@outerlayer/cli 0.33.0-next.20261023030517 → 0.33.0-next.20261023120437

package/README.md

@@ -382,7 +382,8 @@ content:
   (`GET /v1/work-items/{number}/demo`) before it uploads anything. It cuts a recorded video once, from the first chapter's start to the
   last chapter's end, and emits it as one video artifact. It then emits a video
   artifact for each chapter with the same bytes and a time range in that video,
-  followed by the manifest as the demo record. A recording over 8 MiB falls
+  followed by the manifest as the demo record. A chapter's screenshot frame is
+  emitted as a screenshot artifact after its clip. A recording over 8 MiB falls
   back to one clip for each chapter. It runs `ffmpeg` and `espeak-ng` on your
   machine as separate programs and speaks the narration there. Nothing is sent
   to a speech service. The first narrated run downloads the voice pack, about
@@ -486,7 +487,7 @@ before it gives up.
 | `outerlayer context emit [--check]` | Compile `.outerlayer/` into each configured target tool's native files (targets come from `.outerlayer/config.json`). `--check` computes outputs and diffs against disk without writing (CI mode). Bare `outerlayer emit` with no name still compiles, with a deprecation warning. |
 | `outerlayer hooks wrap` / `outerlayer hooks unwrap` | Auto-wrap (or undo wrapping) `PreToolUse`/`PostToolUse` hooks for execution evidence — one spawn per firing. |
 | `outerlayer emit artifact <file> --caption <text> [--for <criterion-id>] [--pr <n>]` | Upload a proof artifact — screenshot, recording, report, or log — with its caption. Inside a recorded session it spools locally and ships on the next `sync`; otherwise it uploads immediately, anchored to a pull request or the current checkout. `--replaces` retires artifacts an earlier run uploaded. A JUnit XML file bound with `--for` proves a criterion that declares `test` proof; `--test <name[=path:line]>` binds only the named tests. |
-| `outerlayer emit demo <manifest> [--compare <manifest>] [--no-narration] [--item <n>] [--pr <n>] [--replaces <record id>]` | Turn a recorded video and its manifest (written by `@outerlayer/playwright`) into a narrated demo: one WebM clip for each chapter, emitted as a video artifact. A chapter whose checks all passed is bound to its criterion. The manifest is emitted as the demo record, with the test file a version 3 manifest names. With `--replaces <record id>`, the new demo retires the item's old demo. With `--compare`, a second run's stills are compared with the first run's, and each chapter reads `yes`, `no` or `not checked`. Needs `ffmpeg` and `ffprobe`, and `espeak-ng` unless `--no-narration`. Exit 1 means a chapter had a failed check. |
+| `outerlayer emit demo <manifest> [--compare <manifest>] [--no-narration] [--item <n>] [--pr <n>] [--replaces <record id>]` | Turn a recorded video and its manifest (written by `@outerlayer/playwright`) into a narrated demo: one WebM clip for each chapter, emitted as a video artifact. A chapter whose checks all passed is bound to its criterion. A chapter of a version 4 manifest may hold a screenshot frame, which its test marked with `demo.screenshot()`. The frame is stored as a screenshot of the chapter's criterion only when that criterion declares `screenshot` and every check passed; otherwise the command says why it stored none. The manifest is emitted as the demo record, with the test file a version 3 or 4 manifest names. With `--replaces <record id>`, the new demo retires the item's old demo. With `--compare`, a second run's stills are compared with the first run's, and each chapter reads `yes`, `no` or `not checked`. Needs `ffmpeg` and `ffprobe`, and `espeak-ng` unless `--no-narration`. Exit 1 means a chapter had a failed check. |
 | `outerlayer emit <name> --result <pass\|fail> [--link <url>] [--body <text>\|--body-file <path>] --item <number>` | Record one named check's outcome on a work item. A check that ran carries the run URL as its proof (`--link`); a judgment you are making yourself carries one sentence (`--body`, or `--body-file` to read it from a file — `-` reads standard input). A `fail` needs at least one of the two; a `pass` needs neither. `--item` names the work item by the number printed when the item was created — always required, in or out of a recorded session; a session records checks on its own item like any other, stored as the session's, but cannot clear a person's fail. Prints the recorded check's id. Who recorded it comes from your API key, never from what you send. |
 | `outerlayer work comment --item <n> [--criterion <id>] --body <text> [--artifact <id>] [--pass\|--fail\|--attach\|--ready]` | Post one comment on a work item's general thread, or on one acceptance criterion's own thread with `--criterion`. `--pass`/`--fail` need a person's own credential and apply to the whole item, so they work on the general thread only and the gateway refuses them with `--criterion`; `--attach` makes the named artifact that criterion's current proof; `--ready` hands a thread back to a person. The detected session id rides along automatically, only ever narrowing what the comment may do. |
 | `outerlayer work stop --item <n> [--note <text>]` | Ask the host that holds the item's build to end it. The host reads the request at its next heartbeat and ends the build with outcome `stopped`, so the build may run a little longer. The item is not built again until a new build request. Needs `work.update`. Exits 1 when no host build is running for the item. |

package/dist/{agent-setup-APFM4MZ4.js → agent-setup-YHEW3WXB.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-DHUHQPRQ.js';
-import './chunk-PILHDNHX.js';
+export { keepHandWritten, runAgentSetup } from './chunk-L6MDOEHN.js';
+import './chunk-V673DFOL.js';
 import './chunk-KT4CN6OU.js';
-import './chunk-XMPE5TT4.js';
-import './chunk-PJI5D2XT.js';
+import './chunk-KUE4V2SK.js';
+import './chunk-LYGI3T66.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-2WZ66FXA.js';
-import './chunk-C7WGCI77.js';
+import './chunk-AKZRGFGT.js';
+import './chunk-FT7MUQGO.js';
 import './chunk-6RKD7YZ6.js';
 import './chunk-PJDQPF5N.js';
 import './chunk-SOI6K5DY.js';
@@ -15,16 +15,16 @@ import './chunk-PA6CK6WQ.js';
 import './chunk-BALIE3BA.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-M24H6JQW.js';
+import './chunk-44V5SD4G.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';
 import './chunk-CRB3POP4.js';
-import './chunk-6ZLI652Y.js';
+import './chunk-ZF24JN7R.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
-import './chunk-PNIFQX73.js';
-import './chunk-V7Q5OKN7.js';
+import './chunk-6CXNWKWD.js';
+import './chunk-F2D5BSXS.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';

package/dist/{artifact-link-cmd-IHHMU4EA.js → artifact-link-cmd-7FYKWA7J.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal, readEffectiveArtifactSpoolState } from './chunk-E4F7YE7P.js';
+import { sanitizeTerminal, readEffectiveArtifactSpoolState } from './chunk-MPC2UAW2.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import './chunk-V7Q5OKN7.js';
+import './chunk-F2D5BSXS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-disk-55M4ZMDX.js → build-disk-ECTLWTPC.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-LHKWWEQZ.js';
-import './chunk-QKEOAQ2W.js';
+export { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK, DOCKER_CACHE_MS, allocatedBytes, checkDiskFit, realBuildDiskProbe, runDocker, volumeBytes } from './chunk-X4JEBMYN.js';
+import './chunk-OGMXVPCS.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-NE63JADS.js';
-import './chunk-QQXNS4G2.js';
+import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';
 import './chunk-BALIE3BA.js';
-import './chunk-V7Q5OKN7.js';
+import './chunk-F2D5BSXS.js';
 import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-23T03:06:35.440Z+4c51ec6","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-23T12:05:53.102Z+82d4e55","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-DQZCPB7J.js → builder-LUPHKUFM.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-QKEOAQ2W.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-OGMXVPCS.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-NE63JADS.js';
-import './chunk-QQXNS4G2.js';
+import './chunk-NIY2UBT6.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';
 import './chunk-BALIE3BA.js';
-import './chunk-V7Q5OKN7.js';
+import './chunk-F2D5BSXS.js';
 import './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';
 import './chunk-Z5GEFMRW.js';

package/dist/{check-AEMFDR55.js → check-4QNLMDP7.js}

@@ -1,67 +1,67 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-67KCGRKA.js';
-import './chunk-AXIK6F52.js';
+import { probeCredentials } from './chunk-YSM4EEUK.js';
+import './chunk-FZUFUVLK.js';
 import './chunk-GH246BGV.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-57L2YAJA.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-E7R2GIAW.js';
-import './chunk-RLAKWXDK.js';
+import './chunk-YGZLRX5U.js';
 import './chunk-MZYOUIY5.js';
 import './chunk-HVRQQOMH.js';
 import './chunk-6LBSAW6I.js';
 import './chunk-I3LTIAOR.js';
-import './chunk-4NKHOCTF.js';
-import './chunk-T4S2DVOA.js';
-import './chunk-HUBRTT2C.js';
+import './chunk-7IFYI7XF.js';
+import './chunk-D3EDZPJR.js';
+import './chunk-7UPMYRPS.js';
 import './chunk-ESVW4MJY.js';
-import { managedProblems, managedFactsOf } from './chunk-B6WW6AKO.js';
+import { managedProblems, managedFactsOf } from './chunk-SQQD5MST.js';
 import './chunk-NBZ7XBT6.js';
 import './chunk-TBT347UY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, probeHelper, HELPER_ENV, helperSocketPath, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-GFTWZSOW.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, probeHelper, HELPER_ENV, helperSocketPath, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-IUPY54BZ.js';
 import './chunk-2PGI6RDE.js';
-import './chunk-UHFU3CBN.js';
+import './chunk-EXZACZ2P.js';
 import './chunk-YXHKCHWG.js';
 import './chunk-F5UL23I2.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
 import './chunk-5THSC6BD.js';
 import './chunk-L26V6ILJ.js';
-import './chunk-Z4GLZTDF.js';
+import './chunk-XCRET2GZ.js';
 import './chunk-MZBQTVFG.js';
 import './chunk-TQMI335S.js';
-import { DEFAULT_UNIT_NAME } from './chunk-7HZH5D7H.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-ONUACB5C.js';
-import './chunk-LHKWWEQZ.js';
-import './chunk-QKEOAQ2W.js';
+import { DEFAULT_UNIT_NAME } from './chunk-EHOFFTVX.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-VWQCYOBS.js';
+import './chunk-X4JEBMYN.js';
+import './chunk-OGMXVPCS.js';
 import './chunk-3Z3MPR55.js';
 import './chunk-NE63JADS.js';
-import './chunk-5FSVA3CO.js';
+import './chunk-YXMGHGHR.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-CCOU4NXE.js';
-import './chunk-VJGQEASF.js';
-import './chunk-E4F7YE7P.js';
-import './chunk-QQXNS4G2.js';
-import './chunk-PJI5D2XT.js';
-import './chunk-X37GC7DM.js';
+import './chunk-HLZMAJJD.js';
+import './chunk-S5CNYXUA.js';
+import './chunk-MPC2UAW2.js';
+import './chunk-NIY2UBT6.js';
+import './chunk-LYGI3T66.js';
+import './chunk-7V5GUEDU.js';
 import './chunk-G2JWZDFA.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-2WZ66FXA.js';
-import './chunk-C7WGCI77.js';
+import './chunk-AKZRGFGT.js';
+import './chunk-FT7MUQGO.js';
 import './chunk-6RKD7YZ6.js';
 import './chunk-PJDQPF5N.js';
 import './chunk-SOI6K5DY.js';
 import './chunk-PA6CK6WQ.js';
 import { claudeEnvPath } from './chunk-BALIE3BA.js';
-import './chunk-JB4R5IFJ.js';
+import './chunk-UK4RGH46.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
 import './chunk-FGF52V4V.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-M24H6JQW.js';
+import './chunk-44V5SD4G.js';
 import './chunk-5BHIBJDA.js';
 import './chunk-CDDED64E.js';
 import './chunk-RA3O54FC.js';
@@ -71,8 +71,8 @@ import './chunk-CRB3POP4.js';
 import './chunk-URIZRCRY.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
-import './chunk-PNIFQX73.js';
-import './chunk-V7Q5OKN7.js';
+import './chunk-6CXNWKWD.js';
+import './chunk-F2D5BSXS.js';
 import './chunk-VNVZDWO3.js';
 import { parseRunnerEnv } from './chunk-HACGUL52.js';
 import './chunk-MESOOLF4.js';

package/dist/{chunk-X62C7V4B.js → chunk-2JLM4GUF.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { checkStarterFiles, contextIsGoverned } from './chunk-35DSTT37.js';
-import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences, checkIgnoredSkillFolders } from './chunk-6ANIBEQ6.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-5FSVA3CO.js';
-import { isLinkedRepository } from './chunk-VJGQEASF.js';
-import { sanitizeTerminal } from './chunk-E4F7YE7P.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-QQXNS4G2.js';
+import { checkStarterFiles, contextIsGoverned } from './chunk-DKFUXYGD.js';
+import { fleetCheck, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills, checkMaintainedReferences, checkIgnoredSkillFolders } from './chunk-EJL6CWSP.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-YXMGHGHR.js';
+import { isLinkedRepository } from './chunk-S5CNYXUA.js';
+import { sanitizeTerminal } from './chunk-MPC2UAW2.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-NIY2UBT6.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { checkFormerSkillNames } from './chunk-C7WGCI77.js';
+import { checkFormerSkillNames } from './chunk-FT7MUQGO.js';
 import { resolveGatewayCredentials, defaultFetch } from './chunk-6RKD7YZ6.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-JB4R5IFJ.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-UK4RGH46.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-I7RZHMXW.js';
 import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
@@ -1195,8 +1195,8 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-55M4ZMDX.js');
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-RRY7DIJG.js');
+  const { DEFAULT_BUILD_DISK, DEFAULT_CACHE_DISK } = await import('./build-disk-ECTLWTPC.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-MVA7YTFW.js');
   const configPath = defaultRunnerConfigPath();
   const runnerHost = hasRunnerBlock(configPath);
   const hooks = (() => {
@@ -1217,7 +1217,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-LYOFFCQS.js');
+    const { runnerHostChecks } = await import('./doctor-4YZOP343.js');
     const gateway = (() => {
       try {
         const { url, apiKey, appId } = loadRunnerConfig(configPath);
@@ -1245,7 +1245,7 @@ async function gatherDoctorChecks() {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-DNLXTXLA.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-5BQ3TFBT.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-47Z7VNWP.js');
       const { dirname: dirname2 } = await import('path');
       return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
     })();

package/dist/{chunk-M24H6JQW.js → chunk-44V5SD4G.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
-import { splitRawFile } from './chunk-PNIFQX73.js';
+import { splitRawFile } from './chunk-6CXNWKWD.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';

package/dist/{chunk-C66Q2CLW.js → chunk-5M2J7B5N.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-CCOU4NXE.js';
-import { resolveRepoIdentity } from './chunk-QQXNS4G2.js';
+import { autoConnect } from './chunk-HLZMAJJD.js';
+import { resolveRepoIdentity } from './chunk-NIY2UBT6.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-6RKD7YZ6.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-PNIFQX73.js → chunk-6CXNWKWD.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RESERVED_EMIT_NAMES, ARTIFACT_KINDS, ArtifactCriterionIdSchema } from './chunk-V7Q5OKN7.js';
+import { RESERVED_EMIT_NAMES, ARTIFACT_KINDS, ArtifactCriterionIdSchema } from './chunk-F2D5BSXS.js';
 import { __commonJS, __require, __toESM } from './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/{chunk-UAJYWZ2F.js → chunk-6SPD266O.js}

@@ -2,15 +2,15 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession, transcriptPathForSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-CCOU4NXE.js';
-import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-QQXNS4G2.js';
+import { autoConnect } from './chunk-HLZMAJJD.js';
+import { resolveRepoIdentity, defaultProjectsDir, findTranscripts, sessionIdFromPath, scrubText } from './chunk-NIY2UBT6.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-6RKD7YZ6.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { FindingBatchSchema, FindingsResponseSchema, SAME_PROBLEM_RULES } from './chunk-V7Q5OKN7.js';
+import { FindingBatchSchema, FindingsResponseSchema, SAME_PROBLEM_RULES } from './chunk-F2D5BSXS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { readFileSync, existsSync } from 'fs';
 import { join, dirname, basename } from 'path';

package/dist/{chunk-4NKHOCTF.js → chunk-7IFYI7XF.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-T4S2DVOA.js';
-import { CaptureDaemon } from './chunk-QQXNS4G2.js';
-import { spoolDir } from './chunk-JB4R5IFJ.js';
+import { LiveUploader } from './chunk-D3EDZPJR.js';
+import { CaptureDaemon } from './chunk-NIY2UBT6.js';
+import { spoolDir } from './chunk-UK4RGH46.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';

package/dist/{chunk-HUBRTT2C.js → chunk-7UPMYRPS.js}

@@ -2,14 +2,14 @@
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { autoConnect } from './chunk-CCOU4NXE.js';
-import { acquireSpoolLockAt } from './chunk-E4F7YE7P.js';
-import { resolveRepoIdentity } from './chunk-QQXNS4G2.js';
+import { autoConnect } from './chunk-HLZMAJJD.js';
+import { acquireSpoolLockAt } from './chunk-MPC2UAW2.js';
+import { resolveRepoIdentity } from './chunk-NIY2UBT6.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-6RKD7YZ6.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
-import { StepNameSchema, StepBodySchema } from './chunk-V7Q5OKN7.js';
+import { StepNameSchema, StepBodySchema } from './chunk-F2D5BSXS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { randomUUID } from 'crypto';
 import { readFileSync, existsSync, mkdirSync, writeFileSync, renameSync, appendFileSync } from 'fs';

package/dist/{chunk-X37GC7DM.js → chunk-7V5GUEDU.js}

@@ -5,7 +5,7 @@ import { C } from './chunk-ANPNT6PM.js';
 import { readCloudConfigStrict, CloudConfigError, readCloudConfig, writeCloudConfig, cloudConfigPath } from './chunk-PJDQPF5N.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { CLI_LOGIN_MACHINE_NAME_MAX, CliLoginPollResponseSchema, CLI_LOGIN_KIND, CliLoginRefusalSchema, CliLoginStartedSchema } from './chunk-V7Q5OKN7.js';
+import { CLI_LOGIN_MACHINE_NAME_MAX, CliLoginPollResponseSchema, CLI_LOGIN_KIND, CliLoginRefusalSchema, CliLoginStartedSchema } from './chunk-F2D5BSXS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { generateKeyPairSync, privateDecrypt, constants, createPrivateKey } from 'crypto';
 import { spawn } from 'child_process';

package/dist/{chunk-2WZ66FXA.js → chunk-AKZRGFGT.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { removeRetiredSkills } from './chunk-C7WGCI77.js';
+import { removeRetiredSkills } from './chunk-FT7MUQGO.js';
 import { defaultFetch, resolveGatewayCredentials } from './chunk-6RKD7YZ6.js';
 import { withTokenHeader } from './chunk-BALIE3BA.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
-import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-M24H6JQW.js';
+import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-44V5SD4G.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, writeContextManifest, SOURCE_CACHE_TTL_SUCCESS_MS, readSourceCache, isSourceCacheFresh, clearDegraded } from './chunk-YQR6E6OV.js';
-import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-PNIFQX73.js';
+import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-6CXNWKWD.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync, chmodSync, lstatSync, readFileSync, copyFileSync } from 'fs';

package/dist/{chunk-T4S2DVOA.js → chunk-D3EDZPJR.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-HUBRTT2C.js';
+import { uploadSpooledSteps } from './chunk-7UPMYRPS.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-E4F7YE7P.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-QQXNS4G2.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-MPC2UAW2.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-NIY2UBT6.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-6RKD7YZ6.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-PJDQPF5N.js';
 import { signerFor, signRunnerRequest } from './chunk-SOI6K5DY.js';
-import { writeSyncStatus, spoolDir } from './chunk-JB4R5IFJ.js';
+import { writeSyncStatus, spoolDir } from './chunk-UK4RGH46.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { hookExecSpoolPath } from './chunk-2O5KA67H.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
@@ -17,7 +17,7 @@ import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-T2Q7ISPE.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { removeJournalHooks } from './chunk-TUSYOL2O.js';
-import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-V7Q5OKN7.js';
+import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-F2D5BSXS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { dirname, basename, join, sep } from 'path';
 import { statSync, readFileSync, readdirSync, mkdirSync, writeFileSync, renameSync, existsSync, rmSync } from 'fs';

package/dist/{chunk-35DSTT37.js → chunk-DKFUXYGD.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { mcpTargetPath, INIT_STDIO_ENTRY, INIT_DOCS_ENTRY, DOCS_MCP_SERVER_NAME } from './chunk-KT4CN6OU.js';
-import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-XMPE5TT4.js';
-import { skillsBaseFor } from './chunk-PJI5D2XT.js';
+import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-KUE4V2SK.js';
+import { skillsBaseFor } from './chunk-LYGI3T66.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, skillDir, loadTemplateFiles, rewriteSkillPaths, restoreSkillPaths, TEMPLATE_SKILLS } from './chunk-M24H6JQW.js';
+import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, skillDir, loadTemplateFiles, rewriteSkillPaths, restoreSkillPaths, TEMPLATE_SKILLS } from './chunk-44V5SD4G.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { hasSymlinkComponent } from './chunk-6ZLI652Y.js';
+import { hasSymlinkComponent } from './chunk-ZF24JN7R.js';
 import { cloneIsGoverned } from './chunk-YQR6E6OV.js';
 import { createHash } from 'crypto';
 import { existsSync, readFileSync } from 'fs';

package/dist/{chunk-7HZH5D7H.js → chunk-EHOFFTVX.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-ONUACB5C.js';
-import { parseSize } from './chunk-QKEOAQ2W.js';
+import { builtinKind } from './chunk-VWQCYOBS.js';
+import { parseSize } from './chunk-OGMXVPCS.js';
 import { runnerDir } from './chunk-PA6CK6WQ.js';
 import { CLAUDE_CREDENTIAL_ID, CLAUDE_ENV_FILE, credentialLineIn, withoutCredentialLines } from './chunk-BALIE3BA.js';
 import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-HACGUL52.js';

package/dist/{chunk-6ANIBEQ6.js → chunk-EJL6CWSP.js}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal } from './chunk-E4F7YE7P.js';
-import { isAgentsMdLayout } from './chunk-PJI5D2XT.js';
+import { sanitizeTerminal } from './chunk-MPC2UAW2.js';
+import { isAgentsMdLayout } from './chunk-LYGI3T66.js';
 import { resolveGatewayCredentials, defaultFetch } from './chunk-6RKD7YZ6.js';
 import { versionAtLeast } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import { machineSkillsState, staleClaudeSkills } from './chunk-T4TT76GG.js';
-import { AGENTS_SKILLS_BASE, skillDir, namesCore, MACHINE_SKILL_PATH, isMaintainedCopy, loadTemplateFiles } from './chunk-M24H6JQW.js';
+import { machineSkillsState, staleClaudeSkills } from './chunk-JEVKOZBB.js';
+import { AGENTS_SKILLS_BASE, skillDir, namesCore, MACHINE_SKILL_PATH, isMaintainedCopy, loadTemplateFiles } from './chunk-44V5SD4G.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { hasSymlinkComponent } from './chunk-6ZLI652Y.js';
-import { emitTree, ALL_TARGET_IDS, classifyTree, splitRawFile } from './chunk-PNIFQX73.js';
+import { hasSymlinkComponent } from './chunk-ZF24JN7R.js';
+import { emitTree, ALL_TARGET_IDS, classifyTree, splitRawFile } from './chunk-6CXNWKWD.js';
 import { execFileSync } from 'child_process';
 import { existsSync, readFileSync, writeFileSync, realpathSync, readdirSync } from 'fs';
 import { join, dirname, posix, basename, isAbsolute, relative } from 'path';

package/dist/{chunk-UHFU3CBN.js → chunk-EXZACZ2P.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-7HZH5D7H.js';
+import { DEFAULT_UNIT_NAME } from './chunk-EHOFFTVX.js';
 import { RUNNER_FILE_MODE } from './chunk-PA6CK6WQ.js';
 import { claudeEnvPath, withoutCredentialLines } from './chunk-BALIE3BA.js';
 import { parseRunnerEnv } from './chunk-HACGUL52.js';

package/dist/{chunk-V7Q5OKN7.js → chunk-F2D5BSXS.js}

@@ -22719,7 +22719,30 @@ var DemoManifestV3Schema = external_exports.strictObject({
   ...manifestFields,
   chapters: external_exports.array(DemoChapterV2Schema).min(1).max(DEMO_CHAPTERS_MAX)
 });
-var DemoManifestSchema = external_exports.discriminatedUnion("schemaVersion", [DemoManifestV1Schema, DemoManifestV2Schema, DemoManifestV3Schema]);
+var DemoScreenshotSchema = external_exports.strictObject({
+  /** The index, in the chapter's checks, of the check the frame follows. */
+  check: external_exports.number().int().min(0),
+  /** The PNG file, as a path relative to the manifest's folder. */
+  file: external_exports.string().min(1).max(500),
+  /** SHA-256 of the PNG file's bytes, in lower-case hex. */
+  sha256: external_exports.string().regex(/^[0-9a-f]{64}$/),
+  /** True when the frame is the whole page, not the viewport. */
+  fullPage: external_exports.boolean(),
+  /** True when the chapter's `demo.mask()` regions are covered in the frame. */
+  masked: external_exports.boolean()
+});
+var DemoChapterV4Schema = external_exports.strictObject({ ...chapterWithStillsFields, screenshot: DemoScreenshotSchema.optional() }).refine(endsAfterStart, { message: "a chapter must end after it starts", path: ["end"] }).superRefine(stillsFollowPassedChecks).superRefine((chapter, context) => {
+  if (chapter.screenshot !== void 0 && chapter.screenshot.check >= chapter.checks.length) {
+    context.addIssue({ code: "custom", path: ["screenshot", "check"], message: "a screenshot must follow a check the chapter has" });
+  }
+});
+var DemoManifestV4Schema = external_exports.strictObject({
+  schemaVersion: external_exports.literal(4),
+  test: DemoTestPathSchema,
+  ...manifestFields,
+  chapters: external_exports.array(DemoChapterV4Schema).min(1).max(DEMO_CHAPTERS_MAX)
+});
+var DemoManifestSchema = external_exports.discriminatedUnion("schemaVersion", [DemoManifestV1Schema, DemoManifestV2Schema, DemoManifestV3Schema, DemoManifestV4Schema]);
 var DemoRecordChapterSchema = external_exports.strictObject({
   ...chapterFields,
   /** The `clientArtifactId` of the chapter's clip. */
@@ -22764,7 +22787,9 @@ var DemoRecordChapterV3Schema = external_exports.strictObject({
   bound: external_exports.boolean(),
   comparable: DemoComparableSchema,
   stills: external_exports.array(DemoStillSchema.pick({ check: true, sha256: true })).max(DEMO_CHECKS_MAX),
-  difference: external_exports.strictObject({ check: external_exports.number().int().min(0), region: DemoRegionSchema }).optional()
+  difference: external_exports.strictObject({ check: external_exports.number().int().min(0), region: DemoRegionSchema }).optional(),
+  /** The stored screenshot frame: its `clientArtifactId`, and the manifest's fields for it. Present only for a bound frame. */
+  screenshot: DemoScreenshotSchema.omit({ file: true }).extend({ artifactId: external_exports.string().min(1).max(64) }).optional()
 }).refine((chapter) => chapter.end > chapter.start, { message: "a chapter must end after it starts", path: ["end"] }).refine((chapter) => chapter.comparable === "no" === (chapter.difference !== void 0), {
   message: "a chapter has a difference exactly when it is not comparable",
   path: ["difference"]

package/dist/{chunk-C7WGCI77.js → chunk-FT7MUQGO.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-M24H6JQW.js';
+import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-44V5SD4G.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { emitTree, ALL_TARGET_IDS, classifyTree } from './chunk-PNIFQX73.js';
+import { emitTree, ALL_TARGET_IDS, classifyTree } from './chunk-6CXNWKWD.js';
 import { readFileSync, existsSync, unlinkSync, rmdirSync, readdirSync } from 'fs';
 import { join, dirname, relative, sep } from 'path';
 

package/dist/{chunk-AXIK6F52.js → chunk-FZUFUVLK.js}

@@ -4,30 +4,30 @@ import { readsJobState, READ_JOB_STATE_FORMATS, jobStateFormatOf } from './chunk
 import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-HVRQQOMH.js';
 import { writeDockerClientConfig } from './chunk-6LBSAW6I.js';
 import { zodProblem } from './chunk-I3LTIAOR.js';
-import { senderPidfile } from './chunk-4NKHOCTF.js';
-import { installScrubContext } from './chunk-T4S2DVOA.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-GFTWZSOW.js';
+import { senderPidfile } from './chunk-7IFYI7XF.js';
+import { installScrubContext } from './chunk-D3EDZPJR.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, makeBuildsDirPrivate, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, startJailedInto, resolveAgentUser, AgentUserError, runBuildSteps, startHostServices, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, closeHostBuild, containerSenderCommand, hostCommandEnvironment, execArgv, signalInContainer, syncInContainer, copyTranscriptsFromContainer, MANAGED_UNJAILED_REASON, senderAliveScript, helperFirecrackerNote, stopJailed, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, ROOT_DISK_ID_PREFIX, copyJudgeTree } from './chunk-IUPY54BZ.js';
 import { readBranchHead, fetchCommit, diffBetween } from './chunk-YXHKCHWG.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
 import { waitForAgent, vmExecArgs } from './chunk-5THSC6BD.js';
 import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-L26V6ILJ.js';
-import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-Z4GLZTDF.js';
-import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-ONUACB5C.js';
-import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-LHKWWEQZ.js';
-import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-QKEOAQ2W.js';
+import { describeCallFailure, resolveGoverningSource, prefetchGovernedContext, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, WORKFLOW_PERMISSION_REASON, keptContextTree } from './chunk-XCRET2GZ.js';
+import { imageBuildOf, isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-VWQCYOBS.js';
+import { DEFAULT_CACHE_DISK, formatBytes, allocatedBytes } from './chunk-X4JEBMYN.js';
+import { parseSize, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, withAnswerProtocol, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR, COMMAND_DIR, MAX_ITEMS_BYTES } from './chunk-OGMXVPCS.js';
 import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-NE63JADS.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-5FSVA3CO.js';
-import { planArtifactUpload } from './chunk-E4F7YE7P.js';
-import { scrubText } from './chunk-QQXNS4G2.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-YXMGHGHR.js';
+import { planArtifactUpload } from './chunk-MPC2UAW2.js';
+import { scrubText } from './chunk-NIY2UBT6.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { signerFor } from './chunk-SOI6K5DY.js';
 import { RUNNER_FILE_MODE, runnerDir, buildDir, vsockPath, jobConsolePath } from './chunk-PA6CK6WQ.js';
 import { JOB_MOUNT, claudeCredential, repositoriesOf, primaryOf, buildEnvironment, CHECKOUT_DIR, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, authorEnvironment, withTunnelRecord, commitIdentityRecord, buildMavenSettingsXml, RELAY_PORT, repositoryPath, lifecycleWorkdir, CHECK_ITEMS_FILE, MAVEN_SETTINGS_FILE, CLAUDE_CREDENTIAL_VARIABLES, currentClaudeCredential, removedClaudeCredentialValues, checkEnvironment, EVAL_INPUT_DIR } from './chunk-BALIE3BA.js';
-import { resolvePackRoot } from './chunk-M24H6JQW.js';
+import { resolvePackRoot } from './chunk-44V5SD4G.js';
 import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
-import { parsePolicy } from './chunk-PNIFQX73.js';
-import { CheckItemsSchema, CHECK_ITEM_REASON_MAX_LENGTH } from './chunk-V7Q5OKN7.js';
+import { parsePolicy } from './chunk-6CXNWKWD.js';
+import { CheckItemsSchema, CHECK_ITEM_REASON_MAX_LENGTH } from './chunk-F2D5BSXS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { fdName } from './chunk-HACGUL52.js';
 import { RUNNER_WORDED_REASONS, UNKNOWN_TRACKING_REASON } from './chunk-MESOOLF4.js';