@kitman-sh/cli 0.7.5 → 0.8.0

package/dist/{chunk-vz3v0f4j.js → chunk-m6yymqfr.js}

@@ -14,6 +14,7 @@ import {
   isNone,
   isSome,
   match,
+  getOrElse,
   getOrUndefined,
   flatMap,
   Service,
@@ -38,15 +39,16 @@ import {
   void_,
   isSuccess2,
   isFailure2,
+  hasInterrupts2,
   makeUnsafe,
-  make6,
+  make5,
   _await,
   fail3,
   isDoneUnsafe,
   succeed3,
   doneUnsafe,
   Scope,
-  make7,
+  make6,
   provide,
   addFinalizer,
   close,
@@ -66,6 +68,7 @@ import {
   gen,
   fail4,
   die3,
+  try_,
   withFiber,
   flatMap2,
   andThen,
@@ -91,6 +94,7 @@ import {
   timeoutOrElse,
   sleep,
   raceFirst,
+  filter,
   matchEffect,
   context,
   contextWith,
@@ -102,6 +106,7 @@ import {
   scoped,
   acquireRelease,
   ensuring,
+  onExit,
   uninterruptible,
   forever,
   repeat,
@@ -116,18 +121,20 @@ import {
   unbounded,
   offer,
   makeUnsafe4,
-  make11,
+  make7,
   fromQueue,
   map4,
-  filter,
+  filter2,
   decodeText,
+  encodeText,
   splitLines,
+  run,
   runHead,
   runForEach,
   FileSystem,
   Path,
   ChildProcessSpawner,
-  make13,
+  make8,
   Crypto,
   value,
   is,
@@ -150,27 +157,43 @@ import {
   TaggedError2,
   toDate,
   wallClockMillis,
+  redactCredentials,
+  redactedOutputTail,
+  AgentHarnessIds,
+  findForbiddenAgentEnvironmentSecretPath,
   findForbiddenRepoBindingSecretPath,
   runnerAgentSandboxPolicy,
   agentNetworkAllowlist,
-  AgentHarnessIds,
-  findForbiddenAgentEnvironmentSecretPath,
-  redactedOutputTail,
+  verificationNetworkAllowlist,
+  programNetworkHosts,
   canonicalSha256,
-  createId,
   isSyncKitHashValid,
   isSyncKitSafe,
+  createId,
+  digestSha256,
   decodeJsonStringOption,
   encodeJsonStringSync,
   encodePrettyJsonString,
   decodeJsonStringSync,
   encodeUnknownJsonStringSync,
+  get2,
+  setHeaders,
   schemaBodyJson,
   filterStatusOk,
-  get4,
-  layer4,
-  digestSha256,
+  HttpClient,
+  get3,
+  layer2,
+  make10,
+  readerString,
+  isCloseEvent,
+  SocketReadError,
+  SocketWriteError,
+  SocketOpenError,
+  SocketUpgradeError,
+  SocketCloseError,
+  SocketError,
   RunSettled,
+  UpdateAvailable,
   CommandFailed2,
   runCommand2,
   shellOutputTailChars2,
@@ -184,28 +207,20 @@ import {
   herdrRunnerCapabilitiesForRepoBinding2,
   herdrRunnerCapabilities2,
   assertHerdrRunnerCapability2
-} from "./chunk-p2wk2v39.js";
-import {
-  make4,
-  readerString,
-  isCloseEvent,
-  SocketReadError,
-  SocketWriteError,
-  SocketOpenError,
-  SocketUpgradeError,
-  SocketCloseError,
-  SocketError
-} from "./chunk-tk0gy9wq.js";
-import"./chunk-a44szh8v.js";
+} from "./chunk-fpyy4rpd.js";
+import"./chunk-2npvts4c.js";
 import {
+  uploadRunFile,
   programLease,
+  rpcRunFiles,
   programHostsEnv,
   undeclaredHostsEnv
-} from "./chunk-4gc7b9qt.js";
-import"./chunk-1f7qe00x.js";
+} from "./chunk-ad124cbc.js";
+import"./chunk-fbb0fdnj.js";
 import {
   nextInt
-} from "./chunk-sq2brwmh.js";
+} from "./chunk-dbtnt79b.js";
+import"./chunk-8m4wzjt8.js";
 
 // packages/core/src/runner-trust.ts
 import { createHash } from "crypto";
@@ -307,7 +322,7 @@ function resolveAgentEnvironmentCore(input) {
 function resolveAgentEnvironmentFromSources(input) {
   const harness = input.harness ?? input.userPreferences?.defaultHarness ?? firstSyncProfileHarness(input.syncProfile) ?? "opencode";
   const syncProfileSources = input.syncProfile?.sources ?? [];
-  const selectedFragments = orderedSourceKinds.flatMap((sourceKind) => input.fragments.filter((entry) => entry.sourceKind === sourceKind && fragmentMatchesHarness(entry, harness) && fragmentMatchesProjectContext(entry, input.projectContext) && fragmentSelectedByUserPreferences(entry, input.userPreferences, harness) && fragmentSelectedBySyncProfile(entry, syncProfileSources, input.projectContext)));
+  const selectedFragments = orderedSourceKinds.flatMap((sourceKind) => input.fragments.filter((entry) => entry.sourceKind === sourceKind && fragmentMatchesHarness(entry, harness) && fragmentMatchesTeamContext(entry, input.teamContext) && fragmentSelectedByUserPreferences(entry, input.userPreferences, harness) && fragmentSelectedBySyncProfile(entry, syncProfileSources, input.teamContext)));
   const preferenceFragments = userPreferenceFragments(input.userId, input.userPreferences, harness);
   const resolveInput = {
     harness,
@@ -326,7 +341,7 @@ var orderedSourceKinds = [
   "personal_kit_default",
   "workspace_assignment",
   "team_default",
-  "project_kit",
+  "team_kit",
   "device_local",
   "step_attempt_override",
   "command_override"
@@ -356,14 +371,12 @@ function userPreferenceFragments(userId, preferences, harness) {
 function fragmentMatchesHarness(entry, harness) {
   return entry.harness === undefined || entry.harness === harness;
 }
-function fragmentMatchesProjectContext(entry, projectContext) {
-  if (projectContext === undefined)
+function fragmentMatchesTeamContext(entry, teamContext) {
+  if (teamContext === undefined)
     return true;
-  if (entry.workspaceId !== undefined && projectContext?.workspaceId !== entry.workspaceId)
-    return false;
-  if (entry.projectId !== undefined && projectContext?.projectId !== entry.projectId)
+  if (entry.workspaceId !== undefined && teamContext?.workspaceId !== entry.workspaceId)
     return false;
-  if (entry.teamId !== undefined && !(projectContext?.teamIds ?? []).includes(entry.teamId))
+  if (entry.teamId !== undefined && teamContext.teamId !== entry.teamId && !(teamContext.teamIds ?? []).includes(entry.teamId))
     return false;
   return true;
 }
@@ -379,23 +392,23 @@ function fragmentSelectedByUserPreferences(entry, preferences, harness) {
   const activation = activations.find((item) => item.harness === harness && item.kitId === kitId);
   return activation?.enabled ?? false;
 }
-function fragmentSelectedBySyncProfile(entry, sources, projectContext) {
+function fragmentSelectedBySyncProfile(entry, sources, teamContext) {
   const enabledSources = sources.filter((source) => source.enabled);
   if (entry.sourceKind === "built_in" || entry.sourceKind === "device_local" || entry.sourceKind === "step_attempt_override" || entry.sourceKind === "command_override")
     return true;
-  if (entry.sourceKind === "project_kit") {
-    const projectSources = sources.filter((source) => source.kind === "project_kits" && source.projectId === entry.projectId);
-    if (projectSources.length > 0)
-      return projectSources.some((source) => source.enabled);
-    return projectContext !== undefined;
+  if (entry.sourceKind === "team_kit") {
+    const teamSources = sources.filter((source) => source.kind === "team_kits" && source.teamId === entry.teamId);
+    if (teamSources.length > 0)
+      return teamSources.some((source) => source.enabled);
+    return teamContext !== undefined;
   }
-  if (projectContext !== undefined && entry.sourceKind === "workspace_assignment") {
+  if (teamContext !== undefined && entry.sourceKind === "workspace_assignment") {
     const workspaceSources = sources.filter((source) => source.kind === "workspace_assignments" && source.workspaceId === entry.workspaceId);
     if (workspaceSources.length > 0)
       return workspaceSources.some((source) => source.enabled);
     return true;
   }
-  if (projectContext !== undefined && entry.sourceKind === "team_default") {
+  if (teamContext !== undefined && entry.sourceKind === "team_default") {
     const teamSources = sources.filter((source) => source.kind === "team_defaults" && source.workspaceId === entry.workspaceId && (source.teamId === undefined || source.teamId === entry.teamId));
     if (teamSources.length > 0)
       return teamSources.some((source) => source.enabled);
@@ -465,7 +478,7 @@ function providerAuthRefKey(ref) {
 function sourceLabel(source) {
   if (source.label !== undefined)
     return source.label;
-  if (source.kind === "workspace_kit" || source.kind === "project_kit")
+  if (source.kind === "workspace_kit" || source.kind === "team_kit")
     return `${source.kind}:${source.kitId}`;
   if (source.kind === "team_default_kit")
     return `${source.kind}:${source.teamId}:${source.kitId}`;
@@ -943,7 +956,7 @@ var gitCommit = (url, ref) => gen(function* () {
     return yield* new SourceResolutionFailed({ reason: `${url} has no ${ref ?? "default branch"}` });
   return commit;
 });
-var npmLatest = (packageName) => get4(`https://registry.npmjs.org/-/package/${packageName.replace("/", "%2F")}/dist-tags`).pipe(flatMap2(filterStatusOk), flatMap2(schemaBodyJson(DistTags)), map3((tags) => tags.latest), provide3(layer4), mapError((error) => new SourceResolutionFailed({ reason: `npm has no latest ${packageName}: ${error.message}` })));
+var npmLatest = (packageName) => get3(`https://registry.npmjs.org/-/package/${packageName.replace("/", "%2F")}/dist-tags`).pipe(flatMap2(filterStatusOk), flatMap2(schemaBodyJson(DistTags)), map3((tags) => tags.latest), provide3(layer2), mapError((error) => new SourceResolutionFailed({ reason: `npm has no latest ${packageName}: ${error.message}` })));
 var SourceResolver = Reference("kitman/agent-runtime/SourceResolver", {
   defaultValue: () => ({ gitCommit, npmLatest })
 });
@@ -1185,46 +1198,16 @@ function renderCodexInstructions(input, plan) {
     "- Harness: codex",
     "- Secrets: not synced; use the referenced local environment variables or existing harness login.",
     "",
-    "## MCP Servers",
-    "",
-    ...markdownList(input.environment.mcpServers.map((entry) => `${entry.item.name} (${entry.item.policy}, ${entry.item.transport.kind})`)),
-    "",
-    "## Skills",
-    "",
-    ...markdownList(input.environment.skills.map((entry) => `${entry.item.name} (${entry.item.policy})`)),
-    "",
-    "## Plugins",
-    "",
-    ...markdownList(input.environment.plugins.map((entry) => `${entry.item.name} (${entry.item.policy}, ${sourceKinds(entry, ", ")})`)),
-    "",
-    "## Harness Settings",
-    "",
-    ...markdownList(input.environment.harnessSettings.map((entry) => `${entry.item.key}: ${safeInstructionValue(entry.item.value)} (${entry.item.policy})`)),
-    "",
-    "## Permissions",
-    "",
-    ...markdownList(input.environment.permissions.map((entry) => `${entry.item.key}: ${markdownValue(entry.item.value)} (${entry.item.policy})`)),
-    "",
-    "## Hooks",
-    "",
-    ...markdownList(input.environment.hooks.map((entry) => `${entry.item.name}: ${entry.item.event} -> ${safeCommandValue(entry.item.command, entry.item.args)} (${entry.item.policy})`)),
-    "",
-    "## Runtime Constraints",
-    "",
-    ...markdownList(input.environment.runtimeConstraints.map((entry) => `${entry.item.key}: ${markdownValue(entry.item.value)} (${entry.item.policy})`)),
-    "",
-    "## Sandbox Policy Requirements",
-    "",
-    ...markdownList(input.environment.sandboxPolicyRequirements.map((entry) => `${entry.item.key}: ${markdownValue(entry.item.value)} (${entry.item.policy})`)),
-    "",
-    "## Provider Auth References",
-    "",
-    ...markdownList(input.environment.providerAuthRefs.map((entry) => `${entry.item.provider}: ${entry.item.kind} (${entry.item.policy})`)),
-    "",
-    "## Runner Secret References",
-    "",
-    ...markdownList(input.environment.runnerSecretRefs.map((entry) => `${entry.item.name} (${entry.item.policy}, ${entry.item.source.kind})`)),
-    ""
+    ...markdownSection("MCP Servers", input.environment.mcpServers.map((entry) => `${entry.item.name} (${entry.item.policy}, ${entry.item.transport.kind})`)),
+    ...markdownSection("Skills", input.environment.skills.map((entry) => `${entry.item.name} (${entry.item.policy})`)),
+    ...markdownSection("Plugins", input.environment.plugins.map((entry) => `${entry.item.name} (${entry.item.policy}, ${sourceKinds(entry, ", ")})`)),
+    ...markdownSection("Harness Settings", input.environment.harnessSettings.map((entry) => `${entry.item.key}: ${safeInstructionValue(entry.item.value)} (${entry.item.policy})`)),
+    ...markdownSection("Permissions", input.environment.permissions.map((entry) => `${entry.item.key}: ${markdownValue(entry.item.value)} (${entry.item.policy})`)),
+    ...markdownSection("Hooks", input.environment.hooks.map((entry) => `${entry.item.name}: ${entry.item.event} -> ${safeCommandValue(entry.item.command, entry.item.args)} (${entry.item.policy})`)),
+    ...markdownSection("Runtime Constraints", input.environment.runtimeConstraints.map((entry) => `${entry.item.key}: ${markdownValue(entry.item.value)} (${entry.item.policy})`)),
+    ...markdownSection("Sandbox Policy Requirements", input.environment.sandboxPolicyRequirements.map((entry) => `${entry.item.key}: ${markdownValue(entry.item.value)} (${entry.item.policy})`)),
+    ...markdownSection("Provider Auth References", input.environment.providerAuthRefs.map((entry) => `${entry.item.provider}: ${entry.item.kind} (${entry.item.policy})`)),
+    ...markdownSection("Runner Secret References", input.environment.runnerSecretRefs.map((entry) => `${entry.item.name} (${entry.item.policy}, ${entry.item.source.kind})`))
   ];
   plan.operations.push({
     kind: "write_file",
@@ -1734,10 +1717,10 @@ function json(value) {
   return `${JSON.stringify(value, null, 2)}
 `;
 }
-function markdownList(items) {
+function markdownSection(title, items) {
   if (items.length === 0)
-    return ["- None."];
-  return items.map((item) => `- ${item}`);
+    return [];
+  return [`## ${title}`, "", ...items.map((item) => `- ${item}`), ""];
 }
 var UnsafeInstructionText = /(?:Bearer\s|(?:sk-|ghp_|glpat-)|secret|token|password|api[_ -]?key|(?:^|[\s])(?:\/|~\/|[A-Za-z]:\\\\))/iu;
 function safeInstructionValue(value) {
@@ -1766,7 +1749,7 @@ function isKitmanCliMcpServer(server) {
 function sourceLabel2(source) {
   if (source.label !== undefined)
     return source.label;
-  if (source.kind === "workspace_kit" || source.kind === "project_kit")
+  if (source.kind === "workspace_kit" || source.kind === "team_kit")
     return `${source.kind}:${source.kitId}`;
   if (source.kind === "user_preferences")
     return `${source.kind}:${source.userId}`;
@@ -2628,7 +2611,7 @@ var fromDuplex = (open, options) => withFiber((fiber) => {
       return;
     currentSocket.end();
   }));
-  return succeed5(make4({
+  return succeed5(make10({
     reader,
     writer
   }));
@@ -3000,8 +2983,8 @@ var homeDirectory = map3(optionalEnv("HOME"), (home) => home ?? "/");
 var temporaryDirectory = map3(optionalEnv("TMPDIR"), (tmp) => tmp ?? "/tmp");
 var spawnServer = (input) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
-  const scope = yield* make7();
-  const handle = yield* spawner.spawn(make13(input.command, [...input.args], {
+  const scope = yield* make6();
+  const handle = yield* spawner.spawn(make8(input.command, [...input.args], {
     env: { HERDR_SOCKET_PATH: input.socketPath },
     extendEnv: true,
     detached: true,
@@ -3254,7 +3237,12 @@ var HarnessAdapters = [
     firstMessage: "herdr_prompt",
     mcp: { kind: "config_file_arg", flag: "--mcp-config" },
     skills: { kind: "flag", flag: "--skill", root: "skills" },
-    mcpToolTimeout: { kind: "server_field", field: "timeout", unit: "s" }
+    mcpToolTimeout: { kind: "server_field", field: "timeout", unit: "s" },
+    session: {
+      location: { root: ".pi/agent/sessions", layout: "per_directory_stamped" },
+      start: ["--session-id", "{session}"],
+      resume: ["--session", "{transcript}"]
+    }
   },
   {
     id: "opencode",
@@ -3274,7 +3262,8 @@ var HarnessAdapters = [
     firstMessage: "herdr_prompt",
     mcp: { kind: "config_env", variable: "OPENCODE_CONFIG_CONTENT" },
     skills: { kind: "config_paths", root: "skills" },
-    mcpToolTimeout: { kind: "server_field", field: "timeout", unit: "ms" }
+    mcpToolTimeout: { kind: "server_field", field: "timeout", unit: "ms" },
+    sessionDatabase: ".local/share/opencode/opencode.db"
   }
 ];
 var sessionArgs = (adapter, session) => {
@@ -3579,7 +3568,12 @@ var dockerContainerRunner = map3(ChildProcessSpawner, (spawner) => {
       ...Object.keys(input.env).flatMap((name) => ["--env", name]),
       input.container,
       ...input.command
-    ], { env: input.env, timeout: input.timeout, ...input.stdin === undefined ? undefined : { stdin: input.stdin } }).pipe(mapError((error) => new ContainerError({ message: error.message })), provideService(ChildProcessSpawner, spawner)),
+    ], {
+      env: input.env,
+      timeout: input.timeout,
+      ...input.stdin === undefined ? undefined : { stdin: input.stdin },
+      ...input.onOutput === undefined ? undefined : { onOutput: input.onOutput }
+    }).pipe(mapError((error) => new ContainerError({ message: error.message })), provideService(ChildProcessSpawner, spawner)),
     connect: (input) => asVoid(docker(["network", "connect", "--alias", input.alias, input.network, input.container])),
     removeLabelled: ([key, value]) => gen(function* () {
       const filter = ["--filter", `label=${key}=${value}`];
@@ -3714,6 +3708,7 @@ var executeHerdrStepAttempt = (input) => gen(function* () {
     env: {
       KITMAN_STEP_CREDENTIAL: input.agent.stepCredential,
       KITMAN_API_URL: input.agent.apiUrl,
+      KITMAN_STEP_WORKSPACE: input.workspace.path,
       ...toolless ? { KITMAN_STEP_TOOLS: "output" } : undefined
     }
   };
@@ -3983,7 +3978,8 @@ var runSandboxCommand = (input) => scoped(gen(function* () {
       env,
       timeout: command.timeout,
       ...command.extendEnv === undefined ? undefined : { extendEnv: command.extendEnv },
-      ...command.stdin === undefined ? undefined : { stdin: command.stdin }
+      ...command.stdin === undefined ? undefined : { stdin: command.stdin },
+      ...command.onOutput === undefined ? undefined : { onOutput: command.onOutput }
     });
   }
   const configDir = yield* (yield* FileSystem).makeTempDirectoryScoped({ prefix: "kitman-sandbox-" });
@@ -4002,7 +3998,8 @@ var runSandboxCommand = (input) => scoped(gen(function* () {
     env,
     command: command.argv,
     timeout: command.timeout,
-    ...command.stdin === undefined ? undefined : { stdin: command.stdin }
+    ...command.stdin === undefined ? undefined : { stdin: command.stdin },
+    ...command.onOutput === undefined ? undefined : { onOutput: command.onOutput }
   });
 }));
 // packages/oversight/src/domain/intent.ts
@@ -4164,8 +4161,10 @@ var Alignment = Struct({
 import { homedir } from "os";
 
 // packages/agent-runtime/src/harness-sessions.ts
+import { DatabaseSync } from "node:sqlite";
 import { gunzipSync, gzipSync } from "zlib";
 var projectDirectory = (worktree) => worktree.replace(/[^a-zA-Z0-9]/g, "-");
+var stampedDirectory = (worktree) => `--${worktree.replace(/^[/\\]/, "").replace(/[/\\:]/g, "-")}--`;
 var rolloutId = /([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.jsonl$/;
 var filesUnder = (directory) => gen(function* () {
   const fs = yield* FileSystem;
@@ -4195,6 +4194,13 @@ var findSession = (adapter, place) => gen(function* () {
     const path = (yield* fs.exists(own)) ? own : (yield* filesUnder(root)).find((file) => file.endsWith(`/${name}`));
     return path === undefined ? undefined : { id: place.id, name, path };
   }
+  if (location.layout === "per_directory_stamped") {
+    if (place.id === undefined)
+      return;
+    const ending = `_${place.id}.jsonl`;
+    const path = (yield* filesUnder(`${root}/${stampedDirectory(place.worktree)}`)).find((file) => file.endsWith(ending)) ?? (yield* filesUnder(root)).find((file) => file.endsWith(ending));
+    return path === undefined ? undefined : { id: place.id, name: path.slice(path.lastIndexOf("/") + 1), path };
+  }
   for (const path of (yield* filesUnder(root)).filter((file) => rolloutId.test(file)).sort().reverse()) {
     const name = path.slice(path.lastIndexOf("/") + 1);
     const id = rolloutId.exec(name)?.[1];
@@ -4215,12 +4221,230 @@ var restoreSession = (adapter, place) => gen(function* () {
     return yield* die3(`${adapter.id} keeps no session to restore`);
   const root = `${place.home}/${location.root}`;
   const today = toDate(wallClockMillis()).toISOString().slice(0, 10).replaceAll("-", "/");
-  const directory = location.layout === "per_directory" ? `${root}/${projectDirectory(place.worktree)}` : `${root}/${today}`;
+  const directory = {
+    per_directory: `${root}/${projectDirectory(place.worktree)}`,
+    per_directory_stamped: `${root}/${stampedDirectory(place.worktree)}`,
+    by_date: `${root}/${today}`
+  }[location.layout];
   const path = `${directory}/${place.session.name}`;
   yield* fs.makeDirectory(directory, { recursive: true });
   yield* fs.writeFile(path, new Uint8Array(gunzipSync(place.session.content)));
   return { id: place.session.id, name: place.session.name, path };
 });
+var transcriptSource = (adapter, place) => gen(function* () {
+  if (adapter.sessionDatabase === undefined) {
+    const file = yield* findSession(adapter, place);
+    return file === undefined ? undefined : { kind: "file", path: file.path };
+  }
+  const database = `${place.home}/${adapter.sessionDatabase}`;
+  if (!(yield* (yield* FileSystem).exists(database)))
+    return;
+  const row = yield* try_(() => {
+    const db = new DatabaseSync(database, { readOnly: true });
+    try {
+      return db.prepare("select id from session where directory = ? and parent_id is null order by time_created desc limit 1").get(place.worktree);
+    } finally {
+      db.close();
+    }
+  });
+  return isString2(row?.id) ? { kind: "opencode", database, sessionId: row.id } : undefined;
+}).pipe(orElseSucceed(() => {
+  return;
+}));
+
+// packages/agent-runtime/src/transcript-relay.ts
+import { DatabaseSync as DatabaseSync2 } from "node:sqlite";
+var batchSize = 100;
+var bounded = (text) => text.slice(0, 200000);
+var isKitmanAsk = (tool) => /kitman/.test(tool) && /(?:^|_|\.)ask$/.test(tool);
+var filesOf = (tool, args) => {
+  const patch = isJsonObject(args) ? args.patchText : args;
+  if (tool === "apply_patch" && isString2(patch))
+    return [...patch.matchAll(/^\*\*\* (?:Add|Update|Delete) File: (.+)$/gm)].flatMap(([, path]) => path === undefined ? [] : [{ kind: "file", path: path.trim(), change: "changed" }]);
+  const path = isJsonObject(args) ? args.file_path ?? args.filePath ?? args.path : undefined;
+  if (!isString2(path) || path.length === 0)
+    return [];
+  if (tool === "Read" || tool === "read")
+    return [{ kind: "file", path, change: "read" }];
+  if (["Edit", "MultiEdit", "Write", "edit", "write"].includes(tool))
+    return [{ kind: "file", path, change: "changed" }];
+  return [];
+};
+var textOf = (content) => isString2(content) ? content : Array.isArray(content) ? content.flatMap((block) => isJsonObject(block) && isString2(block.text) ? [block.text] : []).join(`
+`) : "";
+var sessionNormalizer = (harness) => {
+  const asks = new Set;
+  const called = (callId, name, args) => {
+    const question = isKitmanAsk(name) && isJsonObject(args) ? args.prompt : undefined;
+    if (isString2(question))
+      asks.add(callId);
+    return [
+      { kind: "tool_call", callId, name, arguments: args },
+      ...isString2(question) ? [{ kind: "question", text: bounded(question) }] : [],
+      ...filesOf(name, args)
+    ];
+  };
+  const answerOf = (callId, output) => {
+    const result = decoded(output);
+    return isJsonObject(result) && isString2(result.answer) ? {
+      kind: "answer",
+      callId,
+      ...isString2(result.questionId) ? { questionId: result.questionId } : undefined,
+      text: bounded(result.answer)
+    } : { kind: "answer", callId, text: bounded(output) };
+  };
+  const answered = (callId, output, isError) => [
+    {
+      kind: "tool_result",
+      callId,
+      output: bounded(output),
+      ...isError ? { isError } : undefined
+    },
+    ...asks.has(callId) && !isError ? [answerOf(callId, output)] : []
+  ];
+  const claude = (line) => {
+    const message = line.message;
+    if (!isJsonObject(message) || !Array.isArray(message.content))
+      return [];
+    return message.content.flatMap((block) => {
+      if (!isJsonObject(block))
+        return [];
+      if (line.type === "assistant" && block.type === "text" && isString2(block.text))
+        return [{ kind: "message", role: "assistant", text: bounded(block.text) }];
+      if (block.type === "tool_use" && isString2(block.id) && isString2(block.name))
+        return called(block.id, block.name, block.input ?? null);
+      if (block.type === "tool_result" && isString2(block.tool_use_id))
+        return answered(block.tool_use_id, textOf(block.content), block.is_error === true);
+      return [];
+    });
+  };
+  const codex = (line) => {
+    const item = line.payload;
+    if (line.type !== "response_item" || !isJsonObject(item))
+      return [];
+    const callId = isString2(item.call_id) ? item.call_id : undefined;
+    if (item.type === "message" && item.role === "assistant") {
+      const text = textOf(item.content);
+      return text.length === 0 ? [] : [{ kind: "message", role: "assistant", text: bounded(text) }];
+    }
+    if (callId === undefined)
+      return [];
+    if (item.type === "function_call" && isString2(item.name))
+      return called(callId, item.name, isString2(item.arguments) ? getOrElse(decodeJsonStringOption(item.arguments), () => item.arguments ?? null) : item.arguments ?? null);
+    if (item.type === "custom_tool_call" && isString2(item.name))
+      return called(callId, item.name, item.input ?? null);
+    if (item.type === "function_call_output" || item.type === "custom_tool_call_output")
+      return answered(callId, textOf(item.output), false);
+    return [];
+  };
+  const pi = (line) => {
+    const message = line.message;
+    if (line.type !== "message" || !isJsonObject(message))
+      return [];
+    if (message.role === "toolResult" && isString2(message.toolCallId))
+      return answered(message.toolCallId, textOf(message.content), message.isError === true);
+    if (message.role !== "assistant" || !Array.isArray(message.content))
+      return [];
+    return message.content.flatMap((block) => {
+      if (!isJsonObject(block))
+        return [];
+      if (block.type === "text" && isString2(block.text))
+        return [{ kind: "message", role: "assistant", text: bounded(block.text) }];
+      if (block.type === "toolCall" && isString2(block.id) && isString2(block.name))
+        return called(block.id, block.name, block.arguments ?? null);
+      return [];
+    });
+  };
+  const opencode = (line) => {
+    const { part, stage } = line;
+    if (line.role !== "assistant" || !isJsonObject(part))
+      return [];
+    if (part.type === "text" && isString2(part.text))
+      return [{ kind: "message", role: "assistant", text: bounded(part.text) }];
+    const { state } = part;
+    if (part.type !== "tool" || !isString2(part.callID) || !isString2(part.tool) || !isJsonObject(state))
+      return [];
+    const output = isString2(state.output) ? state.output : isString2(state.error) ? state.error : "";
+    return [
+      ...line.callRecorded === true ? [] : called(part.callID, part.tool, state.input ?? null),
+      ...stage === "settled" ? answered(part.callID, output, state.status === "error") : []
+    ];
+  };
+  const readers = new Map([
+    ["claude", claude],
+    ["codex", codex],
+    ["pi", pi],
+    ["opencode", opencode]
+  ]);
+  return (value) => isJsonObject(value) ? readers.get(harness)?.(value) ?? [] : [];
+};
+var decoded = (text) => getOrUndefined(decodeJsonStringOption(text));
+var opencodeStage = (role, part) => {
+  if (role !== "assistant" || !isJsonObject(part))
+    return "settled";
+  if (part.type === "text")
+    return isJsonObject(part.time) && part.time.end !== undefined ? "settled" : "open";
+  if (part.type !== "tool")
+    return "settled";
+  const status = isJsonObject(part.state) ? part.state.status : undefined;
+  if (status === "completed" || status === "error")
+    return "settled";
+  return status === "running" ? "running" : "open";
+};
+var opencodeParts = (store) => try_(() => {
+  const db = new DatabaseSync2(store.database, { readOnly: true });
+  try {
+    return db.prepare("select part.id as id, message.data as message, part.data as part from part join message on message.id = part.message_id where part.session_id = ? order by part.time_created, part.id").all(store.sessionId).flatMap((row) => {
+      const message = isString2(row.message) ? decoded(row.message) : undefined;
+      const part = isString2(row.part) ? decoded(row.part) : undefined;
+      const role = isJsonObject(message) ? message.role : undefined;
+      return isString2(row.id) ? [{ id: row.id, role, part }] : [];
+    });
+  } finally {
+    db.close();
+  }
+});
+var transcriptRelay = (input) => {
+  const normalize = sessionNormalizer(input.harness);
+  let sequence = 0;
+  let read = input.skipLines ?? 0;
+  const stages = new Map;
+  let unacknowledged = [];
+  const record = (events) => sync(() => {
+    unacknowledged = [...unacknowledged, ...events.map((event) => ({ sequence: ++sequence, event }))];
+  });
+  const flush = gen(function* () {
+    for (let batch = unacknowledged.slice(0, batchSize);batch.length > 0; batch = unacknowledged.slice(0, batchSize)) {
+      const last = batch.at(-1)?.sequence ?? 0;
+      yield* input.send(batch);
+      unacknowledged = unacknowledged.filter((entry) => entry.sequence > last);
+    }
+  }).pipe(catch_((error) => logWarning("runner_transcript_unsent", error.message)));
+  return {
+    record,
+    read: (source) => gen(function* () {
+      if (source.kind === "opencode") {
+        for (const { id, role, part } of yield* opencodeParts(source)) {
+          const before = stages.get(id) ?? "open";
+          const stage = opencodeStage(role, part);
+          if (stage !== before) {
+            stages.set(id, stage);
+            yield* record(normalize({ role: role ?? null, part: part ?? null, stage, callRecorded: before === "running" }));
+          }
+        }
+        return;
+      }
+      const fs = yield* FileSystem;
+      const complete = (yield* fs.readFileString(source.path)).split(`
+`).slice(0, -1);
+      yield* record(complete.slice(read).flatMap((line) => normalize(decoded(line))));
+      read = Math.max(read, complete.length);
+    }).pipe(catch_((error) => logWarning("runner_transcript_unread", error.message)), andThen(flush)),
+    flush
+  };
+};
+var sessionLines = (path) => flatMap2(FileSystem, (fs) => fs.readFileString(path)).pipe(map3((content) => content.split(`
+`).length - 1));
 
 // node_modules/.bun/effect@4.0.4/node_modules/effect/dist/internal/matcher.js
 var TypeId = "~effect/Match/Matcher";
@@ -4430,7 +4654,10 @@ var makeReplicaSignals = sync(() => {
           mailbox.notes.push({ messageId, text });
           doneUnsafe(mailbox.arrived, void_);
         },
-        SessionUpdated: ({ workUnitId }) => doneUnsafe(mailboxFor(workUnitId).updated, void_)
+        SessionUpdated: ({ workUnitId }) => doneUnsafe(mailboxFor(workUnitId).updated, void_),
+        UpdateAvailable: () => {
+          return;
+        }
       });
     }),
     generation: sync(() => generation),
@@ -4501,7 +4728,7 @@ function runReplica(control, executor, signals) {
       return { status: "completed", workUnitId: work.id };
     }).pipe(tapError((error) => sync(() => {
       leaseLost = error instanceof RunnerReplicaError && error.operation !== "execute" && error.kind !== "transient";
-    })), ensuring(suspend(() => completed || leaseLost ? void_2 : call("release", () => control.release(work.id, lease)).pipe(timeout(releaseTimeout), catch_((error) => logWarning("runner_release_failed", error.message))))));
+    })), ensuring(suspend(() => completed || leaseLost ? void_2 : call("release", () => control.release(work.id, lease)).pipe(timeout(releaseTimeout), catch_((error) => logWarning("runner_release_failed", error.message))))), ensuring(control.finished?.() ?? void_2));
   }));
 }
 var idleBackoff = (idleIterations) => millis(Math.min(1000 * 2 ** idleIterations, 30000));
@@ -4656,6 +4883,7 @@ var runCheckouts = (rootDir) => {
   };
 };
 var isRunSettled = is(RunSettled);
+var isUpdateAvailable = is(UpdateAvailable);
 var clearSettledCheckpoints = (rpc, checkouts) => gen(function* () {
   const deleted = yield* forEach(yield* rpc.settledCheckpoints, (checkpoint) => checkpoint.ref === undefined || checkpoint.repoBinding === undefined ? succeed5([checkpoint.stepAttemptId]) : deleteRef(checkouts, checkpoint.repoBinding, checkpoint.ref).pipe(as([checkpoint.stepAttemptId]), catch_((error) => as(logWarning("runner_checkpoint_ref_kept", error.message), []))));
   if (deleted.flat().length > 0)
@@ -4674,7 +4902,7 @@ var listenForSignals = (input) => gen(function* () {
   yield* forEach(settled, input.checkouts.drop, { discard: true });
   const scope2 = yield* scope;
   yield* forkIn(clearCheckpoints, scope2);
-  yield* input.rpc.listen(input.runnerReplicaId, (signal) => isRunSettled(signal) ? ignore(input.checkouts.drop(signal.runId)).pipe(provideContext(services), andThen(forkIn(clearCheckpoints, scope2)), asVoid) : input.signals.push(signal));
+  yield* input.rpc.listen(input.runnerReplicaId, (signal) => isUpdateAvailable(signal) ? input.update?.(signal.version) ?? void_2 : isRunSettled(signal) ? ignore(input.checkouts.drop(signal.runId)).pipe(provideContext(services), andThen(forkIn(clearCheckpoints, scope2)), asVoid) : input.signals.push(signal));
 }).pipe(scoped, catch_((error) => logWarning("runner_signals_disconnected", error.message)), catchDefect((defect) => logError("runner_signals_failed", pretty(die(defect)))), andThen(sleep(input.reconnectAfter)), forever);
 var pushWork = (worktree, branch, step) => gen(function* () {
   const git = (...args) => runCommand2("git", ["-C", worktree, ...args]);
@@ -4695,20 +4923,51 @@ var runChange = (worktree, runBase) => gen(function* () {
   const change = boundChange({ changedPaths, files });
   return { ...change, changedPaths: [...change.changedPaths], files: [...change.files] };
 });
-var rpcStepCheckpoints = (rpc, signals) => ({
-  resume: (work) => rpc.resumeCheckpoint({ lease: stepLease(work) }),
-  save: (work, checkpoint) => rpc.saveCheckpoint({ lease: stepLease(work), checkpoint }),
+
+class SessionNotKept extends TaggedError("SessionNotKept") {
+  get message() {
+    return `Kitman did not keep the session: the file was ${this.status}`;
+  }
+}
+var keepSession = (rpc, lease, content) => gen(function* () {
+  const fs = yield* FileSystem;
+  const path = yield* fs.makeTempFileScoped({ prefix: "kitman-session-", suffix: ".gz" });
+  yield* fs.writeFile(path, content);
+  const files = {
+    createRunFile: ({ byteSize, sha256 }) => rpc.createCheckpointFile({ lease, byteSize, sha256 }),
+    runFileParts: (request) => map3(rpc.checkpointFileParts({ lease, ...request, partNumbers: [...request.partNumbers] }), ({ parts }) => parts),
+    completeRunFile: ({ parts, ...request }) => rpc.completeCheckpointFile({ lease, ...request, ...parts === undefined ? undefined : { parts: [...parts] } })
+  };
+  const kept = yield* uploadRunFile(files, { step: "", name: "session.gz", path });
+  if (kept.status !== "available")
+    return yield* new SessionNotKept({ status: kept.status });
+  return kept;
+}).pipe(scoped, timeout(checkpointTransfer.timeout));
+var rpcStepCheckpoints = (rpc, signals, storage) => ({
+  resume: (work) => gen(function* () {
+    const point = yield* rpc.resumeCheckpoint({ lease: programLease(work) });
+    if (point === undefined)
+      return;
+    const { session, ...workspace } = point;
+    if (session === undefined)
+      return workspace;
+    const { url, headers, ...file } = session;
+    const content = yield* storage.execute(get2(url).pipe(setHeaders(headers ?? {}))).pipe(flatMap2(filterStatusOk), flatMap2((response) => response.arrayBuffer), tapError((error) => logWarning("runner_session_unreadable", error.message)), option);
+    return isNone(content) ? workspace : { ...workspace, session: { ...file, content: new Uint8Array(content.value) } };
+  }),
+  save: (work, { session, ...workspace }) => gen(function* () {
+    const lease = programLease(work);
+    const kept = session === undefined ? undefined : yield* keepSession(rpc, lease, session.content).pipe(provideService(HttpClient, storage));
+    yield* rpc.saveCheckpoint({
+      lease,
+      checkpoint: {
+        ...workspace,
+        ...session === undefined || kept === undefined ? undefined : { session: { harness: session.harness, id: session.id, name: session.name, fileId: kept.id } }
+      }
+    });
+  }),
   sessionUpdated: (work) => signals.sessionUpdated(work.id)
 });
-var stepLease = (work) => ({
-  workUnitId: work.id,
-  leaseOwnerId: work.lease.leaseOwnerId,
-  runnerReplicaId: work.lease.runnerReplicaId,
-  leaseId: work.lease.leaseId,
-  attempt: work.lease.attempt,
-  fencingToken: work.lease.fencingToken,
-  capacitySlot: work.lease.capacitySlot
-});
 var gitIdentity = ["-c", "user.name=Kitman", "-c", "user.email=runner@kitman.invalid"];
 var pushCheckpoint = (worktree, ref, previousTree) => gen(function* () {
   const fs = yield* FileSystem;
@@ -4778,7 +5037,31 @@ var agentStepExecutor = (input) => (work) => gen(function* () {
   }).pipe(catchIf((error) => controlFailureKind(error) !== "stale_lease", (error) => logWarning("runner_checkpoint_failed", error.message)));
   const checkpoints = input.checkpoints;
   const checkpointing = checkpoints === undefined ? undefined : yield* forkScoped(forever(andThen(checkpoints.sessionUpdated(work).pipe(timeoutOrElse({ duration: input.checkpointEvery ?? "1 minute", orElse: () => void_2 })), uninterruptible(checkpoint))).pipe(catch_((error) => logWarning("runner_checkpoints_stopped", error.message))));
-  const ran = yield* input.runAgent(work, worktree, session);
+  const transcripts = input.transcripts;
+  const relay = transcripts === undefined || adapter === undefined ? undefined : transcriptRelay({
+    harness: adapter.id,
+    send: (entries) => transcripts(work, entries),
+    skipLines: transcript === undefined ? 0 : yield* sessionLines(transcript.path).pipe(orElseSucceed(() => 0))
+  });
+  let source;
+  const relayed = relay === undefined || adapter === undefined ? void_2 : gen(function* () {
+    source ??= yield* transcriptSource(adapter, {
+      home,
+      worktree,
+      ...sessionId === undefined ? undefined : { id: sessionId }
+    });
+    yield* source === undefined ? relay.flush : relay.read(source);
+  });
+  if (relay !== undefined)
+    yield* relay.record([{ kind: "lifecycle", state: transcript === undefined ? "started" : "resumed" }]);
+  const relaying = relay === undefined ? undefined : yield* forkScoped(forever(andThen(sleep("1 second"), relayed)));
+  const ran = yield* input.runAgent(work, worktree, session, (note) => relay === undefined ? void_2 : relay.record([{ kind: "steer", messageId: note.messageId, text: note.text.slice(0, 200000) }])).pipe(onExit((exit) => gen(function* () {
+    if (relay === undefined || relaying === undefined)
+      return;
+    yield* interrupt3(relaying);
+    const state = isSuccess2(exit) ? exit.value.status : hasInterrupts2(exit) ? "canceled" : "failed";
+    yield* andThen(relayed, andThen(relay.record([{ kind: "lifecycle", state }]), relay.flush)).pipe(timeout("10 seconds"), ignore);
+  })));
   if (checkpointing !== undefined)
     yield* interrupt3(checkpointing);
   if (ran.status !== "finished")
@@ -4817,6 +5100,7 @@ var agentStepSandboxPolicy = (work, apiUrl, runner) => ({
   ...runnerStateSandboxPolicy(runner, work.checkout === "none" || work.repoBinding === undefined ? [] : [repositoryClone(runner.workRoot, work.repoBinding.id)]),
   network: agentNetworkAllowlist({
     apiUrl,
+    storageOrigin: work.storageOrigin,
     providerHosts: harnessAdapter(work.brief.harness)?.providerHosts ?? [],
     ...work.repoBinding === undefined ? undefined : { repoBindingHost: work.repoBinding.host },
     ...work.network === undefined ? undefined : { agent: work.network }
@@ -4828,7 +5112,7 @@ function runnerStepAttemptFromAgentStep(work) {
     attempt: {
       id: work.id,
       workspaceId: "",
-      ...work.projectId === undefined ? undefined : { projectId: work.projectId },
+      ...work.teamId === undefined ? undefined : { teamId: work.teamId },
       runId: work.runId,
       taskId: work.runId,
       stepKey: work.stepKey,
@@ -4889,7 +5173,7 @@ var codexAppServer = (binary = "codex") => (env) => gen(function* () {
   const input = yield* unbounded();
   const pending = new Map;
   let lastId = 0;
-  const handle = yield* spawner.spawn(make13(binary, ["app-server"], {
+  const handle = yield* spawner.spawn(make8(binary, ["app-server"], {
     cwd: env.home,
     extendEnv: true,
     env: { HOME: env.home, CODEX_HOME: env.codexHome },
@@ -4912,7 +5196,7 @@ var codexAppServer = (binary = "codex") => (env) => gen(function* () {
   return {
     request: (method, params) => gen(function* () {
       const id = ++lastId;
-      const deferred = yield* make6();
+      const deferred = yield* make5();
       pending.set(id, deferred);
       yield* send({ id, method, params });
       return yield* _await(deferred).pipe(mapError((error) => new CodexAppServerFailed({ reason: `${method}: ${error.message}` })));
@@ -5090,13 +5374,13 @@ var handshake = [
 `).join("");
 var kitmanMcpPreflight = (mcp) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
-  const server = yield* spawner.spawn(make13(mcp.command, [...mcp.args], {
+  const server = yield* spawner.spawn(make8(mcp.command, [...mcp.args], {
     extendEnv: true,
     env: mcp.env,
-    stdin: { stream: make11(new TextEncoder().encode(handshake)), endOnDone: false },
+    stdin: { stream: make7(new TextEncoder().encode(handshake)), endOnDone: false },
     stderr: "ignore"
   }));
-  const reply = yield* server.stdout.pipe(decodeText, splitLines, map4((line) => recordValue(getOrUndefined(decodeJsonStringOption(line)))), filter((message) => message?.id === 2), runHead);
+  const reply = yield* server.stdout.pipe(decodeText, splitLines, map4((line) => recordValue(getOrUndefined(decodeJsonStringOption(line)))), filter2((message) => message?.id === 2), runHead);
   const result = isSome(reply) ? recordValue(reply.value?.result) : undefined;
   if (result === undefined || result.isError === true)
     return yield* new KitmanMcpUnreachable({ message: "Kitman MCP did not return the StepAttempt brief" });
@@ -5154,7 +5438,11 @@ var programProcessExecutor = (input) => (work) => gen(function* () {
   const file = yield* input.bundles.file(work.loopDigest);
   const { program, ...unit } = work;
   const stdin = encodeUnknownJsonStringSync(unit);
-  const hosts = work.network === "open" ? undefined : [...new Set([new URL(input.apiUrl).hostname, ...work.network?.hosts ?? []])];
+  const hosts = programNetworkHosts({
+    apiUrl: input.apiUrl,
+    storageOrigin: work.storageOrigin,
+    network: work.network
+  });
   const inherited = (yield* forEach(inheritedEnv, (name) => map3(optionalEnv(name), (value) => value === undefined ? [] : [[name, value]]))).flat();
   const programEnv = {
     KITMAN_LOOP_ID: program.loopId,
@@ -5165,8 +5453,8 @@ var programProcessExecutor = (input) => (work) => gen(function* () {
   };
   const exitCode = sandbox === undefined ? yield* gen(function* () {
     const spawner = yield* ChildProcessSpawner;
-    const handle = yield* spawner.spawn(make13(input.bun ?? process.execPath, [file], {
-      stdin: make11(new TextEncoder().encode(stdin)),
+    const handle = yield* spawner.spawn(make8(input.bun ?? process.execPath, [file], {
+      stdin: make7(new TextEncoder().encode(stdin)),
       stdout: "inherit",
       stderr: "inherit",
       extendEnv: false,
@@ -5227,20 +5515,33 @@ var programProcessExecutor = (input) => (work) => gen(function* () {
 }).pipe(scoped, catch_((error) => as(logWarning("runner_program_not_started", error.message), { status: "deferred" })));
 // packages/agent-runtime/src/verification-executor.ts
 var checkTimeout = "30 minutes";
-var checkSandboxPolicy = (work, sandbox, checkout, cache) => ({
+var checkFilesPerVerification = 50;
+var checkSandboxPolicy = (work, sandbox, checkout, cache, filesDir) => ({
   ...runnerStateSandboxPolicy(sandbox.runner, [
     repositoryClone(sandbox.runner.workRoot, work.repoBinding.id),
     checkout
   ]),
-  writablePaths: [checkout, cache],
-  network: agentNetworkAllowlist({ apiUrl: sandbox.apiUrl, providerHosts: [], repoBindingHost: work.repoBinding.host }),
+  writablePaths: [checkout, cache, filesDir],
+  network: verificationNetworkAllowlist({
+    apiUrl: sandbox.apiUrl,
+    storageOrigin: work.storageOrigin,
+    repoBindingHost: work.repoBinding.host
+  }),
   environment: srtCacheEnvironment(cache)
 });
-var checkRunner = (work, sandbox, cache) => (checkout) => (command, cwd) => {
+var checkRunner = (work, sandbox, cache) => (checkout) => ({ command, cwd, filesDir, onOutput }) => {
+  const env = { KITMAN_RUN_FILES_DIR: filesDir };
+  const output = onOutput === undefined ? undefined : { onOutput };
   if (sandbox === undefined || sandbox.backend === undefined)
-    return runShell2(command, { cwd, timeout: checkTimeout });
-  const policy = checkSandboxPolicy(work, sandbox, checkout, cache);
-  const sandboxCommand = { argv: ["sh", "-c", command], cwd, env: {}, timeout: checkTimeout };
+    return runShell2(command, { cwd, env, timeout: checkTimeout, ...output });
+  const policy = checkSandboxPolicy(work, sandbox, checkout, cache, filesDir);
+  const sandboxCommand = {
+    argv: ["sh", "-c", command],
+    cwd,
+    env,
+    timeout: checkTimeout,
+    ...output
+  };
   return sandbox.backend === "srt" ? runSandboxCommand({
     backend: "srt",
     policy,
@@ -5256,21 +5557,61 @@ var checkRunner = (work, sandbox, cache) => (checkout) => (command, cwd) => {
     command: sandboxCommand
   });
 };
-var runChecks = (worktree, checks, tree, known, run) => gen(function* () {
+var regularFiles = (dir) => gen(function* () {
+  const fs = yield* FileSystem;
+  const path = yield* Path;
+  const real = yield* fs.realPath(dir);
+  return yield* filter((yield* fs.readDirectory(dir)).sort(), (name) => gen(function* () {
+    const entry = path.join(real, name);
+    return (yield* fs.realPath(entry)) === entry && (yield* fs.stat(entry)).type === "File";
+  }).pipe(orElseSucceed(() => false)));
+});
+var redactedCopy = (from, to) => gen(function* () {
+  const fs = yield* FileSystem;
+  yield* fs.stream(from).pipe(decodeText, splitLines, map4((line) => `${redactCredentials(line)}
+`), encodeText, run(fs.sink(to)));
+});
+var checkFileKeeper = (work, runFiles, storage) => {
+  const files = rpcRunFiles(runFiles, programLease(work));
+  let left = checkFilesPerVerification;
+  const keep = (name, path) => uploadRunFile(files, { step: work.stepKey, name, path }).pipe(provideService(HttpClient, storage), map3((file) => file.status === "available" ? [file.id] : []), catch_((error) => as(logWarning("check_run_file_not_kept", `${name}: ${error.message}`), [])));
+  return (input) => gen(function* () {
+    const path = yield* Path;
+    const log = `${input.output}.log`;
+    const taken = (yield* regularFiles(input.filesDir)).slice(0, left);
+    left -= taken.length;
+    yield* redactedCopy(input.output, log);
+    const kept = yield* forEach([[`${input.check}.log`, log], ...taken.map((name) => [name, path.join(input.filesDir, name)])], ([name, from]) => keep(`${input.prefix}${name}`, from));
+    return kept.flat();
+  }).pipe(catch_((error) => as(logWarning("check_run_files_not_kept", `${input.check}: ${error.message}`), [])));
+};
+var runChecks = (worktree, checks, tree, known, run, keeper) => gen(function* () {
   const path = yield* Path;
   const due = checks.filter((check) => !known.some((entry) => entry.tree === tree && entry.name === check.name && entry.command === check.command));
   return yield* forEach(due, (check) => gen(function* () {
+    const fs = yield* FileSystem;
     const startedAt = yield* currentTimeMillis;
-    const ran = yield* run(check.command, path.join(worktree, check.workingDirectory ?? "."));
+    const filesDir = yield* fs.makeTempDirectoryScoped({ prefix: "kitman-check-files-" });
+    const output = path.join(yield* fs.makeTempDirectoryScoped({ prefix: "kitman-check-output-" }), "output");
+    const sink = keeper === undefined ? undefined : yield* fs.open(output, { flag: "w" });
+    const ran = yield* run({
+      command: check.command,
+      cwd: path.join(worktree, check.workingDirectory ?? "."),
+      filesDir,
+      ...sink === undefined ? undefined : { onOutput: (chunk) => sink.writeAll(chunk) }
+    });
+    const durationMs = (yield* currentTimeMillis) - startedAt;
+    const fileIds = keeper === undefined ? undefined : yield* keeper.keep({ check: check.name, prefix: keeper.prefix, output, filesDir });
     return {
       name: check.name,
       command: check.command,
       status: ran.exitCode === 0 ? "passed" : "failed",
       ...ran.exitCode === undefined ? undefined : { exitCode: ran.exitCode },
-      durationMs: (yield* currentTimeMillis) - startedAt,
-      outputTail: redactedOutputTail(ran.output)
+      durationMs,
+      outputTail: redactedOutputTail(ran.output),
+      ...fileIds === undefined ? undefined : { fileIds }
     };
-  }));
+  }).pipe(scoped));
 });
 var treeOf = (worktree) => map3(runCommand2("git", ["-C", worktree, "rev-parse", "HEAD^{tree}"]), (tree) => tree.trim());
 var verificationExecutor = (input) => (work) => gen(function* () {
@@ -5282,13 +5623,15 @@ var verificationExecutor = (input) => (work) => gen(function* () {
   const cache = yield* (yield* FileSystem).makeTempDirectoryScoped({ prefix: "kitman-verify-cache-" });
   const runIn = checkRunner(work, input.sandbox, cache);
   const checkouts = runCheckouts(input.rootDir);
+  const keep = input.runFiles === undefined ? undefined : checkFileKeeper(work, input.runFiles.client, input.runFiles.storage);
+  const keeper = (prefix) => keep === undefined ? undefined : { keep, prefix };
   const head = yield* checkouts.checkout({ runId: work.runId, id: work.id, baseRevision: work.revision }, work.repoBinding);
   const baseline = yield* checkouts.checkout({ runId: work.runId, id: `${work.id}-baseline` }, work.repoBinding);
   const headTree = yield* treeOf(head);
   const baselineTree = yield* treeOf(baseline);
   const trees = headTree === baselineTree ? [headTree] : [headTree, baselineTree];
   const known = yield* input.known(work, trees);
-  const headChecks = yield* runChecks(head, work.checks, headTree, known, runIn(head));
+  const headChecks = yield* runChecks(head, work.checks, headTree, known, runIn(head), keeper(""));
   return {
     status: "completed",
     evidence: {
@@ -5297,7 +5640,7 @@ var verificationExecutor = (input) => (work) => gen(function* () {
         baseline: {
           revision: (yield* runCommand2("git", ["-C", baseline, "rev-parse", "HEAD"])).trim(),
           tree: baselineTree,
-          checks: yield* runChecks(baseline, work.checks, baselineTree, known, runIn(baseline))
+          checks: yield* runChecks(baseline, work.checks, baselineTree, known, runIn(baseline), keeper("baseline-"))
         }
       }
     }