@tablation/crew 0.127.10 → 0.128.0

package/dist/cli.js

@@ -8280,897 +8280,371 @@ var BeforeFirstEditTracker = class {
 };
 
 // src/agent-log.ts
-import { existsSync as existsSync21, mkdirSync as mkdirSync15, readdirSync as readdirSync6, readFileSync as readFileSync22, rmSync as rmSync12, writeFileSync as writeFileSync16 } from "fs";
-import { join as join23 } from "path";
+import { existsSync as existsSync23, mkdirSync as mkdirSync16, readdirSync as readdirSync7, readFileSync as readFileSync23, rmSync as rmSync13, writeFileSync as writeFileSync17 } from "fs";
+import { join as join25 } from "path";
 
 // src/pending-backoff.ts
 var sleepBackoff = (attempts) => Math.min(6e4 * 2 ** Math.max(0, attempts - 1), 30 * 6e4);
 
-// src/agent-log.ts
-var AgentLogUnreachableError = class extends Error {
-};
-var AgentLogHttpError = class extends Error {
-  status;
-  /** True when the refusal was of the Agent Log row itself (not a later cycle post): the tracker is not taking this seat's reports (CREW-2832). */
-  row = false;
-  constructor(message, status2) {
-    super(message);
-    this.status = status2;
+// src/ticket-branch.ts
+import { basename as basename7 } from "path";
+
+// src/tracker.ts
+import { hostname } from "os";
+import { TablationClient } from "@tablation/client";
+
+// src/work-mode.ts
+function projectWorkModes(rows, contract) {
+  const out = /* @__PURE__ */ new Map();
+  for (const r of rows) {
+    const v = r[contract.columns.workMode];
+    out.set(r.id, v === contract.manualWorkMode ? "manual" : v === contract.hybridWorkMode ? "hybrid" : "automatic");
   }
-};
-async function request(target, method, path, body) {
-  const url = `${target.baseUrl.replace(/\/+$/, "")}/api${path}`;
-  const res = await fetch(url, {
-    method,
-    headers: {
-      Authorization: `Bearer ${target.apiKey}`,
-      "User-Agent": target.userAgent,
-      ...body === void 0 ? {} : { "Content-Type": "application/json" }
-    },
-    body: body === void 0 ? void 0 : JSON.stringify(body)
-  });
-  if (!res.ok) throw new AgentLogHttpError(`${path}: ${res.status} ${res.statusText}`, res.status);
-  return await res.json();
+  return out;
 }
-var issueColumns = /* @__PURE__ */ new Map();
-function columnsOf(target, modelId) {
-  const key = `${target.baseUrl}|${target.workspaceId}|${modelId}`;
-  let p = issueColumns.get(key);
-  if (!p) {
-    p = request(target, "GET", `/data-models/${modelId}`).then((m) => new Set((m.fields ?? []).map((f) => f.columnName)));
-    p.catch(() => issueColumns.delete(key));
-    issueColumns.set(key, p);
-  }
-  return p;
+function agentAssigneeIds(crewRows, isHoldRow) {
+  return new Set(crewRows.filter((r) => !!r.agent_id && !isHoldRow(r.id)).map((r) => r.id));
 }
-async function findTicketRecord(target, t, ref) {
-  const filters = {
-    combinator: "OR",
-    conditions: [
-      { columnName: t.keyColumn, operator: "EQ", value: ref },
-      { columnName: t.tagColumn, operator: "EQ", value: ref }
-    ]
-  };
-  const rows = await request(
-    target,
-    "GET",
-    `/data-models/${t.issuesModelId}/records?limit=2&filters=${encodeURIComponent(JSON.stringify(filters))}`
-  );
-  return rows.length === 1 ? rows[0].id : void 0;
+function modeOf(t, wm) {
+  if (!t.project_id) return "manual";
+  return wm.modes.get(t.project_id) ?? "automatic";
 }
-function counterIncrements(run3, cols, have) {
-  const figures = [
-    [cols.agentRuns, 1],
-    [cols.tokensIn, run3.tokensIn],
-    [cols.tokensOut, run3.tokensOut],
-    [cols.cacheReadTokens, run3.cacheReadTokens],
-    [cols.cacheWriteTokens, run3.cacheWriteTokens],
-    [cols.costUsd, run3.costUsd]
-  ];
-  const out = {};
-  for (const [column, value2] of figures) {
-    if (value2 !== void 0 && Number.isFinite(value2) && have.has(column)) out[column] = { $op: "increment", value: value2 };
+function withinWorkMode(tickets, wm) {
+  if (!wm || wm.modes.size === 0) return tickets;
+  return tickets.filter((t) => {
+    const mode = modeOf(t, wm);
+    if (mode === "automatic") return true;
+    if (mode === "manual") return false;
+    return !!t.assignee_id && wm.agentAssignees.has(t.assignee_id);
+  });
+}
+function isAutomatic(t, wm) {
+  if (!wm || wm.modes.size === 0) return true;
+  return modeOf(t, wm) === "automatic";
+}
+function skippedByMode(tickets, wm) {
+  const out = { manual: 0, hybrid: 0 };
+  if (!wm || wm.modes.size === 0) return out;
+  const kept = new Set(withinWorkMode(tickets, wm));
+  for (const t of tickets) {
+    if (kept.has(t)) continue;
+    out[modeOf(t, wm) === "manual" ? "manual" : "hybrid"]++;
   }
   return out;
 }
-var BEFORE_EDIT_COLUMNS = {
-  search: "calls_before_edit_search",
-  symbol: "calls_before_edit_symbol",
-  other: "calls_before_edit_other",
-  seconds: "seconds_to_first_edit",
-  edited: "edited"
-};
-function beforeFirstEditBody(b) {
+function withoutManualVerified(tickets, verifiedStatus, wm) {
+  if (!wm || wm.modes.size === 0) return tickets;
+  return tickets.filter((t) => t.status !== verifiedStatus || modeOf(t, wm) !== "manual");
+}
+function projectModeLabels(rows) {
+  return rows.map((r) => {
+    const name = r.name ?? r.id;
+    return { id: r.id, name, mode: r.mode, label: `${name} (${r.mode})` };
+  });
+}
+
+// src/board-lock.ts
+import { StaleWriteError } from "@tablation/client";
+function releaseLockScope(route2, repo) {
+  return `${route2}/${repo}`;
+}
+async function acquireBoardLock(client2, modelId, scope, holderLabel, ttlMs, log = {}) {
+  if (!modelId) return { ok: true, release: async () => {
+  }, exclusion: "off" };
+  const filters = JSON.stringify([{ columnName: "scope", operator: "EQ", value: scope }]);
+  const rows = await client2.list(modelId, { filters, limit: 1 });
+  const row = rows[0];
+  if (!row) return { ok: false, reason: "missing" };
+  const age = Date.now() - new Date(row.updated_at).getTime();
+  const staleOwn = !!row.holder && row.holder !== holderLabel && isDeadOwnClaim(row.holder, holderLabel);
+  const free = !row.holder || row.holder === holderLabel || age > ttlMs || staleOwn;
+  if (staleOwn) log.warn?.(`reclaimed stale own claim ${row.holder} on ${scope} (process is gone)`);
+  if (!free) return { ok: false, heldBy: row.holder ?? void 0, reason: "held" };
+  let claimed;
+  try {
+    claimed = await client2.update(modelId, row.id, { holder: holderLabel }, row.updated_at);
+  } catch (e) {
+    if (e instanceof StaleWriteError) return { ok: false, reason: "contended" };
+    throw e;
+  }
   return {
-    [BEFORE_EDIT_COLUMNS.search]: b.calls.search,
-    [BEFORE_EDIT_COLUMNS.symbol]: b.calls.symbol,
-    [BEFORE_EDIT_COLUMNS.other]: b.calls.other,
-    [BEFORE_EDIT_COLUMNS.edited]: b.edited,
-    ...b.secondsToFirstEdit !== void 0 ? { [BEFORE_EDIT_COLUMNS.seconds]: b.secondsToFirstEdit } : {}
+    ok: true,
+    exclusion: "taken",
+    release: async () => {
+      try {
+        try {
+          await client2.update(modelId, row.id, { holder: "" }, claimed.updated_at);
+        } catch (e) {
+          if (!(e instanceof StaleWriteError)) throw e;
+          const [now] = await client2.list(modelId, { filters: scopeFilter(scope), limit: 1 });
+          if (now?.holder === holderLabel) await client2.update(modelId, row.id, { holder: "" }, now.updated_at);
+        }
+        log.debug?.(`lock released for ${scope}`);
+      } catch (e) {
+        log.warn?.(`lock release failed for ${scope}: ${e.message}`);
+      }
+    }
   };
 }
-async function writeBeforeFirstEdit(target, rowId, b) {
+function isDeadOwnClaim(holder, mine) {
+  const split = (l) => {
+    const i = l.lastIndexOf(":");
+    return i < 0 ? null : { ship: l.slice(0, i), pid: Number(l.slice(i + 1)) };
+  };
+  const h = split(holder), m = split(mine);
+  if (!h || !m || h.ship !== m.ship || !Number.isInteger(h.pid) || h.pid <= 0) return false;
   try {
-    const model = await request(
-      target,
-      "GET",
-      `/data-models/agent_log?workspaceId=${encodeURIComponent(target.workspaceId)}`
-    );
-    const have = await columnsOf(target, model.id);
-    const body = Object.fromEntries(Object.entries(beforeFirstEditBody(b)).filter(([column]) => have.has(column)));
-    if (Object.keys(body).length === 0) return;
-    await request(target, "PATCH", `/data-models/${model.id}/records/${rowId}`, body);
-  } catch {
+    process.kill(h.pid, 0);
+    return false;
+  } catch (e) {
+    return e.code === "ESRCH";
   }
 }
-async function post(target, path, body) {
-  const url = `${target.baseUrl.replace(/\/+$/, "")}/api/workspaces/${target.workspaceId}${path}`;
-  const res = await fetch(url, {
-    method: "POST",
-    headers: {
-      Authorization: `Bearer ${target.apiKey}`,
-      // Cloudflare 403s default agents on this host — same header connect.ts sends.
-      "User-Agent": target.userAgent,
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify(body)
-  });
-  if (!res.ok) throw new AgentLogHttpError(`${path}: ${res.status} ${res.statusText}`, res.status);
-  return await res.json();
+async function lockRowState(client2, modelId, scope) {
+  const rows = await client2.list(modelId, { filters: scopeFilter(scope), limit: 1 });
+  const row = rows[0];
+  if (!row) return { exists: false };
+  return { exists: true, ...row.holder ? { holder: row.holder, since: row.updated_at } : {} };
 }
-async function reportAgentRun(target, run3) {
-  let ticketRecordId;
-  if (target.tickets && run3.ticketReference) {
+var scopeFilter = (scope) => JSON.stringify([{ columnName: "scope", operator: "EQ", value: scope }]);
+async function ensureLockRows(client2, modelId, scopes) {
+  const created = [];
+  for (const scope of scopes) {
+    const filters = scopeFilter(scope);
+    if ((await client2.list(modelId, { filters, limit: 1 })).length > 0) continue;
+    let mine;
     try {
-      ticketRecordId = await findTicketRecord(target, target.tickets, run3.ticketReference);
-    } catch {
-    }
-  }
-  const body = {
-    agentId: target.agentId,
-    ticketReference: run3.ticketReference,
-    outcome: run3.outcome,
-    startedAt: run3.startedAt,
-    finishedAt: run3.finishedAt,
-    source: "client",
-    client: "crew",
-    model: run3.model,
-    tokensIn: run3.tokensIn,
-    tokensOut: run3.tokensOut,
-    cacheReadTokens: run3.cacheReadTokens,
-    cacheWriteTokens: run3.cacheWriteTokens,
-    costUsd: run3.costUsd,
-    numTurns: run3.numTurns,
-    prefixTokens: run3.prefixTokens,
-    promptVersion: run3.promptVersion,
-    promptSha: run3.promptSha
-  };
-  const workItem = target.tickets && ticketRecordId ? { workItemTable: target.tickets.issuesModelId, workItemRecordId: ticketRecordId } : {};
-  let entry;
-  try {
-    entry = await post(target, "/agents/log", { ...body, ...workItem, harness: run3.harness, provider: run3.provider });
-  } catch (e) {
-    if (!(e instanceof AgentLogHttpError)) throw new AgentLogUnreachableError(e.message);
-    if (e.status >= 500) throw new AgentLogUnreachableError(e.message);
-    if (e.status !== 400 || !run3.harness && !run3.provider && !ticketRecordId) {
-      e.row = true;
+      mine = await client2.create(modelId, { scope, holder: "" });
+    } catch (e) {
+      const status2 = e.status;
+      if (status2 === 409 || status2 === 400) {
+        if ((await client2.list(modelId, { filters, limit: 1 })).length > 0) continue;
+      }
       throw e;
     }
-    try {
-      entry = await post(target, "/agents/log", body);
-    } catch (e2) {
-      if (e2 instanceof AgentLogHttpError && e2.status < 500) e2.row = true;
-      throw e2;
-    }
-  }
-  for (const cycle of run3.cycles) {
-    await post(target, `/agents/log/${entry.id}/cycles`, {
-      cycleIndex: cycle.cycleIndex,
-      occurredAt: cycle.occurredAt,
-      thinking: cycle.thinking,
-      ...cycle.role ? { role: cycle.role } : {}
-    });
-  }
-  if (run3.beforeFirstEdit) await writeBeforeFirstEdit(target, entry.id, run3.beforeFirstEdit);
-  const counters = target.tickets && ticketRecordId ? await addRunToTicket(target, target.tickets, ticketRecordId, run3) : void 0;
-  return {
-    agentLogId: entry.id,
-    ...counters?.warning ? { counterWarning: counters.warning } : {},
-    ...counters?.retry ? { counterRetry: counters.retry } : {}
-  };
-}
-var isRetryable = (e) => !(e instanceof AgentLogHttpError) || e.status >= 500;
-async function writeCounters(target, w) {
-  const have = await columnsOf(target, w.issuesModelId);
-  const body = Object.fromEntries(Object.entries(w.body).filter(([column]) => have.has(column)));
-  if (Object.keys(body).length === 0) return;
-  await request(target, "PATCH", `/data-models/${w.issuesModelId}/records/${w.recordId}`, body);
-}
-async function addRunToTicket(target, t, recordId, run3) {
-  const write = {
-    issuesModelId: t.issuesModelId,
-    recordId,
-    ticketReference: run3.ticketReference,
-    counters: t.counters,
-    body: counterIncrements(run3, t.counters, new Set(Object.values(t.counters)))
-  };
-  try {
-    await writeCounters(target, write);
-    return {};
-  } catch (e) {
-    return {
-      warning: `could not add run spend to ${run3.ticketReference}: ${e.message}`,
-      ...isRetryable(e) ? { retry: write } : {}
-    };
-  }
-}
-var queueDir = (stateDir) => join23(stateDir, "pending-agent-logs");
-function queueAgentRun(stateDir, name, q2) {
-  mkdirSync15(queueDir(stateDir), { recursive: true });
-  writeFileSync16(join23(queueDir(stateDir), `${name}.json`), JSON.stringify(q2));
-}
-async function replayQueuedAgentRuns(stateDir, route2, keyFor, log, now = /* @__PURE__ */ new Date()) {
-  const dir = queueDir(stateDir);
-  if (!existsSync21(dir)) return 0;
-  let sent = 0;
-  for (const f of readdirSync6(dir).filter((n) => n.endsWith(".json")).sort()) {
-    const path = join23(dir, f);
-    let q2;
-    try {
-      q2 = JSON.parse(readFileSync22(path, "utf8"));
-    } catch {
-      continue;
-    }
-    if (q2.version !== 1 || q2.route !== route2 || now.toISOString() < q2.nextAttemptAt) continue;
-    try {
-      const apiKey = await keyFor(q2.role);
-      if (!apiKey) continue;
-      const sentRun = await reportAgentRun({ ...q2.target, apiKey }, q2.report);
-      if (sentRun.counterWarning) log.warn(sentRun.counterWarning);
-      if (sentRun.counterRetry) queueTicketCounters(stateDir, f.replace(/\.json$/, ""), {
-        version: 1,
-        route: q2.route,
-        role: q2.role,
-        target: q2.target,
-        write: sentRun.counterRetry,
-        attempts: 0,
-        nextAttemptAt: (/* @__PURE__ */ new Date()).toISOString()
+    const all = await client2.list(modelId, { filters, limit: 20 });
+    const keeper = [...all].sort((a, b) => (a.created_at ?? "").localeCompare(b.created_at ?? "") || a.id.localeCompare(b.id))[0];
+    if (keeper && keeper.id !== mine.id) {
+      await client2.remove(modelId, mine.id).catch(() => {
       });
-      rmSync12(path, { force: true });
-      sent += 1;
-      log.emit(`sent a queued Agent Log report (${f})`);
-    } catch (e) {
-      if (!(e instanceof AgentLogUnreachableError)) {
-        rmSync12(path, { force: true });
-        log.warn(`dropped a queued Agent Log report (${f}): ${e.message}`);
-        continue;
-      }
-      const attempts = q2.attempts + 1;
-      writeFileSync16(path, JSON.stringify({
-        ...q2,
-        attempts,
-        warned: true,
-        nextAttemptAt: new Date(now.getTime() + sleepBackoff(attempts)).toISOString()
-      }));
-      if (!q2.warned) log.warn(`a queued Agent Log report could not be sent yet (${e.message}); will retry`);
-    }
-  }
-  return sent;
-}
-var countersDir = (stateDir) => join23(stateDir, "pending-ticket-counters");
-function queueTicketCounters(stateDir, name, q2) {
-  mkdirSync15(countersDir(stateDir), { recursive: true });
-  writeFileSync16(join23(countersDir(stateDir), `${name}.json`), JSON.stringify(q2));
-}
-async function replayQueuedTicketCounters(stateDir, route2, keyFor, log, now = /* @__PURE__ */ new Date()) {
-  const dir = countersDir(stateDir);
-  if (!existsSync21(dir)) return 0;
-  let sent = 0;
-  for (const f of readdirSync6(dir).filter((n) => n.endsWith(".json")).sort()) {
-    const path = join23(dir, f);
-    let q2;
-    try {
-      q2 = JSON.parse(readFileSync22(path, "utf8"));
-    } catch {
       continue;
     }
-    if (q2.version !== 1 || q2.route !== route2 || now.toISOString() < q2.nextAttemptAt) continue;
-    try {
-      const apiKey = await keyFor(q2.role);
-      if (!apiKey) continue;
-      await writeCounters({ ...q2.target, apiKey }, q2.write);
-      rmSync12(path, { force: true });
-      sent += 1;
-      log.emit(`added a queued run's spend to ${q2.write.ticketReference ?? q2.write.recordId} (${f})`);
-    } catch (e) {
-      if (!isRetryable(e)) {
-        rmSync12(path, { force: true });
-        log.warn(`dropped a queued ticket counter update (${f}): ${e.message}`);
-        continue;
-      }
-      const attempts = q2.attempts + 1;
-      writeFileSync16(path, JSON.stringify({
-        ...q2,
-        attempts,
-        warned: true,
-        nextAttemptAt: new Date(now.getTime() + sleepBackoff(attempts)).toISOString()
-      }));
-      if (!q2.warned) log.warn(`a queued ticket counter update could not be sent yet (${e.message}); will retry`);
-    }
+    created.push(scope);
   }
-  return sent;
+  return created;
 }
 
-// src/ticket-attribution.ts
-var TICKET_KEY_RE = /\b[A-Z][A-Z0-9]{1,9}-\d+\b/g;
-function ticketMentions(text2) {
-  return [...text2.matchAll(TICKET_KEY_RE)].map((m) => m[0]);
+// src/tracker.ts
+function ticketBranchContext(t) {
+  const tag = t.issue_tag ?? void 0;
+  if (!tag) return {};
+  const prefix = t.project_issue_prefix ? t.project_issue_prefix.toLowerCase() : void 0;
+  return { tag, prefix };
 }
-var TicketAttributionTracker = class {
-  #tokensByTicket = /* @__PURE__ */ new Map();
-  #turns = 0;
-  #current;
-  /** Tracker record uuid → ticket key, learned when a write names both (a claim resolves the key from the last mention). */
-  #keyByRecord = /* @__PURE__ */ new Map();
-  #lastBy = {};
+function displayKey(t) {
+  return t.issue_tag ?? t.issue_id;
+}
+function referenceKeys(t) {
+  return t.issue_tag && t.issue_tag !== t.issue_id ? [t.issue_id, t.issue_tag] : [t.issue_id];
+}
+var RESOLVED_STATUSES = new Set(DEFAULT_CONTRACT.statuses.resolved);
+var encodeFilters = (f) => JSON.stringify(f);
+var Tracker = class {
+  // NB: explicit fields, not TypeScript parameter properties — node's
+  // --experimental-strip-types cannot transform those, and the test runner
+  // uses it. The same rule applies everywhere in src/.
+  route;
+  /** This workspace's rules. A ship holds several, one per route. */
+  contract;
+  client;
+  models;
+  userAgent;
+  shipName;
   /**
-   * The ticket key most recently named in the transcript, or undefined before any.
-   * Only the FIRST key in a turn counts: a closing summary names its own
-   * ticket first and then lists others ("Other tickets", "Blocked by", "See
-   * also"), and those trailing keys are not what the run worked (CREW-2598).
+   * The once-per-process authorship probe (CREW-1371), memoised as a promise
+   * so concurrent first writes share one round of field-metadata reads.
    */
-  get current() {
-    return this.#current;
-  }
-  /** Record the mentions in `text` without crediting tokens (a claim needs "which ticket" before the turn's usage line arrives). */
-  note(text2) {
-    const mentions = ticketMentions(text2);
-    if (mentions.length > 0) this.#current = mentions[0];
-  }
-  /** One assistant turn: its combined visible text (thinking + text blocks) and its own token cost. */
-  add(text2, tokens) {
-    const mentions = ticketMentions(text2);
-    if (mentions.length > 0) this.#current = mentions[0];
-    if (this.#current === void 0 || tokens <= 0) return;
-    this.#turns++;
-    this.#tokensByTicket.set(this.#current, (this.#tokensByTicket.get(this.#current) ?? 0) + tokens);
+  authorship;
+  attachments;
+  stateDir;
+  /**
+   * `opts.apiKey` overrides the route's ship key (CREW-1603): a lane's own
+   * writes pass its seat's agent key so the event log and rule context see an
+   * agent, not the ship's human principal.
+   */
+  /** Told once per failed best-effort read (`events`); poll.ts points it at the pass's emitter. */
+  onReadFailure;
+  constructor(route2, ship, opts = {}) {
+    this.route = route2;
+    if (!route2.resolved) {
+      throw new ConfigError(
+        `route "${route2.route}" has no resolved ids \u2014 run \`crew connect\` to discover them from the project`
+      );
+    }
+    this.models = route2.resolved.models;
+    this.contract = resolveContract(route2.contract);
+    this.userAgent = ship.userAgent;
+    this.shipName = ship.name;
+    this.stateDir = ship.stateDir;
+    this.client = new TablationClient({
+      baseUrl: `${route2.baseUrl}/api`,
+      apiKey: opts.apiKey ?? resolveApiKey(route2),
+      // Cloudflare 403s (error 1010) default agents on this host.
+      headers: { "User-Agent": ship.userAgent }
+    });
   }
   /**
-   * Record a tool call if it is a ticket-targeted tracker write (claim,
-   * hand-off or comment). The ticket key comes from a record uuid seen on an
-   * earlier write when known, else from the key last named in the transcript
-   * (a claim or hand-off announces its ticket). A comment on a record never
-   * seen before is ignored: its uuid cannot be resolved to a key.
+   * Every non-terminal ticket for this route's area, in one call.
+   *
+   * The area filter is what keeps two routes on one tracker out of each
+   * other's queue: a ship working `synthesis` and `tablation-js` from the same
+   * Issues project must not have either seat pick up the other's tickets. A
+   * route with no area sees everything, which is right for a tracker
+   * nobody has sliced yet.
    */
-  noteWrite(tool, input) {
-    const w = classifyWrite(tool, input);
-    if (!w) return;
-    let key = w.recordId ? this.#keyByRecord.get(w.recordId) : void 0;
-    if (w.kind !== "comment") key ??= this.#current;
-    if (!key) return;
-    if (w.kind !== "comment" && w.recordId) this.#keyByRecord.set(w.recordId, key);
-    this.#lastBy[w.kind] = key;
+  async openTickets() {
+    const c = this.contract;
+    const filters = [
+      { columnName: c.columns.status, operator: "IN", value: c.statuses.open }
+    ];
+    const areaId = this.route.resolved?.areaId;
+    if (areaId) filters.push({ columnName: c.columns.slice, operator: "EQ", value: areaId });
+    return this.client.records.list(this.models.issues, {
+      filters: encodeFilters(filters),
+      limit: 500
+    });
   }
   /**
-   * How the attribution is decided: a hand-off write beats a claim, a claim
-   * beats a comment (so a follow-up ticket filed or commented on while
-   * working never displaces the claimed one), and any write beats everything
-   * below. Next, `hintMoved` — the post-run read-back showed the hinted
-   * ticket changed status or assignee during the run — is a hand-off signal
-   * for a run that wrote through MCP tools crew cannot see. Then the
-   * mention-token heuristic, which with a hint may override it only when a
-   * different ticket holds a strict majority of the credited tokens (a single
-   * credited turn, like a lone end-of-run summary naming another ticket,
-   * must not). A run with no hint
-   * keeps the plain winner. The pre-run hint is last.
+   * Tickets at the hand-off status whose row changed at or after `since`,
+   * other than `exceptId` (CREW-1759: a run's stray hand-offs).
    */
-  decide(hint, opts = {}) {
-    for (const by of ["handoff", "claim", "comment"]) {
-      const ticket = this.#lastBy[by];
-      if (ticket) return { ticket, by };
+  async handedOffSince(since2, exceptId) {
+    const c = this.contract;
+    const rows = await this.client.records.list(this.models.issues, {
+      filters: encodeFilters([{ columnName: c.columns.status, operator: "EQ", value: c.statuses.handoff }]),
+      limit: 100
+    });
+    const from = Date.parse(since2);
+    return rows.filter((t) => t.id !== exceptId && Date.parse(t.updated_at) >= from);
+  }
+  /**
+   * The tickets behind a set of ticket numbers — the cleanup sweeps' input
+   * (CREW-1593).
+   *
+   * The sweeps used to fetch "every closed ticket, newest `updated_at` first,
+   * capped at 500" and hope the tickets they cared about were in the page. They
+   * were not once the board held more than 500 closed tickets, and a bulk
+   * write gave 1457 of them one identical `updated_at`, so which ones made the
+   * page was arbitrary and a deployed ticket's worktree/branch was silently
+   * never swept. The caller now names the numbers it actually has a worktree
+   * or remote branch for, so the request is bounded by those and not by how
+   * many tickets are closed.
+   *
+   * Matched on `issue_id`, in the raw, unpadded and 3-digit-padded spellings a
+   * number has been stored under. `onTruncated` is told when a page came back
+   * full, since anything past it would be missing without a trace.
+   */
+  async ticketsByNumbers(nums, onTruncated) {
+    const c = this.contract;
+    const keys = /* @__PURE__ */ new Set();
+    for (const raw of nums) {
+      const unpadded = String(Number.parseInt(raw, 10));
+      for (const n of [raw, unpadded, unpadded.padStart(3, "0")]) keys.add(`ISSUE-${n}`);
     }
-    if (hint && opts.hintMoved) return { ticket: hint, by: "readback" };
-    if (this.#tokensByTicket.size > 0) {
-      if (!hint) return { ticket: this.winner(), by: "mentions" };
-      const winner = this.winner(hint);
-      if (winner === hint) return { ticket: hint, by: "mentions" };
-      let total = 0;
-      for (const n of this.#tokensByTicket.values()) total += n;
-      const share = (this.#tokensByTicket.get(winner) ?? 0) / total;
-      return share > 0.5 && this.#turns > 1 ? { ticket: winner, by: "mentions" } : { ticket: hint, by: "hint" };
+    const all = [...keys];
+    const out = [];
+    const limit = 500;
+    for (let i = 0; i < all.length; i += 100) {
+      const page = await this.client.records.list(this.models.issues, {
+        filters: encodeFilters([{ columnName: c.columns.key, operator: "IN", value: all.slice(i, i + 100) }]),
+        limit
+      });
+      if (page.length >= limit) onTruncated?.(limit);
+      out.push(...page);
     }
-    return { ticket: hint, by: "hint" };
+    return out;
   }
   /**
-   * The ticket key the run spent the most tokens on, or `fallback` (the
-   * pre-run poll hint) when the transcript never named one — an
-   * administrative run that touches the tracker without discussing a
-   * specific ticket in its visible text still has to cite something.
+   * Tickets by id, for blockers that have already closed and so are absent
+   * from the open set. Bounded to the ids actually referenced.
    */
-  winner(fallback) {
-    let best = fallback;
-    let bestTokens = -1;
-    for (const [ticket, tokens] of this.#tokensByTicket) {
-      if (tokens > bestTokens) {
-        best = ticket;
-        bestTokens = tokens;
-      }
-    }
-    return best;
+  async ticketsByIds(ids) {
+    if (ids.length === 0) return [];
+    return this.client.records.list(this.models.issues, {
+      filters: encodeFilters([{ columnName: "id", operator: "IN", value: ids }]),
+      limit: 500
+    });
   }
-};
-function isClaimWrite(tool, input) {
-  if (!tool || !/records_controller_update$/.test(tool)) return false;
-  const body = input?.body;
-  return typeof body === "object" && body !== null && body.status === "in_progress";
-}
-var HANDOFF_STATUSES = /* @__PURE__ */ new Set(["fixed", "verified", "needs_info", "accepted"]);
-function classifyWrite(tool, input) {
-  if (!tool) return void 0;
-  const body = input?.body;
-  if (typeof body !== "object" || body === null) return void 0;
-  const b = body;
-  if (/records_controller_update$/.test(tool)) {
-    const recordId = typeof input?.recordId === "string" ? input.recordId : void 0;
-    if (b.status === "in_progress" || b.status === "qa") return { kind: "claim", recordId };
-    if (typeof b.status === "string" && HANDOFF_STATUSES.has(b.status)) return { kind: "handoff", recordId };
+  async ticket(id) {
+    return this.client.records.get(this.models.issues, id);
   }
-  if (/records_controller_create$/.test(tool) && typeof b.ticket_id === "string") return { kind: "comment", recordId: b.ticket_id };
-  return void 0;
-}
-
-// src/handoff-transcript.ts
-var TRANSPORT_FAILURE = /\b50[0-4]\b|<!doctype|<html|unexpected token '?<|fetch failed|econn(reset|refused)|etimedout|socket hang up|timed out|bad gateway|service unavailable/i;
-function resultText(content) {
-  if (typeof content === "string") return content;
-  if (Array.isArray(content)) return content.map((c) => c && typeof c.text === "string" ? c.text : "").join("\n");
-  return "";
-}
-function isTransportFailure(isError, text2) {
-  if (!isError) {
+  async comments(limit = 500) {
+    return this.client.records.list(this.models.comments, { limit });
+  }
+  async crewRows() {
+    return this.client.records.list(this.models.crew, { limit: 200 });
+  }
+  /**
+   * One row of the `Repos` table, for whatever it can tell the crew that
+   * isn't in `.crew.yaml` — which `Projects` (area) row it belongs to, in
+   * particular. `undefined` on a workspace with no Repos table, or if the
+   * row is gone; neither is fatal to the caller.
+   */
+  async repoRow(id) {
+    const model = this.route.resolved?.reposModelId;
+    if (!model) return void 0;
     try {
-      const doc = JSON.parse(text2);
-      if (doc && typeof doc === "object") {
-        const code = doc.statusCode;
-        return typeof code === "number" && code >= 500;
-      }
+      return await this.client.records.get(model, id);
     } catch {
+      return void 0;
     }
   }
-  return TRANSPORT_FAILURE.test(text2);
-}
-var FORBIDDEN_WRITE = /\b403\b[^]*?No WRITE access/i;
-function isForbiddenWrite(isError, text2) {
-  if (FORBIDDEN_WRITE.test(text2)) return true;
-  if (!isError) {
+  /**
+   * One row of the `Projects` (area) table. `undefined` on a workspace
+   * with no such table, or if the row is gone.
+   */
+  async projectRow(id) {
+    const model = this.route.resolved?.areaModelId;
+    if (!model) return void 0;
     try {
-      const doc = JSON.parse(text2);
-      return !!doc && typeof doc === "object" && doc.statusCode === 403;
+      return await this.client.records.get(model, id);
     } catch {
+      return void 0;
     }
   }
-  return false;
-}
-function forbiddenDetail403(text2) {
-  const m = /No WRITE access to (?:"[^"]+"|this model|[\w-]+)/i.exec(text2);
-  return m ? m[0] : "a hand-off write was refused";
-}
-var HandoffTranscriptTracker = class {
-  open = /* @__PURE__ */ new Map();
-  /** Per ticket record: the last hand-off status write's outcome. */
-  status = /* @__PURE__ */ new Map();
-  /** Per ticket record: the last hand-off comment that failed after the status write's turn. */
-  comment = /* @__PURE__ */ new Map();
-  landed = /* @__PURE__ */ new Set();
-  /** Per ticket record: the last hand-off status write, when the tracker refused it with 403. */
-  forbiddenWrites = /* @__PURE__ */ new Map();
-  statusLanded = false;
-  lastText = "";
-  resultLine = "";
-  feed(parsed) {
-    const line = parsed;
-    if (!line || typeof line !== "object") return;
-    if (line.type === "result" && typeof line.result === "string") this.resultLine = line.result;
-    const content = line.message?.content;
-    if (!Array.isArray(content)) return;
-    for (const b of content) {
-      if (line.type === "assistant" && b.type === "text" && b.text?.trim()) this.lastText = b.text.trim();
-      else if (line.type === "assistant" && b.type === "tool_use" && b.id) {
-        const w = classifyWrite(b.name, b.input);
-        const body = b.input?.body;
-        if (w?.recordId && (w.kind === "handoff" || w.kind === "comment") && body && typeof body === "object") {
-          this.open.set(b.id, { kind: w.kind, recordId: w.recordId, body });
-        }
-      } else if (line.type === "user" && b.type === "tool_result" && b.tool_use_id) {
-        const w = this.open.get(b.tool_use_id);
-        if (!w) continue;
-        this.open.delete(b.tool_use_id);
-        const text2 = resultText(b.content);
-        if (w.kind === "handoff") {
-          const refused = isForbiddenWrite(b.is_error === true, text2);
-          if (refused) this.forbiddenWrites.set(w.recordId, forbiddenDetail403(text2));
-          else {
-            this.forbiddenWrites.delete(w.recordId);
-            if (!isTransportFailure(b.is_error === true, text2)) this.statusLanded = true;
-          }
-        }
-        const failed = isTransportFailure(b.is_error === true, text2);
-        if (w.kind === "handoff") this.status.set(w.recordId, { ok: !failed, patch: w.body });
-        else if (failed && typeof w.body.body === "string") this.comment.set(w.recordId, w.body.body);
-        else if (!failed) {
-          this.comment.delete(w.recordId);
-          this.landed.add(w.recordId);
-        }
-      }
+  /**
+   * Every Projects (area) row's work mode (CREW-1445, CREW-1493). One extra
+   * read per cycle. A workspace with no Projects table, no `work_mode` column
+   * or an unreadable table yields the empty map, which the selection reads as
+   * "no filtering"; a null value is `automatic`.
+   */
+  async projectWorkModes() {
+    const model = this.route.resolved?.areaModelId;
+    if (!model) return /* @__PURE__ */ new Map();
+    try {
+      const rows = await this.client.records.list(model, { limit: 200 });
+      return projectWorkModes(rows, this.contract);
+    } catch {
+      return /* @__PURE__ */ new Map();
     }
   }
-  /** The newest hand-off write the tracker refused with 403 and no later success for that ticket, else null. */
-  forbidden() {
-    const last = [...this.forbiddenWrites].at(-1);
-    return last ? { ticketRecordId: last[0], detail: last[1] } : null;
+  /** Every `Projects` (area) row — what `crew repos add` offers when a new Repos row needs one. */
+  async projectRows() {
+    const model = this.route.resolved?.areaModelId;
+    if (!model) return [];
+    return this.client.records.list(model, { limit: 200 });
   }
-  /** A hand-off status write went through, so the seat can write what a hand-off needs. */
-  handoffLanded() {
-    return this.statusLanded && this.forbiddenWrites.size === 0;
+  /** Every Projects row with its raw `work_mode`, for `crew status`. */
+  async projectRowsWithModes() {
+    const rows = await this.projectRows();
+    const modes = await this.projectWorkModes();
+    return rows.map((r) => ({ ...r, mode: modes.get(r.id) ?? "automatic" }));
   }
-  /** The hand-off that did not land, or null when every hand-off write succeeded (or none was tried). */
-  pending() {
-    const failed = [...this.status].filter(([, s2]) => !s2.ok).at(-1);
-    if (!failed) return null;
-    const [ticketRecordId, s] = failed;
-    return {
-      ticketRecordId,
-      patch: s.patch,
-      ...this.comment.has(ticketRecordId) ? { comment: this.comment.get(ticketRecordId) } : {},
-      ...this.landed.has(ticketRecordId) ? { commentLanded: true } : {},
-      finalText: this.lastText || this.resultLine
-    };
-  }
-};
-
-// src/pending-handoff.ts
-import { existsSync as existsSync23, mkdirSync as mkdirSync16, readdirSync as readdirSync7, readFileSync as readFileSync23, rmSync as rmSync13, writeFileSync as writeFileSync17 } from "fs";
-import { join as join25 } from "path";
-
-// src/ticket-branch.ts
-import { basename as basename7 } from "path";
-
-// src/tracker.ts
-import { hostname } from "os";
-import { TablationClient } from "@tablation/client";
-
-// src/work-mode.ts
-function projectWorkModes(rows, contract) {
-  const out = /* @__PURE__ */ new Map();
-  for (const r of rows) {
-    const v = r[contract.columns.workMode];
-    out.set(r.id, v === contract.manualWorkMode ? "manual" : v === contract.hybridWorkMode ? "hybrid" : "automatic");
-  }
-  return out;
-}
-function agentAssigneeIds(crewRows, isHoldRow) {
-  return new Set(crewRows.filter((r) => !!r.agent_id && !isHoldRow(r.id)).map((r) => r.id));
-}
-function modeOf(t, wm) {
-  if (!t.project_id) return "manual";
-  return wm.modes.get(t.project_id) ?? "automatic";
-}
-function withinWorkMode(tickets, wm) {
-  if (!wm || wm.modes.size === 0) return tickets;
-  return tickets.filter((t) => {
-    const mode = modeOf(t, wm);
-    if (mode === "automatic") return true;
-    if (mode === "manual") return false;
-    return !!t.assignee_id && wm.agentAssignees.has(t.assignee_id);
-  });
-}
-function isAutomatic(t, wm) {
-  if (!wm || wm.modes.size === 0) return true;
-  return modeOf(t, wm) === "automatic";
-}
-function skippedByMode(tickets, wm) {
-  const out = { manual: 0, hybrid: 0 };
-  if (!wm || wm.modes.size === 0) return out;
-  const kept = new Set(withinWorkMode(tickets, wm));
-  for (const t of tickets) {
-    if (kept.has(t)) continue;
-    out[modeOf(t, wm) === "manual" ? "manual" : "hybrid"]++;
-  }
-  return out;
-}
-function withoutManualVerified(tickets, verifiedStatus, wm) {
-  if (!wm || wm.modes.size === 0) return tickets;
-  return tickets.filter((t) => t.status !== verifiedStatus || modeOf(t, wm) !== "manual");
-}
-function projectModeLabels(rows) {
-  return rows.map((r) => {
-    const name = r.name ?? r.id;
-    return { id: r.id, name, mode: r.mode, label: `${name} (${r.mode})` };
-  });
-}
-
-// src/board-lock.ts
-import { StaleWriteError } from "@tablation/client";
-function releaseLockScope(route2, repo) {
-  return `${route2}/${repo}`;
-}
-async function acquireBoardLock(client2, modelId, scope, holderLabel, ttlMs, log = {}) {
-  if (!modelId) return { ok: true, release: async () => {
-  }, exclusion: "off" };
-  const filters = JSON.stringify([{ columnName: "scope", operator: "EQ", value: scope }]);
-  const rows = await client2.list(modelId, { filters, limit: 1 });
-  const row = rows[0];
-  if (!row) return { ok: false, reason: "missing" };
-  const age = Date.now() - new Date(row.updated_at).getTime();
-  const staleOwn = !!row.holder && row.holder !== holderLabel && isDeadOwnClaim(row.holder, holderLabel);
-  const free = !row.holder || row.holder === holderLabel || age > ttlMs || staleOwn;
-  if (staleOwn) log.warn?.(`reclaimed stale own claim ${row.holder} on ${scope} (process is gone)`);
-  if (!free) return { ok: false, heldBy: row.holder ?? void 0, reason: "held" };
-  let claimed;
-  try {
-    claimed = await client2.update(modelId, row.id, { holder: holderLabel }, row.updated_at);
-  } catch (e) {
-    if (e instanceof StaleWriteError) return { ok: false, reason: "contended" };
-    throw e;
-  }
-  return {
-    ok: true,
-    exclusion: "taken",
-    release: async () => {
-      try {
-        try {
-          await client2.update(modelId, row.id, { holder: "" }, claimed.updated_at);
-        } catch (e) {
-          if (!(e instanceof StaleWriteError)) throw e;
-          const [now] = await client2.list(modelId, { filters: scopeFilter(scope), limit: 1 });
-          if (now?.holder === holderLabel) await client2.update(modelId, row.id, { holder: "" }, now.updated_at);
-        }
-        log.debug?.(`lock released for ${scope}`);
-      } catch (e) {
-        log.warn?.(`lock release failed for ${scope}: ${e.message}`);
-      }
-    }
-  };
-}
-function isDeadOwnClaim(holder, mine) {
-  const split = (l) => {
-    const i = l.lastIndexOf(":");
-    return i < 0 ? null : { ship: l.slice(0, i), pid: Number(l.slice(i + 1)) };
-  };
-  const h = split(holder), m = split(mine);
-  if (!h || !m || h.ship !== m.ship || !Number.isInteger(h.pid) || h.pid <= 0) return false;
-  try {
-    process.kill(h.pid, 0);
-    return false;
-  } catch (e) {
-    return e.code === "ESRCH";
-  }
-}
-async function lockRowState(client2, modelId, scope) {
-  const rows = await client2.list(modelId, { filters: scopeFilter(scope), limit: 1 });
-  const row = rows[0];
-  if (!row) return { exists: false };
-  return { exists: true, ...row.holder ? { holder: row.holder, since: row.updated_at } : {} };
-}
-var scopeFilter = (scope) => JSON.stringify([{ columnName: "scope", operator: "EQ", value: scope }]);
-async function ensureLockRows(client2, modelId, scopes) {
-  const created = [];
-  for (const scope of scopes) {
-    const filters = scopeFilter(scope);
-    if ((await client2.list(modelId, { filters, limit: 1 })).length > 0) continue;
-    let mine;
-    try {
-      mine = await client2.create(modelId, { scope, holder: "" });
-    } catch (e) {
-      const status2 = e.status;
-      if (status2 === 409 || status2 === 400) {
-        if ((await client2.list(modelId, { filters, limit: 1 })).length > 0) continue;
-      }
-      throw e;
-    }
-    const all = await client2.list(modelId, { filters, limit: 20 });
-    const keeper = [...all].sort((a, b) => (a.created_at ?? "").localeCompare(b.created_at ?? "") || a.id.localeCompare(b.id))[0];
-    if (keeper && keeper.id !== mine.id) {
-      await client2.remove(modelId, mine.id).catch(() => {
-      });
-      continue;
-    }
-    created.push(scope);
-  }
-  return created;
-}
-
-// src/tracker.ts
-function ticketBranchContext(t) {
-  const tag = t.issue_tag ?? void 0;
-  if (!tag) return {};
-  const prefix = t.project_issue_prefix ? t.project_issue_prefix.toLowerCase() : void 0;
-  return { tag, prefix };
-}
-function displayKey(t) {
-  return t.issue_tag ?? t.issue_id;
-}
-function referenceKeys(t) {
-  return t.issue_tag && t.issue_tag !== t.issue_id ? [t.issue_id, t.issue_tag] : [t.issue_id];
-}
-var RESOLVED_STATUSES = new Set(DEFAULT_CONTRACT.statuses.resolved);
-var encodeFilters = (f) => JSON.stringify(f);
-var Tracker = class {
-  // NB: explicit fields, not TypeScript parameter properties — node's
-  // --experimental-strip-types cannot transform those, and the test runner
-  // uses it. The same rule applies everywhere in src/.
-  route;
-  /** This workspace's rules. A ship holds several, one per route. */
-  contract;
-  client;
-  models;
-  userAgent;
-  shipName;
-  /**
-   * The once-per-process authorship probe (CREW-1371), memoised as a promise
-   * so concurrent first writes share one round of field-metadata reads.
-   */
-  authorship;
-  attachments;
-  stateDir;
-  /**
-   * `opts.apiKey` overrides the route's ship key (CREW-1603): a lane's own
-   * writes pass its seat's agent key so the event log and rule context see an
-   * agent, not the ship's human principal.
-   */
-  /** Told once per failed best-effort read (`events`); poll.ts points it at the pass's emitter. */
-  onReadFailure;
-  constructor(route2, ship, opts = {}) {
-    this.route = route2;
-    if (!route2.resolved) {
-      throw new ConfigError(
-        `route "${route2.route}" has no resolved ids \u2014 run \`crew connect\` to discover them from the project`
-      );
-    }
-    this.models = route2.resolved.models;
-    this.contract = resolveContract(route2.contract);
-    this.userAgent = ship.userAgent;
-    this.shipName = ship.name;
-    this.stateDir = ship.stateDir;
-    this.client = new TablationClient({
-      baseUrl: `${route2.baseUrl}/api`,
-      apiKey: opts.apiKey ?? resolveApiKey(route2),
-      // Cloudflare 403s (error 1010) default agents on this host.
-      headers: { "User-Agent": ship.userAgent }
-    });
-  }
-  /**
-   * Every non-terminal ticket for this route's area, in one call.
-   *
-   * The area filter is what keeps two routes on one tracker out of each
-   * other's queue: a ship working `synthesis` and `tablation-js` from the same
-   * Issues project must not have either seat pick up the other's tickets. A
-   * route with no area sees everything, which is right for a tracker
-   * nobody has sliced yet.
-   */
-  async openTickets() {
-    const c = this.contract;
-    const filters = [
-      { columnName: c.columns.status, operator: "IN", value: c.statuses.open }
-    ];
-    const areaId = this.route.resolved?.areaId;
-    if (areaId) filters.push({ columnName: c.columns.slice, operator: "EQ", value: areaId });
-    return this.client.records.list(this.models.issues, {
-      filters: encodeFilters(filters),
-      limit: 500
-    });
-  }
-  /**
-   * Tickets at the hand-off status whose row changed at or after `since`,
-   * other than `exceptId` (CREW-1759: a run's stray hand-offs).
-   */
-  async handedOffSince(since2, exceptId) {
-    const c = this.contract;
-    const rows = await this.client.records.list(this.models.issues, {
-      filters: encodeFilters([{ columnName: c.columns.status, operator: "EQ", value: c.statuses.handoff }]),
-      limit: 100
-    });
-    const from = Date.parse(since2);
-    return rows.filter((t) => t.id !== exceptId && Date.parse(t.updated_at) >= from);
-  }
-  /**
-   * The tickets behind a set of ticket numbers — the cleanup sweeps' input
-   * (CREW-1593).
-   *
-   * The sweeps used to fetch "every closed ticket, newest `updated_at` first,
-   * capped at 500" and hope the tickets they cared about were in the page. They
-   * were not once the board held more than 500 closed tickets, and a bulk
-   * write gave 1457 of them one identical `updated_at`, so which ones made the
-   * page was arbitrary and a deployed ticket's worktree/branch was silently
-   * never swept. The caller now names the numbers it actually has a worktree
-   * or remote branch for, so the request is bounded by those and not by how
-   * many tickets are closed.
-   *
-   * Matched on `issue_id`, in the raw, unpadded and 3-digit-padded spellings a
-   * number has been stored under. `onTruncated` is told when a page came back
-   * full, since anything past it would be missing without a trace.
-   */
-  async ticketsByNumbers(nums, onTruncated) {
-    const c = this.contract;
-    const keys = /* @__PURE__ */ new Set();
-    for (const raw of nums) {
-      const unpadded = String(Number.parseInt(raw, 10));
-      for (const n of [raw, unpadded, unpadded.padStart(3, "0")]) keys.add(`ISSUE-${n}`);
-    }
-    const all = [...keys];
-    const out = [];
-    const limit = 500;
-    for (let i = 0; i < all.length; i += 100) {
-      const page = await this.client.records.list(this.models.issues, {
-        filters: encodeFilters([{ columnName: c.columns.key, operator: "IN", value: all.slice(i, i + 100) }]),
-        limit
-      });
-      if (page.length >= limit) onTruncated?.(limit);
-      out.push(...page);
-    }
-    return out;
-  }
-  /**
-   * Tickets by id, for blockers that have already closed and so are absent
-   * from the open set. Bounded to the ids actually referenced.
-   */
-  async ticketsByIds(ids) {
-    if (ids.length === 0) return [];
-    return this.client.records.list(this.models.issues, {
-      filters: encodeFilters([{ columnName: "id", operator: "IN", value: ids }]),
-      limit: 500
-    });
-  }
-  async ticket(id) {
-    return this.client.records.get(this.models.issues, id);
-  }
-  async comments(limit = 500) {
-    return this.client.records.list(this.models.comments, { limit });
-  }
-  async crewRows() {
-    return this.client.records.list(this.models.crew, { limit: 200 });
-  }
-  /**
-   * One row of the `Repos` table, for whatever it can tell the crew that
-   * isn't in `.crew.yaml` — which `Projects` (area) row it belongs to, in
-   * particular. `undefined` on a workspace with no Repos table, or if the
-   * row is gone; neither is fatal to the caller.
-   */
-  async repoRow(id) {
-    const model = this.route.resolved?.reposModelId;
-    if (!model) return void 0;
-    try {
-      return await this.client.records.get(model, id);
-    } catch {
-      return void 0;
-    }
-  }
-  /**
-   * One row of the `Projects` (area) table. `undefined` on a workspace
-   * with no such table, or if the row is gone.
-   */
-  async projectRow(id) {
-    const model = this.route.resolved?.areaModelId;
-    if (!model) return void 0;
-    try {
-      return await this.client.records.get(model, id);
-    } catch {
-      return void 0;
-    }
-  }
-  /**
-   * Every Projects (area) row's work mode (CREW-1445, CREW-1493). One extra
-   * read per cycle. A workspace with no Projects table, no `work_mode` column
-   * or an unreadable table yields the empty map, which the selection reads as
-   * "no filtering"; a null value is `automatic`.
-   */
-  async projectWorkModes() {
-    const model = this.route.resolved?.areaModelId;
-    if (!model) return /* @__PURE__ */ new Map();
-    try {
-      const rows = await this.client.records.list(model, { limit: 200 });
-      return projectWorkModes(rows, this.contract);
-    } catch {
-      return /* @__PURE__ */ new Map();
-    }
-  }
-  /** Every `Projects` (area) row — what `crew repos add` offers when a new Repos row needs one. */
-  async projectRows() {
-    const model = this.route.resolved?.areaModelId;
-    if (!model) return [];
-    return this.client.records.list(model, { limit: 200 });
-  }
-  /** Every Projects row with its raw `work_mode`, for `crew status`. */
-  async projectRowsWithModes() {
-    const rows = await this.projectRows();
-    const modes = await this.projectWorkModes();
-    return rows.map((r) => ({ ...r, mode: modes.get(r.id) ?? "automatic" }));
-  }
-  /** Create a `Repos` row. Throws when the workspace has no Repos table. */
-  async createRepoRow(fields) {
-    const model = this.route.resolved?.reposModelId;
-    if (!model) throw new Error("this workspace has no Repos table");
-    return this.client.records.create(model, fields);
+  /** Create a `Repos` row. Throws when the workspace has no Repos table. */
+  async createRepoRow(fields) {
+    const model = this.route.resolved?.reposModelId;
+    if (!model) throw new Error("this workspace has no Repos table");
+    return this.client.records.create(model, fields);
   }
   /** Every `Repos` row as `{ id, name }`, for finding one by name. */
   async repoRows() {
@@ -9872,6 +9346,96 @@ function materializeBranchForTicket(dir, cfg, t, role, onProblem, onReset) {
   return loc.branch;
 }
 
+// src/pending-handoff.ts
+import { existsSync as existsSync21, mkdirSync as mkdirSync15, readdirSync as readdirSync6, readFileSync as readFileSync22, rmSync as rmSync12, writeFileSync as writeFileSync16 } from "fs";
+import { join as join23 } from "path";
+var PENDING_MAX_AGE_MS = 48 * 36e5;
+var pendingDirFor = (stateDir) => join23(stateDir, "pending-handoffs");
+var stateDirOfStream = (streamPath) => join23(streamPath, "..", "..");
+function writePendingHandoff(stateDir, rec) {
+  const dir = pendingDirFor(stateDir);
+  mkdirSync15(dir, { recursive: true });
+  writeFileSync16(join23(dir, `${rec.ticketRecordId}.json`), JSON.stringify(rec, null, 2));
+}
+function listPendingHandoffs(stateDir, route2) {
+  const dir = pendingDirFor(stateDir);
+  if (!existsSync21(dir)) return [];
+  const out = [];
+  for (const f of readdirSync6(dir).filter((n) => n.endsWith(".json")).sort()) {
+    try {
+      const rec = JSON.parse(readFileSync22(join23(dir, f), "utf8"));
+      if (rec.version === 1 && rec.ticketRecordId && (!route2 || rec.route === route2)) out.push(rec);
+    } catch {
+    }
+  }
+  return out;
+}
+function removePendingHandoff(stateDir, ticketRecordId) {
+  rmSync12(join23(pendingDirFor(stateDir), `${ticketRecordId}.json`), { force: true });
+}
+function pendingHandoffFor(stateDir, ticketRecordId) {
+  return listPendingHandoffs(stateDir).find((r) => r.ticketRecordId === ticketRecordId);
+}
+var firstLine = (s) => s.trim().split("\n")[0] ?? "";
+async function replayPendingHandoffs(i) {
+  const now = i.now ?? /* @__PURE__ */ new Date();
+  const landed = [];
+  for (const rec of listPendingHandoffs(i.stateDir, i.route).filter((r) => !i.role || r.role === i.role)) {
+    const at = { ticket: rec.ticket, step: "handoff" };
+    if (now.getTime() - Date.parse(rec.createdAt) > PENDING_MAX_AGE_MS) {
+      i.log.warn(`${rec.ticket ?? rec.ticketRecordId}: dropped a pending hand-off older than ${PENDING_MAX_AGE_MS / 36e5}h`, at);
+      removePendingHandoff(i.stateDir, rec.ticketRecordId);
+      continue;
+    }
+    if (now.toISOString() < rec.nextAttemptAt) continue;
+    const seatId = i.seats[rec.role];
+    try {
+      const t = await i.writer.ticket(rec.ticketRecordId);
+      const st = i.contract.statuses;
+      if (!seatId || t.status !== st.building || rec.patch.status !== st.handoff) {
+        i.log.emit(`${t.issue_id}: pending hand-off no longer applies (ticket is at ${t.status}) \u2014 dropped`, at);
+        removePendingHandoff(i.stateDir, rec.ticketRecordId);
+        continue;
+      }
+      const co = i.checkout(t);
+      const v = co ? inspectHandoff(co.dir, co.cfg, t, rec.role) : null;
+      if (!v || v.kind === "bounce") {
+        i.log.warn(`${t.issue_id}: pending hand-off dropped \u2014 ${v ? v.reason : "this ship has no checkout of the ticket's repo"}`, at);
+        removePendingHandoff(i.stateDir, rec.ticketRecordId);
+        continue;
+      }
+      if (v.kind === "unverified") throw new Error(v.why);
+      const text2 = rec.comment ?? (rec.commentLanded ? "" : rec.finalText);
+      if (text2) {
+        const head = firstLine(text2);
+        const cc = i.contract.comments;
+        const seen = (await i.writer.comments()).some((c) => {
+          const row = c;
+          return row[cc.parent] === t.id && row[cc.author] === seatId && firstLine(String(row[cc.body] ?? "")) === head;
+        });
+        if (!seen) await i.writer.postComment(t.id, text2, seatId);
+      }
+      await i.writer.postEvent(t.id, pushedEventBody(v.sha, v.remote, v.branch), seatId, "pushed");
+      await i.writer.updateTicket(t.id, rec.patch);
+      removePendingHandoff(i.stateDir, rec.ticketRecordId);
+      i.log.emit(`${t.issue_id}: replayed a pending hand-off at ${v.sha.slice(0, 7)} \u2014 handed on to QA`, at);
+      landed.push(t.id);
+    } catch (e) {
+      const attempts = rec.attempts + 1;
+      writePendingHandoff(i.stateDir, {
+        ...rec,
+        attempts,
+        warned: true,
+        nextAttemptAt: new Date(now.getTime() + sleepBackoff(attempts)).toISOString()
+      });
+      if (!rec.warned) {
+        i.log.warn(`${rec.ticket ?? rec.ticketRecordId}: a hand-off is pending and could not be replayed yet (${e.message}); will retry`, at);
+      }
+    }
+  }
+  return landed;
+}
+
 // src/ship-affinity.ts
 var CYCLE_SECONDS = 120;
 var SHIP_DEAD_AFTER_CYCLES = 10;
@@ -10130,6 +9694,11 @@ function acceptanceLines(description) {
   }
   return out;
 }
+function acceptanceChecklistBlock(lines2) {
+  if (lines2.length === 0) return "";
+  return `## Acceptance checklist (copy into your last comment and fill each result)
+${lines2.map((l) => `- ${l}: <test, command or manual check, and its result>`).join("\n")}`;
+}
 var flat = (s) => s.replace(/[`*_>]/g, "").replace(/\s+/g, " ").trim().toLowerCase();
 function unquotedAcceptance(lines2, comment) {
   const body = flat(comment);
@@ -10219,16 +9788,16 @@ async function missingAcceptance(i, t) {
   const from = i.since ? Date.parse(i.since) : NaN;
   const recent = Number.isNaN(from) ? [] : mine.filter((r) => Date.parse(String(r[cc.createdAt] ?? "")) >= from);
   const candidates2 = recent.length > 0 ? recent : mine.slice(-1);
-  if (candidates2.length === 0) return { missing: lines2, judged: null };
+  if (candidates2.length === 0) return { missing: lines2, judged: null, all: lines2 };
   let best = null;
   for (const c of candidates2) {
     const missing = unquotedAcceptance(lines2, String(c[cc.body] ?? ""));
     if (missing.length === 0) return null;
-    if (!best || missing.length <= best.missing.length) best = { missing, judged: String(c[cc.createdAt] ?? "") || null };
+    if (!best || missing.length <= best.missing.length) best = { missing, judged: String(c[cc.createdAt] ?? "") || null, all: lines2 };
   }
   return best;
 }
-function acceptanceBounceComment(missing, shipName2, judged) {
+function acceptanceBounceComment(missing, shipName2, judged, all = []) {
   return `${ACCEPTANCE_BOUNCED_MARKER}
 
 **Hand-off bounced: the hand-off comment does not quote every line of the ticket's Acceptance section.**
@@ -10240,7 +9809,13 @@ ${shipName2 ? `Ship: ${shipName2}
 ` : "This seat has no comment on the ticket.\n\n"}Not quoted verbatim:
 ${missing.map((l) => `- ${l}`).join("\n")}
 
-Set back to \`in_progress\`. Post a comment that lists every Acceptance line verbatim, each followed by the test, command or manual check that exercised it in this run and its result (a line you could not exercise is listed with the reason, never omitted), then set \`fixed\` again. The branch is already pushed.`;
+Set back to \`in_progress\`. Post a comment that lists every Acceptance line verbatim, each followed by the test, command or manual check that exercised it in this run and its result (a line you could not exercise is listed with the reason, never omitted), then set \`fixed\` again. The branch is already pushed.${all.length > 0 ? `
+
+Copy this block into the comment and fill in each result:
+
+\`\`\`
+${acceptanceChecklistBlock(all)}
+\`\`\`` : ""}`;
 }
 async function enforceHandoff(i) {
   try {
@@ -10271,7 +9846,7 @@ async function enforceHandoff(i) {
           assignee_id: i.seatId,
           ...i.hold && !heldNow ? { [i.hold.column]: i.hold.shipId } : {}
         });
-        await i.writer.postEvent(t.id, acceptanceBounceComment(gap.missing, i.shipName, gap.judged), i.seatId, "bounced").catch(() => {
+        await i.writer.postEvent(t.id, acceptanceBounceComment(gap.missing, i.shipName, gap.judged, gap.all), i.seatId, "bounced").catch(() => {
           i.log.warn("bounced, but the note failed to post", log);
         });
         i.log.warn(`${t.issue_id} bounced back to ${i.contract.statuses.building}: hand-off comment lacks the acceptance checklist`, log);
@@ -10317,276 +9892,740 @@ async function enforceHandoff(i) {
           i.log.emit(`${t.issue_id}: pushed ${again.branch} to ${again.remote} on the seat's behalf at ${again.sha.slice(0, 7)} \u2014 handed on to QA`, log);
           return { kind: "pushed", sha: again.sha };
         }
-        pushError = `the push succeeded but ${again.kind === "bounce" ? again.reason : again.why}`;
-      } catch (e) {
-        pushError = e.message;
+        pushError = `the push succeeded but ${again.kind === "bounce" ? again.reason : again.why}`;
+      } catch (e) {
+        pushError = e.message;
+      }
+      i.log.warn(`${t.issue_id}: the runner's own push failed: ${pushError}`, log);
+    }
+    await i.writer.updateTicket(t.id, {
+      status: i.contract.statuses.building,
+      assignee_id: i.seatId,
+      ...i.hold && !heldBy ? { [i.hold.column]: i.hold.shipId } : {}
+    });
+    await i.writer.postEvent(t.id, bounceComment(v, i.shipName, pushError), i.seatId, "bounced").catch(() => {
+      i.log.warn("bounced, but the note failed to post", log);
+    });
+    i.log.warn(`${t.issue_id} bounced back to ${i.contract.statuses.building}: ${v.reason}`, log);
+    return { kind: "bounced" };
+  } catch (e) {
+    i.log.warn(`could not check the hand-off: ${e.message}`, { step: "handoff" });
+    return { kind: "failed", why: e.message };
+  }
+}
+async function guardRunHandoff(route2, ship, tracker, role, workingId, log, since2) {
+  const replayed = await replayRoutePending(route2, ship, tracker, log, role);
+  if (!workingId || role !== "dev" && role !== "design" && role !== "qa") return null;
+  const seatId = route2.resolved?.seats[role];
+  if (!seatId) return null;
+  try {
+    const t = await tracker.ticket(workingId);
+    const resolved = repoConfigFor(route2, t);
+    if (!resolved) return null;
+    const { target, cfg } = resolved;
+    if (role === "qa") {
+      await retireRunWorktree(tracker, target.dir, cfg, t, role, seatId, ship.name, log);
+      return null;
+    }
+    const affinity = await tracker.claimAffinity();
+    const outcome = replayed.includes(workingId) ? { kind: "pushed", sha: "" } : await enforceHandoff({
+      writer: tracker,
+      contract: tracker.contract,
+      ticketId: workingId,
+      role,
+      dir: target.dir,
+      cfg,
+      seatId,
+      shipName: ship.name,
+      hold: affinity ? { column: affinity.column, shipId: affinity.shipId } : void 0,
+      since: since2,
+      log
+    });
+    if (outcome.kind === "pushed") await retireRunWorktree(tracker, target.dir, cfg, t, role, seatId, ship.name, log);
+    else {
+      const branch = existingBranchForTicket(target.dir, cfg, t, role);
+      if (branch && dropEmptyRunBranch(target.dir, cfg, branch)) {
+        log.emit(`${t.issue_id}: dropped ${branch} \u2014 the run made no commits beyond ${cfg.branch.base}`, { ticket: t.issue_id, step: "handoff" });
+      }
+    }
+    if (since2) await guardRunStrays(route2, ship, tracker, role, workingId, since2, log);
+    return outcome;
+  } catch (e) {
+    log.warn(`could not check the hand-off: ${e.message}`, { step: "handoff" });
+    return null;
+  }
+}
+async function retireRunWorktree(tracker, dir, cfg, t, role, seatId, shipName2, log) {
+  try {
+    const branch = existingBranchForTicket(dir, cfg, t, role);
+    if (!branch) return;
+    const o = await finishRunWorktree(dir, cfg, branch);
+    const at = { ticket: t.issue_id, step: "handoff" };
+    if (o.kind === "removed") log.emit(`${t.issue_id}: removed the run's worktree ${o.path} \u2014 the branch is on ${cfg.branch.remote}`, at);
+    else if (o.kind === "kept-handoff") {
+      log.emit(`${t.issue_id}: kept worktree ${o.path} \u2014 this repo's handoff hook serves from it`, at);
+      await tracker.postEvent(t.id, `worktree kept on ship ${shipName2} at \`${o.path}\`: the repo's \`handoff\` hook serves from it. QA on another ship cuts its own from \`${cfg.branch.remote}/${branch}\` instead.`, seatId, "worktree_kept");
+    } else if (o.kind === "kept-dirty") log.warn(`${t.issue_id}: left worktree ${o.path} \u2014 it has uncommitted changes`, at);
+    else if (o.kind === "kept-unpushed") log.warn(`${t.issue_id}: left worktree ${o.path} \u2014 its branch has commits that are not on ${cfg.branch.remote}`, at);
+  } catch (e) {
+    log.warn(`could not retire the run's worktree: ${e.message}`, { step: "handoff" });
+  }
+}
+function repoConfigFor(route2, t) {
+  const target = repoTargetFor(route2, t.repo_id);
+  if (!target) return null;
+  const o = route2.repoOverrides[target.name];
+  const cfg = resolveRepoConfig(loadRepoConfig(target.dir), {
+    hooks: { ...route2.hooks, ...o?.hooks },
+    labels: { ...route2.labels, ...o?.labels },
+    branch: { ...route2.branch, ...o?.branch },
+    worktrees: { nameOverride: o?.worktreeName }
+  }, target.dir);
+  return { target, cfg };
+}
+async function replayRoutePending(route2, ship, tracker, log, role) {
+  try {
+    return await replayPendingHandoffs({
+      writer: tracker,
+      contract: tracker.contract,
+      stateDir: ship.stateDir,
+      route: routeSlug(route2.route),
+      role,
+      seats: route2.resolved?.seats ?? {},
+      checkout: (t) => {
+        const r = repoConfigFor(route2, t);
+        return r ? { dir: r.target.dir, cfg: r.cfg } : null;
+      },
+      log
+    });
+  } catch (e) {
+    log.warn(`could not replay pending hand-offs: ${e.message}`, { step: "handoff" });
+    return [];
+  }
+}
+var STRAY_HANDOFF_MARKER = calloutHeader("WARNING", "Stray Hand-off");
+async function guardStrayHandoffs(i) {
+  const st = i.contract.statuses;
+  if (i.role === "qa") return;
+  for (const t of i.candidates) {
+    const at = { ticket: t.issue_id, step: "handoff" };
+    try {
+      const holder = i.myShipId ? ticketHolderShipId(t, i.contract) : null;
+      if (holder && holder !== i.myShipId) {
+        await i.writer.updateTicket(t.id, { status: st.building });
+        await i.writer.postEvent(
+          t.id,
+          `${STRAY_HANDOFF_MARKER}
+
+**Hand-off bounced: this ticket is held by another ship.**
+
+${i.shipName ? `${i.shipName}'s ` : "A "}${i.role} run set it to \`${st.handoff}\` without having claimed it. Set back to \`${st.building}\`; the holding ship's own hand-off is the one that counts.`,
+          i.seatId,
+          "bounced"
+        ).catch(() => i.log.warn("bounced, but the note failed to post", at));
+        i.log.warn(`${t.issue_id} was handed off by a run that did not claim it, while held by another ship \u2014 bounced to ${st.building}`, at);
+        continue;
+      }
+      const co = i.checkout(t);
+      if (!co || !existingBranchForTicket(co.dir, co.cfg, t, i.role)) {
+        i.log.warn(`${t.issue_id} moved to ${st.handoff} during a run that did not claim it; no local branch to verify, left alone`, at);
+        continue;
+      }
+      const v = inspectHandoff(co.dir, co.cfg, t, i.role);
+      i.log.warn(`${t.issue_id} was handed off by a run that did not claim it`, at);
+      if (v.kind === "pushed") {
+        await i.writer.postEvent(t.id, pushedEventBody(v.sha, v.remote, v.branch), i.seatId, "pushed");
+      } else if (v.kind === "bounce") {
+        if (v.origin && v.local && !isAncestor(co.dir, v.origin, v.local)) {
+          i.log.warn(`${t.issue_id}: \`${v.remote}/${v.branch}\` is at ${v.origin.slice(0, 7)}, not a tip this checkout built \u2014 left alone`, at);
+          continue;
+        }
+        await i.writer.updateTicket(t.id, { status: st.building, assignee_id: i.seatId });
+        await i.writer.postEvent(t.id, bounceComment(v, i.shipName), i.seatId, "bounced").catch(() => {
+        });
       }
-      i.log.warn(`${t.issue_id}: the runner's own push failed: ${pushError}`, log);
+    } catch (e) {
+      i.log.warn(`could not check the stray hand-off: ${e.message}`, at);
     }
-    await i.writer.updateTicket(t.id, {
-      status: i.contract.statuses.building,
-      assignee_id: i.seatId,
-      ...i.hold && !heldBy ? { [i.hold.column]: i.hold.shipId } : {}
-    });
-    await i.writer.postEvent(t.id, bounceComment(v, i.shipName, pushError), i.seatId, "bounced").catch(() => {
-      i.log.warn("bounced, but the note failed to post", log);
-    });
-    i.log.warn(`${t.issue_id} bounced back to ${i.contract.statuses.building}: ${v.reason}`, log);
-    return { kind: "bounced" };
-  } catch (e) {
-    i.log.warn(`could not check the hand-off: ${e.message}`, { step: "handoff" });
-    return { kind: "failed", why: e.message };
   }
 }
-async function guardRunHandoff(route2, ship, tracker, role, workingId, log, since2) {
-  const replayed = await replayRoutePending(route2, ship, tracker, log, role);
-  if (!workingId || role !== "dev" && role !== "design" && role !== "qa") return null;
+async function guardRunStrays(route2, ship, tracker, role, workingId, since2, log) {
   const seatId = route2.resolved?.seats[role];
-  if (!seatId) return null;
+  if (!seatId) return;
   try {
-    const t = await tracker.ticket(workingId);
-    const resolved = repoConfigFor(route2, t);
-    if (!resolved) return null;
-    const { target, cfg } = resolved;
-    if (role === "qa") {
-      await retireRunWorktree(tracker, target.dir, cfg, t, role, seatId, ship.name, log);
-      return null;
-    }
     const affinity = await tracker.claimAffinity();
-    const outcome = replayed.includes(workingId) ? { kind: "pushed", sha: "" } : await enforceHandoff({
+    const candidates2 = await tracker.handedOffSince(since2, workingId);
+    if (candidates2.length === 0) return;
+    await guardStrayHandoffs({
       writer: tracker,
       contract: tracker.contract,
-      ticketId: workingId,
-      role,
-      dir: target.dir,
-      cfg,
+      candidates: candidates2,
       seatId,
+      role,
+      myShipId: affinity?.shipId ?? null,
       shipName: ship.name,
-      hold: affinity ? { column: affinity.column, shipId: affinity.shipId } : void 0,
-      since: since2,
+      checkout: (t) => {
+        const r = repoConfigFor(route2, t);
+        return r ? { dir: r.target.dir, cfg: r.cfg } : null;
+      },
       log
     });
-    if (outcome.kind === "pushed") await retireRunWorktree(tracker, target.dir, cfg, t, role, seatId, ship.name, log);
-    else {
-      const branch = existingBranchForTicket(target.dir, cfg, t, role);
-      if (branch && dropEmptyRunBranch(target.dir, cfg, branch)) {
-        log.emit(`${t.issue_id}: dropped ${branch} \u2014 the run made no commits beyond ${cfg.branch.base}`, { ticket: t.issue_id, step: "handoff" });
-      }
-    }
-    if (since2) await guardRunStrays(route2, ship, tracker, role, workingId, since2, log);
-    return outcome;
   } catch (e) {
-    log.warn(`could not check the hand-off: ${e.message}`, { step: "handoff" });
+    log.warn(`could not check for stray hand-offs: ${e.message}`, { step: "handoff" });
+  }
+}
+
+// src/agent-log.ts
+var AgentLogUnreachableError = class extends Error {
+};
+var AgentLogHttpError = class extends Error {
+  status;
+  /** True when the refusal was of the Agent Log row itself (not a later cycle post): the tracker is not taking this seat's reports (CREW-2832). */
+  row = false;
+  constructor(message, status2) {
+    super(message);
+    this.status = status2;
+  }
+};
+async function request(target, method, path, body) {
+  const url = `${target.baseUrl.replace(/\/+$/, "")}/api${path}`;
+  const res = await fetch(url, {
+    method,
+    headers: {
+      Authorization: `Bearer ${target.apiKey}`,
+      "User-Agent": target.userAgent,
+      ...body === void 0 ? {} : { "Content-Type": "application/json" }
+    },
+    body: body === void 0 ? void 0 : JSON.stringify(body)
+  });
+  if (!res.ok) throw new AgentLogHttpError(`${path}: ${res.status} ${res.statusText}`, res.status);
+  return await res.json();
+}
+var issueColumns = /* @__PURE__ */ new Map();
+function columnsOf(target, modelId) {
+  const key = `${target.baseUrl}|${target.workspaceId}|${modelId}`;
+  let p = issueColumns.get(key);
+  if (!p) {
+    p = request(target, "GET", `/data-models/${modelId}`).then((m) => new Set((m.fields ?? []).map((f) => f.columnName)));
+    p.catch(() => issueColumns.delete(key));
+    issueColumns.set(key, p);
+  }
+  return p;
+}
+async function findTicketRecord(target, t, ref) {
+  const filters = {
+    combinator: "OR",
+    conditions: [
+      { columnName: t.keyColumn, operator: "EQ", value: ref },
+      { columnName: t.tagColumn, operator: "EQ", value: ref }
+    ]
+  };
+  const rows = await request(
+    target,
+    "GET",
+    `/data-models/${t.issuesModelId}/records?limit=2&filters=${encodeURIComponent(JSON.stringify(filters))}`
+  );
+  return rows.length === 1 ? rows[0].id : void 0;
+}
+function counterIncrements(run3, cols, have) {
+  const figures = [
+    [cols.agentRuns, 1],
+    [cols.tokensIn, run3.tokensIn],
+    [cols.tokensOut, run3.tokensOut],
+    [cols.cacheReadTokens, run3.cacheReadTokens],
+    [cols.cacheWriteTokens, run3.cacheWriteTokens],
+    [cols.costUsd, run3.costUsd]
+  ];
+  const out = {};
+  for (const [column, value2] of figures) {
+    if (value2 !== void 0 && Number.isFinite(value2) && have.has(column)) out[column] = { $op: "increment", value: value2 };
+  }
+  return out;
+}
+var BEFORE_EDIT_COLUMNS = {
+  search: "calls_before_edit_search",
+  symbol: "calls_before_edit_symbol",
+  other: "calls_before_edit_other",
+  seconds: "seconds_to_first_edit",
+  edited: "edited"
+};
+function beforeFirstEditBody(b) {
+  return {
+    [BEFORE_EDIT_COLUMNS.search]: b.calls.search,
+    [BEFORE_EDIT_COLUMNS.symbol]: b.calls.symbol,
+    [BEFORE_EDIT_COLUMNS.other]: b.calls.other,
+    [BEFORE_EDIT_COLUMNS.edited]: b.edited,
+    ...b.secondsToFirstEdit !== void 0 ? { [BEFORE_EDIT_COLUMNS.seconds]: b.secondsToFirstEdit } : {}
+  };
+}
+async function writeBeforeFirstEdit(target, rowId, b) {
+  try {
+    const model = await request(
+      target,
+      "GET",
+      `/data-models/agent_log?workspaceId=${encodeURIComponent(target.workspaceId)}`
+    );
+    const have = await columnsOf(target, model.id);
+    const body = Object.fromEntries(Object.entries(beforeFirstEditBody(b)).filter(([column]) => have.has(column)));
+    if (Object.keys(body).length === 0) return;
+    await request(target, "PATCH", `/data-models/${model.id}/records/${rowId}`, body);
+  } catch {
+  }
+}
+var HANDOFF_BOUNCES_COLUMN = "handoff_bounces";
+async function countAcceptanceBounces(target, issuesModelId, ticketRecordId) {
+  try {
+    const filters = encodeURIComponent(JSON.stringify([{ columnName: "event_type", operator: "EQ", value: "bounced" }]));
+    const rows = await request(
+      target,
+      "GET",
+      `/data-models/${issuesModelId}/events?limit=500&filters=${filters}`
+    );
+    return rows.filter((e) => e.record_id === ticketRecordId && (e.message ?? "").includes(ACCEPTANCE_BOUNCED_MARKER)).length;
+  } catch {
     return null;
   }
 }
-async function retireRunWorktree(tracker, dir, cfg, t, role, seatId, shipName2, log) {
+async function writeHandoffBounces(target, rowId, count) {
+  try {
+    const model = await request(
+      target,
+      "GET",
+      `/data-models/agent_log?workspaceId=${encodeURIComponent(target.workspaceId)}`
+    );
+    if (!(await columnsOf(target, model.id)).has(HANDOFF_BOUNCES_COLUMN)) return;
+    await request(target, "PATCH", `/data-models/${model.id}/records/${rowId}`, { [HANDOFF_BOUNCES_COLUMN]: count });
+  } catch {
+  }
+}
+async function post(target, path, body) {
+  const url = `${target.baseUrl.replace(/\/+$/, "")}/api/workspaces/${target.workspaceId}${path}`;
+  const res = await fetch(url, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${target.apiKey}`,
+      // Cloudflare 403s default agents on this host — same header connect.ts sends.
+      "User-Agent": target.userAgent,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify(body)
+  });
+  if (!res.ok) throw new AgentLogHttpError(`${path}: ${res.status} ${res.statusText}`, res.status);
+  return await res.json();
+}
+async function reportAgentRun(target, run3) {
+  let ticketRecordId;
+  if (target.tickets && run3.ticketReference) {
+    try {
+      ticketRecordId = await findTicketRecord(target, target.tickets, run3.ticketReference);
+    } catch {
+    }
+  }
+  const body = {
+    agentId: target.agentId,
+    ticketReference: run3.ticketReference,
+    outcome: run3.outcome,
+    startedAt: run3.startedAt,
+    finishedAt: run3.finishedAt,
+    source: "client",
+    client: "crew",
+    model: run3.model,
+    tokensIn: run3.tokensIn,
+    tokensOut: run3.tokensOut,
+    cacheReadTokens: run3.cacheReadTokens,
+    cacheWriteTokens: run3.cacheWriteTokens,
+    costUsd: run3.costUsd,
+    numTurns: run3.numTurns,
+    prefixTokens: run3.prefixTokens,
+    promptVersion: run3.promptVersion,
+    promptSha: run3.promptSha
+  };
+  const workItem = target.tickets && ticketRecordId ? { workItemTable: target.tickets.issuesModelId, workItemRecordId: ticketRecordId } : {};
+  let entry;
   try {
-    const branch = existingBranchForTicket(dir, cfg, t, role);
-    if (!branch) return;
-    const o = await finishRunWorktree(dir, cfg, branch);
-    const at = { ticket: t.issue_id, step: "handoff" };
-    if (o.kind === "removed") log.emit(`${t.issue_id}: removed the run's worktree ${o.path} \u2014 the branch is on ${cfg.branch.remote}`, at);
-    else if (o.kind === "kept-handoff") {
-      log.emit(`${t.issue_id}: kept worktree ${o.path} \u2014 this repo's handoff hook serves from it`, at);
-      await tracker.postEvent(t.id, `worktree kept on ship ${shipName2} at \`${o.path}\`: the repo's \`handoff\` hook serves from it. QA on another ship cuts its own from \`${cfg.branch.remote}/${branch}\` instead.`, seatId, "worktree_kept");
-    } else if (o.kind === "kept-dirty") log.warn(`${t.issue_id}: left worktree ${o.path} \u2014 it has uncommitted changes`, at);
-    else if (o.kind === "kept-unpushed") log.warn(`${t.issue_id}: left worktree ${o.path} \u2014 its branch has commits that are not on ${cfg.branch.remote}`, at);
+    entry = await post(target, "/agents/log", { ...body, ...workItem, harness: run3.harness, provider: run3.provider });
   } catch (e) {
-    log.warn(`could not retire the run's worktree: ${e.message}`, { step: "handoff" });
+    if (!(e instanceof AgentLogHttpError)) throw new AgentLogUnreachableError(e.message);
+    if (e.status >= 500) throw new AgentLogUnreachableError(e.message);
+    if (e.status !== 400 || !run3.harness && !run3.provider && !ticketRecordId) {
+      e.row = true;
+      throw e;
+    }
+    try {
+      entry = await post(target, "/agents/log", body);
+    } catch (e2) {
+      if (e2 instanceof AgentLogHttpError && e2.status < 500) e2.row = true;
+      throw e2;
+    }
+  }
+  for (const cycle of run3.cycles) {
+    await post(target, `/agents/log/${entry.id}/cycles`, {
+      cycleIndex: cycle.cycleIndex,
+      occurredAt: cycle.occurredAt,
+      thinking: cycle.thinking,
+      ...cycle.role ? { role: cycle.role } : {}
+    });
+  }
+  if (run3.beforeFirstEdit) await writeBeforeFirstEdit(target, entry.id, run3.beforeFirstEdit);
+  if (target.tickets && ticketRecordId) {
+    const bounces = await countAcceptanceBounces(target, target.tickets.issuesModelId, ticketRecordId);
+    if (bounces !== null) await writeHandoffBounces(target, entry.id, bounces);
   }
+  const counters = target.tickets && ticketRecordId ? await addRunToTicket(target, target.tickets, ticketRecordId, run3) : void 0;
+  return {
+    agentLogId: entry.id,
+    ...counters?.warning ? { counterWarning: counters.warning } : {},
+    ...counters?.retry ? { counterRetry: counters.retry } : {}
+  };
 }
-function repoConfigFor(route2, t) {
-  const target = repoTargetFor(route2, t.repo_id);
-  if (!target) return null;
-  const o = route2.repoOverrides[target.name];
-  const cfg = resolveRepoConfig(loadRepoConfig(target.dir), {
-    hooks: { ...route2.hooks, ...o?.hooks },
-    labels: { ...route2.labels, ...o?.labels },
-    branch: { ...route2.branch, ...o?.branch },
-    worktrees: { nameOverride: o?.worktreeName }
-  }, target.dir);
-  return { target, cfg };
+var isRetryable = (e) => !(e instanceof AgentLogHttpError) || e.status >= 500;
+async function writeCounters(target, w) {
+  const have = await columnsOf(target, w.issuesModelId);
+  const body = Object.fromEntries(Object.entries(w.body).filter(([column]) => have.has(column)));
+  if (Object.keys(body).length === 0) return;
+  await request(target, "PATCH", `/data-models/${w.issuesModelId}/records/${w.recordId}`, body);
 }
-async function replayRoutePending(route2, ship, tracker, log, role) {
+async function addRunToTicket(target, t, recordId, run3) {
+  const write = {
+    issuesModelId: t.issuesModelId,
+    recordId,
+    ticketReference: run3.ticketReference,
+    counters: t.counters,
+    body: counterIncrements(run3, t.counters, new Set(Object.values(t.counters)))
+  };
   try {
-    return await replayPendingHandoffs({
-      writer: tracker,
-      contract: tracker.contract,
-      stateDir: ship.stateDir,
-      route: routeSlug(route2.route),
-      role,
-      seats: route2.resolved?.seats ?? {},
-      checkout: (t) => {
-        const r = repoConfigFor(route2, t);
-        return r ? { dir: r.target.dir, cfg: r.cfg } : null;
-      },
-      log
-    });
+    await writeCounters(target, write);
+    return {};
   } catch (e) {
-    log.warn(`could not replay pending hand-offs: ${e.message}`, { step: "handoff" });
-    return [];
+    return {
+      warning: `could not add run spend to ${run3.ticketReference}: ${e.message}`,
+      ...isRetryable(e) ? { retry: write } : {}
+    };
   }
 }
-var STRAY_HANDOFF_MARKER = calloutHeader("WARNING", "Stray Hand-off");
-async function guardStrayHandoffs(i) {
-  const st = i.contract.statuses;
-  if (i.role === "qa") return;
-  for (const t of i.candidates) {
-    const at = { ticket: t.issue_id, step: "handoff" };
+var queueDir = (stateDir) => join25(stateDir, "pending-agent-logs");
+function queueAgentRun(stateDir, name, q2) {
+  mkdirSync16(queueDir(stateDir), { recursive: true });
+  writeFileSync17(join25(queueDir(stateDir), `${name}.json`), JSON.stringify(q2));
+}
+async function replayQueuedAgentRuns(stateDir, route2, keyFor, log, now = /* @__PURE__ */ new Date()) {
+  const dir = queueDir(stateDir);
+  if (!existsSync23(dir)) return 0;
+  let sent = 0;
+  for (const f of readdirSync7(dir).filter((n) => n.endsWith(".json")).sort()) {
+    const path = join25(dir, f);
+    let q2;
     try {
-      const holder = i.myShipId ? ticketHolderShipId(t, i.contract) : null;
-      if (holder && holder !== i.myShipId) {
-        await i.writer.updateTicket(t.id, { status: st.building });
-        await i.writer.postEvent(
-          t.id,
-          `${STRAY_HANDOFF_MARKER}
-
-**Hand-off bounced: this ticket is held by another ship.**
-
-${i.shipName ? `${i.shipName}'s ` : "A "}${i.role} run set it to \`${st.handoff}\` without having claimed it. Set back to \`${st.building}\`; the holding ship's own hand-off is the one that counts.`,
-          i.seatId,
-          "bounced"
-        ).catch(() => i.log.warn("bounced, but the note failed to post", at));
-        i.log.warn(`${t.issue_id} was handed off by a run that did not claim it, while held by another ship \u2014 bounced to ${st.building}`, at);
+      q2 = JSON.parse(readFileSync23(path, "utf8"));
+    } catch {
+      continue;
+    }
+    if (q2.version !== 1 || q2.route !== route2 || now.toISOString() < q2.nextAttemptAt) continue;
+    try {
+      const apiKey = await keyFor(q2.role);
+      if (!apiKey) continue;
+      const sentRun = await reportAgentRun({ ...q2.target, apiKey }, q2.report);
+      if (sentRun.counterWarning) log.warn(sentRun.counterWarning);
+      if (sentRun.counterRetry) queueTicketCounters(stateDir, f.replace(/\.json$/, ""), {
+        version: 1,
+        route: q2.route,
+        role: q2.role,
+        target: q2.target,
+        write: sentRun.counterRetry,
+        attempts: 0,
+        nextAttemptAt: (/* @__PURE__ */ new Date()).toISOString()
+      });
+      rmSync13(path, { force: true });
+      sent += 1;
+      log.emit(`sent a queued Agent Log report (${f})`);
+    } catch (e) {
+      if (!(e instanceof AgentLogUnreachableError)) {
+        rmSync13(path, { force: true });
+        log.warn(`dropped a queued Agent Log report (${f}): ${e.message}`);
         continue;
       }
-      const co = i.checkout(t);
-      if (!co || !existingBranchForTicket(co.dir, co.cfg, t, i.role)) {
-        i.log.warn(`${t.issue_id} moved to ${st.handoff} during a run that did not claim it; no local branch to verify, left alone`, at);
+      const attempts = q2.attempts + 1;
+      writeFileSync17(path, JSON.stringify({
+        ...q2,
+        attempts,
+        warned: true,
+        nextAttemptAt: new Date(now.getTime() + sleepBackoff(attempts)).toISOString()
+      }));
+      if (!q2.warned) log.warn(`a queued Agent Log report could not be sent yet (${e.message}); will retry`);
+    }
+  }
+  return sent;
+}
+var countersDir = (stateDir) => join25(stateDir, "pending-ticket-counters");
+function queueTicketCounters(stateDir, name, q2) {
+  mkdirSync16(countersDir(stateDir), { recursive: true });
+  writeFileSync17(join25(countersDir(stateDir), `${name}.json`), JSON.stringify(q2));
+}
+async function replayQueuedTicketCounters(stateDir, route2, keyFor, log, now = /* @__PURE__ */ new Date()) {
+  const dir = countersDir(stateDir);
+  if (!existsSync23(dir)) return 0;
+  let sent = 0;
+  for (const f of readdirSync7(dir).filter((n) => n.endsWith(".json")).sort()) {
+    const path = join25(dir, f);
+    let q2;
+    try {
+      q2 = JSON.parse(readFileSync23(path, "utf8"));
+    } catch {
+      continue;
+    }
+    if (q2.version !== 1 || q2.route !== route2 || now.toISOString() < q2.nextAttemptAt) continue;
+    try {
+      const apiKey = await keyFor(q2.role);
+      if (!apiKey) continue;
+      await writeCounters({ ...q2.target, apiKey }, q2.write);
+      rmSync13(path, { force: true });
+      sent += 1;
+      log.emit(`added a queued run's spend to ${q2.write.ticketReference ?? q2.write.recordId} (${f})`);
+    } catch (e) {
+      if (!isRetryable(e)) {
+        rmSync13(path, { force: true });
+        log.warn(`dropped a queued ticket counter update (${f}): ${e.message}`);
         continue;
       }
-      const v = inspectHandoff(co.dir, co.cfg, t, i.role);
-      i.log.warn(`${t.issue_id} was handed off by a run that did not claim it`, at);
-      if (v.kind === "pushed") {
-        await i.writer.postEvent(t.id, pushedEventBody(v.sha, v.remote, v.branch), i.seatId, "pushed");
-      } else if (v.kind === "bounce") {
-        if (v.origin && v.local && !isAncestor(co.dir, v.origin, v.local)) {
-          i.log.warn(`${t.issue_id}: \`${v.remote}/${v.branch}\` is at ${v.origin.slice(0, 7)}, not a tip this checkout built \u2014 left alone`, at);
-          continue;
-        }
-        await i.writer.updateTicket(t.id, { status: st.building, assignee_id: i.seatId });
-        await i.writer.postEvent(t.id, bounceComment(v, i.shipName), i.seatId, "bounced").catch(() => {
-        });
+      const attempts = q2.attempts + 1;
+      writeFileSync17(path, JSON.stringify({
+        ...q2,
+        attempts,
+        warned: true,
+        nextAttemptAt: new Date(now.getTime() + sleepBackoff(attempts)).toISOString()
+      }));
+      if (!q2.warned) log.warn(`a queued ticket counter update could not be sent yet (${e.message}); will retry`);
+    }
+  }
+  return sent;
+}
+
+// src/ticket-attribution.ts
+var TICKET_KEY_RE = /\b[A-Z][A-Z0-9]{1,9}-\d+\b/g;
+function ticketMentions(text2) {
+  return [...text2.matchAll(TICKET_KEY_RE)].map((m) => m[0]);
+}
+var TicketAttributionTracker = class {
+  #tokensByTicket = /* @__PURE__ */ new Map();
+  #turns = 0;
+  #current;
+  /** Tracker record uuid → ticket key, learned when a write names both (a claim resolves the key from the last mention). */
+  #keyByRecord = /* @__PURE__ */ new Map();
+  #lastBy = {};
+  /**
+   * The ticket key most recently named in the transcript, or undefined before any.
+   * Only the FIRST key in a turn counts: a closing summary names its own
+   * ticket first and then lists others ("Other tickets", "Blocked by", "See
+   * also"), and those trailing keys are not what the run worked (CREW-2598).
+   */
+  get current() {
+    return this.#current;
+  }
+  /** Record the mentions in `text` without crediting tokens (a claim needs "which ticket" before the turn's usage line arrives). */
+  note(text2) {
+    const mentions = ticketMentions(text2);
+    if (mentions.length > 0) this.#current = mentions[0];
+  }
+  /** One assistant turn: its combined visible text (thinking + text blocks) and its own token cost. */
+  add(text2, tokens) {
+    const mentions = ticketMentions(text2);
+    if (mentions.length > 0) this.#current = mentions[0];
+    if (this.#current === void 0 || tokens <= 0) return;
+    this.#turns++;
+    this.#tokensByTicket.set(this.#current, (this.#tokensByTicket.get(this.#current) ?? 0) + tokens);
+  }
+  /**
+   * Record a tool call if it is a ticket-targeted tracker write (claim,
+   * hand-off or comment). The ticket key comes from a record uuid seen on an
+   * earlier write when known, else from the key last named in the transcript
+   * (a claim or hand-off announces its ticket). A comment on a record never
+   * seen before is ignored: its uuid cannot be resolved to a key.
+   */
+  noteWrite(tool, input) {
+    const w = classifyWrite(tool, input);
+    if (!w) return;
+    let key = w.recordId ? this.#keyByRecord.get(w.recordId) : void 0;
+    if (w.kind !== "comment") key ??= this.#current;
+    if (!key) return;
+    if (w.kind !== "comment" && w.recordId) this.#keyByRecord.set(w.recordId, key);
+    this.#lastBy[w.kind] = key;
+  }
+  /**
+   * How the attribution is decided: a hand-off write beats a claim, a claim
+   * beats a comment (so a follow-up ticket filed or commented on while
+   * working never displaces the claimed one), and any write beats everything
+   * below. Next, `hintMoved` — the post-run read-back showed the hinted
+   * ticket changed status or assignee during the run — is a hand-off signal
+   * for a run that wrote through MCP tools crew cannot see. Then the
+   * mention-token heuristic, which with a hint may override it only when a
+   * different ticket holds a strict majority of the credited tokens (a single
+   * credited turn, like a lone end-of-run summary naming another ticket,
+   * must not). A run with no hint
+   * keeps the plain winner. The pre-run hint is last.
+   */
+  decide(hint, opts = {}) {
+    for (const by of ["handoff", "claim", "comment"]) {
+      const ticket = this.#lastBy[by];
+      if (ticket) return { ticket, by };
+    }
+    if (hint && opts.hintMoved) return { ticket: hint, by: "readback" };
+    if (this.#tokensByTicket.size > 0) {
+      if (!hint) return { ticket: this.winner(), by: "mentions" };
+      const winner = this.winner(hint);
+      if (winner === hint) return { ticket: hint, by: "mentions" };
+      let total = 0;
+      for (const n of this.#tokensByTicket.values()) total += n;
+      const share = (this.#tokensByTicket.get(winner) ?? 0) / total;
+      return share > 0.5 && this.#turns > 1 ? { ticket: winner, by: "mentions" } : { ticket: hint, by: "hint" };
+    }
+    return { ticket: hint, by: "hint" };
+  }
+  /**
+   * The ticket key the run spent the most tokens on, or `fallback` (the
+   * pre-run poll hint) when the transcript never named one — an
+   * administrative run that touches the tracker without discussing a
+   * specific ticket in its visible text still has to cite something.
+   */
+  winner(fallback) {
+    let best = fallback;
+    let bestTokens = -1;
+    for (const [ticket, tokens] of this.#tokensByTicket) {
+      if (tokens > bestTokens) {
+        best = ticket;
+        bestTokens = tokens;
       }
-    } catch (e) {
-      i.log.warn(`could not check the stray hand-off: ${e.message}`, at);
     }
+    return best;
   }
+};
+function isClaimWrite(tool, input) {
+  if (!tool || !/records_controller_update$/.test(tool)) return false;
+  const body = input?.body;
+  return typeof body === "object" && body !== null && body.status === "in_progress";
 }
-async function guardRunStrays(route2, ship, tracker, role, workingId, since2, log) {
-  const seatId = route2.resolved?.seats[role];
-  if (!seatId) return;
-  try {
-    const affinity = await tracker.claimAffinity();
-    const candidates2 = await tracker.handedOffSince(since2, workingId);
-    if (candidates2.length === 0) return;
-    await guardStrayHandoffs({
-      writer: tracker,
-      contract: tracker.contract,
-      candidates: candidates2,
-      seatId,
-      role,
-      myShipId: affinity?.shipId ?? null,
-      shipName: ship.name,
-      checkout: (t) => {
-        const r = repoConfigFor(route2, t);
-        return r ? { dir: r.target.dir, cfg: r.cfg } : null;
-      },
-      log
-    });
-  } catch (e) {
-    log.warn(`could not check for stray hand-offs: ${e.message}`, { step: "handoff" });
+var HANDOFF_STATUSES = /* @__PURE__ */ new Set(["fixed", "verified", "needs_info", "accepted"]);
+function classifyWrite(tool, input) {
+  if (!tool) return void 0;
+  const body = input?.body;
+  if (typeof body !== "object" || body === null) return void 0;
+  const b = body;
+  if (/records_controller_update$/.test(tool)) {
+    const recordId = typeof input?.recordId === "string" ? input.recordId : void 0;
+    if (b.status === "in_progress" || b.status === "qa") return { kind: "claim", recordId };
+    if (typeof b.status === "string" && HANDOFF_STATUSES.has(b.status)) return { kind: "handoff", recordId };
   }
+  if (/records_controller_create$/.test(tool) && typeof b.ticket_id === "string") return { kind: "comment", recordId: b.ticket_id };
+  return void 0;
 }
 
-// src/pending-handoff.ts
-var PENDING_MAX_AGE_MS = 48 * 36e5;
-var pendingDirFor = (stateDir) => join25(stateDir, "pending-handoffs");
-var stateDirOfStream = (streamPath) => join25(streamPath, "..", "..");
-function writePendingHandoff(stateDir, rec) {
-  const dir = pendingDirFor(stateDir);
-  mkdirSync16(dir, { recursive: true });
-  writeFileSync17(join25(dir, `${rec.ticketRecordId}.json`), JSON.stringify(rec, null, 2));
+// src/handoff-transcript.ts
+var TRANSPORT_FAILURE = /\b50[0-4]\b|<!doctype|<html|unexpected token '?<|fetch failed|econn(reset|refused)|etimedout|socket hang up|timed out|bad gateway|service unavailable/i;
+function resultText(content) {
+  if (typeof content === "string") return content;
+  if (Array.isArray(content)) return content.map((c) => c && typeof c.text === "string" ? c.text : "").join("\n");
+  return "";
 }
-function listPendingHandoffs(stateDir, route2) {
-  const dir = pendingDirFor(stateDir);
-  if (!existsSync23(dir)) return [];
-  const out = [];
-  for (const f of readdirSync7(dir).filter((n) => n.endsWith(".json")).sort()) {
+function isTransportFailure(isError, text2) {
+  if (!isError) {
     try {
-      const rec = JSON.parse(readFileSync23(join25(dir, f), "utf8"));
-      if (rec.version === 1 && rec.ticketRecordId && (!route2 || rec.route === route2)) out.push(rec);
+      const doc = JSON.parse(text2);
+      if (doc && typeof doc === "object") {
+        const code = doc.statusCode;
+        return typeof code === "number" && code >= 500;
+      }
     } catch {
     }
   }
-  return out;
+  return TRANSPORT_FAILURE.test(text2);
 }
-function removePendingHandoff(stateDir, ticketRecordId) {
-  rmSync13(join25(pendingDirFor(stateDir), `${ticketRecordId}.json`), { force: true });
+var FORBIDDEN_WRITE = /\b403\b[^]*?No WRITE access/i;
+function isForbiddenWrite(isError, text2) {
+  if (FORBIDDEN_WRITE.test(text2)) return true;
+  if (!isError) {
+    try {
+      const doc = JSON.parse(text2);
+      return !!doc && typeof doc === "object" && doc.statusCode === 403;
+    } catch {
+    }
+  }
+  return false;
 }
-function pendingHandoffFor(stateDir, ticketRecordId) {
-  return listPendingHandoffs(stateDir).find((r) => r.ticketRecordId === ticketRecordId);
+function forbiddenDetail403(text2) {
+  const m = /No WRITE access to (?:"[^"]+"|this model|[\w-]+)/i.exec(text2);
+  return m ? m[0] : "a hand-off write was refused";
 }
-var firstLine = (s) => s.trim().split("\n")[0] ?? "";
-async function replayPendingHandoffs(i) {
-  const now = i.now ?? /* @__PURE__ */ new Date();
-  const landed = [];
-  for (const rec of listPendingHandoffs(i.stateDir, i.route).filter((r) => !i.role || r.role === i.role)) {
-    const at = { ticket: rec.ticket, step: "handoff" };
-    if (now.getTime() - Date.parse(rec.createdAt) > PENDING_MAX_AGE_MS) {
-      i.log.warn(`${rec.ticket ?? rec.ticketRecordId}: dropped a pending hand-off older than ${PENDING_MAX_AGE_MS / 36e5}h`, at);
-      removePendingHandoff(i.stateDir, rec.ticketRecordId);
-      continue;
-    }
-    if (now.toISOString() < rec.nextAttemptAt) continue;
-    const seatId = i.seats[rec.role];
-    try {
-      const t = await i.writer.ticket(rec.ticketRecordId);
-      const st = i.contract.statuses;
-      if (!seatId || t.status !== st.building || rec.patch.status !== st.handoff) {
-        i.log.emit(`${t.issue_id}: pending hand-off no longer applies (ticket is at ${t.status}) \u2014 dropped`, at);
-        removePendingHandoff(i.stateDir, rec.ticketRecordId);
-        continue;
-      }
-      const co = i.checkout(t);
-      const v = co ? inspectHandoff(co.dir, co.cfg, t, rec.role) : null;
-      if (!v || v.kind === "bounce") {
-        i.log.warn(`${t.issue_id}: pending hand-off dropped \u2014 ${v ? v.reason : "this ship has no checkout of the ticket's repo"}`, at);
-        removePendingHandoff(i.stateDir, rec.ticketRecordId);
-        continue;
-      }
-      if (v.kind === "unverified") throw new Error(v.why);
-      const text2 = rec.comment ?? (rec.commentLanded ? "" : rec.finalText);
-      if (text2) {
-        const head = firstLine(text2);
-        const cc = i.contract.comments;
-        const seen = (await i.writer.comments()).some((c) => {
-          const row = c;
-          return row[cc.parent] === t.id && row[cc.author] === seatId && firstLine(String(row[cc.body] ?? "")) === head;
-        });
-        if (!seen) await i.writer.postComment(t.id, text2, seatId);
-      }
-      await i.writer.postEvent(t.id, pushedEventBody(v.sha, v.remote, v.branch), seatId, "pushed");
-      await i.writer.updateTicket(t.id, rec.patch);
-      removePendingHandoff(i.stateDir, rec.ticketRecordId);
-      i.log.emit(`${t.issue_id}: replayed a pending hand-off at ${v.sha.slice(0, 7)} \u2014 handed on to QA`, at);
-      landed.push(t.id);
-    } catch (e) {
-      const attempts = rec.attempts + 1;
-      writePendingHandoff(i.stateDir, {
-        ...rec,
-        attempts,
-        warned: true,
-        nextAttemptAt: new Date(now.getTime() + sleepBackoff(attempts)).toISOString()
-      });
-      if (!rec.warned) {
-        i.log.warn(`${rec.ticket ?? rec.ticketRecordId}: a hand-off is pending and could not be replayed yet (${e.message}); will retry`, at);
+var HandoffTranscriptTracker = class {
+  open = /* @__PURE__ */ new Map();
+  /** Per ticket record: the last hand-off status write's outcome. */
+  status = /* @__PURE__ */ new Map();
+  /** Per ticket record: the last hand-off comment that failed after the status write's turn. */
+  comment = /* @__PURE__ */ new Map();
+  landed = /* @__PURE__ */ new Set();
+  /** Per ticket record: the last hand-off status write, when the tracker refused it with 403. */
+  forbiddenWrites = /* @__PURE__ */ new Map();
+  statusLanded = false;
+  lastText = "";
+  resultLine = "";
+  feed(parsed) {
+    const line = parsed;
+    if (!line || typeof line !== "object") return;
+    if (line.type === "result" && typeof line.result === "string") this.resultLine = line.result;
+    const content = line.message?.content;
+    if (!Array.isArray(content)) return;
+    for (const b of content) {
+      if (line.type === "assistant" && b.type === "text" && b.text?.trim()) this.lastText = b.text.trim();
+      else if (line.type === "assistant" && b.type === "tool_use" && b.id) {
+        const w = classifyWrite(b.name, b.input);
+        const body = b.input?.body;
+        if (w?.recordId && (w.kind === "handoff" || w.kind === "comment") && body && typeof body === "object") {
+          this.open.set(b.id, { kind: w.kind, recordId: w.recordId, body });
+        }
+      } else if (line.type === "user" && b.type === "tool_result" && b.tool_use_id) {
+        const w = this.open.get(b.tool_use_id);
+        if (!w) continue;
+        this.open.delete(b.tool_use_id);
+        const text2 = resultText(b.content);
+        if (w.kind === "handoff") {
+          const refused = isForbiddenWrite(b.is_error === true, text2);
+          if (refused) this.forbiddenWrites.set(w.recordId, forbiddenDetail403(text2));
+          else {
+            this.forbiddenWrites.delete(w.recordId);
+            if (!isTransportFailure(b.is_error === true, text2)) this.statusLanded = true;
+          }
+        }
+        const failed = isTransportFailure(b.is_error === true, text2);
+        if (w.kind === "handoff") this.status.set(w.recordId, { ok: !failed, patch: w.body });
+        else if (failed && typeof w.body.body === "string") this.comment.set(w.recordId, w.body.body);
+        else if (!failed) {
+          this.comment.delete(w.recordId);
+          this.landed.add(w.recordId);
+        }
       }
     }
   }
-  return landed;
-}
+  /** The newest hand-off write the tracker refused with 403 and no later success for that ticket, else null. */
+  forbidden() {
+    const last = [...this.forbiddenWrites].at(-1);
+    return last ? { ticketRecordId: last[0], detail: last[1] } : null;
+  }
+  /** A hand-off status write went through, so the seat can write what a hand-off needs. */
+  handoffLanded() {
+    return this.statusLanded && this.forbiddenWrites.size === 0;
+  }
+  /** The hand-off that did not land, or null when every hand-off write succeeded (or none was tried). */
+  pending() {
+    const failed = [...this.status].filter(([, s2]) => !s2.ok).at(-1);
+    if (!failed) return null;
+    const [ticketRecordId, s] = failed;
+    return {
+      ticketRecordId,
+      patch: s.patch,
+      ...this.comment.has(ticketRecordId) ? { comment: this.comment.get(ticketRecordId) } : {},
+      ...this.landed.has(ticketRecordId) ? { commentLanded: true } : {},
+      finalText: this.lastText || this.resultLine
+    };
+  }
+};
 
 // src/skill-include.ts
 var SkillIncludeError = class extends Error {
@@ -17037,7 +17076,13 @@ function otherRunsRemoved(tickets, own) {
   return tickets.filter((t) => t.id === own.ticket.id || !own.inFlight(t.id));
 }
 function ownRunBanner(own) {
-  return `**Your ticket for this run: ${own.ticket.issue_id}.** Work this one. Any other ticket a live run on this ship is already working has been left out of this digest: it belongs to that run.`;
+  const banner = `**Your ticket for this run: ${own.ticket.issue_id}.** Work this one. Any other ticket a live run on this ship is already working has been left out of this digest: it belongs to that run.`;
+  const block = acceptanceChecklistBlock(acceptanceLines(own.ticket.description));
+  return block ? `${banner}
+
+\`\`\`
+${block}
+\`\`\`` : banner;
 }
 function writeDigest(o, d, role, stateDir, runId, own) {
   const me = o.route.resolved?.seats[role];
@@ -21001,6 +21046,10 @@ async function listLogEntries(route2, opts = {}) {
     ...filters.length > 0 ? { filters: JSON.stringify(filters) } : {}
   });
   const newestFirst = [...entries].sort((a, b) => String(b.started_at ?? "").localeCompare(String(a.started_at ?? "")));
+  if (opts.bounces) {
+    const n = (e) => e.handoff_bounces ?? -1;
+    return newestFirst.sort((a, b) => n(b) - n(a));
+  }
   if (!opts.beforeEdit) return newestFirst;
   const searches = (e) => e.calls_before_edit_search ?? -1;
   return newestFirst.sort((a, b) => searches(b) - searches(a));
@@ -25430,7 +25479,7 @@ function usage(problem, requested = false) {
   crew repos clone [ROUTE] NAME  clone a Repos row's remote into the route directory and attach it (--dir PATH, --dry-run, --json)
   crew repos hooks [ROUTE] NAME suggest test/build hooks for a checkout (--agent, --write route|repo, --recipes, --json)
   crew repos list ROUTE         the checkouts a route has, with the tracker's Repos row each matches (--json: every Repos row too)
-  crew logbook list [route]     recent Agent Log entries, filterable by --role/--ticket; --before-edit sorts by searches before the first edit
+  crew logbook list [route]     recent Agent Log entries, filterable by --role/--ticket; --before-edit sorts by searches before the first edit, --bounces by acceptance bounces
   crew logbook show [route] ID [--prompt]   one entry; --prompt reconstructs and verifies its prompt
   crew passengers [route]       sync Host Passengers containers/tunnels once; what the passengers unit invokes
   crew install                  write and load this platform's scheduler unit
@@ -28197,7 +28246,7 @@ ${cu.tail.trimEnd()}
       const sub = positional[1];
       if (sub !== "list" && sub !== "show") {
         process.stderr.write(
-          "crew logbook list [route] [--role R] [--ticket T] [--limit N] [--before-edit]\ncrew logbook show [route] <entryId> [--prompt]\n"
+          "crew logbook list [route] [--role R] [--ticket T] [--limit N] [--before-edit] [--bounces]\ncrew logbook show [route] <entryId> [--prompt]\n"
         );
         process.exit(2);
       }
@@ -28225,7 +28274,8 @@ ${cu.tail.trimEnd()}
             role: value("role"),
             ticket: value("ticket"),
             limit: value("limit") ? Number(value("limit")) : void 0,
-            beforeEdit: flag("before-edit")
+            beforeEdit: flag("before-edit"),
+            bounces: flag("bounces")
           });
           if (entries.length === 0) {
             process.stdout.write("(no Agent Log entries match)\n");