sisyphi 1.1.24 → 1.1.26

package/dist/cli.js

@@ -111,12 +111,24 @@ function deployStatePath(provider) {
 function deployStateBackupPath(provider) {
   return join(deployProviderDir(provider), "terraform.tfstate.bak");
 }
+function deployRuntimePath(provider) {
+  return join(deployProviderDir(provider), "runtime.json");
+}
 function deployCredsPath(provider) {
   return join(deployDir(), `${provider}.env`);
 }
 function deployTailscaleEnvPath() {
   return join(deployDir(), "tailscale.env");
 }
+function boxRepoPath(repo) {
+  return `~/projects/${repo}`;
+}
+function boxCloudSidecarPath(repo) {
+  return `~/.sisyphus/cloud/${repo}.json`;
+}
+function boxCloudSidecarDir() {
+  return `~/.sisyphus/cloud`;
+}
 var init_paths = __esm({
   "src/shared/paths.ts"() {
     "use strict";
@@ -135,16 +147,16 @@ function atomicWrite(filePath, data) {
 }
 async function withLock(key, fn) {
   const prev = locks.get(key) ?? Promise.resolve();
-  let resolve11;
+  let resolve12;
   const next = new Promise((r) => {
-    resolve11 = r;
+    resolve12 = r;
   });
   locks.set(key, next);
   await prev;
   try {
     return fn();
   } finally {
-    resolve11();
+    resolve12();
     if (locks.get(key) === next) {
       locks.delete(key);
     }
@@ -161,7 +173,9 @@ var init_atomic = __esm({
 // src/cli/deploy/creds.ts
 var creds_exports = {};
 __export(creds_exports, {
+  PROVIDERS: () => PROVIDERS,
   ensureDeployDir: () => ensureDeployDir,
+  isValidProvider: () => isValidProvider,
   loadProviderCreds: () => loadProviderCreds,
   maskValue: () => maskValue,
   promptLine: () => promptLine,
@@ -169,7 +183,10 @@ __export(creds_exports, {
   writeTailscaleEnv: () => writeTailscaleEnv
 });
 import { chmodSync as chmodSync3, existsSync as existsSync24, mkdirSync as mkdirSync12, readFileSync as readFileSync27 } from "fs";
-import { createInterface as createInterface3 } from "readline";
+import { createInterface as createInterface4 } from "readline";
+function isValidProvider(value) {
+  return PROVIDERS.includes(value);
+}
 function ensureDeployDir() {
   const dir = deployDir();
   if (!existsSync24(dir)) mkdirSync12(dir, { recursive: true, mode: 448 });
@@ -191,7 +208,7 @@ function parseEnvFile(text) {
   return out;
 }
 function serializeEnvFile(values) {
-  const lines = ["# Managed by `sisyphus deploy`. Do not edit unless you know what you are doing."];
+  const lines = ["# Managed by `sis deploy`. Do not edit unless you know what you are doing."];
   for (const [k, v] of Object.entries(values)) {
     lines.push(`${k}=${v}`);
   }
@@ -207,7 +224,7 @@ function writeEnvFile(path, values) {
   chmodSync3(path, 384);
 }
 async function promptLine(question, hidden) {
-  const rl = createInterface3({ input: process.stdin, output: process.stdout, terminal: true });
+  const rl = createInterface4({ input: process.stdin, output: process.stdout, terminal: true });
   if (hidden) {
     const stdout = process.stdout;
     const originalWrite = stdout.write.bind(stdout);
@@ -219,7 +236,7 @@ async function promptLine(question, hidden) {
       }
     };
   }
-  const answer = await new Promise((resolve11) => rl.question(question, resolve11));
+  const answer = await new Promise((resolve12) => rl.question(question, resolve12));
   rl.close();
   if (hidden) process.stdout.write("\n");
   return answer.trim();
@@ -269,12 +286,13 @@ function writeTailscaleEnv(env) {
   if (env.tag) values.TS_TAG = env.tag;
   writeEnvFile(deployTailscaleEnvPath(), values);
 }
-var SPECS;
+var PROVIDERS, SPECS;
 var init_creds = __esm({
   "src/cli/deploy/creds.ts"() {
     "use strict";
     init_atomic();
     init_paths();
+    PROVIDERS = ["hetzner", "aws"];
     SPECS = {
       hetzner: {
         provider: "hetzner",
@@ -293,8 +311,8 @@ var init_creds = __esm({
 
 // src/cli/index.ts
 import { Command } from "commander";
-import { existsSync as existsSync28, mkdirSync as mkdirSync14, readFileSync as readFileSync30 } from "fs";
-import { dirname as dirname12, join as join26 } from "path";
+import { existsSync as existsSync30, mkdirSync as mkdirSync14, readFileSync as readFileSync31 } from "fs";
+import { dirname as dirname12, join as join27 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 
 // src/cli/commands/start.ts
@@ -306,13 +324,13 @@ init_paths();
 import { connect } from "net";
 function rawSend(request, timeoutMs = 1e4) {
   const sock = socketPath();
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     const socket = connect(sock);
     let data = "";
     const timeout = setTimeout(() => {
       socket.destroy();
       reject(new Error(`Request timed out after ${(timeoutMs / 1e3).toFixed(0)}s. The daemon may be overloaded.
-  Check: sisyphus admin doctor
+  Check: sis admin doctor
   Logs: tail -20 ~/.sisyphus/daemon.log`));
     }, timeoutMs);
     socket.on("connect", () => {
@@ -326,7 +344,7 @@ function rawSend(request, timeoutMs = 1e4) {
         const line = data.slice(0, newlineIdx);
         socket.destroy();
         try {
-          resolve11(JSON.parse(line));
+          resolve12(JSON.parse(line));
         } catch {
           reject(new Error(`Invalid JSON response from daemon: ${line}`));
         }
@@ -354,6 +372,7 @@ import { execSync } from "child_process";
 import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync, unlinkSync } from "fs";
 import { homedir as homedir2 } from "os";
 import { join as join2 } from "path";
+import { createInterface } from "readline";
 
 // src/shared/keymap.ts
 function formatHelpForKeymap(km) {
@@ -590,7 +609,7 @@ while IFS=$'\\t' read -r type name scwd phase sid; do
   [ "$sid" = "$current_id" ] && { cwd="$scwd"; break; }
 done < "$MANIFEST"
 if [ -z "$cwd" ]; then
-  tmux display-message "sisyphus: '$current_name' has no @sisyphus_cwd \u2014 run 'sisyphus start' here to register"
+  tmux display-message "sisyphus: '$current_name' has no @sisyphus_cwd \u2014 run 'sis start' here to register"
   exit 0
 fi
 session_ids=()
@@ -695,7 +714,7 @@ tmpfile=$(mktemp /tmp/sisyphus-new-XXXXXX.md)
 trap 'rm -f "$tmpfile"' EXIT
 nvim "$tmpfile"
 grep -q '[^[:space:]]' "$tmpfile" || exit 0
-exec sisyphus start "$(cat "$tmpfile")"
+exec sis start "$(cat "$tmpfile")"
 `;
 var MESSAGE_SCRIPT = `#!/bin/bash
 # Open nvim to compose a message for the current session's orchestrator
@@ -726,7 +745,7 @@ tmpfile=$(mktemp /tmp/sisyphus-msg-XXXXXX.md)
 trap 'rm -f "$tmpfile"' EXIT
 nvim "$tmpfile"
 grep -q '[^[:space:]]' "$tmpfile" || exit 0
-exec sisyphus message --session "$session_id" "$(cat "$tmpfile")"
+exec sis message --session "$session_id" "$(cat "$tmpfile")"
 `;
 var SESSION_RESOLVE = `
 tmux_sid=$(tmux display-message -p '#{session_id}')
@@ -762,7 +781,7 @@ var KILL_SESSION_SCRIPT = `#!/bin/bash
 # Kill the sisyphus session associated with the current tmux session
 ${SESSION_RESOLVE}
 
-sisyphus session kill "$session_id" >/dev/null 2>&1
+sis session kill "$session_id" >/dev/null 2>&1
 ${GO_HOME_AFTER}
 `;
 var DELETE_SESSION_SCRIPT = `#!/bin/bash
@@ -772,7 +791,7 @@ ${SESSION_RESOLVE}
 printf "\\033[31mType 'yes' to confirm:\\033[0m "
 read -r answer
 [ "$answer" = "yes" ] || exit 0
-sisyphus session delete "$session_id" --cwd "$cwd" >/dev/null 2>&1
+sis session delete "$session_id" --cwd "$cwd" >/dev/null 2>&1
 ${GO_HOME_AFTER}
 `;
 var HELP_SCRIPT = `#!/bin/bash
@@ -806,9 +825,9 @@ if [ -z "$session_id" ]; then
 fi
 
 if [ -n "$session_id" ]; then
-  sisyphus status "$session_id" 2>&1 | less -R
+  sis status "$session_id" 2>&1 | less -R
 else
-  sisyphus list 2>&1 | less -R
+  sis list 2>&1 | less -R
 fi
 `;
 var PICK_SESSION_SCRIPT = `#!/bin/bash
@@ -867,7 +886,7 @@ short_id="\${session_id:0:8}"
 printf "\\033[33mContinue session %s...?\\033[0m (y/n) " "$short_id"
 read -r answer
 [ "$answer" = "y" ] || [ "$answer" = "yes" ] || exit 0
-sisyphus session continue --session "$session_id"
+sis session continue --session "$session_id"
 sleep 1
 `;
 var OPEN_ROADMAP_SCRIPT = `#!/bin/bash
@@ -891,18 +910,18 @@ var EXPORT_SESSION_SCRIPT = `#!/bin/bash
 ${SESSION_RESOLVE}
 
 echo "Exporting session \${session_id:0:8}..."
-sisyphus admin export "$session_id" --cwd "$cwd"
+sis admin export "$session_id" --cwd "$cwd"
 echo ""
 read -n 1 -s -r -p "Press a key to close."
 `;
 var RESTART_AGENT_SCRIPT = `#!/bin/bash
 # Pick a sisyphus agent and restart it (fzf picker with confirm for running agents).
-# Assumes macOS (fzf optional). Requires \`sisyphus status --json\`.
+# Assumes macOS (fzf optional). Requires \`sis status --json\`.
 ${SESSION_RESOLVE}
 
 command -v jq &>/dev/null || { echo "jq required"; sleep 1; exit 1; }
 
-agents_json=$(sisyphus status "$session_id" --json 2>/dev/null)
+agents_json=$(sis status "$session_id" --json 2>/dev/null)
 if [ -z "$agents_json" ]; then
   echo "Failed to read session status"; sleep 1; exit 1
 fi
@@ -939,7 +958,7 @@ if [ "\${statuses[$idx]}" = "running" ]; then
   [ "$answer" = "yes" ] || exit 0
 fi
 
-sisyphus agent restart "\${ids[$idx]}" --session "$session_id"
+sis agent restart "\${ids[$idx]}" --session "$session_id"
 echo ""
 read -n 1 -s -r -p "Press a key to close."
 `;
@@ -989,9 +1008,9 @@ nvim "$tmpfile"
 body=$(grep -v '^[[:space:]]*#' "$tmpfile" | sed '/^[[:space:]]*$/d')
 
 if [ -z "$body" ]; then
-  exec sisyphus session resume "$session_id"
+  exec sis session resume "$session_id"
 else
-  exec sisyphus session resume "$session_id" "$body"
+  exec sis session resume "$session_id" "$body"
 fi
 `;
 var ROLLBACK_SESSION_SCRIPT = `#!/bin/bash
@@ -1018,7 +1037,7 @@ if [ "$cycle_input" -lt 1 ]; then
   exit 0
 fi
 
-sisyphus session rollback "$session_id" "$cycle_input"
+sis session rollback "$session_id" "$cycle_input"
 echo ""
 echo "Rolled back to cycle $cycle_input \u2014 use [C-s S r] to resume."
 read -n 1 -s -r -p "Press a key to close."
@@ -1055,12 +1074,12 @@ fi
 
 # Fallback: orchestrator window is gone. Open last claude session in a popup.
 state="$cwd/.sisyphus/sessions/$session_id/state.json"
-[ ! -f "$state" ] && { tmux display-message "Window dead and no state.json \u2014 try sisyphus session resume"; exit 0; }
+[ ! -f "$state" ] && { tmux display-message "Window dead and no state.json \u2014 try sis session resume"; exit 0; }
 
 claude_sid=$(jq -r '[.orchestratorCycles[].claudeSessionId] | last // empty' "$state")
 
 if [ -z "$claude_sid" ]; then
-  tmux display-message "No orchestrator claude session id found \u2014 try sisyphus session resume"
+  tmux display-message "No orchestrator claude session id found \u2014 try sis session resume"
   exit 0
 fi
 
@@ -1082,7 +1101,7 @@ nvim "$tmpfile"
 body=$(grep -v '^[[:space:]]*#' "$tmpfile" | sed '/^[[:space:]]*$/d')
 [ -z "$body" ] && exit 0
 
-exec sisyphus agent spawn --session "$session_id" --name "agent" --instruction "$body"
+exec sis agent spawn --session "$session_id" --name "agent" --instruction "$body"
 `;
 var SEARCH_REPORTS_SCRIPT = `#!/bin/bash
 # fzf over reports/*.md across all sessions for the current cwd.
@@ -1121,12 +1140,12 @@ fi
 `;
 var JUMP_TO_PANE_SCRIPT = `#!/bin/bash
 # Pick a sisyphus agent and jump to its tmux pane.
-# Assumes macOS (pbcopy, fzf optional). Requires \`sisyphus status --json\`.
+# Assumes macOS (pbcopy, fzf optional). Requires \`sis status --json\`.
 ${SESSION_RESOLVE}
 
 command -v jq &>/dev/null || { echo "jq required"; sleep 1; exit 1; }
 
-agents_json=$(sisyphus status "$session_id" --json 2>/dev/null)
+agents_json=$(sis status "$session_id" --json 2>/dev/null)
 if [ -z "$agents_json" ]; then
   echo "Failed to read session status"; sleep 1; exit 1
 fi
@@ -1167,12 +1186,12 @@ tmux select-pane -t "$target_pane"
 `;
 var MSG_AGENT_SCRIPT = `#!/bin/bash
 # Pick a sisyphus agent and send it a message via nvim.
-# Assumes macOS (fzf optional). Requires \`sisyphus status --json\` and \`--agent\` on message.
+# Assumes macOS (fzf optional). Requires \`sis status --json\` and \`--agent\` on message.
 ${SESSION_RESOLVE}
 
 command -v jq &>/dev/null || { echo "jq required"; sleep 1; exit 1; }
 
-agents_json=$(sisyphus status "$session_id" --json 2>/dev/null)
+agents_json=$(sis status "$session_id" --json 2>/dev/null)
 if [ -z "$agents_json" ]; then
   echo "Failed to read session status"; sleep 1; exit 1
 fi
@@ -1205,16 +1224,16 @@ tmpfile=$(mktemp /tmp/sisyphus-msg-agent-XXXX.md)
 trap 'rm -f "$tmpfile"' EXIT
 nvim "$tmpfile"
 grep -q '[^[:space:]]' "$tmpfile" || exit 0
-exec sisyphus message --session "$session_id" --agent "\${ids[$idx]}" "$(cat "$tmpfile")"
+exec sis message --session "$session_id" --agent "\${ids[$idx]}" "$(cat "$tmpfile")"
 `;
 var RERUN_AGENT_SCRIPT = `#!/bin/bash
 # Pick a sisyphus agent and spawn a retry with its original instruction.
-# Assumes macOS (fzf optional). Requires \`sisyphus status --json\`.
+# Assumes macOS (fzf optional). Requires \`sis status --json\`.
 ${SESSION_RESOLVE}
 
 command -v jq &>/dev/null || { echo "jq required"; sleep 1; exit 1; }
 
-agents_json=$(sisyphus status "$session_id" --json 2>/dev/null)
+agents_json=$(sis status "$session_id" --json 2>/dev/null)
 if [ -z "$agents_json" ]; then
   echo "Failed to read session status"; sleep 1; exit 1
 fi
@@ -1256,11 +1275,11 @@ if [ "\${#instr}" -lt 20 ]; then
   exit 1
 fi
 
-exec sisyphus agent spawn --session "$session_id" --agent-type "\${atypes[$idx]}" --name "\${anames[$idx]}-retry-$(date +%s)" --instruction "$instr"
+exec sis agent spawn --session "$session_id" --agent-type "\${atypes[$idx]}" --name "\${anames[$idx]}-retry-$(date +%s)" --instruction "$instr"
 `;
 var OPEN_CLAUDE_AGENT_SCRIPT = `#!/bin/bash
 # Pick a sisyphus agent or orchestrator cycle and resume its Claude session.
-# Assumes macOS (fzf optional). Requires \`sisyphus status --json\`.
+# Assumes macOS (fzf optional). Requires \`sis status --json\`.
 ${SESSION_RESOLVE}
 
 command -v jq &>/dev/null || { echo "jq required"; sleep 1; exit 1; }
@@ -1268,7 +1287,7 @@ command -v jq &>/dev/null || { echo "jq required"; sleep 1; exit 1; }
 state="$cwd/.sisyphus/sessions/$session_id/state.json"
 [ ! -f "$state" ] && { echo "No state.json for this session"; sleep 1; exit 1; }
 
-agents_json=$(sisyphus status "$session_id" --json 2>/dev/null)
+agents_json=$(sis status "$session_id" --json 2>/dev/null)
 if [ -z "$agents_json" ]; then
   echo "Failed to read session status"; sleep 1; exit 1
 fi
@@ -1308,12 +1327,12 @@ cd "$cwd" && exec claude --resume "$cid"
 var TAIL_AGENT_LOGS_SCRIPT = `#!/bin/bash
 # Pick a sisyphus agent and view its tmux pane scrollback (last 2000 lines) in less.
 # Uses tmux capture-pane \u2014 no tail -f, no pipe-pane side effects.
-# Assumes macOS (fzf optional). Requires \`sisyphus status --json\`.
+# Assumes macOS (fzf optional). Requires \`sis status --json\`.
 ${SESSION_RESOLVE}
 
 command -v jq &>/dev/null || { echo "jq required"; sleep 1; exit 1; }
 
-agents_json=$(sisyphus status "$session_id" --json 2>/dev/null)
+agents_json=$(sis status "$session_id" --json 2>/dev/null)
 if [ -z "$agents_json" ]; then
   echo "Failed to read session status"; sleep 1; exit 1
 fi
@@ -1350,12 +1369,12 @@ tmux capture-pane -t "$target_pane" -p -S -2000 | less +G
 `;
 var KILL_AGENT_SCRIPT = `#!/bin/bash
 # Pick a sisyphus agent and kill it (with red confirmation prompt).
-# Assumes macOS (fzf optional). Requires \`sisyphus status --json\` and \`sisyphus agent kill\`.
+# Assumes macOS (fzf optional). Requires \`sis status --json\` and \`sis agent kill\`.
 ${SESSION_RESOLVE}
 
 command -v jq &>/dev/null || { echo "jq required"; sleep 1; exit 1; }
 
-agents_json=$(sisyphus status "$session_id" --json 2>/dev/null)
+agents_json=$(sis status "$session_id" --json 2>/dev/null)
 if [ -z "$agents_json" ]; then
   echo "Failed to read session status"; sleep 1; exit 1
 fi
@@ -1387,18 +1406,18 @@ fi
 printf '\\033[31mKill %s? (yes/no): \\033[0m' "\${ids[$idx]}"
 read -r answer
 [ "$answer" = "yes" ] || exit 0
-sisyphus agent kill "\${ids[$idx]}" --session "$session_id"
+sis agent kill "\${ids[$idx]}" --session "$session_id"
 echo ""
 read -n 1 -s -r -p "Press a key to close."
 `;
 var COPY_AGENT_ID_SCRIPT = `#!/bin/bash
 # Pick a sisyphus agent and copy its ID to clipboard.
-# Assumes macOS (pbcopy, fzf optional). Requires \`sisyphus status --json\`.
+# Assumes macOS (pbcopy, fzf optional). Requires \`sis status --json\`.
 ${SESSION_RESOLVE}
 
 command -v jq &>/dev/null || { echo "jq required"; sleep 1; exit 1; }
 
-agents_json=$(sisyphus status "$session_id" --json 2>/dev/null)
+agents_json=$(sis status "$session_id" --json 2>/dev/null)
 if [ -z "$agents_json" ]; then
   echo "Failed to read session status"; sleep 1; exit 1
 fi
@@ -1473,10 +1492,10 @@ tmux display-message "Copied session ID"
 `;
 var COPY_CONTEXT_SCRIPT = `#!/bin/bash
 # Copy the session context XML to clipboard.
-# Assumes macOS (pbcopy). Requires \`sisyphus session context\`.
+# Assumes macOS (pbcopy). Requires \`sis session context\`.
 ${SESSION_RESOLVE}
 
-sisyphus session context "$session_id" --cwd "$cwd" | pbcopy
+sis session context "$session_id" --cwd "$cwd" | pbcopy
 tmux display-message "Copied session context (XML)"
 `;
 var EDIT_CONTEXT_FILE_SCRIPT = `#!/bin/bash
@@ -1537,7 +1556,7 @@ if [ "\${#instruction}" -lt 20 ]; then
 fi
 
 name="explore-$(date +%s)"
-sisyphus agent spawn \\
+sis agent spawn \\
   --agent-type sisyphus:explore \\
   --name "$name" \\
   --session "$session_id" \\
@@ -1571,7 +1590,7 @@ if [ "\${#instruction}" -lt 20 ]; then
 fi
 
 name="debug-$(date +%s)"
-sisyphus agent spawn \\
+sis agent spawn \\
   --agent-type sisyphus:debug \\
   --name "$name" \\
   --session "$session_id" \\
@@ -1619,7 +1638,7 @@ args=()
 [ -n "$clone_name" ] && args+=(--name "$clone_name")
 [ "$copy_strategy" = "y" ] || [ "$copy_strategy" = "Y" ] && args+=(--strategy)
 
-sisyphus session clone "\${args[@]}" "$goal"
+sis session clone "\${args[@]}" "$goal"
 exit_code=$?
 read -n 1 -s -r -p "Press a key to close."
 exit $exit_code
@@ -1627,12 +1646,12 @@ exit $exit_code
 var HISTORY_SCRIPT = `#!/bin/bash
 # Show rich session detail (history command's per-session view) in a popup.
 ${SESSION_RESOLVE}
-sisyphus admin history "$session_id" 2>&1 | less -R
+sis admin history "$session_id" 2>&1 | less -R
 `;
 var RECONNECT_SCRIPT = `#!/bin/bash
 # Reconnect daemon to an orphaned tmux session for the current cwd.
 ${SESSION_RESOLVE}
-sisyphus session reconnect "$session_id"
+sis session reconnect "$session_id"
 exit_code=$?
 read -n 1 -s -r -p "Press a key to close."
 exit $exit_code
@@ -1640,7 +1659,7 @@ exit $exit_code
 var OPEN_SCRATCH_SCRIPT = `#!/bin/bash
 # Open a standalone Claude scratch window in the home tmux session for this cwd.
 # scratch resolves the home session itself via @sisyphus_cwd; no session_id needed.
-exec sisyphus admin scratch
+exec sis admin scratch
 `;
 function installScript(name, content) {
   mkdirSync(join2(globalDir(), "bin"), { recursive: true });
@@ -1717,7 +1736,22 @@ function getExistingBinding(key, table = "root") {
 function isSisyphusBinding(binding) {
   return binding.includes("sisyphus");
 }
-function setupTmuxKeybind(cycleKey = DEFAULT_CYCLE_KEY, prefixKey = DEFAULT_PREFIX_KEY) {
+async function confirmConfAppend(userConf, line) {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) return false;
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve12) => {
+    const question = `
+Sisyphus needs to append one line to ${userConf} so its tmux keybindings persist:
+  ${line}
+
+Append it now? (y/N) `;
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve12(answer.trim().toLowerCase() === "y");
+    });
+  });
+}
+async function setupTmuxKeybind(cycleKey = DEFAULT_CYCLE_KEY, prefixKey = DEFAULT_PREFIX_KEY, opts = {}) {
   installAllScripts();
   if (!tmuxVersionAtLeast(3, 2)) {
     let version = "unknown";
@@ -1735,7 +1769,7 @@ function setupTmuxKeybind(cycleKey = DEFAULT_CYCLE_KEY, prefixKey = DEFAULT_PREF
     if (existing !== null && !isSisyphusBinding(existing)) {
       return {
         status: "conflict",
-        message: `Tmux key ${key} (${label}) is already bound to something else. Run "sisyphus admin setup-keybind <key>" to use a different key.`,
+        message: `Tmux key ${key} (${label}) is already bound to something else. Run "sis admin setup-keybind <key>" to use a different key.`,
         existingBinding: existing
       };
     }
@@ -1757,14 +1791,22 @@ ${bindings.join("\n")}
   const userConf = userTmuxConfPath();
   const markedSourceLine = `source-file ${confPath} ${SISYPHUS_CONF_MARKER}`;
   let persistedToConf = false;
+  let appendDeclined = false;
   if (userConf !== null) {
     const contents = readFileSync(userConf, "utf8");
-    if (!contents.includes(confPath)) {
-      const separator = contents.endsWith("\n") ? "" : "\n";
-      writeFileSync(userConf, `${contents}${separator}${markedSourceLine}
+    if (contents.includes(confPath)) {
+      persistedToConf = true;
+    } else {
+      const shouldAppend = opts.assumeYes ? true : await confirmConfAppend(userConf, markedSourceLine);
+      if (shouldAppend) {
+        const separator = contents.endsWith("\n") ? "" : "\n";
+        writeFileSync(userConf, `${contents}${separator}${markedSourceLine}
 `, "utf8");
+        persistedToConf = true;
+      } else {
+        appendDeclined = true;
+      }
     }
-    persistedToConf = true;
   }
   try {
     for (const b of bindings) {
@@ -1772,6 +1814,16 @@ ${bindings.join("\n")}
     }
   } catch {
   }
+  if (appendDeclined && userConf !== null) {
+    return {
+      status: "conf-modification-declined",
+      message: `Tmux keybindings applied to the live session, but not persisted.
+To persist them, add this line to ${userConf}:
+  ${markedSourceLine}`,
+      manualLine: markedSourceLine,
+      userConf
+    };
+  }
   if (getExistingBinding(cycleKey) !== null && isSisyphusBinding(getExistingBinding(cycleKey))) {
     return {
       status: "already-installed",
@@ -2061,7 +2113,7 @@ async function ensureDaemonInstalled() {
     const plist = generatePlist(nodePath, daemonPath, logPath);
     writeFileSync2(plistPath(), plist, "utf8");
     execSync3(`launchctl load -w ${plistPath()}`);
-    const keybindResult = setupTmuxKeybind();
+    const keybindResult = await setupTmuxKeybind();
     await ensureRequiredPlugins(process.cwd());
     printGettingStarted(keybindResult, sisyphusPlugin);
   }
@@ -2102,24 +2154,26 @@ function printGettingStarted(keybindResult, sisyphusPlugin) {
     lines.push(`Tmux keybind: ${keybindResult.message}`, "");
   } else if (keybindResult.status === "conflict") {
     lines.push(`Keybind: ${keybindResult.message}`, "");
+  } else if (keybindResult.status === "conf-modification-declined") {
+    lines.push(keybindResult.message, "");
   }
   if (sisyphusPlugin.installed && sisyphusPlugin.autoInstalled) {
     lines.push(`Sisyphus plugin installed: sisyphus@sisyphus \u2192 ${sisyphusPlugin.installPath}`, "");
   } else if (!sisyphusPlugin.installed) {
-    lines.push("Sisyphus plugin: failed to install (run `sisyphus admin setup` to retry; needs `claude` CLI)", "");
+    lines.push("Sisyphus plugin: failed to install (run `sis admin setup` to retry; needs `claude` CLI)", "");
   }
   lines.push(
-    "Run `sisyphus admin getting-started` for a complete usage guide.",
+    "Run `sis admin getting-started` for a complete usage guide.",
     ""
   );
   console.log(lines.join("\n"));
 }
 function testConnection() {
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     const sock = connect2(socketPath());
     sock.on("connect", () => {
       sock.destroy();
-      resolve11();
+      resolve12();
     });
     sock.on("error", (err) => {
       sock.destroy();
@@ -2128,7 +2182,7 @@ function testConnection() {
   });
 }
 function sleep(ms) {
-  return new Promise((resolve11) => setTimeout(resolve11, ms));
+  return new Promise((resolve12) => setTimeout(resolve12, ms));
 }
 async function waitForDaemon(maxWaitMs = 6e3) {
   const start = Date.now();
@@ -2164,7 +2218,7 @@ function rawSend2(request, timeoutMs = 1e4) {
   return rawSend(request, timeoutMs);
 }
 async function sendRequest(request, timeoutMs) {
-  const sleep2 = (ms) => new Promise((resolve11) => setTimeout(resolve11, ms));
+  const sleep2 = (ms) => new Promise((resolve12) => setTimeout(resolve12, ms));
   const MAX_ATTEMPTS = 5;
   const RETRY_DELAY_MS = 2e3;
   let installedDaemon = false;
@@ -2218,7 +2272,7 @@ async function sendRequest(request, timeoutMs) {
     }
     lines.push(
       "",
-      "  Diagnose: sisyphus admin doctor",
+      "  Diagnose: sis admin doctor",
       "  Logs: tail -f ~/.sisyphus/daemon.log"
     );
     throw new Error(lines.join("\n"));
@@ -2252,6 +2306,9 @@ function getTmuxSessionInfo() {
 function shellQuote(s) {
   return `'${s.replace(/'/g, "'\\''")}'`;
 }
+function validateRepoName(repo) {
+  return !repo.includes("/") && !repo.includes("\\") && !repo.includes("..");
+}
 function escapeAppleScript(s) {
   return s.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
 }
@@ -2353,7 +2410,7 @@ function registerStart(program2) {
         console.log(`Tmux session: ${tmuxSessionName}`);
         console.log(`  tmux attach -t ${tmuxSessionName}`);
       }
-      console.log(`Monitor: sisyphus status ${sessionId}`);
+      console.log(`Monitor: sis status ${sessionId}`);
       return;
     }
     let tmuxSession;
@@ -2397,7 +2454,7 @@ function registerStart(program2) {
     if (!process.env["TMUX"]) {
       attachToTmuxSession(tmuxSession);
     }
-    console.log(`Monitor: sisyphus status ${sessionId}`);
+    console.log(`Monitor: sis status ${sessionId}`);
   });
 }
 
@@ -2720,7 +2777,7 @@ function registerList(program2) {
       if (sessions.length === 0) {
         if (filtered && totalCount && totalCount > 0) {
           console.log(`No sessions in this project. ${totalCount} session(s) in other projects.`);
-          console.log(`${DIM2}Run ${RESET2}sisyphus list --all${DIM2} to show all.${RESET2}`);
+          console.log(`${DIM2}Run ${RESET2}sis list --all${DIM2} to show all.${RESET2}`);
         } else {
           console.log("No sessions");
         }
@@ -2738,7 +2795,7 @@ function registerList(program2) {
       if (filtered && totalCount && totalCount > sessions.length) {
         const otherCount = totalCount - sessions.length;
         console.log(`
-${DIM2}${otherCount} more session(s) in other projects. Run ${RESET2}sisyphus list --all${DIM2} to show all.${RESET2}`);
+${DIM2}${otherCount} more session(s) in other projects. Run ${RESET2}sis list --all${DIM2} to show all.${RESET2}`);
       }
     } else {
       console.error(`Error: ${response.error}`);
@@ -3073,17 +3130,21 @@ function inlineBodyPath(deckPath, bodyPath) {
   const deckDir = dirname2(deckPath);
   const joined = resolve2(deckDir, bodyPath);
   if (!existsSync5(joined)) {
-    throw new Error(`bodyPath does not exist: ${bodyPath}`);
+    throw new Error(
+      `bodyPath does not exist: '${bodyPath}' (resolved against deck dir '${deckDir}'). bodyPath is interpreted relative to the deck JSON's directory; place the body file there and use a relative path (e.g. "completion-summary.md").`
+    );
   }
   const stat = lstatSync(joined);
   if (!stat.isFile()) {
-    throw new Error(`bodyPath must be a regular file: ${bodyPath}`);
+    throw new Error(`bodyPath must be a regular file (not a symlink, directory, or special file): ${bodyPath}`);
   }
   const realResolved = realpathSync(joined);
   const realDeckDir = realpathSync(deckDir);
   const prefix = realDeckDir + sep;
   if (realResolved !== realDeckDir && !realResolved.startsWith(prefix)) {
-    throw new Error(`bodyPath escapes deck directory (outside): ${bodyPath}`);
+    throw new Error(
+      `bodyPath '${bodyPath}' escapes the deck's directory ('${realDeckDir}'). bodyPath is resolved relative to the deck JSON file and must stay inside its directory (no '..', absolute paths pointing elsewhere, or symlinks out). Fix: write the deck JSON next to the body file (e.g. both inside $SISYPHUS_SESSION_DIR/context/) and use a relative path like "completion-summary.md".`
+    );
   }
   return readFileSync8(joined, "utf-8");
 }
@@ -3464,12 +3525,47 @@ Posts a deck of questions to the user's dashboard inbox. They walk through it an
 
 The CLI always blocks until the user answers (which can take 10+ minutes).
 
-- **Orchestrator:** invoke synchronously so the orchestrator's pane stays alive while the bash blocks. Daemon refuses \`sisyphus orch yield\` while orchestrator owns a pending deck; foreground is the supported pattern.
+- **Orchestrator:** invoke synchronously so the orchestrator's pane stays alive while the bash blocks. Daemon refuses \`sis orch yield\` while orchestrator owns a pending deck; foreground is the supported pattern.
 - **Agents / one-off Claude Code sessions:** invoke through the Bash tool with \`run_in_background: true\` and end your turn \u2014 the bash completion notification wakes you with stdout ready to parse.
 
 For guidance on when to use a deck, how to design options the user can actually choose between, and how to bundle related questions into one deck, read the \`humanloop\` skill before authoring.
 
-Deck JSON: an object with \`interactions: [{ id, title, options, kind?, allowFreetext?, body? | bodyPath?, ... }]\`. Validation errors at submit are precise \u2014 trust them.
+DECK JSON SCHEMA
+  { "title"?: string, "interactions": Interaction[] }    // interactions[] non-empty
+
+  Interaction:
+    id              string, /^[A-Za-z0-9_-]+$/, max 64 chars, unique within deck
+    title           string (required, non-empty)
+    subtitle?       string
+    body?           string                    // markdown rendered in dashboard
+    bodyPath?       string                    // path RELATIVE to the deck JSON's directory
+                                              // and must resolve INSIDE that directory
+                                              // (no '..', no symlinks out, no absolute
+                                              // paths pointing elsewhere). Mutually
+                                              // exclusive with 'body'. To use bodyPath,
+                                              // write the deck JSON next to the markdown
+                                              // file (e.g. both in
+                                              // $SISYPHUS_SESSION_DIR/context/) and pass
+                                              // a basename like "summary.md".
+    kind?           "notify" | "validation" | "decision" | "context" | "error"
+                                              // display hint for inbox icon/sort weight.
+                                              // No other values accepted.
+    options         Option[]                  // 2\u20134 options recommended (see humanloop)
+    allowFreetext?  boolean
+    freetextLabel?  string
+
+  Option:
+    id              string (required)
+    label           string (required)
+    description?    string
+    shortcut?       string
+
+OUTPUT
+  On answer, stdout is one line of JSON:
+    { "responses": [{ "id", "selectedOptionId"?, "freetext"? }, ...], "completedAt" }
+  Branch on each response by its interaction \`id\`.
+
+Validation errors at submit are precise \u2014 read them, don't guess.
 `).action(async (file, opts) => {
     if (!file) {
       ask.help();
@@ -3739,7 +3835,7 @@ function registerComplete(program2) {
       console.log("Session completed.");
       console.log(`
 To keep working in this session:`);
-      console.log(`  sisyphus session continue   # reactivate session and clear roadmap for new work`);
+      console.log(`  sis session continue   # reactivate session and clear roadmap for new work`);
     } else {
       console.error(`Error: ${response.error}`);
       process.exit(1);
@@ -3761,7 +3857,7 @@ function registerRollback(program2) {
     if (response.ok) {
       const data = response.data;
       console.log(`Session ${sessionId} rolled back to cycle ${data.restoredToCycle}.`);
-      console.log(`Session is now paused. Use 'sisyphus session resume ${sessionId}' to respawn the orchestrator.`);
+      console.log(`Session is now paused. Use 'sis session resume ${sessionId}' to respawn the orchestrator.`);
     } else {
       console.error(`Error: ${response.error}`);
       process.exit(1);
@@ -3797,7 +3893,7 @@ function registerClone(program2) {
     }
     const agentId = process.env.SISYPHUS_AGENT_ID;
     if (agentId !== "orchestrator") {
-      console.error("Error: clone can only be called by the orchestrator. Use sisyphus message to ask the orchestrator to clone.");
+      console.error("Error: clone can only be called by the orchestrator. Use sis message to ask the orchestrator to clone.");
       process.exit(1);
     }
     const request = {
@@ -4037,12 +4133,12 @@ import { join as join14, resolve as resolve5 } from "path";
 // src/cli/stdin.ts
 function readStdin2() {
   if (process.stdin.isTTY) return Promise.resolve(null);
-  return new Promise((resolve11, reject) => {
+  return new Promise((resolve12, reject) => {
     const chunks = [];
     process.stdin.on("data", (chunk) => chunks.push(chunk));
     process.stdin.on("end", () => {
       const text = Buffer.concat(chunks).toString("utf-8").trim();
-      resolve11(text || null);
+      resolve12(text || null);
     });
     process.stdin.on("error", reject);
   });
@@ -4198,11 +4294,11 @@ function registerSpawn(program2) {
     if (response.ok) {
       const agentId = response.data?.agentId;
       console.log(`Agent spawned: ${agentId}`);
-      console.log(`Tip: \`sisyphus agent await ${agentId}\` blocks for the report and consumes it inline (won't appear in next cycle).`);
-      console.log("Run `sisyphus orch yield` when done spawning agents.");
+      console.log(`Tip: \`sis agent await ${agentId}\` blocks for the report and consumes it inline (won't appear in next cycle).`);
+      console.log("Run `sis orch yield` when done spawning agents.");
     } else {
       console.error(`Error: ${response.error}`);
-      if (response.error?.includes("Unknown session")) console.error("Hint: run `sisyphus list` to see active sessions.");
+      if (response.error?.includes("Unknown session")) console.error("Hint: run `sis list` to see active sessions.");
       process.exit(1);
     }
   });
@@ -4819,11 +4915,11 @@ function printResults(result, daemonOk, keybindMsg) {
     }
   }
   console.log("");
-  console.log("Run 'sisyphus admin getting-started' for a usage guide.");
+  console.log("Run 'sis admin getting-started' for a usage guide.");
   console.log("");
 }
 function registerSetup(program2) {
-  program2.command("setup").description("One-time setup: install dependencies, daemon, keybindings, and commands").action(async () => {
+  program2.command("setup").description("One-time setup: install dependencies, daemon, keybindings, and commands").option("-y, --yes", "Skip confirmation prompts (e.g. before modifying ~/.tmux.conf)").action(async (opts) => {
     const result = runOnboarding();
     let daemonOk = false;
     try {
@@ -4832,7 +4928,11 @@ function registerSetup(program2) {
     } catch {
       daemonOk = isInstalled();
     }
-    const keybindResult = setupTmuxKeybind();
+    const keybindResult = await setupTmuxKeybind(
+      DEFAULT_CYCLE_KEY,
+      DEFAULT_PREFIX_KEY,
+      { assumeYes: opts.yes }
+    );
     let keybindMsg;
     if (keybindResult.status === "installed" || keybindResult.status === "already-installed") {
       keybindMsg = `${DEFAULT_CYCLE_KEY} cycle, ${DEFAULT_PREFIX_KEY} prefix (h=dashboard, x=kill)`;
@@ -4845,9 +4945,9 @@ function registerSetup(program2) {
 
 // src/cli/commands/setup-keybind.ts
 function registerSetupKeybind(program2) {
-  program2.command("setup-keybind [cycle-key]").description("Install sisyphus tmux keybindings (default: M-s cycle, C-s prefix)").action(async (key) => {
+  program2.command("setup-keybind [cycle-key]").description("Install sisyphus tmux keybindings (default: M-s cycle, C-s prefix)").option("-y, --yes", "Skip confirmation prompt before modifying ~/.tmux.conf").action(async (key, opts) => {
     const resolvedKey = key ?? DEFAULT_CYCLE_KEY;
-    const result = setupTmuxKeybind(resolvedKey);
+    const result = await setupTmuxKeybind(resolvedKey, void 0, { assumeYes: opts.yes });
     switch (result.status) {
       case "installed":
         console.log(result.message);
@@ -4861,20 +4961,56 @@ function registerSetupKeybind(program2) {
         console.log(`  ${result.existingBinding}`);
         console.log("");
         console.log("Use a different key, e.g.:");
-        console.log("  sisyphus admin setup-keybind M-S");
-        console.log("  sisyphus admin setup-keybind M-w");
-        console.log("  sisyphus admin setup-keybind M-j");
+        console.log("  sis admin setup-keybind M-S");
+        console.log("  sis admin setup-keybind M-w");
+        console.log("  sis admin setup-keybind M-j");
         break;
       case "unsupported-tmux":
         console.log(result.message);
         break;
+      case "conf-modification-declined":
+        console.log(result.message);
+        console.log("");
+        console.log("Re-run with --yes to skip the prompt.");
+        break;
     }
   });
 }
 
+// src/cli/commands/home-init.ts
+import { execSync as execSync11 } from "child_process";
+function registerHomeInit(parent) {
+  parent.command("home-init <name> <cwd>").description("Bootstrap a tmux home session with the sisyphus dashboard.").action((name, cwd) => {
+    ensureSession(name, cwd);
+    setSessionCwd(name, cwd);
+    openDashboardWindow(name, cwd);
+  });
+}
+function sessionExists(name) {
+  try {
+    execSync11(`tmux has-session -t ${shellQuote(name)}`, { stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function ensureSession(name, cwd) {
+  if (sessionExists(name)) return;
+  execSync11(
+    `tmux new-session -d -s ${shellQuote(name)} -c ${shellQuote(cwd)}`,
+    { stdio: "pipe" }
+  );
+}
+function setSessionCwd(name, cwd) {
+  execSync11(
+    `tmux set-option -t ${shellQuote(name)} @sisyphus_cwd ${shellQuote(cwd.replace(/\/+$/, ""))}`,
+    { stdio: "pipe" }
+  );
+}
+
 // src/cli/commands/doctor.ts
 init_paths();
-import { execSync as execSync11 } from "child_process";
+import { execSync as execSync12 } from "child_process";
 import { existsSync as existsSync15, statSync as statSync3 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join16 } from "path";
@@ -4887,7 +5023,7 @@ function checkNodeVersion() {
 }
 function checkClaudeCli() {
   try {
-    execSync11("which claude", { stdio: "pipe" });
+    execSync12("which claude", { stdio: "pipe" });
     return { name: "Claude CLI", status: "ok", detail: "Found on PATH" };
   } catch {
     return {
@@ -4900,7 +5036,7 @@ function checkClaudeCli() {
 }
 function checkGit() {
   try {
-    const version = execSync11("git --version", { encoding: "utf-8", stdio: "pipe" }).trim();
+    const version = execSync12("git --version", { encoding: "utf-8", stdio: "pipe" }).trim();
     return { name: "git", status: "ok", detail: version };
   } catch {
     return { name: "git", status: "fail", detail: "Not found on PATH", fix: "Install git: https://git-scm.com/downloads" };
@@ -4908,7 +5044,7 @@ function checkGit() {
 }
 function checkTmuxVersion() {
   try {
-    const version = execSync11("tmux -V", { encoding: "utf-8", stdio: "pipe" }).trim();
+    const version = execSync12("tmux -V", { encoding: "utf-8", stdio: "pipe" }).trim();
     const match = version.match(/(\d+\.\d+)/);
     if (!match) return { name: "tmux version", status: "warn", detail: `Could not parse version: ${version}` };
     const ver = parseFloat(match[1]);
@@ -4930,7 +5066,7 @@ function checkDaemonInstalled() {
       name: "Daemon plist",
       status: "fail",
       detail: "Not installed",
-      fix: 'Run any sisyphus command to auto-install, or: sisyphus start "test"'
+      fix: 'Run any sis command to auto-install, or: sis start "test"'
     };
   }
   const pid = daemonPidPath();
@@ -4957,7 +5093,7 @@ function checkDaemonRunning() {
   }
   try {
     const sock = socketPath();
-    execSync11(`test -S "${sock}"`, { stdio: "pipe" });
+    execSync12(`test -S "${sock}"`, { stdio: "pipe" });
     return { name: "Daemon process", status: "ok", detail: `Socket at ${sock}` };
   } catch {
     return {
@@ -4970,13 +5106,13 @@ function checkDaemonRunning() {
 }
 function checkTmux() {
   try {
-    execSync11("which tmux", { stdio: "pipe" });
+    execSync12("which tmux", { stdio: "pipe" });
   } catch {
     const installHint = process.platform === "darwin" ? "brew install tmux" : "apt install tmux (Debian/Ubuntu) or your package manager";
     return { name: "tmux", status: "fail", detail: "Not found on PATH", fix: installHint };
   }
   try {
-    execSync11("tmux list-sessions", { stdio: "pipe" });
+    execSync12("tmux list-sessions", { stdio: "pipe" });
     return { name: "tmux", status: "ok", detail: "Running" };
   } catch {
     return { name: "tmux", status: "warn", detail: "Installed but no server running" };
@@ -4989,7 +5125,7 @@ function checkCycleScript() {
       name: "Cycle script",
       status: "fail",
       detail: `Not found at ${path}`,
-      fix: "sisyphus admin setup-keybind"
+      fix: "sis admin setup-keybind"
     };
   }
   try {
@@ -5020,7 +5156,7 @@ function checkTmuxKeybind() {
       name: `Tmux keybind (${DEFAULT_CYCLE_KEY})`,
       status: "fail",
       detail: "Not bound",
-      fix: "sisyphus admin setup-keybind"
+      fix: "sis admin setup-keybind"
     };
   }
   if (isSisyphusBinding(existing)) {
@@ -5030,7 +5166,7 @@ function checkTmuxKeybind() {
     name: `Tmux keybind (${DEFAULT_CYCLE_KEY})`,
     status: "warn",
     detail: `Bound to something else: ${existing}`,
-    fix: "sisyphus admin setup-keybind M-S  (or another free key)"
+    fix: "sis admin setup-keybind M-S  (or another free key)"
   };
 }
 function checkGlobalDir() {
@@ -5081,13 +5217,13 @@ function checkSisyphusPlugin() {
     name: "sisyphus@sisyphus plugin",
     status: "warn",
     detail: "Not installed (slash commands /sisyphus:begin, /sisyphus:autopsy, /sisyphus:configure-upload unavailable)",
-    fix: "sisyphus admin setup"
+    fix: "sis admin setup"
   };
 }
 function checkTermrender() {
   if (isTermrenderAvailable()) {
     try {
-      const version = execSync11("termrender --version", { encoding: "utf-8", stdio: "pipe" }).trim();
+      const version = execSync12("termrender --version", { encoding: "utf-8", stdio: "pipe" }).trim();
       return { name: "termrender", status: "ok", detail: version };
     } catch {
       return { name: "termrender", status: "ok", detail: "installed" };
@@ -5106,7 +5242,7 @@ function checkNvim() {
     return { name: "nvim", status: "warn", detail: "Not installed", fix };
   }
   try {
-    const version = execSync11("nvim --version", { encoding: "utf-8", stdio: "pipe" }).split("\n")[0]?.replace("NVIM ", "");
+    const version = execSync12("nvim --version", { encoding: "utf-8", stdio: "pipe" }).split("\n")[0]?.replace("NVIM ", "");
     return { name: "nvim", status: "ok", detail: version ?? "installed" };
   } catch {
     return { name: "nvim", status: "ok", detail: "installed" };
@@ -5208,13 +5344,13 @@ function registerInit(program2) {
 }
 
 // src/cli/commands/uninstall.ts
-import { createInterface } from "readline";
+import { createInterface as createInterface2 } from "readline";
 async function confirm(question) {
-  const rl = createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve11) => {
+  const rl = createInterface2({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve12) => {
     rl.question(question, (answer) => {
       rl.close();
-      resolve11(answer.trim().toLowerCase() === "y");
+      resolve12(answer.trim().toLowerCase() === "y");
     });
   });
 }
@@ -5235,31 +5371,31 @@ function registerUninstall(program2) {
 // src/cli/commands/configure-upload.ts
 init_paths();
 import { chmodSync as chmodSync2, existsSync as existsSync17, mkdirSync as mkdirSync8, readFileSync as readFileSync19, writeFileSync as writeFileSync10 } from "fs";
-import { createInterface as createInterface2 } from "readline";
+import { createInterface as createInterface3 } from "readline";
 import { dirname as dirname6 } from "path";
 async function readUrlFromInput(interactive) {
   if (interactive) {
-    return new Promise((resolve11) => {
-      const rl = createInterface2({ input: process.stdin, output: process.stdout });
+    return new Promise((resolve12) => {
+      const rl = createInterface3({ input: process.stdin, output: process.stdout });
       rl.question("Paste the upload URL (with embedded ?token=): ", (answer) => {
         rl.close();
-        resolve11(answer.trim());
+        resolve12(answer.trim());
       });
     });
   }
-  return new Promise((resolve11) => {
+  return new Promise((resolve12) => {
     const chunks = [];
     process.stdin.setEncoding("utf-8");
     process.stdin.on("data", (chunk) => {
       chunks.push(chunk);
     });
     process.stdin.on("end", () => {
-      resolve11(chunks.join("").trim());
+      resolve12(chunks.join("").trim());
     });
   });
 }
 function registerConfigureUpload(program2) {
-  program2.command("configure-upload").description("Configure the upload proxy from a token-bearing URL (writes ~/.sisyphus/config.json)").argument("[url]", "Worker URL with embedded ?token= query (https://worker/upload?token=sisyphus_pat_...); omit to read from stdin").option("--stdin", "Read URL from stdin (pipe-friendly: pbpaste | sisyphus admin configure-upload --stdin)").action(async (urlArg, opts) => {
+  program2.command("configure-upload").description("Configure the upload proxy from a token-bearing URL (writes ~/.sisyphus/config.json)").argument("[url]", "Worker URL with embedded ?token= query (https://worker/upload?token=sisyphus_pat_...); omit to read from stdin").option("--stdin", "Read URL from stdin (pipe-friendly: pbpaste | sis admin configure-upload --stdin)").action(async (urlArg, opts) => {
     let rawUrl;
     const fromStdin = opts.stdin || urlArg === "-" || !urlArg && process.stdin.isTTY === false;
     const fromInteractive = !urlArg && !opts.stdin && process.stdin.isTTY === true;
@@ -5268,7 +5404,7 @@ function registerConfigureUpload(program2) {
     } else {
       rawUrl = urlArg;
       console.warn(
-        "warning: passing the token on argv exposes it via `ps` and shell history; pipe it on stdin instead: `pbpaste | sisyphus admin configure-upload --stdin`"
+        "warning: passing the token on argv exposes it via `ps` and shell history; pipe it on stdin instead: `pbpaste | sis admin configure-upload --stdin`"
       );
     }
     let parsed;
@@ -5309,7 +5445,7 @@ function registerConfigureUpload(program2) {
 }
 
 // src/cli/commands/getting-started.ts
-import { execSync as execSync12 } from "child_process";
+import { execSync as execSync13 } from "child_process";
 import { dirname as dirname7, join as join18 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 function templatePath(name) {
@@ -5321,7 +5457,7 @@ function isClaudeCode() {
 function printNonClaudeMessage() {
   console.log(`
   \u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557
-  \u2551   sisyphus admin getting-started \u2014 Interactive Tutorial \u2551
+  \u2551   sis admin getting-started \u2014 Interactive Tutorial \u2551
   \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D
 
   This command provides an interactive tutorial best experienced
@@ -5329,11 +5465,11 @@ function printNonClaudeMessage() {
 
   To start:
     1. Open Claude Code:  claude
-    2. Run:               sisyphus admin getting-started
+    2. Run:               sis admin getting-started
 
   If you just want the quick reference, run:
-    sisyphus --help
-    sisyphus admin doctor
+    sis --help
+    sis admin doctor
 `);
 }
 function printStep0() {
@@ -5363,14 +5499,14 @@ This tutorial has 6 steps. Share this overview so the user knows what's coming a
 
 | Step | Topic | Command |
 |------|-------|---------|
-| 0 | Entry & tmux gate (you are here) | \`sisyphus admin getting-started\` |
+| 0 | Entry & tmux gate (you are here) | \`sis admin getting-started\` |
 | 1 | Tmux basics \u2014 sessions, panes, navigation | \`--tutorial 1\` |
 | 2 | Nvim basics \u2014 open, save, quit (optional) | \`--tutorial 2\` |
 | 3 | Sisyphus concepts \u2014 session model & keybinds | \`--tutorial 3\` |
 | 4 | Live demo \u2014 launch and observe a real session | \`--tutorial 4\` |
 | 5 | What's next \u2014 real usage guidance & suggestions | \`--tutorial 5\` |
 
-Tell the user they can skip to any step with \`sisyphus admin getting-started --tutorial <N>\`.
+Tell the user they can skip to any step with \`sis admin getting-started --tutorial <N>\`.
 
 ## Instructions for Claude
 
@@ -5380,8 +5516,8 @@ You are guiding a user through the Sisyphus interactive tutorial.
 
 Ask the user if they'd like the interactive walkthrough. If they decline, give this quick summary and stop:
 
-> Sisyphus is a multi-agent orchestrator for Claude Code. Start a session with \`sisyphus start "task"\`,
-> monitor with \`sisyphus dashboard\`, and check health with \`sisyphus admin doctor\`.
+> Sisyphus is a multi-agent orchestrator for Claude Code. Start a session with \`sis start "task"\`,
+> monitor with \`sis dashboard\`, and check health with \`sis admin doctor\`.
 
 ### If they want the tutorial:
 
@@ -5403,17 +5539,17 @@ Ask the user if they'd like the interactive walkthrough. If they decline, give t
 - Tell them to install tmux:
   - macOS: \`brew install tmux\`
   - Linux: \`apt install tmux\` or their package manager
-- After install, re-run: \`sisyphus admin getting-started --tutorial 0\` to verify
+- After install, re-run: \`sis admin getting-started --tutorial 0\` to verify
 
 **Case 2: tmux installed but NOT in a tmux session (inTmux: false)**
 - Tell the user they need to be inside a tmux session for the tutorial
 - Have them run: \`tmux new-session\`
 - Then resume the conversation with Claude in the new tmux session: \`claude\`
-- Then re-run: \`sisyphus admin getting-started --tutorial 0\` to verify
+- Then re-run: \`sis admin getting-started --tutorial 0\` to verify
 
 **Case 3: In tmux (inTmux: true)**
 - Tell the user they're all set \u2014 tmux is running
-- Proceed by running: \`sisyphus admin getting-started --tutorial 1\`
+- Proceed by running: \`sis admin getting-started --tutorial 1\`
 </claude-instructions>
 `);
 }
@@ -5491,7 +5627,7 @@ Ask the user to confirm: "Can you navigate between panes with Ctrl+h and Ctrl+l?
 
 Once confirmed, proceed:
 \`\`\`
-sisyphus admin getting-started --tutorial 2
+sis admin getting-started --tutorial 2
 \`\`\`
 </claude-instructions>
 `);
@@ -5533,7 +5669,7 @@ Ask if they were able to edit and save the file (or if they skipped).
 
 Proceed:
 \`\`\`
-sisyphus admin getting-started --tutorial 3
+sis admin getting-started --tutorial 3
 \`\`\`
 </claude-instructions>
 `);
@@ -5594,7 +5730,7 @@ function printStep3() {
   > typing special characters (accents, symbols). The right Option key
   > becomes your "Meta" key for tmux/sisyphus keybinds.
 
-  After they change it, have them verify by re-running \`sisyphus admin doctor\` \u2014 look for "Right Option Key: Esc+".
+  After they change it, have them verify by re-running \`sis admin doctor\` \u2014 look for "Right Option Key: Esc+".
 
 - **rightOptionKeyStatus: not-iterm** \u2014 They're not using iTerm2. Explain:
   > Sisyphus keybinds use Option as Meta. In iTerm2 this is configured via
@@ -5640,12 +5776,12 @@ Two keybinds to remember (both use the RIGHT Option key):
 
 ### 4. Verify keybinds are installed
 
-Run \`sisyphus admin doctor\` and check the output. Look for:
+Run \`sis admin doctor\` and check the output. Look for:
 - "Cycle script" \u2014 should be \u2713
 - "Tmux keybind" \u2014 should be \u2713
 - "Right Option Key" \u2014 should be "Esc+"
 
-If cycle script or keybind is missing, run: \`sisyphus admin setup-keybind\`
+If cycle script or keybind is missing, run: \`sis admin setup-keybind\`
 
 ### 5. Test the keybind
 
@@ -5657,12 +5793,12 @@ If they see \`\xDF\` or similar, circle back to the Right Option Key setup above
 
 Confirm:
 - They understand the two-session model (their session vs sisyphus session)
-- \`sisyphus admin doctor\` shows keybinds installed AND Right Option Key: Esc+
+- \`sis admin doctor\` shows keybinds installed AND Right Option Key: Esc+
 - Right Option + s doesn't produce a special character
 
 Proceed:
 \`\`\`
-sisyphus admin getting-started --tutorial 4
+sis admin getting-started --tutorial 4
 \`\`\`
 </claude-instructions>
 `);
@@ -5678,12 +5814,12 @@ This is the grand finale \u2014 a live demo session.
 
 ### 1. Health check
 
-Run \`sisyphus admin doctor\` first. If any checks are failing, help the user fix them before proceeding.
+Run \`sis admin doctor\` first. If any checks are failing, help the user fix them before proceeding.
 All core checks (tmux, daemon, keybinds) should be \u2713.
 
 ### 2. BEFORE launching: Teach navigation
 
-**This is critical.** When \`sisyphus start\` runs, it auto-opens the dashboard in a new tmux window. The user will suddenly be looking at the dashboard and may feel "stuck". Teach them how to navigate BEFORE launching:
+**This is critical.** When \`sis start\` runs, it auto-opens the dashboard in a new tmux window. The user will suddenly be looking at the dashboard and may feel "stuck". Teach them how to navigate BEFORE launching:
 
 Explain clearly:
 
@@ -5728,7 +5864,7 @@ Tell the user:
 
 Then launch from the demo directory:
 \`\`\`
-cd /tmp/sisyphus-tutorial-demo && sisyphus start "Add three improvements to this todo app: (1) add a priority field (high/medium/low) to todos, (2) add a GET /todos/stats endpoint that returns counts of total/done/pending todos, (3) add tests for the new features. Explain your thinking at each step." -c "TUTORIAL DEMO: A user is watching this session to learn how sisyphus works. Be EXTRA VERBOSE \u2014 explain your reasoning, narrate what you're doing, and make your planning visible. When spawning agents, give each agent context that this is a tutorial demo and they should explain their work clearly. Keep scope small: 2-3 agents, 1-2 cycles."
+cd /tmp/sisyphus-tutorial-demo && sis start "Add three improvements to this todo app: (1) add a priority field (high/medium/low) to todos, (2) add a GET /todos/stats endpoint that returns counts of total/done/pending todos, (3) add tests for the new features. Explain your thinking at each step." -c "TUTORIAL DEMO: A user is watching this session to learn how sisyphus works. Be EXTRA VERBOSE \u2014 explain your reasoning, narrate what you're doing, and make your planning visible. When spawning agents, give each agent context that this is a tutorial demo and they should explain their work clearly. Keep scope small: 2-3 agents, 1-2 cycles."
 \`\`\`
 
 After launching, tell them:
@@ -5741,7 +5877,7 @@ Wait for them to confirm they're back, then start live commentary.
 
 **This is the most important part of the demo.** Don't just launch and wait \u2014 actively narrate.
 
-Once the user is back, start a polling loop. Every ~45 seconds, run \`sisyphus status --verbose <session-id>\` and provide SHORT, contextual commentary about what's happening. The \`--verbose\` flag shows agent instructions, full roadmap, cycle logs, and live pane output from the orchestrator and running agents \u2014 use this rich data to narrate what's actually happening, not just phase names.
+Once the user is back, start a polling loop. Every ~45 seconds, run \`sis status --verbose <session-id>\` and provide SHORT, contextual commentary about what's happening. The \`--verbose\` flag shows agent instructions, full roadmap, cycle logs, and live pane output from the orchestrator and running agents \u2014 use this rich data to narrate what's actually happening, not just phase names.
 
 **How to narrate each phase:**
 
@@ -5780,7 +5916,7 @@ Once the session shows "completed":
 
 Tell the user the demo is done. Then run:
 \`\`\`
-sisyphus admin getting-started --tutorial 5
+sis admin getting-started --tutorial 5
 \`\`\`
 </claude-instructions>
 `);
@@ -5789,11 +5925,11 @@ function printStep5() {
   let recentCommits = "";
   let topLevelFiles = "";
   try {
-    recentCommits = execSync12("git log --oneline -15 2>/dev/null", { encoding: "utf-8" }).trim();
+    recentCommits = execSync13("git log --oneline -15 2>/dev/null", { encoding: "utf-8" }).trim();
   } catch {
   }
   try {
-    topLevelFiles = execSync12("ls -1 2>/dev/null", { encoding: "utf-8" }).trim();
+    topLevelFiles = execSync13("ls -1 2>/dev/null", { encoding: "utf-8" }).trim();
   } catch {
   }
   console.log(`
@@ -5856,7 +5992,7 @@ This is the most important part. Explain clearly:
 The easiest way is the \`/sisyphus:begin\` slash command inside Claude Code. Just tell Claude
 what you want to build and it'll hand it off to sisyphus with the right context.
 
-Or directly: \`sisyphus start "your task" -c "any background context"\`
+Or directly: \`sis start "your task" -c "any background context"\`
 
 ### 4. Suggest real tasks for THEIR codebase
 
@@ -5878,7 +6014,7 @@ Tell them:
 > to understand the philosophy, or you want a deeper rundown on the dashboard,
 > monitoring, configuration, or how to steer sessions \u2014 just ask and I'll explain.
 
-If the user says yes or asks to learn more, run \`sisyphus admin getting-started --explain\`
+If the user says yes or asks to learn more, run \`sis admin getting-started --explain\`
 and use its output to explain the system to them conversationally. Don't dump the whole
 thing \u2014 answer what they're curious about, using the reference as your source material.
 </claude-instructions>
@@ -5894,17 +6030,17 @@ function buildCommandTable(program2) {
     const fmtArgs = (c2) => c2.registeredArguments.map((a) => a.required ? `<${a.name()}>` : `[${a.name()}]`).join(" ");
     if (subs.length === 0) {
       const args2 = fmtArgs(cmd);
-      const usage = args2 ? `sisyphus ${cmd.name()} ${args2}` : `sisyphus ${cmd.name()}`;
+      const usage = args2 ? `sis ${cmd.name()} ${args2}` : `sis ${cmd.name()}`;
       lines.push(`| \`${usage}\` | ${cmd.description()} |`);
     } else {
       if (hasOwnAction) {
         const args2 = fmtArgs(cmd);
-        const usage = args2 ? `sisyphus ${cmd.name()} ${args2}` : `sisyphus ${cmd.name()}`;
+        const usage = args2 ? `sis ${cmd.name()} ${args2}` : `sis ${cmd.name()}`;
         lines.push(`| \`${usage}\` | ${cmd.description()} |`);
       }
       for (const sub of subs) {
         const args2 = fmtArgs(sub);
-        const usage = args2 ? `sisyphus ${cmd.name()} ${sub.name()} ${args2}` : `sisyphus ${cmd.name()} ${sub.name()}`;
+        const usage = args2 ? `sis ${cmd.name()} ${sub.name()} ${args2}` : `sis ${cmd.name()} ${sub.name()}`;
         lines.push(`| \`${usage}\` | ${sub.description()} |`);
       }
     }
@@ -6054,7 +6190,7 @@ code that looks right and code that works.
   \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510
   \u2502                    SESSION LIFECYCLE                             \u2502
   \u2502                                                                  \u2502
-  \u2502  sisyphus start "task"                                           \u2502
+  \u2502  sis start "task"                                                \u2502
   \u2502       \u2502                                                          \u2502
   \u2502       \u25BC                                                          \u2502
   \u2502  \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510     spawn agents     \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510               \u2502
@@ -6062,7 +6198,7 @@ code that looks right and code that works.
   \u2502  \u2502 plans   \u2502     then yields      \u2502  in parallel \u2502               \u2502
   \u2502  \u2514\u2500\u2500\u2500\u2500\u252C\u2500\u2500\u2500\u2500\u2518                      \u2514\u2500\u2500\u2500\u2500\u2500\u2500\u252C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518               \u2502
   \u2502       \u2502                                  \u2502 each calls            \u2502
-  \u2502       \u2502 orchestrator                     \u2502 sisyphus agent submit \u2502
+  \u2502       \u2502 orchestrator                     \u2502 sis agent submit      \u2502
   \u2502       \u2502 is KILLED                        \u2502 when done             \u2502
   \u2502       \u2502                                  \u25BC                       \u2502
   \u2502       \u2502                           \u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510               \u2502
@@ -6097,7 +6233,7 @@ This means it never runs out of context, no matter how many cycles a session tak
 
 ## The Dashboard
 
-The dashboard is a real-time TUI that shows session state. Launch with \`sisyphus dashboard\`
+The dashboard is a real-time TUI that shows session state. Launch with \`sis dashboard\`
 or it auto-opens when a session starts.
 
 **Dashboard sections:**
@@ -6136,14 +6272,14 @@ Sisyphus sessions should be actively monitored. Here's what to watch for:
 
 **When to intervene:**
 - Use \`m\` in the dashboard to message the orchestrator with corrections
-- Use \`sisyphus session kill <id>\` to stop a runaway session
-- Use \`sisyphus session resume <id> "new instructions"\` to restart with different direction
+- Use \`sis session kill <id>\` to stop a runaway session
+- Use \`sis session resume <id> "new instructions"\` to restart with different direction
 
 **Useful monitoring commands:**
 \`\`\`
-sisyphus status <id>              # Quick status check
-sisyphus status --verbose <id>    # Full detail: roadmap, pane output, agent instructions
-sisyphus dashboard                # Interactive TUI
+sis status <id>              # Quick status check
+sis status --verbose <id>    # Full detail: roadmap, pane output, agent instructions
+sis dashboard                # Interactive TUI
 tail -f ~/.sisyphus/daemon.log    # Daemon activity log
 \`\`\`
 
@@ -6209,11 +6345,11 @@ Then describe your task. Claude will hand it off with the right context.
 
 **Direct CLI:**
 \`\`\`
-sisyphus start "task description" -c "background context"
-sisyphus start "Implement @requirements.md" -n my-feature
+sis start "task description" -c "background context"
+sis start "Implement @requirements.md" -n my-feature
 \`\`\`
 
-**Reference files with @**: \`sisyphus start "Build @docs/spec.md"\` \u2014 the orchestrator
+**Reference files with @**: \`sis start "Build @docs/spec.md"\` \u2014 the orchestrator
 will read the referenced file as part of its planning.
 
 **The -c flag** adds background context the orchestrator sees but doesn't act on directly.
@@ -6235,10 +6371,10 @@ sisyphusd restart
 **Keybinds not working (special characters appear):**
 iTerm2 \u2192 Settings \u2192 Profiles \u2192 Keys \u2192 Right Option Key \u2192 Esc+
 
-**Agents stuck:** Check \`sisyphus status --verbose <id>\` to see pane output. If an
+**Agents stuck:** Check \`sis status --verbose <id>\` to see pane output. If an
 agent is waiting for input, kill the session and restart with clearer instructions.
 
-**Dashboard not opening:** Run \`sisyphus dashboard\` manually. Must be inside tmux.
+**Dashboard not opening:** Run \`sis dashboard\` manually. Must be inside tmux.
 
 **Session seems hung:** Check \`tail -20 ~/.sisyphus/daemon.log\` for errors.
 The daemon polls panes every 2s \u2014 if a pane dies unexpectedly, it'll be detected.
@@ -6558,7 +6694,7 @@ function showSession(idOrName, opts) {
     console.log(`${DIM3}Compute:${RESET3} ${formatDuration(computeMs)}  ${DIM3}Interactive:${RESET3} ${formatDuration(interactiveMs)} ${DIM3}(TUI wait time, not compute)${RESET3}`);
   }
   if (s.userBlockedMs > 0) {
-    console.log(`${DIM3}Waiting on user:${RESET3} ${formatDuration(s.userBlockedMs)} ${DIM3}(blocked on sisyphus ask, not compute)${RESET3}`);
+    console.log(`${DIM3}Waiting on user:${RESET3} ${formatDuration(s.userBlockedMs)} ${DIM3}(blocked on sis ask, not compute)${RESET3}`);
   }
   console.log("");
   console.log(`${BOLD3}Task${RESET3}`);
@@ -6960,7 +7096,7 @@ function registerExport(program2) {
     }
     if (!sessionId) {
       console.error("Error: No session ID provided and no active session found.");
-      console.error("Usage: sisyphus admin export [session-id]");
+      console.error("Usage: sis admin export [session-id]");
       process.exit(1);
     }
     try {
@@ -7084,13 +7220,13 @@ function registerUpload(program2) {
     }
     if (!sessionId) {
       console.error("Error: No session ID provided and no active session found.");
-      console.error("Usage: sisyphus admin upload [session-id]");
+      console.error("Usage: sis admin upload [session-id]");
       process.exit(1);
     }
     const config = loadConfig(cwd);
     if (!isUploadConfigured(config.upload)) {
       console.error(
-        "Error: upload not configured. Run 'sisyphus admin configure-upload <url-with-token>' or set { upload: { url, token } } in .sisyphus/config.json."
+        "Error: upload not configured. Run 'sis admin configure-upload <url-with-token>' or set { upload: { url, token } } in .sisyphus/config.json."
       );
       process.exit(1);
     }
@@ -7149,12 +7285,12 @@ function registerUpload(program2) {
 }
 
 // src/cli/commands/scratch.ts
-import { execSync as execSync13 } from "child_process";
+import { execSync as execSync14 } from "child_process";
 function findHomeSession(cwd) {
   const normalizedCwd = cwd.replace(/\/+$/, "");
   let output;
   try {
-    output = execSync13('tmux list-sessions -F "#{session_id}|#{session_name}"', {
+    output = execSync14('tmux list-sessions -F "#{session_id}|#{session_name}"', {
       encoding: "utf-8",
       stdio: ["pipe", "pipe", "pipe"]
     }).trim();
@@ -7168,7 +7304,7 @@ function findHomeSession(cwd) {
     const name = line.slice(pipeIdx + 1);
     if (name.startsWith("ssyph_")) continue;
     try {
-      const val = execSync13(
+      const val = execSync14(
         `tmux show-options -t ${shellQuote(sessId)} -v @sisyphus_cwd`,
         { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }
       ).trim();
@@ -7184,7 +7320,7 @@ function registerScratch(program2) {
     const cwd = opts.cwd ?? process.env["SISYPHUS_CWD"] ?? process.cwd();
     const homeSession = findHomeSession(cwd);
     if (!homeSession) {
-      const current = execSync13('tmux display-message -p "#{session_name}"', {
+      const current = execSync14('tmux display-message -p "#{session_name}"', {
         encoding: "utf-8"
       }).trim();
       openScratchWindow(current, cwd, promptParts.join(" "));
@@ -7194,7 +7330,7 @@ function registerScratch(program2) {
   });
 }
 function openScratchWindow(tmuxSession, cwd, prompt) {
-  const windowId = execSync13(
+  const windowId = execSync14(
     `tmux new-window -t ${shellQuote(tmuxSession + ":")} -n "scratch" -c ${shellQuote(cwd)} -P -F "#{window_id}"`,
     { encoding: "utf-8" }
   ).trim();
@@ -7202,7 +7338,7 @@ function openScratchWindow(tmuxSession, cwd, prompt) {
   if (prompt) {
     cmd += ` -p ${shellQuote(prompt)}`;
   }
-  execSync13(
+  execSync14(
     `tmux send-keys -t ${shellQuote(windowId)} ${shellQuote(cmd)} Enter`
   );
   console.log(`Scratch session opened in ${tmuxSession}`);
@@ -7244,14 +7380,14 @@ File resolution (first match wins):
   3. Most recent session with a requirements.json
 
 Examples:
-  $ sisyphus admin requirements                              Auto-detect from current session
-  $ sisyphus admin requirements path/to/requirements.json    Open a specific file
-  $ sisyphus admin requirements --session-id abc123           Target a specific session
-  $ sisyphus admin requirements --schema                     Print the JSON schema
-  $ sisyphus admin requirements --annotated                  Print schema with writing guidance
-  $ sisyphus admin requirements --export                       Render requirements.md from JSON
-  $ sisyphus admin requirements --export --session-id abc123   Target a specific session
-  $ sisyphus admin requirements --export --force               Overwrite even if hand-edited
+  $ sis admin requirements                              Auto-detect from current session
+  $ sis admin requirements path/to/requirements.json    Open a specific file
+  $ sis admin requirements --session-id abc123           Target a specific session
+  $ sis admin requirements --schema                     Print the JSON schema
+  $ sis admin requirements --annotated                  Print schema with writing guidance
+  $ sis admin requirements --export                       Render requirements.md from JSON
+  $ sis admin requirements --export --session-id abc123   Target a specific session
+  $ sis admin requirements --export --force               Overwrite even if hand-edited
 `).action(async (file, opts) => {
     if (opts.force && !opts.export) {
       console.error("Error: --force requires --export");
@@ -7405,7 +7541,7 @@ var REQUIREMENTS_SCHEMA = {
 var REQUIREMENTS_ANNOTATED = `# requirements.json \u2014 Annotated Writing Guide
 #
 # This is NOT valid JSON \u2014 it's a reference showing every field with
-# inline guidance. Run \`sisyphus admin requirements --schema\` for the raw
+# inline guidance. Run \`sis admin requirements --schema\` for the raw
 # JSON Schema.
 #
 # Safe assumptions must satisfy the same EARS shape requirements as
@@ -9366,7 +9502,7 @@ import { join as join25 } from "path";
 // src/cli/deploy/runner.ts
 init_paths();
 import { spawn as spawn2, spawnSync as spawnSync3 } from "child_process";
-import { copyFileSync as copyFileSync2, existsSync as existsSync26, mkdirSync as mkdirSync13, readFileSync as readFileSync28 } from "fs";
+import { copyFileSync as copyFileSync2, existsSync as existsSync27, mkdirSync as mkdirSync13, readFileSync as readFileSync29 } from "fs";
 init_creds();
 
 // src/cli/deploy/pricing.ts
@@ -9399,16 +9535,82 @@ function formatCostLine(provider, instanceType) {
   return `Estimated cost: ~$${cost.toFixed(2)}/mo (pricing last verified ${LAST_VERIFIED}; verify against your bill for current rates).`;
 }
 
+// src/cli/deploy/runtime.ts
+init_atomic();
+init_paths();
+import { existsSync as existsSync25, readFileSync as readFileSync28, unlinkSync as unlinkSync4 } from "fs";
+function readRuntimeState(provider) {
+  const path = deployRuntimePath(provider);
+  if (!existsSync25(path)) return null;
+  try {
+    return JSON.parse(readFileSync28(path, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function writeRuntimeState(provider, state) {
+  atomicWrite(deployRuntimePath(provider), JSON.stringify(state, null, 2) + "\n");
+}
+function clearRuntimeState(provider) {
+  const path = deployRuntimePath(provider);
+  if (existsSync25(path)) unlinkSync4(path);
+}
+
+// src/cli/deploy/tailnet.ts
+function discoverNode(requestedName) {
+  const json = execSafe("tailscale status --json");
+  if (!json) return null;
+  let status;
+  try {
+    status = JSON.parse(json);
+  } catch {
+    return null;
+  }
+  const peers = status.Peer === void 0 ? [] : Object.values(status.Peer);
+  const candidates = peers.filter(
+    (p) => p.HostName === requestedName && p.Online === true
+  );
+  if (candidates.length === 0) return null;
+  candidates.sort((a, b) => {
+    const ac = a.Created === void 0 ? "" : a.Created;
+    const bc = b.Created === void 0 ? "" : b.Created;
+    return bc.localeCompare(ac);
+  });
+  const peer = candidates[0];
+  const dnsRaw = peer.DNSName === void 0 ? "" : peer.DNSName;
+  const dns = dnsRaw.replace(/\.$/, "");
+  if (!dns) return null;
+  const shortName = dns.split(".")[0];
+  const ips = peer.TailscaleIPs === void 0 ? [] : peer.TailscaleIPs;
+  const ipv4 = ips.find((ip) => /^\d+\.\d+\.\d+\.\d+$/.test(ip));
+  if (!ipv4) return null;
+  const ipv6 = ips.find((ip) => ip.includes(":")) ?? null;
+  return { shortName, magicDnsName: dns, ipv4, ipv6 };
+}
+async function discoverNodeWithRetry(requestedName, maxRetries = 30, intervalMs = 2e3) {
+  for (let i = 0; i < maxRetries; i++) {
+    const node = discoverNode(requestedName);
+    if (node) return node;
+    if (i < maxRetries - 1) {
+      await new Promise((resolve12) => setTimeout(resolve12, intervalMs));
+    }
+  }
+  return null;
+}
+function isTailscaleAvailable() {
+  return execSafe("tailscale version") !== null;
+}
+
 // src/cli/deploy/templates.ts
-import { existsSync as existsSync25 } from "fs";
+import { existsSync as existsSync26 } from "fs";
 import { dirname as dirname11, resolve as resolve10 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 function deployRoot() {
   const here = dirname11(fileURLToPath4(import.meta.url));
   const bundled = resolve10(here, "..", "deploy");
-  if (existsSync25(bundled)) return bundled;
+  if (existsSync26(bundled)) return bundled;
   const sourceRoot = resolve10(here, "..", "..", "..", "deploy");
-  if (existsSync25(sourceRoot)) return sourceRoot;
+  if (existsSync26(sourceRoot)) return sourceRoot;
   throw new Error(
     `Could not locate deploy/ templates. Looked at:
   ${bundled}
@@ -9432,22 +9634,23 @@ async function mintTailscaleKey(opts) {
   }
   if (env.oauthClientId && env.oauthClientSecret) {
     if (!env.tag) {
-      throw new Error("Tailscale tag is missing from ~/.sisyphus/deploy/tailscale.env. Re-run `sisyphus deploy auth tailscale`.");
+      throw new Error("Tailscale tag is missing from ~/.sisyphus/deploy/tailscale.env. Re-run `sis deploy auth tailscale`.");
     }
     return mintViaOAuth(env.oauthClientId, env.oauthClientSecret, env.tag, opts.hostname);
   }
   if (env.authKey) {
     return env.authKey;
   }
-  throw new Error("Tailscale not configured. Run `sisyphus deploy auth tailscale`.");
+  throw new Error("Tailscale not configured. Run `sis deploy auth tailscale`.");
 }
 async function firstRunPrompt() {
   console.log("");
   console.log("Tailscale credentials not configured. Pick one:");
   console.log("");
-  console.log("  1) OAuth client (recommended) \u2014 mints fresh ephemeral keys per box.");
+  console.log("  1) OAuth client (recommended) \u2014 mints fresh ephemeral keys per box");
+  console.log("     and auto-cleans stale offline nodes so hostnames don't get suffixed.");
   console.log("     Create at https://login.tailscale.com/admin/settings/oauth");
-  console.log("     with scope `auth_keys:write` and tag `tag:sisyphus`.");
+  console.log("     with scopes `auth_keys:write` + `devices:write` and tag `tag:sisyphus`.");
   console.log("  2) Reusable auth key (simpler) \u2014 paste from");
   console.log("     https://login.tailscale.com/admin/settings/keys");
   console.log("");
@@ -9467,8 +9670,16 @@ async function firstRunPrompt() {
   }
   throw new Error(`Invalid choice: ${choice}`);
 }
-async function mintViaOAuth(clientId, clientSecret, tag, hostname) {
+async function mintViaOAuth(clientId, clientSecret, tag, hostname2) {
   const token = await fetchAccessToken(clientId, clientSecret);
+  try {
+    const removed = await deleteStaleDevicesForHostname(token, hostname2);
+    if (removed > 0) {
+      console.log(`Tailscale: removed ${removed} stale offline node(s) named "${hostname2}".`);
+    }
+  } catch (err) {
+    console.log(`Tailscale: skipped stale-node cleanup (${err.message}). Add 'devices:write' scope to clean up automatically.`);
+  }
   const body = {
     capabilities: {
       devices: {
@@ -9481,7 +9692,7 @@ async function mintViaOAuth(clientId, clientSecret, tag, hostname) {
       }
     },
     expirySeconds: KEY_EXPIRY_SECONDS,
-    description: `sisyphus deploy: ${hostname}`
+    description: `sisyphus deploy: ${hostname2}`
   };
   const res = await fetch(`${TS_API}/tailnet/-/keys`, {
     method: "POST",
@@ -9499,6 +9710,32 @@ async function mintViaOAuth(clientId, clientSecret, tag, hostname) {
   if (!data.key) throw new Error("Tailscale API returned no key.");
   return data.key;
 }
+async function deleteStaleDevicesForHostname(token, hostname2) {
+  const res = await fetch(`${TS_API}/tailnet/-/devices`, {
+    headers: { Authorization: `Bearer ${token}` }
+  });
+  if (!res.ok) {
+    throw new Error(`HTTP ${res.status} listing devices`);
+  }
+  const data = await res.json();
+  const STALE_AFTER_MS = 5 * 60 * 1e3;
+  const now = Date.now();
+  const stale = data.devices.filter((d) => {
+    if (d.hostname !== hostname2) return false;
+    const seen = Date.parse(d.lastSeen);
+    if (Number.isNaN(seen)) return false;
+    return now - seen > STALE_AFTER_MS;
+  });
+  let removed = 0;
+  for (const device of stale) {
+    const r = await fetch(`${TS_API}/device/${device.id}`, {
+      method: "DELETE",
+      headers: { Authorization: `Bearer ${token}` }
+    });
+    if (r.ok) removed++;
+  }
+  return removed;
+}
 async function fetchAccessToken(clientId, clientSecret) {
   const credentials = Buffer.from(`${clientId}:${clientSecret}`).toString("base64");
   const res = await fetch(`${TS_API}/oauth/token`, {
@@ -9527,7 +9764,7 @@ async function authTailscale() {
     console.log("");
     console.log("Verifying credentials...");
     await fetchAccessToken(env.oauthClientId, env.oauthClientSecret);
-    console.log("OAuth client verified \u2014 `sisyphus deploy <provider> up` will mint ephemeral keys.");
+    console.log("OAuth client verified \u2014 `sis deploy <provider> up` will mint ephemeral keys.");
   } else {
     console.log("");
     console.log("Auth key saved. Note: reusable auth keys are less secure than OAuth clients.");
@@ -9557,14 +9794,14 @@ function ensureTerraformInstalled() {
 function ensureProviderStateDir(provider) {
   ensureDeployDir();
   const dir = deployProviderDir(provider);
-  if (!existsSync26(dir)) mkdirSync13(dir, { recursive: true, mode: 448 });
+  if (!existsSync27(dir)) mkdirSync13(dir, { recursive: true, mode: 448 });
 }
 function backupState(provider) {
   const src = deployStatePath(provider);
-  if (existsSync26(src)) copyFileSync2(src, deployStateBackupPath(provider));
+  if (existsSync27(src)) copyFileSync2(src, deployStateBackupPath(provider));
 }
 function readSshPubkey(path) {
-  if (!existsSync26(path)) {
+  if (!existsSync27(path)) {
     const privateKeyPath = path.replace(/\.pub$/, "");
     throw new Error(
       `SSH pubkey not found at ${path}. Generate one with:
@@ -9572,7 +9809,7 @@ function readSshPubkey(path) {
 or pass --ssh-key <path>.`
     );
   }
-  return readFileSync28(path, "utf-8").trim();
+  return readFileSync29(path, "utf-8").trim();
 }
 function readOutputs(provider) {
   const result = spawnSync3("terraform", ["output", "-json", `-state=${deployStatePath(provider)}`], {
@@ -9599,10 +9836,13 @@ function readOutputs(provider) {
   }
 }
 function isProvisioned(provider) {
-  if (!existsSync26(deployStatePath(provider))) return false;
+  if (!existsSync27(deployStatePath(provider))) return false;
   return readOutputs(provider) !== null;
 }
 async function deployUp(provider, opts) {
+  if (isProvisioned(provider) && !await confirmReprovision(provider, opts.yes)) {
+    return;
+  }
   const sshPubkey = readSshPubkey(opts.sshKey);
   const creds = await loadProviderCreds(provider);
   const tsAuthKey = await mintTailscaleKey({ hostname: opts.name });
@@ -9644,22 +9884,45 @@ async function deployUp(provider, opts) {
   const outputs = readOutputs(provider);
   if (!outputs) {
     console.log(`
-Applied \u2014 but could not parse outputs. Run \`sisyphus deploy ${provider} status\`.`);
+Applied \u2014 but could not parse outputs. Run \`sis deploy ${provider} status\`.`);
     return;
   }
   console.log("");
   console.log("Box provisioned. Cloud-init will run for ~3\u20135 minutes before the daemon is reachable.");
   console.log("");
-  console.log(`  IP:                  ${outputs.ipv4}`);
-  console.log(`  Tailscale hostname:  ${outputs.tailscale_hostname}`);
-  console.log(`  SSH:                 ${outputs.ssh_command}`);
+  console.log(`  Public IP:           ${outputs.ipv4}`);
+  console.log(`  Requested hostname:  ${outputs.tailscale_hostname}`);
+  if (isTailscaleAvailable()) {
+    process.stdout.write("  Waiting for tailnet join...");
+    const node = await discoverNodeWithRetry(opts.name);
+    if (node) {
+      writeRuntimeState(provider, {
+        tailscaleHostname: node.shortName,
+        tailscaleFqdn: node.magicDnsName,
+        tailscaleIpv4: node.ipv4,
+        discoveredAt: (/* @__PURE__ */ new Date()).toISOString()
+      });
+      process.stdout.write(` joined as ${node.shortName} (${node.ipv4})
+`);
+      if (node.shortName !== opts.name) {
+        console.log(`  Note: Tailscale suffixed the hostname because "${opts.name}" was already`);
+        console.log("        claimed by an offline node. Delete the stale node at");
+        console.log("        https://login.tailscale.com/admin/machines to reuse the original name.");
+      }
+    } else {
+      process.stdout.write(" no peer matched after 60s\n");
+      console.log("  (Cloud-init may still be installing Tailscale. Re-run `status` later.)");
+    }
+  } else {
+    console.log("  (Local `tailscale` CLI not on PATH \u2014 skipping tailnet discovery.)");
+  }
   console.log("");
-  console.log(`  Tail provisioning:   sisyphus deploy ${provider} logs`);
-  console.log(`  Verify daemon:       sisyphus deploy ${provider} ssh -- sisyphus admin doctor`);
+  console.log(`  Tail provisioning:   sis deploy ${provider} logs`);
+  console.log(`  Verify daemon:       sis deploy ${provider} ssh -- sis admin doctor`);
   console.log("");
 }
 async function deployDown(provider, opts) {
-  if (!existsSync26(deployStatePath(provider))) {
+  if (!existsSync27(deployStatePath(provider))) {
     console.log(`No ${provider} state found at ${deployStatePath(provider)}. Nothing to destroy.`);
     return;
   }
@@ -9690,6 +9953,7 @@ async function deployDown(provider, opts) {
     creds
   );
   if (code !== 0) throw new Error(`terraform destroy failed (exit ${code})`);
+  clearRuntimeState(provider);
   console.log(`
 ${provider} box destroyed.`);
 }
@@ -9700,13 +9964,24 @@ function deployStatus(provider) {
   }
   const outputs = readOutputs(provider);
   if (!outputs) {
-    console.log(`${provider}: state present but outputs unreadable. Try \`sisyphus deploy ${provider} up\` to reconcile.`);
+    console.log(`${provider}: state present but outputs unreadable. Try \`sis deploy ${provider} up\` to reconcile.`);
     return;
   }
+  const runtime = readRuntimeState(provider);
+  const effectiveHost = runtime ? runtime.tailscaleHostname : outputs.tailscale_hostname;
   console.log(`${provider}: provisioned`);
-  console.log(`  IP:                  ${outputs.ipv4}`);
-  console.log(`  Tailscale hostname:  ${outputs.tailscale_hostname}`);
-  console.log(`  SSH:                 ${outputs.ssh_command}`);
+  console.log(`  Public IP:           ${outputs.ipv4}`);
+  console.log(`  Tailscale hostname:  ${effectiveHost}`);
+  if (runtime) {
+    console.log(`  Tailscale IPv4:      ${runtime.tailscaleIpv4}`);
+    console.log(`  MagicDNS FQDN:       ${runtime.tailscaleFqdn}`);
+    if (runtime.tailscaleHostname !== outputs.tailscale_hostname) {
+      console.log(`  (Requested "${outputs.tailscale_hostname}" but Tailscale assigned "${runtime.tailscaleHostname}".)`);
+    }
+  } else {
+    console.log("  (No tailnet runtime state \u2014 re-run `up` or check that local tailscale is logged in.)");
+  }
+  console.log(`  SSH:                 ssh sisyphus@${effectiveHost}`);
   console.log(`  Instance type:       ${outputs.instance_type}`);
   console.log(`  ${formatCostLine(provider, outputs.instance_type)}`);
 }
@@ -9717,16 +9992,17 @@ function deployListProviders() {
     console.log(`  ${p.padEnd(10)} ${status}`);
   }
 }
-function requireOutputs(provider) {
-  const o = readOutputs(provider);
-  if (!o) {
-    throw new Error(`${provider} not provisioned. Run \`sisyphus deploy ${provider} up\`.`);
+function effectiveSshTarget(provider) {
+  const runtime = readRuntimeState(provider);
+  if (runtime) return `sisyphus@${runtime.tailscaleHostname}`;
+  const outputs = readOutputs(provider);
+  if (!outputs) {
+    throw new Error(`${provider} not provisioned. Run \`sis deploy ${provider} up\`.`);
   }
-  return o;
+  return `sisyphus@${outputs.tailscale_hostname}`;
 }
 function deploySsh(provider, remoteCmd) {
-  const outputs = requireOutputs(provider);
-  const target = `sisyphus@${outputs.tailscale_hostname}`;
+  const target = effectiveSshTarget(provider);
   const moshAvailable = spawnSync3("mosh", ["--version"], { stdio: "pipe", env: EXEC_ENV }).status === 0;
   const bin = moshAvailable && remoteCmd.length === 0 ? "mosh" : "ssh";
   const args2 = remoteCmd.length > 0 ? [target, ...remoteCmd] : [target];
@@ -9734,15 +10010,13 @@ function deploySsh(provider, remoteCmd) {
   child.on("exit", (code) => process.exit(code === null ? 1 : code));
 }
 function deployLogs(provider) {
-  const outputs = requireOutputs(provider);
-  const target = `sisyphus@${outputs.tailscale_hostname}`;
+  const target = effectiveSshTarget(provider);
   const remoteCmd = "tail -F -n 200 /var/log/cloud-init-output.log ~/.sisyphus/daemon.log 2>/dev/null";
   const child = spawn2("ssh", [target, remoteCmd], { stdio: "inherit", env: EXEC_ENV });
   child.on("exit", (code) => process.exit(code === null ? 1 : code));
 }
 function deployUpdate(provider) {
-  const outputs = requireOutputs(provider);
-  const target = `sisyphus@${outputs.tailscale_hostname}`;
+  const target = effectiveSshTarget(provider);
   const remoteCmd = "sudo npm i -g sisyphi@latest && systemctl --user restart sisyphusd && sisyphusd --version || true";
   const child = spawn2("ssh", [target, remoteCmd], { stdio: "inherit", env: EXEC_ENV });
   child.on("exit", (code) => process.exit(code === null ? 1 : code));
@@ -9752,9 +10026,33 @@ async function confirm2(prompt) {
   const answer = await promptLine2(`${prompt} `, false);
   return answer.toLowerCase() === "yes";
 }
+async function confirmReprovision(provider, yes) {
+  const outputs = readOutputs(provider);
+  console.log("");
+  if (outputs) {
+    console.log(`${provider} is already provisioned: "${outputs.tailscale_hostname}" (${outputs.instance_type}, ${outputs.ipv4}).`);
+  } else {
+    console.log(`${provider} state already exists at ${deployStatePath(provider)}.`);
+  }
+  if (provider === "hetzner") {
+    console.log("Re-running `up` on Hetzner will DESTROY and RECREATE the box (user_data is ForceNew).");
+    console.log("All on-box state \u2014 daemon history, sessions, anything not in your repo \u2014 will be lost.");
+  } else {
+    console.log("Re-running `up` on AWS updates user_data in state but does NOT recreate the instance.");
+    console.log("Cloud-init won't re-run on the live box, and the freshly-minted Tailscale key will be wasted.");
+  }
+  console.log("");
+  console.log(`To push a new sisyphus version:  sis deploy ${provider} update`);
+  console.log(`To rebuild from scratch:         sis deploy ${provider} down && sis deploy ${provider} up`);
+  console.log("");
+  if (yes) return true;
+  const confirmed = await confirm2('Type "yes" to proceed anyway:');
+  if (!confirmed) console.log("Aborted.");
+  return confirmed;
+}
 
 // src/cli/commands/deploy.ts
-var PROVIDERS = ["hetzner", "aws"];
+init_creds();
 function assertArch(raw) {
   if (raw === "arm" || raw === "x86") return raw;
   throw new Error(`Invalid --arch: ${raw}. Must be 'arm' or 'x86'.`);
@@ -9771,7 +10069,8 @@ function resolveUpOptions(provider, raw) {
   const size = raw.size === void 0 ? null : raw.size;
   const withChromium = raw.chromium !== false;
   const enableAutoUpdate = raw.autoUpdate !== false;
-  return { region, arch, size, sshKey: raw.sshKey, name: raw.name, withChromium, enableAutoUpdate };
+  const yes = raw.yes === true;
+  return { region, arch, size, sshKey: raw.sshKey, name: raw.name, withChromium, enableAutoUpdate, yes };
 }
 function registerDeploy(program2) {
   const deploy = program2.command("deploy").description("Provision a Tailscale-only sisyphus box on Hetzner or AWS via Terraform.");
@@ -9788,7 +10087,7 @@ function registerDeploy(program2) {
   });
   for (const provider of PROVIDERS) {
     const sub = deploy.command(provider).description(`${provider} commands.`);
-    sub.command("up").description(`Provision the ${provider} box (terraform init \u2192 plan \u2192 apply).`).option("--region <region>", `Provider region (defaults: hetzner=nbg1, aws=us-east-1).`).option("--arch <arch>", "'arm' (default) or 'x86'. Picks the default --size and image.", "arm").option("--size <size>", "Instance type override (defaults follow --arch).").option("--ssh-key <path>", "Path to SSH public key.", join25(homedir11(), ".ssh", "id_ed25519.pub")).option("--no-chromium", "Skip headless Chromium install.").option("--no-auto-update", "Skip the daily auto-update systemd timer.").option("--name <name>", "Box hostname / Tailscale node name.", "sisyphus").action(async (raw) => {
+    sub.command("up").description(`Provision the ${provider} box (terraform init \u2192 plan \u2192 apply).`).option("--region <region>", `Provider region (defaults: hetzner=nbg1, aws=us-east-1).`).option("--arch <arch>", "'arm' (default) or 'x86'. Picks the default --size and image.", "arm").option("--size <size>", "Instance type override (defaults follow --arch).").option("--ssh-key <path>", "Path to SSH public key.", join25(homedir11(), ".ssh", "id_ed25519.pub")).option("--no-chromium", "Skip headless Chromium install.").option("--no-auto-update", "Skip the daily auto-update systemd timer.").option("--name <name>", "Box hostname / Tailscale node name.", "sisyphus").option("-y, --yes", "Skip the re-provision confirmation prompt when state already exists.").action(async (raw) => {
       const opts = resolveUpOptions(provider, raw);
       await deployUp(provider, opts);
     });
@@ -9810,6 +10109,374 @@ function registerDeploy(program2) {
   }
 }
 
+// src/cli/cloud/runner.ts
+init_paths();
+import { spawn as spawn4 } from "child_process";
+import { hostname } from "os";
+init_creds();
+
+// src/cli/deploy/ssh-exec.ts
+import { spawn as spawn3, spawnSync as spawnSync4 } from "child_process";
+function runOnBox(provider, cmd) {
+  const target = effectiveSshTarget(provider);
+  const result = spawnSync4("ssh", [target, cmd], {
+    encoding: "utf-8",
+    env: EXEC_ENV
+  });
+  if (typeof result.stdout !== "string" || typeof result.stderr !== "string") {
+    throw new Error("Internal: ssh spawn did not capture output as string");
+  }
+  return {
+    stdout: result.stdout,
+    stderr: result.stderr,
+    // status is null when killed by signal — treat as failure.
+    exitCode: result.status === null ? 1 : result.status
+  };
+}
+function runOnBoxStreaming(provider, cmd) {
+  const target = effectiveSshTarget(provider);
+  return new Promise((resolve12, reject) => {
+    const child = spawn3("ssh", [target, cmd], {
+      stdio: "inherit",
+      env: EXEC_ENV
+    });
+    child.on("error", reject);
+    child.on("exit", (code) => resolve12(code === null ? 1 : code));
+  });
+}
+
+// src/cli/cloud/grove.ts
+var GROVE_VERSION = "0.2.13";
+function ensureGroveInstalled(provider) {
+  const probe = runOnBox(provider, "command -v grove >/dev/null 2>&1");
+  if (probe.exitCode === 0) return;
+  process.stderr.write("Installing grove on box...\n");
+  const install = runOnBox(provider, `sudo npm i -g @crouton-kit/grove@${GROVE_VERSION}`);
+  if (install.exitCode !== 0) {
+    throw new Error(`Failed to install grove: ${install.stderr || install.stdout}`);
+  }
+}
+function ensureGroveRegistered(provider, repo, instancePath) {
+  const cmd = `grove register --update --name ${shellQuote(repo)} ${shellQuote(instancePath)}`;
+  const result = runOnBox(provider, cmd);
+  if (result.exitCode !== 0) {
+    throw new Error(`Failed to register grove project ${repo}: ${result.stderr || result.stdout}`);
+  }
+}
+
+// src/cli/cloud/repo.ts
+import { spawnSync as spawnSync5 } from "child_process";
+import { existsSync as existsSync28 } from "fs";
+import { basename as basename6, join as join26 } from "path";
+function captureGit(args2) {
+  const result = spawnSync5("git", args2, {
+    encoding: "utf-8",
+    env: EXEC_ENV
+  });
+  if (typeof result.stdout !== "string") {
+    throw new Error("Internal: git spawn did not capture stdout as string");
+  }
+  return { stdout: result.stdout.trim(), ok: result.status === 0 };
+}
+function inferRepoName() {
+  const { stdout, ok } = captureGit(["rev-parse", "--show-toplevel"]);
+  if (!ok) {
+    throw new Error("Not inside a git repository. Run from a repo or pass --name.");
+  }
+  if (!stdout) {
+    throw new Error("git rev-parse returned empty toplevel.");
+  }
+  return basename6(stdout);
+}
+function getOriginUrl() {
+  const { stdout, ok } = captureGit(["remote", "get-url", "origin"]);
+  if (!ok) return null;
+  return stdout.length > 0 ? stdout : null;
+}
+function getRepoToplevel() {
+  const { stdout, ok } = captureGit(["rev-parse", "--show-toplevel"]);
+  if (!ok) {
+    throw new Error("Not inside a git repository.");
+  }
+  return stdout;
+}
+var DEFAULT_EXCLUDES = [
+  ".sisyphus/",
+  ".terraform/",
+  "node_modules/",
+  "dist/",
+  ".next/",
+  ".turbo/",
+  "coverage/",
+  "tmp/",
+  ".git/lfs/",
+  ".DS_Store"
+];
+function buildRsyncArgs(localDir, remoteTarget) {
+  const src = localDir.endsWith("/") ? localDir : `${localDir}/`;
+  return [
+    "-avz",
+    "--filter=:- .gitignore",
+    ...DEFAULT_EXCLUDES.map((e) => `--exclude=${e}`),
+    "-e",
+    "ssh",
+    src,
+    remoteTarget
+  ];
+}
+function detectPackageManager(toplevel) {
+  if (existsSync28(join26(toplevel, "pnpm-lock.yaml"))) return "pnpm";
+  if (existsSync28(join26(toplevel, "bun.lockb"))) return "bun";
+  if (existsSync28(join26(toplevel, "yarn.lock"))) return "yarn";
+  if (existsSync28(join26(toplevel, "package-lock.json"))) return "npm";
+  return null;
+}
+function packageManagerInstallCmd(pm) {
+  switch (pm) {
+    case "pnpm":
+      return "pnpm install";
+    case "bun":
+      return "bun install";
+    case "yarn":
+      return "yarn install";
+    case "npm":
+      return "npm install";
+    default:
+      return null;
+  }
+}
+
+// src/cli/cloud/sidecar.ts
+init_paths();
+function readSidecar(provider, repo) {
+  const path = boxCloudSidecarPath(repo);
+  const result = runOnBox(provider, `cat ${shellQuote(path)} 2>/dev/null`);
+  if (result.exitCode !== 0 || !result.stdout.trim()) return null;
+  try {
+    const parsed = JSON.parse(result.stdout);
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+function writeSidecar(provider, repo, data) {
+  const dir = boxCloudSidecarDir();
+  const path = boxCloudSidecarPath(repo);
+  const json = JSON.stringify(data, null, 2);
+  const cmd = [
+    `mkdir -p ${shellQuote(dir)}`,
+    `cat > ${shellQuote(path)} <<'SISYPHUS_CLOUD_SIDECAR_EOF'`,
+    json,
+    "SISYPHUS_CLOUD_SIDECAR_EOF"
+  ].join("\n");
+  const result = runOnBox(provider, cmd);
+  if (result.exitCode !== 0) {
+    throw new Error(`Failed to write sidecar for ${repo}: ${result.stderr || result.stdout}`);
+  }
+}
+
+// src/cli/cloud/runner.ts
+async function cloudSync(provider, repo, opts) {
+  const target = effectiveSshTarget(provider);
+  const remoteDir = boxRepoPath(repo);
+  const localOrigin = getOriginUrl();
+  ensureGroveInstalled(provider);
+  const existing = readSidecar(provider, repo);
+  if (existing && existing.originUrl && localOrigin && existing.originUrl !== localOrigin) {
+    throw new Error(
+      `Repo "${repo}" on the box is registered to a different origin:
+  box:    ${existing.originUrl}
+  local:  ${localOrigin}
+Pass --name <slug> to disambiguate, or --fresh to overwrite.`
+    );
+  }
+  if (opts.fresh) {
+    if (!localOrigin) {
+      throw new Error("--fresh requires an `origin` remote on the local repo.");
+    }
+    if (!opts.yes) {
+      console.log(`This will wipe ~/projects/${repo} on the box and re-clone from ${localOrigin}.`);
+      const confirmed = (await promptLine('Continue? Type "yes": ', false)).toLowerCase() === "yes";
+      if (!confirmed) {
+        console.log("Aborted.");
+        return;
+      }
+    }
+    console.log(`\u2192 wiping ${remoteDir} and cloning ${localOrigin} on box...`);
+    const cloneCmd = [
+      `rm -rf ${shellQuote(remoteDir)}`,
+      `mkdir -p ${shellQuote("~/projects")}`,
+      `git clone ${shellQuote(localOrigin)} ${shellQuote(remoteDir)}`
+    ].join(" && ");
+    const code = await runOnBoxStreaming(provider, cloneCmd);
+    if (code !== 0) throw new Error(`fresh clone failed (exit ${code})`);
+  } else {
+    const mkdir = runOnBox(provider, `mkdir -p ${shellQuote(remoteDir)}`);
+    if (mkdir.exitCode !== 0) {
+      throw new Error(`Failed to mkdir on box: ${mkdir.stderr}`);
+    }
+    const toplevel = getRepoToplevel();
+    const args2 = buildRsyncArgs(toplevel, `${target}:${remoteDir}/`);
+    console.log(`\u2192 rsync ${toplevel}/ \u2192 ${target}:${remoteDir}/`);
+    const code = await runRsync(args2);
+    if (code !== 0) throw new Error(`rsync failed (exit ${code})`);
+  }
+  ensureGroveRegistered(provider, repo, remoteDir);
+  const sidecar = {
+    originUrl: localOrigin,
+    localHostname: hostname(),
+    lastSync: (/* @__PURE__ */ new Date()).toISOString(),
+    packageManager: existing?.packageManager,
+    lastInstall: existing?.lastInstall
+  };
+  writeSidecar(provider, repo, sidecar);
+  console.log(`\u2713 synced ${repo} \u2192 ${target}:${remoteDir}/`);
+}
+function runRsync(args2) {
+  return new Promise((resolve12, reject) => {
+    const child = spawn4("rsync", args2, { stdio: "inherit", env: EXEC_ENV });
+    child.on("error", reject);
+    child.on("exit", (code) => resolve12(code === null ? 1 : code));
+  });
+}
+async function cloudInstall(provider, repo) {
+  const remoteDir = boxRepoPath(repo);
+  const toplevel = getRepoToplevel();
+  const pm = detectPackageManager(toplevel);
+  const cmd = packageManagerInstallCmd(pm);
+  if (!cmd) {
+    console.log("No lockfile detected \u2014 skipping install.");
+    return;
+  }
+  console.log(`\u2192 ${pm} install in ${remoteDir} on box...`);
+  const remoteCmd = `cd ${shellQuote(remoteDir)} && ${cmd}`;
+  const code = await runOnBoxStreaming(provider, remoteCmd);
+  if (code !== 0) throw new Error(`${pm} install failed (exit ${code})`);
+  const existing = readSidecar(provider, repo);
+  const sidecar = {
+    originUrl: existing && existing.originUrl !== void 0 ? existing.originUrl : getOriginUrl(),
+    localHostname: existing ? existing.localHostname : hostname(),
+    lastSync: existing?.lastSync,
+    lastInstall: (/* @__PURE__ */ new Date()).toISOString(),
+    packageManager: pm
+  };
+  writeSidecar(provider, repo, sidecar);
+  console.log(`\u2713 installed ${repo} (${pm})`);
+}
+async function cloudSession(provider, repo) {
+  const remoteDir = boxRepoPath(repo);
+  const cmd = `sis admin home-init ${shellQuote(repo)} ${shellQuote(remoteDir)}`;
+  console.log(`\u2192 initializing tmux home session "${repo}" on box...`);
+  const result = runOnBox(provider, cmd);
+  if (result.exitCode !== 0) {
+    throw new Error(`home-init failed: ${result.stderr || result.stdout}`);
+  }
+  if (result.stdout.trim()) console.log(result.stdout.trim());
+  console.log(`\u2713 session "${repo}" ready on box`);
+}
+function cloudAttach(provider, repo) {
+  if (process.env.TMUX) {
+    throw new Error(
+      `Refusing to attach from inside tmux \u2014 would nest the cloud tmux client.
+Use a fresh terminal, or run from outside tmux:
+  tmux new-window 'ssh -t ${effectiveSshTarget(provider)} tmux attach -t ${repo}'`
+    );
+  }
+  const target = effectiveSshTarget(provider);
+  const child = spawn4("ssh", ["-t", target, `tmux attach-session -t ${shellQuote(repo)}`], {
+    stdio: "inherit",
+    env: EXEC_ENV
+  });
+  child.on("exit", (code) => process.exit(code === null ? 1 : code));
+}
+async function cloudStart(provider, repo, opts) {
+  await cloudSync(provider, repo, { fresh: opts.fresh, yes: opts.yes });
+  await cloudInstall(provider, repo);
+  await cloudSession(provider, repo);
+  console.log("");
+  console.log(`Box-side dashboard ready. Attach with:`);
+  console.log(`  tmux new-window 'ssh -t ${effectiveSshTarget(provider)} tmux attach -t ${repo}'`);
+  console.log("(or run inside the slash command, which does this for you.)");
+}
+function cloudStatus(provider, repo) {
+  const target = effectiveSshTarget(provider);
+  const sidecar = readSidecar(provider, repo);
+  const sessionProbe = runOnBox(provider, `tmux has-session -t ${shellQuote(repo)} 2>/dev/null`);
+  const sessionRunning = sessionProbe.exitCode === 0;
+  console.log(`Cloud status for "${repo}":`);
+  console.log(`  Provider:        ${provider}`);
+  console.log(`  Target:          ${target}`);
+  console.log(`  Planted:         ${sidecar ? "yes" : "no"}`);
+  if (sidecar) {
+    console.log(`  Origin:          ${sidecar.originUrl ? sidecar.originUrl : "(none)"}`);
+    console.log(`  Last sync:       ${sidecar.lastSync ? sidecar.lastSync : "(never)"}`);
+    console.log(`  Last install:    ${sidecar.lastInstall ? sidecar.lastInstall : "(never)"}`);
+    console.log(`  Package manager: ${sidecar.packageManager ? sidecar.packageManager : "(none)"}`);
+  }
+  console.log(`  Session:         ${sessionRunning ? "running" : "absent"}`);
+  if (sessionRunning) {
+    console.log(`  Attach:          tmux new-window 'ssh -t ${target} tmux attach -t ${repo}'`);
+  }
+}
+
+// src/cli/deploy/provider-pick.ts
+init_creds();
+function pickProvider(explicit) {
+  if (explicit) {
+    if (!isValidProvider(explicit)) {
+      throw new Error(`Unknown provider "${explicit}". Valid: ${PROVIDERS.join(", ")}.`);
+    }
+    return explicit;
+  }
+  const provisioned = PROVIDERS.filter((p) => isProvisioned(p));
+  if (provisioned.length === 1) return provisioned[0];
+  if (provisioned.length === 0) {
+    throw new Error(
+      "No cloud provider provisioned. Run `sis deploy <hetzner|aws> up` first."
+    );
+  }
+  throw new Error(
+    `Multiple providers provisioned (${provisioned.join(", ")}). Pass --provider <name>.`
+  );
+}
+
+// src/cli/commands/cloud.ts
+function resolve11(raw) {
+  const provider = pickProvider(raw.provider);
+  const repo = raw.name ? raw.name : inferRepoName();
+  if (!validateRepoName(repo)) {
+    throw new Error(`Invalid --name "${repo}": must not contain '/' '\\' or '..'.`);
+  }
+  return { provider, repo };
+}
+function registerCloud(program2) {
+  const cloud = program2.command("cloud").description("Per-repo workflow on the shared cloud box (sync, install, dashboard).");
+  cloud.command("sync").description("Rsync this repo to the cloud box; ensures grove is installed and the repo is registered.").option("--fresh", "Wipe the box-side dir and `git clone` from origin instead of rsync.").option("-y, --yes", "Skip the --fresh confirmation prompt.").option("--name <repo>", "Override the repo name (default: basename of git toplevel).").option("--provider <name>", "Cloud provider (default: auto-pick if exactly one is provisioned).").action(async (raw) => {
+    const { provider, repo } = resolve11(raw);
+    await cloudSync(provider, repo, { fresh: raw.fresh === true, yes: raw.yes === true });
+  });
+  cloud.command("install").description("Run the repo's package-manager install on the box.").option("--name <repo>", "Override the repo name.").option("--provider <name>", "Cloud provider.").action(async (raw) => {
+    const { provider, repo } = resolve11(raw);
+    await cloudInstall(provider, repo);
+  });
+  cloud.command("session").description("Create or refresh the box-side tmux home session for this repo.").option("--name <repo>", "Override the repo name.").option("--provider <name>", "Cloud provider.").action(async (raw) => {
+    const { provider, repo } = resolve11(raw);
+    await cloudSession(provider, repo);
+  });
+  cloud.command("attach").description("Attach to the box-side tmux home session for this repo.").option("--name <repo>", "Override the repo name.").option("--provider <name>", "Cloud provider.").action((raw) => {
+    const { provider, repo } = resolve11(raw);
+    cloudAttach(provider, repo);
+  });
+  cloud.command("start").description("Sync, install, and start the dashboard session in one shot. (Stops short of attach.)").option("--fresh", "Wipe the box-side dir and `git clone` from origin instead of rsync.").option("-y, --yes", "Skip the --fresh confirmation prompt.").option("--name <repo>", "Override the repo name.").option("--provider <name>", "Cloud provider.").action(async (raw) => {
+    const { provider, repo } = resolve11(raw);
+    await cloudStart(provider, repo, { fresh: raw.fresh === true, yes: raw.yes === true });
+  });
+  cloud.command("status").description("Print box-side status for this repo (planted, session running, last sync/install).").option("--name <repo>", "Override the repo name.").option("--provider <name>", "Cloud provider.").action((raw) => {
+    const { provider, repo } = resolve11(raw);
+    cloudStatus(provider, repo);
+  });
+}
+
 // src/cli/commands/notify.ts
 function attachNotify(diagnostic2) {
   const notify = diagnostic2.command("notify").description("Internal notifications (fire-and-forget)");
@@ -9823,11 +10490,11 @@ function attachNotify(diagnostic2) {
 }
 
 // src/cli/commands/tmux-status.ts
-import { execSync as execSync14 } from "child_process";
+import { execSync as execSync15 } from "child_process";
 function attachTmuxStatus(diagnostic2) {
   diagnostic2.command("tmux-status").description("Output session status dots for tmux status bar").action(() => {
     try {
-      const status = execSync14(
+      const status = execSync15(
         "tmux show-option -gv @sisyphus_status",
         { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }
       ).trim();
@@ -9839,8 +10506,8 @@ function attachTmuxStatus(diagnostic2) {
 
 // src/cli/commands/tmux-sessions.ts
 init_paths();
-import { execSync as execSync15 } from "child_process";
-import { readFileSync as readFileSync29, existsSync as existsSync27 } from "fs";
+import { execSync as execSync16 } from "child_process";
+import { readFileSync as readFileSync30, existsSync as existsSync29 } from "fs";
 var DOT_MAP = {
   "orchestrator:processing": { icon: "\u25CF", color: "#d4ad6a" },
   "orchestrator:idle": { icon: "\u25CF", color: "#d47766" },
@@ -9851,16 +10518,16 @@ var DOT_MAP = {
 };
 function readManifest() {
   const p = sessionsManifestPath();
-  if (!existsSync27(p)) return null;
+  if (!existsSync29(p)) return null;
   try {
-    return JSON.parse(readFileSync29(p, "utf-8"));
+    return JSON.parse(readFileSync30(p, "utf-8"));
   } catch {
     return null;
   }
 }
 function tmuxExec(cmd) {
   try {
-    return execSync15(cmd, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+    return execSync16(cmd, { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim();
   } catch {
     return null;
   }
@@ -9897,9 +10564,9 @@ if (nodeVersion < 22) {
   process.exit(1);
 }
 var program = new Command();
-program.name("sisyphus").description("tmux-integrated orchestration daemon for Claude Code").version(
+program.name("sis").description("tmux-integrated orchestration daemon for Claude Code").version(
   JSON.parse(
-    readFileSync30(join26(dirname12(fileURLToPath5(import.meta.url)), "..", "package.json"), "utf-8")
+    readFileSync31(join27(dirname12(fileURLToPath5(import.meta.url)), "..", "package.json"), "utf-8")
   ).version
 );
 program.configureHelp({
@@ -9940,6 +10607,7 @@ registerSegmentUnregister(segment);
 var admin = program.command("admin").description("Admin / setup commands");
 registerSetup(admin);
 registerSetupKeybind(admin);
+registerHomeInit(admin);
 registerDoctor(admin);
 registerInit(admin);
 registerUninstall(admin);
@@ -9952,27 +10620,28 @@ registerScratch(admin);
 registerReview(admin);
 registerCompanion(program);
 registerDeploy(program);
+registerCloud(program);
 var diagnostic = program.command("diagnostic", { hidden: true });
 attachNotify(diagnostic);
 attachTmuxStatus(diagnostic);
 attachTmuxSessions(diagnostic);
 program.addHelpText("after", `
 Examples:
-  $ sisyphus start "Implement auth system"     Start a new session
-  $ sisyphus start "Build @reqs.md" -n auth    Start with name + requirements
-  $ sisyphus status                            Check current sessions
-  $ sisyphus dashboard                         Open the TUI
-  $ sisyphus admin doctor                      Verify installation
+  $ sis start "Implement auth system"     Start a new session
+  $ sis start "Build @reqs.md" -n auth    Start with name + requirements
+  $ sis status                            Check current sessions
+  $ sis dashboard                         Open the TUI
+  $ sis admin doctor                      Verify installation
 
-Run 'sisyphus admin getting-started' for a complete usage guide.
+Run 'sis admin getting-started' for a complete usage guide.
 `);
 var args = process.argv.slice(2);
 var firstArg = args[0];
 var skipWelcome = ["admin", "help", "--help", "-h", "--version", "-V"];
-if (!existsSync28(globalDir()) && firstArg && !skipWelcome.includes(firstArg)) {
+if (!existsSync30(globalDir()) && firstArg && !skipWelcome.includes(firstArg)) {
   mkdirSync14(globalDir(), { recursive: true });
   console.log("");
-  console.log("  Welcome to Sisyphus. Run 'sisyphus admin setup' to get started.");
+  console.log("  Welcome to Sisyphus. Run 'sis admin setup' to get started.");
   console.log("");
 }
 program.parseAsync(process.argv).catch((err) => {