humanish 0.109.0 → 0.109.1

package/CHANGELOG.md

@@ -8,6 +8,15 @@ The Unreleased section holds the full notes for the next version until it is tag
 
 ## Unreleased
 
+## 0.109.1: Current option names in messages, reclaim --env-file (2026-10-03)
+
+humanish 0.109.1 is a patch. Library refusals and warnings name `RunStudyOptions`, which 0.109.0
+exports, where they named the removed `RunLabOptions`. `humanish export --format bundle` no longer
+copies sandbox ids into its redacted workspace. `humanish reclaim` takes `--env-file`, and
+`humanish migrate` removes a `labs/` directory that its moves emptied.
+
+[Release notes](https://github.com/danielgwilson/humanish/releases/tag/v0.109.1)
+
 ## 0.109.0: Lab names removed, v2 study files refused (2026-10-03)
 
 humanish 0.109.0 removes what 0.108.0 deprecated. A `humanish.lab.v2` file, or any study file in a

package/dist/analysis/automatic-config.d.ts

@@ -7,7 +7,7 @@ interface StudyAnalysisSettings {
     question?: string;
     timeoutMs?: number;
 }
-/** The study's review.analysis: a provider selection for a separate review after a live study. */
+/** The study's review.analysis: a provider selection for a separate review after a live run. */
 export type StudyAnalysis = StudyAnalysisSettings & ({
     provider?: "openai";
     maxCostUsd: number;

package/dist/cli/commands/migrate.js

@@ -4,8 +4,11 @@ function formatValue(value) {
     const text = JSON.stringify(value);
     return text.length > 80 ? `${text.slice(0, 77)}...` : text;
 }
-/** Each file's source, destination, moved keys and dropped keys, printed before any write. */
-function formatMigratePlan(files) {
+/**
+ * Each file's source, destination, moved keys and dropped keys, and each labs/ directory the moves
+ * empty, printed before any write.
+ */
+function formatMigratePlan(files, emptied) {
     const lines = [];
     for (const file of files) {
         if (file.action === "skip") {
@@ -22,6 +25,9 @@ function formatMigratePlan(files) {
                 lines.push(`    its comment: ${key.comments.replace(/\n/g, " ")}`);
         }
     }
+    for (const directory of emptied) {
+        lines.push(`${directory}/: removed after the move, since nothing else is in it`);
+    }
     return lines.length > 0 ? `${lines.join("\n")}\n` : "No study files to convert.\n";
 }
 function formatMigrateOutcome(result) {
@@ -33,7 +39,12 @@ function formatMigrateOutcome(result) {
     const files = written === 1 ? "1 study file" : `${written} study files`;
     if (result.dryRun)
         return `Dry run: nothing was written. ${files} would change.\n`;
-    return written === 0 ? "No v2 study files to convert.\n" : `Converted ${files}.\n`;
+    if (written === 0)
+        return "No v2 study files to convert.\n";
+    const removed = result.removedDirectories ?? [];
+    return removed.length === 0
+        ? `Converted ${files}.\n`
+        : `Converted ${files}. Removed ${removed.map((directory) => `${directory}/`).join(", ")}, which the move emptied.\n`;
 }
 /** `humanish migrate`. */
 export function registerMigrateCommand(parent, io) {
@@ -57,7 +68,7 @@ export function registerMigrateCommand(parent, io) {
             dryRun: options.dryRun === true,
             // The plan is printed before anything is written; with --json it goes to stderr, so stdout
             // stays one JSON document.
-            onPlan: (files) => (json ? io.writeErr : io.writeOut)(formatMigratePlan(files)),
+            onPlan: (files, emptied) => (json ? io.writeErr : io.writeOut)(formatMigratePlan(files, emptied)),
         });
         writeResult(command, io, result, formatMigrateOutcome);
         io.setExitCode(result.ok ? 0 : 2);

package/dist/cli/commands/runs.js

@@ -7,7 +7,7 @@ import { cleanupRun, listRuns, readReview } from "../../run/stored-runs.js";
 import { verifyRun } from "../../verify/verify.js";
 import { reclaimPreflightSandboxes, reclaimRunSandboxes, } from "../../run/reclaim.js";
 import { addRunOptions, handleRun } from "./run-command.js";
-import { CWD_OPTION_DESCRIPTION, JSON_OPTION_DESCRIPTION, RUN_OPTION_DESCRIPTION, writeResult, humanError, } from "../io.js";
+import { applyEnvFileOption, CWD_OPTION_DESCRIPTION, ENV_FILE_OPTION_DESCRIPTION, JSON_OPTION_DESCRIPTION, RUN_OPTION_DESCRIPTION, writeResult, humanError, } from "../io.js";
 import { plural } from "../../run/text.js";
 export function registerRunCommand(parent, io) {
     addRunOptions(parent
@@ -165,13 +165,17 @@ export function registerRuntimeCommands(parent, io) {
 export function registerReclaimCommand(parent, io) {
     parent
         .command("reclaim")
-        .description("Kill an interrupted run's sandboxes by the exact ids journaled in its sandbox-receipts.ndjson; never enumerates the E2B account. Needs E2B_API_KEY in the environment.")
+        .description("Kill an interrupted run's sandboxes by the exact ids journaled in its sandbox-receipts.ndjson; never enumerates the E2B account. Needs E2B_API_KEY in the environment or in --env-file.")
         .summary("Stop an interrupted run's leftover sandboxes.")
         .option("--cwd <path>", CWD_OPTION_DESCRIPTION, ".")
         .option("--run <id>", RUN_OPTION_DESCRIPTION, "latest")
         .addOption(new Option("--preflight", "Reclaim sandboxes left by interrupted `humanish study check` probes (journaled in .humanish/preflight) instead of a run's.").conflicts("run"))
+        .option("--env-file <path>", ENV_FILE_OPTION_DESCRIPTION)
         .option("--json", JSON_OPTION_DESCRIPTION)
         .action(async (options, command) => {
+        // The kill calls read E2B_API_KEY from the environment: the env file, then discovered keys.
+        if (!(await applyEnvFileOption({ command, cwd: options.cwd, envFile: options.envFile, io })))
+            return;
         const result = options.preflight
             ? await reclaimPreflightSandboxes(options.cwd)
             : await reclaimRunSandboxes(options.cwd, options.run);

package/dist/evidence/redaction.d.ts

@@ -2,6 +2,17 @@
 export declare function sensitivePatterns(): readonly RegExp[];
 /** True if the text contains any secret-shaped token or known local path. */
 export declare function containsSensitive(text: string): boolean;
+/**
+ * What a shared copy of a run says in place of a provider sandbox id. scripts/public-surface-scan.mjs
+ * passes only this value at a sandbox-id key.
+ */
+export declare const REDACTED_SANDBOX_ID = "[redacted-sandbox-id]";
+/**
+ * `value` with every sandbox id replaced by REDACTED_SANDBOX_ID: strings at `sandboxId` and
+ * `subjectSandboxId`, and the `id` of each `providerResources` entry. A run keeps raw ids as local
+ * evidence for cleanup; a copy made to be shared names no sandbox.
+ */
+export declare function redactSandboxIds(value: unknown): unknown;
 /** Redact secrets to [REDACTED_SECRET] and local paths to their path labels. */
 export declare function redactText(text: string): string;
 /** Redact every sensitive match (secrets and paths) to a single [REDACTED_SECRET] label. */

package/dist/evidence/redaction.js

@@ -55,6 +55,49 @@ export function containsSensitive(text) {
 function redactLocalPaths(text, label) {
     return LOCAL_PATH_PATTERNS.reduce((current, [pattern, replacement]) => current.replace(pattern, (match) => (label ?? replacement) + (match.match(/\\+$/)?.[0] ?? "")), text);
 }
+/**
+ * What a shared copy of a run says in place of a provider sandbox id. scripts/public-surface-scan.mjs
+ * passes only this value at a sandbox-id key.
+ */
+export const REDACTED_SANDBOX_ID = "[redacted-sandbox-id]";
+/** The keys run writers put a sandbox id under; `providerResources` entries hold one as `id`. */
+const SANDBOX_ID_KEYS = new Set(["sandboxId", "subjectSandboxId"]);
+/**
+ * `value` with every sandbox id replaced by REDACTED_SANDBOX_ID: strings at `sandboxId` and
+ * `subjectSandboxId`, and the `id` of each `providerResources` entry. A run keeps raw ids as local
+ * evidence for cleanup; a copy made to be shared names no sandbox.
+ */
+export function redactSandboxIds(value) {
+    if (Array.isArray(value)) {
+        const items = value.map(redactSandboxIds);
+        return items.every((item, index) => item === value[index]) ? value : items;
+    }
+    if (value === null || typeof value !== "object")
+        return value;
+    let changed = false;
+    // fromEntries keeps a key such as __proto__ an own property, as JSON.parse made it.
+    const entries = Object.entries(value).map(([key, child]) => {
+        let next;
+        if (SANDBOX_ID_KEYS.has(key) && typeof child === "string")
+            next = REDACTED_SANDBOX_ID;
+        else if (key === "providerResources" && Array.isArray(child))
+            next = child.map((resource) => resource !== null &&
+                typeof resource === "object" &&
+                !Array.isArray(resource) &&
+                "id" in resource
+                ? Object.fromEntries(Object.entries(redactSandboxIds(resource)).map(([field, entry]) => [
+                    field,
+                    field === "id" ? REDACTED_SANDBOX_ID : entry,
+                ]))
+                : redactSandboxIds(resource));
+        else
+            next = redactSandboxIds(child);
+        if (next !== child && JSON.stringify(next) !== JSON.stringify(child))
+            changed = true;
+        return [key, next];
+    });
+    return changed ? Object.fromEntries(entries) : value;
+}
 /** Redact secrets to [REDACTED_SECRET] and local paths to their path labels. */
 export function redactText(text) {
     const withoutSecrets = SECRET_PATTERNS.reduce((current, pattern) => current.replace(pattern, "[REDACTED_SECRET]"), text);

package/dist/feedback/export-bundle.js

@@ -8,7 +8,7 @@ import { parse as parseYaml } from "yaml";
 import { ACTOR_TRACE_SCHEMA } from "../actors/contract.js";
 import { renderObserver } from "../observer/render.js";
 import { buildObserverData } from "../observer/data.js";
-import { containsSensitive, redactScreenshot, redactText } from "../evidence/redaction.js";
+import { containsSensitive, redactSandboxIds, redactScreenshot, redactText, } from "../evidence/redaction.js";
 import { decodeEscapes } from "../evidence/encoded-text.js";
 import { readPlainText } from "../evidence/plain-text.js";
 import { streamScreenshotPaths } from "../verify/artifacts.js";
@@ -224,7 +224,8 @@ function transformText(file, imagePaths) {
         const parsed = JSON.parse(text);
         // Parsing also resolves escape sequences in string values before inspection.
         assertNoInlineRaster(JSON.stringify(parsed));
-        const transformed = updateScreenshotDeclarations(parsed, imagePaths);
+        // The copy names no sandbox: an id is local operational evidence, and the copy is shared.
+        const transformed = redactSandboxIds(updateScreenshotDeclarations(parsed, imagePaths));
         if (JSON.stringify(transformed) === JSON.stringify(parsed))
             return file.bytes;
         assertRewritableNumbers(text);
@@ -237,7 +238,7 @@ function transformText(file, imagePaths) {
                 return line;
             const parsed = JSON.parse(line);
             assertNoInlineRaster(JSON.stringify(parsed));
-            const updated = JSON.stringify(updateScreenshotDeclarations(parsed, imagePaths));
+            const updated = JSON.stringify(redactSandboxIds(updateScreenshotDeclarations(parsed, imagePaths)));
             if (updated === JSON.stringify(parsed))
                 return line;
             assertRewritableNumbers(line);
@@ -329,7 +330,7 @@ async function writeDerivative(source, stagePaths, bundle) {
             bytes = transformText(file, imagePaths);
             if (file.path === "run.json") {
                 assertRewritableNumbers(file.bytes.toString("utf8"));
-                const transformed = updateScreenshotDeclarations(bundle, imagePaths);
+                const transformed = redactSandboxIds(updateScreenshotDeclarations(bundle, imagePaths));
                 transformed.redaction = {
                     status: "passed",
                     notes: `${bundle.redaction.notes} Exported copy: screenshots were blurred during export; the original capture is retained separately. See derivation.json.`,

package/dist/routes/computer-use/in-process-desktop.js

@@ -20,7 +20,7 @@ export function createInProcessDesktop(deps) {
                 throw new Error("The participant desktop must be prepared and may only be opened once, before finalization.");
             opened = true;
             if (deps.inProcessExecutor === undefined)
-                throw new Error("The in-process route needs RunLabOptions.inProcess.");
+                throw new Error("The in-process route needs RunStudyOptions.inProcess.");
             return { executor: await deps.inProcessExecutor(deps.appUrl) };
         },
         finalize() {

package/dist/routes/computer-use/plan.js

@@ -159,7 +159,7 @@ function driverReason(driving, { localAppSubject, inProcessRoute }) {
     if (driving.inProcess && !driving.createProvider)
         return {
             code: "HUMANISH_COMPUTER_USE_EXECUTOR_NO_PROVIDER",
-            message: "RunLabOptions.inProcess needs RunLabOptions.createProvider: an in-process executor returns no screenshot, so it needs a provider that does not read images. The default OpenAI computer-use provider reads screenshots and would stop the session.",
+            message: "RunStudyOptions.inProcess needs RunStudyOptions.createProvider: an in-process executor returns no screenshot, so it needs a provider that does not read images. The default OpenAI computer-use provider reads screenshots and would stop the session.",
         };
     // There is no built-in in-process driver for a local app.
     if (localAppSubject && !inProcessRoute)
@@ -233,7 +233,7 @@ export function planComputerUseStudy(config, input) {
     const source = config.subject.source;
     if (driving.inProcess &&
         (source === "clone" || source === "local-tree" || source === "desktop-cli"))
-        return refuse("in-scope", "HUMANISH_COMPUTER_USE_SUBJECT_INVALID", `RunLabOptions.inProcess drives subject.appUrl in this process, and a ${source} subject needs the hosted desktop the in-process route never creates. Use an app-url or local-app subject with inProcess, or remove inProcess to run on a hosted desktop.`, actor);
+        return refuse("in-scope", "HUMANISH_COMPUTER_USE_SUBJECT_INVALID", `RunStudyOptions.inProcess drives subject.appUrl in this process, and a ${source} subject needs the hosted desktop the in-process route never creates. Use an app-url or local-app subject with inProcess, or remove inProcess to run on a hosted desktop.`, actor);
     // The parser's rule; without a product the desktop study fails later.
     const productReason = desktopCliProductReason(config);
     if (productReason)
@@ -243,7 +243,7 @@ export function planComputerUseStudy(config, input) {
         return refuse("after-personas", "HUMANISH_COMPUTER_USE_FANOUT_INVALID", `Computer-use fan-out is capped at ${MAX_COMPUTER_USE_PARTICIPANTS} participants (resolved ${participants.length}); N concurrent paid desktops is real spend.`, actor);
     const [first, ...rest] = participants;
     if (driving.inProcess && rest.length > 0)
-        return refuse("after-personas", "HUMANISH_COMPUTER_USE_FANOUT_INVALID", "Fan-out to more than one participant is not supported on the in-process route (RunLabOptions.inProcess): fan-out provisions one independent E2B desktop per participant, which the in-process route deliberately skips. Run a single in-process participant, or fan out on the E2B route.", actor);
+        return refuse("after-personas", "HUMANISH_COMPUTER_USE_FANOUT_INVALID", "Fan-out to more than one participant is not supported on the in-process route (RunStudyOptions.inProcess): fan-out provisions one independent E2B desktop per participant, which the in-process route deliberately skips. Run a single in-process participant, or fan out on the E2B route.", actor);
     if (first === undefined)
         throw new Error("computerUseParticipants returned no participant");
     const appUrl = config.subject.appUrl ?? "";

package/dist/routes/computer-use/setup.js

@@ -89,7 +89,7 @@ export async function admitCuaRun(plan, input, config) {
         ok: false,
         result: fail(...args),
     });
-    // runStudyWith's local VM study supplies a local-target app-url study's desktop; a direct route call or
+    // runStudyWith's `localVm` supplies the desktop of a local-target app-url study; a direct route call or
     // an in-process executor on the same study has none. It reads the declared source, as the planner
     // did: a library config the parser never saw can plan to an app-url subject from another source.
     if (config.subject.source === "app-url" &&

package/dist/study/migrate.d.ts

@@ -21,6 +21,8 @@ export interface MigrateResult {
     readonly files: readonly MigrateFile[];
     /** Files left behind after a clean-up step found them changed: sources, backups or temp files. */
     readonly unresolved?: readonly string[];
+    /** The labs/ directories the moves emptied and migrate removed, or with `--dry-run` would remove. */
+    readonly removedDirectories?: readonly string[];
     readonly error?: {
         readonly code: "HUMANISH_MIGRATE_REFUSED" | "HUMANISH_MIGRATE_FAILED";
         readonly phase: "plan" | "stage" | "commit" | "clean-up";
@@ -34,8 +36,11 @@ export interface MigrateOptions {
     /** Files to convert. Without any, the six study directories are scanned. */
     readonly paths?: readonly string[];
     readonly dryRun?: boolean;
-    /** Called with the plan before anything is written, so a caller can print every destination. */
-    readonly onPlan?: (files: readonly MigrateFile[]) => void;
+    /**
+     * Called with the plan before anything is written, so a caller can print every destination and
+     * each labs/ directory the moves empty, which migrate then removes.
+     */
+    readonly onPlan?: (files: readonly MigrateFile[], emptied: readonly string[]) => void;
     /** Replaces `fs.link`. Tests use it to stand in for a filesystem without hard links. */
     readonly link?: (from: string, to: string) => Promise<void>;
     /** Called between stage and commit, and between commit and clean-up. Tests change files there. */

package/dist/study/migrate.js

@@ -8,6 +8,8 @@
 //    name, so no file this run did not write is ever overwritten. A failure undoes the commits.
 // 4. Clean up: delete each moved source and each rewrite's original, once checked (owned-files.ts).
 //    A file that changed since the plan is kept and listed; a rewrite's original as <name>.v2.bak.
+//    Then a labs/ directory whose every entry moved is removed with a plain rmdir, which fails, and
+//    keeps the directory, when anything else is in it by then.
 import { randomUUID } from "node:crypto";
 import { link, lstat, readdir, readFile, realpath, rename, rmdir } from "node:fs/promises";
 import path from "node:path";
@@ -317,6 +319,46 @@ async function undoCommits(root, writes, linkFile) {
     }
     return unrestored;
 }
+// Each labs/ directory whose every entry, a dotfile or a subdirectory included, is a file this run
+// moves out. Only these are removed after the move.
+async function emptiedRetiredDirectories(root, writes) {
+    const moving = new Map();
+    for (const write of writes) {
+        if (write.file.action !== "move")
+            continue;
+        const directory = path.dirname(write.sourcePath);
+        const relative = path.relative(root, directory);
+        const retired = STUDY_DIRECTORIES.some((entry) => entry.family === "labs" && entry.relativeDir === relative);
+        if (!retired)
+            continue;
+        const entry = moving.get(directory) ?? { write, names: new Set() };
+        entry.names.add(path.basename(write.sourcePath));
+        moving.set(directory, entry);
+    }
+    const emptied = [];
+    for (const [directory, { write, names }] of moving) {
+        const entries = await readdir(directory).catch(() => undefined);
+        if (entries !== undefined && entries.every((name) => names.has(name)))
+            emptied.push(write);
+    }
+    return emptied;
+}
+// Remove each emptied labs/ directory, if it is still the one the plan read. rmdir is not
+// recursive, so a file that appeared in it since the plan keeps it. Returns the removed paths.
+async function removeEmptiedDirectories(root, emptied) {
+    const removed = [];
+    for (const write of emptied) {
+        try {
+            await assertDirectory(write.sourceDirectory, root);
+            await rmdir(path.dirname(write.sourcePath));
+            removed.push(path.relative(root, path.dirname(write.sourcePath)));
+        }
+        catch {
+            // Not empty, or not the directory the plan read: it stays.
+        }
+    }
+    return removed;
+}
 // Delete each moved source and each rewrite's original, but only once the v3 file is in place as
 // written, and only if the old file is still the one the plan read (removeChecked). Anything kept
 // is listed; a rewrite's original is kept as <name>.v2.bak.
@@ -356,9 +398,17 @@ export async function migrateStudies(options) {
     const linkFile = options.link ?? link;
     try {
         ({ files, writes } = await planWrites(root, options));
-        options.onPlan?.(files);
-        if (options.dryRun === true || writes.length === 0)
-            return { ...base, ok: true, files };
+        const emptied = await emptiedRetiredDirectories(root, writes);
+        const emptiedPaths = emptied.map((write) => path.relative(root, path.dirname(write.sourcePath)));
+        options.onPlan?.(files, emptiedPaths);
+        if (options.dryRun === true || writes.length === 0) {
+            return {
+                ...base,
+                ok: true,
+                files,
+                ...(emptiedPaths.length === 0 ? {} : { removedDirectories: emptiedPaths }),
+            };
+        }
         try {
             await stage(root, writes, created);
             options.onPhase?.("stage");
@@ -386,7 +436,13 @@ export async function migrateStudies(options) {
                 },
             };
         }
-        return { ...base, ok: true, files };
+        const removed = await removeEmptiedDirectories(root, emptied);
+        return {
+            ...base,
+            ok: true,
+            files,
+            ...(removed.length === 0 ? {} : { removedDirectories: removed }),
+        };
     }
     catch (error) {
         const failure = error instanceof MigrateError

package/dist/study/run-study-events.js

@@ -43,7 +43,7 @@ export function studyEventEmitter(onEvent, warnings, secretValues) {
             catch {
                 detail = "the thrown value has no message";
             }
-            warnings.push(`RunLabOptions.onEvent failed on ${type}: ${detail}`);
+            warnings.push(`RunStudyOptions.onEvent failed on ${type}: ${detail}`);
         };
         try {
             const returned = onEvent(event);

package/dist/study/run-study-options.js

@@ -11,7 +11,7 @@ import { studyResultIdentity } from "../run/study-result.js";
 const unsupported = (option, route, reason) => ({
     ok: false,
     code: "HUMANISH_STUDY_OPTION_UNSUPPORTED",
-    message: `RunLabOptions.${option} is not supported on the ${route} route: ${reason}`,
+    message: `RunStudyOptions.${option} is not supported on the ${route} route: ${reason}`,
 });
 // Fields RunStudyOptions no longer has, and where each one's job went.
 const REMOVED_OPTIONS = {
@@ -32,7 +32,7 @@ export function removedOptionRefusal(options) {
         return {
             ok: false,
             code: "HUMANISH_STUDY_OPTION_UNSUPPORTED",
-            message: 'RunLabOptions.rerun.laneIds was removed. Use rerun.participantIds. See docs/contracts/schemas.md, "Library options".',
+            message: '`rerun.laneIds` was removed in 0.107.0. Use `rerun.participantIds`. See docs/contracts/schemas.md, "Library options".',
         };
     const field = Object.keys(REMOVED_OPTIONS).find((key) => Reflect.get(options, key) !== undefined);
     if (field === undefined)
@@ -40,7 +40,7 @@ export function removedOptionRefusal(options) {
     return {
         ok: false,
         code: "HUMANISH_STUDY_OPTION_UNSUPPORTED",
-        message: `RunLabOptions.${field} was removed. ${REMOVED_OPTIONS[field]} See docs/contracts/schemas.md, "Library options".`,
+        message: `\`${field}\` was removed. ${REMOVED_OPTIONS[field]} See docs/contracts/schemas.md, "Library options".`,
     };
 }
 /** Why the route cannot honor an option it was given, or undefined when it can. */

package/docs/contracts/run-bundle.md

@@ -633,6 +633,11 @@ The receipt describes the transformation; it does not attest that a participant'
 finding is true. Its own bytes are not included in its hash inventory. Feedback
 commands can subsequently generate new derivative-local artifacts.
 
+The derivative names no sandbox. In every JSON and NDJSON file it copies, the
+values at `sandboxId`, `subjectSandboxId` and each `providerResources[].id` read
+`[redacted-sandbox-id]`; `sandbox-receipts.ndjson` is omitted. The source keeps
+its raw ids, which cleanup and reclaim read.
+
 PNG files that actor traces reference as stream screenshots are re-encoded as
 blurred thumbnails. A PNG that nothing in `run.json` cites is omitted and
 inventoried. Export refuses a run whose feedback candidates, adapter artifacts or

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "humanish",
-  "version": "0.109.0",
+  "version": "0.109.1",
   "description": "Synthetic user research for apps, CLIs, and agent-facing product flows.",
   "keywords": [
     "cli",
@@ -91,6 +91,7 @@
     "prose:check": "node scripts/check-code-prose.mjs",
     "vocabulary:check": "tsx scripts/check-retired-words.ts",
     "site-css:check": "node scripts/check-site-css.mjs",
+    "site:tour": "tsx scripts/site-tour.ts",
     "site:hero:proof": "node scripts/site-hero-wrap-proof.mjs"
   },
   "dependencies": {