tines 0.0.92 → 0.0.93

package/dist/index.js

@@ -3434,7 +3434,8 @@ function repoDirFromUrl(url) {
   const stripped = url.replace(/[?#].*$/, "").replace(/\/+$/, "");
   const lastSlash = Math.max(stripped.lastIndexOf("/"), stripped.lastIndexOf(":"));
   const base = stripped.slice(lastSlash + 1).replace(/\.git$/, "");
-  if (!base || base === "." || base === ".." || base.includes("\\") || base.includes("=")) return "repo";
+  if (!base || base === "." || base === ".." || base.includes("\\") || base.includes("="))
+    return "repo";
   return base;
 }
 var ARTIFACT_FILE_MAX_BYTES = 25 * 1024 * 1024;
@@ -3468,7 +3469,13 @@ var RUN_LOG_RETENTION_MS = 30 * 24 * 60 * 60 * 1e3;
 var RUN_LOG_RAW_MAX_BYTES = 64 * 1024 * 1024;
 var MODEL_PREDECESSORS = {
   "claude-fable-5": ["claude-opus-5", "claude-opus-4-8", "claude-opus-4-7", "claude-opus-4-6"],
-  "claude-opus-5": ["claude-opus-4-8", "claude-opus-4-7", "claude-opus-4-6", "claude-opus-4-5", "claude-opus-4-1"],
+  "claude-opus-5": [
+    "claude-opus-4-8",
+    "claude-opus-4-7",
+    "claude-opus-4-6",
+    "claude-opus-4-5",
+    "claude-opus-4-1"
+  ],
   "claude-sonnet-5": ["claude-sonnet-4-6", "claude-sonnet-4-5", "claude-3-7-sonnet-latest"],
   "claude-haiku-4-5": ["claude-3-5-haiku-latest"],
   "gemini-2.5-pro": ["gemini-1.5-pro"],
@@ -3509,7 +3516,9 @@ function utilizationLabel(quota, activeRuns, stateName = (id) => id) {
     if (!counts.has(stateId)) counts.set(stateId, { name: stateName(stateId), n: 0 });
   }
   if (counts.size === 0) return `no active runs (roster default ${quota.default_limit} per state)`;
-  return [...counts.entries()].map(([stateId, { name: name2, n }]) => `${name2} ${n}/${quota.overrides[stateId] ?? quota.default_limit}`).join(" \xB7 ");
+  return [...counts.entries()].map(
+    ([stateId, { name: name2, n }]) => `${name2} ${n}/${quota.overrides[stateId] ?? quota.default_limit}`
+  ).join(" \xB7 ");
 }
 var LIBRARY_MAX_BYTES = 5 * 1024 * 1024;
 
@@ -3610,9 +3619,15 @@ var DESCRIBERS = {
     name(p.runner_name),
     text(`fail to launch (${str(p.consecutive_failures)} consecutive): ${str(p.error)}`)
   ],
-  "routing_rule.created": (ev, p) => [text(`${action(ev.type)} the ${str(p.scope_label)} routing rule`)],
-  "routing_rule.updated": (ev, p) => [text(`${action(ev.type)} the ${str(p.scope_label)} routing rule`)],
-  "routing_rule.deleted": (ev, p) => [text(`${action(ev.type)} the ${str(p.scope_label)} routing rule`)],
+  "routing_rule.created": (ev, p) => [
+    text(`${action(ev.type)} the ${str(p.scope_label)} routing rule`)
+  ],
+  "routing_rule.updated": (ev, p) => [
+    text(`${action(ev.type)} the ${str(p.scope_label)} routing rule`)
+  ],
+  "routing_rule.deleted": (ev, p) => [
+    text(`${action(ev.type)} the ${str(p.scope_label)} routing rule`)
+  ],
   "settings.updated": (_ev, p) => [
     text(`updated supervisor settings (${joinChanged(p.changed, ", ") || "no changes"})`)
   ],
@@ -3720,7 +3735,10 @@ function createApiClient(options) {
   async function raw(method, path2, opts = {}) {
     const headers = { ...opts.headers ?? {} };
     if (options.apiKey) headers.authorization = `Bearer ${options.apiKey}`;
-    const body = opts.body instanceof Uint8Array ? opts.body.buffer.slice(opts.body.byteOffset, opts.body.byteOffset + opts.body.byteLength) : opts.body;
+    const body = opts.body instanceof Uint8Array ? opts.body.buffer.slice(
+      opts.body.byteOffset,
+      opts.body.byteOffset + opts.body.byteLength
+    ) : opts.body;
     const res = await fetchFn(`${base}${path2}`, { method, headers, body });
     if (!res.ok) {
       let parsed = null;
@@ -3816,7 +3834,11 @@ function createApiClient(options) {
     uploadArtifactFolder: async (issueId, name2, files) => {
       const form = new FormData();
       for (const file of files) {
-        form.append("file", new Blob([file.bytes], { type: file.contentType }), file.path);
+        form.append(
+          "file",
+          new Blob([file.bytes], { type: file.contentType }),
+          file.path
+        );
       }
       const res = await raw("PUT", artifactPath(issueId, name2, "/folder"), { body: form });
       return await res.json();
@@ -3871,7 +3893,10 @@ function createApiClient(options) {
     /** Daemon-only: uploads the raw harness stream for a settled run. */
     putRunLogRaw: (id, body) => raw("PUT", `/api/v1/runs/${id}/log/raw`, {
       body,
-      headers: { "content-type": "application/x-ndjson", "content-length": String(body.byteLength) }
+      headers: {
+        "content-type": "application/x-ndjson",
+        "content-length": String(body.byteLength)
+      }
     }),
     cancelRun: (id) => request("POST", `/api/v1/runs/${id}/cancel`),
     // Routing rules (one per exact scope; responses carry shadow hints)
@@ -3887,9 +3912,7 @@ function createApiClient(options) {
     createApiKey: (body) => request("POST", "/api/v1/api-keys", body),
     revokeApiKey: (id) => request("DELETE", `/api/v1/api-keys/${id}`),
     // Library export / import (workflows + context; no tracker data, no secrets)
-    exportLibrary: (opts = {}) => get(
-      `/api/v1/export${opts.journals === false ? "?journals=false" : ""}`
-    ),
+    exportLibrary: (opts = {}) => get(`/api/v1/export${opts.journals === false ? "?journals=false" : ""}`),
     /** Plan-then-apply; `dry_run: true` returns the preview the apply follows. */
     importLibrary: (body) => request("POST", "/api/v1/import", body)
   };
@@ -4050,7 +4073,9 @@ function runnerStatusLabel(runner) {
 }
 function ruleTargetsLabel(rule) {
   if (rule.targets.length === 0) return "(no targets)";
-  return rule.targets.map((t) => `${t.runner_name}${t.tier ? `:${t.tier}` : ""}${t.runner_status === "paused" ? " (paused)" : ""}`).join(" \u2192 ");
+  return rule.targets.map(
+    (t) => `${t.runner_name}${t.tier ? `:${t.tier}` : ""}${t.runner_status === "paused" ? " (paused)" : ""}`
+  ).join(" \u2192 ");
 }
 function quotaLabel(quota, stateName) {
   if (quota.type === "global_cap") return `global cap: at most ${quota.limit} concurrent runs`;
@@ -4108,7 +4133,9 @@ function keptWorkspaceRow(kept, sizeBytes, now = Date.now()) {
 function formatTable(rows) {
   if (rows.length === 0) return "";
   const widths = rows[0].map((_, i) => Math.max(...rows.map((r) => r[i].length)));
-  return rows.map((row) => row.map((cell, i) => cell.padEnd(widths[i])).join("  ").trimEnd()).join("\n");
+  return rows.map(
+    (row) => row.map((cell, i) => cell.padEnd(widths[i])).join("  ").trimEnd()
+  ).join("\n");
 }
 
 // src/refs.ts
@@ -4124,7 +4151,9 @@ function parseJsonObject(raw, source) {
   try {
     value = JSON.parse(raw);
   } catch (err) {
-    throw new CliError(`invalid JSON from ${source}: ${err instanceof Error ? err.message : String(err)}`);
+    throw new CliError(
+      `invalid JSON from ${source}: ${err instanceof Error ? err.message : String(err)}`
+    );
   }
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     throw new CliError(`expected a JSON object from ${source}`);
@@ -4161,7 +4190,9 @@ function parseFileSpec(spec) {
   const path2 = spec.slice(0, sep);
   const source = spec.slice(sep + 1);
   if (!source.startsWith("@")) {
-    throw new CliError(`skill file content always comes from a local file: --file ${path2}=@<local-file>`);
+    throw new CliError(
+      `skill file content always comes from a local file: --file ${path2}=@<local-file>`
+    );
   }
   const file = source.slice(1);
   try {
@@ -4182,13 +4213,57 @@ function parseTargetSpec(spec) {
   return { name: name2, tier };
 }
 
+// src/config.ts
+import { existsSync, mkdirSync, readFileSync as readFileSync3, unlinkSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+function defaultConfigDir() {
+  return process.env.TINES_CONFIG_DIR ?? join(homedir(), ".config", "tines");
+}
+function readJsonFile(path2) {
+  if (!existsSync(path2)) return null;
+  try {
+    return JSON.parse(readFileSync3(path2, "utf8"));
+  } catch {
+    return null;
+  }
+}
+function writeJsonFile(path2, value, { secret = false } = {}) {
+  mkdirSync(dirname(path2), { recursive: true });
+  writeFileSync(path2, `${JSON.stringify(value, null, 2)}
+`, secret ? { mode: 384 } : {});
+}
+function configPath(dir = defaultConfigDir()) {
+  return join(dir, "config.json");
+}
+function loadCliConfig(dir = defaultConfigDir()) {
+  const raw = readJsonFile(configPath(dir));
+  const config = {};
+  if (typeof raw?.url === "string" && raw.url !== "") config.url = raw.url;
+  if (typeof raw?.api_key === "string" && raw.api_key !== "") config.api_key = raw.api_key;
+  return config;
+}
+function saveCliConfig(dir, patch) {
+  const next = { ...loadCliConfig(dir) };
+  if (patch.url !== void 0) next.url = patch.url.replace(/\/+$/, "");
+  if (patch.api_key !== void 0) next.api_key = patch.api_key;
+  writeJsonFile(configPath(dir), next, { secret: true });
+  return next;
+}
+function clearCliConfig(dir = defaultConfigDir()) {
+  const path2 = configPath(dir);
+  if (!existsSync(path2)) return false;
+  unlinkSync(path2);
+  return true;
+}
+
 // src/common.ts
 var DEFAULT_URL = "https://tines.tbuckley.dev";
 function withCommon(cmd) {
   return cmd.option(
     "-u, --url <url>",
-    `base URL of the Tines API (or set TINES_API_URL; default ${DEFAULT_URL})`
-  ).option("--api-key <key>", "API key (or set TINES_API_KEY)").option("--json", "output the raw JSON response");
+    `base URL of the Tines API (or set TINES_API_URL, or run \`tines login\`; default ${DEFAULT_URL})`
+  ).option("--api-key <key>", "API key (or set TINES_API_KEY, or run `tines login`)").option("--json", "output the raw JSON response");
 }
 function withList(cmd) {
   return withCommon(
@@ -4204,11 +4279,25 @@ function withList(cmd) {
     )
   );
 }
+function resolveUrlSetting(opts) {
+  if (opts.url) return { value: opts.url, source: "flag" };
+  if (process.env.TINES_API_URL) return { value: process.env.TINES_API_URL, source: "env" };
+  const stored = loadCliConfig().url;
+  if (stored) return { value: stored, source: "config" };
+  return { value: DEFAULT_URL, source: "default" };
+}
+function resolveApiKeySetting(opts) {
+  if (opts.apiKey) return { value: opts.apiKey, source: "flag" };
+  if (process.env.TINES_API_KEY) return { value: process.env.TINES_API_KEY, source: "env" };
+  const stored = loadCliConfig().api_key;
+  if (stored) return { value: stored, source: "config" };
+  return { value: void 0, source: "default" };
+}
 function resolveUrl(opts) {
-  return opts.url ?? process.env.TINES_API_URL ?? DEFAULT_URL;
+  return resolveUrlSetting(opts).value;
 }
 function resolveApiKey(opts) {
-  return opts.apiKey ?? process.env.TINES_API_KEY;
+  return resolveApiKeySetting(opts).value;
 }
 function client(opts) {
   return createApiClient({ baseUrl: resolveUrl(opts), apiKey: resolveApiKey(opts) });
@@ -4327,7 +4416,8 @@ async function resolveRunner(api, ref) {
 async function resolveScopeFlags(api, opts) {
   const scope = {};
   if (opts.project !== void 0) scope.project_id = (await resolveProject(api, opts.project)).id;
-  if (opts.state !== void 0) scope.workflow_state_id = (await resolveStateFlag(api, opts.state)).state.id;
+  if (opts.state !== void 0)
+    scope.workflow_state_id = (await resolveStateFlag(api, opts.state)).state.id;
   if (opts.issue !== void 0) scope.issue_id = (await resolveIssue(api, opts.issue)).id;
   return scope;
 }
@@ -4357,7 +4447,9 @@ files (seeded at skills/${item.name}/):`);
     console.log(`
 url: ${item.repo_url}`);
     if (item.repo_branch) console.log(`branch: ${item.repo_branch}`);
-    console.log(`dir: ${item.repo_dir ?? `${repoDirFromUrl(item.repo_url ?? "")} (derived from the URL)`}`);
+    console.log(
+      `dir: ${item.repo_dir ?? `${repoDirFromUrl(item.repo_url ?? "")} (derived from the URL)`}`
+    );
   }
 }
 var SCOPE_FLAGS_HELP = `
@@ -4370,51 +4462,65 @@ function withScopeFlags(cmd) {
   return cmd.option("-p, --project <name>", "scope: project name or id").option("-s, --state <workflow/state>", "scope: workflow-qualified state").option("-i, --issue <ref>", "scope: issue (<project>/<number>)").addHelpText("after", SCOPE_FLAGS_HELP);
 }
 function register(program3) {
-  const context = program3.command("context").description("Manage context items (prompts, skills, repo pointers) scoped to projects, states, and issues");
+  const context = program3.command("context").description(
+    "Manage context items (prompts, skills, repo pointers) scoped to projects, states, and issues"
+  );
   withList(
     withScopeFlags(
-      context.command("list").description("List context items (scope filters match every item whose scope includes the element)").option("-k, --kind <kind>", "filter by kind: prompt, skill, or repo").option("--exact", "only items whose scope sets exactly the given dimensions").option("-q, --search <text>", "search names and descriptions")
+      context.command("list").description(
+        "List context items (scope filters match every item whose scope includes the element)"
+      ).option("-k, --kind <kind>", "filter by kind: prompt, skill, or repo").option("--exact", "only items whose scope sets exactly the given dimensions").option("-q, --search <text>", "search names and descriptions")
     )
-  ).action(async (opts) => {
-    const api = client(opts);
-    const scope = await resolveScopeFlags(api, opts);
-    const res = await fetchList(
-      opts,
-      (page) => api.listContext({
-        kind: opts.kind,
-        project: scope.project_id ?? void 0,
-        state: scope.workflow_state_id ?? void 0,
-        issue: scope.issue_id ?? void 0,
-        q: opts.search,
-        exact: opts.exact ? true : void 0,
-        ...page
-      })
-    );
-    printList(res, opts, (items) => {
-      if (items.length === 0) return console.log("no context items");
-      table([
-        ["KIND", "NAME", "SCOPE", "PAYLOAD", "UPDATED", "ID"],
-        ...items.map((i) => [
-          i.kind,
-          i.name,
-          i.scope.label,
-          contextItemSummary(i),
-          timestamp(i.updated_at),
-          i.id
-        ])
-      ]);
-    });
-  });
-  withCommon(context.command("show <id>").description("Show a context item (skills include their files)")).action(
-    async (id, opts) => {
-      const item = await client(opts).getContextItem(id);
-      if (opts.json) return printJson(item);
-      printContextItem(item);
+  ).action(
+    async (opts) => {
+      const api = client(opts);
+      const scope = await resolveScopeFlags(api, opts);
+      const res = await fetchList(
+        opts,
+        (page) => api.listContext({
+          kind: opts.kind,
+          project: scope.project_id ?? void 0,
+          state: scope.workflow_state_id ?? void 0,
+          issue: scope.issue_id ?? void 0,
+          q: opts.search,
+          exact: opts.exact ? true : void 0,
+          ...page
+        })
+      );
+      printList(res, opts, (items) => {
+        if (items.length === 0) return console.log("no context items");
+        table([
+          ["KIND", "NAME", "SCOPE", "PAYLOAD", "UPDATED", "ID"],
+          ...items.map((i) => [
+            i.kind,
+            i.name,
+            i.scope.label,
+            contextItemSummary(i),
+            timestamp(i.updated_at),
+            i.id
+          ])
+        ]);
+      });
     }
   );
+  withCommon(
+    context.command("show <id>").description("Show a context item (skills include their files)")
+  ).action(async (id, opts) => {
+    const item = await client(opts).getContextItem(id);
+    if (opts.json) return printJson(item);
+    printContextItem(item);
+  });
   withCommon(
     withScopeFlags(
-      context.command("create").description("Create a context item scoped to a project, state, and/or issue").requiredOption("-k, --kind <kind>", "prompt, skill, or repo").requiredOption("-n, --name <name>", "item name (slug-like for skills; the dedup/override key)").option("-d, --description <text>", "one-liner shown in lists").option("--body <md>", "prompt body: inline Markdown or @file (escape a literal @ as @@)").option("--file <path>=@<local>", "skill file: workspace path = local file (repeatable)", collect, []).option("--repo-url <url>", "repo: clone URL").option("--branch <branch>", "repo: branch to check out").option("--dir <dir>", "repo: checkout directory (defaults to the URL's basename)")
+      context.command("create").description("Create a context item scoped to a project, state, and/or issue").requiredOption("-k, --kind <kind>", "prompt, skill, or repo").requiredOption(
+        "-n, --name <name>",
+        "item name (slug-like for skills; the dedup/override key)"
+      ).option("-d, --description <text>", "one-liner shown in lists").option("--body <md>", "prompt body: inline Markdown or @file (escape a literal @ as @@)").option(
+        "--file <path>=@<local>",
+        "skill file: workspace path = local file (repeatable)",
+        collect,
+        []
+      ).option("--repo-url <url>", "repo: clone URL").option("--branch <branch>", "repo: branch to check out").option("--dir <dir>", "repo: checkout directory (defaults to the URL's basename)")
     )
   ).action(
     async (opts) => {
@@ -4442,7 +4548,12 @@ function register(program3) {
   );
   withCommon(
     withScopeFlags(
-      context.command("edit <id>").description("Edit a context item: payload, name, description, or scope").option("-n, --name <name>", "rename the item").option("-d, --description <text>", "set the description").option("--body <md>", "prompt body: inline Markdown or @file (escape a literal @ as @@)").option("--file <path>=@<local>", "add or replace a skill file (repeatable)", collect, []).option("--remove-file <path>", "remove a skill file (repeatable)", collect, []).option("--repo-url <url>", "repo: clone URL").option("--branch <branch>", "repo: branch (empty string clears it)").option("--dir <dir>", "repo: checkout directory (empty string restores the URL default)").option("--unset <dimension>", "drop a scope dimension: project, state, or issue (repeatable)", collect, []).option(
+      context.command("edit <id>").description("Edit a context item: payload, name, description, or scope").option("-n, --name <name>", "rename the item").option("-d, --description <text>", "set the description").option("--body <md>", "prompt body: inline Markdown or @file (escape a literal @ as @@)").option("--file <path>=@<local>", "add or replace a skill file (repeatable)", collect, []).option("--remove-file <path>", "remove a skill file (repeatable)", collect, []).option("--repo-url <url>", "repo: clone URL").option("--branch <branch>", "repo: branch (empty string clears it)").option("--dir <dir>", "repo: checkout directory (empty string restores the URL default)").option(
+        "--unset <dimension>",
+        "drop a scope dimension: project, state, or issue (repeatable)",
+        collect,
+        []
+      ).option(
         "--expect-version <n>",
         "fail (409) unless the item is still at this version",
         (v) => Number.parseInt(v, 10)
@@ -4466,12 +4577,15 @@ function register(program3) {
       if (opts.body !== void 0) body.body = readBodyValue(opts.body);
       if (opts.file.length > 0 || opts.removeFile.length > 0) {
         const current = await api.getContextItem(id);
-        if (current.kind !== "skill") die(`--file/--remove-file only apply to skills (this is a ${current.kind})`);
+        if (current.kind !== "skill")
+          die(`--file/--remove-file only apply to skills (this is a ${current.kind})`);
         if (body.expected_version === void 0) body.expected_version = current.version;
         const files = new Map((current.files ?? []).map((f) => [f.path, f.content]));
         for (const path2 of opts.removeFile) {
           if (!files.delete(path2)) {
-            die(`no file "${path2}" in skill "${current.name}" (have: ${[...files.keys()].join(", ") || "none"})`);
+            die(
+              `no file "${path2}" in skill "${current.name}" (have: ${[...files.keys()].join(", ") || "none"})`
+            );
           }
         }
         for (const spec of opts.file) {
@@ -4484,7 +4598,9 @@ function register(program3) {
       if (opts.branch !== void 0) body.repo_branch = opts.branch === "" ? null : opts.branch;
       if (opts.dir !== void 0) body.repo_dir = opts.dir === "" ? null : opts.dir;
       if (Object.keys(body).length === 0) {
-        die("nothing to update: pass payload flags, --name/--description, scope flags, and/or --unset");
+        die(
+          "nothing to update: pass payload flags, --name/--description, scope flags, and/or --unset"
+        );
       }
       const item = await api.updateContextItem(id, body);
       if (opts.json) return printJson(item);
@@ -4503,7 +4619,9 @@ function register(program3) {
     context.command("init").description('Seed the global "agent-guidelines" prompt (a no-op if it already exists)')
   ).action(async (opts) => {
     const api = client(opts);
-    const items = await listAll((page) => api.listContext({ kind: "prompt", exact: true, ...page }));
+    const items = await listAll(
+      (page) => api.listContext({ kind: "prompt", exact: true, ...page })
+    );
     const existing = items.find((i) => i.name === AGENT_GUIDELINES_NAME);
     if (existing) {
       if (opts.json) return printJson(existing);
@@ -4525,8 +4643,8 @@ function register(program3) {
 }
 
 // src/commands/issues.ts
-import { existsSync, mkdirSync, readdirSync, readFileSync as readFileSync3, statSync, writeFileSync } from "node:fs";
-import { basename, dirname, join } from "node:path";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readdirSync, readFileSync as readFileSync4, statSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { basename, dirname as dirname2, join as join2 } from "node:path";
 
 // src/help-guard.ts
 function helpGuard(command, markdown) {
@@ -4565,12 +4683,15 @@ function buildRecurrence(opts) {
   if (hourly !== void 0) {
     if (opts.on !== void 0) throw new CliError("an hourly recurrence does not take --on");
     const every = typeof hourly === "number" ? hourly : Number.parseInt(hourly, 10);
-    if (every < 1 || every > 23) throw new CliError(`--every <N>h needs N between 1 and 23, got "${opts.every}"`);
+    if (every < 1 || every > 23)
+      throw new CliError(`--every <N>h needs N between 1 and 23, got "${opts.every}"`);
     let minute = 0;
     if (opts.at !== void 0) {
       const m = opts.at.match(/^:?(\d{1,2})$/);
       if (!m || Number.parseInt(m[1], 10) > 59) {
-        throw new CliError(`with an hourly recurrence, --at is the minute past the hour (0-59 or :MM), got "${opts.at}"`);
+        throw new CliError(
+          `with an hourly recurrence, --at is the minute past the hour (0-59 or :MM), got "${opts.at}"`
+        );
       }
       minute = Number.parseInt(m[1], 10);
     }
@@ -4595,7 +4716,9 @@ function buildRecurrence(opts) {
       return { preset: { kind: "monthly", time, day_of_month: day } };
     }
     default:
-      throw new CliError(`--every must be hourly, <N>h, daily, weekly, or monthly, got "${opts.every}"`);
+      throw new CliError(
+        `--every must be hourly, <N>h, daily, weekly, or monthly, got "${opts.every}"`
+      );
   }
 }
 
@@ -4604,7 +4727,9 @@ var systemTimezone = () => Intl.DateTimeFormat().resolvedOptions().timeZone;
 function printIssueLinks(links) {
   if (links.blocked_by.length > 0) {
     console.log("\nblocked by:");
-    table(linkRows(links.blocked_by, (e) => e.effective_state.category === "done" ? "" : "(open)"));
+    table(
+      linkRows(links.blocked_by, (e) => e.effective_state.category === "done" ? "" : "(open)")
+    );
   }
   if (links.blocks.length > 0) {
     console.log("\nblocks:");
@@ -4626,7 +4751,9 @@ function printIssueDetail(issue) {
     `state: ${issue.effective_state.name} (${issue.effective_state.category})${dup ? ` (via ${issueRef(dup)} \u2014 duplicate)` : ""}  workflow: ${issue.workflow.name}  updated: ${timestamp(issue.updated_at)}`
   );
   if (dup) {
-    console.log(`own state: ${issue.state.name} (${issue.state.category}) \u2014 dormant while this is a duplicate`);
+    console.log(
+      `own state: ${issue.state.name} (${issue.state.category}) \u2014 dormant while this is a duplicate`
+    );
   }
   console.log(`id: ${issue.id}`);
   printIssueLinks(issue.links);
@@ -4635,8 +4762,10 @@ function printIssueDetail(issue) {
 ${issue.description}`);
   }
   const allowed = issue.allowed_transitions.map((t) => `"${t.name}" \u2192 ${t.to_state.name}`);
-  console.log(`
-allowed actions: ${allowed.length ? allowed.join(", ") : "none (terminal state)"}`);
+  console.log(
+    `
+allowed actions: ${allowed.length ? allowed.join(", ") : "none (terminal state)"}`
+  );
   if (issue.comments.length > 0) {
     console.log(`
 comments (${issue.comments.length}):`);
@@ -4649,11 +4778,15 @@ function walkFolder(dir) {
   const files = [];
   const walk = (abs, rel) => {
     for (const entry of readdirSync(abs, { withFileTypes: true })) {
-      const nextAbs = join(abs, entry.name);
+      const nextAbs = join2(abs, entry.name);
       const nextRel = rel ? `${rel}/${entry.name}` : entry.name;
       if (entry.isDirectory()) walk(nextAbs, nextRel);
       else if (entry.isFile()) {
-        files.push({ path: nextRel, contentType: sniffContentType(entry.name), bytes: readFileSync3(nextAbs) });
+        files.push({
+          path: nextRel,
+          contentType: sniffContentType(entry.name),
+          bytes: readFileSync4(nextAbs)
+        });
       }
     }
   };
@@ -4687,7 +4820,9 @@ matched rule: ${ex.matched_rule.scope_label}`);
     );
   }
   if (ex.queue_position !== null && ex.queue_position > 0) {
-    console.log(`queue: ${ex.queue_position} eligible issue${ex.queue_position === 1 ? "" : "s"} ahead of this one`);
+    console.log(
+      `queue: ${ex.queue_position} eligible issue${ex.queue_position === 1 ? "" : "s"} ahead of this one`
+    );
   }
   if (ex.active_run) {
     console.log(
@@ -4703,7 +4838,10 @@ matched rule: ${ex.matched_rule.scope_label}`);
 function register2(program3) {
   const issues = program3.command("issues").description("Work with issues");
   withList(
-    issues.command("list").description("List issues across projects (hides done issues unless --all)").option("-p, --project <name>", "filter by project name or id").option("-s, --state <name>", "filter by state name or id").option("-c, --category <cat>", "filter by state category").option("-w, --workflow <id-or-name>", "filter by workflow").option("-a, --all", "include issues in done states").option("--ready", "only issues that are actionable now (not done, not a duplicate, no open blockers)").option("-q, --search <text>", "search titles and descriptions")
+    issues.command("list").description("List issues across projects (hides done issues unless --all)").option("-p, --project <name>", "filter by project name or id").option("-s, --state <name>", "filter by state name or id").option("-c, --category <cat>", "filter by state category").option("-w, --workflow <id-or-name>", "filter by workflow").option("-a, --all", "include issues in done states").option(
+      "--ready",
+      "only issues that are actionable now (not done, not a duplicate, no open blockers)"
+    ).option("-q, --search <text>", "search titles and descriptions")
   ).action(
     async (opts) => {
       const api = client(opts);
@@ -4739,7 +4877,19 @@ function register2(program3) {
     }
   );
   withCommon(
-    issues.command("create <project>").description("Create an issue in a project, optionally with a recurrence (a scheduled task)").requiredOption("-t, --title <title>", "issue title (doubles as the title template with a recurrence)").option("-d, --description <markdown>", `issue description (Markdown) \u2014 ${BODY_VALUE_HELP}`).option("-w, --workflow <id-or-name>", "workflow (defaults to project default, else standard)").option("-s, --state <name>", "starting state (defaults to the workflow's initial state)").option("--every <preset>", 'repeat hourly (or every N hours: "6h"), daily, weekly, or monthly').option("--at <when>", "preset time of day HH:MM (default 09:00); for hourly, the minute past the hour :MM (default :00)").option("--on <when>", "weekday (weekly) or day of month (monthly)").option("--cron <expr>", "5-field cron expression (alternative to --every/--at/--on)").option("--tz <iana>", "schedule timezone (defaults to the system timezone)").option("--if-closed", "only create a new instance when all previous instances are closed").option("--schedule-name <name>", "schedule name, unique per project (defaults to the title)")
+    issues.command("create <project>").description("Create an issue in a project, optionally with a recurrence (a scheduled task)").requiredOption(
+      "-t, --title <title>",
+      "issue title (doubles as the title template with a recurrence)"
+    ).option("-d, --description <markdown>", `issue description (Markdown) \u2014 ${BODY_VALUE_HELP}`).option(
+      "-w, --workflow <id-or-name>",
+      "workflow (defaults to project default, else standard)"
+    ).option("-s, --state <name>", "starting state (defaults to the workflow's initial state)").option(
+      "--every <preset>",
+      'repeat hourly (or every N hours: "6h"), daily, weekly, or monthly'
+    ).option(
+      "--at <when>",
+      "preset time of day HH:MM (default 09:00); for hourly, the minute past the hour :MM (default :00)"
+    ).option("--on <when>", "weekday (weekly) or day of month (monthly)").option("--cron <expr>", "5-field cron expression (alternative to --every/--at/--on)").option("--tz <iana>", "schedule timezone (defaults to the system timezone)").option("--if-closed", "only create a new instance when all previous instances are closed").option("--schedule-name <name>", "schedule name, unique per project (defaults to the title)")
   ).action(
     async (projectRef, opts) => {
       const description = opts.description !== void 0 ? readBodyValue(opts.description) : void 0;
@@ -4795,7 +4945,8 @@ function register2(program3) {
       if (opts.title !== void 0) body.title = opts.title;
       if (description !== void 0) body.description = description;
       if (opts.state !== void 0) body.state = opts.state;
-      if (opts.workflow !== void 0) body.workflow_id = (await resolveWorkflow(api, opts.workflow)).id;
+      if (opts.workflow !== void 0)
+        body.workflow_id = (await resolveWorkflow(api, opts.workflow)).id;
       if (Object.keys(body).length === 0) {
         die("nothing to update: pass --title, --description, --state, and/or --workflow");
       }
@@ -4837,15 +4988,17 @@ function register2(program3) {
   });
   withCommon(
     issues.command("comment-edit <ref> <comment-id> <markdown>").description(`Replace the body of your own comment \u2014 Markdown body: ${BODY_VALUE_HELP}`).passThroughOptions()
-  ).action(async (ref, commentId, markdown, opts, command) => {
-    if (helpGuard(command, markdown)) return;
-    const body = readBodyValue(markdown);
-    const api = client(opts);
-    const issue = await resolveIssue(api, ref);
-    const comment = await api.updateComment(issue.id, commentId, { body });
-    if (opts.json) return printJson(comment);
-    console.log(`edited comment ${comment.id} on ${issue.project_name}/#${issue.number}`);
-  });
+  ).action(
+    async (ref, commentId, markdown, opts, command) => {
+      if (helpGuard(command, markdown)) return;
+      const body = readBodyValue(markdown);
+      const api = client(opts);
+      const issue = await resolveIssue(api, ref);
+      const comment = await api.updateComment(issue.id, commentId, { body });
+      if (opts.json) return printJson(comment);
+      console.log(`edited comment ${comment.id} on ${issue.project_name}/#${issue.number}`);
+    }
+  );
   withCommon(
     issues.command("comment-delete <ref> <comment-id>").description("Delete your own comment (the event keeps the record of the deletion)")
   ).action(async (ref, commentId, opts) => {
@@ -4898,7 +5051,12 @@ function register2(program3) {
     );
   });
   withCommon(
-    issues.command("context <ref>").description("Print an issue's effective context (the assembled bundle for its current state)").option("--out <dir>", "write the bundle to a directory: prompt.md, skills/<name>/\u2026, repos.json").option("--force", "allow --out into a non-empty directory")
+    issues.command("context <ref>").description(
+      "Print an issue's effective context (the assembled bundle for its current state)"
+    ).option(
+      "--out <dir>",
+      "write the bundle to a directory: prompt.md, skills/<name>/\u2026, repos.json"
+    ).option("--force", "allow --out into a non-empty directory")
   ).action(async (ref, opts) => {
     const api = client(opts);
     const issue = await resolveIssue(api, ref);
@@ -4911,13 +5069,19 @@ function register2(program3) {
 skills: ${context.skills.map((s) => s.name).join(", ")}`);
       }
       for (const repo of context.repos) {
-        console.log(`repo: ${repo.name} ${repo.url}${repo.branch ? `#${repo.branch}` : ""} \u2192 ${repo.dir}/`);
+        console.log(
+          `repo: ${repo.name} ${repo.url}${repo.branch ? `#${repo.branch}` : ""} \u2192 ${repo.dir}/`
+        );
       }
       for (const o of context.overridden) {
-        console.log(`overridden: ${o.kind} "${o.name}" [${o.scope.label}] (overridden by ${o.overridden_by})`);
+        console.log(
+          `overridden: ${o.kind} "${o.name}" [${o.scope.label}] (overridden by ${o.overridden_by})`
+        );
       }
       for (const c of context.conflicts) {
-        console.log(`conflict: repos ${c.item_ids.join(", ")} all resolve to checkout dir "${c.dir}"`);
+        console.log(
+          `conflict: repos ${c.item_ids.join(", ")} all resolve to checkout dir "${c.dir}"`
+        );
       }
       return;
     }
@@ -4926,20 +5090,23 @@ skills: ${context.skills.map((s) => s.name).join(", ")}`);
         `refusing to write: checkout-directory conflict${context.conflicts.length === 1 ? "" : "s"} among the effective repos (${context.conflicts.map((c) => `"${c.dir}": ${c.item_ids.join(", ")}`).join("; ")}); rename or re-dir the items first`
       );
     }
-    if (existsSync(opts.out) && readdirSync(opts.out).length > 0 && !opts.force) {
+    if (existsSync2(opts.out) && readdirSync(opts.out).length > 0 && !opts.force) {
       die(`refusing to write into non-empty directory ${opts.out} (pass --force to override)`);
     }
-    mkdirSync(opts.out, { recursive: true });
-    writeFileSync(join(opts.out, "prompt.md"), context.prompt.text ? `${context.prompt.text}
-` : "");
+    mkdirSync2(opts.out, { recursive: true });
+    writeFileSync2(
+      join2(opts.out, "prompt.md"),
+      context.prompt.text ? `${context.prompt.text}
+` : ""
+    );
     for (const skill of context.skills) {
       for (const file of skill.files) {
-        const target = join(opts.out, "skills", skill.name, file.path);
-        mkdirSync(dirname(target), { recursive: true });
-        writeFileSync(target, file.content);
+        const target = join2(opts.out, "skills", skill.name, file.path);
+        mkdirSync2(dirname2(target), { recursive: true });
+        writeFileSync2(target, file.content);
       }
     }
-    writeFileSync(join(opts.out, "repos.json"), `${JSON.stringify(context.repos, null, 2)}
+    writeFileSync2(join2(opts.out, "repos.json"), `${JSON.stringify(context.repos, null, 2)}
 `);
     console.log(
       `wrote ${opts.out}/prompt.md, ${context.skills.length} skill${context.skills.length === 1 ? "" : "s"}, repos.json (${context.repos.length} repo${context.repos.length === 1 ? "" : "s"})`
@@ -4967,27 +5134,29 @@ skills: ${context.skills.map((s) => s.name).join(", ")}`);
     if (opts.json) return printJson(prompt);
     console.log(prompt.text);
   });
-  const artifactsCmd = issues.command("artifacts").description("Typed, versioned attachments on an issue \u2014 the work products transition requirements gate on");
-  withCommon(artifactsCmd.command("list <ref>").description("List the artifacts attached to an issue")).action(
-    async (ref, opts) => {
-      const api = client(opts);
-      const issue = await resolveIssue(api, ref);
-      const res = await api.listArtifacts(issue.id);
-      if (opts.json) return printJson(res);
-      if (res.items.length === 0) return console.log("no artifacts attached");
-      table([
-        ["NAME", "TYPE", "VERSION", "FRESH", "SUMMARY", "ATTACHED"],
-        ...res.items.map((a) => [
-          a.name,
-          a.artifact_type,
-          `v${a.current_version.version}`,
-          a.fresh ? "yes" : "no",
-          artifactSummary(a),
-          timestamp(a.current_version.created_at)
-        ])
-      ]);
-    }
+  const artifactsCmd = issues.command("artifacts").description(
+    "Typed, versioned attachments on an issue \u2014 the work products transition requirements gate on"
   );
+  withCommon(
+    artifactsCmd.command("list <ref>").description("List the artifacts attached to an issue")
+  ).action(async (ref, opts) => {
+    const api = client(opts);
+    const issue = await resolveIssue(api, ref);
+    const res = await api.listArtifacts(issue.id);
+    if (opts.json) return printJson(res);
+    if (res.items.length === 0) return console.log("no artifacts attached");
+    table([
+      ["NAME", "TYPE", "VERSION", "FRESH", "SUMMARY", "ATTACHED"],
+      ...res.items.map((a) => [
+        a.name,
+        a.artifact_type,
+        `v${a.current_version.version}`,
+        a.fresh ? "yes" : "no",
+        artifactSummary(a),
+        timestamp(a.current_version.created_at)
+      ])
+    ]);
+  });
   withCommon(
     artifactsCmd.command("show <ref> <name>").description("Show an artifact with its full version history")
   ).action(async (ref, name2, opts) => {
@@ -4995,7 +5164,9 @@ skills: ${context.skills.map((s) => s.name).join(", ")}`);
     const issue = await resolveIssue(api, ref);
     const artifact = await api.getArtifact(issue.id, name2);
     if (opts.json) return printJson(artifact);
-    console.log(`${artifact.artifact_type} artifact "${artifact.name}" on ${issue.project_name}/${issue.number}`);
+    console.log(
+      `${artifact.artifact_type} artifact "${artifact.name}" on ${issue.project_name}/${issue.number}`
+    );
     if (artifact.description) console.log(artifact.description);
     console.log(
       `current: v${artifact.current_version.version} (${artifact.fresh ? "fresh" : "attached before the current state \u2014 reaffirm or attach a new version to satisfy gates"})`
@@ -5018,14 +5189,18 @@ files (v${artifact.current_version.version}):`);
     }
   });
   withCommon(
-    artifactsCmd.command("attach <ref> <name>").description("Attach content to a named artifact slot (creates it, or appends the next version)").option("-f, --file <path>", "upload a file (MIME sniffed from the extension)").option(
+    artifactsCmd.command("attach <ref> <name>").description(
+      "Attach content to a named artifact slot (creates it, or appends the next version)"
+    ).option("-f, --file <path>", "upload a file (MIME sniffed from the extension)").option(
       "--folder <dir>",
       "snapshot a directory tree as one version (collect locally, attach once; MIME per file sniffed)"
     ).option("-t, --text <md|@file>", "inline text document: inline Markdown or @file").option("--link <url>", "link: the URL to attach").option("--pr <spec>", "PR reference: owner/repo#N or a GitHub PR URL").option("--content-type <mime>", "declared MIME type (with --file or --text)").option("--filename <name>", "display filename (with --text; defaults to <name>.md)").option("--title <title>", "display title (with --link)").option("-d, --description <text>", "artifact description, shown in lists and launch prompts")
   ).action(
     async (ref, name2, opts) => {
       const api = client(opts);
-      const sources = [opts.file, opts.folder, opts.text, opts.link, opts.pr].filter((v) => v !== void 0);
+      const sources = [opts.file, opts.folder, opts.text, opts.link, opts.pr].filter(
+        (v) => v !== void 0
+      );
       if (sources.length !== 1) {
         die(
           "pass exactly one content source: --file <path>, --folder <dir>, --text <md|@file>, --link <url>, or --pr <spec> (a link goes in --link; --url is the API base URL)"
@@ -5034,7 +5209,7 @@ files (v${artifact.current_version.version}):`);
       const issue = await resolveIssue(api, ref);
       let artifact;
       if (opts.folder !== void 0) {
-        if (!existsSync(opts.folder) || !statSync(opts.folder).isDirectory()) {
+        if (!existsSync2(opts.folder) || !statSync(opts.folder).isDirectory()) {
           die(`--folder needs a directory, got "${opts.folder}"`);
         }
         const files = walkFolder(opts.folder);
@@ -5046,7 +5221,7 @@ files (v${artifact.current_version.version}):`);
       } else if (opts.file !== void 0) {
         let bytes;
         try {
-          bytes = readFileSync3(opts.file);
+          bytes = readFileSync4(opts.file);
         } catch (err) {
           die(`cannot read ${opts.file}: ${err instanceof Error ? err.message : String(err)}`);
         }
@@ -5091,7 +5266,9 @@ files (v${artifact.current_version.version}):`);
     }
   );
   withCommon(
-    artifactsCmd.command("reaffirm <ref> <name>").description("Bless the current content as fresh (appends a version reusing the same payload)")
+    artifactsCmd.command("reaffirm <ref> <name>").description(
+      "Bless the current content as fresh (appends a version reusing the same payload)"
+    )
   ).action(async (ref, name2, opts) => {
     const api = client(opts);
     const issue = await resolveIssue(api, ref);
@@ -5102,7 +5279,14 @@ files (v${artifact.current_version.version}):`);
     );
   });
   withCommon(
-    artifactsCmd.command("get <ref> <name>").description("Fetch content (current version by default); a link/pr prints its URL").option("--version <n>", "fetch a specific version from the history", (v) => Number.parseInt(v, 10)).option("--out <path>", "write to this file, or into this directory (keeps the stored filename)")
+    artifactsCmd.command("get <ref> <name>").description("Fetch content (current version by default); a link/pr prints its URL").option(
+      "--version <n>",
+      "fetch a specific version from the history",
+      (v) => Number.parseInt(v, 10)
+    ).option(
+      "--out <path>",
+      "write to this file, or into this directory (keeps the stored filename)"
+    )
   ).action(
     async (ref, name2, opts) => {
       const api = client(opts);
@@ -5123,7 +5307,7 @@ files (v${artifact.current_version.version}):`);
         if (opts.out === void 0) {
           die(`artifact "${name2}" is a folder \u2014 pass --out <dir> to write its tree`);
         }
-        if (existsSync(opts.out) && !statSync(opts.out).isDirectory()) {
+        if (existsSync2(opts.out) && !statSync(opts.out).isDirectory()) {
           die(`--out for a folder must be a directory, and "${opts.out}" is a file`);
         }
         const files = version.files ?? [];
@@ -5133,9 +5317,9 @@ files (v${artifact.current_version.version}):`);
             version: opts.version,
             path: file.path
           });
-          const target2 = join(opts.out, file.path);
-          mkdirSync(dirname(target2), { recursive: true });
-          writeFileSync(target2, Buffer.from(content2.bytes));
+          const target2 = join2(opts.out, file.path);
+          mkdirSync2(dirname2(target2), { recursive: true });
+          writeFileSync2(target2, Buffer.from(content2.bytes));
           total += content2.bytes.byteLength;
         }
         return console.log(
@@ -5146,10 +5330,10 @@ files (v${artifact.current_version.version}):`);
       const bytes = Buffer.from(content.bytes);
       if (opts.out !== void 0) {
         let target2 = opts.out;
-        if (existsSync(target2) && statSync(target2).isDirectory()) {
-          target2 = join(target2, version.filename ?? name2);
+        if (existsSync2(target2) && statSync(target2).isDirectory()) {
+          target2 = join2(target2, version.filename ?? name2);
         }
-        writeFileSync(target2, bytes);
+        writeFileSync2(target2, bytes);
         return console.log(`wrote ${target2} (${bytes.byteLength} bytes, ${content.content_type})`);
       }
       if ((content.content_type ?? "").startsWith("text/")) {
@@ -5157,12 +5341,14 @@ files (v${artifact.current_version.version}):`);
         return;
       }
       const target = version.filename ?? name2;
-      writeFileSync(target, bytes);
+      writeFileSync2(target, bytes);
       console.log(`wrote ${target} (${bytes.byteLength} bytes, ${content.content_type})`);
     }
   );
   withCommon(
-    artifactsCmd.command("delete <ref> <name>").description("Delete an artifact \u2014 every version and its stored files (history is not recoverable)")
+    artifactsCmd.command("delete <ref> <name>").description(
+      "Delete an artifact \u2014 every version and its stored files (history is not recoverable)"
+    )
   ).action(async (ref, name2, opts) => {
     const api = client(opts);
     const issue = await resolveIssue(api, ref);
@@ -5173,30 +5359,38 @@ files (v${artifact.current_version.version}):`);
     );
   });
   withCommon(
-    issues.command("assign <ref> [runner]").description("Pin an issue to a runner (<runner>[:tier]) \u2014 replaces routing rules for it; --clear unpins").option("--clear", "remove the pin")
-  ).action(async (ref, runnerSpec, opts) => {
-    const api = client(opts);
-    const issue = await resolveIssue(api, ref);
-    if (opts.clear) {
-      if (runnerSpec !== void 0) die("--clear does not take a runner");
-      const updated2 = await api.updateIssue(issue.id, { pinned_runner_id: null });
-      if (opts.json) return printJson(updated2);
-      return console.log(`unpinned ${updated2.project_name}/#${updated2.number} \u2014 routing rules apply again`);
-    }
-    if (runnerSpec === void 0) die("pass <runner>[:tier] to pin, or --clear to unpin");
-    const { name: name2, tier } = parseTargetSpec(runnerSpec);
-    const runner = await resolveRunner(api, name2);
-    const updated = await api.updateIssue(issue.id, {
-      pinned_runner_id: runner.id,
-      pinned_tier: tier ?? null
-    });
-    if (opts.json) return printJson(updated);
-    console.log(
-      `pinned ${updated.project_name}/#${updated.number} to ${runner.name}${tier ? ` (tier ${tier})` : ""} \u2014 only this runner will take it`
-    );
-  });
+    issues.command("assign <ref> [runner]").description(
+      "Pin an issue to a runner (<runner>[:tier]) \u2014 replaces routing rules for it; --clear unpins"
+    ).option("--clear", "remove the pin")
+  ).action(
+    async (ref, runnerSpec, opts) => {
+      const api = client(opts);
+      const issue = await resolveIssue(api, ref);
+      if (opts.clear) {
+        if (runnerSpec !== void 0) die("--clear does not take a runner");
+        const updated2 = await api.updateIssue(issue.id, { pinned_runner_id: null });
+        if (opts.json) return printJson(updated2);
+        return console.log(
+          `unpinned ${updated2.project_name}/#${updated2.number} \u2014 routing rules apply again`
+        );
+      }
+      if (runnerSpec === void 0) die("pass <runner>[:tier] to pin, or --clear to unpin");
+      const { name: name2, tier } = parseTargetSpec(runnerSpec);
+      const runner = await resolveRunner(api, name2);
+      const updated = await api.updateIssue(issue.id, {
+        pinned_runner_id: runner.id,
+        pinned_tier: tier ?? null
+      });
+      if (opts.json) return printJson(updated);
+      console.log(
+        `pinned ${updated.project_name}/#${updated.number} to ${runner.name}${tier ? ` (tier ${tier})` : ""} \u2014 only this runner will take it`
+      );
+    }
+  );
   withCommon(
-    issues.command("dispatch <ref>").description("Explain why an issue is (not) dispatching: eligibility, routing, per-runner verdicts")
+    issues.command("dispatch <ref>").description(
+      "Explain why an issue is (not) dispatching: eligibility, routing, per-runner verdicts"
+    )
   ).action(async (ref, opts) => {
     const api = client(opts);
     const issue = await resolveIssue(api, ref);
@@ -5264,7 +5458,9 @@ function printNote(note) {
   if (note) console.error(`note: ${note}`);
 }
 function register3(program3) {
-  const journal = program3.command("journal").description("An issue's stage journal: shared notes for its project + the stage your run was launched in");
+  const journal = program3.command("journal").description(
+    "An issue's stage journal: shared notes for its project + the stage your run was launched in"
+  );
   withCommon(
     journal.command("show <ref>").description("Print the journal for the stage your run was launched in").option("--state <workflow>/<state>", STATE_FLAG_HELP)
   ).action(async (ref, opts) => {
@@ -5323,29 +5519,96 @@ start one: tines journal append ${issue.project_name}/${issue.number} "- <date>:
       "the version being replaced (from the prompt or journal show)",
       (v) => Number.parseInt(v, 10)
     )
-  ).action(async (ref, opts) => {
-    const api = client(opts);
-    const { scope, note, item } = await resolveJournal(api, ref, opts.state);
-    printNote(note);
-    if (!item) die(`no journal exists yet for ${scope.label}; nothing to rewrite`);
-    const updated = await api.updateContextItem(item.id, {
-      body: readBodyValue(opts.body),
-      expected_version: opts.expectVersion
-    });
-    if (opts.json) return printJson(updated);
-    console.log(`rewrote the ${scope.label} journal (now v${updated.version})`);
+  ).action(
+    async (ref, opts) => {
+      const api = client(opts);
+      const { scope, note, item } = await resolveJournal(api, ref, opts.state);
+      printNote(note);
+      if (!item) die(`no journal exists yet for ${scope.label}; nothing to rewrite`);
+      const updated = await api.updateContextItem(item.id, {
+        body: readBodyValue(opts.body),
+        expected_version: opts.expectVersion
+      });
+      if (opts.json) return printJson(updated);
+      console.log(`rewrote the ${scope.label} journal (now v${updated.version})`);
+    }
+  );
+}
+
+// src/commands/login.ts
+import { readFileSync as readFileSync5 } from "node:fs";
+function maskKey(key) {
+  return `${key.slice(0, 14)}\u2026`;
+}
+function readKeyArg(value) {
+  if (value !== "-") return value;
+  const key = readFileSync5(0, "utf8").trim();
+  if (!key) die("no API key on stdin");
+  return key;
+}
+function register4(program3) {
+  program3.command("login").description("Store the API URL and key for this machine, so commands need no env vars").option("-u, --url <url>", `base URL of the Tines API to store (default ${DEFAULT_URL})`).option("--api-key <key>", 'API key from Settings \u2192 API keys ("-" reads it from stdin)').option("--no-verify", "store without checking the key against the API").action(async (opts) => {
+    if (!opts.url && !opts.apiKey) die("pass --url and/or --api-key");
+    const dir = defaultConfigDir();
+    const apiKey = opts.apiKey ? readKeyArg(opts.apiKey) : void 0;
+    const url = (opts.url ?? resolveUrlSetting({}).value ?? DEFAULT_URL).replace(/\/+$/, "");
+    const key = apiKey ?? resolveApiKeySetting({}).value;
+    if (opts.verify && key) {
+      try {
+        await createApiClient({ baseUrl: url, apiKey: key }).listProjects({ limit: 1 });
+      } catch (err) {
+        if (err instanceof ApiError && err.status === 401) {
+          die(`${url} rejected the API key (${err.message}); nothing stored`);
+        }
+        if (err instanceof ApiError) throw err;
+        const cause = err.cause?.code;
+        die(
+          `could not reach ${url}${cause ? ` (${cause})` : ""}; nothing stored (pass --no-verify to store anyway)`
+        );
+      }
+    }
+    const stored = saveCliConfig(dir, { url: opts.url, api_key: apiKey });
+    console.log(`stored in ${configPath(dir)}`);
+    console.log(`url: ${stored.url ?? `${DEFAULT_URL} (default)`}`);
+    console.log(`api key: ${stored.api_key ? maskKey(stored.api_key) : "none"}`);
+  });
+  program3.command("logout").description("Forget the stored API URL and key").action(() => {
+    const dir = defaultConfigDir();
+    console.log(
+      clearCliConfig(dir) ? `removed ${configPath(dir)}` : `nothing stored in ${configPath(dir)}`
+    );
+  });
+  withCommon(
+    program3.command("config").description("Show the API URL and key in effect, and where each comes from")
+  ).action((opts) => {
+    const url = resolveUrlSetting(opts);
+    const key = resolveApiKeySetting(opts);
+    const report = {
+      url: { value: url.value, source: url.source },
+      api_key: {
+        value: key.value ? maskKey(key.value) : null,
+        source: key.value ? key.source : null
+      },
+      config_path: configPath(defaultConfigDir())
+    };
+    if (opts.json) return printJson(report);
+    console.log(`url: ${report.url.value} (${report.url.source})`);
+    console.log(
+      report.api_key.value ? `api key: ${report.api_key.value} (${report.api_key.source})` : "api key: none (pass --api-key, set TINES_API_KEY, or run `tines login`)"
+    );
+    console.log(`config file: ${report.config_path}`);
   });
 }
 
 // src/commands/misc.ts
 function registerTime(program3) {
-  withCommon(program3.command("time").description("Fetch the current time from the Tines API")).action(
-    async (opts) => {
-      const result = await client(opts).getTime();
-      if (opts.json) printJson(result);
-      else console.log(`Server time: ${result.time} (unix ${result.unix})`);
-    }
-  );
+  withCommon(
+    program3.command("time").description("Fetch the current time from the Tines API")
+  ).action(async (opts) => {
+    const result = await client(opts).getTime();
+    if (opts.json) printJson(result);
+    else console.log(`Server time: ${result.time} (unix ${result.unix})`);
+  });
 }
 function registerEvents(program3) {
   const events = program3.command("events").description("Read the activity log");
@@ -5374,7 +5637,7 @@ function registerEvents(program3) {
 }
 
 // src/commands/projects.ts
-function register4(program3) {
+function register5(program3) {
   const projects = program3.command("projects").description("Manage projects");
   withList(projects.command("list").description("List projects")).action(async (opts) => {
     const api = client(opts);
@@ -5388,7 +5651,10 @@ function register4(program3) {
     });
   });
   withCommon(
-    projects.command("create <name>").description("Create a project (with its initial context prompt)").option("-d, --description <text>", "project description").option("-w, --default-workflow <id-or-name>", "default workflow for new issues").option("--prompt <md>", "initial conventions prompt, stitched into every issue's agent prompt: inline Markdown or @file").option("--no-prompt", "create without an initial prompt")
+    projects.command("create <name>").description("Create a project (with its initial context prompt)").option("-d, --description <text>", "project description").option("-w, --default-workflow <id-or-name>", "default workflow for new issues").option(
+      "--prompt <md>",
+      "initial conventions prompt, stitched into every issue's agent prompt: inline Markdown or @file"
+    ).option("--no-prompt", "create without an initial prompt")
   ).action(
     async (name2, opts) => {
       if (opts.prompt === void 0 || opts.prompt === true) {
@@ -5465,8 +5731,10 @@ async function resolveRoutingScope(api, opts) {
   if (opts.state) parts.push(`state ${opts.state}`);
   return { projectId, stateId, label: parts.length > 0 ? parts.join(" \xB7 ") : "global" };
 }
-function register5(program3) {
-  const routing = program3.command("routing").description("Scoped routing rules: which runner takes which issues (most specific scope wins)");
+function register6(program3) {
+  const routing = program3.command("routing").description(
+    "Scoped routing rules: which runner takes which issues (most specific scope wins)"
+  );
   withCommon(routing.command("list").description("List routing rules, most specific first")).action(
     async (opts) => {
       const res = await client(opts).listRoutingRules();
@@ -5479,7 +5747,9 @@ function register5(program3) {
     }
   );
   withCommon(
-    routing.command("set <target...>").description("Create or replace the rule at a scope: an ordered list of <runner>[:tier] targets").option("-p, --project <name>", "scope: project name or id").option("-s, --state <workflow/state>", "scope: workflow-qualified state")
+    routing.command("set <target...>").description(
+      "Create or replace the rule at a scope: an ordered list of <runner>[:tier] targets"
+    ).option("-p, --project <name>", "scope: project name or id").option("-s, --state <workflow/state>", "scope: workflow-qualified state")
   ).action(async (targetSpecs, opts) => {
     const api = client(opts);
     const scope = await resolveRoutingScope(api, opts);
@@ -5493,7 +5763,11 @@ function register5(program3) {
     const existing = items.find(
       (r) => r.scope.project_id === scope.projectId && r.scope.workflow_state_id === scope.stateId
     );
-    const rule = existing ? await api.updateRoutingRule(existing.id, { targets }) : await api.createRoutingRule({ project_id: scope.projectId, workflow_state_id: scope.stateId, targets });
+    const rule = existing ? await api.updateRoutingRule(existing.id, { targets }) : await api.createRoutingRule({
+      project_id: scope.projectId,
+      workflow_state_id: scope.stateId,
+      targets
+    });
     if (opts.json) return printJson(rule);
     console.log(
       `${existing ? "updated" : "created"} the ${rule.scope.label} rule: ${ruleTargetsLabel(rule)}`
@@ -5524,21 +5798,21 @@ import {
   createWriteStream,
   existsSync as existsSync4,
   mkdirSync as mkdirSync4,
-  readFileSync as readFileSync7,
+  readFileSync as readFileSync9,
   rmSync as rmSync2,
   statSync as statSync3,
-  unlinkSync,
+  unlinkSync as unlinkSync2,
   writeFileSync as writeFileSync3
 } from "node:fs";
 import { hostname, platform, arch } from "node:os";
-import { dirname as dirname4, join as join4 } from "node:path";
+import { dirname as dirname4, join as join5 } from "node:path";
 
 // src/version.ts
-import { readFileSync as readFileSync4 } from "node:fs";
+import { readFileSync as readFileSync6 } from "node:fs";
 function cliVersion() {
   try {
     const manifest = new URL("../package.json", import.meta.url);
-    return JSON.parse(readFileSync4(manifest, "utf8")).version ?? "0.0.0-unknown";
+    return JSON.parse(readFileSync6(manifest, "utf8")).version ?? "0.0.0-unknown";
   } catch {
     return "0.0.0-unknown";
   }
@@ -5586,7 +5860,8 @@ function renderStreamEvent(event) {
     case "result": {
       const parts = [];
       if (typeof event.num_turns === "number") parts.push(`${event.num_turns} turns`);
-      if (typeof event.total_cost_usd === "number") parts.push(`$${event.total_cost_usd.toFixed(2)}`);
+      if (typeof event.total_cost_usd === "number")
+        parts.push(`$${event.total_cost_usd.toFixed(2)}`);
       const detail = parts.length > 0 ? ` (${parts.join(", ")})` : "";
       const lines = [`[session] result: ${event.subtype ?? "done"}${detail}`];
       if (event.is_error && event.result) lines.push(`[error] ${clip(event.result, 2e3)}`);
@@ -5641,8 +5916,8 @@ var ClaudeStreamRenderer = class {
 
 // src/daemon/cli-refresh.ts
 import { spawn } from "node:child_process";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync5 } from "node:fs";
-import { dirname as dirname2, join as join2 } from "node:path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync7 } from "node:fs";
+import { dirname as dirname3, join as join3 } from "node:path";
 
 // src/daemon/support.ts
 import { delimiter } from "node:path";
@@ -5917,14 +6192,14 @@ function buildSpawnEnv(base, opts) {
 var PACKAGE = "tines";
 var NPM_ARGS = ["--min-release-age=0", "--no-audit", "--no-fund", "--loglevel=error"];
 function agentCliPrefix(configDir) {
-  return join2(configDir, "cli");
+  return join3(configDir, "cli");
 }
 function binDirOf(prefix) {
-  return join2(prefix, "node_modules", ".bin");
+  return join3(prefix, "node_modules", ".bin");
 }
 function installedVersion(prefix) {
   try {
-    const pkg = readFileSync5(join2(prefix, "node_modules", PACKAGE, "package.json"), "utf8");
+    const pkg = readFileSync7(join3(prefix, "node_modules", PACKAGE, "package.json"), "utf8");
     const version = JSON.parse(pkg).version;
     return typeof version === "string" ? version : null;
   } catch {
@@ -5933,7 +6208,7 @@ function installedVersion(prefix) {
 }
 function lastGood(prefix) {
   const binDir = binDirOf(prefix);
-  if (!existsSync2(join2(binDir, PACKAGE))) return AMBIENT_CLI;
+  if (!existsSync3(join3(binDir, PACKAGE))) return AMBIENT_CLI;
   return { binDir, version: installedVersion(prefix), source: "stale" };
 }
 function runNpm(file, args, cwd, timeoutMs) {
@@ -5970,7 +6245,7 @@ async function installAgentCli(opts) {
   const prefix = agentCliPrefix(opts.configDir);
   const timeoutMs = opts.timeoutMs ?? 6e4;
   try {
-    mkdirSync2(prefix, { recursive: true });
+    mkdirSync3(prefix, { recursive: true });
   } catch (err) {
     opts.log(`agent CLI refresh: cannot create ${prefix} (${message(err)})`);
     return AMBIENT_CLI;
@@ -5978,8 +6253,8 @@ async function installAgentCli(opts) {
   const args = ["install", "--prefix", prefix, `${PACKAGE}@latest`, ...NPM_ARGS];
   let result = await runNpm("npm", args, prefix, timeoutMs);
   if (result.spawnError?.code === "ENOENT") {
-    const sibling = join2(dirname2(process.execPath), "npm");
-    if (existsSync2(sibling)) result = await runNpm(sibling, args, prefix, timeoutMs);
+    const sibling = join3(dirname3(process.execPath), "npm");
+    if (existsSync3(sibling)) result = await runNpm(sibling, args, prefix, timeoutMs);
   }
   if (result.code !== 0) {
     const fallback = lastGood(prefix);
@@ -6001,38 +6276,13 @@ function message(err) {
 }
 
 // src/daemon/store.ts
-import {
-  existsSync as existsSync3,
-  mkdirSync as mkdirSync3,
-  readdirSync as readdirSync2,
-  readFileSync as readFileSync6,
-  rmSync,
-  statSync as statSync2,
-  writeFileSync as writeFileSync2
-} from "node:fs";
-import { homedir } from "node:os";
-import { dirname as dirname3, join as join3 } from "node:path";
-function defaultConfigDir() {
-  return process.env.TINES_CONFIG_DIR ?? join3(homedir(), ".config", "tines");
-}
-function readJsonFile(path2) {
-  if (!existsSync3(path2)) return null;
-  try {
-    return JSON.parse(readFileSync6(path2, "utf8"));
-  } catch {
-    return null;
-  }
-}
-function writeJsonFile(path2, value, { secret = false } = {}) {
-  mkdirSync3(dirname3(path2), { recursive: true });
-  writeFileSync2(path2, `${JSON.stringify(value, null, 2)}
-`, secret ? { mode: 384 } : {});
-}
+import { readdirSync as readdirSync2, readFileSync as readFileSync8, rmSync, statSync as statSync2 } from "node:fs";
+import { join as join4 } from "node:path";
 function credentialsKey(url, name2) {
   return `${url.replace(/\/+$/, "")}#${name2}`;
 }
 function credentialsPath(dir) {
-  return join3(dir, "runners.json");
+  return join4(dir, "runners.json");
 }
 function loadRunnerCredentials(dir, url, name2) {
   const all = readJsonFile(credentialsPath(dir));
@@ -6055,7 +6305,7 @@ function clearRunnerCredentials(dir, url, name2) {
   writeJsonFile(path2, all, { secret: true });
 }
 function daemonStatePath(dir, runnerId) {
-  return join3(dir, `daemon-state-${runnerId}.json`);
+  return join4(dir, `daemon-state-${runnerId}.json`);
 }
 function loadDaemonState(path2) {
   const state = readJsonFile(path2);
@@ -6069,10 +6319,10 @@ function saveDaemonState(path2, runs) {
 }
 function processStartTimeMs(pid) {
   try {
-    const stat = readFileSync6(`/proc/${pid}/stat`, "utf8");
+    const stat = readFileSync8(`/proc/${pid}/stat`, "utf8");
     const afterComm = stat.slice(stat.lastIndexOf(")") + 2).split(" ");
     const startTicks = Number(afterComm[19]);
-    const btimeLine = readFileSync6("/proc/stat", "utf8").split("\n").find((line) => line.startsWith("btime "));
+    const btimeLine = readFileSync8("/proc/stat", "utf8").split("\n").find((line) => line.startsWith("btime "));
     const btime = Number(btimeLine?.slice("btime ".length));
     if (!Number.isFinite(startTicks) || !Number.isFinite(btime)) return null;
     return btime * 1e3 + startTicks / 100 * 1e3;
@@ -6081,10 +6331,10 @@ function processStartTimeMs(pid) {
   }
 }
 function workspacesDir(configDir) {
-  return join3(configDir, "workspaces");
+  return join4(configDir, "workspaces");
 }
 function keptMarkerPath(workspace) {
-  return join3(workspace, "kept.json");
+  return join4(workspace, "kept.json");
 }
 function writeKeptMarker(workspace, marker) {
   writeJsonFile(keptMarkerPath(workspace), marker);
@@ -6106,7 +6356,7 @@ function listKeptWorkspaces(configDir) {
   }
   const kept = [];
   for (const name2 of names) {
-    const path2 = join3(root, name2);
+    const path2 = join4(root, name2);
     const marker = readKeptMarker(path2);
     if (marker) kept.push({ ...marker, path: path2 });
   }
@@ -6143,7 +6393,7 @@ function directorySizeBytes(path2) {
     return 0;
   }
   for (const entry of entries) {
-    const child = join3(path2, entry.name);
+    const child = join4(path2, entry.name);
     if (entry.isDirectory()) total += directorySizeBytes(child);
     else if (entry.isFile()) {
       try {
@@ -6166,20 +6416,23 @@ async function uploadRawLog(run) {
     await new Promise((resolve) => run.rawSpool?.end(resolve) ?? resolve());
     const size = statSync3(path2).size;
     if (size > 0) {
-      let body = readFileSync7(path2);
+      let body = readFileSync9(path2);
       if (body.byteLength > RUN_LOG_RAW_MAX_BYTES) {
         const marker = Buffer.from(
           `{"type":"tines_truncated","dropped_bytes":${body.byteLength - RUN_LOG_RAW_MAX_BYTES}}
 `
         );
-        body = Buffer.concat([marker, body.subarray(body.byteLength - RUN_LOG_RAW_MAX_BYTES + marker.byteLength)]);
+        body = Buffer.concat([
+          marker,
+          body.subarray(body.byteLength - RUN_LOG_RAW_MAX_BYTES + marker.byteLength)
+        ]);
       }
       await run.rawUpload(body);
     }
   } catch {
   } finally {
     try {
-      unlinkSync(path2);
+      unlinkSync2(path2);
     } catch {
     }
   }
@@ -6236,7 +6489,9 @@ async function runDaemon(opts) {
   };
   let creds = loadRunnerCredentials(opts.configDir, opts.url, opts.name);
   if (creds) {
-    log(`reconnecting as runner "${opts.name}" (${creds.runner_id}) \u2014 token from ${opts.configDir}`);
+    log(
+      `reconnecting as runner "${opts.name}" (${creds.runner_id}) \u2014 token from ${opts.configDir}`
+    );
   } else {
     if (!opts.apiKey) {
       throw new Error(
@@ -6265,37 +6520,40 @@ async function runDaemon(opts) {
   const ensureCli = () => opts.cliRefresh ? refresher.ensure() : Promise.resolve(AMBIENT_CLI);
   const cliLabel = (cli) => cli.source === "ambient" ? `ambient PATH (${opts.cliRefresh ? "refresh failed" : "refresh disabled"})` : `tines ${cli.version ?? "unknown"} (daemon-managed${cli.source === "stale" ? ", last-good copy" : ""})`;
   log(`agent CLI: ${cliLabel(await ensureCli())}`);
-  const table2 = new RunTable({
-    finish: async (run, status, error) => {
-      await client2.finishRun(run.runId, { status, ...error ? { error } : {} });
-    },
-    release: (run, { keep, outcome }) => {
-      if (run.timeout) clearTimeout(run.timeout);
-      run.renderer?.finish();
-      settleWorkspace(run.workspace, keep, {
-        run_id: run.runId,
-        ...run.issueLabel ? { issue_ref: run.issueLabel } : {},
-        status: outcome,
-        ...run.endNote ? { error: run.endNote } : {}
-      });
-      void uploadRawLog(run);
-      sweepKeptWorkspaces();
-    },
-    noteKept: (run) => run.batcher.append(`workspace kept at ${run.workspace}
+  const table2 = new RunTable(
+    {
+      finish: async (run, status, error) => {
+        await client2.finishRun(run.runId, { status, ...error ? { error } : {} });
+      },
+      release: (run, { keep, outcome }) => {
+        if (run.timeout) clearTimeout(run.timeout);
+        run.renderer?.finish();
+        settleWorkspace(run.workspace, keep, {
+          run_id: run.runId,
+          ...run.issueLabel ? { issue_ref: run.issueLabel } : {},
+          status: outcome,
+          ...run.endNote ? { error: run.endNote } : {}
+        });
+        void uploadRawLog(run);
+        sweepKeptWorkspaces();
+      },
+      noteKept: (run) => run.batcher.append(`workspace kept at ${run.workspace}
 `),
-    persist: () => {
-      const entries = table2.values().filter((run) => run.child?.pid !== void 0).map((run) => ({
-        run_id: run.runId,
-        pid: run.child.pid,
-        workspace: run.workspace,
-        key_fingerprint: run.keyFingerprint,
-        started_at: run.spawnedAt,
-        ...run.issueLabel ? { issue_ref: run.issueLabel } : {}
-      }));
-      saveDaemonState(statePath, entries);
+      persist: () => {
+        const entries = table2.values().filter((run) => run.child?.pid !== void 0).map((run) => ({
+          run_id: run.runId,
+          pid: run.child.pid,
+          workspace: run.workspace,
+          key_fingerprint: run.keyFingerprint,
+          started_at: run.spawnedAt,
+          ...run.issueLabel ? { issue_ref: run.issueLabel } : {}
+        }));
+        saveDaemonState(statePath, entries);
+      },
+      log
     },
-    log
-  }, { keep: (outcome) => keepWorkspace(opts.keepWorkspaces, outcome) });
+    { keep: (outcome) => keepWorkspace(opts.keepWorkspaces, outcome) }
+  );
   for (const orphan of loadDaemonState(statePath)) {
     if (pidAlive(orphan.pid)) {
       const processStart = processStartTimeMs(orphan.pid);
@@ -6303,7 +6561,9 @@ async function runDaemon(opts) {
       if (reused) {
         log(`state-file pid ${orphan.pid} (run ${orphan.run_id}) was recycled; not killing it`);
       } else {
-        log(`killing orphaned harness from a previous life: run ${orphan.run_id} (pid ${orphan.pid})`);
+        log(
+          `killing orphaned harness from a previous life: run ${orphan.run_id} (pid ${orphan.pid})`
+        );
         killTree(orphan.pid, "SIGKILL");
       }
     }
@@ -6336,7 +6596,7 @@ async function runDaemon(opts) {
   const launch = async (assignment) => {
     const runId = assignment.run.id;
     if (table2.has(runId)) return;
-    const workspace = join4(workspacesDir(opts.configDir), runId);
+    const workspace = join5(workspacesDir(opts.configDir), runId);
     const issueLabel = assignment.run.issue_ref ? `${assignment.run.issue_ref.project_name}/${assignment.run.issue_ref.number}` : void 0;
     const run = {
       runId,
@@ -6354,32 +6614,43 @@ async function runDaemon(opts) {
     };
     run.flush = () => run.batcher.flush();
     table2.track(run);
-    log(`run ${runId} assigned (issue ${issueLabel ?? assignment.run.issue_id}); materializing workspace`);
+    log(
+      `run ${runId} assigned (issue ${issueLabel ?? assignment.run.issue_id}); materializing workspace`
+    );
     try {
       rmSync2(workspace, { recursive: true, force: true });
       mkdirSync4(workspace, { recursive: true });
-      writeFileSync3(join4(workspace, "prompt.md"), `${assignment.prompt}
+      writeFileSync3(join5(workspace, "prompt.md"), `${assignment.prompt}
 `);
       for (const skill of assignment.bundle.skills) {
         for (const file of skill.files) {
-          const target = join4(workspace, "skills", skill.name, file.path);
+          const target = join5(workspace, "skills", skill.name, file.path);
           mkdirSync4(dirname4(target), { recursive: true });
           writeFileSync3(target, file.content);
         }
       }
       writeFileSync3(
-        join4(workspace, "repos.json"),
+        join5(workspace, "repos.json"),
         `${JSON.stringify(assignment.bundle.repos, null, 2)}
 `
       );
       for (const repo of assignment.bundle.repos) {
         if (run.settled) return table2.cleanup(run);
-        const args = ["clone", ...repo.branch ? ["--branch", repo.branch] : [], repo.url, repo.dir];
+        const args = [
+          "clone",
+          ...repo.branch ? ["--branch", repo.branch] : [],
+          repo.url,
+          repo.dir
+        ];
         run.batcher.append(`$ git ${args.join(" ")}
 `);
         const result = await runGit(args, workspace, run.batcher);
         if (result !== 0) {
-          return table2.finishAndCleanup(run, "failed", `git clone failed for ${repo.url} (exit ${result})`);
+          return table2.finishAndCleanup(
+            run,
+            "failed",
+            `git clone failed for ${repo.url} (exit ${result})`
+          );
         }
       }
       if (run.settled) return table2.cleanup(run);
@@ -6393,7 +6664,7 @@ async function runDaemon(opts) {
       );
       const harnessInput = {
         workspace,
-        promptFile: join4(workspace, "prompt.md"),
+        promptFile: join5(workspace, "prompt.md"),
         prompt: assignment.prompt,
         model: assignment.run.model
       };
@@ -6426,7 +6697,7 @@ async function runDaemon(opts) {
         const renderer = new ClaudeStreamRenderer((line) => run.batcher.append(line));
         run.renderer = renderer;
         run.drain = () => renderer.finish();
-        const spoolPath = join4(opts.configDir, "rawlogs", `${runId}.ndjson`);
+        const spoolPath = join5(opts.configDir, "rawlogs", `${runId}.ndjson`);
         mkdirSync4(dirname4(spoolPath), { recursive: true });
         run.rawSpoolPath = spoolPath;
         run.rawSpool = createWriteStream(spoolPath);
@@ -6439,16 +6710,13 @@ async function runDaemon(opts) {
         child.stdout?.on("data", (data) => run.batcher.append(data.toString("utf8")));
       }
       child.stderr?.on("data", (data) => run.batcher.append(data.toString("utf8")));
-      run.timeout = setTimeout(
-        () => {
-          if (run.settled) return;
-          log(`run ${runId} hit its ${assignment.timeout_minutes}m timeout; killing`);
-          run.timedOut = true;
-          if (child.pid) killTree(child.pid, "SIGTERM");
-          if (child.pid) setTimeout(() => killTree(child.pid, "SIGKILL"), 5e3).unref?.();
-        },
-        assignment.timeout_minutes * 6e4
-      );
+      run.timeout = setTimeout(() => {
+        if (run.settled) return;
+        log(`run ${runId} hit its ${assignment.timeout_minutes}m timeout; killing`);
+        run.timedOut = true;
+        if (child.pid) killTree(child.pid, "SIGTERM");
+        if (child.pid) setTimeout(() => killTree(child.pid, "SIGKILL"), 5e3).unref?.();
+      }, assignment.timeout_minutes * 6e4);
       child.on("error", (err) => {
         void table2.finishAndCleanup(run, "failed", `failed to launch harness: ${message2(err)}`);
       });
@@ -6572,27 +6840,31 @@ function printTierTable(runner) {
       override?.effort ? `effort ${override.effort}` : null,
       stale ? `stale \u2014 built-in is now ${builtin}` : null
     ].filter(Boolean);
-    console.log(`  ${tier}: ${model}  [${source}]${marks.length > 0 ? `  (${marks.join(", ")})` : ""}`);
+    console.log(
+      `  ${tier}: ${model}  [${source}]${marks.length > 0 ? `  (${marks.join(", ")})` : ""}`
+    );
   }
 }
-function register6(program3) {
+function register7(program3) {
   const runners = program3.command("runners").description("Manage the runner registry");
-  withCommon(runners.command("list").description("List runners")).action(async (opts) => {
-    const res = await client(opts).listRunners();
-    if (opts.json) return printJson(res);
-    if (res.items.length === 0) return console.log("no runners");
-    table([
-      ["NAME", "TYPE", "STATUS", "RUNS", "TIER", "LAST SEEN"],
-      ...res.items.map((r) => [
-        r.name,
-        r.type,
-        runnerStatusLabel(r),
-        `${r.active_runs}/${r.max_concurrent}`,
-        r.default_tier,
-        r.last_seen_at ? timestamp(r.last_seen_at) : "\u2014"
-      ])
-    ]);
-  });
+  withCommon(runners.command("list").description("List runners")).action(
+    async (opts) => {
+      const res = await client(opts).listRunners();
+      if (opts.json) return printJson(res);
+      if (res.items.length === 0) return console.log("no runners");
+      table([
+        ["NAME", "TYPE", "STATUS", "RUNS", "TIER", "LAST SEEN"],
+        ...res.items.map((r) => [
+          r.name,
+          r.type,
+          runnerStatusLabel(r),
+          `${r.active_runs}/${r.max_concurrent}`,
+          r.default_tier,
+          r.last_seen_at ? timestamp(r.last_seen_at) : "\u2014"
+        ])
+      ]);
+    }
+  );
   withCommon(runners.command("show <name>").description("Show a runner")).action(
     async (ref, opts) => {
       const runner = await resolveRunner(client(opts), ref);
@@ -6616,7 +6888,8 @@ function register6(program3) {
         const b = runner.budget;
         const parts = [];
         if (b.max_run_cost_usd !== void 0) parts.push(`$${b.max_run_cost_usd}/run`);
-        if (b.max_run_tokens !== void 0) parts.push(`${b.max_run_tokens.toLocaleString()} tok/run`);
+        if (b.max_run_tokens !== void 0)
+          parts.push(`${b.max_run_tokens.toLocaleString()} tok/run`);
         if (b.daily_usd !== void 0) parts.push(`$${b.daily_usd}/day`);
         if (b.daily_tokens !== void 0) parts.push(`${b.daily_tokens.toLocaleString()} tok/day`);
         if (parts.length > 0) console.log(`budget: ${parts.join("  ")}`);
@@ -6670,7 +6943,12 @@ function register6(program3) {
     }
   );
   withCommon(
-    runners.command("budget <name>").description("Set or clear a runner's money limits (per-run caps enforce now; daily limits arrive with the budgets milestone)").option("--max-run-usd <n>", "hard per-run cost cap (platform-enforced on Claude runners)").option("--max-run-tokens <n>", "hard per-run token cap (input + output)").option("--daily-usd <n>", "daily USD limit (stored now, enforced by the budgets milestone)").option("--daily-tokens <n>", "daily token limit (stored now, enforced by the budgets milestone)").option("--clear", "remove all limits")
+    runners.command("budget <name>").description(
+      "Set or clear a runner's money limits (per-run caps enforce now; daily limits arrive with the budgets milestone)"
+    ).option("--max-run-usd <n>", "hard per-run cost cap (platform-enforced on Claude runners)").option("--max-run-tokens <n>", "hard per-run token cap (input + output)").option("--daily-usd <n>", "daily USD limit (stored now, enforced by the budgets milestone)").option(
+      "--daily-tokens <n>",
+      "daily token limit (stored now, enforced by the budgets milestone)"
+    ).option("--clear", "remove all limits")
   ).action(
     async (ref, opts) => {
       const api = client(opts);
@@ -6685,7 +6963,8 @@ function register6(program3) {
       } else if (flags) {
         const num = (value, flag) => {
           const n = Number(value);
-          if (!Number.isFinite(n) || n <= 0) die(`${flag} must be a positive number, got "${value}"`);
+          if (!Number.isFinite(n) || n <= 0)
+            die(`${flag} must be a positive number, got "${value}"`);
           return n;
         };
         updated = await api.updateRunner(runner.id, {
@@ -6703,10 +6982,14 @@ function register6(program3) {
       if (!b) return console.log(`no limits on "${updated.name}"`);
       console.log(`limits on "${updated.name}":`);
       if (b.max_run_cost_usd !== void 0) console.log(`  $${b.max_run_cost_usd} per run`);
-      if (b.max_run_tokens !== void 0) console.log(`  ${b.max_run_tokens.toLocaleString()} tokens per run`);
-      if (b.daily_usd !== void 0) console.log(`  $${b.daily_usd} per day (enforced by the budgets milestone)`);
+      if (b.max_run_tokens !== void 0)
+        console.log(`  ${b.max_run_tokens.toLocaleString()} tokens per run`);
+      if (b.daily_usd !== void 0)
+        console.log(`  $${b.daily_usd} per day (enforced by the budgets milestone)`);
       if (b.daily_tokens !== void 0) {
-        console.log(`  ${b.daily_tokens.toLocaleString()} tokens per day (enforced by the budgets milestone)`);
+        console.log(
+          `  ${b.daily_tokens.toLocaleString()} tokens per day (enforced by the budgets milestone)`
+        );
       }
     }
   );
@@ -6729,7 +7012,12 @@ function register6(program3) {
     }
   );
   withCommon(
-    runners.command("remove <name>").description("Remove a runner (refused while routing rules or pins reference it, unless --force)").option("--force", "strip the runner from routing rules and clear issue pins (emptied rules are kept, flagged)")
+    runners.command("remove <name>").description(
+      "Remove a runner (refused while routing rules or pins reference it, unless --force)"
+    ).option(
+      "--force",
+      "strip the runner from routing rules and clear issue pins (emptied rules are kept, flagged)"
+    )
   ).action(async (ref, opts) => {
     const api = client(opts);
     const runner = await resolveRunner(api, ref);
@@ -6751,14 +7039,28 @@ function register6(program3) {
         runner_id: rotated.runner.id,
         token: rotated.runner_token
       });
-      console.log(`stored it for the daemon on this machine (${defaultConfigDir()}); restart the daemon to adopt it.`);
+      console.log(
+        `stored it for the daemon on this machine (${defaultConfigDir()}); restart the daemon to adopt it.`
+      );
     } else {
-      console.log("drop it into the daemon machine's config \u2014 its next poll gets a 401 until it adopts the new token.");
+      console.log(
+        "drop it into the daemon machine's config \u2014 its next poll gets a 401 until it adopts the new token."
+      );
     }
   });
   const runnerCmd = program3.command("runner").description("The local runner daemon");
   withCommon(
-    runnerCmd.command("daemon").description("Run the local runner daemon: register/reconnect, poll for assigned runs, execute them").option("--name <name>", "runner name, unique per user (default: this hostname)").option("--harness <harness>", "claude-code | codex | custom", "claude-code").option("--command <template>", "custom harness command template ({prompt_file}, {workspace}, {model})").option("--max-concurrent <n>", "maximum simultaneous runs", (v) => Number.parseInt(v, 10), 1).option("--poll-interval <seconds>", "seconds between polls", (v) => Number.parseInt(v, 10), 15).option(
+    runnerCmd.command("daemon").description(
+      "Run the local runner daemon: register/reconnect, poll for assigned runs, execute them"
+    ).option("--name <name>", "runner name, unique per user (default: this hostname)").option("--harness <harness>", "claude-code | codex | custom", "claude-code").option(
+      "--command <template>",
+      "custom harness command template ({prompt_file}, {workspace}, {model})"
+    ).option("--max-concurrent <n>", "maximum simultaneous runs", (v) => Number.parseInt(v, 10), 1).option(
+      "--poll-interval <seconds>",
+      "seconds between polls",
+      (v) => Number.parseInt(v, 10),
+      15
+    ).option(
       "--no-cli-refresh",
       "do not install/refresh the agent-facing tines CLI from npm (harnesses use the ambient PATH)"
     ).option(
@@ -6783,7 +7085,9 @@ function register6(program3) {
         die(`--harness must be claude-code, codex, or custom, got "${opts.harness}"`);
       }
       if (harness === "custom" && !opts.command) {
-        die('the custom harness needs --command "<template>" ({prompt_file}, {workspace}, {model})');
+        die(
+          'the custom harness needs --command "<template>" ({prompt_file}, {workspace}, {model})'
+        );
       }
       if (harness !== "custom" && opts.command) die("--command only applies to --harness custom");
       if (!Number.isInteger(opts.maxConcurrent) || opts.maxConcurrent < 1 || opts.maxConcurrent > 100) {
@@ -6794,7 +7098,9 @@ function register6(program3) {
       }
       const keepWorkspaces = opts.keepWorkspaces;
       if (!KEEP_WORKSPACES_MODES.includes(keepWorkspaces)) {
-        die(`--keep-workspaces must be ${KEEP_WORKSPACES_MODES.join(", ")}, got "${opts.keepWorkspaces}"`);
+        die(
+          `--keep-workspaces must be ${KEEP_WORKSPACES_MODES.join(", ")}, got "${opts.keepWorkspaces}"`
+        );
       }
       if (!Number.isFinite(opts.keepWorkspacesFor) || opts.keepWorkspacesFor <= 0) {
         die("--keep-workspaces-for must be a positive number of hours");
@@ -6825,9 +7131,7 @@ function register6(program3) {
     if (opts.json) return printJson({ items: sized });
     if (sized.length === 0) {
       console.log(`no kept workspaces in ${workspacesDir(configDir)}`);
-      return console.log(
-        "the daemon keeps them only with --keep-workspaces failed (or always)."
-      );
+      return console.log("the daemon keeps them only with --keep-workspaces failed (or always).");
     }
     table([
       ["RUN", "ISSUE", "STATUS", "AGE", "SIZE", "PATH"],
@@ -6838,7 +7142,8 @@ function register6(program3) {
     if (opts.all === void 0 && opts.olderThan === void 0) {
       die("pass --all or --older-than <hours>");
     }
-    if (opts.all && opts.olderThan !== void 0) die("--all cannot be combined with --older-than");
+    if (opts.all && opts.olderThan !== void 0)
+      die("--all cannot be combined with --older-than");
     if (opts.olderThan !== void 0 && (!Number.isFinite(opts.olderThan) || opts.olderThan < 0)) {
       die("--older-than must be a non-negative number of hours");
     }
@@ -6868,61 +7173,69 @@ function register6(program3) {
     );
     printList(res, opts, (items) => {
       if (items.length === 0) return console.log(opts.active ? "no active runs" : "no runs");
-      table([["ID", "ISSUE", "RUNNER", "TIER", "STATUS", "DURATION", "COST", "CREATED"], ...items.map(runRow)]);
+      table([
+        ["ID", "ISSUE", "RUNNER", "TIER", "STATUS", "DURATION", "COST", "CREATED"],
+        ...items.map(runRow)
+      ]);
     });
   });
   withCommon(
     runsCmd.command("show <id>").description("Show a run; --logs prints the captured log tail, --logs --full the whole log").option("--logs", "print the log tail").option("--full", "with --logs: print the complete log, not the 256 KB tail").option("--raw", "with --logs --full: print the unrendered harness stream instead")
-  ).action(async (id, opts) => {
-    const api = client(opts);
-    const run = await api.getRun(id);
-    if (opts.json) return printJson(run);
-    console.log(`${run.id}  ${run.status}  on ${run.runner_name}`);
-    if (run.issue_ref) console.log(`issue: ${issueRef(run.issue_ref)} \u2014 ${run.issue_ref.title}`);
-    console.log(`tier: ${run.tier}  model: ${run.model ?? "(n/a)"}`);
-    console.log(
-      `states: ${run.state_at_start_name ?? run.state_id_at_start} \u2192 ${run.state_at_end_name ?? run.state_id_at_end ?? "\u2026"}`
-    );
-    console.log(
-      `created: ${timestamp(run.created_at)}  started: ${run.started_at ? timestamp(run.started_at) : "\u2014"}  ended: ${run.ended_at ? timestamp(run.ended_at) : "\u2014"}  duration: ${runDurationLabel(run)}`
-    );
-    if (run.usage) {
-      const u = run.usage;
-      const parts = [];
-      if (u.input_tokens !== void 0 || u.output_tokens !== void 0) {
-        parts.push(`${(u.input_tokens ?? 0).toLocaleString()} in / ${(u.output_tokens ?? 0).toLocaleString()} out tokens`);
-      }
-      if (u.cost_usd !== void 0) parts.push(`$${u.cost_usd.toFixed(2)}`);
-      if (u.cost_source) parts.push(`(${u.cost_source === "provider" ? "provider-reported" : u.cost_source})`);
-      if (parts.length > 0) console.log(`usage: ${parts.join("  ")}`);
-    }
-    if (run.provider_session_id) console.log(`provider session: ${run.provider_session_id}`);
-    if (run.provider_url) console.log(`provider console: ${run.provider_url}`);
-    if (run.error) console.log(`error: ${run.error}`);
-    if (opts.logs) {
-      console.log("");
-      if (opts.full || opts.raw) {
-        const res = await api.getRunLogFull(id, { raw: opts.raw });
-        const body = res.body;
-        if (!body) return;
-        const reader = body.getReader();
-        const decoder = new TextDecoder();
-        for (; ; ) {
-          const { done, value } = await reader.read();
-          if (done) break;
-          if (value) process.stdout.write(decoder.decode(value, { stream: true }));
+  ).action(
+    async (id, opts) => {
+      const api = client(opts);
+      const run = await api.getRun(id);
+      if (opts.json) return printJson(run);
+      console.log(`${run.id}  ${run.status}  on ${run.runner_name}`);
+      if (run.issue_ref) console.log(`issue: ${issueRef(run.issue_ref)} \u2014 ${run.issue_ref.title}`);
+      console.log(`tier: ${run.tier}  model: ${run.model ?? "(n/a)"}`);
+      console.log(
+        `states: ${run.state_at_start_name ?? run.state_id_at_start} \u2192 ${run.state_at_end_name ?? run.state_id_at_end ?? "\u2026"}`
+      );
+      console.log(
+        `created: ${timestamp(run.created_at)}  started: ${run.started_at ? timestamp(run.started_at) : "\u2014"}  ended: ${run.ended_at ? timestamp(run.ended_at) : "\u2014"}  duration: ${runDurationLabel(run)}`
+      );
+      if (run.usage) {
+        const u = run.usage;
+        const parts = [];
+        if (u.input_tokens !== void 0 || u.output_tokens !== void 0) {
+          parts.push(
+            `${(u.input_tokens ?? 0).toLocaleString()} in / ${(u.output_tokens ?? 0).toLocaleString()} out tokens`
+          );
         }
-        process.stdout.write(decoder.decode());
-        return;
+        if (u.cost_usd !== void 0) parts.push(`$${u.cost_usd.toFixed(2)}`);
+        if (u.cost_source)
+          parts.push(`(${u.cost_source === "provider" ? "provider-reported" : u.cost_source})`);
+        if (parts.length > 0) console.log(`usage: ${parts.join("  ")}`);
       }
-      if (run.log_bytes_dropped > 0) {
-        console.log(
-          `[${Math.round(run.log_bytes_dropped / 1024)} KB truncated from the head \u2014 ` + (run.log_expired ? "past its retention window; only this tail remains]" : `run \`tines runs show ${run.id} --logs --full\` for the complete ${Math.round(run.log_full_bytes / 1024)} KB log]`)
-        );
+      if (run.provider_session_id) console.log(`provider session: ${run.provider_session_id}`);
+      if (run.provider_url) console.log(`provider console: ${run.provider_url}`);
+      if (run.error) console.log(`error: ${run.error}`);
+      if (opts.logs) {
+        console.log("");
+        if (opts.full || opts.raw) {
+          const res = await api.getRunLogFull(id, { raw: opts.raw });
+          const body = res.body;
+          if (!body) return;
+          const reader = body.getReader();
+          const decoder = new TextDecoder();
+          for (; ; ) {
+            const { done, value } = await reader.read();
+            if (done) break;
+            if (value) process.stdout.write(decoder.decode(value, { stream: true }));
+          }
+          process.stdout.write(decoder.decode());
+          return;
+        }
+        if (run.log_bytes_dropped > 0) {
+          console.log(
+            `[${Math.round(run.log_bytes_dropped / 1024)} KB truncated from the head \u2014 ` + (run.log_expired ? "past its retention window; only this tail remains]" : `run \`tines runs show ${run.id} --logs --full\` for the complete ${Math.round(run.log_full_bytes / 1024)} KB log]`)
+          );
+        }
+        console.log(run.log || "(no log output captured)");
       }
-      console.log(run.log || "(no log output captured)");
     }
-  });
+  );
   withCommon(
     runsCmd.command("cancel <id>").description("Cancel a run (judged like any other end: usually a strike)")
   ).action(async (id, opts) => {
@@ -6965,7 +7278,7 @@ title template: ${s.title_template}`);
     for (const line of s.description_template.split("\n")) console.log(`  ${line}`);
   }
 }
-function register7(program3) {
+function register8(program3) {
   const schedules = program3.command("schedules").description("Manage scheduled tasks (addressed as <project>/<name>)");
   withList(
     schedules.command("list").description("List scheduled tasks (hides paused schedules unless --all)").option("-p, --project <name>", "filter by project name or id").option("-a, --all", "include paused schedules")
@@ -7016,7 +7329,9 @@ recent instances:`);
     }
   });
   withCommon(
-    schedules.command("edit <ref>").description("Edit a schedule: templates, workflow, start state, recurrence, timezone, gate, or name").option("-t, --title <template>", "set the title template").option(
+    schedules.command("edit <ref>").description(
+      "Edit a schedule: templates, workflow, start state, recurrence, timezone, gate, or name"
+    ).option("-t, --title <template>", "set the title template").option(
       "-d, --description <markdown>",
       `set the description template (Markdown) \u2014 ${BODY_VALUE_HELP}`
     ).option(
@@ -7025,7 +7340,13 @@ recent instances:`);
     ).option(
       "-s, --state <id-or-name>",
       "start state for future instances (the workflow's initial state = the default)"
-    ).option("--every <preset>", 'repeat hourly (or every N hours: "6h"), daily, weekly, or monthly').option("--at <when>", "preset time of day HH:MM (default 09:00); for hourly, the minute past the hour :MM (default :00)").option("--on <when>", "weekday (weekly) or day of month (monthly)").option("--cron <expr>", "5-field cron expression (alternative to --every/--at/--on)").option("--tz <iana>", "set the schedule timezone").option("--if-closed", "only create a new instance when all previous instances are closed").option("--no-if-closed", "clear the only-when-closed gate").option("--name <new-name>", "rename the schedule")
+    ).option(
+      "--every <preset>",
+      'repeat hourly (or every N hours: "6h"), daily, weekly, or monthly'
+    ).option(
+      "--at <when>",
+      "preset time of day HH:MM (default 09:00); for hourly, the minute past the hour :MM (default :00)"
+    ).option("--on <when>", "weekday (weekly) or day of month (monthly)").option("--cron <expr>", "5-field cron expression (alternative to --every/--at/--on)").option("--tz <iana>", "set the schedule timezone").option("--if-closed", "only create a new instance when all previous instances are closed").option("--no-if-closed", "clear the only-when-closed gate").option("--name <new-name>", "rename the schedule")
   ).action(
     async (ref, opts) => {
       const descriptionTemplate = opts.description !== void 0 ? readBodyValue(opts.description) : void 0;
@@ -7034,7 +7355,8 @@ recent instances:`);
       const body = {};
       if (opts.title !== void 0) body.title_template = opts.title;
       if (descriptionTemplate !== void 0) body.description_template = descriptionTemplate;
-      if (opts.workflow !== void 0) body.workflow_id = (await resolveWorkflow(api, opts.workflow)).id;
+      if (opts.workflow !== void 0)
+        body.workflow_id = (await resolveWorkflow(api, opts.workflow)).id;
       if (opts.state !== void 0) body.state = opts.state;
       const recurrence = buildRecurrence(opts);
       if (recurrence?.preset) body.preset = recurrence.preset;
@@ -7054,15 +7376,15 @@ recent instances:`);
       printScheduleDetail(updated);
     }
   );
-  withCommon(schedules.command("pause <ref>").description("Pause a schedule (keeps config and history)")).action(
-    async (ref, opts) => {
-      const api = client(opts);
-      const schedule = await resolveSchedule(api, ref);
-      const updated = await api.updateSchedule(schedule.id, { enabled: false });
-      if (opts.json) return printJson(updated);
-      console.log(`paused schedule "${scheduleRef(updated)}"`);
-    }
-  );
+  withCommon(
+    schedules.command("pause <ref>").description("Pause a schedule (keeps config and history)")
+  ).action(async (ref, opts) => {
+    const api = client(opts);
+    const schedule = await resolveSchedule(api, ref);
+    const updated = await api.updateSchedule(schedule.id, { enabled: false });
+    if (opts.json) return printJson(updated);
+    console.log(`paused schedule "${scheduleRef(updated)}"`);
+  });
   withCommon(
     schedules.command("resume <ref>").description("Resume a paused schedule (recomputes the next occurrence from now)")
   ).action(async (ref, opts) => {
@@ -7070,7 +7392,9 @@ recent instances:`);
     const schedule = await resolveSchedule(api, ref);
     const updated = await api.updateSchedule(schedule.id, { enabled: true });
     if (opts.json) return printJson(updated);
-    console.log(`resumed schedule "${scheduleRef(updated)}" \u2014 next run ${timestamp(updated.next_run_at)}`);
+    console.log(
+      `resumed schedule "${scheduleRef(updated)}" \u2014 next run ${timestamp(updated.next_run_at)}`
+    );
   });
   withCommon(
     schedules.command("run <ref>").description("Create an instance now (respects the only-when-closed gate)")
@@ -7102,57 +7426,61 @@ recent instances:`);
 }
 
 // src/commands/supervisor.ts
-function register8(program3) {
+function register9(program3) {
   const supervisor = program3.command("supervisor").description("The automation kill switch, quota policy, and attempt limit");
-  withCommon(supervisor.command("status").description("One-screen overview: kill switch, quota, utilization, runners")).action(
-    async (opts) => {
-      const api = client(opts);
-      const [settings, runnersRes, workflows, activeRunItems] = await Promise.all([
-        api.getSupervisorSettings(),
-        api.listRunners(),
-        api.listWorkflows(),
-        listAll((page) => api.listRuns({ active: true, ...page }))
-      ]);
-      if (opts.json) {
-        return printJson({ settings, runners: runnersRes.items, active_runs: activeRunItems });
-      }
-      const stateNames = /* @__PURE__ */ new Map();
-      for (const wf of workflows.items) {
-        for (const s of wf.states) stateNames.set(s.id, `${wf.name}/${s.name}`);
-      }
-      console.log(`automation: ${settings.enabled ? "ON" : "OFF (kill switch \u2014 nothing dispatches)"}`);
-      console.log(quotaLabel(settings.quota, (id) => stateNames.get(id) ?? id));
-      console.log(`utilization: ${utilizationLabel(settings.quota, activeRunItems, (id) => stateNames.get(id) ?? id)}`);
-      console.log(`attempt limit: ${settings.attempt_limit} strikes, then the issue parks`);
-      if (runnersRes.items.length === 0) {
-        console.log("runners: none");
-      } else {
-        console.log("runners:");
-        table(
-          runnersRes.items.map((r) => [
-            `  ${r.name}`,
-            r.type,
-            runnerStatusLabel(r),
-            `${r.active_runs}/${r.max_concurrent}`
-          ])
-        );
-      }
+  withCommon(
+    supervisor.command("status").description("One-screen overview: kill switch, quota, utilization, runners")
+  ).action(async (opts) => {
+    const api = client(opts);
+    const [settings, runnersRes, workflows, activeRunItems] = await Promise.all([
+      api.getSupervisorSettings(),
+      api.listRunners(),
+      api.listWorkflows(),
+      listAll((page) => api.listRuns({ active: true, ...page }))
+    ]);
+    if (opts.json) {
+      return printJson({ settings, runners: runnersRes.items, active_runs: activeRunItems });
     }
-  );
-  withCommon(supervisor.command("enable").description("Arm automation (the kill switch on)")).action(
-    async (opts) => {
-      const settings = await client(opts).updateSupervisorSettings({ enabled: true });
-      if (opts.json) return printJson(settings);
-      console.log("automation is ON \u2014 eligible issues with a matching rule will dispatch");
+    const stateNames = /* @__PURE__ */ new Map();
+    for (const wf of workflows.items) {
+      for (const s of wf.states) stateNames.set(s.id, `${wf.name}/${s.name}`);
     }
-  );
-  withCommon(supervisor.command("disable").description("Pause all automation at once (the kill switch off)")).action(
-    async (opts) => {
-      const settings = await client(opts).updateSupervisorSettings({ enabled: false });
-      if (opts.json) return printJson(settings);
-      console.log("automation is OFF \u2014 nothing new dispatches until re-enabled");
+    console.log(
+      `automation: ${settings.enabled ? "ON" : "OFF (kill switch \u2014 nothing dispatches)"}`
+    );
+    console.log(quotaLabel(settings.quota, (id) => stateNames.get(id) ?? id));
+    console.log(
+      `utilization: ${utilizationLabel(settings.quota, activeRunItems, (id) => stateNames.get(id) ?? id)}`
+    );
+    console.log(`attempt limit: ${settings.attempt_limit} strikes, then the issue parks`);
+    if (runnersRes.items.length === 0) {
+      console.log("runners: none");
+    } else {
+      console.log("runners:");
+      table(
+        runnersRes.items.map((r) => [
+          `  ${r.name}`,
+          r.type,
+          runnerStatusLabel(r),
+          `${r.active_runs}/${r.max_concurrent}`
+        ])
+      );
     }
-  );
+  });
+  withCommon(
+    supervisor.command("enable").description("Arm automation (the kill switch on)")
+  ).action(async (opts) => {
+    const settings = await client(opts).updateSupervisorSettings({ enabled: true });
+    if (opts.json) return printJson(settings);
+    console.log("automation is ON \u2014 eligible issues with a matching rule will dispatch");
+  });
+  withCommon(
+    supervisor.command("disable").description("Pause all automation at once (the kill switch off)")
+  ).action(async (opts) => {
+    const settings = await client(opts).updateSupervisorSettings({ enabled: false });
+    if (opts.json) return printJson(settings);
+    console.log("automation is OFF \u2014 nothing new dispatches until re-enabled");
+  });
   const quota = supervisor.command("quota").description("Pick and configure the quota policy");
   withCommon(
     quota.command("global <n>").description("Use the global cap: at most <n> concurrent runs in total")
@@ -7165,7 +7493,11 @@ function register8(program3) {
     console.log(quotaLabel(settings.quota));
   });
   withCommon(
-    quota.command("roster").description("Use the per-state roster: at most N concurrent runs per workflow state").requiredOption("--default <n>", "limit for states without an override", (v) => Number.parseInt(v, 10)).option(
+    quota.command("roster").description("Use the per-state roster: at most N concurrent runs per workflow state").requiredOption(
+      "--default <n>",
+      "limit for states without an override",
+      (v) => Number.parseInt(v, 10)
+    ).option(
       "--state <workflow/state=n>",
       "per-state override (repeatable), counted by the state a run started in",
       collect,
@@ -7197,7 +7529,7 @@ function register8(program3) {
 }
 
 // src/commands/workflows.ts
-import { readFileSync as readFileSync8 } from "node:fs";
+import { readFileSync as readFileSync10 } from "node:fs";
 function readJsonBody(inline, file) {
   if (inline !== void 0 && file !== void 0) {
     die("pass the JSON inline or with --file, not both");
@@ -7206,14 +7538,14 @@ function readJsonBody(inline, file) {
   if (file !== void 0 && file !== "-") {
     let raw;
     try {
-      raw = readFileSync8(file, "utf8");
+      raw = readFileSync10(file, "utf8");
     } catch (err) {
       die(`cannot read ${file}: ${err instanceof Error ? err.message : String(err)}`);
     }
     return parseJsonObject(raw, file);
   }
   if (file === "-" || !process.stdin.isTTY) {
-    const raw = readFileSync8(0, "utf8");
+    const raw = readFileSync10(0, "utf8");
     if (raw.trim() === "") {
       if (file === "-") die("no JSON on stdin");
       return void 0;
@@ -7289,7 +7621,7 @@ function printWorkflowDetail(wf) {
   for (const w of wf.warnings ?? []) console.log(`
 warning: ${w}`);
 }
-function register9(program3) {
+function register10(program3) {
   const workflows = program3.command("workflows").description("Manage the workflow library");
   withList(workflows.command("list").description("List the workflow library")).action(
     async (opts) => {
@@ -7319,22 +7651,26 @@ function register9(program3) {
     printWorkflowDetail(wf);
   });
   withCommon(
-    workflows.command("create [json]").description('Create a workflow from a JSON definition (states carry initial "prompt" instructions)').option("-f, --file <path>", 'read the JSON definition from a file ("-" for stdin)').option("--no-prompts", 'allow states without initial "prompt" instructions').addHelpText("after", WORKFLOW_JSON_HELP)
-  ).action(async (inline, opts) => {
-    const body = readJsonBody(inline, opts.file);
-    if (!body) {
-      die(
-        `missing workflow JSON: pass it inline, with --file <path>, or pipe it on stdin
+    workflows.command("create [json]").description(
+      'Create a workflow from a JSON definition (states carry initial "prompt" instructions)'
+    ).option("-f, --file <path>", 'read the JSON definition from a file ("-" for stdin)').option("--no-prompts", 'allow states without initial "prompt" instructions').addHelpText("after", WORKFLOW_JSON_HELP)
+  ).action(
+    async (inline, opts) => {
+      const body = readJsonBody(inline, opts.file);
+      if (!body) {
+        die(
+          `missing workflow JSON: pass it inline, with --file <path>, or pipe it on stdin
 see \`tines workflows create --help\` for the expected shape`
-      );
-    }
-    assertNewStatesHavePrompts(body.states, opts.prompts);
-    const wf = await client(opts).createWorkflow(body);
-    if (opts.json) return printJson(wf);
-    console.log(`created workflow "${wf.name}" (${wf.id})
+        );
+      }
+      assertNewStatesHavePrompts(body.states, opts.prompts);
+      const wf = await client(opts).createWorkflow(body);
+      if (opts.json) return printJson(wf);
+      console.log(`created workflow "${wf.name}" (${wf.id})
 `);
-    printWorkflowDetail(wf);
-  });
+      printWorkflowDetail(wf);
+    }
+  );
   withCommon(
     workflows.command("edit <id-or-name> [json]").description("Update a workflow from a JSON definition and/or flags").option("-f, --file <path>", 'read the JSON definition from a file ("-" for stdin)').option("-n, --name <name>", "rename the workflow").option("-d, --description <text>", "set the description").option("--initial-state <id-or-name>", "set the initial state").option("--no-prompts", 'allow new states without initial "prompt" instructions').addHelpText("after", WORKFLOW_JSON_HELP)
   ).action(
@@ -7371,14 +7707,15 @@ var program2 = new Command();
 program2.name("tines").description("CLI for Tines").version(cliVersion()).enablePositionalOptions();
 registerTime(program2);
 register4(program2);
-register9(program2);
+register5(program2);
+register10(program2);
 register2(program2);
 register(program2);
 register3(program2);
+register8(program2);
 register7(program2);
 register6(program2);
-register5(program2);
-register8(program2);
+register9(program2);
 registerEvents(program2);
 
 // src/index.ts