@tablation/crew 0.99.0 → 0.100.0

package/dist/cli.js

@@ -45,12 +45,12 @@ function periscopeSummary(cfg) {
   if (routes.length === 0) return `off (no enabled route sets hostPeriscopes: true; ${limits})`;
   return `ON for ${routes.join(", ")} (host ${cfg.ship.previewHost ?? "NOT SET (ship.previewHost)"}, ${limits})`;
 }
-async function previewHostProblem(cfg, resolve6 = (h) => lookup(h)) {
+async function previewHostProblem(cfg, resolve7 = (h) => lookup(h)) {
   if (periscopeRoutes(cfg).length === 0) return void 0;
   const host = cfg.ship.previewHost;
   if (!host) return "ship.previewHost is not set \u2014 a route hosts periscopes, so Passengers have no host to be sent to";
   try {
-    await resolve6(host);
+    await resolve7(host);
   } catch {
     return `ship.previewHost "${host}" does not resolve from this machine`;
   }
@@ -83,6 +83,25 @@ function routePeriscopeProblems(o) {
 function previewHostFinding(message) {
   return /does not resolve/.test(message) ? { severity: "attention", kind: "preview_host_unresolvable", message } : { severity: "blocker", kind: "preview_host", message };
 }
+var refId = (v) => typeof v === "string" ? v : v && typeof v === "object" && typeof v.id === "string" ? v.id : void 0;
+function duplicateLivePeriscopes(rows, tagOf, shipName2, route2) {
+  const byTicket = /* @__PURE__ */ new Map();
+  for (const r of rows) {
+    const t = refId(r.issue_id);
+    if (t) byTicket.set(t, [...byTicket.get(t) ?? [], r]);
+  }
+  const out = [];
+  for (const [t, rs] of byTicket) {
+    if (rs.length < 2) continue;
+    out.push({
+      severity: "attention",
+      kind: "periscope_duplicate_live",
+      ...route2 ? { route: route2 } : {},
+      message: `${tagOf(t)} has ${rs.length} live Periscopes rows (${rs.map((r) => `${r.id} on ${shipName2(r.ship_id)}${r.url ? ` ${r.url}` : ""}`).join("; ")}) \u2014 the periscope_url rollup assumes one; end all but one with \`crew periscope down\``
+    });
+  }
+  return out;
+}
 
 // src/periscope-state.ts
 import { existsSync as existsSync2, mkdirSync, readdirSync, readFileSync, rmSync, writeFileSync } from "fs";
@@ -121,11 +140,11 @@ function urlPort(url) {
   }
 }
 function portListening(port, timeoutMs = 500) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     const s = connect({ port, host: "127.0.0.1" });
     const done = (ok) => {
       s.destroy();
-      resolve6(ok);
+      resolve7(ok);
     };
     s.setTimeout(timeoutMs, () => done(false));
     s.once("connect", () => done(true));
@@ -564,8 +583,8 @@ function removeClaudeMcp(o) {
   if (got.missing) return `mcp: \`${o.bin}\` not found, so Claude Code was not touched`;
   if (got.status !== 0) return `mcp: no ${MCP_SERVER_NAME} server registered with Claude Code`;
   if (o.dryRun) return `(dry run) would remove the ${MCP_SERVER_NAME} MCP server from Claude Code (user scope)`;
-  const rm = runClaude(o.bin, ["mcp", "remove", MCP_SERVER_NAME, "--scope", "user"]);
-  return rm.status === 0 ? `mcp: removed the ${MCP_SERVER_NAME} MCP server from Claude Code (user scope)` : `mcp: \`claude mcp remove\` failed (${rm.stderr.trim() || `exit ${rm.status}`})`;
+  const rm2 = runClaude(o.bin, ["mcp", "remove", MCP_SERVER_NAME, "--scope", "user"]);
+  return rm2.status === 0 ? `mcp: removed the ${MCP_SERVER_NAME} MCP server from Claude Code (user scope)` : `mcp: \`claude mcp remove\` failed (${rm2.stderr.trim() || `exit ${rm2.status}`})`;
 }
 
 // src/launcher.ts
@@ -601,10 +620,10 @@ function selectsCustomModelProvider(args) {
   }
   return false;
 }
-function parseOmlxSettings(text) {
+function parseOmlxSettings(text2) {
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch {
     return void 0;
   }
@@ -825,32 +844,32 @@ var BLOCK_RE = new RegExp(`${escapeRe(PAIR_BLOCK_START)}[\\s\\S]*?${escapeRe(PAI
 function escapeRe(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function hasPairBlock(text) {
-  return BLOCK_RE.test(text);
+function hasPairBlock(text2) {
+  return BLOCK_RE.test(text2);
 }
-function pairBlockIsBroken(text) {
-  return !hasPairBlock(text) && (text.includes(PAIR_BLOCK_START) || text.includes(PAIR_BLOCK_END));
+function pairBlockIsBroken(text2) {
+  return !hasPairBlock(text2) && (text2.includes(PAIR_BLOCK_START) || text2.includes(PAIR_BLOCK_END));
 }
-function upsertPairBlock(text, block) {
-  if (hasPairBlock(text)) return text.replace(BLOCK_RE, () => `${block}
+function upsertPairBlock(text2, block) {
+  if (hasPairBlock(text2)) return text2.replace(BLOCK_RE, () => `${block}
 `);
-  if (text.trim() === "") return `${block}
+  if (text2.trim() === "") return `${block}
 `;
-  return `${text.replace(/\n*$/, "")}
+  return `${text2.replace(/\n*$/, "")}
 
 ${block}
 `;
 }
-function removePairBlock(text) {
-  if (!hasPairBlock(text)) return text;
-  return text.replace(new RegExp(`\\n*${BLOCK_RE.source}`), "\n").replace(/^\n+/, "").replace(/\n{3,}/g, "\n\n");
+function removePairBlock(text2) {
+  if (!hasPairBlock(text2)) return text2;
+  return text2.replace(new RegExp(`\\n*${BLOCK_RE.source}`), "\n").replace(/^\n+/, "").replace(/\n{3,}/g, "\n\n");
 }
 function readIfExists(path) {
   return existsSync5(path) ? readFileSync7(path, "utf8") : void 0;
 }
-function writeFileMkdir(path, text) {
+function writeFileMkdir(path, text2) {
   mkdirSync4(dirname2(path), { recursive: true });
-  writeFileSync3(path, text);
+  writeFileSync3(path, text2);
 }
 function installBlockFile(path, harness, dryRun) {
   const before = readIfExists(path) ?? "";
@@ -870,9 +889,9 @@ function removeBlockFile(path, dryRun) {
   return true;
 }
 function blockVerdict(path, harness) {
-  const text = readIfExists(path);
-  if (text === void 0 || !hasPairBlock(text)) return { ok: false, detail: `no managed block in ${path}` };
-  if (!text.includes(pairBlock(harness))) return { ok: false, detail: `the managed block in ${path} is out of date \u2014 run crew connect` };
+  const text2 = readIfExists(path);
+  if (text2 === void 0 || !hasPairBlock(text2)) return { ok: false, detail: `no managed block in ${path}` };
+  if (!text2.includes(pairBlock(harness))) return { ok: false, detail: `the managed block in ${path} is out of date \u2014 run crew connect` };
   return { ok: true, detail: "" };
 }
 var HEADER_RE = /^\s*\[\[?\s*([^\]]+?)\s*\]\]?\s*(#.*)?$/;
@@ -894,24 +913,24 @@ function tomlTableRange(lines, name) {
   return [start, end];
 }
 var tomlString = (v) => JSON.stringify(v);
-function upsertTomlTable(text, name, table2) {
-  const lines = text.split("\n");
+function upsertTomlTable(text2, name, table2) {
+  const lines = text2.split("\n");
   const r = tomlTableRange(lines, name);
   if (r) {
     lines.splice(r[0], r[1] - r[0], ...table2);
     return lines.join("\n");
   }
-  const body = text.replace(/\n*$/, "");
+  const body = text2.replace(/\n*$/, "");
   return body === "" ? `${table2.join("\n")}
 ` : `${body}
 
 ${table2.join("\n")}
 `;
 }
-function removeTomlTable(text, name) {
-  const lines = text.split("\n");
+function removeTomlTable(text2, name) {
+  const lines = text2.split("\n");
   let r = tomlTableRange(lines, name);
-  if (!r) return text;
+  if (!r) return text2;
   while (r) {
     let [start, end] = r;
     if (start > 0 && lines[start - 1].trim() === "") start--;
@@ -1145,10 +1164,10 @@ var geminiPaths = (home) => ({
   config: join8(home, ".gemini", "settings.json")
 });
 function readGeminiSettings(path) {
-  const text = readIfExists(path);
-  if (text === void 0 || text.trim() === "") return {};
+  const text2 = readIfExists(path);
+  if (text2 === void 0 || text2.trim() === "") return {};
   try {
-    const j = JSON.parse(text);
+    const j = JSON.parse(text2);
     return j && typeof j === "object" && !Array.isArray(j) ? j : void 0;
   } catch {
     return void 0;
@@ -1248,10 +1267,10 @@ function vscodeUserDirs(o) {
 }
 var COPILOT_FRONTMATTER = '---\napplyTo: "**"\n---\n\n';
 function readVscodeMcp(path) {
-  const text = readIfExists(path);
-  if (text === void 0 || text.trim() === "") return {};
+  const text2 = readIfExists(path);
+  if (text2 === void 0 || text2.trim() === "") return {};
   try {
-    const j = JSON.parse(text);
+    const j = JSON.parse(text2);
     return j && typeof j === "object" && !Array.isArray(j) ? j : void 0;
   } catch {
     return void 0;
@@ -1427,9 +1446,9 @@ function mapGeminiLine(line) {
 function createGeminiStreamMapper() {
   let pending = "";
   const flush = () => {
-    const text = pending;
+    const text2 = pending;
     pending = "";
-    return text ? [{ kind: "text", text }] : [];
+    return text2 ? [{ kind: "text", text: text2 }] : [];
   };
   return {
     flush,
@@ -1739,9 +1758,9 @@ function storeForgeToken(forges, host, token, stateDir, env = process.env) {
   if (!token.trim()) throw new ForgeError("empty token");
   i.write(f.entry.token, token.trim(), { host: f.host, stateDir, env });
 }
-function parseCredentialInput(text) {
+function parseCredentialInput(text2) {
   const out = {};
-  for (const line of text.split("\n")) {
+  for (const line of text2.split("\n")) {
     if (line === "") break;
     const eq2 = line.indexOf("=");
     if (eq2 > 0) out[line.slice(0, eq2)] = line.slice(eq2 + 1);
@@ -2129,10 +2148,10 @@ function rejectUnknown(obj, allowed, where, file) {
     );
   }
 }
-function parseRepoConfig(text, file) {
+function parseRepoConfig(text2, file) {
   let raw;
   try {
-    raw = file.endsWith(".json") ? JSON.parse(text) : parse(text);
+    raw = file.endsWith(".json") ? JSON.parse(text2) : parse(text2);
   } catch (e) {
     throw new RepoConfigError(`${file}: could not be parsed \u2014 ${e.message}`);
   }
@@ -2648,9 +2667,9 @@ function parseShipEnv(v) {
     if (typeof val !== "string" && typeof val !== "number" && typeof val !== "boolean") {
       throw new ConfigError(`ship.env.${k} must be a string, number or boolean`);
     }
-    const text = String(val);
-    if (/[\r\n\0]/.test(text)) throw new ConfigError(`ship.env.${k} must be a single line`);
-    out[k] = text;
+    const text2 = String(val);
+    if (/[\r\n\0]/.test(text2)) throw new ConfigError(`ship.env.${k} must be a single line`);
+    out[k] = text2;
   }
   return Object.keys(out).length ? out : void 0;
 }
@@ -3620,10 +3639,10 @@ function runScript(script, opts) {
     let output = "";
     let pending = "";
     const absorb = (buf) => {
-      const text = buf.toString();
-      output += text;
+      const text2 = buf.toString();
+      output += text2;
       if (!opts.onLine) return;
-      pending += text;
+      pending += text2;
       const lines = pending.split("\n");
       pending = lines.pop() ?? "";
       for (const l of lines) opts.onLine(l);
@@ -4043,9 +4062,9 @@ function planCron(ship, crewHome, job) {
 function unitAbandonsAgents(plan, read) {
   const path = plan.unitPaths[0];
   if (!path || plan.mechanism !== "launchd" && plan.mechanism !== "systemd") return null;
-  const text = read(path);
-  if (text === null) return null;
-  return plan.mechanism === "launchd" ? /<key>AbandonProcessGroup<\/key>\s*<true\/>/.test(text) : /^KillMode=process\s*$/m.test(text);
+  const text2 = read(path);
+  if (text2 === null) return null;
+  return plan.mechanism === "launchd" ? /<key>AbandonProcessGroup<\/key>\s*<true\/>/.test(text2) : /^KillMode=process\s*$/m.test(text2);
 }
 function planInstall(ship, crewHome, hostShip, hasSystemd, job = "run", ctx = USER_INSTALL) {
   if (hostShip === "macos") return planLaunchd(ship, crewHome, job);
@@ -4230,8 +4249,8 @@ function launchAgentsDir() {
 function xmlUnescape(s) {
   return s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
 }
-function programFromPlist(text) {
-  const block = /<key>ProgramArguments<\/key>\s*<array>([\s\S]*?)<\/array>/.exec(text);
+function programFromPlist(text2) {
+  const block = /<key>ProgramArguments<\/key>\s*<array>([\s\S]*?)<\/array>/.exec(text2);
   if (!block) return null;
   const args = [...block[1].matchAll(/<string>([\s\S]*?)<\/string>/g)].map((m) => xmlUnescape(m[1]));
   return args.find((a) => a.endsWith("/bin/crew")) ?? args[0] ?? null;
@@ -4297,9 +4316,9 @@ function clearForeignLaunchdUnits(crewHome, replace, dryRun, log, dir, loaded) {
 function removeAllLaunchdUnits(dryRun, log, dir, loaded) {
   for (const unit of listLaunchdUnits(dir, loaded)) removeLaunchdUnit(unit, dryRun, log);
 }
-function parseLaunchctlList(text) {
+function parseLaunchctlList(text2) {
   const jobs = /* @__PURE__ */ new Map();
-  for (const line of text.split("\n")) {
+  for (const line of text2.split("\n")) {
     const cols = line.split("	");
     if (cols.length !== 3 || cols[2] === "Label") continue;
     jobs.set(cols[2], { pid: cols[0], lastExit: cols[1] });
@@ -4323,8 +4342,8 @@ function readCrontab() {
   const res = spawnSync4("crontab", ["-l"], { encoding: "utf8" });
   return res.status === 0 ? res.stdout ?? "" : "";
 }
-function writeCrontab(text) {
-  spawnSync4("crontab", ["-"], { input: text, encoding: "utf8" });
+function writeCrontab(text2) {
+  spawnSync4("crontab", ["-"], { input: text2, encoding: "utf8" });
 }
 function addCrontabLine(marker, line) {
   const existing = readCrontab();
@@ -5337,10 +5356,10 @@ function formatPushAuth(repo, r) {
   return `${label}FAILED \u2014 ${r.detail}; ${r.hint}
 `;
 }
-async function settleRepos(items, nameOf, resolve6) {
+async function settleRepos(items, nameOf, resolve7) {
   const out = await Promise.all(items.map(async (t) => {
     try {
-      return { ok: true, value: await resolve6(t) };
+      return { ok: true, value: await resolve7(t) };
     } catch (e) {
       return { ok: false, repo: nameOf(t), detail: e.message };
     }
@@ -6641,8 +6660,8 @@ async function replayQueuedTicketCounters(stateDir, route2, keyFor, log, now = /
 
 // src/ticket-attribution.ts
 var TICKET_KEY_RE = /\b[A-Z][A-Z0-9]{1,9}-\d+\b/g;
-function ticketMentions(text) {
-  return [...text.matchAll(TICKET_KEY_RE)].map((m) => m[0]);
+function ticketMentions(text2) {
+  return [...text2.matchAll(TICKET_KEY_RE)].map((m) => m[0]);
 }
 var TicketAttributionTracker = class {
   #tokensByTicket = /* @__PURE__ */ new Map();
@@ -6661,13 +6680,13 @@ var TicketAttributionTracker = class {
     return this.#current;
   }
   /** Record the mentions in `text` without crediting tokens (a claim needs "which ticket" before the turn's usage line arrives). */
-  note(text) {
-    const mentions = ticketMentions(text);
+  note(text2) {
+    const mentions = ticketMentions(text2);
     if (mentions.length > 0) this.#current = mentions[0];
   }
   /** One assistant turn: its combined visible text (thinking + text blocks) and its own token cost. */
-  add(text, tokens) {
-    const mentions = ticketMentions(text);
+  add(text2, tokens) {
+    const mentions = ticketMentions(text2);
     if (mentions.length > 0) this.#current = mentions[0];
     if (this.#current === void 0 || tokens <= 0) return;
     this.#turns++;
@@ -6764,10 +6783,10 @@ function resultText(content) {
   if (Array.isArray(content)) return content.map((c) => c && typeof c.text === "string" ? c.text : "").join("\n");
   return "";
 }
-function isTransportFailure(isError, text) {
+function isTransportFailure(isError, text2) {
   if (!isError) {
     try {
-      const doc = JSON.parse(text);
+      const doc = JSON.parse(text2);
       if (doc && typeof doc === "object") {
         const code = doc.statusCode;
         return typeof code === "number" && code >= 500;
@@ -6775,7 +6794,7 @@ function isTransportFailure(isError, text) {
     } catch {
     }
   }
-  return TRANSPORT_FAILURE.test(text);
+  return TRANSPORT_FAILURE.test(text2);
 }
 var HandoffTranscriptTracker = class {
   open = /* @__PURE__ */ new Map();
@@ -7672,6 +7691,30 @@ var Tracker = class {
       limit: 200
     });
   }
+  /**
+   * Every `live` Periscopes row on any ship (CREW-2871), for the one-per-issue
+   * guard and doctor. Empty without the table.
+   */
+  async livePeriscopesAllShips() {
+    const modelId = this.route.resolved?.periscopesModelId;
+    if (!modelId) return [];
+    return this.client.records.list(modelId, {
+      filters: encodeFilters([{ columnName: "state", operator: "EQ", value: "live" }]),
+      limit: 500
+    });
+  }
+  /** The `live` Periscopes rows of one ticket, on any ship (CREW-2871). */
+  async livePeriscopesForTicket(ticketRecordId) {
+    const modelId = this.route.resolved?.periscopesModelId;
+    if (!modelId) return [];
+    return this.client.records.list(modelId, {
+      filters: encodeFilters([
+        { columnName: "issue_id", operator: "EQ", value: ticketRecordId },
+        { columnName: "state", operator: "EQ", value: "live" }
+      ]),
+      limit: 50
+    });
+  }
   /** Patches one Periscopes row (EPIC-077). */
   async updatePeriscope(rowId, fields) {
     const modelId = this.route.resolved?.periscopesModelId;
@@ -7696,12 +7739,12 @@ var Tracker = class {
     const conds = [{ columnName: "ship_id", operator: "EQ", value: shipId }];
     if (states?.length) conds.push({ columnName: "state", operator: "IN", value: states });
     const rows = await this.client.records.list(modelId, { filters: encodeFilters(conds), limit: 200 });
-    const refId = (v) => typeof v === "string" ? v : v && typeof v === "object" && typeof v.id === "string" ? v.id : void 0;
-    const ids = [...new Set(rows.map((r) => refId(r.issue_id)).filter((x) => !!x))];
+    const refId2 = (v) => typeof v === "string" ? v : v && typeof v === "object" && typeof v.id === "string" ? v.id : void 0;
+    const ids = [...new Set(rows.map((r) => refId2(r.issue_id)).filter((x) => !!x))];
     const tickets = new Map((await this.ticketsByIds(ids)).map((t) => [t.id, t]));
     const out = [];
     for (const row of rows) {
-      const t = tickets.get(refId(row.issue_id) ?? "");
+      const t = tickets.get(refId2(row.issue_id) ?? "");
       if (t) out.push({ row, ticket: t });
     }
     return out.sort((a, b) => String(b.row.started_at ?? "").localeCompare(String(a.row.started_at ?? "")));
@@ -8610,15 +8653,15 @@ async function replayPendingHandoffs(i) {
         continue;
       }
       if (v.kind === "unverified") throw new Error(v.why);
-      const text = rec.comment ?? (rec.commentLanded ? "" : rec.finalText);
-      if (text) {
-        const head = firstLine(text);
+      const text2 = rec.comment ?? (rec.commentLanded ? "" : rec.finalText);
+      if (text2) {
+        const head = firstLine(text2);
         const cc = i.contract.comments;
         const seen = (await i.writer.comments()).some((c) => {
           const row = c;
           return row[cc.parent] === t.id && row[cc.author] === seatId && firstLine(String(row[cc.body] ?? "")) === head;
         });
-        if (!seen) await i.writer.postComment(t.id, text, seatId);
+        if (!seen) await i.writer.postComment(t.id, text2, seatId);
       }
       await i.writer.postEvent(t.id, pushedEventBody(v.sha, v.remote, v.branch), seatId, "pushed");
       await i.writer.updateTicket(t.id, rec.patch);
@@ -8647,15 +8690,15 @@ var SkillIncludeError = class extends Error {
 var MAX_INCLUDE_DEPTH = 3;
 var MAX_INCLUDED_BYTES = 2e5;
 var MARKER = /\{\{[ \t]*skill:[ \t]*([^{}\r\n]*?)[ \t]*\}\}/g;
-function skillMarkerNames(text) {
+function skillMarkerNames(text2) {
   const names = [];
-  for (const m of text.matchAll(MARKER)) {
+  for (const m of text2.matchAll(MARKER)) {
     const name = m[1].trim();
     if (name && !names.includes(name)) names.push(name);
   }
   return names;
 }
-function expandSkillMarkers(text, lookup2, opts = {}) {
+function expandSkillMarkers(text2, lookup2, opts = {}) {
   const maxDepth = opts.maxDepth ?? MAX_INCLUDE_DEPTH;
   const maxBytes = opts.maxBytes ?? MAX_INCLUDED_BYTES;
   const warnings = [];
@@ -8682,7 +8725,7 @@ function expandSkillMarkers(text, lookup2, opts = {}) {
     included += bytes;
     return expand2(trimmed, [...chain, name]);
   });
-  return { text: expand2(text, []), warnings };
+  return { text: expand2(text2, []), warnings };
 }
 
 // src/skills.ts
@@ -8693,9 +8736,9 @@ import { TablationClient as TablationClient3, StaleWriteError as StaleWriteError
 
 // src/prompt-additions.ts
 var PROMPT_ADDITIONS_SEPARATOR = "---\n\nAdditional instructions from this workspace. Where they conflict with anything above, these take precedence.";
-function appendAdditions(text, additions) {
-  if (typeof additions !== "string" || additions.trim() === "") return text;
-  return `${text}
+function appendAdditions(text2, additions) {
+  if (typeof additions !== "string" || additions.trim() === "") return text2;
+  return `${text2}
 
 ${PROMPT_ADDITIONS_SEPARATOR}
 
@@ -9170,8 +9213,8 @@ function describeCrewLink(o) {
 var SkillSyncError = class extends Error {
 };
 function parseSkillFile(path) {
-  const text = readFileSync18(path, "utf8");
-  const match = /^---\n([\s\S]*?)\n---\n([\s\S]*)$/.exec(text);
+  const text2 = readFileSync18(path, "utf8");
+  const match = /^---\n([\s\S]*?)\n---\n([\s\S]*)$/.exec(text2);
   if (!match) throw new SkillSyncError(`${path}: missing YAML frontmatter (expected a leading --- block)`);
   const frontmatter = match[1];
   const body = match[2];
@@ -9360,8 +9403,8 @@ function isEditedSkillRow(row, localPrompt, cached) {
 function skillMarkerWarnings(promptsDir, personaPrompts) {
   const shipped = new Set(listLocalSkills(promptsDir).map((s) => s.name));
   const out = [];
-  for (const [role, text] of Object.entries(personaPrompts)) {
-    for (const name of skillMarkerNames(text ?? "")) {
+  for (const [role, text2] of Object.entries(personaPrompts)) {
+    for (const name of skillMarkerNames(text2 ?? "")) {
       if (!shipped.has(name)) out.push(`${role}: brief includes {{skill: ${name}}} but this prompt set ships no skill with that name`);
     }
   }
@@ -9698,15 +9741,15 @@ var FileTail = class {
       return "";
     }
     try {
-      let text = "";
+      let text2 = "";
       const chunk = Buffer.alloc(64 * 1024);
       for (; ; ) {
         const n = readSync(fd, chunk, 0, chunk.length, this.offset);
         if (n <= 0) break;
         this.offset += n;
-        text += this.decoder.write(chunk.subarray(0, n));
+        text2 += this.decoder.write(chunk.subarray(0, n));
       }
-      return text;
+      return text2;
     } finally {
       closeSync3(fd);
     }
@@ -9745,8 +9788,8 @@ var RunObserver = class {
     this.liveTicket = id.ticket ?? void 0;
     this.mapper = adapter.createStreamMapper?.() ?? { map: (p) => adapter.mapStreamLine(p), flush: () => [] };
   }
-  feed(text) {
-    this.buf += text;
+  feed(text2) {
+    this.buf += text2;
     const lines = this.buf.split("\n");
     this.buf = lines.pop() ?? "";
     for (const line of lines) this.handleLine(line);
@@ -10011,7 +10054,7 @@ function spawnAgent(plan, emit, hintMoved) {
   for (const w of plan.warnings ?? []) emit.warn(w, { step: "agent", role: plan.role });
   const eventsSink = openSink(plan.eventsPath);
   const id = identityOf(plan, adapter.harness);
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     let streamFd;
     try {
       mkdirSync12(dirname8(plan.streamPath), { recursive: true });
@@ -10095,7 +10138,7 @@ function spawnAgent(plan, emit, hintMoved) {
         plan.agentLog?.apiKey,
         hintMoved
       );
-      resolve6({ code: code ?? 1, ms: ms3, ...handoffPending ? { handoffPending } : {}, ...killed ? { killed } : {} });
+      resolve7({ code: code ?? 1, ms: ms3, ...handoffPending ? { handoffPending } : {}, ...killed ? { killed } : {} });
     });
     child.stdin?.on("error", (err3) => {
       emit.warn(`agent closed stdin before the prompt was delivered: ${err3.message}`, { step: "agent" });
@@ -10428,7 +10471,7 @@ var SELFTEST_TIMEOUT_MS = 12e4;
 var KEY_VAR = "CREW_API_KEY";
 var SELFTEST_PROMPT = "This is a read-only connectivity check. Use the tracker MCP tool to read this workspace (the workspaces find-one tool, using the workspace id below) and reply with the workspace's name alone, on one line. Do not write anything, do not create files, and do not use any other tool.\n\nWorkspace id: ";
 var realDeps = {
-  run: (o) => new Promise((resolve6) => {
+  run: (o) => new Promise((resolve7) => {
     let stdout = "";
     let stderr = "";
     let timedOut = false;
@@ -10436,7 +10479,7 @@ var realDeps = {
     const done = (r) => {
       if (!settled) {
         settled = true;
-        resolve6(r);
+        resolve7(r);
       }
     };
     const child = spawn3(o.bin, o.args, { cwd: o.cwd, env: o.env, stdio: ["pipe", "pipe", "pipe"], detached: true });
@@ -10545,12 +10588,12 @@ function classify(spec, run2, seen) {
     return fail("binary-not-found", `could not start \`${bin}\` (${run2.spawnError.message})`);
   }
   if (run2.timedOut) return fail("timeout", "no answer within the time limit");
-  const text = `${seen.toolOutput}
+  const text2 = `${seen.toolOutput}
 ${run2.stderr}`;
   if (REFUSED.test(seen.toolOutput) || seen.tools.some((t) => t.startsWith("mcp__")) && REFUSED.test(run2.stderr)) {
     return fail("key-refused", "the tracker returned 401/403 to the MCP call");
   }
-  if (seen.mcpFailed || !seen.tools.some((t) => t.startsWith("mcp__")) && MCP_GONE.test(`${text}
+  if (seen.mcpFailed || !seen.tools.some((t) => t.startsWith("mcp__")) && MCP_GONE.test(`${text2}
 ${seen.texts.join("\n")}`)) {
     return fail("mcp-unavailable", "the tracker MCP tool was not available to the session");
   }
@@ -10642,7 +10685,7 @@ function doctorSelftestLines(stored, toolchains) {
 }
 
 // src/cli.ts
-import { resolve as resolve5, dirname as dirname22, join as join44, basename as basename13 } from "path";
+import { resolve as resolve6, dirname as dirname23, join as join46, basename as basename14 } from "path";
 import { fileURLToPath } from "url";
 import { hostname as hostname3, homedir as homedir10 } from "os";
 import { spawnSync as spawnSync8 } from "child_process";
@@ -12212,13 +12255,13 @@ function writeDigest(o, d, role, stateDir, runId, own) {
       blockerInfo: d.info
     };
     const body = role === "qa" ? qaDigest(input) : buildingDigest(input);
-    const text = own ? `${ownRunBanner(own)}
+    const text2 = own ? `${ownRunBanner(own)}
 
 ${body}` : body;
     const path = digestPath(stateDir, routeSlug(o.route.route), role, runId);
-    writeFileSync17(path, text);
-    o.emit.emit(`queue digest written for ${role} (${Buffer.byteLength(text)} bytes)`, {
-      data: { role, bytes: Buffer.byteLength(text) }
+    writeFileSync17(path, text2);
+    o.emit.emit(`queue digest written for ${role} (${Buffer.byteLength(text2)} bytes)`, {
+      data: { role, bytes: Buffer.byteLength(text2) }
     });
     return true;
   } catch (e) {
@@ -12782,10 +12825,10 @@ function renderFullConfig(a, routeBlock) {
 routes:
 ${routeBlock}`;
 }
-function writeNewConfig(path, text) {
+function writeNewConfig(path, text2) {
   mkdirSync16(dirname11(path), { recursive: true });
   try {
-    writeFileSync18(path, text, { mode: 384, flag: "wx" });
+    writeFileSync18(path, text2, { mode: 384, flag: "wx" });
     return true;
   } catch (e) {
     if (e.code === "EEXIST") return false;
@@ -12822,11 +12865,11 @@ import { homedir as homedir8 } from "os";
 import { dirname as dirname12, join as join28 } from "path";
 import { delimiter as delimiter2 } from "path";
 var CHOICE_EXIT_CODE = 3;
-function createEmitter(json, write) {
+function createEmitter(json2, write) {
   return {
-    json,
+    json: json2,
     emit(event, message, data = {}) {
-      if (!json) return;
+      if (!json2) return;
       write(`${JSON.stringify({ ...data, event, message })}
 `);
     }
@@ -12933,8 +12976,8 @@ function matchRepoName(origin, resolved) {
   }
   return void 0;
 }
-function routeNamesOf(text) {
-  const routes = parseDocument(text).get("routes", true);
+function routeNamesOf(text2) {
+  const routes = parseDocument(text2).get("routes", true);
   if (!isSeq(routes)) return [];
   return routes.items.flatMap((i) => isMap(i) && typeof i.get("route") === "string" ? [i.get("route")] : []);
 }
@@ -12968,8 +13011,8 @@ function routeMapOf(doc, route2) {
   const have = isSeq(routes) ? routes.items.map((i) => isMap(i) ? String(i.get("route")) : "?").join(", ") : "none";
   throw new ReposError(`no route "${route2}" in the config (have: ${have})`);
 }
-function configuredRepos(text, route2, base) {
-  const doc = parseDocument(text);
+function configuredRepos(text2, route2, base) {
+  const doc = parseDocument(text2);
   const m = routeMapOf(doc, route2);
   const repos = m.get("repos");
   if (isMap(repos)) {
@@ -12983,8 +13026,8 @@ function configuredRepos(text, route2, base) {
   const dir = m.get("dir");
   return dir ? [{ name: basename8(String(dir)), dir: expandDir(String(dir), base) }] : [];
 }
-function cloneBaseOf(text, route2, base, isCheckout) {
-  const m = routeMapOf(parseDocument(text), route2);
+function cloneBaseOf(text2, route2, base, isCheckout) {
+  const m = routeMapOf(parseDocument(text2), route2);
   const repos = m.get("repos", true);
   if (isMap(repos) && repos.items.length > 0) return null;
   const dir = m.get("dir");
@@ -12992,8 +13035,8 @@ function cloneBaseOf(text, route2, base, isCheckout) {
   const abs = expandDir(String(dir), base);
   return isCheckout(abs) ? null : abs;
 }
-function routeSetsHooks(text, route2, name) {
-  const m = routeMapOf(parseDocument(text), route2);
+function routeSetsHooks(text2, route2, name) {
+  const m = routeMapOf(parseDocument(text2), route2);
   const repos = m.get("repos", true);
   let target = m;
   if (isMap(repos)) target = repos.get(name, true);
@@ -13100,12 +13143,12 @@ function planRepoAdd(i) {
   }
   return { text: String(doc), mode, name, block: renderBlock(m), warning, unmatched: !matched, droppedDir };
 }
-function planRepoRemove(text, base, route2, path) {
-  const doc = parseDocument(text);
+function planRepoRemove(text2, base, route2, path) {
+  const doc = parseDocument(text2);
   if (doc.errors.length > 0) throw new ReposError(`config is not valid YAML \u2014 ${doc.errors[0].message}`);
   const m = routeMapOf(doc, route2);
   const target = expandDir(path, base);
-  const existing = configuredRepos(text, route2, base);
+  const existing = configuredRepos(text2, route2, base);
   const hit = existing.find((e) => e.dir === target);
   if (!hit) throw new ReposError(`${target} is not configured on route ${route2}`);
   const repos = m.get("repos", true);
@@ -13230,8 +13273,8 @@ async function gatherHealth(c, check) {
 function routesInScope(routes, named) {
   return named ? routes.filter((r) => r.route === named) : routes;
 }
-function planEnable(text, route2) {
-  const doc = parseDocument2(text);
+function planEnable(text2, route2) {
+  const doc = parseDocument2(text2);
   routeMapOf(doc, route2).set("enabled", true);
   return String(doc);
 }
@@ -13425,13 +13468,13 @@ function realProvisionDeps(crewHome) {
     enableRoute(route2) {
       const file = configFile();
       if (!file) return false;
-      const text = readFileSync23(file, "utf8");
-      const doc = parseDocument3(text);
+      const text2 = readFileSync23(file, "utf8");
+      const doc = parseDocument3(text2);
       const routes = doc.get("routes");
       const entry = routes?.items?.find((r) => r.get("route") === route2);
       if (!entry) throw new Error(`route ${route2} is not in ${file}`);
       if (entry.get("enabled") === true) return false;
-      writeFileSync19(file, planEnable(text, route2));
+      writeFileSync19(file, planEnable(text2, route2));
       return true;
     },
     installState() {
@@ -15615,18 +15658,18 @@ function readFrom(file, from) {
   const buf = Buffer.alloc(size - from);
   readSync2(fd, buf, 0, buf.length, from);
   closeSync4(fd);
-  const text = buf.toString("utf8");
-  const lastNewline = text.lastIndexOf("\n");
+  const text2 = buf.toString("utf8");
+  const lastNewline = text2.lastIndexOf("\n");
   if (lastNewline === -1) return { events: [], offset: from };
   const events = [];
-  for (const line of text.slice(0, lastNewline).split("\n")) {
+  for (const line of text2.slice(0, lastNewline).split("\n")) {
     if (!line.trim()) continue;
     try {
       events.push(JSON.parse(line));
     } catch {
     }
   }
-  return { events, offset: from + Buffer.byteLength(text.slice(0, lastNewline + 1), "utf8") };
+  return { events, offset: from + Buffer.byteLength(text2.slice(0, lastNewline + 1), "utf8") };
 }
 function startWatch(o) {
   const out = o.out ?? ((s) => process.stdout.write(s));
@@ -15921,12 +15964,12 @@ function planNameSync(local, row, lastSynced) {
   if (rowMoved) return { drift: "row", action: "adopt" };
   return { drift: "local", action: "push" };
 }
-function shipNameOfYaml(text) {
-  const v = parseDocument5(text).getIn(["ship", "name"]);
+function shipNameOfYaml(text2) {
+  const v = parseDocument5(text2).getIn(["ship", "name"]);
   return typeof v === "string" && v.trim() ? v.trim() : void 0;
 }
-function setShipNameInYaml(text, name) {
-  const doc = parseDocument5(text);
+function setShipNameInYaml(text2, name) {
+  const doc = parseDocument5(text2);
   doc.setIn(["ship", "name"], name);
   return doc.toString();
 }
@@ -16015,8 +16058,8 @@ async function reconcileShipName(i) {
   }
   if (result.status !== "ok") return result;
   if (result.action === "adopt" || result.action === "row-wins") {
-    const text = readFileSync27(i.configFile, "utf8");
-    writeFileSync22(i.configFile, setShipNameInYaml(text, result.name));
+    const text2 = readFileSync27(i.configFile, "utf8");
+    writeFileSync22(i.configFile, setShipNameInYaml(text2, result.name));
     i.ship.name = result.name;
     if (result.action === "row-wins") {
       i.emit?.warn(
@@ -16917,11 +16960,11 @@ function packageManager(f) {
   return "npm";
 }
 function fromPackageJson(f) {
-  const text = f.read("package.json");
-  if (text === void 0) return void 0;
+  const text2 = f.read("package.json");
+  if (text2 === void 0) return void 0;
   let pkg;
   try {
-    pkg = JSON.parse(text);
+    pkg = JSON.parse(text2);
   } catch {
     return void 0;
   }
@@ -16944,11 +16987,11 @@ function fromPyproject(f) {
   return f.exists("pyproject.toml") ? { test: "pytest" } : void 0;
 }
 function fromMakefile(f) {
-  const text = f.read("Makefile") ?? f.read("makefile") ?? f.read("GNUmakefile");
-  if (text === void 0) return void 0;
+  const text2 = f.read("Makefile") ?? f.read("makefile") ?? f.read("GNUmakefile");
+  if (text2 === void 0) return void 0;
   const out = {};
   for (const target of ["test", "build"]) {
-    if (new RegExp(`^${target}\\s*:`, "m").test(text)) out[target] = `make ${target}`;
+    if (new RegExp(`^${target}\\s*:`, "m").test(text2)) out[target] = `make ${target}`;
   }
   return out;
 }
@@ -17041,16 +17084,16 @@ function parseHooksArgs(args, routes) {
   if (rest.length !== 1) throw new ReposError("expected: crew repos hooks [route] <name> [--suggest] [--agent] [--write route|repo] [--recipes ID,ID] [--hook KEY=CMD] [--json]");
   return { route: route2, name: rest[0] };
 }
-function repoDirOf(text, base, route2, name) {
-  const repos = configuredRepos(text, route2, base);
+function repoDirOf(text2, base, route2, name) {
+  const repos = configuredRepos(text2, route2, base);
   const hit = repos.find((r) => r.name === name);
   if (!hit) {
     throw new ReposError(`route ${route2} has no repo named "${name}" (have: ${repos.map((r) => r.name).join(", ") || "none"})`);
   }
   return hit.dir;
 }
-function planRouteHooks(text, route2, name, hooks, opts = {}) {
-  const doc = parseDocument6(text);
+function planRouteHooks(text2, route2, name, hooks, opts = {}) {
+  const doc = parseDocument6(text2);
   if (doc.errors.length > 0) throw new ReposError(`config is not valid YAML \u2014 ${doc.errors[0].message}`);
   const m = routeMapOf(doc, route2);
   const repos = m.get("repos", true);
@@ -17086,19 +17129,19 @@ function planRouteHooks(text, route2, name, hooks, opts = {}) {
   }
   return { text: String(doc), written, kept, replaced };
 }
-function clearRouteHooks(text, route2, name) {
-  const doc = parseDocument6(text);
+function clearRouteHooks(text2, route2, name) {
+  const doc = parseDocument6(text2);
   if (doc.errors.length > 0) throw new ReposError(`config is not valid YAML \u2014 ${doc.errors[0].message}`);
   const m = routeMapOf(doc, route2);
   const repos = m.get("repos", true);
   let target = m;
   if (isMap2(repos)) {
     const entry = repos.get(name, true);
-    if (!isMap2(entry)) return { text, removed: [] };
+    if (!isMap2(entry)) return { text: text2, removed: [] };
     target = entry;
   }
   const current = target.get("hooks", true);
-  if (!isMap2(current)) return { text, removed: [] };
+  if (!isMap2(current)) return { text: text2, removed: [] };
   const removed = current.items.map((i) => String(i.key.value ?? i.key));
   target.delete("hooks");
   return { text: String(doc), removed };
@@ -17122,9 +17165,9 @@ function starterRepoConfig(hooks, release) {
     if (release.verifyMatch) lines.push("  verify:", `    match: ${release.verifyMatch}`);
     lines.push("");
   } else lines.push("", "release:", "  # integrate: merging to the base branch is the release; nothing is deployed.", "  mode: integrate", "");
-  const text = lines.join("\n");
-  parseRepoConfig(text, ".crew.yaml");
-  return text;
+  const text2 = lines.join("\n");
+  parseRepoConfig(text2, ".crew.yaml");
+  return text2;
 }
 function existingRepoConfig(f) {
   return REPO_CONFIG_FILENAMES.find((n) => f.exists(n));
@@ -17183,7 +17226,7 @@ function agentInvocation(spec, model) {
   });
 }
 function parseAgentStream(out, dir) {
-  let text = "";
+  let text2 = "";
   let isError = false;
   const files = /* @__PURE__ */ new Set();
   let base = dir;
@@ -17205,19 +17248,19 @@ function parseAgentStream(out, dir) {
         if (typeof p === "string") files.add(isAbsolute2(p) ? relative(base, p) : p);
       }
     } else if (ev?.type === "result") {
-      text = typeof ev.result === "string" ? ev.result : "";
+      text2 = typeof ev.result === "string" ? ev.result : "";
       isError = ev.is_error === true;
     }
   }
-  return { text, isError, filesRead: [...files].sort() };
+  return { text: text2, isError, filesRead: [...files].sort() };
 }
-function parseAgentHooks(text) {
-  const start = text.indexOf("{");
-  const end = text.lastIndexOf("}");
+function parseAgentHooks(text2) {
+  const start = text2.indexOf("{");
+  const end = text2.lastIndexOf("}");
   if (start < 0 || end <= start) throw new AgentSuggestError("bad_output", "the toolchain did not answer with a JSON object");
   let obj;
   try {
-    obj = JSON.parse(text.slice(start, end + 1));
+    obj = JSON.parse(text2.slice(start, end + 1));
   } catch {
     throw new AgentSuggestError("bad_output", "the toolchain's answer was not valid JSON");
   }
@@ -17249,7 +17292,7 @@ async function runAgentSuggest(o) {
   const before = porcelain(o.dir);
   const timeout = AbortSignal.timeout(o.timeoutMs ?? DEFAULT_TIMEOUT_MS);
   const signal = o.signal ? AbortSignal.any([o.signal, timeout]) : timeout;
-  const run2 = await new Promise((resolve6) => {
+  const run2 = await new Promise((resolve7) => {
     let out = "";
     let err3 = "";
     const child = spawn4(bin, args, { cwd: o.dir, env, detached: true, stdio: ["pipe", "pipe", "pipe"] });
@@ -17258,7 +17301,7 @@ async function runAgentSuggest(o) {
       if (settled) return;
       settled = true;
       signal.removeEventListener("abort", onAbort);
-      resolve6(r);
+      resolve7(r);
     };
     const onAbort = () => {
       try {
@@ -17702,7 +17745,7 @@ function planEventsSweep(stateDir, retentionDays, now = Date.now()) {
 }
 
 // src/cli.ts
-import { realpathSync as realpathSync3, readFileSync as readFileSync36, existsSync as existsSync41, mkdirSync as mkdirSync26, writeFileSync as writeFileSync28, rmSync as rmSync19, unlinkSync as unlinkSync5, copyFileSync as copyFileSync2, renameSync as renameSync4, statSync as statSync14, readdirSync as readdirSync18 } from "fs";
+import { realpathSync as realpathSync3, readFileSync as readFileSync37, existsSync as existsSync42, mkdirSync as mkdirSync27, writeFileSync as writeFileSync29, rmSync as rmSync20, unlinkSync as unlinkSync5, copyFileSync as copyFileSync2, renameSync as renameSync4, statSync as statSync14, readdirSync as readdirSync19 } from "fs";
 import { createInterface } from "readline/promises";
 
 // src/periscope-cmd.ts
@@ -17710,6 +17753,13 @@ import { existsSync as existsSync35, mkdirSync as mkdirSync21, readFileSync as r
 import { join as join37 } from "path";
 var PeriscopeError = class extends Error {
 };
+var LivePeriscopeError = class extends PeriscopeError {
+  data;
+  constructor(tag, number, live) {
+    super(`${tag} already has a live periscope on ${live.ship}: ${live.url} (worktree ${live.worktree}) \u2014 run \`crew periscope down ${number} --keep|--discard\` on ${live.ship}, or resume it there with \`crew periscope up --resume ${number}\``);
+    this.data = { refused: "live_periscope_exists", ...live };
+  }
+};
 var priorDir = (stateDir) => join37(stateDir, "periscope-priors");
 var priorPath = (stateDir, ticketRecordId) => join37(priorDir(stateDir), `${ticketRecordId}.json`);
 function removePeriscopePrior(stateDir, ticketRecordId) {
@@ -17776,6 +17826,10 @@ function periscopeCaps(l) {
     idleMinutes: l.periscopeIdleMinutes ?? DEFAULT_PERISCOPE_IDLE_MINUTES2
   };
 }
+async function assertNoLivePeriscope(e, t, number) {
+  const live = (await e.liveRows(t.id))[0];
+  if (live) throw new LivePeriscopeError(t.tag, number, live);
+}
 async function existingRefusal(e, t) {
   if (t.closed) return `${t.tag} is ${t.status}; a closed ticket cannot be periscoped`;
   if (e.repoId && t.repoId !== e.repoId) return `${t.tag} belongs to a different repository than ${e.repoName}`;
@@ -17834,6 +17888,7 @@ async function runPeriscopeUp(d, args) {
     if (!ex) throw new PeriscopeError("--issue is not supported here");
     prior = await ex.load(args.issue);
     if (!prior) throw new PeriscopeError(`no ticket numbered ${args.issue} on this route`);
+    await assertNoLivePeriscope(ex, prior, args.issue);
     const refused = await existingRefusal(ex, prior);
     if (refused) throw new PeriscopeError(refused);
     const unsafe = d.baseProblem();
@@ -19018,7 +19073,7 @@ import { randomBytes as randomBytes2 } from "crypto";
 var DEFAULT_FLOOR_MS = 5e3;
 var DEFAULT_CEILING_MS = INTERVAL_SECONDS * 1e3;
 var ALLOWANCE_PAUSE_MS = 5 * 60 * 1e3;
-var defaultSleep = (ms3) => new Promise((resolve6) => setTimeout(resolve6, ms3));
+var defaultSleep = (ms3) => new Promise((resolve7) => setTimeout(resolve7, ms3));
 async function runDaemonLoop(o) {
   const floor = o.floorMs ?? DEFAULT_FLOOR_MS;
   const ceiling = o.ceilingMs ?? DEFAULT_CEILING_MS;
@@ -19075,15 +19130,15 @@ async function runDaemonLoop(o) {
   }
 }
 function latestMtime(path) {
-  let stat;
+  let stat2;
   try {
-    stat = statSync12(path);
+    stat2 = statSync12(path);
   } catch {
     return 0;
   }
-  if (stat.isFile()) return stat.mtimeMs;
-  if (!stat.isDirectory()) return 0;
-  let latest = stat.mtimeMs;
+  if (stat2.isFile()) return stat2.mtimeMs;
+  if (!stat2.isDirectory()) return 0;
+  let latest = stat2.mtimeMs;
   for (const entry of readdirSync16(path, { withFileTypes: true })) {
     latest = Math.max(latest, latestMtime(join42(path, entry.name)));
   }
@@ -19276,8 +19331,8 @@ async function runOnePassUnguarded(o) {
       started.push(role);
       let ready = () => {
       };
-      const settled = new Promise((resolve6) => {
-        ready = resolve6;
+      const settled = new Promise((resolve7) => {
+        ready = resolve7;
       });
       const run2 = spawn9(role, decision, ctx, { ready }).then(() => {
         breaker.recordSuccess(role);
@@ -19729,14 +19784,18 @@ function parseLine(line) {
     return null;
   }
 }
-async function execute(h, args, streaming) {
-  const finish = (r) => {
+async function execute(h, args, streaming, after) {
+  const finishRaw = (r) => {
     if (r.code !== 0) return { status: failureStatus(r), body: { error: cliMessage(r) } };
     const done = lastJsonLine(r.stdout);
     return done ? { status: 200, body: done } : { status: 502, body: { error: "the command finished without a result" } };
   };
+  const finish = async (r) => {
+    const f = finishRaw(r);
+    return f.status === 200 && after ? { status: 200, body: await after(f.body) } : f;
+  };
   if (!streaming) {
-    const f = finish(await h.run(args, () => {
+    const f = await finish(await h.run(args, () => {
     }));
     return reply(f.status, f.body);
   }
@@ -19748,7 +19807,7 @@ async function execute(h, args, streaming) {
         const ev = parseLine(line);
         if (ev) write(ev);
       });
-      const f = finish(r);
+      const f = await finish(r);
       write(f.status === 200 ? f.body : { event: "error", status: f.status, message: f.body.error });
     }
   };
@@ -19812,7 +19871,10 @@ async function handlePeriscopes(h, q) {
       `--${b.outcome}`,
       ...b.allowEmpty === true ? ["--allow-empty"] : [],
       "--json"
-    ], q.wantsStream);
+    ], q.wantsStream, h.mcp ? async (done) => {
+      await h.mcp.onDown(picked, done);
+      return done;
+    } : void 0);
   }
   const repo = plainText(b.repo, "repo", true);
   const topic = plainText(b.topic, "topic", true);
@@ -19840,12 +19902,13 @@ async function handlePeriscopes(h, q) {
     h.previewHost,
     ...requestedBy ? ["--requested-by", requestedBy] : [],
     ...b.isolate === true ? ["--isolate"] : [],
+    ...h.mcp ? ["--serve-mcp"] : [],
     "--no-open",
     "--json"
-  ], q.wantsStream);
+  ], q.wantsStream, h.mcp ? async (done) => ({ ...done, ...await h.mcp.onUp(picked, done) }) : void 0);
 }
 function runCrew(args, onLine, timeoutMs = 20 * 6e4) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     const child = spawn7(process.execPath, [process.argv[1] ?? "", ...args], { stdio: ["ignore", "pipe", "pipe"] });
     let stdout = "";
     let stderr = "";
@@ -19854,9 +19917,9 @@ function runCrew(args, onLine, timeoutMs = 20 * 6e4) {
       stdout += d.toString("utf8");
     });
     child.stderr.on("data", (d) => {
-      const text = d.toString("utf8");
-      stderr += text;
-      pending += text;
+      const text2 = d.toString("utf8");
+      stderr += text2;
+      pending += text2;
       let i;
       while ((i = pending.indexOf("\n")) >= 0) {
         const line = pending.slice(0, i).trim();
@@ -19867,12 +19930,12 @@ function runCrew(args, onLine, timeoutMs = 20 * 6e4) {
     const t = setTimeout(() => child.kill("SIGTERM"), timeoutMs);
     child.on("error", (e) => {
       clearTimeout(t);
-      resolve6({ code: 127, stdout, stderr: `${stderr}${e.message}
+      resolve7({ code: 127, stdout, stderr: `${stderr}${e.message}
 ` });
     });
     child.on("close", (code) => {
       clearTimeout(t);
-      resolve6({ code: code ?? 1, stdout, stderr });
+      resolve7({ code: code ?? 1, stdout, stderr });
     });
   });
 }
@@ -19993,16 +20056,16 @@ function lastLines2(path, n) {
   const cursorAt = (off) => encodeCursor({ dev: st.dev, ino: st.ino, off });
   if (n <= 0 || st.size === 0) return { lines: [], cursor: cursorAt(st.size), reset: false };
   let start = st.size;
-  let text = "";
-  while (start > 0 && text.split("\n").length <= n + 1 && st.size - start < MAX_TAIL_BYTES) {
+  let text2 = "";
+  while (start > 0 && text2.split("\n").length <= n + 1 && st.size - start < MAX_TAIL_BYTES) {
     const step = Math.min(64 * 1024, start);
     start -= step;
-    text = readRange(path, start, step).text + text;
+    text2 = readRange(path, start, step).text + text2;
   }
-  let lines = text.split("\n");
+  let lines = text2.split("\n");
   if (start > 0) lines = lines.slice(1);
   let end = st.size;
-  if (!text.endsWith("\n")) {
+  if (!text2.endsWith("\n")) {
     const frag = lines.pop() ?? "";
     end -= Buffer.byteLength(frag);
   } else lines.pop();
@@ -20044,9 +20107,9 @@ function readTail(live, opts) {
     off = 0;
     size = statSync13(path).size;
   }
-  const { text } = readRange(path, off, max);
-  const cut = text.lastIndexOf("\n");
-  const whole = cut < 0 ? "" : text.slice(0, cut + 1);
+  const { text: text2 } = readRange(path, off, max);
+  const cut = text2.lastIndexOf("\n");
+  const whole = cut < 0 ? "" : text2.slice(0, cut + 1);
   const st = statSync13(path);
   return {
     lines: whole.split("\n").filter((l) => l.length),
@@ -20055,7 +20118,7 @@ function readTail(live, opts) {
   };
 }
 function waitForChange(dir, ms3, signal) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     let w;
     const done = () => {
       clearTimeout(t);
@@ -20065,7 +20128,7 @@ function waitForChange(dir, ms3, signal) {
         w?.close();
       } catch {
       }
-      resolve6();
+      resolve7();
     };
     const t = setTimeout(done, ms3);
     const poll = setInterval(done, 500);
@@ -20212,13 +20275,13 @@ function send(res, r) {
 }
 async function socketIsStale(path) {
   if (!existsSync40(path)) return false;
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     const c = createConnection(path);
     c.once("connect", () => {
       c.destroy();
-      resolve6(false);
+      resolve7(false);
     });
-    c.once("error", () => resolve6(true));
+    c.once("error", () => resolve7(true));
   });
 }
 async function startControlServer(deps) {
@@ -20239,6 +20302,11 @@ async function startControlServer(deps) {
     res.on("close", () => abort.abort());
     void (async () => {
       try {
+        const mcp = /^\/periscopes\/([^/]+)\/mcp\/?$/.exec(new URL(req.url ?? "/", "http://ship").pathname);
+        if (mcp) {
+          if (!deps.periscopeMcp) return send(res, err2(404, "not found"));
+          return await deps.periscopeMcp(req, res, decodeURIComponent(mcp[1]));
+        }
         const m = /^Bearer (.+)$/.exec(req.headers.authorization ?? "");
         const verdict = await deps.auth.verify(m?.[1]?.trim() ?? "");
         if (verdict === "unauthorized") return send(res, err2(401, "invalid or revoked key"));
@@ -20252,10 +20320,10 @@ async function startControlServer(deps) {
       }
     })();
   });
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     server.once("error", (e) => {
       log(`control API not started: ${e.message}`);
-      resolve6(null);
+      resolve7(null);
     });
     server.listen(path, () => {
       try {
@@ -20263,7 +20331,7 @@ async function startControlServer(deps) {
       } catch {
       }
       server.on("error", (e) => log(`control API error: ${e.message}`));
-      resolve6({
+      resolve7({
         server,
         path,
         close: () => new Promise((done) => {
@@ -20294,23 +20362,456 @@ function schedulerHandler(control, run2 = runDetached) {
   };
 }
 function crewJson(args, timeoutMs = 6e4) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     execFile(process.execPath, [process.argv[1] ?? "", ...args], { timeout: timeoutMs, maxBuffer: 16 * 1024 * 1024 }, (_e, stdout) => {
       try {
         const v = JSON.parse(String(stdout));
-        resolve6(v && typeof v === "object" && !Array.isArray(v) ? v : null);
+        resolve7(v && typeof v === "object" && !Array.isArray(v) ? v : null);
       } catch {
-        resolve6(null);
+        resolve7(null);
       }
     });
   });
 }
 
+// src/periscope-mcp.ts
+import { lstat, mkdir, readdir, readFile, readlink, realpath, rm, stat, writeFile } from "fs/promises";
+import { basename as basename13, dirname as dirname22, isAbsolute as isAbsolute3, join as join45, relative as relative2, resolve as resolve5, sep } from "path";
+import { z } from "zod";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+
+// src/periscope-endpoints.ts
+import { randomBytes as randomBytes3 } from "crypto";
+import { chmodSync as chmodSync5, existsSync as existsSync41, mkdirSync as mkdirSync26, readdirSync as readdirSync18, readFileSync as readFileSync36, rmSync as rmSync19, writeFileSync as writeFileSync28 } from "fs";
+import { join as join44 } from "path";
+var secretDir = (stateDir) => join44(stateDir, "periscope-mcp");
+var secretFile = (stateDir, id) => join44(secretDir(stateDir), `${id}.json`);
+var endpointDir = (stateDir) => join44(stateDir, "periscope-endpoints");
+var endpointFile = (stateDir, id) => join44(endpointDir(stateDir), `${id}.json`);
+function mintPeriscopeSecret(stateDir, ticketRecordId) {
+  mkdirSync26(secretDir(stateDir), { recursive: true, mode: 448 });
+  const secret = randomBytes3(32).toString("base64url");
+  const file = secretFile(stateDir, ticketRecordId);
+  writeFileSync28(file, `${JSON.stringify({ secret })}
+`, { mode: 384 });
+  chmodSync5(file, 384);
+  return secret;
+}
+function readPeriscopeSecret(stateDir, ticketRecordId) {
+  try {
+    const v = JSON.parse(readFileSync36(secretFile(stateDir, ticketRecordId), "utf8"));
+    return typeof v.secret === "string" && v.secret ? v.secret : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function removePeriscopeSecret(stateDir, ticketRecordId) {
+  rmSync19(secretFile(stateDir, ticketRecordId), { force: true });
+}
+function readPeriscopeEndpoint(stateDir, ticketRecordId) {
+  try {
+    return JSON.parse(readFileSync36(endpointFile(stateDir, ticketRecordId), "utf8"));
+  } catch {
+    return void 0;
+  }
+}
+function writePeriscopeEndpoint(stateDir, rec) {
+  mkdirSync26(endpointDir(stateDir), { recursive: true });
+  writeFileSync28(endpointFile(stateDir, rec.ticketRecordId), `${JSON.stringify(rec, null, 2)}
+`);
+}
+function removePeriscopeEndpointRecord(stateDir, ticketRecordId) {
+  rmSync19(endpointFile(stateDir, ticketRecordId), { force: true });
+}
+function listPeriscopeEndpoints(stateDir) {
+  const dir = endpointDir(stateDir);
+  if (!existsSync41(dir)) return [];
+  const out = [];
+  for (const name of readdirSync18(dir)) {
+    if (!name.endsWith(".json")) continue;
+    const rec = readPeriscopeEndpoint(stateDir, name.slice(0, -".json".length));
+    if (rec && typeof rec.endpointId === "string") out.push(rec);
+  }
+  return out.sort((a, b) => a.registeredAt.localeCompare(b.registeredAt));
+}
+function periscopeEndpointUrl(relayUrl, ticket) {
+  return `${relayUrl.replace(/\/+$/, "")}/control/periscopes/${encodeURIComponent(ticket)}/mcp`;
+}
+async function registerPeriscopeEndpoint(d, p) {
+  const secret = readPeriscopeSecret(d.stateDir, p.ticketRecordId);
+  if (!secret) return { ok: false, message: `${p.ticket} has no MCP secret (it was not opened with --mcp, or has ended)` };
+  const api = d.apiFor(p.workspaceId);
+  if (!api) return { ok: false, message: `no API key known for workspace ${p.workspaceId}` };
+  const url = periscopeEndpointUrl(p.relayUrl, p.ticket);
+  const stored = readPeriscopeEndpoint(d.stateDir, p.ticketRecordId);
+  const out = await registerEndpoint(api, p.workspaceId, stored?.endpointId, {
+    label: `Periscope: ${d.shipName} ${p.ticket}`,
+    url,
+    mcpSecret: secret
+  });
+  if (out.kind !== "ok") {
+    return { ok: false, message: out.kind === "forbidden" ? "registering the endpoint was refused (403): the route key lacks REGISTER_MCP_ENDPOINTS" : out.message };
+  }
+  writePeriscopeEndpoint(d.stateDir, {
+    ticket: p.ticket,
+    ticketRecordId: p.ticketRecordId,
+    route: p.route,
+    workspaceId: p.workspaceId,
+    endpointId: out.endpointId,
+    url,
+    registeredAt: (d.now?.() ?? /* @__PURE__ */ new Date()).toISOString()
+  });
+  return { ok: true, endpointId: out.endpointId, url };
+}
+async function removeEndedPeriscopeEndpoints(d) {
+  let removed = 0;
+  for (const rec of listPeriscopeEndpoints(d.stateDir)) {
+    if (readPeriscopeSecret(d.stateDir, rec.ticketRecordId)) continue;
+    const api = d.apiFor(rec.workspaceId);
+    if (!api) {
+      d.warn(`no API key known for workspace ${rec.workspaceId} \u2014 cannot remove the MCP endpoint of ${rec.ticket}`);
+      continue;
+    }
+    const out = await removeEndpoint(api, rec.workspaceId, rec.endpointId);
+    if (out.kind === "ok") {
+      removePeriscopeEndpointRecord(d.stateDir, rec.ticketRecordId);
+      removed++;
+    } else d.warn(`could not remove the MCP endpoint of ${rec.ticket}: ${out.kind === "forbidden" ? "403" : out.message}`);
+  }
+  return removed;
+}
+
+// src/periscope-mcp.ts
+var PERISCOPE_HOOKS = ["test", "build", "ports", "handoff", "preview", "isolate"];
+var MAX_READ_BYTES = 1024 * 1024;
+var MAX_WRITE_BYTES = 4 * 1024 * 1024;
+var MAX_BODY_BYTES2 = 8 * 1024 * 1024;
+var MAX_HOOK_OUTPUT = 2e4;
+var MAX_DIFF = 2e5;
+var MAX_SEARCH_RESULTS = 500;
+var PathRefusal = class extends Error {
+};
+var isInside = (root, p) => {
+  const rel = relative2(root, p);
+  return rel === "" || !rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute3(rel);
+};
+async function realAncestor(p) {
+  let cur = p;
+  const tail3 = [];
+  let hops = 0;
+  for (; ; ) {
+    try {
+      return { real: await realpath(cur), rest: tail3.slice().reverse().join(sep) };
+    } catch (e) {
+      if (e.code !== "ENOENT") throw new PathRefusal(`cannot resolve ${p}`);
+    }
+    let isLink = false;
+    try {
+      isLink = (await lstat(cur)).isSymbolicLink();
+    } catch {
+    }
+    if (isLink) {
+      if (++hops > 40) throw new PathRefusal(`too many symbolic links resolving ${p}`);
+      cur = resolve5(dirname22(cur), await readlink(cur));
+      continue;
+    }
+    const parent = dirname22(cur);
+    if (parent === cur) throw new PathRefusal(`cannot resolve ${p}`);
+    tail3.push(basename13(cur));
+    cur = parent;
+  }
+}
+async function resolveInWorktree(root, requested) {
+  if (!requested || requested.includes("\0")) throw new PathRefusal("path is required");
+  const realRoot = await realpath(root);
+  let abs;
+  if (isAbsolute3(requested)) {
+    abs = resolve5(requested);
+    if (isInside(root, abs)) abs = join45(realRoot, relative2(root, abs));
+  } else {
+    abs = resolve5(realRoot, requested);
+  }
+  if (!isInside(realRoot, abs)) throw new PathRefusal(`${requested} is outside this periscope's worktree`);
+  const { real, rest } = await realAncestor(abs);
+  const final = rest ? join45(real, rest) : real;
+  if (!isInside(realRoot, final)) throw new PathRefusal(`${requested} is outside this periscope's worktree`);
+  if (relative2(realRoot, final).split(sep).includes(".git")) throw new PathRefusal(".git is not reachable from a periscope");
+  return final;
+}
+function globToRegExp(glob) {
+  let re = "";
+  for (let i = 0; i < glob.length; i++) {
+    const c = glob[i];
+    if (c === "*") {
+      if (glob[i + 1] === "*") {
+        i++;
+        if (glob[i + 1] === "/") {
+          i++;
+          re += "(?:.*/)?";
+        } else re += ".*";
+      } else re += "[^/]*";
+    } else if (c === "?") re += "[^/]";
+    else re += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+  }
+  return new RegExp(`^${re}$`);
+}
+var tailText = (s, max = MAX_HOOK_OUTPUT) => s.length > max ? `\u2026(${s.length - max} earlier characters omitted)
+${s.slice(-max)}` : s;
+var text = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...isError ? { isError: true } : {} });
+async function hookEnv(d, sc, name) {
+  const env = { CREW_TICKET: sc.ticket, CREW_BRANCH: sc.branch };
+  if (name !== "ports") {
+    const ports = await d.runHook(sc, "ports", env);
+    if (ports) Object.assign(env, parseEnvLines(ports.output));
+    if (sc.isolated && name !== "isolate") {
+      const iso = await d.runHook(sc, "isolate", env);
+      if (iso && iso.code === 0) Object.assign(env, parseEnvLines(iso.output));
+    }
+  }
+  if (name === "preview") env.CREW_PREVIEW_HOST = sc.host || "localhost";
+  return env;
+}
+function createPeriscopeMcpServer(d, sc) {
+  const server = new McpServer({ name: `crew-periscope-${sc.ticket}`, version: "0.1.0" });
+  const root = sc.worktree;
+  const inTree = (p) => resolveInWorktree(root, p);
+  const rel = async (abs) => relative2(await realpath(root), abs) || ".";
+  server.registerTool("read_file", {
+    title: "Read File",
+    description: "Read a text file in this periscope's worktree. `head`/`tail` return only the first/last N lines.",
+    inputSchema: { path: z.string(), head: z.number().int().positive().optional(), tail: z.number().int().positive().optional() },
+    annotations: { readOnlyHint: true, openWorldHint: false }
+  }, async ({ path, head, tail: tail3 }) => {
+    if (head && tail3) return text("Cannot specify both head and tail", true);
+    const abs = await inTree(path);
+    const st = await stat(abs);
+    if (!st.isFile()) return text(`${path} is not a file`, true);
+    if (st.size > MAX_READ_BYTES) return text(`${path} is ${st.size} bytes; read it in parts with head or tail (limit ${MAX_READ_BYTES})`, true);
+    const content = await readFile(abs, "utf8");
+    const lines = content.split("\n");
+    return text(head ? lines.slice(0, head).join("\n") : tail3 ? lines.slice(-tail3).join("\n") : content);
+  });
+  server.registerTool("list_directory", {
+    title: "List Directory",
+    description: 'List the entries directly inside a directory of the worktree ("." is its root), each marked [FILE] or [DIR].',
+    inputSchema: { path: z.string().default(".") },
+    annotations: { readOnlyHint: true, openWorldHint: false }
+  }, async ({ path }) => {
+    const abs = await inTree(path);
+    const entries = (await readdir(abs, { withFileTypes: true })).filter((e) => e.name !== ".git");
+    const lines = await Promise.all(entries.map(async (e) => {
+      if (e.isDirectory()) return `[DIR]  ${e.name}`;
+      const size = (await lstat(join45(abs, e.name))).size;
+      return `[FILE] ${e.name} (${size} bytes)`;
+    }));
+    return text(lines.join("\n") || "(empty)");
+  });
+  server.registerTool("search_files", {
+    title: "Search Files",
+    description: "Find files in the worktree whose path (relative to the worktree) matches the glob `pattern` (`*` stays within a directory, `**` crosses them). Lists files git tracks or would not ignore, so `node_modules` and build output do not appear.",
+    inputSchema: { pattern: z.string() },
+    annotations: { readOnlyHint: true, openWorldHint: false }
+  }, async ({ pattern }) => {
+    const re = globToRegExp(pattern);
+    const listing = git(root, ["ls-files", "-z", "--cached", "--others", "--exclude-standard"]);
+    const hits = listing.split("\0").filter((f) => f && re.test(f)).slice(0, MAX_SEARCH_RESULTS);
+    return text(hits.length ? hits.join("\n") : "No matches found");
+  });
+  server.registerTool("write_file", {
+    title: "Write File",
+    description: "Create a file in the worktree, or replace its whole content. Parent directories are created.",
+    inputSchema: { path: z.string(), content: z.string() },
+    annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: false }
+  }, async ({ path, content }) => {
+    if (Buffer.byteLength(content) > MAX_WRITE_BYTES) return text(`content exceeds ${MAX_WRITE_BYTES} bytes`, true);
+    const abs = await inTree(path);
+    if (abs === await realpath(root)) return text("path must name a file", true);
+    await mkdir(dirname22(abs), { recursive: true });
+    await inTree(path);
+    await writeFile(abs, content);
+    return text(`Wrote ${Buffer.byteLength(content)} bytes to ${await rel(abs)}`);
+  });
+  server.registerTool("edit_file", {
+    title: "Edit File",
+    description: "Replace an exact string in a file. `oldString` must occur exactly once unless `replaceAll` is true; whitespace and line endings must match.",
+    inputSchema: { path: z.string(), oldString: z.string().min(1), newString: z.string(), replaceAll: z.boolean().optional() },
+    annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: false }
+  }, async ({ path, oldString, newString, replaceAll }) => {
+    const abs = await inTree(path);
+    const st = await stat(abs);
+    if (!st.isFile()) return text(`${path} is not a file`, true);
+    if (st.size > MAX_WRITE_BYTES) return text(`${path} is too large to edit`, true);
+    const before = await readFile(abs, "utf8");
+    const count = before.split(oldString).length - 1;
+    if (count === 0) return text(`oldString was not found in ${path}`, true);
+    if (count > 1 && !replaceAll) return text(`oldString occurs ${count} times in ${path}; make it unique or set replaceAll`, true);
+    const after = replaceAll ? before.split(oldString).join(newString) : before.replace(oldString, () => newString);
+    await writeFile(abs, after);
+    return text(`Edited ${await rel(abs)} (${replaceAll ? count : 1} replacement${(replaceAll ? count : 1) === 1 ? "" : "s"})`);
+  });
+  server.registerTool("create_directory", {
+    title: "Create Directory",
+    description: "Create a directory (and any missing parents) in the worktree.",
+    inputSchema: { path: z.string() },
+    annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false }
+  }, async ({ path }) => {
+    const abs = await inTree(path);
+    await mkdir(abs, { recursive: true });
+    await inTree(path);
+    return text(`Created ${await rel(abs)}`);
+  });
+  server.registerTool("delete_file", {
+    title: "Delete File",
+    description: "Delete one file (or symlink) from the worktree. Directories are not deleted.",
+    inputSchema: { path: z.string() },
+    annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: false }
+  }, async ({ path }) => {
+    const parent = await inTree(dirname22(path) === "" ? "." : dirname22(path));
+    const abs = join45(parent, basename13(path));
+    if (basename13(path) === ".git" || abs === parent) return text("path must name a file", true);
+    const st = await lstat(abs).catch(() => void 0);
+    if (!st) return text(`${path} does not exist`, true);
+    if (st.isDirectory()) return text(`${path} is a directory; only files are deleted`, true);
+    await rm(abs, { force: false });
+    return text(`Deleted ${await rel(abs)}`);
+  });
+  server.registerTool("run_hook", {
+    title: "Run Hook",
+    description: `Run one of the repository's declared hooks in this worktree, with this periscope's environment, and return its output. Allowed names: ${PERISCOPE_HOOKS.join(", ")} (\`isolate\` only for a periscope opened isolated). A hook the repository does not declare is refused.`,
+    inputSchema: { name: z.enum(PERISCOPE_HOOKS) },
+    annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false }
+  }, async ({ name }) => {
+    if (name === "isolate" && !sc.isolated) return text("isolate is allowed only for a periscope opened with --isolate", true);
+    const env = await hookEnv(d, sc, name);
+    const res = await d.runHook(sc, name, env);
+    if (!res) return text(`${sc.repo} declares no \`${name}\` hook`, true);
+    return text(`exit ${res.code}
+${tailText(res.output)}`, res.code !== 0);
+  });
+  const branchGuard = () => {
+    const head = git(root, ["rev-parse", "--abbrev-ref", "HEAD"]);
+    return head === sc.branch ? void 0 : `the worktree is on ${head}, not the ticket branch ${sc.branch}`;
+  };
+  server.registerTool("git_status", {
+    title: "Git Status",
+    description: "Branch and changed files (`git status --short --branch`) of this worktree.",
+    inputSchema: {},
+    annotations: { readOnlyHint: true, openWorldHint: false }
+  }, async () => text(git(root, ["status", "--short", "--branch", "--untracked-files=all"])));
+  server.registerTool("git_diff", {
+    title: "Git Diff",
+    description: "The uncommitted changes against HEAD (staged and unstaged), optionally limited to one path. New untracked files appear in git_status, not here.",
+    inputSchema: { path: z.string().optional() },
+    annotations: { readOnlyHint: true, openWorldHint: false }
+  }, async ({ path }) => {
+    const args = ["diff", "HEAD", "--no-ext-diff", "--no-color"];
+    if (path) args.push("--", relative2(await realpath(root), await inTree(path)) || ".");
+    const out = git(root, args);
+    return text(out ? tailText(out, MAX_DIFF) : "(no changes)");
+  });
+  server.registerTool("git_commit", {
+    title: "Git Commit",
+    description: "Stage every change in the worktree and commit it on the ticket branch. It never pushes; ending the periscope with `--keep` does.",
+    inputSchema: { message: z.string().min(1).max(2e3) },
+    annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false }
+  }, async ({ message }) => {
+    const wrong = branchGuard();
+    if (wrong) return text(wrong, true);
+    git(root, ["add", "-A"]);
+    try {
+      git(root, ["commit", "--no-verify", "-m", message]);
+    } catch (e) {
+      if (e instanceof GitError && /nothing to commit|no changes added/.test(e.message)) return text("Nothing to commit", true);
+      throw e;
+    }
+    return text(`Committed ${git(root, ["rev-parse", "--short", "HEAD"])} on ${sc.branch}`);
+  });
+  return server;
+}
+var NOT_FOUND = { error: "not found" };
+var json = (res, status2, body) => {
+  const b = JSON.stringify(body);
+  res.writeHead(status2, { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(b), "Cache-Control": "no-store" });
+  res.end(b);
+};
+async function readBody(req) {
+  const chunks = [];
+  let n = 0;
+  for await (const c of req) {
+    n += c.length;
+    if (n > MAX_BODY_BYTES2) return null;
+    chunks.push(c);
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
+async function handlePeriscopeMcp(d, req, res, segment) {
+  const sc = d.find(segment);
+  const secret = sc ? readPeriscopeSecret(d.stateDir, sc.ticketRecordId) : void 0;
+  const presented = /^Bearer (.+)$/.exec(req.headers.authorization ?? "")?.[1]?.trim() ?? "";
+  if (!sc || !secret || !presented || !secretsMatch(presented, secret)) return json(res, 404, NOT_FOUND);
+  if (req.method !== "POST") {
+    res.setHeader("Allow", "POST");
+    return json(res, 405, { jsonrpc: "2.0", error: { code: -32e3, message: "Method not allowed." }, id: null });
+  }
+  const raw = await readBody(req);
+  if (raw === null) return json(res, 413, { jsonrpc: "2.0", error: { code: -32600, message: "request body too large" }, id: null });
+  let parsed;
+  try {
+    parsed = raw ? JSON.parse(raw) : void 0;
+  } catch {
+    return json(res, 400, { jsonrpc: "2.0", error: { code: -32700, message: "parse error" }, id: null });
+  }
+  const isCall = (m) => !!m && typeof m === "object" && m.method === "tools/call";
+  if (Array.isArray(parsed) ? parsed.some(isCall) : isCall(parsed)) await d.touch(sc).catch((e) => d.log?.(`periscope ${sc.ticket} activity not recorded: ${e.message}`));
+  try {
+    const server = createPeriscopeMcpServer(d, sc);
+    const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
+    await server.connect(transport);
+    res.on("close", () => {
+      void transport.close();
+      void server.close();
+    });
+    await transport.handleRequest(req, res, parsed);
+  } catch (e) {
+    if (!res.headersSent) json(res, 500, { jsonrpc: "2.0", error: { code: -32603, message: e.message || "internal error" }, id: null });
+  }
+}
+function findPeriscope(sidecars, segment) {
+  const m = /^(?:([A-Za-z]+)-)?(\d+)$/.exec(segment);
+  if (!m) return void 0;
+  const num = String(Number(m[2]));
+  return sidecars.find((sc) => {
+    const t = /^(?:([A-Za-z]+)-)?0*(\d+)$/.exec(sc.ticket);
+    if (!t || t[2] !== num) return false;
+    return !m[1] || !t[1] || m[1].toLowerCase() === t[1].toLowerCase();
+  });
+}
+
 // src/cli.ts
-var CREW_HOME = isCompiledBinary(import.meta.url) ? dirname22(process.execPath) : resolve5(dirname22(fileURLToPath(import.meta.url)), "..");
+var CREW_HOME = isCompiledBinary(import.meta.url) ? dirname23(process.execPath) : resolve6(dirname23(fileURLToPath(import.meta.url)), "..");
 var RELEASE_LOCK_TTL_MS = 20 * 60 * 1e3;
 var CYCLE_SECONDS2 = 120;
 var STALE_CYCLES = 3;
+async function duplicateLivePeriscopeProblems(route2, ship) {
+  try {
+    const tr = new Tracker(route2, ship);
+    const rows = await tr.livePeriscopesAllShips();
+    const refOf = (v) => typeof v === "string" ? v : v?.id;
+    const counts = /* @__PURE__ */ new Map();
+    for (const r of rows) {
+      const t = refOf(r.issue_id);
+      if (t) counts.set(t, (counts.get(t) ?? 0) + 1);
+    }
+    const dupIds = [...counts].filter(([, n]) => n > 1).map(([t]) => t);
+    if (dupIds.length === 0) return [];
+    const tags = new Map((await tr.ticketsByIds(dupIds)).map((t) => [t.id, t.issue_tag ?? t.issue_id]));
+    const ships = new Map((await tr.shipRows()).map((x) => [x.id, x.name ?? x.id]));
+    return duplicateLivePeriscopes(rows, (id) => tags.get(id) ?? id, (id) => id ? ships.get(id) ?? id : "an unknown ship", route2.route);
+  } catch {
+    return [];
+  }
+}
 function renderShipLine(s, issueLabelById) {
   const name = s.name ?? "(unnamed)";
   if (!s.last_seen) return `${name.padEnd(20)} never seen`;
@@ -20428,7 +20929,7 @@ No project here has what a route needs. Install the "${template.name}" library t
   return installed.project.slug;
 }
 function usage(problem, requested = false) {
-  const text = `crew \u2014 a standing team of headless agents
+  const text2 = `crew \u2014 a standing team of headless agents
 
   crew poll [route]              decide a cycle and report it; writes nothing
   crew run [route] [--role R]    run the winning role's session
@@ -20454,7 +20955,7 @@ function usage(problem, requested = false) {
   crew reap [route]              kill orphaned servers, drop worktrees for closed tickets
   crew drop [route] NNN          remove a merged ticket's worktree and branch
   crew rotate-passenger-url [route]   force a Host Passengers tunnel to reconnect with a fresh public URL
-  crew periscope up [[route] REPO] [--topic TEXT|--issue NNN] [--isolate] [--host H] [--assignee ID] [--no-open] [--open] [--dry-run] [--json]
+  crew periscope up [[route] REPO] [--topic TEXT|--issue NNN] [--isolate] [--serve-mcp] [--host H] [--assignee ID] [--no-open] [--open] [--dry-run] [--json]
   crew periscope up --resume NNN restart the preview an idle periscope's server was stopped for
                                  file a draft ticket, cut and prepare its worktree, start the repo's preview hook and record a Periscopes row (alias: start)
   crew periscope down [[route] NNN] --keep|--discard [--allow-empty] [--json]
@@ -20507,12 +21008,12 @@ Options:
 In watch: space pauses the stream, q quits.
 `;
   if (requested) {
-    process.stdout.write(text);
+    process.stdout.write(text2);
     process.exit(0);
   }
   process.stderr.write(problem ? `crew: ${problem}
 
-${text}` : text);
+${text2}` : text2);
   process.exit(2);
 }
 var argv = process.argv.slice(2);
@@ -20685,6 +21186,44 @@ if (command === "passenger-sync-daemon") {
         return void 0;
       }
     };
+  }, periscopeEndpointDeps = function() {
+    return {
+      stateDir: cfg.ship.stateDir,
+      shipName: cfg.ship.name,
+      apiFor: endpointApiFor(cfg.routes.filter((r) => r.enabled)),
+      warn: (m) => emit.warn(m, { step: "passengers" })
+    };
+  }, periscopeMcpDeps = function() {
+    const stateDir = cfg.ship.stateDir;
+    return {
+      stateDir,
+      find: (segment) => findPeriscope(readPeriscopeSidecars(stateDir), segment),
+      runHook: async (sc, name, env) => {
+        const rt = cfg.routes.find((r) => r.route === sc.route && r.enabled);
+        const repo = rt && (await resolvedRepos(rt)).find((r) => r.name === sc.repo);
+        const script = repo?.config.hooks[name];
+        if (!repo || !script) return null;
+        return runScript(script, {
+          cwd: sc.worktree,
+          env,
+          shell: resolveShell(repo.config.shell ?? cfg.ship.shell),
+          timeoutMs: name === "preview" ? 18e4 : 15 * 6e4
+        });
+      },
+      touch: async (sc) => {
+        const now = Date.now();
+        if (now - (periscopeTouched.get(sc.ticketRecordId) ?? 0) < PERISCOPE_TOUCH_EVERY_MS) return;
+        periscopeTouched.set(sc.ticketRecordId, now);
+        const rt = cfg.routes.find((r) => r.route === sc.route && r.enabled);
+        if (!rt) return;
+        const { idleMinutes } = periscopeCaps(cfg.ship);
+        const at = new Date(now).toISOString();
+        const expiresAt = new Date(now + idleMinutes * 6e4).toISOString();
+        await new Tracker(rt, cfg.ship).updatePeriscope(sc.periscopeRecordId, { last_activity_at: at, expires_at: expiresAt });
+        writePeriscopeSidecar(stateDir, { ...sc, lastActivityAt: at, expiresAt });
+      },
+      log: (m) => emit.warn(m, { step: "passengers" })
+    };
   }, endpointReconcileDeps = function(routes, relayHost) {
     return {
       stateDir: cfg.ship.stateDir,
@@ -20711,7 +21250,7 @@ if (command === "passenger-sync-daemon") {
     const unsafe = baseBranchUnsafe(out);
     return { action: out.action, unsafe, detail: unsafe ? describeUnsafeBase(out, remote, base) : out.detail };
   };
-  requireArmed2 = requireArmed, parseTicketNumber2 = parseTicketNumber, routeRelayUrl2 = routeRelayUrl, passengerApiKeys2 = passengerApiKeys, endpointApiFor2 = endpointApiFor, endpointReconcileDeps2 = endpointReconcileDeps, releaseRefused2 = releaseRefused, doctorMachineId2 = doctorMachineId, baseHealth2 = baseHealth;
+  requireArmed2 = requireArmed, parseTicketNumber2 = parseTicketNumber, routeRelayUrl2 = routeRelayUrl, passengerApiKeys2 = passengerApiKeys, endpointApiFor2 = endpointApiFor, periscopeEndpointDeps2 = periscopeEndpointDeps, periscopeMcpDeps2 = periscopeMcpDeps, endpointReconcileDeps2 = endpointReconcileDeps, releaseRefused2 = releaseRefused, doctorMachineId2 = doctorMachineId, baseHealth2 = baseHealth;
   let cfg;
   let firstRun;
   let firstRunFromFlags = false;
@@ -20767,7 +21306,7 @@ if (command === "passenger-sync-daemon") {
     } else {
       const toleratesNoRoutes = command === "credential" || command === "forge" || command === "repos" || command === "ship" || command === "disconnect" && flag("reset") || command === "connect" && flag("sign-out");
       const configless = command === "connect" && flag("sign-out") || command === "disconnect" && flag("reset");
-      if (configless && !existsSync41(findConfigFile(CREW_HOME))) {
+      if (configless && !existsSync42(findConfigFile(CREW_HOME))) {
         cfg = loadConfig(CREW_HOME, firstRunConfigPath(), { text: "ship: {}\n", allowNoRoutes: true });
       } else {
         cfg = loadConfig(CREW_HOME, void 0, toleratesNoRoutes ? { allowNoRoutes: true } : {});
@@ -20782,7 +21321,7 @@ if (command === "passenger-sync-daemon") {
     throw e;
   }
   if (command === "credential") {
-    const r = runCredential(positional[1], readFileSync36(0, "utf8"), cfg.ship.forges, cfg.ship.stateDir);
+    const r = runCredential(positional[1], readFileSync37(0, "utf8"), cfg.ship.forges, cfg.ship.stateDir);
     process.stdout.write(r.out);
     process.stderr.write(r.err);
     process.exit(r.code);
@@ -20794,9 +21333,9 @@ if (command === "passenger-sync-daemon") {
         forges: cfg.ship.forges,
         stateDir: cfg.ship.stateDir,
         configFile: cfg.configFile,
-        readFile: (p) => readFileSync36(p, "utf8"),
-        writeFile: (p, t) => writeFileSync28(p, t),
-        stdin: () => readFileSync36(0, "utf8"),
+        readFile: (p) => readFileSync37(p, "utf8"),
+        writeFile: (p, t) => writeFileSync29(p, t),
+        stdin: () => readFileSync37(0, "utf8"),
         env: process.env
       }
     );
@@ -20928,6 +21467,7 @@ if (command === "passenger-sync-daemon") {
       for (const plan of containerPlans) pending.push(reconcileEndpoint(plan.workspaceId, reconcile));
       for (const plan of plans) pending.push(reconcileRelayUrl(plan.workspaceId, apiRoutes));
       await Promise.all(pending);
+      await reconcilePeriscopeEndpoints();
     } catch (e) {
       emit.warn(`ship tunnel sync failed: ${e.message}`, { step: "passengers" });
     }
@@ -20947,6 +21487,22 @@ if (command === "passenger-sync-daemon") {
       emit.warn(`could not write relay_url: ${e.message}`, { step: "passengers" });
     }
   }
+  const periscopeTouched = /* @__PURE__ */ new Map();
+  const PERISCOPE_TOUCH_EVERY_MS = 3e4;
+  async function reconcilePeriscopeEndpoints() {
+    const d = periscopeEndpointDeps();
+    await removeEndedPeriscopeEndpoints(d);
+    const have = new Set(listPeriscopeEndpoints(cfg.ship.stateDir).map((e) => e.ticketRecordId));
+    for (const sc of readPeriscopeSidecars(cfg.ship.stateDir)) {
+      if (have.has(sc.ticketRecordId) || !sc.route || !readPeriscopeSecret(cfg.ship.stateDir, sc.ticketRecordId)) continue;
+      const rt = cfg.routes.find((r) => r.route === sc.route && r.enabled);
+      const ws = rt?.resolved?.workspaceId;
+      const relayUrl = rt && routeRelayUrl(rt);
+      if (!rt || !ws || !relayUrl) continue;
+      const out = await registerPeriscopeEndpoint(d, { ticket: sc.ticket, ticketRecordId: sc.ticketRecordId, route: sc.route, workspaceId: ws, relayUrl });
+      if (!out.ok) d.warn(`could not register the MCP endpoint of ${sc.ticket}: ${out.message}`);
+    }
+  }
   async function releaseFleet(opts = {}) {
     if (releaseRefused()) return;
     precheckTickets.clear();
@@ -21062,8 +21618,8 @@ if (command === "passenger-sync-daemon") {
     }
     if (host === "linux" && hasSystemd) {
       const label = labelFor(CREW_HOME, "run");
-      const staleTimer = join44(homedir10(), ".config", "systemd", "user", `${label}.timer`);
-      if (existsSync41(staleTimer)) {
+      const staleTimer = join46(homedir10(), ".config", "systemd", "user", `${label}.timer`);
+      if (existsSync42(staleTimer)) {
         process.stdout.write(
           `removing stale run timer from before the persistent-service cutover: ${staleTimer}${dryRun ? " (dry run)" : ""}
 `
@@ -21090,7 +21646,7 @@ if (command === "passenger-sync-daemon") {
     const tracker = new Tracker(c, cfg.ship);
     problems.push(...validateContract(tracker.contract).map((p) => `contract: ${p}`));
     for (const r of await resolvedRepos(c)) {
-      if (!existsSync41(r.dir)) problems.push(`repo ${r.name}: ${r.dir} is missing on disk`);
+      if (!existsSync42(r.dir)) problems.push(`repo ${r.name}: ${r.dir} is missing on disk`);
       if (!satisfies(host, r.config.platform)) problems.push(`repo ${r.name}: requires ${r.config.platform}, this host is ${host}`);
       readiness.push(...validateEffective(r.config).map((p) => `repo ${r.name}: ${p}`));
     }
@@ -21108,7 +21664,7 @@ if (command === "passenger-sync-daemon") {
   }
   async function doctorFix(o) {
     const routes = await Promise.all(routesInScope(cfg.routes, named).map((c) => gatherHealth({ route: c.route, enabled: c.enabled, hasRepos: reposOf(c).length > 0 }, () => routeProblems(c))));
-    const unitExists = (p) => existsSync41(p);
+    const unitExists = (p) => existsSync42(p);
     const crontab = o.host === "linux" ? spawnSync8("crontab", ["-l"], { encoding: "utf8" }).stdout ?? "" : "";
     const schedulerAbsent = o.host !== "windows" ? !schedulerInstalled(planInstall(cfg.ship, CREW_HOME, o.host, detectSystemd(), "run", installContext()), unitExists, crontab) : true;
     const plan = planFix({ routes, schedulerAbsent, host: o.host });
@@ -21125,7 +21681,7 @@ if (command === "passenger-sync-daemon") {
       for (const a of plan.actions) {
         if (a.kind === "enable") {
           if (prompter && !await prompter.confirm(`Route ${a.route} passes every check \u2014 set enabled: true in ${cfg.configFile}?`, false)) continue;
-          writeFileSync28(cfg.configFile, planEnable(readFileSync36(cfg.configFile, "utf8"), a.route));
+          writeFileSync29(cfg.configFile, planEnable(readFileSync37(cfg.configFile, "utf8"), a.route));
           enabledSound.add(a.route);
           changed2.push(`enabled route ${a.route} in ${cfg.configFile}`);
         } else {
@@ -22246,7 +22802,7 @@ ${cu.tail.trimEnd()}
         process.exit(1);
       }
       requireArmed("run the daemon loop");
-      const watchPaths = isCompiledBinary(import.meta.url) ? [process.execPath] : [join44(CREW_HOME, "src"), join44(CREW_HOME, "dist"), join44(CREW_HOME, "bin")];
+      const watchPaths = isCompiledBinary(import.meta.url) ? [process.execPath] : [join46(CREW_HOME, "src"), join46(CREW_HOME, "dist"), join46(CREW_HOME, "bin")];
       const configPaths = daemonConfigPaths(cfg);
       watchPaths.push(...configPaths);
       noteDaemonStarted(cfg.ship.stateDir);
@@ -22274,8 +22830,22 @@ ${cu.tail.trimEnd()}
           previewHost: cfg.ship.previewHost,
           maxPeriscopes: cfg.ship.maxPeriscopes,
           run: runCrew,
-          verifyIn: (token, ws) => controlAuth.verifyIn(token, ws)
+          verifyIn: (token, ws) => controlAuth.verifyIn(token, ws),
+          mcp: {
+            onUp: async (r, done) => {
+              const id = typeof done.ticketRecordId === "string" ? done.ticketRecordId : "";
+              const ticket = typeof done.ticket === "string" ? done.ticket : "";
+              const relayUrl = routeRelayUrl(cfg.routes.find((x) => x.route === r.route));
+              if (!relayUrl) return { mcpEndpointId: null, mcpWarning: "this ship has no relay URL yet, so the periscope's MCP endpoint is not registered; it is retried each cycle" };
+              const out = await registerPeriscopeEndpoint(periscopeEndpointDeps(), { ticket, ticketRecordId: id, route: r.route, workspaceId: r.workspaceId, relayUrl });
+              return out.ok ? { mcpEndpointId: out.endpointId, mcpUrl: out.url } : { mcpEndpointId: null, mcpWarning: out.message };
+            },
+            onDown: async () => {
+              await removeEndedPeriscopeEndpoints(periscopeEndpointDeps());
+            }
+          }
         },
+        periscopeMcp: controlRoutes.some((r) => r.enabled && r.hostPeriscopes) ? (req, res, ticket) => handlePeriscopeMcp(periscopeMcpDeps(), req, res, ticket) : void 0,
         status: () => crewJson(["status", route2.route, "--json"]),
         doctor: () => crewJson(["doctor", route2.route, "--json", "--offline"]),
         scheduler: schedulerHandler(planDaemonControl(CREW_HOME, hostPlatform(), detectSystemd())),
@@ -22507,10 +23077,10 @@ ${cu.tail.trimEnd()}
 `);
       if (!dryRun) {
         const resolvedPath = resolvedPathFor(cfg.ship.stateDir, target.route);
-        const raw = existsSync41(resolvedPath) ? JSON.parse(readFileSync36(resolvedPath, "utf8")) : {};
+        const raw = existsSync42(resolvedPath) ? JSON.parse(readFileSync37(resolvedPath, "utf8")) : {};
         raw.agentSkills = result.agentSkills;
-        mkdirSync26(dirOf2(resolvedPath), { recursive: true });
-        writeFileSync28(resolvedPath, `${JSON.stringify(raw, null, 2)}
+        mkdirSync27(dirOf2(resolvedPath), { recursive: true });
+        writeFileSync29(resolvedPath, `${JSON.stringify(raw, null, 2)}
 `);
       }
       if (result.outcomes.some((o) => o.action === "diverged")) process.exitCode = 1;
@@ -22533,7 +23103,7 @@ ${cu.tail.trimEnd()}
         throw e;
       }
       const oldName = cfg.ship.name;
-      writeFileSync28(cfg.configFile, setShipNameInYaml(readFileSync36(cfg.configFile, "utf8"), newName));
+      writeFileSync29(cfg.configFile, setShipNameInYaml(readFileSync37(cfg.configFile, "utf8"), newName));
       cfg.ship.name = newName;
       let renameMachineId;
       try {
@@ -22580,14 +23150,14 @@ ${cu.tail.trimEnd()}
         process.exit(2);
       };
       if (sub !== "add" && sub !== "list" && sub !== "clone" && sub !== "hooks" && sub !== "check") usage2();
-      const configText = readFileSync36(cfg.configFile, "utf8");
+      const configText = readFileSync37(cfg.configFile, "utf8");
       if (sub === "check") {
         try {
           const routeArg = value("route") ?? positional[2];
           const found = cfg.routes.find((r) => r.route === routeArg);
           if (!found) throw new ReposError(`no route "${routeArg}" in the config (have: ${cfg.routes.map((r) => r.route).join(", ") || "none"})`);
           const named2 = value("route") ? void 0 : positional[3];
-          const dir = named2 ? repoDirOf(configText, dirname22(cfg.configFile), found.route, named2) : resolvePath(positional[value("route") ? 2 : 3] ?? ".");
+          const dir = named2 ? repoDirOf(configText, dirname23(cfg.configFile), found.route, named2) : resolvePath(positional[value("route") ? 2 : 3] ?? ".");
           const target = reposOf(found).find((t) => resolvePath(t.dir) === dir || t.name === named2);
           const o = target ? found.repoOverrides[target.name] : void 0;
           runReposCheck(dir, {
@@ -22610,17 +23180,17 @@ ${cu.tail.trimEnd()}
       if (sub === "hooks") {
         try {
           const a = parseHooksArgs(positional.slice(2), routeNamesOf(configText));
-          const dir = repoDirOf(configText, dirname22(cfg.configFile), a.route, a.name);
-          if (!existsSync41(dir)) throw new ReposError(`${dir} does not exist on disk`);
-          const files = { exists: (r) => existsSync41(resolvePath(dir, r)), list: (r) => {
+          const dir = repoDirOf(configText, dirname23(cfg.configFile), a.route, a.name);
+          if (!existsSync42(dir)) throw new ReposError(`${dir} does not exist on disk`);
+          const files = { exists: (r) => existsSync42(resolvePath(dir, r)), list: (r) => {
             try {
-              return readdirSync18(resolvePath(dir, r));
+              return readdirSync19(resolvePath(dir, r));
             } catch {
               return [];
             }
           }, read: (r) => {
             try {
-              return readFileSync36(resolvePath(dir, r), "utf8");
+              return readFileSync37(resolvePath(dir, r), "utf8");
             } catch {
               return void 0;
             }
@@ -22662,19 +23232,19 @@ ${cu.tail.trimEnd()}
           let cleared;
           if (clear2) {
             const plan = clearRouteHooks(configText, a.route, a.name);
-            if (plan.removed.length > 0) writeFileSync28(cfg.configFile, plan.text);
+            if (plan.removed.length > 0) writeFileSync29(cfg.configFile, plan.text);
             cleared = { file: cfg.configFile, removed: plan.removed };
           }
           if (write && suggestion.source === null && recipeIds.length === 0 && hookSpecs.length === 0) throw new ReposError(`nothing to write: ${suggestion.notes[0]}`);
           if (write === "route") {
             const plan = planRouteHooks(configText, a.route, a.name, picked.hooks, { replace: flag("replace") });
-            writeFileSync28(cfg.configFile, plan.text);
+            writeFileSync29(cfg.configFile, plan.text);
             written = { target: "route", file: cfg.configFile, hooks: plan.written, kept: plan.kept, replaced: plan.replaced };
           } else if (write === "repo") {
             const have = existingRepoConfig(files);
             if (have) throw new ReposError(`${resolvePath(dir, have)} already exists; not overwriting it`);
             const file = resolvePath(dir, ".crew.yaml");
-            writeFileSync28(file, starterRepoConfig(picked.hooks, picked.release), { flag: "wx" });
+            writeFileSync29(file, starterRepoConfig(picked.hooks, picked.release), { flag: "wx" });
             written = { target: "repo", file, hooks: Object.keys(picked.hooks), kept: [], replaced: [] };
           }
           if (flag("json")) {
@@ -22730,7 +23300,7 @@ ${cu.tail.trimEnd()}
       if (sub === "list" && !routeName) usage2();
       if (sub === "add") {
         try {
-          const a = parseAddArgs(positional.slice(2), routeNamesOf(configText), (p) => existsSync41(resolvePath(p.replace(/^~(?=\/|$)/, homedir10()))));
+          const a = parseAddArgs(positional.slice(2), routeNamesOf(configText), (p) => existsSync42(resolvePath(p.replace(/^~(?=\/|$)/, homedir10()))));
           routeName = a.route;
           addPath = a.path;
           addName = a.name;
@@ -22759,66 +23329,66 @@ ${cu.tail.trimEnd()}
       }
       const resolvedFile = resolvedPathFor(cfg.ship.stateDir, routeName);
       let resolvedRemotes;
-      if (existsSync41(resolvedFile)) {
+      if (existsSync42(resolvedFile)) {
         try {
-          resolvedRemotes = JSON.parse(readFileSync36(resolvedFile, "utf8"));
+          resolvedRemotes = JSON.parse(readFileSync37(resolvedFile, "utf8"));
         } catch {
         }
       }
       const originOf = (dir) => gitOk(dir, ["remote", "get-url", "origin"]) ?? void 0;
-      const text = configText;
-      const base = dirname22(cfg.configFile);
-      const isCheckout = (d) => existsSync41(`${d}/.git`);
+      const text2 = configText;
+      const base = dirname23(cfg.configFile);
+      const isCheckout = (d) => existsSync42(`${d}/.git`);
       try {
         if (sub === "list") {
           if (flag("json")) {
             const rows = listRepoRows({
-              text,
+              text: text2,
               route: routeName,
               base,
               resolved: resolvedRemotes,
               originOf,
-              exists: (d) => existsSync41(d),
+              exists: (d) => existsSync42(d),
               isCheckout,
               repoHasHooks: (d) => REPO_CONFIG_FILENAMES.some((f) => {
                 try {
-                  return Object.keys(parseRepoConfig(readFileSync36(resolvePath(d, f), "utf8"), f).hooks).length > 0;
+                  return Object.keys(parseRepoConfig(readFileSync37(resolvePath(d, f), "utf8"), f).hooks).length > 0;
                 } catch {
                   return false;
                 }
               })
             });
-            process.stdout.write(`${JSON.stringify({ route: routeName, repos: rows, cloneBase: cloneBaseOf(text, routeName, base, isCheckout) })}
+            process.stdout.write(`${JSON.stringify({ route: routeName, repos: rows, cloneBase: cloneBaseOf(text2, routeName, base, isCheckout) })}
 `);
             break;
           }
-          const cloneBase = cloneBaseOf(text, routeName, base, isCheckout);
-          const repos = configuredRepos(text, routeName, base).filter((r) => r.dir !== cloneBase);
+          const cloneBase = cloneBaseOf(text2, routeName, base, isCheckout);
+          const repos = configuredRepos(text2, routeName, base).filter((r) => r.dir !== cloneBase);
           if (repos.length === 0) process.stdout.write(`route ${routeName} has no checkout configured \u2014 \`crew repos add ${routeName} <path>\`
 `);
           for (const r of repos) {
             const origin2 = originOf(r.dir);
             const row = matchRepoName(origin2, resolvedRemotes);
-            const note = !existsSync41(r.dir) ? "missing on disk" : row ? `Repos row: ${row}` : `no Repos row matches ${normalizeRemote(origin2) ?? "this checkout (no origin remote)"}`;
+            const note = !existsSync42(r.dir) ? "missing on disk" : row ? `Repos row: ${row}` : `no Repos row matches ${normalizeRemote(origin2) ?? "this checkout (no origin remote)"}`;
             process.stdout.write(`${r.name}	${r.dir}	${note}
 `);
           }
           break;
         }
         if (sub === "clone") {
-          const json = flag("json");
-          const say = (event, extra, human) => process.stdout.write(json ? `${JSON.stringify({ event, ...extra })}
+          const json2 = flag("json");
+          const say = (event, extra, human) => process.stdout.write(json2 ? `${JSON.stringify({ event, ...extra })}
 ` : `${human}
 `);
-          const plan2 = planRepoClone({ text, base, route: routeName, name: addName, resolved: resolvedRemotes, dir: value("dir"), isCheckout });
-          if (existsSync41(plan2.target) && (existsSync41(`${plan2.target}/.git`) || readdirSync18(plan2.target).length > 0)) {
+          const plan2 = planRepoClone({ text: text2, base, route: routeName, name: addName, resolved: resolvedRemotes, dir: value("dir"), isCheckout });
+          if (existsSync42(plan2.target) && (existsSync42(`${plan2.target}/.git`) || readdirSync19(plan2.target).length > 0)) {
             throw new ReposError(
-              existsSync41(`${plan2.target}/.git`) ? `${plan2.target} is already a checkout \u2014 attach it with \`crew repos add ${routeName} ${plan2.name} ${plan2.target}\`` : `${plan2.target} exists and is not empty \u2014 pass --dir to clone somewhere else`
+              existsSync42(`${plan2.target}/.git`) ? `${plan2.target} is already a checkout \u2014 attach it with \`crew repos add ${routeName} ${plan2.name} ${plan2.target}\`` : `${plan2.target} exists and is not empty \u2014 pass --dir to clone somewhere else`
             );
           }
           if (dryRun) {
             say("dry-run", { remote: plan2.remote, target: plan2.target }, `would clone ${plan2.remote} into ${plan2.target}`);
-            if (!json) process.stdout.write(`${plan2.block}
+            if (!json2) process.stdout.write(`${plan2.block}
 `);
             break;
           }
@@ -22831,18 +23401,18 @@ ${cu.tail.trimEnd()}
             throw new ReposError(`${e.message}${authHint}
   crew.yaml was not changed`);
           }
-          writeFileSync28(cfg.configFile, plan2.text);
+          writeFileSync29(cfg.configFile, plan2.text);
           if (plan2.droppedDir) process.stderr.write(`crew repos: dropped dir: ${plan2.droppedDir} from route ${routeName} \u2014 it is not a checkout (the clone base); checkouts now live under repos:
 `);
           say("attached", { route: routeName, name: plan2.name, dir: plan2.target, mode: plan2.mode }, `cloned and attached ${plan2.target} to ${routeName} as ${plan2.mode === "dir" ? "dir" : `repos.${plan2.name}`} in ${cfg.configFile}`);
           break;
         }
         const target = resolvePath(addPath.replace(/^~(?=\/|$)/, homedir10()));
-        const top = existsSync41(target) ? gitOk(target, ["rev-parse", "--show-toplevel"]) : null;
+        const top = existsSync42(target) ? gitOk(target, ["rev-parse", "--show-toplevel"]) : null;
         if (!top) throw new ReposError(`${target} is not a git checkout`);
         const origin = originOf(top);
         const plan = planRepoAdd({
-          text,
+          text: text2,
           base,
           route: routeName,
           path: top,
@@ -22890,15 +23460,15 @@ ${cu.tail.trimEnd()}
           const created = await rowTracker.createRepoRow(rowPayload);
           process.stdout.write(`created Repos row ${String(rowPayload.name)} (${String(rowPayload.remote)}) ${created.id}
 `);
-          if (existsSync41(resolvedFile)) {
-            const raw = JSON.parse(readFileSync36(resolvedFile, "utf8"));
+          if (existsSync42(resolvedFile)) {
+            const raw = JSON.parse(readFileSync37(resolvedFile, "utf8"));
             raw.repoNames = { ...raw.repoNames, [created.id]: String(rowPayload.name) };
             raw.repoRemotes = { ...raw.repoRemotes, [created.id]: String(rowPayload.remote) };
-            writeFileSync28(resolvedFile, `${JSON.stringify(raw, null, 2)}
+            writeFileSync29(resolvedFile, `${JSON.stringify(raw, null, 2)}
 `);
           }
         }
-        writeFileSync28(cfg.configFile, plan.text);
+        writeFileSync29(cfg.configFile, plan.text);
         process.stdout.write(`added ${top} to ${routeName} as ${plan.mode === "dir" ? "dir" : `repos.${plan.name}`} in ${cfg.configFile}
 `);
       } catch (e) {
@@ -23265,7 +23835,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           process.exit(2);
         }
         if (found.shipNameAdopted && !dryRun) {
-          writeFileSync28(cfg.configFile, setShipNameInYaml(readFileSync36(cfg.configFile, "utf8"), found.shipNameAdopted));
+          writeFileSync29(cfg.configFile, setShipNameInYaml(readFileSync37(cfg.configFile, "utf8"), found.shipNameAdopted));
           cfg.ship.name = found.shipNameAdopted;
         }
         if (found.shipRow) {
@@ -23308,10 +23878,10 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           }
         }
         let previous;
-        const hadPreviousFile = existsSync41(resolvedPath);
+        const hadPreviousFile = existsSync42(resolvedPath);
         if (hadPreviousFile) {
           try {
-            previous = JSON.parse(readFileSync36(resolvedPath, "utf8"));
+            previous = JSON.parse(readFileSync37(resolvedPath, "utf8"));
           } catch {
           }
         }
@@ -23441,10 +24011,10 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           process.stderr.write(`(dry run) would write resolved ids to ${resolvedPath}
 `);
         } else {
-          mkdirSync26(dirname22(resolvedPath), { recursive: true });
+          mkdirSync27(dirname23(resolvedPath), { recursive: true });
           if (hadPreviousFile) copyFileSync2(resolvedPath, `${resolvedPath}.bak`);
           const tmpPath = `${resolvedPath}.tmp${process.pid}`;
-          writeFileSync28(tmpPath, `${JSON.stringify(resolved, null, 2)}
+          writeFileSync29(tmpPath, `${JSON.stringify(resolved, null, 2)}
 `);
           renameSync4(tmpPath, resolvedPath);
           process.stderr.write(`Resolved ids written to ${resolvedPath}
@@ -23490,8 +24060,8 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
             process.stderr.write(`(dry run) would write the minted API key to ${apiKeyFile}
 `);
           } else {
-            mkdirSync26(dirname22(apiKeyFile), { recursive: true });
-            writeFileSync28(apiKeyFile, `${apiKeyVar}=${apiKey}
+            mkdirSync27(dirname23(apiKeyFile), { recursive: true });
+            writeFileSync29(apiKeyFile, `${apiKeyVar}=${apiKey}
 `, { mode: 384 });
             process.stderr.write(`API key written to ${apiKeyFile}
 `);
@@ -24178,6 +24748,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
             },
             setRowState: (id, state2) => trD.updatePeriscope(id, { state: state2 }),
             forgetLocal: (id) => {
+              removePeriscopeSecret(cfg.ship.stateDir, id);
               removePeriscopeSidecar(cfg.ship.stateDir, id);
               removePeriscopePrior(cfg.ship.stateDir, id);
             },
@@ -24226,7 +24797,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           const shellR = hit && resolveShell(hit.repo.config.shell ?? cfg.ship.shell);
           const resumed = await runPeriscopeResume({
             find: async () => hit && { row: hit.row, tag: hit.tag },
-            worktreeExists: (p) => existsSync41(p),
+            worktreeExists: (p) => existsSync42(p),
             caps: periscopeCaps(cfg.ship),
             runHook: async (name, cwd, env) => {
               const script = hit?.repo.config.hooks[name];
@@ -24320,10 +24891,10 @@ ${where.join("\n")}`);
           },
           prepare: async (path) => {
             for (const f of repoP.config.worktrees.copy) {
-              const src = join44(repoP.dir, f);
-              if (!existsSync41(src)) continue;
-              mkdirSync26(dirOf2(join44(path, f)), { recursive: true });
-              copyFileSync2(src, join44(path, f));
+              const src = join46(repoP.dir, f);
+              if (!existsSync42(src)) continue;
+              mkdirSync27(dirOf2(join46(path, f)), { recursive: true });
+              copyFileSync2(src, join46(path, f));
             }
             const setup = repoP.config.hooks.setup;
             return setup ? runScript(setup, { cwd: path, shell: shellP, onLine: (l) => {
@@ -24335,7 +24906,10 @@ ${where.join("\n")}`);
             return script ? runScript(script, { cwd, env, shell: shellP, timeoutMs: name === "preview" ? 18e4 : void 0 }) : null;
           },
           createRow: (fields) => trackerP.createPeriscope(fields),
-          recordLocal: (sc) => writePeriscopeSidecar(cfg.ship.stateDir, sc),
+          recordLocal: (sc) => {
+            writePeriscopeSidecar(cfg.ship.stateDir, { ...sc, route: routeP.route });
+            if (flag("serve-mcp")) mintPeriscopeSecret(cfg.ship.stateDir, sc.ticketRecordId);
+          },
           comment: (ticketId, body) => trackerP.postComment(ticketId, body, memberId),
           teardown: async (path, branch) => {
             const n = Number(path.match(/(\d+)\/?$/)?.[1]);
@@ -24371,6 +24945,10 @@ ${where.join("\n")}`);
               const row = crewP.find((r) => r.id === assigneeId);
               return row?.agent_id ? row.name ?? assigneeId : void 0;
             },
+            liveRows: async (ticketRecordId) => {
+              const [rows, ships] = [await trackerP.livePeriscopesForTicket(ticketRecordId), await trackerP.shipRows()];
+              return rows.map((r) => ({ ship: ships.find((x) => x.id === r.ship_id)?.name ?? r.ship_id ?? "an unknown ship", url: r.url ?? "", worktree: r.worktree }));
+            },
             hasLiveRun: (ticketRecordId) => liveRuns(cfg.ship.stateDir).some((r) => r.ticketRecordId === ticketRecordId),
             hold: async (id) => {
               const auth = await trackerP.authorshipProbe();
@@ -24394,6 +24972,7 @@ ${where.join("\n")}`);
           if (a.issue) {
             const t = await deps.existing.load(a.issue);
             if (!t) throw new PeriscopeError(`no ticket numbered ${a.issue} on this route`);
+            await assertNoLivePeriscope(deps.existing, t, a.issue);
             const refused = await existingRefusal(deps.existing, t);
             if (refused) throw new PeriscopeError(refused);
             say("dry-run", `would hold ${t.tag} (status ${t.status} stays) for ${pairId}, cut or reuse its worktree for ${a.repo}, run setup${a.isolate ? ", isolate" : ""}, ports, handoff and preview on ${deps.host}, and record a Periscopes row`);
@@ -24417,6 +24996,8 @@ ${where.join("\n")}`);
       } catch (e) {
         if (e instanceof PeriscopeError || e instanceof ConfigError) {
           process.stderr.write(`crew periscope: ${e.message}
+`);
+          if (e instanceof LivePeriscopeError && jsonP) process.stdout.write(`${JSON.stringify(e.data)}
 `);
           process.exit(1);
         }
@@ -24606,7 +25187,7 @@ ${where.join("\n")}`);
       };
       const droppedRoutes = [];
       try {
-        const rawCfg = parseYaml2(readFileSync36(cfg.configFile, "utf8"));
+        const rawCfg = parseYaml2(readFileSync37(cfg.configFile, "utf8"));
         for (const r of rawCfg?.routes ?? []) {
           if (typeof r?.route !== "string" || cfg.routes.some((x) => x.route === r.route)) continue;
           try {
@@ -24648,8 +25229,8 @@ ${where.join("\n")}`);
         process.stdout.write("crew reload: no daemon unit is running \u2014 nothing to reload (the next run reads crew.yaml fresh)\n");
         break;
       }
-      mkdirSync26(cfg.ship.stateDir, { recursive: true });
-      writeFileSync28(sentinel, `${(/* @__PURE__ */ new Date()).toISOString()}
+      mkdirSync27(cfg.ship.stateDir, { recursive: true });
+      writeFileSync29(sentinel, `${(/* @__PURE__ */ new Date()).toISOString()}
 `);
       process.stdout.write("crew reload: requested \u2014 the daemon finishes its in-flight pass, then relaunches with the new config\n");
       if (flag("now") && control?.stopCommand && control.startCommand) {
@@ -24700,8 +25281,8 @@ ${where.join("\n")}`);
     }
     case "log": {
       try {
-        const text = readFileSync36(cfg.ship.logFile, "utf8").split("\n");
-        process.stdout.write(`${text.slice(-(Number(value("tail")) || 40)).join("\n")}
+        const text2 = readFileSync37(cfg.ship.logFile, "utf8").split("\n");
+        process.stdout.write(`${text2.slice(-(Number(value("tail")) || 40)).join("\n")}
 `);
       } catch {
         process.stdout.write(`no log yet at ${cfg.ship.logFile}
@@ -24710,12 +25291,12 @@ ${where.join("\n")}`);
       break;
     }
     case "sample-ticket": {
-      const json = flag("json");
-      const say = (event, extra, human) => process.stdout.write(json ? `${JSON.stringify({ event, ...extra })}
+      const json2 = flag("json");
+      const say = (event, extra, human) => process.stdout.write(json2 ? `${JSON.stringify({ event, ...extra })}
 ` : `${human}
 `);
       const fail = (msg) => {
-        if (json) process.stdout.write(`${JSON.stringify({ event: "error", message: msg })}
+        if (json2) process.stdout.write(`${JSON.stringify({ event: "error", message: msg })}
 `);
         else process.stderr.write(`crew sample-ticket: ${msg}
 `);
@@ -24723,8 +25304,8 @@ ${where.join("\n")}`);
       };
       if (!route2.resolved) fail(`route ${route2.route} is not connected \u2014 run \`crew connect\` first`);
       const tracker = new Tracker(route2, cfg.ship);
-      const configText = readFileSync36(cfg.configFile, "utf8");
-      const cfgBase = dirname22(cfg.configFile);
+      const configText = readFileSync37(cfg.configFile, "utf8");
+      const cfgBase = dirname23(cfg.configFile);
       const configured2 = configuredRepos(configText, route2.route, cfgBase);
       const dir = configured2.find((r) => r.name === SAMPLE_REPO)?.dir ?? sampleDir(configured2.map((r) => r.dir), route2.reposBasePath, route2.route.split("/")[0]);
       const resolvedFile = resolvedPathFor(cfg.ship.stateDir, route2.route);
@@ -24752,7 +25333,7 @@ ${where.join("\n")}`);
         }
         if (configured2.some((r) => r.dir === dir)) {
           try {
-            writeFileSync28(cfg.configFile, planRepoRemove(configText, cfgBase, route2.route, dir).text);
+            writeFileSync29(cfg.configFile, planRepoRemove(configText, cfgBase, route2.route, dir).text);
           } catch (e) {
             if (e instanceof ReposError) fail(e.message);
             throw e;
@@ -24760,29 +25341,29 @@ ${where.join("\n")}`);
         }
         if (row) {
           await tracker.deleteRepoRow(row.id);
-          if (existsSync41(resolvedFile)) {
-            const raw = JSON.parse(readFileSync36(resolvedFile, "utf8"));
+          if (existsSync42(resolvedFile)) {
+            const raw = JSON.parse(readFileSync37(resolvedFile, "utf8"));
             if (raw.repoNames) delete raw.repoNames[row.id];
             if (raw.repoRemotes) delete raw.repoRemotes[row.id];
-            writeFileSync28(resolvedFile, `${JSON.stringify(raw, null, 2)}
+            writeFileSync29(resolvedFile, `${JSON.stringify(raw, null, 2)}
 `);
           }
         }
-        if (existsSync41(join44(dir, ".git")) && basename13(dir) === SAMPLE_REPO) rmSync19(dir, { recursive: true, force: true });
+        if (existsSync42(join46(dir, ".git")) && basename14(dir) === SAMPLE_REPO) rmSync20(dir, { recursive: true, force: true });
         say("removed", { dir, closed }, `removed the sample repo${closed.length ? `, closed ${closed.join(", ")}` : ""}`);
         break;
       }
       const projectId = route2.resolved.areaId ?? resolveRepoProject(await tracker.projectRows(), value("project"));
-      const fresh = !existsSync41(join44(dir, ".git"));
-      if (existsSync41(dir) && fresh && readdirSync18(dir).length > 0) fail(`${dir} exists and is not a git checkout \u2014 move it aside`);
+      const fresh = !existsSync42(join46(dir, ".git"));
+      if (existsSync42(dir) && fresh && readdirSync19(dir).length > 0) fail(`${dir} exists and is not a git checkout \u2014 move it aside`);
       if (dryRun) {
         say("dry-run", { dir, newCheckout: fresh, repoRow: row?.id ?? null }, `would ${fresh ? "create" : "reuse"} ${dir}${row ? "" : ", create the Repos row"}, and file one ${tracker.contract.statuses.approved} ticket`);
         break;
       }
       if (fresh) {
-        mkdirSync26(dir, { recursive: true });
-        writeFileSync28(join44(dir, "README.md"), SAMPLE_README);
-        writeFileSync28(join44(dir, ".crew.yaml"), SAMPLE_CREW_YAML);
+        mkdirSync27(dir, { recursive: true });
+        writeFileSync29(join46(dir, "README.md"), SAMPLE_README);
+        writeFileSync29(join46(dir, ".crew.yaml"), SAMPLE_CREW_YAML);
         const g = (...a) => {
           const r = spawnSync8("git", a, { cwd: dir, encoding: "utf8" });
           if (r.status !== 0) fail(`git ${a[0]} failed in ${dir}: ${(r.stderr || r.stdout).trim()}`);
@@ -24800,17 +25381,17 @@ ${where.join("\n")}`);
           spec: { platform: "unix", releaseMode: "integrate", ciProvider: "none" }
         });
         repoId = (await tracker.createRepoRow(payload)).id;
-        if (existsSync41(resolvedFile)) {
-          const raw = JSON.parse(readFileSync36(resolvedFile, "utf8"));
+        if (existsSync42(resolvedFile)) {
+          const raw = JSON.parse(readFileSync37(resolvedFile, "utf8"));
           raw.repoNames = { ...raw.repoNames, [repoId]: SAMPLE_REPO };
           raw.repoRemotes = { ...raw.repoRemotes, [repoId]: SAMPLE_REMOTE };
-          writeFileSync28(resolvedFile, `${JSON.stringify(raw, null, 2)}
+          writeFileSync29(resolvedFile, `${JSON.stringify(raw, null, 2)}
 `);
         }
       }
       if (!configured2.some((r) => r.dir === dir)) {
         try {
-          writeFileSync28(cfg.configFile, planRepoAdd({ text: configText, base: cfgBase, route: route2.route, path: dir, name: SAMPLE_REPO }).text);
+          writeFileSync29(cfg.configFile, planRepoAdd({ text: configText, base: cfgBase, route: route2.route, path: dir, name: SAMPLE_REPO }).text);
         } catch (e) {
           if (e instanceof ReposError) fail(e.message);
           throw e;
@@ -25043,7 +25624,7 @@ ${where.join("\n")}`);
               // `synthesis-tabl-123`. `worktreePrefix` above is kept for
               // config-provenance display; this is the field that actually
               // describes where a worktree lands by default.
-              worktreeDirPattern: r.config.worktrees.name ?? (r.config.provenance["worktrees.prefix"] !== "default" ? `${r.config.worktrees.prefix}<number>` : `${basename13(r.dir.replace(/[/\\]+$/, ""))}-<branch>`),
+              worktreeDirPattern: r.config.worktrees.name ?? (r.config.provenance["worktrees.prefix"] !== "default" ? `${r.config.worktrees.prefix}<number>` : `${basename14(r.dir.replace(/[/\\]+$/, ""))}-<branch>`),
               worktreeParent: resolvePath(r.dir, "..")
             })),
             waiting: waiting ? { ticket: waiting.ticket, since: waiting.since, streak: fairness.streak() } : null
@@ -25148,7 +25729,7 @@ watermark:  ${state.watermark()}
           }
           for (const r of repos) {
             const remote = r.config.branch.remote;
-            if (existsSync41(r.dir)) {
+            if (existsSync42(r.dir)) {
               pushAuth.push({
                 route: c.route,
                 repo: r.name,
@@ -25206,6 +25787,7 @@ watermark:  ${state.watermark()}
           const { settled } = await settleRepos(reposOf(route2), (t) => t.name, (t) => resolveOneRepo(route2, t));
           const tablePresent = flag("offline") ? void 0 : (await new Tracker(route2, cfg.ship).periscopesStatus().catch(() => ({ present: true }))).present;
           problems.push(...routePeriscopeProblems({ route: route2.route, hosts: true, repos: settled.map((r) => ({ name: r.name, hasPreviewHook: !!r.config.hooks.preview })), tablePresent }));
+          if (!flag("offline")) problems.push(...await duplicateLivePeriscopeProblems(route2, cfg.ship));
         }
         problems.push(...attentionProblems(openShipAttention(state), problems));
         if (problems.some((p) => p.severity === "blocker")) process.exitCode = 1;
@@ -25233,7 +25815,7 @@ routes:            ${cfg.routes.map((c) => c.route).join(", ")}
       }
       try {
         const evFile = eventFileFor(cfg.ship.stateDir);
-        const evSize = existsSync41(evFile) ? statSync14(evFile).size : 0;
+        const evSize = existsSync42(evFile) ? statSync14(evFile).size : 0;
         process.stdout.write(
           evSize > cfg.ship.eventsRotateBytes * 4 ? `events log:        WARN ${evFile} is ${Math.round(evSize / 1048576)} MB (> 4x eventsRotateBytes); run \`crew reap\` to rotate it
 ` : "events log:        ok\n"
@@ -25244,7 +25826,7 @@ routes:            ${cfg.routes.map((c) => c.route).join(", ")}
         const unitPlan = planInstall(cfg.ship, CREW_HOME, host, detectSystemd(), "run", installContext());
         const abandons = unitAbandonsAgents(unitPlan, (p) => {
           try {
-            return readFileSync36(p, "utf8");
+            return readFileSync37(p, "utf8");
           } catch {
             return null;
           }
@@ -25287,7 +25869,7 @@ routes:            ${cfg.routes.map((c) => c.route).join(", ")}
       );
       for (const r of await resolvedRepos(route2)) {
         const { config } = r;
-        const worktreePattern = config.worktrees.name ?? (config.provenance["worktrees.prefix"] !== "default" ? `${config.worktrees.prefix}<number>` : `${basename13(r.dir.replace(/[/\\]+$/, ""))}-${effectiveBranchTemplate(config, void 0)}`);
+        const worktreePattern = config.worktrees.name ?? (config.provenance["worktrees.prefix"] !== "default" ? `${config.worktrees.prefix}<number>` : `${basename14(r.dir.replace(/[/\\]+$/, ""))}-${effectiveBranchTemplate(config, void 0)}`);
         process.stdout.write(
           `${`repo ${r.name}:`.padEnd(19)}${r.dir}
                    worktrees at ../${worktreePattern} (${config.provenance["worktrees.name"] ?? config.provenance["worktrees.prefix"] ?? "default"}), branch ${config.branch.name}
@@ -25351,6 +25933,12 @@ routes:            ${cfg.routes.map((c) => c.route).join(", ")}
           process.stdout.write(`periscopes:      ${f.severity.toUpperCase()} ${f.message}
 `);
         }
+        if (!flag("offline")) {
+          for (const f of await duplicateLivePeriscopeProblems(route2, cfg.ship)) {
+            process.stdout.write(`periscopes:      ${f.severity.toUpperCase()} ${f.message}
+`);
+          }
+        }
       }
       process.stdout.write(
         !periscopes.present ? "periscopes:      Periscopes table absent \u2014 this workspace cannot host periscopes\n" : periscopes.missing.length === 0 ? `periscopes:      Periscopes table present (${periscopes.modelId})
@@ -25668,6 +26256,11 @@ ${foreign.join("\n")}
           );
         }
       }
+      for (const e of listPeriscopeEndpoints(cfg.ship.stateDir)) {
+        const secret = readPeriscopeSecret(cfg.ship.stateDir, e.ticketRecordId) ? "live" : "ended, awaiting removal";
+        process.stdout.write(`periscope mcp:     ${e.ticket} ${e.route} ${e.url} (${secret})
+`);
+      }
       if (cfg.ship.relayHost && !flag("offline")) {
         const relayUrl = routeRelayUrl(route2);
         if (!relayUrl) {
@@ -25715,6 +26308,8 @@ var parseTicketNumber2;
 var routeRelayUrl2;
 var passengerApiKeys2;
 var endpointApiFor2;
+var periscopeEndpointDeps2;
+var periscopeMcpDeps2;
 var endpointReconcileDeps2;
 var releaseRefused2;
 var doctorMachineId2;