@vosjs/cli 0.48.1 → 0.50.0

package/dist/{chunk-RHPRZQRM.js → chunk-SE4F3OMQ.js}

@@ -7,28 +7,14 @@ import {
   trackFlags
 } from "./chunk-FACYY7VV.js";
 import {
-  PRESS_HOLD_MS,
-  PRESS_LEAD_MS,
-  SCROLL_SETTLE_MS,
-  TRAILING_HOLD_MS,
-  askedMs,
-  clockMotion,
-  clockTyping,
   deadLine,
-  deadTime,
-  deadWarns,
-  holdLeftMs,
-  paceLine,
-  paceReport,
-  pointerTravelMs,
-  settleMs,
-  settleVerdict
-} from "./chunk-AUPGJJTL.js";
+  deadWarns
+} from "./chunk-72ADTMWW.js";
 
 // src/plugin/run.ts
-import { mkdir as mkdir10, readFile as readFile15, rm as rm5 } from "fs/promises";
-import { existsSync as existsSync18 } from "fs";
-import { join as join21, resolve as resolve9 } from "path";
+import { mkdir as mkdir11, readFile as readFile16, rm as rm5 } from "fs/promises";
+import { existsSync as existsSync19 } from "fs";
+import { join as join22, resolve as resolve10 } from "path";
 import {
   END_CARD_FROM as END_CARD_FROM2,
   docOutputDuration as docOutputDuration3,
@@ -119,238 +105,8 @@ function createReporter(json) {
   };
 }
 
-// src/plugin/setup.ts
-var VERBS = /* @__PURE__ */ new Set(["wait", "click", "type", "press", "goto"]);
-function validateSetup(value) {
-  const errors = [];
-  if (!Array.isArray(value)) return ["setup must be an array of steps"];
-  value.forEach((raw, i) => {
-    const at2 = `setup[${i}]`;
-    if (typeof raw !== "object" || raw === null) {
-      errors.push(`${at2}: must be an object`);
-      return;
-    }
-    const s = raw;
-    if (typeof s.do !== "string" || !VERBS.has(s.do)) {
-      errors.push(`${at2}: "do" must be one of ${[...VERBS].join(", ")}`);
-      return;
-    }
-    if ((s.do === "click" || s.do === "type") && typeof s.selector !== "string")
-      errors.push(`${at2}: ${s.do} needs a selector`);
-    if (s.do === "wait" && typeof s.ms !== "number")
-      errors.push(`${at2}: wait needs ms`);
-    if (s.do === "press" && typeof s.key !== "string")
-      errors.push(`${at2}: press needs a key`);
-    if (s.do === "goto" && typeof s.url !== "string")
-      errors.push(`${at2}: goto needs a url`);
-    if (s.do === "type") {
-      const t = s.text;
-      const isEnv = typeof t === "object" && t !== null && typeof t.env === "string" && Object.keys(t).length === 1;
-      if (typeof t !== "string" && !isEnv)
-        errors.push(
-          `${at2}: type needs text, a string or { "env": "NAME" } read at run time`
-        );
-      if (typeof t === "string" && /passw|secret|token/i.test(String(s.selector)) && t.length > 0)
-        errors.push(
-          `${at2}: a literal value typed into ${String(s.selector)} would live in actions.json, which is committed and pushed. Use { "env": "NAME" }`
-        );
-    }
-  });
-  return errors;
-}
-function resolveSetupText(t, env = process.env) {
-  if (typeof t === "string") return { value: t, secret: false };
-  const v = env[t.env];
-  if (v === void 0 || v === "")
-    throw new SetupEnvError(
-      `setup: the environment variable ${t.env} is not set, and a type step reads it. Export it in the shell that runs vos record; it is never written to a file`
-    );
-  return { value: v, secret: true };
-}
-async function runSetup(page, steps, opts) {
-  const lines = [];
-  for (const [i, step] of steps.entries()) {
-    const settle = "ms" in step && typeof step.ms === "number" ? step.ms : 150;
-    try {
-      switch (step.do) {
-        case "wait":
-          await opts.sleep(step.ms);
-          lines.push(`setup #${i} wait ${step.ms}ms`);
-          break;
-        case "goto":
-          await page.goto(step.url, { waitUntil: "networkidle", timeout: 45e3 }).catch(() => {
-          });
-          lines.push(`setup #${i} goto ${step.url}`);
-          break;
-        case "press":
-          await page.keyboard.press(step.key);
-          await opts.sleep(settle);
-          lines.push(`setup #${i} press ${step.key}`);
-          break;
-        case "click": {
-          const loc = page.locator(step.selector).first();
-          await loc.waitFor({ state: "visible", timeout: 8e3 });
-          await loc.click();
-          await opts.sleep(settle);
-          lines.push(`setup #${i} click ${step.selector}`);
-          break;
-        }
-        case "type": {
-          const loc = page.locator(step.selector).first();
-          await loc.waitFor({ state: "visible", timeout: 8e3 });
-          const { value, secret } = resolveSetupText(step.text, opts.env);
-          await loc.fill(value);
-          await opts.sleep(settle);
-          lines.push(
-            `setup #${i} type ${secret ? `\${${step.text.env}}` : `${value.length} chars`} into ${step.selector}`
-          );
-          break;
-        }
-      }
-    } catch (e) {
-      if (e instanceof SetupEnvError) throw e;
-      return {
-        ran: i,
-        lines,
-        failed: {
-          step: i,
-          do: step.do,
-          ..."selector" in step ? { selector: step.selector } : {}
-        }
-      };
-    }
-  }
-  return { ran: steps.length, lines };
-}
-var SetupEnvError = class extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "SetupEnvError";
-  }
-};
-var SetupError = class extends Error {
-  constructor(failed2) {
-    super(
-      `setup #${failed2.step} ${failed2.do}${failed2.selector ? ` ${failed2.selector}` : ""}: the selector never appeared, so the take would begin at a half-finished setup. Nothing was recorded. Fix the setup step (rehearse with --dry-run), then record.`
-    );
-    this.failed = failed2;
-    this.name = "SetupError";
-  }
-  failed;
-};
-function parseHeaders(given) {
-  const out = {};
-  for (const h of given ?? []) {
-    const i = h.indexOf("=");
-    if (i <= 0) throw new Error(`--header wants name=value, got "${h}"`);
-    out[h.slice(0, i).trim()] = h.slice(i + 1);
-  }
-  return out;
-}
-
 // src/plugin/actions.ts
-var VERBS2 = /* @__PURE__ */ new Set([
-  "wait",
-  "hover",
-  "click",
-  "type",
-  "scroll",
-  "move",
-  "drag"
-]);
-function validateActions(value) {
-  const errors = [];
-  if (typeof value !== "object" || value === null)
-    return ["actions file must be a JSON object"];
-  const obj = value;
-  if (obj.url !== void 0 && typeof obj.url !== "string")
-    errors.push("url must be a string");
-  if (obj.viewport !== void 0) {
-    const v = obj.viewport;
-    if (typeof v !== "object" || v === null) {
-      errors.push("viewport must be { width, height }");
-    } else {
-      const vp = v;
-      if (typeof vp.width !== "number" || typeof vp.height !== "number") {
-        errors.push("viewport must be { width, height }");
-      }
-    }
-  }
-  if (obj.setup !== void 0) errors.push(...validateSetup(obj.setup));
-  if (obj.mask !== void 0) {
-    if (!Array.isArray(obj.mask)) {
-      errors.push("mask must be an array of { selector, as?, text? }");
-    } else {
-      obj.mask.forEach((raw, i) => {
-        const at2 = `mask[${i}]`;
-        const m = raw ?? {};
-        if (typeof m.selector !== "string" || !m.selector.trim())
-          errors.push(`${at2}: needs a selector`);
-        if (m.as !== void 0 && m.as !== "blur" && m.as !== "text")
-          errors.push(`${at2}: as must be "blur" or "text"`);
-        if (m.as === "text" && (typeof m.text !== "string" || !m.text))
-          errors.push(`${at2}: as "text" needs the text to show instead`);
-        if (m.as !== "text" && m.text !== void 0)
-          errors.push(`${at2}: text is only read with as "text"`);
-      });
-    }
-  }
-  if (!Array.isArray(obj.steps) || obj.steps.length === 0) {
-    errors.push("steps must be a non-empty array");
-    return errors;
-  }
-  const seenIds = /* @__PURE__ */ new Set();
-  obj.steps.forEach((raw, i) => {
-    const at2 = `steps[${i}]`;
-    if (typeof raw !== "object" || raw === null) {
-      errors.push(`${at2}: must be an object`);
-      return;
-    }
-    const s = raw;
-    if (typeof s.do !== "string" || !VERBS2.has(s.do)) {
-      errors.push(`${at2}: "do" must be one of ${[...VERBS2].join(", ")}`);
-      return;
-    }
-    if (s.id !== void 0) {
-      if (typeof s.id !== "string" || !s.id.trim()) {
-        errors.push(`${at2}: id must be a non-empty string`);
-      } else if (seenIds.has(s.id)) {
-        errors.push(
-          `${at2}: duplicate id "${s.id}" \u2014 an anchor could not tell the two steps apart`
-        );
-      } else {
-        seenIds.add(s.id);
-      }
-    }
-    const needSelector = s.do === "hover" || s.do === "click" || s.do === "type";
-    if (needSelector && typeof s.selector !== "string")
-      errors.push(`${at2}: ${s.do} needs a selector`);
-    if (s.do === "wait" && typeof s.ms !== "number")
-      errors.push(`${at2}: wait needs ms`);
-    if (s.ms !== void 0 && (typeof s.ms !== "number" || !Number.isFinite(s.ms) || s.ms < 0))
-      errors.push(`${at2}: ms must be a number of milliseconds \u2265 0`);
-    if (s.do === "type" && typeof s.text !== "string")
-      errors.push(`${at2}: type needs text`);
-    if (s.do === "type" && s.focus !== void 0 && typeof s.focus !== "boolean")
-      errors.push(`${at2}: type focus must be true or false`);
-    if (s.do === "scroll" && typeof s.dy !== "number")
-      errors.push(`${at2}: scroll needs dy`);
-    if (s.do === "move" && (typeof s.x !== "number" || typeof s.y !== "number")) {
-      errors.push(`${at2}: move needs x and y (CSS px)`);
-    }
-    if (s.do === "drag") {
-      if (typeof s.tx !== "number" || typeof s.ty !== "number") {
-        errors.push(`${at2}: drag needs tx and ty (CSS px)`);
-      }
-      const hasStart = typeof s.selector === "string" || typeof s.x === "number" && typeof s.y === "number";
-      if (!hasStart)
-        errors.push(
-          `${at2}: drag needs a selector OR x and y as the start point`
-        );
-    }
-  });
-  return errors;
-}
+import { validateActions } from "@vosjs/render-core/record";
 
 // src/plugin/validateDoc.ts
 import {
@@ -2457,10 +2213,10 @@ function startTakeServer(rootDir, pages) {
     res.writeHead(404).end();
   });
   return new Promise(
-    (resolve10) => server.listen(0, () => {
+    (resolve11) => server.listen(0, () => {
       const addr = server.address();
       const port = typeof addr === "object" && addr ? addr.port : 0;
-      resolve10({ base: `http://localhost:${port}`, close: () => server.close() });
+      resolve11({ base: `http://localhost:${port}`, close: () => server.close() });
     })
   );
 }
@@ -6674,805 +6430,67 @@ async function validateKit(kitPath, opts = {}) {
 }
 
 // src/plugin/recorder.ts
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { writeFileSync as writeFileSync2 } from "fs";
 import { join as join13 } from "path";
-
-// src/plugin/recordingCap.ts
-var HOSTED_RECORDING_CAP_SECONDS = 30 * 60;
-function parseHostedCap(body) {
-  const limits = body && typeof body === "object" ? body.limits : void 0;
-  const cap = limits?.recordingMaxSeconds;
-  return typeof cap === "number" && Number.isInteger(cap) && cap > 0 ? cap : null;
-}
-async function hostedRecordingCap(origin, key, fetchImpl = fetch) {
-  const ctl = new AbortController();
-  const timer = setTimeout(() => ctl.abort(), 2e3);
-  try {
-    const res = await fetchImpl(`${origin.replace(/\/+$/, "")}/api/limits`, {
-      signal: ctl.signal,
-      ...key ? { headers: { authorization: `Bearer ${key}` } } : {}
-    });
-    if (!res.ok) return null;
-    return parseHostedCap(await res.json());
-  } catch {
-    return null;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-function defaultMaxDurationSeconds() {
-  return HOSTED_RECORDING_CAP_SECONDS;
-}
-function capReached(elapsedMs, capSeconds) {
-  return elapsedMs >= capSeconds * 1e3;
-}
-function clampWait(waitMs, elapsedMs, capSeconds) {
-  return Math.max(0, Math.min(waitMs, capSeconds * 1e3 - elapsedMs));
-}
-function formatDurationCap(seconds) {
-  if (seconds < 60) return `${seconds} s`;
-  const m = Math.round(seconds / 60);
-  if (m < 60) return `${m} min`;
-  const h = Math.floor(m / 60);
-  const rest = m % 60;
-  return rest ? `${h} h ${rest} min` : `${h} h`;
-}
-function cappedLine(capSeconds) {
-  return `stopped at ${formatDurationCap(capSeconds)} (--max-duration ${capSeconds}); the remaining steps did not run`;
-}
-
-// src/plugin/wall.ts
-var IDP_HOSTS = [
-  "accounts.google.com",
-  "login.microsoftonline.com",
-  "login.live.com",
-  "appleid.apple.com",
-  "auth0.com",
-  "okta.com",
-  "onelogin.com",
-  "clerk.accounts.dev",
-  "accounts.dev",
-  "b2clogin.com",
-  "amazoncognito.com",
-  "workos.com",
-  "stytch.com"
-];
-var SIGNIN_SEGMENTS = /* @__PURE__ */ new Set([
-  "login",
-  "log-in",
-  "signin",
-  "sign-in",
-  "sign_in",
-  "sso",
-  "auth",
-  "authenticate",
-  "authorize",
-  "oauth",
-  "oauth2",
-  "saml"
-]);
-function parse(url) {
-  try {
-    return new URL(url);
-  } catch {
-    return null;
-  }
-}
-var bareHost = (h) => h.replace(/^www\./, "").toLowerCase();
-var trimSlash = (p) => p.length > 1 ? p.replace(/\/+$/, "") : p;
-var place = (u) => `${u.origin}${trimSlash(u.pathname)}`;
-function isIdpHost(host) {
-  const h = host.toLowerCase();
-  if (h.startsWith("clerk.")) return true;
-  return IDP_HOSTS.some((idp) => h === idp || h.endsWith(`.${idp}`));
-}
-function isSignInPath(pathname) {
-  const segs = pathname.toLowerCase().split("/").filter(Boolean);
-  return segs.some((s) => SIGNIN_SEGMENTS.has(s));
-}
-function redirectedAway(asked, landed) {
-  if (bareHost(asked.hostname) !== bareHost(landed.hostname)) return true;
-  const a = trimSlash(asked.pathname).toLowerCase();
-  const l = trimSlash(landed.pathname).toLowerCase();
-  if (a === l || a === "/") return false;
-  if (l.startsWith(`${a}/`)) return false;
-  if (l.endsWith(a)) return false;
-  return true;
-}
-var LADDER = 'This is a missing or expired session, not a script bug. Ways past, cheapest first: mint a session from the test auth the project already has; script the sign-in off camera and save the storage state; or have a person sign in once (npx playwright open --channel chrome --save-storage=<file> <url>). Then pass --storage-state <file>. The ladder: https://vos.so/llms-full.txt, "Sessions". A take OF this page is --allow-wall.';
-function wallVerdict(a) {
-  const asked = parse(a.askedUrl);
-  const landed = parse(a.landedUrl);
-  if (!asked || !landed) return null;
-  if (!/^https?:$/.test(asked.protocol)) return null;
-  const away = redirectedAway(asked, landed);
-  const where = { asked: place(asked), landed: place(landed) };
-  const host = bareHost(asked.hostname);
-  if (a.status === 401 || a.status === 403) {
-    return {
-      kind: "status",
-      level: "hard",
-      ...where,
-      message: `asked for ${asked.pathname}, answered ${a.status}: no session for ${host}. ${LADDER}`
-    };
-  }
-  const askedForSignIn = isSignInPath(asked.pathname) || isIdpHost(asked.hostname);
-  if (askedForSignIn && !away) return null;
-  if (away && isIdpHost(landed.hostname) && !isIdpHost(asked.hostname)) {
-    return {
-      kind: "idp",
-      level: "hard",
-      ...where,
-      message: `asked for ${asked.pathname}, landed on ${landed.hostname}: no session for ${host}. ${LADDER}`
-    };
-  }
-  const signInForm = a.passwordFields === 1 && !a.newPasswordField || a.oneTimeCodeField;
-  if (away && isSignInPath(landed.pathname) || signInForm && !askedForSignIn) {
-    const seen = away ? `landed on ${landed.pathname}` : "the page is a sign-in form";
-    return {
-      kind: "signin",
-      level: "hard",
-      ...where,
-      message: `asked for ${asked.pathname}, ${seen}: no session for ${host}. ${LADDER}`
-    };
-  }
-  if (away) {
-    return {
-      kind: "redirect",
-      level: "soft",
-      ...where,
-      message: `asked for ${asked.pathname}, landed on ${landed.pathname}: the site sent the recorder elsewhere, which is what a page behind a login does to a stranger. If that is the page you meant, record it by its own URL. ${LADDER}`
-    };
-  }
-  return null;
-}
-var WallError = class extends Error {
-  constructor(verdict) {
-    super(verdict.message);
-    this.verdict = verdict;
-    this.name = "WallError";
-  }
-  verdict;
-};
-var WALL_PROBE = `(() => {
-  const shown = (el) => {
-    const r = el.getBoundingClientRect()
-    if (r.width < 2 || r.height < 2) return false
-    const s = getComputedStyle(el)
-    return s.visibility !== 'hidden' && s.display !== 'none'
-  }
-  const pw = [...document.querySelectorAll('input[type="password"]')].filter(shown)
-  const otp = [...document.querySelectorAll('input[autocomplete="one-time-code"]')].filter(shown)
-  return {
-    passwordFields: pw.length,
-    newPasswordField: pw.some((el) => (el.getAttribute('autocomplete') || '').includes('new-password')),
-    oneTimeCodeField: otp.length > 0,
-  }
-})()`;
-
-// src/plugin/exposure.ts
-var EXPOSURE_MATCHERS_SRC = `(() => {
-  const EMAIL = /[A-Za-z0-9._%+-]+@((?:[A-Za-z0-9-]+\\.)+[A-Za-z]{2,})/g
-  const SAFE_HOST = /(^|\\.)example\\.(com|org|net)$|\\.(test|example|invalid|localhost)$/i
-  const KEY = new RegExp([
-    '\\\\b[srp]k_(?:live|test)_[A-Za-z0-9]{8,}',
-    '\\\\bgh[pousr]_[A-Za-z0-9]{20,}',
-    '\\\\bgithub_pat_[A-Za-z0-9_]{20,}',
-    '\\\\bxox[abprs]-[A-Za-z0-9-]{10,}',
-    '\\\\bAKIA[0-9A-Z]{16}\\\\b',
-    '\\\\bAIza[0-9A-Za-z_-]{30,}',
-    '\\\\bvos_(?:sk|rg|ho)_[A-Za-z0-9]{8,}',
-    '\\\\beyJ[A-Za-z0-9_-]{8,}\\\\.eyJ[A-Za-z0-9_-]{8,}\\\\.[A-Za-z0-9_-]{8,}',
-  ].join('|'))
-  const CARD = /(?:^|[^0-9])((?:[0-9][ -]?){12,18}[0-9])(?![0-9])/g
-  const TAIL = /[\\u2022\\u00b7*xX]{2,}[ -]?[0-9]{4}(?![0-9])/
-  const luhn = (digits) => {
-    let sum = 0, alt = false
-    for (let i = digits.length - 1; i >= 0; i--) {
-      let d = digits.charCodeAt(i) - 48
-      if (alt) { d *= 2; if (d > 9) d -= 9 }
-      sum += d; alt = !alt
-    }
-    return sum % 10 === 0
-  }
-  const kindsIn = (text) => {
-    const kinds = []
-    if (!text || text.length < 6) return kinds
-    EMAIL.lastIndex = 0
-    for (let m; (m = EMAIL.exec(text)); ) {
-      if (!SAFE_HOST.test(m[1])) { kinds.push('email'); break }
-    }
-    if (KEY.test(text)) kinds.push('key')
-    CARD.lastIndex = 0
-    for (let m; (m = CARD.exec(text)); ) {
-      const digits = m[1].replace(/[ -]/g, '')
-      if (digits.length >= 13 && digits.length <= 19 && !/^0+$/.test(digits) && luhn(digits)) { kinds.push('card'); break }
-    }
-    if (TAIL.test(text)) kinds.push('card-tail')
-    return kinds
-  }
-  return { kindsIn }
-})()`;
-var EXPOSURE_PROBE = `(() => {
-  const { kindsIn } = ${EXPOSURE_MATCHERS_SRC}
-  const vw = innerWidth, vh = innerHeight
-  // A selector that reaches THIS element and no other, so it can be pasted
-  // into "mask" as it is: climb until the path is unique, and say which
-  // sibling wherever a tag-and-class alone would match several.
-  const segment = (el) => {
-    const tid = el.getAttribute('data-testid')
-    if (tid) return el.tagName.toLowerCase() + '[data-testid="' + tid + '"]'
-    if (el.id && /^[A-Za-z_][\\w-]*$/.test(el.id)) return el.tagName.toLowerCase() + '#' + el.id
-    const cls = [...el.classList].filter((c) => /^[A-Za-z_-][\\w-]*$/.test(c)).slice(0, 2)
-    let seg = el.tagName.toLowerCase() + (cls.length ? '.' + cls.join('.') : '')
-    const p = el.parentElement
-    if (p && [...p.children].filter((c) => c.matches(seg)).length > 1)
-      seg += ':nth-child(' + ([...p.children].indexOf(el) + 1) + ')'
-    return seg
-  }
-  const name = (el) => {
-    const parts = []
-    for (let cur = el; cur && cur !== document.body && cur !== document.documentElement; cur = cur.parentElement) {
-      parts.unshift(segment(cur))
-      let n = 2
-      try { n = document.querySelectorAll(parts.join(' > ')).length } catch {}
-      // a bare tag is unique HERE and nowhere else: give it its parent too
-      const bare = parts.length === 1 && !/[#.\\[]/.test(parts[0])
-      if ((n === 1 && !bare) || parts.length >= 5) break
-    }
-    return parts.join(' > ')
-  }
-  const seen = (el) => {
-    if (el.closest('[data-vos-masked]')) return null
-    const r = el.getBoundingClientRect()
-    if (r.width < 2 || r.height < 2) return null
-    if (r.bottom <= 0 || r.right <= 0 || r.top >= vh || r.left >= vw) return null
-    const s = getComputedStyle(el)
-    if (s.visibility === 'hidden' || s.display === 'none' || +s.opacity === 0) return null
-    return r
-  }
-  const out = [], keys = new Set()
-  const add = (el, text) => {
-    const kinds = kindsIn(text)
-    if (!kinds.length) return
-    const r = seen(el)
-    if (!r) return
-    const selector = name(el)
-    for (const kind of kinds) {
-      const k = kind + '|' + selector
-      if (keys.has(k) || out.length >= 40) continue
-      keys.add(k)
-      out.push({ kind, selector, rect: { x: Math.round(r.left), y: Math.round(r.top), w: Math.round(r.width), h: Math.round(r.height) } })
-    }
-  }
-  const walker = document.createTreeWalker(document.body || document.documentElement, NodeFilter.SHOW_TEXT)
-  for (let n; (n = walker.nextNode()); ) {
-    const el = n.parentElement
-    if (!el || /^(SCRIPT|STYLE|NOSCRIPT|TEMPLATE)$/.test(el.tagName)) continue
-    add(el, n.nodeValue)
-  }
-  for (const el of document.querySelectorAll('input, textarea')) {
-    if (/^(password|hidden|file|checkbox|radio)$/.test(el.type)) continue
-    add(el, el.value)
-  }
-  const hits = {}
-  for (const [sel, n] of Object.entries(window.__vosMaskHits || {})) hits[sel] = n
-  return { exposures: out, maskHits: hits }
-})()`;
-function maskInitScript(masks) {
-  const rules = masks.map((m) => ({
-    selector: m.selector,
-    as: m.as === "text" ? "text" : "blur",
-    text: m.text ?? ""
-  }));
-  return `(() => {
-  const RULES = ${JSON.stringify(rules)}
-  const hits = (window.__vosMaskHits = window.__vosMaskHits || {})
-  for (const r of RULES) hits[r.selector] = hits[r.selector] || 0
-  const css = RULES.map((r) => r.selector + '[data-vos-masked="blur"]{filter:blur(7px) !important;user-select:none !important}').join('\\n')
-  const paint = () => {
-    const root = document.head || document.documentElement
-    if (!root || document.getElementById('__vos-mask-style')) return
-    const style = document.createElement('style')
-    style.id = '__vos-mask-style'
-    style.textContent = css
-    root.appendChild(style)
-  }
-  const apply = () => {
-    paint()
-    for (const r of RULES) {
-      let found
-      try { found = document.querySelectorAll(r.selector) } catch { continue }
-      if (found.length > hits[r.selector]) hits[r.selector] = found.length
-      for (const el of found) {
-        const form = /^(INPUT|TEXTAREA|SELECT)$/.test(el.tagName)
-        const mode = r.as === 'text' && !form ? 'text' : 'blur'
-        if (el.getAttribute('data-vos-masked') !== mode) el.setAttribute('data-vos-masked', mode)
-        if (mode !== 'text') continue
-        const texts = []
-        const w = document.createTreeWalker(el, NodeFilter.SHOW_TEXT)
-        for (let n; (n = w.nextNode()); ) texts.push(n)
-        if (!texts.length) { if (el.textContent !== r.text) el.textContent = r.text; continue }
-        texts.forEach((n, i) => { const want = i === 0 ? r.text : ''; if (n.nodeValue !== want) n.nodeValue = want })
-      }
-    }
-  }
-  new MutationObserver(apply).observe(document, { childList: true, subtree: true, characterData: true })
-  document.addEventListener('DOMContentLoaded', apply)
-  apply()
-})()`;
-}
-var ExposureLog = class {
-  byKey = /* @__PURE__ */ new Map();
-  maskHits = /* @__PURE__ */ new Map();
-  constructor(masks = []) {
-    for (const m of masks) this.maskHits.set(m.selector, 0);
-  }
-  add(step, scan) {
-    if (!scan) return;
-    for (const e of scan.exposures ?? []) {
-      const key = `${e.kind}|${e.selector}`;
-      const had = this.byKey.get(key);
-      if (had) had.seen += 1;
-      else this.byKey.set(key, { step, ...e, seen: 1 });
-    }
-    for (const [sel, n] of Object.entries(scan.maskHits ?? {})) {
-      if (n > (this.maskHits.get(sel) ?? 0)) this.maskHits.set(sel, n);
-    }
-  }
-  exposures() {
-    return [...this.byKey.values()];
-  }
-  masks(rules) {
-    return rules.map((m) => ({
-      selector: m.selector,
-      as: m.as === "text" ? "text" : "blur",
-      hits: this.maskHits.get(m.selector) ?? 0
-    }));
-  }
-};
-var KIND_WORDS = {
-  email: "an email address",
-  key: "something shaped like an API key or token",
-  card: "a card number",
-  "card-tail": "a card's last digits"
-};
-function exposureLine(e) {
-  const when = e.step < 0 ? "as the page opened" : `at step #${e.step}`;
-  return `${KIND_WORDS[e.kind]} in ${e.selector} (${when}, ${e.rect.x},${e.rect.y} ${e.rect.w}\xD7${e.rect.h})`;
-}
-var EXPOSURE_ADVICE = 'The recording shows these. Record from a demo account, or hide them before the camera rolls with "mask" in actions.json: { "selector": "\u2026", "as": "text", "text": "demo@acme.test" } swaps the words, "as": "blur" blurs. Then re-record.';
-
-// src/plugin/recorder.ts
-var realSleep = (ms) => new Promise((r) => setTimeout(r, ms));
-var DRY_PAUSE_MS = 120;
-function jpegDims(buf) {
-  let i = 2;
-  while (i < buf.length - 9) {
-    if (buf[i] !== 255) return null;
-    const marker = buf[i + 1];
-    const len = buf.readUInt16BE(i + 2);
-    if (marker >= 192 && marker <= 207 && marker !== 196 && marker !== 200 && marker !== 204) {
-      return { h: buf.readUInt16BE(i + 5), w: buf.readUInt16BE(i + 7) };
-    }
-    i += 2 + len;
-  }
-  return null;
-}
+import { recordTake as recordTakeCore } from "@vosjs/render-core/record";
 async function recordTake(browser, url, actions, paths, log, opts = {}) {
   const dry = opts.dryRun === true;
-  const sleep = dry ? (ms) => realSleep(Math.min(ms, DRY_PAUSE_MS)) : realSleep;
-  const maxSeconds = dry ? Infinity : opts.maxDurationSeconds ?? Infinity;
-  const vw = actions.viewport?.width ?? 1280;
-  const vh = actions.viewport?.height ?? 720;
-  const context = opts.context ?? await browser.newContext({
-    viewport: { width: vw, height: vh },
-    deviceScaleFactor: 1,
-    ...opts.storageState ? { storageState: opts.storageState } : {},
-    ...opts.headers && Object.keys(opts.headers).length ? { extraHTTPHeaders: opts.headers } : {}
-  });
-  if (opts.context && opts.headers && Object.keys(opts.headers).length)
-    await context.setExtraHTTPHeaders(opts.headers);
-  const masks = actions.mask ?? [];
-  if (masks.length) await context.addInitScript(maskInitScript(masks));
-  const exposureLog = new ExposureLog(masks);
-  const page = await context.newPage();
-  const scanExposures = async (step) => {
-    const scan = await page.evaluate(EXPOSURE_PROBE).catch(() => null);
-    exposureLog.add(step, scan);
-  };
-  page.on("console", (m) => {
-    if (m.type() === "error") log(`   [page error] ${m.text()}`);
-  });
-  log(`goto ${url}`);
-  let navTimeout = false;
-  let response = await page.goto(url, { waitUntil: "networkidle", timeout: 45e3 }).catch(() => {
-    navTimeout = true;
-    log("   (networkidle timeout \u2014 continuing)");
-    return null;
-  });
-  await sleep(800);
-  const setup = actions.setup ?? [];
-  if (setup.length) {
-    log(`setup: ${setup.length} step(s), off camera`);
-    const result = await runSetup(page, setup, { sleep: realSleep });
-    for (const line of result.lines) log(`   ${line}`);
-    if (result.failed) {
-      await context.close().catch(() => {
-      });
-      throw new SetupError(result.failed);
-    }
-    log(`goto ${url} (after setup)`);
-    response = await page.goto(url, { waitUntil: "networkidle", timeout: 45e3 }).catch(() => null);
-    await sleep(800);
-  }
-  let wall = null;
-  if (opts.onArrival) {
-    const seen = await page.evaluate(WALL_PROBE).catch(() => null);
-    try {
-      wall = await opts.onArrival({
-        askedUrl: url,
-        landedUrl: page.url(),
-        ...response ? { status: response.status() } : {},
-        passwordFields: seen?.passwordFields ?? 0,
-        newPasswordField: seen?.newPasswordField ?? false,
-        oneTimeCodeField: seen?.oneTimeCodeField ?? false
-      }) ?? null;
-    } catch (e) {
-      await context.close().catch(() => {
-      });
-      throw e;
-    }
-  }
-  await scanExposures(-1);
-  const cdp = await context.newCDPSession(page);
-  const frames = [];
-  let frameIdx = 0;
-  let t0 = 0;
-  if (!dry)
-    cdp.on("Page.screencastFrame", (ev) => {
-      const tsMs = ev.metadata.timestamp ? ev.metadata.timestamp * 1e3 : Date.now();
-      const file = `frame-${String(frameIdx++).padStart(5, "0")}.jpg`;
-      writeFileSync2(join13(paths.framesDir, file), Buffer.from(ev.data, "base64"));
-      frames.push({ file, tMs: Math.max(0, Math.round(tsMs - t0)) });
-      cdp.send("Page.screencastFrameAck", { sessionId: ev.sessionId }).catch(() => {
-      });
-    });
-  t0 = Date.now();
-  if (!dry)
-    await cdp.send("Page.startScreencast", {
-      format: "jpeg",
-      quality: 90,
-      maxWidth: vw,
-      maxHeight: vh,
-      everyNthFrame: 1
-    });
-  const events = [];
-  const cur = { x: 48, y: 48 };
-  const now = () => Date.now() - t0;
-  const emit = (e) => events.push({ t: now(), ...e });
-  await page.mouse.move(cur.x, cur.y);
-  emit({ x: cur.x, y: cur.y, type: "move" });
-  const clock = { now: () => Date.now(), sleep };
-  const moveTo = async (tx, ty) => {
-    const dist = Math.hypot(tx - cur.x, ty - cur.y);
-    const from = { ...cur };
-    await clockMotion(
-      dry ? 0 : pointerTravelMs(dist),
-      async (u) => {
-        cur.x = from.x + (tx - from.x) * u;
-        cur.y = from.y + (ty - from.y) * u;
-        await page.mouse.move(cur.x, cur.y);
-        emit({ x: Math.round(cur.x), y: Math.round(cur.y), type: "move" });
-      },
-      clock
-    );
-  };
-  const boxOf = async (selector) => {
-    const loc = page.locator(selector).first();
-    try {
-      await loc.waitFor({ state: "visible", timeout: 8e3 });
-      const before = await page.evaluate(() => [window.scrollX, window.scrollY]).catch(() => [0, 0]);
-      await loc.scrollIntoViewIfNeeded();
-      const after = await page.evaluate(() => [window.scrollX, window.scrollY]).catch(() => before);
-      if (before[0] !== after[0] || before[1] !== after[1])
-        await sleep(SCROLL_SETTLE_MS);
-      const bb = await loc.boundingBox();
-      if (!bb) return null;
-      return { x: bb.x, y: bb.y, w: bb.width, h: bb.height };
-    } catch {
-      log(`   (selector not found, skipping: ${selector})`);
-      return null;
-    }
-  };
-  const clickAt = async (rect) => {
-    await moveTo(rect.x + rect.w / 2, rect.y + rect.h / 2);
-    await sleep(PRESS_LEAD_MS);
-    emit({
-      x: Math.round(cur.x),
-      y: Math.round(cur.y),
-      type: "down",
-      button: 0,
-      rect
-    });
-    await page.mouse.down();
-    await sleep(PRESS_HOLD_MS);
-    await page.mouse.up();
-    emit({
-      x: Math.round(cur.x),
-      y: Math.round(cur.y),
-      type: "up",
-      button: 0,
-      rect
-    });
-  };
-  const waitSettled = async () => {
-    if (dry) return null;
-    const pressAt = now();
-    const before = frames.length;
-    for (; ; ) {
-      const t = now();
-      const last = frames.length > before ? frames[frames.length - 1] : null;
-      const sinceChange = last ? t - last.tMs : null;
-      if (settleVerdict({ sincePress: t - pressAt, sinceChange }) === "settled")
-        return sinceChange;
-      await sleep(40);
-    }
-  };
-  const skipped = [];
-  const stepSpans = [];
-  const paces = [];
-  let capped = false;
-  for (const [stepIdx, step] of actions.steps.entries()) {
-    if (capReached(now(), maxSeconds)) {
-      capped = true;
-      break;
-    }
-    const stepStart = now();
-    let gestureMs = 0;
-    const gesture = async (fn) => {
-      const t = now();
-      const out = await fn();
-      gestureMs += now() - t;
-      return out;
-    };
-    const skippedBefore = skipped.length;
-    const urlBefore = page.url();
-    let stepRect = null;
-    switch (step.do) {
-      case "wait":
-        await sleep(clampWait(step.ms, now(), maxSeconds));
-        break;
-      case "move":
-        await moveTo(step.x, step.y);
-        break;
-      case "hover": {
-        const rect = await boxOf(step.selector);
-        stepRect = rect;
-        if (rect) {
-          await gesture(() => moveTo(rect.x + rect.w / 2, rect.y + rect.h / 2));
-          log(`hover ${step.selector}`);
-          await sleep(step.ms ?? 700);
-        } else
-          skipped.push({ step: stepIdx, do: step.do, selector: step.selector });
-        break;
-      }
-      case "click": {
-        const rect = await boxOf(step.selector);
-        stepRect = rect;
-        if (rect) {
-          await gesture(() => clickAt(rect));
-          log(`click ${step.selector}`);
-          const sinceChange = await gesture(() => waitSettled());
-          await sleep(holdLeftMs(settleMs(step), sinceChange));
-        } else
-          skipped.push({ step: stepIdx, do: step.do, selector: step.selector });
-        break;
-      }
-      case "type": {
-        const rect = await boxOf(step.selector);
-        stepRect = rect;
-        if (rect) {
-          if (step.focus !== false) await gesture(() => clickAt(rect));
-          const delay = step.delayMs ?? 40;
-          const ping = () => emit({
-            x: Math.round(rect.x + rect.w / 2),
-            y: Math.round(rect.y + rect.h / 2),
-            type: "key",
-            rect
-          });
-          let lastPing = -Infinity;
-          await clockTyping(
-            [...step.text],
-            delay,
-            async (ch) => {
-              if (now() - lastPing >= 350) {
-                lastPing = now();
-                ping();
-              }
-              await page.keyboard.type(ch);
-            },
-            clock
-          );
-          ping();
-          log(`type "${step.text}" into ${step.selector}`);
-          await gesture(() => sleep(settleMs(step)));
-        } else
-          skipped.push({ step: stepIdx, do: step.do, selector: step.selector });
-        break;
-      }
-      case "scroll": {
-        const total = Math.abs(step.dy);
-        const dir = Math.sign(step.dy);
-        for (let done = 0; done < total; done += 120) {
-          await page.mouse.wheel(0, dir * Math.min(120, total - done));
-          emit({ x: Math.round(cur.x), y: Math.round(cur.y), type: "scroll" });
-          await sleep(40);
-        }
-        await gesture(() => sleep(settleMs(step)));
-        break;
-      }
-      case "drag": {
-        let start = null;
-        let rect;
-        if (step.selector) {
-          const box = await boxOf(step.selector);
-          stepRect = box;
-          if (box) {
-            rect = box;
-            start = { x: box.x + box.w / 2, y: box.y + box.h / 2 };
-          } else {
-            skipped.push({
-              step: stepIdx,
-              do: step.do,
-              selector: step.selector
-            });
-            break;
-          }
-        } else if (typeof step.x === "number" && typeof step.y === "number") {
-          start = { x: step.x, y: step.y };
-        }
-        if (!start) break;
-        await gesture(() => moveTo(start.x, start.y));
-        await gesture(() => sleep(PRESS_LEAD_MS));
-        emit({
-          x: Math.round(cur.x),
-          y: Math.round(cur.y),
-          type: "down",
-          button: 0,
-          rect
-        });
-        await page.mouse.down();
-        await gesture(() => sleep(PRESS_HOLD_MS));
-        const dur = step.ms ?? 700;
-        const from = { ...cur };
-        await clockMotion(
-          dur,
-          async (u) => {
-            cur.x = from.x + (step.tx - from.x) * u;
-            cur.y = from.y + (step.ty - from.y) * u;
-            await page.mouse.move(cur.x, cur.y);
-            emit({ x: Math.round(cur.x), y: Math.round(cur.y), type: "move" });
-          },
-          clock
-        );
-        await gesture(() => sleep(settleMs({ do: "drag" })));
-        await page.mouse.up();
-        emit({
-          x: Math.round(cur.x),
-          y: Math.round(cur.y),
-          type: "up",
-          button: 0,
-          rect
-        });
-        log(
-          `drag ${step.selector ?? `${start.x},${start.y}`} \u2192 ${step.tx},${step.ty}`
-        );
-        await sleep(400);
-        break;
+  const result = await recordTakeCore(
+    browser,
+    url,
+    actions,
+    {
+      frame: (file, bytes) => {
+        writeFileSync2(join13(paths.framesDir, file), bytes);
       }
+    },
+    log,
+    {
+      ...opts,
+      env: process.env,
+      platform: process.platform === "darwin" ? "mac" : process.platform === "win32" ? "windows" : "linux"
     }
-    const stepInfo = step;
-    stepSpans.push({
-      step: stepIdx,
-      ...stepInfo.id ? { id: stepInfo.id } : {},
-      do: step.do,
-      ...stepInfo.selector ? { selector: stepInfo.selector } : {},
-      tStart: +(stepStart / 1e3).toFixed(3),
-      tEnd: +(now() / 1e3).toFixed(3),
-      ...skipped.length > skippedBefore ? { skipped: true } : {},
-      ...page.url() !== urlBefore ? { navigated: true } : {},
-      ...stepRect ? {
-        rect: {
-          x: +stepRect.x.toFixed(1),
-          y: +stepRect.y.toFixed(1),
-          w: +stepRect.w.toFixed(1),
-          h: +stepRect.h.toFixed(1)
-        }
-      } : {}
-    });
-    paces.push({
-      step: stepIdx,
-      do: step.do,
-      askedMs: askedMs(step),
-      gestureMs,
-      wallMs: now() - stepStart
-    });
-    await scanExposures(stepIdx);
-  }
-  if (!capped) await sleep(TRAILING_HOLD_MS);
-  if (capped || capReached(now(), maxSeconds)) {
-    capped = true;
-    log(`   ${cappedLine(maxSeconds)}`);
-  }
-  const durationMs = capped ? Math.min(now(), maxSeconds * 1e3) : now();
-  await cdp.send("Page.stopScreencast").catch(() => {
-  });
-  await sleep(200);
-  const pageTitle = await page.title().catch(() => "");
-  await context.close();
-  const firstFrame = frames[0] ? jpegDims(readFileSync3(join13(paths.framesDir, frames[0].file))) : null;
-  const meta = {
-    dpr: 1,
-    zoom: 1,
-    t0,
-    durationMs,
-    width: vw,
-    height: vh,
-    fps: 30,
-    hasAudio: false,
-    captureWidth: firstFrame?.w ?? vw,
-    captureHeight: firstFrame?.h ?? vh,
-    captureSurface: "tab",
-    pageUrl: url,
-    pageTitle,
-    platform: process.platform === "darwin" ? "mac" : process.platform === "win32" ? "windows" : "linux",
-    producer: "cli",
-    steps: stepSpans,
-    ...wall ? { wall: { kind: wall.kind, asked: wall.asked, landed: wall.landed } } : {},
-    ...exposureLog.exposures().length ? { exposures: exposureLog.exposures() } : {},
-    ...masks.length ? { masks: exposureLog.masks(masks) } : {}
-  };
-  const freezes = [];
-  for (let i = 1; i < frames.length; i++) {
-    const gap = frames[i].tMs - frames[i - 1].tMs;
-    if (gap >= 400) {
-      freezes.push({
-        from: +(frames[i - 1].tMs / 1e3).toFixed(2),
-        to: +(frames[i].tMs / 1e3).toFixed(2),
-        ms: gap
-      });
-    }
-  }
-  const frozenMs = freezes.reduce((sum, f) => sum + f.ms, 0);
-  const freezePct = durationMs > 0 ? Math.round(frozenMs / durationMs * 100) : 0;
-  const dead = deadTime(stepSpans, frames, events, durationMs);
-  if (deadWarns(dead)) log(`   WARNING: ${deadLine(dead)}`);
-  const pace = paceReport(paces);
+  );
   if (!dry) {
-    await writeJson(paths.cursor, events);
-    await writeJson(paths.meta, meta, true);
-    await writeJson(paths.framesIndex, frames);
-    await writeJson(paths.actions, { ...actions, url }, true);
-    log(`   ${paceLine(pace)}`);
+    await writeJson(paths.cursor, result.events);
+    await writeJson(paths.meta, result.meta, true);
+    await writeJson(paths.framesIndex, result.frames);
+    await writeJson(paths.actions, result.actions, true);
   }
-  return {
-    events,
-    frames,
-    meta,
-    pace,
-    skipped,
-    navTimeout,
-    wall,
-    exposures: exposureLog.exposures(),
-    masks: exposureLog.masks(masks),
-    freezes,
-    freezePct,
-    dead,
-    capped
-  };
+  return result;
 }
 
+// src/plugin/wall.ts
+import {
+  WALL_PROBE,
+  WallError,
+  isIdpHost,
+  isSignInPath,
+  redirectedAway,
+  wallVerdict
+} from "@vosjs/render-core/record";
+
+// src/plugin/exposure.ts
+import {
+  EXPOSURE_ADVICE,
+  EXPOSURE_MATCHERS_SRC,
+  EXPOSURE_PROBE,
+  ExposureLog,
+  exposureLine,
+  maskInitScript
+} from "@vosjs/render-core/record";
+
+// src/plugin/setup.ts
+import {
+  SetupEnvError,
+  SetupError,
+  parseHeaders,
+  resolveSetupText,
+  runSetup,
+  setupEnvNames,
+  validateSetup
+} from "@vosjs/render-core/record";
+
 // src/plugin/session.ts
 import { spawn } from "child_process";
 import { existsSync as existsSync12, mkdirSync as mkdirSync2, readdirSync as readdirSync2, rmSync, statSync as statSync3 } from "fs";
@@ -7536,10 +6554,10 @@ async function openSession(name, url, opts = { log: () => {
   opts.log(
     `a Chrome window opened on session "${name}": sign in to ${new URL(url).host}, ${leave}`
   );
-  return new Promise((resolve10, reject) => {
+  return new Promise((resolve11, reject) => {
     const child = spawn(exe, args, { stdio: "ignore" });
     child.on("error", reject);
-    child.on("exit", (code) => resolve10({ code }));
+    child.on("exit", (code) => resolve11({ code }));
   });
 }
 async function withSession(name, fn, opts = {}) {
@@ -7616,47 +6634,47 @@ function looksLikeStorageState(value) {
   return Array.isArray(v.cookies) && Array.isArray(v.origins);
 }
 
+// src/plugin/recordingCap.ts
+import {
+  capReached,
+  cappedLine,
+  clampWait,
+  formatDurationCap
+} from "@vosjs/render-core/record";
+var HOSTED_RECORDING_CAP_SECONDS = 30 * 60;
+function parseHostedCap(body) {
+  const limits = body && typeof body === "object" ? body.limits : void 0;
+  const cap = limits?.recordingMaxSeconds;
+  return typeof cap === "number" && Number.isInteger(cap) && cap > 0 ? cap : null;
+}
+async function hostedRecordingCap(origin, key, fetchImpl = fetch) {
+  const ctl = new AbortController();
+  const timer = setTimeout(() => ctl.abort(), 2e3);
+  try {
+    const res = await fetchImpl(`${origin.replace(/\/+$/, "")}/api/limits`, {
+      signal: ctl.signal,
+      ...key ? { headers: { authorization: `Bearer ${key}` } } : {}
+    });
+    if (!res.ok) return null;
+    return parseHostedCap(await res.json());
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function defaultMaxDurationSeconds() {
+  return HOSTED_RECORDING_CAP_SECONDS;
+}
+
 // src/plugin/encode.ts
-var MEDIABUNNY_URL2 = "https://esm.sh/mediabunny@1.55.7?target=es2022";
-var ENCODE_HTML = `<!doctype html><html><head><meta charset="utf-8"></head><body>
-<script type="module">
-try {
-  const MB = await import('${MEDIABUNNY_URL2}')
-  const frames = await (await fetch('/frames.json')).json()
-  const meta = await (await fetch('/meta.json')).json()
-  const W = meta.captureWidth ?? meta.width, H = meta.captureHeight ?? meta.height
-  const FPS = 30
-  const durSec = meta.durationMs / 1000
-  const cv = document.createElement('canvas')
-  cv.width = W; cv.height = H
-  const c2 = cv.getContext('2d')
-  const output = new MB.Output({ format: new MB.WebMOutputFormat(), target: new MB.BufferTarget() })
-  const src = new MB.CanvasSource(cv, { codec: 'vp9', bitrate: 8_000_000 })
-  output.addVideoTrack(src, { frameRate: FPS })
-  await output.start()
-  let fi = -1
-  const total = Math.ceil(durSec * FPS)
-  for (let i = 0; i < total; i++) {
-    const t = i / FPS
-    let next = fi
-    while (next + 1 < frames.length && frames[next + 1].tMs <= t * 1000) next++
-    if (next < 0) next = 0
-    if (next !== fi) {
-      fi = next
-      const blob = await (await fetch('/frames/' + frames[fi].file)).blob()
-      const bmp = await createImageBitmap(blob)
-      c2.drawImage(bmp, 0, 0, W, H)
-      bmp.close()
-    }
-    await src.add(t, 1 / FPS)
-    window.__progress = i / total
-  }
-  await output.finalize()
-  const buf = output.target.buffer
-  await fetch('/save?name=${RECORDING_NAME}', { method: 'POST', body: buf })
-  window.__done = { ok: true, bytes: buf.byteLength }
-} catch (e) { window.__error = String(e && e.stack || e) }
-</script></body></html>`;
+import { buildEncodePage } from "@vosjs/render-core/record";
+var ENCODE_HTML = buildEncodePage({
+  framesIndexUrl: "/frames.json",
+  metaUrl: "/meta.json",
+  framesBaseUrl: "/frames/",
+  save: { method: "POST", url: `/save?name=${RECORDING_NAME}` }
+});
 async function encodeRecording(browser, takeDir, onProgress) {
   const server = await startTakeServer(takeDir, { "/encode.html": ENCODE_HTML });
   const page = await browser.newPage();
@@ -8112,7 +7130,7 @@ async function planTake(dir, opts = {}) {
 
 // src/plugin/sync.ts
 import { createHash } from "crypto";
-import { existsSync as existsSync14, readFileSync as readFileSync4, readdirSync as readdirSync3 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync3, readdirSync as readdirSync3 } from "fs";
 import { readFile as readFile13 } from "fs/promises";
 import { createInterface } from "readline/promises";
 import { basename as basename3, join as join17 } from "path";
@@ -8616,7 +7634,7 @@ function storageStateInDir(dir) {
     if (!f.endsWith(".json") || f === "doc.json" || f === "meta.json" || f === "actions.json" || f === "cursor.json" || f === "vos.json" || f === "doc.prev.json")
       continue;
     try {
-      const v = JSON.parse(readFileSync4(join17(dir, f), "utf8"));
+      const v = JSON.parse(readFileSync3(join17(dir, f), "utf8"));
       if (looksLikeStorageState(v)) return join17(dir, f);
     } catch {
     }
@@ -9723,7 +8741,7 @@ async function writeProgramDoc(dir, hosted) {
 }
 
 // src/plugin/asset.ts
-import { readFileSync as readFileSync5 } from "fs";
+import { readFileSync as readFileSync4 } from "fs";
 import { basename as basename5, extname as extname2 } from "path";
 var BOOLEAN_FLAGS3 = /* @__PURE__ */ new Set(["json", "help"]);
 var MIME_BY_EXT = {
@@ -9777,7 +8795,7 @@ async function cmdPush(argv) {
   for (const file of positionals) {
     const name = basename5(file);
     const mime = MIME_BY_EXT[extname2(name).toLowerCase()] ?? "application/octet-stream";
-    const body = readFileSync5(file);
+    const body = readFileSync4(file);
     const form = new FormData();
     form.set("file", new Blob([body], { type: mime }), name);
     if (folder) form.set("folderId", folder.id);
@@ -9831,7 +8849,7 @@ async function cmdAsset(argv) {
 }
 
 // src/plugin/recipe.ts
-import { readFileSync as readFileSync6 } from "fs";
+import { readFileSync as readFileSync5 } from "fs";
 import { basename as basename6 } from "path";
 var BOOLEAN_FLAGS4 = /* @__PURE__ */ new Set(["json", "help"]);
 var USAGE = "vos recipe push <file.md> (--folder <folderId|slug> | --asset <assetId>)";
@@ -9851,7 +8869,7 @@ async function cmdPush2(argv) {
     throw new UsageError(USAGE);
   }
   const filename = recipeFilename(file);
-  const body = readFileSync6(file);
+  const body = readFileSync5(file);
   const r = createReporter(flags.json === true);
   const origin = platformOrigin({
     origin: strFlag(flags, "origin"),
@@ -10294,6 +9312,103 @@ async function cmdBrand(argv) {
   return 0;
 }
 
+// src/plugin/hostedRecord.ts
+import { setupEnvNames as setupEnvNames2 } from "@vosjs/render-core/record";
+var POLL_MS = 3e3;
+var DEFAULT_TIMEOUT_MS = 20 * 60 * 1e3;
+function hostedEnv(actions, shell) {
+  const env = {};
+  const missing = [];
+  for (const name of setupEnvNames2(actions.setup)) {
+    const v = shell[name];
+    if (v === void 0 || v === "") missing.push(name);
+    else env[name] = v;
+  }
+  return { env, missing };
+}
+function isWallError(error) {
+  return !!error && /^(\[\w+\] )?The page is behind a sign-in/.test(error);
+}
+async function recordHosted(input) {
+  const sleep = input.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+  const posted = await apiJson(input.origin, "/api/record/jobs", {
+    method: "POST",
+    key: input.key,
+    body: {
+      url: input.url,
+      actions: input.actions,
+      viewport: input.actions.viewport,
+      ...Object.keys(input.headers).length ? { headers: input.headers } : {},
+      ...Object.keys(input.env).length ? { env: input.env } : {},
+      ...input.title ? { title: input.title } : {},
+      ...input.folderId ? { folderId: input.folderId } : {}
+    }
+  });
+  if (posted.status !== 202) {
+    return {
+      ok: false,
+      wall: false,
+      error: apiError("record on vos.so", posted),
+      vosId: null,
+      jobId: null
+    };
+  }
+  const job = posted.body.job;
+  const vos = posted.body.vos;
+  const cap = posted.body.cap;
+  input.log(
+    `queued on vos.so as job ${job.id.slice(0, 8)} (vos ${job.vosId}${cap?.seconds ? `, cap ${cap.seconds}s` : ""})`
+  );
+  const deadline = Date.now() + (input.timeoutMs ?? DEFAULT_TIMEOUT_MS);
+  let lastStatus = "queued";
+  while (Date.now() < deadline) {
+    await sleep(POLL_MS);
+    const polled = await apiJson(input.origin, `/api/record/jobs/${job.id}`, {
+      key: input.key
+    });
+    if (polled.status !== 200) {
+      return {
+        ok: false,
+        wall: false,
+        error: apiError(`poll record job ${job.id}`, polled),
+        vosId: job.vosId,
+        jobId: job.id
+      };
+    }
+    const state = polled.body.job;
+    if (state.status !== lastStatus) {
+      input.log(`${state.status}\u2026`);
+      lastStatus = state.status;
+    }
+    if (state.status === "completed") {
+      return {
+        ok: true,
+        vosId: state.vosId,
+        jobId: state.id,
+        job: state,
+        studio: vos?.studio ?? `${input.origin}/studio?vos=${state.vosId}`
+      };
+    }
+    if (state.status === "failed" || state.status === "canceled") {
+      const error = state.error ?? (state.status === "canceled" ? "the record job was canceled" : "the record job failed");
+      return {
+        ok: false,
+        wall: isWallError(error),
+        error,
+        vosId: state.vosId,
+        jobId: state.id
+      };
+    }
+  }
+  return {
+    ok: false,
+    wall: false,
+    error: `the record job ${job.id} did not finish within ${Math.round((input.timeoutMs ?? DEFAULT_TIMEOUT_MS) / 6e4)} min; poll ${input.origin}/api/record/jobs/${job.id}`,
+    vosId: job.vosId,
+    jobId: job.id
+  };
+}
+
 // src/plugin/agentBrowser.ts
 import { writeFile as writeFile13 } from "fs/promises";
 import { resolve as resolve8 } from "path";
@@ -10775,8 +9890,8 @@ async function cmdActions(argv) {
     if (!m) throw new UsageError("--viewport expects WxH, e.g. 1280x720");
     viewport = { width: Number(m[1]), height: Number(m[2]) };
   }
-  const { readFile: readFile16 } = await import("fs/promises");
-  const text = await readFile16(resolve8(input), "utf8");
+  const { readFile: readFile17 } = await import("fs/promises");
+  const text = await readFile17(resolve8(input), "utf8");
   const { records, problems } = parseAgentBrowserLog(text);
   for (const p of problems) r.log(`  ${p}`);
   const result = convertAgentBrowser(records, {
@@ -10813,9 +9928,9 @@ function summary(result) {
 }
 async function cmdActionsScript(input, flags) {
   const r = createReporter(flags.json === true);
-  const { readFile: readFile16 } = await import("fs/promises");
-  const { shotList, formatShotList } = await import("./shotList-7F2FE3RU.js");
-  const raw = JSON.parse(await readFile16(resolve8(input), "utf8"));
+  const { readFile: readFile17 } = await import("fs/promises");
+  const { shotList, formatShotList } = await import("./shotList-IYFDHSIK.js");
+  const raw = JSON.parse(await readFile17(resolve8(input), "utf8"));
   const errors = validateActions(raw);
   if (errors.length) throw new UsageError(`${input}:
   ${errors.join("\n  ")}`);
@@ -10824,23 +9939,232 @@ async function cmdActionsScript(input, flags) {
   return EXIT_OK;
 }
 
+// src/plugin/ingest.ts
+import { existsSync as existsSync16 } from "fs";
+import { copyFile, mkdir as mkdir10, readFile as readFile15, stat as stat4 } from "fs/promises";
+import { basename as basename7, join as join19, resolve as resolve9 } from "path";
+import { inflateRawSync } from "zlib";
+import {
+  cursorFromPlaywrightTrace,
+  cursorFromTrace,
+  playwrightTraceEntry,
+  traceKindOf,
+  zipEntries,
+  zipEntryBytes
+} from "@vosjs/studio-core";
+import {
+  ALL_FORMATS,
+  Conversion,
+  FilePathSource,
+  FilePathTarget,
+  Input,
+  Mp4OutputFormat,
+  Output,
+  WebMOutputFormat
+} from "mediabunny";
+var BOOLEAN_FLAGS5 = /* @__PURE__ */ new Set(["json", "help"]);
+async function probeVideoFile(path) {
+  const input = new Input({
+    source: new FilePathSource(path),
+    formats: ALL_FORMATS
+  });
+  try {
+    const format = await input.getFormat();
+    const video = await input.getPrimaryVideoTrack();
+    if (!video) throw new UsageError(`${path} has no video track`);
+    const [duration, stats, audio] = await Promise.all([
+      input.computeDuration(),
+      video.computePacketStats(240),
+      input.getPrimaryAudioTrack()
+    ]);
+    const mimeType = format.mimeType;
+    const ext = mimeType.includes("mp4") ? "mp4" : mimeType.includes("quicktime") ? "mov" : "webm";
+    return {
+      width: video.displayWidth,
+      height: video.displayHeight,
+      durationMs: Math.round(duration * 1e3),
+      fps: Math.round(stats.averagePacketRate * 100) / 100,
+      hasAudio: !!audio,
+      mimeType,
+      ext
+    };
+  } finally {
+    await input.dispose?.();
+  }
+}
+async function copyRecording(src, dest, ext) {
+  if (ext === "mov") {
+    await copyFile(src, dest);
+    return false;
+  }
+  const input = new Input({
+    source: new FilePathSource(src),
+    formats: ALL_FORMATS
+  });
+  const target = new FilePathTarget(dest);
+  const output = new Output({
+    format: ext === "mp4" ? new Mp4OutputFormat({ fastStart: "in-memory" }) : new WebMOutputFormat(),
+    target
+  });
+  try {
+    const conversion = await Conversion.init({ input, output });
+    if (!conversion.isValid || conversion.discardedTracks.length > 0) {
+      await conversion.cancel?.();
+      await copyFile(src, dest);
+      return false;
+    }
+    await conversion.execute();
+    return true;
+  } catch {
+    await copyFile(src, dest);
+    return false;
+  } finally {
+    await input.dispose?.();
+  }
+}
+async function readTraceFile(path, offsetMs) {
+  const kind = traceKindOf(basename7(path));
+  if (!kind) {
+    throw new UsageError(
+      `${path}: not a trace the recorder reads (trace.zip, .trace, .jsonl, .json or .csv)`
+    );
+  }
+  if (kind === "zip") {
+    const bytes = new Uint8Array(await readFile15(path));
+    const entry = playwrightTraceEntry(zipEntries(bytes));
+    if (!entry) {
+      throw new UsageError(
+        `${path}: no trace.trace inside; a Playwright trace.zip is what --cursor reads as a zip`
+      );
+    }
+    const raw = zipEntryBytes(bytes, entry);
+    const text2 = new TextDecoder().decode(
+      entry.method === 8 ? new Uint8Array(inflateRawSync(raw)) : raw
+    );
+    return cursorFromPlaywrightTrace(text2, { offsetMs });
+  }
+  const text = await readFile15(path, "utf8");
+  return cursorFromTrace(basename7(path), text, { offsetMs });
+}
+function parseViewport(v) {
+  if (!v) return null;
+  const m = /^(\d+)x(\d+)$/i.exec(v.trim());
+  if (!m) throw new UsageError("--viewport expects WxH, like 1280x720");
+  return { width: Number(m[1]), height: Number(m[2]) };
+}
+async function cmdIngest(argv) {
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS5, MULTI_FLAGS2);
+  const source = positionals[0];
+  if (!source)
+    throw new UsageError(
+      "vos ingest <video.webm|mp4> [--cursor <trace.zip|steps.jsonl|cursor.csv>] [--out take] [--offset <ms>] [--viewport WxH] [--background <slug|url|none>] [--json]"
+    );
+  const videoPath = resolve9(source);
+  if (!existsSync16(videoPath)) throw new UsageError(`${source}: no such file`);
+  const r = createReporter(flags.json === true);
+  const outDir = resolve9(strFlag(flags, "out") ?? "take");
+  const offsetMs = numFlag(flags, "offset", 0);
+  const viewportFlag = parseViewport(strFlag(flags, "viewport"));
+  const cursorPath = strFlag(flags, "cursor");
+  const backdrop = await takeBackdrop(flags, r);
+  r.log(`probing ${basename7(videoPath)}\u2026`);
+  const probed = await probeVideoFile(videoPath);
+  if (!(probed.durationMs > 0)) {
+    throw new UsageError(
+      `${source}: the file reports no duration; a stream-shaped recording needs its container fixed first (ffmpeg -i in.webm -c copy out.webm)`
+    );
+  }
+  let trace = null;
+  if (cursorPath) {
+    trace = await readTraceFile(resolve9(cursorPath), offsetMs);
+    for (const n of trace.notes) r.log(`note: ${n}`);
+  }
+  if (existsSync16(join19(outDir, "meta.json"))) {
+    const { prevDoc, kept } = await prepareReRecord(outDir);
+    r.log(
+      `note: re-ingesting into ${outDir}; kept ${kept.length ? kept.join(", ") : "nothing"}` + (prevDoc ? `; apply the previous cut with: vos plan ${outDir} --reuse` : "")
+    );
+  }
+  await mkdir10(outDir, { recursive: true });
+  const paths = await ensureTakeDir(outDir);
+  const recording = join19(outDir, `recording.${probed.ext}`);
+  r.log("copying the recording\u2026");
+  const remuxed = await copyRecording(videoPath, recording, probed.ext);
+  const viewport = viewportFlag ?? trace?.viewport ?? {
+    width: probed.width,
+    height: probed.height
+  };
+  const events = trace?.events ?? [];
+  const fileStat = await stat4(videoPath);
+  const meta = {
+    dpr: 1,
+    zoom: 1,
+    t0: trace?.t0 ?? Math.round(fileStat.mtimeMs),
+    durationMs: probed.durationMs,
+    width: viewport.width,
+    height: viewport.height,
+    captureWidth: probed.width,
+    captureHeight: probed.height,
+    fps: probed.fps > 0 ? probed.fps : 30,
+    hasAudio: probed.hasAudio,
+    producer: "ingest",
+    ...events.length ? { captureSurface: "tab" } : {}
+  };
+  await writeJson(paths.meta, meta, true);
+  if (events.length) await writeJson(paths.cursor, events);
+  const plan = await planTake(outDir, { backdrop });
+  const clicks = events.filter((e) => e.type === "down").length;
+  const seconds = (probed.durationMs / 1e3).toFixed(1);
+  const facts = `${seconds}s, ${probed.width}\xD7${probed.height} @ ${meta.fps} fps${probed.hasAudio ? ", audio" : ", no audio"}${remuxed ? "" : ", copied as is"}`;
+  const cursorLine = trace ? `${events.length} cursor events (${clicks} clicks) from ${basename7(cursorPath)}${trace.dropped ? `, ${trace.dropped} not placed` : ""}; ${plan.zoomAuto} zoom${plan.zoomAuto === 1 ? "" : "s"} planned` : "no cursor track, so nothing was planned";
+  const next = trace ? `Next: vos digest ${outDir} \u2014 look before you cut; edit doc.json; vos push ${outDir}` : `Add --cursor <trace> recorded beside the video (a Playwright trace.zip, stamped JSON records, or a t,x,y,type CSV) to plan zooms from its clicks; else place them by eye: vos frames ${outDir} --times 0,25%,50%,75%,100%, then edit doc.json`;
+  r.done(
+    {
+      out: outDir,
+      recording: basename7(recording),
+      durationMs: probed.durationMs,
+      width: probed.width,
+      height: probed.height,
+      viewport,
+      fps: meta.fps,
+      hasAudio: probed.hasAudio,
+      remuxed,
+      cursor: trace ? {
+        file: basename7(cursorPath),
+        kind: trace.kind,
+        events: events.length,
+        clicks,
+        placed: trace.placed,
+        dropped: trace.dropped,
+        notes: trace.notes
+      } : null,
+      zooms: plan.zoomAuto,
+      backdrop: plan.backdrop ?? null
+    },
+    `Ingested ${basename7(videoPath)} \u2192 ${outDir}/${basename7(recording)} (${facts})
+  ${cursorLine}
+  ${next}`
+  );
+  return EXIT_OK;
+}
+
 // src/plugin/machineCmd.ts
 import { spawnSync } from "child_process";
 import {
   cpSync,
-  existsSync as existsSync17,
+  existsSync as existsSync18,
   mkdirSync as mkdirSync3,
-  readFileSync as readFileSync8,
+  readFileSync as readFileSync7,
   rmSync as rmSync2,
   writeFileSync as writeFileSync3
 } from "fs";
 import { homedir as homedir3 } from "os";
-import { join as join20 } from "path";
+import { join as join21 } from "path";
 import { chromium as chromium2 } from "playwright";
 
 // src/plugin/machine.ts
-import { existsSync as existsSync16, readFileSync as readFileSync7, readdirSync as readdirSync4, statSync as statSync4 } from "fs";
-import { dirname as dirname5, join as join19 } from "path";
+import { existsSync as existsSync17, readFileSync as readFileSync6, readdirSync as readdirSync4, statSync as statSync4 } from "fs";
+import { dirname as dirname5, join as join20 } from "path";
 var AGENT_NAMES = [
   "claude",
   "cursor",
@@ -10860,17 +10184,17 @@ var HOME_DIRS = {
   copilot: [".copilot"]
 };
 function detectAgents(root, opts = {}) {
-  const exists = opts.exists ?? existsSync16;
+  const exists = opts.exists ?? existsSync17;
   const out = [];
   for (const agent of AGENT_NAMES) {
     for (const rel of PROJECT_DIRS[agent]) {
-      const dir = join19(root, rel);
+      const dir = join20(root, rel);
       if (exists(dir)) out.push({ agent, dir, scope: "project" });
     }
-    if (agent === "copilot" && !out.some((h) => h.agent === "copilot") && exists(join19(root, ".github", "copilot-instructions.md"))) {
+    if (agent === "copilot" && !out.some((h) => h.agent === "copilot") && exists(join20(root, ".github", "copilot-instructions.md"))) {
       out.push({
         agent,
-        dir: join19(root, ".github", "copilot"),
+        dir: join20(root, ".github", "copilot"),
         scope: "project"
       });
     }
@@ -10878,7 +10202,7 @@ function detectAgents(root, opts = {}) {
   if (opts.global && opts.home) {
     for (const agent of AGENT_NAMES) {
       for (const rel of HOME_DIRS[agent]) {
-        const dir = join19(opts.home, rel);
+        const dir = join20(opts.home, rel);
         if (exists(dir)) out.push({ agent, dir, scope: "global" });
       }
     }
@@ -10896,18 +10220,18 @@ function agentsFromFlag(value, root) {
   return {
     homes: wanted.map((agent) => ({
       agent,
-      dir: join19(root, PROJECT_DIRS[agent][0]),
+      dir: join20(root, PROJECT_DIRS[agent][0]),
       scope: "project"
     }))
   };
 }
 function skillsDirFor(home) {
-  return join19(home.dir, "skills");
+  return join20(home.dir, "skills");
 }
 function fallbackSkillsHome(root) {
-  return { agent: "codex", dir: join19(root, ".agents"), scope: "project" };
+  return { agent: "codex", dir: join20(root, ".agents"), scope: "project" };
 }
-function installedSkills(dir, exists = existsSync16, list = (p) => {
+function installedSkills(dir, exists = existsSync17, list = (p) => {
   try {
     return readdirSync4(p);
   } catch {
@@ -10915,7 +10239,7 @@ function installedSkills(dir, exists = existsSync16, list = (p) => {
   }
 }) {
   if (!exists(dir)) return [];
-  return list(dir).filter((name) => exists(join19(dir, name, "SKILL.md"))).sort();
+  return list(dir).filter((name) => exists(join20(dir, name, "SKILL.md"))).sort();
 }
 var RULES_BEGIN = "<!-- vos:begin (written by vos setup; the block is replaced on the next run) -->";
 var RULES_END = "<!-- vos:end -->";
@@ -10947,10 +10271,10 @@ ${RULES_BLOCK}
   }
   return { text, changed: text !== current };
 }
-function rulesFileFor(root, exists = existsSync16) {
-  const agents = join19(root, "AGENTS.md");
+function rulesFileFor(root, exists = existsSync17) {
+  const agents = join20(root, "AGENTS.md");
   if (exists(agents)) return agents;
-  const claude = join19(root, "CLAUDE.md");
+  const claude = join20(root, "CLAUDE.md");
   if (exists(claude)) return claude;
   return agents;
 }
@@ -10959,14 +10283,14 @@ function chromeCandidates(platform, env) {
     return ["/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"];
   if (platform === "win32")
     return [
-      join19(
+      join20(
         env["PROGRAMFILES"] ?? "C:\\Program Files",
         "Google",
         "Chrome",
         "Application",
         "chrome.exe"
       ),
-      join19(
+      join20(
         env["LOCALAPPDATA"] ?? "",
         "Google",
         "Chrome",
@@ -11053,13 +10377,13 @@ function doctorReport(facts) {
 function bundledSkillsDir(from) {
   let dir = dirname5(from);
   for (let i = 0; i < 6; i++) {
-    const pkg = join19(dir, "package.json");
-    if (existsSync16(pkg)) {
+    const pkg = join20(dir, "package.json");
+    if (existsSync17(pkg)) {
       try {
-        const name = JSON.parse(readFileSync7(pkg, "utf8")).name;
+        const name = JSON.parse(readFileSync6(pkg, "utf8")).name;
         if (name === "@vosjs/cli") {
-          const skills = join19(dir, "skills");
-          return existsSync16(skills) && statSync4(skills).isDirectory() ? skills : null;
+          const skills = join20(dir, "skills");
+          return existsSync17(skills) && statSync4(skills).isDirectory() ? skills : null;
         }
       } catch {
       }
@@ -11072,7 +10396,7 @@ function bundledSkillsDir(from) {
 }
 
 // src/plugin/machineCmd.ts
-var BOOLEAN_FLAGS5 = /* @__PURE__ */ new Set([
+var BOOLEAN_FLAGS6 = /* @__PURE__ */ new Set([
   "json",
   "help",
   "global",
@@ -11090,7 +10414,7 @@ function npx() {
 function bundledChromium() {
   try {
     const p = chromium2.executablePath();
-    return p && existsSync17(p) ? p : null;
+    return p && existsSync18(p) ? p : null;
   } catch {
     return null;
   }
@@ -11099,7 +10423,7 @@ function probe() {
   return probeBrowser({
     platform: process.platform,
     env: process.env,
-    exists: existsSync17,
+    exists: existsSync18,
     bundled: bundledChromium
   });
 }
@@ -11150,7 +10474,7 @@ async function doctorFacts(opts) {
   };
 }
 async function cmdSetup(argv) {
-  const { flags } = parseArgs(argv, BOOLEAN_FLAGS5);
+  const { flags } = parseArgs(argv, BOOLEAN_FLAGS6);
   const r = reporterFor(flags);
   const root = process.cwd();
   const global = flags.global === true;
@@ -11203,7 +10527,7 @@ async function cmdSetup(argv) {
         const dest = skillsDirFor(home);
         mkdirSync3(dest, { recursive: true });
         for (const name of installedSkills(bundled)) {
-          cpSync(join20(bundled, name), join20(dest, name), { recursive: true });
+          cpSync(join21(bundled, name), join21(dest, name), { recursive: true });
         }
       }
       skillsVia = "bundled";
@@ -11238,7 +10562,7 @@ async function cmdSetup(argv) {
   let rules = null;
   if (!noRules) {
     const file = rulesFileFor(root);
-    const existing = existsSync17(file) ? readFileSync8(file, "utf8") : null;
+    const existing = existsSync18(file) ? readFileSync7(file, "utf8") : null;
     const { text, changed } = applyRulesBlock(existing);
     if (changed) writeFileSync3(file, text);
     rules = { file, changed };
@@ -11269,7 +10593,7 @@ Next: ${report.next_step}`
   return report.ok ? EXIT_OK : EXIT_NO_BROWSER;
 }
 async function cmdDoctor(argv) {
-  const { flags } = parseArgs(argv, BOOLEAN_FLAGS5);
+  const { flags } = parseArgs(argv, BOOLEAN_FLAGS6);
   const r = reporterFor(flags);
   const root = process.cwd();
   const homes = detectAgents(root, { home: homedir3(), global: true });
@@ -11288,7 +10612,7 @@ Next: ${report.next_step}`
   return report.ok ? EXIT_OK : EXIT_NO_BROWSER;
 }
 async function cmdWhoami(argv) {
-  const { flags } = parseArgs(argv, BOOLEAN_FLAGS5);
+  const { flags } = parseArgs(argv, BOOLEAN_FLAGS6);
   const r = reporterFor(flags);
   const origin = platformOrigin({
     origin: strFlag(flags, "origin"),
@@ -11350,9 +10674,9 @@ async function cmdWhoami(argv) {
   return EXIT_OK;
 }
 function cmdLogout(argv) {
-  const { flags } = parseArgs(argv, BOOLEAN_FLAGS5);
+  const { flags } = parseArgs(argv, BOOLEAN_FLAGS6);
   const r = reporterFor(flags);
-  const had = existsSync17(CREDENTIALS_PATH);
+  const had = existsSync18(CREDENTIALS_PATH);
   rmSync2(CREDENTIALS_PATH, { force: true });
   const envKey = Boolean(process.env.VOS_API_KEY?.trim());
   r.done(
@@ -11368,7 +10692,7 @@ function cmdLogout(argv) {
 }
 
 // src/plugin/run.ts
-var BOOLEAN_FLAGS6 = /* @__PURE__ */ new Set([
+var BOOLEAN_FLAGS7 = /* @__PURE__ */ new Set([
   "json",
   "help",
   "picture",
@@ -11389,7 +10713,8 @@ var BOOLEAN_FLAGS6 = /* @__PURE__ */ new Set([
   "leader",
   "keep-frames",
   "dry-run",
-  "allow-wall"
+  "allow-wall",
+  "hosted"
 ]);
 var MULTI_FLAGS2 = /* @__PURE__ */ new Set(["set", "override", "browser-arg", "header"]);
 var HELP = `vos \u2014 record a browser flow, plan effects, render a product video; sync with vos.so
@@ -11397,6 +10722,8 @@ var HELP = `vos \u2014 record a browser flow, plan effects, render a product vid
 Take pipeline
   vos create --actions actions.json [--url <url>] [--out take] [out.webm] [--strict] [--allow-wall] [--keep-frames] [--max-duration <s>] [--storage-state <file>|--session <name>] [--header name=value]... [--browser-arg=<switch>]... [--background <slug|url|none>] [render flags] [--json]
   vos record --actions actions.json [--url <url>] [--out take] [--strict] [--dry-run] [--allow-wall] [--keep-frames] [--max-duration <s>] [--storage-state <file>|--session <name>] [--header name=value]... [--browser-arg=<switch>]... [--background <slug|url|none>] [--json]
+  vos record --hosted --actions actions.json [--url <url>] [--out take] [--title "\u2026"] [--folder <id>] [--header name=value]... [--json]
+            the take recorded on vos.so's fleet (no browser here): lands as a private vos with its doc and digest, then fetched into --out with its media
   vos plan <take> [--fresh] [--reuse [--from <doc.json>]] [--style <doc.json|vosId>] [--with <doc.json|vosId>[@end|@start|@step:<id>|@<s>]]... [--background <slug|url|none>] [--motion] [--headline "\u2026"] [--kicker "\u2026"] [--launch LAUNCH.md] [--brand BRAND.md] [--music <slug|mood|none>] [--entrance tilt-in|pull-out|rise|fade|slide|none] [--transitions slide|fade|scale|none] [--end-card on|none|<doc.json|vosId>] [--captions none] [--clicks none] [--still <t>] [--release v2.1] [--json]
   vos render <take> [out.webm] [--width] [--height] [--fps] [--format webm|mp4] [--parallel N] [--range a..b] [--draft] [--frame <kind>] [--background <url|slug>] [--set <path=value>]... [--json]
   vos frames <take> [--times 0,25%,50%,75%,100%] [--frame <t>] [--at-zooms] [--at-moments] [--at-still] [--size WxH] [--out dir] [--background <url|slug>] [--set <path=value>]... [--json]
@@ -11408,6 +10735,8 @@ Take pipeline
   vos validate <actions.json|take|kit.json> [--picture] [--json]
   vos judge <kit.json> --against <MANIFEST.json> [--out dir] [--json]
   vos actions from-agent-browser <steps.jsonl> [--out actions.json] [--url <url>] [--viewport WxH] [--json]
+  vos ingest <video.webm|mp4> [--cursor <trace.zip|steps.jsonl|cursor.csv>] [--out take] [--offset <ms>] [--viewport WxH] [--background <slug|url|none>] [--json]
+            a take from a recording someone else made (a cloud agent's PR video, a Playwright run's video, a Loom export): the file becomes recording.<container>, meta.json from its own dimensions and duration, and a trace beside it becomes cursor.json so the planner has clicks to zoom on; without one, nothing is planned and the done event says so
   vos session open <url> --name <app>   a plain Chrome window on a vos-owned profile; sign in, close it
   vos session check <name> [--url <url>]   headless: does the session still open the page? exit 0/4
   vos session list | rm <name>          what exists and how old; delete one
@@ -11665,7 +10994,7 @@ lint-gated, so a bad override fails like a bad doc.json):
                        first ready loop (the house backdrop the studio opens on), or a flat ground offline
 `;
 async function loadActions(file) {
-  const raw = JSON.parse(await readFile15(file, "utf8"));
+  const raw = JSON.parse(await readFile16(file, "utf8"));
   const errors = validateActions(raw);
   if (errors.length)
     throw new UsageError(`invalid actions file:
@@ -11727,8 +11056,8 @@ function takeBrowserArgs(multi) {
 function takeStorageState(flags) {
   const raw = strFlag(flags, "storage-state");
   if (!raw) return void 0;
-  const path = resolve9(raw);
-  if (!existsSync18(path))
+  const path = resolve10(raw);
+  if (!existsSync19(path))
     throw new UsageError(`--storage-state: no such file: ${path}`);
   return path;
 }
@@ -11741,7 +11070,7 @@ function takeSessionName(flags, storageState) {
     throw new UsageError(
       "--session and --storage-state are two doors to one take: a persistent profile cannot take a storage state. Pass one"
     );
-  if (!existsSync18(sessionDir(name)))
+  if (!existsSync19(sessionDir(name)))
     throw new UsageError(
       `no session "${name}". Make one: vos session open <url> --name ${name} (a Chrome window opens; sign in and close it)`
     );
@@ -11797,7 +11126,7 @@ function wallGate(flags, r, opts) {
 async function cmdRecord(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS6,
+    BOOLEAN_FLAGS7,
     MULTI_FLAGS2
   );
   const actionsPath = strFlag(flags, "actions") ?? positionals[0];
@@ -11810,13 +11139,103 @@ async function cmdRecord(argv) {
   const url = strFlag(flags, "url") ?? actions.url;
   if (!url)
     throw new UsageError('no URL \u2014 set "url" in the actions file or pass --url');
-  const outDir = resolve9(strFlag(flags, "out") ?? "take");
-  const backdrop = await takeBackdrop(flags, r);
-  const maxDurationSeconds = await maxDuration(flags, r);
+  const outDir = resolve10(strFlag(flags, "out") ?? "take");
   const storageState = takeStorageState(flags);
   const sessionName = takeSessionName(flags, storageState);
   const browserArgs = takeBrowserArgs(multi);
   const headers = takeHeaders(multi);
+  if (flags.hosted === true) {
+    if (flags["dry-run"] === true)
+      throw new UsageError(
+        "--dry-run rehearses on this machine; drop --hosted to rehearse, or --dry-run to record on vos.so"
+      );
+    if (storageState || sessionName)
+      throw new UsageError(
+        'a session never reaches vos.so: --hosted takes no --session or --storage-state. Put the sign-in in the setup steps with { "env": "NAME" }, or record here with vos record.'
+      );
+    const origin = platformOrigin({
+      origin: strFlag(flags, "origin"),
+      api: strFlag(flags, "api")
+    });
+    const key = resolveCredential(strFlag(flags, "key"));
+    if (!key)
+      throw new UsageError(
+        "recording on vos.so needs a credential: vos login, or VOS_API_KEY (mint a key at https://vos.so/app/api)"
+      );
+    const { env, missing } = hostedEnv(actions, process.env);
+    if (missing.length)
+      throw new UsageError(
+        `the setup reads ${missing.map((n) => `{ "env": "${n}" }`).join(", ")} and this shell has no ${missing.length === 1 ? "value for it" : "values for them"}; export ${missing.join(", ")} and run again (the value rides the job, and is never stored)`
+      );
+    r.log("recording on vos.so\u2026");
+    r.event({ event: "phase", phase: "record" });
+    const started = Date.now();
+    const outcome = await recordHosted({
+      origin,
+      key,
+      url,
+      actions: { ...actions, url },
+      headers,
+      title: strFlag(flags, "title"),
+      folderId: strFlag(flags, "folder"),
+      env,
+      log: r.log
+    });
+    if (!outcome.ok) {
+      if (outcome.vosId) {
+        const gone = await apiJson(origin, `/api/vos/${outcome.vosId}`, {
+          method: "DELETE",
+          key
+        });
+        if (gone.status === 200)
+          r.log("the empty vos it would have landed on was removed");
+      }
+      r.done(
+        {
+          hosted: true,
+          ok: false,
+          wall: outcome.wall,
+          error: outcome.error,
+          vosId: outcome.vosId,
+          jobId: outcome.jobId
+        },
+        `${outcome.wall ? "REFUSED" : "FAILED"} on vos.so: ${outcome.error}`
+      );
+      return outcome.wall ? EXIT_WALL : EXIT_ERROR;
+    }
+    r.event({ event: "phase", phase: "fetch" });
+    r.log(`landed as ${outcome.studio}; fetching the take into ${outDir}\u2026`);
+    const fetched = await cmdFetch([
+      outcome.vosId,
+      "--out",
+      outDir,
+      "--media",
+      ...strFlag(flags, "origin") ? ["--origin", strFlag(flags, "origin")] : [],
+      ...strFlag(flags, "key") ? ["--key", strFlag(flags, "key")] : [],
+      ...flags.json === true ? ["--json"] : []
+    ]);
+    if (fetched !== EXIT_OK) return fetched;
+    const t = outcome.job.telemetry ?? {};
+    r.done(
+      {
+        hosted: true,
+        ok: true,
+        vosId: outcome.vosId,
+        jobId: outcome.jobId,
+        out: outDir,
+        seconds: +((Date.now() - started) / 1e3).toFixed(1),
+        telemetry: t
+      },
+      `Recorded on vos.so in ${((Date.now() - started) / 1e3).toFixed(1)}s: ${outcome.studio}
+  ${outDir}/ holds doc.json, the recording and vos.json${typeof t.durationMs === "number" ? ` (${(t.durationMs / 1e3).toFixed(1)}s of footage)` : ""}${Array.isArray(t.dead) && t.dead.length ? `
+  DEAD TIME: ${t.dead.length} stretch(es) under a parked cursor; give those steps their ms` : ""}${Array.isArray(t.exposures) && t.exposures.length ? `
+  EXPOSURES: ${t.exposures.length} sensitive-looking text(s) in frame; mask them in actions.json` : ""}
+  Next: vos digest ${outDir} \u2014 look before you cut; edit doc.json; vos push ${outDir}`
+    );
+    return EXIT_OK;
+  }
+  const backdrop = await takeBackdrop(flags, r);
+  const maxDurationSeconds = await maxDuration(flags, r);
   if (flags["dry-run"] === true) {
     void flags.strict;
     void flags["keep-frames"];
@@ -11874,13 +11293,13 @@ ${lines.join("\n")}
   }
   const paths = takePaths(outDir);
   const prepare = async () => {
-    if (existsSync18(join21(outDir, "meta.json"))) {
+    if (existsSync19(join22(outDir, "meta.json"))) {
       const { prevDoc, kept } = await prepareReRecord(outDir);
       r.log(
         `note: re-recording ${outDir} \u2014 kept ${kept.length ? kept.join(", ") : "nothing"}` + (prevDoc ? "; apply the previous cut to the new footage with: vos plan " + outDir + " --reuse" : "")
       );
     }
-    await mkdir10(outDir, { recursive: true });
+    await mkdir11(outDir, { recursive: true });
     await ensureTakeDir(outDir);
   };
   const browser = await launchBrowser(browserArgs);
@@ -11939,7 +11358,7 @@ ${lines.join("\n")}
       },
       strictFail ? `STRICT: take recorded but incomplete \u2014 ${strictReason(rec)}; fix the flow and re-record.${skippedNote}${exposureNote(rec)}` : `Take ready: ${outDir}
   ${(rec.meta.durationMs / 1e3).toFixed(1)}s \xB7 ${rec.frames.length} frames \xB7 ${rec.events.length} cursor events \xB7 ${clicks} clicks \xB7 ${plan.doc.zoom.length} zoom spans planned \xB7 ${rec.freezePct}% frozen \xB7 ${rec.dead.pct}% dead${deadWarns(rec.dead) ? " \u26A0 " + deadLine(rec.dead) : ""}${skippedNote}
-  Next: edit ${join21(outDir, "doc.json")} (optional), then: vos render ${outDir}${exposureNote(rec)}`
+  Next: edit ${join22(outDir, "doc.json")} (optional), then: vos render ${outDir}${exposureNote(rec)}`
     );
     return strictFail ? EXIT_USAGE : EXIT_OK;
   } finally {
@@ -11949,7 +11368,7 @@ ${lines.join("\n")}
 async function cmdCreate2(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS6,
+    BOOLEAN_FLAGS7,
     MULTI_FLAGS2
   );
   const actionsPath = strFlag(flags, "actions");
@@ -11963,12 +11382,12 @@ async function cmdCreate2(argv) {
   const url = strFlag(flags, "url") ?? actions.url;
   if (!url)
     throw new UsageError('no URL \u2014 set "url" in the actions file or pass --url');
-  const outDir = resolve9(strFlag(flags, "out") ?? "take");
+  const outDir = resolve10(strFlag(flags, "out") ?? "take");
   const fmtRaw = strFlag(flags, "format") ?? "webm";
   if (fmtRaw !== "webm" && fmtRaw !== "mp4")
     throw new UsageError("--format must be webm or mp4");
   const format = fmtRaw;
-  const out = positionals[0] ?? join21(outDir, `out.${format}`);
+  const out = positionals[0] ?? join22(outDir, `out.${format}`);
   const parallel = numFlag(flags, "parallel", 1);
   if (!Number.isInteger(parallel) || parallel < 1 || parallel > 16) {
     throw new UsageError("--parallel expects an integer between 1 and 16");
@@ -11981,13 +11400,13 @@ async function cmdCreate2(argv) {
   const headers = takeHeaders(multi);
   const paths = takePaths(outDir);
   const prepare = async () => {
-    if (existsSync18(join21(outDir, "meta.json"))) {
+    if (existsSync19(join22(outDir, "meta.json"))) {
       const { prevDoc, kept } = await prepareReRecord(outDir);
       r.log(
         `note: re-recording ${outDir} \u2014 kept ${kept.length ? kept.join(", ") : "nothing"}` + (prevDoc ? "; apply the previous cut to the new footage with: vos plan " + outDir + " --reuse" : "")
       );
     }
-    await mkdir10(outDir, { recursive: true });
+    await mkdir11(outDir, { recursive: true });
     await ensureTakeDir(outDir);
   };
   const browser = await launchBrowser(browserArgs);
@@ -12078,7 +11497,7 @@ async function cmdCreate2(argv) {
 async function cmdPlan(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS6,
+    BOOLEAN_FLAGS7,
     /* @__PURE__ */ new Set(["with"])
   );
   const dir = positionals[0];
@@ -12088,24 +11507,24 @@ async function cmdPlan(argv) {
     );
   const r = createReporter(flags.json === true);
   if (flags.fresh === true) {
-    await rm5(join21(dir, "doc.json"), { force: true });
+    await rm5(join22(dir, "doc.json"), { force: true });
     r.log("note: --fresh discarded the existing doc.json");
   }
   let reuse;
   if (flags.reuse === true) {
-    const from = resolve9(strFlag(flags, "from") ?? join21(dir, PREV_DOC_NAME));
-    if (!existsSync18(from)) {
+    const from = resolve10(strFlag(flags, "from") ?? join22(dir, PREV_DOC_NAME));
+    if (!existsSync19(from)) {
       throw new UsageError(
         `--reuse: ${from} does not exist \u2014 a re-record into this take writes doc.prev.json, or pass --from <doc.json>`
       );
     }
     reuse = {
       from,
-      doc: JSON.parse(await readFile15(from, "utf8"))
+      doc: JSON.parse(await readFile16(from, "utf8"))
     };
   }
   const style = await resolveStyleRef(flags);
-  const hasDoc = existsSync18(join21(dir, "doc.json"));
+  const hasDoc = existsSync19(join22(dir, "doc.json"));
   const backdrop = hasDoc ? null : await takeBackdrop(flags, r);
   const release = await releaseInputs(dir, flags, r, multi.with ?? []);
   const motionWanted = !hasDoc || flags.motion === true || flags.fresh === true;
@@ -12151,7 +11570,7 @@ async function cmdPlan(argv) {
     ${s.reuse.flagged.join("\n    ")}` : "") : "";
   r.done(
     {
-      take: resolve9(dir),
+      take: resolve10(dir),
       fresh: s.fresh,
       cursorKept: s.cursorKept,
       zoomAuto: s.zoomAuto,
@@ -12163,7 +11582,7 @@ async function cmdPlan(argv) {
       ...s.motion ? { motion: s.motion } : {},
       ...s.reuse ? { reuse: s.reuse } : {}
     },
-    `${s.reuse ? "Reused" : s.fresh ? "Planned" : "Refreshed"} ${join21(dir, "doc.json")}: ${s.zoomAuto} auto + ${s.zoomManual} manual zoom spans${s.cursorKept ? "" : " (cursor track dropped)"}${layoutLines}${motionLines}${reuseLines}`
+    `${s.reuse ? "Reused" : s.fresh ? "Planned" : "Refreshed"} ${join22(dir, "doc.json")}: ${s.zoomAuto} auto + ${s.zoomManual} manual zoom spans${s.cursorKept ? "" : " (cursor track dropped)"}${layoutLines}${motionLines}${reuseLines}`
   );
   return EXIT_OK;
 }
@@ -12276,7 +11695,7 @@ async function releaseInputs(dir, flags, r, withRefs = []) {
 async function cmdRender(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS6,
+    BOOLEAN_FLAGS7,
     MULTI_FLAGS2
   );
   const dir = positionals[0];
@@ -12289,7 +11708,7 @@ async function cmdRender(argv) {
   if (fmtRaw !== "webm" && fmtRaw !== "mp4")
     throw new UsageError("--format must be webm or mp4");
   const format = fmtRaw;
-  const out = positionals[1] ?? join21(dir, `out.${format}`);
+  const out = positionals[1] ?? join22(dir, `out.${format}`);
   const parallel = numFlag(flags, "parallel", 1);
   if (!Number.isInteger(parallel) || parallel < 1 || parallel > 16) {
     throw new UsageError("--parallel expects an integer between 1 and 16");
@@ -12347,7 +11766,7 @@ async function cmdRender(argv) {
 async function cmdFrames(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS6,
+    BOOLEAN_FLAGS7,
     MULTI_FLAGS2
   );
   const dir = positionals[0];
@@ -12420,7 +11839,7 @@ async function cmdFrames(argv) {
 async function cmdDeliver(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS6,
+    BOOLEAN_FLAGS7,
     MULTI_FLAGS2
   );
   const dir = positionals[0];
@@ -12536,15 +11955,15 @@ async function resolveStyleRef(flags) {
 }
 async function resolveDocRef(ref, flags, what) {
   const styleRef = ref;
-  const file = existsSync18(styleRef) ? resolve9(
+  const file = existsSync19(styleRef) ? resolve10(
     styleRef,
-    existsSync18(join21(styleRef, "doc.json")) ? "doc.json" : ""
+    existsSync19(join22(styleRef, "doc.json")) ? "doc.json" : ""
   ) : null;
-  if (file && existsSync18(file)) {
+  if (file && existsSync19(file)) {
     return {
       from: file,
       doc: migrateHostedDoc5(
-        JSON.parse(await readFile15(file, "utf8"))
+        JSON.parse(await readFile16(file, "utf8"))
       )
     };
   }
@@ -12586,7 +12005,7 @@ async function officialTemplate(origin, ref) {
   }
 }
 async function cmdDigest(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS6);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS7);
   const dir = positionals[0];
   if (!dir)
     throw new UsageError(
@@ -12596,7 +12015,7 @@ async function cmdDigest(argv) {
   const take = await loadTake(dir);
   if (!take.doc) throw new UsageError(`${dir} has no doc.json \u2014 run plan first`);
   const transcriptPath = strFlag(flags, "transcript");
-  const transcript = transcriptPath ? parseTranscript(JSON.parse(await readFile15(transcriptPath, "utf8"))) : null;
+  const transcript = transcriptPath ? parseTranscript(JSON.parse(await readFile16(transcriptPath, "utf8"))) : null;
   const style = await resolveStyleRef(flags);
   const noFrames = flags["no-frames"] === true;
   let browser = null;
@@ -12627,7 +12046,7 @@ async function cmdDigest(argv) {
         kinds,
         frames: d.images.full,
         crops: d.images.crop,
-        sheet: d.images.sheet ? join21(result.outDir, d.images.sheet) : null,
+        sheet: d.images.sheet ? join22(result.outDir, d.images.sheet) : null,
         scenes: kinds.scene ?? 0,
         sourceDuration: d.take.sourceDuration,
         outputDuration: d.take.outputDuration,
@@ -12650,19 +12069,19 @@ async function cmdDigest(argv) {
   }
 }
 async function cmdOpen(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS6);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS7);
   const dir = positionals[0];
   if (!dir) throw new UsageError("vos open <take> [--studio <url>]");
   const r = createReporter(flags.json === true);
   const take = await loadTake(dir);
-  if (!existsSync18(take.paths.recording)) {
+  if (!existsSync19(take.paths.recording)) {
     throw new UsageError(`${dir} has no recording \u2014 re-run record`);
   }
   const studio = (strFlag(flags, "studio") ?? platformOrigin()).replace(
     /\/+$/,
     ""
   );
-  const server = await startTakeServer(resolve9(dir), {});
+  const server = await startTakeServer(resolve10(dir), {});
   const url = `${studio}/studio?take=${encodeURIComponent(server.base)}`;
   r.event({ event: "open", server: server.base, url });
   r.log(`take served at ${server.base}`);
@@ -12688,7 +12107,7 @@ async function cmdOpen(argv) {
   return EXIT_OK;
 }
 async function cmdJudge(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS6);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS7);
   const target = positionals[0];
   const against = strFlag(flags, "against");
   if (!target || !against)
@@ -12696,12 +12115,12 @@ async function cmdJudge(argv) {
       "vos judge <kit.json> --against <MANIFEST.json> [--out dir] [--json]\n(the manifest names the reference set: id, file, role, layout, facts, rule per asset)"
     );
   const r = createReporter(flags.json === true);
-  const kitFile = target.endsWith("kit.json") ? target : join21(target, "kit.json");
-  if (!existsSync18(kitFile)) throw new UsageError(`${kitFile}: no kit manifest`);
-  if (!existsSync18(against))
+  const kitFile = target.endsWith("kit.json") ? target : join22(target, "kit.json");
+  if (!existsSync19(kitFile)) throw new UsageError(`${kitFile}: no kit manifest`);
+  if (!existsSync19(against))
     throw new UsageError(`${against}: no reference manifest`);
   const result = await judgeKit(kitFile, against, strFlag(flags, "out"));
-  const verdicts = JSON.parse(await readFile15(result.verdictFile, "utf8")).verdicts;
+  const verdicts = JSON.parse(await readFile16(result.verdictFile, "utf8")).verdicts;
   const rate = winRate(verdicts);
   const lines = result.sheets.map(
     (s) => `${s.asset} vs ${s.reference}: ${s.sheetA}, ${s.sheetB}, ${s.rubric}`
@@ -12717,7 +12136,7 @@ Win rate so far: ${rate.wins} win(s), ${rate.ties} tie(s) of ${rate.judged} judg
   return EXIT_OK;
 }
 async function cmdCallout(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS6);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS7);
   const dir = positionals[0];
   const shape = positionals[1];
   if (!dir || !shape || !isCalloutShape(shape))
@@ -12741,7 +12160,7 @@ async function cmdCallout(argv) {
       `no register: put a BRAND.md beside the take (vos brand <url> --out BRAND.md; its bgA and accent are the ground and the accent), or pass --ground #hex --accent #hex`
     );
   const codeFile = strFlag(flags, "code-file");
-  const code = codeFile ? await readFile15(codeFile, "utf8") : strFlag(flags, "code");
+  const code = codeFile ? await readFile16(codeFile, "utf8") : strFlag(flags, "code");
   const words = {
     kicker: strFlag(flags, "kicker"),
     title: strFlag(flags, "title"),
@@ -12816,11 +12235,11 @@ async function cmdCallout(argv) {
   return EXIT_OK;
 }
 async function cmdValidate(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS6);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS7);
   const target = positionals[0];
   if (!target) throw new UsageError("vos validate <actions.json|take>");
   const r = createReporter(flags.json === true);
-  const kitTarget = target.endsWith("kit.json") ? target : existsSync18(join21(target, "kit.json")) && !isTakeDir(target) ? join21(target, "kit.json") : null;
+  const kitTarget = target.endsWith("kit.json") ? target : existsSync19(join22(target, "kit.json")) && !isTakeDir(target) ? join22(target, "kit.json") : null;
   if (kitTarget) {
     const picture = flags.picture === true;
     const verdict = await validateKit(kitTarget, { picture });
@@ -12852,9 +12271,9 @@ async function cmdValidate(argv) {
     r.done({ valid: true, target }, `${target}: valid actions file`);
     return EXIT_OK;
   }
-  if (!isTakeDir(target) && existsSync18(join21(target, "config.json"))) {
+  if (!isTakeDir(target) && existsSync19(join22(target, "config.json"))) {
     const parsed = JSON.parse(
-      await readFile15(join21(target, "config.json"), "utf8")
+      await readFile16(join22(target, "config.json"), "utf8")
     );
     const pre = preflightConfig(parsed);
     const problems2 = pre.ok ? [] : pre.issues.map((i) => `config.json: ${i}`);
@@ -12895,7 +12314,7 @@ async function cmdValidate(argv) {
   const take = await loadTake(target);
   const problems = [];
   const warnings = [];
-  if (!existsSync18(take.paths.recording)) {
+  if (!existsSync19(take.paths.recording)) {
     problems.push("missing recording (re-run record)");
   } else {
     const mismatch = containerMismatch(
@@ -12978,7 +12397,7 @@ async function cmdValidate(argv) {
 async function cmdPush3(argv) {
   const { positionals, flags, multi } = parseArgs(
     argv,
-    BOOLEAN_FLAGS6,
+    BOOLEAN_FLAGS7,
     MULTI_FLAGS2
   );
   const dir = positionals[0];
@@ -12988,7 +12407,7 @@ async function cmdPush3(argv) {
     );
   const refusal = takePushRefusal({
     vos: strFlag(flags, "vos"),
-    trackedVosId: readSyncState(resolve9(dir))?.vosId ?? null,
+    trackedVosId: readSyncState(resolve10(dir))?.vosId ?? null,
     programOnly: ["slug", "desc", "tags", "base", "remix-of"].filter(
       (name) => hasFlag(flags, name)
     )
@@ -12997,7 +12416,7 @@ async function cmdPush3(argv) {
   const r = createReporter(flags.json === true);
   const overrides = multi.override;
   const result = await pushTake(
-    resolve9(dir),
+    resolve10(dir),
     {
       key: strFlag(flags, "key"),
       api: strFlag(flags, "api"),
@@ -13025,11 +12444,11 @@ async function cmdPush3(argv) {
   return EXIT_OK;
 }
 async function cmdPull2(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS6, MULTI_FLAGS2);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS7, MULTI_FLAGS2);
   const dir = positionals[0] ?? ".";
   const r = createReporter(flags.json === true);
   const result = await pullTake(
-    resolve9(dir),
+    resolve10(dir),
     {
       key: strFlag(flags, "key"),
       api: strFlag(flags, "api"),
@@ -13148,6 +12567,8 @@ async function run(argv) {
         return await cmdSession(rest);
       case "actions":
         return await cmdActions(rest);
+      case "ingest":
+        return await cmdIngest(rest);
       default:
         throw new UsageError(`unknown command "${cmd}" \u2014 run: vos help`);
     }
@@ -13180,7 +12601,7 @@ async function run(argv) {
   }
 }
 async function cmdSession(argv) {
-  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS6);
+  const { positionals, flags } = parseArgs(argv, BOOLEAN_FLAGS7);
   const [sub, arg] = positionals;
   const r = createReporter(flags.json === true);
   const usage = "vos session open <url> --name <app> | check <name> [--url <url>] | list | rm <name>";
@@ -13216,7 +12637,7 @@ async function cmdSession(argv) {
       if (!arg) throw new UsageError(usage);
       const bad = sessionNameVerdict(arg);
       if (bad) throw new UsageError(bad);
-      if (!existsSync18(sessionDir(arg)))
+      if (!existsSync19(sessionDir(arg)))
         throw new UsageError(`no session "${arg}" (vos session list)`);
       const summary2 = await summarizeSession(arg);
       const url = strFlag(flags, "url");
@@ -13323,7 +12744,8 @@ export {
   MULTI_FLAGS2 as MULTI_FLAGS,
   HELP,
   takeBrowserArgs,
+  takeBackdrop,
   verbHelp,
   run
 };
-//# sourceMappingURL=chunk-RHPRZQRM.js.map
+//# sourceMappingURL=chunk-SE4F3OMQ.js.map