@outerlayer/cli 0.1.0 → 0.2.0

package/dist/chunk-WZBHBH3J.js

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+
+createRequire(import.meta.url);
+
+// src/tracker-number.ts
+var MAX_TRACKER_NUMBER = Number.MAX_SAFE_INTEGER;
+function parseTrackerNumber(raw) {
+  if (raw === void 0) return void 0;
+  const text = typeof raw === "number" ? String(raw) : raw;
+  if (!/^\d+$/.test(text)) return void 0;
+  const n = Number(text);
+  if (!Number.isSafeInteger(n) || n <= 0) return void 0;
+  return n;
+}
+function trackerNumberError(flag, raw) {
+  return `invalid ${flag} "${raw}" \u2014 expected a positive integer no larger than ${MAX_TRACKER_NUMBER}`;
+}
+
+export { parseTrackerNumber, trackerNumberError };

package/dist/{chunk-YMTXR7PJ.js → chunk-YOOSBOKS.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { decodeWrappedCommand } from './chunk-ECSYRPCC.js';
+import { decodeWrappedCommand } from './chunk-R5KBGVII.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { readFileSync, mkdirSync, appendFileSync, writeFileSync } from 'fs';
 import { spawn } from 'child_process';

package/dist/{cli-3JYGL2OB.js → cli-G7DILYJY.js}

@@ -2,22 +2,20 @@
 import { createRequire } from 'node:module';
 import { pinExists, readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-A3WLZX2F.js';
 import './chunk-KFYJV2ZG.js';
-import { readStatuslineState, STATE_FRESH_MS } from './chunk-XN2XZFTK.js';
-import { compareVersions, SUPPORTED_VERSIONS, readSessionRepos } from './chunk-DEDV5V4U.js';
+import { readStatuslineState, STATE_FRESH_MS } from './chunk-NTTPJV35.js';
+import { compareVersions, SUPPORTED_VERSIONS } from './chunk-4TNZMO7V.js';
 import { C, NO_COLOR_FLAG, warnDeprecated, stripNoColor, API_KEY_FLAG_DEPRECATION } from './chunk-YRYMNBGQ.js';
-import { parseTrackerNumber, trackerNumberError } from './chunk-RCQXYLMO.js';
-import './chunk-ZJSNLVCE.js';
-import { hookFiredMarkerPath, sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, refreshCommand } from './chunk-A6NNKRJU.js';
-import { managedHookScripts, installPostRewriteHook, installPreCommitGuardHook, removePostRewriteHook, removePreCommitGuardHook, deadHooksState, preparePackageManagerCommand, contextExcludesPresent, postRewriteHookPresence } from './chunk-IWIUYLDR.js';
-import './chunk-YMTXR7PJ.js';
-import { SettingsParseError, settingsPath, readSettings, listHookCandidates, wrapHooks, writeSettings, unwrapHooks, REGISTERED_EVENTS, removeHooks, removeStatusline, cliBinResolvable, mergeHooks, AUTO_WRAP_EVENTS, mergeStatusline, isOurStatuslineSlot, statuslineWrappedOriginal, isOurHookCommand, wrappedOriginalCommand } from './chunk-ECSYRPCC.js';
+import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
+import { hookFiredMarkerPath, installedCliDistDir, sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, refreshCommand } from './chunk-NXLLURA4.js';
+import { managedHookScripts, removeJournalHooks, installPreCommitGuardHook, removePreCommitGuardHook, deadHooksState, preparePackageManagerCommand, contextExcludesPresent } from './chunk-I3ETLSNE.js';
+import { SettingsParseError, settingsPath, readSettings, listHookCandidates, wrapHooks, writeSettings, unwrapHooks, REGISTERED_EVENTS, removeHooks, removeStatusline, cliBinResolvable, mergeHooks, repointWrappedHooks, AUTO_WRAP_EVENTS, mergeStatusline, isOurStatuslineSlot, statuslineWrappedOriginal, isOurHookCommand, ourCommandBins, wrappedOriginalCommand } from './chunk-R5KBGVII.js';
 import { readCloudConfig } from './chunk-TFUIDMOB.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 import { EventEmitter } from 'events';
 import childProcess, { execFileSync } from 'child_process';
-import path, { dirname, join } from 'path';
-import fs, { unlinkSync, existsSync, readFileSync, writeFileSync, accessSync, constants, statSync, readdirSync, mkdirSync, renameSync } from 'fs';
+import path, { dirname, join, isAbsolute } from 'path';
+import fs, { existsSync, unlinkSync, readFileSync, mkdirSync, cpSync, readdirSync, renameSync, statSync, rmSync, writeFileSync, accessSync, constants, realpathSync } from 'fs';
 import process2 from 'process';
 import { stripVTControlCharacters } from 'util';
 import { fileURLToPath } from 'url';
@@ -3380,6 +3378,52 @@ function useColor() {
 
 // ../../node_modules/commander/index.js
 new Command();
+function isEphemeralBin(bin) {
+  return bin.replace(/\\/g, "/").split("/").some((p) => p === "_npx" || p === "dlx" || p.startsWith("dlx-") || p.startsWith("bunx-"));
+}
+function initHookBin(opts) {
+  const { runningBin } = opts;
+  if (opts.remove || !isAbsolute(runningBin) || !isEphemeralBin(runningBin) || !existsSync(runningBin)) return runningBin;
+  return installCliCopy({ home: opts.home, sourceBin: runningBin }).bin;
+}
+var STALE_FILE_MS = 7 * 24 * 60 * 60 * 1e3;
+function samePath(a, b) {
+  try {
+    return realpathSync(a) === realpathSync(b);
+  } catch {
+    return false;
+  }
+}
+function installCliCopy(opts) {
+  const rename = opts.rename ?? renameSync;
+  const now = opts.now ?? Date.now;
+  const targetDist = installedCliDistDir(opts.home);
+  const targetRoot = dirname(targetDist);
+  const bin = join(targetDist, "index.js");
+  const sourceDist = dirname(opts.sourceBin);
+  if (samePath(sourceDist, targetDist)) return { bin, copied: false };
+  mkdirSync(targetDist, { recursive: true });
+  const staged = join(targetRoot, `.staging-${process.pid}-${now()}`);
+  try {
+    cpSync(sourceDist, join(staged, "dist"), { recursive: true });
+    const sourcePkg = join(dirname(sourceDist), "package.json");
+    if (existsSync(sourcePkg)) cpSync(sourcePkg, join(staged, "package.json"));
+    const incoming = readdirSync(join(staged, "dist"));
+    for (const name of incoming) {
+      if (name !== "index.js") rename(join(staged, "dist", name), join(targetDist, name));
+    }
+    if (existsSync(join(staged, "package.json"))) rename(join(staged, "package.json"), join(targetRoot, "package.json"));
+    rename(join(staged, "dist", "index.js"), bin);
+    const shipped = new Set(incoming);
+    for (const name of readdirSync(targetDist)) {
+      const path2 = join(targetDist, name);
+      if (!shipped.has(name) && now() - statSync(path2).mtimeMs > STALE_FILE_MS) rmSync(path2, { recursive: true, force: true });
+    }
+  } finally {
+    rmSync(staged, { recursive: true, force: true });
+  }
+  return { bin, copied: true };
+}
 function manifestPath(home = homeFromEnv()) {
   return join(home, ".outerlayer", "hooks-manifest.json");
 }
@@ -3481,7 +3525,7 @@ function runInit(opts) {
     const statuslineRemoved = removeStatusline(hooksUnwrapped.next, opts.cliBin);
     const changed2 = hooksRemoved.changed || hooksUnwrapped.changed || statuslineRemoved.changed;
     const backupPath2 = changed2 ? writeSettings(path2, statuslineRemoved.next) : void 0;
-    const gitHookRemoval = removePostRewriteHook(opts.cwd ?? process.cwd());
+    const gitHookRemoval2 = removeJournalHooks(opts.cwd ?? process.cwd());
     const guardHookRemoval = removePreCommitGuardHook(opts.cwd ?? process.cwd());
     recordRemoval(manifestHome, path2);
     const remaining = readManifest(manifestHome);
@@ -3499,7 +3543,7 @@ function runInit(opts) {
       backupPath: backupPath2,
       events: REGISTERED_EVENTS,
       removed: true,
-      gitHookRemoved: gitHookRemoval.removed,
+      gitHookRemoved: gitHookRemoval2.removed,
       guardHookRemoved: guardHookRemoval.removed,
       wrapped: [],
       unwrappedCount: hooksUnwrapped.unwrapped,
@@ -3510,8 +3554,9 @@ function runInit(opts) {
     return { path: path2, changed: false, events: REGISTERED_EVENTS, wrapped: [], cliBinUnresolved: true };
   }
   const merged = mergeHooks(current, opts.cliBin);
-  let next = merged.next;
-  let changed = merged.changed;
+  const repointed = repointWrappedHooks(merged.next, opts.cliBin);
+  let next = repointed.next;
+  let changed = merged.changed || repointed.changed;
   let wrapped = [];
   if (opts.wrapHooks ?? true) {
     const wrapResult = wrapHooks(next, opts.cliBin, { events: [...AUTO_WRAP_EVENTS] });
@@ -3538,9 +3583,7 @@ function runInit(opts) {
   if (statusline && statusline !== "skipped") {
     recordStatusline(manifestHome, path2, statuslineWrappedCommand !== void 0 ? "wrapped" : "installed", statuslineWrappedCommand);
   }
-  const gitHook = installPostRewriteHook(opts.cwd ?? process.cwd(), {
-    stampTrailers: readCloudConfig().gitHooks?.stampTrailers !== false
-  });
+  const gitHookRemoval = removeJournalHooks(opts.cwd ?? process.cwd());
   const guardHook = installPreCommitGuardHook(opts.cwd ?? process.cwd());
   let gitignoreUpdated = false;
   if (scope === "project" && opts.addGitignore) {
@@ -3552,7 +3595,7 @@ function runInit(opts) {
     backupPath,
     events: REGISTERED_EVENTS,
     gitignoreUpdated,
-    gitHook,
+    ...gitHookRemoval.removed ? { gitHookRemoved: true } : {},
     guardHook,
     wrapped,
     ...statusline ? { statusline } : {},
@@ -3799,48 +3842,8 @@ function checkHooks(home, cwd, transcripts, now) {
   if (firing) checks.push(firing);
   const wrapped = checkWrappedHooks(home, cwd);
   if (wrapped) checks.push(wrapped);
-  const journal = checkJournalHookCoverage(home);
-  if (journal) checks.push(journal);
   return checks;
 }
-function checkJournalHookCoverage(home) {
-  const name = "Rewrite journal hooks";
-  const repos = readSessionRepos(home).filter((r) => existsSync(r.repoRoot));
-  if (repos.length === 0) return null;
-  let ours = 0;
-  let managed = 0;
-  let foreign = 0;
-  const absentRepos = [];
-  for (const r of repos) {
-    switch (postRewriteHookPresence(r.repoRoot)) {
-      case "ours":
-        ours += 1;
-        break;
-      case "custom-hooks-path":
-        managed += 1;
-        break;
-      case "foreign":
-        foreign += 1;
-        break;
-      case "absent":
-        absentRepos.push(r.gitRepo || r.repoRoot);
-        break;
-    }
-  }
-  const parts = [`${ours}/${repos.length} synced repos covered`];
-  if (managed > 0) parts.push(`${managed} hook-managed (README has the snippet)`);
-  if (foreign > 0) parts.push(`${foreign} foreign hook`);
-  if (absentRepos.length > 0) {
-    const sample = absentRepos.slice(0, 3).join(", ") + (absentRepos.length > 3 ? ", \u2026" : "");
-    return {
-      name,
-      status: "warn",
-      detail: `${parts.join(", ")} \u2014 ${absentRepos.length} without rewrite journaling: ${sample}`,
-      fix: 'Run `outerlayer hooks install-git` in each repo, or set {"gitHooks":{"autoInstall":true}} in ~/.outerlayer/config.json.'
-    };
-  }
-  return { name, status: "pass", detail: parts.join(", ") };
-}
 function checkHooksInstalled(home, cwd, firingFresh) {
   const name = "Hooks installed";
   const readablePaths = [];
@@ -3858,6 +3861,15 @@ function checkHooksInstalled(home, cwd, firingFresh) {
       (event) => (settings.hooks?.[event] ?? []).some((b) => (b.hooks ?? []).some(isOurHookCommand))
     );
     if (installed.length === REGISTERED_EVENTS.length) {
+      const missing = ourCommandBins(settings).filter((bin) => !cliBinResolvable(bin));
+      if (missing.length > 0) {
+        return {
+          name,
+          status: "fail",
+          detail: `hooks in ${path2} run ${missing.join(", ")}, which no longer exists \u2014 no session is being captured`,
+          fix: "Run `npx @outerlayer/cli init` to reinstall."
+        };
+      }
       return { name, status: "pass", detail: `${installed.join(", ")} (${scope})` };
     }
     if (installed.length > 0) {
@@ -4346,9 +4358,15 @@ function formatGuardInstallOutput(guard) {
       if (guard.adopted) {
         return { lines: [`${C.green}\u2713${C.reset} materialized-context commit guard hand-adopted at ${guard.path} (core.hooksPath) \u2014 left untouched.`] };
       }
-      return { lines: [] };
+      return {
+        lines: [
+          `${C.yellow}!${C.reset} this repo manages hooks in its working tree (core.hooksPath) \u2014 nothing written.`,
+          `  Add the script to your hook manager instead: ${C.yellow}outerlayer hooks install-git --print${C.reset}`
+        ],
+        exitCode: 1
+      };
     case "not-a-repo":
-      return { lines: [] };
+      return { lines: [], error: "not inside a git repository." };
   }
 }
 function invokedCommandToken(argv) {
@@ -4361,12 +4379,21 @@ function buildProgram(argv = process.argv) {
     "after",
     "\nIdempotent: settings are backed up before any write, and a second run\nchanges nothing. Wrapping adds one spawn per hook firing; undo it with\n`outerlayer hooks unwrap`. An occupied status-line slot is wrapped, never\nreplaced.\n"
   ).action((opts) => {
-    const cliBin = resolveCliBin();
+    let cliBin = resolveCliBin();
     if (opts.org) {
       process.stdout.write(orgRolloutSnippet(cliBin) + "\n");
       return;
     }
     const scope = opts.project ? "project" : "user";
+    try {
+      cliBin = initHookBin({ home: homeFromEnv(), runningBin: cliBin, remove: opts.remove === true });
+    } catch (err) {
+      fail(
+        `could not copy the CLI to ~/.outerlayer/cli: ${err instanceof Error ? err.message : String(err)}
+  Hooks were not changed. Fix the permissions on ~/.outerlayer, then re-run ${C.yellow}outerlayer init${C.reset}.`
+      );
+      return;
+    }
     try {
       const result = runInit({
         scope,
@@ -4445,7 +4472,7 @@ ${fails === 0 ? `${C.green}\u2713${C.reset}` : `${C.red}\u2717${C.reset}`} ${pas
     "\nIncremental: only sessions newer than the last checkpoint ship. The tier\nis applied on this machine before anything leaves it; `--dry-run` prints\nexactly what would. The hook-triggered background sync runs `--quiet`.\nExit 2 means the server rejected at least one session.\n"
   ).action(async (opts) => {
     warnIfApiKeyFlag(opts);
-    const { runSync, SyncConfigError, SyncTransportError } = await import('./sync-cmd-C5UGI4SF.js');
+    const { runSync, SyncConfigError, SyncTransportError } = await import('./sync-cmd-BBAUZ5JD.js');
     try {
       const result = await runSync({
         url: opts.url,
@@ -4474,7 +4501,7 @@ ${fails === 0 ? `${C.green}\u2713${C.reset}` : `${C.red}\u2717${C.reset}`} ${pas
     if (invokedCommandToken(argv) === "watch") {
       warnDeprecated("`outerlayer watch` is now `outerlayer daemon`; the old name will be removed in a future release.");
     }
-    const { runWatch } = await import('./watch-V3K4PESQ.js');
+    const { runWatch } = await import('./watch-3DTPJETH.js');
     await runWatch({ once: opts.once });
   });
   program2.command("hook <event>", { hidden: true }).description("capture-hook fast path, installed by `init`").action(() => {
@@ -4513,7 +4540,7 @@ async function compileContext(opts) {
 function registerEmitCommands(program2) {
   const emitCmd = program2.command("emit").enablePositionalOptions().description("Record evidence for a work item: a named check result").argument("[name]", "the check name a validator declares (e.g. smoke.pass)").option("--link <url>", "proof link, usually the CI run URL").option("--body <text>", "one sentence recording your judgment").option("--body-file <path>", "read the sentence from a file; - reads standard input").option("--result <pass|fail>", "check outcome (default: pass)").option("--item <number>", "work item to record on directly, by its number in this factory").option("--artifact <id>", "artifact this verdict is on \u2014 only with the artifact-review check name").option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "app id the key is bound to (or OUTERLAYER_APP_ID / config)").addOption(new Option("--check", "deprecated: use `context emit --check`").hideHelp()).addOption(new Option("--dir <path>", "deprecated: use `context emit --dir`").hideHelp()).addHelpText(
     "after",
-    '\n  outerlayer emit smoke.pass --item 412 --link https://ci.example.com/run/42\n  outerlayer emit code-review --result fail --item 412 --body "The button should be red."\n  outerlayer emit artifact-review --result fail --artifact a1b2c3d4 --body "Wrong state."\n\nRecords that a named check passed or failed, anchored to a work item.\n--item is always required, in or out of a recorded session \u2014 there is no\nsession fallback. A check that ran carries the run URL as proof (--link);\na judgment you are making yourself carries one sentence (--body, or\n--body-file to read it from a file or standard input). A fail needs at\nleast one of the two. Run from inside a session, --item can only name a\nwork item that session was NOT launched for \u2014 a session cannot record a\ncheck on its own item. With nothing to attach it to, the command refuses.\n\nWho recorded a check is decided by your API key, never by what you send:\na key bound to your membership records it as yours, and nothing automated\ncan then clear it.\n\nThe check name `artifact-review` is a different act: a person\'s own pass\nor fail on one artifact, named with --artifact instead of --item, refused\nfrom inside a recorded session \u2014 an artifact verdict is a person\'s act.\n--link is refused in this mode; a fail needs --body / --body-file.\n\nSubcommands: `emit artifact <file>` for screenshots, recordings, reports and\nlogs; `emit commit-credit` to attest a commit belongs to a pull request;\n`emit finding` / `emit findings <file>` to record what was found wrong about\nthe change or about a rule.\nCompiling .outerlayer/ moved to `outerlayer context emit`.\n'
+    '\n  outerlayer emit smoke.pass --item 412 --link https://ci.example.com/run/42\n  outerlayer emit code-review --result fail --item 412 --body "The button should be red."\n  outerlayer emit artifact-review --result fail --artifact a1b2c3d4 --body "Wrong state."\n\nRecords that a named check passed or failed, anchored to a work item.\n--item is always required, in or out of a recorded session \u2014 there is no\nsession fallback. A check that ran carries the run URL as proof (--link);\na judgment you are making yourself carries one sentence (--body, or\n--body-file to read it from a file or standard input). A fail needs at\nleast one of the two. Run from inside a session, --item can only name a\nwork item that session was NOT launched for \u2014 a session cannot record a\ncheck on its own item. With nothing to attach it to, the command refuses.\n\nWho recorded a check is decided by your API key, never by what you send:\na key bound to your membership records it as yours, and nothing automated\ncan then clear it.\n\nThe check name `artifact-review` is a different act: a person\'s own pass\nor fail on one artifact, named with --artifact instead of --item, refused\nfrom inside a recorded session \u2014 an artifact verdict is a person\'s act.\n--link is refused in this mode; a fail needs --body / --body-file.\n\nSubcommands: `emit artifact <file>` for screenshots, recordings, reports and\nlogs; `emit finding` / `emit findings <file>` to record what was found wrong\nabout the change or about a rule.\nCompiling .outerlayer/ moved to `outerlayer context emit`.\n'
   ).action(async (name, opts) => {
     if (name === void 0) {
       warnDeprecated("`outerlayer emit` with no name now lives at `outerlayer context emit`; the bare form will be removed in a future release.");
@@ -4521,7 +4548,7 @@ function registerEmitCommands(program2) {
       return;
     }
     warnIfApiKeyFlag(opts);
-    const { runEmitResult, EmitResultError } = await import('./emit-result-cmd-NDFHMJX7.js');
+    const { runEmitResult, EmitResultError } = await import('./emit-result-cmd-H2T4C2K3.js');
     try {
       const result = await runEmitResult({
         name,
@@ -4550,7 +4577,7 @@ function registerEmitCommands(program2) {
     '\n  outerlayer emit artifact shot.png --caption "the dot row, current dot marked" --for LOGIN-01\n\nInside a recorded Claude Code session the artifact spools locally and ships,\nbound to that session, on the next `outerlayer sync` \u2014 but only if that\nsession was launched with OUTERLAYER_WORK; without it nothing the session\nproduces may leave the machine, and the command refuses rather than queue an\nartifact that can never ship. Otherwise it uploads immediately, anchored to a\npull request (--pr, or CI\'s PR context) or to the current git checkout. With\nnothing to attach it to, the command refuses.\n\n--replaces: an already-uploaded target is marked superseded and hidden\neverywhere, bytes and deep link untouched; a still-queued one is cancelled\nlocally so it never uploads. One correction can retire several duplicates.\n'
   ).action(async (file, opts) => {
     warnIfApiKeyFlag(opts);
-    const { runEmitArtifact, EmitArtifactError } = await import('./emit-artifact-cmd-23F4YKQ3.js');
+    const { runEmitArtifact, EmitArtifactError } = await import('./emit-artifact-cmd-UQVT3OKW.js');
     let pr;
     if (opts.pr !== void 0) {
       pr = parseTrackerNumber(opts.pr);
@@ -4584,7 +4611,7 @@ function registerEmitCommands(program2) {
     '\n  outerlayer emit finding --id r1-f1 --subject change --title "Off-by-one" \\\n    --file src/loop.ts --line 42 --severity major --kind behavior \\\n    --verdict confirmed --source reviewer --where "review pass 1"\n\nRecords one finding \u2014 what an agent noticed was wrong about the change, or\nabout a rule it ran on. Validated against the same contract the gateway\nchecks before anything is sent; a subject of context needs --rule-path,\n--rule-quote and --rule-relation together \u2014 all three are required, not\njust --rule-path.\n--item names the work item; without it, inside a recorded session, the\nitem that session was launched for is used automatically \u2014 a session may\nrecord findings on its own item, unlike `outerlayer emit <name>`.\n'
   ).action(async (opts) => {
     warnIfApiKeyFlag(opts);
-    const { runEmitFinding, EmitFindingError } = await import('./emit-finding-cmd-6K7ERPKG.js');
+    const { runEmitFinding, EmitFindingError } = await import('./emit-finding-cmd-FDOU2OPD.js');
     try {
       const result = await runEmitFinding({
         id: opts.id,
@@ -4627,7 +4654,7 @@ function registerEmitCommands(program2) {
     "\n  outerlayer emit findings review.json --item 412\n\nRecords a whole batch at once \u2014 a FindingBatch JSON file (schemaVersion,\noptional headSha / contextSourceSha, and 1-500 findings), validated against\nthe same contract `emit finding` uses before anything is sent. Re-emitting\nan id already on the item replaces that row rather than adding a second one.\n--item names the work item; without it, inside a recorded session, the item\nthat session was launched for is used automatically.\n"
   ).action(async (file, opts) => {
     warnIfApiKeyFlag(opts);
-    const { runEmitFindings, EmitFindingError } = await import('./emit-finding-cmd-6K7ERPKG.js');
+    const { runEmitFindings, EmitFindingError } = await import('./emit-finding-cmd-FDOU2OPD.js');
     try {
       const result = await runEmitFindings({
         file,
@@ -4646,29 +4673,6 @@ function registerEmitCommands(program2) {
       throw err;
     }
   });
-  emitCmd.command("commit-credit").description("Attest that a commit belongs to a pull request").requiredOption("--sha <sha>", "full 40-character hex commit SHA").requiredOption("--pr <number>", "pull request number to anchor to").option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "app id the key is bound to (or OUTERLAYER_APP_ID / config)").addHelpText(
-    "after",
-    '\nThe escape hatch for a checkout, and reflog, that no longer exists. Records\none explicit human attestation, uploaded immediately \u2014 no session detection,\nno spool. The attesting identity is the dashboard member the control plane\nresolves from the API key; it renders as "attested by <name>" in the PR\nevidence comment, distinct from recorded or recovered credit. Refused, with\nnothing stored, for a malformed SHA, an unknown PR, or a machine key with no\nmember to attest as.\n'
-  ).action(async (opts) => {
-    warnIfApiKeyFlag(opts);
-    const { runEmitCommitCredit, EmitCommitCreditError } = await import('./emit-commit-credit-cmd-2GX5M2BR.js');
-    try {
-      await runEmitCommitCredit({
-        sha: opts.sha,
-        pr: opts.pr,
-        json: opts.json,
-        url: opts.url,
-        apiKey: opts.apiKey,
-        appId: opts.appId
-      });
-    } catch (err) {
-      if (err instanceof EmitCommitCreditError) {
-        fail(err.message);
-        return;
-      }
-      throw err;
-    }
-  });
 }
 function registerWorkCommands(program2) {
   const workCmd = program2.command("work").description("Add, remove, or read what the factory is working on (the Floor)");
@@ -4677,7 +4681,7 @@ function registerWorkCommands(program2) {
     "\n  outerlayer work add --issue 42\n\nRecords that a named source \u2014 a recorded session, a CI run, or the API\nkey's bound member \u2014 is working on an issue or pull request. This is\nthe only way an item becomes visible on the Floor. A second add of the\nsame subject by the same source is a no-op.\n"
   ).action(async (opts) => {
     warnIfApiKeyFlag(opts);
-    const { runWorkAdd, WorkCommandError } = await import('./work-cmd-CW26EZZO.js');
+    const { runWorkAdd, WorkCommandError } = await import('./work-cmd-2P4BVX47.js');
     try {
       await runWorkAdd(opts);
     } catch (err) {
@@ -4693,7 +4697,7 @@ function registerWorkCommands(program2) {
     "\n  outerlayer work link-session 42\n\nNames an item that already exists on the calling session \u2014 it never\ncreates one. Create an item first with `outerlayer work add`. Linking\nthe same session to the same item twice is a no-op.\n"
   ).action(async (number, opts) => {
     warnIfApiKeyFlag(opts);
-    const { runWorkLinkSession, WorkCommandError } = await import('./work-cmd-CW26EZZO.js');
+    const { runWorkLinkSession, WorkCommandError } = await import('./work-cmd-2P4BVX47.js');
     try {
       await runWorkLinkSession({ ...opts, number });
     } catch (err) {
@@ -4715,7 +4719,7 @@ live addition remains on it.
 `
   ).action(async (opts) => {
     warnIfApiKeyFlag(opts);
-    const { runWorkRemove, WorkCommandError } = await import('./work-cmd-CW26EZZO.js');
+    const { runWorkRemove, WorkCommandError } = await import('./work-cmd-2P4BVX47.js');
     try {
       await runWorkRemove(opts);
     } catch (err) {
@@ -4728,7 +4732,7 @@ live addition remains on it.
   });
   workCmd.command("status").description("Show one item's stage, gate ledger, and additions").option("--item <number>", "the item's number inside this factory").option("--issue <number>", "issue number").option("--repo <owner/name>", "repository (default: the current checkout's remote)").option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "app id the key is bound to (or OUTERLAYER_APP_ID / config)").action(async (opts) => {
     warnIfApiKeyFlag(opts);
-    const { runWorkStatus, WorkCommandError } = await import('./work-cmd-CW26EZZO.js');
+    const { runWorkStatus, WorkCommandError } = await import('./work-cmd-2P4BVX47.js');
     try {
       await runWorkStatus(opts);
     } catch (err) {
@@ -4741,7 +4745,7 @@ live addition remains on it.
   });
   workCmd.command("list").description("List live work items for this factory").option("--stage <spec|build|review>", "filter by stage").option("--section <attention|waiting|flowing>", "filter by Queue section").option("--repo <owner/name>", "repository (default: the current checkout's remote)").option("--unclaimed", "only items with no live claim").option("--startable", "only items with no live claim, linked session, or linked pull request").option("--needs <amend>", "only items an open artifact fail is waiting on").option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "app id the key is bound to (or OUTERLAYER_APP_ID / config)").action(async (opts) => {
     warnIfApiKeyFlag(opts);
-    const { runWorkList, WorkCommandError } = await import('./work-cmd-CW26EZZO.js');
+    const { runWorkList, WorkCommandError } = await import('./work-cmd-2P4BVX47.js');
     try {
       await runWorkList(opts);
     } catch (err) {
@@ -4757,7 +4761,7 @@ live addition remains on it.
     "\n  outerlayer work claim --item 42 --kind implement\n\nRecords a lease for this host. A live lease already held by a\ndifferent host is refused; claiming again under the same host extends\nit.\n"
   ).action(async (opts) => {
     warnIfApiKeyFlag(opts);
-    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-FQDWQVT2.js');
+    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-5AUNCLS2.js');
     try {
       await runWorkClaim(opts);
     } catch (err) {
@@ -4773,7 +4777,7 @@ live addition remains on it.
     "\n  outerlayer work renew --item 42\n\nExtends this host's own live lease. Refused with a 410 if the lease\nhas expired, or a 403 if a different host holds it.\n"
   ).action(async (opts) => {
     warnIfApiKeyFlag(opts);
-    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-FQDWQVT2.js');
+    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-5AUNCLS2.js');
     try {
       await runWorkRenew(opts);
     } catch (err) {
@@ -4792,7 +4796,7 @@ live addition remains on it.
     "\n  outerlayer work release --item 42 --outcome ok\n\nMarks this host's lease released, optionally with an outcome.\nReleasing an already-released lease is a no-op that returns the\nrecorded release time and outcome.\n"
   ).action(async (opts) => {
     warnIfApiKeyFlag(opts);
-    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-FQDWQVT2.js');
+    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-5AUNCLS2.js');
     try {
       await runWorkRelease(opts);
     } catch (err) {
@@ -4808,7 +4812,7 @@ live addition remains on it.
     "\n  outerlayer work pr 481\n\nRun inside a session already on a work item. Records that pull\nrequest 481 in the checkout's repository belongs to that item \u2014 the\nsame fact a `pr-link` in the session's own transcript records on\nsync. Idempotent: declaring the same pull request twice is a no-op.\n"
   ).action(async (number, opts) => {
     warnIfApiKeyFlag(opts);
-    const { runWorkPr, WorkPrCommandError } = await import('./work-pr-cmd-W2QNMWXP.js');
+    const { runWorkPr, WorkPrCommandError } = await import('./work-pr-cmd-AZQPWH4H.js');
     try {
       await runWorkPr({ ...opts, number });
     } catch (err) {
@@ -4825,7 +4829,7 @@ function registerRunnerCommands(program2) {
   const configOption = "the cloud config file to run against (default: ~/.outerlayer/config.json)";
   runnerCmd.command("start").description("Run the loop: claim work, run it, report, clean up, repeat").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-POF7DEQW.js');
-    const { start, RunnerStartError } = await import('./loop-NFSOBUUJ.js');
+    const { start, RunnerStartError } = await import('./loop-ASZRX3CZ.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-PTW76F56.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     try {
@@ -4840,7 +4844,7 @@ function registerRunnerCommands(program2) {
   });
   runnerCmd.command("check").description("Validate the config, the hooks and the key, and print the effective settings").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath, loadRunnerConfig, checkHooks: checkHooks2, RunnerConfigError } = await import('./config-POF7DEQW.js');
-    const { probeCredentials } = await import('./loop-NFSOBUUJ.js');
+    const { probeCredentials } = await import('./loop-ASZRX3CZ.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     let config;
     try {
@@ -4913,15 +4917,15 @@ Next:
   });
   runnerCmd.command("stop").description("Take no more work; wait for running jobs to finish, then exit").option("--config <path>", "the cloud config file naming the runner to stop").option("--now", "end running jobs immediately, with outcome stopped").action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-POF7DEQW.js');
-    const { requestStop } = await import('./loop-NFSOBUUJ.js');
+    const { requestStop } = await import('./loop-ASZRX3CZ.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     await requestStop(configPath, Boolean(opts.now));
   });
   runnerCmd.command("status").description("List running jobs; with --recent, finished ones too").option("--config <path>", "the cloud config file naming the runner to inspect").option("--recent", "also list finished jobs, newest first, capped at 20").option("--json", "machine-readable JSON output").action(async (opts) => {
     const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-POF7DEQW.js');
     const { jobsDir } = await import('./paths-D2VGWWFI.js');
-    const { listJobFiles, runnerProcessState } = await import('./loop-NFSOBUUJ.js');
-    const { renderStatus } = await import('./status-WGOJTXZF.js');
+    const { listJobFiles, runnerProcessState } = await import('./loop-ASZRX3CZ.js');
+    const { renderStatus } = await import('./status-I27IST4L.js');
     const path2 = await import('path');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const all = listJobFiles(configPath);
@@ -4959,7 +4963,7 @@ Next:
   });
   runnerCmd.command("logs").argument("<item>", "the work item's number in the factory").description("Print the newest attempt's log for one item").option("--config <path>", "the cloud config file naming the runner to inspect").option("-f, --follow", "keep printing as the log grows").action(async (itemArg, opts) => {
     const { defaultRunnerConfigPath } = await import('./config-POF7DEQW.js');
-    const { listJobFiles } = await import('./loop-NFSOBUUJ.js');
+    const { listJobFiles } = await import('./loop-ASZRX3CZ.js');
     const { newestAttempt, logPathFor, tail, RunnerLogsError } = await import('./logs-TRNPQM42.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const item = parseTrackerNumber(itemArg);
@@ -4994,9 +4998,9 @@ function registerHooksCommands(program2) {
     "after",
     "\n`init` auto-wraps PreToolUse/PostToolUse hooks; these subcommands cover the\nrest: manual re-scans, other events, and undo.\n"
   );
-  hooksCmd.command("install-git").description("Install the rewrite-journal and commit-guard git hooks in this repo").option("--print", "print the hook scripts instead of installing").addHelpText(
+  hooksCmd.command("install-git").description("Install the commit-guard git hook in this repo").option("--print", "print the hook scripts instead of installing").addHelpText(
     "after",
-    "\nThe same install `init` performs. `--print` writes the scripts to stdout for\nrepositories that manage hooks in-tree (husky and friends).\n"
+    "\nThe same install `init` performs. `--print` writes the script to stdout for\nrepositories that manage hooks in-tree (husky and friends).\n"
   ).action((opts) => {
     if (opts.print) {
       for (const [name, script] of managedHookScripts()) {
@@ -5006,38 +5010,17 @@ ${script}
       }
       return;
     }
-    const { status, path: path2 } = installPostRewriteHook(process.cwd(), {
-      stampTrailers: readCloudConfig().gitHooks?.stampTrailers !== false
-    });
-    switch (status) {
-      case "installed":
-      case "updated":
-      case "unchanged":
-        process.stdout.write(`${C.green}\u2713${C.reset} post-rewrite journal hook ${status} \u2192 ${path2}
+    const removal = removeJournalHooks(process.cwd());
+    if (removal.removed) {
+      process.stdout.write(`${C.green}\u2713${C.reset} removed the commit journal hooks an earlier version installed \u2192 ${removal.path}
 `);
-        break;
-      case "skipped-foreign":
-        process.stdout.write(
-          `${C.yellow}!${C.reset} a post-rewrite hook we did not write already exists (${path2}) \u2014 left untouched.
-  Append the journal script yourself: ${C.yellow}outerlayer hooks install-git --print${C.reset}
-`
-        );
-        process.exitCode = 1;
-        break;
-      case "skipped-custom-hooks-path":
-        process.stdout.write(
-          `${C.yellow}!${C.reset} this repo manages hooks in its working tree (core.hooksPath) \u2014 nothing written.
-  Add the script to your hook manager instead: ${C.yellow}outerlayer hooks install-git --print${C.reset}
-`
-        );
-        process.exitCode = 1;
-        break;
-      case "not-a-repo":
-        fail("not inside a git repository.");
-        break;
     }
     const guard = installPreCommitGuardHook(process.cwd());
     const report = formatGuardInstallOutput(guard);
+    if (report.error !== void 0) {
+      fail(report.error);
+      return;
+    }
     for (const line of report.lines) process.stdout.write(`${line}
 `);
     if (report.exitCode !== void 0) process.exitCode = report.exitCode;
@@ -5100,7 +5083,13 @@ ${C.dim}${file.path}${C.reset}
       fail("--no-input forbids prompting; pass --all to wrap every candidate without being asked.");
       return;
     }
-    const cliBin = resolveCliBin();
+    let cliBin;
+    try {
+      cliBin = initHookBin({ home: homeFromEnv(), runningBin: resolveCliBin(), remove: false });
+    } catch (err) {
+      fail(`could not copy the CLI to ~/.outerlayer/cli: ${err instanceof Error ? err.message : String(err)}`);
+      return;
+    }
     const scope = opts.project ? "project" : "user";
     const path2 = settingsPath(scope);
     let settings;
@@ -5293,7 +5282,7 @@ function registerContextCommands(program2) {
     "after",
     "\nThe same flow SessionStart runs automatically, exposed for a manual retry or a\nfirst check outside a session. Writes AGENTS.md, .claude/**, and .outerlayer/**.\n"
   ).action(async (opts) => {
-    const { materializeContext } = await import('./context-materialize-J6CRQ7O7.js');
+    const { materializeContext } = await import('./context-materialize-6WKT3RBQ.js');
     const result = await materializeContext({ cwd: process.cwd(), sessionId: `manual-${Date.now()}` });
     const output = formatContextMaterializeOutput(result);
     if (output.exitCode !== void 0) process.exitCode = output.exitCode;

package/dist/{context-materialize-J6CRQ7O7.js → context-materialize-6WKT3RBQ.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { readPin, pinExists, writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, SOURCE_CACHE_TTL_SUCCESS_MS, readContextManifest, isLastCheckFresh, manifestFilesPresent, readDegraded, touchLastCheck, clearDegraded, writeContextManifest, writePinIfChanged, readSourceCache, isSourceCacheFresh } from './chunk-A3WLZX2F.js';
 import { parseGoverns, normalizeRepoName, CONTEXT_SOURCE_CONFIG_PATH } from './chunk-KFYJV2ZG.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
-import { ensureContextExcludes, ensurePreCommitGuardHook } from './chunk-IWIUYLDR.js';
+import { ensureContextExcludes, ensurePreCommitGuardHook } from './chunk-I3ETLSNE.js';
 import { readCloudConfig } from './chunk-TFUIDMOB.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';

package/dist/{emit-artifact-cmd-23F4YKQ3.js → emit-artifact-cmd-UQVT3OKW.js}

@@ -1,13 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { staleBuildRefusal, staleBuildWarning, ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_FILENAME_LENGTH, readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, mediaTypeForArtifactPath, inferArtifactKind, resolveRepoIdentity, detectActiveSession, launchRefusalForSession, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, detectCi, appendArtifactTombstone, ARTIFACT_MAX_REPLACES_TARGETS } from './chunk-DEDV5V4U.js';
+import { staleBuildRefusal, staleBuildWarning, readEffectiveArtifactSpoolState, localArtifactIds, isArtifactTombstoned, detectActiveSession, launchRefusalForSession, artifactBlobsDir, appendArtifactRecord, artifactsSpoolPath, findPendingArtifactRecord, detectCi, appendArtifactTombstone } from './chunk-U32VSRLO.js';
+import { ARTIFACT_MAX_CAPTION_LENGTH, ArtifactCriterionIdSchema, ARTIFACT_MAX_FILENAME_LENGTH, mediaTypeForArtifactPath, inferArtifactKind, resolveRepoIdentity, ARTIFACT_MAX_REPLACES_TARGETS } from './chunk-4TNZMO7V.js';
 import './chunk-YRYMNBGQ.js';
-import { parseTrackerNumber, trackerNumberError } from './chunk-RCQXYLMO.js';
+import './chunk-65WXAANR.js';
+import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-A6NNKRJU.js';
-import './chunk-IWIUYLDR.js';
-import './chunk-YMTXR7PJ.js';
-import './chunk-ECSYRPCC.js';
+import './chunk-NXLLURA4.js';
+import './chunk-I3ETLSNE.js';
+import './chunk-YOOSBOKS.js';
+import './chunk-R5KBGVII.js';
 import { readCloudConfig } from './chunk-TFUIDMOB.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';

package/dist/{emit-finding-cmd-6K7ERPKG.js → emit-finding-cmd-FDOU2OPD.js}

@@ -1,13 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { FindingBatchSchema, resolveRepoIdentity, detectActiveSession, launchRefusalForSession } from './chunk-DEDV5V4U.js';
+import { detectActiveSession, launchRefusalForSession } from './chunk-U32VSRLO.js';
+import { FindingBatchSchema, resolveRepoIdentity } from './chunk-4TNZMO7V.js';
 import './chunk-YRYMNBGQ.js';
-import { launchedItemForSession, parseTrackerNumber, trackerNumberError } from './chunk-RCQXYLMO.js';
+import { launchedItemForSession } from './chunk-65WXAANR.js';
+import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { readLatestProvenanceForSession } from './chunk-ZJSNLVCE.js';
-import './chunk-A6NNKRJU.js';
-import './chunk-IWIUYLDR.js';
-import './chunk-YMTXR7PJ.js';
-import './chunk-ECSYRPCC.js';
+import './chunk-NXLLURA4.js';
+import './chunk-I3ETLSNE.js';
+import './chunk-YOOSBOKS.js';
+import './chunk-R5KBGVII.js';
 import { readCloudConfig } from './chunk-TFUIDMOB.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';