@tablation/crew 0.27.0 → 0.29.0

package/dist/cli.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
 // src/cli.ts
-import { resolve as resolve4, dirname as dirname11, join as join20, basename as basename8 } from "path";
+import { resolve as resolve4, dirname as dirname11, join as join20, basename as basename9 } from "path";
 import { fileURLToPath } from "url";
 import { hostname as hostname2, homedir as homedir5 } from "os";
 import { spawnSync as spawnSync3 } from "child_process";
 
 // src/config.ts
-import { readFileSync as readFileSync3, existsSync as existsSync3 } from "fs";
-import { resolve, dirname as dirname2, isAbsolute, join as join3, basename as basename2 } from "path";
-import { homedir, tmpdir } from "os";
+import { readFileSync as readFileSync4, existsSync as existsSync3 } from "fs";
+import { resolve, dirname as dirname2, isAbsolute, join as join4, basename as basename3 } from "path";
+import { homedir as homedir2, tmpdir } from "os";
 import { parse as parse2 } from "yaml";
 
 // src/events.ts
@@ -157,6 +157,320 @@ var Emitter = class _Emitter {
 };
 var eventFileFor = (stateDir) => join(stateDir, "events.jsonl");
 
+// src/toolchain.ts
+import { basename } from "path";
+
+// src/stream.ts
+function toolTarget(name, input) {
+  if (!input) return void 0;
+  for (const key of ["file_path", "path", "notebook_path", "url", "pattern"]) {
+    const v = input[key];
+    if (typeof v === "string" && v) return v;
+  }
+  if (name === "Bash" && typeof input.command === "string") {
+    return input.command.trim().split(/\s+/)[0];
+  }
+  return void 0;
+}
+function mapStreamLine(line) {
+  const obj = line;
+  if (!obj || obj.type !== "assistant") return [];
+  const content = obj.message?.content;
+  if (!Array.isArray(content)) return [];
+  const out = [];
+  for (const block of content) {
+    if (block.type === "thinking") out.push({ kind: "thought", text: block.thinking });
+    else if (block.type === "text") out.push({ kind: "text", text: block.text });
+    else if (block.type === "tool_use") {
+      out.push({ kind: "tool", tool: block.name, target: toolTarget(block.name, block.input) });
+    }
+  }
+  return out;
+}
+function extractTurnTokens(line) {
+  const obj = line;
+  if (!obj || obj.type !== "assistant") return void 0;
+  const usage2 = obj.message?.usage;
+  if (!usage2) return void 0;
+  return (usage2.input_tokens ?? 0) + (usage2.output_tokens ?? 0) + (usage2.cache_read_input_tokens ?? 0) + (usage2.cache_creation_input_tokens ?? 0);
+}
+function extractResult(line) {
+  const obj = line;
+  if (!obj || obj.type !== "result") return void 0;
+  return {
+    sessionId: obj.session_id,
+    numTurns: obj.num_turns,
+    totalCostUsd: obj.total_cost_usd,
+    inputTokens: obj.usage?.input_tokens,
+    outputTokens: obj.usage?.output_tokens,
+    cacheReadTokens: obj.usage?.cache_read_input_tokens,
+    cacheCreationTokens: obj.usage?.cache_creation_input_tokens
+  };
+}
+
+// src/claude-mcp.ts
+import { spawnSync } from "child_process";
+import { readFileSync as readFileSync2 } from "fs";
+import { homedir } from "os";
+import { join as join2 } from "path";
+var MCP_SERVER_NAME = "tablation";
+var redact = (s, key) => key ? s.split(key).join("sk_***") : s;
+function mcpUrlFor(baseUrl) {
+  return `${baseUrl.replace(/\/+$/, "")}/api/mcp`;
+}
+function runClaude(bin, args) {
+  const r = spawnSync(bin, args, { encoding: "utf8", timeout: 3e4 });
+  const missing = r.error?.code === "ENOENT";
+  return { status: r.status, missing, stderr: r.stderr ?? "" };
+}
+function userScopeEntry(home) {
+  try {
+    const j = JSON.parse(readFileSync2(join2(home, ".claude.json"), "utf8"));
+    return j.mcpServers?.[MCP_SERVER_NAME];
+  } catch {
+    return void 0;
+  }
+}
+function inspectClaudeMcp(o) {
+  const got = runClaude(o.bin, ["mcp", "get", MCP_SERVER_NAME]);
+  if (got.missing) return { state: "no-claude" };
+  if (got.status !== 0) return { state: "missing" };
+  const entry = userScopeEntry(o.home ?? homedir());
+  if (!entry) {
+    return { state: "different", detail: `a "${MCP_SERVER_NAME}" server exists, but not in user scope (~/.claude.json) \u2014 a project or local registration` };
+  }
+  if (entry.url !== o.url) return { state: "different", detail: `it points at ${entry.url ?? "(no url)"}, not ${o.url}` };
+  const auth = Object.entries(entry.headers ?? {}).find(([k]) => k.toLowerCase() === "authorization")?.[1];
+  if (auth !== `Bearer ${o.key}`) return { state: "different", detail: `it is registered with a different key than this route's` };
+  return { state: "registered", url: o.url };
+}
+function ensureClaudeMcp(o) {
+  const manual = `claude mcp add --transport http ${MCP_SERVER_NAME} ${o.url} --header "Authorization: Bearer <key>" --scope user`;
+  const st = inspectClaudeMcp(o);
+  if (st.state === "no-claude") return `mcp: \`${o.bin}\` not found, so Claude Code was not configured. To do it by hand: ${manual}`;
+  if (st.state === "registered") return `mcp: ${MCP_SERVER_NAME} already registered with Claude Code \u2192 ${st.url}`;
+  if (st.state === "different" && !o.replace) {
+    return `mcp: left Claude Code's "${MCP_SERVER_NAME}" server alone \u2014 ${st.detail}. Re-run with --mcp replace to overwrite it.`;
+  }
+  if (o.dryRun) return `(dry run) would register the ${MCP_SERVER_NAME} MCP server with Claude Code \u2192 ${o.url}`;
+  if (st.state === "different") {
+    runClaude(o.bin, ["mcp", "remove", MCP_SERVER_NAME, "--scope", "user"]);
+  }
+  const add = runClaude(o.bin, [
+    "mcp",
+    "add",
+    "--transport",
+    "http",
+    MCP_SERVER_NAME,
+    o.url,
+    "--header",
+    `Authorization: Bearer ${o.key}`,
+    "--scope",
+    "user"
+  ]);
+  if (add.status !== 0) {
+    return `mcp: \`claude mcp add\` failed (${redact(add.stderr.trim(), o.key) || `exit ${add.status}`}). To do it by hand: ${manual}`;
+  }
+  return `mcp: registered the ${MCP_SERVER_NAME} MCP server with Claude Code \u2192 ${o.url} (user scope, ~/.claude.json)`;
+}
+
+// src/capability.ts
+function profileFor(role) {
+  if (role === "triage") return { level: "read", designTools: false };
+  if (role === "qa") return { level: "write", designTools: false };
+  return { level: "edit", designTools: role === "design" };
+}
+
+// src/adapters/claude.ts
+var BILLING_VARS_TO_UNSET = [
+  "ANTHROPIC_API_KEY",
+  "ANTHROPIC_AUTH_TOKEN",
+  "CLAUDE_CODE_USE_VERTEX",
+  "ANTHROPIC_VERTEX_PROJECT_ID",
+  "ANTHROPIC_VERTEX_REGION",
+  "CLOUD_ML_REGION",
+  "ANTHROPIC_MODEL"
+];
+var DISALLOWED_TOOLS = [
+  "Bash(rm -rf:*)",
+  "Bash(rm -fr:*)",
+  "Bash(git push --force*)",
+  "Bash(git push -f*)",
+  "Bash(curl*| sh)",
+  "Bash(curl*|sh)",
+  "Bash(curl*| bash)",
+  "Bash(curl*|bash)",
+  "Bash(sudo:*)"
+];
+function claudeToolsFor(p) {
+  const tablation = "mcp__tablation__*";
+  if (p.level === "read") return ["Bash", "Read", tablation];
+  if (p.level === "write") return ["Bash", "Read", "Write", "Grep", "Glob", tablation];
+  const base = ["Bash", "Read", "Edit", "Write", "Grep", "Glob", tablation];
+  return p.designTools ? [...base, "Skill", "Artifact"] : base;
+}
+function allowedTools(role) {
+  return claudeToolsFor(profileFor(role));
+}
+var claudeAdapter = {
+  harness: "claude",
+  displayName: "Claude Code",
+  vendor: "anthropic",
+  ownsModel: (model) => model.startsWith("claude-"),
+  // The tier's reasoning is the extended-thinking budget; it supersedes the
+  // toolchain's `maxThinkingTokens` (0 disables). A non-numeric value is ignored.
+  applyReasoning(spec, reasoning) {
+    const n = Number(reasoning);
+    return Number.isInteger(n) && n >= 0 ? { ...spec, maxThinkingTokens: n } : spec;
+  },
+  defaultBin: "claude",
+  defaultModel: "claude-sonnet-5",
+  defaultTiers: {
+    // `standard` carries no reasoning: it defers to the toolchain's own
+    // `maxThinkingTokens`, which is what a persona with no tier gets today.
+    light: { model: "claude-haiku-4-5-20251001", reasoning: "2048" },
+    standard: { model: "claude-sonnet-5-5" },
+    deep: { model: "claude-opus-5-5", reasoning: "16384" }
+  },
+  limitations: [
+    "Bash is not sandboxed: the deny list refuses known destructive patterns, but a one-liner reaching the same end another way is not caught",
+    "the write profile (QA) withholds the Edit tool, not file writes \u2014 Bash can still write files",
+    "git push is not blocked, only forced pushes"
+  ],
+  invocation(spec, o) {
+    const args = [
+      "-p",
+      "--allowedTools",
+      ...allowedTools(o.role),
+      "--disallowedTools",
+      ...DISALLOWED_TOOLS,
+      "--model",
+      o.model,
+      "--output-format",
+      "stream-json",
+      "--verbose",
+      // Registers the tracker's own MCP tool surface for this run only —
+      // `${CREW_API_KEY}` is interpolated by the CLI from the environment,
+      // so the resolved key is never written to an argv string or a config
+      // file on disk. Skipped when there's no key to send: a route `crew
+      // connect` hasn't resolved yet has nothing to authenticate with.
+      ...o.mcp ? ["--mcp-config", JSON.stringify({
+        mcpServers: {
+          tablation: {
+            type: "http",
+            url: o.mcp.url,
+            headers: { Authorization: `Bearer \${${o.mcp.keyVar}}` }
+          }
+        }
+      })] : [],
+      ...spec.args
+    ];
+    return spec.launcher ? { bin: spec.launcher, args: [spec.bin, ...args] } : { bin: spec.bin, args };
+  },
+  runEnv(spec) {
+    return {
+      // Extended thinking is what makes the CLI emit `thinking` stream
+      // blocks at all — without it, Agent Log Cycles reporting has nothing
+      // to report (ISSUE-558).
+      ...spec.maxThinkingTokens > 0 ? { MAX_THINKING_TOKENS: String(spec.maxThinkingTokens) } : {},
+      ...spec.env
+    };
+  },
+  unsetEnv: BILLING_VARS_TO_UNSET,
+  mapStreamLine,
+  extractResult,
+  extractTurnTokens,
+  inspectMcp(o) {
+    const s = inspectClaudeMcp(o);
+    return s.state === "no-claude" ? { state: "no-binary" } : s;
+  },
+  ensureMcp: ensureClaudeMcp
+};
+
+// src/toolchain.ts
+var TIERS = ["light", "standard", "deep"];
+var ADAPTERS = {
+  [claudeAdapter.harness]: claudeAdapter
+};
+var HARNESS_NAMES = Object.keys(ADAPTERS);
+function isHarness(name) {
+  return Object.hasOwn(ADAPTERS, name);
+}
+function adapterFor(harness) {
+  const a = Object.hasOwn(ADAPTERS, harness) ? ADAPTERS[harness] : void 0;
+  if (!a) throw new Error(`unknown harness "${harness}" (have: ${HARNESS_NAMES.join(", ")})`);
+  return a;
+}
+var LEGACY_TOOLCHAIN = "claude";
+function shipToolchains(ship) {
+  const explicit = ship.toolchains ?? [];
+  if (explicit.some((t) => t.name === LEGACY_TOOLCHAIN)) return explicit;
+  const a = claudeAdapter;
+  const legacy = {
+    name: LEGACY_TOOLCHAIN,
+    harness: a.harness,
+    bin: ship.agent.bin,
+    model: ship.agent.model,
+    tiers: a.defaultTiers,
+    args: [],
+    env: {},
+    maxThinkingTokens: ship.agent.maxThinkingTokens
+  };
+  return [legacy, ...explicit];
+}
+function resolveToolchain(ship, route) {
+  const name = route?.toolchain ?? ship.toolchain ?? LEGACY_TOOLCHAIN;
+  const found = shipToolchains(ship).find((t) => t.name === name);
+  if (!found) throw new Error(`toolchain "${name}" is not defined (have: ${shipToolchains(ship).map((t) => t.name).join(", ")})`);
+  return found;
+}
+function toolchainVendor(spec) {
+  if (spec.launcher && basename(spec.launcher) === "ori") return "openrouter";
+  return adapterFor(spec.harness).vendor;
+}
+function resolveSeat(ship, route, role, persona = {}) {
+  const warnings = [];
+  const base = resolveToolchain(ship, route);
+  const baseVendor = toolchainVendor(base);
+  const baseWhy = route?.toolchain ? `route toolchain ${base.name}` : ship.toolchain ? `ship default ${base.name}` : `default ${base.name}`;
+  let chosen = base;
+  let toolchainWhy = baseWhy;
+  if (persona.vendor && persona.vendor !== baseVendor) {
+    const match = shipToolchains(ship).find((t) => toolchainVendor(t) === persona.vendor);
+    if (match) {
+      chosen = match;
+      toolchainWhy = `persona vendor ${persona.vendor} \u2192 ${match.name}`;
+    } else {
+      warnings.push(`seat ${role}: persona vendor "${persona.vendor}" has no toolchain on this ship; running ${base.name} (${baseVendor}) instead`);
+      toolchainWhy = `${baseWhy} (persona vendor ${persona.vendor} has no toolchain)`;
+    }
+  } else if (persona.vendor) {
+    toolchainWhy = `${baseWhy} (serves persona vendor ${persona.vendor})`;
+  }
+  const vendor = toolchainVendor(chosen);
+  const adapter = adapterFor(chosen.harness);
+  let model = chosen.model;
+  let modelWhy = `toolchain ${chosen.name} model`;
+  let reasoning = chosen.tiers.standard?.reasoning;
+  const explicit = persona.model;
+  const explicitOk = explicit !== void 0 && (vendor === "openrouter" || adapter.ownsModel(explicit));
+  if (explicit !== void 0 && !explicitOk) {
+    warnings.push(`seat ${role}: persona model "${explicit}" does not belong to vendor "${vendor}" (toolchain ${chosen.name}); ignored`);
+  }
+  if (explicit !== void 0 && explicitOk) {
+    model = explicit;
+    modelWhy = "persona model";
+    reasoning = void 0;
+  } else if (persona.tier && persona.tier !== "standard" && chosen.tiers[persona.tier]) {
+    const t = chosen.tiers[persona.tier];
+    model = t.model;
+    reasoning = t.reasoning;
+    modelWhy = `persona tier ${persona.tier} via ${chosen.name}`;
+  }
+  const toolchain = reasoning !== void 0 && adapter.applyReasoning ? adapter.applyReasoning(chosen, reasoning) : chosen;
+  return { toolchain, model, toolchainWhy, modelWhy, warnings };
+}
+
 // src/config.ts
 import { getSessionStore, hostFromUrl } from "@tablation/client";
 
@@ -197,8 +511,8 @@ function explain(ship, required) {
 }
 
 // src/repo-config.ts
-import { readFileSync as readFileSync2, existsSync as existsSync2 } from "fs";
-import { join as join2, basename } from "path";
+import { readFileSync as readFileSync3, existsSync as existsSync2 } from "fs";
+import { join as join3, basename as basename2 } from "path";
 import { parse } from "yaml";
 var SPEC_VERSION = 1;
 var REPO_CONFIG_FILENAMES = [".crew.yaml", ".crew.yml", ".crew.json"];
@@ -271,7 +585,7 @@ var MODES = ["local", "integrate", "ci_manual", "ci_auto", "external"];
 var PROVIDERS = ["github", "buildkite", "other", "none"];
 function findRepoConfig(dir) {
   for (const name of REPO_CONFIG_FILENAMES) {
-    const p = join2(dir, name);
+    const p = join3(dir, name);
     if (existsSync2(p)) return p;
   }
   return null;
@@ -502,7 +816,7 @@ function parseRepoConfig(text, file) {
 function loadRepoConfig(dir) {
   const file = findRepoConfig(dir);
   if (!file) return null;
-  return parseRepoConfig(readFileSync2(file, "utf8"), file);
+  return parseRepoConfig(readFileSync3(file, "utf8"), file);
 }
 function hookLabel(cfg, hook2) {
   return cfg.labels[hook2] ?? cfg.hooks[hook2] ?? hook2;
@@ -537,7 +851,7 @@ function renderWorktreeName(template, ctx) {
   return renderBranchName(template.replace(/\{dir\}/g, ctx.dir).replace(/\{issue\}/g, issue), ctx);
 }
 function defaultWorktreePrefix(dir) {
-  const name = basename(dir.replace(/[/\\]+$/, ""));
+  const name = basename2(dir.replace(/[/\\]+$/, ""));
   return name ? `${name}-issue-` : "issue-";
 }
 var DEFAULTS = {
@@ -711,7 +1025,7 @@ function effectiveBranchTemplate(cfg, prefix) {
 function effectiveWorktreeDirName(cfg, dir, branchName, number, renderName) {
   if (cfg.worktrees.name && renderName) return renderName(cfg.worktrees.name);
   if (cfg.provenance["worktrees.prefix"] !== "default") return `${cfg.worktrees.prefix}${number}`;
-  return `${basename(dir.replace(/[/\\]+$/, ""))}-${branchName}`;
+  return `${basename2(dir.replace(/[/\\]+$/, ""))}-${branchName}`;
 }
 function validateEffective(cfg) {
   const problems = [];
@@ -767,6 +1081,8 @@ var SHIP_KEYS = /* @__PURE__ */ new Set([
   "name",
   "platform",
   "agent",
+  "toolchains",
+  "toolchain",
   "shell",
   "extraPath",
   "useNvm",
@@ -806,7 +1122,8 @@ var ROUTE_KEYS = /* @__PURE__ */ new Set([
   "contract",
   "resolved",
   "promptSet",
-  "hostPassengers"
+  "hostPassengers",
+  "toolchain"
 ]);
 function parseWorktreeName(v, where, file) {
   const problem = typeof v === "string" ? worktreeNameProblem(v) : "must be a string";
@@ -910,16 +1227,16 @@ function mergeRouteRelease(route, override) {
   };
 }
 function expand(p, base) {
-  let out = p.startsWith("~") ? p.replace(/^~/, homedir()) : p;
-  out = out.replace(/\$\{?HOME\}?/g, homedir());
+  let out = p.startsWith("~") ? p.replace(/^~/, homedir2()) : p;
+  out = out.replace(/\$\{?HOME\}?/g, homedir2());
   return isAbsolute(out) ? out : resolve(base, out);
 }
 function resolvePromptsDir(promptSet, crewHome, base) {
-  if (!promptSet) return join3(crewHome, "prompts", "default");
+  if (!promptSet) return join4(crewHome, "prompts", "default");
   if (promptSet.includes("/") || promptSet.startsWith(".") || promptSet.startsWith("~")) {
     return expand(promptSet, base);
   }
-  return join3(crewHome, "prompts", promptSet);
+  return join4(crewHome, "prompts", promptSet);
 }
 var Missing = class {
   paths = [];
@@ -943,7 +1260,7 @@ var Missing = class {
 };
 function crewVersion(crewHome) {
   try {
-    const pkg = JSON.parse(readFileSync3(join3(crewHome, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync4(join4(crewHome, "package.json"), "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -953,8 +1270,8 @@ function configSearchPath(crewHome) {
   if (process.env.CREW_CONFIG) return [resolve(process.env.CREW_CONFIG)];
   const xdg = process.env.XDG_CONFIG_HOME;
   return [
-    ...xdg ? [join3(xdg, "crew", "crew.yaml")] : [],
-    join3(homedir(), ".config", "crew", "crew.yaml"),
+    ...xdg ? [join4(xdg, "crew", "crew.yaml")] : [],
+    join4(homedir2(), ".config", "crew", "crew.yaml"),
     resolve(crewHome, "crew.yaml")
   ];
 }
@@ -962,17 +1279,17 @@ function findConfigFile(crewHome) {
   const candidates = configSearchPath(crewHome);
   return candidates.find((c) => existsSync3(c)) ?? candidates[candidates.length - 1];
 }
-var defaultConfigPath = () => join3(process.env.XDG_CONFIG_HOME ?? join3(homedir(), ".config"), "crew", "crew.yaml");
+var defaultConfigPath = () => join4(process.env.XDG_CONFIG_HOME ?? join4(homedir2(), ".config"), "crew", "crew.yaml");
 function routeSlug(route) {
   return route.replace(/\//g, "-");
 }
 function resolvedPathFor(stateDir, route) {
   const [workspace, project] = splitRoute(route);
-  return join3(stateDir, "resolved", workspace, `${project}.json`);
+  return join4(stateDir, "resolved", workspace, `${project}.json`);
 }
 function apiKeyPathFor(stateDir, route) {
   const [workspace, project] = splitRoute(route);
-  return join3(stateDir, "keys", workspace, `${project}.env`);
+  return join4(stateDir, "keys", workspace, `${project}.env`);
 }
 function splitRoute(route) {
   const parts = route.split("/");
@@ -985,7 +1302,7 @@ function readResolvedFile(stateDir, route) {
   const path = resolvedPathFor(stateDir, route);
   if (!existsSync3(path)) return void 0;
   try {
-    return JSON.parse(readFileSync3(path, "utf8"));
+    return JSON.parse(readFileSync4(path, "utf8"));
   } catch (e) {
     throw new ConfigError(`${path}: not valid JSON \u2014 ${e.message}`);
   }
@@ -1047,12 +1364,12 @@ function loadConfig(crewHome, configFile, opts = {}) {
 ` + configSearchPath(crewHome).map((c) => `  - ${c}`).join("\n") + `
 
 Create the first of those:
-  mkdir -p ${dirname2(defaultConfigPath())} && cp ${join3(crewHome, "crew.example.yaml")} ${defaultConfigPath()}`
+  mkdir -p ${dirname2(defaultConfigPath())} && cp ${join4(crewHome, "crew.example.yaml")} ${defaultConfigPath()}`
     );
   }
   let raw;
   try {
-    raw = parse2(opts.text ?? readFileSync3(file, "utf8"));
+    raw = parse2(opts.text ?? readFileSync4(file, "utf8"));
   } catch (e) {
     throw new ConfigError(`${file}: not valid YAML \u2014 ${e.message}`);
   }
@@ -1082,6 +1399,12 @@ Create the first of those:
   if (!Number.isInteger(maxThinkingTokens) || maxThinkingTokens < 0) {
     missing.add(`ship.agent.maxThinkingTokens must be a non-negative integer (got "${shipRaw.agent?.maxThinkingTokens}")`);
   }
+  const toolchains = parseToolchains(shipRaw.toolchains, base, missing, file);
+  const toolchainNames = /* @__PURE__ */ new Set([LEGACY_TOOLCHAIN, ...toolchains.map((x) => x.name)]);
+  const shipToolchain = shipRaw.toolchain === void 0 ? void 0 : String(shipRaw.toolchain);
+  if (shipToolchain !== void 0 && !toolchainNames.has(shipToolchain)) {
+    missing.add(`ship.toolchain "${shipToolchain}" is not defined (have: ${[...toolchainNames].join(", ")})`);
+  }
   const stateDir = expand(shipRaw.stateDir ?? "state", base);
   const routesRaw = raw.routes;
   if (!opts.allowNoRoutes && (!Array.isArray(routesRaw) || routesRaw.length === 0)) {
@@ -1092,7 +1415,7 @@ Create the first of those:
     const where = `routes[${i}]`;
     const routeMissing = new Missing();
     try {
-      return [parseOneRoute(c, where, file, base, stateDir, raw, routeMissing, crewHome)];
+      return [parseOneRoute(c, where, file, base, stateDir, raw, routeMissing, crewHome, toolchainNames)];
     } catch (e) {
       const label = typeof c?.route === "string" && c.route ? `"${c.route}"` : where;
       routeWarnings.push(`route ${label} dropped \u2014 ${e.message}`);
@@ -1115,12 +1438,14 @@ Create the first of those:
         model: shipRaw.agent?.model ?? "claude-sonnet-5",
         maxThinkingTokens
       },
+      ...toolchains.length > 0 ? { toolchains } : {},
+      ...shipToolchain !== void 0 ? { toolchain: shipToolchain } : {},
       shell: shipRaw.shell,
       extraPath: shipRaw.extraPath,
       useNvm: shipRaw.useNvm !== false,
       nvmSh: shipRaw.nvmSh,
       stateDir,
-      logFile: expand(shipRaw.logFile ?? join3(tmpdir(), "crew.log"), base),
+      logFile: expand(shipRaw.logFile ?? join4(tmpdir(), "crew.log"), base),
       userAgent: shipRaw.userAgent ?? `Mozilla/5.0 CrewAgent/${crewVersion(crewHome)}`,
       maxConcurrentAgents,
       streamRetentionDays,
@@ -1138,8 +1463,70 @@ Create the first of those:
     warnings: routeWarnings
   };
 }
-function parseOneRoute(c, where, file, base, stateDir, raw, missing, crewHome) {
+function expandCommand(cmd, base) {
+  return cmd.includes("/") || cmd.startsWith("~") ? expand(cmd, base) : cmd;
+}
+var TOOLCHAIN_KEYS = /* @__PURE__ */ new Set(["harness", "bin", "launcher", "model", "tiers", "args", "env", "maxThinkingTokens"]);
+function parseToolchains(raw, base, missing, file) {
+  if (raw === void 0 || raw === null) return [];
+  if (typeof raw !== "object" || Array.isArray(raw)) {
+    missing.add("ship.toolchains must be a mapping of name \u2192 toolchain");
+    return [];
+  }
+  const out = [];
+  for (const [name, entryRaw] of Object.entries(raw)) {
+    const where = `ship.toolchains.${name}`;
+    if (!entryRaw || typeof entryRaw !== "object" || Array.isArray(entryRaw)) {
+      missing.add(`${where} must be a mapping`);
+      continue;
+    }
+    rejectUnknownKeys(entryRaw, TOOLCHAIN_KEYS, where, file);
+    const harness = String(entryRaw.harness ?? "");
+    if (!isHarness(harness)) {
+      missing.add(`${where}.harness must be one of ${HARNESS_NAMES.join("|")} (got "${harness}")`);
+      continue;
+    }
+    const adapter = adapterFor(harness);
+    const tiers = { ...adapter.defaultTiers };
+    for (const [tier, v] of Object.entries(entryRaw.tiers ?? {})) {
+      if (!TIERS.includes(tier)) {
+        missing.add(`${where}.tiers.${tier} is not a tier (have: ${TIERS.join(", ")})`);
+        continue;
+      }
+      if (!v || typeof v.model !== "string" || !v.model) {
+        missing.add(`${where}.tiers.${tier}.model is required`);
+        continue;
+      }
+      tiers[tier] = { model: v.model, ...v.reasoning !== void 0 ? { reasoning: String(v.reasoning) } : {} };
+    }
+    const args = entryRaw.args ?? [];
+    if (!Array.isArray(args)) missing.add(`${where}.args must be a list of strings`);
+    const env = entryRaw.env ?? {};
+    if (typeof env !== "object" || Array.isArray(env)) missing.add(`${where}.env must be a mapping of name \u2192 value`);
+    const maxThinkingTokens = entryRaw.maxThinkingTokens === void 0 ? DEFAULT_MAX_THINKING_TOKENS : Number(entryRaw.maxThinkingTokens);
+    if (!Number.isInteger(maxThinkingTokens) || maxThinkingTokens < 0) {
+      missing.add(`${where}.maxThinkingTokens must be a non-negative integer (got "${entryRaw.maxThinkingTokens}")`);
+    }
+    out.push({
+      name,
+      harness,
+      bin: expandCommand(String(entryRaw.bin ?? adapter.defaultBin), base),
+      ...entryRaw.launcher ? { launcher: expandCommand(String(entryRaw.launcher), base) } : {},
+      model: String(entryRaw.model ?? tiers.standard?.model ?? adapter.defaultModel),
+      tiers,
+      args: Array.isArray(args) ? args.map(String) : [],
+      env: Object.fromEntries(Object.entries(env).map(([k, v]) => [k, String(v)])),
+      maxThinkingTokens
+    });
+  }
+  return out;
+}
+function parseOneRoute(c, where, file, base, stateDir, raw, missing, crewHome, toolchainNames) {
   rejectUnknownKeys(c, ROUTE_KEYS, `${where}`, file);
+  const toolchain = c?.toolchain === void 0 ? void 0 : String(c.toolchain);
+  if (toolchain !== void 0 && !toolchainNames.has(toolchain)) {
+    missing.add(`${where}.toolchain "${toolchain}" is not defined in ship.toolchains (have: ${[...toolchainNames].join(", ")})`);
+  }
   const route = missing.req(c?.route, `${where}.route`);
   const routeParts = route ? route.split("/") : [];
   const routeWellFormed = routeParts.length === 2 && routeParts.every(Boolean);
@@ -1188,6 +1575,7 @@ function parseOneRoute(c, where, file, base, stateDir, raw, missing, crewHome) {
     reposBasePath: expand(String(c?.reposBasePath ?? raw.ship?.reposBasePath ?? DEFAULT_REPOS_BASE_PATH), base),
     repoOverrides,
     worktreePrefix: c?.worktreePrefix ? String(c.worktreePrefix) : void 0,
+    ...toolchain !== void 0 ? { toolchain } : {},
     promptsDir: resolvePromptsDir(c?.promptSet ? String(c.promptSet) : void 0, crewHome, base),
     weight,
     baseUrl: String(c?.baseUrl ?? raw.ship?.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, ""),
@@ -1242,7 +1630,7 @@ function dirForRepo(r, repoId) {
 }
 function repoTargetFor(r, repoId) {
   const names = r.resolved?.repoNames;
-  if (!repoId || !names) return Object.keys(r.repos).length ? null : { name: basename2(r.dir), dir: r.dir };
+  if (!repoId || !names) return Object.keys(r.repos).length ? null : { name: basename3(r.dir), dir: r.dir };
   const name = names[repoId];
   if (!name) return null;
   return reposOf(r).find((t) => t.name === name) ?? null;
@@ -1256,7 +1644,7 @@ function repoIdForName(r, name) {
 function resolveApiKey(r) {
   if (r.apiKey) return r.apiKey;
   if (r.apiKeyFile && r.apiKeyVar && existsSync3(r.apiKeyFile)) {
-    for (const line of readFileSync3(r.apiKeyFile, "utf8").split("\n")) {
+    for (const line of readFileSync4(r.apiKeyFile, "utf8").split("\n")) {
       const m = line.match(new RegExp(`^${r.apiKeyVar}=(.*)$`));
       if (m) return (m[1] ?? "").trim().replace(/^["']|["']$/g, "");
     }
@@ -1319,13 +1707,13 @@ function configuredMembers(rt) {
   return out;
 }
 function defaultRepoDir(basePath, workspace, repoName) {
-  return join3(basePath, workspace, repoName);
+  return join4(basePath, workspace, repoName);
 }
 function reposOf(r) {
   const named = Object.entries(r.repos);
   if (named.length > 0) return named.map(([name, dir]) => ({ name, dir }));
   const trackerNames = r.resolved?.repoNames ? Object.values(r.resolved.repoNames) : [];
-  if (trackerNames.length <= 1) return [{ name: basename2(r.dir), dir: r.dir }];
+  if (trackerNames.length <= 1) return [{ name: basename3(r.dir), dir: r.dir }];
   const remotes = r.resolved?.repoRemotes ?? {};
   const remoteByName = {};
   for (const [id, name] of Object.entries(r.resolved.repoNames)) {
@@ -1343,7 +1731,7 @@ function passengerRepoTargets(r) {
   return reposOf(r).filter((t) => r.repoOverrides[t.name]?.hostPassengers !== false);
 }
 function passengerCheckoutDir(basePath, workspace, repoName) {
-  return join3(basePath, workspace, ".passenger-checkouts", repoName);
+  return join4(basePath, workspace, ".passenger-checkouts", repoName);
 }
 function passengerCheckoutTargets(r) {
   if (!r.hostPassengers) return [];
@@ -1475,8 +1863,8 @@ function rosterMarkdown(roster, meId) {
 }
 
 // src/state.ts
-import { readFileSync as readFileSync4, writeFileSync, existsSync as existsSync4, mkdirSync as mkdirSync2, rmSync as rmSync2, statSync as statSync2 } from "fs";
-import { join as join4 } from "path";
+import { readFileSync as readFileSync5, writeFileSync, existsSync as existsSync4, mkdirSync as mkdirSync2, rmSync as rmSync2, statSync as statSync2 } from "fs";
+import { join as join5 } from "path";
 var EPOCH = "1970-01-01T00:00:00.000Z";
 var State = class _State {
   dir;
@@ -1485,7 +1873,7 @@ var State = class _State {
     mkdirSync2(dir, { recursive: true });
   }
   path(...parts) {
-    return join4(this.dir, ...parts);
+    return join5(this.dir, ...parts);
   }
   /**
    * The timestamp every "new since last poll" check is measured against.
@@ -1496,7 +1884,7 @@ var State = class _State {
    */
   watermark() {
     try {
-      const v = readFileSync4(this.path(".poll-watermark"), "utf8").trim();
+      const v = readFileSync5(this.path(".poll-watermark"), "utf8").trim();
       return v || EPOCH;
     } catch {
       return EPOCH;
@@ -1582,7 +1970,7 @@ var State = class _State {
     const name = _State.safe(rawName);
     const file = this.path(`.${name}.lock`);
     try {
-      const existing = Number.parseInt(readFileSync4(file, "utf8").trim(), 10);
+      const existing = Number.parseInt(readFileSync5(file, "utf8").trim(), 10);
       if (Number.isFinite(existing) && existing > 0) {
         try {
           process.kill(existing, 0);
@@ -1676,7 +2064,7 @@ var State = class _State {
     const heldReported = `.release-held-${suffix}`;
     const read = (f) => {
       try {
-        return readFileSync4(this.path(f), "utf8").trim() || null;
+        return readFileSync5(this.path(f), "utf8").trim() || null;
       } catch {
         return null;
       }
@@ -1726,7 +2114,7 @@ var State = class _State {
       /** Whether the board was already told about this head's red gate. */
       heldReported: () => {
         try {
-          return readFileSync4(this.path(heldReported), "utf8").replace(/\n$/, "") || null;
+          return readFileSync5(this.path(heldReported), "utf8").replace(/\n$/, "") || null;
         } catch {
           return null;
         }
@@ -1763,7 +2151,7 @@ var State = class _State {
     const ticketStreakFile = `.fairness-ticket-streak-${suffix}`;
     const read = (f) => {
       try {
-        return readFileSync4(this.path(f), "utf8").trim() || null;
+        return readFileSync5(this.path(f), "utf8").trim() || null;
       } catch {
         return null;
       }
@@ -1828,7 +2216,7 @@ var State = class _State {
     return {
       previous: () => {
         try {
-          const parsed = JSON.parse(readFileSync4(this.path(file), "utf8"));
+          const parsed = JSON.parse(readFileSync5(this.path(file), "utf8"));
           return parsed && typeof parsed === "object" ? parsed : {};
         } catch {
           return {};
@@ -1849,7 +2237,7 @@ var State = class _State {
     return {
       previous: () => {
         try {
-          const parsed = JSON.parse(readFileSync4(this.path(file), "utf8"));
+          const parsed = JSON.parse(readFileSync5(this.path(file), "utf8"));
           return Array.isArray(parsed) ? parsed : [];
         } catch {
           return [];
@@ -1882,7 +2270,7 @@ var State = class _State {
   }
   readInt(file) {
     try {
-      return Number.parseInt(readFileSync4(this.path(file), "utf8").trim(), 10) || 0;
+      return Number.parseInt(readFileSync5(this.path(file), "utf8").trim(), 10) || 0;
     } catch {
       return 0;
     }
@@ -2186,10 +2574,10 @@ function describeRelease(o, route) {
 }
 
 // src/install.ts
-import { dirname as dirname3, join as join5, extname } from "path";
-import { homedir as homedir2 } from "os";
-import { accessSync, constants, existsSync as existsSync5, mkdirSync as mkdirSync3, readdirSync, readFileSync as readFileSync5, statSync as statSync3, writeFileSync as writeFileSync2, unlinkSync, realpathSync } from "fs";
-import { spawnSync } from "child_process";
+import { dirname as dirname3, join as join6, extname } from "path";
+import { homedir as homedir3 } from "os";
+import { accessSync, constants, existsSync as existsSync5, mkdirSync as mkdirSync3, readdirSync, readFileSync as readFileSync6, statSync as statSync3, writeFileSync as writeFileSync2, unlinkSync, realpathSync } from "fs";
+import { spawnSync as spawnSync2 } from "child_process";
 import { createHash } from "crypto";
 
 // src/runtime-info.ts
@@ -2200,7 +2588,7 @@ function isCompiledBinary(moduleUrl) {
 // src/install.ts
 function crewInvocation(crewHome) {
   if (isCompiledBinary(import.meta.url)) return [process.execPath];
-  return [process.execPath, join5(crewHome, "bin", "crew")];
+  return [process.execPath, join6(crewHome, "bin", "crew")];
 }
 var INTERVAL_SECONDS = 120;
 function labelFor(crewHome, job) {
@@ -2238,7 +2626,7 @@ function pathFor(ship) {
   return parts.join(":");
 }
 function findOnPath(bin, searchPath) {
-  const candidates = bin.includes("/") ? [bin] : searchPath.split(":").filter(Boolean).map((dir) => join5(dir, bin));
+  const candidates = bin.includes("/") ? [bin] : searchPath.split(":").filter(Boolean).map((dir) => join6(dir, bin));
   for (const candidate of candidates) {
     try {
       accessSync(candidate, constants.X_OK);
@@ -2248,7 +2636,7 @@ function findOnPath(bin, searchPath) {
   }
   return void 0;
 }
-var COMMON_DOCKER_DIRS = ["/usr/local/bin", "/opt/homebrew/bin", join5(homedir2(), ".docker", "bin")].join(":");
+var COMMON_DOCKER_DIRS = ["/usr/local/bin", "/opt/homebrew/bin", join6(homedir3(), ".docker", "bin")].join(":");
 function dockerPathProblem(ship, shellPath = process.env.PATH ?? "") {
   const schedulerPath = pathFor(ship);
   if (findOnPath("docker", schedulerPath)) return void 0;
@@ -2260,7 +2648,7 @@ function xmlEscape(s) {
 }
 function planLaunchd(ship, crewHome, job) {
   const label = labelFor(crewHome, job);
-  const unitPath = join5(homedir2(), "Library", "LaunchAgents", `${label}.plist`);
+  const unitPath = join6(homedir3(), "Library", "LaunchAgents", `${label}.plist`);
   const crewLog = ship.logFile;
   const schedulerLog = schedulerLogFor(crewLog, job);
   const persistent = job === "run";
@@ -2312,8 +2700,8 @@ ${scheduleKeys}
 }
 function planSystemd(ship, crewHome, job) {
   const label = labelFor(crewHome, job);
-  const unitDir = join5(homedir2(), ".config", "systemd", "user");
-  const servicePath = join5(unitDir, `${label}.service`);
+  const unitDir = join6(homedir3(), ".config", "systemd", "user");
+  const servicePath = join6(unitDir, `${label}.service`);
   const crewLog = ship.logFile;
   const schedulerLog = schedulerLogFor(crewLog, job);
   const description = job === "release" ? "Tablation crew \u2014 release" : job === "passengers" ? "Tablation crew \u2014 Host Passengers sync" : "Tablation crew \u2014 persistent supervisor loop";
@@ -2350,7 +2738,7 @@ WantedBy=default.target
       schedulerLog
     };
   }
-  const timerPath = join5(unitDir, `${label}.timer`);
+  const timerPath = join6(unitDir, `${label}.timer`);
   const service = `# Written by \`crew install\` \u2014 re-run it rather than hand-editing this file.
 [Unit]
 Description=${description}
@@ -2417,7 +2805,7 @@ function planInstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
 function planUninstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
   const label = labelFor(crewHome, job);
   if (hostShip === "macos") {
-    const unitPath = join5(homedir2(), "Library", "LaunchAgents", `${label}.plist`);
+    const unitPath = join6(homedir3(), "Library", "LaunchAgents", `${label}.plist`);
     return {
       mechanism: "launchd",
       unitPaths: [unitPath],
@@ -2427,18 +2815,18 @@ function planUninstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
     };
   }
   if (hostShip === "linux" && hasSystemd) {
-    const unitDir = join5(homedir2(), ".config", "systemd", "user");
+    const unitDir = join6(homedir3(), ".config", "systemd", "user");
     if (job === "run") {
       return {
         mechanism: "systemd",
-        unitPaths: [join5(unitDir, `${label}.service`)],
+        unitPaths: [join6(unitDir, `${label}.service`)],
         crontabLine: null,
         unloadCommands: [["systemctl", "--user", "disable", "--now", `${label}.service`]]
       };
     }
     return {
       mechanism: "systemd",
-      unitPaths: [join5(unitDir, `${label}.service`), join5(unitDir, `${label}.timer`)],
+      unitPaths: [join6(unitDir, `${label}.service`), join6(unitDir, `${label}.timer`)],
       crontabLine: null,
       unloadCommands: [["systemctl", "--user", "disable", "--now", `${label}.timer`]]
     };
@@ -2456,7 +2844,7 @@ function planUninstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
 function planDaemonControl(crewHome, hostShip, hasSystemd) {
   const label = labelFor(crewHome, "run");
   if (hostShip === "macos") {
-    const unitPath = join5(homedir2(), "Library", "LaunchAgents", `${label}.plist`);
+    const unitPath = join6(homedir3(), "Library", "LaunchAgents", `${label}.plist`);
     return {
       mechanism: "launchd",
       startCommand: ["launchctl", "load", unitPath],
@@ -2480,7 +2868,7 @@ function planDaemonControl(crewHome, hostShip, hasSystemd) {
 }
 function runAll(commands, cwd, log) {
   for (const [bin, ...args] of commands) {
-    const res = spawnSync(bin, args, { cwd, encoding: "utf8" });
+    const res = spawnSync2(bin, args, { cwd, encoding: "utf8" });
     if (res.error || res.status !== 0) {
       log.warn(`${bin} ${args.join(" ")} exited ${res.status ?? "error"}`, {
         output: `${res.stdout ?? ""}${res.stderr ?? ""}${res.error ? String(res.error) : ""}`
@@ -2545,7 +2933,7 @@ async function applyUninstall(plan, crewHome, dryRun, log) {
     if (dryRun) {
       log.emit(`would run: launchctl remove ${plan.removeLabel}`);
     } else {
-      if (spawnSync("launchctl", ["remove", plan.removeLabel], { encoding: "utf8" }).status === 0) {
+      if (spawnSync2("launchctl", ["remove", plan.removeLabel], { encoding: "utf8" }).status === 0) {
         log.emit(`removed loaded job ${plan.removeLabel}`);
       }
     }
@@ -2570,7 +2958,7 @@ async function applyUninstall(plan, crewHome, dryRun, log) {
 }
 var CREW_LAUNCHD_PREFIX = "com.tablation.crew";
 function launchAgentsDir() {
-  return join5(homedir2(), "Library", "LaunchAgents");
+  return join6(homedir3(), "Library", "LaunchAgents");
 }
 function xmlUnescape(s) {
   return s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
@@ -2582,17 +2970,17 @@ function programFromPlist(text) {
   return args.find((a) => a.endsWith("/bin/crew")) ?? args[0] ?? null;
 }
 function loadedCrewLabels() {
-  const list = spawnSync("launchctl", ["list"], { encoding: "utf8" });
+  const list = spawnSync2("launchctl", ["list"], { encoding: "utf8" });
   if (list.status !== 0) return [];
   return [...parseLaunchctlList(list.stdout ?? "").keys()].filter((l) => l.startsWith(CREW_LAUNCHD_PREFIX));
 }
 function listLaunchdUnits(dir = launchAgentsDir(), loaded = []) {
   const files = existsSync5(dir) ? readdirSync(dir) : [];
   const units = files.filter((f) => f.startsWith(CREW_LAUNCHD_PREFIX) && f.endsWith(".plist")).sort().map((f) => {
-    const plistPath = join5(dir, f);
+    const plistPath = join6(dir, f);
     let program = null;
     try {
-      program = programFromPlist(readFileSync5(plistPath, "utf8"));
+      program = programFromPlist(readFileSync6(plistPath, "utf8"));
     } catch {
     }
     return {
@@ -2605,7 +2993,7 @@ function listLaunchdUnits(dir = launchAgentsDir(), loaded = []) {
   const seen = new Set(units.map((u) => u.label));
   for (const label of [...loaded].sort()) {
     if (!label.startsWith(CREW_LAUNCHD_PREFIX) || seen.has(label)) continue;
-    units.push({ label, plistPath: join5(dir, `${label}.plist`), program: null, programExists: false, orphan: true });
+    units.push({ label, plistPath: join6(dir, `${label}.plist`), program: null, programExists: false, orphan: true });
   }
   return units;
 }
@@ -2618,8 +3006,8 @@ function removeLaunchdUnit(unit, dryRun, log) {
     log.emit(`would unload and remove ${unit.label}`);
     return;
   }
-  if (existsSync5(unit.plistPath)) spawnSync("launchctl", ["unload", unit.plistPath], { encoding: "utf8" });
-  spawnSync("launchctl", ["remove", unit.label], { encoding: "utf8" });
+  if (existsSync5(unit.plistPath)) spawnSync2("launchctl", ["unload", unit.plistPath], { encoding: "utf8" });
+  spawnSync2("launchctl", ["remove", unit.label], { encoding: "utf8" });
   if (existsSync5(unit.plistPath)) unlinkSync(unit.plistPath);
   log.emit(`removed ${unit.label} (${unit.plistPath})`);
 }
@@ -2652,7 +3040,7 @@ function parseLaunchctlList(text) {
   return jobs;
 }
 function describeForeignLaunchdUnits(crewHome, dir) {
-  const list = spawnSync("launchctl", ["list"], { encoding: "utf8" });
+  const list = spawnSync2("launchctl", ["list"], { encoding: "utf8" });
   const jobs = parseLaunchctlList(list.status === 0 ? list.stdout ?? "" : "");
   const foreign = foreignLaunchdUnits(crewHome, dir, jobs.keys());
   return foreign.map((u) => {
@@ -2665,11 +3053,11 @@ function describeForeignLaunchdUnits(crewHome, dir) {
   });
 }
 function readCrontab() {
-  const res = spawnSync("crontab", ["-l"], { encoding: "utf8" });
+  const res = spawnSync2("crontab", ["-l"], { encoding: "utf8" });
   return res.status === 0 ? res.stdout ?? "" : "";
 }
 function writeCrontab(text) {
-  spawnSync("crontab", ["-"], { input: text, encoding: "utf8" });
+  spawnSync2("crontab", ["-"], { input: text, encoding: "utf8" });
 }
 function addCrontabLine(marker, line) {
   const existing = readCrontab();
@@ -2693,7 +3081,7 @@ function removeCrontabLine(marker) {
 }
 function detectSystemd() {
   if (process.platform !== "linux") return false;
-  const res = spawnSync("systemctl", ["--user", "status"], { encoding: "utf8" });
+  const res = spawnSync2("systemctl", ["--user", "status"], { encoding: "utf8" });
   return !res.error;
 }
 
@@ -2711,7 +3099,7 @@ import {
   statSync as statSync4,
   unlinkSync as unlinkSync2
 } from "fs";
-import { dirname as dirname4, basename as basename3 } from "path";
+import { dirname as dirname4, basename as basename4 } from "path";
 var GitError = class extends Error {
 };
 function gitRaw(cwd, args) {
@@ -2807,7 +3195,7 @@ function deleteRemoteBranch(cwd, remote, branch) {
 }
 function worktreeForNumber(cwd, num) {
   const re = new RegExp(`(?:^|-)${num}$`);
-  return worktrees(cwd).find((w) => re.test(basename3(w.path))) ?? null;
+  return worktrees(cwd).find((w) => re.test(basename4(w.path))) ?? null;
 }
 var commitBodies = (cwd, range) => gitOk(cwd, ["log", range, "--format=%B"]) ?? "";
 var resolve2 = (cwd, ref) => gitOk(cwd, ["rev-parse", "-q", "--verify", `${ref}^{commit}`]);
@@ -4761,7 +5149,7 @@ ${waiting.map((t) => `| ${displayKey2(t)} | ${t.status} | ${blockers(t, i)} |`).
 }
 
 // src/ticket-branch.ts
-import { basename as basename4 } from "path";
+import { basename as basename5 } from "path";
 function branchRenderer(t, role) {
   const { tag, prefix } = ticketBranchContext(t);
   return (template) => renderBranchName(template, { key: t.issue_id, title: t.title ?? void 0, role, tag, prefix });
@@ -4772,7 +5160,7 @@ function worktreeForTicket(dir, cfg, t, role) {
   const number = t.issue_id.replace(/^\D+/, "");
   const { tag } = ticketBranchContext(t);
   return effectiveWorktreeDirName(cfg, dir, branchName, number, (template) => renderWorktreeName(template, {
-    dir: basename4(dir.replace(/[/\\]+$/, "")),
+    dir: basename5(dir.replace(/[/\\]+$/, "")),
     key: t.issue_id,
     title: t.title ?? void 0,
     role,
@@ -4813,7 +5201,7 @@ function materializeBranchForTicket(dir, cfg, t, role) {
 
 // src/poll.ts
 import { writeFileSync as writeFileSync3 } from "fs";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 
 // src/stalled.ts
 var STALLED_AFTER_CYCLES = 30;
@@ -5085,7 +5473,7 @@ async function decideCycle(o) {
   }
   return decision;
 }
-var digestPath = (stateDir, route, role) => join6(stateDir, `digest-${route}-${role}.md`);
+var digestPath = (stateDir, route, role) => join7(stateDir, `digest-${route}-${role}.md`);
 function writeDigest(o, d, role, stateDir) {
   const me = o.route.resolved?.seats[role];
   if (!me) return false;
@@ -5455,13 +5843,13 @@ var alreadyReported = (ticket, g, comments) => comments.some((c) => c.ticket_id
 
 // src/agent.ts
 import { spawn as spawn2 } from "child_process";
-import { readFileSync as readFileSync6, existsSync as existsSync7, statSync as statSync5, mkdirSync as mkdirSync5, writeFileSync as writeFileSync4, createWriteStream } from "fs";
+import { readFileSync as readFileSync7, existsSync as existsSync7, statSync as statSync5, mkdirSync as mkdirSync5, writeFileSync as writeFileSync4, createWriteStream } from "fs";
 import { finished } from "stream/promises";
-import { join as join7, dirname as dirname5 } from "path";
+import { join as join8, dirname as dirname5 } from "path";
 import { createHash as createHash2 } from "crypto";
 
 // src/environment.ts
-import { basename as basename5 } from "path";
+import { basename as basename6 } from "path";
 var API_KEY_VAR = "CREW_API_KEY";
 function authorshipBullets(a, contract) {
   if (!a) return [];
@@ -5512,7 +5900,7 @@ function repoSection(r, key, heading) {
   const repo = r.config;
   const branchTemplate = effectiveBranchTemplate(repo, repoPrefix(repo));
   const branchName = branchExample(repo, key);
-  const checkoutName = basename5(r.dir.replace(/[/\\]+$/, ""));
+  const checkoutName = basename6(r.dir.replace(/[/\\]+$/, ""));
   const worktreeName = effectiveWorktreeDirName(
     repo,
     r.dir,
@@ -5742,54 +6130,6 @@ function renderEnvironment(i) {
   return lines.join("\n");
 }
 
-// src/stream.ts
-function toolTarget(name, input) {
-  if (!input) return void 0;
-  for (const key of ["file_path", "path", "notebook_path", "url", "pattern"]) {
-    const v = input[key];
-    if (typeof v === "string" && v) return v;
-  }
-  if (name === "Bash" && typeof input.command === "string") {
-    return input.command.trim().split(/\s+/)[0];
-  }
-  return void 0;
-}
-function mapStreamLine(line) {
-  const obj = line;
-  if (!obj || obj.type !== "assistant") return [];
-  const content = obj.message?.content;
-  if (!Array.isArray(content)) return [];
-  const out = [];
-  for (const block of content) {
-    if (block.type === "thinking") out.push({ kind: "thought", text: block.thinking });
-    else if (block.type === "text") out.push({ kind: "text", text: block.text });
-    else if (block.type === "tool_use") {
-      out.push({ kind: "tool", tool: block.name, target: toolTarget(block.name, block.input) });
-    }
-  }
-  return out;
-}
-function extractTurnTokens(line) {
-  const obj = line;
-  if (!obj || obj.type !== "assistant") return void 0;
-  const usage2 = obj.message?.usage;
-  if (!usage2) return void 0;
-  return (usage2.input_tokens ?? 0) + (usage2.output_tokens ?? 0) + (usage2.cache_read_input_tokens ?? 0) + (usage2.cache_creation_input_tokens ?? 0);
-}
-function extractResult(line) {
-  const obj = line;
-  if (!obj || obj.type !== "result") return void 0;
-  return {
-    sessionId: obj.session_id,
-    numTurns: obj.num_turns,
-    totalCostUsd: obj.total_cost_usd,
-    inputTokens: obj.usage?.input_tokens,
-    outputTokens: obj.usage?.output_tokens,
-    cacheReadTokens: obj.usage?.cache_read_input_tokens,
-    cacheCreationTokens: obj.usage?.cache_creation_input_tokens
-  };
-}
-
 // src/agent-log.ts
 async function post(target, path, body) {
   const url = `${target.baseUrl.replace(/\/+$/, "")}/api/workspaces/${target.workspaceId}${path}`;
@@ -5871,36 +6211,10 @@ var TicketAttributionTracker = class {
 
 // src/agent.ts
 var DIGEST_MAX_AGE_SECONDS = 600;
-function allowedTools(role) {
-  const tablation = "mcp__tablation__*";
-  if (role === "triage") return ["Bash", "Read", tablation];
-  if (role === "qa") return ["Bash", "Read", "Write", "Grep", "Glob", tablation];
-  const base = ["Bash", "Read", "Edit", "Write", "Grep", "Glob", tablation];
-  return role === "design" ? [...base, "Skill", "Artifact"] : base;
-}
-var DISALLOWED_TOOLS = [
-  "Bash(rm -rf:*)",
-  "Bash(rm -fr:*)",
-  "Bash(git push --force*)",
-  "Bash(git push -f*)",
-  "Bash(curl*| sh)",
-  "Bash(curl*|sh)",
-  "Bash(curl*| bash)",
-  "Bash(curl*|bash)",
-  "Bash(sudo:*)"
-];
-var BILLING_VARS_TO_UNSET = [
-  "ANTHROPIC_API_KEY",
-  "ANTHROPIC_AUTH_TOKEN",
-  "CLAUDE_CODE_USE_VERTEX",
-  "ANTHROPIC_VERTEX_PROJECT_ID",
-  "ANTHROPIC_VERTEX_REGION",
-  "CLOUD_ML_REGION",
-  "ANTHROPIC_MODEL"
-];
-function scrubbedEnv(env = process.env) {
+var LEGACY_TOOLCHAIN_HARNESS = "claude";
+function scrubbedEnv(env = process.env, harness = LEGACY_TOOLCHAIN_HARNESS) {
   const out = { ...env };
-  for (const v of BILLING_VARS_TO_UNSET) delete out[v];
+  for (const v of adapterFor(harness).unsetEnv) delete out[v];
   return out;
 }
 var CREW_LANE_ROLE_VAR = "CREW_LANE_ROLE";
@@ -5914,23 +6228,23 @@ var AgentError = class extends Error {
 var AgentSpawnError = class extends AgentError {
 };
 function planAgentRun(o) {
-  const briefPath = join7(o.route.promptsDir, "personas", `lane-${o.role}.md`);
+  const briefPath = join8(o.route.promptsDir, "personas", `lane-${o.role}.md`);
   if (!existsSync7(briefPath)) {
     throw new AgentError(`no brief at ${briefPath} \u2014 refusing to run an unscoped session`);
   }
-  const commonPath = join7(o.route.promptsDir, "personas", "common.md");
+  const commonPath = join8(o.route.promptsDir, "personas", "common.md");
   if (!existsSync7(commonPath)) throw new AgentError(`no shared policy at ${commonPath}`);
   const now = o.now ?? (() => Date.now());
   const routeLabel = routeSlug(o.route.route);
-  const digestPath2 = join7(o.stateDir, `digest-${routeLabel}-${o.role}.md`);
+  const digestPath2 = join8(o.stateDir, `digest-${routeLabel}-${o.role}.md`);
   let digest;
   let ageSeconds;
   if (existsSync7(digestPath2)) {
     ageSeconds = Math.floor((now() - statSync5(digestPath2).mtimeMs) / 1e3);
-    if (ageSeconds <= DIGEST_MAX_AGE_SECONDS) digest = readFileSync6(digestPath2, "utf8");
+    if (ageSeconds <= DIGEST_MAX_AGE_SECONDS) digest = readFileSync7(digestPath2, "utf8");
   }
-  const common = readFileSync6(commonPath, "utf8");
-  const brief = readFileSync6(briefPath, "utf8");
+  const common = readFileSync7(commonPath, "utf8");
+  const brief = readFileSync7(briefPath, "utf8");
   const effectiveCommon = o.divergedPrompt ? "" : common;
   const effectiveBrief = o.divergedPrompt ?? brief;
   const prompt = assemblePrompt({
@@ -5941,9 +6255,18 @@ function planAgentRun(o) {
     digest
   });
   const promptSha = createHash2("sha256").update(`${effectiveCommon}${effectiveBrief}`).digest("hex");
-  const streamsDir = join7(o.stateDir, "streams");
+  const streamsDir = join8(o.stateDir, "streams");
   const base = `${routeLabel}-${o.role}-${o.cycle}`;
-  const model = o.agentModel ?? o.ship.agent.model;
+  const seat = resolveSeat(o.ship, o.route, o.role, o.agentPersona ?? (o.agentModel ? { model: o.agentModel } : {}));
+  const { toolchain, model } = seat;
+  const adapter = adapterFor(toolchain.harness);
+  const invocation = adapter.invocation(toolchain, {
+    role: o.role,
+    model,
+    // Skipped when there's no key to send: a route `crew connect` hasn't
+    // resolved yet has nothing to authenticate the MCP connection with either.
+    mcp: o.apiKey ? { url: `${o.route.baseUrl}/api/mcp`, keyVar: API_KEY_VAR } : void 0
+  });
   const agentLog = o.route.resolved && o.apiKey ? {
     baseUrl: o.route.baseUrl,
     workspaceId: o.route.resolved.workspaceId,
@@ -5961,43 +6284,18 @@ function planAgentRun(o) {
     // (config.ts), and the digest's `repo` column is what actually places
     // the work. Kept deliberately rather than guessed at (ISSUE-349).
     cwd: o.route.dir,
-    bin: o.ship.agent.bin,
-    args: [
-      "-p",
-      "--allowedTools",
-      ...allowedTools(o.role),
-      "--disallowedTools",
-      ...DISALLOWED_TOOLS,
-      "--model",
-      model,
-      "--output-format",
-      "stream-json",
-      "--verbose",
-      // Registers the tracker's own MCP tool surface for this run only —
-      // `${CREW_API_KEY}` is interpolated by the CLI from the environment
-      // (set below), so the resolved key is never written to an argv string
-      // or a config file on disk. Skipped when there's no key to send: a
-      // route `crew connect` hasn't resolved yet has nothing to authenticate
-      // the MCP connection with either.
-      ...o.apiKey ? ["--mcp-config", JSON.stringify({
-        mcpServers: {
-          tablation: {
-            type: "http",
-            url: `${o.route.baseUrl}/api/mcp`,
-            headers: { Authorization: `Bearer \${${API_KEY_VAR}}` }
-          }
-        }
-      })] : []
-    ],
+    bin: invocation.bin,
+    args: invocation.args,
+    toolchain: toolchain.name,
+    harness: toolchain.harness,
+    resolution: { toolchain: seat.toolchainWhy, model: seat.modelWhy },
+    warnings: seat.warnings,
     prompt,
     promptBytes: Buffer.byteLength(prompt, "utf8"),
-    unsetEnv: BILLING_VARS_TO_UNSET,
+    unsetEnv: adapter.unsetEnv,
     setEnv: {
       ...o.apiKey ? { [API_KEY_VAR]: o.apiKey } : {},
-      // Extended thinking is what makes the CLI emit `thinking` stream
-      // blocks at all — without it, `run.cycles` (below) is always empty
-      // and Agent Log Cycles reporting has nothing to report (ISSUE-558).
-      ...o.ship.agent.maxThinkingTokens > 0 ? { MAX_THINKING_TOKENS: String(o.ship.agent.maxThinkingTokens) } : {},
+      ...adapter.runEnv(toolchain),
       // The operator's global SessionStart hook (pair-context-hook.sh) injects
       // the interactive Pair persona's prompt for any session it can't tell
       // apart from a person's own terminal. Every headless lane run this
@@ -6011,8 +6309,8 @@ function planAgentRun(o) {
     digestAttached: digest !== void 0,
     digestAgeSeconds: ageSeconds,
     model,
-    streamPath: join7(streamsDir, `${base}.jsonl`),
-    eventsPath: join7(streamsDir, `${base}.events.jsonl`),
+    streamPath: join8(streamsDir, `${base}.jsonl`),
+    eventsPath: join8(streamsDir, `${base}.events.jsonl`),
     ticket: o.ticket,
     agentLog,
     promptVersion: o.route.resolved?.agentPersonas?.[o.role]?.historyId,
@@ -6022,6 +6320,10 @@ function planAgentRun(o) {
 function describePlan(p) {
   return [
     `role:    ${p.role}`,
+    ...p.resolution ? [`resolved: toolchain ${p.toolchain} \u2190 ${p.resolution.toolchain}; model ${p.model} \u2190 ${p.resolution.model}`] : [],
+    ...(p.warnings ?? []).map((w) => `warning: ${w}`),
+    // Only for a non-default toolchain, so a plain Claude run's output is unchanged.
+    ...p.toolchain && p.toolchain !== "claude" ? [`toolchain: ${p.toolchain} (${p.harness ?? "claude"})`] : [],
     `cwd:     ${p.cwd}`,
     `command: ${p.bin} ${p.args.join(" ")}`,
     `prompt:  ${p.promptBytes} bytes on stdin (never argv)`,
@@ -6047,14 +6349,16 @@ function endSink(sink) {
   return finished(sink).catch(() => void 0);
 }
 function spawnAgent(plan, emit) {
+  const adapter = adapterFor(plan.harness ?? LEGACY_TOOLCHAIN_HARNESS);
   const started = Date.now();
   const startedAt = new Date(started).toISOString();
+  for (const w of plan.warnings ?? []) emit.warn(w, { step: "agent", role: plan.role });
   const rawSink = openSink(plan.streamPath);
   const eventsSink = openSink(plan.eventsPath);
   return new Promise((resolve5, reject) => {
     const child = spawn2(plan.bin, plan.args, {
       cwd: plan.cwd,
-      env: { ...scrubbedEnv(), ...plan.setEnv },
+      env: { ...scrubbedEnv(process.env, adapter.harness), ...plan.setEnv },
       stdio: ["pipe", "pipe", "inherit"]
     });
     let buf = "";
@@ -6075,9 +6379,9 @@ function spawnAgent(plan, emit) {
         return;
       }
       try {
-        result = extractResult(parsed) ?? result;
+        result = adapter.extractResult(parsed) ?? result;
         let turnText = "";
-        for (const ev of mapStreamLine(parsed)) {
+        for (const ev of adapter.mapStreamLine(parsed)) {
           const e = {
             at: (/* @__PURE__ */ new Date()).toISOString(),
             cycle: emit.cycle,
@@ -6115,7 +6419,7 @@ function spawnAgent(plan, emit) {
 `);
           }
         }
-        const turnTokens = extractTurnTokens(parsed);
+        const turnTokens = adapter.extractTurnTokens(parsed);
         if (turnTokens !== void 0) attribution.add(turnText, turnTokens);
       } catch {
       }
@@ -6193,12 +6497,12 @@ function spawnAgent(plan, emit) {
 
 // src/run-worktree.ts
 import { existsSync as existsSync9 } from "fs";
-import { dirname as dirname6, join as join9 } from "path";
+import { dirname as dirname6, join as join10 } from "path";
 
 // src/ports.ts
 import { execFileSync as execFileSync2 } from "child_process";
 import { existsSync as existsSync8 } from "fs";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 var run = (cmd, args) => {
   try {
     return execFileSync2(cmd, args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
@@ -6243,7 +6547,7 @@ function ticketForPort(port, s = DEFAULT_PORTS) {
 }
 function worktreeExists(parent, prefix, n) {
   for (const name of [`${prefix}${n}`, `${prefix}${String(n).padStart(3, "0")}`]) {
-    if (existsSync8(join8(parent, name, ".git"))) return true;
+    if (existsSync8(join9(parent, name, ".git"))) return true;
   }
   return false;
 }
@@ -6331,7 +6635,7 @@ function planRunWorktree(dir, cfg, t, role) {
     if (countCommits(existing.path, `${baseRef}..HEAD`) > 0) return { action: "leave-unpushed", path: existing.path, branch };
     return { action: "recut", path: existing.path, branch, base: baseRef };
   }
-  const path = join9(dirname6(dir), worktreeForTicket(dir, cfg, t, role));
+  const path = join10(dirname6(dir), worktreeForTicket(dir, cfg, t, role));
   if (located?.where === "remote" || located && hasRemote && remoteBranchExists(dir, remote, located.branch)) {
     return { action: "cut-remote", path, branch: located.branch };
   }
@@ -6539,7 +6843,7 @@ async function retireRunWorktree(tracker, dir, cfg, t, role, seatId, shipName2,
 }
 
 // src/connect-wizard.ts
-import { delimiter, dirname as dirname7, join as join10 } from "path";
+import { delimiter, dirname as dirname7, join as join11 } from "path";
 import { accessSync as accessSync2, constants as constants2, existsSync as existsSync10, mkdirSync as mkdirSync6, writeFileSync as writeFileSync5 } from "fs";
 import { stringify } from "yaml";
 var HOST_PASSENGERS_DOCS_URL = "https://crew.tablation.dev/host-passengers";
@@ -6562,7 +6866,7 @@ function defaultIsExecutable(p) {
 function findOnPath2(name, pathEnv, isExecutable = defaultIsExecutable) {
   for (const dir of pathEnv.split(delimiter)) {
     if (!dir) continue;
-    const candidate = join10(dir, name);
+    const candidate = join11(dir, name);
     if (isExecutable(candidate)) return candidate;
   }
   return void 0;
@@ -6657,8 +6961,8 @@ Wrote ${o.configPath}.
 }
 
 // src/release-run.ts
-import { readFileSync as readFileSync7, writeFileSync as writeFileSync6, existsSync as existsSync11, copyFileSync, mkdirSync as mkdirSync7, mkdtempSync, rmSync as rmSync3 } from "fs";
-import { dirname as dirname8, join as join11 } from "path";
+import { readFileSync as readFileSync8, writeFileSync as writeFileSync6, existsSync as existsSync11, copyFileSync, mkdirSync as mkdirSync7, mkdtempSync, rmSync as rmSync3 } from "fs";
+import { dirname as dirname8, join as join12 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 
 // src/release.ts
@@ -7316,13 +7620,13 @@ async function bump(o, size) {
     }
     return printed;
   }
-  const files = o.repo.release.versionFiles.map((f) => join11(o.cwd, f));
+  const files = o.repo.release.versionFiles.map((f) => join12(o.cwd, f));
   const first = files[0];
   if (!existsSync11(first)) {
     o.emit.error(`no ${o.repo.release.versionFiles[0]} to read a version from`);
     return null;
   }
-  const current = JSON.parse(readFileSync7(first, "utf8")).version;
+  const current = JSON.parse(readFileSync8(first, "utf8")).version;
   if (!current) {
     o.emit.error(`no version field in ${o.repo.release.versionFiles[0]}`);
     return null;
@@ -7335,7 +7639,7 @@ async function bump(o, size) {
     return version;
   }
   for (const f of files) {
-    const src = readFileSync7(f, "utf8");
+    const src = readFileSync8(f, "utf8");
     const out = src.replace(/("version"\s*:\s*")[^"]*(")/, `$1${version}$2`);
     if (out === src) {
       o.emit.error(`no version field in ${f}`);
@@ -7348,13 +7652,13 @@ async function bump(o, size) {
 function writeChangelog(o, version, entries) {
   const file = o.repo.release.changelog;
   if (!file || entries.length === 0) return;
-  const path = join11(o.cwd, file);
+  const path = join12(o.cwd, file);
   const section = renderChangelogSection(version, (/* @__PURE__ */ new Date()).toISOString().slice(0, 10), entries);
   if (o.dryRun) {
     o.emit.emit(`would prepend ${entries.length} entr(ies) to ${file}`);
     return;
   }
-  const existing = existsSync11(path) ? readFileSync7(path, "utf8") : "# Changelog\n";
+  const existing = existsSync11(path) ? readFileSync8(path, "utf8") : "# Changelog\n";
   writeFileSync6(path, insertChangelogSection(existing, section));
 }
 async function confirm(o, expected) {
@@ -7436,8 +7740,8 @@ async function confirmLastRelease(o, decision) {
 function openReleaseCheckout(o) {
   const { remote, base } = o.repo.branch;
   const branch = `crew/release-${Date.now()}`;
-  const root = mkdtempSync(join11(tmpdir2(), "crew-release-"));
-  const dir = join11(root, "checkout");
+  const root = mkdtempSync(join12(tmpdir2(), "crew-release-"));
+  const dir = join12(root, "checkout");
   const close = () => {
     gitOk(o.cwd, ["worktree", "remove", "--force", dir]);
     rmSync3(root, { recursive: true, force: true });
@@ -7451,10 +7755,10 @@ function openReleaseCheckout(o) {
     throw e;
   }
   for (const f of o.repo.worktrees.copy) {
-    const src = join11(o.cwd, f);
+    const src = join12(o.cwd, f);
     if (!existsSync11(src)) continue;
-    mkdirSync7(dirname8(join11(dir, f)), { recursive: true });
-    copyFileSync(src, join11(dir, f));
+    mkdirSync7(dirname8(join12(dir, f)), { recursive: true });
+    copyFileSync(src, join12(dir, f));
   }
   return { dir, branch, close };
 }
@@ -8264,8 +8568,8 @@ function nextRoles(decision, ran) {
 }
 
 // src/agents.ts
-import { readFileSync as readFileSync8, existsSync as existsSync13 } from "fs";
-import { join as join12 } from "path";
+import { readFileSync as readFileSync9, existsSync as existsSync13 } from "fs";
+import { join as join13 } from "path";
 import { TablationClient as TablationClient2, StaleWriteError as StaleWriteError6, TablationApiError } from "@tablation/client";
 var PERSONA_NAME = {
   dev: "Developer",
@@ -8279,12 +8583,12 @@ var CREW_AGENT_COLUMN = "agent_id";
 var AgentsSyncError = class extends Error {
 };
 function personaDefaultPrompt(promptsDir, role) {
-  const briefPath = join12(promptsDir, "personas", `lane-${role}.md`);
+  const briefPath = join13(promptsDir, "personas", `lane-${role}.md`);
   if (!existsSync13(briefPath)) throw new AgentsSyncError(`no brief at ${briefPath}`);
-  if (role === "pair") return readFileSync8(briefPath, "utf8");
-  const commonPath = join12(promptsDir, "personas", "common.md");
+  if (role === "pair") return readFileSync9(briefPath, "utf8");
+  const commonPath = join13(promptsDir, "personas", "common.md");
   if (!existsSync13(commonPath)) throw new AgentsSyncError(`no shared policy at ${commonPath}`);
-  return `${readFileSync8(commonPath, "utf8")}${readFileSync8(briefPath, "utf8")}`;
+  return `${readFileSync9(commonPath, "utf8")}${readFileSync9(briefPath, "utf8")}`;
 }
 async function resolveAgentId(route, role, opts) {
   const cached = route.resolved?.agentPersonas?.[role]?.agentId;
@@ -8337,7 +8641,11 @@ async function fetchLastSyncedPrompt(route, agentsModelId, recordId, historyId,
     return void 0;
   }
 }
-async function fetchSeatAgentModel(route, role, opts) {
+function choiceValue(v) {
+  const raw = typeof v === "string" ? v : v && typeof v === "object" ? v.value ?? v.key : void 0;
+  return typeof raw === "string" && raw.trim() ? raw.trim().toLowerCase() : void 0;
+}
+async function fetchSeatPersona(route, role, opts) {
   const agentId = await resolveAgentId(route, role, opts);
   if (!agentId || !route.resolved) return void 0;
   const client2 = new TablationClient2({
@@ -8348,7 +8656,14 @@ async function fetchSeatAgentModel(route, role, opts) {
   try {
     const agentsModel = await client2.dataModels.get("agents", route.resolved.workspaceId);
     const row = await client2.records.get(agentsModel.id, agentId);
-    return row.model ?? void 0;
+    const tier = choiceValue(row.tier);
+    const vendor = choiceValue(row.vendor);
+    const persona = {
+      ...row.model ? { model: row.model } : {},
+      ...tier && TIERS.includes(tier) ? { tier } : {},
+      ...vendor ? { vendor } : {}
+    };
+    return Object.keys(persona).length > 0 ? persona : void 0;
   } catch {
     return void 0;
   }
@@ -8950,14 +9265,14 @@ import {
 } from "@tablation/client";
 
 // src/skills.ts
-import { readFileSync as readFileSync9, readdirSync as readdirSync2, existsSync as existsSync14 } from "fs";
-import { join as join13 } from "path";
+import { readFileSync as readFileSync10, readdirSync as readdirSync2, existsSync as existsSync14 } from "fs";
+import { join as join14 } from "path";
 import { parse as parseYaml } from "yaml";
 import { TablationClient as TablationClient3, StaleWriteError as StaleWriteError7, TablationApiError as TablationApiError2 } from "@tablation/client";
 var SkillSyncError = class extends Error {
 };
 function parseSkillFile(path) {
-  const text = readFileSync9(path, "utf8");
+  const text = readFileSync10(path, "utf8");
   const match = /^---\n([\s\S]*?)\n---\n([\s\S]*)$/.exec(text);
   if (!match) throw new SkillSyncError(`${path}: missing YAML frontmatter (expected a leading --- block)`);
   const frontmatter = match[1];
@@ -8970,9 +9285,9 @@ function parseSkillFile(path) {
   return { name: meta.name, description: meta.description, prompt: body, file: path };
 }
 function listLocalSkills(promptsDir) {
-  const dir = join13(promptsDir, "skills");
+  const dir = join14(promptsDir, "skills");
   if (!existsSync14(dir)) return [];
-  return readdirSync2(dir).filter((f) => f.endsWith(".md")).map((f) => parseSkillFile(join13(dir, f)));
+  return readdirSync2(dir).filter((f) => f.endsWith(".md")).map((f) => parseSkillFile(join14(dir, f)));
 }
 async function syncSkills(route, opts) {
   if (!route.resolved) {
@@ -9151,8 +9466,8 @@ async function showLogEntry(route, entryId, opts = {}) {
 }
 
 // src/repos-cmd.ts
-import { homedir as homedir3 } from "os";
-import { basename as basename6, resolve as resolve3 } from "path";
+import { homedir as homedir4 } from "os";
+import { basename as basename7, resolve as resolve3 } from "path";
 import { isMap, isSeq, parseDocument, stringify as stringify2 } from "yaml";
 var ReposError = class extends Error {
 };
@@ -9198,7 +9513,7 @@ function parseAddArgs(args, routes, isDir) {
   return { route, path: "." };
 }
 function expandDir(p, base) {
-  const home = p === "~" ? homedir3() : p.startsWith("~/") ? `${homedir3()}/${p.slice(2)}` : p;
+  const home = p === "~" ? homedir4() : p.startsWith("~/") ? `${homedir4()}/${p.slice(2)}` : p;
   return resolve3(base, home);
 }
 function routeMapOf(doc, route) {
@@ -9224,7 +9539,7 @@ function configuredRepos(text, route, base) {
     });
   }
   const dir = m.get("dir");
-  return dir ? [{ name: basename6(String(dir)), dir: expandDir(String(dir), base) }] : [];
+  return dir ? [{ name: basename7(String(dir)), dir: expandDir(String(dir), base) }] : [];
 }
 function planRepoAdd(i) {
   const doc = parseDocument(i.text);
@@ -9236,7 +9551,7 @@ function planRepoAdd(i) {
     throw new ReposError(`${target} is already configured on route ${i.route}`);
   }
   const matched = matchRepoName(i.origin, i.resolved);
-  const name = matched ?? i.name ?? normalizeRemote(i.origin)?.split("/").pop() ?? basename6(target);
+  const name = matched ?? i.name ?? normalizeRemote(i.origin)?.split("/").pop() ?? basename7(target);
   let warning;
   if (!matched) {
     const known = Object.values(i.resolved?.repoNames ?? {});
@@ -9295,72 +9610,6 @@ function resolveRepoProject(projects, opt, routeAreaId) {
   );
 }
 
-// src/claude-mcp.ts
-import { spawnSync as spawnSync2 } from "child_process";
-import { readFileSync as readFileSync10 } from "fs";
-import { homedir as homedir4 } from "os";
-import { join as join14 } from "path";
-var MCP_SERVER_NAME = "tablation";
-var redact = (s, key) => key ? s.split(key).join("sk_***") : s;
-function mcpUrlFor(baseUrl) {
-  return `${baseUrl.replace(/\/+$/, "")}/api/mcp`;
-}
-function runClaude(bin, args) {
-  const r = spawnSync2(bin, args, { encoding: "utf8", timeout: 3e4 });
-  const missing = r.error?.code === "ENOENT";
-  return { status: r.status, missing, stderr: r.stderr ?? "" };
-}
-function userScopeEntry(home) {
-  try {
-    const j = JSON.parse(readFileSync10(join14(home, ".claude.json"), "utf8"));
-    return j.mcpServers?.[MCP_SERVER_NAME];
-  } catch {
-    return void 0;
-  }
-}
-function inspectClaudeMcp(o) {
-  const got = runClaude(o.bin, ["mcp", "get", MCP_SERVER_NAME]);
-  if (got.missing) return { state: "no-claude" };
-  if (got.status !== 0) return { state: "missing" };
-  const entry = userScopeEntry(o.home ?? homedir4());
-  if (!entry) {
-    return { state: "different", detail: `a "${MCP_SERVER_NAME}" server exists, but not in user scope (~/.claude.json) \u2014 a project or local registration` };
-  }
-  if (entry.url !== o.url) return { state: "different", detail: `it points at ${entry.url ?? "(no url)"}, not ${o.url}` };
-  const auth = Object.entries(entry.headers ?? {}).find(([k]) => k.toLowerCase() === "authorization")?.[1];
-  if (auth !== `Bearer ${o.key}`) return { state: "different", detail: `it is registered with a different key than this route's` };
-  return { state: "registered", url: o.url };
-}
-function ensureClaudeMcp(o) {
-  const manual = `claude mcp add --transport http ${MCP_SERVER_NAME} ${o.url} --header "Authorization: Bearer <key>" --scope user`;
-  const st = inspectClaudeMcp(o);
-  if (st.state === "no-claude") return `mcp: \`${o.bin}\` not found, so Claude Code was not configured. To do it by hand: ${manual}`;
-  if (st.state === "registered") return `mcp: ${MCP_SERVER_NAME} already registered with Claude Code \u2192 ${st.url}`;
-  if (st.state === "different" && !o.replace) {
-    return `mcp: left Claude Code's "${MCP_SERVER_NAME}" server alone \u2014 ${st.detail}. Re-run with --mcp replace to overwrite it.`;
-  }
-  if (o.dryRun) return `(dry run) would register the ${MCP_SERVER_NAME} MCP server with Claude Code \u2192 ${o.url}`;
-  if (st.state === "different") {
-    runClaude(o.bin, ["mcp", "remove", MCP_SERVER_NAME, "--scope", "user"]);
-  }
-  const add = runClaude(o.bin, [
-    "mcp",
-    "add",
-    "--transport",
-    "http",
-    MCP_SERVER_NAME,
-    o.url,
-    "--header",
-    `Authorization: Bearer ${o.key}`,
-    "--scope",
-    "user"
-  ]);
-  if (add.status !== 0) {
-    return `mcp: \`claude mcp add\` failed (${redact(add.stderr.trim(), o.key) || `exit ${add.status}`}). To do it by hand: ${manual}`;
-  }
-  return `mcp: registered the ${MCP_SERVER_NAME} MCP server with Claude Code \u2192 ${o.url} (user scope, ~/.claude.json)`;
-}
-
 // src/doctor-fix.ts
 import { parseDocument as parseDocument2 } from "yaml";
 var sound = (r) => r.hasRepos && r.problems.length === 0;
@@ -9400,14 +9649,14 @@ function schedulerInstalled(plan, exists, crontab) {
 
 // src/worktree-sweep.ts
 import { existsSync as existsSync15 } from "fs";
-import { basename as basename7 } from "path";
+import { basename as basename8 } from "path";
 function planWorktreeSweep(target, tickets, contract) {
   const terminal = new Set(contract.statuses.resolved.filter((s) => s !== contract.statuses.verified));
   const verified = contract.statuses.verified;
   const byNumber = new Map(tickets.map((t) => [t.issue_id.replace(/^\D+/, ""), t]));
   const actions = [];
   for (const w of worktrees(target.dir)) {
-    const m = /(?:^|-)(\d+)$/.exec(basename7(w.path));
+    const m = /(?:^|-)(\d+)$/.exec(basename8(w.path));
     if (!m) continue;
     const ticket = byNumber.get(m[1]);
     if (!ticket) continue;
@@ -10572,7 +10821,7 @@ async function runRoleAgent(role, decision, ctx) {
     cycle: emit.cycle,
     ticket: ticketHint,
     divergedPrompt: await fetchDivergedPrompt(route, role, { userAgent: ship.userAgent }),
-    agentModel: await fetchSeatAgentModel(route, role, { userAgent: ship.userAgent }),
+    agentPersona: await fetchSeatPersona(route, role, { userAgent: ship.userAgent }),
     resolvedAgentId: await resolveAgentId(route, role, { userAgent: ship.userAgent })
   });
   emit.enter("agent", role);
@@ -11658,7 +11907,7 @@ ${changed2.map((c) => `  - ${c}
             cycle: wemit.cycle,
             ticket: w.decision.actionable.top?.issue_id,
             divergedPrompt: await fetchDivergedPrompt(w.route, w.role, { userAgent: cfg.ship.userAgent }),
-            agentModel: await fetchSeatAgentModel(w.route, w.role, { userAgent: cfg.ship.userAgent }),
+            agentPersona: await fetchSeatPersona(w.route, w.role, { userAgent: cfg.ship.userAgent }),
             resolvedAgentId: await resolveAgentId(w.route, w.role, { userAgent: cfg.ship.userAgent })
           });
           process.stdout.write(`${describePlan(fleetPlan2)}
@@ -11751,7 +12000,7 @@ ${changed2.map((c) => `  - ${c}
           cycle: wemit.cycle,
           ticket: fleetTicketHint,
           divergedPrompt: await fetchDivergedPrompt(w.route, w.role, { userAgent: cfg.ship.userAgent }),
-          agentModel: await fetchSeatAgentModel(w.route, w.role, { userAgent: cfg.ship.userAgent }),
+          agentPersona: await fetchSeatPersona(w.route, w.role, { userAgent: cfg.ship.userAgent }),
           resolvedAgentId: await resolveAgentId(w.route, w.role, { userAgent: cfg.ship.userAgent })
         });
         wemit.enter("agent", w.role);
@@ -11956,7 +12205,7 @@ ${changed2.map((c) => `  - ${c}
           cycle: emit.cycle,
           ticket: ticketHint,
           divergedPrompt: await fetchDivergedPrompt(route, current, { userAgent: cfg.ship.userAgent }),
-          agentModel: await fetchSeatAgentModel(route, current, { userAgent: cfg.ship.userAgent }),
+          agentPersona: await fetchSeatPersona(route, current, { userAgent: cfg.ship.userAgent }),
           resolvedAgentId: await resolveAgentId(route, current, { userAgent: cfg.ship.userAgent })
         });
         if (dryRun) {
@@ -12746,8 +12995,14 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
         if (!wroteConfig) process.stdout.write(routeBlock);
         if (!flag("no-mcp") && apiKey) {
           const replace = value("mcp") === "replace";
-          process.stderr.write(`${ensureClaudeMcp({ bin: cfg.ship.agent.bin, url: mcpUrlFor(baseUrl), key: apiKey, replace, dryRun })}
+          const seen = /* @__PURE__ */ new Set();
+          for (const tc of shipToolchains(cfg.ship)) {
+            const id = `${tc.harness}\0${tc.bin}`;
+            if (seen.has(id)) continue;
+            seen.add(id);
+            process.stderr.write(`${adapterFor(tc.harness).ensureMcp({ bin: tc.bin, url: mcpUrlFor(baseUrl), key: apiKey, replace, dryRun })}
 `);
+          }
         }
         if (found.holds.length) {
           process.stderr.write(
@@ -13303,6 +13558,16 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
             name: cfg.ship.name,
             platform: cfg.ship.platform,
             agent: { bin: cfg.ship.agent.bin, model: cfg.ship.agent.model },
+            // Additive (CREW-1511): the configured toolchains and the ship's
+            // default. `agent` above stays for older crew-macos builds.
+            toolchain: resolveToolchain(cfg.ship).name,
+            toolchains: shipToolchains(cfg.ship).map((x) => ({
+              name: x.name,
+              harness: x.harness,
+              bin: x.bin,
+              launcher: x.launcher ?? null,
+              model: x.model
+            })),
             stateDir: cfg.ship.stateDir,
             logFile: cfg.ship.logFile,
             eventFile: eventFileFor(cfg.ship.stateDir),
@@ -13328,6 +13593,8 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
             dir: route.dir,
             enabled: route.enabled,
             area: route.area ?? null,
+            // Additive (CREW-1511): the toolchain this route's sessions run on.
+            toolchain: resolveToolchain(cfg.ship, route).name,
             baseUrl: route.baseUrl,
             repos: repos.map((r) => ({
               name: r.name,
@@ -13342,7 +13609,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
               // `synthesis-tabl-123`. `worktreePrefix` above is kept for
               // config-provenance display; this is the field that actually
               // describes where a worktree lands by default.
-              worktreeDirPattern: r.config.worktrees.name ?? (r.config.provenance["worktrees.prefix"] !== "default" ? `${r.config.worktrees.prefix}<number>` : `${basename8(r.dir.replace(/[/\\]+$/, ""))}-<branch>`),
+              worktreeDirPattern: r.config.worktrees.name ?? (r.config.provenance["worktrees.prefix"] !== "default" ? `${r.config.worktrees.prefix}<number>` : `${basename9(r.dir.replace(/[/\\]+$/, ""))}-<branch>`),
               worktreeParent: resolvePath(r.dir, "..")
             })),
             waiting: waiting ? { ticket: waiting.ticket, since: waiting.since, streak: fairness.streak() } : null
@@ -13450,7 +13717,7 @@ routes:            ${cfg.routes.map((c) => c.route).join(", ")}
       );
       for (const r of await resolvedRepos(route)) {
         const { config } = r;
-        const worktreePattern = config.worktrees.name ?? (config.provenance["worktrees.prefix"] !== "default" ? `${config.worktrees.prefix}<number>` : `${basename8(r.dir.replace(/[/\\]+$/, ""))}-${effectiveBranchTemplate(config, void 0)}`);
+        const worktreePattern = config.worktrees.name ?? (config.provenance["worktrees.prefix"] !== "default" ? `${config.worktrees.prefix}<number>` : `${basename9(r.dir.replace(/[/\\]+$/, ""))}-${effectiveBranchTemplate(config, void 0)}`);
         process.stdout.write(
           `${`repo ${r.name}:`.padEnd(19)}${r.dir}
                    worktrees at ../${worktreePattern} (${config.provenance["worktrees.name"] ?? config.provenance["worktrees.prefix"] ?? "default"}), branch ${config.branch.name}
@@ -13553,14 +13820,24 @@ crew manifest:     ${seats2.length ? seats2.map((c) => c.name).join(", ") : "non
         }
       }
       const schedulerPath = pathFor(cfg.ship);
-      const agentBinPath = findOnPath(cfg.ship.agent.bin, schedulerPath);
       const gitPath = findOnPath("git", schedulerPath);
-      process.stdout.write(
-        `agent binary:      ${cfg.ship.agent.bin} \u2014 ${agentBinPath ? `OK (${agentBinPath})` : "NOT FOUND on the scheduler PATH"}
-git:               ${gitPath ? `OK (${gitPath})` : "NOT FOUND on the scheduler PATH"}
+      const defaultToolchain = resolveToolchain(cfg.ship).name;
+      let allBinsFound = true;
+      for (const tc of shipToolchains(cfg.ship)) {
+        const adapter = adapterFor(tc.harness);
+        const binPath = findOnPath(tc.launcher ?? tc.bin, schedulerPath);
+        if (!binPath) allBinsFound = false;
+        const label = tc.name === defaultToolchain ? "agent binary:     " : `toolchain ${tc.name}:`.padEnd(18);
+        process.stdout.write(
+          `${label} ${tc.launcher ?? tc.bin} \u2014 ${binPath ? `OK (${binPath})` : "NOT FOUND on the scheduler PATH"}${tc.name === defaultToolchain ? "" : ` [${adapter.displayName}]`}
 `
-      );
-      if (!agentBinPath || !gitPath) {
+        );
+        for (const limit of adapter.limitations) process.stdout.write(`                   cannot enforce: ${limit}
+`);
+      }
+      process.stdout.write(`git:               ${gitPath ? `OK (${gitPath})` : "NOT FOUND on the scheduler PATH"}
+`);
+      if (!allBinsFound || !gitPath) {
         process.stdout.write(
           `                   scheduler PATH is ${schedulerPath} \u2014 add the directory holding the missing binary to ship.extraPath in crew.yaml, then re-run \`crew doctor\`.
 `
@@ -13568,14 +13845,34 @@ git:               ${gitPath ? `OK (${gitPath})` : "NOT FOUND on the scheduler P
       }
       if (route.apiKey) {
         const mcpUrl = mcpUrlFor(route.baseUrl);
-        const m = inspectClaudeMcp({ bin: cfg.ship.agent.bin, url: mcpUrl, key: route.apiKey });
-        process.stdout.write(
-          m.state === "registered" ? `mcp:               tablation registered (user scope) \u2192 ${m.url}
-` : m.state === "no-claude" ? `mcp:               claude not found \u2014 Claude Code was not checked
+        const seenMcp = /* @__PURE__ */ new Set();
+        for (const tc of shipToolchains(cfg.ship)) {
+          const id = `${tc.harness}\0${tc.bin}`;
+          if (seenMcp.has(id)) continue;
+          seenMcp.add(id);
+          const adapter = adapterFor(tc.harness);
+          const m = adapter.inspectMcp({ bin: tc.bin, url: mcpUrl, key: route.apiKey });
+          process.stdout.write(
+            m.state === "registered" ? `mcp:               tablation registered (user scope) \u2192 ${m.url}
+` : m.state === "no-binary" ? `mcp:               ${tc.bin} not found \u2014 ${adapter.displayName} was not checked
 ` : m.state === "different" ? `mcp:               tablation registered but not for this route \u2014 ${m.detail}
 ` : `mcp:               not registered \u2014 run crew connect
 `
-        );
+          );
+        }
+      }
+      const shipVendors = new Set(shipToolchains(cfg.ship).map(toolchainVendor));
+      if (route.apiKey && route.resolved) {
+        let flagged = 0;
+        for (const role of ROLE_NAMES) {
+          const persona = await fetchSeatPersona(route, role, { userAgent: cfg.ship.userAgent });
+          if (persona?.vendor && !shipVendors.has(persona.vendor)) {
+            flagged++;
+            process.stdout.write(`seat vendor:       ${role} persona wants "${persona.vendor}" \u2014 no toolchain on this ship serves it (have: ${[...shipVendors].join(", ")}); it will run ${resolveSeat(cfg.ship, route, role).toolchain.name} with a warning
+`);
+          }
+        }
+        if (flagged === 0) process.stdout.write("seat vendor:       OK (every persona vendor has a toolchain on this ship)\n");
       }
       for (const c of cfg.routes.filter((r) => r.enabled)) {
         let repos;