diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..b1ebcdc
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,11 @@
+*
+!container/
+!container/Dockerfile
+!shared/
+!shared/verification-snapshot.d.ts
+!shared/verification-snapshot.js
+!runners/
+!runners/agent-runner/
+!runners/agent-runner/**
+!runners/codex-runner/
+!runners/codex-runner/**
diff --git a/container/Dockerfile b/container/Dockerfile
index f6ee1ae..08263dc 100644
--- a/container/Dockerfile
+++ b/container/Dockerfile
@@ -56,24 +56,27 @@ RUN curl -fsSL https://bun.sh/install | bash
 # Create app directory
 WORKDIR /app
 
+# Copy shared verification snapshot helper used by agent-runner
+COPY shared/verification-snapshot.* ./shared/
+
 # Copy agent-runner (Claude Code)
-COPY runners/agent-runner/package*.json ./agent/
-RUN bun install --cwd ./agent
-COPY runners/agent-runner/ ./agent/
-RUN bun run --cwd ./agent build
+COPY runners/agent-runner/package*.json ./runners/agent-runner/
+RUN bun install --cwd ./runners/agent-runner
+COPY runners/agent-runner/ ./runners/agent-runner/
+RUN bun run --cwd ./runners/agent-runner build
 
 # Copy codex-runner
-COPY runners/codex-runner/package*.json ./codex/
-RUN bun install --cwd ./codex
-COPY runners/codex-runner/ ./codex/
-RUN bun run --cwd ./codex build
+COPY runners/codex-runner/package*.json ./runners/codex-runner/
+RUN bun install --cwd ./runners/codex-runner
+COPY runners/codex-runner/ ./runners/codex-runner/
+RUN bun run --cwd ./runners/codex-runner build
 
 # Create workspace directories
 RUN mkdir -p /workspace/project /workspace/group /workspace/global \
     /workspace/ipc/messages /workspace/ipc/input
 
 # Entrypoint (fallback — persistent containers use docker exec with explicit runner path)
-RUN printf '#!/bin/bash\nset -e\ncat > /tmp/input.json\nbun /app/agent/dist/index.js < /tmp/input.json\n' \
+RUN printf '#!/bin/bash\nset -e\ncat > /tmp/input.json\nbun /app/runners/agent-runner/dist/index.js < /tmp/input.json\n' \
     > /app/entrypoint.sh && chmod +x /app/entrypoint.sh
 
 # Set ownership to node user (non-root)
diff --git a/src/message-runtime.test.ts b/src/message-runtime.test.ts
index 93c221f..277616e 100644
--- a/src/message-runtime.test.ts
+++ b/src/message-runtime.test.ts
@@ -2200,7 +2200,7 @@ If your first line is DONE_WITH_CONCERNS, the system will reopen review instead
     });
 
     expect(result).toBe(true);
-  expect(ownerChannel.sendMessage).toHaveBeenCalledWith(
+    expect(ownerChannel.sendMessage).toHaveBeenCalledWith(
       chatJid,
       'DONE_WITH_CONCERNS\nowner handled fresh in_review input',
     );