@outerlayer/cli 0.10.0 → 0.10.2

package/dist/{chunk-LTJPX7TX.js → chunk-IU4NZROR.js}

@@ -21971,15 +21971,15 @@ var ModelRegistryImpl = class {
 };
 var models_default = {
   version: "1.0.0",
-  generatedAt: "2026-10-06T05:36:56.720Z",
+  generatedAt: "2026-10-07T05:07:15.321Z",
   sources: {
     litellm: {
-      fetchedAt: "2026-10-06T05:36:56.720Z",
-      modelCount: 1890
+      fetchedAt: "2026-10-07T05:07:15.321Z",
+      modelCount: 1896
     },
     openrouter: {
-      fetchedAt: "2026-10-06T05:36:56.720Z",
-      modelCount: 198
+      fetchedAt: "2026-10-07T05:07:15.321Z",
+      modelCount: 199
     }
   },
   models: {
@@ -31529,7 +31529,7 @@ var models_default = {
     "deep-research-pro-preview-12-2025": {
       provider: "google",
       displayName: "Deep Research Pro Preview 12 2025",
-      mode: "image_generation",
+      mode: "chat",
       source: "litellm",
       pricing: {
         inputCostPerToken: 2e-6,
@@ -35588,7 +35588,8 @@ var models_default = {
       },
       context: {
         maxInputTokens: 512
-      }
+      },
+      deprecationDate: "2026-10-07"
     },
     "BAAI/bge-base-en-v1.5": {
       provider: "together_ai",
@@ -37282,7 +37283,7 @@ var models_default = {
     "vertex_ai/deep-research-pro-preview-12-2025": {
       provider: "google",
       displayName: "Vertex Ai/deep Research Pro Preview 12 2025",
-      mode: "image_generation",
+      mode: "chat",
       source: "litellm",
       pricing: {
         inputCostPerToken: 2e-6,
@@ -41838,7 +41839,8 @@ var models_default = {
       context: {
         maxInputTokens: 40960,
         maxOutputTokens: 40960
-      }
+      },
+      deprecationDate: "2026-10-07"
     },
     "accounts/fireworks/models/qwen3-next-80b-a3b-instruct": {
       provider: "fireworks_ai",
@@ -52800,6 +52802,7 @@ var models_default = {
         pdfInput: true,
         webSearch: true
       },
+      deprecationDate: "2026-11-19",
       supportedParameters: [
         "max_tokens",
         "temperature",
@@ -54809,6 +54812,7 @@ var models_default = {
         pdfInput: true,
         webSearch: true
       },
+      deprecationDate: "2027-01-28",
       supportedParameters: [
         "max_tokens",
         "temperature",
@@ -55476,7 +55480,7 @@ var models_default = {
       mode: "chat",
       source: "litellm",
       pricing: {
-        inputCostPerToken: 125e-8,
+        inputCostPerToken: 2e-6,
         outputCostPerToken: 6e-6,
         cacheReadCostPerToken: 5e-7,
         tiers: [
@@ -56514,9 +56518,9 @@ var models_default = {
       mode: "chat",
       source: "litellm",
       pricing: {
-        inputCostPerToken: 3e-6,
-        outputCostPerToken: 15e-6,
-        cacheReadCostPerToken: 3e-7
+        inputCostPerToken: 27e-7,
+        outputCostPerToken: 135e-7,
+        cacheReadCostPerToken: 27e-8
       },
       context: {
         maxInputTokens: 1048576
@@ -57863,8 +57867,8 @@ var models_default = {
       mode: "chat",
       source: "litellm",
       pricing: {
-        inputCostPerToken: 9e-8,
-        outputCostPerToken: 282e-9
+        inputCostPerToken: 15e-8,
+        outputCostPerToken: 47e-8
       },
       context: {
         maxInputTokens: 1e6
@@ -58167,7 +58171,7 @@ var models_default = {
         promptCaching: true,
         reasoning: true
       },
-      deprecationDate: "2026-10-03"
+      deprecationDate: "2027-04-16"
     },
     "us-gov-west-1/nvidia.nemotron-nano-3-30b": {
       provider: "bedrock",
@@ -63658,7 +63662,7 @@ var models_default = {
         outputCostPerToken: 12e-6
       },
       context: {
-        maxInputTokens: 131072,
+        maxInputTokens: 1048576,
         maxOutputTokens: 65536
       },
       capabilities: {
@@ -63679,7 +63683,7 @@ var models_default = {
         outputCostPerToken: 12e-6
       },
       context: {
-        maxInputTokens: 131072,
+        maxInputTokens: 1048576,
         maxOutputTokens: 65536
       },
       capabilities: {
@@ -65960,6 +65964,233 @@ var models_default = {
         audioInput: true,
         audioOutput: true
       }
+    },
+    "us/gpt-6.1-sol": {
+      provider: "azure",
+      displayName: "Us/gpt 6.1 Sol",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 22e-7,
+        outputCostPerToken: 11e-6,
+        cacheCreationCostPerToken: 275e-8,
+        cacheReadCostPerToken: 11e-8,
+        tiers: [
+          {
+            aboveInputTokens: 272e3,
+            cacheCreationCostPerToken: 55e-7,
+            cacheReadCostPerToken: 22e-8,
+            inputCostPerToken: 44e-7,
+            outputCostPerToken: 165e-7
+          }
+        ]
+      },
+      context: {
+        maxInputTokens: 922e3,
+        maxOutputTokens: 128e3
+      },
+      capabilities: {
+        vision: true,
+        functionCalling: true,
+        parallelFunctionCalling: true,
+        structuredOutput: true,
+        promptCaching: true,
+        reasoning: true,
+        pdfInput: true,
+        webSearch: true
+      },
+      deprecationDate: "2028-03-11"
+    },
+    "eu/gpt-6.1-sol": {
+      provider: "azure",
+      displayName: "Eu/gpt 6.1 Sol",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 24e-7,
+        outputCostPerToken: 12e-6,
+        cacheCreationCostPerToken: 3e-6,
+        cacheReadCostPerToken: 12e-8,
+        tiers: [
+          {
+            aboveInputTokens: 272e3,
+            cacheCreationCostPerToken: 6e-6,
+            cacheReadCostPerToken: 24e-8,
+            inputCostPerToken: 48e-7,
+            outputCostPerToken: 18e-6
+          }
+        ]
+      },
+      context: {
+        maxInputTokens: 922e3,
+        maxOutputTokens: 128e3
+      },
+      capabilities: {
+        vision: true,
+        functionCalling: true,
+        parallelFunctionCalling: true,
+        structuredOutput: true,
+        promptCaching: true,
+        reasoning: true,
+        pdfInput: true,
+        webSearch: true
+      },
+      deprecationDate: "2028-03-11"
+    },
+    "apac/gpt-6.1-sol": {
+      provider: "azure",
+      displayName: "Apac/gpt 6.1 Sol",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 24e-7,
+        outputCostPerToken: 12e-6,
+        cacheCreationCostPerToken: 3e-6,
+        cacheReadCostPerToken: 12e-8,
+        tiers: [
+          {
+            aboveInputTokens: 272e3,
+            cacheCreationCostPerToken: 6e-6,
+            cacheReadCostPerToken: 24e-8,
+            inputCostPerToken: 48e-7,
+            outputCostPerToken: 18e-6
+          }
+        ]
+      },
+      context: {
+        maxInputTokens: 922e3,
+        maxOutputTokens: 128e3
+      },
+      capabilities: {
+        vision: true,
+        functionCalling: true,
+        parallelFunctionCalling: true,
+        structuredOutput: true,
+        promptCaching: true,
+        reasoning: true,
+        pdfInput: true,
+        webSearch: true
+      },
+      deprecationDate: "2028-03-11"
+    },
+    "mistral-large-4": {
+      provider: "mistral",
+      displayName: "Mistral Large 4",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 68e-8,
+        outputCostPerToken: 209e-8,
+        cacheReadCostPerToken: 68e-9
+      },
+      context: {
+        maxInputTokens: 524288
+      },
+      capabilities: {
+        vision: true,
+        functionCalling: true,
+        structuredOutput: true,
+        promptCaching: true,
+        reasoning: true
+      }
+    },
+    "mistral-large-4-0": {
+      provider: "mistral",
+      displayName: "Mistral Large 4 0",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 68e-8,
+        outputCostPerToken: 209e-8,
+        cacheReadCostPerToken: 68e-9
+      },
+      context: {
+        maxInputTokens: 524288
+      },
+      capabilities: {
+        vision: true,
+        functionCalling: true,
+        structuredOutput: true,
+        promptCaching: true,
+        reasoning: true
+      }
+    },
+    "gemini-nano-banana-2.1": {
+      provider: "google",
+      displayName: "Google: Nano Banana 2.1",
+      mode: "image_generation",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 15e-7,
+        outputCostPerToken: 75e-7,
+        cacheReadCostPerToken: 15e-8
+      },
+      context: {
+        maxInputTokens: 131072,
+        maxOutputTokens: 32768
+      },
+      capabilities: {
+        vision: true,
+        functionCalling: false,
+        structuredOutput: false,
+        promptCaching: true,
+        reasoning: true,
+        pdfInput: true,
+        webSearch: true
+      },
+      supportedParameters: [
+        "max_tokens",
+        "temperature",
+        "top_p"
+      ]
+    },
+    "vertex_ai/gemini-nano-banana-2.1": {
+      provider: "google",
+      displayName: "Vertex Ai/gemini Nano Banana 2.1",
+      mode: "image_generation",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 15e-7,
+        outputCostPerToken: 75e-7,
+        cacheReadCostPerToken: 15e-8
+      },
+      context: {
+        maxInputTokens: 131072,
+        maxOutputTokens: 32768
+      },
+      capabilities: {
+        vision: true,
+        functionCalling: false,
+        structuredOutput: false,
+        promptCaching: true,
+        reasoning: true,
+        pdfInput: true,
+        webSearch: true
+      }
+    },
+    "in.moonshotai.kimi-k3": {
+      provider: "bedrock",
+      displayName: "In.moonshotai.kimi K3",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 33e-7,
+        outputCostPerToken: 165e-7,
+        cacheCreationCostPerToken: 4125e-9,
+        cacheReadCostPerToken: 33e-8
+      },
+      context: {
+        maxInputTokens: 1e6,
+        maxOutputTokens: 131072
+      },
+      capabilities: {
+        vision: true,
+        functionCalling: true,
+        structuredOutput: true,
+        promptCaching: true,
+        reasoning: true,
+        audioInput: false
+      }
     }
   }
 };

package/dist/{chunk-TV36SKEN.js → chunk-JSUUXA5W.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { BUILDKIT_IMAGE } from './chunk-CX22S5BA.js';
-import { compareVersions } from './chunk-LTJPX7TX.js';
+import { compareVersions } from './chunk-IU4NZROR.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
 import { JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_PORT, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-M6G7TJVF.js';
 import { runnerDir } from './chunk-ZM2IMMYN.js';

package/dist/{chunk-OSKO3PAL.js → chunk-KZ5M4QOB.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { writeJobFile, readJobFile } from './chunk-T6OIJQRT.js';
-import { senderPidfile } from './chunk-VMK7I3TB.js';
+import { senderPidfile } from './chunk-HKUH5AR2.js';
 import { DOCKERD_LOG } from './chunk-V42JY4F6.js';
-import { installScrubContext } from './chunk-543OT6V5.js';
-import { AssetError, describeCallFailure, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, refusalCode, resolveAgentUser, AgentUserError, runBuildSteps, removeStagedContext, stageGovernedContext, shellQuote, createRunnerLog, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, formatDuration, retrySend, formatClock, containerSenderCommand, syncInContainer, copyTranscriptsFromContainer, GH_CONFIG_YML, ghHostsYml, ADDED_USER, isLiteralAddress, signalInContainer, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript } from './chunk-LBU4CLK5.js';
+import { installScrubContext } from './chunk-Y6P5XX2B.js';
+import { AssetError, describeCallFailure, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, refusalCode, resolveAgentUser, AgentUserError, runBuildSteps, removeStagedContext, stageGovernedContext, shellQuote, createRunnerLog, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, formatDuration, retrySend, formatClock, containerSenderCommand, syncInContainer, copyTranscriptsFromContainer, GH_CONFIG_YML, ghHostsYml, ADDED_USER, isLiteralAddress, signalInContainer, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript } from './chunk-BREEX2Z7.js';
 import { readBranchHead, diffBetween, fetchCommit } from './chunk-3FMPZPJQ.js';
 import { isSameProcess, startTimeOf } from './chunk-N5FOE5PS.js';
-import { childEnvironment } from './chunk-FKFGQJNN.js';
+import { childEnvironment } from './chunk-VVIRHTH4.js';
 import { CLAUDE_CODE_VERSION } from './chunk-CX22S5BA.js';
 import { waitForAgent, vmExecArgs } from './chunk-6CXYORUS.js';
 import { socketPathProblem, vsockLinks, linkVsockSockets } from './chunk-S6IUUNCD.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-KWCJLAHQ.js';
-import { planArtifactUpload } from './chunk-ZEQMTBRD.js';
-import { scrubText } from './chunk-LTJPX7TX.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-DTDZXDQ3.js';
+import { planArtifactUpload } from './chunk-VDI5POCC.js';
+import { scrubText } from './chunk-IU4NZROR.js';
 import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-M2PBLRB7.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
 import { claudeCredential, buildEnvironment, JOB_MOUNT, CHECKOUT_DIR, parseIsolation, proxyEnvironment, containerLocalAddress, destinationEnvironment, CLAUDE_CREDENTIAL_VARIABLES, builtInEnvironment, startBuildServices, BUILT_IN_NAMES, AGENT_CREDENTIAL_MISSING, sharedUserEnvironment, headerVariables, withTunnelRecord, RELAY_PORT, checkEnvironment, EVAL_INPUT_DIR } from './chunk-M6G7TJVF.js';

package/dist/{chunk-WJBJY5DQ.js → chunk-MC6J453K.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-QPPPUKQJ.js';
-import { MIN_ENGINE_MAJOR } from './chunk-LBU4CLK5.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-472KC6JV.js';
+import { MIN_ENGINE_MAJOR } from './chunk-BREEX2Z7.js';
 import { RUNNER_DIR_MODE, runnerDir, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';

package/dist/{chunk-XZNO4QED.js → chunk-R2UYH4QV.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-F47JBIAW.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-KWCJLAHQ.js';
-import { isLinkedRepository } from './chunk-LYESSQUA.js';
-import { sanitizeTerminal } from './chunk-ZEQMTBRD.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-LTJPX7TX.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-DTDZXDQ3.js';
+import { isLinkedRepository } from './chunk-UES67HLJ.js';
+import { sanitizeTerminal } from './chunk-VDI5POCC.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-IU4NZROR.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
 import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-BMX3L7CR.js';
@@ -1016,7 +1016,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-PUAL5LTL.js');
+    const { runnerHostChecks } = await import('./doctor-QSV4DYT2.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;

package/dist/{chunk-LYESSQUA.js → chunk-UES67HLJ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal } from './chunk-ZEQMTBRD.js';
-import { remoteLookupFailed } from './chunk-LTJPX7TX.js';
+import { sanitizeTerminal } from './chunk-VDI5POCC.js';
+import { remoteLookupFailed } from './chunk-IU4NZROR.js';
 import { DEFAULT_DASHBOARD } from './chunk-USO2DKBD.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';

package/dist/{chunk-ZEQMTBRD.js → chunk-VDI5POCC.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-YT35WGIP.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { mkdirSync, appendFileSync, writeFileSync, renameSync, existsSync, unlinkSync, readdirSync, readFileSync } from 'fs';
+import { mkdirSync, appendFileSync, writeFileSync, renameSync, unlinkSync, existsSync, readdirSync, readFileSync, statSync } from 'fs';
 import { join, dirname } from 'path';
 
 createRequire(import.meta.url);
@@ -15,6 +15,9 @@ function artifactBlobsDir(home = homeFromEnv()) {
 function artifactsStatePath(home = homeFromEnv()) {
   return join(home, ".outerlayer", "spool", "artifacts.state.json");
 }
+function artifactsLockPath(home = homeFromEnv()) {
+  return join(home, ".outerlayer", "spool", "artifacts.lock");
+}
 var ARTIFACT_RETRY_MAX_AGE_MS = 14 * 24 * 60 * 60 * 1e3;
 function appendArtifactRecord(record, home = homeFromEnv()) {
   const path = artifactsSpoolPath(home);
@@ -239,6 +242,81 @@ function writeArtifactSpoolState(state, home = homeFromEnv()) {
     return false;
   }
 }
+var ARTIFACT_LOCK_STALE_MS = 30 * 60 * 1e3;
+var ARTIFACT_LOCK_WAIT_MS = 2 * 60 * 1e3;
+var ARTIFACT_LOCK_POLL_MS = 250;
+function processIsAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+function artifactLockIsStale(path, nowMs, isAlive) {
+  let raw;
+  let mtimeMs;
+  try {
+    raw = readFileSync(path, "utf8");
+    mtimeMs = statSync(path).mtimeMs;
+  } catch {
+    return false;
+  }
+  if (nowMs - mtimeMs > ARTIFACT_LOCK_STALE_MS) return true;
+  try {
+    const pid = JSON.parse(raw).pid;
+    return typeof pid === "number" && !isAlive(pid);
+  } catch {
+    return false;
+  }
+}
+async function acquireArtifactSpoolLock(home = homeFromEnv(), opts = {}) {
+  const path = artifactsLockPath(home);
+  const waitMs = opts.waitMs ?? ARTIFACT_LOCK_WAIT_MS;
+  const sleep = opts.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  const isAlive = opts.isAlive ?? processIsAlive;
+  const now = opts.now ?? Date.now;
+  const deadline = now() + waitMs;
+  try {
+    mkdirSync(dirname(path), { recursive: true });
+  } catch (err) {
+    return { ok: false, reason: `cannot create ${dirname(path)}: ${String(err)}` };
+  }
+  for (; ; ) {
+    try {
+      writeFileSync(path, JSON.stringify({ pid: process.pid, t: (/* @__PURE__ */ new Date()).toISOString() }), { flag: "wx" });
+      let released = false;
+      return {
+        ok: true,
+        // Once only: a second unlink could remove a lock another sync has
+        // taken since.
+        release: () => {
+          if (released) return;
+          released = true;
+          try {
+            unlinkSync(path);
+          } catch {
+          }
+        }
+      };
+    } catch (err) {
+      if (err.code !== "EEXIST") {
+        return { ok: false, reason: `cannot create ${path}: ${String(err)}` };
+      }
+    }
+    if (artifactLockIsStale(path, now(), isAlive)) {
+      try {
+        unlinkSync(path);
+      } catch {
+      }
+      continue;
+    }
+    if (now() >= deadline) {
+      return { ok: false, reason: `another outerlayer sync has held ${path} for longer than ${Math.round(waitMs / 1e3)}s` };
+    }
+    await sleep(ARTIFACT_LOCK_POLL_MS);
+  }
+}
 function migrateLegacyArtifactSidecars(home = homeFromEnv()) {
   if (existsSync(artifactsStatePath(home))) return;
   const paths = legacySidecarPaths(home);
@@ -380,4 +458,4 @@ function resolveArtifactTurnIndex(turns, filename) {
   return found;
 }
 
-export { ARTIFACT_RETRY_MAX_AGE_MS, appendArtifactRecord, appendArtifactTombstone, artifactBlobsDir, artifactsSpoolPath, artifactsStatePath, findPendingArtifactRecord, isArtifactTombstoned, localArtifactIds, migrateLegacyArtifactSidecars, neededArtifactShas, planArtifactUpload, readEffectiveArtifactSpoolState, reclaimUnneededArtifactBlobs, resolveArtifactTurnIndex, sanitizeTerminal, writeArtifactSpoolState };
+export { ARTIFACT_RETRY_MAX_AGE_MS, acquireArtifactSpoolLock, appendArtifactRecord, appendArtifactTombstone, artifactBlobsDir, artifactsSpoolPath, artifactsStatePath, findPendingArtifactRecord, isArtifactTombstoned, localArtifactIds, migrateLegacyArtifactSidecars, neededArtifactShas, planArtifactUpload, readEffectiveArtifactSpoolState, reclaimUnneededArtifactBlobs, resolveArtifactTurnIndex, sanitizeTerminal, writeArtifactSpoolState };

package/dist/{chunk-FKFGQJNN.js → chunk-VVIRHTH4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { RecipeError } from './chunk-QOZKPLVJ.js';
-import { trackImageBuild, isOutOfMemory, ensureBuilder } from './chunk-TV36SKEN.js';
+import { trackImageBuild, isOutOfMemory, ensureBuilder } from './chunk-JSUUXA5W.js';
 import { spawn } from 'child_process';
 import { existsSync, mkdirSync, createWriteStream, rmSync, readFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-543OT6V5.js → chunk-Y6P5XX2B.js}

@@ -4,8 +4,8 @@ import { LaunchFilter } from './chunk-HHJDN6AU.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-ZEQMTBRD.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-LTJPX7TX.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-VDI5POCC.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-IU4NZROR.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-GQD22KKN.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
@@ -1553,20 +1553,34 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
     }
     let artifactsUploaded;
     let artifactsHeld;
-    if (combinedRecords.length > 0 || artifactPlan.held.length > 0) {
+    const artifactLock = combinedRecords.length > 0 || artifactPlan.held.length > 0 ? await acquireArtifactSpoolLock(home, { waitMs: opts.artifactLockWaitMs }) : void 0;
+    if (artifactLock !== void 0 && !artifactLock.ok) {
+      artifactsUploaded = 0;
+      artifactsHeld = combinedRecords.length + artifactPlan.held.length;
+      if (!opts.quiet) {
+        process.stderr.write(
+          `${C.yellow}!${C.reset} artifacts not attempted: ${artifactLock.reason} \u2014 ${artifactsHeld} record(s) stay queued for the next sync
+`
+        );
+      }
+    }
+    const releaseArtifactLock = artifactLock?.ok === true ? artifactLock.release : () => {
+    };
+    const livePlan = artifactLock?.ok === true ? planArtifactUpload({ home }) : void 0;
+    if (livePlan !== void 0) {
       const artifactEndpoint = new URL("/v1/artifacts", url).toString();
       const nowMs = Date.now();
-      const state = artifactPlan.state;
+      const state = livePlan.state;
       const failedOrDroppedThisRun = /* @__PURE__ */ new Set();
       let uploadedCount = 0;
-      let heldCount = artifactPlan.held.length;
+      let heldCount = livePlan.held.length;
       let droppedCount = 0;
       const warn = (message) => {
         if (!opts.quiet) process.stderr.write(`${C.yellow}!${C.reset} ${message}
 `);
       };
       let unauthorized;
-      for (const { record } of combinedRecords) {
+      for (const { record } of livePlan.candidates) {
         const name = sanitizeTerminal(record.filename);
         const holdReason = artifactHoldReason(record.sessionId);
         if (holdReason !== void 0) {
@@ -1597,7 +1611,9 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
             reachedServer: true
           });
           failedOrDroppedThisRun.add(record.artifactId);
-          warn(`artifact ${name}: blob missing from the spool \u2014 dropping the record`);
+          warn(
+            `artifact ${name} (${record.artifactId}): blob missing from the spool \u2014 ${join(artifactBlobsDir(home), record.sha256)} does not exist; dropping the record`
+          );
           droppedCount += 1;
           continue;
         }
@@ -1738,11 +1754,13 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
         );
       }
       reclaimUnneededArtifactBlobs(home, neededArtifactShas(home, state));
+      releaseArtifactLock();
       if (unauthorized) {
         failureContext();
         throw unauthorized;
       }
     }
+    releaseArtifactLock();
     if (shippedBatches === batches.length && (opts.url || opts.apiKey || opts.appId)) {
       if (isLoopbackUrl(url)) {
         if (!opts.quiet) {

package/dist/{chunk-ABIWDUMS.js → chunk-YETTWTAY.js}

@@ -34,17 +34,17 @@ async function fetchTarballDigest(url, fetchImpl) {
 }
 async function fetchProvenance(version, fetchImpl) {
   const response = await get(`${REGISTRY_URL}/-/npm/v1/attestations/${PACKAGE_PATH}@${encodeURIComponent(version)}`, fetchImpl);
-  if (response.status === 404) return void 0;
+  if (response.status === 404) return { kind: "absent" };
   if (!response.ok) throw new Error(`the registry answered HTTP ${response.status} for the attestations of ${PACKAGE_NAME}@${version}`);
   const body = await response.json();
   const slsa = (body.attestations ?? []).find((a) => a.predicateType === SLSA_PREDICATE);
   const payload = slsa?.bundle?.dsseEnvelope?.payload;
-  if (typeof payload !== "string") return void 0;
+  if (typeof payload !== "string") return { kind: "unreadable" };
   const statement = JSON.parse(Buffer.from(payload, "base64").toString("utf8"));
   const workflow = statement.predicate?.buildDefinition?.externalParameters?.workflow;
   const subjectSha512 = statement.subject?.[0]?.digest?.sha512;
-  if (typeof workflow?.repository !== "string" || typeof workflow.path !== "string" || typeof subjectSha512 !== "string") return void 0;
-  return { repository: workflow.repository, workflowPath: workflow.path, subjectSha512 };
+  if (typeof workflow?.repository !== "string" || typeof workflow.path !== "string" || typeof subjectSha512 !== "string") return { kind: "unreadable" };
+  return { kind: "found", repository: workflow.repository, workflowPath: workflow.path, subjectSha512 };
 }
 
 // src/runner/update/npm.ts