crewhaus 0.2.0 → 0.2.1

package/dist/dataset-mine.d.ts

@@ -102,8 +102,9 @@ export type EgressBlock = {
 };
 /**
  * Extract egress-block candidates from parsed audit records. The audit log MAY
- * carry no `egress_decision` records at all (no writer yet) — this returns []
- * in that case. A block is any record whose verdict is not an allow. Because
+ * carry no `egress_decision` records at all (they are written only on warn/block
+ * verdicts) — this returns [] in that case. A block is any record whose verdict
+ * is not an allow. Because
  * the audit payload does not reliably carry a turn input, these become
  * standalone candidates keyed by a best-effort session id + the lineage
  * summary; the CLI attaches them to the matching session's LAST turn input

package/dist/dataset-mine.js

@@ -173,8 +173,9 @@ export function mineSession(sessionId, events) {
 }
 /**
  * Extract egress-block candidates from parsed audit records. The audit log MAY
- * carry no `egress_decision` records at all (no writer yet) — this returns []
- * in that case. A block is any record whose verdict is not an allow. Because
+ * carry no `egress_decision` records at all (they are written only on warn/block
+ * verdicts) — this returns [] in that case. A block is any record whose verdict
+ * is not an allow. Because
  * the audit payload does not reliably carry a turn input, these become
  * standalone candidates keyed by a best-effort session id + the lineage
  * summary; the CLI attaches them to the matching session's LAST turn input

package/dist/index.js

@@ -260,6 +260,9 @@ import { RetireError, buildRetirementPlan, formatPlan, formatRetirementResult, r
 // Item 25 — model right-sizing downshift search core (pure enumeration + cost
 // projection + $/score ranking); side-effect-free so it is unit-testable.
 import { buildRightSizeReport, enumerateSlotCandidates, } from "./right-size";
+// Adaptive model routing — `crewhaus route status|reset` inspects/clears the
+// per-(routeKey, model) reward scoreboard behind `agent.model_pool`.
+import { runRoute } from "./route";
 // Item 13 — `crewhaus scaffold-evals` + `init --with-evals`: day-one eval
 // assets generated from the spec (deterministic template / one-shot model
 // sample stubs + a single spec-goal llm_judge or floor grader), in a
@@ -453,6 +456,12 @@ const INIT_SCHEMA = {
         // Overwrite an existing scaffolded workflow or eval assets (never the
         // spec).
         { name: "force", takesValue: false },
+        // Item 39 — interactive spec authoring: interview the user (via the
+        // resolved model, or a scripted stdin questionnaire when no credentials)
+        // and emit a parseSpec-validated crewhaus.yaml. Composes with --detect to
+        // prefill the model from what's reachable.
+        { name: "interactive", short: "i", takesValue: false },
+        { name: "detect", takesValue: false },
         { name: "help", short: "h" },
     ],
 };
@@ -491,12 +500,6 @@ const GRADERS_SUGGEST_SCHEMA = {
         { name: "min-score", takesValue: true },
         // Overwrite an existing review file (default: refuse).
         { name: "force", takesValue: false },
-        // Item 39 — interactive spec authoring: interview the user (via the
-        // resolved model, or a scripted stdin questionnaire when no credentials)
-        // and emit a parseSpec-validated crewhaus.yaml. Composes with --detect to
-        // prefill the model from what's reachable.
-        { name: "interactive", short: "i", takesValue: false },
-        { name: "detect", takesValue: false },
         { name: "help", short: "h" },
     ],
 };
@@ -529,6 +532,17 @@ const DOCTOR_SCHEMA = {
         // Container-HEALTHCHECK exit semantics (0 within/no-data, 1 breach).
         { name: "slo", takesValue: false },
         { name: "ttft", takesValue: false },
+        // Item 40 — `--detect`: read-only inventory of reachable providers, the
+        // local Ollama/vLLM endpoint's models, and MCP servers from
+        // .mcp.json / Claude Desktop config. `--no-probe` skips the localhost HTTP
+        // probe (offline / CI).
+        { name: "detect", takesValue: false },
+        { name: "no-probe", takesValue: false },
+        // Item 40 — `--fix`: apply the mechanical remediations doctor otherwise
+        // only prints (scaffold crewhaus.yaml, create .crewhaus/, mark outward
+        // tools scope:external, append commented .env stubs). Dry-run is the
+        // DEFAULT: without --fix, doctor prints the diff it WOULD apply.
+        { name: "fix", takesValue: false },
         { name: "help", short: "h" },
     ],
 };
@@ -1343,7 +1357,7 @@ function usageText() {
         "                  [--watch]            re-validate on change (authoring aid; does not re-launch)",
         "                  [--resume <id>]      resume a specific session (cli targets only)",
         "                  [--continue]         resume the most-recent session (cli targets only)",
-        "                  [--prompt <text>]    initial user prompt (browser targets; defaults to stdin)",
+        "                  [--prompt <text>]    run one turn and exit, printing the reply (cli: no REPL; browser: the single-turn input, else stdin)",
         "                  [--justification-judge rule-based|claude]  Pillar 3 intent-gate judge (FR-004)",
         "                  [--egress-matcher substring|semantic]  Pillar 3 sink-side matcher (FR-006)",
         "                  [--egress-embedder <model>]  embedder for --egress-matcher semantic",
@@ -1410,6 +1424,8 @@ function usageText() {
         "  context --bundle [-o <file>]         emit a single-markdown orientation manifest",
         "       [--factory-root <p>] [--docs-root <p>] [--demos-root <p>]",
         "  cost-summary --session <id>          summarize cost_accrual events for a session",
+        "  route status [--dir <root>]          show the adaptive model_pool reward scoreboard",
+        "  route reset  [--dir <root>]          wipe the scoreboard (default root .crewhaus)",
         "  advise [--session <id> | --all]      mine session logs for spec advice (item 14)",
         "       [--json] [-o <dir>]             writes suggestions.json + report.html (default .crewhaus/advice)",
         "  tools list                           list every builtin tool + its metadata (item 18)",
@@ -2709,6 +2725,8 @@ async function loadToolMap() {
         glob: fs.glob,
         grep: fs.grep,
         bash: bash.bash,
+        bashOutput: bash.bashOutput,
+        killShell: bash.killShell,
         todoWrite: todo.todoWrite,
         webFetch: web.webFetch,
         webSearch: web.webSearch,
@@ -2887,6 +2905,7 @@ async function resolveEgressMatcher(args, irEgressMatcher) {
 async function runRun(args) {
     if (args.flags["help"]) {
         process.stdout.write("usage: crewhaus run <spec.yaml> [--model <model>] [--permission-mode <default|plan|auto|bypass>] [--resume <sessionId> | --continue] [--prompt <text>] [--justification-judge rule-based|claude] [--egress-matcher substring|semantic] [--egress-embedder <model>]\n" +
+            "  --prompt <text> runs a single turn non-interactively and prints the reply, then exits (no REPL) — for scripting/CI; composes with --resume/--continue\n" +
             "  --model accepts the full router grammar: claude-* (Anthropic), openai/<m>, gemini/<m>, bedrock/<id> (geo prefixes tolerated), local/<m>@<url>\n" +
             "  A spec with a feedback: block asks `rate this session? [g]ood / [b]ad / [enter] skip`\n" +
             "  on clean REPL exit (one keystroke, 10s timeout, TTY only — never when piped). Opt out\n" +
@@ -2962,6 +2981,19 @@ async function runRunCli(args, ir, specPath) {
         resumeId = match.id;
         process.stdout.write(`[continue] resuming session ${match.id} (last updated ${match.updatedAt})\n`);
     }
+    // `--prompt <text>` runs ONE turn non-interactively and exits (no REPL) —
+    // the cli analogue of the browser target's --prompt and `claude -p`, for
+    // scripting/CI/pipelines. The final assistant message is written to stdout.
+    // Composes with --resume/--continue (one more turn on a resumed session).
+    const promptFlag = args.flags["prompt"];
+    let oneShotPrompt;
+    if (typeof promptFlag === "string") {
+        const trimmed = promptFlag.trim();
+        if (trimmed.length === 0) {
+            die("--prompt requires non-empty text");
+        }
+        oneShotPrompt = trimmed;
+    }
     let tools = [];
     if (ir.tools.length > 0) {
         // Section 14 — apply per-tool config (e.g. registerFetchConfig) before
@@ -3356,8 +3388,9 @@ async function runRunCli(args, ir, specPath) {
             process.stdout.write(`[sandbox] backend "${process.env["CREWHAUS_SANDBOX"]}" — python/javascript/shell enabled (still require an alwaysAllow rule)\n`);
         }
     }
+    let oneShotResult;
     try {
-        await runChatLoop({
+        oneShotResult = await runChatLoop({
             model,
             instructions: mcpQuarantineNotice !== undefined
                 ? `${ir.agent.instructions}\n\n${mcpQuarantineNotice}`
@@ -3370,11 +3403,24 @@ async function runRunCli(args, ir, specPath) {
             hooks,
             skills,
             slashCommands,
+            // `--prompt` → run exactly one turn from the seeded prompt and return
+            // its final message (no interactive REPL). runChatLoop's singleTurn
+            // mode also suppresses the `you>` / `agent ready` chrome.
+            ...(oneShotPrompt !== undefined
+                ? { singleTurn: true, seedMessages: [{ role: "user", content: oneShotPrompt }] }
+                : {}),
             ...(hasCodeExecTools ? { sandboxAvailable } : {}),
             ...(subAgents !== undefined ? { subAgents, spawnSubAgent } : {}),
             ...(ir.target === "cli" && ir.agent.maxTokens !== undefined
                 ? { maxTokens: ir.agent.maxTokens }
                 : {}),
+            // Thread `compaction.model` so auto-compaction summarizes on the
+            // spec's chosen (typically cheaper) model instead of the primary.
+            // The compiler already resolves the `cheapest` sentinel to a concrete
+            // id, so this is a raw model string. Mirrors the target-cli emitter.
+            ...(ir.target === "cli" && ir.compaction.model !== undefined
+                ? { compactionModel: ir.compaction.model }
+                : {}),
             // Item 22 — provider failover chain: thread `agent.model_fallbacks` +
             // `agent.circuit_breaker` through to the runtime, mirroring the
             // target-cli codegen path. Skipped when `--model` overrides the
@@ -3428,6 +3474,12 @@ async function runRunCli(args, ir, specPath) {
         if (mcpHost)
             await mcpHost.disconnectAll();
     }
+    // One-shot (`--prompt`): emit the final assistant message to stdout so it
+    // can be piped/captured. The REPL path streams as it goes and returns the
+    // same trailing text, so only print it in one-shot mode.
+    if (oneShotPrompt !== undefined && oneShotResult !== undefined) {
+        process.stdout.write(`${oneShotResult}\n`);
+    }
     // Item 1 — post-session feedback teardown: the one-keystroke exit rating
     // prompt (TTY only) and the feedback.autoDistill consumer. Runs only on a
     // clean REPL exit (runChatLoop returned; a throw above skips it) and is
@@ -12949,6 +13001,18 @@ switch (subcommand) {
         }
         break;
     }
+    case "route":
+        // Adaptive model routing — inspect/reset the reward scoreboard. `runRoute`
+        // throws a plain Error on a bad argument; surface it through die().
+        try {
+            process.stdout.write(`${runRoute(rest)}\n`);
+        }
+        catch (err) {
+            if (err instanceof Error)
+                die(err.message);
+            throw err;
+        }
+        break;
     case "context":
         runContext(parseFor(rest, CONTEXT_SCHEMA));
         break;

package/dist/route.d.ts

@@ -0,0 +1,19 @@
+import { type ArmStats } from "@crewhaus/routing-store";
+export type RouteArgs = {
+    readonly sub: "status" | "reset";
+    readonly dir: string;
+};
+/** Parse `route <sub> [--dir <root>]` argv (everything after `route`). */
+export declare function parseRouteArgs(argv: readonly string[]): RouteArgs;
+/** Snapshot the scoreboard arms (sorted routeKey then model). */
+export declare function loadArms(rootDir: string): ArmStats[];
+/**
+ * Render the scoreboard as a human table: grouped by routeKey, best mean-reward
+ * arm first within each bucket and starred (the arm a `learned` policy would
+ * exploit once every arm clears its sample floor).
+ */
+export declare function formatRouteStatus(arms: readonly ArmStats[]): string;
+/** Wipe the whole scoreboard. Returns the number of arms removed. */
+export declare function resetRouting(rootDir: string): number;
+/** Run `crewhaus route …`, returning the text to print. */
+export declare function runRoute(argv: readonly string[]): string;

package/dist/route.js

@@ -0,0 +1,90 @@
+/**
+ * `crewhaus route` — inspect and reset the adaptive-model-routing scoreboard
+ * (the durable per-`(routeKey, model)` reward store behind `agent.model_pool`).
+ *
+ *   route status [--dir <root>]   show the learned arms, best-per-bucket first
+ *   route reset  [--dir <root>]   wipe the scoreboard (kill switch)
+ *
+ * `--dir` points at the `.crewhaus` root (default `.crewhaus`); the store lives
+ * at `<root>/routing/arms.jsonl`. Live per-turn `model_route` decisions are
+ * already visible in a run's structured trace; this command surfaces the
+ * ACCUMULATED learning that a `learned` policy exploits.
+ */
+import { existsSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import { openScoreboard } from "@crewhaus/routing-store";
+const DEFAULT_ROOT = ".crewhaus";
+/** Parse `route <sub> [--dir <root>]` argv (everything after `route`). */
+export function parseRouteArgs(argv) {
+    let dir = DEFAULT_ROOT;
+    let sub;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "--dir") {
+            const v = argv[i + 1];
+            if (v === undefined)
+                throw new Error("route: --dir requires a path");
+            dir = v;
+            i++;
+        }
+        else if (a === "status" || a === "reset") {
+            sub = a;
+        }
+        else {
+            throw new Error(`route: unknown argument "${a}" (expected: status | reset [--dir <root>])`);
+        }
+    }
+    if (sub === undefined)
+        throw new Error("route: expected a subcommand (status | reset)");
+    return { sub, dir };
+}
+/** Snapshot the scoreboard arms (sorted routeKey then model). */
+export function loadArms(rootDir) {
+    return openScoreboard(rootDir).snapshot();
+}
+/**
+ * Render the scoreboard as a human table: grouped by routeKey, best mean-reward
+ * arm first within each bucket and starred (the arm a `learned` policy would
+ * exploit once every arm clears its sample floor).
+ */
+export function formatRouteStatus(arms) {
+    if (arms.length === 0) {
+        return "No routing data yet. Run a harness whose spec declares `agent.model_pool` to accumulate arms.";
+    }
+    const byKey = new Map();
+    for (const a of arms) {
+        const g = byKey.get(a.routeKey) ?? [];
+        g.push(a);
+        byKey.set(a.routeKey, g);
+    }
+    const lines = [];
+    lines.push(`${"routeKey".padEnd(9)} ${"model".padEnd(28)} ${"n".padStart(5)} ${"reward".padStart(7)} ${"latency".padStart(9)} ${"cost".padStart(10)}`);
+    for (const key of [...byKey.keys()].sort()) {
+        const group = (byKey.get(key) ?? []).slice().sort((x, y) => y.meanReward - x.meanReward);
+        group.forEach((a, i) => {
+            const star = i === 0 && a.n > 0 ? " *" : "";
+            const latency = `${a.meanLatencyMs.toFixed(0)}ms`;
+            const cost = a.meanCostUsd > 0 ? `$${a.meanCostUsd.toFixed(5)}` : "-";
+            lines.push(`${key.padEnd(9)} ${a.model.padEnd(28)} ${String(a.n).padStart(5)} ${a.meanReward.toFixed(3).padStart(7)} ${latency.padStart(9)} ${cost.padStart(10)}${star}`);
+        });
+    }
+    lines.push("");
+    lines.push("* = current best arm in its bucket (what a `learned` policy exploits once every arm clears its sample floor).");
+    return lines.join("\n");
+}
+/** Wipe the whole scoreboard. Returns the number of arms removed. */
+export function resetRouting(rootDir) {
+    const removed = loadArms(rootDir).length;
+    const path = join(rootDir, "routing", "arms.jsonl");
+    if (existsSync(path))
+        rmSync(path, { force: true });
+    return removed;
+}
+/** Run `crewhaus route …`, returning the text to print. */
+export function runRoute(argv) {
+    const args = parseRouteArgs(argv);
+    if (args.sub === "status")
+        return formatRouteStatus(loadArms(args.dir));
+    const removed = resetRouting(args.dir);
+    return `Reset routing scoreboard at ${join(args.dir, "routing", "arms.jsonl")} (${removed} arm${removed === 1 ? "" : "s"} removed).`;
+}

package/dist/security-digest.d.ts

@@ -73,7 +73,8 @@ export type SecurityDigest = {
         readonly malformedLines: number;
         readonly countsByKind: Readonly<Record<string, number>>;
         /** Kinds @crewhaus/audit-log declares that produced 0 window records —
-         *  today that inevitably includes the writerless kinds (see header). */
+         *  always includes the still-writerless kinds, plus any writerful kind
+         *  (e.g. egress_decision) that simply had no records in the window. */
         readonly absentDeclaredKinds: ReadonlyArray<string>;
     };
     /** Pillar 3 intent gate — from `permission_justification_evaluated`. */

package/dist/security-digest.js

@@ -25,6 +25,12 @@ import { join, resolve } from "node:path";
  *     - policy_decision   policy-engine's auditPolicyDecision (payload
  *       { toolName, sideEffect, decision, reason, tenantId, matchedRule }) —
  *       deny/audit-and-allow rows only by default.
+ *     - egress_decision   runtime-core's egress classifier (AUTOMATION-
+ *       OPPORTUNITIES item 20; payload { sinkId, sinkScope, verdict,
+ *       originsFound, matchCount }) — appended durably on every NON-PASS
+ *       (warn/block) verdict when the egress audit sink is wired, so the
+ *       rollup carries warn/block egress history; pass verdicts stay
+ *       ephemeral on the trace bus and leave no audit record.
  *     - model_call, gateway_request, secrets_rotation, secrets_access,
  *       deployment_action, retention_enforcement, alert_raised (item-31
  *       alert watchdog's `AlertAuditSink`, see alert-sink.ts; payload
@@ -33,15 +39,14 @@ import { join, resolve } from "node:path";
  *       but builds no verdict rollup from them.
  *
  *   kinds DECLARED in @crewhaus/audit-log but with NO writer anywhere in the
- *   tree today: `egress_decision`, `tool_classification`, `session_fork`,
- *   `tenancy_context`. Egress verdicts currently surface ONLY as ephemeral
- *   `permission_decision` trace events (outcome: egress-*) — runtime-core
- *   never appends the documented `egress_decision` audit record. The digest
- *   still aggregates `egress_decision` records by the payload shape the
- *   audit-log header documents ({ sinkId, sinkScope, verdict, originsFound,
- *   matchCount }) so the rollup lights up the day a writer lands, and it
- *   reports these kinds under `absentDeclaredKinds` so "0 egress rows"
- *   reads as "no durable writer yet", not "no egress happened".
+ *   tree today: `tool_classification`, `session_fork`, `tenancy_context`. The
+ *   digest still aggregates records of these kinds by their documented payload
+ *   shape so the rollup lights up the day a writer lands, and reports them
+ *   under `absentDeclaredKinds` so "0 rows" reads as "no durable writer yet",
+ *   not "nothing happened". (egress_decision graduated to the writer list
+ *   above once runtime-core began appending it on warn/block verdicts; a
+ *   window with no warn/block egress still lists it as absent — meaning "no
+ *   warn/block egress in the window", not "no writer".)
  *
  * Because block-tier verdicts DO leave durable residue in the session event
  * logs (`.crewhaus/sessions/<id>.jsonl` `tool_result` events carry the
@@ -210,7 +215,8 @@ export function buildSecurityDigest(opts) {
     let jDenied = 0;
     const deniedTools = new Map();
     const judges = new Map();
-    // Egress rollup accumulators (no writer today — see module header).
+    // Egress rollup accumulators — fed by egress_decision records (written on
+    // warn/block verdicts; see module header).
     let ePassed = 0;
     let eWarned = 0;
     let eBlocked = 0;
@@ -480,7 +486,7 @@ export function renderSecurityDigestText(d) {
             lines.push(`  • origin ${o.name}: ${o.count} hit(s)`);
     }
     else {
-        lines.push("egress: no durable egress_decision records — the kind is declared but has no writer yet; live verdicts surface per-run via CREWHAUS_SECURITY_DIGEST=1");
+        lines.push("egress: no egress_decision records in window — records are written on warn/block verdicts; live per-run verdicts via CREWHAUS_SECURITY_DIGEST=1");
     }
     lines.push(`policy engine: ${d.policy.decisions} audited decision(s) — ${d.policy.denied} denied, ${d.policy.auditAndAllow} audit-and-allow`);
     for (const t of d.policy.topDeniedTools)
@@ -576,7 +582,7 @@ ${tableOf(["Tool", "Denials", "Judges", "Mean confidence", "Last reason"], d.jus
 ${tableOf(["Judge", "Evaluated", "Denied"], d.justification.byJudge.map((j) => [j.judgeModel, String(j.evaluated), String(j.denied)]))}
 <h2>Egress sinks (warn/block)</h2>
 ${d.egress.decisions === 0
-        ? '<p class="note">no durable egress_decision records — the kind is declared but has no writer yet; live verdicts surface per-run via CREWHAUS_SECURITY_DIGEST=1</p>'
+        ? '<p class="note">no egress_decision records in window — records are written on warn/block verdicts; live per-run verdicts via CREWHAUS_SECURITY_DIGEST=1</p>'
         : tableOf(["Sink", "Warned", "Blocked", "Origins"], d.egress.topSinks.map((s) => [
             s.sinkId,
             String(s.warned),

package/dist/tools-cli.js

@@ -269,6 +269,8 @@ export const CLI_RUNTIME_TOOL_KEYS = Object.freeze([
     "glob",
     "grep",
     "bash",
+    "bashOutput",
+    "killShell",
     "todoWrite",
     "webFetch",
     "webSearch",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "crewhaus",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "type": "module",
   "description": "CrewHaus — the meta-harness compiler for AI agents. Compile one crewhaus.yaml spec into a CLI agent, channel bot, RAG pipeline, multi-agent crew, eval harness, voice or browser agent, and more.",
   "keywords": [
@@ -31,93 +31,94 @@
     "test": "bun test src"
   },
   "dependencies": {
-    "@crewhaus/adapter-anthropic": "0.2.0",
-    "@crewhaus/agent-context-isolation": "0.2.0",
-    "@crewhaus/audit-log": "0.2.0",
-    "@crewhaus/eval-optimizer-orchestrator": "0.2.0",
-    "@crewhaus/prompt-optimizer": "0.2.0",
-    "@crewhaus/prompt-optimizer-claude": "0.2.0",
-    "@crewhaus/justification-judge-claude": "0.2.0",
-    "@crewhaus/spec-patch": "0.2.0",
-    "@crewhaus/canary-controller": "0.2.0",
-    "@crewhaus/compiler": "0.2.0",
-    "@crewhaus/computer-use-driver": "0.2.0",
-    "@crewhaus/context-bundle": "0.2.0",
-    "@crewhaus/cost-tracker": "0.2.0",
-    "@crewhaus/data-retention-engine": "0.2.0",
-    "@crewhaus/dataset-registry": "0.2.0",
-    "@crewhaus/deployment-controller": "0.2.0",
-    "@crewhaus/egress-classifier": "0.2.0",
-    "@crewhaus/egress-matcher-semantic": "0.2.0",
-    "@crewhaus/embedder": "0.2.0",
-    "@crewhaus/errors": "0.2.0",
-    "@crewhaus/eval-dataset": "0.2.0",
-    "@crewhaus/eval-grader": "0.2.0",
-    "@crewhaus/eval-judge": "0.2.0",
-    "@crewhaus/eval-report": "0.2.0",
-    "@crewhaus/eval-runner": "0.2.0",
-    "@crewhaus/event-log": "0.2.0",
-    "@crewhaus/gateway-server": "0.2.0",
-    "@crewhaus/grader-safety-classifiers": "0.2.0",
-    "@crewhaus/hooks-engine": "0.2.0",
-    "@crewhaus/infra-utils": "0.2.0",
-    "@crewhaus/ir": "0.2.0",
-    "@crewhaus/ir-passes": "0.2.0",
-    "@crewhaus/logging": "0.2.0",
-    "@crewhaus/mcp-host": "0.2.0",
-    "@crewhaus/memory-store": "0.2.0",
-    "@crewhaus/model-router": "0.2.0",
-    "@crewhaus/module-marketplace-client": "0.2.0",
-    "@crewhaus/migration-engine": "0.2.0",
-    "@crewhaus/migration-runner": "0.2.0",
-    "@crewhaus/plugin-registry": "0.2.0",
-    "@crewhaus/plugin-sdk": "0.2.0",
-    "@crewhaus/permission-engine": "0.2.0",
-    "@crewhaus/pii-redactor": "0.2.0",
-    "@crewhaus/prompt-injection-detector": "0.2.0",
-    "@crewhaus/regression-runner": "0.2.0",
-    "@crewhaus/run-context": "0.2.0",
-    "@crewhaus/runtime-core": "0.2.0",
-    "@crewhaus/secrets-manager": "0.2.0",
-    "@crewhaus/session-store": "0.2.0",
-    "@crewhaus/spec-registry": "0.2.0",
-    "@crewhaus/skills-registry": "0.2.0",
-    "@crewhaus/slash-commands": "0.2.0",
-    "@crewhaus/smoke-harness": "0.2.0",
-    "@crewhaus/spec": "0.2.0",
-    "@crewhaus/sub-agent-spawner": "0.2.0",
-    "@crewhaus/template-marketplace-client": "0.2.0",
-    "@crewhaus/template-registry": "0.2.0",
-    "@crewhaus/tenancy": "0.2.0",
-    "@crewhaus/trace-event-bus": "0.2.0",
-    "@crewhaus/tool-bash": "0.2.0",
-    "@crewhaus/tool-builder": "0.2.0",
-    "@crewhaus/target-cli": "0.2.0",
-    "@crewhaus/target-eval-bundle": "0.2.0",
-    "@crewhaus/tool-catalog": "0.2.0",
-    "@crewhaus/tool-code-execution": "0.2.0",
-    "@crewhaus/tool-codegraph": "0.2.0",
-    "@crewhaus/tool-fetch": "0.2.0",
-    "@crewhaus/tool-fs": "0.2.0",
-    "@crewhaus/tool-image": "0.2.0",
-    "@crewhaus/tool-image-generation": "0.2.0",
-    "@crewhaus/tool-document-ingest": "0.2.0",
-    "@crewhaus/tool-mcp": "0.2.0",
-    "@crewhaus/tool-memory": "0.2.0",
-    "@crewhaus/tool-mouse-keyboard": "0.2.0",
-    "@crewhaus/tool-navigate": "0.2.0",
-    "@crewhaus/tool-permission-matcher": "0.2.0",
-    "@crewhaus/tool-screen-capture": "0.2.0",
-    "@crewhaus/tool-task": "0.2.0",
-    "@crewhaus/tool-todo": "0.2.0",
-    "@crewhaus/tool-vision-grounding": "0.2.0",
-    "@crewhaus/tool-web": "0.2.0",
-    "@crewhaus/docker-images": "0.2.0",
-    "@crewhaus/crewhaus-cloud": "0.2.0",
-    "@crewhaus/federation-discovery": "0.2.0",
-    "@crewhaus/sandbox": "0.2.0",
-    "@crewhaus/sandbox-image-registry": "0.2.0",
-    "@crewhaus/compliance-controls": "0.2.0",
+    "@crewhaus/adapter-anthropic": "0.2.1",
+    "@crewhaus/agent-context-isolation": "0.2.1",
+    "@crewhaus/audit-log": "0.2.1",
+    "@crewhaus/eval-optimizer-orchestrator": "0.2.1",
+    "@crewhaus/prompt-optimizer": "0.2.1",
+    "@crewhaus/prompt-optimizer-claude": "0.2.1",
+    "@crewhaus/justification-judge-claude": "0.2.1",
+    "@crewhaus/spec-patch": "0.2.1",
+    "@crewhaus/canary-controller": "0.2.1",
+    "@crewhaus/compiler": "0.2.1",
+    "@crewhaus/computer-use-driver": "0.2.1",
+    "@crewhaus/context-bundle": "0.2.1",
+    "@crewhaus/cost-tracker": "0.2.1",
+    "@crewhaus/data-retention-engine": "0.2.1",
+    "@crewhaus/dataset-registry": "0.2.1",
+    "@crewhaus/deployment-controller": "0.2.1",
+    "@crewhaus/egress-classifier": "0.2.1",
+    "@crewhaus/egress-matcher-semantic": "0.2.1",
+    "@crewhaus/embedder": "0.2.1",
+    "@crewhaus/errors": "0.2.1",
+    "@crewhaus/eval-dataset": "0.2.1",
+    "@crewhaus/eval-grader": "0.2.1",
+    "@crewhaus/eval-judge": "0.2.1",
+    "@crewhaus/eval-report": "0.2.1",
+    "@crewhaus/eval-runner": "0.2.1",
+    "@crewhaus/event-log": "0.2.1",
+    "@crewhaus/gateway-server": "0.2.1",
+    "@crewhaus/grader-safety-classifiers": "0.2.1",
+    "@crewhaus/hooks-engine": "0.2.1",
+    "@crewhaus/infra-utils": "0.2.1",
+    "@crewhaus/ir": "0.2.1",
+    "@crewhaus/ir-passes": "0.2.1",
+    "@crewhaus/logging": "0.2.1",
+    "@crewhaus/mcp-host": "0.2.1",
+    "@crewhaus/memory-store": "0.2.1",
+    "@crewhaus/model-router": "0.2.1",
+    "@crewhaus/module-marketplace-client": "0.2.1",
+    "@crewhaus/migration-engine": "0.2.1",
+    "@crewhaus/migration-runner": "0.2.1",
+    "@crewhaus/plugin-registry": "0.2.1",
+    "@crewhaus/plugin-sdk": "0.2.1",
+    "@crewhaus/permission-engine": "0.2.1",
+    "@crewhaus/pii-redactor": "0.2.1",
+    "@crewhaus/prompt-injection-detector": "0.2.1",
+    "@crewhaus/regression-runner": "0.2.1",
+    "@crewhaus/routing-store": "0.2.1",
+    "@crewhaus/run-context": "0.2.1",
+    "@crewhaus/runtime-core": "0.2.1",
+    "@crewhaus/secrets-manager": "0.2.1",
+    "@crewhaus/session-store": "0.2.1",
+    "@crewhaus/spec-registry": "0.2.1",
+    "@crewhaus/skills-registry": "0.2.1",
+    "@crewhaus/slash-commands": "0.2.1",
+    "@crewhaus/smoke-harness": "0.2.1",
+    "@crewhaus/spec": "0.2.1",
+    "@crewhaus/sub-agent-spawner": "0.2.1",
+    "@crewhaus/template-marketplace-client": "0.2.1",
+    "@crewhaus/template-registry": "0.2.1",
+    "@crewhaus/tenancy": "0.2.1",
+    "@crewhaus/trace-event-bus": "0.2.1",
+    "@crewhaus/tool-bash": "0.2.1",
+    "@crewhaus/tool-builder": "0.2.1",
+    "@crewhaus/target-cli": "0.2.1",
+    "@crewhaus/target-eval-bundle": "0.2.1",
+    "@crewhaus/tool-catalog": "0.2.1",
+    "@crewhaus/tool-code-execution": "0.2.1",
+    "@crewhaus/tool-codegraph": "0.2.1",
+    "@crewhaus/tool-fetch": "0.2.1",
+    "@crewhaus/tool-fs": "0.2.1",
+    "@crewhaus/tool-image": "0.2.1",
+    "@crewhaus/tool-image-generation": "0.2.1",
+    "@crewhaus/tool-document-ingest": "0.2.1",
+    "@crewhaus/tool-mcp": "0.2.1",
+    "@crewhaus/tool-memory": "0.2.1",
+    "@crewhaus/tool-mouse-keyboard": "0.2.1",
+    "@crewhaus/tool-navigate": "0.2.1",
+    "@crewhaus/tool-permission-matcher": "0.2.1",
+    "@crewhaus/tool-screen-capture": "0.2.1",
+    "@crewhaus/tool-task": "0.2.1",
+    "@crewhaus/tool-todo": "0.2.1",
+    "@crewhaus/tool-vision-grounding": "0.2.1",
+    "@crewhaus/tool-web": "0.2.1",
+    "@crewhaus/docker-images": "0.2.1",
+    "@crewhaus/crewhaus-cloud": "0.2.1",
+    "@crewhaus/federation-discovery": "0.2.1",
+    "@crewhaus/sandbox": "0.2.1",
+    "@crewhaus/sandbox-image-registry": "0.2.1",
+    "@crewhaus/compliance-controls": "0.2.1",
     "yaml": "^2.6.0"
   },
   "devDependencies": {