feat(monitor): stateless change-tracking diff engine + LLM judge + self-host monitor

Cargo.toml

@@ -1,6 +1,7 @@
 [workspace]
 members = [
     "crates/crw-core",
+    "crates/crw-diff",
     "crates/crw-renderer",
     "crates/crw-extract",
     "crates/crw-crawl",
@@ -10,6 +11,7 @@ members = [
     "crates/crw-mcp-proto",
     "crates/crw-browse",
     "crates/crw-cli",
+    "crates/crw-monitor",
 ]
 resolver = "2"
 
@@ -50,6 +52,10 @@ once_cell = "1"
 # Text processing
 regex = "1"
 
+# Diffing (change-tracking / monitor). Myers diff over lines; the parse-diff
+# AST and the unified text surface are both derived from its op stream.
+similar = "2"
+
 # Randomness
 rand = "0.9"
 
@@ -89,6 +95,16 @@ url = { version = "2", features = ["serde"] }
 sha2 = "0.10"
 hex = "0.4"
 
+# Self-host monitor mode (feature-gated, default OFF). These are optional deps
+# of `crw-monitor` only and MUST NOT leak into the default `crw-server` build —
+# the open-core boundary gate (`cargo tree -p crw-server`) asserts their absence.
+# NOTE: the monitor scheduler is a self-contained tokio sleep-loop (UTC cron +
+# fixed-interval parser in `crw-monitor::schedule`), so no external cron crate is
+# pulled in — simpler and keeps the dependency surface (and the open-core tree)
+# minimal. `tokio-cron-scheduler` was evaluated and intentionally not adopted.
+rusqlite = { version = "0.32", features = ["bundled"] }
+hmac = "0.12"
+
 # Unix process-group kill (browser teardown). Unix-only; already present
 # transitively. Used by crw-renderer's BROWSER_PGIDS group-kill registry.
 libc = "0.2"

crates/crw-cli/src/commands/scrape.rs

@@ -634,5 +634,8 @@ fn build_request(
         renderer: None,
         deadline_ms: None,
         debug: None,
+        change_tracking: None,
+        goal: None,
+        judge_enabled: None,
     }
 }