@tablation/crew 0.35.0 → 0.37.0

package/dist/cli.js

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 
 // src/cli.ts
-import { resolve as resolve4, dirname as dirname12, join as join21, basename as basename9 } from "path";
+import { resolve as resolve4, dirname as dirname12, join as join22, basename as basename9 } from "path";
 import { fileURLToPath } from "url";
-import { hostname as hostname2, homedir as homedir6 } from "os";
-import { spawnSync as spawnSync4 } from "child_process";
+import { hostname as hostname2, homedir as homedir7 } from "os";
+import { spawnSync as spawnSync5 } from "child_process";
 
 // src/config.ts
-import { readFileSync as readFileSync5, existsSync as existsSync4 } from "fs";
-import { resolve, dirname as dirname3, isAbsolute, join as join5, basename as basename3 } from "path";
-import { homedir as homedir3, tmpdir } from "os";
+import { readFileSync as readFileSync5, existsSync as existsSync5 } from "fs";
+import { resolve, dirname as dirname3, isAbsolute, join as join6, basename as basename3 } from "path";
+import { homedir as homedir4, tmpdir } from "os";
 import { parse as parse2 } from "yaml";
 
 // src/events.ts
@@ -158,10 +158,10 @@ var Emitter = class _Emitter {
 var eventFileFor = (stateDir) => join(stateDir, "events.jsonl");
 
 // src/pair-install.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, rmSync as rmSync2, writeFileSync } from "fs";
-import { spawnSync as spawnSync2 } from "child_process";
-import { homedir as homedir2 } from "os";
-import { dirname as dirname2, join as join3 } from "path";
+import { existsSync as existsSync3, rmSync as rmSync4, writeFileSync as writeFileSync3 } from "fs";
+import { spawnSync as spawnSync3 } from "child_process";
+import { homedir as homedir3 } from "os";
+import { join as join4 } from "path";
 
 // src/stream.ts
 function toolTarget(name, input) {
@@ -409,7 +409,15 @@ var claudeAdapter = {
   ensureMcp: ensureClaudeMcp
 };
 
-// src/pair-install.ts
+// src/adapters/codex.ts
+import { spawnSync as spawnSync2 } from "child_process";
+import { homedir as homedir2 } from "os";
+import { join as join3 } from "path";
+import { rmSync as rmSync3, writeFileSync as writeFileSync2 } from "fs";
+
+// src/pair-files.ts
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync, rmSync as rmSync2 } from "fs";
+import { dirname as dirname2 } from "path";
 var PAIR_BLOCK_START = "<!-- crew:pair start -->";
 var PAIR_BLOCK_END = "<!-- crew:pair end -->";
 var PAIR_KEY_VAR = "CREW_API_KEY";
@@ -497,9 +505,6 @@ function tomlTableRange(lines, name) {
   return [start, end];
 }
 var tomlString = (v) => JSON.stringify(v);
-function codexTable(url) {
-  return [`[mcp_servers.${SERVER}]`, `url = ${tomlString(url)}`, `bearer_token_env_var = ${tomlString(PAIR_KEY_VAR)}`];
-}
 function upsertTomlTable(text, name, table2) {
   const lines = text.split("\n");
   const r = tomlTableRange(lines, name);
@@ -535,6 +540,69 @@ function tomlValue(lines, range, key) {
   }
   return void 0;
 }
+
+// src/adapters/codex.ts
+var CODEX_BILLING_VARS_TO_UNSET = [
+  "OPENAI_API_KEY",
+  "OPENAI_BASE_URL",
+  "OPENAI_API_BASE",
+  "OPENAI_ORG_ID",
+  "OPENAI_PROJECT",
+  "CODEX_API_KEY"
+];
+function codexSandboxFor(p) {
+  return p.level === "read" ? "read-only" : "danger-full-access";
+}
+var REASONING_EFFORTS = ["minimal", "low", "medium", "high"];
+function commandTarget(command2) {
+  if (!command2) return void 0;
+  const wrapped = /^(?:\S*\/)?(?:ba|z|da)?sh\s+-\w*c\s+(['"]?)([\s\S]*)\1$/.exec(command2.trim());
+  const inner = (wrapped ? wrapped[2] : command2).trim();
+  return inner.split(/\s+/)[0] || void 0;
+}
+function mapCodexLine(line) {
+  const l = line;
+  if (!l || l.type !== "item.completed" || !l.item) return [];
+  const it = l.item;
+  switch (it.type) {
+    case "reasoning":
+      return it.text ? [{ kind: "thought", text: it.text }] : [];
+    case "agent_message":
+      return it.text ? [{ kind: "text", text: it.text }] : [];
+    case "command_execution":
+      return [{ kind: "tool", tool: "command", target: commandTarget(it.command) }];
+    case "file_change":
+      return [{ kind: "tool", tool: "file_change", target: it.changes?.[0]?.path }];
+    case "mcp_tool_call":
+      return [{ kind: "tool", tool: `mcp__${it.server ?? "mcp"}__${it.tool ?? "tool"}` }];
+    case "web_search":
+      return [{ kind: "tool", tool: "web_search", target: it.query }];
+    default:
+      return [];
+  }
+}
+function extractCodexResult(line) {
+  const l = line;
+  if (!l) return void 0;
+  if (l.type === "thread.started" && l.thread_id) return { sessionId: l.thread_id };
+  if (l.type === "turn.completed" && l.usage) {
+    return {
+      inputTokens: l.usage.input_tokens,
+      outputTokens: l.usage.output_tokens,
+      cacheReadTokens: l.usage.cached_input_tokens,
+      cacheWriteTokens: l.usage.cache_write_input_tokens
+    };
+  }
+  return void 0;
+}
+function extractCodexTurnTokens(line) {
+  const l = line;
+  if (!l || l.type !== "turn.completed" || !l.usage) return void 0;
+  return (l.usage.input_tokens ?? 0) + (l.usage.output_tokens ?? 0);
+}
+function codexTable(url) {
+  return [`[mcp_servers.${SERVER}]`, `url = ${tomlString(url)}`, `bearer_token_env_var = ${tomlString(PAIR_KEY_VAR)}`];
+}
 var codexPaths = (home) => ({
   instructions: join3(home, ".codex", "AGENTS.md"),
   config: join3(home, ".codex", "config.toml")
@@ -587,16 +655,105 @@ var codexPair = {
     const kept = st.state === "different" ? `; left the existing ${SERVER} server alone \u2014 ${st.detail}` : "";
     if (hadMcp && !o.dryRun) {
       const after = removeTomlTable(config, `mcp_servers.${SERVER}`);
-      if (after === "") rmSync2(p.config);
-      else writeFileSync(p.config, after);
+      if (after === "") rmSync3(p.config);
+      else writeFileSync2(p.config, after);
     }
     const what = hadBlock && hadMcp ? `the Pair block and ${SERVER} server` : hadBlock ? "the Pair block" : `the ${SERVER} server`;
     return hadBlock || hadMcp ? `pair(codex): ${o.dryRun ? "(dry run) would remove" : "removed"} ${what}${kept}` : `pair(codex): nothing to remove${kept}`;
   }
 };
+function binMissing(bin) {
+  const r = spawnSync2(bin, ["--version"], { encoding: "utf8", timeout: 3e4 });
+  return r.error?.code === "ENOENT";
+}
+var codexAdapter = {
+  harness: "codex",
+  displayName: "Codex",
+  vendor: "openai",
+  ownsModel: (model) => /^(gpt-|o\d|codex-)/.test(model),
+  // The tier's reasoning is Codex's effort level; anything else is ignored.
+  applyReasoning: (spec, reasoning) => REASONING_EFFORTS.includes(reasoning) ? { ...spec, reasoningEffort: reasoning } : spec,
+  defaultBin: "codex",
+  // What Codex CLI itself starts with today (the `gpt-5-codex` family the first
+  // cut named now answers 404 "does not exist or you do not have access" from
+  // the Responses API for a 2026 API key, which the recording for CREW-1520
+  // hit first). An operator pins something else per toolchain entry or tier.
+  defaultModel: "gpt-5.5",
+  defaultTiers: {
+    light: { model: "gpt-5.4-mini", reasoning: "low" },
+    standard: { model: "gpt-5.5" },
+    deep: { model: "gpt-5.5", reasoning: "high" }
+  },
+  limitations: [
+    "no per-tool allow or deny list, and a push (even a forced one) is not blocked",
+    "the write (QA) and edit (dev, design) profiles run with no filesystem sandbox (danger-full-access): Codex's workspace-write keeps every .git directory read-only, so a sandboxed seat could not cut a worktree or commit, and a headless run cannot approve the escalation",
+    "the read profile (triage) runs in the read-only sandbox, which has no network, so it can reach the tracker only through the MCP tools, not curl",
+    "the design canvas and skills are unavailable",
+    "no cost is reported (tokens only)"
+  ],
+  invocation(spec, o) {
+    const profile = profileFor(o.role);
+    const mode = codexSandboxFor(profile);
+    const cfg = (k, v) => ["-c", `${k}=${tomlString(v)}`];
+    const args = [
+      "exec",
+      "--json",
+      "--skip-git-repo-check",
+      "--sandbox",
+      mode,
+      "--model",
+      o.model,
+      // Headless: nobody can answer an approval prompt.
+      "-c",
+      'approval_policy="never"',
+      ...spec.reasoningEffort ? cfg("model_reasoning_effort", spec.reasoningEffort) : [],
+      // The tracker MCP for this run only, as -c overrides: the config file is
+      // untouched and the key is named by variable, never written (§7).
+      // `default_tools_approval_mode="approve"` is load-bearing: Codex asks
+      // before an MCP tool call by default, and under `approval_policy="never"`
+      // that question is auto-rejected ("MCP tool call requires approval, but
+      // approval policy is never" — seen on the first real recording), which
+      // would cut a headless seat off from the tracker entirely.
+      ...o.mcp ? [
+        ...cfg(`mcp_servers.${SERVER}.url`, o.mcp.url),
+        ...cfg(`mcp_servers.${SERVER}.bearer_token_env_var`, o.mcp.keyVar),
+        ...cfg(`mcp_servers.${SERVER}.default_tools_approval_mode`, "approve")
+      ] : [],
+      ...spec.args,
+      // Prompt on stdin.
+      "-"
+    ];
+    return spec.launcher ? { bin: spec.launcher, args: [spec.bin, ...args] } : { bin: spec.bin, args };
+  },
+  runEnv: (spec) => ({ ...spec.env }),
+  provider: () => "openai",
+  unsetEnv: CODEX_BILLING_VARS_TO_UNSET,
+  mapStreamLine: mapCodexLine,
+  extractResult: extractCodexResult,
+  extractTurnTokens: extractCodexTurnTokens,
+  inspectMcp(o) {
+    if (binMissing(o.bin)) return { state: "no-binary" };
+    const st = codexMcpState(readIfExists(codexPaths(o.home ?? homedir2()).config) ?? "", o.url);
+    return st.state === "registered" ? { state: "registered", url: o.url } : st;
+  },
+  ensureMcp(o) {
+    const p = codexPaths(o.home ?? homedir2());
+    const config = readIfExists(p.config) ?? "";
+    const st = codexMcpState(config, o.url);
+    if (st.state === "registered") return `mcp: ${SERVER} already registered with Codex \u2192 ${o.url}`;
+    if (st.state === "different" && !o.replace) {
+      return `mcp: left Codex's "${SERVER}" server alone \u2014 ${st.detail}. Re-run with --mcp replace to overwrite it.`;
+    }
+    if (o.dryRun) return `(dry run) would register the ${SERVER} MCP server with Codex \u2192 ${o.url}`;
+    writeFileMkdir(p.config, upsertTomlTable(config, `mcp_servers.${SERVER}`, codexTable(o.url)));
+    return `mcp: registered the ${SERVER} MCP server with Codex \u2192 ${o.url} (${p.config}; key read from $${PAIR_KEY_VAR})`;
+  }
+};
+
+// src/pair-install.ts
 var geminiPaths = (home) => ({
-  instructions: join3(home, ".gemini", "GEMINI.md"),
-  config: join3(home, ".gemini", "settings.json")
+  instructions: join4(home, ".gemini", "GEMINI.md"),
+  config: join4(home, ".gemini", "settings.json")
 });
 function readGeminiSettings(path) {
   const text = readIfExists(path);
@@ -617,14 +774,14 @@ function geminiMcpState(s, url) {
   return { state: "registered" };
 }
 function inspectGeminiMcp(o) {
-  const p = geminiPaths(o.home ?? homedir2());
+  const p = geminiPaths(o.home ?? homedir3());
   const settings = readGeminiSettings(p.config);
   if (!settings) return { state: "different", detail: `${p.config} is not a JSON object` };
   const st = geminiMcpState(settings, o.url);
   return st.state === "registered" ? { state: "registered", url: o.url } : st;
 }
 function ensureGeminiMcp(o) {
-  const p = geminiPaths(o.home ?? homedir2());
+  const p = geminiPaths(o.home ?? homedir3());
   const settings = readGeminiSettings(p.config);
   if (!settings) return `gemini: ${p.config} is not a JSON object \u2014 fix it by hand; nothing was written`;
   const st = geminiMcpState(settings, o.url);
@@ -642,7 +799,7 @@ var geminiPair = {
   harness: "gemini",
   displayName: "Gemini CLI",
   installPair(o) {
-    const p = geminiPaths(o.home ?? homedir2());
+    const p = geminiPaths(o.home ?? homedir3());
     const settings = readGeminiSettings(p.config);
     if (!settings) return `pair(gemini): ${p.config} is not a JSON object \u2014 fix it by hand; nothing was written`;
     const st = geminiMcpState(settings, o.url);
@@ -661,7 +818,7 @@ var geminiPair = {
     return `pair(gemini): ${o.dryRun ? "(dry run) would install" : "installed"} the Pair block in ${p.instructions} and ${SERVER} in ${p.config} (key read from $${PAIR_KEY_VAR})`;
   },
   verifyPair(o) {
-    const p = geminiPaths(o.home ?? homedir2());
+    const p = geminiPaths(o.home ?? homedir3());
     const b = blockVerdict(p.instructions, "gemini");
     if (!b.ok) return b;
     const settings = readGeminiSettings(p.config);
@@ -672,7 +829,7 @@ var geminiPair = {
     return { ok: true, detail: `${p.instructions}, ${p.config}` };
   },
   removePair(o) {
-    const p = geminiPaths(o.home ?? homedir2());
+    const p = geminiPaths(o.home ?? homedir3());
     const hadBlock = removeBlockFile(p.instructions, o.dryRun);
     const settings = readGeminiSettings(p.config);
     const st = settings ? geminiMcpState(settings, o.url) : { state: "missing" };
@@ -683,8 +840,8 @@ var geminiPair = {
       const next = { ...settings };
       if (Object.keys(rest).length > 0) next.mcpServers = rest;
       else delete next.mcpServers;
-      if (Object.keys(next).length === 0) rmSync2(p.config);
-      else writeFileSync(p.config, `${JSON.stringify(next, null, 2)}
+      if (Object.keys(next).length === 0) rmSync4(p.config);
+      else writeFileSync3(p.config, `${JSON.stringify(next, null, 2)}
 `);
     }
     const what = hadBlock && hadMcp ? `the Pair block and ${SERVER} server` : hadBlock ? "the Pair block" : `the ${SERVER} server`;
@@ -693,11 +850,11 @@ var geminiPair = {
 };
 var VSCODE_FLAVOURS = ["Code", "Code - Insiders"];
 function vscodeUserDirs(o) {
-  const home = o.home ?? homedir2();
+  const home = o.home ?? homedir3();
   const platform2 = o.platform ?? process.platform;
-  const root = platform2 === "darwin" ? join3(home, "Library", "Application Support") : platform2 === "win32" ? process.env.APPDATA ?? join3(home, "AppData", "Roaming") : join3(home, ".config");
-  const all = VSCODE_FLAVOURS.map((f) => join3(root, f, "User"));
-  const present = all.filter((d) => existsSync2(d));
+  const root = platform2 === "darwin" ? join4(home, "Library", "Application Support") : platform2 === "win32" ? process.env.APPDATA ?? join4(home, "AppData", "Roaming") : join4(home, ".config");
+  const all = VSCODE_FLAVOURS.map((f) => join4(root, f, "User"));
+  const present = all.filter((d) => existsSync3(d));
   return present.length > 0 ? present : [all[0]];
 }
 var COPILOT_FRONTMATTER = '---\napplyTo: "**"\n---\n\n';
@@ -734,8 +891,8 @@ function removeCopilotInstructions(path, dryRun) {
   if (before === void 0 || !hasPairBlock(before)) return false;
   if (dryRun) return true;
   const after = removePairBlock(before);
-  if (after.trim() === "" || after.trim() === COPILOT_FRONTMATTER.trim()) rmSync2(path);
-  else writeFileSync(path, after);
+  if (after.trim() === "" || after.trim() === COPILOT_FRONTMATTER.trim()) rmSync4(path);
+  else writeFileSync3(path, after);
   return true;
 }
 var copilotPair = {
@@ -744,8 +901,8 @@ var copilotPair = {
   installPair(o) {
     const lines = [];
     for (const dir of vscodeUserDirs(o)) {
-      const mcpPath = join3(dir, "mcp.json");
-      const instrPath = join3(dir, "prompts", "crew-pair.instructions.md");
+      const mcpPath = join4(dir, "mcp.json");
+      const instrPath = join4(dir, "prompts", "crew-pair.instructions.md");
       const settings = readVscodeMcp(mcpPath);
       if (!settings) {
         lines.push(`pair(copilot): ${mcpPath} is not a plain JSON object (comments are not supported) \u2014 fix it by hand; nothing was written there`);
@@ -773,8 +930,8 @@ var copilotPair = {
   },
   verifyPair(o) {
     const verdicts = vscodeUserDirs(o).map((dir) => {
-      const instrPath = join3(dir, "prompts", "crew-pair.instructions.md");
-      const mcpPath = join3(dir, "mcp.json");
+      const instrPath = join4(dir, "prompts", "crew-pair.instructions.md");
+      const mcpPath = join4(dir, "mcp.json");
       const b = blockVerdict(instrPath, "copilot");
       if (!b.ok) return b;
       const settings = readVscodeMcp(mcpPath);
@@ -789,8 +946,8 @@ var copilotPair = {
   removePair(o) {
     const lines = [];
     for (const dir of vscodeUserDirs(o)) {
-      const mcpPath = join3(dir, "mcp.json");
-      const hadBlock = removeCopilotInstructions(join3(dir, "prompts", "crew-pair.instructions.md"), o.dryRun);
+      const mcpPath = join4(dir, "mcp.json");
+      const hadBlock = removeCopilotInstructions(join4(dir, "prompts", "crew-pair.instructions.md"), o.dryRun);
       const settings = readVscodeMcp(mcpPath);
       const st = settings ? copilotMcpState(settings, o.url) : { state: "missing" };
       const hadMcp = st.state === "registered";
@@ -800,8 +957,8 @@ var copilotPair = {
         const next = { ...settings };
         if (Object.keys(rest).length > 0) next.servers = rest;
         else delete next.servers;
-        if (Object.keys(next).length === 0) rmSync2(mcpPath);
-        else writeFileSync(mcpPath, `${JSON.stringify(next, null, 2)}
+        if (Object.keys(next).length === 0) rmSync4(mcpPath);
+        else writeFileSync3(mcpPath, `${JSON.stringify(next, null, 2)}
 `);
       }
       const what = hadBlock && hadMcp ? `the Pair instructions and ${SERVER} server` : hadBlock ? "the Pair instructions" : `the ${SERVER} server`;
@@ -817,7 +974,7 @@ var copilotPair = {
   envWarning(o) {
     if ((o.platform ?? process.platform) !== "darwin") return void 0;
     const get2 = o.loginEnv ?? ((name) => {
-      const r = spawnSync2("launchctl", ["getenv", name], { encoding: "utf8" });
+      const r = spawnSync3("launchctl", ["getenv", name], { encoding: "utf8" });
       return r.status === 0 ? r.stdout.trim() : void 0;
     });
     if (get2(PAIR_KEY_VAR)) return void 0;
@@ -963,6 +1120,7 @@ var geminiAdapter = {
 var TIERS = ["light", "standard", "deep"];
 var ADAPTERS = {
   [claudeAdapter.harness]: claudeAdapter,
+  [codexAdapter.harness]: codexAdapter,
   [geminiAdapter.harness]: geminiAdapter
 };
 var HARNESS_NAMES = Object.keys(ADAPTERS);
@@ -1091,8 +1249,8 @@ function explain(ship, required) {
 }
 
 // src/repo-config.ts
-import { readFileSync as readFileSync4, existsSync as existsSync3 } from "fs";
-import { join as join4, basename as basename2 } from "path";
+import { readFileSync as readFileSync4, existsSync as existsSync4 } from "fs";
+import { join as join5, basename as basename2 } from "path";
 import { parse } from "yaml";
 var SPEC_VERSION = 1;
 var REPO_CONFIG_FILENAMES = [".crew.yaml", ".crew.yml", ".crew.json"];
@@ -1165,8 +1323,8 @@ var MODES = ["local", "integrate", "ci_manual", "ci_auto", "external"];
 var PROVIDERS = ["github", "buildkite", "other", "none"];
 function findRepoConfig(dir) {
   for (const name of REPO_CONFIG_FILENAMES) {
-    const p = join4(dir, name);
-    if (existsSync3(p)) return p;
+    const p = join5(dir, name);
+    if (existsSync4(p)) return p;
   }
   return null;
 }
@@ -1808,16 +1966,16 @@ function mergeRouteRelease(route, override) {
   };
 }
 function expand(p, base) {
-  let out = p.startsWith("~") ? p.replace(/^~/, homedir3()) : p;
-  out = out.replace(/\$\{?HOME\}?/g, homedir3());
+  let out = p.startsWith("~") ? p.replace(/^~/, homedir4()) : p;
+  out = out.replace(/\$\{?HOME\}?/g, homedir4());
   return isAbsolute(out) ? out : resolve(base, out);
 }
 function resolvePromptsDir(promptSet, crewHome, base) {
-  if (!promptSet) return join5(crewHome, "prompts", "default");
+  if (!promptSet) return join6(crewHome, "prompts", "default");
   if (promptSet.includes("/") || promptSet.startsWith(".") || promptSet.startsWith("~")) {
     return expand(promptSet, base);
   }
-  return join5(crewHome, "prompts", promptSet);
+  return join6(crewHome, "prompts", promptSet);
 }
 var Missing = class {
   paths = [];
@@ -1841,7 +1999,7 @@ var Missing = class {
 };
 function crewVersion(crewHome) {
   try {
-    const pkg = JSON.parse(readFileSync5(join5(crewHome, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync5(join6(crewHome, "package.json"), "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -1851,26 +2009,26 @@ function configSearchPath(crewHome) {
   if (process.env.CREW_CONFIG) return [resolve(process.env.CREW_CONFIG)];
   const xdg = process.env.XDG_CONFIG_HOME;
   return [
-    ...xdg ? [join5(xdg, "crew", "crew.yaml")] : [],
-    join5(homedir3(), ".config", "crew", "crew.yaml"),
+    ...xdg ? [join6(xdg, "crew", "crew.yaml")] : [],
+    join6(homedir4(), ".config", "crew", "crew.yaml"),
     resolve(crewHome, "crew.yaml")
   ];
 }
 function findConfigFile(crewHome) {
   const candidates = configSearchPath(crewHome);
-  return candidates.find((c) => existsSync4(c)) ?? candidates[candidates.length - 1];
+  return candidates.find((c) => existsSync5(c)) ?? candidates[candidates.length - 1];
 }
-var defaultConfigPath = () => join5(process.env.XDG_CONFIG_HOME ?? join5(homedir3(), ".config"), "crew", "crew.yaml");
+var defaultConfigPath = () => join6(process.env.XDG_CONFIG_HOME ?? join6(homedir4(), ".config"), "crew", "crew.yaml");
 function routeSlug(route) {
   return route.replace(/\//g, "-");
 }
 function resolvedPathFor(stateDir, route) {
   const [workspace, project] = splitRoute(route);
-  return join5(stateDir, "resolved", workspace, `${project}.json`);
+  return join6(stateDir, "resolved", workspace, `${project}.json`);
 }
 function apiKeyPathFor(stateDir, route) {
   const [workspace, project] = splitRoute(route);
-  return join5(stateDir, "keys", workspace, `${project}.env`);
+  return join6(stateDir, "keys", workspace, `${project}.env`);
 }
 function splitRoute(route) {
   const parts = route.split("/");
@@ -1881,7 +2039,7 @@ function splitRoute(route) {
 }
 function readResolvedFile(stateDir, route) {
   const path = resolvedPathFor(stateDir, route);
-  if (!existsSync4(path)) return void 0;
+  if (!existsSync5(path)) return void 0;
   try {
     return JSON.parse(readFileSync5(path, "utf8"));
   } catch (e) {
@@ -1939,13 +2097,13 @@ function parseResolved(raw, m, where) {
 }
 function loadConfig(crewHome, configFile, opts = {}) {
   const file = configFile ?? findConfigFile(crewHome);
-  if (opts.text === void 0 && !existsSync4(file)) {
+  if (opts.text === void 0 && !existsSync5(file)) {
     throw new ConfigError(
       `no config found. Looked in:
 ` + configSearchPath(crewHome).map((c) => `  - ${c}`).join("\n") + `
 
 Create the first of those:
-  mkdir -p ${dirname3(defaultConfigPath())} && cp ${join5(crewHome, "crew.example.yaml")} ${defaultConfigPath()}`
+  mkdir -p ${dirname3(defaultConfigPath())} && cp ${join6(crewHome, "crew.example.yaml")} ${defaultConfigPath()}`
     );
   }
   let raw;
@@ -2028,7 +2186,7 @@ Create the first of those:
       useNvm: shipRaw.useNvm !== false,
       nvmSh: shipRaw.nvmSh,
       stateDir,
-      logFile: expand(shipRaw.logFile ?? join5(tmpdir(), "crew.log"), base),
+      logFile: expand(shipRaw.logFile ?? join6(tmpdir(), "crew.log"), base),
       userAgent: shipRaw.userAgent ?? `Mozilla/5.0 CrewAgent/${crewVersion(crewHome)}`,
       maxConcurrentAgents,
       streamRetentionDays,
@@ -2248,7 +2406,7 @@ function repoIdForName(r, name) {
 }
 function resolveApiKey(r) {
   if (r.apiKey) return r.apiKey;
-  if (r.apiKeyFile && r.apiKeyVar && existsSync4(r.apiKeyFile)) {
+  if (r.apiKeyFile && r.apiKeyVar && existsSync5(r.apiKeyFile)) {
     for (const line of readFileSync5(r.apiKeyFile, "utf8").split("\n")) {
       const m = line.match(new RegExp(`^${r.apiKeyVar}=(.*)$`));
       if (m) return (m[1] ?? "").trim().replace(/^["']|["']$/g, "");
@@ -2312,7 +2470,7 @@ function configuredMembers(rt) {
   return out;
 }
 function defaultRepoDir(basePath, workspace, repoName) {
-  return join5(basePath, workspace, repoName);
+  return join6(basePath, workspace, repoName);
 }
 function reposOf(r) {
   const named = Object.entries(r.repos);
@@ -2336,7 +2494,7 @@ function passengerRepoTargets(r) {
   return reposOf(r).filter((t) => r.repoOverrides[t.name]?.hostPassengers !== false);
 }
 function passengerCheckoutDir(basePath, workspace, repoName) {
-  return join5(basePath, workspace, ".passenger-checkouts", repoName);
+  return join6(basePath, workspace, ".passenger-checkouts", repoName);
 }
 function passengerCheckoutTargets(r) {
   if (!r.hostPassengers) return [];
@@ -2468,8 +2626,8 @@ function rosterMarkdown(roster, meId) {
 }
 
 // src/state.ts
-import { readFileSync as readFileSync6, writeFileSync as writeFileSync2, existsSync as existsSync5, mkdirSync as mkdirSync3, rmSync as rmSync3, statSync as statSync2 } from "fs";
-import { join as join6 } from "path";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, existsSync as existsSync6, mkdirSync as mkdirSync3, rmSync as rmSync5, statSync as statSync2 } from "fs";
+import { join as join7 } from "path";
 var EPOCH = "1970-01-01T00:00:00.000Z";
 var State = class _State {
   dir;
@@ -2478,7 +2636,7 @@ var State = class _State {
     mkdirSync3(dir, { recursive: true });
   }
   path(...parts) {
-    return join6(this.dir, ...parts);
+    return join7(this.dir, ...parts);
   }
   /**
    * The timestamp every "new since last poll" check is measured against.
@@ -2496,7 +2654,7 @@ var State = class _State {
     }
   }
   setWatermark(at) {
-    writeFileSync2(this.path(".poll-watermark"), `${at}
+    writeFileSync4(this.path(".poll-watermark"), `${at}
 `);
   }
   /**
@@ -2514,19 +2672,19 @@ var State = class _State {
   }
   /** Whole-crew pause, and the per-role sentinels one level down. */
   isPaused() {
-    return existsSync5(this.path(".crew-paused"));
+    return existsSync6(this.path(".crew-paused"));
   }
   isRolePaused(role) {
-    return existsSync5(this.path(`.role-paused-${role}`));
+    return existsSync6(this.path(`.role-paused-${role}`));
   }
   pausedRoles(roles) {
     return new Set(roles.filter((r) => this.isRolePaused(r)));
   }
   pause(role) {
-    writeFileSync2(role ? this.path(`.role-paused-${role}`) : this.path(".crew-paused"), "");
+    writeFileSync4(role ? this.path(`.role-paused-${role}`) : this.path(".crew-paused"), "");
   }
   resume(role) {
-    rmSync3(role ? this.path(`.role-paused-${role}`) : this.path(".crew-paused"), { force: true });
+    rmSync5(role ? this.path(`.role-paused-${role}`) : this.path(".crew-paused"), { force: true });
   }
   /**
    * The release phase (merge, deploy, release) has its own sentinel, one
@@ -2534,11 +2692,11 @@ var State = class _State {
    * while agents keep working.
    */
   isReleasePaused() {
-    return existsSync5(this.path(".release-paused"));
+    return existsSync6(this.path(".release-paused"));
   }
   setReleasePaused(paused) {
-    if (paused) writeFileSync2(this.path(".release-paused"), "");
-    else rmSync3(this.path(".release-paused"), { force: true });
+    if (paused) writeFileSync4(this.path(".release-paused"), "");
+    else rmSync5(this.path(".release-paused"), { force: true });
   }
   /**
    * Why a release cycle must not run right now, or null when it may. Every
@@ -2585,13 +2743,13 @@ var State = class _State {
       }
     } catch {
     }
-    writeFileSync2(file, `${process.pid}
+    writeFileSync4(file, `${process.pid}
 `);
     return {
       ok: true,
       release: () => {
         try {
-          rmSync3(file, { force: true });
+          rmSync5(file, { force: true });
         } catch {
         }
       }
@@ -2678,12 +2836,12 @@ var State = class _State {
       blockedCount: () => Number.parseInt(read(blocked) ?? "", 10) || 0,
       noteBlocked: () => {
         const n = (Number.parseInt(read(blocked) ?? "", 10) || 0) + 1;
-        writeFileSync2(this.path(blocked), `${n}
+        writeFileSync4(this.path(blocked), `${n}
 `);
         return n;
       },
       clearBlocked: () => {
-        rmSync3(this.path(blocked), { force: true });
+        rmSync5(this.path(blocked), { force: true });
       },
       /**
        * The commit a deploy last failed on.
@@ -2695,11 +2853,11 @@ var State = class _State {
        */
       deployFailedSha: () => read(failed),
       noteDeployFailed: (sha) => {
-        writeFileSync2(this.path(failed), `${sha}
+        writeFileSync4(this.path(failed), `${sha}
 `);
       },
       clearDeployFailed: () => {
-        rmSync3(this.path(failed), { force: true });
+        rmSync5(this.path(failed), { force: true });
       },
       /**
        * Consecutive test-gate failures on the same head (CREW-1368). A failure
@@ -2709,12 +2867,12 @@ var State = class _State {
       noteTestGateFailed: (sha) => {
         const [prev, n] = (read(gateFailed) ?? "").split(" ");
         const next = prev === sha ? (Number.parseInt(n ?? "", 10) || 0) + 1 : 1;
-        writeFileSync2(this.path(gateFailed), `${sha} ${next}
+        writeFileSync4(this.path(gateFailed), `${sha} ${next}
 `);
         return next;
       },
       clearTestGateFailed: () => {
-        rmSync3(this.path(gateFailed), { force: true });
+        rmSync5(this.path(gateFailed), { force: true });
       },
       /** Whether the board was already told about this head's red gate. */
       heldReported: () => {
@@ -2725,15 +2883,15 @@ var State = class _State {
         }
       },
       noteHeldReported: (signature) => {
-        writeFileSync2(this.path(heldReported), `${signature}
+        writeFileSync4(this.path(heldReported), `${signature}
 `);
       },
       clearHeldReported: () => {
-        rmSync3(this.path(heldReported), { force: true });
+        rmSync5(this.path(heldReported), { force: true });
       },
       testGateReported: (sha) => read(gateReported) === sha,
       noteTestGateReported: (sha) => {
-        writeFileSync2(this.path(gateReported), `${sha}
+        writeFileSync4(this.path(gateReported), `${sha}
 `);
       }
     };
@@ -2762,7 +2920,7 @@ var State = class _State {
       }
     };
     const clear2 = () => {
-      for (const f of [streakFile, ticketFile, sinceFile, ticketStreakFile]) rmSync3(this.path(f), { force: true });
+      for (const f of [streakFile, ticketFile, sinceFile, ticketStreakFile]) rmSync5(this.path(f), { force: true });
     };
     return {
       /** Consecutive cycles this route had actionable work and did not win. */
@@ -2789,18 +2947,18 @@ var State = class _State {
           clear2();
           return;
         }
-        writeFileSync2(this.path(streakFile), `${this.readInt(streakFile) + 1}
+        writeFileSync4(this.path(streakFile), `${this.readInt(streakFile) + 1}
 `);
         const prior = read(ticketFile);
         if (topTicket && topTicket === prior) {
-          writeFileSync2(this.path(ticketStreakFile), `${this.readInt(ticketStreakFile) + 1}
+          writeFileSync4(this.path(ticketStreakFile), `${this.readInt(ticketStreakFile) + 1}
 `);
         } else if (topTicket) {
-          writeFileSync2(this.path(ticketFile), `${topTicket}
+          writeFileSync4(this.path(ticketFile), `${topTicket}
 `);
-          writeFileSync2(this.path(sinceFile), `${(/* @__PURE__ */ new Date()).toISOString()}
+          writeFileSync4(this.path(sinceFile), `${(/* @__PURE__ */ new Date()).toISOString()}
 `);
-          writeFileSync2(this.path(ticketStreakFile), "1\n");
+          writeFileSync4(this.path(ticketStreakFile), "1\n");
         }
       }
     };
@@ -2828,7 +2986,7 @@ var State = class _State {
         }
       },
       persist: (next) => {
-        writeFileSync2(this.path(file), JSON.stringify(next));
+        writeFileSync4(this.path(file), JSON.stringify(next));
       }
     };
   }
@@ -2849,7 +3007,7 @@ var State = class _State {
         }
       },
       persist: (next) => {
-        writeFileSync2(this.path(file), JSON.stringify(next));
+        writeFileSync4(this.path(file), JSON.stringify(next));
       }
     };
   }
@@ -2862,7 +3020,7 @@ var State = class _State {
     const file = ".release-last-run";
     return {
       touch: () => {
-        writeFileSync2(this.path(file), (/* @__PURE__ */ new Date()).toISOString());
+        writeFileSync4(this.path(file), (/* @__PURE__ */ new Date()).toISOString());
       },
       at: () => {
         try {
@@ -3179,10 +3337,10 @@ function describeRelease(o, route) {
 }
 
 // src/install.ts
-import { dirname as dirname4, join as join7, extname } from "path";
-import { homedir as homedir4 } from "os";
-import { accessSync, constants, existsSync as existsSync6, mkdirSync as mkdirSync4, readdirSync, readFileSync as readFileSync7, statSync as statSync3, writeFileSync as writeFileSync3, unlinkSync, realpathSync } from "fs";
-import { spawnSync as spawnSync3 } from "child_process";
+import { dirname as dirname4, join as join8, extname } from "path";
+import { homedir as homedir5 } from "os";
+import { accessSync, constants, existsSync as existsSync7, mkdirSync as mkdirSync4, readdirSync, readFileSync as readFileSync7, statSync as statSync3, writeFileSync as writeFileSync5, unlinkSync, realpathSync } from "fs";
+import { spawnSync as spawnSync4 } from "child_process";
 import { createHash } from "crypto";
 
 // src/runtime-info.ts
@@ -3193,7 +3351,7 @@ function isCompiledBinary(moduleUrl) {
 // src/install.ts
 function crewInvocation(crewHome) {
   if (isCompiledBinary(import.meta.url)) return [process.execPath];
-  return [process.execPath, join7(crewHome, "bin", "crew")];
+  return [process.execPath, join8(crewHome, "bin", "crew")];
 }
 var INTERVAL_SECONDS = 120;
 function labelFor(crewHome, job) {
@@ -3231,7 +3389,7 @@ function pathFor(ship) {
   return parts.join(":");
 }
 function findOnPath(bin, searchPath) {
-  const candidates = bin.includes("/") ? [bin] : searchPath.split(":").filter(Boolean).map((dir) => join7(dir, bin));
+  const candidates = bin.includes("/") ? [bin] : searchPath.split(":").filter(Boolean).map((dir) => join8(dir, bin));
   for (const candidate of candidates) {
     try {
       accessSync(candidate, constants.X_OK);
@@ -3241,7 +3399,7 @@ function findOnPath(bin, searchPath) {
   }
   return void 0;
 }
-var COMMON_DOCKER_DIRS = ["/usr/local/bin", "/opt/homebrew/bin", join7(homedir4(), ".docker", "bin")].join(":");
+var COMMON_DOCKER_DIRS = ["/usr/local/bin", "/opt/homebrew/bin", join8(homedir5(), ".docker", "bin")].join(":");
 function dockerPathProblem(ship, shellPath = process.env.PATH ?? "") {
   const schedulerPath = pathFor(ship);
   if (findOnPath("docker", schedulerPath)) return void 0;
@@ -3253,7 +3411,7 @@ function xmlEscape(s) {
 }
 function planLaunchd(ship, crewHome, job) {
   const label = labelFor(crewHome, job);
-  const unitPath = join7(homedir4(), "Library", "LaunchAgents", `${label}.plist`);
+  const unitPath = join8(homedir5(), "Library", "LaunchAgents", `${label}.plist`);
   const crewLog = ship.logFile;
   const schedulerLog = schedulerLogFor(crewLog, job);
   const persistent = job === "run";
@@ -3305,8 +3463,8 @@ ${scheduleKeys}
 }
 function planSystemd(ship, crewHome, job) {
   const label = labelFor(crewHome, job);
-  const unitDir = join7(homedir4(), ".config", "systemd", "user");
-  const servicePath = join7(unitDir, `${label}.service`);
+  const unitDir = join8(homedir5(), ".config", "systemd", "user");
+  const servicePath = join8(unitDir, `${label}.service`);
   const crewLog = ship.logFile;
   const schedulerLog = schedulerLogFor(crewLog, job);
   const description = job === "release" ? "Tablation crew \u2014 release" : job === "passengers" ? "Tablation crew \u2014 Host Passengers sync" : "Tablation crew \u2014 persistent supervisor loop";
@@ -3343,7 +3501,7 @@ WantedBy=default.target
       schedulerLog
     };
   }
-  const timerPath = join7(unitDir, `${label}.timer`);
+  const timerPath = join8(unitDir, `${label}.timer`);
   const service = `# Written by \`crew install\` \u2014 re-run it rather than hand-editing this file.
 [Unit]
 Description=${description}
@@ -3410,7 +3568,7 @@ function planInstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
 function planUninstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
   const label = labelFor(crewHome, job);
   if (hostShip === "macos") {
-    const unitPath = join7(homedir4(), "Library", "LaunchAgents", `${label}.plist`);
+    const unitPath = join8(homedir5(), "Library", "LaunchAgents", `${label}.plist`);
     return {
       mechanism: "launchd",
       unitPaths: [unitPath],
@@ -3420,18 +3578,18 @@ function planUninstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
     };
   }
   if (hostShip === "linux" && hasSystemd) {
-    const unitDir = join7(homedir4(), ".config", "systemd", "user");
+    const unitDir = join8(homedir5(), ".config", "systemd", "user");
     if (job === "run") {
       return {
         mechanism: "systemd",
-        unitPaths: [join7(unitDir, `${label}.service`)],
+        unitPaths: [join8(unitDir, `${label}.service`)],
         crontabLine: null,
         unloadCommands: [["systemctl", "--user", "disable", "--now", `${label}.service`]]
       };
     }
     return {
       mechanism: "systemd",
-      unitPaths: [join7(unitDir, `${label}.service`), join7(unitDir, `${label}.timer`)],
+      unitPaths: [join8(unitDir, `${label}.service`), join8(unitDir, `${label}.timer`)],
       crontabLine: null,
       unloadCommands: [["systemctl", "--user", "disable", "--now", `${label}.timer`]]
     };
@@ -3449,7 +3607,7 @@ function planUninstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
 function planDaemonControl(crewHome, hostShip, hasSystemd) {
   const label = labelFor(crewHome, "run");
   if (hostShip === "macos") {
-    const unitPath = join7(homedir4(), "Library", "LaunchAgents", `${label}.plist`);
+    const unitPath = join8(homedir5(), "Library", "LaunchAgents", `${label}.plist`);
     return {
       mechanism: "launchd",
       startCommand: ["launchctl", "load", unitPath],
@@ -3473,7 +3631,7 @@ function planDaemonControl(crewHome, hostShip, hasSystemd) {
 }
 function runAll(commands, cwd, log) {
   for (const [bin, ...args] of commands) {
-    const res = spawnSync3(bin, args, { cwd, encoding: "utf8" });
+    const res = spawnSync4(bin, args, { cwd, encoding: "utf8" });
     if (res.error || res.status !== 0) {
       log.warn(`${bin} ${args.join(" ")} exited ${res.status ?? "error"}`, {
         output: `${res.stdout ?? ""}${res.stderr ?? ""}${res.error ? String(res.error) : ""}`
@@ -3490,7 +3648,7 @@ async function applyInstall(plan, crewHome, dryRun, log) {
       continue;
     }
     mkdirSync4(dirname4(path), { recursive: true });
-    writeFileSync3(path, plan.unitContent[path]);
+    writeFileSync5(path, plan.unitContent[path]);
     log.emit(`wrote ${path}`);
   }
   if (plan.crontabLine) {
@@ -3538,13 +3696,13 @@ async function applyUninstall(plan, crewHome, dryRun, log) {
     if (dryRun) {
       log.emit(`would run: launchctl remove ${plan.removeLabel}`);
     } else {
-      if (spawnSync3("launchctl", ["remove", plan.removeLabel], { encoding: "utf8" }).status === 0) {
+      if (spawnSync4("launchctl", ["remove", plan.removeLabel], { encoding: "utf8" }).status === 0) {
         log.emit(`removed loaded job ${plan.removeLabel}`);
       }
     }
   }
   for (const path of plan.unitPaths) {
-    if (!existsSync6(path)) continue;
+    if (!existsSync7(path)) continue;
     if (dryRun) {
       log.emit(`would remove ${path}`);
       continue;
@@ -3563,7 +3721,7 @@ async function applyUninstall(plan, crewHome, dryRun, log) {
 }
 var CREW_LAUNCHD_PREFIX = "com.tablation.crew";
 function launchAgentsDir() {
-  return join7(homedir4(), "Library", "LaunchAgents");
+  return join8(homedir5(), "Library", "LaunchAgents");
 }
 function xmlUnescape(s) {
   return s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
@@ -3575,14 +3733,14 @@ function programFromPlist(text) {
   return args.find((a) => a.endsWith("/bin/crew")) ?? args[0] ?? null;
 }
 function loadedCrewLabels() {
-  const list = spawnSync3("launchctl", ["list"], { encoding: "utf8" });
+  const list = spawnSync4("launchctl", ["list"], { encoding: "utf8" });
   if (list.status !== 0) return [];
   return [...parseLaunchctlList(list.stdout ?? "").keys()].filter((l) => l.startsWith(CREW_LAUNCHD_PREFIX));
 }
 function listLaunchdUnits(dir = launchAgentsDir(), loaded = []) {
-  const files = existsSync6(dir) ? readdirSync(dir) : [];
+  const files = existsSync7(dir) ? readdirSync(dir) : [];
   const units = files.filter((f) => f.startsWith(CREW_LAUNCHD_PREFIX) && f.endsWith(".plist")).sort().map((f) => {
-    const plistPath = join7(dir, f);
+    const plistPath = join8(dir, f);
     let program = null;
     try {
       program = programFromPlist(readFileSync7(plistPath, "utf8"));
@@ -3592,13 +3750,13 @@ function listLaunchdUnits(dir = launchAgentsDir(), loaded = []) {
       label: f.slice(0, -".plist".length),
       plistPath,
       program,
-      programExists: program !== null && existsSync6(program)
+      programExists: program !== null && existsSync7(program)
     };
   });
   const seen = new Set(units.map((u) => u.label));
   for (const label of [...loaded].sort()) {
     if (!label.startsWith(CREW_LAUNCHD_PREFIX) || seen.has(label)) continue;
-    units.push({ label, plistPath: join7(dir, `${label}.plist`), program: null, programExists: false, orphan: true });
+    units.push({ label, plistPath: join8(dir, `${label}.plist`), program: null, programExists: false, orphan: true });
   }
   return units;
 }
@@ -3611,9 +3769,9 @@ function removeLaunchdUnit(unit, dryRun, log) {
     log.emit(`would unload and remove ${unit.label}`);
     return;
   }
-  if (existsSync6(unit.plistPath)) spawnSync3("launchctl", ["unload", unit.plistPath], { encoding: "utf8" });
-  spawnSync3("launchctl", ["remove", unit.label], { encoding: "utf8" });
-  if (existsSync6(unit.plistPath)) unlinkSync(unit.plistPath);
+  if (existsSync7(unit.plistPath)) spawnSync4("launchctl", ["unload", unit.plistPath], { encoding: "utf8" });
+  spawnSync4("launchctl", ["remove", unit.label], { encoding: "utf8" });
+  if (existsSync7(unit.plistPath)) unlinkSync(unit.plistPath);
   log.emit(`removed ${unit.label} (${unit.plistPath})`);
 }
 function clearForeignLaunchdUnits(crewHome, replace, dryRun, log, dir, loaded) {
@@ -3645,7 +3803,7 @@ function parseLaunchctlList(text) {
   return jobs;
 }
 function describeForeignLaunchdUnits(crewHome, dir) {
-  const list = spawnSync3("launchctl", ["list"], { encoding: "utf8" });
+  const list = spawnSync4("launchctl", ["list"], { encoding: "utf8" });
   const jobs = parseLaunchctlList(list.status === 0 ? list.stdout ?? "" : "");
   const foreign = foreignLaunchdUnits(crewHome, dir, jobs.keys());
   return foreign.map((u) => {
@@ -3658,11 +3816,11 @@ function describeForeignLaunchdUnits(crewHome, dir) {
   });
 }
 function readCrontab() {
-  const res = spawnSync3("crontab", ["-l"], { encoding: "utf8" });
+  const res = spawnSync4("crontab", ["-l"], { encoding: "utf8" });
   return res.status === 0 ? res.stdout ?? "" : "";
 }
 function writeCrontab(text) {
-  spawnSync3("crontab", ["-"], { input: text, encoding: "utf8" });
+  spawnSync4("crontab", ["-"], { input: text, encoding: "utf8" });
 }
 function addCrontabLine(marker, line) {
   const existing = readCrontab();
@@ -3686,7 +3844,7 @@ function removeCrontabLine(marker) {
 }
 function detectSystemd() {
   if (process.platform !== "linux") return false;
-  const res = spawnSync3("systemctl", ["--user", "status"], { encoding: "utf8" });
+  const res = spawnSync4("systemctl", ["--user", "status"], { encoding: "utf8" });
   return !res.error;
 }
 
@@ -3696,7 +3854,7 @@ import { statfsSync } from "fs";
 // src/git.ts
 import { execFileSync } from "child_process";
 import {
-  existsSync as existsSync7,
+  existsSync as existsSync8,
   mkdirSync as mkdirSync5,
   openSync as openSync2,
   closeSync as closeSync2,
@@ -4068,7 +4226,7 @@ function cloneUrlFor(remote) {
   return `git@github.com:${remote}.git`;
 }
 function ensureRepoCheckout(dir, remote) {
-  if (existsSync7(`${dir}/.git`)) return false;
+  if (existsSync8(`${dir}/.git`)) return false;
   if (!remote) {
     throw new GitError(
       `${dir} does not exist and this repo has no discovered remote to clone from \u2014 re-run \`crew connect\`, or check out the repository yourself and point \`repos:\` at it`
@@ -5805,8 +5963,8 @@ function materializeBranchForTicket(dir, cfg, t, role) {
 }
 
 // src/poll.ts
-import { writeFileSync as writeFileSync4 } from "fs";
-import { join as join8 } from "path";
+import { writeFileSync as writeFileSync6 } from "fs";
+import { join as join9 } from "path";
 
 // src/stalled.ts
 var STALLED_AFTER_CYCLES = 30;
@@ -6078,7 +6236,7 @@ async function decideCycle(o) {
   }
   return decision;
 }
-var digestPath = (stateDir, route, role) => join8(stateDir, `digest-${route}-${role}.md`);
+var digestPath = (stateDir, route, role) => join9(stateDir, `digest-${route}-${role}.md`);
 function writeDigest(o, d, role, stateDir) {
   const me = o.route.resolved?.seats[role];
   if (!me) return false;
@@ -6140,7 +6298,7 @@ function writeDigest(o, d, role, stateDir) {
     };
     const text = role === "qa" ? qaDigest(input) : buildingDigest(input);
     const path = digestPath(stateDir, routeSlug(o.route.route), role);
-    writeFileSync4(path, text);
+    writeFileSync6(path, text);
     o.emit.emit(`queue digest written for ${role} (${Buffer.byteLength(text)} bytes)`, {
       data: { role, bytes: Buffer.byteLength(text) }
     });
@@ -6448,9 +6606,9 @@ var alreadyReported = (ticket, g, comments) => comments.some((c) => c.ticket_id
 
 // src/agent.ts
 import { spawn as spawn2 } from "child_process";
-import { readFileSync as readFileSync8, existsSync as existsSync8, statSync as statSync5, mkdirSync as mkdirSync6, writeFileSync as writeFileSync5, createWriteStream } from "fs";
+import { readFileSync as readFileSync8, existsSync as existsSync9, statSync as statSync5, mkdirSync as mkdirSync6, writeFileSync as writeFileSync7, createWriteStream } from "fs";
 import { finished } from "stream/promises";
-import { join as join9, dirname as dirname6 } from "path";
+import { join as join10, dirname as dirname6 } from "path";
 import { createHash as createHash2 } from "crypto";
 
 // src/environment.ts
@@ -6848,18 +7006,18 @@ var AgentError = class extends Error {
 var AgentSpawnError = class extends AgentError {
 };
 function planAgentRun(o) {
-  const briefPath = join9(o.route.promptsDir, "personas", `lane-${o.role}.md`);
-  if (!existsSync8(briefPath)) {
+  const briefPath = join10(o.route.promptsDir, "personas", `lane-${o.role}.md`);
+  if (!existsSync9(briefPath)) {
     throw new AgentError(`no brief at ${briefPath} \u2014 refusing to run an unscoped session`);
   }
-  const commonPath = join9(o.route.promptsDir, "personas", "common.md");
-  if (!existsSync8(commonPath)) throw new AgentError(`no shared policy at ${commonPath}`);
+  const commonPath = join10(o.route.promptsDir, "personas", "common.md");
+  if (!existsSync9(commonPath)) throw new AgentError(`no shared policy at ${commonPath}`);
   const now = o.now ?? (() => Date.now());
   const routeLabel = routeSlug(o.route.route);
-  const digestPath2 = join9(o.stateDir, `digest-${routeLabel}-${o.role}.md`);
+  const digestPath2 = join10(o.stateDir, `digest-${routeLabel}-${o.role}.md`);
   let digest;
   let ageSeconds;
-  if (existsSync8(digestPath2)) {
+  if (existsSync9(digestPath2)) {
     ageSeconds = Math.floor((now() - statSync5(digestPath2).mtimeMs) / 1e3);
     if (ageSeconds <= DIGEST_MAX_AGE_SECONDS) digest = readFileSync8(digestPath2, "utf8");
   }
@@ -6875,7 +7033,7 @@ function planAgentRun(o) {
     digest
   });
   const promptSha = createHash2("sha256").update(`${effectiveCommon}${effectiveBrief}`).digest("hex");
-  const streamsDir = join9(o.stateDir, "streams");
+  const streamsDir = join10(o.stateDir, "streams");
   const base = `${routeLabel}-${o.role}-${o.cycle}`;
   const seat = resolveSeat(o.ship, o.route, o.role, o.agentPersona ?? (o.agentModel ? { model: o.agentModel } : {}), o.repo);
   const { toolchain, model } = seat;
@@ -6931,8 +7089,8 @@ function planAgentRun(o) {
     digestAttached: digest !== void 0,
     digestAgeSeconds: ageSeconds,
     model,
-    streamPath: join9(streamsDir, `${base}.jsonl`),
-    eventsPath: join9(streamsDir, `${base}.events.jsonl`),
+    streamPath: join10(streamsDir, `${base}.jsonl`),
+    eventsPath: join10(streamsDir, `${base}.events.jsonl`),
     ticket: o.ticket,
     agentLog,
     promptVersion: o.route.resolved?.agentPersonas?.[o.role]?.historyId,
@@ -7002,8 +7160,8 @@ function spawnAgent(plan, emit) {
         return;
       }
       try {
-        const extracted = adapter.extractResult(parsed);
-        if (extracted) result = { ...result, ...extracted };
+        const got = adapter.extractResult(parsed);
+        if (got) result = { ...result, ...Object.fromEntries(Object.entries(got).filter(([, v]) => v !== void 0)) };
         consume(parsed, mapper.map(parsed));
       } catch {
       }
@@ -7079,7 +7237,7 @@ function spawnAgent(plan, emit) {
         provider: plan.provider ?? LEGACY_TOOLCHAIN_PROVIDER
       };
       try {
-        writeFileSync5(`${plan.streamPath}.meta.json`, JSON.stringify({
+        writeFileSync7(`${plan.streamPath}.meta.json`, JSON.stringify({
           route: plan.route,
           role: plan.role,
           ticket: plan.ticket ?? null,
@@ -7138,13 +7296,13 @@ function spawnAgent(plan, emit) {
 }
 
 // src/run-worktree.ts
-import { existsSync as existsSync10 } from "fs";
-import { dirname as dirname7, join as join11 } from "path";
+import { existsSync as existsSync11 } from "fs";
+import { dirname as dirname7, join as join12 } from "path";
 
 // src/ports.ts
 import { execFileSync as execFileSync2 } from "child_process";
-import { existsSync as existsSync9 } from "fs";
-import { join as join10 } from "path";
+import { existsSync as existsSync10 } from "fs";
+import { join as join11 } from "path";
 var run = (cmd, args) => {
   try {
     return execFileSync2(cmd, args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
@@ -7189,7 +7347,7 @@ function ticketForPort(port, s = DEFAULT_PORTS) {
 }
 function worktreeExists(parent, prefix, n) {
   for (const name of [`${prefix}${n}`, `${prefix}${String(n).padStart(3, "0")}`]) {
-    if (existsSync9(join10(parent, name, ".git"))) return true;
+    if (existsSync10(join11(parent, name, ".git"))) return true;
   }
   return false;
 }
@@ -7263,7 +7421,7 @@ function planRunWorktree(dir, cfg, t, role) {
   const existing = worktreeForNumber(dir, num);
   const located = locateBranchForTicket(dir, cfg, t, role);
   const baseRef = hasRemote ? `${remote}/${base}` : base;
-  if (existing && !existing.prunable && existsSync10(existing.path)) {
+  if (existing && !existing.prunable && existsSync11(existing.path)) {
     const branch = existing.branch;
     if (status(existing.path).length > 0) return { action: "leave-dirty", path: existing.path, branch };
     if (!branch) return { action: "leave-unpushed", path: existing.path, branch: "(detached HEAD)" };
@@ -7277,7 +7435,7 @@ function planRunWorktree(dir, cfg, t, role) {
     if (countCommits(existing.path, `${baseRef}..HEAD`) > 0) return { action: "leave-unpushed", path: existing.path, branch };
     return { action: "recut", path: existing.path, branch, base: baseRef };
   }
-  const path = join11(dirname7(dir), worktreeForTicket(dir, cfg, t, role));
+  const path = join12(dirname7(dir), worktreeForTicket(dir, cfg, t, role));
   if (located?.where === "remote" || located && hasRemote && remoteBranchExists(dir, remote, located.branch)) {
     return { action: "cut-remote", path, branch: located.branch };
   }
@@ -7324,7 +7482,7 @@ function worktreeHoldsUnpushed(path, remote) {
 }
 async function finishRunWorktree(dir, cfg, branch) {
   const wt = worktrees(dir).find((w) => w.branch === branch && !w.prunable && w.path !== dir);
-  if (!wt || !existsSync10(wt.path)) return { kind: "none" };
+  if (!wt || !existsSync11(wt.path)) return { kind: "none" };
   if (cfg.hooks.handoff) return { kind: "kept-handoff", path: wt.path };
   if (status(wt.path).length > 0) return { kind: "kept-dirty", path: wt.path };
   if (remoteConfigured(dir, cfg.branch.remote) && worktreeHoldsUnpushed(wt.path, cfg.branch.remote)) {
@@ -7336,7 +7494,7 @@ async function finishRunWorktree(dir, cfg, branch) {
     if (pids.length) await killGently(pids);
   }
   gitOk(dir, ["worktree", "remove", wt.path]);
-  return existsSync10(wt.path) ? { kind: "kept-dirty", path: wt.path } : { kind: "removed", path: wt.path };
+  return existsSync11(wt.path) ? { kind: "kept-dirty", path: wt.path } : { kind: "removed", path: wt.path };
 }
 
 // src/handoff-guard.ts
@@ -7485,13 +7643,13 @@ async function retireRunWorktree(tracker, dir, cfg, t, role, seatId, shipName2,
 }
 
 // src/connect-wizard.ts
-import { delimiter, dirname as dirname8, join as join12 } from "path";
-import { accessSync as accessSync2, constants as constants2, existsSync as existsSync11, mkdirSync as mkdirSync7, writeFileSync as writeFileSync6 } from "fs";
+import { delimiter, dirname as dirname8, join as join13 } from "path";
+import { accessSync as accessSync2, constants as constants2, existsSync as existsSync12, mkdirSync as mkdirSync7, writeFileSync as writeFileSync8 } from "fs";
 import { stringify } from "yaml";
 var HOST_PASSENGERS_DOCS_URL = "https://crew.tablation.dev/host-passengers";
 function shouldRunWizard(opts) {
   if (!opts.isTTY) return false;
-  const exists = opts.configExists ?? existsSync11;
+  const exists = opts.configExists ?? existsSync12;
   return !configSearchPath(opts.crewHome).some((p) => exists(p));
 }
 function firstRunConfigPath() {
@@ -7508,7 +7666,7 @@ function defaultIsExecutable(p) {
 function findOnPath2(name, pathEnv, isExecutable = defaultIsExecutable) {
   for (const dir of pathEnv.split(delimiter)) {
     if (!dir) continue;
-    const candidate = join12(dir, name);
+    const candidate = join13(dir, name);
     if (isExecutable(candidate)) return candidate;
   }
   return void 0;
@@ -7571,7 +7729,7 @@ ${routeBlock}`;
 function writeNewConfig(path, text) {
   mkdirSync7(dirname8(path), { recursive: true });
   try {
-    writeFileSync6(path, text, { mode: 384, flag: "wx" });
+    writeFileSync8(path, text, { mode: 384, flag: "wx" });
     return true;
   } catch (e) {
     if (e.code === "EEXIST") return false;
@@ -7603,8 +7761,8 @@ Wrote ${o.configPath}.
 }
 
 // src/release-run.ts
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync7, existsSync as existsSync12, copyFileSync, mkdirSync as mkdirSync8, mkdtempSync, rmSync as rmSync4 } from "fs";
-import { dirname as dirname9, join as join13 } from "path";
+import { readFileSync as readFileSync9, writeFileSync as writeFileSync9, existsSync as existsSync13, copyFileSync, mkdirSync as mkdirSync8, mkdtempSync, rmSync as rmSync6 } from "fs";
+import { dirname as dirname9, join as join14 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 
 // src/release.ts
@@ -8262,9 +8420,9 @@ async function bump(o, size) {
     }
     return printed;
   }
-  const files = o.repo.release.versionFiles.map((f) => join13(o.cwd, f));
+  const files = o.repo.release.versionFiles.map((f) => join14(o.cwd, f));
   const first = files[0];
-  if (!existsSync12(first)) {
+  if (!existsSync13(first)) {
     o.emit.error(`no ${o.repo.release.versionFiles[0]} to read a version from`);
     return null;
   }
@@ -8287,21 +8445,21 @@ async function bump(o, size) {
       o.emit.error(`no version field in ${f}`);
       return null;
     }
-    writeFileSync7(f, out);
+    writeFileSync9(f, out);
   }
   return version;
 }
 function writeChangelog(o, version, entries) {
   const file = o.repo.release.changelog;
   if (!file || entries.length === 0) return;
-  const path = join13(o.cwd, file);
+  const path = join14(o.cwd, file);
   const section = renderChangelogSection(version, (/* @__PURE__ */ new Date()).toISOString().slice(0, 10), entries);
   if (o.dryRun) {
     o.emit.emit(`would prepend ${entries.length} entr(ies) to ${file}`);
     return;
   }
-  const existing = existsSync12(path) ? readFileSync9(path, "utf8") : "# Changelog\n";
-  writeFileSync7(path, insertChangelogSection(existing, section));
+  const existing = existsSync13(path) ? readFileSync9(path, "utf8") : "# Changelog\n";
+  writeFileSync9(path, insertChangelogSection(existing, section));
 }
 async function confirm(o, expected) {
   if (!o.repo.hooks.released) return void 0;
@@ -8382,11 +8540,11 @@ async function confirmLastRelease(o, decision) {
 function openReleaseCheckout(o) {
   const { remote, base } = o.repo.branch;
   const branch = `crew/release-${Date.now()}`;
-  const root = mkdtempSync(join13(tmpdir2(), "crew-release-"));
-  const dir = join13(root, "checkout");
+  const root = mkdtempSync(join14(tmpdir2(), "crew-release-"));
+  const dir = join14(root, "checkout");
   const close = () => {
     gitOk(o.cwd, ["worktree", "remove", "--force", dir]);
-    rmSync4(root, { recursive: true, force: true });
+    rmSync6(root, { recursive: true, force: true });
     gitOk(o.cwd, ["worktree", "prune"]);
     gitOk(o.cwd, ["branch", "-D", branch]);
   };
@@ -8397,10 +8555,10 @@ function openReleaseCheckout(o) {
     throw e;
   }
   for (const f of o.repo.worktrees.copy) {
-    const src = join13(o.cwd, f);
-    if (!existsSync12(src)) continue;
-    mkdirSync8(dirname9(join13(dir, f)), { recursive: true });
-    copyFileSync(src, join13(dir, f));
+    const src = join14(o.cwd, f);
+    if (!existsSync13(src)) continue;
+    mkdirSync8(dirname9(join14(dir, f)), { recursive: true });
+    copyFileSync(src, join14(dir, f));
   }
   return { dir, branch, close };
 }
@@ -8869,7 +9027,7 @@ function missingReleaserWarning(repo, release, ships, now = Date.now()) {
 }
 
 // src/watch.ts
-import { watch as watchFile, existsSync as existsSync13, statSync as statSync6, openSync as openSync3, readSync, closeSync as closeSync3 } from "fs";
+import { watch as watchFile, existsSync as existsSync14, statSync as statSync6, openSync as openSync3, readSync, closeSync as closeSync3 } from "fs";
 var E = "\x1B[";
 var dim = (s) => `${E}2m${s}${E}0m`;
 var bold = (s) => `${E}1m${s}${E}0m`;
@@ -8970,7 +9128,7 @@ function renderHeaders(states, now = Date.now()) {
   return states.map((s) => renderHeader(s, now)).join("");
 }
 function readFrom(file, from) {
-  if (!existsSync13(file)) return { events: [], offset: from };
+  if (!existsSync14(file)) return { events: [], offset: from };
   const size = statSync6(file).size;
   if (size < from) return readFrom(file, 0);
   if (size === from) return { events: [], offset: from };
@@ -9210,8 +9368,8 @@ function nextRoles(decision, ran) {
 }
 
 // src/agents.ts
-import { readFileSync as readFileSync10, existsSync as existsSync14 } from "fs";
-import { join as join14 } from "path";
+import { readFileSync as readFileSync10, existsSync as existsSync15 } from "fs";
+import { join as join15 } from "path";
 import { TablationClient as TablationClient2, StaleWriteError as StaleWriteError6, TablationApiError } from "@tablation/client";
 var PERSONA_NAME = {
   dev: "Developer",
@@ -9225,11 +9383,11 @@ var CREW_AGENT_COLUMN = "agent_id";
 var AgentsSyncError = class extends Error {
 };
 function personaDefaultPrompt(promptsDir, role) {
-  const briefPath = join14(promptsDir, "personas", `lane-${role}.md`);
-  if (!existsSync14(briefPath)) throw new AgentsSyncError(`no brief at ${briefPath}`);
+  const briefPath = join15(promptsDir, "personas", `lane-${role}.md`);
+  if (!existsSync15(briefPath)) throw new AgentsSyncError(`no brief at ${briefPath}`);
   if (role === "pair") return readFileSync10(briefPath, "utf8");
-  const commonPath = join14(promptsDir, "personas", "common.md");
-  if (!existsSync14(commonPath)) throw new AgentsSyncError(`no shared policy at ${commonPath}`);
+  const commonPath = join15(promptsDir, "personas", "common.md");
+  if (!existsSync15(commonPath)) throw new AgentsSyncError(`no shared policy at ${commonPath}`);
   return `${readFileSync10(commonPath, "utf8")}${readFileSync10(briefPath, "utf8")}`;
 }
 async function resolveAgentId(route, role, opts) {
@@ -9907,8 +10065,8 @@ import {
 } from "@tablation/client";
 
 // src/skills.ts
-import { readFileSync as readFileSync11, readdirSync as readdirSync2, existsSync as existsSync15 } from "fs";
-import { join as join15 } from "path";
+import { readFileSync as readFileSync11, readdirSync as readdirSync2, existsSync as existsSync16 } from "fs";
+import { join as join16 } from "path";
 import { parse as parseYaml } from "yaml";
 import { TablationClient as TablationClient3, StaleWriteError as StaleWriteError7, TablationApiError as TablationApiError2 } from "@tablation/client";
 var SkillSyncError = class extends Error {
@@ -9927,9 +10085,9 @@ function parseSkillFile(path) {
   return { name: meta.name, description: meta.description, prompt: body, file: path };
 }
 function listLocalSkills(promptsDir) {
-  const dir = join15(promptsDir, "skills");
-  if (!existsSync15(dir)) return [];
-  return readdirSync2(dir).filter((f) => f.endsWith(".md")).map((f) => parseSkillFile(join15(dir, f)));
+  const dir = join16(promptsDir, "skills");
+  if (!existsSync16(dir)) return [];
+  return readdirSync2(dir).filter((f) => f.endsWith(".md")).map((f) => parseSkillFile(join16(dir, f)));
 }
 async function syncSkills(route, opts) {
   if (!route.resolved) {
@@ -10108,7 +10266,7 @@ async function showLogEntry(route, entryId, opts = {}) {
 }
 
 // src/repos-cmd.ts
-import { homedir as homedir5 } from "os";
+import { homedir as homedir6 } from "os";
 import { basename as basename7, resolve as resolve3 } from "path";
 import { isMap, isSeq, parseDocument, stringify as stringify2 } from "yaml";
 var ReposError = class extends Error {
@@ -10155,7 +10313,7 @@ function parseAddArgs(args, routes, isDir) {
   return { route, path: "." };
 }
 function expandDir(p, base) {
-  const home = p === "~" ? homedir5() : p.startsWith("~/") ? `${homedir5()}/${p.slice(2)}` : p;
+  const home = p === "~" ? homedir6() : p.startsWith("~/") ? `${homedir6()}/${p.slice(2)}` : p;
   return resolve3(base, home);
 }
 function routeMapOf(doc, route) {
@@ -10290,7 +10448,7 @@ function schedulerInstalled(plan, exists, crontab) {
 }
 
 // src/worktree-sweep.ts
-import { existsSync as existsSync16 } from "fs";
+import { existsSync as existsSync17 } from "fs";
 import { basename as basename8 } from "path";
 function planWorktreeSweep(target, tickets, contract) {
   const terminal = new Set(contract.statuses.resolved.filter((s) => s !== contract.statuses.verified));
@@ -10318,7 +10476,7 @@ async function applyWorktreeSweep(cwd, actions, dryRun, log, remote = "origin")
   let removed = 0;
   let keptBranches = 0;
   for (const a of actions) {
-    if (!dryRun && existsSync16(a.path)) {
+    if (!dryRun && existsSync17(a.path)) {
       let dirty = false;
       try {
         dirty = status(a.path).length > 0;
@@ -10332,7 +10490,7 @@ async function applyWorktreeSweep(cwd, actions, dryRun, log, remote = "origin")
         continue;
       }
     }
-    if (!dryRun && a.requirePushed && a.branch && existsSync16(a.path) && remoteConfigured(cwd, remote) && worktreeHoldsUnpushed(a.path, remote)) {
+    if (!dryRun && a.requirePushed && a.branch && existsSync17(a.path) && remoteConfigured(cwd, remote) && worktreeHoldsUnpushed(a.path, remote)) {
       log.warn(
         `not removing worktree ${a.path} for ${a.ticket.issue_id} (${a.ticket.status}): ${a.branch} has commits that are not on ${remote}`,
         { ticket: a.ticket.issue_id, step: "worktree" }
@@ -10413,14 +10571,14 @@ function applyRemoteBranchCleanup(cwd, remote, branches2, dryRun, log) {
 }
 
 // src/stream-sweep.ts
-import { existsSync as existsSync17, readdirSync as readdirSync3, rmSync as rmSync5, statSync as statSync7 } from "fs";
-import { join as join16 } from "path";
+import { existsSync as existsSync18, readdirSync as readdirSync3, rmSync as rmSync7, statSync as statSync7 } from "fs";
+import { join as join17 } from "path";
 var DAY_MS2 = 24 * 60 * 60 * 1e3;
 function planStreamSweep(stateDir, retentionDays, now = Date.now()) {
-  const dir = join16(stateDir, "streams");
-  if (!existsSync17(dir)) return [];
+  const dir = join17(stateDir, "streams");
+  if (!existsSync18(dir)) return [];
   const cutoff = now - retentionDays * DAY_MS2;
-  return readdirSync3(dir).map((name) => join16(dir, name)).filter((path) => {
+  return readdirSync3(dir).map((name) => join17(dir, name)).filter((path) => {
     try {
       return statSync7(path).mtimeMs < cutoff;
     } catch {
@@ -10436,7 +10594,7 @@ function applyStreamSweep(paths, dryRun, log) {
       continue;
     }
     try {
-      rmSync5(path, { force: true });
+      rmSync7(path, { force: true });
       removed++;
       log.emit(`removed stream artifact ${path}`, { step: "worktree" });
     } catch (e) {
@@ -10446,9 +10604,9 @@ function applyStreamSweep(paths, dryRun, log) {
   return removed;
 }
 function planEventsSweep(stateDir, retentionDays, now = Date.now()) {
-  if (!existsSync17(stateDir)) return [];
+  if (!existsSync18(stateDir)) return [];
   const cutoff = now - retentionDays * DAY_MS2;
-  return readdirSync3(stateDir).filter((name) => ROTATED_EVENTS_RE.test(name)).map((name) => join16(stateDir, name)).filter((path) => {
+  return readdirSync3(stateDir).filter((name) => ROTATED_EVENTS_RE.test(name)).map((name) => join17(stateDir, name)).filter((path) => {
     try {
       return statSync7(path).mtimeMs < cutoff;
     } catch {
@@ -10458,23 +10616,23 @@ function planEventsSweep(stateDir, retentionDays, now = Date.now()) {
 }
 
 // src/cli.ts
-import { readFileSync as readFileSync15, existsSync as existsSync21, mkdirSync as mkdirSync12, writeFileSync as writeFileSync10, unlinkSync as unlinkSync5, copyFileSync as copyFileSync2, renameSync as renameSync2, statSync as statSync9 } from "fs";
+import { readFileSync as readFileSync16, existsSync as existsSync23, mkdirSync as mkdirSync13, writeFileSync as writeFileSync13, unlinkSync as unlinkSync5, copyFileSync as copyFileSync2, renameSync as renameSync2, statSync as statSync9 } from "fs";
 import { createInterface } from "readline/promises";
 import { dirname as dirOf, resolve as resolvePath } from "path";
 
 // src/ssh-keys.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { existsSync as existsSync18, mkdirSync as mkdirSync9, readFileSync as readFileSync12, chmodSync } from "fs";
-import { dirname as dirname11, join as join17 } from "path";
+import { existsSync as existsSync19, mkdirSync as mkdirSync9, readFileSync as readFileSync12, chmodSync } from "fs";
+import { dirname as dirname11, join as join18 } from "path";
 var SshKeyError = class extends Error {
 };
 function shipSshKeyPathFor(stateDir) {
-  return join17(stateDir, "ssh", "id_ed25519");
+  return join18(stateDir, "ssh", "id_ed25519");
 }
 function ensureShipSshKeypair(stateDir) {
   const privateKeyPath = shipSshKeyPathFor(stateDir);
   const publicKeyPath = `${privateKeyPath}.pub`;
-  if (!existsSync18(privateKeyPath)) {
+  if (!existsSync19(privateKeyPath)) {
     mkdirSync9(dirname11(privateKeyPath), { recursive: true });
     try {
       execFileSync3("ssh-keygen", [
@@ -10495,7 +10653,7 @@ function ensureShipSshKeypair(stateDir) {
     }
     chmodSync(privateKeyPath, 384);
   }
-  if (!existsSync18(publicKeyPath)) {
+  if (!existsSync19(publicKeyPath)) {
     throw new SshKeyError(`${privateKeyPath} exists but ${publicKeyPath} does not \u2014 regenerate or restore it`);
   }
   const publicKey = readFileSync12(publicKeyPath, "utf8").trim();
@@ -10712,9 +10870,9 @@ function syncAllPassengerCheckouts(cfg) {
 
 // src/tunnel.ts
 import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync19, mkdirSync as mkdirSync10, readFileSync as readFileSync13, writeFileSync as writeFileSync8, unlinkSync as unlinkSync3, readdirSync as readdirSync4 } from "fs";
+import { existsSync as existsSync20, mkdirSync as mkdirSync10, readFileSync as readFileSync13, writeFileSync as writeFileSync10, unlinkSync as unlinkSync3, readdirSync as readdirSync4 } from "fs";
 import { randomInt } from "crypto";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 var DEFAULT_SPAWN_OPTIONS = { stdio: "ignore", detached: true };
 var defaultSpawn = (cmd, args) => spawn3(cmd, args, DEFAULT_SPAWN_OPTIONS);
 var SLUG_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
@@ -10781,11 +10939,11 @@ function startTunnel(opts) {
   };
 }
 function tunnelStatePath(stateDir, workspaceId) {
-  return join18(stateDir, "passengers", `${workspaceId}.json`);
+  return join19(stateDir, "passengers", `${workspaceId}.json`);
 }
 function readPersistedTunnel(stateDir, workspaceId) {
   const path = tunnelStatePath(stateDir, workspaceId);
-  if (!existsSync19(path)) return void 0;
+  if (!existsSync20(path)) return void 0;
   try {
     return JSON.parse(readFileSync13(path, "utf8"));
   } catch {
@@ -10794,8 +10952,8 @@ function readPersistedTunnel(stateDir, workspaceId) {
 }
 function writePersistedTunnel(stateDir, state) {
   const path = tunnelStatePath(stateDir, state.workspaceId);
-  mkdirSync10(join18(stateDir, "passengers"), { recursive: true });
-  writeFileSync8(path, `${JSON.stringify(state, null, 2)}
+  mkdirSync10(join19(stateDir, "passengers"), { recursive: true });
+  writeFileSync10(path, `${JSON.stringify(state, null, 2)}
 `);
 }
 function updatePersistedTunnel(stateDir, workspaceId, patch2) {
@@ -10892,8 +11050,8 @@ function syncPassengerTunnels(plans, relayHost, relayPort, privateKeyPath, state
   }
 }
 function readAllPersistedWorkspaceIds(stateDir) {
-  const dir = join18(stateDir, "passengers");
-  if (!existsSync19(dir)) return [];
+  const dir = join19(stateDir, "passengers");
+  if (!existsSync20(dir)) return [];
   return readdirSync4(dir).filter((f) => f.endsWith(".json") && !f.endsWith("-sync.json")).map((f) => f.slice(0, -".json".length));
 }
 
@@ -11014,8 +11172,8 @@ async function unregisterEndpoint(workspaceId, info, d) {
 import { createServer as createHttpServer } from "http";
 import { spawn as spawn4 } from "child_process";
 import { randomBytes } from "crypto";
-import { existsSync as existsSync20, mkdirSync as mkdirSync11, readFileSync as readFileSync14, writeFileSync as writeFileSync9, unlinkSync as unlinkSync4, readdirSync as readdirSync5 } from "fs";
-import { join as join19 } from "path";
+import { existsSync as existsSync21, mkdirSync as mkdirSync11, readFileSync as readFileSync14, writeFileSync as writeFileSync11, unlinkSync as unlinkSync4, readdirSync as readdirSync5 } from "fs";
+import { join as join20 } from "path";
 
 // src/secret-compare.ts
 import { timingSafeEqual } from "crypto";
@@ -11104,11 +11262,11 @@ var defaultSpawn2 = (cmd, args, env) => {
   return child;
 };
 function syncDaemonStatePath(stateDir, workspaceId) {
-  return join19(stateDir, "passengers", `${workspaceId}-sync.json`);
+  return join20(stateDir, "passengers", `${workspaceId}-sync.json`);
 }
 function readPersistedSyncDaemon(stateDir, workspaceId) {
   const path = syncDaemonStatePath(stateDir, workspaceId);
-  if (!existsSync20(path)) return void 0;
+  if (!existsSync21(path)) return void 0;
   try {
     return JSON.parse(readFileSync14(path, "utf8"));
   } catch {
@@ -11117,8 +11275,8 @@ function readPersistedSyncDaemon(stateDir, workspaceId) {
 }
 function writePersistedSyncDaemon(stateDir, state) {
   const path = syncDaemonStatePath(stateDir, state.workspaceId);
-  mkdirSync11(join19(stateDir, "passengers"), { recursive: true });
-  writeFileSync9(path, `${JSON.stringify(state, null, 2)}
+  mkdirSync11(join20(stateDir, "passengers"), { recursive: true });
+  writeFileSync11(path, `${JSON.stringify(state, null, 2)}
 `);
 }
 function removePersistedSyncDaemon(stateDir, workspaceId) {
@@ -11138,8 +11296,8 @@ function waitForExit(pid, alive, timeoutMs = 5e3) {
   }
 }
 function readAllPersistedSyncWorkspaceIds(stateDir) {
-  const dir = join19(stateDir, "passengers");
-  if (!existsSync20(dir)) return [];
+  const dir = join20(stateDir, "passengers");
+  if (!existsSync21(dir)) return [];
   const suffix = "-sync.json";
   return readdirSync5(dir).filter((f) => f.endsWith(suffix)).map((f) => f.slice(0, -suffix.length));
 }
@@ -11196,8 +11354,8 @@ function syncPassengerSyncDaemons(plans, cfg, stateDir, deps = {}) {
 }
 
 // src/daemon.ts
-import { readdirSync as readdirSync6, statSync as statSync8 } from "fs";
-import { join as join20 } from "path";
+import { existsSync as existsSync22, mkdirSync as mkdirSync12, readFileSync as readFileSync15, readdirSync as readdirSync6, rmSync as rmSync8, statSync as statSync8, writeFileSync as writeFileSync12 } from "fs";
+import { join as join21 } from "path";
 var DEFAULT_FLOOR_MS = 5e3;
 var DEFAULT_CEILING_MS = INTERVAL_SECONDS * 1e3;
 var defaultSleep = (ms2) => new Promise((resolve5) => setTimeout(resolve5, ms2));
@@ -11236,16 +11394,45 @@ function latestMtime(path) {
   if (!stat.isDirectory()) return 0;
   let latest = stat.mtimeMs;
   for (const entry of readdirSync6(path, { withFileTypes: true })) {
-    latest = Math.max(latest, latestMtime(join20(path, entry.name)));
+    latest = Math.max(latest, latestMtime(join21(path, entry.name)));
   }
   return latest;
 }
 function computeTreeSignature(paths) {
   return paths.map((p) => String(latestMtime(p))).join(":");
 }
-function makeStaleChecker(paths) {
+function makeStaleChecker(paths, opts = {}) {
   const initial = computeTreeSignature(paths);
-  return () => computeTreeSignature(paths) !== initial;
+  return () => computeTreeSignature(paths) !== initial || opts.reloadSentinel !== void 0 && existsSync22(opts.reloadSentinel);
+}
+function reloadSentinelFor(stateDir) {
+  return join21(stateDir, "reload-requested");
+}
+function daemonStampFor(stateDir) {
+  return join21(stateDir, "daemon.started");
+}
+function noteDaemonStarted(stateDir, now = Date.now()) {
+  mkdirSync12(stateDir, { recursive: true });
+  rmSync8(reloadSentinelFor(stateDir), { force: true });
+  writeFileSync12(daemonStampFor(stateDir), `${JSON.stringify({ pid: process.pid, startedAt: now })}
+`);
+}
+function readDaemonStarted(stateDir) {
+  try {
+    const v = JSON.parse(readFileSync15(daemonStampFor(stateDir), "utf8")).startedAt;
+    return typeof v === "number" ? v : null;
+  } catch {
+    return null;
+  }
+}
+function configChangedAfter(files, startedAt) {
+  for (const f of files) {
+    try {
+      if (statSync8(f).mtimeMs > startedAt) return f;
+    } catch {
+    }
+  }
+  return null;
 }
 var SPAWN_PARK_AFTER = 3;
 var SpawnBreaker = class {
@@ -11646,6 +11833,7 @@ function usage() {
   crew watch [route]             live view of what the crew is doing
   crew status [route] [--json]   paused/running state; --json for a machine reader
   crew projects [--route R] [--json]   the Projects rows each route can read (id, name, prefix, work mode)
+  crew reload                    make the running daemon re-read crew.yaml (--now: restart it immediately)
   crew doctor [route] [--fix]    preflight; --fix enables clean routes and offers crew install
   crew ports [route]             which checkout owns which ports, and what is up
   crew reap [route]              kill orphaned servers, drop worktrees for closed tickets
@@ -11700,7 +11888,12 @@ var value = (name) => {
 var positional = argv.filter((a, i) => !a.startsWith("--") && !argv[i - 1]?.startsWith("--"));
 var command = positional[0];
 if (!command) usage();
-var STATE_WRITING_COMMANDS = /* @__PURE__ */ new Set(["connect", "disconnect", "install", "uninstall", "release", "merge", "deploy"]);
+function daemonConfigPaths(c) {
+  const files = [c.configFile];
+  for (const r of c.routes) if (r.apiKeyFile && !files.includes(r.apiKeyFile)) files.push(r.apiKeyFile);
+  return files;
+}
+var STATE_WRITING_COMMANDS = /* @__PURE__ */ new Set(["connect", "disconnect", "install", "uninstall", "reload", "release", "merge", "deploy"]);
 var STATE_WRITING_SUBCOMMANDS = {
   agents: /* @__PURE__ */ new Set(["sync"]),
   skills: /* @__PURE__ */ new Set(["sync"])
@@ -11810,7 +12003,7 @@ if (command === "passenger-sync-daemon") {
   const releaseFleetWide = ["merge", "deploy", "release"].includes(command) && flag("fleet");
   const DAEMON_SUBCOMMANDS = /* @__PURE__ */ new Set(["start", "stop", "status", "restart"]);
   const named = command === "daemon" && DAEMON_SUBCOMMANDS.has(positional[1] ?? "") ? positional[2] : positional[1];
-  const fleetWide = command === "inbox" || command === "connect" || command === "disconnect" || command === "agents" || command === "skills" || command === "logbook" || command === "repos" || command === "projects" || releaseFleetWide || command === "pause" || command === "resume" || FLEET_CAPABLE.has(command) && !named && cfg.routes.length > 1;
+  const fleetWide = command === "inbox" || command === "connect" || command === "disconnect" || command === "agents" || command === "skills" || command === "logbook" || command === "repos" || command === "projects" || releaseFleetWide || command === "pause" || command === "resume" || command === "reload" || FLEET_CAPABLE.has(command) && !named && cfg.routes.length > 1;
   let route;
   try {
     route = fleetWide ? cfg.routes[0] : findRoute(cfg, named);
@@ -12016,14 +12209,14 @@ if (command === "passenger-sync-daemon") {
     }
     if (host === "linux" && hasSystemd) {
       const label = labelFor(CREW_HOME, "run");
-      const staleTimer = join21(homedir6(), ".config", "systemd", "user", `${label}.timer`);
-      if (existsSync21(staleTimer)) {
+      const staleTimer = join22(homedir7(), ".config", "systemd", "user", `${label}.timer`);
+      if (existsSync23(staleTimer)) {
         process.stdout.write(
           `removing stale run timer from before the persistent-service cutover: ${staleTimer}${dryRun ? " (dry run)" : ""}
 `
         );
         if (!dryRun) {
-          spawnSync4("systemctl", ["--user", "disable", "--now", `${label}.timer`], { cwd: CREW_HOME });
+          spawnSync5("systemctl", ["--user", "disable", "--now", `${label}.timer`], { cwd: CREW_HOME });
           try {
             unlinkSync5(staleTimer);
           } catch {
@@ -12043,7 +12236,7 @@ if (command === "passenger-sync-daemon") {
     const tracker = new Tracker(c, cfg.ship);
     problems.push(...validateContract(tracker.contract).map((p) => `contract: ${p}`));
     for (const r of await resolvedRepos(c)) {
-      if (!existsSync21(r.dir)) problems.push(`repo ${r.name}: ${r.dir} is missing on disk`);
+      if (!existsSync23(r.dir)) problems.push(`repo ${r.name}: ${r.dir} is missing on disk`);
       if (!satisfies(host, r.config.platform)) problems.push(`repo ${r.name}: requires ${r.config.platform}, this host is ${host}`);
       problems.push(...validateEffective(r.config).map((p) => `repo ${r.name}: ${p}`));
     }
@@ -12061,8 +12254,8 @@ if (command === "passenger-sync-daemon") {
   }
   async function doctorFix(o) {
     const routes = await Promise.all(routesInScope(cfg.routes, named).map((c) => gatherHealth({ route: c.route, enabled: c.enabled, hasRepos: reposOf(c).length > 0 }, () => routeProblems(c))));
-    const unitExists = (p) => existsSync21(p);
-    const crontab = o.host === "linux" ? spawnSync4("crontab", ["-l"], { encoding: "utf8" }).stdout ?? "" : "";
+    const unitExists = (p) => existsSync23(p);
+    const crontab = o.host === "linux" ? spawnSync5("crontab", ["-l"], { encoding: "utf8" }).stdout ?? "" : "";
     const schedulerAbsent = o.host !== "windows" ? !schedulerInstalled(planInstall(cfg.ship, CREW_HOME, o.host, detectSystemd(), "run"), unitExists, crontab) : true;
     const plan = planFix({ routes, schedulerAbsent, host: o.host });
     for (const n of plan.notes) process.stdout.write(`fix: ${n}
@@ -12078,7 +12271,7 @@ if (command === "passenger-sync-daemon") {
       for (const a of plan.actions) {
         if (a.kind === "enable") {
           if (prompter && !await prompter.confirm(`Route ${a.route} passes every check \u2014 set enabled: true in ${cfg.configFile}?`, false)) continue;
-          writeFileSync10(cfg.configFile, planEnable(readFileSync15(cfg.configFile, "utf8"), a.route));
+          writeFileSync13(cfg.configFile, planEnable(readFileSync16(cfg.configFile, "utf8"), a.route));
           enabledSound.add(a.route);
           changed2.push(`enabled route ${a.route} in ${cfg.configFile}`);
         } else {
@@ -12941,7 +13134,7 @@ ${changed2.map((c) => `  - ${c}
           }
           let failed = false;
           for (const cmd2 of commands) {
-            const res2 = spawnSync4(cmd2[0], cmd2.slice(1), { cwd: CREW_HOME, encoding: "utf8" });
+            const res2 = spawnSync5(cmd2[0], cmd2.slice(1), { cwd: CREW_HOME, encoding: "utf8" });
             if (res2.stdout) process.stdout.write(res2.stdout);
             if (res2.stderr) process.stderr.write(res2.stderr);
             if (cmd2 === control.startCommand && (res2.error || res2.status !== 0)) {
@@ -12959,7 +13152,7 @@ ${changed2.map((c) => `  - ${c}
 `);
           break;
         }
-        const res = spawnSync4(cmd[0], cmd.slice(1), { cwd: CREW_HOME, encoding: "utf8" });
+        const res = spawnSync5(cmd[0], cmd.slice(1), { cwd: CREW_HOME, encoding: "utf8" });
         if (res.stdout) process.stdout.write(res.stdout);
         if (res.stderr) process.stderr.write(res.stderr);
         if (daemonSub !== "status" && (res.error || res.status !== 0)) {
@@ -12982,7 +13175,10 @@ ${changed2.map((c) => `  - ${c}
         process.exit(1);
       }
       requireArmed("run the daemon loop");
-      const watchPaths = isCompiledBinary(import.meta.url) ? [process.execPath] : [join21(CREW_HOME, "src"), join21(CREW_HOME, "dist"), join21(CREW_HOME, "bin")];
+      const watchPaths = isCompiledBinary(import.meta.url) ? [process.execPath] : [join22(CREW_HOME, "src"), join22(CREW_HOME, "dist"), join22(CREW_HOME, "bin")];
+      const configPaths = daemonConfigPaths(cfg);
+      watchPaths.push(...configPaths);
+      noteDaemonStarted(cfg.ship.stateDir);
       const spawnBreaker = new SpawnBreaker();
       const stopReason = await runDaemonLoop({
         runPass: () => runOnePass({
@@ -13000,14 +13196,16 @@ ${changed2.map((c) => `  - ${c}
 `)
           })
         }),
-        checkStale: makeStaleChecker(watchPaths),
+        checkStale: makeStaleChecker(watchPaths, { reloadSentinel: reloadSentinelFor(cfg.ship.stateDir) }),
         onPass: (result) => {
           if (result.started.length) emit.emit(`daemon pass started: ${result.started.join(", ")}`);
           for (const s of result.skipped) emit.emit(`daemon pass skipped ${s.role} \u2014 ${s.reason}`);
         }
       });
       if (stopReason === "stale") {
-        emit.emit("crew daemon: installed tree changed on disk \u2014 exiting cleanly so the OS-level restart relaunches with the update");
+        emit.emit(
+          "crew daemon: installed tree, crew.yaml or a reload request changed on disk \u2014 exiting cleanly so the OS-level restart relaunches with the update"
+        );
         process.exit(0);
       }
       break;
@@ -13131,11 +13329,11 @@ ${changed2.map((c) => `  - ${c}
 `);
       if (!dryRun) {
         const resolvedPath = resolvedPathFor(cfg.ship.stateDir, target.route);
-        const raw = existsSync21(resolvedPath) ? JSON.parse(readFileSync15(resolvedPath, "utf8")) : {};
+        const raw = existsSync23(resolvedPath) ? JSON.parse(readFileSync16(resolvedPath, "utf8")) : {};
         raw.agentPersonas = personaResult.agentPersonas;
         raw.agentSkills = skillResult.agentSkills;
-        mkdirSync12(dirOf(resolvedPath), { recursive: true });
-        writeFileSync10(resolvedPath, `${JSON.stringify(raw, null, 2)}
+        mkdirSync13(dirOf(resolvedPath), { recursive: true });
+        writeFileSync13(resolvedPath, `${JSON.stringify(raw, null, 2)}
 `);
       }
       if (personaResult.outcomes.some((o) => o.action === "diverged") || skillResult.outcomes.some((o) => o.action === "diverged")) {
@@ -13180,10 +13378,10 @@ ${changed2.map((c) => `  - ${c}
 `);
       if (!dryRun) {
         const resolvedPath = resolvedPathFor(cfg.ship.stateDir, target.route);
-        const raw = existsSync21(resolvedPath) ? JSON.parse(readFileSync15(resolvedPath, "utf8")) : {};
+        const raw = existsSync23(resolvedPath) ? JSON.parse(readFileSync16(resolvedPath, "utf8")) : {};
         raw.agentSkills = result.agentSkills;
-        mkdirSync12(dirOf(resolvedPath), { recursive: true });
-        writeFileSync10(resolvedPath, `${JSON.stringify(raw, null, 2)}
+        mkdirSync13(dirOf(resolvedPath), { recursive: true });
+        writeFileSync13(resolvedPath, `${JSON.stringify(raw, null, 2)}
 `);
       }
       if (result.outcomes.some((o) => o.action === "diverged")) process.exitCode = 1;
@@ -13196,14 +13394,14 @@ ${changed2.map((c) => `  - ${c}
         process.exit(2);
       };
       if (sub !== "add" && sub !== "list") usage2();
-      const configText = readFileSync15(cfg.configFile, "utf8");
+      const configText = readFileSync16(cfg.configFile, "utf8");
       let routeName = positional[2];
       let addPath = ".";
       let addName;
       if (sub === "list" && !routeName) usage2();
       if (sub === "add") {
         try {
-          const a = parseAddArgs(positional.slice(2), routeNamesOf(configText), (p) => existsSync21(resolvePath(p.replace(/^~(?=\/|$)/, homedir6()))));
+          const a = parseAddArgs(positional.slice(2), routeNamesOf(configText), (p) => existsSync23(resolvePath(p.replace(/^~(?=\/|$)/, homedir7()))));
           routeName = a.route;
           addPath = a.path;
           addName = a.name;
@@ -13218,9 +13416,9 @@ ${changed2.map((c) => `  - ${c}
       }
       const resolvedFile = resolvedPathFor(cfg.ship.stateDir, routeName);
       let resolvedRemotes;
-      if (existsSync21(resolvedFile)) {
+      if (existsSync23(resolvedFile)) {
         try {
-          resolvedRemotes = JSON.parse(readFileSync15(resolvedFile, "utf8"));
+          resolvedRemotes = JSON.parse(readFileSync16(resolvedFile, "utf8"));
         } catch {
         }
       }
@@ -13235,14 +13433,14 @@ ${changed2.map((c) => `  - ${c}
           for (const r of repos) {
             const origin2 = originOf(r.dir);
             const row = matchRepoName(origin2, resolvedRemotes);
-            const note = !existsSync21(r.dir) ? "missing on disk" : row ? `Repos row: ${row}` : `no Repos row matches ${normalizeRemote(origin2) ?? "this checkout (no origin remote)"}`;
+            const note = !existsSync23(r.dir) ? "missing on disk" : row ? `Repos row: ${row}` : `no Repos row matches ${normalizeRemote(origin2) ?? "this checkout (no origin remote)"}`;
             process.stdout.write(`${r.name}	${r.dir}	${note}
 `);
           }
           break;
         }
-        const target = resolvePath(addPath.replace(/^~(?=\/|$)/, homedir6()));
-        const top = existsSync21(target) ? gitOk(target, ["rev-parse", "--show-toplevel"]) : null;
+        const target = resolvePath(addPath.replace(/^~(?=\/|$)/, homedir7()));
+        const top = existsSync23(target) ? gitOk(target, ["rev-parse", "--show-toplevel"]) : null;
         if (!top) throw new ReposError(`${target} is not a git checkout`);
         const origin = originOf(top);
         const plan = planRepoAdd({
@@ -13291,15 +13489,15 @@ ${changed2.map((c) => `  - ${c}
           const created = await rowTracker.createRepoRow(rowPayload);
           process.stdout.write(`created Repos row ${String(rowPayload.name)} (${String(rowPayload.remote)}) ${created.id}
 `);
-          if (existsSync21(resolvedFile)) {
-            const raw = JSON.parse(readFileSync15(resolvedFile, "utf8"));
+          if (existsSync23(resolvedFile)) {
+            const raw = JSON.parse(readFileSync16(resolvedFile, "utf8"));
             raw.repoNames = { ...raw.repoNames, [created.id]: String(rowPayload.name) };
             raw.repoRemotes = { ...raw.repoRemotes, [created.id]: String(rowPayload.remote) };
-            writeFileSync10(resolvedFile, `${JSON.stringify(raw, null, 2)}
+            writeFileSync13(resolvedFile, `${JSON.stringify(raw, null, 2)}
 `);
           }
         }
-        writeFileSync10(cfg.configFile, plan.text);
+        writeFileSync13(cfg.configFile, plan.text);
         process.stdout.write(`added ${top} to ${routeName} as ${plan.mode === "dir" ? "dir" : `repos.${plan.name}`} in ${cfg.configFile}
 `);
       } catch (e) {
@@ -13538,10 +13736,10 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           operator = await pickOperator(found.holds);
         }
         let previous;
-        const hadPreviousFile = existsSync21(resolvedPath);
+        const hadPreviousFile = existsSync23(resolvedPath);
         if (hadPreviousFile) {
           try {
-            previous = JSON.parse(readFileSync15(resolvedPath, "utf8"));
+            previous = JSON.parse(readFileSync16(resolvedPath, "utf8"));
           } catch {
           }
         }
@@ -13602,10 +13800,10 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           process.stderr.write(`(dry run) would write resolved ids to ${resolvedPath}
 `);
         } else {
-          mkdirSync12(dirname12(resolvedPath), { recursive: true });
+          mkdirSync13(dirname12(resolvedPath), { recursive: true });
           if (hadPreviousFile) copyFileSync2(resolvedPath, `${resolvedPath}.bak`);
           const tmpPath = `${resolvedPath}.tmp${process.pid}`;
-          writeFileSync10(tmpPath, `${JSON.stringify(resolved, null, 2)}
+          writeFileSync13(tmpPath, `${JSON.stringify(resolved, null, 2)}
 `);
           renameSync2(tmpPath, resolvedPath);
           process.stderr.write(`Resolved ids written to ${resolvedPath}
@@ -13619,8 +13817,8 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
             process.stderr.write(`(dry run) would write the minted API key to ${apiKeyFile}
 `);
           } else {
-            mkdirSync12(dirname12(apiKeyFile), { recursive: true });
-            writeFileSync10(apiKeyFile, `${apiKeyVar}=${apiKey}
+            mkdirSync13(dirname12(apiKeyFile), { recursive: true });
+            writeFileSync13(apiKeyFile, `${apiKeyVar}=${apiKey}
 `, { mode: 384 });
             process.stderr.write(`API key written to ${apiKeyFile}
 `);
@@ -13629,7 +13827,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
         const keyPersisted = keychainBacked || apiKeyFile !== void 0;
         const wizard = firstRun;
         const writeFirstRun = wizard !== void 0 && !dryRun && keyPersisted;
-        const routeDir = value("dir") ?? (writeFirstRun ? join21(DEFAULT_REPOS_BASE_PATH, found.workspaceSlug) : void 0);
+        const routeDir = value("dir") ?? (writeFirstRun ? join22(DEFAULT_REPOS_BASE_PATH, found.workspaceSlug) : void 0);
         const routeBlock = renderConnection(
           found,
           route2,
@@ -14116,7 +14314,8 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
     }
     case "disconnect": {
       const url = mcpUrlFor(value("base-url") ?? cfg.routes[0]?.baseUrl ?? DEFAULT_BASE_URL);
-      for (const h of shipPair(cfg.ship)) {
+      const disconnectHarnesses = /* @__PURE__ */ new Set([...shipPair(cfg.ship), ...shipToolchains(cfg.ship).map((t) => t.harness).filter(isPairHarness)]);
+      for (const h of disconnectHarnesses) {
         process.stderr.write(`${pairInstallerFor(h).removePair({ url, bin: cfg.ship.agent.bin, dryRun })}
 `);
       }
@@ -14126,6 +14325,38 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
       if (!await installScheduler({ replace: flag("replace") })) process.exit(2);
       break;
     }
+    case "reload": {
+      const sentinel = reloadSentinelFor(cfg.ship.stateDir);
+      if (dryRun) {
+        process.stdout.write(`would write ${sentinel}
+`);
+        break;
+      }
+      const host = hostPlatform();
+      const control = host === "windows" ? null : planDaemonControl(CREW_HOME, host, detectSystemd());
+      const unitStatus = control?.statusCommand ? spawnSync5(control.statusCommand[0], control.statusCommand.slice(1), { cwd: CREW_HOME, encoding: "utf8" }) : null;
+      const unitRunning = unitStatus !== null && !unitStatus.error && unitStatus.status === 0;
+      if (!unitRunning) {
+        process.stdout.write("crew reload: no daemon unit is running \u2014 nothing to reload (the next run reads crew.yaml fresh)\n");
+        break;
+      }
+      mkdirSync13(cfg.ship.stateDir, { recursive: true });
+      writeFileSync13(sentinel, `${(/* @__PURE__ */ new Date()).toISOString()}
+`);
+      process.stdout.write("crew reload: requested \u2014 the daemon finishes its in-flight pass, then relaunches with the new config\n");
+      if (flag("now") && control?.stopCommand && control.startCommand) {
+        for (const cmd of [control.stopCommand, control.startCommand]) {
+          const res = spawnSync5(cmd[0], cmd.slice(1), { cwd: CREW_HOME, encoding: "utf8" });
+          if (cmd === control.startCommand && (res.error || res.status !== 0)) {
+            process.stderr.write(`crew reload: ${cmd.join(" ")} exited ${res.status ?? "error"}
+`);
+            process.exitCode = 1;
+          }
+        }
+        process.stdout.write("crew reload: restarted the daemon unit now\n");
+      }
+      break;
+    }
     case "uninstall": {
       const host = hostPlatform();
       if (host === "windows") {
@@ -14161,7 +14392,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
     }
     case "log": {
       try {
-        const text = readFileSync15(cfg.ship.logFile, "utf8").split("\n");
+        const text = readFileSync16(cfg.ship.logFile, "utf8").split("\n");
         process.stdout.write(`${text.slice(-(Number(value("tail")) || 40)).join("\n")}
 `);
       } catch {
@@ -14371,13 +14602,23 @@ routes:            ${cfg.routes.map((c) => c.route).join(", ")}
       );
       try {
         const evFile = eventFileFor(cfg.ship.stateDir);
-        const evSize = existsSync21(evFile) ? statSync9(evFile).size : 0;
+        const evSize = existsSync23(evFile) ? statSync9(evFile).size : 0;
         process.stdout.write(
           evSize > cfg.ship.eventsRotateBytes * 4 ? `events log:        WARN ${evFile} is ${Math.round(evSize / 1048576)} MB (> 4x eventsRotateBytes); run \`crew reap\` to rotate it
 ` : "events log:        ok\n"
         );
       } catch {
       }
+      const daemonStartedAt = readDaemonStarted(cfg.ship.stateDir);
+      if (daemonStartedAt !== null) {
+        const changed2 = configChangedAfter(daemonConfigPaths(cfg), daemonStartedAt);
+        if (changed2) {
+          process.stdout.write(
+            `daemon config:     WARN ${changed2} changed at ${new Date(statSync9(changed2).mtimeMs).toISOString()} but the daemon started at ${new Date(daemonStartedAt).toISOString()} \u2014 run \`crew reload\`
+`
+          );
+        }
+      }
       const tracker = new Tracker(route, cfg.ship);
       const contractProblems = validateContract(tracker.contract);
       process.stdout.write(