@tablation/crew 0.73.4 → 0.74.0

package/dist/cli.js

@@ -128,176 +128,10 @@ function formatStaleOwnLock(scope, holder) {
 `;
 }
 
-// src/selftest.ts
-import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync19, mkdirSync as mkdirSync10, mkdtempSync, readFileSync as readFileSync16, rmSync as rmSync9, writeFileSync as writeFileSync11 } from "fs";
-import { tmpdir as tmpdir2 } from "os";
-import { join as join19 } from "path";
-
-// src/agent.ts
-import { spawn as spawn2, spawnSync as spawnSync5 } from "child_process";
-import { readFileSync as readFileSync15, existsSync as existsSync18, statSync as statSync5, mkdirSync as mkdirSync9, writeFileSync as writeFileSync10, createWriteStream, openSync as openSync3, closeSync as closeSync3, readSync } from "fs";
-import { StringDecoder } from "string_decoder";
-import { finished } from "stream/promises";
-import { join as join18, dirname as dirname7, basename as basename7 } from "path";
-import { createHash as createHash3 } from "crypto";
-
-// src/config.ts
-import { readFileSync as readFileSync7, existsSync as existsSync7 } from "fs";
-import { resolve, dirname as dirname3, isAbsolute, join as join8, basename as basename3 } from "path";
-import { homedir as homedir5, tmpdir } from "os";
-import { parse as parse2 } from "yaml";
-
-// src/events.ts
-import {
-  appendFileSync,
-  mkdirSync,
-  existsSync as existsSync2,
-  statSync,
-  renameSync,
-  openSync,
-  closeSync,
-  rmSync
-} from "fs";
-import { join, dirname } from "path";
-function render(e) {
-  const scope = e.role ? `${e.step}[${e.role}]` : e.step;
-  const ticket = e.ticket ? ` ${e.ticket}` : "";
-  const level = e.level === "info" ? "" : `${e.level.toUpperCase()}: `;
-  return `${e.at} ${scope}:${ticket} ${level}${e.message}`;
-}
-var DEFAULT_EVENTS_ROTATE_BYTES = 64 * 1024 * 1024;
-var ROTATED_EVENTS_RE = /^events\.\d{8}T\d{6}Z(?:-\d+)?\.jsonl$/;
-var ROTATE_LOCK_STALE_MS = 6e4;
-function rotateEventsFile(file, maxBytes, now = /* @__PURE__ */ new Date()) {
-  try {
-    if (!existsSync2(file) || statSync(file).size <= maxBytes) return void 0;
-  } catch {
-    return void 0;
-  }
-  const lock = `${file}.rotate.lock`;
-  try {
-    try {
-      closeSync(openSync(lock, "wx"));
-    } catch {
-      try {
-        if (Date.now() - statSync(lock).mtimeMs < ROTATE_LOCK_STALE_MS) return void 0;
-        rmSync(lock, { force: true });
-        closeSync(openSync(lock, "wx"));
-      } catch {
-        return void 0;
-      }
-    }
-    try {
-      if (statSync(file).size <= maxBytes) return void 0;
-      const stamp = now.toISOString().replace(/[-:]/g, "").replace(/\.\d+Z$/, "Z");
-      let dest = join(dirname(file), `events.${stamp}.jsonl`);
-      for (let n = 1; existsSync2(dest); n++) dest = join(dirname(file), `events.${stamp}-${n}.jsonl`);
-      renameSync(file, dest);
-      return dest;
-    } finally {
-      rmSync(lock, { force: true });
-    }
-  } catch {
-    return void 0;
-  }
-}
-var Emitter = class _Emitter {
-  cycle;
-  opts;
-  now;
-  step = "poll";
-  role;
-  constructor(opts) {
-    this.opts = opts;
-    this.now = opts.now ?? (() => /* @__PURE__ */ new Date());
-    this.cycle = opts.cycleId ?? this.now().toISOString().replace(/[-:.TZ]/g, "").slice(0, 14);
-    for (const f of [opts.eventFile, opts.logFile]) {
-      if (!f) continue;
-      try {
-        mkdirSync(dirname(f), { recursive: true });
-      } catch {
-      }
-    }
-  }
-  /** Everything emitted after this belongs to `step`, until the next one. */
-  enter(step, role) {
-    this.step = step;
-    this.role = role;
-  }
-  emit(message, extra = {}) {
-    const e = {
-      at: this.now().toISOString(),
-      cycle: this.cycle,
-      route: this.opts.route,
-      step: extra.step ?? this.step,
-      level: extra.level ?? "info",
-      message,
-      ...extra.role ?? this.role ? { role: extra.role ?? this.role } : {},
-      ...extra.ticket ? { ticket: extra.ticket } : {},
-      ...extra.data ? { data: extra.data } : {}
-    };
-    const line = render(e);
-    try {
-      if (this.opts.eventFile && this.opts.rotateBytes) rotateEventsFile(this.opts.eventFile, this.opts.rotateBytes, this.now());
-    } catch {
-    }
-    try {
-      if (this.opts.eventFile) appendFileSync(this.opts.eventFile, `${JSON.stringify(e)}
-`);
-    } catch {
-    }
-    try {
-      if (this.opts.logFile) appendFileSync(this.opts.logFile, `${line}
-`);
-    } catch {
-    }
-    try {
-      (this.opts.console ?? ((l) => process.stderr.write(`${l}
-`)))(line);
-    } catch {
-    }
-    return e;
-  }
-  warn(message, extra = {}) {
-    return this.emit(message, { ...extra, level: "warn" });
-  }
-  error(message, extra = {}) {
-    return this.emit(message, { ...extra, level: "error" });
-  }
-  /**
-   * A view of this emitter labelling every event with a different route,
-   * sharing the same sinks and cycle id. For a fleet-wide run, the top-level
-   * Emitter is stamped with just one route (see cli.ts) — a phase that
-   * actually knows which route it's working (release, per-repo poll) uses
-   * this instead, so its events aren't all attributed to `routes[0]`.
-   */
-  forRoute(route) {
-    return new _Emitter({ ...this.opts, route, cycleId: this.cycle });
-  }
-  /** Times a step and emits its outcome, so a view can show duration. */
-  async timed(step, message, fn, role) {
-    this.enter(step, role);
-    const started = this.now().getTime();
-    try {
-      const result = await fn();
-      this.emit(message, { data: { ms: this.now().getTime() - started, ok: true } });
-      return result;
-    } catch (err) {
-      this.error(`${message} \u2014 ${err.message}`, {
-        data: { ms: this.now().getTime() - started, ok: false }
-      });
-      throw err;
-    }
-  }
-};
-var eventFileFor = (stateDir) => join(stateDir, "events.jsonl");
-
-// src/pair-install.ts
-import { existsSync as existsSync5, rmSync as rmSync4, writeFileSync as writeFileSync4 } from "fs";
-import { spawnSync as spawnSync3 } from "child_process";
-import { homedir as homedir4 } from "os";
-import { join as join6 } from "path";
+// src/adapters/claude.ts
+import { readFileSync as readFileSync4 } from "fs";
+import { homedir as homedir3 } from "os";
+import { join as join4 } from "path";
 
 // src/stream.ts
 function toolTarget(name, input) {
@@ -349,19 +183,19 @@ function extractResult(line) {
 
 // src/claude-mcp.ts
 import { spawnSync } from "child_process";
-import { readFileSync as readFileSync3 } from "fs";
+import { readFileSync as readFileSync2 } from "fs";
 import { homedir } from "os";
-import { join as join3 } from "path";
+import { join as join2 } from "path";
 
 // src/mcp-registrations.ts
 import { createHash } from "crypto";
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync } from "fs";
-import { join as join2 } from "path";
-var fileFor = (stateDir) => join2(stateDir, "mcp-registrations.json");
+import { mkdirSync, readFileSync, writeFileSync } from "fs";
+import { join } from "path";
+var fileFor = (stateDir) => join(stateDir, "mcp-registrations.json");
 var keyFingerprint = (key) => createHash("sha256").update(key).digest("hex").slice(0, 8);
 function readMcpRegistrations(stateDir) {
   try {
-    const j = JSON.parse(readFileSync2(fileFor(stateDir), "utf8"));
+    const j = JSON.parse(readFileSync(fileFor(stateDir), "utf8"));
     return Array.isArray(j) ? j : [];
   } catch {
     return [];
@@ -369,7 +203,7 @@ function readMcpRegistrations(stateDir) {
 }
 function recordMcpRegistration(stateDir, r, now = /* @__PURE__ */ new Date()) {
   const rest = readMcpRegistrations(stateDir).filter((x) => !(x.harness === r.harness && x.scope === r.scope && x.name === r.name));
-  mkdirSync2(stateDir, { recursive: true });
+  mkdirSync(stateDir, { recursive: true });
   writeFileSync(fileFor(stateDir), `${JSON.stringify([...rest, { ...r, at: now.toISOString() }], null, 2)}
 `, { mode: 384 });
 }
@@ -393,7 +227,7 @@ function runClaude(bin, args) {
 }
 function userScopeEntry(home) {
   try {
-    const j = JSON.parse(readFileSync3(join3(home, ".claude.json"), "utf8"));
+    const j = JSON.parse(readFileSync2(join2(home, ".claude.json"), "utf8"));
     return j.mcpServers?.[MCP_SERVER_NAME];
   } catch {
     return void 0;
@@ -477,8 +311,8 @@ function removeClaudeMcp(o) {
 }
 
 // src/launcher.ts
-import { basename, join as join4 } from "path";
-import { existsSync as existsSync3, readFileSync as readFileSync4, readdirSync } from "fs";
+import { basename, join as join3 } from "path";
+import { existsSync as existsSync2, readFileSync as readFileSync3, readdirSync } from "fs";
 import { homedir as homedir2 } from "os";
 function isOriLauncher(spec) {
   return !!spec.launcher && basename(spec.launcher) === "ori";
@@ -487,7 +321,7 @@ function isOmlxLauncher(spec) {
   return !!spec.launcher && basename(spec.launcher) === "omlx";
 }
 function defaultOmlxBin(home = homedir2()) {
-  return join4(home, ".omlx", "bin", "omlx");
+  return join3(home, ".omlx", "bin", "omlx");
 }
 function launcherExecutable(spec, home) {
   if (!spec.launcher) return void 0;
@@ -540,8 +374,8 @@ function omlxModelPresent(model, dirs) {
   });
 }
 function readOmlxSettings(home = homedir2()) {
-  const p = join4(home, ".omlx", "settings.json");
-  return existsSync3(p) ? parseOmlxSettings(readFileSync4(p, "utf8")) : void 0;
+  const p = join3(home, ".omlx", "settings.json");
+  return existsSync2(p) ? parseOmlxSettings(readFileSync3(p, "utf8")) : void 0;
 }
 
 // src/capability.ts
@@ -592,6 +426,24 @@ var claudePair = {
   },
   removePair: (o) => removeClaudeMcp({ bin: o.bin ?? "claude", dryRun: o.dryRun })
 };
+function subscriptionSettings() {
+  return JSON.stringify({ env: Object.fromEntries(BILLING_VARS_TO_UNSET.map((v) => [v, ""])) });
+}
+function describeClaudeAuth(spec, env = process.env, home = homedir3()) {
+  if (spec.auth === "subscription") return "subscription (settings override)";
+  let fromSettings;
+  try {
+    const parsed = JSON.parse(readFileSync4(join4(home, ".claude", "settings.json"), "utf8"));
+    const e = parsed.env ?? {};
+    const on = (k) => e[k] !== void 0 && e[k] !== "" && e[k] !== "0";
+    if (on("CLAUDE_CODE_USE_VERTEX")) fromSettings = "vertex from ~/.claude/settings.json";
+    else if (on("ANTHROPIC_API_KEY") || on("ANTHROPIC_AUTH_TOKEN")) fromSettings = "API key from ~/.claude/settings.json";
+  } catch {
+  }
+  if (fromSettings) return `inherit: ${fromSettings}`;
+  const shell = BILLING_VARS_TO_UNSET.find((v) => v.startsWith("ANTHROPIC_API") && env[v]);
+  return shell ? `inherit: ${shell} in env (unset at exec)` : "inherit: subscription login";
+}
 var claudeAdapter = {
   harness: "claude",
   displayName: "Claude Code",
@@ -646,6 +498,7 @@ var claudeAdapter = {
           }
         }
       })] : [],
+      ...spec.auth === "subscription" ? ["--settings", subscriptionSettings()] : [],
       ...spec.args
     ];
     return wrapInvocation(spec, { model: o.model, args });
@@ -672,14 +525,185 @@ var claudeAdapter = {
   ensureMcpResult: ensureClaudeMcpResult
 };
 
+// src/selftest.ts
+import { spawn as spawn3 } from "child_process";
+import { existsSync as existsSync19, mkdirSync as mkdirSync10, mkdtempSync, readFileSync as readFileSync17, rmSync as rmSync9, writeFileSync as writeFileSync11 } from "fs";
+import { tmpdir as tmpdir2 } from "os";
+import { join as join20 } from "path";
+
+// src/agent.ts
+import { spawn as spawn2, spawnSync as spawnSync5 } from "child_process";
+import { readFileSync as readFileSync16, existsSync as existsSync18, statSync as statSync5, mkdirSync as mkdirSync9, writeFileSync as writeFileSync10, createWriteStream, openSync as openSync3, closeSync as closeSync3, readSync } from "fs";
+import { StringDecoder } from "string_decoder";
+import { finished } from "stream/promises";
+import { join as join19, dirname as dirname7, basename as basename7 } from "path";
+import { createHash as createHash3 } from "crypto";
+
+// src/config.ts
+import { readFileSync as readFileSync8, existsSync as existsSync7 } from "fs";
+import { resolve, dirname as dirname3, isAbsolute, join as join9, basename as basename3 } from "path";
+import { homedir as homedir6, tmpdir } from "os";
+import { parse as parse2 } from "yaml";
+
+// src/events.ts
+import {
+  appendFileSync,
+  mkdirSync as mkdirSync2,
+  existsSync as existsSync3,
+  statSync,
+  renameSync,
+  openSync,
+  closeSync,
+  rmSync
+} from "fs";
+import { join as join5, dirname } from "path";
+function render(e) {
+  const scope = e.role ? `${e.step}[${e.role}]` : e.step;
+  const ticket = e.ticket ? ` ${e.ticket}` : "";
+  const level = e.level === "info" ? "" : `${e.level.toUpperCase()}: `;
+  return `${e.at} ${scope}:${ticket} ${level}${e.message}`;
+}
+var DEFAULT_EVENTS_ROTATE_BYTES = 64 * 1024 * 1024;
+var ROTATED_EVENTS_RE = /^events\.\d{8}T\d{6}Z(?:-\d+)?\.jsonl$/;
+var ROTATE_LOCK_STALE_MS = 6e4;
+function rotateEventsFile(file, maxBytes, now = /* @__PURE__ */ new Date()) {
+  try {
+    if (!existsSync3(file) || statSync(file).size <= maxBytes) return void 0;
+  } catch {
+    return void 0;
+  }
+  const lock = `${file}.rotate.lock`;
+  try {
+    try {
+      closeSync(openSync(lock, "wx"));
+    } catch {
+      try {
+        if (Date.now() - statSync(lock).mtimeMs < ROTATE_LOCK_STALE_MS) return void 0;
+        rmSync(lock, { force: true });
+        closeSync(openSync(lock, "wx"));
+      } catch {
+        return void 0;
+      }
+    }
+    try {
+      if (statSync(file).size <= maxBytes) return void 0;
+      const stamp = now.toISOString().replace(/[-:]/g, "").replace(/\.\d+Z$/, "Z");
+      let dest = join5(dirname(file), `events.${stamp}.jsonl`);
+      for (let n = 1; existsSync3(dest); n++) dest = join5(dirname(file), `events.${stamp}-${n}.jsonl`);
+      renameSync(file, dest);
+      return dest;
+    } finally {
+      rmSync(lock, { force: true });
+    }
+  } catch {
+    return void 0;
+  }
+}
+var Emitter = class _Emitter {
+  cycle;
+  opts;
+  now;
+  step = "poll";
+  role;
+  constructor(opts) {
+    this.opts = opts;
+    this.now = opts.now ?? (() => /* @__PURE__ */ new Date());
+    this.cycle = opts.cycleId ?? this.now().toISOString().replace(/[-:.TZ]/g, "").slice(0, 14);
+    for (const f of [opts.eventFile, opts.logFile]) {
+      if (!f) continue;
+      try {
+        mkdirSync2(dirname(f), { recursive: true });
+      } catch {
+      }
+    }
+  }
+  /** Everything emitted after this belongs to `step`, until the next one. */
+  enter(step, role) {
+    this.step = step;
+    this.role = role;
+  }
+  emit(message, extra = {}) {
+    const e = {
+      at: this.now().toISOString(),
+      cycle: this.cycle,
+      route: this.opts.route,
+      step: extra.step ?? this.step,
+      level: extra.level ?? "info",
+      message,
+      ...extra.role ?? this.role ? { role: extra.role ?? this.role } : {},
+      ...extra.ticket ? { ticket: extra.ticket } : {},
+      ...extra.data ? { data: extra.data } : {}
+    };
+    const line = render(e);
+    try {
+      if (this.opts.eventFile && this.opts.rotateBytes) rotateEventsFile(this.opts.eventFile, this.opts.rotateBytes, this.now());
+    } catch {
+    }
+    try {
+      if (this.opts.eventFile) appendFileSync(this.opts.eventFile, `${JSON.stringify(e)}
+`);
+    } catch {
+    }
+    try {
+      if (this.opts.logFile) appendFileSync(this.opts.logFile, `${line}
+`);
+    } catch {
+    }
+    try {
+      (this.opts.console ?? ((l) => process.stderr.write(`${l}
+`)))(line);
+    } catch {
+    }
+    return e;
+  }
+  warn(message, extra = {}) {
+    return this.emit(message, { ...extra, level: "warn" });
+  }
+  error(message, extra = {}) {
+    return this.emit(message, { ...extra, level: "error" });
+  }
+  /**
+   * A view of this emitter labelling every event with a different route,
+   * sharing the same sinks and cycle id. For a fleet-wide run, the top-level
+   * Emitter is stamped with just one route (see cli.ts) — a phase that
+   * actually knows which route it's working (release, per-repo poll) uses
+   * this instead, so its events aren't all attributed to `routes[0]`.
+   */
+  forRoute(route) {
+    return new _Emitter({ ...this.opts, route, cycleId: this.cycle });
+  }
+  /** Times a step and emits its outcome, so a view can show duration. */
+  async timed(step, message, fn, role) {
+    this.enter(step, role);
+    const started = this.now().getTime();
+    try {
+      const result = await fn();
+      this.emit(message, { data: { ms: this.now().getTime() - started, ok: true } });
+      return result;
+    } catch (err) {
+      this.error(`${message} \u2014 ${err.message}`, {
+        data: { ms: this.now().getTime() - started, ok: false }
+      });
+      throw err;
+    }
+  }
+};
+var eventFileFor = (stateDir) => join5(stateDir, "events.jsonl");
+
+// src/pair-install.ts
+import { existsSync as existsSync5, rmSync as rmSync4, writeFileSync as writeFileSync4 } from "fs";
+import { spawnSync as spawnSync3 } from "child_process";
+import { homedir as homedir5 } from "os";
+import { join as join7 } from "path";
+
 // src/adapters/codex.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { homedir as homedir3 } from "os";
-import { join as join5 } from "path";
+import { homedir as homedir4 } from "os";
+import { join as join6 } from "path";
 import { rmSync as rmSync3, writeFileSync as writeFileSync3 } from "fs";
 
 // src/pair-files.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync2, rmSync as rmSync2 } from "fs";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync6, writeFileSync as writeFileSync2, rmSync as rmSync2 } from "fs";
 import { dirname as dirname2 } from "path";
 var PAIR_BLOCK_START = "<!-- crew:pair start -->";
 var PAIR_BLOCK_END = "<!-- crew:pair end -->";
@@ -720,7 +744,7 @@ function removePairBlock(text) {
   return text.replace(new RegExp(`\\n*${BLOCK_RE.source}`), "\n").replace(/^\n+/, "").replace(/\n{3,}/g, "\n\n");
 }
 function readIfExists(path) {
-  return existsSync4(path) ? readFileSync5(path, "utf8") : void 0;
+  return existsSync4(path) ? readFileSync6(path, "utf8") : void 0;
 }
 function writeFileMkdir(path, text) {
   mkdirSync3(dirname2(path), { recursive: true });
@@ -867,8 +891,8 @@ function codexTable(url) {
   return [`[mcp_servers.${SERVER}]`, `url = ${tomlString(url)}`, `bearer_token_env_var = ${tomlString(PAIR_KEY_VAR)}`];
 }
 var codexPaths = (home) => ({
-  instructions: join5(home, ".codex", "AGENTS.md"),
-  config: join5(home, ".codex", "config.toml")
+  instructions: join6(home, ".codex", "AGENTS.md"),
+  config: join6(home, ".codex", "config.toml")
 });
 function codexMcpState(config, url) {
   const lines = config.split("\n");
@@ -884,7 +908,7 @@ var codexPair = {
   harness: "codex",
   displayName: "Codex",
   installPair(o) {
-    const p = codexPaths(o.home ?? homedir3());
+    const p = codexPaths(o.home ?? homedir4());
     const config = readIfExists(p.config) ?? "";
     const st = codexMcpState(config, o.url);
     if (st.state === "different" && !o.replace) {
@@ -901,7 +925,7 @@ var codexPair = {
     return `pair(codex): ${o.dryRun ? "(dry run) would install" : "installed"} the Pair block in ${p.instructions} and ${SERVER} in ${p.config} (key read from $${PAIR_KEY_VAR})`;
   },
   verifyPair(o) {
-    const p = codexPaths(o.home ?? homedir3());
+    const p = codexPaths(o.home ?? homedir4());
     const b = blockVerdict(p.instructions, "codex");
     if (!b.ok) return b;
     const st = codexMcpState(readIfExists(p.config) ?? "", o.url);
@@ -910,7 +934,7 @@ var codexPair = {
     return { ok: true, detail: `${p.instructions}, ${p.config}` };
   },
   removePair(o) {
-    const p = codexPaths(o.home ?? homedir3());
+    const p = codexPaths(o.home ?? homedir4());
     const hadBlock = removeBlockFile(p.instructions, o.dryRun);
     const config = readIfExists(p.config);
     const st = codexMcpState(config ?? "", o.url);
@@ -996,11 +1020,11 @@ var codexAdapter = {
   extractTurnTokens: extractCodexTurnTokens,
   inspectMcp(o) {
     if (binMissing(o.bin)) return { state: "no-binary" };
-    const st = codexMcpState(readIfExists(codexPaths(o.home ?? homedir3()).config) ?? "", o.url);
+    const st = codexMcpState(readIfExists(codexPaths(o.home ?? homedir4()).config) ?? "", o.url);
     return st.state === "registered" ? { state: "registered", url: o.url } : st;
   },
   ensureMcp(o) {
-    const p = codexPaths(o.home ?? homedir3());
+    const p = codexPaths(o.home ?? homedir4());
     const config = readIfExists(p.config) ?? "";
     const st = codexMcpState(config, o.url);
     if (st.state === "registered") return `mcp: ${SERVER} already registered with Codex \u2192 ${o.url}`;
@@ -1015,8 +1039,8 @@ var codexAdapter = {
 
 // src/pair-install.ts
 var geminiPaths = (home) => ({
-  instructions: join6(home, ".gemini", "GEMINI.md"),
-  config: join6(home, ".gemini", "settings.json")
+  instructions: join7(home, ".gemini", "GEMINI.md"),
+  config: join7(home, ".gemini", "settings.json")
 });
 function readGeminiSettings(path) {
   const text = readIfExists(path);
@@ -1037,14 +1061,14 @@ function geminiMcpState(s, url) {
   return { state: "registered" };
 }
 function inspectGeminiMcp(o) {
-  const p = geminiPaths(o.home ?? homedir4());
+  const p = geminiPaths(o.home ?? homedir5());
   const settings = readGeminiSettings(p.config);
   if (!settings) return { state: "different", detail: `${p.config} is not a JSON object` };
   const st = geminiMcpState(settings, o.url);
   return st.state === "registered" ? { state: "registered", url: o.url } : st;
 }
 function ensureGeminiMcp(o) {
-  const p = geminiPaths(o.home ?? homedir4());
+  const p = geminiPaths(o.home ?? homedir5());
   const settings = readGeminiSettings(p.config);
   if (!settings) return `gemini: ${p.config} is not a JSON object \u2014 fix it by hand; nothing was written`;
   const st = geminiMcpState(settings, o.url);
@@ -1062,7 +1086,7 @@ var geminiPair = {
   harness: "gemini",
   displayName: "Gemini CLI",
   installPair(o) {
-    const p = geminiPaths(o.home ?? homedir4());
+    const p = geminiPaths(o.home ?? homedir5());
     const settings = readGeminiSettings(p.config);
     if (!settings) return `pair(gemini): ${p.config} is not a JSON object \u2014 fix it by hand; nothing was written`;
     const st = geminiMcpState(settings, o.url);
@@ -1081,7 +1105,7 @@ var geminiPair = {
     return `pair(gemini): ${o.dryRun ? "(dry run) would install" : "installed"} the Pair block in ${p.instructions} and ${SERVER} in ${p.config} (key read from $${PAIR_KEY_VAR})`;
   },
   verifyPair(o) {
-    const p = geminiPaths(o.home ?? homedir4());
+    const p = geminiPaths(o.home ?? homedir5());
     const b = blockVerdict(p.instructions, "gemini");
     if (!b.ok) return b;
     const settings = readGeminiSettings(p.config);
@@ -1092,7 +1116,7 @@ var geminiPair = {
     return { ok: true, detail: `${p.instructions}, ${p.config}` };
   },
   removePair(o) {
-    const p = geminiPaths(o.home ?? homedir4());
+    const p = geminiPaths(o.home ?? homedir5());
     const hadBlock = removeBlockFile(p.instructions, o.dryRun);
     const settings = readGeminiSettings(p.config);
     const st = settings ? geminiMcpState(settings, o.url) : { state: "missing" };
@@ -1113,10 +1137,10 @@ var geminiPair = {
 };
 var VSCODE_FLAVOURS = ["Code", "Code - Insiders"];
 function vscodeUserDirs(o) {
-  const home = o.home ?? homedir4();
+  const home = o.home ?? homedir5();
   const platform2 = o.platform ?? process.platform;
-  const root = platform2 === "darwin" ? join6(home, "Library", "Application Support") : platform2 === "win32" ? process.env.APPDATA ?? join6(home, "AppData", "Roaming") : join6(home, ".config");
-  const all = VSCODE_FLAVOURS.map((f) => join6(root, f, "User"));
+  const root = platform2 === "darwin" ? join7(home, "Library", "Application Support") : platform2 === "win32" ? process.env.APPDATA ?? join7(home, "AppData", "Roaming") : join7(home, ".config");
+  const all = VSCODE_FLAVOURS.map((f) => join7(root, f, "User"));
   const present = all.filter((d) => existsSync5(d));
   return present.length > 0 ? present : [all[0]];
 }
@@ -1164,8 +1188,8 @@ var copilotPair = {
   installPair(o) {
     const lines = [];
     for (const dir of vscodeUserDirs(o)) {
-      const mcpPath = join6(dir, "mcp.json");
-      const instrPath = join6(dir, "prompts", "crew-pair.instructions.md");
+      const mcpPath = join7(dir, "mcp.json");
+      const instrPath = join7(dir, "prompts", "crew-pair.instructions.md");
       const settings = readVscodeMcp(mcpPath);
       if (!settings) {
         lines.push(`pair(copilot): ${mcpPath} is not a plain JSON object (comments are not supported) \u2014 fix it by hand; nothing was written there`);
@@ -1193,8 +1217,8 @@ var copilotPair = {
   },
   verifyPair(o) {
     const verdicts = vscodeUserDirs(o).map((dir) => {
-      const instrPath = join6(dir, "prompts", "crew-pair.instructions.md");
-      const mcpPath = join6(dir, "mcp.json");
+      const instrPath = join7(dir, "prompts", "crew-pair.instructions.md");
+      const mcpPath = join7(dir, "mcp.json");
       const b = blockVerdict(instrPath, "copilot");
       if (!b.ok) return b;
       const settings = readVscodeMcp(mcpPath);
@@ -1209,8 +1233,8 @@ var copilotPair = {
   removePair(o) {
     const lines = [];
     for (const dir of vscodeUserDirs(o)) {
-      const mcpPath = join6(dir, "mcp.json");
-      const hadBlock = removeCopilotInstructions(join6(dir, "prompts", "crew-pair.instructions.md"), o.dryRun);
+      const mcpPath = join7(dir, "mcp.json");
+      const hadBlock = removeCopilotInstructions(join7(dir, "prompts", "crew-pair.instructions.md"), o.dryRun);
       const settings = readVscodeMcp(mcpPath);
       const st = settings ? copilotMcpState(settings, o.url) : { state: "missing" };
       const hadMcp = st.state === "registered";
@@ -1509,8 +1533,8 @@ function explain(ship, required) {
 }
 
 // src/repo-config.ts
-import { readFileSync as readFileSync6, existsSync as existsSync6 } from "fs";
-import { join as join7, basename as basename2 } from "path";
+import { readFileSync as readFileSync7, existsSync as existsSync6 } from "fs";
+import { join as join8, basename as basename2 } from "path";
 import { parse } from "yaml";
 var SPEC_VERSION = 1;
 var REPO_CONFIG_FILENAMES = [".crew.yaml", ".crew.yml", ".crew.json"];
@@ -1593,7 +1617,7 @@ var MODES = ["local", "integrate", "ci_manual", "ci_auto", "external"];
 var PROVIDERS = ["github", "buildkite", "other", "none"];
 function findRepoConfig(dir) {
   for (const name of REPO_CONFIG_FILENAMES) {
-    const p = join7(dir, name);
+    const p = join8(dir, name);
     if (existsSync6(p)) return p;
   }
   return null;
@@ -1832,7 +1856,7 @@ function parseRepoConfig(text, file) {
 function loadRepoConfig(dir) {
   const file = findRepoConfig(dir);
   if (!file) return null;
-  return parseRepoConfig(readFileSync6(file, "utf8"), file);
+  return parseRepoConfig(readFileSync7(file, "utf8"), file);
 }
 function hookLabel(cfg, hook2) {
   return cfg.labels[hook2] ?? cfg.hooks[hook2] ?? hook2;
@@ -2281,16 +2305,16 @@ function mergeRouteRelease(route, override) {
   };
 }
 function expand(p, base) {
-  let out = p.startsWith("~") ? p.replace(/^~/, homedir5()) : p;
-  out = out.replace(/\$\{?HOME\}?/g, homedir5());
+  let out = p.startsWith("~") ? p.replace(/^~/, homedir6()) : p;
+  out = out.replace(/\$\{?HOME\}?/g, homedir6());
   return isAbsolute(out) ? out : resolve(base, out);
 }
 function resolvePromptsDir(promptSet, crewHome, base) {
-  if (!promptSet) return join8(crewHome, "prompts", "default");
+  if (!promptSet) return join9(crewHome, "prompts", "default");
   if (promptSet.includes("/") || promptSet.startsWith(".") || promptSet.startsWith("~")) {
     return expand(promptSet, base);
   }
-  return join8(crewHome, "prompts", promptSet);
+  return join9(crewHome, "prompts", promptSet);
 }
 var Missing = class {
   paths = [];
@@ -2314,7 +2338,7 @@ var Missing = class {
 };
 function crewVersion(crewHome) {
   try {
-    const pkg = JSON.parse(readFileSync7(join8(crewHome, "package.json"), "utf8"));
+    const pkg = JSON.parse(readFileSync8(join9(crewHome, "package.json"), "utf8"));
     return pkg.version ?? "0.0.0";
   } catch {
     return "0.0.0";
@@ -2324,8 +2348,8 @@ function configSearchPath(crewHome) {
   if (process.env.CREW_CONFIG) return [resolve(process.env.CREW_CONFIG)];
   const xdg = process.env.XDG_CONFIG_HOME;
   return [
-    ...xdg ? [join8(xdg, "crew", "crew.yaml")] : [],
-    join8(homedir5(), ".config", "crew", "crew.yaml"),
+    ...xdg ? [join9(xdg, "crew", "crew.yaml")] : [],
+    join9(homedir6(), ".config", "crew", "crew.yaml"),
     resolve(crewHome, "crew.yaml")
   ];
 }
@@ -2333,17 +2357,17 @@ function findConfigFile(crewHome) {
   const candidates = configSearchPath(crewHome);
   return candidates.find((c) => existsSync7(c)) ?? candidates[candidates.length - 1];
 }
-var defaultConfigPath = () => join8(process.env.XDG_CONFIG_HOME ?? join8(homedir5(), ".config"), "crew", "crew.yaml");
+var defaultConfigPath = () => join9(process.env.XDG_CONFIG_HOME ?? join9(homedir6(), ".config"), "crew", "crew.yaml");
 function routeSlug(route) {
   return route.replace(/\//g, "-");
 }
 function resolvedPathFor(stateDir, route) {
   const [workspace, project] = splitRoute(route);
-  return join8(stateDir, "resolved", workspace, `${project}.json`);
+  return join9(stateDir, "resolved", workspace, `${project}.json`);
 }
 function apiKeyPathFor(stateDir, route) {
   const [workspace, project] = splitRoute(route);
-  return join8(stateDir, "keys", workspace, `${project}.env`);
+  return join9(stateDir, "keys", workspace, `${project}.env`);
 }
 function splitRoute(route) {
   const parts = route.split("/");
@@ -2356,7 +2380,7 @@ function readResolvedFile(stateDir, route) {
   const path = resolvedPathFor(stateDir, route);
   if (!existsSync7(path)) return void 0;
   try {
-    return JSON.parse(readFileSync7(path, "utf8"));
+    return JSON.parse(readFileSync8(path, "utf8"));
   } catch (e) {
     throw new ConfigError(`${path}: not valid JSON \u2014 ${e.message}`);
   }
@@ -2421,12 +2445,12 @@ function loadConfig(crewHome, configFile, opts = {}) {
 ` + configSearchPath(crewHome).map((c) => `  - ${c}`).join("\n") + `
 
 Create the first of those:
-  mkdir -p ${dirname3(defaultConfigPath())} && cp ${join8(crewHome, "crew.example.yaml")} ${defaultConfigPath()}`
+  mkdir -p ${dirname3(defaultConfigPath())} && cp ${join9(crewHome, "crew.example.yaml")} ${defaultConfigPath()}`
     );
   }
   let raw;
   try {
-    raw = parse2(opts.text ?? readFileSync7(file, "utf8"));
+    raw = parse2(opts.text ?? readFileSync8(file, "utf8"));
   } catch (e) {
     throw new ConfigError(`${file}: not valid YAML \u2014 ${e.message}`);
   }
@@ -2504,7 +2528,7 @@ Create the first of those:
       useNvm: shipRaw.useNvm !== false,
       nvmSh: shipRaw.nvmSh,
       stateDir,
-      logFile: expand(shipRaw.logFile ?? join8(tmpdir(), "crew.log"), base),
+      logFile: expand(shipRaw.logFile ?? join9(tmpdir(), "crew.log"), base),
       userAgent: shipRaw.userAgent ?? `Mozilla/5.0 CrewAgent/${crewVersion(crewHome)}`,
       maxConcurrentAgents,
       streamRetentionDays,
@@ -2526,7 +2550,7 @@ Create the first of those:
 function expandCommand(cmd, base) {
   return cmd.includes("/") || cmd.startsWith("~") ? expand(cmd, base) : cmd;
 }
-var TOOLCHAIN_KEYS = /* @__PURE__ */ new Set(["harness", "bin", "launcher", "launcherBin", "model", "tiers", "args", "env", "maxThinkingTokens"]);
+var TOOLCHAIN_KEYS = /* @__PURE__ */ new Set(["harness", "bin", "launcher", "launcherBin", "model", "tiers", "args", "env", "maxThinkingTokens", "auth"]);
 function parsePair(raw, missing) {
   if (raw === void 0) return void 0;
   if (!Array.isArray(raw)) {
@@ -2583,9 +2607,20 @@ function parseToolchains(raw, base, missing, file) {
     if (!Number.isInteger(maxThinkingTokens) || maxThinkingTokens < 0) {
       missing.add(`${where}.maxThinkingTokens must be a non-negative integer (got "${entryRaw.maxThinkingTokens}")`);
     }
+    let auth;
+    if (entryRaw.auth !== void 0) {
+      if (entryRaw.auth !== "subscription" && entryRaw.auth !== "inherit") {
+        missing.add(`${where}.auth must be subscription|inherit (got "${entryRaw.auth}")`);
+      } else if (harness !== "claude") {
+        missing.add(`${where}.auth is only supported on the claude harness`);
+      } else {
+        auth = entryRaw.auth;
+      }
+    }
     out.push({
       name,
       harness,
+      ...auth ? { auth } : {},
       bin: expandCommand(String(entryRaw.bin ?? adapter.defaultBin), base),
       ...entryRaw.launcher ? { launcher: expandCommand(String(entryRaw.launcher), base) } : {},
       ...entryRaw.launcher && entryRaw.launcherBin ? { launcherBin: expandCommand(String(entryRaw.launcherBin), base) } : {},
@@ -2645,7 +2680,7 @@ function parseOneRoute(c, where, file, base, stateDir, raw, missing, crewHome, t
   const hasRepos = Object.keys(repoDirs).length > 0;
   const reposBasePath = expand(String(c?.reposBasePath ?? raw.ship?.reposBasePath ?? DEFAULT_REPOS_BASE_PATH), base);
   const dirIsCloneBase = !c?.dir && !hasRepos && c?.repos && typeof c.repos === "object" && !Array.isArray(c.repos);
-  const dir = c?.dir ? expand(String(c.dir), base) : hasRepos ? Object.values(repoDirs)[0] : dirIsCloneBase ? join8(reposBasePath, splitRoute(route)[0]) : missing.req(void 0, `${where}.dir (or ${where}.repos)`) ?? "";
+  const dir = c?.dir ? expand(String(c.dir), base) : hasRepos ? Object.values(repoDirs)[0] : dirIsCloneBase ? join9(reposBasePath, splitRoute(route)[0]) : missing.req(void 0, `${where}.dir (or ${where}.repos)`) ?? "";
   const weight = c?.weight === void 0 ? void 0 : Number(c.weight);
   if (weight !== void 0 && !(Number.isFinite(weight) && weight > 0)) {
     missing.add(`${where}.weight must be a positive number (got "${c?.weight}")`);
@@ -2729,7 +2764,7 @@ function repoIdForName(r, name) {
 function resolveApiKey(r) {
   if (r.apiKey) return r.apiKey;
   if (r.apiKeyFile && r.apiKeyVar && existsSync7(r.apiKeyFile)) {
-    for (const line of readFileSync7(r.apiKeyFile, "utf8").split("\n")) {
+    for (const line of readFileSync8(r.apiKeyFile, "utf8").split("\n")) {
       const m = line.match(new RegExp(`^${r.apiKeyVar}=(.*)$`));
       if (m) return (m[1] ?? "").trim().replace(/^["']|["']$/g, "");
     }
@@ -2744,7 +2779,7 @@ function credentialSource(r) {
   if (r.apiKey) return KEYCHAIN_ELIGIBLE_ROUTES.has(r) ? "keychain" : "inline";
   if (r.apiKeyFile && r.apiKeyVar && existsSync7(r.apiKeyFile)) {
     const re = new RegExp(`^${r.apiKeyVar}=`);
-    if (readFileSync7(r.apiKeyFile, "utf8").split("\n").some((l) => re.test(l))) return "apiKeyFile";
+    if (readFileSync8(r.apiKeyFile, "utf8").split("\n").some((l) => re.test(l))) return "apiKeyFile";
   }
   return process.env.CREW_API_KEY?.trim() ? "CREW_API_KEY" : "none";
 }
@@ -2800,7 +2835,7 @@ function configuredMembers(rt) {
   return out;
 }
 function defaultRepoDir(basePath, workspace, repoName) {
-  return join8(basePath, workspace, repoName);
+  return join9(basePath, workspace, repoName);
 }
 function reposOf(r) {
   const named = Object.entries(r.repos);
@@ -2833,7 +2868,7 @@ function passengerRepoTargets(r) {
   return reposOf(r).filter((t) => r.repoOverrides[t.name]?.hostPassengers !== false);
 }
 function passengerCheckoutDir(basePath, workspace, repoName) {
-  return join8(basePath, workspace, ".passenger-checkouts", repoName);
+  return join9(basePath, workspace, ".passenger-checkouts", repoName);
 }
 function passengerCheckoutTargets(r) {
   if (!r.hostPassengers) return [];
@@ -3181,8 +3216,8 @@ function renderEnvironment(i) {
 }
 
 // src/agent-log.ts
-import { existsSync as existsSync8, mkdirSync as mkdirSync4, readdirSync as readdirSync2, readFileSync as readFileSync8, rmSync as rmSync5, writeFileSync as writeFileSync5 } from "fs";
-import { join as join9 } from "path";
+import { existsSync as existsSync8, mkdirSync as mkdirSync4, readdirSync as readdirSync2, readFileSync as readFileSync9, rmSync as rmSync5, writeFileSync as writeFileSync5 } from "fs";
+import { join as join10 } from "path";
 
 // src/pending-backoff.ts
 var sleepBackoff = (attempts) => Math.min(6e4 * 2 ** Math.max(0, attempts - 1), 30 * 6e4);
@@ -3249,20 +3284,20 @@ async function reportAgentRun(target, run2) {
   }
   return { agentLogId: entry.id };
 }
-var queueDir = (stateDir) => join9(stateDir, "pending-agent-logs");
+var queueDir = (stateDir) => join10(stateDir, "pending-agent-logs");
 function queueAgentRun(stateDir, name, q) {
   mkdirSync4(queueDir(stateDir), { recursive: true });
-  writeFileSync5(join9(queueDir(stateDir), `${name}.json`), JSON.stringify(q));
+  writeFileSync5(join10(queueDir(stateDir), `${name}.json`), JSON.stringify(q));
 }
 async function replayQueuedAgentRuns(stateDir, route, keyFor, log, now = /* @__PURE__ */ new Date()) {
   const dir = queueDir(stateDir);
   if (!existsSync8(dir)) return 0;
   let sent = 0;
   for (const f of readdirSync2(dir).filter((n) => n.endsWith(".json")).sort()) {
-    const path = join9(dir, f);
+    const path = join10(dir, f);
     let q;
     try {
-      q = JSON.parse(readFileSync8(path, "utf8"));
+      q = JSON.parse(readFileSync9(path, "utf8"));
     } catch {
       continue;
     }
@@ -3462,8 +3497,8 @@ var HandoffTranscriptTracker = class {
 };
 
 // src/pending-handoff.ts
-import { existsSync as existsSync15, mkdirSync as mkdirSync8, readdirSync as readdirSync5, readFileSync as readFileSync12, rmSync as rmSync8, writeFileSync as writeFileSync9 } from "fs";
-import { join as join15 } from "path";
+import { existsSync as existsSync15, mkdirSync as mkdirSync8, readdirSync as readdirSync5, readFileSync as readFileSync13, rmSync as rmSync8, writeFileSync as writeFileSync9 } from "fs";
+import { join as join16 } from "path";
 
 // src/git.ts
 import { execFileSync as execFileSync2 } from "child_process";
@@ -3475,12 +3510,12 @@ import {
   writeSync,
   statSync as statSync2,
   unlinkSync,
-  readFileSync as readFileSync9,
+  readFileSync as readFileSync10,
   writeFileSync as writeFileSync6,
   readdirSync as readdirSync3,
   rmSync as rmSync6
 } from "fs";
-import { dirname as dirname4, basename as basename5, join as join10 } from "path";
+import { dirname as dirname4, basename as basename5, join as join11 } from "path";
 var GitError = class extends Error {
 };
 function streamText(x) {
@@ -3878,11 +3913,11 @@ function sweepStaleReleaseRoots(tmp, now = Date.now(), maxAgeMs = 60 * 60 * 1e3)
   }
   for (const name of names) {
     if (!name.startsWith("crew-release-")) continue;
-    const root = join10(tmp, name);
+    const root = join11(tmp, name);
     try {
       const st = statSync2(root);
       if (!st.isDirectory() || now - st.mtimeMs < maxAgeMs) continue;
-      if (existsSync9(join10(root, "checkout"))) continue;
+      if (existsSync9(join11(root, "checkout"))) continue;
       rmSync6(root, { recursive: true, force: true });
       removed.push(name);
     } catch {
@@ -3996,8 +4031,8 @@ function syncPassengerCheckout(dir, githubRemote, gitRemoteName, base, clone = {
     if (!existsSync9(`${dir}/.git`) && githubRemote) {
       const url = cloneUrlFor(githubRemote, clone);
       const marker = cloneFailureMarker(dir);
-      if (existsSync9(marker) && readFileSync9(marker, "utf8").split("\n")[0] === url) {
-        return { action: "clone-failed", detail: readFileSync9(marker, "utf8").split("\n").slice(1).join("\n"), repeat: true };
+      if (existsSync9(marker) && readFileSync10(marker, "utf8").split("\n")[0] === url) {
+        return { action: "clone-failed", detail: readFileSync10(marker, "utf8").split("\n").slice(1).join("\n"), repeat: true };
       }
       try {
         ensureRepoCheckout(dir, githubRemote, clone);
@@ -4424,9 +4459,9 @@ function recoveredFailureHeadlines(o, route) {
 }
 
 // src/install.ts
-import { dirname as dirname5, join as join11, extname } from "path";
-import { homedir as homedir6 } from "os";
-import { accessSync, constants, existsSync as existsSync10, mkdirSync as mkdirSync6, readdirSync as readdirSync4, readFileSync as readFileSync10, statSync as statSync3, writeFileSync as writeFileSync7, unlinkSync as unlinkSync2, realpathSync } from "fs";
+import { dirname as dirname5, join as join12, extname } from "path";
+import { homedir as homedir7 } from "os";
+import { accessSync, constants, existsSync as existsSync10, mkdirSync as mkdirSync6, readdirSync as readdirSync4, readFileSync as readFileSync11, statSync as statSync3, writeFileSync as writeFileSync7, unlinkSync as unlinkSync2, realpathSync } from "fs";
 import { spawnSync as spawnSync4 } from "child_process";
 import { createHash as createHash2 } from "crypto";
 
@@ -4438,7 +4473,7 @@ function isCompiledBinary(moduleUrl) {
 // src/install.ts
 function crewInvocation(crewHome) {
   if (isCompiledBinary(import.meta.url)) return [process.execPath];
-  return [process.execPath, join11(crewHome, "bin", "crew")];
+  return [process.execPath, join12(crewHome, "bin", "crew")];
 }
 var INTERVAL_SECONDS = 120;
 function labelFor(crewHome, job) {
@@ -4476,7 +4511,7 @@ function pathFor(ship) {
   return parts.join(":");
 }
 function findOnPath(bin, searchPath) {
-  const candidates = bin.includes("/") ? [bin] : searchPath.split(":").filter(Boolean).map((dir) => join11(dir, bin));
+  const candidates = bin.includes("/") ? [bin] : searchPath.split(":").filter(Boolean).map((dir) => join12(dir, bin));
   for (const candidate of candidates) {
     try {
       accessSync(candidate, constants.X_OK);
@@ -4486,7 +4521,7 @@ function findOnPath(bin, searchPath) {
   }
   return void 0;
 }
-var COMMON_DOCKER_DIRS = ["/usr/local/bin", "/opt/homebrew/bin", join11(homedir6(), ".docker", "bin")].join(":");
+var COMMON_DOCKER_DIRS = ["/usr/local/bin", "/opt/homebrew/bin", join12(homedir7(), ".docker", "bin")].join(":");
 function dockerPathProblem(ship, shellPath = process.env.PATH ?? "") {
   const schedulerPath = pathFor(ship);
   if (findOnPath("docker", schedulerPath)) return void 0;
@@ -4498,7 +4533,7 @@ function xmlEscape(s) {
 }
 function planLaunchd(ship, crewHome, job) {
   const label = labelFor(crewHome, job);
-  const unitPath = join11(homedir6(), "Library", "LaunchAgents", `${label}.plist`);
+  const unitPath = join12(homedir7(), "Library", "LaunchAgents", `${label}.plist`);
   const crewLog = ship.logFile;
   const schedulerLog = schedulerLogFor(crewLog, job);
   const persistent = job === "run";
@@ -4552,8 +4587,8 @@ ${scheduleKeys}
 }
 function planSystemd(ship, crewHome, job) {
   const label = labelFor(crewHome, job);
-  const unitDir = join11(homedir6(), ".config", "systemd", "user");
-  const servicePath = join11(unitDir, `${label}.service`);
+  const unitDir = join12(homedir7(), ".config", "systemd", "user");
+  const servicePath = join12(unitDir, `${label}.service`);
   const crewLog = ship.logFile;
   const schedulerLog = schedulerLogFor(crewLog, job);
   const description = job === "release" ? "Tablation crew \u2014 release" : job === "passengers" ? "Tablation crew \u2014 Host Passengers sync" : "Tablation crew \u2014 persistent supervisor loop";
@@ -4593,7 +4628,7 @@ WantedBy=default.target
       schedulerLog
     };
   }
-  const timerPath = join11(unitDir, `${label}.timer`);
+  const timerPath = join12(unitDir, `${label}.timer`);
   const service = `# Written by \`crew install\` \u2014 re-run it rather than hand-editing this file.
 [Unit]
 Description=${description}
@@ -4667,7 +4702,7 @@ function planInstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
 function planUninstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
   const label = labelFor(crewHome, job);
   if (hostShip === "macos") {
-    const unitPath = join11(homedir6(), "Library", "LaunchAgents", `${label}.plist`);
+    const unitPath = join12(homedir7(), "Library", "LaunchAgents", `${label}.plist`);
     return {
       mechanism: "launchd",
       unitPaths: [unitPath],
@@ -4677,18 +4712,18 @@ function planUninstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
     };
   }
   if (hostShip === "linux" && hasSystemd) {
-    const unitDir = join11(homedir6(), ".config", "systemd", "user");
+    const unitDir = join12(homedir7(), ".config", "systemd", "user");
     if (job === "run") {
       return {
         mechanism: "systemd",
-        unitPaths: [join11(unitDir, `${label}.service`)],
+        unitPaths: [join12(unitDir, `${label}.service`)],
         crontabLine: null,
         unloadCommands: [["systemctl", "--user", "disable", "--now", `${label}.service`]]
       };
     }
     return {
       mechanism: "systemd",
-      unitPaths: [join11(unitDir, `${label}.service`), join11(unitDir, `${label}.timer`)],
+      unitPaths: [join12(unitDir, `${label}.service`), join12(unitDir, `${label}.timer`)],
       crontabLine: null,
       unloadCommands: [["systemctl", "--user", "disable", "--now", `${label}.timer`]]
     };
@@ -4706,7 +4741,7 @@ function planUninstall(ship, crewHome, hostShip, hasSystemd, job = "run") {
 function planDaemonControl(crewHome, hostShip, hasSystemd) {
   const label = labelFor(crewHome, "run");
   if (hostShip === "macos") {
-    const unitPath = join11(homedir6(), "Library", "LaunchAgents", `${label}.plist`);
+    const unitPath = join12(homedir7(), "Library", "LaunchAgents", `${label}.plist`);
     return {
       mechanism: "launchd",
       startCommand: ["launchctl", "load", unitPath],
@@ -4820,7 +4855,7 @@ async function applyUninstall(plan, crewHome, dryRun, log) {
 }
 var CREW_LAUNCHD_PREFIX = "com.tablation.crew";
 function launchAgentsDir() {
-  return join11(homedir6(), "Library", "LaunchAgents");
+  return join12(homedir7(), "Library", "LaunchAgents");
 }
 function xmlUnescape(s) {
   return s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
@@ -4839,10 +4874,10 @@ function loadedCrewLabels() {
 function listLaunchdUnits(dir = launchAgentsDir(), loaded = []) {
   const files = existsSync10(dir) ? readdirSync4(dir) : [];
   const units = files.filter((f) => f.startsWith(CREW_LAUNCHD_PREFIX) && f.endsWith(".plist")).sort().map((f) => {
-    const plistPath = join11(dir, f);
+    const plistPath = join12(dir, f);
     let program = null;
     try {
-      program = programFromPlist(readFileSync10(plistPath, "utf8"));
+      program = programFromPlist(readFileSync11(plistPath, "utf8"));
     } catch {
     }
     return {
@@ -4855,7 +4890,7 @@ function listLaunchdUnits(dir = launchAgentsDir(), loaded = []) {
   const seen = new Set(units.map((u) => u.label));
   for (const label of [...loaded].sort()) {
     if (!label.startsWith(CREW_LAUNCHD_PREFIX) || seen.has(label)) continue;
-    units.push({ label, plistPath: join11(dir, `${label}.plist`), program: null, programExists: false, orphan: true });
+    units.push({ label, plistPath: join12(dir, `${label}.plist`), program: null, programExists: false, orphan: true });
   }
   return units;
 }
@@ -5201,8 +5236,8 @@ var SHELL_WORDS = /* @__PURE__ */ new Set([
 ]);
 
 // src/state.ts
-import { readFileSync as readFileSync11, writeFileSync as writeFileSync8, existsSync as existsSync12, mkdirSync as mkdirSync7, rmSync as rmSync7, statSync as statSync4 } from "fs";
-import { join as join12 } from "path";
+import { readFileSync as readFileSync12, writeFileSync as writeFileSync8, existsSync as existsSync12, mkdirSync as mkdirSync7, rmSync as rmSync7, statSync as statSync4 } from "fs";
+import { join as join13 } from "path";
 var EPOCH = "1970-01-01T00:00:00.000Z";
 var State = class _State {
   dir;
@@ -5211,7 +5246,7 @@ var State = class _State {
     mkdirSync7(dir, { recursive: true });
   }
   path(...parts) {
-    return join12(this.dir, ...parts);
+    return join13(this.dir, ...parts);
   }
   /**
    * The timestamp every "new since last poll" check is measured against.
@@ -5222,7 +5257,7 @@ var State = class _State {
    */
   watermark() {
     try {
-      const v = readFileSync11(this.path(".poll-watermark"), "utf8").trim();
+      const v = readFileSync12(this.path(".poll-watermark"), "utf8").trim();
       return v || EPOCH;
     } catch {
       return EPOCH;
@@ -5308,7 +5343,7 @@ var State = class _State {
     const name = _State.safe(rawName);
     const file = this.path(`.${name}.lock`);
     try {
-      const existing = Number.parseInt(readFileSync11(file, "utf8").trim(), 10);
+      const existing = Number.parseInt(readFileSync12(file, "utf8").trim(), 10);
       if (Number.isFinite(existing) && existing > 0) {
         try {
           process.kill(existing, 0);
@@ -5402,7 +5437,7 @@ var State = class _State {
     const heldReported = `.release-held-${suffix}`;
     const read = (f) => {
       try {
-        return readFileSync11(this.path(f), "utf8").trim() || null;
+        return readFileSync12(this.path(f), "utf8").trim() || null;
       } catch {
         return null;
       }
@@ -5452,7 +5487,7 @@ var State = class _State {
       /** Whether the board was already told about this head's red gate. */
       heldReported: () => {
         try {
-          return readFileSync11(this.path(heldReported), "utf8").replace(/\n$/, "") || null;
+          return readFileSync12(this.path(heldReported), "utf8").replace(/\n$/, "") || null;
         } catch {
           return null;
         }
@@ -5489,7 +5524,7 @@ var State = class _State {
     const ticketStreakFile = `.fairness-ticket-streak-${suffix}`;
     const read = (f) => {
       try {
-        return readFileSync11(this.path(f), "utf8").trim() || null;
+        return readFileSync12(this.path(f), "utf8").trim() || null;
       } catch {
         return null;
       }
@@ -5554,7 +5589,7 @@ var State = class _State {
     return {
       previous: () => {
         try {
-          const parsed = JSON.parse(readFileSync11(this.path(file), "utf8"));
+          const parsed = JSON.parse(readFileSync12(this.path(file), "utf8"));
           return parsed && typeof parsed === "object" ? parsed : {};
         } catch {
           return {};
@@ -5575,7 +5610,7 @@ var State = class _State {
     return {
       previous: () => {
         try {
-          const parsed = JSON.parse(readFileSync11(this.path(file), "utf8"));
+          const parsed = JSON.parse(readFileSync12(this.path(file), "utf8"));
           return Array.isArray(parsed) ? parsed : [];
         } catch {
           return [];
@@ -5608,7 +5643,7 @@ var State = class _State {
   }
   readInt(file) {
     try {
-      return Number.parseInt(readFileSync11(this.path(file), "utf8").trim(), 10) || 0;
+      return Number.parseInt(readFileSync12(this.path(file), "utf8").trim(), 10) || 0;
     } catch {
       return 0;
     }
@@ -6611,12 +6646,12 @@ function holdWarnings(tickets, ships, contract, humanHolds, now = Date.now()) {
 
 // src/run-worktree.ts
 import { existsSync as existsSync14 } from "fs";
-import { dirname as dirname6, join as join14 } from "path";
+import { dirname as dirname6, join as join15 } from "path";
 
 // src/ports.ts
 import { execFileSync as execFileSync3 } from "child_process";
 import { existsSync as existsSync13 } from "fs";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 var run = (cmd, args) => {
   try {
     return execFileSync3(cmd, args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
@@ -6661,7 +6696,7 @@ function ticketForPort(port, s = DEFAULT_PORTS) {
 }
 function worktreeExists(parent, prefix, n) {
   for (const name of [`${prefix}${n}`, `${prefix}${String(n).padStart(3, "0")}`]) {
-    if (existsSync13(join13(parent, name, ".git"))) return true;
+    if (existsSync13(join14(parent, name, ".git"))) return true;
   }
   return false;
 }
@@ -6753,7 +6788,7 @@ function planRunWorktree(dir, cfg, t, role, opts = {}) {
     if (countCommits(existing.path, `${baseRef}..HEAD`) > 0) return { action: "leave-unpushed", path: existing.path, branch };
     return { action: "recut", path: existing.path, branch, base: baseRef };
   }
-  const path = join14(dirname6(dir), worktreeForTicket(dir, cfg, t, role));
+  const path = join15(dirname6(dir), worktreeForTicket(dir, cfg, t, role));
   if (located?.where === "remote" || located && hasRemote && remoteBranchExists(dir, remote, located.branch)) {
     return { action: "cut-remote", path, branch: located.branch };
   }
@@ -7116,12 +7151,12 @@ async function guardRunStrays(route, ship, tracker, role, workingId, since2, log
 
 // src/pending-handoff.ts
 var PENDING_MAX_AGE_MS = 48 * 36e5;
-var pendingDirFor = (stateDir) => join15(stateDir, "pending-handoffs");
-var stateDirOfStream = (streamPath) => join15(streamPath, "..", "..");
+var pendingDirFor = (stateDir) => join16(stateDir, "pending-handoffs");
+var stateDirOfStream = (streamPath) => join16(streamPath, "..", "..");
 function writePendingHandoff(stateDir, rec) {
   const dir = pendingDirFor(stateDir);
   mkdirSync8(dir, { recursive: true });
-  writeFileSync9(join15(dir, `${rec.ticketRecordId}.json`), JSON.stringify(rec, null, 2));
+  writeFileSync9(join16(dir, `${rec.ticketRecordId}.json`), JSON.stringify(rec, null, 2));
 }
 function listPendingHandoffs(stateDir, route) {
   const dir = pendingDirFor(stateDir);
@@ -7129,7 +7164,7 @@ function listPendingHandoffs(stateDir, route) {
   const out = [];
   for (const f of readdirSync5(dir).filter((n) => n.endsWith(".json")).sort()) {
     try {
-      const rec = JSON.parse(readFileSync12(join15(dir, f), "utf8"));
+      const rec = JSON.parse(readFileSync13(join16(dir, f), "utf8"));
       if (rec.version === 1 && rec.ticketRecordId && (!route || rec.route === route)) out.push(rec);
     } catch {
     }
@@ -7137,7 +7172,7 @@ function listPendingHandoffs(stateDir, route) {
   return out;
 }
 function removePendingHandoff(stateDir, ticketRecordId) {
-  rmSync8(join15(pendingDirFor(stateDir), `${ticketRecordId}.json`), { force: true });
+  rmSync8(join16(pendingDirFor(stateDir), `${ticketRecordId}.json`), { force: true });
 }
 function pendingHandoffFor(stateDir, ticketRecordId) {
   return listPendingHandoffs(stateDir).find((r) => r.ticketRecordId === ticketRecordId);
@@ -7247,8 +7282,8 @@ function expandSkillMarkers(text, lookup, opts = {}) {
 }
 
 // src/skills.ts
-import { readFileSync as readFileSync14, readdirSync as readdirSync6, existsSync as existsSync17 } from "fs";
-import { join as join17 } from "path";
+import { readFileSync as readFileSync15, readdirSync as readdirSync6, existsSync as existsSync17 } from "fs";
+import { join as join18 } from "path";
 import { parse as parseYaml } from "yaml";
 import { TablationClient as TablationClient3, StaleWriteError as StaleWriteError3, TablationApiError as TablationApiError2 } from "@tablation/client";
 
@@ -7264,8 +7299,8 @@ ${additions}`;
 }
 
 // src/agents.ts
-import { readFileSync as readFileSync13, existsSync as existsSync16 } from "fs";
-import { join as join16 } from "path";
+import { readFileSync as readFileSync14, existsSync as existsSync16 } from "fs";
+import { join as join17 } from "path";
 import { TablationClient as TablationClient2, StaleWriteError as StaleWriteError2, TablationApiError } from "@tablation/client";
 var PERSONA_NAME = {
   dev: "Developer",
@@ -7279,12 +7314,12 @@ var CREW_AGENT_COLUMN = "agent_id";
 var AgentsSyncError = class extends Error {
 };
 function personaDefaultPrompt(promptsDir, role) {
-  const briefPath = join16(promptsDir, "personas", `lane-${role}.md`);
+  const briefPath = join17(promptsDir, "personas", `lane-${role}.md`);
   if (!existsSync16(briefPath)) throw new AgentsSyncError(`no brief at ${briefPath}`);
-  if (SELF_CONTAINED_ROLES.has(role)) return readFileSync13(briefPath, "utf8");
-  const commonPath = join16(promptsDir, "personas", "common.md");
-  if (!existsSync16(commonPath)) return readFileSync13(briefPath, "utf8");
-  return `${readFileSync13(commonPath, "utf8")}${readFileSync13(briefPath, "utf8")}`;
+  if (SELF_CONTAINED_ROLES.has(role)) return readFileSync14(briefPath, "utf8");
+  const commonPath = join17(promptsDir, "personas", "common.md");
+  if (!existsSync16(commonPath)) return readFileSync14(briefPath, "utf8");
+  return `${readFileSync14(commonPath, "utf8")}${readFileSync14(briefPath, "utf8")}`;
 }
 async function resolveAgentId(route, role, opts) {
   const cached = route.resolved?.agentPersonas?.[role]?.agentId;
@@ -7731,7 +7766,7 @@ function describeCrewLink(o) {
 var SkillSyncError = class extends Error {
 };
 function parseSkillFile(path) {
-  const text = readFileSync14(path, "utf8");
+  const text = readFileSync15(path, "utf8");
   const match = /^---\n([\s\S]*?)\n---\n([\s\S]*)$/.exec(text);
   if (!match) throw new SkillSyncError(`${path}: missing YAML frontmatter (expected a leading --- block)`);
   const frontmatter = match[1];
@@ -7744,9 +7779,9 @@ function parseSkillFile(path) {
   return { name: meta.name, description: meta.description, prompt: body, file: path };
 }
 function listLocalSkills(promptsDir) {
-  const dir = join17(promptsDir, "skills");
+  const dir = join18(promptsDir, "skills");
   if (!existsSync17(dir)) return [];
-  return readdirSync6(dir).filter((f) => f.endsWith(".md")).map((f) => parseSkillFile(join17(dir, f)));
+  return readdirSync6(dir).filter((f) => f.endsWith(".md")).map((f) => parseSkillFile(join18(dir, f)));
 }
 async function syncSkills(route, opts) {
   if (!route.resolved) {
@@ -7949,23 +7984,23 @@ var AgentError = class extends Error {
 var AgentSpawnError = class extends AgentError {
 };
 function planAgentRun(o) {
-  const briefPath = join18(o.route.promptsDir, "personas", `lane-${o.role}.md`);
+  const briefPath = join19(o.route.promptsDir, "personas", `lane-${o.role}.md`);
   if (!existsSync18(briefPath)) {
     throw new AgentError(`no brief at ${briefPath} \u2014 refusing to run an unscoped session`);
   }
-  const commonPath = join18(o.route.promptsDir, "personas", "common.md");
+  const commonPath = join19(o.route.promptsDir, "personas", "common.md");
   const usesCommon = !SELF_CONTAINED_ROLES.has(o.role) && existsSync18(commonPath);
   const now = o.now ?? (() => Date.now());
   const routeLabel = routeSlug(o.route.route);
-  const digestPath2 = join18(o.stateDir, `digest-${routeLabel}-${o.role}.md`);
+  const digestPath2 = join19(o.stateDir, `digest-${routeLabel}-${o.role}.md`);
   let digest;
   let ageSeconds;
   if (existsSync18(digestPath2)) {
     ageSeconds = Math.floor((now() - statSync5(digestPath2).mtimeMs) / 1e3);
-    if (ageSeconds <= DIGEST_MAX_AGE_SECONDS) digest = readFileSync15(digestPath2, "utf8");
+    if (ageSeconds <= DIGEST_MAX_AGE_SECONDS) digest = readFileSync16(digestPath2, "utf8");
   }
-  const common = usesCommon ? readFileSync15(commonPath, "utf8") : "";
-  const brief = readFileSync15(briefPath, "utf8");
+  const common = usesCommon ? readFileSync16(commonPath, "utf8") : "";
+  const brief = readFileSync16(briefPath, "utf8");
   const effectiveCommon = o.divergedPrompt ? "" : common;
   const effectiveBrief = appendAdditions(o.divergedPrompt ?? brief, o.personaAdditions);
   const localSkills = new Map(listLocalSkills(o.route.promptsDir).map((s) => [s.name, s.prompt]));
@@ -7987,7 +8022,7 @@ function planAgentRun(o) {
     digest
   });
   const promptSha = createHash3("sha256").update(expanded.text).digest("hex");
-  const streamsDir = join18(o.stateDir, "streams");
+  const streamsDir = join19(o.stateDir, "streams");
   const base = `${routeLabel}-${o.role}-${o.cycle}`;
   const seat = resolveSeat(o.ship, o.route, o.role, o.agentPersona ?? (o.agentModel ? { model: o.agentModel } : {}), o.repo);
   const { toolchain, model } = seat;
@@ -8043,8 +8078,8 @@ function planAgentRun(o) {
     digestAttached: digest !== void 0,
     digestAgeSeconds: ageSeconds,
     model,
-    streamPath: join18(streamsDir, `${base}.jsonl`),
-    eventsPath: join18(streamsDir, `${base}.events.jsonl`),
+    streamPath: join19(streamsDir, `${base}.jsonl`),
+    eventsPath: join19(streamsDir, `${base}.events.jsonl`),
     ticket: o.ticket,
     ticketRecordId: o.ticketRecordId ?? null,
     agentLog,
@@ -8073,7 +8108,7 @@ function describePlan(p) {
 var pidPathFor = (streamPath) => `${streamPath}.pid`;
 function readRunSidecar(streamPath) {
   try {
-    const sc = JSON.parse(readFileSync15(pidPathFor(streamPath), "utf8"));
+    const sc = JSON.parse(readFileSync16(pidPathFor(streamPath), "utf8"));
     return typeof sc.pid === "number" && typeof sc.spawnedAt === "string" && typeof sc.role === "string" ? sc : null;
   } catch {
     return null;
@@ -8657,7 +8692,7 @@ async function runSelftest(i, deps = realDeps) {
     ...adapter.runEnv(spec),
     [KEY_VAR]: i.apiKey
   };
-  const cwd = mkdtempSync(join19(tmpdir2(), "crew-selftest-"));
+  const cwd = mkdtempSync(join20(tmpdir2(), "crew-selftest-"));
   try {
     const run2 = await deps.run({
       bin: invocation.bin,
@@ -8672,7 +8707,8 @@ async function runSelftest(i, deps = realDeps) {
     const answer = [seen.finalText ?? "", ...seen.texts].join("\n");
     const usage2 = { ...seen.tokens !== void 0 ? { tokens: seen.tokens } : {}, ...seen.costUsd !== void 0 ? { costUsd: seen.costUsd } : {} };
     if (!run2.spawnError && !run2.timedOut && answer.toLowerCase().includes(i.workspaceName.toLowerCase())) {
-      return finish({ ok: true, workspace: i.workspaceName, detail: `read workspace "${i.workspaceName}"`, ...usage2 });
+      const auth = spec.harness === "claude" ? ` on ${describeClaudeAuth(spec)}` : "";
+      return finish({ ok: true, workspace: i.workspaceName, detail: `read workspace "${i.workspaceName}"${auth}`, ...usage2 });
     }
     const { failure, detail } = classify(spec, run2, seen);
     return finish({ ok: false, failure, detail, ...usage2 });
@@ -8689,11 +8725,11 @@ function formatResult(r) {
   const secs = `${(r.ms / 1e3).toFixed(1)}s`;
   return r.ok ? `${r.toolchain}: PASS ${r.detail} (${secs}${tok})` : `${r.toolchain}: FAIL ${r.failure} \u2014 ${r.detail} (${secs})`;
 }
-var fileFor2 = (stateDir) => join19(stateDir, "selftest.json");
+var fileFor2 = (stateDir) => join20(stateDir, "selftest.json");
 function readSelftest(stateDir) {
   try {
     const p = fileFor2(stateDir);
-    return existsSync19(p) ? JSON.parse(readFileSync16(p, "utf8")) : {};
+    return existsSync19(p) ? JSON.parse(readFileSync17(p, "utf8")) : {};
   } catch {
     return {};
   }
@@ -8714,9 +8750,9 @@ function doctorSelftestLines(stored, toolchains) {
 }
 
 // src/cli.ts
-import { resolve as resolve5, dirname as dirname20, join as join36, basename as basename11 } from "path";
+import { resolve as resolve5, dirname as dirname20, join as join37, basename as basename11 } from "path";
 import { fileURLToPath } from "url";
-import { hostname as hostname2, homedir as homedir9 } from "os";
+import { hostname as hostname2, homedir as homedir10 } from "os";
 import { spawnSync as spawnSync6 } from "child_process";
 import { parse as parseYaml2 } from "yaml";
 
@@ -8894,14 +8930,14 @@ function rosterMarkdown(roster, meId) {
 }
 
 // src/connect-resume.ts
-import { mkdirSync as mkdirSync11, readFileSync as readFileSync17, rmSync as rmSync10, writeFileSync as writeFileSync12 } from "fs";
-import { dirname as dirname8, join as join20 } from "path";
+import { mkdirSync as mkdirSync11, readFileSync as readFileSync18, rmSync as rmSync10, writeFileSync as writeFileSync12 } from "fs";
+import { dirname as dirname8, join as join21 } from "path";
 function lastSessionFile(stateDir) {
-  return join20(stateDir, "connect-session.json");
+  return join21(stateDir, "connect-session.json");
 }
 function readPointers(stateDir) {
   try {
-    const parsed = JSON.parse(readFileSync17(lastSessionFile(stateDir), "utf8"));
+    const parsed = JSON.parse(readFileSync18(lastSessionFile(stateDir), "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return {};
     const out = {};
     for (const [host, v] of Object.entries(parsed)) {
@@ -8972,15 +9008,15 @@ async function signOutSessions(o) {
 }
 
 // src/reset.ts
-import { existsSync as existsSync20, mkdirSync as mkdirSync12, readFileSync as readFileSync18, readdirSync as readdirSync7, rmSync as rmSync11, statSync as statSync6, writeFileSync as writeFileSync13 } from "fs";
-import { dirname as dirname9, join as join21 } from "path";
+import { existsSync as existsSync20, mkdirSync as mkdirSync12, readFileSync as readFileSync19, readdirSync as readdirSync7, rmSync as rmSync11, statSync as statSync6, writeFileSync as writeFileSync13 } from "fs";
+import { dirname as dirname9, join as join22 } from "path";
 import { hostFromUrl as hostFromUrl2 } from "@tablation/client";
 function clonedCheckoutsFile(stateDir) {
-  return join21(stateDir, "cloned-checkouts.json");
+  return join22(stateDir, "cloned-checkouts.json");
 }
 function readClonedCheckouts(stateDir) {
   try {
-    const parsed = JSON.parse(readFileSync18(clonedCheckoutsFile(stateDir), "utf8"));
+    const parsed = JSON.parse(readFileSync19(clonedCheckoutsFile(stateDir), "utf8"));
     return Array.isArray(parsed) ? parsed.filter((d) => typeof d === "string") : [];
   } catch {
     return [];
@@ -9065,10 +9101,10 @@ function removeCheckout(dir, dryRun, fx) {
 }
 function removeState(stateDir, dryRun) {
   const out = [];
-  const targets = [join21(stateDir, "resolved"), join21(stateDir, "keys"), clonedCheckoutsFile(stateDir), join21(stateDir, "connect-session.json"), join21(stateDir, "reload-requested"), join21(stateDir, "daemon.started")];
+  const targets = [join22(stateDir, "resolved"), join22(stateDir, "keys"), clonedCheckoutsFile(stateDir), join22(stateDir, "connect-session.json"), join22(stateDir, "reload-requested"), join22(stateDir, "daemon.started")];
   try {
     for (const name of readdirSync7(stateDir)) {
-      if (name.startsWith(".") && statSync6(join21(stateDir, name)).isFile()) targets.push(join21(stateDir, name));
+      if (name.startsWith(".") && statSync6(join22(stateDir, name)).isFile()) targets.push(join22(stateDir, name));
     }
   } catch {
   }
@@ -9854,7 +9890,7 @@ ${waiting.map((t) => `| ${displayKey2(t)} | ${t.status} | ${blockers(t, i)} |`).
 
 // src/poll.ts
 import { writeFileSync as writeFileSync14 } from "fs";
-import { join as join22 } from "path";
+import { join as join23 } from "path";
 
 // src/stalled.ts
 var STALLED_AFTER_CYCLES = 30;
@@ -10145,7 +10181,7 @@ async function decideCycle(o) {
   }
   return decision;
 }
-var digestPath = (stateDir, route, role) => join22(stateDir, `digest-${route}-${role}.md`);
+var digestPath = (stateDir, route, role) => join23(stateDir, `digest-${route}-${role}.md`);
 function writeDigest(o, d, role, stateDir) {
   const me = o.route.resolved?.seats[role];
   if (!me) return false;
@@ -10634,7 +10670,7 @@ Ship ${shipName2} found: ${problem}. The release refuses to squash a ref nobody
 var localRefSkipReported = (ticket, problem, events) => events.some((e) => e.record_id === ticket.id && e.event_type === "local_ref_skip" && (e.message ?? "").includes(problem));
 
 // src/connect-wizard.ts
-import { delimiter, dirname as dirname10, join as join23 } from "path";
+import { delimiter, dirname as dirname10, join as join24 } from "path";
 import { accessSync as accessSync2, constants as constants2, existsSync as existsSync21, mkdirSync as mkdirSync13, writeFileSync as writeFileSync15 } from "fs";
 import { stringify } from "yaml";
 var HOST_PASSENGERS_DOCS_URL = "https://crew.tablation.dev/host-passengers";
@@ -10657,7 +10693,7 @@ function defaultIsExecutable(p) {
 function findOnPath2(name, pathEnv, isExecutable = defaultIsExecutable) {
   for (const dir of pathEnv.split(delimiter)) {
     if (!dir) continue;
-    const candidate = join23(dir, name);
+    const candidate = join24(dir, name);
     if (isExecutable(candidate)) return candidate;
   }
   return void 0;
@@ -10753,8 +10789,8 @@ Wrote ${o.configPath}.
 
 // src/connect-json.ts
 import { accessSync as accessSync3, constants as constants3 } from "fs";
-import { homedir as homedir7 } from "os";
-import { dirname as dirname11, join as join24 } from "path";
+import { homedir as homedir8 } from "os";
+import { dirname as dirname11, join as join25 } from "path";
 import { delimiter as delimiter2 } from "path";
 var CHOICE_EXIT_CODE = 3;
 function createEmitter(json, write) {
@@ -10793,17 +10829,17 @@ function agentBinSearchDirs(home, pathEnv, extraPath) {
   const dirs = [
     ...pathEnv.split(delimiter2),
     ...(extraPath ?? "").split(delimiter2),
-    join24(home, ".local/bin"),
-    join24(home, ".claude/local"),
+    join25(home, ".local/bin"),
+    join25(home, ".claude/local"),
     "/opt/homebrew/bin",
     "/usr/local/bin",
-    join24(home, ".npm-global/bin"),
-    join24(home, ".volta/bin")
+    join25(home, ".npm-global/bin"),
+    join25(home, ".volta/bin")
   ];
   return [...new Set(dirs.filter(Boolean))];
 }
 function findAgentBin(name, env, extraPath, isExec) {
-  const searched = agentBinSearchDirs(env.home ?? homedir7(), env.pathEnv, extraPath);
+  const searched = agentBinSearchDirs(env.home ?? homedir8(), env.pathEnv, extraPath);
   return { bin: findOnPath2(name, searched.join(delimiter2), isExec), searched };
 }
 function flagWizardAnswers(f, env) {
@@ -10834,8 +10870,8 @@ function flagWizardAnswers(f, env) {
 }
 
 // src/release-run.ts
-import { readFileSync as readFileSync19, writeFileSync as writeFileSync16, existsSync as existsSync22, copyFileSync, mkdirSync as mkdirSync14, mkdtempSync as mkdtempSync2, rmSync as rmSync12 } from "fs";
-import { dirname as dirname12, join as join25 } from "path";
+import { readFileSync as readFileSync20, writeFileSync as writeFileSync16, existsSync as existsSync22, copyFileSync, mkdirSync as mkdirSync14, mkdtempSync as mkdtempSync2, rmSync as rmSync12 } from "fs";
+import { dirname as dirname12, join as join26 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 
 // src/release.ts
@@ -11553,13 +11589,13 @@ async function bump(o, size) {
     }
     return printed;
   }
-  const files = o.repo.release.versionFiles.map((f) => join25(o.cwd, f));
+  const files = o.repo.release.versionFiles.map((f) => join26(o.cwd, f));
   const first = files[0];
   if (!existsSync22(first)) {
     o.emit.error(`no ${o.repo.release.versionFiles[0]} to read a version from`);
     return null;
   }
-  const current = JSON.parse(readFileSync19(first, "utf8")).version;
+  const current = JSON.parse(readFileSync20(first, "utf8")).version;
   if (!current) {
     o.emit.error(`no version field in ${o.repo.release.versionFiles[0]}`);
     return null;
@@ -11572,7 +11608,7 @@ async function bump(o, size) {
     return version;
   }
   for (const f of files) {
-    const src = readFileSync19(f, "utf8");
+    const src = readFileSync20(f, "utf8");
     const out = src.replace(/("version"\s*:\s*")[^"]*(")/, `$1${version}$2`);
     if (out === src) {
       o.emit.error(`no version field in ${f}`);
@@ -11585,13 +11621,13 @@ async function bump(o, size) {
 function writeChangelog(o, version, entries) {
   const file = o.repo.release.changelog;
   if (!file || entries.length === 0) return;
-  const path = join25(o.cwd, file);
+  const path = join26(o.cwd, file);
   const section = renderChangelogSection(version, (/* @__PURE__ */ new Date()).toISOString().slice(0, 10), entries);
   if (o.dryRun) {
     o.emit.emit(`would prepend ${entries.length} entr(ies) to ${file}`);
     return;
   }
-  const existing = existsSync22(path) ? readFileSync19(path, "utf8") : "# Changelog\n";
+  const existing = existsSync22(path) ? readFileSync20(path, "utf8") : "# Changelog\n";
   writeFileSync16(path, insertChangelogSection(existing, section));
 }
 async function confirm(o, expected) {
@@ -11685,8 +11721,8 @@ function closeReleaseCheckout(cwd, root, dir, branch, run2 = gitOk) {
 function openReleaseCheckout(o) {
   const { remote, base } = o.repo.branch;
   const branch = `crew/release-${Date.now()}`;
-  const root = mkdtempSync2(join25(tmpdir3(), "crew-release-"));
-  const dir = join25(root, "checkout");
+  const root = mkdtempSync2(join26(tmpdir3(), "crew-release-"));
+  const dir = join26(root, "checkout");
   o.emit.emit(`release checkout: ${dir}`, { step: "release" });
   const close = () => closeReleaseCheckout(o.cwd, root, dir, branch);
   try {
@@ -11696,10 +11732,10 @@ function openReleaseCheckout(o) {
     throw e;
   }
   for (const f of o.repo.worktrees.copy) {
-    const src = join25(o.cwd, f);
+    const src = join26(o.cwd, f);
     if (!existsSync22(src)) continue;
-    mkdirSync14(dirname12(join25(dir, f)), { recursive: true });
-    copyFileSync(src, join25(dir, f));
+    mkdirSync14(dirname12(join26(dir, f)), { recursive: true });
+    copyFileSync(src, join26(dir, f));
   }
   return { dir, branch, close };
 }
@@ -12780,17 +12816,17 @@ function nextRoles(decision, ran) {
 }
 
 // src/ship-name.ts
-import { existsSync as existsSync25, mkdirSync as mkdirSync16, readFileSync as readFileSync21, renameSync as renameSync2, writeFileSync as writeFileSync18 } from "fs";
+import { existsSync as existsSync25, mkdirSync as mkdirSync16, readFileSync as readFileSync22, renameSync as renameSync2, writeFileSync as writeFileSync18 } from "fs";
 import { dirname as dirname14 } from "path";
 import { parseDocument } from "yaml";
 
 // src/machine-id.ts
 import { execFileSync as execFileSync4 } from "child_process";
 import { createHash as createHash4 } from "crypto";
-import { existsSync as existsSync24, mkdirSync as mkdirSync15, readFileSync as readFileSync20, writeFileSync as writeFileSync17 } from "fs";
-import { dirname as dirname13, join as join26 } from "path";
+import { existsSync as existsSync24, mkdirSync as mkdirSync15, readFileSync as readFileSync21, writeFileSync as writeFileSync17 } from "fs";
+import { dirname as dirname13, join as join27 } from "path";
 function machineIdPathFor(stateDir) {
-  return join26(stateDir, "machine-id");
+  return join27(stateDir, "machine-id");
 }
 var sha256 = (s) => createHash4("sha256").update(s).digest("hex");
 function readRawMachineId(platform2 = process.platform) {
@@ -12804,7 +12840,7 @@ function readRawMachineId(platform2 = process.platform) {
     }
     for (const p of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
       if (existsSync24(p)) {
-        const id = readFileSync20(p, "utf8").trim();
+        const id = readFileSync21(p, "utf8").trim();
         if (id) return id;
       }
     }
@@ -12816,7 +12852,7 @@ function ensureMachineId(stateDir, opts = {}) {
   if (opts.override?.trim()) return sha256(opts.override.trim());
   const path = machineIdPathFor(stateDir);
   if (existsSync24(path)) {
-    const cached = readFileSync20(path, "utf8").trim();
+    const cached = readFileSync21(path, "utf8").trim();
     if (/^[0-9a-f]{64}$/.test(cached)) return cached;
   }
   const raw = (opts.read ?? readRawMachineId)();
@@ -12896,7 +12932,7 @@ async function syncRouteName(i) {
 function readSyncedName(resolvedFile) {
   if (!existsSync25(resolvedFile)) return void 0;
   try {
-    const v = JSON.parse(readFileSync21(resolvedFile, "utf8")).shipName;
+    const v = JSON.parse(readFileSync22(resolvedFile, "utf8")).shipName;
     return typeof v === "string" ? v : void 0;
   } catch {
     return void 0;
@@ -12906,7 +12942,7 @@ function writeSyncedName(resolvedFile, name) {
   if (!existsSync25(resolvedFile)) return;
   let raw;
   try {
-    raw = JSON.parse(readFileSync21(resolvedFile, "utf8"));
+    raw = JSON.parse(readFileSync22(resolvedFile, "utf8"));
   } catch {
     return;
   }
@@ -12921,7 +12957,7 @@ function writeSyncedName(resolvedFile, name) {
 async function reconcileShipName(i) {
   let local = i.ship.name;
   try {
-    local = shipNameOfYaml(readFileSync21(i.configFile, "utf8")) ?? local;
+    local = shipNameOfYaml(readFileSync22(i.configFile, "utf8")) ?? local;
   } catch {
   }
   const resolvedFile = resolvedPathFor(i.stateDir, i.route);
@@ -12945,7 +12981,7 @@ async function reconcileShipName(i) {
   }
   if (result.status !== "ok") return result;
   if (result.action === "adopt" || result.action === "row-wins") {
-    const text = readFileSync21(i.configFile, "utf8");
+    const text = readFileSync22(i.configFile, "utf8");
     writeFileSync18(i.configFile, setShipNameInYaml(text, result.name));
     i.ship.name = result.name;
     if (result.action === "row-wins") {
@@ -13854,7 +13890,7 @@ function describeCapability(i) {
 }
 
 // src/agents-sync-run.ts
-import { existsSync as existsSync26, mkdirSync as mkdirSync17, readFileSync as readFileSync22, writeFileSync as writeFileSync19 } from "fs";
+import { existsSync as existsSync26, mkdirSync as mkdirSync17, readFileSync as readFileSync23, writeFileSync as writeFileSync19 } from "fs";
 import { dirname as dirname15 } from "path";
 async function runAgentsSync(target, o) {
   const dryRun = o.dryRun ?? false;
@@ -13888,7 +13924,7 @@ async function runAgentsSync(target, o) {
   for (const s of skillResult?.outcomes ?? []) o.say(describeSkillSyncOutcome(s));
   if (!dryRun) {
     const resolvedPath = resolvedPathFor(o.stateDir, target.route);
-    const raw = existsSync26(resolvedPath) ? JSON.parse(readFileSync22(resolvedPath, "utf8")) : {};
+    const raw = existsSync26(resolvedPath) ? JSON.parse(readFileSync23(resolvedPath, "utf8")) : {};
     raw.agentPersonas = personaResult.agentPersonas;
     if (skillResult) raw.agentSkills = skillResult.agentSkills;
     if (personaResult.releaseAgentId) raw.releaseAgentId = personaResult.releaseAgentId;
@@ -13999,8 +14035,8 @@ async function showLogEntry(route, entryId, opts = {}) {
 import { isMap as isMap2, parseDocument as parseDocument3, YAMLMap } from "yaml";
 
 // src/repos-cmd.ts
-import { homedir as homedir8 } from "os";
-import { basename as basename8, join as join27, resolve as resolve3 } from "path";
+import { homedir as homedir9 } from "os";
+import { basename as basename8, join as join28, resolve as resolve3 } from "path";
 import { isMap, isSeq, parseDocument as parseDocument2, stringify as stringify2 } from "yaml";
 var ReposError = class extends Error {
 };
@@ -14046,7 +14082,7 @@ function parseAddArgs(args, routes, isDir) {
   return { route, path: "." };
 }
 function expandDir(p, base) {
-  const home = p === "~" ? homedir8() : p.startsWith("~/") ? `${homedir8()}/${p.slice(2)}` : p;
+  const home = p === "~" ? homedir9() : p.startsWith("~/") ? `${homedir9()}/${p.slice(2)}` : p;
   return resolve3(base, home);
 }
 function routeMapOf(doc, route) {
@@ -14278,7 +14314,7 @@ function planRepoClone(i) {
   }
   const ship = doc.get("ship", true);
   const basePath = String(m.get("reposBasePath") ?? (isMap(ship) ? ship.get("reposBasePath") : void 0) ?? "~/Crew");
-  const target = i.dir ? expandDir(i.dir, i.base) : join27(expandDir(basePath, i.base), i.route.split("/")[0], name);
+  const target = i.dir ? expandDir(i.dir, i.base) : join28(expandDir(basePath, i.base), i.route.split("/")[0], name);
   const add = planRepoAdd({ text: i.text, base: i.base, route: i.route, path: target, origin: remote, resolved: i.resolved, name, isCheckout: i.isCheckout });
   return { ...add, remote, target };
 }
@@ -14677,7 +14713,7 @@ ${run2.err}` });
 }
 
 // src/sample-ticket.ts
-import { basename as basename9, dirname as dirname17, join as join28 } from "path";
+import { basename as basename9, dirname as dirname17, join as join29 } from "path";
 var SAMPLE_REPO = "crew-sample";
 var SAMPLE_REMOTE = `local/${SAMPLE_REPO}`;
 var SAMPLE_MARKER = "sample: true";
@@ -14700,8 +14736,8 @@ has something safe to work on: its test and build hooks always pass, it has no
 remote, and \`crew sample-ticket --remove\` deletes it.
 `;
 function sampleDir(existing, reposBase, workspace) {
-  if (existing.length > 0) return join28(dirname17(existing[0]), SAMPLE_REPO);
-  return join28(reposBase, workspace, SAMPLE_REPO);
+  if (existing.length > 0) return join29(dirname17(existing[0]), SAMPLE_REPO);
+  return join29(reposBase, workspace, SAMPLE_REPO);
 }
 var SAMPLE_TITLE = "Sample: add a documented `greet` function with a test";
 function sampleDescription() {
@@ -14793,8 +14829,8 @@ function schedulerInstalled(plan, exists, crontab) {
 }
 
 // src/worktree-sweep.ts
-import { existsSync as existsSync27, readFileSync as readFileSync23, readdirSync as readdirSync8 } from "fs";
-import { basename as basename10, dirname as dirname18, join as join29, resolve as resolve4 } from "path";
+import { existsSync as existsSync27, readFileSync as readFileSync24, readdirSync as readdirSync8 } from "fs";
+import { basename as basename10, dirname as dirname18, join as join30, resolve as resolve4 } from "path";
 function planWorktreeSweep(target, tickets, contract) {
   const terminal = new Set(contract.statuses.resolved.filter((s) => s !== contract.statuses.verified));
   const verified = contract.statuses.verified;
@@ -14861,7 +14897,7 @@ function siblingWorktreeDirs(target) {
   for (const name of names) {
     if (!name.startsWith(stem)) continue;
     const m = DIR_NUMBER_SUFFIXED.exec(name);
-    const path = join29(parent, name);
+    const path = join30(parent, name);
     if (m && !registered.has(resolve4(path))) out.push({ path, number: m[1] });
   }
   return out;
@@ -14964,7 +15000,7 @@ function isHandBackMerge(path, base) {
   if (!msgPath) return false;
   let first;
   try {
-    first = readFileSync23(resolve4(path, msgPath), "utf8").split("\n")[0] ?? "";
+    first = readFileSync24(resolve4(path, msgPath), "utf8").split("\n")[0] ?? "";
   } catch {
     return false;
   }
@@ -15070,13 +15106,13 @@ function applyRemoteBranchCleanup(cwd, remote, branches2, dryRun, log) {
 
 // src/stream-sweep.ts
 import { existsSync as existsSync28, readdirSync as readdirSync9, rmSync as rmSync13, statSync as statSync8 } from "fs";
-import { join as join30 } from "path";
+import { join as join31 } from "path";
 var DAY_MS2 = 24 * 60 * 60 * 1e3;
 function planStreamSweep(stateDir, retentionDays, now = Date.now()) {
-  const dir = join30(stateDir, "streams");
+  const dir = join31(stateDir, "streams");
   if (!existsSync28(dir)) return [];
   const cutoff = now - retentionDays * DAY_MS2;
-  return readdirSync9(dir).map((name) => join30(dir, name)).filter((path) => {
+  return readdirSync9(dir).map((name) => join31(dir, name)).filter((path) => {
     try {
       return statSync8(path).mtimeMs < cutoff;
     } catch {
@@ -15104,7 +15140,7 @@ function applyStreamSweep(paths, dryRun, log) {
 function planEventsSweep(stateDir, retentionDays, now = Date.now()) {
   if (!existsSync28(stateDir)) return [];
   const cutoff = now - retentionDays * DAY_MS2;
-  return readdirSync9(stateDir).filter((name) => ROTATED_EVENTS_RE.test(name)).map((name) => join30(stateDir, name)).filter((path) => {
+  return readdirSync9(stateDir).filter((name) => ROTATED_EVENTS_RE.test(name)).map((name) => join31(stateDir, name)).filter((path) => {
     try {
       return statSync8(path).mtimeMs < cutoff;
     } catch {
@@ -15114,18 +15150,18 @@ function planEventsSweep(stateDir, retentionDays, now = Date.now()) {
 }
 
 // src/cli.ts
-import { realpathSync as realpathSync3, readFileSync as readFileSync29, existsSync as existsSync34, mkdirSync as mkdirSync22, writeFileSync as writeFileSync23, rmSync as rmSync15, unlinkSync as unlinkSync5, copyFileSync as copyFileSync2, renameSync as renameSync3, statSync as statSync10, readdirSync as readdirSync14 } from "fs";
+import { realpathSync as realpathSync3, readFileSync as readFileSync30, existsSync as existsSync34, mkdirSync as mkdirSync22, writeFileSync as writeFileSync23, rmSync as rmSync15, unlinkSync as unlinkSync5, copyFileSync as copyFileSync2, renameSync as renameSync3, statSync as statSync10, readdirSync as readdirSync14 } from "fs";
 import { createInterface } from "readline/promises";
 import { dirname as dirOf, resolve as resolvePath } from "path";
 
 // src/ssh-keys.ts
 import { execFileSync as execFileSync6 } from "child_process";
-import { existsSync as existsSync29, mkdirSync as mkdirSync18, readFileSync as readFileSync24, chmodSync } from "fs";
-import { dirname as dirname19, join as join31 } from "path";
+import { existsSync as existsSync29, mkdirSync as mkdirSync18, readFileSync as readFileSync25, chmodSync } from "fs";
+import { dirname as dirname19, join as join32 } from "path";
 var SshKeyError = class extends Error {
 };
 function shipSshKeyPathFor(stateDir) {
-  return join31(stateDir, "ssh", "id_ed25519");
+  return join32(stateDir, "ssh", "id_ed25519");
 }
 function ensureShipSshKeypair(stateDir) {
   const privateKeyPath = shipSshKeyPathFor(stateDir);
@@ -15154,7 +15190,7 @@ function ensureShipSshKeypair(stateDir) {
   if (!existsSync29(publicKeyPath)) {
     throw new SshKeyError(`${privateKeyPath} exists but ${publicKeyPath} does not \u2014 regenerate or restore it`);
   }
-  const publicKey = readFileSync24(publicKeyPath, "utf8").trim();
+  const publicKey = readFileSync25(publicKeyPath, "utf8").trim();
   return { privateKeyPath, publicKeyPath, publicKey };
 }
 function sshKeygenAvailable() {
@@ -15370,9 +15406,9 @@ function syncAllPassengerCheckouts(cfg) {
 
 // src/tunnel.ts
 import { spawn as spawn5 } from "child_process";
-import { existsSync as existsSync30, mkdirSync as mkdirSync19, readFileSync as readFileSync25, writeFileSync as writeFileSync20, unlinkSync as unlinkSync3, readdirSync as readdirSync10 } from "fs";
+import { existsSync as existsSync30, mkdirSync as mkdirSync19, readFileSync as readFileSync26, writeFileSync as writeFileSync20, unlinkSync as unlinkSync3, readdirSync as readdirSync10 } from "fs";
 import { randomInt } from "crypto";
-import { join as join32 } from "path";
+import { join as join33 } from "path";
 var DEFAULT_SPAWN_OPTIONS = { stdio: "ignore", detached: true };
 var defaultSpawn = (cmd, args) => spawn5(cmd, args, DEFAULT_SPAWN_OPTIONS);
 var SLUG_ALPHABET = "abcdefghijklmnopqrstuvwxyz0123456789";
@@ -15439,20 +15475,20 @@ function startTunnel(opts) {
   };
 }
 function tunnelStatePath(stateDir, workspaceId) {
-  return join32(stateDir, "passengers", `${workspaceId}.json`);
+  return join33(stateDir, "passengers", `${workspaceId}.json`);
 }
 function readPersistedTunnel(stateDir, workspaceId) {
   const path = tunnelStatePath(stateDir, workspaceId);
   if (!existsSync30(path)) return void 0;
   try {
-    return JSON.parse(readFileSync25(path, "utf8"));
+    return JSON.parse(readFileSync26(path, "utf8"));
   } catch {
     return void 0;
   }
 }
 function writePersistedTunnel(stateDir, state) {
   const path = tunnelStatePath(stateDir, state.workspaceId);
-  mkdirSync19(join32(stateDir, "passengers"), { recursive: true });
+  mkdirSync19(join33(stateDir, "passengers"), { recursive: true });
   writeFileSync20(path, `${JSON.stringify(state, null, 2)}
 `);
 }
@@ -15550,7 +15586,7 @@ function syncPassengerTunnels(plans, relayHost, relayPort, privateKeyPath, state
   }
 }
 function readAllPersistedWorkspaceIds(stateDir) {
-  const dir = join32(stateDir, "passengers");
+  const dir = join33(stateDir, "passengers");
   if (!existsSync30(dir)) return [];
   return readdirSync10(dir).filter((f) => f.endsWith(".json") && !f.endsWith("-sync.json")).map((f) => f.slice(0, -".json".length));
 }
@@ -15672,8 +15708,8 @@ async function unregisterEndpoint(workspaceId, info, d) {
 import { createServer as createHttpServer } from "http";
 import { spawn as spawn6 } from "child_process";
 import { randomBytes } from "crypto";
-import { existsSync as existsSync31, mkdirSync as mkdirSync20, readFileSync as readFileSync26, writeFileSync as writeFileSync21, unlinkSync as unlinkSync4, readdirSync as readdirSync11 } from "fs";
-import { join as join33 } from "path";
+import { existsSync as existsSync31, mkdirSync as mkdirSync20, readFileSync as readFileSync27, writeFileSync as writeFileSync21, unlinkSync as unlinkSync4, readdirSync as readdirSync11 } from "fs";
+import { join as join34 } from "path";
 
 // src/secret-compare.ts
 import { timingSafeEqual } from "crypto";
@@ -15762,20 +15798,20 @@ var defaultSpawn2 = (cmd, args, env) => {
   return child;
 };
 function syncDaemonStatePath(stateDir, workspaceId) {
-  return join33(stateDir, "passengers", `${workspaceId}-sync.json`);
+  return join34(stateDir, "passengers", `${workspaceId}-sync.json`);
 }
 function readPersistedSyncDaemon(stateDir, workspaceId) {
   const path = syncDaemonStatePath(stateDir, workspaceId);
   if (!existsSync31(path)) return void 0;
   try {
-    return JSON.parse(readFileSync26(path, "utf8"));
+    return JSON.parse(readFileSync27(path, "utf8"));
   } catch {
     return void 0;
   }
 }
 function writePersistedSyncDaemon(stateDir, state) {
   const path = syncDaemonStatePath(stateDir, state.workspaceId);
-  mkdirSync20(join33(stateDir, "passengers"), { recursive: true });
+  mkdirSync20(join34(stateDir, "passengers"), { recursive: true });
   writeFileSync21(path, `${JSON.stringify(state, null, 2)}
 `);
 }
@@ -15796,7 +15832,7 @@ function waitForExit(pid, alive, timeoutMs = 5e3) {
   }
 }
 function readAllPersistedSyncWorkspaceIds(stateDir) {
-  const dir = join33(stateDir, "passengers");
+  const dir = join34(stateDir, "passengers");
   if (!existsSync31(dir)) return [];
   const suffix = "-sync.json";
   return readdirSync11(dir).filter((f) => f.endsWith(suffix)).map((f) => f.slice(0, -suffix.length));
@@ -15885,12 +15921,12 @@ function describeCause(err) {
 }
 
 // src/daemon.ts
-import { existsSync as existsSync33, mkdirSync as mkdirSync21, readFileSync as readFileSync28, readdirSync as readdirSync13, rmSync as rmSync14, statSync as statSync9, writeFileSync as writeFileSync22 } from "fs";
-import { join as join35 } from "path";
+import { existsSync as existsSync33, mkdirSync as mkdirSync21, readFileSync as readFileSync29, readdirSync as readdirSync13, rmSync as rmSync14, statSync as statSync9, writeFileSync as writeFileSync22 } from "fs";
+import { join as join36 } from "path";
 
 // src/interrupted.ts
-import { existsSync as existsSync32, readdirSync as readdirSync12, readFileSync as readFileSync27 } from "fs";
-import { join as join34 } from "path";
+import { existsSync as existsSync32, readdirSync as readdirSync12, readFileSync as readFileSync28 } from "fs";
+import { join as join35 } from "path";
 var INTERRUPTED_MARKER = calloutHeader("NOTE", "Interrupted");
 function interruptedComment(b) {
   const tree = b.dirty === null ? "The worktree could not be checked." : b.dirty ? "The worktree has uncommitted changes \u2014 they are this seat's own, from that run." : "The worktree is clean.";
@@ -15911,19 +15947,19 @@ function runFinished(streamPath) {
   const path = `${streamPath}.meta.json`;
   if (!existsSync32(path)) return false;
   try {
-    return JSON.parse(readFileSync27(path, "utf8")).running !== true;
+    return JSON.parse(readFileSync28(path, "utf8")).running !== true;
   } catch {
     return true;
   }
 }
 function orphanedStreams(o) {
-  const dir = join34(o.stateDir, "streams");
+  const dir = join35(o.stateDir, "streams");
   if (!existsSync32(dir)) return [];
   const ownerAlive = o.isOwnerAlive ?? pidAlive;
   const out = [];
   for (const name of readdirSync12(dir)) {
     if (!name.endsWith(".jsonl") || name.endsWith(".events.jsonl")) continue;
-    const streamPath = join34(dir, name);
+    const streamPath = join35(dir, name);
     if (runFinished(streamPath)) continue;
     const sidecar = readRunSidecar(streamPath);
     if (!sidecar || sidecar.route !== o.routeLabel) continue;
@@ -16043,7 +16079,7 @@ function latestMtime(path) {
   if (!stat.isDirectory()) return 0;
   let latest = stat.mtimeMs;
   for (const entry of readdirSync13(path, { withFileTypes: true })) {
-    latest = Math.max(latest, latestMtime(join35(path, entry.name)));
+    latest = Math.max(latest, latestMtime(join36(path, entry.name)));
   }
   return latest;
 }
@@ -16055,10 +16091,10 @@ function makeStaleChecker(paths, opts = {}) {
   return () => computeTreeSignature(paths) !== initial || opts.reloadSentinel !== void 0 && existsSync33(opts.reloadSentinel);
 }
 function reloadSentinelFor(stateDir) {
-  return join35(stateDir, "reload-requested");
+  return join36(stateDir, "reload-requested");
 }
 function daemonStampFor(stateDir) {
-  return join35(stateDir, "daemon.started");
+  return join36(stateDir, "daemon.started");
 }
 function noteDaemonStarted(stateDir, now = Date.now()) {
   mkdirSync21(stateDir, { recursive: true });
@@ -16068,7 +16104,7 @@ function noteDaemonStarted(stateDir, now = Date.now()) {
 }
 function readDaemonStarted(stateDir) {
   try {
-    const v = JSON.parse(readFileSync28(daemonStampFor(stateDir), "utf8")).startedAt;
+    const v = JSON.parse(readFileSync29(daemonStampFor(stateDir), "utf8")).startedAt;
     return typeof v === "number" ? v : null;
   } catch {
     return null;
@@ -17089,7 +17125,7 @@ if (command === "passenger-sync-daemon") {
     }
     if (host === "linux" && hasSystemd) {
       const label = labelFor(CREW_HOME, "run");
-      const staleTimer = join36(homedir9(), ".config", "systemd", "user", `${label}.timer`);
+      const staleTimer = join37(homedir10(), ".config", "systemd", "user", `${label}.timer`);
       if (existsSync34(staleTimer)) {
         process.stdout.write(
           `removing stale run timer from before the persistent-service cutover: ${staleTimer}${dryRun ? " (dry run)" : ""}
@@ -17152,7 +17188,7 @@ if (command === "passenger-sync-daemon") {
       for (const a of plan.actions) {
         if (a.kind === "enable") {
           if (prompter && !await prompter.confirm(`Route ${a.route} passes every check \u2014 set enabled: true in ${cfg.configFile}?`, false)) continue;
-          writeFileSync23(cfg.configFile, planEnable(readFileSync29(cfg.configFile, "utf8"), a.route));
+          writeFileSync23(cfg.configFile, planEnable(readFileSync30(cfg.configFile, "utf8"), a.route));
           enabledSound.add(a.route);
           changed2.push(`enabled route ${a.route} in ${cfg.configFile}`);
         } else {
@@ -18174,7 +18210,7 @@ ${changed2.map((c) => `  - ${c}
         process.exit(1);
       }
       requireArmed("run the daemon loop");
-      const watchPaths = isCompiledBinary(import.meta.url) ? [process.execPath] : [join36(CREW_HOME, "src"), join36(CREW_HOME, "dist"), join36(CREW_HOME, "bin")];
+      const watchPaths = isCompiledBinary(import.meta.url) ? [process.execPath] : [join37(CREW_HOME, "src"), join37(CREW_HOME, "dist"), join37(CREW_HOME, "bin")];
       const configPaths = daemonConfigPaths(cfg);
       watchPaths.push(...configPaths);
       noteDaemonStarted(cfg.ship.stateDir);
@@ -18393,7 +18429,7 @@ ${changed2.map((c) => `  - ${c}
 `);
       if (!dryRun) {
         const resolvedPath = resolvedPathFor(cfg.ship.stateDir, target.route);
-        const raw = existsSync34(resolvedPath) ? JSON.parse(readFileSync29(resolvedPath, "utf8")) : {};
+        const raw = existsSync34(resolvedPath) ? JSON.parse(readFileSync30(resolvedPath, "utf8")) : {};
         raw.agentSkills = result.agentSkills;
         mkdirSync22(dirOf(resolvedPath), { recursive: true });
         writeFileSync23(resolvedPath, `${JSON.stringify(raw, null, 2)}
@@ -18419,7 +18455,7 @@ ${changed2.map((c) => `  - ${c}
         throw e;
       }
       const oldName = cfg.ship.name;
-      writeFileSync23(cfg.configFile, setShipNameInYaml(readFileSync29(cfg.configFile, "utf8"), newName));
+      writeFileSync23(cfg.configFile, setShipNameInYaml(readFileSync30(cfg.configFile, "utf8"), newName));
       cfg.ship.name = newName;
       let renameMachineId;
       try {
@@ -18466,7 +18502,7 @@ ${changed2.map((c) => `  - ${c}
         process.exit(2);
       };
       if (sub !== "add" && sub !== "list" && sub !== "clone" && sub !== "hooks") usage2();
-      const configText = readFileSync29(cfg.configFile, "utf8");
+      const configText = readFileSync30(cfg.configFile, "utf8");
       if (sub === "hooks") {
         try {
           const a = parseHooksArgs(positional.slice(2), routeNamesOf(configText));
@@ -18480,7 +18516,7 @@ ${changed2.map((c) => `  - ${c}
             }
           }, read: (r) => {
             try {
-              return readFileSync29(resolvePath(dir, r), "utf8");
+              return readFileSync30(resolvePath(dir, r), "utf8");
             } catch {
               return void 0;
             }
@@ -18590,7 +18626,7 @@ ${changed2.map((c) => `  - ${c}
       if (sub === "list" && !routeName) usage2();
       if (sub === "add") {
         try {
-          const a = parseAddArgs(positional.slice(2), routeNamesOf(configText), (p) => existsSync34(resolvePath(p.replace(/^~(?=\/|$)/, homedir9()))));
+          const a = parseAddArgs(positional.slice(2), routeNamesOf(configText), (p) => existsSync34(resolvePath(p.replace(/^~(?=\/|$)/, homedir10()))));
           routeName = a.route;
           addPath = a.path;
           addName = a.name;
@@ -18621,7 +18657,7 @@ ${changed2.map((c) => `  - ${c}
       let resolvedRemotes;
       if (existsSync34(resolvedFile)) {
         try {
-          resolvedRemotes = JSON.parse(readFileSync29(resolvedFile, "utf8"));
+          resolvedRemotes = JSON.parse(readFileSync30(resolvedFile, "utf8"));
         } catch {
         }
       }
@@ -18642,7 +18678,7 @@ ${changed2.map((c) => `  - ${c}
               isCheckout,
               repoHasHooks: (d) => REPO_CONFIG_FILENAMES.some((f) => {
                 try {
-                  return Object.keys(parseRepoConfig(readFileSync29(resolvePath(d, f), "utf8"), f).hooks).length > 0;
+                  return Object.keys(parseRepoConfig(readFileSync30(resolvePath(d, f), "utf8"), f).hooks).length > 0;
                 } catch {
                   return false;
                 }
@@ -18697,7 +18733,7 @@ ${changed2.map((c) => `  - ${c}
           say("attached", { route: routeName, name: plan2.name, dir: plan2.target, mode: plan2.mode }, `cloned and attached ${plan2.target} to ${routeName} as ${plan2.mode === "dir" ? "dir" : `repos.${plan2.name}`} in ${cfg.configFile}`);
           break;
         }
-        const target = resolvePath(addPath.replace(/^~(?=\/|$)/, homedir9()));
+        const target = resolvePath(addPath.replace(/^~(?=\/|$)/, homedir10()));
         const top = existsSync34(target) ? gitOk(target, ["rev-parse", "--show-toplevel"]) : null;
         if (!top) throw new ReposError(`${target} is not a git checkout`);
         const origin = originOf(top);
@@ -18751,7 +18787,7 @@ ${changed2.map((c) => `  - ${c}
           process.stdout.write(`created Repos row ${String(rowPayload.name)} (${String(rowPayload.remote)}) ${created.id}
 `);
           if (existsSync34(resolvedFile)) {
-            const raw = JSON.parse(readFileSync29(resolvedFile, "utf8"));
+            const raw = JSON.parse(readFileSync30(resolvedFile, "utf8"));
             raw.repoNames = { ...raw.repoNames, [created.id]: String(rowPayload.name) };
             raw.repoRemotes = { ...raw.repoRemotes, [created.id]: String(rowPayload.remote) };
             writeFileSync23(resolvedFile, `${JSON.stringify(raw, null, 2)}
@@ -19109,7 +19145,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           process.exit(2);
         }
         if (found.shipNameAdopted && !dryRun) {
-          writeFileSync23(cfg.configFile, setShipNameInYaml(readFileSync29(cfg.configFile, "utf8"), found.shipNameAdopted));
+          writeFileSync23(cfg.configFile, setShipNameInYaml(readFileSync30(cfg.configFile, "utf8"), found.shipNameAdopted));
           cfg.ship.name = found.shipNameAdopted;
         }
         if (found.shipRow) {
@@ -19155,7 +19191,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
         const hadPreviousFile = existsSync34(resolvedPath);
         if (hadPreviousFile) {
           try {
-            previous = JSON.parse(readFileSync29(resolvedPath, "utf8"));
+            previous = JSON.parse(readFileSync30(resolvedPath, "utf8"));
           } catch {
           }
         }
@@ -20013,7 +20049,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
       };
       const droppedRoutes = [];
       try {
-        const rawCfg = parseYaml2(readFileSync29(cfg.configFile, "utf8"));
+        const rawCfg = parseYaml2(readFileSync30(cfg.configFile, "utf8"));
         for (const r of rawCfg?.routes ?? []) {
           if (typeof r?.route !== "string" || cfg.routes.some((x) => x.route === r.route)) continue;
           try {
@@ -20107,7 +20143,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
     }
     case "log": {
       try {
-        const text = readFileSync29(cfg.ship.logFile, "utf8").split("\n");
+        const text = readFileSync30(cfg.ship.logFile, "utf8").split("\n");
         process.stdout.write(`${text.slice(-(Number(value("tail")) || 40)).join("\n")}
 `);
       } catch {
@@ -20130,7 +20166,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
       };
       if (!route.resolved) fail(`route ${route.route} is not connected \u2014 run \`crew connect\` first`);
       const tracker = new Tracker(route, cfg.ship);
-      const configText = readFileSync29(cfg.configFile, "utf8");
+      const configText = readFileSync30(cfg.configFile, "utf8");
       const cfgBase = dirname20(cfg.configFile);
       const configured = configuredRepos(configText, route.route, cfgBase);
       const dir = configured.find((r) => r.name === SAMPLE_REPO)?.dir ?? sampleDir(configured.map((r) => r.dir), route.reposBasePath, route.route.split("/")[0]);
@@ -20168,19 +20204,19 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
         if (row) {
           await tracker.deleteRepoRow(row.id);
           if (existsSync34(resolvedFile)) {
-            const raw = JSON.parse(readFileSync29(resolvedFile, "utf8"));
+            const raw = JSON.parse(readFileSync30(resolvedFile, "utf8"));
             if (raw.repoNames) delete raw.repoNames[row.id];
             if (raw.repoRemotes) delete raw.repoRemotes[row.id];
             writeFileSync23(resolvedFile, `${JSON.stringify(raw, null, 2)}
 `);
           }
         }
-        if (existsSync34(join36(dir, ".git")) && basename11(dir) === SAMPLE_REPO) rmSync15(dir, { recursive: true, force: true });
+        if (existsSync34(join37(dir, ".git")) && basename11(dir) === SAMPLE_REPO) rmSync15(dir, { recursive: true, force: true });
         say("removed", { dir, closed }, `removed the sample repo${closed.length ? `, closed ${closed.join(", ")}` : ""}`);
         break;
       }
       const projectId = route.resolved.areaId ?? resolveRepoProject(await tracker.projectRows(), value("project"));
-      const fresh = !existsSync34(join36(dir, ".git"));
+      const fresh = !existsSync34(join37(dir, ".git"));
       if (existsSync34(dir) && fresh && readdirSync14(dir).length > 0) fail(`${dir} exists and is not a git checkout \u2014 move it aside`);
       if (dryRun) {
         say("dry-run", { dir, newCheckout: fresh, repoRow: row?.id ?? null }, `would ${fresh ? "create" : "reuse"} ${dir}${row ? "" : ", create the Repos row"}, and file one ${tracker.contract.statuses.approved} ticket`);
@@ -20188,8 +20224,8 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
       }
       if (fresh) {
         mkdirSync22(dir, { recursive: true });
-        writeFileSync23(join36(dir, "README.md"), SAMPLE_README);
-        writeFileSync23(join36(dir, ".crew.yaml"), SAMPLE_CREW_YAML);
+        writeFileSync23(join37(dir, "README.md"), SAMPLE_README);
+        writeFileSync23(join37(dir, ".crew.yaml"), SAMPLE_CREW_YAML);
         const g = (...a) => {
           const r = spawnSync6("git", a, { cwd: dir, encoding: "utf8" });
           if (r.status !== 0) fail(`git ${a[0]} failed in ${dir}: ${(r.stderr || r.stdout).trim()}`);
@@ -20208,7 +20244,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
         });
         repoId = (await tracker.createRepoRow(payload)).id;
         if (existsSync34(resolvedFile)) {
-          const raw = JSON.parse(readFileSync29(resolvedFile, "utf8"));
+          const raw = JSON.parse(readFileSync30(resolvedFile, "utf8"));
           raw.repoNames = { ...raw.repoNames, [repoId]: SAMPLE_REPO };
           raw.repoRemotes = { ...raw.repoRemotes, [repoId]: SAMPLE_REMOTE };
           writeFileSync23(resolvedFile, `${JSON.stringify(raw, null, 2)}
@@ -20574,7 +20610,7 @@ routes:            ${cfg.routes.map((c) => c.route).join(", ")}
         const unitPlan = planInstall(cfg.ship, CREW_HOME, host, detectSystemd(), "run");
         const abandons = unitAbandonsAgents(unitPlan, (p) => {
           try {
-            return readFileSync29(p, "utf8");
+            return readFileSync30(p, "utf8");
           } catch {
             return null;
           }
@@ -20962,6 +20998,10 @@ ${foreign.join("\n")}
       }
       for (const l of doctorSelftestLines(readSelftest(cfg.ship.stateDir), shipToolchains(cfg.ship).map((t) => t.name))) {
         process.stdout.write(`${l}
+`);
+      }
+      for (const t of shipToolchains(cfg.ship).filter((t2) => t2.harness === "claude")) {
+        process.stdout.write(`auth:              ${t.name}: ${describeClaudeAuth(t)}
 `);
       }
       const interactive = !!(process.stdin.isTTY && process.stdout.isTTY);