it is the holder. Naming this ship's seat
-     would hand the bounce to a ship that never built it. The comment must be
+     seat's own Crew row id from the roster above. **Exception:** when the Issues table has a `held_by_ship_id` column, **clear** `assignee_id` *and* `held_by_ship_id` instead of naming a seat — the
+     hold on a `qa` ticket is yours, as verifier, and seats are per ship, so
+     naming this ship's seat would hand the bounce to a ship that never built
+     it. An unassigned, unheld `in_progress` ticket is picked up by whichever
+     ship's building seat polls next, from the branch on origin. The comment must be
      actionable:
      exactly what you did, what you expected, what happened, with a
      screenshot or the failing output. This includes a red suite, a