@tablation/crew 0.99.1 → 0.100.1

package/dist/cli.js

@@ -45,12 +45,12 @@ function periscopeSummary(cfg) {
   if (routes.length === 0) return `off (no enabled route sets hostPeriscopes: true; ${limits})`;
   return `ON for ${routes.join(", ")} (host ${cfg.ship.previewHost ?? "NOT SET (ship.previewHost)"}, ${limits})`;
 }
-async function previewHostProblem(cfg, resolve6 = (h) => lookup(h)) {
+async function previewHostProblem(cfg, resolve7 = (h) => lookup(h)) {
   if (periscopeRoutes(cfg).length === 0) return void 0;
   const host = cfg.ship.previewHost;
   if (!host) return "ship.previewHost is not set \u2014 a route hosts periscopes, so Passengers have no host to be sent to";
   try {
-    await resolve6(host);
+    await resolve7(host);
   } catch {
     return `ship.previewHost "${host}" does not resolve from this machine`;
   }
@@ -140,11 +140,11 @@ function urlPort(url) {
   }
 }
 function portListening(port, timeoutMs = 500) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     const s = connect({ port, host: "127.0.0.1" });
     const done = (ok) => {
       s.destroy();
-      resolve6(ok);
+      resolve7(ok);
     };
     s.setTimeout(timeoutMs, () => done(false));
     s.once("connect", () => done(true));
@@ -583,8 +583,8 @@ function removeClaudeMcp(o) {
   if (got.missing) return `mcp: \`${o.bin}\` not found, so Claude Code was not touched`;
   if (got.status !== 0) return `mcp: no ${MCP_SERVER_NAME} server registered with Claude Code`;
   if (o.dryRun) return `(dry run) would remove the ${MCP_SERVER_NAME} MCP server from Claude Code (user scope)`;
-  const rm = runClaude(o.bin, ["mcp", "remove", MCP_SERVER_NAME, "--scope", "user"]);
-  return rm.status === 0 ? `mcp: removed the ${MCP_SERVER_NAME} MCP server from Claude Code (user scope)` : `mcp: \`claude mcp remove\` failed (${rm.stderr.trim() || `exit ${rm.status}`})`;
+  const rm2 = runClaude(o.bin, ["mcp", "remove", MCP_SERVER_NAME, "--scope", "user"]);
+  return rm2.status === 0 ? `mcp: removed the ${MCP_SERVER_NAME} MCP server from Claude Code (user scope)` : `mcp: \`claude mcp remove\` failed (${rm2.stderr.trim() || `exit ${rm2.status}`})`;
 }
 
 // src/launcher.ts
@@ -620,10 +620,10 @@ function selectsCustomModelProvider(args) {
   }
   return false;
 }
-function parseOmlxSettings(text) {
+function parseOmlxSettings(text2) {
   let raw;
   try {
-    raw = JSON.parse(text);
+    raw = JSON.parse(text2);
   } catch {
     return void 0;
   }
@@ -844,32 +844,32 @@ var BLOCK_RE = new RegExp(`${escapeRe(PAIR_BLOCK_START)}[\\s\\S]*?${escapeRe(PAI
 function escapeRe(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function hasPairBlock(text) {
-  return BLOCK_RE.test(text);
+function hasPairBlock(text2) {
+  return BLOCK_RE.test(text2);
 }
-function pairBlockIsBroken(text) {
-  return !hasPairBlock(text) && (text.includes(PAIR_BLOCK_START) || text.includes(PAIR_BLOCK_END));
+function pairBlockIsBroken(text2) {
+  return !hasPairBlock(text2) && (text2.includes(PAIR_BLOCK_START) || text2.includes(PAIR_BLOCK_END));
 }
-function upsertPairBlock(text, block) {
-  if (hasPairBlock(text)) return text.replace(BLOCK_RE, () => `${block}
+function upsertPairBlock(text2, block) {
+  if (hasPairBlock(text2)) return text2.replace(BLOCK_RE, () => `${block}
 `);
-  if (text.trim() === "") return `${block}
+  if (text2.trim() === "") return `${block}
 `;
-  return `${text.replace(/\n*$/, "")}
+  return `${text2.replace(/\n*$/, "")}
 
 ${block}
 `;
 }
-function removePairBlock(text) {
-  if (!hasPairBlock(text)) return text;
-  return text.replace(new RegExp(`\\n*${BLOCK_RE.source}`), "\n").replace(/^\n+/, "").replace(/\n{3,}/g, "\n\n");
+function removePairBlock(text2) {
+  if (!hasPairBlock(text2)) return text2;
+  return text2.replace(new RegExp(`\\n*${BLOCK_RE.source}`), "\n").replace(/^\n+/, "").replace(/\n{3,}/g, "\n\n");
 }
 function readIfExists(path) {
   return existsSync5(path) ? readFileSync7(path, "utf8") : void 0;
 }
-function writeFileMkdir(path, text) {
+function writeFileMkdir(path, text2) {
   mkdirSync4(dirname2(path), { recursive: true });
-  writeFileSync3(path, text);
+  writeFileSync3(path, text2);
 }
 function installBlockFile(path, harness, dryRun) {
   const before = readIfExists(path) ?? "";
@@ -889,9 +889,9 @@ function removeBlockFile(path, dryRun) {
   return true;
 }
 function blockVerdict(path, harness) {
-  const text = readIfExists(path);
-  if (text === void 0 || !hasPairBlock(text)) return { ok: false, detail: `no managed block in ${path}` };
-  if (!text.includes(pairBlock(harness))) return { ok: false, detail: `the managed block in ${path} is out of date \u2014 run crew connect` };
+  const text2 = readIfExists(path);
+  if (text2 === void 0 || !hasPairBlock(text2)) return { ok: false, detail: `no managed block in ${path}` };
+  if (!text2.includes(pairBlock(harness))) return { ok: false, detail: `the managed block in ${path} is out of date \u2014 run crew connect` };
   return { ok: true, detail: "" };
 }
 var HEADER_RE = /^\s*\[\[?\s*([^\]]+?)\s*\]\]?\s*(#.*)?$/;
@@ -913,24 +913,24 @@ function tomlTableRange(lines, name) {
   return [start, end];
 }
 var tomlString = (v) => JSON.stringify(v);
-function upsertTomlTable(text, name, table2) {
-  const lines = text.split("\n");
+function upsertTomlTable(text2, name, table2) {
+  const lines = text2.split("\n");
   const r = tomlTableRange(lines, name);
   if (r) {
     lines.splice(r[0], r[1] - r[0], ...table2);
     return lines.join("\n");
   }
-  const body = text.replace(/\n*$/, "");
+  const body = text2.replace(/\n*$/, "");
   return body === "" ? `${table2.join("\n")}
 ` : `${body}
 
 ${table2.join("\n")}
 `;
 }
-function removeTomlTable(text, name) {
-  const lines = text.split("\n");
+function removeTomlTable(text2, name) {
+  const lines = text2.split("\n");
   let r = tomlTableRange(lines, name);
-  if (!r) return text;
+  if (!r) return text2;
   while (r) {
     let [start, end] = r;
     if (start > 0 && lines[start - 1].trim() === "") start--;
@@ -1164,10 +1164,10 @@ var geminiPaths = (home) => ({
   config: join8(home, ".gemini", "settings.json")
 });
 function readGeminiSettings(path) {
-  const text = readIfExists(path);
-  if (text === void 0 || text.trim() === "") return {};
+  const text2 = readIfExists(path);
+  if (text2 === void 0 || text2.trim() === "") return {};
   try {
-    const j = JSON.parse(text);
+    const j = JSON.parse(text2);
     return j && typeof j === "object" && !Array.isArray(j) ? j : void 0;
   } catch {
     return void 0;
@@ -1267,10 +1267,10 @@ function vscodeUserDirs(o) {
 }
 var COPILOT_FRONTMATTER = '---\napplyTo: "**"\n---\n\n';
 function readVscodeMcp(path) {
-  const text = readIfExists(path);
-  if (text === void 0 || text.trim() === "") return {};
+  const text2 = readIfExists(path);
+  if (text2 === void 0 || text2.trim() === "") return {};
   try {
-    const j = JSON.parse(text);
+    const j = JSON.parse(text2);
     return j && typeof j === "object" && !Array.isArray(j) ? j : void 0;
   } catch {
     return void 0;
@@ -1446,9 +1446,9 @@ function mapGeminiLine(line) {
 function createGeminiStreamMapper() {
   let pending = "";
   const flush = () => {
-    const text = pending;
+    const text2 = pending;
     pending = "";
-    return text ? [{ kind: "text", text }] : [];
+    return text2 ? [{ kind: "text", text: text2 }] : [];
   };
   return {
     flush,
@@ -1758,9 +1758,9 @@ function storeForgeToken(forges, host, token, stateDir, env = process.env) {
   if (!token.trim()) throw new ForgeError("empty token");
   i.write(f.entry.token, token.trim(), { host: f.host, stateDir, env });
 }
-function parseCredentialInput(text) {
+function parseCredentialInput(text2) {
   const out = {};
-  for (const line of text.split("\n")) {
+  for (const line of text2.split("\n")) {
     if (line === "") break;
     const eq2 = line.indexOf("=");
     if (eq2 > 0) out[line.slice(0, eq2)] = line.slice(eq2 + 1);
@@ -2148,10 +2148,10 @@ function rejectUnknown(obj, allowed, where, file) {
     );
   }
 }
-function parseRepoConfig(text, file) {
+function parseRepoConfig(text2, file) {
   let raw;
   try {
-    raw = file.endsWith(".json") ? JSON.parse(text) : parse(text);
+    raw = file.endsWith(".json") ? JSON.parse(text2) : parse(text2);
   } catch (e) {
     throw new RepoConfigError(`${file}: could not be parsed \u2014 ${e.message}`);
   }
@@ -2667,9 +2667,9 @@ function parseShipEnv(v) {
     if (typeof val !== "string" && typeof val !== "number" && typeof val !== "boolean") {
       throw new ConfigError(`ship.env.${k} must be a string, number or boolean`);
     }
-    const text = String(val);
-    if (/[\r\n\0]/.test(text)) throw new ConfigError(`ship.env.${k} must be a single line`);
-    out[k] = text;
+    const text2 = String(val);
+    if (/[\r\n\0]/.test(text2)) throw new ConfigError(`ship.env.${k} must be a single line`);
+    out[k] = text2;
   }
   return Object.keys(out).length ? out : void 0;
 }
@@ -3639,10 +3639,10 @@ function runScript(script, opts) {
     let output = "";
     let pending = "";
     const absorb = (buf) => {
-      const text = buf.toString();
-      output += text;
+      const text2 = buf.toString();
+      output += text2;
       if (!opts.onLine) return;
-      pending += text;
+      pending += text2;
       const lines = pending.split("\n");
       pending = lines.pop() ?? "";
       for (const l of lines) opts.onLine(l);
@@ -4062,9 +4062,9 @@ function planCron(ship, crewHome, job) {
 function unitAbandonsAgents(plan, read) {
   const path = plan.unitPaths[0];
   if (!path || plan.mechanism !== "launchd" && plan.mechanism !== "systemd") return null;
-  const text = read(path);
-  if (text === null) return null;
-  return plan.mechanism === "launchd" ? /<key>AbandonProcessGroup<\/key>\s*<true\/>/.test(text) : /^KillMode=process\s*$/m.test(text);
+  const text2 = read(path);
+  if (text2 === null) return null;
+  return plan.mechanism === "launchd" ? /<key>AbandonProcessGroup<\/key>\s*<true\/>/.test(text2) : /^KillMode=process\s*$/m.test(text2);
 }
 function planInstall(ship, crewHome, hostShip, hasSystemd, job = "run", ctx = USER_INSTALL) {
   if (hostShip === "macos") return planLaunchd(ship, crewHome, job);
@@ -4249,8 +4249,8 @@ function launchAgentsDir() {
 function xmlUnescape(s) {
   return s.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
 }
-function programFromPlist(text) {
-  const block = /<key>ProgramArguments<\/key>\s*<array>([\s\S]*?)<\/array>/.exec(text);
+function programFromPlist(text2) {
+  const block = /<key>ProgramArguments<\/key>\s*<array>([\s\S]*?)<\/array>/.exec(text2);
   if (!block) return null;
   const args = [...block[1].matchAll(/<string>([\s\S]*?)<\/string>/g)].map((m) => xmlUnescape(m[1]));
   return args.find((a) => a.endsWith("/bin/crew")) ?? args[0] ?? null;
@@ -4316,9 +4316,9 @@ function clearForeignLaunchdUnits(crewHome, replace, dryRun, log, dir, loaded) {
 function removeAllLaunchdUnits(dryRun, log, dir, loaded) {
   for (const unit of listLaunchdUnits(dir, loaded)) removeLaunchdUnit(unit, dryRun, log);
 }
-function parseLaunchctlList(text) {
+function parseLaunchctlList(text2) {
   const jobs = /* @__PURE__ */ new Map();
-  for (const line of text.split("\n")) {
+  for (const line of text2.split("\n")) {
     const cols = line.split("	");
     if (cols.length !== 3 || cols[2] === "Label") continue;
     jobs.set(cols[2], { pid: cols[0], lastExit: cols[1] });
@@ -4342,8 +4342,8 @@ function readCrontab() {
   const res = spawnSync4("crontab", ["-l"], { encoding: "utf8" });
   return res.status === 0 ? res.stdout ?? "" : "";
 }
-function writeCrontab(text) {
-  spawnSync4("crontab", ["-"], { input: text, encoding: "utf8" });
+function writeCrontab(text2) {
+  spawnSync4("crontab", ["-"], { input: text2, encoding: "utf8" });
 }
 function addCrontabLine(marker, line) {
   const existing = readCrontab();
@@ -5356,10 +5356,10 @@ function formatPushAuth(repo, r) {
   return `${label}FAILED \u2014 ${r.detail}; ${r.hint}
 `;
 }
-async function settleRepos(items, nameOf, resolve6) {
+async function settleRepos(items, nameOf, resolve7) {
   const out = await Promise.all(items.map(async (t) => {
     try {
-      return { ok: true, value: await resolve6(t) };
+      return { ok: true, value: await resolve7(t) };
     } catch (e) {
       return { ok: false, repo: nameOf(t), detail: e.message };
     }
@@ -6660,8 +6660,8 @@ async function replayQueuedTicketCounters(stateDir, route2, keyFor, log, now = /
 
 // src/ticket-attribution.ts
 var TICKET_KEY_RE = /\b[A-Z][A-Z0-9]{1,9}-\d+\b/g;
-function ticketMentions(text) {
-  return [...text.matchAll(TICKET_KEY_RE)].map((m) => m[0]);
+function ticketMentions(text2) {
+  return [...text2.matchAll(TICKET_KEY_RE)].map((m) => m[0]);
 }
 var TicketAttributionTracker = class {
   #tokensByTicket = /* @__PURE__ */ new Map();
@@ -6680,13 +6680,13 @@ var TicketAttributionTracker = class {
     return this.#current;
   }
   /** Record the mentions in `text` without crediting tokens (a claim needs "which ticket" before the turn's usage line arrives). */
-  note(text) {
-    const mentions = ticketMentions(text);
+  note(text2) {
+    const mentions = ticketMentions(text2);
     if (mentions.length > 0) this.#current = mentions[0];
   }
   /** One assistant turn: its combined visible text (thinking + text blocks) and its own token cost. */
-  add(text, tokens) {
-    const mentions = ticketMentions(text);
+  add(text2, tokens) {
+    const mentions = ticketMentions(text2);
     if (mentions.length > 0) this.#current = mentions[0];
     if (this.#current === void 0 || tokens <= 0) return;
     this.#turns++;
@@ -6783,10 +6783,10 @@ function resultText(content) {
   if (Array.isArray(content)) return content.map((c) => c && typeof c.text === "string" ? c.text : "").join("\n");
   return "";
 }
-function isTransportFailure(isError, text) {
+function isTransportFailure(isError, text2) {
   if (!isError) {
     try {
-      const doc = JSON.parse(text);
+      const doc = JSON.parse(text2);
       if (doc && typeof doc === "object") {
         const code = doc.statusCode;
         return typeof code === "number" && code >= 500;
@@ -6794,7 +6794,7 @@ function isTransportFailure(isError, text) {
     } catch {
     }
   }
-  return TRANSPORT_FAILURE.test(text);
+  return TRANSPORT_FAILURE.test(text2);
 }
 var HandoffTranscriptTracker = class {
   open = /* @__PURE__ */ new Map();
@@ -7218,6 +7218,12 @@ var Tracker = class {
     if (!model) return [];
     return this.client.records.list(model, { limit: 200 });
   }
+  /** Every `Repos` row with the columns the resolved file mirrors (CREW-2885). */
+  async repoRowsForMap() {
+    const model = this.route.resolved?.reposModelId;
+    if (!model) return [];
+    return this.client.records.list(model, { limit: 200 });
+  }
   /** Delete a `Repos` row (`crew sample-ticket --remove`). */
   async deleteRepoRow(id) {
     const model = this.route.resolved?.reposModelId;
@@ -8653,15 +8659,15 @@ async function replayPendingHandoffs(i) {
         continue;
       }
       if (v.kind === "unverified") throw new Error(v.why);
-      const text = rec.comment ?? (rec.commentLanded ? "" : rec.finalText);
-      if (text) {
-        const head = firstLine(text);
+      const text2 = rec.comment ?? (rec.commentLanded ? "" : rec.finalText);
+      if (text2) {
+        const head = firstLine(text2);
         const cc = i.contract.comments;
         const seen = (await i.writer.comments()).some((c) => {
           const row = c;
           return row[cc.parent] === t.id && row[cc.author] === seatId && firstLine(String(row[cc.body] ?? "")) === head;
         });
-        if (!seen) await i.writer.postComment(t.id, text, seatId);
+        if (!seen) await i.writer.postComment(t.id, text2, seatId);
       }
       await i.writer.postEvent(t.id, pushedEventBody(v.sha, v.remote, v.branch), seatId, "pushed");
       await i.writer.updateTicket(t.id, rec.patch);
@@ -8690,15 +8696,15 @@ var SkillIncludeError = class extends Error {
 var MAX_INCLUDE_DEPTH = 3;
 var MAX_INCLUDED_BYTES = 2e5;
 var MARKER = /\{\{[ \t]*skill:[ \t]*([^{}\r\n]*?)[ \t]*\}\}/g;
-function skillMarkerNames(text) {
+function skillMarkerNames(text2) {
   const names = [];
-  for (const m of text.matchAll(MARKER)) {
+  for (const m of text2.matchAll(MARKER)) {
     const name = m[1].trim();
     if (name && !names.includes(name)) names.push(name);
   }
   return names;
 }
-function expandSkillMarkers(text, lookup2, opts = {}) {
+function expandSkillMarkers(text2, lookup2, opts = {}) {
   const maxDepth = opts.maxDepth ?? MAX_INCLUDE_DEPTH;
   const maxBytes = opts.maxBytes ?? MAX_INCLUDED_BYTES;
   const warnings = [];
@@ -8725,7 +8731,7 @@ function expandSkillMarkers(text, lookup2, opts = {}) {
     included += bytes;
     return expand2(trimmed, [...chain, name]);
   });
-  return { text: expand2(text, []), warnings };
+  return { text: expand2(text2, []), warnings };
 }
 
 // src/skills.ts
@@ -8736,9 +8742,9 @@ import { TablationClient as TablationClient3, StaleWriteError as StaleWriteError
 
 // src/prompt-additions.ts
 var PROMPT_ADDITIONS_SEPARATOR = "---\n\nAdditional instructions from this workspace. Where they conflict with anything above, these take precedence.";
-function appendAdditions(text, additions) {
-  if (typeof additions !== "string" || additions.trim() === "") return text;
-  return `${text}
+function appendAdditions(text2, additions) {
+  if (typeof additions !== "string" || additions.trim() === "") return text2;
+  return `${text2}
 
 ${PROMPT_ADDITIONS_SEPARATOR}
 
@@ -9213,8 +9219,8 @@ function describeCrewLink(o) {
 var SkillSyncError = class extends Error {
 };
 function parseSkillFile(path) {
-  const text = readFileSync18(path, "utf8");
-  const match = /^---\n([\s\S]*?)\n---\n([\s\S]*)$/.exec(text);
+  const text2 = readFileSync18(path, "utf8");
+  const match = /^---\n([\s\S]*?)\n---\n([\s\S]*)$/.exec(text2);
   if (!match) throw new SkillSyncError(`${path}: missing YAML frontmatter (expected a leading --- block)`);
   const frontmatter = match[1];
   const body = match[2];
@@ -9403,8 +9409,8 @@ function isEditedSkillRow(row, localPrompt, cached) {
 function skillMarkerWarnings(promptsDir, personaPrompts) {
   const shipped = new Set(listLocalSkills(promptsDir).map((s) => s.name));
   const out = [];
-  for (const [role, text] of Object.entries(personaPrompts)) {
-    for (const name of skillMarkerNames(text ?? "")) {
+  for (const [role, text2] of Object.entries(personaPrompts)) {
+    for (const name of skillMarkerNames(text2 ?? "")) {
       if (!shipped.has(name)) out.push(`${role}: brief includes {{skill: ${name}}} but this prompt set ships no skill with that name`);
     }
   }
@@ -9741,15 +9747,15 @@ var FileTail = class {
       return "";
     }
     try {
-      let text = "";
+      let text2 = "";
       const chunk = Buffer.alloc(64 * 1024);
       for (; ; ) {
         const n = readSync(fd, chunk, 0, chunk.length, this.offset);
         if (n <= 0) break;
         this.offset += n;
-        text += this.decoder.write(chunk.subarray(0, n));
+        text2 += this.decoder.write(chunk.subarray(0, n));
       }
-      return text;
+      return text2;
     } finally {
       closeSync3(fd);
     }
@@ -9788,8 +9794,8 @@ var RunObserver = class {
     this.liveTicket = id.ticket ?? void 0;
     this.mapper = adapter.createStreamMapper?.() ?? { map: (p) => adapter.mapStreamLine(p), flush: () => [] };
   }
-  feed(text) {
-    this.buf += text;
+  feed(text2) {
+    this.buf += text2;
     const lines = this.buf.split("\n");
     this.buf = lines.pop() ?? "";
     for (const line of lines) this.handleLine(line);
@@ -10054,7 +10060,7 @@ function spawnAgent(plan, emit, hintMoved) {
   for (const w of plan.warnings ?? []) emit.warn(w, { step: "agent", role: plan.role });
   const eventsSink = openSink(plan.eventsPath);
   const id = identityOf(plan, adapter.harness);
-  return new Promise((resolve6, reject) => {
+  return new Promise((resolve7, reject) => {
     let streamFd;
     try {
       mkdirSync12(dirname8(plan.streamPath), { recursive: true });
@@ -10138,7 +10144,7 @@ function spawnAgent(plan, emit, hintMoved) {
         plan.agentLog?.apiKey,
         hintMoved
       );
-      resolve6({ code: code ?? 1, ms: ms3, ...handoffPending ? { handoffPending } : {}, ...killed ? { killed } : {} });
+      resolve7({ code: code ?? 1, ms: ms3, ...handoffPending ? { handoffPending } : {}, ...killed ? { killed } : {} });
     });
     child.stdin?.on("error", (err3) => {
       emit.warn(`agent closed stdin before the prompt was delivered: ${err3.message}`, { step: "agent" });
@@ -10471,7 +10477,7 @@ var SELFTEST_TIMEOUT_MS = 12e4;
 var KEY_VAR = "CREW_API_KEY";
 var SELFTEST_PROMPT = "This is a read-only connectivity check. Use the tracker MCP tool to read this workspace (the workspaces find-one tool, using the workspace id below) and reply with the workspace's name alone, on one line. Do not write anything, do not create files, and do not use any other tool.\n\nWorkspace id: ";
 var realDeps = {
-  run: (o) => new Promise((resolve6) => {
+  run: (o) => new Promise((resolve7) => {
     let stdout = "";
     let stderr = "";
     let timedOut = false;
@@ -10479,7 +10485,7 @@ var realDeps = {
     const done = (r) => {
       if (!settled) {
         settled = true;
-        resolve6(r);
+        resolve7(r);
       }
     };
     const child = spawn3(o.bin, o.args, { cwd: o.cwd, env: o.env, stdio: ["pipe", "pipe", "pipe"], detached: true });
@@ -10588,12 +10594,12 @@ function classify(spec, run2, seen) {
     return fail("binary-not-found", `could not start \`${bin}\` (${run2.spawnError.message})`);
   }
   if (run2.timedOut) return fail("timeout", "no answer within the time limit");
-  const text = `${seen.toolOutput}
+  const text2 = `${seen.toolOutput}
 ${run2.stderr}`;
   if (REFUSED.test(seen.toolOutput) || seen.tools.some((t) => t.startsWith("mcp__")) && REFUSED.test(run2.stderr)) {
     return fail("key-refused", "the tracker returned 401/403 to the MCP call");
   }
-  if (seen.mcpFailed || !seen.tools.some((t) => t.startsWith("mcp__")) && MCP_GONE.test(`${text}
+  if (seen.mcpFailed || !seen.tools.some((t) => t.startsWith("mcp__")) && MCP_GONE.test(`${text2}
 ${seen.texts.join("\n")}`)) {
     return fail("mcp-unavailable", "the tracker MCP tool was not available to the session");
   }
@@ -10685,7 +10691,7 @@ function doctorSelftestLines(stored, toolchains) {
 }
 
 // src/cli.ts
-import { resolve as resolve5, dirname as dirname22, join as join44, basename as basename13 } from "path";
+import { resolve as resolve6, dirname as dirname24, join as join46, basename as basename14 } from "path";
 import { fileURLToPath } from "url";
 import { hostname as hostname3, homedir as homedir10 } from "os";
 import { spawnSync as spawnSync8 } from "child_process";
@@ -12255,13 +12261,13 @@ function writeDigest(o, d, role, stateDir, runId, own) {
       blockerInfo: d.info
     };
     const body = role === "qa" ? qaDigest(input) : buildingDigest(input);
-    const text = own ? `${ownRunBanner(own)}
+    const text2 = own ? `${ownRunBanner(own)}
 
 ${body}` : body;
     const path = digestPath(stateDir, routeSlug(o.route.route), role, runId);
-    writeFileSync17(path, text);
-    o.emit.emit(`queue digest written for ${role} (${Buffer.byteLength(text)} bytes)`, {
-      data: { role, bytes: Buffer.byteLength(text) }
+    writeFileSync17(path, text2);
+    o.emit.emit(`queue digest written for ${role} (${Buffer.byteLength(text2)} bytes)`, {
+      data: { role, bytes: Buffer.byteLength(text2) }
     });
     return true;
   } catch (e) {
@@ -12366,6 +12372,115 @@ async function resolveOne(tracker, t, seat, approvedStatus, buildingStatus, affi
   }
 }
 
+// src/repo-refresh.ts
+import { existsSync as existsSync24, mkdirSync as mkdirSync16, readFileSync as readFileSync23, writeFileSync as writeFileSync18 } from "fs";
+import { dirname as dirname11 } from "path";
+var REFRESH_COOLDOWN_MS = 2 * 6e4;
+var UNSERVABLE_PASSES_BEFORE_ATTENTION = 3;
+var lastAsked = /* @__PURE__ */ new Map();
+function unknownRepoIds(route2, repoIds) {
+  const names = route2.resolved?.repoNames;
+  if (!route2.resolved?.reposModelId || !names) return [];
+  return [...new Set(repoIds.filter((id) => !!id && !(id in names)))];
+}
+function applyRepoRows(resolved, rows) {
+  const added = [];
+  const names = resolved.repoNames ??= {};
+  const remotes = resolved.repoRemotes ??= {};
+  const hosts = resolved.repoForgeHosts ??= {};
+  for (const r of rows) {
+    if (!(r.id in names)) added.push(r.id);
+    names[r.id] = r.name ?? "";
+    if (r.remote) remotes[r.id] = r.remote;
+    else delete remotes[r.id];
+    const h = r.forge_host?.trim().toLowerCase();
+    if (h) hosts[r.id] = h;
+    else delete hosts[r.id];
+  }
+  if (Object.keys(remotes).length === 0) delete resolved.repoRemotes;
+  if (Object.keys(hosts).length === 0) delete resolved.repoForgeHosts;
+  return added;
+}
+function persistRepoRows(stateDir, routeName, rows) {
+  const path = resolvedPathFor(stateDir, routeName);
+  if (!existsSync24(path)) return;
+  const raw = JSON.parse(readFileSync23(path, "utf8"));
+  applyRepoRows(raw, rows);
+  mkdirSync16(dirname11(path), { recursive: true });
+  writeFileSync18(path, `${JSON.stringify(raw, null, 2)}
+`);
+}
+async function refreshUnknownRepos(o) {
+  const unknown = unknownRepoIds(o.route, o.tickets.map((t) => t.repo_id));
+  if (unknown.length === 0 || !o.route.resolved) return [];
+  const now = o.now ?? Date.now();
+  const last = lastAsked.get(o.route.route);
+  if (!o.force && last !== void 0 && now - last < REFRESH_COOLDOWN_MS) return [];
+  lastAsked.set(o.route.route, now);
+  let rows;
+  try {
+    rows = await o.fetchRows();
+  } catch {
+    return [];
+  }
+  const added = applyRepoRows(o.route.resolved, rows);
+  try {
+    persistRepoRows(o.stateDir, o.route.route, rows);
+  } catch {
+  }
+  return added;
+}
+var repoUnservableKey = (route2, issueId) => `repo_unservable:${route2}:${issueId}`;
+function repoUnservableItem(route2, issueId, repoLabel, nowIso = (/* @__PURE__ */ new Date()).toISOString()) {
+  return {
+    kind: "repo_unservable",
+    key: repoUnservableKey(route2, issueId),
+    since: nowIso,
+    message: `${route2}: ${issueId} is skipped \u2014 this ship has no checkout for ${repoLabel}. Resumes automatically once the route lists that repository (\`crew repos add\`) or a Repos row for it exists`
+  };
+}
+function trackUnservable(streaks, unservable) {
+  const now = new Set(unservable);
+  const recovered = [];
+  for (const id of [...streaks.keys()]) {
+    if (!now.has(id)) {
+      streaks.delete(id);
+      recovered.push(id);
+    }
+  }
+  const raise = [];
+  for (const id of now) {
+    const n = (streaks.get(id) ?? 0) + 1;
+    streaks.set(id, n);
+    if (n >= UNSERVABLE_PASSES_BEFORE_ATTENTION) raise.push(id);
+  }
+  return { raise, recovered };
+}
+var streaksByRoute = /* @__PURE__ */ new Map();
+async function reportUnservable(o, unservable, repoLabelOf) {
+  const streaks = streaksByRoute.get(o.route.route) ?? /* @__PURE__ */ new Map();
+  streaksByRoute.set(o.route.route, streaks);
+  const { raise, recovered } = trackUnservable(streaks, unservable);
+  for (const id of recovered) {
+    try {
+      clearShipAttention(o.state, repoUnservableKey(o.route.route, id));
+    } catch {
+    }
+  }
+  for (const id of raise) {
+    try {
+      await raiseShipAttention(o, repoUnservableItem(o.route.route, id, repoLabelOf(id)));
+    } catch {
+    }
+  }
+}
+function repoLabelFor(route2, ticket) {
+  const id = ticket?.repo_id;
+  if (!id) return "a repository (the ticket names none)";
+  const name = route2.resolved?.repoNames?.[id];
+  return name ? `repository "${name}"` : `repository ${id} (no Repos row by that id)`;
+}
+
 // src/conflict.ts
 import { StaleWriteError as StaleWriteError7 } from "@tablation/client";
 var BOUNCE_MARKER = calloutHeader("WARNING", "Merge Conflict");
@@ -12742,13 +12857,13 @@ Ship ${shipName2} found: ${problem}. The release refuses to squash a ref nobody
 var localRefSkipReported = (ticket, problem, events) => events.some((e) => e.record_id === ticket.id && e.event_type === "local_ref_skip" && (e.message ?? "").includes(problem));
 
 // src/connect-wizard.ts
-import { delimiter, dirname as dirname11, join as join27 } from "path";
-import { accessSync as accessSync3, constants as constants3, existsSync as existsSync24, mkdirSync as mkdirSync16, writeFileSync as writeFileSync18 } from "fs";
+import { delimiter, dirname as dirname12, join as join27 } from "path";
+import { accessSync as accessSync3, constants as constants3, existsSync as existsSync25, mkdirSync as mkdirSync17, writeFileSync as writeFileSync19 } from "fs";
 import { stringify } from "yaml";
 var HOST_PASSENGERS_DOCS_URL = "https://crew.tablation.dev/host-passengers";
 function shouldRunWizard(opts) {
   if (!opts.isTTY) return false;
-  const exists = opts.configExists ?? existsSync24;
+  const exists = opts.configExists ?? existsSync25;
   return !configSearchPath(opts.crewHome).some((p) => exists(p));
 }
 function firstRunConfigPath() {
@@ -12791,9 +12906,9 @@ async function runWizard(p, env) {
     if (entered && isExec(entered)) agentBin = entered;
     else p.say(entered ? `${entered} is not an executable file.` : "A path is required.");
   }
-  const nodeDir = dirname11(env.nodePath);
+  const nodeDir = dirname12(env.nodePath);
   const pnpmPath = findOnPath2("pnpm", env.pathEnv, isExec);
-  const baseDirs = [nodeDir, pnpmPath ? dirname11(pnpmPath) : void 0];
+  const baseDirs = [nodeDir, pnpmPath ? dirname12(pnpmPath) : void 0];
   p.say(
     `
 Host Passengers lets this machine run the agent sessions that other people's
@@ -12804,7 +12919,7 @@ Tablation workspaces ask for, in a container. More: ${HOST_PASSENGERS_DOCS_URL}`
     p.say("Docker is not available here, so nothing will be hosted until it is. Your answer is recorded anyway.");
   }
   const dockerPath = hostPassengers ? findOnPath2("docker", env.pathEnv, isExec) : void 0;
-  const extraPath = deriveExtraPath([...baseDirs, dockerPath ? dirname11(dockerPath) : void 0]);
+  const extraPath = deriveExtraPath([...baseDirs, dockerPath ? dirname12(dockerPath) : void 0]);
   if (extraPath) {
     p.say(`Hooks will get ${extraPath} on their PATH (where node, pnpm${dockerPath ? " and docker" : ""} live).`);
   }
@@ -12825,10 +12940,10 @@ function renderFullConfig(a, routeBlock) {
 routes:
 ${routeBlock}`;
 }
-function writeNewConfig(path, text) {
-  mkdirSync16(dirname11(path), { recursive: true });
+function writeNewConfig(path, text2) {
+  mkdirSync17(dirname12(path), { recursive: true });
   try {
-    writeFileSync18(path, text, { mode: 384, flag: "wx" });
+    writeFileSync19(path, text2, { mode: 384, flag: "wx" });
     return true;
   } catch (e) {
     if (e.code === "EEXIST") return false;
@@ -12862,14 +12977,14 @@ Wrote ${o.configPath}.
 // src/connect-json.ts
 import { accessSync as accessSync4, constants as constants4 } from "fs";
 import { homedir as homedir8 } from "os";
-import { dirname as dirname12, join as join28 } from "path";
+import { dirname as dirname13, join as join28 } from "path";
 import { delimiter as delimiter2 } from "path";
 var CHOICE_EXIT_CODE = 3;
-function createEmitter(json, write) {
+function createEmitter(json2, write) {
   return {
-    json,
+    json: json2,
     emit(event, message, data = {}) {
-      if (!json) return;
+      if (!json2) return;
       write(`${JSON.stringify({ ...data, event, message })}
 `);
     }
@@ -12928,7 +13043,7 @@ function flagWizardAnswers(f, env) {
   const agentBin = f.agentBin ?? found?.bin;
   const pnpmPath = findOnPath2("pnpm", env.pathEnv, isExec);
   const dockerPath = f.hostPassengers ? findOnPath2("docker", env.pathEnv, isExec) : void 0;
-  const extraPath = f.extraPath ?? deriveExtraPath([dirname12(env.nodePath), pnpmPath ? dirname12(pnpmPath) : void 0, dockerPath ? dirname12(dockerPath) : void 0]);
+  const extraPath = f.extraPath ?? deriveExtraPath([dirname13(env.nodePath), pnpmPath ? dirname13(pnpmPath) : void 0, dockerPath ? dirname13(dockerPath) : void 0]);
   return {
     answers: {
       name: f.shipName?.trim() || env.hostname,
@@ -12943,7 +13058,7 @@ function flagWizardAnswers(f, env) {
 
 // src/provision.ts
 import { spawnSync as spawnSync6 } from "child_process";
-import { existsSync as existsSync25, readFileSync as readFileSync23, writeFileSync as writeFileSync19 } from "fs";
+import { existsSync as existsSync26, readFileSync as readFileSync24, writeFileSync as writeFileSync20 } from "fs";
 import { hostname as hostname2 } from "os";
 import { parseDocument as parseDocument3 } from "yaml";
 
@@ -12976,8 +13091,8 @@ function matchRepoName(origin, resolved) {
   }
   return void 0;
 }
-function routeNamesOf(text) {
-  const routes = parseDocument(text).get("routes", true);
+function routeNamesOf(text2) {
+  const routes = parseDocument(text2).get("routes", true);
   if (!isSeq(routes)) return [];
   return routes.items.flatMap((i) => isMap(i) && typeof i.get("route") === "string" ? [i.get("route")] : []);
 }
@@ -13011,8 +13126,8 @@ function routeMapOf(doc, route2) {
   const have = isSeq(routes) ? routes.items.map((i) => isMap(i) ? String(i.get("route")) : "?").join(", ") : "none";
   throw new ReposError(`no route "${route2}" in the config (have: ${have})`);
 }
-function configuredRepos(text, route2, base) {
-  const doc = parseDocument(text);
+function configuredRepos(text2, route2, base) {
+  const doc = parseDocument(text2);
   const m = routeMapOf(doc, route2);
   const repos = m.get("repos");
   if (isMap(repos)) {
@@ -13026,8 +13141,8 @@ function configuredRepos(text, route2, base) {
   const dir = m.get("dir");
   return dir ? [{ name: basename8(String(dir)), dir: expandDir(String(dir), base) }] : [];
 }
-function cloneBaseOf(text, route2, base, isCheckout) {
-  const m = routeMapOf(parseDocument(text), route2);
+function cloneBaseOf(text2, route2, base, isCheckout) {
+  const m = routeMapOf(parseDocument(text2), route2);
   const repos = m.get("repos", true);
   if (isMap(repos) && repos.items.length > 0) return null;
   const dir = m.get("dir");
@@ -13035,8 +13150,8 @@ function cloneBaseOf(text, route2, base, isCheckout) {
   const abs = expandDir(String(dir), base);
   return isCheckout(abs) ? null : abs;
 }
-function routeSetsHooks(text, route2, name) {
-  const m = routeMapOf(parseDocument(text), route2);
+function routeSetsHooks(text2, route2, name) {
+  const m = routeMapOf(parseDocument(text2), route2);
   const repos = m.get("repos", true);
   let target = m;
   if (isMap(repos)) target = repos.get(name, true);
@@ -13143,12 +13258,12 @@ function planRepoAdd(i) {
   }
   return { text: String(doc), mode, name, block: renderBlock(m), warning, unmatched: !matched, droppedDir };
 }
-function planRepoRemove(text, base, route2, path) {
-  const doc = parseDocument(text);
+function planRepoRemove(text2, base, route2, path) {
+  const doc = parseDocument(text2);
   if (doc.errors.length > 0) throw new ReposError(`config is not valid YAML \u2014 ${doc.errors[0].message}`);
   const m = routeMapOf(doc, route2);
   const target = expandDir(path, base);
-  const existing = configuredRepos(text, route2, base);
+  const existing = configuredRepos(text2, route2, base);
   const hit = existing.find((e) => e.dir === target);
   if (!hit) throw new ReposError(`${target} is not configured on route ${route2}`);
   const repos = m.get("repos", true);
@@ -13273,8 +13388,8 @@ async function gatherHealth(c, check) {
 function routesInScope(routes, named) {
   return named ? routes.filter((r) => r.route === named) : routes;
 }
-function planEnable(text, route2) {
-  const doc = parseDocument2(text);
+function planEnable(text2, route2) {
+  const doc = parseDocument2(text2);
   routeMapOf(doc, route2).set("enabled", true);
   return String(doc);
 }
@@ -13460,7 +13575,7 @@ function realProvisionDeps(crewHome) {
   };
   const configFile = () => {
     const f = findConfigFile(crewHome);
-    return existsSync25(f) ? f : null;
+    return existsSync26(f) ? f : null;
   };
   return {
     crew: spawnCrew,
@@ -13468,13 +13583,13 @@ function realProvisionDeps(crewHome) {
     enableRoute(route2) {
       const file = configFile();
       if (!file) return false;
-      const text = readFileSync23(file, "utf8");
-      const doc = parseDocument3(text);
+      const text2 = readFileSync24(file, "utf8");
+      const doc = parseDocument3(text2);
       const routes = doc.get("routes");
       const entry = routes?.items?.find((r) => r.get("route") === route2);
       if (!entry) throw new Error(`route ${route2} is not in ${file}`);
       if (entry.get("enabled") === true) return false;
-      writeFileSync19(file, planEnable(text, route2));
+      writeFileSync20(file, planEnable(text2, route2));
       return true;
     },
     installState() {
@@ -13494,14 +13609,14 @@ function realProvisionDeps(crewHome) {
           continue;
         }
         for (const p of plan.unitPaths) {
-          if (!existsSync25(p) || readFileSync23(p, "utf8") !== plan.unitContent[p]) unitsStale = true;
+          if (!existsSync26(p) || readFileSync24(p, "utf8") !== plan.unitContent[p]) unitsStale = true;
         }
       }
       const label = labelFor(crewHome, "run");
       let running = false;
       let lingering = true;
       if (mechanism === "systemd") {
-        const system = ctx.root || existsSync25(systemUnitPathFor(label));
+        const system = ctx.root || existsSync26(systemUnitPathFor(label));
         const ctl = system ? ["systemctl"] : ["systemctl", "--user"];
         running = spawnSync6(ctl[0], [...ctl.slice(1), "is-active", "--quiet", `${label}.service`]).status === 0;
         if (!system) {
@@ -13528,8 +13643,8 @@ host=${host}
 }
 
 // src/release-run.ts
-import { readFileSync as readFileSync24, writeFileSync as writeFileSync20, existsSync as existsSync26, copyFileSync, mkdirSync as mkdirSync17, mkdtempSync as mkdtempSync2, rmSync as rmSync14 } from "fs";
-import { dirname as dirname14, join as join30 } from "path";
+import { readFileSync as readFileSync25, writeFileSync as writeFileSync21, existsSync as existsSync27, copyFileSync, mkdirSync as mkdirSync18, mkdtempSync as mkdtempSync2, rmSync as rmSync14 } from "fs";
+import { dirname as dirname15, join as join30 } from "path";
 import { tmpdir as tmpdir3 } from "os";
 
 // src/release.ts
@@ -14272,11 +14387,11 @@ async function bump(o, size) {
   }
   const files = o.repo.release.versionFiles.map((f) => join30(o.cwd, f));
   const first = files[0];
-  if (!existsSync26(first)) {
+  if (!existsSync27(first)) {
     o.emit.error(`no ${o.repo.release.versionFiles[0]} to read a version from`);
     return null;
   }
-  const current = JSON.parse(readFileSync24(first, "utf8")).version;
+  const current = JSON.parse(readFileSync25(first, "utf8")).version;
   if (!current) {
     o.emit.error(`no version field in ${o.repo.release.versionFiles[0]}`);
     return null;
@@ -14289,13 +14404,13 @@ async function bump(o, size) {
     return version;
   }
   for (const f of files) {
-    const src = readFileSync24(f, "utf8");
+    const src = readFileSync25(f, "utf8");
     const out = src.replace(/("version"\s*:\s*")[^"]*(")/, `$1${version}$2`);
     if (out === src) {
       o.emit.error(`no version field in ${f}`);
       return null;
     }
-    writeFileSync20(f, out);
+    writeFileSync21(f, out);
   }
   return version;
 }
@@ -14308,8 +14423,8 @@ function writeChangelog(o, version, entries) {
     o.emit.emit(`would prepend ${entries.length} entr(ies) to ${file}`);
     return;
   }
-  const existing = existsSync26(path) ? readFileSync24(path, "utf8") : "# Changelog\n";
-  writeFileSync20(path, insertChangelogSection(existing, section));
+  const existing = existsSync27(path) ? readFileSync25(path, "utf8") : "# Changelog\n";
+  writeFileSync21(path, insertChangelogSection(existing, section));
 }
 async function confirm(o, expected) {
   if (!o.repo.hooks.released) return void 0;
@@ -14414,8 +14529,8 @@ function openReleaseCheckout(o) {
   }
   for (const f of o.repo.worktrees.copy) {
     const src = join30(o.cwd, f);
-    if (!existsSync26(src)) continue;
-    mkdirSync17(dirname14(join30(dir, f)), { recursive: true });
+    if (!existsSync27(src)) continue;
+    mkdirSync18(dirname15(join30(dir, f)), { recursive: true });
     copyFileSync(src, join30(dir, f));
   }
   return { dir, branch, close };
@@ -15117,11 +15232,11 @@ Passed: ${passed}.${willClose ? " Closing this alert." : ""}`,
 }
 
 // src/live-runs.ts
-import { existsSync as existsSync28, readdirSync as readdirSync11 } from "fs";
+import { existsSync as existsSync29, readdirSync as readdirSync11 } from "fs";
 import { join as join32 } from "path";
 
 // src/interrupted.ts
-import { existsSync as existsSync27, readdirSync as readdirSync10, readFileSync as readFileSync25 } from "fs";
+import { existsSync as existsSync28, readdirSync as readdirSync10, readFileSync as readFileSync26 } from "fs";
 import { join as join31 } from "path";
 var INTERRUPTED_MARKER = calloutHeader("NOTE", "Interrupted");
 function interruptedComment(b) {
@@ -15141,16 +15256,16 @@ var pidAlive = (pid) => {
 };
 function runFinished(streamPath) {
   const path = `${streamPath}.meta.json`;
-  if (!existsSync27(path)) return false;
+  if (!existsSync28(path)) return false;
   try {
-    return JSON.parse(readFileSync25(path, "utf8")).running !== true;
+    return JSON.parse(readFileSync26(path, "utf8")).running !== true;
   } catch {
     return true;
   }
 }
 function orphanedStreams(o) {
   const dir = join31(o.stateDir, "streams");
-  if (!existsSync27(dir)) return [];
+  if (!existsSync28(dir)) return [];
   const ownerAlive = o.isOwnerAlive ?? pidAlive;
   const out = [];
   for (const name of readdirSync10(dir)) {
@@ -15210,7 +15325,7 @@ async function reconcileRuns(o) {
 // src/live-runs.ts
 function liveRuns(stateDir, isAlive = runIsAlive) {
   const dir = join32(stateDir, "streams");
-  if (!existsSync28(dir)) return [];
+  if (!existsSync29(dir)) return [];
   const out = [];
   for (const name of readdirSync11(dir)) {
     if (!name.endsWith(".jsonl") || name.endsWith(".events.jsonl")) continue;
@@ -15549,7 +15664,7 @@ function missingReleaserWarning(repo, release, ships, now = Date.now()) {
 }
 
 // src/watch.ts
-import { watch as watchFile, existsSync as existsSync29, statSync as statSync9, openSync as openSync4, readSync as readSync2, closeSync as closeSync4 } from "fs";
+import { watch as watchFile, existsSync as existsSync30, statSync as statSync9, openSync as openSync4, readSync as readSync2, closeSync as closeSync4 } from "fs";
 var E = "\x1B[";
 var dim = (s) => `${E}2m${s}${E}0m`;
 var bold = (s) => `${E}1m${s}${E}0m`;
@@ -15650,7 +15765,7 @@ function renderHeaders(states, now = Date.now()) {
   return states.map((s) => renderHeader(s, now)).join("");
 }
 function readFrom(file, from) {
-  if (!existsSync29(file)) return { events: [], offset: from };
+  if (!existsSync30(file)) return { events: [], offset: from };
   const size = statSync9(file).size;
   if (size < from) return readFrom(file, 0);
   if (size === from) return { events: [], offset: from };
@@ -15658,18 +15773,18 @@ function readFrom(file, from) {
   const buf = Buffer.alloc(size - from);
   readSync2(fd, buf, 0, buf.length, from);
   closeSync4(fd);
-  const text = buf.toString("utf8");
-  const lastNewline = text.lastIndexOf("\n");
+  const text2 = buf.toString("utf8");
+  const lastNewline = text2.lastIndexOf("\n");
   if (lastNewline === -1) return { events: [], offset: from };
   const events = [];
-  for (const line of text.slice(0, lastNewline).split("\n")) {
+  for (const line of text2.slice(0, lastNewline).split("\n")) {
     if (!line.trim()) continue;
     try {
       events.push(JSON.parse(line));
     } catch {
     }
   }
-  return { events, offset: from + Buffer.byteLength(text.slice(0, lastNewline + 1), "utf8") };
+  return { events, offset: from + Buffer.byteLength(text2.slice(0, lastNewline + 1), "utf8") };
 }
 function startWatch(o) {
   const out = o.out ?? ((s) => process.stdout.write(s));
@@ -15893,15 +16008,15 @@ function nextRoles(decision, ran) {
 }
 
 // src/ship-name.ts
-import { existsSync as existsSync31, mkdirSync as mkdirSync19, readFileSync as readFileSync27, renameSync as renameSync3, writeFileSync as writeFileSync22 } from "fs";
-import { dirname as dirname16 } from "path";
+import { existsSync as existsSync32, mkdirSync as mkdirSync20, readFileSync as readFileSync28, renameSync as renameSync3, writeFileSync as writeFileSync23 } from "fs";
+import { dirname as dirname17 } from "path";
 import { parseDocument as parseDocument5 } from "yaml";
 
 // src/machine-id.ts
 import { execFileSync as execFileSync5 } from "child_process";
 import { createHash as createHash5 } from "crypto";
-import { existsSync as existsSync30, mkdirSync as mkdirSync18, readFileSync as readFileSync26, writeFileSync as writeFileSync21 } from "fs";
-import { dirname as dirname15, join as join33 } from "path";
+import { existsSync as existsSync31, mkdirSync as mkdirSync19, readFileSync as readFileSync27, writeFileSync as writeFileSync22 } from "fs";
+import { dirname as dirname16, join as join33 } from "path";
 function machineIdPathFor(stateDir) {
   return join33(stateDir, "machine-id");
 }
@@ -15916,8 +16031,8 @@ function readRawMachineId(platform2 = process.platform) {
       return /"IOPlatformUUID"\s*=\s*"([^"]+)"/.exec(out)?.[1];
     }
     for (const p of ["/etc/machine-id", "/var/lib/dbus/machine-id"]) {
-      if (existsSync30(p)) {
-        const id = readFileSync26(p, "utf8").trim();
+      if (existsSync31(p)) {
+        const id = readFileSync27(p, "utf8").trim();
         if (id) return id;
       }
     }
@@ -15928,15 +16043,15 @@ function readRawMachineId(platform2 = process.platform) {
 function ensureMachineId(stateDir, opts = {}) {
   if (opts.override?.trim()) return sha256(opts.override.trim());
   const path = machineIdPathFor(stateDir);
-  if (existsSync30(path)) {
-    const cached = readFileSync26(path, "utf8").trim();
+  if (existsSync31(path)) {
+    const cached = readFileSync27(path, "utf8").trim();
     if (/^[0-9a-f]{64}$/.test(cached)) return cached;
   }
   const raw = (opts.read ?? readRawMachineId)();
   if (!raw) return void 0;
   const hashed = sha256(raw);
-  mkdirSync18(dirname15(path), { recursive: true });
-  writeFileSync21(path, `${hashed}
+  mkdirSync19(dirname16(path), { recursive: true });
+  writeFileSync22(path, `${hashed}
 `, { mode: 384 });
   return hashed;
 }
@@ -15964,12 +16079,12 @@ function planNameSync(local, row, lastSynced) {
   if (rowMoved) return { drift: "row", action: "adopt" };
   return { drift: "local", action: "push" };
 }
-function shipNameOfYaml(text) {
-  const v = parseDocument5(text).getIn(["ship", "name"]);
+function shipNameOfYaml(text2) {
+  const v = parseDocument5(text2).getIn(["ship", "name"]);
   return typeof v === "string" && v.trim() ? v.trim() : void 0;
 }
-function setShipNameInYaml(text, name) {
-  const doc = parseDocument5(text);
+function setShipNameInYaml(text2, name) {
+  const doc = parseDocument5(text2);
   doc.setIn(["ship", "name"], name);
   return doc.toString();
 }
@@ -16007,34 +16122,34 @@ async function syncRouteName(i) {
   return { status: "ok", ...base, action, name: i.local };
 }
 function readSyncedName(resolvedFile) {
-  if (!existsSync31(resolvedFile)) return void 0;
+  if (!existsSync32(resolvedFile)) return void 0;
   try {
-    const v = JSON.parse(readFileSync27(resolvedFile, "utf8")).shipName;
+    const v = JSON.parse(readFileSync28(resolvedFile, "utf8")).shipName;
     return typeof v === "string" ? v : void 0;
   } catch {
     return void 0;
   }
 }
 function writeSyncedName(resolvedFile, name) {
-  if (!existsSync31(resolvedFile)) return;
+  if (!existsSync32(resolvedFile)) return;
   let raw;
   try {
-    raw = JSON.parse(readFileSync27(resolvedFile, "utf8"));
+    raw = JSON.parse(readFileSync28(resolvedFile, "utf8"));
   } catch {
     return;
   }
   if (raw.shipName === name) return;
   raw.shipName = name;
-  mkdirSync19(dirname16(resolvedFile), { recursive: true });
+  mkdirSync20(dirname17(resolvedFile), { recursive: true });
   const tmp = `${resolvedFile}.tmp${process.pid}`;
-  writeFileSync22(tmp, `${JSON.stringify(raw, null, 2)}
+  writeFileSync23(tmp, `${JSON.stringify(raw, null, 2)}
 `);
   renameSync3(tmp, resolvedFile);
 }
 async function reconcileShipName(i) {
   let local = i.ship.name;
   try {
-    local = shipNameOfYaml(readFileSync27(i.configFile, "utf8")) ?? local;
+    local = shipNameOfYaml(readFileSync28(i.configFile, "utf8")) ?? local;
   } catch {
   }
   const resolvedFile = resolvedPathFor(i.stateDir, i.route);
@@ -16058,8 +16173,8 @@ async function reconcileShipName(i) {
   }
   if (result.status !== "ok") return result;
   if (result.action === "adopt" || result.action === "row-wins") {
-    const text = readFileSync27(i.configFile, "utf8");
-    writeFileSync22(i.configFile, setShipNameInYaml(text, result.name));
+    const text2 = readFileSync28(i.configFile, "utf8");
+    writeFileSync23(i.configFile, setShipNameInYaml(text2, result.name));
     i.ship.name = result.name;
     if (result.action === "row-wins") {
       i.emit?.warn(
@@ -16715,8 +16830,8 @@ function describeCapability(i) {
 }
 
 // src/agents-sync-run.ts
-import { existsSync as existsSync32, mkdirSync as mkdirSync20, readFileSync as readFileSync28, writeFileSync as writeFileSync23 } from "fs";
-import { dirname as dirname17 } from "path";
+import { existsSync as existsSync33, mkdirSync as mkdirSync21, readFileSync as readFileSync29, writeFileSync as writeFileSync24 } from "fs";
+import { dirname as dirname18 } from "path";
 async function runAgentsSync(target, o) {
   const dryRun = o.dryRun ?? false;
   const force = o.force ?? false;
@@ -16749,12 +16864,12 @@ async function runAgentsSync(target, o) {
   for (const s of skillResult?.outcomes ?? []) o.say(describeSkillSyncOutcome(s));
   if (!dryRun) {
     const resolvedPath = resolvedPathFor(o.stateDir, target.route);
-    const raw = existsSync32(resolvedPath) ? JSON.parse(readFileSync28(resolvedPath, "utf8")) : {};
+    const raw = existsSync33(resolvedPath) ? JSON.parse(readFileSync29(resolvedPath, "utf8")) : {};
     raw.agentPersonas = personaResult.agentPersonas;
     if (skillResult) raw.agentSkills = skillResult.agentSkills;
     if (personaResult.releaseAgentId) raw.releaseAgentId = personaResult.releaseAgentId;
-    mkdirSync20(dirname17(resolvedPath), { recursive: true });
-    writeFileSync23(resolvedPath, `${JSON.stringify(raw, null, 2)}
+    mkdirSync21(dirname18(resolvedPath), { recursive: true });
+    writeFileSync24(resolvedPath, `${JSON.stringify(raw, null, 2)}
 `);
     if (target.resolved) {
       target.resolved.agentPersonas = personaResult.agentPersonas;
@@ -16858,7 +16973,7 @@ async function showLogEntry(route2, entryId, opts = {}) {
 
 // src/repos-check.ts
 import { spawnSync as spawnSync7 } from "child_process";
-import { readFileSync as readFileSync29 } from "fs";
+import { readFileSync as readFileSync30 } from "fs";
 import { basename as basename9 } from "path";
 var POSIX_SHELL = /^(?:ba|z|da|k|a|mk)?sh$|^fish$/;
 function checkHookSyntax(script, shell) {
@@ -16899,7 +17014,7 @@ function checkRepoSpec(dir, opts = {}) {
   }
   let parsed;
   try {
-    parsed = parseRepoConfig(readFileSync29(file, "utf8"), file);
+    parsed = parseRepoConfig(readFileSync30(file, "utf8"), file);
   } catch (e) {
     if (!(e instanceof RepoConfigError)) throw e;
     return { ...empty, file, error: e.message, exitCode: 1 };
@@ -16960,11 +17075,11 @@ function packageManager(f) {
   return "npm";
 }
 function fromPackageJson(f) {
-  const text = f.read("package.json");
-  if (text === void 0) return void 0;
+  const text2 = f.read("package.json");
+  if (text2 === void 0) return void 0;
   let pkg;
   try {
-    pkg = JSON.parse(text);
+    pkg = JSON.parse(text2);
   } catch {
     return void 0;
   }
@@ -16987,11 +17102,11 @@ function fromPyproject(f) {
   return f.exists("pyproject.toml") ? { test: "pytest" } : void 0;
 }
 function fromMakefile(f) {
-  const text = f.read("Makefile") ?? f.read("makefile") ?? f.read("GNUmakefile");
-  if (text === void 0) return void 0;
+  const text2 = f.read("Makefile") ?? f.read("makefile") ?? f.read("GNUmakefile");
+  if (text2 === void 0) return void 0;
   const out = {};
   for (const target of ["test", "build"]) {
-    if (new RegExp(`^${target}\\s*:`, "m").test(text)) out[target] = `make ${target}`;
+    if (new RegExp(`^${target}\\s*:`, "m").test(text2)) out[target] = `make ${target}`;
   }
   return out;
 }
@@ -17084,16 +17199,16 @@ function parseHooksArgs(args, routes) {
   if (rest.length !== 1) throw new ReposError("expected: crew repos hooks [route] <name> [--suggest] [--agent] [--write route|repo] [--recipes ID,ID] [--hook KEY=CMD] [--json]");
   return { route: route2, name: rest[0] };
 }
-function repoDirOf(text, base, route2, name) {
-  const repos = configuredRepos(text, route2, base);
+function repoDirOf(text2, base, route2, name) {
+  const repos = configuredRepos(text2, route2, base);
   const hit = repos.find((r) => r.name === name);
   if (!hit) {
     throw new ReposError(`route ${route2} has no repo named "${name}" (have: ${repos.map((r) => r.name).join(", ") || "none"})`);
   }
   return hit.dir;
 }
-function planRouteHooks(text, route2, name, hooks, opts = {}) {
-  const doc = parseDocument6(text);
+function planRouteHooks(text2, route2, name, hooks, opts = {}) {
+  const doc = parseDocument6(text2);
   if (doc.errors.length > 0) throw new ReposError(`config is not valid YAML \u2014 ${doc.errors[0].message}`);
   const m = routeMapOf(doc, route2);
   const repos = m.get("repos", true);
@@ -17129,19 +17244,19 @@ function planRouteHooks(text, route2, name, hooks, opts = {}) {
   }
   return { text: String(doc), written, kept, replaced };
 }
-function clearRouteHooks(text, route2, name) {
-  const doc = parseDocument6(text);
+function clearRouteHooks(text2, route2, name) {
+  const doc = parseDocument6(text2);
   if (doc.errors.length > 0) throw new ReposError(`config is not valid YAML \u2014 ${doc.errors[0].message}`);
   const m = routeMapOf(doc, route2);
   const repos = m.get("repos", true);
   let target = m;
   if (isMap2(repos)) {
     const entry = repos.get(name, true);
-    if (!isMap2(entry)) return { text, removed: [] };
+    if (!isMap2(entry)) return { text: text2, removed: [] };
     target = entry;
   }
   const current = target.get("hooks", true);
-  if (!isMap2(current)) return { text, removed: [] };
+  if (!isMap2(current)) return { text: text2, removed: [] };
   const removed = current.items.map((i) => String(i.key.value ?? i.key));
   target.delete("hooks");
   return { text: String(doc), removed };
@@ -17165,9 +17280,9 @@ function starterRepoConfig(hooks, release) {
     if (release.verifyMatch) lines.push("  verify:", `    match: ${release.verifyMatch}`);
     lines.push("");
   } else lines.push("", "release:", "  # integrate: merging to the base branch is the release; nothing is deployed.", "  mode: integrate", "");
-  const text = lines.join("\n");
-  parseRepoConfig(text, ".crew.yaml");
-  return text;
+  const text2 = lines.join("\n");
+  parseRepoConfig(text2, ".crew.yaml");
+  return text2;
 }
 function existingRepoConfig(f) {
   return REPO_CONFIG_FILENAMES.find((n) => f.exists(n));
@@ -17226,7 +17341,7 @@ function agentInvocation(spec, model) {
   });
 }
 function parseAgentStream(out, dir) {
-  let text = "";
+  let text2 = "";
   let isError = false;
   const files = /* @__PURE__ */ new Set();
   let base = dir;
@@ -17248,19 +17363,19 @@ function parseAgentStream(out, dir) {
         if (typeof p === "string") files.add(isAbsolute2(p) ? relative(base, p) : p);
       }
     } else if (ev?.type === "result") {
-      text = typeof ev.result === "string" ? ev.result : "";
+      text2 = typeof ev.result === "string" ? ev.result : "";
       isError = ev.is_error === true;
     }
   }
-  return { text, isError, filesRead: [...files].sort() };
+  return { text: text2, isError, filesRead: [...files].sort() };
 }
-function parseAgentHooks(text) {
-  const start = text.indexOf("{");
-  const end = text.lastIndexOf("}");
+function parseAgentHooks(text2) {
+  const start = text2.indexOf("{");
+  const end = text2.lastIndexOf("}");
   if (start < 0 || end <= start) throw new AgentSuggestError("bad_output", "the toolchain did not answer with a JSON object");
   let obj;
   try {
-    obj = JSON.parse(text.slice(start, end + 1));
+    obj = JSON.parse(text2.slice(start, end + 1));
   } catch {
     throw new AgentSuggestError("bad_output", "the toolchain's answer was not valid JSON");
   }
@@ -17292,7 +17407,7 @@ async function runAgentSuggest(o) {
   const before = porcelain(o.dir);
   const timeout = AbortSignal.timeout(o.timeoutMs ?? DEFAULT_TIMEOUT_MS);
   const signal = o.signal ? AbortSignal.any([o.signal, timeout]) : timeout;
-  const run2 = await new Promise((resolve6) => {
+  const run2 = await new Promise((resolve7) => {
     let out = "";
     let err3 = "";
     const child = spawn4(bin, args, { cwd: o.dir, env, detached: true, stdio: ["pipe", "pipe", "pipe"] });
@@ -17301,7 +17416,7 @@ async function runAgentSuggest(o) {
       if (settled) return;
       settled = true;
       signal.removeEventListener("abort", onAbort);
-      resolve6(r);
+      resolve7(r);
     };
     const onAbort = () => {
       try {
@@ -17346,7 +17461,7 @@ ${run2.err}` });
 }
 
 // src/sample-ticket.ts
-import { basename as basename10, dirname as dirname18, join as join34 } from "path";
+import { basename as basename10, dirname as dirname19, join as join34 } from "path";
 var SAMPLE_REPO = "crew-sample";
 var SAMPLE_REMOTE = `local/${SAMPLE_REPO}`;
 var SAMPLE_MARKER = "sample: true";
@@ -17369,7 +17484,7 @@ has something safe to work on: its test and build hooks always pass, it has no
 remote, and \`crew sample-ticket --remove\` deletes it.
 `;
 function sampleDir(existing, reposBase, workspace) {
-  if (existing.length > 0) return join34(dirname18(existing[0]), SAMPLE_REPO);
+  if (existing.length > 0) return join34(dirname19(existing[0]), SAMPLE_REPO);
   return join34(reposBase, workspace, SAMPLE_REPO);
 }
 var SAMPLE_TITLE = "Sample: add a documented `greet` function with a test";
@@ -17414,8 +17529,8 @@ function planSampleTicket(i) {
 }
 
 // src/worktree-sweep.ts
-import { existsSync as existsSync33, readFileSync as readFileSync30, readdirSync as readdirSync12 } from "fs";
-import { basename as basename11, dirname as dirname19, join as join35, resolve as resolve4 } from "path";
+import { existsSync as existsSync34, readFileSync as readFileSync31, readdirSync as readdirSync12 } from "fs";
+import { basename as basename11, dirname as dirname20, join as join35, resolve as resolve4 } from "path";
 function planWorktreeSweep(target, tickets, contract) {
   const terminal = new Set(contract.statuses.resolved.filter((s) => s !== contract.statuses.verified));
   const verified = contract.statuses.verified;
@@ -17479,7 +17594,7 @@ function worktreeTicketNumbers(target) {
   return [...nums];
 }
 function siblingWorktreeDirs(target) {
-  const parent = dirname19(target.dir.replace(/[/\\]+$/, ""));
+  const parent = dirname20(target.dir.replace(/[/\\]+$/, ""));
   const stem = `${basename11(target.dir.replace(/[/\\]+$/, ""))}-`;
   const registered = new Set(worktrees(target.dir).map((w) => resolve4(w.path)));
   let names;
@@ -17527,7 +17642,7 @@ async function applyWorktreeSweep(cwd, actions, dryRun, log, remote = "origin",
   let removed = 0;
   let keptBranches = 0;
   for (const a of actions) {
-    if (!dryRun && base && !a.keepBranch && existsSync33(a.path) && isHandBackMerge(a.path, base)) {
+    if (!dryRun && base && !a.keepBranch && existsSync34(a.path) && isHandBackMerge(a.path, base)) {
       if (gitOk(a.path, ["merge", "--abort"]) !== null) {
         log.emit(
           `abandoned the hand-back merge of ${base} in ${a.path}: ${a.ticket.issue_id} deployed without it`,
@@ -17535,7 +17650,7 @@ async function applyWorktreeSweep(cwd, actions, dryRun, log, remote = "origin",
         );
       }
     }
-    if (!dryRun && existsSync33(a.path)) {
+    if (!dryRun && existsSync34(a.path)) {
       let dirty = false;
       try {
         dirty = status(a.path).length > 0;
@@ -17546,7 +17661,7 @@ async function applyWorktreeSweep(cwd, actions, dryRun, log, remote = "origin",
         continue;
       }
     }
-    if (!dryRun && a.requirePushed && a.branch && existsSync33(a.path) && remoteConfigured(cwd, remote) && worktreeHoldsUnpushed(a.path, remote)) {
+    if (!dryRun && a.requirePushed && a.branch && existsSync34(a.path) && remoteConfigured(cwd, remote) && worktreeHoldsUnpushed(a.path, remote)) {
       refuse(a, "unpushed commits", `${a.branch} has commits that are not on ${remote}`);
       continue;
     }
@@ -17595,7 +17710,7 @@ function isHandBackMerge(path, base) {
   if (!msgPath) return false;
   let first;
   try {
-    first = readFileSync30(resolve4(path, msgPath), "utf8").split("\n")[0] ?? "";
+    first = readFileSync31(resolve4(path, msgPath), "utf8").split("\n")[0] ?? "";
   } catch {
     return false;
   }
@@ -17700,12 +17815,12 @@ function applyRemoteBranchCleanup(cwd, remote, branches2, dryRun, log) {
 }
 
 // src/stream-sweep.ts
-import { existsSync as existsSync34, readdirSync as readdirSync13, rmSync as rmSync15, statSync as statSync10 } from "fs";
+import { existsSync as existsSync35, readdirSync as readdirSync13, rmSync as rmSync15, statSync as statSync10 } from "fs";
 import { join as join36 } from "path";
 var DAY_MS2 = 24 * 60 * 60 * 1e3;
 function planStreamSweep(stateDir, retentionDays, now = Date.now()) {
   const dir = join36(stateDir, "streams");
-  if (!existsSync34(dir)) return [];
+  if (!existsSync35(dir)) return [];
   const cutoff = now - retentionDays * DAY_MS2;
   return readdirSync13(dir).map((name) => join36(dir, name)).filter((path) => {
     try {
@@ -17733,7 +17848,7 @@ function applyStreamSweep(paths, dryRun, log) {
   return removed;
 }
 function planEventsSweep(stateDir, retentionDays, now = Date.now()) {
-  if (!existsSync34(stateDir)) return [];
+  if (!existsSync35(stateDir)) return [];
   const cutoff = now - retentionDays * DAY_MS2;
   return readdirSync13(stateDir).filter((name) => ROTATED_EVENTS_RE.test(name)).map((name) => join36(stateDir, name)).filter((path) => {
     try {
@@ -17745,11 +17860,11 @@ function planEventsSweep(stateDir, retentionDays, now = Date.now()) {
 }
 
 // src/cli.ts
-import { realpathSync as realpathSync3, readFileSync as readFileSync36, existsSync as existsSync41, mkdirSync as mkdirSync26, writeFileSync as writeFileSync28, rmSync as rmSync19, unlinkSync as unlinkSync5, copyFileSync as copyFileSync2, renameSync as renameSync4, statSync as statSync14, readdirSync as readdirSync18 } from "fs";
+import { realpathSync as realpathSync3, readFileSync as readFileSync38, existsSync as existsSync43, mkdirSync as mkdirSync28, writeFileSync as writeFileSync30, rmSync as rmSync20, unlinkSync as unlinkSync5, copyFileSync as copyFileSync2, renameSync as renameSync4, statSync as statSync14, readdirSync as readdirSync19 } from "fs";
 import { createInterface } from "readline/promises";
 
 // src/periscope-cmd.ts
-import { existsSync as existsSync35, mkdirSync as mkdirSync21, readFileSync as readFileSync31, rmSync as rmSync16, writeFileSync as writeFileSync24 } from "fs";
+import { existsSync as existsSync36, mkdirSync as mkdirSync22, readFileSync as readFileSync32, rmSync as rmSync16, writeFileSync as writeFileSync25 } from "fs";
 import { join as join37 } from "path";
 var PeriscopeError = class extends Error {
 };
@@ -17767,15 +17882,15 @@ function removePeriscopePrior(stateDir, ticketRecordId) {
 }
 function writePeriscopePrior(stateDir, ticketRecordId, prior) {
   try {
-    mkdirSync21(priorDir(stateDir), { recursive: true });
-    writeFileSync24(priorPath(stateDir, ticketRecordId), JSON.stringify(prior));
+    mkdirSync22(priorDir(stateDir), { recursive: true });
+    writeFileSync25(priorPath(stateDir, ticketRecordId), JSON.stringify(prior));
   } catch {
   }
 }
 function readPeriscopePrior(stateDir, ticketRecordId) {
   try {
     const p = priorPath(stateDir, ticketRecordId);
-    return existsSync35(p) ? JSON.parse(readFileSync31(p, "utf8")) : void 0;
+    return existsSync36(p) ? JSON.parse(readFileSync32(p, "utf8")) : void 0;
   } catch {
     return void 0;
   }
@@ -18270,8 +18385,8 @@ import { dirname as dirOf2, resolve as resolvePath } from "path";
 
 // src/ssh-keys.ts
 import { execFileSync as execFileSync8 } from "child_process";
-import { existsSync as existsSync36, mkdirSync as mkdirSync22, readFileSync as readFileSync32, chmodSync as chmodSync3 } from "fs";
-import { dirname as dirname20, join as join39 } from "path";
+import { existsSync as existsSync37, mkdirSync as mkdirSync23, readFileSync as readFileSync33, chmodSync as chmodSync3 } from "fs";
+import { dirname as dirname21, join as join39 } from "path";
 var SshKeyError = class extends Error {
 };
 function shipSshKeyPathFor(stateDir) {
@@ -18280,8 +18395,8 @@ function shipSshKeyPathFor(stateDir) {
 function ensureShipSshKeypair(stateDir) {
   const privateKeyPath = shipSshKeyPathFor(stateDir);
   const publicKeyPath = `${privateKeyPath}.pub`;
-  if (!existsSync36(privateKeyPath)) {
-    mkdirSync22(dirname20(privateKeyPath), { recursive: true });
+  if (!existsSync37(privateKeyPath)) {
+    mkdirSync23(dirname21(privateKeyPath), { recursive: true });
     try {
       execFileSync8("ssh-keygen", [
         "-t",
@@ -18301,10 +18416,10 @@ function ensureShipSshKeypair(stateDir) {
     }
     chmodSync3(privateKeyPath, 384);
   }
-  if (!existsSync36(publicKeyPath)) {
+  if (!existsSync37(publicKeyPath)) {
     throw new SshKeyError(`${privateKeyPath} exists but ${publicKeyPath} does not \u2014 regenerate or restore it`);
   }
-  const publicKey = readFileSync32(publicKeyPath, "utf8").trim();
+  const publicKey = readFileSync33(publicKeyPath, "utf8").trim();
   return { privateKeyPath, publicKeyPath, publicKey };
 }
 function sshKeygenAvailable() {
@@ -18542,7 +18657,7 @@ function syncAllPassengerCheckouts(cfg) {
 
 // src/tunnel.ts
 import { spawn as spawn5 } from "child_process";
-import { existsSync as existsSync37, mkdirSync as mkdirSync23, readFileSync as readFileSync33, writeFileSync as writeFileSync25, unlinkSync as unlinkSync3, readdirSync as readdirSync14 } from "fs";
+import { existsSync as existsSync38, mkdirSync as mkdirSync24, readFileSync as readFileSync34, writeFileSync as writeFileSync26, unlinkSync as unlinkSync3, readdirSync as readdirSync14 } from "fs";
 import { randomInt } from "crypto";
 import { join as join40 } from "path";
 var DEFAULT_SPAWN_OPTIONS = { stdio: "ignore", detached: true };
@@ -18620,17 +18735,17 @@ function tunnelStatePath(stateDir, workspaceId) {
 }
 function readPersistedTunnel(stateDir, workspaceId) {
   const path = tunnelStatePath(stateDir, workspaceId);
-  if (!existsSync37(path)) return void 0;
+  if (!existsSync38(path)) return void 0;
   try {
-    return JSON.parse(readFileSync33(path, "utf8"));
+    return JSON.parse(readFileSync34(path, "utf8"));
   } catch {
     return void 0;
   }
 }
 function writePersistedTunnel(stateDir, state) {
   const path = tunnelStatePath(stateDir, state.workspaceId);
-  mkdirSync23(join40(stateDir, "passengers"), { recursive: true });
-  writeFileSync25(path, `${JSON.stringify(state, null, 2)}
+  mkdirSync24(join40(stateDir, "passengers"), { recursive: true });
+  writeFileSync26(path, `${JSON.stringify(state, null, 2)}
 `);
 }
 function updatePersistedTunnel(stateDir, workspaceId, patch2) {
@@ -18733,7 +18848,7 @@ function syncPassengerTunnels(plans, relayHost, relayPort, privateKeyPath, state
 }
 function readAllPersistedWorkspaceIds(stateDir) {
   const dir = join40(stateDir, "passengers");
-  if (!existsSync37(dir)) return [];
+  if (!existsSync38(dir)) return [];
   return readdirSync14(dir).filter((f) => f.endsWith(".json") && !f.endsWith("-sync.json")).map((f) => f.slice(0, -".json".length));
 }
 
@@ -18854,7 +18969,7 @@ async function unregisterEndpoint(workspaceId, info, d) {
 import { createServer as createHttpServer } from "http";
 import { spawn as spawn6 } from "child_process";
 import { randomBytes } from "crypto";
-import { existsSync as existsSync38, mkdirSync as mkdirSync24, readFileSync as readFileSync34, writeFileSync as writeFileSync26, unlinkSync as unlinkSync4, readdirSync as readdirSync15 } from "fs";
+import { existsSync as existsSync39, mkdirSync as mkdirSync25, readFileSync as readFileSync35, writeFileSync as writeFileSync27, unlinkSync as unlinkSync4, readdirSync as readdirSync15 } from "fs";
 import { join as join41 } from "path";
 
 // src/secret-compare.ts
@@ -18948,17 +19063,17 @@ function syncDaemonStatePath(stateDir, workspaceId) {
 }
 function readPersistedSyncDaemon(stateDir, workspaceId) {
   const path = syncDaemonStatePath(stateDir, workspaceId);
-  if (!existsSync38(path)) return void 0;
+  if (!existsSync39(path)) return void 0;
   try {
-    return JSON.parse(readFileSync34(path, "utf8"));
+    return JSON.parse(readFileSync35(path, "utf8"));
   } catch {
     return void 0;
   }
 }
 function writePersistedSyncDaemon(stateDir, state) {
   const path = syncDaemonStatePath(stateDir, state.workspaceId);
-  mkdirSync24(join41(stateDir, "passengers"), { recursive: true });
-  writeFileSync26(path, `${JSON.stringify(state, null, 2)}
+  mkdirSync25(join41(stateDir, "passengers"), { recursive: true });
+  writeFileSync27(path, `${JSON.stringify(state, null, 2)}
 `);
 }
 function removePersistedSyncDaemon(stateDir, workspaceId) {
@@ -18979,7 +19094,7 @@ function waitForExit(pid, alive, timeoutMs = 5e3) {
 }
 function readAllPersistedSyncWorkspaceIds(stateDir) {
   const dir = join41(stateDir, "passengers");
-  if (!existsSync38(dir)) return [];
+  if (!existsSync39(dir)) return [];
   const suffix = "-sync.json";
   return readdirSync15(dir).filter((f) => f.endsWith(suffix)).map((f) => f.slice(0, -suffix.length));
 }
@@ -19067,13 +19182,13 @@ function describeCause(err3) {
 }
 
 // src/daemon.ts
-import { existsSync as existsSync39, mkdirSync as mkdirSync25, readFileSync as readFileSync35, readdirSync as readdirSync16, rmSync as rmSync17, statSync as statSync12, writeFileSync as writeFileSync27 } from "fs";
+import { existsSync as existsSync40, mkdirSync as mkdirSync26, readFileSync as readFileSync36, readdirSync as readdirSync16, rmSync as rmSync17, statSync as statSync12, writeFileSync as writeFileSync28 } from "fs";
 import { join as join42 } from "path";
 import { randomBytes as randomBytes2 } from "crypto";
 var DEFAULT_FLOOR_MS = 5e3;
 var DEFAULT_CEILING_MS = INTERVAL_SECONDS * 1e3;
 var ALLOWANCE_PAUSE_MS = 5 * 60 * 1e3;
-var defaultSleep = (ms3) => new Promise((resolve6) => setTimeout(resolve6, ms3));
+var defaultSleep = (ms3) => new Promise((resolve7) => setTimeout(resolve7, ms3));
 async function runDaemonLoop(o) {
   const floor = o.floorMs ?? DEFAULT_FLOOR_MS;
   const ceiling = o.ceilingMs ?? DEFAULT_CEILING_MS;
@@ -19130,15 +19245,15 @@ async function runDaemonLoop(o) {
   }
 }
 function latestMtime(path) {
-  let stat;
+  let stat2;
   try {
-    stat = statSync12(path);
+    stat2 = statSync12(path);
   } catch {
     return 0;
   }
-  if (stat.isFile()) return stat.mtimeMs;
-  if (!stat.isDirectory()) return 0;
-  let latest = stat.mtimeMs;
+  if (stat2.isFile()) return stat2.mtimeMs;
+  if (!stat2.isDirectory()) return 0;
+  let latest = stat2.mtimeMs;
   for (const entry of readdirSync16(path, { withFileTypes: true })) {
     latest = Math.max(latest, latestMtime(join42(path, entry.name)));
   }
@@ -19149,7 +19264,7 @@ function computeTreeSignature(paths) {
 }
 function makeStaleChecker(paths, opts = {}) {
   const initial = computeTreeSignature(paths);
-  return () => computeTreeSignature(paths) !== initial || opts.reloadSentinel !== void 0 && existsSync39(opts.reloadSentinel);
+  return () => computeTreeSignature(paths) !== initial || opts.reloadSentinel !== void 0 && existsSync40(opts.reloadSentinel);
 }
 function reloadSentinelFor(stateDir) {
   return join42(stateDir, "reload-requested");
@@ -19158,14 +19273,14 @@ function daemonStampFor(stateDir) {
   return join42(stateDir, "daemon.started");
 }
 function noteDaemonStarted(stateDir, now = Date.now()) {
-  mkdirSync25(stateDir, { recursive: true });
+  mkdirSync26(stateDir, { recursive: true });
   rmSync17(reloadSentinelFor(stateDir), { force: true });
-  writeFileSync27(daemonStampFor(stateDir), `${JSON.stringify({ pid: process.pid, startedAt: now })}
+  writeFileSync28(daemonStampFor(stateDir), `${JSON.stringify({ pid: process.pid, startedAt: now })}
 `);
 }
 function readDaemonStarted(stateDir) {
   try {
-    const v = JSON.parse(readFileSync35(daemonStampFor(stateDir), "utf8")).startedAt;
+    const v = JSON.parse(readFileSync36(daemonStampFor(stateDir), "utf8")).startedAt;
     return typeof v === "number" ? v : null;
   } catch {
     return null;
@@ -19331,8 +19446,8 @@ async function runOnePassUnguarded(o) {
       started.push(role);
       let ready = () => {
       };
-      const settled = new Promise((resolve6) => {
-        ready = resolve6;
+      const settled = new Promise((resolve7) => {
+        ready = resolve7;
       });
       const run2 = spawn9(role, decision, ctx, { ready }).then(() => {
         breaker.recordSuccess(role);
@@ -19545,6 +19660,7 @@ async function runRoleAgentLocked(role, decision, ctx, hooks, held) {
     if (seat) {
       const candidates2 = rankedCandidates(role, decision.selectionInput);
       const contract = decision.selectionInput.contract ?? DEFAULT_CONTRACT;
+      await refreshUnknownRepos({ route: route2, stateDir: ship.stateDir, fetchRows: () => tracker.repoRowsForMap(), tickets: candidates2 });
       const result = await resolveTopCandidate(
         tracker,
         candidates2,
@@ -19571,6 +19687,11 @@ async function runRoleAgentLocked(role, decision, ctx, hooks, held) {
           role
         });
       }
+      await reportUnservable(
+        { state: ctx.state, emit, route: route2, ship },
+        result.unservable,
+        (id) => repoLabelFor(route2, candidates2.find((c) => c.issue_id === id))
+      );
       if (result.held.length) {
         emit.emit(`skipped ${result.held.join(", ")} \u2014 held by another live ship`, { step: "select", role });
       }
@@ -19714,7 +19835,7 @@ import { createHash as createHash9 } from "crypto";
 import {
   chmodSync as chmodSync4,
   closeSync as closeSync5,
-  existsSync as existsSync40,
+  existsSync as existsSync41,
   fstatSync,
   openSync as openSync5,
   readSync as readSync3,
@@ -19725,7 +19846,7 @@ import {
 } from "fs";
 import { createConnection } from "net";
 import { createServer } from "http";
-import { basename as basename12, dirname as dirname21, join as join43 } from "path";
+import { basename as basename12, dirname as dirname22, join as join43 } from "path";
 import { execFile, spawn as spawn8 } from "child_process";
 
 // src/periscope-control.ts
@@ -19784,14 +19905,18 @@ function parseLine(line) {
     return null;
   }
 }
-async function execute(h, args, streaming) {
-  const finish = (r) => {
+async function execute(h, args, streaming, after) {
+  const finishRaw = (r) => {
     if (r.code !== 0) return { status: failureStatus(r), body: { error: cliMessage(r) } };
     const done = lastJsonLine(r.stdout);
     return done ? { status: 200, body: done } : { status: 502, body: { error: "the command finished without a result" } };
   };
+  const finish = async (r) => {
+    const f = finishRaw(r);
+    return f.status === 200 && after ? { status: 200, body: await after(f.body) } : f;
+  };
   if (!streaming) {
-    const f = finish(await h.run(args, () => {
+    const f = await finish(await h.run(args, () => {
     }));
     return reply(f.status, f.body);
   }
@@ -19803,7 +19928,7 @@ async function execute(h, args, streaming) {
         const ev = parseLine(line);
         if (ev) write(ev);
       });
-      const f = finish(r);
+      const f = await finish(r);
       write(f.status === 200 ? f.body : { event: "error", status: f.status, message: f.body.error });
     }
   };
@@ -19867,7 +19992,10 @@ async function handlePeriscopes(h, q) {
       `--${b.outcome}`,
       ...b.allowEmpty === true ? ["--allow-empty"] : [],
       "--json"
-    ], q.wantsStream);
+    ], q.wantsStream, h.mcp ? async (done) => {
+      await h.mcp.onDown(picked, done);
+      return done;
+    } : void 0);
   }
   const repo = plainText(b.repo, "repo", true);
   const topic = plainText(b.topic, "topic", true);
@@ -19895,12 +20023,13 @@ async function handlePeriscopes(h, q) {
     h.previewHost,
     ...requestedBy ? ["--requested-by", requestedBy] : [],
     ...b.isolate === true ? ["--isolate"] : [],
+    ...h.mcp ? ["--serve-mcp"] : [],
     "--no-open",
     "--json"
-  ], q.wantsStream);
+  ], q.wantsStream, h.mcp ? async (done) => ({ ...done, ...await h.mcp.onUp(picked, done) }) : void 0);
 }
 function runCrew(args, onLine, timeoutMs = 20 * 6e4) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     const child = spawn7(process.execPath, [process.argv[1] ?? "", ...args], { stdio: ["ignore", "pipe", "pipe"] });
     let stdout = "";
     let stderr = "";
@@ -19909,9 +20038,9 @@ function runCrew(args, onLine, timeoutMs = 20 * 6e4) {
       stdout += d.toString("utf8");
     });
     child.stderr.on("data", (d) => {
-      const text = d.toString("utf8");
-      stderr += text;
-      pending += text;
+      const text2 = d.toString("utf8");
+      stderr += text2;
+      pending += text2;
       let i;
       while ((i = pending.indexOf("\n")) >= 0) {
         const line = pending.slice(0, i).trim();
@@ -19922,12 +20051,12 @@ function runCrew(args, onLine, timeoutMs = 20 * 6e4) {
     const t = setTimeout(() => child.kill("SIGTERM"), timeoutMs);
     child.on("error", (e) => {
       clearTimeout(t);
-      resolve6({ code: 127, stdout, stderr: `${stderr}${e.message}
+      resolve7({ code: 127, stdout, stderr: `${stderr}${e.message}
 ` });
     });
     child.on("close", (code) => {
       clearTimeout(t);
-      resolve6({ code: code ?? 1, stdout, stderr });
+      resolve7({ code: code ?? 1, stdout, stderr });
     });
   });
 }
@@ -20021,7 +20150,7 @@ function candidates(live, rotated) {
   const out = [live];
   if (!rotated) return out;
   try {
-    for (const n of readdirSync17(dirname21(live))) if (ROTATED_EVENTS_RE.test(n)) out.push(join43(dirname21(live), n));
+    for (const n of readdirSync17(dirname22(live))) if (ROTATED_EVENTS_RE.test(n)) out.push(join43(dirname22(live), n));
   } catch {
   }
   return out;
@@ -20048,16 +20177,16 @@ function lastLines2(path, n) {
   const cursorAt = (off) => encodeCursor({ dev: st.dev, ino: st.ino, off });
   if (n <= 0 || st.size === 0) return { lines: [], cursor: cursorAt(st.size), reset: false };
   let start = st.size;
-  let text = "";
-  while (start > 0 && text.split("\n").length <= n + 1 && st.size - start < MAX_TAIL_BYTES) {
+  let text2 = "";
+  while (start > 0 && text2.split("\n").length <= n + 1 && st.size - start < MAX_TAIL_BYTES) {
     const step = Math.min(64 * 1024, start);
     start -= step;
-    text = readRange(path, start, step).text + text;
+    text2 = readRange(path, start, step).text + text2;
   }
-  let lines = text.split("\n");
+  let lines = text2.split("\n");
   if (start > 0) lines = lines.slice(1);
   let end = st.size;
-  if (!text.endsWith("\n")) {
+  if (!text2.endsWith("\n")) {
     const frag = lines.pop() ?? "";
     end -= Buffer.byteLength(frag);
   } else lines.pop();
@@ -20065,7 +20194,7 @@ function lastLines2(path, n) {
 }
 function readTail(live, opts) {
   const max = opts.maxBytes ?? MAX_TAIL_BYTES;
-  if (!existsSync40(live)) {
+  if (!existsSync41(live)) {
     return { lines: [], cursor: opts.after ?? encodeCursor({ dev: 0, ino: 0, off: 0 }), reset: false };
   }
   const cur = opts.after ? decodeCursor(opts.after) : null;
@@ -20099,9 +20228,9 @@ function readTail(live, opts) {
     off = 0;
     size = statSync13(path).size;
   }
-  const { text } = readRange(path, off, max);
-  const cut = text.lastIndexOf("\n");
-  const whole = cut < 0 ? "" : text.slice(0, cut + 1);
+  const { text: text2 } = readRange(path, off, max);
+  const cut = text2.lastIndexOf("\n");
+  const whole = cut < 0 ? "" : text2.slice(0, cut + 1);
   const st = statSync13(path);
   return {
     lines: whole.split("\n").filter((l) => l.length),
@@ -20110,7 +20239,7 @@ function readTail(live, opts) {
   };
 }
 function waitForChange(dir, ms3, signal) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     let w;
     const done = () => {
       clearTimeout(t);
@@ -20120,7 +20249,7 @@ function waitForChange(dir, ms3, signal) {
         w?.close();
       } catch {
       }
-      resolve6();
+      resolve7();
     };
     const t = setTimeout(done, ms3);
     const poll = setInterval(done, 500);
@@ -20181,7 +20310,7 @@ async function tailReply(path, q, rotated, abort) {
   const deadline = Date.now() + Math.min(wait, MAX_WAIT_SECONDS) * 1e3;
   let r = readTail(path, { after, tail: tail3, rotated });
   while (after && !r.lines.length && !r.reset && Date.now() < deadline && !abort.aborted) {
-    await waitForChange(dirname21(path), deadline - Date.now(), abort);
+    await waitForChange(dirname22(path), deadline - Date.now(), abort);
     r = readTail(path, { after: r.cursor, rotated });
   }
   return reply2(200, r);
@@ -20222,7 +20351,7 @@ async function route(deps, method, url, req, abort) {
     const run2 = decodeURIComponent(p.slice("/streams/".length));
     if (!RUN_NAME_RE.test(run2) || run2.includes("..") || /\.(pid|meta\.json|events\.jsonl)$/.test(run2)) return err2(400, "not a run name");
     const file = join43(deps.stateDir, "streams", run2.endsWith(".jsonl") ? run2 : `${run2}.jsonl`);
-    if (!existsSync40(file)) return err2(404, "no such run");
+    if (!existsSync41(file)) return err2(404, "no such run");
     return tailReply(file, url.searchParams, false, abort);
   }
   if ((p === "/pause" || p === "/resume") && post3) {
@@ -20266,14 +20395,14 @@ function send(res, r) {
   res.end(body);
 }
 async function socketIsStale(path) {
-  if (!existsSync40(path)) return false;
-  return new Promise((resolve6) => {
+  if (!existsSync41(path)) return false;
+  return new Promise((resolve7) => {
     const c = createConnection(path);
     c.once("connect", () => {
       c.destroy();
-      resolve6(false);
+      resolve7(false);
     });
-    c.once("error", () => resolve6(true));
+    c.once("error", () => resolve7(true));
   });
 }
 async function startControlServer(deps) {
@@ -20285,7 +20414,7 @@ async function startControlServer(deps) {
     return null;
   }
   if (await socketIsStale(path)) rmSync18(path, { force: true });
-  else if (existsSync40(path)) {
+  else if (existsSync41(path)) {
     log(`control API not started: ${path} is in use by another process`);
     return null;
   }
@@ -20294,6 +20423,11 @@ async function startControlServer(deps) {
     res.on("close", () => abort.abort());
     void (async () => {
       try {
+        const mcp = /^\/periscopes\/([^/]+)\/mcp\/?$/.exec(new URL(req.url ?? "/", "http://ship").pathname);
+        if (mcp) {
+          if (!deps.periscopeMcp) return send(res, err2(404, "not found"));
+          return await deps.periscopeMcp(req, res, decodeURIComponent(mcp[1]));
+        }
         const m = /^Bearer (.+)$/.exec(req.headers.authorization ?? "");
         const verdict = await deps.auth.verify(m?.[1]?.trim() ?? "");
         if (verdict === "unauthorized") return send(res, err2(401, "invalid or revoked key"));
@@ -20307,10 +20441,10 @@ async function startControlServer(deps) {
       }
     })();
   });
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     server.once("error", (e) => {
       log(`control API not started: ${e.message}`);
-      resolve6(null);
+      resolve7(null);
     });
     server.listen(path, () => {
       try {
@@ -20318,7 +20452,7 @@ async function startControlServer(deps) {
       } catch {
       }
       server.on("error", (e) => log(`control API error: ${e.message}`));
-      resolve6({
+      resolve7({
         server,
         path,
         close: () => new Promise((done) => {
@@ -20349,20 +20483,434 @@ function schedulerHandler(control, run2 = runDetached) {
   };
 }
 function crewJson(args, timeoutMs = 6e4) {
-  return new Promise((resolve6) => {
+  return new Promise((resolve7) => {
     execFile(process.execPath, [process.argv[1] ?? "", ...args], { timeout: timeoutMs, maxBuffer: 16 * 1024 * 1024 }, (_e, stdout) => {
       try {
         const v = JSON.parse(String(stdout));
-        resolve6(v && typeof v === "object" && !Array.isArray(v) ? v : null);
+        resolve7(v && typeof v === "object" && !Array.isArray(v) ? v : null);
       } catch {
-        resolve6(null);
+        resolve7(null);
       }
     });
   });
 }
 
+// src/periscope-mcp.ts
+import { lstat, mkdir, readdir, readFile, readlink, realpath, rm, stat, writeFile } from "fs/promises";
+import { basename as basename13, dirname as dirname23, isAbsolute as isAbsolute3, join as join45, relative as relative2, resolve as resolve5, sep } from "path";
+import { z } from "zod";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
+
+// src/periscope-endpoints.ts
+import { randomBytes as randomBytes3 } from "crypto";
+import { chmodSync as chmodSync5, existsSync as existsSync42, mkdirSync as mkdirSync27, readdirSync as readdirSync18, readFileSync as readFileSync37, rmSync as rmSync19, writeFileSync as writeFileSync29 } from "fs";
+import { join as join44 } from "path";
+var secretDir = (stateDir) => join44(stateDir, "periscope-mcp");
+var secretFile = (stateDir, id) => join44(secretDir(stateDir), `${id}.json`);
+var endpointDir = (stateDir) => join44(stateDir, "periscope-endpoints");
+var endpointFile = (stateDir, id) => join44(endpointDir(stateDir), `${id}.json`);
+function mintPeriscopeSecret(stateDir, ticketRecordId) {
+  mkdirSync27(secretDir(stateDir), { recursive: true, mode: 448 });
+  const secret = randomBytes3(32).toString("base64url");
+  const file = secretFile(stateDir, ticketRecordId);
+  writeFileSync29(file, `${JSON.stringify({ secret })}
+`, { mode: 384 });
+  chmodSync5(file, 384);
+  return secret;
+}
+function readPeriscopeSecret(stateDir, ticketRecordId) {
+  try {
+    const v = JSON.parse(readFileSync37(secretFile(stateDir, ticketRecordId), "utf8"));
+    return typeof v.secret === "string" && v.secret ? v.secret : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function removePeriscopeSecret(stateDir, ticketRecordId) {
+  rmSync19(secretFile(stateDir, ticketRecordId), { force: true });
+}
+function readPeriscopeEndpoint(stateDir, ticketRecordId) {
+  try {
+    return JSON.parse(readFileSync37(endpointFile(stateDir, ticketRecordId), "utf8"));
+  } catch {
+    return void 0;
+  }
+}
+function writePeriscopeEndpoint(stateDir, rec) {
+  mkdirSync27(endpointDir(stateDir), { recursive: true });
+  writeFileSync29(endpointFile(stateDir, rec.ticketRecordId), `${JSON.stringify(rec, null, 2)}
+`);
+}
+function removePeriscopeEndpointRecord(stateDir, ticketRecordId) {
+  rmSync19(endpointFile(stateDir, ticketRecordId), { force: true });
+}
+function listPeriscopeEndpoints(stateDir) {
+  const dir = endpointDir(stateDir);
+  if (!existsSync42(dir)) return [];
+  const out = [];
+  for (const name of readdirSync18(dir)) {
+    if (!name.endsWith(".json")) continue;
+    const rec = readPeriscopeEndpoint(stateDir, name.slice(0, -".json".length));
+    if (rec && typeof rec.endpointId === "string") out.push(rec);
+  }
+  return out.sort((a, b) => a.registeredAt.localeCompare(b.registeredAt));
+}
+function periscopeEndpointUrl(relayUrl, ticket) {
+  return `${relayUrl.replace(/\/+$/, "")}/control/periscopes/${encodeURIComponent(ticket)}/mcp`;
+}
+async function registerPeriscopeEndpoint(d, p) {
+  const secret = readPeriscopeSecret(d.stateDir, p.ticketRecordId);
+  if (!secret) return { ok: false, message: `${p.ticket} has no MCP secret (it was not opened with --mcp, or has ended)` };
+  const api = d.apiFor(p.workspaceId);
+  if (!api) return { ok: false, message: `no API key known for workspace ${p.workspaceId}` };
+  const url = periscopeEndpointUrl(p.relayUrl, p.ticket);
+  const stored = readPeriscopeEndpoint(d.stateDir, p.ticketRecordId);
+  const out = await registerEndpoint(api, p.workspaceId, stored?.endpointId, {
+    label: `Periscope: ${d.shipName} ${p.ticket}`,
+    url,
+    mcpSecret: secret
+  });
+  if (out.kind !== "ok") {
+    return { ok: false, message: out.kind === "forbidden" ? "registering the endpoint was refused (403): the route key lacks REGISTER_MCP_ENDPOINTS" : out.message };
+  }
+  writePeriscopeEndpoint(d.stateDir, {
+    ticket: p.ticket,
+    ticketRecordId: p.ticketRecordId,
+    route: p.route,
+    workspaceId: p.workspaceId,
+    endpointId: out.endpointId,
+    url,
+    registeredAt: (d.now?.() ?? /* @__PURE__ */ new Date()).toISOString()
+  });
+  return { ok: true, endpointId: out.endpointId, url };
+}
+async function removeEndedPeriscopeEndpoints(d) {
+  let removed = 0;
+  for (const rec of listPeriscopeEndpoints(d.stateDir)) {
+    if (readPeriscopeSecret(d.stateDir, rec.ticketRecordId)) continue;
+    const api = d.apiFor(rec.workspaceId);
+    if (!api) {
+      d.warn(`no API key known for workspace ${rec.workspaceId} \u2014 cannot remove the MCP endpoint of ${rec.ticket}`);
+      continue;
+    }
+    const out = await removeEndpoint(api, rec.workspaceId, rec.endpointId);
+    if (out.kind === "ok") {
+      removePeriscopeEndpointRecord(d.stateDir, rec.ticketRecordId);
+      removed++;
+    } else d.warn(`could not remove the MCP endpoint of ${rec.ticket}: ${out.kind === "forbidden" ? "403" : out.message}`);
+  }
+  return removed;
+}
+
+// src/periscope-mcp.ts
+var PERISCOPE_HOOKS = ["test", "build", "ports", "handoff", "preview", "isolate"];
+var MAX_READ_BYTES = 1024 * 1024;
+var MAX_WRITE_BYTES = 4 * 1024 * 1024;
+var MAX_BODY_BYTES2 = 8 * 1024 * 1024;
+var MAX_HOOK_OUTPUT = 2e4;
+var MAX_DIFF = 2e5;
+var MAX_SEARCH_RESULTS = 500;
+var PathRefusal = class extends Error {
+};
+var isInside = (root, p) => {
+  const rel = relative2(root, p);
+  return rel === "" || !rel.startsWith(`..${sep}`) && rel !== ".." && !isAbsolute3(rel);
+};
+async function realAncestor(p) {
+  let cur = p;
+  const tail3 = [];
+  let hops = 0;
+  for (; ; ) {
+    try {
+      return { real: await realpath(cur), rest: tail3.slice().reverse().join(sep) };
+    } catch (e) {
+      if (e.code !== "ENOENT") throw new PathRefusal(`cannot resolve ${p}`);
+    }
+    let isLink = false;
+    try {
+      isLink = (await lstat(cur)).isSymbolicLink();
+    } catch {
+    }
+    if (isLink) {
+      if (++hops > 40) throw new PathRefusal(`too many symbolic links resolving ${p}`);
+      cur = resolve5(dirname23(cur), await readlink(cur));
+      continue;
+    }
+    const parent = dirname23(cur);
+    if (parent === cur) throw new PathRefusal(`cannot resolve ${p}`);
+    tail3.push(basename13(cur));
+    cur = parent;
+  }
+}
+async function resolveInWorktree(root, requested) {
+  if (!requested || requested.includes("\0")) throw new PathRefusal("path is required");
+  const realRoot = await realpath(root);
+  let abs;
+  if (isAbsolute3(requested)) {
+    abs = resolve5(requested);
+    if (isInside(root, abs)) abs = join45(realRoot, relative2(root, abs));
+  } else {
+    abs = resolve5(realRoot, requested);
+  }
+  if (!isInside(realRoot, abs)) throw new PathRefusal(`${requested} is outside this periscope's worktree`);
+  const { real, rest } = await realAncestor(abs);
+  const final = rest ? join45(real, rest) : real;
+  if (!isInside(realRoot, final)) throw new PathRefusal(`${requested} is outside this periscope's worktree`);
+  if (relative2(realRoot, final).split(sep).includes(".git")) throw new PathRefusal(".git is not reachable from a periscope");
+  return final;
+}
+function globToRegExp(glob) {
+  let re = "";
+  for (let i = 0; i < glob.length; i++) {
+    const c = glob[i];
+    if (c === "*") {
+      if (glob[i + 1] === "*") {
+        i++;
+        if (glob[i + 1] === "/") {
+          i++;
+          re += "(?:.*/)?";
+        } else re += ".*";
+      } else re += "[^/]*";
+    } else if (c === "?") re += "[^/]";
+    else re += c.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+  }
+  return new RegExp(`^${re}$`);
+}
+var tailText = (s, max = MAX_HOOK_OUTPUT) => s.length > max ? `\u2026(${s.length - max} earlier characters omitted)
+${s.slice(-max)}` : s;
+var text = (t, isError = false) => ({ content: [{ type: "text", text: t }], ...isError ? { isError: true } : {} });
+async function hookEnv(d, sc, name) {
+  const env = { CREW_TICKET: sc.ticket, CREW_BRANCH: sc.branch };
+  if (name !== "ports") {
+    const ports = await d.runHook(sc, "ports", env);
+    if (ports) Object.assign(env, parseEnvLines(ports.output));
+    if (sc.isolated && name !== "isolate") {
+      const iso = await d.runHook(sc, "isolate", env);
+      if (iso && iso.code === 0) Object.assign(env, parseEnvLines(iso.output));
+    }
+  }
+  if (name === "preview") env.CREW_PREVIEW_HOST = sc.host || "localhost";
+  return env;
+}
+function createPeriscopeMcpServer(d, sc) {
+  const server = new McpServer({ name: `crew-periscope-${sc.ticket}`, version: "0.1.0" });
+  const root = sc.worktree;
+  const inTree = (p) => resolveInWorktree(root, p);
+  const rel = async (abs) => relative2(await realpath(root), abs) || ".";
+  server.registerTool("read_file", {
+    title: "Read File",
+    description: "Read a text file in this periscope's worktree. `head`/`tail` return only the first/last N lines.",
+    inputSchema: { path: z.string(), head: z.number().int().positive().optional(), tail: z.number().int().positive().optional() },
+    annotations: { readOnlyHint: true, openWorldHint: false }
+  }, async ({ path, head, tail: tail3 }) => {
+    if (head && tail3) return text("Cannot specify both head and tail", true);
+    const abs = await inTree(path);
+    const st = await stat(abs);
+    if (!st.isFile()) return text(`${path} is not a file`, true);
+    if (st.size > MAX_READ_BYTES) return text(`${path} is ${st.size} bytes; read it in parts with head or tail (limit ${MAX_READ_BYTES})`, true);
+    const content = await readFile(abs, "utf8");
+    const lines = content.split("\n");
+    return text(head ? lines.slice(0, head).join("\n") : tail3 ? lines.slice(-tail3).join("\n") : content);
+  });
+  server.registerTool("list_directory", {
+    title: "List Directory",
+    description: 'List the entries directly inside a directory of the worktree ("." is its root), each marked [FILE] or [DIR].',
+    inputSchema: { path: z.string().default(".") },
+    annotations: { readOnlyHint: true, openWorldHint: false }
+  }, async ({ path }) => {
+    const abs = await inTree(path);
+    const entries = (await readdir(abs, { withFileTypes: true })).filter((e) => e.name !== ".git");
+    const lines = await Promise.all(entries.map(async (e) => {
+      if (e.isDirectory()) return `[DIR]  ${e.name}`;
+      const size = (await lstat(join45(abs, e.name))).size;
+      return `[FILE] ${e.name} (${size} bytes)`;
+    }));
+    return text(lines.join("\n") || "(empty)");
+  });
+  server.registerTool("search_files", {
+    title: "Search Files",
+    description: "Find files in the worktree whose path (relative to the worktree) matches the glob `pattern` (`*` stays within a directory, `**` crosses them). Lists files git tracks or would not ignore, so `node_modules` and build output do not appear.",
+    inputSchema: { pattern: z.string() },
+    annotations: { readOnlyHint: true, openWorldHint: false }
+  }, async ({ pattern }) => {
+    const re = globToRegExp(pattern);
+    const listing = git(root, ["ls-files", "-z", "--cached", "--others", "--exclude-standard"]);
+    const hits = listing.split("\0").filter((f) => f && re.test(f)).slice(0, MAX_SEARCH_RESULTS);
+    return text(hits.length ? hits.join("\n") : "No matches found");
+  });
+  server.registerTool("write_file", {
+    title: "Write File",
+    description: "Create a file in the worktree, or replace its whole content. Parent directories are created.",
+    inputSchema: { path: z.string(), content: z.string() },
+    annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: false }
+  }, async ({ path, content }) => {
+    if (Buffer.byteLength(content) > MAX_WRITE_BYTES) return text(`content exceeds ${MAX_WRITE_BYTES} bytes`, true);
+    const abs = await inTree(path);
+    if (abs === await realpath(root)) return text("path must name a file", true);
+    await mkdir(dirname23(abs), { recursive: true });
+    await inTree(path);
+    await writeFile(abs, content);
+    return text(`Wrote ${Buffer.byteLength(content)} bytes to ${await rel(abs)}`);
+  });
+  server.registerTool("edit_file", {
+    title: "Edit File",
+    description: "Replace an exact string in a file. `oldString` must occur exactly once unless `replaceAll` is true; whitespace and line endings must match.",
+    inputSchema: { path: z.string(), oldString: z.string().min(1), newString: z.string(), replaceAll: z.boolean().optional() },
+    annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: false }
+  }, async ({ path, oldString, newString, replaceAll }) => {
+    const abs = await inTree(path);
+    const st = await stat(abs);
+    if (!st.isFile()) return text(`${path} is not a file`, true);
+    if (st.size > MAX_WRITE_BYTES) return text(`${path} is too large to edit`, true);
+    const before = await readFile(abs, "utf8");
+    const count = before.split(oldString).length - 1;
+    if (count === 0) return text(`oldString was not found in ${path}`, true);
+    if (count > 1 && !replaceAll) return text(`oldString occurs ${count} times in ${path}; make it unique or set replaceAll`, true);
+    const after = replaceAll ? before.split(oldString).join(newString) : before.replace(oldString, () => newString);
+    await writeFile(abs, after);
+    return text(`Edited ${await rel(abs)} (${replaceAll ? count : 1} replacement${(replaceAll ? count : 1) === 1 ? "" : "s"})`);
+  });
+  server.registerTool("create_directory", {
+    title: "Create Directory",
+    description: "Create a directory (and any missing parents) in the worktree.",
+    inputSchema: { path: z.string() },
+    annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false }
+  }, async ({ path }) => {
+    const abs = await inTree(path);
+    await mkdir(abs, { recursive: true });
+    await inTree(path);
+    return text(`Created ${await rel(abs)}`);
+  });
+  server.registerTool("delete_file", {
+    title: "Delete File",
+    description: "Delete one file (or symlink) from the worktree. Directories are not deleted.",
+    inputSchema: { path: z.string() },
+    annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: false }
+  }, async ({ path }) => {
+    const parent = await inTree(dirname23(path) === "" ? "." : dirname23(path));
+    const abs = join45(parent, basename13(path));
+    if (basename13(path) === ".git" || abs === parent) return text("path must name a file", true);
+    const st = await lstat(abs).catch(() => void 0);
+    if (!st) return text(`${path} does not exist`, true);
+    if (st.isDirectory()) return text(`${path} is a directory; only files are deleted`, true);
+    await rm(abs, { force: false });
+    return text(`Deleted ${await rel(abs)}`);
+  });
+  server.registerTool("run_hook", {
+    title: "Run Hook",
+    description: `Run one of the repository's declared hooks in this worktree, with this periscope's environment, and return its output. Allowed names: ${PERISCOPE_HOOKS.join(", ")} (\`isolate\` only for a periscope opened isolated). A hook the repository does not declare is refused.`,
+    inputSchema: { name: z.enum(PERISCOPE_HOOKS) },
+    annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false }
+  }, async ({ name }) => {
+    if (name === "isolate" && !sc.isolated) return text("isolate is allowed only for a periscope opened with --isolate", true);
+    const env = await hookEnv(d, sc, name);
+    const res = await d.runHook(sc, name, env);
+    if (!res) return text(`${sc.repo} declares no \`${name}\` hook`, true);
+    return text(`exit ${res.code}
+${tailText(res.output)}`, res.code !== 0);
+  });
+  const branchGuard = () => {
+    const head = git(root, ["rev-parse", "--abbrev-ref", "HEAD"]);
+    return head === sc.branch ? void 0 : `the worktree is on ${head}, not the ticket branch ${sc.branch}`;
+  };
+  server.registerTool("git_status", {
+    title: "Git Status",
+    description: "Branch and changed files (`git status --short --branch`) of this worktree.",
+    inputSchema: {},
+    annotations: { readOnlyHint: true, openWorldHint: false }
+  }, async () => text(git(root, ["status", "--short", "--branch", "--untracked-files=all"])));
+  server.registerTool("git_diff", {
+    title: "Git Diff",
+    description: "The uncommitted changes against HEAD (staged and unstaged), optionally limited to one path. New untracked files appear in git_status, not here.",
+    inputSchema: { path: z.string().optional() },
+    annotations: { readOnlyHint: true, openWorldHint: false }
+  }, async ({ path }) => {
+    const args = ["diff", "HEAD", "--no-ext-diff", "--no-color"];
+    if (path) args.push("--", relative2(await realpath(root), await inTree(path)) || ".");
+    const out = git(root, args);
+    return text(out ? tailText(out, MAX_DIFF) : "(no changes)");
+  });
+  server.registerTool("git_commit", {
+    title: "Git Commit",
+    description: "Stage every change in the worktree and commit it on the ticket branch. It never pushes; ending the periscope with `--keep` does.",
+    inputSchema: { message: z.string().min(1).max(2e3) },
+    annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false }
+  }, async ({ message }) => {
+    const wrong = branchGuard();
+    if (wrong) return text(wrong, true);
+    git(root, ["add", "-A"]);
+    try {
+      git(root, ["commit", "--no-verify", "-m", message]);
+    } catch (e) {
+      if (e instanceof GitError && /nothing to commit|no changes added/.test(e.message)) return text("Nothing to commit", true);
+      throw e;
+    }
+    return text(`Committed ${git(root, ["rev-parse", "--short", "HEAD"])} on ${sc.branch}`);
+  });
+  return server;
+}
+var NOT_FOUND = { error: "not found" };
+var json = (res, status2, body) => {
+  const b = JSON.stringify(body);
+  res.writeHead(status2, { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(b), "Cache-Control": "no-store" });
+  res.end(b);
+};
+async function readBody(req) {
+  const chunks = [];
+  let n = 0;
+  for await (const c of req) {
+    n += c.length;
+    if (n > MAX_BODY_BYTES2) return null;
+    chunks.push(c);
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
+async function handlePeriscopeMcp(d, req, res, segment) {
+  const sc = d.find(segment);
+  const secret = sc ? readPeriscopeSecret(d.stateDir, sc.ticketRecordId) : void 0;
+  const presented = /^Bearer (.+)$/.exec(req.headers.authorization ?? "")?.[1]?.trim() ?? "";
+  if (!sc || !secret || !presented || !secretsMatch(presented, secret)) return json(res, 404, NOT_FOUND);
+  if (req.method !== "POST") {
+    res.setHeader("Allow", "POST");
+    return json(res, 405, { jsonrpc: "2.0", error: { code: -32e3, message: "Method not allowed." }, id: null });
+  }
+  const raw = await readBody(req);
+  if (raw === null) return json(res, 413, { jsonrpc: "2.0", error: { code: -32600, message: "request body too large" }, id: null });
+  let parsed;
+  try {
+    parsed = raw ? JSON.parse(raw) : void 0;
+  } catch {
+    return json(res, 400, { jsonrpc: "2.0", error: { code: -32700, message: "parse error" }, id: null });
+  }
+  const isCall = (m) => !!m && typeof m === "object" && m.method === "tools/call";
+  if (Array.isArray(parsed) ? parsed.some(isCall) : isCall(parsed)) await d.touch(sc).catch((e) => d.log?.(`periscope ${sc.ticket} activity not recorded: ${e.message}`));
+  try {
+    const server = createPeriscopeMcpServer(d, sc);
+    const transport = new StreamableHTTPServerTransport({ sessionIdGenerator: void 0 });
+    await server.connect(transport);
+    res.on("close", () => {
+      void transport.close();
+      void server.close();
+    });
+    await transport.handleRequest(req, res, parsed);
+  } catch (e) {
+    if (!res.headersSent) json(res, 500, { jsonrpc: "2.0", error: { code: -32603, message: e.message || "internal error" }, id: null });
+  }
+}
+function findPeriscope(sidecars, segment) {
+  const m = /^(?:([A-Za-z]+)-)?(\d+)$/.exec(segment);
+  if (!m) return void 0;
+  const num = String(Number(m[2]));
+  return sidecars.find((sc) => {
+    const t = /^(?:([A-Za-z]+)-)?0*(\d+)$/.exec(sc.ticket);
+    if (!t || t[2] !== num) return false;
+    return !m[1] || !t[1] || m[1].toLowerCase() === t[1].toLowerCase();
+  });
+}
+
 // src/cli.ts
-var CREW_HOME = isCompiledBinary(import.meta.url) ? dirname22(process.execPath) : resolve5(dirname22(fileURLToPath(import.meta.url)), "..");
+var CREW_HOME = isCompiledBinary(import.meta.url) ? dirname24(process.execPath) : resolve6(dirname24(fileURLToPath(import.meta.url)), "..");
 var RELEASE_LOCK_TTL_MS = 20 * 60 * 1e3;
 var CYCLE_SECONDS2 = 120;
 var STALE_CYCLES = 3;
@@ -20502,7 +21050,7 @@ No project here has what a route needs. Install the "${template.name}" library t
   return installed.project.slug;
 }
 function usage(problem, requested = false) {
-  const text = `crew \u2014 a standing team of headless agents
+  const text2 = `crew \u2014 a standing team of headless agents
 
   crew poll [route]              decide a cycle and report it; writes nothing
   crew run [route] [--role R]    run the winning role's session
@@ -20528,7 +21076,7 @@ function usage(problem, requested = false) {
   crew reap [route]              kill orphaned servers, drop worktrees for closed tickets
   crew drop [route] NNN          remove a merged ticket's worktree and branch
   crew rotate-passenger-url [route]   force a Host Passengers tunnel to reconnect with a fresh public URL
-  crew periscope up [[route] REPO] [--topic TEXT|--issue NNN] [--isolate] [--host H] [--assignee ID] [--no-open] [--open] [--dry-run] [--json]
+  crew periscope up [[route] REPO] [--topic TEXT|--issue NNN] [--isolate] [--serve-mcp] [--host H] [--assignee ID] [--no-open] [--open] [--dry-run] [--json]
   crew periscope up --resume NNN restart the preview an idle periscope's server was stopped for
                                  file a draft ticket, cut and prepare its worktree, start the repo's preview hook and record a Periscopes row (alias: start)
   crew periscope down [[route] NNN] --keep|--discard [--allow-empty] [--json]
@@ -20581,12 +21129,12 @@ Options:
 In watch: space pauses the stream, q quits.
 `;
   if (requested) {
-    process.stdout.write(text);
+    process.stdout.write(text2);
     process.exit(0);
   }
   process.stderr.write(problem ? `crew: ${problem}
 
-${text}` : text);
+${text2}` : text2);
   process.exit(2);
 }
 var argv = process.argv.slice(2);
@@ -20759,6 +21307,44 @@ if (command === "passenger-sync-daemon") {
         return void 0;
       }
     };
+  }, periscopeEndpointDeps = function() {
+    return {
+      stateDir: cfg.ship.stateDir,
+      shipName: cfg.ship.name,
+      apiFor: endpointApiFor(cfg.routes.filter((r) => r.enabled)),
+      warn: (m) => emit.warn(m, { step: "passengers" })
+    };
+  }, periscopeMcpDeps = function() {
+    const stateDir = cfg.ship.stateDir;
+    return {
+      stateDir,
+      find: (segment) => findPeriscope(readPeriscopeSidecars(stateDir), segment),
+      runHook: async (sc, name, env) => {
+        const rt = cfg.routes.find((r) => r.route === sc.route && r.enabled);
+        const repo = rt && (await resolvedRepos(rt)).find((r) => r.name === sc.repo);
+        const script = repo?.config.hooks[name];
+        if (!repo || !script) return null;
+        return runScript(script, {
+          cwd: sc.worktree,
+          env,
+          shell: resolveShell(repo.config.shell ?? cfg.ship.shell),
+          timeoutMs: name === "preview" ? 18e4 : 15 * 6e4
+        });
+      },
+      touch: async (sc) => {
+        const now = Date.now();
+        if (now - (periscopeTouched.get(sc.ticketRecordId) ?? 0) < PERISCOPE_TOUCH_EVERY_MS) return;
+        periscopeTouched.set(sc.ticketRecordId, now);
+        const rt = cfg.routes.find((r) => r.route === sc.route && r.enabled);
+        if (!rt) return;
+        const { idleMinutes } = periscopeCaps(cfg.ship);
+        const at = new Date(now).toISOString();
+        const expiresAt = new Date(now + idleMinutes * 6e4).toISOString();
+        await new Tracker(rt, cfg.ship).updatePeriscope(sc.periscopeRecordId, { last_activity_at: at, expires_at: expiresAt });
+        writePeriscopeSidecar(stateDir, { ...sc, lastActivityAt: at, expiresAt });
+      },
+      log: (m) => emit.warn(m, { step: "passengers" })
+    };
   }, endpointReconcileDeps = function(routes, relayHost) {
     return {
       stateDir: cfg.ship.stateDir,
@@ -20785,7 +21371,7 @@ if (command === "passenger-sync-daemon") {
     const unsafe = baseBranchUnsafe(out);
     return { action: out.action, unsafe, detail: unsafe ? describeUnsafeBase(out, remote, base) : out.detail };
   };
-  requireArmed2 = requireArmed, parseTicketNumber2 = parseTicketNumber, routeRelayUrl2 = routeRelayUrl, passengerApiKeys2 = passengerApiKeys, endpointApiFor2 = endpointApiFor, endpointReconcileDeps2 = endpointReconcileDeps, releaseRefused2 = releaseRefused, doctorMachineId2 = doctorMachineId, baseHealth2 = baseHealth;
+  requireArmed2 = requireArmed, parseTicketNumber2 = parseTicketNumber, routeRelayUrl2 = routeRelayUrl, passengerApiKeys2 = passengerApiKeys, endpointApiFor2 = endpointApiFor, periscopeEndpointDeps2 = periscopeEndpointDeps, periscopeMcpDeps2 = periscopeMcpDeps, endpointReconcileDeps2 = endpointReconcileDeps, releaseRefused2 = releaseRefused, doctorMachineId2 = doctorMachineId, baseHealth2 = baseHealth;
   let cfg;
   let firstRun;
   let firstRunFromFlags = false;
@@ -20841,7 +21427,7 @@ if (command === "passenger-sync-daemon") {
     } else {
       const toleratesNoRoutes = command === "credential" || command === "forge" || command === "repos" || command === "ship" || command === "disconnect" && flag("reset") || command === "connect" && flag("sign-out");
       const configless = command === "connect" && flag("sign-out") || command === "disconnect" && flag("reset");
-      if (configless && !existsSync41(findConfigFile(CREW_HOME))) {
+      if (configless && !existsSync43(findConfigFile(CREW_HOME))) {
         cfg = loadConfig(CREW_HOME, firstRunConfigPath(), { text: "ship: {}\n", allowNoRoutes: true });
       } else {
         cfg = loadConfig(CREW_HOME, void 0, toleratesNoRoutes ? { allowNoRoutes: true } : {});
@@ -20856,7 +21442,7 @@ if (command === "passenger-sync-daemon") {
     throw e;
   }
   if (command === "credential") {
-    const r = runCredential(positional[1], readFileSync36(0, "utf8"), cfg.ship.forges, cfg.ship.stateDir);
+    const r = runCredential(positional[1], readFileSync38(0, "utf8"), cfg.ship.forges, cfg.ship.stateDir);
     process.stdout.write(r.out);
     process.stderr.write(r.err);
     process.exit(r.code);
@@ -20868,9 +21454,9 @@ if (command === "passenger-sync-daemon") {
         forges: cfg.ship.forges,
         stateDir: cfg.ship.stateDir,
         configFile: cfg.configFile,
-        readFile: (p) => readFileSync36(p, "utf8"),
-        writeFile: (p, t) => writeFileSync28(p, t),
-        stdin: () => readFileSync36(0, "utf8"),
+        readFile: (p) => readFileSync38(p, "utf8"),
+        writeFile: (p, t) => writeFileSync30(p, t),
+        stdin: () => readFileSync38(0, "utf8"),
         env: process.env
       }
     );
@@ -21002,6 +21588,7 @@ if (command === "passenger-sync-daemon") {
       for (const plan of containerPlans) pending.push(reconcileEndpoint(plan.workspaceId, reconcile));
       for (const plan of plans) pending.push(reconcileRelayUrl(plan.workspaceId, apiRoutes));
       await Promise.all(pending);
+      await reconcilePeriscopeEndpoints();
     } catch (e) {
       emit.warn(`ship tunnel sync failed: ${e.message}`, { step: "passengers" });
     }
@@ -21021,6 +21608,22 @@ if (command === "passenger-sync-daemon") {
       emit.warn(`could not write relay_url: ${e.message}`, { step: "passengers" });
     }
   }
+  const periscopeTouched = /* @__PURE__ */ new Map();
+  const PERISCOPE_TOUCH_EVERY_MS = 3e4;
+  async function reconcilePeriscopeEndpoints() {
+    const d = periscopeEndpointDeps();
+    await removeEndedPeriscopeEndpoints(d);
+    const have = new Set(listPeriscopeEndpoints(cfg.ship.stateDir).map((e) => e.ticketRecordId));
+    for (const sc of readPeriscopeSidecars(cfg.ship.stateDir)) {
+      if (have.has(sc.ticketRecordId) || !sc.route || !readPeriscopeSecret(cfg.ship.stateDir, sc.ticketRecordId)) continue;
+      const rt = cfg.routes.find((r) => r.route === sc.route && r.enabled);
+      const ws = rt?.resolved?.workspaceId;
+      const relayUrl = rt && routeRelayUrl(rt);
+      if (!rt || !ws || !relayUrl) continue;
+      const out = await registerPeriscopeEndpoint(d, { ticket: sc.ticket, ticketRecordId: sc.ticketRecordId, route: sc.route, workspaceId: ws, relayUrl });
+      if (!out.ok) d.warn(`could not register the MCP endpoint of ${sc.ticket}: ${out.message}`);
+    }
+  }
   async function releaseFleet(opts = {}) {
     if (releaseRefused()) return;
     precheckTickets.clear();
@@ -21136,8 +21739,8 @@ if (command === "passenger-sync-daemon") {
     }
     if (host === "linux" && hasSystemd) {
       const label = labelFor(CREW_HOME, "run");
-      const staleTimer = join44(homedir10(), ".config", "systemd", "user", `${label}.timer`);
-      if (existsSync41(staleTimer)) {
+      const staleTimer = join46(homedir10(), ".config", "systemd", "user", `${label}.timer`);
+      if (existsSync43(staleTimer)) {
         process.stdout.write(
           `removing stale run timer from before the persistent-service cutover: ${staleTimer}${dryRun ? " (dry run)" : ""}
 `
@@ -21164,7 +21767,7 @@ if (command === "passenger-sync-daemon") {
     const tracker = new Tracker(c, cfg.ship);
     problems.push(...validateContract(tracker.contract).map((p) => `contract: ${p}`));
     for (const r of await resolvedRepos(c)) {
-      if (!existsSync41(r.dir)) problems.push(`repo ${r.name}: ${r.dir} is missing on disk`);
+      if (!existsSync43(r.dir)) problems.push(`repo ${r.name}: ${r.dir} is missing on disk`);
       if (!satisfies(host, r.config.platform)) problems.push(`repo ${r.name}: requires ${r.config.platform}, this host is ${host}`);
       readiness.push(...validateEffective(r.config).map((p) => `repo ${r.name}: ${p}`));
     }
@@ -21182,7 +21785,7 @@ if (command === "passenger-sync-daemon") {
   }
   async function doctorFix(o) {
     const routes = await Promise.all(routesInScope(cfg.routes, named).map((c) => gatherHealth({ route: c.route, enabled: c.enabled, hasRepos: reposOf(c).length > 0 }, () => routeProblems(c))));
-    const unitExists = (p) => existsSync41(p);
+    const unitExists = (p) => existsSync43(p);
     const crontab = o.host === "linux" ? spawnSync8("crontab", ["-l"], { encoding: "utf8" }).stdout ?? "" : "";
     const schedulerAbsent = o.host !== "windows" ? !schedulerInstalled(planInstall(cfg.ship, CREW_HOME, o.host, detectSystemd(), "run", installContext()), unitExists, crontab) : true;
     const plan = planFix({ routes, schedulerAbsent, host: o.host });
@@ -21199,7 +21802,7 @@ if (command === "passenger-sync-daemon") {
       for (const a of plan.actions) {
         if (a.kind === "enable") {
           if (prompter && !await prompter.confirm(`Route ${a.route} passes every check \u2014 set enabled: true in ${cfg.configFile}?`, false)) continue;
-          writeFileSync28(cfg.configFile, planEnable(readFileSync36(cfg.configFile, "utf8"), a.route));
+          writeFileSync30(cfg.configFile, planEnable(readFileSync38(cfg.configFile, "utf8"), a.route));
           enabledSound.add(a.route);
           changed2.push(`enabled route ${a.route} in ${cfg.configFile}`);
         } else {
@@ -21878,6 +22481,7 @@ ${cu.tail.trimEnd()}
           if (seat) {
             const candidates2 = rankedCandidates(w.role, w.decision.selectionInput);
             const contract = w.decision.selectionInput.contract ?? DEFAULT_CONTRACT;
+            await refreshUnknownRepos({ route: w.route, stateDir: cfg.ship.stateDir, fetchRows: () => fleetTracker.repoRowsForMap(), tickets: candidates2 });
             const result = await resolveTopCandidate(
               fleetTracker,
               candidates2,
@@ -22089,6 +22693,7 @@ ${cu.tail.trimEnd()}
           if (seat) {
             const candidates2 = rankedCandidates(current, decision.selectionInput);
             const contract = decision.selectionInput.contract ?? DEFAULT_CONTRACT;
+            await refreshUnknownRepos({ route: route2, stateDir: cfg.ship.stateDir, fetchRows: () => tracker2.repoRowsForMap(), tickets: candidates2 });
             const result = await resolveTopCandidate(
               tracker2,
               candidates2,
@@ -22320,7 +22925,7 @@ ${cu.tail.trimEnd()}
         process.exit(1);
       }
       requireArmed("run the daemon loop");
-      const watchPaths = isCompiledBinary(import.meta.url) ? [process.execPath] : [join44(CREW_HOME, "src"), join44(CREW_HOME, "dist"), join44(CREW_HOME, "bin")];
+      const watchPaths = isCompiledBinary(import.meta.url) ? [process.execPath] : [join46(CREW_HOME, "src"), join46(CREW_HOME, "dist"), join46(CREW_HOME, "bin")];
       const configPaths = daemonConfigPaths(cfg);
       watchPaths.push(...configPaths);
       noteDaemonStarted(cfg.ship.stateDir);
@@ -22348,8 +22953,22 @@ ${cu.tail.trimEnd()}
           previewHost: cfg.ship.previewHost,
           maxPeriscopes: cfg.ship.maxPeriscopes,
           run: runCrew,
-          verifyIn: (token, ws) => controlAuth.verifyIn(token, ws)
+          verifyIn: (token, ws) => controlAuth.verifyIn(token, ws),
+          mcp: {
+            onUp: async (r, done) => {
+              const id = typeof done.ticketRecordId === "string" ? done.ticketRecordId : "";
+              const ticket = typeof done.ticket === "string" ? done.ticket : "";
+              const relayUrl = routeRelayUrl(cfg.routes.find((x) => x.route === r.route));
+              if (!relayUrl) return { mcpEndpointId: null, mcpWarning: "this ship has no relay URL yet, so the periscope's MCP endpoint is not registered; it is retried each cycle" };
+              const out = await registerPeriscopeEndpoint(periscopeEndpointDeps(), { ticket, ticketRecordId: id, route: r.route, workspaceId: r.workspaceId, relayUrl });
+              return out.ok ? { mcpEndpointId: out.endpointId, mcpUrl: out.url } : { mcpEndpointId: null, mcpWarning: out.message };
+            },
+            onDown: async () => {
+              await removeEndedPeriscopeEndpoints(periscopeEndpointDeps());
+            }
+          }
         },
+        periscopeMcp: controlRoutes.some((r) => r.enabled && r.hostPeriscopes) ? (req, res, ticket) => handlePeriscopeMcp(periscopeMcpDeps(), req, res, ticket) : void 0,
         status: () => crewJson(["status", route2.route, "--json"]),
         doctor: () => crewJson(["doctor", route2.route, "--json", "--offline"]),
         scheduler: schedulerHandler(planDaemonControl(CREW_HOME, hostPlatform(), detectSystemd())),
@@ -22581,10 +23200,10 @@ ${cu.tail.trimEnd()}
 `);
       if (!dryRun) {
         const resolvedPath = resolvedPathFor(cfg.ship.stateDir, target.route);
-        const raw = existsSync41(resolvedPath) ? JSON.parse(readFileSync36(resolvedPath, "utf8")) : {};
+        const raw = existsSync43(resolvedPath) ? JSON.parse(readFileSync38(resolvedPath, "utf8")) : {};
         raw.agentSkills = result.agentSkills;
-        mkdirSync26(dirOf2(resolvedPath), { recursive: true });
-        writeFileSync28(resolvedPath, `${JSON.stringify(raw, null, 2)}
+        mkdirSync28(dirOf2(resolvedPath), { recursive: true });
+        writeFileSync30(resolvedPath, `${JSON.stringify(raw, null, 2)}
 `);
       }
       if (result.outcomes.some((o) => o.action === "diverged")) process.exitCode = 1;
@@ -22607,7 +23226,7 @@ ${cu.tail.trimEnd()}
         throw e;
       }
       const oldName = cfg.ship.name;
-      writeFileSync28(cfg.configFile, setShipNameInYaml(readFileSync36(cfg.configFile, "utf8"), newName));
+      writeFileSync30(cfg.configFile, setShipNameInYaml(readFileSync38(cfg.configFile, "utf8"), newName));
       cfg.ship.name = newName;
       let renameMachineId;
       try {
@@ -22654,14 +23273,14 @@ ${cu.tail.trimEnd()}
         process.exit(2);
       };
       if (sub !== "add" && sub !== "list" && sub !== "clone" && sub !== "hooks" && sub !== "check") usage2();
-      const configText = readFileSync36(cfg.configFile, "utf8");
+      const configText = readFileSync38(cfg.configFile, "utf8");
       if (sub === "check") {
         try {
           const routeArg = value("route") ?? positional[2];
           const found = cfg.routes.find((r) => r.route === routeArg);
           if (!found) throw new ReposError(`no route "${routeArg}" in the config (have: ${cfg.routes.map((r) => r.route).join(", ") || "none"})`);
           const named2 = value("route") ? void 0 : positional[3];
-          const dir = named2 ? repoDirOf(configText, dirname22(cfg.configFile), found.route, named2) : resolvePath(positional[value("route") ? 2 : 3] ?? ".");
+          const dir = named2 ? repoDirOf(configText, dirname24(cfg.configFile), found.route, named2) : resolvePath(positional[value("route") ? 2 : 3] ?? ".");
           const target = reposOf(found).find((t) => resolvePath(t.dir) === dir || t.name === named2);
           const o = target ? found.repoOverrides[target.name] : void 0;
           runReposCheck(dir, {
@@ -22684,17 +23303,17 @@ ${cu.tail.trimEnd()}
       if (sub === "hooks") {
         try {
           const a = parseHooksArgs(positional.slice(2), routeNamesOf(configText));
-          const dir = repoDirOf(configText, dirname22(cfg.configFile), a.route, a.name);
-          if (!existsSync41(dir)) throw new ReposError(`${dir} does not exist on disk`);
-          const files = { exists: (r) => existsSync41(resolvePath(dir, r)), list: (r) => {
+          const dir = repoDirOf(configText, dirname24(cfg.configFile), a.route, a.name);
+          if (!existsSync43(dir)) throw new ReposError(`${dir} does not exist on disk`);
+          const files = { exists: (r) => existsSync43(resolvePath(dir, r)), list: (r) => {
             try {
-              return readdirSync18(resolvePath(dir, r));
+              return readdirSync19(resolvePath(dir, r));
             } catch {
               return [];
             }
           }, read: (r) => {
             try {
-              return readFileSync36(resolvePath(dir, r), "utf8");
+              return readFileSync38(resolvePath(dir, r), "utf8");
             } catch {
               return void 0;
             }
@@ -22736,19 +23355,19 @@ ${cu.tail.trimEnd()}
           let cleared;
           if (clear2) {
             const plan = clearRouteHooks(configText, a.route, a.name);
-            if (plan.removed.length > 0) writeFileSync28(cfg.configFile, plan.text);
+            if (plan.removed.length > 0) writeFileSync30(cfg.configFile, plan.text);
             cleared = { file: cfg.configFile, removed: plan.removed };
           }
           if (write && suggestion.source === null && recipeIds.length === 0 && hookSpecs.length === 0) throw new ReposError(`nothing to write: ${suggestion.notes[0]}`);
           if (write === "route") {
             const plan = planRouteHooks(configText, a.route, a.name, picked.hooks, { replace: flag("replace") });
-            writeFileSync28(cfg.configFile, plan.text);
+            writeFileSync30(cfg.configFile, plan.text);
             written = { target: "route", file: cfg.configFile, hooks: plan.written, kept: plan.kept, replaced: plan.replaced };
           } else if (write === "repo") {
             const have = existingRepoConfig(files);
             if (have) throw new ReposError(`${resolvePath(dir, have)} already exists; not overwriting it`);
             const file = resolvePath(dir, ".crew.yaml");
-            writeFileSync28(file, starterRepoConfig(picked.hooks, picked.release), { flag: "wx" });
+            writeFileSync30(file, starterRepoConfig(picked.hooks, picked.release), { flag: "wx" });
             written = { target: "repo", file, hooks: Object.keys(picked.hooks), kept: [], replaced: [] };
           }
           if (flag("json")) {
@@ -22804,7 +23423,7 @@ ${cu.tail.trimEnd()}
       if (sub === "list" && !routeName) usage2();
       if (sub === "add") {
         try {
-          const a = parseAddArgs(positional.slice(2), routeNamesOf(configText), (p) => existsSync41(resolvePath(p.replace(/^~(?=\/|$)/, homedir10()))));
+          const a = parseAddArgs(positional.slice(2), routeNamesOf(configText), (p) => existsSync43(resolvePath(p.replace(/^~(?=\/|$)/, homedir10()))));
           routeName = a.route;
           addPath = a.path;
           addName = a.name;
@@ -22832,67 +23451,77 @@ ${cu.tail.trimEnd()}
         }
       }
       const resolvedFile = resolvedPathFor(cfg.ship.stateDir, routeName);
+      if (sub === "list" || sub === "add") {
+        const liveRoute = cfg.routes.find((r) => r.route === routeName);
+        if (liveRoute?.resolved?.reposModelId && existsSync43(resolvedFile) && !dryRun) {
+          try {
+            await hydrateApiKeys([liveRoute]);
+            persistRepoRows(cfg.ship.stateDir, liveRoute.route, await new Tracker(liveRoute, cfg.ship).repoRowsForMap());
+          } catch {
+          }
+        }
+      }
       let resolvedRemotes;
-      if (existsSync41(resolvedFile)) {
+      if (existsSync43(resolvedFile)) {
         try {
-          resolvedRemotes = JSON.parse(readFileSync36(resolvedFile, "utf8"));
+          resolvedRemotes = JSON.parse(readFileSync38(resolvedFile, "utf8"));
         } catch {
         }
       }
       const originOf = (dir) => gitOk(dir, ["remote", "get-url", "origin"]) ?? void 0;
-      const text = configText;
-      const base = dirname22(cfg.configFile);
-      const isCheckout = (d) => existsSync41(`${d}/.git`);
+      const text2 = configText;
+      const base = dirname24(cfg.configFile);
+      const isCheckout = (d) => existsSync43(`${d}/.git`);
       try {
         if (sub === "list") {
           if (flag("json")) {
             const rows = listRepoRows({
-              text,
+              text: text2,
               route: routeName,
               base,
               resolved: resolvedRemotes,
               originOf,
-              exists: (d) => existsSync41(d),
+              exists: (d) => existsSync43(d),
               isCheckout,
               repoHasHooks: (d) => REPO_CONFIG_FILENAMES.some((f) => {
                 try {
-                  return Object.keys(parseRepoConfig(readFileSync36(resolvePath(d, f), "utf8"), f).hooks).length > 0;
+                  return Object.keys(parseRepoConfig(readFileSync38(resolvePath(d, f), "utf8"), f).hooks).length > 0;
                 } catch {
                   return false;
                 }
               })
             });
-            process.stdout.write(`${JSON.stringify({ route: routeName, repos: rows, cloneBase: cloneBaseOf(text, routeName, base, isCheckout) })}
+            process.stdout.write(`${JSON.stringify({ route: routeName, repos: rows, cloneBase: cloneBaseOf(text2, routeName, base, isCheckout) })}
 `);
             break;
           }
-          const cloneBase = cloneBaseOf(text, routeName, base, isCheckout);
-          const repos = configuredRepos(text, routeName, base).filter((r) => r.dir !== cloneBase);
+          const cloneBase = cloneBaseOf(text2, routeName, base, isCheckout);
+          const repos = configuredRepos(text2, routeName, base).filter((r) => r.dir !== cloneBase);
           if (repos.length === 0) process.stdout.write(`route ${routeName} has no checkout configured \u2014 \`crew repos add ${routeName} <path>\`
 `);
           for (const r of repos) {
             const origin2 = originOf(r.dir);
             const row = matchRepoName(origin2, resolvedRemotes);
-            const note = !existsSync41(r.dir) ? "missing on disk" : row ? `Repos row: ${row}` : `no Repos row matches ${normalizeRemote(origin2) ?? "this checkout (no origin remote)"}`;
+            const note = !existsSync43(r.dir) ? "missing on disk" : row ? `Repos row: ${row}` : `no Repos row matches ${normalizeRemote(origin2) ?? "this checkout (no origin remote)"}`;
             process.stdout.write(`${r.name}	${r.dir}	${note}
 `);
           }
           break;
         }
         if (sub === "clone") {
-          const json = flag("json");
-          const say = (event, extra, human) => process.stdout.write(json ? `${JSON.stringify({ event, ...extra })}
+          const json2 = flag("json");
+          const say = (event, extra, human) => process.stdout.write(json2 ? `${JSON.stringify({ event, ...extra })}
 ` : `${human}
 `);
-          const plan2 = planRepoClone({ text, base, route: routeName, name: addName, resolved: resolvedRemotes, dir: value("dir"), isCheckout });
-          if (existsSync41(plan2.target) && (existsSync41(`${plan2.target}/.git`) || readdirSync18(plan2.target).length > 0)) {
+          const plan2 = planRepoClone({ text: text2, base, route: routeName, name: addName, resolved: resolvedRemotes, dir: value("dir"), isCheckout });
+          if (existsSync43(plan2.target) && (existsSync43(`${plan2.target}/.git`) || readdirSync19(plan2.target).length > 0)) {
             throw new ReposError(
-              existsSync41(`${plan2.target}/.git`) ? `${plan2.target} is already a checkout \u2014 attach it with \`crew repos add ${routeName} ${plan2.name} ${plan2.target}\`` : `${plan2.target} exists and is not empty \u2014 pass --dir to clone somewhere else`
+              existsSync43(`${plan2.target}/.git`) ? `${plan2.target} is already a checkout \u2014 attach it with \`crew repos add ${routeName} ${plan2.name} ${plan2.target}\`` : `${plan2.target} exists and is not empty \u2014 pass --dir to clone somewhere else`
             );
           }
           if (dryRun) {
             say("dry-run", { remote: plan2.remote, target: plan2.target }, `would clone ${plan2.remote} into ${plan2.target}`);
-            if (!json) process.stdout.write(`${plan2.block}
+            if (!json2) process.stdout.write(`${plan2.block}
 `);
             break;
           }
@@ -22905,18 +23534,18 @@ ${cu.tail.trimEnd()}
             throw new ReposError(`${e.message}${authHint}
   crew.yaml was not changed`);
           }
-          writeFileSync28(cfg.configFile, plan2.text);
+          writeFileSync30(cfg.configFile, plan2.text);
           if (plan2.droppedDir) process.stderr.write(`crew repos: dropped dir: ${plan2.droppedDir} from route ${routeName} \u2014 it is not a checkout (the clone base); checkouts now live under repos:
 `);
           say("attached", { route: routeName, name: plan2.name, dir: plan2.target, mode: plan2.mode }, `cloned and attached ${plan2.target} to ${routeName} as ${plan2.mode === "dir" ? "dir" : `repos.${plan2.name}`} in ${cfg.configFile}`);
           break;
         }
         const target = resolvePath(addPath.replace(/^~(?=\/|$)/, homedir10()));
-        const top = existsSync41(target) ? gitOk(target, ["rev-parse", "--show-toplevel"]) : null;
+        const top = existsSync43(target) ? gitOk(target, ["rev-parse", "--show-toplevel"]) : null;
         if (!top) throw new ReposError(`${target} is not a git checkout`);
         const origin = originOf(top);
         const plan = planRepoAdd({
-          text,
+          text: text2,
           base,
           route: routeName,
           path: top,
@@ -22964,15 +23593,15 @@ ${cu.tail.trimEnd()}
           const created = await rowTracker.createRepoRow(rowPayload);
           process.stdout.write(`created Repos row ${String(rowPayload.name)} (${String(rowPayload.remote)}) ${created.id}
 `);
-          if (existsSync41(resolvedFile)) {
-            const raw = JSON.parse(readFileSync36(resolvedFile, "utf8"));
+          if (existsSync43(resolvedFile)) {
+            const raw = JSON.parse(readFileSync38(resolvedFile, "utf8"));
             raw.repoNames = { ...raw.repoNames, [created.id]: String(rowPayload.name) };
             raw.repoRemotes = { ...raw.repoRemotes, [created.id]: String(rowPayload.remote) };
-            writeFileSync28(resolvedFile, `${JSON.stringify(raw, null, 2)}
+            writeFileSync30(resolvedFile, `${JSON.stringify(raw, null, 2)}
 `);
           }
         }
-        writeFileSync28(cfg.configFile, plan.text);
+        writeFileSync30(cfg.configFile, plan.text);
         process.stdout.write(`added ${top} to ${routeName} as ${plan.mode === "dir" ? "dir" : `repos.${plan.name}`} in ${cfg.configFile}
 `);
       } catch (e) {
@@ -23339,7 +23968,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           process.exit(2);
         }
         if (found.shipNameAdopted && !dryRun) {
-          writeFileSync28(cfg.configFile, setShipNameInYaml(readFileSync36(cfg.configFile, "utf8"), found.shipNameAdopted));
+          writeFileSync30(cfg.configFile, setShipNameInYaml(readFileSync38(cfg.configFile, "utf8"), found.shipNameAdopted));
           cfg.ship.name = found.shipNameAdopted;
         }
         if (found.shipRow) {
@@ -23382,10 +24011,10 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           }
         }
         let previous;
-        const hadPreviousFile = existsSync41(resolvedPath);
+        const hadPreviousFile = existsSync43(resolvedPath);
         if (hadPreviousFile) {
           try {
-            previous = JSON.parse(readFileSync36(resolvedPath, "utf8"));
+            previous = JSON.parse(readFileSync38(resolvedPath, "utf8"));
           } catch {
           }
         }
@@ -23515,10 +24144,10 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           process.stderr.write(`(dry run) would write resolved ids to ${resolvedPath}
 `);
         } else {
-          mkdirSync26(dirname22(resolvedPath), { recursive: true });
+          mkdirSync28(dirname24(resolvedPath), { recursive: true });
           if (hadPreviousFile) copyFileSync2(resolvedPath, `${resolvedPath}.bak`);
           const tmpPath = `${resolvedPath}.tmp${process.pid}`;
-          writeFileSync28(tmpPath, `${JSON.stringify(resolved, null, 2)}
+          writeFileSync30(tmpPath, `${JSON.stringify(resolved, null, 2)}
 `);
           renameSync4(tmpPath, resolvedPath);
           process.stderr.write(`Resolved ids written to ${resolvedPath}
@@ -23564,8 +24193,8 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
             process.stderr.write(`(dry run) would write the minted API key to ${apiKeyFile}
 `);
           } else {
-            mkdirSync26(dirname22(apiKeyFile), { recursive: true });
-            writeFileSync28(apiKeyFile, `${apiKeyVar}=${apiKey}
+            mkdirSync28(dirname24(apiKeyFile), { recursive: true });
+            writeFileSync30(apiKeyFile, `${apiKeyVar}=${apiKey}
 `, { mode: 384 });
             process.stderr.write(`API key written to ${apiKeyFile}
 `);
@@ -24252,6 +24881,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
             },
             setRowState: (id, state2) => trD.updatePeriscope(id, { state: state2 }),
             forgetLocal: (id) => {
+              removePeriscopeSecret(cfg.ship.stateDir, id);
               removePeriscopeSidecar(cfg.ship.stateDir, id);
               removePeriscopePrior(cfg.ship.stateDir, id);
             },
@@ -24300,7 +24930,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           const shellR = hit && resolveShell(hit.repo.config.shell ?? cfg.ship.shell);
           const resumed = await runPeriscopeResume({
             find: async () => hit && { row: hit.row, tag: hit.tag },
-            worktreeExists: (p) => existsSync41(p),
+            worktreeExists: (p) => existsSync43(p),
             caps: periscopeCaps(cfg.ship),
             runHook: async (name, cwd, env) => {
               const script = hit?.repo.config.hooks[name];
@@ -24394,10 +25024,10 @@ ${where.join("\n")}`);
           },
           prepare: async (path) => {
             for (const f of repoP.config.worktrees.copy) {
-              const src = join44(repoP.dir, f);
-              if (!existsSync41(src)) continue;
-              mkdirSync26(dirOf2(join44(path, f)), { recursive: true });
-              copyFileSync2(src, join44(path, f));
+              const src = join46(repoP.dir, f);
+              if (!existsSync43(src)) continue;
+              mkdirSync28(dirOf2(join46(path, f)), { recursive: true });
+              copyFileSync2(src, join46(path, f));
             }
             const setup = repoP.config.hooks.setup;
             return setup ? runScript(setup, { cwd: path, shell: shellP, onLine: (l) => {
@@ -24409,7 +25039,10 @@ ${where.join("\n")}`);
             return script ? runScript(script, { cwd, env, shell: shellP, timeoutMs: name === "preview" ? 18e4 : void 0 }) : null;
           },
           createRow: (fields) => trackerP.createPeriscope(fields),
-          recordLocal: (sc) => writePeriscopeSidecar(cfg.ship.stateDir, sc),
+          recordLocal: (sc) => {
+            writePeriscopeSidecar(cfg.ship.stateDir, { ...sc, route: routeP.route });
+            if (flag("serve-mcp")) mintPeriscopeSecret(cfg.ship.stateDir, sc.ticketRecordId);
+          },
           comment: (ticketId, body) => trackerP.postComment(ticketId, body, memberId),
           teardown: async (path, branch) => {
             const n = Number(path.match(/(\d+)\/?$/)?.[1]);
@@ -24687,7 +25320,7 @@ ${where.join("\n")}`);
       };
       const droppedRoutes = [];
       try {
-        const rawCfg = parseYaml2(readFileSync36(cfg.configFile, "utf8"));
+        const rawCfg = parseYaml2(readFileSync38(cfg.configFile, "utf8"));
         for (const r of rawCfg?.routes ?? []) {
           if (typeof r?.route !== "string" || cfg.routes.some((x) => x.route === r.route)) continue;
           try {
@@ -24729,8 +25362,8 @@ ${where.join("\n")}`);
         process.stdout.write("crew reload: no daemon unit is running \u2014 nothing to reload (the next run reads crew.yaml fresh)\n");
         break;
       }
-      mkdirSync26(cfg.ship.stateDir, { recursive: true });
-      writeFileSync28(sentinel, `${(/* @__PURE__ */ new Date()).toISOString()}
+      mkdirSync28(cfg.ship.stateDir, { recursive: true });
+      writeFileSync30(sentinel, `${(/* @__PURE__ */ new Date()).toISOString()}
 `);
       process.stdout.write("crew reload: requested \u2014 the daemon finishes its in-flight pass, then relaunches with the new config\n");
       if (flag("now") && control?.stopCommand && control.startCommand) {
@@ -24781,8 +25414,8 @@ ${where.join("\n")}`);
     }
     case "log": {
       try {
-        const text = readFileSync36(cfg.ship.logFile, "utf8").split("\n");
-        process.stdout.write(`${text.slice(-(Number(value("tail")) || 40)).join("\n")}
+        const text2 = readFileSync38(cfg.ship.logFile, "utf8").split("\n");
+        process.stdout.write(`${text2.slice(-(Number(value("tail")) || 40)).join("\n")}
 `);
       } catch {
         process.stdout.write(`no log yet at ${cfg.ship.logFile}
@@ -24791,12 +25424,12 @@ ${where.join("\n")}`);
       break;
     }
     case "sample-ticket": {
-      const json = flag("json");
-      const say = (event, extra, human) => process.stdout.write(json ? `${JSON.stringify({ event, ...extra })}
+      const json2 = flag("json");
+      const say = (event, extra, human) => process.stdout.write(json2 ? `${JSON.stringify({ event, ...extra })}
 ` : `${human}
 `);
       const fail = (msg) => {
-        if (json) process.stdout.write(`${JSON.stringify({ event: "error", message: msg })}
+        if (json2) process.stdout.write(`${JSON.stringify({ event: "error", message: msg })}
 `);
         else process.stderr.write(`crew sample-ticket: ${msg}
 `);
@@ -24804,8 +25437,8 @@ ${where.join("\n")}`);
       };
       if (!route2.resolved) fail(`route ${route2.route} is not connected \u2014 run \`crew connect\` first`);
       const tracker = new Tracker(route2, cfg.ship);
-      const configText = readFileSync36(cfg.configFile, "utf8");
-      const cfgBase = dirname22(cfg.configFile);
+      const configText = readFileSync38(cfg.configFile, "utf8");
+      const cfgBase = dirname24(cfg.configFile);
       const configured2 = configuredRepos(configText, route2.route, cfgBase);
       const dir = configured2.find((r) => r.name === SAMPLE_REPO)?.dir ?? sampleDir(configured2.map((r) => r.dir), route2.reposBasePath, route2.route.split("/")[0]);
       const resolvedFile = resolvedPathFor(cfg.ship.stateDir, route2.route);
@@ -24833,7 +25466,7 @@ ${where.join("\n")}`);
         }
         if (configured2.some((r) => r.dir === dir)) {
           try {
-            writeFileSync28(cfg.configFile, planRepoRemove(configText, cfgBase, route2.route, dir).text);
+            writeFileSync30(cfg.configFile, planRepoRemove(configText, cfgBase, route2.route, dir).text);
           } catch (e) {
             if (e instanceof ReposError) fail(e.message);
             throw e;
@@ -24841,29 +25474,29 @@ ${where.join("\n")}`);
         }
         if (row) {
           await tracker.deleteRepoRow(row.id);
-          if (existsSync41(resolvedFile)) {
-            const raw = JSON.parse(readFileSync36(resolvedFile, "utf8"));
+          if (existsSync43(resolvedFile)) {
+            const raw = JSON.parse(readFileSync38(resolvedFile, "utf8"));
             if (raw.repoNames) delete raw.repoNames[row.id];
             if (raw.repoRemotes) delete raw.repoRemotes[row.id];
-            writeFileSync28(resolvedFile, `${JSON.stringify(raw, null, 2)}
+            writeFileSync30(resolvedFile, `${JSON.stringify(raw, null, 2)}
 `);
           }
         }
-        if (existsSync41(join44(dir, ".git")) && basename13(dir) === SAMPLE_REPO) rmSync19(dir, { recursive: true, force: true });
+        if (existsSync43(join46(dir, ".git")) && basename14(dir) === SAMPLE_REPO) rmSync20(dir, { recursive: true, force: true });
         say("removed", { dir, closed }, `removed the sample repo${closed.length ? `, closed ${closed.join(", ")}` : ""}`);
         break;
       }
       const projectId = route2.resolved.areaId ?? resolveRepoProject(await tracker.projectRows(), value("project"));
-      const fresh = !existsSync41(join44(dir, ".git"));
-      if (existsSync41(dir) && fresh && readdirSync18(dir).length > 0) fail(`${dir} exists and is not a git checkout \u2014 move it aside`);
+      const fresh = !existsSync43(join46(dir, ".git"));
+      if (existsSync43(dir) && fresh && readdirSync19(dir).length > 0) fail(`${dir} exists and is not a git checkout \u2014 move it aside`);
       if (dryRun) {
         say("dry-run", { dir, newCheckout: fresh, repoRow: row?.id ?? null }, `would ${fresh ? "create" : "reuse"} ${dir}${row ? "" : ", create the Repos row"}, and file one ${tracker.contract.statuses.approved} ticket`);
         break;
       }
       if (fresh) {
-        mkdirSync26(dir, { recursive: true });
-        writeFileSync28(join44(dir, "README.md"), SAMPLE_README);
-        writeFileSync28(join44(dir, ".crew.yaml"), SAMPLE_CREW_YAML);
+        mkdirSync28(dir, { recursive: true });
+        writeFileSync30(join46(dir, "README.md"), SAMPLE_README);
+        writeFileSync30(join46(dir, ".crew.yaml"), SAMPLE_CREW_YAML);
         const g = (...a) => {
           const r = spawnSync8("git", a, { cwd: dir, encoding: "utf8" });
           if (r.status !== 0) fail(`git ${a[0]} failed in ${dir}: ${(r.stderr || r.stdout).trim()}`);
@@ -24881,17 +25514,17 @@ ${where.join("\n")}`);
           spec: { platform: "unix", releaseMode: "integrate", ciProvider: "none" }
         });
         repoId = (await tracker.createRepoRow(payload)).id;
-        if (existsSync41(resolvedFile)) {
-          const raw = JSON.parse(readFileSync36(resolvedFile, "utf8"));
+        if (existsSync43(resolvedFile)) {
+          const raw = JSON.parse(readFileSync38(resolvedFile, "utf8"));
           raw.repoNames = { ...raw.repoNames, [repoId]: SAMPLE_REPO };
           raw.repoRemotes = { ...raw.repoRemotes, [repoId]: SAMPLE_REMOTE };
-          writeFileSync28(resolvedFile, `${JSON.stringify(raw, null, 2)}
+          writeFileSync30(resolvedFile, `${JSON.stringify(raw, null, 2)}
 `);
         }
       }
       if (!configured2.some((r) => r.dir === dir)) {
         try {
-          writeFileSync28(cfg.configFile, planRepoAdd({ text: configText, base: cfgBase, route: route2.route, path: dir, name: SAMPLE_REPO }).text);
+          writeFileSync30(cfg.configFile, planRepoAdd({ text: configText, base: cfgBase, route: route2.route, path: dir, name: SAMPLE_REPO }).text);
         } catch (e) {
           if (e instanceof ReposError) fail(e.message);
           throw e;
@@ -25124,7 +25757,7 @@ ${where.join("\n")}`);
               // `synthesis-tabl-123`. `worktreePrefix` above is kept for
               // config-provenance display; this is the field that actually
               // describes where a worktree lands by default.
-              worktreeDirPattern: r.config.worktrees.name ?? (r.config.provenance["worktrees.prefix"] !== "default" ? `${r.config.worktrees.prefix}<number>` : `${basename13(r.dir.replace(/[/\\]+$/, ""))}-<branch>`),
+              worktreeDirPattern: r.config.worktrees.name ?? (r.config.provenance["worktrees.prefix"] !== "default" ? `${r.config.worktrees.prefix}<number>` : `${basename14(r.dir.replace(/[/\\]+$/, ""))}-<branch>`),
               worktreeParent: resolvePath(r.dir, "..")
             })),
             waiting: waiting ? { ticket: waiting.ticket, since: waiting.since, streak: fairness.streak() } : null
@@ -25229,7 +25862,7 @@ watermark:  ${state.watermark()}
           }
           for (const r of repos) {
             const remote = r.config.branch.remote;
-            if (existsSync41(r.dir)) {
+            if (existsSync43(r.dir)) {
               pushAuth.push({
                 route: c.route,
                 repo: r.name,
@@ -25315,7 +25948,7 @@ routes:            ${cfg.routes.map((c) => c.route).join(", ")}
       }
       try {
         const evFile = eventFileFor(cfg.ship.stateDir);
-        const evSize = existsSync41(evFile) ? statSync14(evFile).size : 0;
+        const evSize = existsSync43(evFile) ? statSync14(evFile).size : 0;
         process.stdout.write(
           evSize > cfg.ship.eventsRotateBytes * 4 ? `events log:        WARN ${evFile} is ${Math.round(evSize / 1048576)} MB (> 4x eventsRotateBytes); run \`crew reap\` to rotate it
 ` : "events log:        ok\n"
@@ -25326,7 +25959,7 @@ routes:            ${cfg.routes.map((c) => c.route).join(", ")}
         const unitPlan = planInstall(cfg.ship, CREW_HOME, host, detectSystemd(), "run", installContext());
         const abandons = unitAbandonsAgents(unitPlan, (p) => {
           try {
-            return readFileSync36(p, "utf8");
+            return readFileSync38(p, "utf8");
           } catch {
             return null;
           }
@@ -25369,7 +26002,7 @@ routes:            ${cfg.routes.map((c) => c.route).join(", ")}
       );
       for (const r of await resolvedRepos(route2)) {
         const { config } = r;
-        const worktreePattern = config.worktrees.name ?? (config.provenance["worktrees.prefix"] !== "default" ? `${config.worktrees.prefix}<number>` : `${basename13(r.dir.replace(/[/\\]+$/, ""))}-${effectiveBranchTemplate(config, void 0)}`);
+        const worktreePattern = config.worktrees.name ?? (config.provenance["worktrees.prefix"] !== "default" ? `${config.worktrees.prefix}<number>` : `${basename14(r.dir.replace(/[/\\]+$/, ""))}-${effectiveBranchTemplate(config, void 0)}`);
         process.stdout.write(
           `${`repo ${r.name}:`.padEnd(19)}${r.dir}
                    worktrees at ../${worktreePattern} (${config.provenance["worktrees.name"] ?? config.provenance["worktrees.prefix"] ?? "default"}), branch ${config.branch.name}
@@ -25756,6 +26389,11 @@ ${foreign.join("\n")}
           );
         }
       }
+      for (const e of listPeriscopeEndpoints(cfg.ship.stateDir)) {
+        const secret = readPeriscopeSecret(cfg.ship.stateDir, e.ticketRecordId) ? "live" : "ended, awaiting removal";
+        process.stdout.write(`periscope mcp:     ${e.ticket} ${e.route} ${e.url} (${secret})
+`);
+      }
       if (cfg.ship.relayHost && !flag("offline")) {
         const relayUrl = routeRelayUrl(route2);
         if (!relayUrl) {
@@ -25803,6 +26441,8 @@ var parseTicketNumber2;
 var routeRelayUrl2;
 var passengerApiKeys2;
 var endpointApiFor2;
+var periscopeEndpointDeps2;
+var periscopeMcpDeps2;
 var endpointReconcileDeps2;
 var releaseRefused2;
 var doctorMachineId2;