terminalhire 0.42.21 → 0.42.23

package/dist/bin/jpi-dispatch.js

@@ -3554,11 +3554,11 @@ function parseGitHubRef(url) {
     kind: m[3] === "pull" ? "pull" : "issue"
   };
 }
-async function ghGraphQL(query, variables, token, signal, governor) {
+async function ghGraphQL(query2, variables, token, signal, governor) {
   const init = {
     method: "POST",
     headers: { ...ghHeaders(token), "Content-Type": "application/json" },
-    body: JSON.stringify({ query, variables }),
+    body: JSON.stringify({ query: query2, variables }),
     signal
   };
   if (governor) {
@@ -12927,9 +12927,9 @@ async function runLogin() {
     let ghProfile;
     if (process.env["TERMINALHIRE_GITHUB_MOCK"] === "1" || process.env["JPI_GITHUB_MOCK"] === "1") {
       const { fileURLToPath: fileURLToPath15 } = await import("url");
-      const { join: join62 } = await import("path");
+      const { join: join63 } = await import("path");
       const __dirname10 = fileURLToPath15(new URL(".", import.meta.url));
-      const fixturePath = join62(__dirname10, "../../fixtures/github-sample.json");
+      const fixturePath = join63(__dirname10, "../../fixtures/github-sample.json");
       const { readFileSync: readFileSync43 } = await import("fs");
       ghProfile = JSON.parse(readFileSync43(fixturePath, "utf8"));
     } else {
@@ -18881,8 +18881,8 @@ var init_stringify = __esm({
 });
 
 // ../../node_modules/@anthropic-ai/sdk/internal/utils/query.mjs
-function stringifyQuery(query) {
-  return stringify(query, { arrayFormat: "brackets" });
+function stringifyQuery(query2) {
+  return stringify(query2, { arrayFormat: "brackets" });
 }
 var init_query = __esm({
   "../../node_modules/@anthropic-ai/sdk/internal/utils/query.mjs"() {
@@ -20966,9 +20966,9 @@ var init_deployment_runs = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/deployment_runs?beta=true", PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -21080,9 +21080,9 @@ var init_deployments = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/deployments?beta=true", PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -21242,9 +21242,9 @@ var init_dreams = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/dreams?beta=true", PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "dreaming-2026-04-21"].toString() },
@@ -21375,9 +21375,9 @@ var init_files = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/files?beta=true", Page, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "files-api-2025-04-14"].toString() },
@@ -21525,9 +21525,9 @@ var init_models = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/models?beta=true", Page, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { ...betas?.toString() != null ? { "anthropic-beta": betas?.toString() } : void 0 },
@@ -21624,9 +21624,9 @@ var init_user_profiles = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/user_profiles?beta=true", PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "user-profiles-2026-03-24"].toString() },
@@ -22485,9 +22485,9 @@ var init_versions = __esm({
        * ```
        */
       list(agentID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList(path`/v1/agents/${agentID}/versions?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -22550,9 +22550,9 @@ var init_agents = __esm({
        * ```
        */
       retrieve(agentID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.get(path`/v1/agents/${agentID}?beta=true`, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -22595,9 +22595,9 @@ var init_agents = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/agents?beta=true", PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -24687,9 +24687,9 @@ var init_work = __esm({
        * ```
        */
       list(environmentID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList(path`/v1/environments/${environmentID}/work?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -24768,9 +24768,9 @@ var init_work = __esm({
        * ```
        */
       poll(environmentID, params = {}, options) {
-        const { betas, "Anthropic-Worker-ID": anthropicWorkerID, ...query } = params ?? {};
+        const { betas, "Anthropic-Worker-ID": anthropicWorkerID, ...query2 } = params ?? {};
         return this._client.get(path`/v1/environments/${environmentID}/work/poll?beta=true`, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             {
@@ -24967,9 +24967,9 @@ var init_environments = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/environments?beta=true", PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -25072,9 +25072,9 @@ var init_memories = __esm({
        * ```
        */
       retrieve(memoryID, params, options) {
-        const { memory_store_id, betas, ...query } = params;
+        const { memory_store_id, betas, ...query2 } = params;
         return this._client.get(path`/v1/memory_stores/${memory_store_id}/memories/${memoryID}?beta=true`, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "agent-memory-2026-07-22"].toString() },
@@ -25120,9 +25120,9 @@ var init_memories = __esm({
        * ```
        */
       list(memoryStoreID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList(path`/v1/memory_stores/${memoryStoreID}/memories?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "agent-memory-2026-07-22"].toString() },
@@ -25180,9 +25180,9 @@ var init_memory_versions = __esm({
        * ```
        */
       retrieve(memoryVersionID, params, options) {
-        const { memory_store_id, betas, ...query } = params;
+        const { memory_store_id, betas, ...query2 } = params;
         return this._client.get(path`/v1/memory_stores/${memory_store_id}/memory_versions/${memoryVersionID}?beta=true`, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "agent-memory-2026-07-22"].toString() },
@@ -25204,9 +25204,9 @@ var init_memory_versions = __esm({
        * ```
        */
       list(memoryStoreID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList(path`/v1/memory_stores/${memoryStoreID}/memory_versions?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "agent-memory-2026-07-22"].toString() },
@@ -25332,9 +25332,9 @@ var init_memory_stores = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/memory_stores?beta=true", PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "agent-memory-2026-07-22"].toString() },
@@ -25532,9 +25532,9 @@ var init_batches = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/messages/batches?beta=true", Page, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "message-batches-2024-09-24"].toString() },
@@ -27207,9 +27207,9 @@ var init_events = __esm({
        * ```
        */
       list(sessionID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList(path`/v1/sessions/${sessionID}/events?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -27264,9 +27264,9 @@ var init_events = __esm({
        * ```
        */
       stream(sessionID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.get(path`/v1/sessions/${sessionID}/events/stream?beta=true`, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -27374,9 +27374,9 @@ var init_resources = __esm({
        * ```
        */
       list(sessionID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList(path`/v1/sessions/${sessionID}/resources?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -27461,9 +27461,9 @@ var init_events2 = __esm({
        * ```
        */
       list(threadID, params, options) {
-        const { session_id, betas, ...query } = params;
+        const { session_id, betas, ...query2 } = params;
         return this._client.getAPIList(path`/v1/sessions/${session_id}/threads/${threadID}/events?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -27550,9 +27550,9 @@ var init_threads = __esm({
        * ```
        */
       list(sessionID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList(path`/v1/sessions/${sessionID}/threads?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -27687,9 +27687,9 @@ var init_sessions = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/sessions?beta=true", BidirectionalPageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -27814,9 +27814,9 @@ var init_versions2 = __esm({
        * ```
        */
       list(skillID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList(path`/v1/skills/${skillID}/versions?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "skills-2025-10-02"].toString() },
@@ -27945,9 +27945,9 @@ var init_skills2 = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/skills?beta=true", PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "skills-2025-10-02"].toString() },
@@ -28065,9 +28065,9 @@ var init_certificates = __esm({
        * ```
        */
       list(tunnelID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList(path`/v1/tunnels/${tunnelID}/certificates?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "mcp-tunnels-2026-06-22"].toString() },
@@ -28194,9 +28194,9 @@ var init_tunnels = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/tunnels?beta=true", PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "mcp-tunnels-2026-06-22"].toString() },
@@ -28390,9 +28390,9 @@ var init_credentials2 = __esm({
        * ```
        */
       list(vaultID, params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList(path`/v1/vaults/${vaultID}/credentials?beta=true`, PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -28563,9 +28563,9 @@ var init_vaults = __esm({
        * ```
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/vaults?beta=true", PageCursor, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { "anthropic-beta": [...betas ?? [], "managed-agents-2026-04-01"].toString() },
@@ -29451,8 +29451,8 @@ var init_batches2 = __esm({
        * }
        * ```
        */
-      list(query = {}, options) {
-        return this._client.getAPIList("/v1/messages/batches", Page, { query, ...options });
+      list(query2 = {}, options) {
+        return this._client.getAPIList("/v1/messages/batches", Page, { query: query2, ...options });
       }
       /**
        * Delete a Message Batch.
@@ -29708,9 +29708,9 @@ var init_models2 = __esm({
        * use in the API. More recently released models are listed first.
        */
       list(params = {}, options) {
-        const { betas, ...query } = params ?? {};
+        const { betas, ...query2 } = params ?? {};
         return this._client.getAPIList("/v1/models", Page, {
-          query,
+          query: query2,
           ...options,
           headers: buildHeaders([
             { ...betas?.toString() != null ? { "anthropic-beta": betas?.toString() } : void 0 },
@@ -30059,8 +30059,8 @@ var init_client = __esm({
         }
         return buildHeaders([{ Authorization: `Bearer ${this.authToken}` }]);
       }
-      stringifyQuery(query) {
-        return stringifyQuery(query);
+      stringifyQuery(query2) {
+        return stringifyQuery(query2);
       }
       getUserAgent() {
         return `${this.constructor.name}/JS ${VERSION}`;
@@ -30071,16 +30071,16 @@ var init_client = __esm({
       makeStatusError(status, error2, message, headers) {
         return APIError.generate(status, error2, message, headers);
       }
-      buildURL(path6, query, defaultBaseURL) {
+      buildURL(path6, query2, defaultBaseURL) {
         const baseURL = !__classPrivateFieldGet(this, _BaseAnthropic_instances, "m", _BaseAnthropic_baseURLOverridden).call(this) && defaultBaseURL || this.baseURL;
         const url = isAbsoluteURL(path6) ? new URL(path6) : new URL(baseURL + (baseURL.endsWith("/") && path6.startsWith("/") ? path6.slice(1) : path6));
         const defaultQuery = this.defaultQuery();
         const pathQuery = Object.fromEntries(url.searchParams);
         if (!isEmptyObj(defaultQuery) || !isEmptyObj(pathQuery)) {
-          query = { ...pathQuery, ...defaultQuery, ...query };
+          query2 = { ...pathQuery, ...defaultQuery, ...query2 };
         }
-        if (typeof query === "object" && query && !Array.isArray(query)) {
-          url.search = this.stringifyQuery(query);
+        if (typeof query2 === "object" && query2 && !Array.isArray(query2)) {
+          url.search = this.stringifyQuery(query2);
         }
         return url.toString();
       }
@@ -30393,14 +30393,14 @@ var init_client = __esm({
       }
       async buildRequest(inputOptions, { retryCount = 0 } = {}) {
         const options = { ...inputOptions };
-        const { method, path: path6, query, defaultBaseURL } = options;
+        const { method, path: path6, query: query2, defaultBaseURL } = options;
         if (this._authState.resolution) {
           await this._authState.resolution;
         }
         if (!this._baseURLIsExplicit && this._authState.baseURL && this.baseURL !== this._authState.baseURL) {
           this.baseURL = this._authState.baseURL;
         }
-        const url = this.buildURL(path6, query, defaultBaseURL);
+        const url = this.buildURL(path6, query2, defaultBaseURL);
         if ("timeout" in options)
           validatePositiveInteger("timeout", options.timeout);
         options.timeout = options.timeout ?? this.timeout;
@@ -30518,8 +30518,8 @@ function stripFallbackBlocks(body) {
 function betaRefusalFallbackMiddleware(fallbacks, options = {}) {
   let warnedMissingState = false;
   return async (request, next, ctx) => {
-    const [path6, query] = (ctx.options?.path ?? "").split("?");
-    if (fallbacks.length === 0 || ctx.options?.method !== "post" || path6 !== "/v1/messages" || new URLSearchParams(query).get("beta") !== "true" || typeof ctx.options.body !== "object" || ctx.options.body == null) {
+    const [path6, query2] = (ctx.options?.path ?? "").split("?");
+    if (fallbacks.length === 0 || ctx.options?.method !== "post" || path6 !== "/v1/messages" || new URLSearchParams(query2).get("beta") !== "true" || typeof ctx.options.body !== "object" || ctx.options.body == null) {
       return next(request);
     }
     if (ctx.options.body.fallbacks != null) {
@@ -31787,7 +31787,7 @@ ${facts.stderr}`))
   return null;
 }
 function isCommandUnavailable(facts, countsRead) {
-  if (facts.exitCode === 127 || facts.exitCode === 126)
+  if (facts.exitCode === 127 || facts.exitCode === 126 || facts.exitCode === 125)
     return true;
   if (countsRead)
     return false;
@@ -31795,6 +31795,22 @@ function isCommandUnavailable(facts, countsRead) {
     return false;
   return facts.stdout.trim().length === 0 && EXEC_FAILURE.test(facts.stderr);
 }
+function isOfflineBuildGap(facts, counts) {
+  if (facts.runtime !== "jvm")
+    return null;
+  if (counts !== null && counts.tests_failed > 0)
+    return null;
+  if (facts.exitCode === 0 || facts.exitCode === null)
+    return null;
+  const out = `${facts.stdout}
+${facts.stderr}`;
+  for (const pattern of OFFLINE_BUILD_GAP) {
+    const hit = pattern.exec(out);
+    if (hit)
+      return hit[0];
+  }
+  return null;
+}
 function classifyVerification(facts) {
   if (facts.timedOut) {
     return {
@@ -31819,6 +31835,14 @@ function classifyVerification(facts) {
       reason: `the test command could not be invoked (exit ${String(facts.exitCode)}). This is an environment failure on our side \u2014 a missing interpreter, a binary outside PATH, or a dependency installed somewhere the command cannot see it. The repo has not been judged.`
     };
   }
+  const gap = isOfflineBuildGap(facts, counts);
+  if (gap !== null) {
+    return {
+      outcome: "test-command-unavailable",
+      counts,
+      reason: `the build stopped on something our install step did not fetch (${gap}). The test step has no network, so this is a gap in our environment, not a failure in the repo. The repo has not been judged.`
+    };
+  }
   if (counts !== null) {
     if (counts.tests_failed > 0) {
       return {
@@ -31873,10 +31897,19 @@ function isGreen(outcome) {
 function isOurFault(outcome) {
   return outcome === "test-command-unavailable" || outcome === "counts-unparsed";
 }
-var int, withSuiteFailures, READERS, SUPPORTED_RUNNERS, COVERAGE_TABLE, EXEC_FAILURE, SUITE_REPORTED_FAILURE;
+var VERIFICATION_OUTCOMES, int, withSuiteFailures, READERS, SUPPORTED_RUNNERS, COVERAGE_TABLE, EXEC_FAILURE, SUITE_REPORTED_FAILURE, OFFLINE_BUILD_GAP;
 var init_classify2 = __esm({
   "../../packages/envrun/dist/classify.js"() {
     "use strict";
+    VERIFICATION_OUTCOMES = [
+      "completed",
+      "tests-failed",
+      "no-tests-observed",
+      "counts-unparsed",
+      "test-command-unavailable",
+      "environment-exhausted",
+      "budget-exceeded"
+    ];
     int = (m, i = 1) => m ? Number(m[i]) : 0;
     withSuiteFailures = (counts, suiteLine) => {
       if (counts.tests_failed > 0 || !suiteLine)
@@ -31976,6 +32009,51 @@ var init_classify2 = __esm({
           return { tests_passed: int(passed), tests_failed: int(failed) + int(errors) };
         }
       },
+      {
+        // Maven surefire's per-module summary (TERM-1122), measured against surefire
+        // 3.2.5 through `th run`:
+        //
+        //     [INFO] Tests run: 2, Failures: 0, Errors: 0, Skipped: 0
+        //
+        // The per-CLASS lines carry the same counts followed by `, Time elapsed: …`, so
+        // the end anchor after `Skipped` is what keeps them out; counting both would
+        // double every test. One summary prints per module, so they are SUMMED. An
+        // error is a test that could not run to an assertion, counted as failed so a
+        // green verdict is impossible while one is outstanding, as pytest's are.
+        runner: "maven surefire",
+        read: (out) => {
+          const lines = [
+            ...out.matchAll(/^(?:\[(?:INFO|WARNING|ERROR)\] )?Tests run: (\d+), Failures: (\d+), Errors: (\d+), Skipped: (\d+)(?:, Flakes: \d+)?\s*$/gm)
+          ];
+          if (lines.length === 0)
+            return null;
+          let passed = 0;
+          let failed = 0;
+          for (const m of lines) {
+            const [run32, failures, errors, skipped] = [m[1], m[2], m[3], m[4]].map(Number);
+            failed += failures + errors;
+            passed += Math.max(0, run32 - failures - errors - skipped);
+          }
+          return { tests_passed: passed, tests_failed: failed };
+        }
+      },
+      {
+        // Gradle prints no test counts when every test passes, so envrun installs an
+        // init script that prints one line per Test task (`gradleTestSummary.ts`,
+        // TERM-1122). The marker is ours; its format is fixed there.
+        runner: "gradle",
+        read: (out) => {
+          const lines = [
+            ...out.matchAll(/^terminalhire-gradle-tests: task=\S+ total=(\d+) passed=(\d+) failed=(\d+) skipped=(\d+)\s*$/gm)
+          ];
+          if (lines.length === 0)
+            return null;
+          return {
+            tests_passed: lines.reduce((sum, m) => sum + Number(m[2]), 0),
+            tests_failed: lines.reduce((sum, m) => sum + Number(m[3]), 0)
+          };
+        }
+      },
       {
         // mocha: `  440 passing (1s)` and `  2 failing`
         runner: "mocha",
@@ -32010,6 +32088,79 @@ var init_classify2 = __esm({
           const p = int(passed);
           return { tests_passed: p, tests_failed: Math.max(0, t - p) };
         }
+      },
+      {
+        /**
+         * BARE TAP — assertion lines with no plan and no summary comment (TERM-1138).
+         *
+         * LAST ON PURPOSE. It is the loosest reader here, so anything that a more specific
+         * one can read must reach that one first: `node --test` and node-tap both emit `ok`
+         * lines AND a closing summary, and their readers are ordered above for that reason.
+         * Moving this up would have it answer for both.
+         *
+         * A hand-rolled harness prints neither summary — it emits its assertions and stops.
+         * That is what morebetterltd/wheelhouse does: thirty `ok N - …` lines, exit 0, and
+         * before this every one of those runs reported `counts-unparsed`, which the claim
+         * page renders as "RESULT UNREADABLE — THE SUITE EXITED 0" over a suite that passed.
+         *
+         * ON THE MISSING PLAN LINE. TAP requires `1..N` so a reader can tell a finished
+         * stream from a truncated one, and there is none here, so this cannot prove the
+         * suite reached its end. That is a real limit and it is NOT a reason to refuse,
+         * because it holds this format to a standard no reader in this file meets — the
+         * jest reader greps a line out of stdout that a repository could `echo` without
+         * running anything. These are format adapters, not a trust boundary; the boundary
+         * is that the command is the repository's own or is refused a signature.
+         *
+         * CONTIGUOUS FROM 1, which buys self-consistency rather than security:
+         *
+         *   - starting at 1 rejects a TRUNCATION. `testOutputTail` keeps the last lines, so
+         *     a stream beginning `ok 47` is the middle of a longer run and counting it would
+         *     report three tests for a suite that ran fifty.
+         *   - no gaps rejects prose that happens to carry the word, and a stream interleaved
+         *     with another's.
+         *   - anchored with no leading space rejects TAP SUBTESTS, which indent. Counting
+         *     those would double them against their parent.
+         */
+        runner: "bare TAP",
+        read: (out) => {
+          let n = 0;
+          let failed = 0;
+          let passed = 0;
+          let plan = null;
+          for (const line of out.split("\n")) {
+            if (/^Bail out!/.test(line))
+              return null;
+            const p = /^(\d+)\.\.(\d+)\s*$/.exec(line);
+            if (p) {
+              const declared = Number(p[2]) - Number(p[1]) + 1;
+              if (plan !== null && plan !== declared)
+                return null;
+              plan = declared;
+              continue;
+            }
+            const m = /^(not )?ok (\d+)(?:\s|$)/.exec(line);
+            if (!m)
+              continue;
+            if (Number(m[2]) !== n + 1)
+              return null;
+            n += 1;
+            const directive = /#\s*(skip|todo)\b/i.exec(line);
+            const kind = directive?.[1]?.toLowerCase();
+            if (kind === "skip")
+              continue;
+            if (m[1] !== void 0) {
+              if (kind !== "todo")
+                failed += 1;
+              continue;
+            }
+            passed += 1;
+          }
+          if (n === 0)
+            return null;
+          if (plan !== null && plan !== n)
+            return null;
+          return { tests_passed: passed, tests_failed: failed };
+        }
       }
     ];
     SUPPORTED_RUNNERS = READERS.map((r) => r.runner);
@@ -32031,6 +32182,21 @@ var init_classify2 = __esm({
       "\\d+\\s+examples?,\\s+(?!0\\b)\\d+\\s+failures?"
       // rspec's summary line
     ].join("|"), "m");
+    OFFLINE_BUILD_GAP = [
+      // Maven, `-o`: `Cannot access central (…) in offline mode and the artifact … has
+      // not been downloaded from it before.`
+      /in offline mode and the artifact \S+ has not been downloaded from it before/,
+      // Maven without `-o`, as a CI-derived `mvn test` runs: it tries the network.
+      /Could not transfer artifact \S+ from\/to /,
+      /Plugin \S+ or one of its dependencies could not be resolved/,
+      // Gradle, `--offline`.
+      /No cached version (?:listing )?(?:of|for) \S+ available for offline mode/,
+      // Gradle without `--offline`, and the wrapper fetching its own distribution.
+      /Could not GET 'https?:\/\//,
+      /^Downloading https:\/\/services\.gradle\.org\/distributions\//m,
+      /No matching toolchains found for requested specification/,
+      /Cannot find a Java installation on your machine matching/
+    ];
   }
 });
 
@@ -32096,6 +32262,12 @@ function scrubEnv(source, opts) {
   env["GOCACHE"] = join34(jailHome, ".cache", "go-build");
   env["GOFLAGS"] = "-modcacherw";
   env["CARGO_HOME"] = join34(jailHome, ".cargo");
+  env["MAVEN_OPTS"] = `-Dmaven.repo.local=${join34(jailHome, ".m2", "repository")}`;
+  env["GRADLE_USER_HOME"] = join34(jailHome, ".gradle");
+  const bundle = join34(jailHome, ".bundle");
+  env["GEM_HOME"] = bundle;
+  env["BUNDLE_PATH"] = bundle;
+  env["BUNDLE_APP_CONFIG"] = bundle;
   const proxy = opts.proxyUrl ?? DEAD_PROXY;
   env["HTTP_PROXY"] = proxy;
   env["HTTPS_PROXY"] = proxy;
@@ -32396,6 +32568,31 @@ var init_egressProxy = __esm({
       "static.crates.io",
       "index.crates.io",
       "crates.io",
+      // TERM-1139. `ruby` has had an image since the mapping existed and `bundle install`
+      // as its derived command, and this host was missing — so every ruby repo could start
+      // and could never install. Install is the ONLY step with a network grant at all, so a
+      // denial here is terminal, not a slow path.
+      //
+      // One entry, not two: `hostAllowed` is dot-anchored SUFFIX matching, so this covers
+      // `index.rubygems.org` as well. Listing that separately would advertise the grant as
+      // narrower than it is, which the `github.com` note below rejects for the same reason.
+      "rubygems.org",
+      // TERM-1139, added with the `dotnet` image mapping. `dotnet restore` fetches from
+      // NuGet; the coupling test refuses a mapped runtime whose registry is unreachable, and
+      // it caught this one the moment the image landed.
+      "api.nuget.org",
+      // TERM-1122, added with the `jvm` image mapping, each from a MEASURED denial
+      // through `th run` (the proxy's 403 in the build's own output), not a guess:
+      //   - Maven Central, where both `mvn` and Gradle's `mavenCentral()` resolve.
+      //   - `services.gradle.org`, where a Gradle wrapper fetches its distribution.
+      //   - `release-assets.githubusercontent.com`, where that fetch LANDS. Measured
+      //     chain: services.gradle.org 307 -> github.com 302 -> this host 200. The
+      //     `github.com` note below keeps `githubusercontent.com` denied until a real
+      //     install needs it; this is that install. Only this one host: raw blobs and
+      //     `objects.githubusercontent.com` stay denied.
+      "repo.maven.apache.org",
+      "services.gradle.org",
+      "release-assets.githubusercontent.com",
       // Git dependencies. Approved by Eric 2026-07-22 after a live run measured the
       // chokepoint working under load (20 events, 16 allowed / 4 denied by host).
       //
@@ -32687,6 +32884,9 @@ function containerArgs(spec, env, opts) {
       args5.push(`--env=${k}=${url}`);
     }
     args5.push("--env=NO_PROXY=", "--env=no_proxy=");
+    const host = opts.net.proxyHost;
+    const port = String(opts.net.proxyPort);
+    args5.push(`--env=JAVA_TOOL_OPTIONS=-Dhttp.proxyHost=${host} -Dhttp.proxyPort=${port} -Dhttps.proxyHost=${host} -Dhttps.proxyPort=${port} -Daether.connector.http.useSystemProperties=true`);
   }
   args5.push("--");
   args5.push(validateImage(opts.image ?? DEFAULT_CONTAINER_IMAGE));
@@ -33019,7 +33219,10 @@ var init_container = __esm({
       "http_proxy",
       "https_proxy",
       "NO_PROXY",
-      "no_proxy"
+      "no_proxy",
+      // Carries the JVM's copy of the proxy (below), so an inherited value is dropped
+      // for the same reason as the rest.
+      "JAVA_TOOL_OPTIONS"
     ]);
     WINDOWS_DRIVE_ROOT = /^[A-Za-z]:[\\/]/;
     IMAGE_HOST = "(?:[a-zA-Z0-9-]+(?:\\.[a-zA-Z0-9-]+)+(?::[0-9]+)?|localhost(?::[0-9]+)?)";
@@ -33069,11 +33272,17 @@ var init_dist = __esm({
 function censusTotal(c) {
   return c.containers.length + c.volumes.length + c.networks.length;
 }
-function ids(docker3, args5) {
+function query(docker3, args5) {
   const res = docker3.sync([...args5], { timeoutMs: 15e3 });
-  if (res.error || res.status !== 0)
-    return [];
-  return res.stdout.split("\n").map((s) => s.trim()).filter((s) => s.length > 0);
+  if (res.error || res.status !== 0) {
+    const why = res.error?.message ?? (res.stderr.trim() || `exit ${String(res.status)}`);
+    return { ids: [], failure: `docker ${args5.slice(0, 2).join(" ")}: ${why}` };
+  }
+  const ids2 = res.stdout.split("\n").map((s) => s.trim()).filter((s) => s.length > 0);
+  return { ids: ids2, failure: null };
+}
+function ids(docker3, args5) {
+  return query(docker3, args5).ids;
 }
 function census(docker3, label) {
   const filter = `label=${label}`;
@@ -33083,25 +33292,67 @@ function census(docker3, label) {
     networks: ids(docker3, ["network", "ls", "-q", "--filter", filter])
   };
 }
+function censusReport(docker3, label) {
+  const filter = `label=${label}`;
+  const failures = [];
+  const ask5 = (args5) => {
+    const q = query(docker3, args5);
+    if (q.failure !== null)
+      failures.push(q.failure);
+    return q.ids;
+  };
+  const taken = {
+    containers: ask5(["ps", "-aq", "--filter", filter]),
+    volumes: ask5(["volume", "ls", "-q", "--filter", filter]),
+    networks: ask5(["network", "ls", "-q", "--filter", filter])
+  };
+  return failures.length === 0 ? { observed: true, census: taken, unobservedReason: null } : { observed: false, census: taken, unobservedReason: failures.join("; ") };
+}
 function localCensus(label) {
   return census(localDockerClient(), label);
 }
-function judgeLeaks(peak, after) {
+function judgeLeaks(peak, after, observation) {
   const labelObserved = peak.containers.length > 0;
+  if (!observation.observed) {
+    return {
+      labelObserved,
+      reaped: false,
+      observed: false,
+      clean: false,
+      state: "unobserved",
+      peak,
+      after,
+      note: `UNOBSERVED, not clean: we could not look at what survived teardown (${observation.unobservedReason ?? "no reason given"}), so nothing is known about leaks on this run, in either direction.`
+    };
+  }
   const reaped = censusTotal(after) === 0;
   let note;
+  let state;
   if (!labelObserved && reaped) {
+    state = "inconclusive";
     note = "INCONCLUSIVE, not clean: nothing labelled was ever seen alive, so an empty final census is equally consistent with the label never being applied. The control failed, so the denial proves nothing.";
   } else if (!labelObserved) {
+    state = "leak";
     note = "no labelled container was observed alive AND objects remain \u2014 the label wiring is wrong.";
   } else if (!reaped) {
+    state = "leak";
     note = `LEAK: ${String(censusTotal(after))} labelled object(s) survived teardown (containers=${String(after.containers.length)} volumes=${String(after.volumes.length)} networks=${String(after.networks.length)}).`;
   } else {
+    state = "clean";
     note = `clean: peak ${String(peak.containers.length)} labelled container(s) observed alive, 0 labelled objects remain after teardown.`;
   }
-  return { labelObserved, reaped, clean: labelObserved && reaped, peak, after, note };
+  return {
+    labelObserved,
+    reaped,
+    observed: true,
+    clean: labelObserved && reaped,
+    state,
+    peak,
+    after,
+    note
+  };
 }
-var RUN_LABEL_KEY, LabelWatch;
+var RUN_LABEL_KEY, LabelWatch, LEAK_STATES;
 var init_labels = __esm({
   "../../packages/envrun/dist/labels.js"() {
     "use strict";
@@ -33156,6 +33407,7 @@ var init_labels = __esm({
         return this.#samples;
       }
     };
+    LEAK_STATES = ["clean", "leak", "inconclusive", "unobserved"];
   }
 });
 
@@ -33640,7 +33892,7 @@ function acquireLocalLease(runId) {
       observed: false,
       census: { containers: [], volumes: [], networks: [] },
       unobservedReason: RELEASED_LEASE_CENSUS_REASON
-    } : { observed: true, census: census(docker3, label), unobservedReason: null }),
+    } : censusReport(docker3, label)),
     publishPreview: (req) => startPreview({ ...req, docker: docker3 }),
     release: () => {
       if (released) {
@@ -33760,6 +34012,17 @@ caused by: ${frame}`;
   }
   return frames === 0 ? null : out;
 }
+function imageVariantFor(spec) {
+  if (spec.runtime !== "jvm")
+    return void 0;
+  const callsGradle = /(?:^|[\s;&|(])gradle(?=\s|$)/;
+  return [spec.installCommand, spec.testCommand].some((c) => c != null && callsGradle.test(c)) ? "gradle" : void 0;
+}
+function shapeFor(runtime, variant) {
+  if (runtime === "jvm" && variant === "gradle")
+    return JVM_GRADLE_IMAGE;
+  return RUNTIME_IMAGES[runtime];
+}
 function atLeast(a, b) {
   const left = a.split(".").map(Number);
   const right = b.split(".").map(Number);
@@ -33772,19 +34035,19 @@ function atLeast(a, b) {
   }
   return true;
 }
-function imageForRuntime(runtime, override, version2) {
+function imageForRuntime(runtime, override, version2, variant) {
   if (override)
     return override;
-  const shape = RUNTIME_IMAGES[runtime];
+  const shape = shapeFor(runtime, variant);
   if (!shape) {
-    throw new RunRefusalError(`no container image is mapped for runtime ${JSON.stringify(runtime)}. Refusing to run it in the Node image: a missing interpreter surfaces as "command not found", which the classifier reads as tests-failed \u2014 a false red blamed on the repo.`);
+    throw new RunRefusalError(`no container image is mapped for runtime ${JSON.stringify(runtime)}. Refusing to run it in the Node image: a bare "command not found" exits 127, which classifyVerification already owns as ours \u2014 but a test script that RUNS and fails inside on the missing tool exits with its own status and prints to stdout, and that falls through to tests-failed \u2014 a false red blamed on the repo.`);
   }
   if (version2 === void 0 || version2 === null)
     return unversionedImage(shape);
   if (!TAG_VERSION.test(version2)) {
     throw new RunRefusalError(`runtime version ${JSON.stringify(version2)} is not a bare version, so no image tag can be built from it. Refusing rather than booting the default: the repo asked for a version, and supplying a different one silently is what TERM-643 fixed.`);
   }
-  return `${shape.repository}:${version2}${shape.suffix}`;
+  return `${shape.repository}:${shape.prefix ?? ""}${version2}${shape.suffix}`;
 }
 function setManifestProbe(probe) {
   const previous = manifestProbe;
@@ -33797,10 +34060,10 @@ function imageDefinitelyAbsent(image) {
     return false;
   return /manifest unknown|no such manifest/i.test(res.output);
 }
-function resolvePublishedImage(image, runtime, version2) {
+function resolvePublishedImage(image, runtime, version2, variant) {
   if (!imageDefinitelyAbsent(image))
     return image;
-  const shape = RUNTIME_IMAGES[runtime];
+  const shape = shapeFor(runtime, variant);
   if (shape && shape.declaredIsFloor && atLeast(shape.defaultVersion, version2)) {
     return unversionedImage(shape);
   }
@@ -33808,18 +34071,19 @@ function resolvePublishedImage(image, runtime, version2) {
 }
 function resolveImageForSpec(spec, override) {
   const declared = spec.runtimeVersion;
-  const image = imageForRuntime(spec.runtime, override, declared);
+  const variant = imageVariantFor(spec);
+  const image = imageForRuntime(spec.runtime, override, declared, variant);
   const constructed = (() => {
     if (declared === null)
       return null;
     try {
-      return imageForRuntime(spec.runtime, void 0, declared);
+      return imageForRuntime(spec.runtime, void 0, declared, variant);
     } catch {
       return null;
     }
   })();
   if (constructed !== null && image === constructed && declared !== null) {
-    return resolvePublishedImage(image, spec.runtime, declared);
+    return resolvePublishedImage(image, spec.runtime, declared, variant);
   }
   return image;
 }
@@ -33846,12 +34110,22 @@ function assertVenueOwnerDeclared(lease) {
     return;
   throw new RunRefusalError("this venue did not say which account owns the tree it staged, so the guest would run under this machine's uid and could not write its own clone. We refuse rather than report that permission error as the repo's tests failing.");
 }
+function refuseUnbuildableSpec(spec) {
+  if (spec.runtime !== "jvm" || spec.installCommand !== null || spec.testCommand !== null)
+    return;
+  const why = spec.unresolved.find((r) => r.kind === "no-test-command")?.detail;
+  if (why === void 0) {
+    throw new EnvRunError("internal: a jvm spec with no test command carries no no-test-command reason");
+  }
+  throw new RunRefusalError(`refusing to run this repository: ${why}.`);
+}
 async function runEnvironmentSpec(req) {
   const startedAt = Date.now();
   const containment = req.lease.containment;
   if (containment.kind !== "container") {
     throw new EnvRunError(`phase 2 requires the container tier, got ${containment.kind}. Refusing: a container phase that silently ran under seatbelt would make every container claim vacuous.`);
   }
+  refuseUnbuildableSpec(req.spec);
   assertVenueOwnerDeclared(req.lease);
   const image = resolveImageForSpec(req.spec, req.image);
   const { jail, tmp } = req;
@@ -33894,9 +34168,10 @@ async function runEnvironmentSpec(req) {
         installOk: false
       };
     } else if (req.spec.testCommand === null) {
+      const why = req.spec.unresolved.find((r) => r.kind === "no-test-command")?.detail;
       result = {
         outcome: "no-tests-observed",
-        note: "the spec derived no test command, so nothing was executed: nothing failed and nothing ran. Certain, not inferred \u2014 no command was ever invoked.",
+        note: "the spec derived no test command, so nothing was executed: nothing failed and nothing ran. Certain, not inferred \u2014 no command was ever invoked." + (why === void 0 ? "" : ` Why: ${why}.`),
         installOk: true
       };
     } else {
@@ -33919,7 +34194,7 @@ async function runEnvironmentSpec(req) {
         labels,
         timeoutMs: req.testTimeoutMs ?? 9e5
       });
-      const verdict = classifyVerification(toExecution(test));
+      const verdict = classifyVerification({ ...toExecution(test), runtime: req.spec.runtime });
       result = { outcome: verdict.outcome, note: verdict.reason, installOk: true };
     }
   } finally {
@@ -33933,6 +34208,10 @@ async function runEnvironmentSpec(req) {
     volumes: [],
     networks: []
   };
+  const observation = afterReport ?? {
+    observed: false,
+    unobservedReason: "the run carried no label, so there was nothing to count by"
+  };
   return {
     outcome: result.outcome,
     tier: "container",
@@ -33941,7 +34220,7 @@ async function runEnvironmentSpec(req) {
     test,
     installOk: result.installOk,
     counts: test ? readCounts(test.stdout, test.stderr) : null,
-    leaks: judgeLeaks(peak, after),
+    leaks: judgeLeaks(peak, after, observation),
     note: result.note,
     wallMs: Date.now() - startedAt
   };
@@ -33991,7 +34270,7 @@ async function runStep(containment, r) {
     wallMs: Date.now() - startedAt
   };
 }
-var EnvRunError, RunRefusalError, MAX_CAUSE_FRAMES, CHAIN_UNREADABLE, CHAIN_TOO_DEEP, RUNTIME_IMAGES, unversionedImage, TAG_VERSION, dockerManifestProbe, manifestProbe, MISSING_IMAGE_SHAPE;
+var EnvRunError, RunRefusalError, MAX_CAUSE_FRAMES, CHAIN_UNREADABLE, CHAIN_TOO_DEEP, RUNTIME_IMAGES, JVM_GRADLE_IMAGE, unversionedImage, TAG_VERSION, dockerManifestProbe, manifestProbe, MISSING_IMAGE_SHAPE;
 var init_execute = __esm({
   "../../packages/envrun/dist/execute.js"() {
     "use strict";
@@ -34028,9 +34307,66 @@ var init_execute = __esm({
       },
       go: { repository: "golang", suffix: "-bookworm", defaultVersion: "1.23", declaredIsFloor: true },
       ruby: { repository: "ruby", suffix: "-bookworm", defaultVersion: "3.3", declaredIsFloor: false },
-      rust: { repository: "rust", suffix: "-bookworm", defaultVersion: "1", declaredIsFloor: true }
-    };
-    unversionedImage = (shape) => `${shape.repository}:${shape.defaultVersion}${shape.suffix}`;
+      rust: { repository: "rust", suffix: "-bookworm", defaultVersion: "1", declaredIsFloor: true },
+      /**
+       * TERM-1139. `dotnet` was unmapped alongside `jvm`, and the recorded reason was that
+       * neither had "a single obvious base image (gradle vs maven, sdk vs runtime)". That
+       * reason holds for jvm and it does NOT hold here, which is why only this half moved.
+       *
+       * "sdk vs runtime" answers itself: the derived commands are `dotnet restore` and
+       * `dotnet test`, and neither exists on the runtime image. There is no second build
+       * tool competing for the slot the way maven and gradle compete for jvm's — and since
+       * no official image carries both of those, jvm genuinely cannot be served by one key.
+       *
+       * MEASURED, not chosen by tag: `mcr.microsoft.com/dotnet/sdk:8.0` carries `git` and
+       * `dotnet` (881MB). `git` is the property the whole `image-tooling-live` test exists
+       * for, and `eclipse-temurin:21-jdk` was rejected here for lacking it.
+       *
+       * The tag shape fits without touching the builder: the SDK publishes a tag per
+       * version, so `repository:VERSION` is a real image at every version envspec can
+       * derive, with no suffix. That is NOT true of the maven images, where the leading
+       * tag component is maven's version and Java's sits in the suffix.
+       *
+       * `declaredIsFloor` is true on the same reasoning as go and rust: an SDK builds
+       * older target frameworks, so booting 8.0 for a repo asking 6.0 is the supported
+       * case rather than a substitution. A repo asking for something NEWER than our
+       * default still refuses, which is where TERM-643 put that line.
+       */
+      dotnet: {
+        repository: "mcr.microsoft.com/dotnet/sdk",
+        suffix: "",
+        defaultVersion: "8.0",
+        declaredIsFloor: true
+      },
+      /**
+       * TERM-1122. Maven's image, and the one a Gradle WRAPPER repo gets too: the wrapper
+       * downloads its own Gradle, so it needs a JDK and nothing else. MEASURED
+       * 2026-09-18: `maven:3.9-eclipse-temurin-21` carries `git`, `mvn` and JDK 21 on
+       * Ubuntu 24.04, which is why this is not `eclipse-temurin` (no `git`, rejected
+       * under TERM-1139). The JDK sits AFTER maven's own version in the tag, hence
+       * `prefix`, and the major is all envspec derives (`javaMajor`).
+       *
+       * `declaredIsFloor`: a JDK builds for older `--release` targets, so a repo asking
+       * for 16, which has no image, runs on 21. A Gradle toolchain is stricter than a
+       * floor and asks for its exact JDK; Gradle's refusal on the wrong one reads as
+       * ours (`classify.ts`, `isOfflineBuildGap`), never as the repo's.
+       */
+      jvm: {
+        repository: "maven",
+        prefix: "3.9-eclipse-temurin-",
+        suffix: "",
+        defaultVersion: "21",
+        declaredIsFloor: true
+      }
+    };
+    JVM_GRADLE_IMAGE = {
+      repository: "gradle",
+      prefix: "jdk",
+      suffix: "",
+      defaultVersion: "21",
+      declaredIsFloor: true
+    };
+    unversionedImage = (shape) => `${shape.repository}:${shape.prefix ?? ""}${shape.defaultVersion}${shape.suffix}`;
     TAG_VERSION = /^\d+(?:\.\d+){0,2}$/;
     dockerManifestProbe = (image) => {
       const res = spawnSync5("docker", ["manifest", "inspect", image], {
@@ -34722,14 +35058,31 @@ function answerDidItPass(r) {
   const passed = r.status === "verified" && r.outcome !== null && isGreen(r.outcome);
   return { passed, summary: renderVerdictLine(r), lookAt: r.preview?.url ?? null };
 }
-var RUN_TEST_COMMAND_SOURCES, RUN_RESULT_SCHEMA, RUN_RESULT_FIELDS, RENDER_NONE, FIELD_VIEWS;
+function exitCodeFor(r) {
+  if (r.status === "refused")
+    return 2;
+  if (r.outcome === null)
+    return 2;
+  return OUTCOME_EXIT_CODES[r.outcome];
+}
+var RUN_TEST_COMMAND_SOURCES, RUN_IMAGE_SOURCES, RUN_RESULT_SCHEMA, RUN_RESULT_FIELDS, RENDER_NONE, FIELD_VIEWS, OUTCOME_EXIT_CODES;
 var init_result = __esm({
   "../../packages/envrun/dist/result.js"() {
     "use strict";
     init_dist2();
     init_classify2();
     init_venueDescriptor();
-    RUN_TEST_COMMAND_SOURCES = [...TEST_COMMAND_SOURCES, "developer-declared"];
+    RUN_TEST_COMMAND_SOURCES = [
+      ...TEST_COMMAND_SOURCES,
+      "developer-declared",
+      "operator-declared"
+    ];
+    RUN_IMAGE_SOURCES = [
+      "detected",
+      "none",
+      "operator-declared",
+      "developer-declared"
+    ];
     RUN_RESULT_SCHEMA = "terminalhire.verification-run/1";
     RUN_RESULT_FIELDS = [
       "schema",
@@ -34754,7 +35107,9 @@ var init_result = __esm({
       "preview",
       "containerImage",
       "containerImageDigest",
+      "imageSource",
       "leaksClean",
+      "leakState",
       "venue"
     ];
     RENDER_NONE = null;
@@ -34786,12 +35141,42 @@ var init_result = __esm({
       preview: (r) => r.preview === null ? null : `preview      ${r.preview.url}`,
       containerImage: (r) => r.containerImage === null ? null : `image        ${r.containerImage}`,
       containerImageDigest: (r) => r.containerImageDigest === null ? null : `image digest ${r.containerImageDigest}`,
-      leaksClean: (r) => r.leaksClean === null ? null : r.leaksClean ? null : "WARNING      labelled Docker objects survived teardown",
+      // Shown only when a human chose the environment. `detected` is the ordinary case and
+      // saying so on every run would train the reader to skip the line that matters.
+      imageSource: (r) => r.imageSource === "detected" || r.imageSource === "none" ? null : `image source ${r.imageSource} (not signed)`,
+      // Printed through `leakState` below, which knows WHY a false is false. Rendering both would
+      // print the leak warning on a run where we merely could not look (TERM-1144).
+      leaksClean: RENDER_NONE,
+      // Silent when clean and when refused, as the boolean's line was. The two not-a-leak states
+      // get their own sentence, because "we could not check" read as "we found a leak" is the
+      // exact confusion this field exists to end.
+      leakState: (r) => {
+        switch (r.leakState) {
+          case null:
+          case "clean":
+            return null;
+          case "leak":
+            return "WARNING      labelled Docker objects survived teardown";
+          case "inconclusive":
+            return "leak check   inconclusive \u2014 no labelled container was seen while the run was live, so finding nothing afterwards proves nothing";
+          case "unobserved":
+            return "leak check   not taken \u2014 we could not check what was left after teardown";
+        }
+      },
       // Absent on most runs, so it prints only when there is something to say. Silence
       // here is the honest rendering of "no venue answered": a placeholder line would
       // invite a reader to treat an unanswered probe as a described venue.
       venue: (r) => r.venue === null ? null : renderVenueLine(r.venue)
     };
+    OUTCOME_EXIT_CODES = {
+      completed: 0,
+      "tests-failed": 1,
+      "no-tests-observed": 1,
+      "budget-exceeded": 1,
+      "counts-unparsed": 2,
+      "test-command-unavailable": 2,
+      "environment-exhausted": 2
+    };
   }
 });
 
@@ -34912,12 +35297,23 @@ function toAcceptancePredicate(pair, opts = {}) {
     if (why !== null)
       return refuse3("test-command-origin-unattested", `the ${side} run ${why}`);
   }
-  if (patched.testCommandSource === "developer-declared") {
-    return refuse3("test-command-origin-unattested", "the developer supplied the test command (unreachable \u2014 the source rules above cover it)");
+  if (patched.testCommandSource === "developer-declared" || patched.testCommandSource === "operator-declared") {
+    return refuse3("test-command-origin-unattested", `${patched.testCommandSource === "developer-declared" ? "the developer" : "an operator"} supplied the test command (unreachable \u2014 the source rules above cover it)`);
   }
   if (baseline.testCommandSource !== patched.testCommandSource) {
     return refuse3("test-command-origin-unattested", `the pair disagrees on where the command came from: baseline ${baseline.testCommandSource}, patched ${patched.testCommandSource}. One signed value cannot describe both.`);
   }
+  for (const [side, source, image] of [
+    ["patched", patched.imageSource, patched.containerImage],
+    ["baseline", baseline.imageSource, baseline.containerImage]
+  ]) {
+    const why = IMAGE_SOURCE_IS_SIGNABLE[source](image);
+    if (why !== null)
+      return refuse3("image-origin-unattested", `the ${side} run ${why}`);
+  }
+  if (baseline.imageSource !== patched.imageSource) {
+    return refuse3("image-origin-unattested", `the pair disagrees on where the image came from: baseline ${baseline.imageSource}, patched ${patched.imageSource}. The environment is part of what the statement says was held constant.`);
+  }
   if (baseline.containerImage !== patched.containerImage) {
     return refuse3("pair-disagrees-on-image", `baseline ran in ${String(baseline.containerImage)} and patched in ${String(patched.containerImage)}. The signed measurement names one image, so a pair from two environments would attribute to the patch whatever the image changed.`);
   }
@@ -34974,7 +35370,7 @@ function signRunStatement(predicate, privateKey, keyid) {
   const statement = createAcceptanceStatement(predicate);
   return { statement, envelope: signStatement(statement, privateKey, keyid) };
 }
-var OUTCOME_TO_BUDGET, BASELINE_IS_A_VERDICT, CONTRADICTS_COUNTS, SOURCE_IS_SIGNABLE, ATTEST_REFUSAL_REASONS, refuse3, LOCAL_MEASUREMENT_PREFIX, REFERENCE_DOMAIN_COMPONENT, REFERENCE_DOMAIN_NAME, REFERENCE_IPV6, REFERENCE_DOMAIN, REFERENCE_PATH_COMPONENT, REPO_DIGEST_RE;
+var OUTCOME_TO_BUDGET, BASELINE_IS_A_VERDICT, CONTRADICTS_COUNTS, SOURCE_IS_SIGNABLE, IMAGE_SOURCE_IS_SIGNABLE, ATTEST_REFUSAL_REASONS, refuse3, LOCAL_MEASUREMENT_PREFIX, REFERENCE_DOMAIN_COMPONENT, REFERENCE_DOMAIN_NAME, REFERENCE_IPV6, REFERENCE_DOMAIN, REFERENCE_PATH_COMPONENT, REPO_DIGEST_RE;
 var init_attestation2 = __esm({
   "../../packages/envrun/dist/attestation.js"() {
     "use strict";
@@ -35030,11 +35426,25 @@ var init_attestation2 = __esm({
       // The party under verification chose it, and no signed member can say so. Per ADR-005
       // Decision 2, emit nothing rather than pick the closest word.
       "developer-declared": () => "had its test command supplied by the developer whose work is under verification, and the signed vocabulary has no member for that. `founder-declared` would attribute the choice to the other party; `detected` would claim the repo chose it. Both are false.",
+      // US, out of band, per posting — the twin of `IMAGE_SOURCE_IS_SIGNABLE['operator-declared']`
+      // and refusing for the same reason. `founder-declared` is the nearest signed member and it
+      // is still false: the poster did not choose this, we did, and signing our own choice under
+      // the counterparty's name is the specific false attribution the `developer-declared` entry
+      // above exists to refuse. Decision 2 — emit nothing rather than pick the closest word.
+      "operator-declared": () => "had its test command chosen by an operator out of band, and the signed vocabulary has no member for that. Signing it would present a hand-picked command as one the repository chose for itself.",
       // `none` means nobody chose a command, so a command beside it is a contradiction. Shadowed
       // today — `thrun.ts` sets `none` only when the derived command is null, and `no-test-command`
       // fires first — but that coupling runs through `runEnvironmentSpec` and lives in no type.
       none: (command) => command === null ? null : `records its command source as \`none\` \u2014 nobody chose one \u2014 beside the command ${JSON.stringify(command)}`
     };
+    IMAGE_SOURCE_IS_SIGNABLE = {
+      detected: () => null,
+      "operator-declared": () => "had its container image chosen by an operator out of band, and the signed vocabulary has no member for that. Signing it would present a hand-picked environment as the one the runtime mapping selected.",
+      "developer-declared": () => "had its container image supplied by the developer whose work is under verification. A chosen interpreter turns a red suite green as surely as a chosen test command.",
+      // `none` means no image was booted, so an image name beside it is a contradiction — the
+      // `SOURCE_IS_SIGNABLE.none` argument, applied to the other field.
+      none: (image) => image === null ? null : `records its image source as \`none\` \u2014 nothing was booted \u2014 beside the image ${JSON.stringify(image)}`
+    };
     ATTEST_REFUSAL_REASONS = [
       "our-environment-failed",
       "run-was-refused",
@@ -35076,7 +35486,11 @@ var init_attestation2 = __esm({
       // The signed triple must be reproducible from what it names — see the guard.
       "patch-binding-incomplete",
       "outcome-contradicts-counts",
-      "test-command-origin-unattested"
+      "test-command-origin-unattested",
+      // The environment half of the pair above. `pair-disagrees-on-image` compares image NAMES;
+      // this one asks who CHOSE the name, which no comparison of the two halves can reveal when
+      // both were handed the same override.
+      "image-origin-unattested"
     ];
     refuse3 = (reason, detail) => ({
       ok: false,
@@ -35580,13 +35994,20 @@ function gcpBootArgv(p) {
     // steal". Attaching an account removes that, so the safety now rests on two things,
     // and this change MUST land together with proof #2 — never ahead of it:
     //
-    //   1. `--no-scopes` + ZERO project roles bound the BLAST RADIUS of a lifted token.
-    //      No scopes → the OAuth access-token endpoint serves nothing (measured,
-    //      TERM-706); zero roles → the token authorizes no GCP API. But it is NOT
-    //      valueless: it is the attestation evidence itself, so a lifted token still
-    //      authorizes a false claim about WHERE a run happened (the steal-a-true-token
-    //      attack in the item-2 spike). `--no-scopes` stays because it removes lateral
-    //      GCP access; it does not make losing the identity token cheap.
+    //   1. `--no-scopes` and a NARROW grant set bound the BLAST RADIUS of a lifted
+    //      token. No scopes → the OAuth access-token endpoint serves nothing
+    //      (measured, TERM-706). This said "ZERO project roles" until 2026-09-18, and
+    //      that was never true of the account we ship: measured live, `venue-identity@`
+    //      holds `roles/confidentialcomputing.workloadUser` on the project and
+    //      `roles/artifactregistry.reader` on the `venue-images` repository alone —
+    //      the same two grants the Confidential Space note below already named, so this
+    //      file contradicted itself. Neither reaches a second repository, a bucket or
+    //      another VM, which is the property "zero roles" was reaching for. But the
+    //      token is NOT valueless: it is the attestation evidence itself, so a lifted
+    //      token still authorizes a false claim about WHERE a run happened (the
+    //      steal-a-true-token attack in the item-2 spike). `--no-scopes` stays because
+    //      it removes lateral GCP access; it does not make losing the identity token
+    //      cheap.
     //   2. The untrusted code cannot reach the metadata server to lift the token at all.
     //      The test step runs `--network=none`; the install step runs on an `--internal`
     //      network whose only egress is a CONNECT-only, registry-allowlisted proxy that
@@ -37066,11 +37487,7 @@ function makeLease(p) {
       }
       try {
         check("counting what the run left behind");
-        return Promise.resolve({
-          observed: true,
-          census: census(p.docker, label),
-          unobservedReason: null
-        });
+        return Promise.resolve(censusReport(p.docker, label));
       } catch (err) {
         return Promise.resolve({
           observed: false,
@@ -37338,7 +37755,7 @@ function localDockerPlacement() {
     kind: "local-docker",
     refusal: null,
     venue: () => localVenue(),
-    imageFor: (runtime, override, version2) => imageForRuntime(runtime, override, version2)
+    imageFor: (runtime, override, version2, variant) => imageForRuntime(runtime, override, version2, variant)
   };
 }
 function hostedPoolPlacement() {
@@ -37346,7 +37763,7 @@ function hostedPoolPlacement() {
     kind: "hosted-pool",
     refusal: null,
     venue: () => hostedVenue(),
-    imageFor: (runtime, override, version2) => imageForRuntime(runtime, override, version2)
+    imageFor: (runtime, override, version2, variant) => imageForRuntime(runtime, override, version2, variant)
   };
 }
 function placementFor(kind) {
@@ -37911,6 +38328,9 @@ function detectRuntime(repo) {
   if (repo.listNames("").some((name) => /\.(?:csproj|fsproj|sln)$/.test(name))) {
     candidates.push("dotnet");
   }
+  if (candidates.length === 0 && repo.listFiles("").some((f) => f.endsWith(".java"))) {
+    candidates.push("jvm");
+  }
   return { runtime: candidates[0] ?? "unknown", candidates };
 }
 function readJsonObject(repo, path6) {
@@ -38058,6 +38478,11 @@ function basePythonInstallCommand(repo) {
   }
   return null;
 }
+function rehearse(command) {
+  const copy = '"$R/.terminalhire-rehearsal"';
+  const home = '"$R/.terminalhire-rehearsal-home"';
+  return `{ R="$HOME"; rm -rf ${copy} ${home}; mkdir -p ${home} && cp -R . ${copy} && (cd ${copy} && HOME=${home} GRADLE_USER_HOME="$R/.gradle" JAVA_TOOL_OPTIONS="$JAVA_TOOL_OPTIONS -Duser.home=$R/.terminalhire-rehearsal-home" ${command}); rm -rf ${copy} ${home}; true; }`;
+}
 function otherRuntimeCommands(repo, runtime) {
   switch (runtime) {
     case "go":
@@ -38085,10 +38510,21 @@ function otherRuntimeCommands(repo, runtime) {
     case "dotnet":
       return { install: "dotnet restore", test: "dotnet test" };
     case "jvm": {
-      if (repo.exists("pom.xml"))
-        return { install: "mvn -B dependency:go-offline", test: "mvn -B test" };
+      if (!JVM_BUILD_FILES.some((file) => repo.exists(file)))
+        return { install: null, test: null };
+      if (repo.exists("pom.xml")) {
+        return {
+          install: `mvn -B dependency:go-offline && ${rehearse('mvn -B test -Dmaven.test.failure.ignore=true -Dmaven.repo.local="$R/.m2/repository"')}`,
+          test: "mvn -B -o test"
+        };
+      }
       const wrapper = repo.exists("gradlew") ? "./gradlew" : "gradle";
-      return { install: `${wrapper} dependencies`, test: `${wrapper} test` };
+      return {
+        install: `${wrapper} dependencies && ${rehearse(`${wrapper} test --continue`)}`,
+        // `--no-build-cache`: the rehearsal above can fill Gradle's build cache, and a
+        // test task restored FROM-CACHE runs nothing and prints no count.
+        test: `${wrapper} test --offline --no-build-cache`
+      };
     }
     default:
       return { install: null, test: null };
@@ -38120,6 +38556,15 @@ function searchRuntimeVersion(repo, runtime) {
     push(".ruby-version", repo.readText(".ruby-version"));
   } else if (runtime === "dotnet") {
     push("global.json sdk.version", readStringField(readObjectField(readJsonObject(repo, "global.json"), "sdk"), "version"));
+  } else if (runtime === "jvm") {
+    const pom = repo.readText("pom.xml");
+    const gradle = repo.readText("build.gradle") ?? repo.readText("build.gradle.kts");
+    push("build.gradle toolchain languageVersion", javaMajor(matchFirst(gradle, /JavaLanguageVersion\.of\(\s*["']?(\d+)["']?\s*\)/) ?? matchFirst(gradle, /jvmToolchain\(\s*(\d+)\s*\)/)));
+    push(".java-version", javaMajor(repo.readText(".java-version")));
+    push("pom.xml maven.compiler.release", javaMajor(matchFirst(pom, /<maven\.compiler\.release>\s*([^<\s]+)\s*</)));
+    push("pom.xml java.version", javaMajor(matchFirst(pom, /<java\.version>\s*([^<\s]+)\s*</)));
+    push("pom.xml maven.compiler.source", javaMajor(matchFirst(pom, /<maven\.compiler\.source>\s*([^<\s]+)\s*</)));
+    push("build.gradle sourceCompatibility", javaMajor(matchFirst(gradle, /sourceCompatibility\s*=\s*JavaVersion\.VERSION_([\d_]+)/)?.replace("_", ".") ?? matchFirst(gradle, /sourceCompatibility\s*=\s*["']?([\d.]+)["']?/)));
   }
   let rangeFound = null;
   for (const source of sources) {
@@ -38133,13 +38578,21 @@ function searchRuntimeVersion(repo, runtime) {
   }
   return { version: null, searched: sources.map((s) => s.label), rangeFound };
 }
+function javaMajor(text) {
+  if (text === null)
+    return null;
+  const match2 = /^(?:1\.(\d+)|(\d+))(?:[._][\d_.]*)?$/.exec(text.trim());
+  if (match2 === null)
+    return null;
+  return match2[1] ?? match2[2] ?? null;
+}
 function matchFirst(text, pattern) {
   if (text === null)
     return null;
   const match2 = pattern.exec(text);
   return match2 === null ? null : match2[1];
 }
-var RUNTIME_MANIFESTS, MANIFEST_FILENAMES, NPM_PLACEHOLDER_TEST, REQUIREMENT_SPECIFIER, EXACT_VERSION;
+var RUNTIME_MANIFESTS, MANIFEST_FILENAMES, JVM_BUILD_FILES, NPM_PLACEHOLDER_TEST, REQUIREMENT_SPECIFIER, EXACT_VERSION;
 var init_manifest2 = __esm({
   "../../packages/envspec/dist/manifest.js"() {
     "use strict";
@@ -38153,6 +38606,7 @@ var init_manifest2 = __esm({
       { runtime: "dotnet", files: [] }
     ];
     MANIFEST_FILENAMES = RUNTIME_MANIFESTS.flatMap((m) => m.files).concat(["*.csproj", "*.fsproj", "*.sln"]).sort();
+    JVM_BUILD_FILES = ["build.gradle", "build.gradle.kts", "pom.xml"];
     NPM_PLACEHOLDER_TEST = /^echo\s+["']?Error:\s*no test specified["']?\s*&&\s*exit\s+1$/;
     REQUIREMENT_SPECIFIER = /^[A-Za-z0-9._-]+(\[[A-Za-z0-9._,-]+\])?([<>=!~]=?[A-Za-z0-9._*+-]+(,[<>=!~]=?[A-Za-z0-9._*+-]+)*)?$/;
     EXACT_VERSION = /^v?(\d+(?:\.\d+){0,2})$/;
@@ -38549,7 +39003,7 @@ function deriveFromReader(repo) {
       searched: MANIFEST_FILENAMES,
       detail: `no ecosystem manifest was found at the repo root (looked for ${MANIFEST_FILENAMES.join(", ")}), so the language runtime could not be identified`
     });
-  } else {
+  } else if (runtime !== "jvm" || JVM_BUILD_FILES.some((file) => repo.exists(file))) {
     derivedFrom.add("manifest");
   }
   if (detection.candidates.length > 1) {
@@ -38713,12 +39167,13 @@ function deriveRuntimeVersion(repo, runtime, job) {
   const setup = SETUP_ACTIONS[runtime];
   const searched = [];
   let rangeFound = null;
+  const pin = (raw) => runtime === "jvm" ? javaMajor(raw) : exactVersion(raw);
   if (job !== null && setup !== void 0) {
     const direct = findActionInput(job, setup.action, setup.input);
     if (direct !== null) {
       searched.push(`${job.file} ${setup.action} ${setup.input}`);
       const reduced = reduceExpression(direct.command, job.singletons);
-      const exact = exactVersion(reduced);
+      const exact = pin(reduced);
       if (exact !== null)
         return { value: exact, searched, rangeFound: null };
       if (reduced !== null)
@@ -38727,7 +39182,7 @@ function deriveRuntimeVersion(repo, runtime, job) {
     const viaFile = findActionInput(job, setup.action, setup.fileInput);
     if (viaFile !== null) {
       searched.push(`${job.file} ${setup.action} ${setup.fileInput} -> ${viaFile.command}`);
-      const exact = exactVersion(repo.readText(viaFile.command));
+      const exact = pin(repo.readText(viaFile.command));
       if (exact !== null)
         return { value: exact, searched, rangeFound: null };
     }
@@ -38752,6 +39207,8 @@ function testSearchPaths(runtime, workflowFiles) {
     paths.push("**/*_test.go");
   if (runtime === "ruby")
     paths.push("Gemfile", "Rakefile");
+  if (runtime === "jvm")
+    paths.push(...JVM_BUILD_FILES);
   if (runtime === "unknown")
     paths.push(...MANIFEST_FILENAMES);
   return [...new Set(paths)].sort();
@@ -38769,6 +39226,9 @@ function describeTestSearch(repo, runtime, workflowFiles) {
   if (runtime === "python") {
     return `${ciPart}, and nothing in the repo names a test runner \u2014 no \`[tool.pytest.ini_options]\`, no \`pytest.ini\`, and no pytest dependency in \`pyproject.toml\` or a requirements file`;
   }
+  if (runtime === "jvm" && !JVM_BUILD_FILES.some((file) => repo.exists(file))) {
+    return `${ciPart}, and the repo has Java sources but no build file (${JVM_BUILD_FILES.join(", ")}), so there is no build to run tests with. Compiling the sources with \`javac\` alone would run no tests`;
+  }
   return `${ciPart}, and no ${runtime} test convention applies to this tree`;
 }
 function installSearchPaths(runtime, workflowFiles) {
@@ -38777,6 +39237,8 @@ function installSearchPaths(runtime, workflowFiles) {
     paths.push("package-lock.json", "pnpm-lock.yaml", "yarn.lock");
   if (runtime === "python")
     paths.push("poetry.lock", "pyproject.toml", "requirements.txt", "uv.lock");
+  if (runtime === "jvm")
+    paths.push(...JVM_BUILD_FILES);
   if (runtime === "unknown")
     paths.push(...MANIFEST_FILENAMES);
   return [...new Set(paths)].sort();
@@ -38855,12 +39317,41 @@ var init_dist3 = __esm({
   }
 });
 
+// ../../packages/envrun/dist/gradleTestSummary.js
+import { mkdirSync as mkdirSync7, writeFileSync as writeFileSync23 } from "fs";
+import { join as join42 } from "path";
+function stageGradleTestSummary(jailHome) {
+  const dir = join42(jailHome, ".gradle", "init.d");
+  mkdirSync7(dir, { recursive: true });
+  writeFileSync23(join42(dir, "terminalhire-test-summary.gradle"), GRADLE_TEST_SUMMARY_INIT);
+}
+var GRADLE_TEST_MARKER, GRADLE_TEST_SUMMARY_INIT;
+var init_gradleTestSummary = __esm({
+  "../../packages/envrun/dist/gradleTestSummary.js"() {
+    "use strict";
+    GRADLE_TEST_MARKER = "terminalhire-gradle-tests:";
+    GRADLE_TEST_SUMMARY_INIT = `// Written by terminalhire (TERM-1122): prints each Test task's counts, because
+// Gradle prints none when every test passes.
+allprojects {
+  tasks.withType(Test).configureEach { task ->
+    def label = task.path
+    task.afterSuite { desc, result ->
+      if (desc.parent == null) {
+        println "${GRADLE_TEST_MARKER} task=\${label} total=\${result.testCount} passed=\${result.successfulTestCount} failed=\${result.failedTestCount} skipped=\${result.skippedTestCount}"
+      }
+    }
+  }
+}
+`;
+  }
+});
+
 // ../../packages/envrun/dist/thrun.js
 import { execFileSync, spawnSync as spawnSync7 } from "child_process";
-import { existsSync as existsSync19, mkdirSync as mkdirSync7, mkdtempSync as mkdtempSync4, rmSync as rmSync11 } from "fs";
+import { existsSync as existsSync19, mkdirSync as mkdirSync8, mkdtempSync as mkdtempSync4, rmSync as rmSync11 } from "fs";
 import { randomUUID as randomUUID3 } from "crypto";
 import { tmpdir as tmpdir4 } from "os";
-import { join as join42 } from "path";
+import { join as join43 } from "path";
 function git(repoDir, args5, allowNonZero = false) {
   const res = spawnSync7("git", [...args5], {
     cwd: repoDir,
@@ -38875,7 +39366,7 @@ function git(repoDir, args5, allowNonZero = false) {
   return res.stdout ?? "";
 }
 function collectWorkingDiff(repoDir, opts = {}) {
-  if (!existsSync19(join42(repoDir, ".git"))) {
+  if (!existsSync19(join43(repoDir, ".git"))) {
     throw new ThRunError(`${repoDir} is not a git checkout (no .git). \`th run\` ships the working diff, so it needs a repository to read one from.`);
   }
   const headSha = git(repoDir, ["rev-parse", "HEAD"]).trim();
@@ -39023,7 +39514,7 @@ function credentialFreeHome() {
     return credentialFreeHomeDir;
   let made;
   try {
-    made = mkdtempSync4(join42(tmpdir4(), "th-run-nohome-"));
+    made = mkdtempSync4(join43(tmpdir4(), "th-run-nohome-"));
   } catch (err) {
     throw new RunRefusalError("could not create the empty directory this clone uses as its home, so the clone would read the credentials on this machine instead. That is our environment failing, not your tests: check that the temp directory is writable.", { cause: err });
   }
@@ -39098,7 +39589,7 @@ function cloneTargetAtUnguarded(opts) {
   if (persisted !== null) {
     throw new RunRefusalError(`refusing to clone from a URL carrying ${persisted}: \`git remote add\` writes the source verbatim into .git/config, which is mounted where the repo\u2019s own test command runs. Fetch with the credential out of band so it is never written to disk \u2014 this runner takes one as an HTTP header, which is never persisted.`);
   }
-  mkdirSync7(opts.dest, { recursive: true });
+  mkdirSync8(opts.dest, { recursive: true });
   const runOut = (args5) => execFileSync("git", [...gitConfigArgs(), ...args5], {
     cwd: opts.dest,
     encoding: "utf8",
@@ -39137,7 +39628,7 @@ function cloneTargetAtUnguarded(opts) {
 }
 function scrubCloneSource(dest, run32) {
   run32(["remote", "remove", "origin"]);
-  rmSync11(join42(dest, ".git", "FETCH_HEAD"), { force: true });
+  rmSync11(join43(dest, ".git", "FETCH_HEAD"), { force: true });
 }
 function publishableTarget(url) {
   if (separatorInTarget(url) !== null)
@@ -39276,12 +39767,18 @@ function refusedRun(fields) {
     treeDigest: null,
     baselinePatchSha256: null,
     testCommandSource: "none",
+    // Nothing was booted, so nobody chose an image. Same reasoning as `containerImage: null`
+    // below: it must not read as an image we picked and cannot name.
+    imageSource: "none",
     boundaryRefusals: fields.boundaryRefusals,
     touchedPaths: fields.touchedPaths,
     preview: null,
     containerImage: null,
     containerImageDigest: null,
     leaksClean: null,
+    // Null for the same reason, and never `unobserved`: that word says we tried to take a
+    // census and could not, and here there was nothing to take one of (TERM-1144).
+    leakState: null,
     // A refused run never held a lease, so there is no venue to describe. Same
     // reasoning as `leaksClean` above: null because nothing happened, and it must
     // not read as a venue we looked at and could not name.
@@ -39509,10 +40006,10 @@ async function runVerification(req, ctx) {
       venueIdentity: null
     };
   }
-  const stage = join42(req.scratchRoot, runId);
-  const cloneDir = join42(stage, "clone");
-  const scratch = join42(stage, "scratch");
-  mkdirSync7(scratch, { recursive: true });
+  const stage = join43(req.scratchRoot, runId);
+  const cloneDir = join43(stage, "clone");
+  const scratch = join43(stage, "scratch");
+  mkdirSync8(scratch, { recursive: true });
   assertSafeTargetSha(req.targetSha);
   progress("clone", `${publishableTarget(req.targetRepo)} @ ${req.targetSha.slice(0, 12)}`);
   cloneTargetAt({
@@ -39539,7 +40036,8 @@ async function runVerification(req, ctx) {
   const derived = deriveEnvironmentSpec(cloneDir);
   const spec = req.testCommandOverride === void 0 ? derived : { ...derived, testCommand: req.testCommandOverride };
   progress("derive", `runtime=${spec.runtime} install=${String(spec.installCommand)} test=${String(spec.testCommand)}`);
-  const image = placement.imageFor(spec.runtime, req.image, spec.runtimeVersion);
+  refuseUnbuildableSpec(spec);
+  const image = placement.imageFor(spec.runtime, req.image, spec.runtimeVersion, imageVariantFor(spec));
   const resolved = await resolveLease(placement, runId);
   if (!resolved.ok) {
     return {
@@ -39574,10 +40072,12 @@ async function runVerification(req, ctx) {
   const lease = resolved.lease;
   try {
     buildJail(scratch);
+    if (spec.runtime === "jvm")
+      stageGradleTestSummary(localJailPaths(scratch).jail);
     const venuePaths = await lease.stage({
       cloneDir,
       scratchRoot: scratch,
-      previewDir: join42(stage, "preview"),
+      previewDir: join43(stage, "preview"),
       // On a dispatched run the commit is the statement of what was tested, so
       // it rides with the tree and the venue seam refuses a tree that is not
       // that commit (design §6 item 4, TERM-892 — the guard lives in
@@ -39624,7 +40124,7 @@ async function runVerification(req, ctx) {
       // that `founder-declared` (as this did for one review round) signs the counterparty's
       // name onto the developer's choice, which is worse than laundering it as `detected`:
       // it is a specific false attribution inside a field a reviewer trusts.
-      testCommandSource: req.testCommandOverride !== void 0 ? req.testCommandOverrideOrigin === "founder" ? "founder-declared" : "developer-declared" : derived.testCommand === null ? "none" : "detected",
+      testCommandSource: req.testCommandOverride !== void 0 ? req.testCommandOverrideOrigin === "founder" ? "founder-declared" : req.testCommandOverrideOrigin === "operator" ? "operator-declared" : "developer-declared" : derived.testCommand === null ? "none" : "detected",
       boundaryRefusals: [],
       touchedPaths: pre.touchedPaths,
       preview: null,
@@ -39634,7 +40134,14 @@ async function runVerification(req, ctx) {
       // that measures one; a run without it is recordable but not attestable —
       // `toAcceptancePredicate` refuses `missing-image-digest` (TERM-893).
       containerImageDigest: null,
+      // The image half of the provenance pair above. `detected` means the runtime mapping
+      // chose the environment; an override names the human. Defaulting an unstated origin to
+      // `developer-declared` is deliberate and matches `testCommandSource`: `th run --image`
+      // runs on the developer's machine, judging the developer's work, so attributing it to
+      // the operator would sign our name onto their choice.
+      imageSource: req.image === void 0 ? "detected" : req.imageOrigin === "operator" ? "operator-declared" : "developer-declared",
       leaksClean: verdict.leaks.clean,
+      leakState: verdict.leaks.state,
       // Built from the LEASE, over the client that ran the steps — never from
       // `req.placement`, which is a request. `venueDescriptor.ts` carries the
       // reasoning and the #735 failure that makes the distinction load-bearing.
@@ -39692,6 +40199,7 @@ var init_thrun = __esm({
     init_execute();
     init_placement();
     init_venue();
+    init_gradleTestSummary();
     init_venueDescriptor();
     init_result();
     ThRunError = class extends Error {
@@ -39935,7 +40443,7 @@ var init_dbplan = __esm({
 // ../../packages/envrun/dist/dbstack.js
 import { spawnSync as spawnSync8 } from "child_process";
 import { randomBytes as randomBytes12 } from "crypto";
-import { mkdirSync as mkdirSync8 } from "fs";
+import { mkdirSync as mkdirSync9 } from "fs";
 function installCommandFor(runner) {
   switch (runner) {
     case "sql":
@@ -40166,7 +40674,7 @@ function startDatabase(req) {
     if (!ready.ok) {
       throw new DbStackError(`INFRASTRUCTURE/INCONCLUSIVE: Postgres never accepted queries at 127.0.0.1:${String(creds.port)} within the readiness window: ${ready.detail}`);
     }
-    const query = (sql) => {
+    const query2 = (sql) => {
       const res = docker2([
         "exec",
         `--env=PGPASSWORD=${creds.password}`,
@@ -40214,7 +40722,7 @@ function startDatabase(req) {
       credentials: creds,
       image,
       readyMs: ready.ms,
-      query,
+      query: query2,
       runOnNetwork,
       teardown
     };
@@ -40277,8 +40785,8 @@ async function installLocalMigrationTooling(opts) {
     };
   }
   const { jail, tmp } = buildJail(opts.scratchRoot);
-  mkdirSync8(jail, { recursive: true });
-  mkdirSync8(tmp, { recursive: true });
+  mkdirSync9(jail, { recursive: true });
+  mkdirSync9(tmp, { recursive: true });
   const spec = {
     profile: "install",
     clone: opts.repoDir,
@@ -40573,6 +41081,7 @@ __export(dist_exports, {
   GOOGLE_JWKS_URL: () => GOOGLE_JWKS_URL,
   HostedVenueError: () => HostedVenueError,
   JWKS_FETCH_TIMEOUT_MS: () => JWKS_FETCH_TIMEOUT_MS,
+  LEAK_STATES: () => LEAK_STATES,
   LOCAL_MEASUREMENT_PREFIX: () => LOCAL_MEASUREMENT_PREFIX,
   LabelWatch: () => LabelWatch,
   MIN_GIT_VERSION_FOR_END_OF_OPTIONS: () => MIN_GIT_VERSION_FOR_END_OF_OPTIONS,
@@ -40589,6 +41098,7 @@ __export(dist_exports, {
   REDACTED_TARGET_SHA: () => REDACTED_TARGET_SHA,
   RELEASED_LEASE_CENSUS_REASON: () => RELEASED_LEASE_CENSUS_REASON,
   REPO_DIGEST_RE: () => REPO_DIGEST_RE,
+  RUN_IMAGE_SOURCES: () => RUN_IMAGE_SOURCES,
   RUN_LABEL_KEY: () => RUN_LABEL_KEY,
   RUN_RESULT_FIELDS: () => RUN_RESULT_FIELDS,
   RUN_RESULT_SCHEMA: () => RUN_RESULT_SCHEMA,
@@ -40605,6 +41115,7 @@ __export(dist_exports, {
   VENUE_GCLOUD_CONFIG: () => VENUE_GCLOUD_CONFIG,
   VENUE_SSH_USER: () => VENUE_SSH_USER,
   VENV_DIR: () => VENV_DIR,
+  VERIFICATION_OUTCOMES: () => VERIFICATION_OUTCOMES,
   VenueRollbackError: () => VenueRollbackError,
   acquireTransactionally: () => acquireTransactionally,
   alembicChainPosition: () => alembicChainPosition,
@@ -40618,6 +41129,7 @@ __export(dist_exports, {
   assertVenueOwnerDeclared: () => assertVenueOwnerDeclared,
   bookkeepingFor: () => bookkeepingFor,
   census: () => census,
+  censusReport: () => censusReport,
   censusTotal: () => censusTotal,
   classifyBootFailure: () => classifyBootFailure,
   classifyProbeFailure: () => classifyProbeFailure,
@@ -40637,6 +41149,7 @@ __export(dist_exports, {
   detectRunner: () => detectRunner,
   endOfOptionsUnsupported: () => endOfOptionsUnsupported,
   ensureVenueServiceCredentials: () => ensureVenueServiceCredentials,
+  exitCodeFor: () => exitCodeFor,
   failureSourceOf: () => failureSourceOf,
   findRunRefusal: () => findRunRefusal,
   gcpBootArgv: () => gcpBootArgv,
@@ -40651,6 +41164,7 @@ __export(dist_exports, {
   identityProbeCommand: () => identityProbeCommand,
   imageForRuntime: () => imageForRuntime,
   imageRepo: () => imageRepo,
+  imageVariantFor: () => imageVariantFor,
   installCommandFor: () => installCommandFor,
   installLocalMigrationTooling: () => installLocalMigrationTooling,
   isBookkeepingTable: () => isBookkeepingTable,
@@ -40680,6 +41194,7 @@ __export(dist_exports, {
   readSchema: () => readSchema,
   recordedApplied: () => recordedApplied,
   refuseSshTransport: () => refuseSshTransport,
+  refuseUnbuildableSpec: () => refuseUnbuildableSpec,
   renderRunReport: () => renderRunReport,
   renderVenueLine: () => renderVenueLine,
   renderVerdictLine: () => renderVerdictLine,
@@ -41061,8 +41576,8 @@ __export(jpi_claim_exports, {
 });
 import {
   readFileSync as readFileSync27,
-  writeFileSync as writeFileSync23,
-  mkdirSync as mkdirSync9,
+  writeFileSync as writeFileSync24,
+  mkdirSync as mkdirSync10,
   mkdtempSync as mkdtempSync5,
   renameSync as renameSync11,
   existsSync as existsSync20,
@@ -41071,7 +41586,7 @@ import {
   rmSync as rmSync12,
   readdirSync as readdirSync3
 } from "fs";
-import { join as join43, dirname as dirname10, isAbsolute as isAbsolute5, resolve as pathResolve } from "path";
+import { join as join44, dirname as dirname10, isAbsolute as isAbsolute5, resolve as pathResolve } from "path";
 import { createHash as createHash11 } from "crypto";
 import { homedir as homedir26, hostname as osHostname } from "os";
 import { execFile as execFile3, execFileSync as execFileSync2, spawnSync as spawnSync9 } from "child_process";
@@ -41090,7 +41605,7 @@ function markClaimNudged(id) {
     const ids2 = readNudgedClaimIds();
     ids2.add(id);
     ensureStateDir(TERMINALHIRE_DIR17);
-    writeFileSync23(REPO_CONTINUITY_NUDGE_MARKER, JSON.stringify({ claimIds: [...ids2] }), "utf8");
+    writeFileSync24(REPO_CONTINUITY_NUDGE_MARKER, JSON.stringify({ claimIds: [...ids2] }), "utf8");
   } catch {
   }
 }
@@ -43355,7 +43870,7 @@ async function cmdAttach(id, worktree, branch) {
 function workDirFor(repoFullName, issueNumber) {
   const [owner, repo] = String(repoFullName).split("/");
   const suffix = issueNumber ? `-${issueNumber}` : "";
-  return join43(homedir26(), "terminalhire", "work", `${owner}-${repo}${suffix}`);
+  return join44(homedir26(), "terminalhire", "work", `${owner}-${repo}${suffix}`);
 }
 function startBranchFor(repoFullName, issueNumber) {
   const repo = String(repoFullName).split("/")[1] || "claim";
@@ -43611,7 +44126,7 @@ terminalhire claim: not started \u2014 starting forks ${claim.repoFullName} to y
     );
     process.exit(1);
   }
-  mkdirSync9(join43(homedir26(), "terminalhire", "work"), { recursive: true });
+  mkdirSync10(join44(homedir26(), "terminalhire", "work"), { recursive: true });
   const { createProgress: createProgress2, parseGitProgress: parseGitProgress2, splitProgressChunk: splitProgressChunk2, shStream: shStream2 } = await Promise.resolve().then(() => (init_progress(), progress_exports));
   const progress = createProgress2();
   let forkFullName;
@@ -43737,7 +44252,7 @@ function founderPostingIdOf(claim) {
 }
 function sliceWorkDirFor(claimLocalId) {
   const safe = String(claimLocalId).replace(/[^A-Za-z0-9._-]/g, "-");
-  return join43(homedir26(), "terminalhire", "work", `slice-${safe}`);
+  return join44(homedir26(), "terminalhire", "work", `slice-${safe}`);
 }
 function assertNoBooleanPath(dest, flagName) {
   const last = String(dest).split(/[\\/]/).filter(Boolean).pop();
@@ -43854,9 +44369,9 @@ function writeSliceFiles(destDir, files) {
   const unavailable = [];
   for (const f of files) {
     if (typeof f.content === "string") {
-      const abs = join43(destDir, f.path);
-      mkdirSync9(dirname10(abs), { recursive: true });
-      writeFileSync23(abs, f.content, "utf8");
+      const abs = join44(destDir, f.path);
+      mkdirSync10(dirname10(abs), { recursive: true });
+      writeFileSync24(abs, f.content, "utf8");
       written.push(f.path);
     } else {
       unavailable.push({ path: f.path, reason: f.unavailableReason || "(no reason given)" });
@@ -43885,7 +44400,7 @@ function writeDeliveredBrief(destDir, spec) {
 function ensureExcludedPackDir(destDir) {
   let occupant = null;
   try {
-    occupant = lstatSync4(join43(destDir, BRIEF_DIR));
+    occupant = lstatSync4(join44(destDir, BRIEF_DIR));
   } catch (err) {
     if (err?.code !== "ENOENT") {
       return {
@@ -43900,12 +44415,12 @@ function ensureExcludedPackDir(destDir) {
       reason: `${BRIEF_DIR}/ already exists in the delivered tree, and excluding it would hide that content from your patch`
     };
   }
-  const excludeFile = join43(destDir, ".git", "info", "exclude");
+  const excludeFile = join44(destDir, ".git", "info", "exclude");
   try {
     const existing = existsSync20(excludeFile) ? readFileSync27(excludeFile, "utf8") : "";
     if (!existing.split("\n").includes(BRIEF_EXCLUDE_LINE)) {
-      mkdirSync9(dirname10(excludeFile), { recursive: true });
-      writeFileSync23(
+      mkdirSync10(dirname10(excludeFile), { recursive: true });
+      writeFileSync24(
         excludeFile,
         `${existing}${existing === "" || existing.endsWith("\n") ? "" : "\n"}${BRIEF_EXCLUDE_LINE}
 `,
@@ -43919,9 +44434,9 @@ function ensureExcludedPackDir(destDir) {
 }
 function writePackFile(destDir, relPath, content, what) {
   try {
-    const abs = join43(destDir, relPath);
-    mkdirSync9(dirname10(abs), { recursive: true });
-    writeFileSync23(abs, content, { encoding: "utf8", flag: "wx" });
+    const abs = join44(destDir, relPath);
+    mkdirSync10(dirname10(abs), { recursive: true });
+    writeFileSync24(abs, content, { encoding: "utf8", flag: "wx" });
   } catch (err) {
     return { written: false, reason: `the ${what} could not be written (${err.message})` };
   }
@@ -44322,7 +44837,7 @@ async function cmdSliceFullTier(claims, id, local, fullTierBody, flags, cloneRep
   if (resolvedDir.suffixed) {
     console.log(`terminalhire claim: the usual directory has content \u2014 using ${dest}`);
   }
-  mkdirSync9(dest, { recursive: true });
+  mkdirSync10(dest, { recursive: true });
   const branch = `claim/${String(claim.id).replace(/[^A-Za-z0-9._-]/g, "-")}`;
   let engine;
   try {
@@ -44504,7 +45019,7 @@ async function attemptSliceDelivery(id, flags = {}) {
   if (resolvedDir.suffixed) {
     console.log(`terminalhire claim: the usual directory has content \u2014 using ${finalDest}`);
   }
-  mkdirSync9(dirname10(finalDest), { recursive: true });
+  mkdirSync10(dirname10(finalDest), { recursive: true });
   let dest = mkdtempSync5(`${finalDest}.tmp-`);
   const { written, unavailable } = writeSliceFiles(dest, body.files);
   const branch = `claim/${String(claim.id).replace(/[^A-Za-z0-9._-]/g, "-")}`;
@@ -45045,7 +45560,7 @@ async function cmdSubmit(id, flags = {}) {
   const head = `${ghUser}:${claim.branch}`;
   const title = flags.title || claim.title;
   const noBody = Boolean(flags["no-body"]);
-  const prBodyPath = join43(wt, "PR-BODY.md");
+  const prBodyPath = join44(wt, "PR-BODY.md");
   const bodySource = pickBodySource({
     bodyFileFlag: flags["body-file"],
     noBody,
@@ -45285,7 +45800,7 @@ function readClaimPushMarker() {
 }
 function writeClaimPushMarker(marker) {
   ensureStateDir(TERMINALHIRE_DIR17);
-  writeFileSync23(CLAIM_PUSH_MARKER, JSON.stringify(marker, null, 2) + "\n", "utf8");
+  writeFileSync24(CLAIM_PUSH_MARKER, JSON.stringify(marker, null, 2) + "\n", "utf8");
 }
 function clearClaimPushMarker() {
   try {
@@ -46199,10 +46714,10 @@ var init_jpi_claim = __esm({
     init_claim_push_bg();
     init_founder_verdict_sync();
     init_founder_note_sync();
-    TERMINALHIRE_DIR17 = process.env.TERMINALHIRE_DIR || join43(homedir26(), ".terminalhire");
-    INDEX_CACHE_FILE5 = join43(TERMINALHIRE_DIR17, "index-cache.json");
-    CLAIM_PUSH_MARKER = join43(TERMINALHIRE_DIR17, "claim-push.json");
-    REPO_CONTINUITY_NUDGE_MARKER = join43(TERMINALHIRE_DIR17, "repo-continuity-nudged.json");
+    TERMINALHIRE_DIR17 = process.env.TERMINALHIRE_DIR || join44(homedir26(), ".terminalhire");
+    INDEX_CACHE_FILE5 = join44(TERMINALHIRE_DIR17, "index-cache.json");
+    CLAIM_PUSH_MARKER = join44(TERMINALHIRE_DIR17, "claim-push.json");
+    REPO_CONTINUITY_NUDGE_MARKER = join44(TERMINALHIRE_DIR17, "repo-continuity-nudged.json");
     API_URL6 = resolveApiBase();
     CLAIM_SYNC_BASE4 = API_URL6;
     CLAIM_CONSENT_VERSION = 1;
@@ -46472,16 +46987,16 @@ import {
   readFileSync as readFileSync28,
   renameSync as renameSync12,
   rmSync as rmSync13,
-  writeFileSync as writeFileSync24
+  writeFileSync as writeFileSync25
 } from "fs";
 import { homedir as homedir27 } from "os";
-import { join as join44 } from "path";
+import { join as join45 } from "path";
 import { randomUUID as randomUUID4 } from "crypto";
 function stateDir3() {
-  return process.env["TERMINALHIRE_DIR"] || join44(homedir27(), ".terminalhire");
+  return process.env["TERMINALHIRE_DIR"] || join45(homedir27(), ".terminalhire");
 }
 function postingDraftFilePath() {
-  return join44(stateDir3(), "posting-drafts.json");
+  return join45(stateDir3(), "posting-drafts.json");
 }
 function blankFile2() {
   return { version: 1, drafts: [] };
@@ -46508,7 +47023,7 @@ function writeFile(file) {
   const path6 = postingDraftFilePath();
   const tmp = `${path6}.${process.pid}.${randomUUID4()}.tmp`;
   try {
-    writeFileSync24(tmp, `${JSON.stringify(file, null, 2)}
+    writeFileSync25(tmp, `${JSON.stringify(file, null, 2)}
 `, {
       encoding: "utf8",
       mode: 384,
@@ -46791,7 +47306,7 @@ __export(jpi_post_exports, {
 import { existsSync as existsSync22, readFileSync as readFileSync29 } from "fs";
 import { spawnSync as spawnSync10 } from "child_process";
 import { createInterface as createInterface10 } from "readline";
-import { basename as basename6, join as join45 } from "path";
+import { basename as basename6, join as join46 } from "path";
 function parsePostArgs(argv) {
   const flags = {};
   const positional = [];
@@ -46833,15 +47348,15 @@ function ownerRepo(remote) {
 }
 function detectStack(cwd) {
   const stack = [];
-  if (existsSync22(join45(cwd, "package.json"))) stack.push("node");
-  if (existsSync22(join45(cwd, "next.config.js")) || existsSync22(join45(cwd, "next.config.mjs"))) {
+  if (existsSync22(join46(cwd, "package.json"))) stack.push("node");
+  if (existsSync22(join46(cwd, "next.config.js")) || existsSync22(join46(cwd, "next.config.mjs"))) {
     stack.push("next.js");
   }
-  if (existsSync22(join45(cwd, "pyproject.toml")) || existsSync22(join45(cwd, "requirements.txt"))) {
+  if (existsSync22(join46(cwd, "pyproject.toml")) || existsSync22(join46(cwd, "requirements.txt"))) {
     stack.push("python");
   }
-  if (existsSync22(join45(cwd, "Cargo.toml"))) stack.push("rust");
-  if (existsSync22(join45(cwd, "go.mod"))) stack.push("go");
+  if (existsSync22(join46(cwd, "Cargo.toml"))) stack.push("rust");
+  if (existsSync22(join46(cwd, "go.mod"))) stack.push("go");
   return stack;
 }
 function captureRepository(cwd = process.cwd()) {
@@ -47261,25 +47776,25 @@ var init_jpi_repo = __esm({
 import {
   closeSync as closeSync5,
   existsSync as existsSync23,
-  mkdirSync as mkdirSync10,
+  mkdirSync as mkdirSync11,
   openSync as openSync5,
   readFileSync as readFileSync30,
   readdirSync as readdirSync4,
   renameSync as renameSync13,
   statSync as statSync5,
   unlinkSync as unlinkSync4,
-  writeFileSync as writeFileSync25
+  writeFileSync as writeFileSync26
 } from "fs";
 import { homedir as homedir28 } from "os";
-import { basename as basename7, dirname as dirname11, join as join46 } from "path";
+import { basename as basename7, dirname as dirname11, join as join47 } from "path";
 function defaultUrl() {
   return process.env["TERMINALHIRE_RECALL_URL"] || RECALL_URL;
 }
 function stateDir4() {
-  return process.env["TERMINALHIRE_DIR"] || join46(homedir28(), ".terminalhire");
+  return process.env["TERMINALHIRE_DIR"] || join47(homedir28(), ".terminalhire");
 }
 function recallCachePath() {
-  return join46(stateDir4(), "recall.json");
+  return join47(stateDir4(), "recall.json");
 }
 async function fetchRecalls(url = defaultUrl()) {
   try {
@@ -47307,7 +47822,7 @@ function mutateCache(path6, mutate) {
   const lock = `${path6}.lock`;
   let held = false;
   try {
-    mkdirSync10(dirname11(path6), { recursive: true, mode: 448 });
+    mkdirSync11(dirname11(path6), { recursive: true, mode: 448 });
     const deadline = Date.now() + LOCK_WAIT_MS;
     while (!held && Date.now() < deadline) {
       try {
@@ -47331,7 +47846,7 @@ function mutateCache(path6, mutate) {
     if (mutate(existing) === false) return false;
     const tmp = `${path6}.${process.pid}.${tmpCounter3 += 1}.tmp`;
     try {
-      writeFileSync25(tmp, `${JSON.stringify(existing, null, 2)}
+      writeFileSync26(tmp, `${JSON.stringify(existing, null, 2)}
 `, { mode: 384 });
       renameSync13(tmp, path6);
     } catch {
@@ -47359,7 +47874,7 @@ function sweepTempFiles(path6) {
     const prefix = `${basename7(path6)}.`;
     for (const name of readdirSync4(dir)) {
       if (!name.startsWith(prefix) || !name.endsWith(".tmp")) continue;
-      const full = join46(dir, name);
+      const full = join47(dir, name);
       try {
         if (Date.now() - statSync5(full).mtimeMs > 6e4) unlinkSync4(full);
       } catch {
@@ -47464,7 +47979,7 @@ __export(jpi_run_exports, {
 });
 import { existsSync as existsSync24, readFileSync as readFileSync31, realpathSync as realpathSync4 } from "fs";
 import { execFileSync as execFileSync4 } from "child_process";
-import { join as join47, resolve as resolve5 } from "path";
+import { join as join48, resolve as resolve5 } from "path";
 import { tmpdir as tmpdir5 } from "os";
 import { mkdtempSync as mkdtempSync6, rmSync as rmSync14 } from "fs";
 function parseArgs2(argv) {
@@ -47489,7 +48004,7 @@ function parseArgs2(argv) {
 function runScratchRoot() {
   let root;
   try {
-    root = mkdtempSync6(join47(tmpdir5(), "th-run-"));
+    root = mkdtempSync6(join48(tmpdir5(), "th-run-"));
   } catch (err) {
     process.stderr.write(
       `terminalhire: could not create the temporary directory this run works in, so nothing was cloned and nothing was executed. That is our environment failing, not your tests: check that the temp directory is writable. (${String(err?.message ?? err)})
@@ -47526,7 +48041,7 @@ async function loadEngine() {
   }
 }
 function readConfig2(localDir) {
-  const file = join47(localDir, ".th-run.json");
+  const file = join48(localDir, ".th-run.json");
   if (!existsSync24(file)) return {};
   try {
     const parsed = JSON.parse(readFileSync31(file, "utf8"));
@@ -47632,6 +48147,11 @@ async function once(engine, opts) {
     preview: opts.preview,
     ...opts.placement ? { placement: opts.placement } : {},
     ...opts.testCommand ? { testCommandOverride: opts.testCommand } : {},
+    // No `imageOrigin` beside it, deliberately. This flag runs on the DEVELOPER's machine,
+    // judging the developer's work, so it takes `thrun`'s default of `developer` — the same
+    // reasoning that makes `--test-command` developer-declared. An operator override is a
+    // server-side caller, not this flag.
+    ...opts.image ? { image: opts.image } : {},
     onProgress: (stage, detail) => {
       if (!opts.json) process.stderr.write(`  ${stage.padEnd(8)} ${detail}
 `);
@@ -47677,8 +48197,7 @@ Expiry and revocation are not built yet (TERM-350 phase 5); Ctrl-C is the only s
     process.stderr.write(`  total    ${String(Date.now() - started)}ms
 `);
   }
-  if (result.status === "refused") return 2;
-  return result.outcome === "completed" ? 0 : 1;
+  return engine.exitCodeFor(result);
 }
 async function run10() {
   const argv = process.argv.slice(2);
@@ -47745,6 +48264,7 @@ async function run10() {
     watch: parsed.bools.has("watch"),
     json: parsed.bools.has("json"),
     testCommand: pick2("test-command") ?? null,
+    image: pick2("image") ?? null,
     keepSeconds,
     scratch: runScratchRoot()
   };
@@ -47823,6 +48343,9 @@ Options:
   --keep <seconds>      Hold the preview open this long, at most ${String(KEEP_MAX_SECONDS)}
                         (default: until Ctrl-C).
   --test-command <cmd>  Disclosed override of the derived test command.
+  --image <ref>         Disclosed override of the container image. Use when no image is
+                        mapped for the repo's runtime. Recorded as developer-declared
+                        provenance, which the attestation refuses to sign.
   --help
 
 Defaults are read from .th-run.json in the local checkout when present, so a
@@ -48130,7 +48653,7 @@ function finalize(build) {
   };
 }
 function reconstruct(files, opts = {}) {
-  const join62 = opts.joinSidechains !== false;
+  const join63 = opts.joinSidechains !== false;
   const mains = [];
   const sidechains = [];
   for (const file of files) {
@@ -48155,7 +48678,7 @@ function reconstruct(files, opts = {}) {
   }
   const orphanedSidechainPaths = [];
   const joinedPaths = /* @__PURE__ */ new Set();
-  if (join62) {
+  if (join63) {
     const sidechainsBySession = /* @__PURE__ */ new Map();
     for (const sc of sidechains) {
       const acc = sidechainsBySession.get(sc.sessionId) ?? [];
@@ -48491,9 +49014,9 @@ __export(trajectory_exports, {
   runTrajectory: () => runTrajectory,
   runTrajectoryPush: () => runTrajectoryPush
 });
-import { existsSync as existsSync25, readFileSync as readFileSync32, readdirSync as readdirSync5, writeFileSync as writeFileSync26 } from "fs";
+import { existsSync as existsSync25, readFileSync as readFileSync32, readdirSync as readdirSync5, writeFileSync as writeFileSync27 } from "fs";
 import { homedir as homedir29 } from "os";
-import { join as join48 } from "path";
+import { join as join49 } from "path";
 function isRecord4(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -48525,7 +49048,7 @@ function findJsonlFiles(dir) {
     return out;
   }
   for (const entry of entries) {
-    const full = join48(dir, entry.name);
+    const full = join49(dir, entry.name);
     if (entry.isDirectory()) {
       out.push(...findJsonlFiles(full));
     } else if (entry.isFile() && entry.name.endsWith(".jsonl")) {
@@ -48646,12 +49169,12 @@ function renderMarkdown(view) {
   return lines.join("\n");
 }
 function writeExportArtifacts(score, markdown) {
-  const dir = process.env.TERMINALHIRE_DIR || join48(homedir29(), ".terminalhire");
+  const dir = process.env.TERMINALHIRE_DIR || join49(homedir29(), ".terminalhire");
   ensureStateDir(dir);
-  const jsonPath = join48(dir, "trajectory-export.json");
-  const mdPath = join48(dir, "trajectory-export.md");
-  writeFileSync26(jsonPath, JSON.stringify(score, null, 2) + "\n", "utf8");
-  writeFileSync26(mdPath, markdown, "utf8");
+  const jsonPath = join49(dir, "trajectory-export.json");
+  const mdPath = join49(dir, "trajectory-export.md");
+  writeFileSync27(jsonPath, JSON.stringify(score, null, 2) + "\n", "utf8");
+  writeFileSync27(mdPath, markdown, "utf8");
   return { jsonPath, mdPath };
 }
 function renderInward(allNodes, view, files) {
@@ -48670,7 +49193,7 @@ function renderInward(allNodes, view, files) {
   console.log("");
 }
 function buildTrajectory() {
-  const projectsDir = join48(homedir29(), ".claude", "projects");
+  const projectsDir = join49(homedir29(), ".claude", "projects");
   if (!existsSync25(projectsDir)) return null;
   const paths = findJsonlFiles(projectsDir);
   if (paths.length === 0) return null;
@@ -49484,10 +50007,10 @@ var init_jpi_intro = __esm({
 });
 
 // src/chat-keystore.ts
-import { existsSync as existsSync26, linkSync as linkSync2, readFileSync as readFileSync33, rmSync as rmSync15, unlinkSync as unlinkSync5, writeFileSync as writeFileSync27 } from "fs";
+import { existsSync as existsSync26, linkSync as linkSync2, readFileSync as readFileSync33, rmSync as rmSync15, unlinkSync as unlinkSync5, writeFileSync as writeFileSync28 } from "fs";
 import { randomBytes as randomBytes13 } from "crypto";
 import { homedir as homedir30 } from "os";
-import { join as join49 } from "path";
+import { join as join50 } from "path";
 async function loadOrCreateIdentity() {
   const key = await loadKey();
   if (existsSync26(IDENTITY_FILE)) {
@@ -49531,7 +50054,7 @@ Recovery: if you intend to reset your chat identity, delete the file yourself an
 function publishIdentityBlob(blob) {
   const tmpFile = `${IDENTITY_FILE}.${process.pid}.${randomBytes13(6).toString("hex")}.tmp`;
   try {
-    writeFileSync27(tmpFile, JSON.stringify(blob, null, 2), {
+    writeFileSync28(tmpFile, JSON.stringify(blob, null, 2), {
       encoding: "utf8",
       mode: 384,
       flag: "wx"
@@ -49560,16 +50083,16 @@ var init_chat_keystore = __esm({
     init_src();
     init_github_auth();
     init_state_dir();
-    TERMINALHIRE_DIR18 = process.env.TERMINALHIRE_DIR || join49(homedir30(), ".terminalhire");
-    IDENTITY_FILE = join49(TERMINALHIRE_DIR18, "chat-identity.enc");
+    TERMINALHIRE_DIR18 = process.env.TERMINALHIRE_DIR || join50(homedir30(), ".terminalhire");
+    IDENTITY_FILE = join50(TERMINALHIRE_DIR18, "chat-identity.enc");
     HEX64_RE = /^[0-9a-f]{64}$/;
   }
 });
 
 // src/chat-client.ts
-import { existsSync as existsSync27, readFileSync as readFileSync34, writeFileSync as writeFileSync28 } from "fs";
+import { existsSync as existsSync27, readFileSync as readFileSync34, writeFileSync as writeFileSync29 } from "fs";
 import { homedir as homedir31 } from "os";
-import { join as join50 } from "path";
+import { join as join51 } from "path";
 function defaultReadPeerPins() {
   try {
     if (!existsSync27(PEERS_FILE)) return {};
@@ -49586,7 +50109,7 @@ function defaultReadPeerPins() {
 }
 function defaultWritePeerPins(pins) {
   ensureStateDir(TERMINALHIRE_DIR19);
-  writeFileSync28(PEERS_FILE, JSON.stringify(pins, null, 2), { mode: 384, encoding: "utf8" });
+  writeFileSync29(PEERS_FILE, JSON.stringify(pins, null, 2), { mode: 384, encoding: "utf8" });
 }
 function defaultChatClientDeps() {
   return {
@@ -49778,8 +50301,8 @@ var init_chat_client = __esm({
     init_api_base();
     CHAT_BASE = resolveApiBase();
     GH_SESSION_COOKIE7 = "__jpi_gh_session";
-    TERMINALHIRE_DIR19 = process.env.TERMINALHIRE_DIR || join50(homedir31(), ".terminalhire");
-    PEERS_FILE = join50(TERMINALHIRE_DIR19, "chat-peers.json");
+    TERMINALHIRE_DIR19 = process.env.TERMINALHIRE_DIR || join51(homedir31(), ".terminalhire");
+    PEERS_FILE = join51(TERMINALHIRE_DIR19, "chat-peers.json");
     REQUEST_TIMEOUT_MS2 = 1e4;
     ChatNotLinkedError = class extends Error {
       constructor(message = missingSessionLines(null).join(" ")) {
@@ -50215,9 +50738,9 @@ __export(jpi_chat_read_exports, {
   syncUnreadBadge: () => syncUnreadBadge,
   writeReadCursor: () => writeReadCursor
 });
-import { existsSync as existsSync28, readFileSync as readFileSync35, writeFileSync as writeFileSync29 } from "fs";
+import { existsSync as existsSync28, readFileSync as readFileSync35, writeFileSync as writeFileSync30 } from "fs";
 import { homedir as homedir32 } from "os";
-import { join as join51 } from "path";
+import { join as join52 } from "path";
 async function syncUnreadBadge(deps = {}) {
   const readCookie = deps.readCookie ?? readWebSessionCookie;
   const fetchImpl = deps.fetchImpl ?? globalThis.fetch;
@@ -50239,7 +50762,7 @@ async function syncUnreadBadge(deps = {}) {
     );
     const entry = JSON.parse(readFileSync35(cacheFile, "utf8"));
     entry.unreadChat = { count: total };
-    writeFileSync29(cacheFile, JSON.stringify(entry), "utf8");
+    writeFileSync30(cacheFile, JSON.stringify(entry), "utf8");
   } catch {
   }
 }
@@ -50264,7 +50787,7 @@ function writeReadCursor(login, iso, deps = {}) {
   if (prev && iso <= prev) return;
   cursors[login] = iso;
   ensureStateDir(TERMINALHIRE_DIR20);
-  writeFileSync29(READS_FILE, JSON.stringify(cursors, null, 2), { mode: 384, encoding: "utf8" });
+  writeFileSync30(READS_FILE, JSON.stringify(cursors, null, 2), { mode: 384, encoding: "utf8" });
 }
 async function postReadCursor(peerLogin, lastReadAt, deps = {}) {
   const readCookie = deps.readCookie ?? readWebSessionCookie;
@@ -50629,9 +51152,9 @@ var init_jpi_chat_read = __esm({
     init_api_base();
     CHAT_BASE2 = resolveApiBase();
     GH_SESSION_COOKIE8 = "__jpi_gh_session";
-    TERMINALHIRE_DIR20 = process.env.TERMINALHIRE_DIR || join51(homedir32(), ".terminalhire");
-    READS_FILE = join51(TERMINALHIRE_DIR20, "chat-reads.json");
-    INDEX_CACHE_FILE6 = join51(TERMINALHIRE_DIR20, "index-cache.json");
+    TERMINALHIRE_DIR20 = process.env.TERMINALHIRE_DIR || join52(homedir32(), ".terminalhire");
+    READS_FILE = join52(TERMINALHIRE_DIR20, "chat-reads.json");
+    INDEX_CACHE_FILE6 = join52(TERMINALHIRE_DIR20, "index-cache.json");
     REACHABLE_DISPLAY = { shareActivity: false, optin: false, lastSeen: null };
   }
 });
@@ -51172,7 +51695,7 @@ __export(jpi_chat_exports, {
 import { createInterface as createInterface11 } from "readline";
 import { existsSync as existsSync29, readFileSync as readFileSync36 } from "fs";
 import { homedir as homedir33 } from "os";
-import { join as join52 } from "path";
+import { join as join53 } from "path";
 function defaultPromptAck({ input = process.stdin, output = process.stdout } = {}) {
   if (!input || input.isTTY !== true) return Promise.resolve(false);
   const rl = createInterface11({ input, output });
@@ -51356,8 +51879,8 @@ function mergeMessages(existing, incoming) {
 }
 function readCachedSessionCase() {
   try {
-    const p = join52(
-      process.env.TERMINALHIRE_DIR || join52(homedir33(), ".terminalhire"),
+    const p = join53(
+      process.env.TERMINALHIRE_DIR || join53(homedir33(), ".terminalhire"),
       "index-cache.json"
     );
     if (!existsSync29(p)) return null;
@@ -52124,8 +52647,8 @@ function sparkline(rows) {
   const tail2 = sorted.slice(-24);
   return tail2.map((c) => SPARK_LEVELS[STATE_LEVEL[c.state] ?? 1]).join("");
 }
-function fuzzyMatch(query, candidate) {
-  const q = query.toLowerCase();
+function fuzzyMatch(query2, candidate) {
+  const q = query2.toLowerCase();
   const c = candidate.toLowerCase();
   if (q === "") return true;
   let i = 0;
@@ -52134,9 +52657,9 @@ function fuzzyMatch(query, candidate) {
   }
   return i === q.length;
 }
-function substrMatch(query, candidate) {
-  if (query === "") return true;
-  return candidate.toLowerCase().includes(query.toLowerCase());
+function substrMatch(query2, candidate) {
+  if (query2 === "") return true;
+  return candidate.toLowerCase().includes(query2.toLowerCase());
 }
 function runHubTui({
   input = process.stdin,
@@ -53173,15 +53696,15 @@ __export(mcp_config_exports, {
   writeServerToFile: () => writeServerToFile
 });
 import { homedir as homedir34 } from "os";
-import { join as join53 } from "path";
-import { existsSync as existsSync30, readFileSync as readFileSync37, copyFileSync as copyFileSync3, writeFileSync as writeFileSync30, mkdirSync as mkdirSync11 } from "fs";
+import { join as join54 } from "path";
+import { existsSync as existsSync30, readFileSync as readFileSync37, copyFileSync as copyFileSync3, writeFileSync as writeFileSync31, mkdirSync as mkdirSync12 } from "fs";
 import { dirname as dirname12 } from "path";
 function serverEntry() {
   return { command: SERVER_COMMAND, args: [...SERVER_ARGS] };
 }
 function hostConfigPath(host, home = homedir34()) {
   if (!host || !Array.isArray(host.relPath)) return null;
-  return join53(home, ...host.relPath);
+  return join54(home, ...host.relPath);
 }
 function jsonSnippet(host) {
   const entry = serverEntry();
@@ -53277,9 +53800,9 @@ function writeServerToFile(configPath, serversKey, entry = serverEntry()) {
     backupPath = `${configPath}.terminalhire-backup-${ts}`;
     copyFileSync3(configPath, backupPath);
   } else {
-    mkdirSync11(dirname12(configPath), { recursive: true });
+    mkdirSync12(dirname12(configPath), { recursive: true });
   }
-  writeFileSync30(configPath, merged.text, "utf8");
+  writeFileSync31(configPath, merged.text, "utf8");
   return { status: "written", backupPath, added: merged.added };
 }
 async function initMcpStep({
@@ -65526,9 +66049,9 @@ var require_schemes = __commonJS({
         wsComponent.secure = void 0;
       }
       if (wsComponent.resourceName) {
-        const [path6, query] = wsComponent.resourceName.split("?");
+        const [path6, query2] = wsComponent.resourceName.split("?");
         wsComponent.path = path6 && path6 !== "/" ? path6 : void 0;
-        wsComponent.query = query;
+        wsComponent.query = query2;
         wsComponent.resourceName = void 0;
       }
       wsComponent.fragment = void 0;
@@ -75835,7 +76358,7 @@ async function claimWorkspaceResult(args5 = {}) {
   try {
     const claims = await Promise.resolve().then(() => (init_claims(), claims_exports));
     const { existsSync: existsSync37, readFileSync: readFileSync43, lstatSync: lstatSync5 } = await import("fs");
-    const { join: join62 } = await import("path");
+    const { join: join63 } = await import("path");
     const { BRIEF_REL_PATH: BRIEF_REL_PATH2, VERIFY_REL_PATH: VERIFY_REL_PATH2, AGENTS_REL_PATH: AGENTS_REL_PATH2, sha256OfUtf8: sha256OfUtf82 } = await Promise.resolve().then(() => (init_jpi_claim(), jpi_claim_exports));
     const packPaths = (c) => {
       const p = {};
@@ -75848,7 +76371,7 @@ async function claimWorkspaceResult(args5 = {}) {
         if (c.workspacePack?.[member] !== true) continue;
         const digest = c.packDigests?.[member];
         if (typeof digest !== "string" || digest === "") continue;
-        const abs = join62(c.worktreePath, rel);
+        const abs = join63(c.worktreePath, rel);
         try {
           const st = lstatSync5(abs);
           if (!st.isFile() || st.size > 1024 * 1024) continue;
@@ -75867,7 +76390,7 @@ async function claimWorkspaceResult(args5 = {}) {
           hint: `No workspace has been delivered for this claim yet. A human runs: terminalhire claim start ${c.id} --watch`
         };
       }
-      if (!existsSync37(c.worktreePath) || !existsSync37(join62(c.worktreePath, ".git"))) {
+      if (!existsSync37(c.worktreePath) || !existsSync37(join63(c.worktreePath, ".git"))) {
         return {
           status: "not_ready",
           claimId: c.id,
@@ -75985,10 +76508,10 @@ async function run17() {
   let version2 = "0.0.0";
   try {
     const { readFileSync: readFileSync43, existsSync: existsSync37 } = await import("fs");
-    const { join: join62 } = await import("path");
+    const { join: join63 } = await import("path");
     const { fileURLToPath: fileURLToPath15 } = await import("url");
     const here = fileURLToPath15(new URL(".", import.meta.url));
-    for (const p of [join62(here, "..", "..", "package.json"), join62(here, "..", "package.json")]) {
+    for (const p of [join63(here, "..", "..", "package.json"), join63(here, "..", "package.json")]) {
       if (existsSync37(p)) {
         const pkg = JSON.parse(readFileSync43(p, "utf8"));
         if (pkg.version) {
@@ -76289,10 +76812,10 @@ async function run18() {
   let version2 = "0.0.0";
   try {
     const { readFileSync: readFileSync43, existsSync: existsSync37 } = await import("fs");
-    const { join: join62 } = await import("path");
+    const { join: join63 } = await import("path");
     const { fileURLToPath: fileURLToPath15 } = await import("url");
     const here = fileURLToPath15(new URL(".", import.meta.url));
-    for (const p of [join62(here, "..", "..", "package.json"), join62(here, "..", "package.json")]) {
+    for (const p of [join63(here, "..", "..", "package.json"), join63(here, "..", "package.json")]) {
       if (existsSync37(p)) {
         const pkg = JSON.parse(readFileSync43(p, "utf8"));
         if (pkg.version) {
@@ -76853,7 +77376,7 @@ __export(signal_exports, {
 });
 import { readFileSync as readFileSync38, readdirSync as readdirSync6 } from "fs";
 import { execFileSync as execFileSync5 } from "child_process";
-import { join as join54 } from "path";
+import { join as join55 } from "path";
 function safeGit(args5, cwd) {
   try {
     return execFileSync5("git", ["-C", cwd, ...args5], {
@@ -76894,7 +77417,7 @@ function readFileSafe(path6) {
   }
 }
 function tokensFromPackageJson(cwd) {
-  const pkg = readJsonSafe(join54(cwd, "package.json"));
+  const pkg = readJsonSafe(join55(cwd, "package.json"));
   if (!pkg || typeof pkg !== "object") return [];
   const p = pkg;
   const deps = {
@@ -76908,9 +77431,9 @@ function workspaceMemberDirs(cwd) {
   const dirs = [cwd];
   for (const group of ["apps", "packages"]) {
     try {
-      const groupDir = join54(cwd, group);
+      const groupDir = join55(cwd, group);
       for (const e of readdirSync6(groupDir, { withFileTypes: true })) {
-        if (e.isDirectory() && !e.isSymbolicLink()) dirs.push(join54(groupDir, e.name));
+        if (e.isDirectory() && !e.isSymbolicLink()) dirs.push(join55(groupDir, e.name));
       }
     } catch {
     }
@@ -76918,18 +77441,18 @@ function workspaceMemberDirs(cwd) {
   return dirs;
 }
 function tokensFromRequirementsTxt(cwd) {
-  const content = readFileSafe(join54(cwd, "requirements.txt"));
+  const content = readFileSafe(join55(cwd, "requirements.txt"));
   if (!content) return [];
   return content.split("\n").map((l) => l.trim().split(/[>=<!\[;]/)[0].trim().toLowerCase()).filter(Boolean);
 }
 function tokensFromGoMod(cwd) {
-  const content = readFileSafe(join54(cwd, "go.mod"));
+  const content = readFileSafe(join55(cwd, "go.mod"));
   if (!content) return [];
   const requires = Array.from(content.matchAll(/^\s+([^\s]+)\s+v/gm)).map((m) => m[1].split("/").pop() ?? "").filter(Boolean);
   return ["go", ...requires];
 }
 function tokensFromCargoToml(cwd) {
-  const content = readFileSafe(join54(cwd, "Cargo.toml"));
+  const content = readFileSafe(join55(cwd, "Cargo.toml"));
   if (!content) return [];
   const deps = [];
   let inDeps = false;
@@ -76950,7 +77473,7 @@ function tokensFromFileExtensions(cwd) {
   const tokens = [];
   const scanDirs = [cwd];
   try {
-    const srcDir = join54(cwd, "src");
+    const srcDir = join55(cwd, "src");
     readdirSync6(srcDir);
     scanDirs.push(srcDir);
   } catch {
@@ -77150,7 +77673,7 @@ var jpi_config_exports = {};
 __export(jpi_config_exports, {
   run: () => run24
 });
-import { join as join55 } from "path";
+import { join as join56 } from "path";
 import { homedir as homedir35 } from "os";
 function parseNudgeMode2(raw) {
   if (raw === "session" || raw === "always") return raw;
@@ -77338,8 +77861,8 @@ var init_jpi_config = __esm({
   "bin/jpi-config.js"() {
     "use strict";
     init_config();
-    TERMINALHIRE_DIR21 = process.env.TERMINALHIRE_DIR || join55(homedir35(), ".terminalhire");
-    CONFIG_FILE2 = join55(TERMINALHIRE_DIR21, "config.json");
+    TERMINALHIRE_DIR21 = process.env.TERMINALHIRE_DIR || join56(homedir35(), ".terminalhire");
+    CONFIG_FILE2 = join56(TERMINALHIRE_DIR21, "config.json");
   }
 });
 
@@ -77348,8 +77871,8 @@ var jpi_spinner_exports = {};
 __export(jpi_spinner_exports, {
   run: () => run25
 });
-import { readFileSync as readFileSync39, writeFileSync as writeFileSync31, copyFileSync as copyFileSync4, existsSync as existsSync31 } from "fs";
-import { join as join56 } from "path";
+import { readFileSync as readFileSync39, writeFileSync as writeFileSync32, copyFileSync as copyFileSync4, existsSync as existsSync31 } from "fs";
+import { join as join57 } from "path";
 import { homedir as homedir36 } from "os";
 import { createInterface as createInterface13 } from "readline";
 function readConfig3() {
@@ -77362,7 +77885,7 @@ function readConfig3() {
 function writeConfig2(patch) {
   ensureStateDir(TH_DIR);
   const merged = { ...readConfig3(), ...patch };
-  writeFileSync31(CONFIG_FILE3, JSON.stringify(merged, null, 2) + "\n", "utf8");
+  writeFileSync32(CONFIG_FILE3, JSON.stringify(merged, null, 2) + "\n", "utf8");
 }
 function backupSettings() {
   if (!existsSync31(SETTINGS_PATH)) return null;
@@ -77596,10 +78119,10 @@ var init_jpi_spinner = __esm({
     "use strict";
     init_spinner();
     init_state_dir();
-    TH_DIR = process.env["TERMINALHIRE_DIR"] || join56(homedir36(), ".terminalhire");
-    CONFIG_FILE3 = join56(TH_DIR, "config.json");
-    SETTINGS_PATH = process.env["TERMINALHIRE_CLAUDE_SETTINGS"] || join56(homedir36(), ".claude", "settings.json");
-    CACHE_FILE2 = join56(TH_DIR, "index-cache.json");
+    TH_DIR = process.env["TERMINALHIRE_DIR"] || join57(homedir36(), ".terminalhire");
+    CONFIG_FILE3 = join57(TH_DIR, "config.json");
+    SETTINGS_PATH = process.env["TERMINALHIRE_CLAUDE_SETTINGS"] || join57(homedir36(), ".claude", "settings.json");
+    CACHE_FILE2 = join57(TH_DIR, "index-cache.json");
   }
 });
 
@@ -77608,8 +78131,8 @@ var jpi_sync_exports = {};
 __export(jpi_sync_exports, {
   run: () => run26
 });
-import { readFileSync as readFileSync40, writeFileSync as writeFileSync32, existsSync as existsSync32, rmSync as rmSync16 } from "fs";
-import { join as join57 } from "path";
+import { readFileSync as readFileSync40, writeFileSync as writeFileSync33, existsSync as existsSync32, rmSync as rmSync16 } from "fs";
+import { join as join58 } from "path";
 import { homedir as homedir37, hostname as osHostname2 } from "os";
 import { createInterface as createInterface14 } from "readline";
 function oauthSyncBase() {
@@ -77633,7 +78156,7 @@ function readMarker() {
 }
 function writeMarker(marker) {
   ensureStateDir(TH_DIR2);
-  writeFileSync32(TIER1_MARKER, JSON.stringify(marker, null, 2) + "\n", "utf8");
+  writeFileSync33(TIER1_MARKER, JSON.stringify(marker, null, 2) + "\n", "utf8");
 }
 function clearMarker() {
   try {
@@ -77962,8 +78485,8 @@ var init_jpi_sync = __esm({
     init_open_url();
     init_state_dir();
     init_api_base();
-    TH_DIR2 = process.env["TERMINALHIRE_DIR"] || join57(homedir37(), ".terminalhire");
-    TIER1_MARKER = join57(TH_DIR2, "tier1.json");
+    TH_DIR2 = process.env["TERMINALHIRE_DIR"] || join58(homedir37(), ".terminalhire");
+    TIER1_MARKER = join58(TH_DIR2, "tier1.json");
     API_URL8 = resolveApiBase();
     warnSharedCredentialsIfNonProd(API_URL8);
     POLL_INTERVAL_MS = 2e3;
@@ -77978,30 +78501,30 @@ __export(jpi_init_exports, {
   run: () => run27
 });
 import { existsSync as existsSync33 } from "fs";
-import { join as join58, resolve as resolve6 } from "path";
+import { join as join59, resolve as resolve6 } from "path";
 import { fileURLToPath as fileURLToPath10, pathToFileURL } from "url";
 import { createInterface as createInterface15 } from "readline";
 import { spawnSync as spawnSync12 } from "child_process";
 function resolveScript(name) {
-  const distPath = resolve6(join58(__dirname5, "..", "..", "dist", "bin", `${name}.js`));
-  const legacyPath = resolve6(join58(__dirname5, `${name}.js`));
+  const distPath = resolve6(join59(__dirname5, "..", "..", "dist", "bin", `${name}.js`));
+  const legacyPath = resolve6(join59(__dirname5, `${name}.js`));
   return existsSync33(distPath) ? distPath : legacyPath;
 }
 function resolveSrc(name) {
-  const distPath = resolve6(join58(__dirname5, "..", "..", "dist", "src", `${name}.js`));
-  const legacyPath = resolve6(join58(__dirname5, "..", "src", `${name}.js`));
+  const distPath = resolve6(join59(__dirname5, "..", "..", "dist", "src", `${name}.js`));
+  const legacyPath = resolve6(join59(__dirname5, "..", "src", `${name}.js`));
   return existsSync33(distPath) ? distPath : legacyPath;
 }
 function resolveInstallJs() {
-  const fromDist = resolve6(join58(__dirname5, "..", "..", "install.js"));
-  const fromBin = resolve6(join58(__dirname5, "..", "install.js"));
+  const fromDist = resolve6(join59(__dirname5, "..", "..", "install.js"));
+  const fromBin = resolve6(join59(__dirname5, "..", "install.js"));
   if (existsSync33(fromDist)) return fromDist;
   if (existsSync33(fromBin)) return fromBin;
   return fromBin;
 }
 function resolveStatuslineInstallJs() {
-  const fromDist = resolve6(join58(__dirname5, "..", "..", "statusline-install.js"));
-  const fromBin = resolve6(join58(__dirname5, "..", "statusline-install.js"));
+  const fromDist = resolve6(join59(__dirname5, "..", "..", "statusline-install.js"));
+  const fromBin = resolve6(join59(__dirname5, "..", "statusline-install.js"));
   if (existsSync33(fromDist)) return fromDist;
   if (existsSync33(fromBin)) return fromBin;
   return fromBin;
@@ -79006,7 +79529,7 @@ __export(jpi_save_exports, {
   run: () => run29
 });
 import { readFileSync as readFileSync41, existsSync as existsSync34 } from "fs";
-import { join as join59 } from "path";
+import { join as join60 } from "path";
 import { homedir as homedir38 } from "os";
 import { fileURLToPath as fileURLToPath12 } from "url";
 function findJobInCache(jobId) {
@@ -79105,8 +79628,8 @@ var init_jpi_save = __esm({
   "bin/jpi-save.js"() {
     "use strict";
     __dirname7 = fileURLToPath12(new URL(".", import.meta.url));
-    TERMINALHIRE_DIR22 = process.env.TERMINALHIRE_DIR || join59(homedir38(), ".terminalhire");
-    INDEX_CACHE_FILE7 = join59(TERMINALHIRE_DIR22, "index-cache.json");
+    TERMINALHIRE_DIR22 = process.env.TERMINALHIRE_DIR || join60(homedir38(), ".terminalhire");
+    INDEX_CACHE_FILE7 = join60(TERMINALHIRE_DIR22, "index-cache.json");
   }
 });
 
@@ -79156,10 +79679,10 @@ async function run30() {
     console.log("      rough edges you find.");
     console.log("    \u2022 A spot on the founding-contributors wall.");
     console.log("");
-    const join62 = await ask5(
+    const join63 = await ask5(
       '  Type "yes" to join the beta as a Founding Contributor (anything else cancels): '
     );
-    if ((join62 || "").toLowerCase() !== "yes") {
+    if ((join63 || "").toLowerCase() !== "yes") {
       console.log("\n  No problem \u2014 nothing was sent. Run `terminalhire beta` any time.\n");
       rl.close();
       return;
@@ -79250,13 +79773,13 @@ __export(jpi_feedback_exports, {
 });
 import { createInterface as createInterface17 } from "readline";
 import { readFileSync as readFileSync42, existsSync as existsSync35 } from "fs";
-import { join as join60 } from "path";
+import { join as join61 } from "path";
 import { fileURLToPath as fileURLToPath13 } from "url";
 function readLocalVersion3() {
   try {
     for (const p of [
-      join60(__dirname8, "..", "..", "package.json"),
-      join60(__dirname8, "..", "package.json")
+      join61(__dirname8, "..", "..", "package.json"),
+      join61(__dirname8, "..", "package.json")
     ]) {
       if (existsSync35(p)) {
         const pkg = JSON.parse(readFileSync42(p, "utf8"));
@@ -79399,7 +79922,7 @@ var init_jpi_feedback = __esm({
 init_package_version();
 init_api_base();
 import { fileURLToPath as fileURLToPath14 } from "url";
-import { join as join61 } from "path";
+import { join as join62 } from "path";
 import { existsSync as existsSync36 } from "fs";
 
 // src/state-dir-pin.ts
@@ -79499,7 +80022,7 @@ var SUBCOMMANDS = [
 var firstArg = process.argv[2];
 if (!firstArg && !process.stdin.isTTY) {
   const { default: childProcess } = await import("child_process");
-  const nudgeScript = join61(__dirname9, "jpi.js");
+  const nudgeScript = join62(__dirname9, "jpi.js");
   const child = childProcess.spawnSync(process.execPath, [nudgeScript], {
     stdio: ["inherit", "inherit", "inherit"]
   });
@@ -80021,8 +80544,8 @@ if (firstArg === "statusline") {
     console.error("Usage: terminalhire statusline --on | --off");
     process.exit(1);
   }
-  const fromDist = join61(__dirname9, "..", "..", "statusline-install.js");
-  const fromBin = join61(__dirname9, "..", "statusline-install.js");
+  const fromDist = join62(__dirname9, "..", "..", "statusline-install.js");
+  const fromBin = join62(__dirname9, "..", "statusline-install.js");
   const installer = existsSync36(fromDist) ? fromDist : fromBin;
   const { spawnSync: spawnSync13 } = await import("child_process");
   const child = spawnSync13(process.execPath, uninstall ? [installer, "--uninstall"] : [installer], {