@outerlayer/cli 0.12.0 → 0.13.0

package/dist/{init-6AY5T3P6.js → init-ZL7ORPTF.js}

@@ -1,44 +1,44 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { npmSupportsProvenance } from './chunk-YETTWTAY.js';
-import { RunnerInitError, readConfigObject } from './chunk-GEBQXUFY.js';
-import './chunk-IBB4D4KE.js';
-import './chunk-SKHN72JO.js';
-import './chunk-VK25O2ZM.js';
-import { checkFit, VM_SERVICE_NAME, RUNNER_RESERVE_BYTES } from './chunk-2KLBKHT4.js';
+import { RunnerInitError, readConfigObject } from './chunk-MJXXRX4M.js';
+import './chunk-P6FX4D43.js';
+import './chunk-MZN7AQOB.js';
+import './chunk-T5VPP6H7.js';
+import { checkFit, VM_SERVICE_NAME, RUNNER_RESERVE_BYTES } from './chunk-RLYZLUQ7.js';
 import './chunk-6MZSX4M7.js';
 import { writeLaunchAgent } from './chunk-LF6MLJCY.js';
 import './chunk-3FMPZPJQ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-GGMRZPEA.js';
+import './chunk-3KTA5UU2.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-QEESCZ26.js';
+import './chunk-NX57IBNK.js';
 import './chunk-CX22S5BA.js';
 import './chunk-QKFB4K7X.js';
 import './chunk-RSNSZ2LJ.js';
-import './chunk-6FH2AHJY.js';
-import './chunk-GATMPAMK.js';
+import './chunk-P4MM66C6.js';
+import './chunk-EFZLAYPE.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-C7N4TDHW.js';
-import './chunk-JOXYKGUV.js';
-import './chunk-3ZPYPFNM.js';
-import './chunk-USO2DKBD.js';
+import './chunk-4QVZCVWT.js';
+import './chunk-CNFVHDHG.js';
+import './chunk-JXYVA45C.js';
+import './chunk-4KSQKQXE.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
-import { resolveBuild, resolveHousekeeping } from './chunk-XR3BJN33.js';
+import { runnerCredentialProblem, resolveBuild, resolveHousekeeping } from './chunk-22RMZBGW.js';
 import './chunk-UXYLWVTQ.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
 import './chunk-4Q7OMKAT.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-SZOVKFWB.js';
+import './chunk-GI4XXD4I.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-FO7KKPYG.js';
-import './chunk-G5IEVZGI.js';
-import './chunk-AHZQBGD2.js';
+import './chunk-TCIW27FM.js';
+import './chunk-LCEXHCHD.js';
+import './chunk-2M63GG56.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-325272HM.js';
+import './chunk-J5M7BSJQ.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
@@ -48,7 +48,8 @@ import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
-import { readFileSync, writeFileSync, existsSync, rmSync } from 'fs';
+import { existsSync, readFileSync, mkdirSync, writeFileSync, rmSync } from 'fs';
+import { dirname } from 'path';
 
 createRequire(import.meta.url);
 
@@ -103,15 +104,18 @@ async function runVmInit(configPath, deps) {
       "limactl is not installed, and the Linux VM needs it. Install Lima with `brew install lima` (https://lima-vm.io/docs/installation/), then run this again."
     );
   }
-  const config = readConfigObject(configPath);
+  const onDisk = deps.runnerKey !== void 0 && !existsSync(configPath) ? {} : readConfigObject(configPath);
+  let config = onDisk;
   const noted = config.runnerVm;
   if (noted !== void 0) {
     throw new RunnerInitError(
       `${configPath}: the runner already lives in the VM ${noted.instance}. Start it with \`limactl start ${noted.instance}\`, or remove the runnerVm key after deleting the VM.`
     );
   }
-  if (typeof config.url !== "string" || typeof config.apiKey !== "string" || typeof config.appId !== "string") {
-    throw new RunnerInitError(`${configPath}: url, apiKey and appId are needed to move the runner into a VM. Run \`outerlayer login\` first.`);
+  const problem = deps.runnerKey === void 0 ? runnerCredentialProblem(config) : void 0;
+  if (problem !== void 0) {
+    const login = problem.reason === "is missing" ? " Run `outerlayer login` first." : "";
+    throw new RunnerInitError(`${configPath}: ${problem.field} ${problem.reason}. The runner in the VM needs url, apiKey and appId.${login}`);
   }
   const block = config.runner;
   const { hooks: _ownHooks, ...carried } = block ?? {};
@@ -135,6 +139,11 @@ async function runVmInit(configPath, deps) {
   if (!fit.fits) {
     throw new RunnerInitError(`${configPath}: the VM this Mac can give the runner is ${size.memoryGiB} GiB, and ${fit.message}. Lower runner.concurrency or runner.build.memory, then run this again.`);
   }
+  let created;
+  if (deps.runnerKey !== void 0) {
+    created = await deps.runnerKey();
+    config = { ...config, url: created.url, apiKey: created.apiKey, appId: created.appId };
+  }
   const leftBehind = `The VM ${instance} was left as it is; delete it with \`limactl delete --force ${instance}\` to start over.`;
   const failed = (what, result) => new VmInitError(`${what} failed: ${result.stderr.trim() || result.stdout.trim() || `exit status ${result.status}`}. ${leftBehind}`);
   const sh = async (argv, stdin) => {
@@ -155,8 +164,8 @@ async function runVmInit(configPath, deps) {
     }
   };
   progress(`creating the Linux VM ${instance}: this downloads an image and can take several minutes`);
-  const created = await stillRunning("creating the VM", lima.create({ instance, cpus: size.cpus, memoryGiB: size.memoryGiB, diskGiB: size.diskGiB }));
-  if (created.status !== 0) throw failed("`limactl create`", created);
+  const made = await stillRunning("creating the VM", lima.create({ instance, cpus: size.cpus, memoryGiB: size.memoryGiB, diskGiB: size.diskGiB }));
+  if (made.status !== 0) throw failed("`limactl create`", made);
   progress("starting the VM");
   const started = await stillRunning("starting the VM", lima.start(instance));
   if (started.status !== 0) throw failed("`limactl start`", started);
@@ -201,7 +210,8 @@ async function runVmInit(configPath, deps) {
   let hadHostKey;
   try {
     agent = writeLaunchAgent(deps.home, limactl, instance);
-    const { apiKey: _apiKey, runner: _runner, ...kept } = config;
+    const { apiKey: _apiKey, runner: _runner, ...kept } = onDisk;
+    mkdirSync(dirname(configPath), { recursive: true });
     writeFileSync(configPath, `${JSON.stringify({ ...kept, runnerVm: { instance, since: (deps.now ?? (() => /* @__PURE__ */ new Date()))().toISOString() } }, null, 2)}
 `);
     hadHostKey = existsSync(hostKeyPath(configPath));
@@ -215,9 +225,9 @@ async function runVmInit(configPath, deps) {
       `created the Linux VM ${instance}: ${size.cpus} CPUs, ${size.memoryGiB} GiB memory, ${size.diskGiB} GiB disk`,
       ...innerOut.split("\n").map((line) => line.trim()).filter((line) => line !== ""),
       `the VM starts at login through ${agent}`,
-      `moved the runner key into the VM: apiKey and runner are gone from ${configPath}`,
+      created === void 0 ? `moved the runner key into the VM: apiKey and runner are gone from ${configPath}` : `created the runner key ${created.name} from your login and gave it to the VM; it is not stored on this Mac`,
       ...hadHostKey ? ["deleted this Mac's old host key. If the runner key was bound to it, a member uses Clear host key on the API keys page before the VM's first claim"] : [],
-      "run outerlayer login again to use capture on this Mac, with a key that is not the runner key",
+      ...created === void 0 ? ["run outerlayer login again to use capture on this Mac, with a key that is not the runner key"] : [],
       ...installOut.split("\n").map((line) => line.trim()).filter((line) => line !== ""),
       ...deps.credential === void 0 ? [
         `put CLAUDE_CODE_OAUTH_TOKEN in ${home}/.outerlayer/runner.env inside the VM, then restart the runner so it reads the file: limactl shell ${instance} sudo systemctl restart ${VM_SERVICE_NAME}`

package/dist/{init-cmd-XGSX2BCC.js → init-cmd-JXOBCOIB.js}

@@ -1,28 +1,28 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { summarizeChecks, summaryText, renderDoctorText } from './chunk-ANW7VHMH.js';
+import { summarizeChecks, summaryText, renderDoctorText } from './chunk-DPKX26LT.js';
 import './chunk-F47JBIAW.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-6FH2AHJY.js';
-import './chunk-GATMPAMK.js';
+import './chunk-P4MM66C6.js';
+import './chunk-EFZLAYPE.js';
 import './chunk-IP7BIBXJ.js';
-import { runConnect, COMMIT_LINE } from './chunk-C7N4TDHW.js';
-import './chunk-JOXYKGUV.js';
-import './chunk-3ZPYPFNM.js';
-import './chunk-USO2DKBD.js';
+import { runConnect, COMMIT_LINE } from './chunk-4QVZCVWT.js';
+import './chunk-CNFVHDHG.js';
+import './chunk-JXYVA45C.js';
+import './chunk-4KSQKQXE.js';
 import './chunk-N6LURUEF.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
-import './chunk-G5IEVZGI.js';
-import './chunk-AHZQBGD2.js';
+import './chunk-LCEXHCHD.js';
+import './chunk-2M63GG56.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-325272HM.js';
+import './chunk-J5M7BSJQ.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-YEQL54G5.js';
+import './chunk-SFFHGX3G.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';
@@ -87,7 +87,9 @@ ${CLOSING_LINE}
   if (connect.linkUrl !== void 0 && connect.repository !== void 0) unlinked = { repository: connect.repository, url: connect.linkUrl };
   const connected = connect.outcome === "done";
   if (connect.outcome === "done") {
-    (flags.json ? deps.stderr : { write: (s) => (say(`${C.green}\u2713${C.reset} ${s}`), true) }).write(connect.text);
+    const mark = connect.linked === false ? `${C.yellow}!${C.reset}` : `${C.green}\u2713${C.reset}`;
+    if (flags.json) deps.stderr.write(connect.text);
+    else say(`${mark} ${connect.text}`);
   } else if (connect.outcome === "skipped") {
     say(`${C.dim}- Connect skipped: ${connect.reason}${C.reset}
 `);

package/dist/{install-VXXI7UR6.js → install-HDBIPHTX.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_UNIT_NAME, installService, uninstallService, unitPathFor } from './chunk-2KLBKHT4.js';
-import './chunk-XR3BJN33.js';
+export { DEFAULT_UNIT_NAME, installService, uninstallService, unitPathFor } from './chunk-RLYZLUQ7.js';
+import './chunk-22RMZBGW.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
 import './chunk-4Q7OMKAT.js';

package/dist/{login-browser-7XGSV7MA.js → login-browser-QZCS3WW6.js}

@@ -1,9 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_DASHBOARD, readPipedKey, realLoginDeps, runLoginCommand, sanitizeMachineName, stdinKind } from './chunk-USO2DKBD.js';
+export { DEFAULT_DASHBOARD, readPipedKey, realLoginDeps, runLoginCommand, sanitizeMachineName, stdinKind } from './chunk-4KSQKQXE.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-EABW6AJQ.js';
+import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{loop-4NMI2USY.js → loop-XOAE6ZIY.js}

@@ -1,69 +1,69 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RunnerStartError, listJobFiles, probeCredentials, requestStop, runnerProcessState, start, tick, watchTick } from './chunk-G4RXNF2L.js';
-import './chunk-DVT73QJO.js';
+export { RunnerStartError, listJobFiles, probeCredentials, requestStop, runnerProcessState, start, tick, watchTick } from './chunk-SVEP7PVH.js';
+import './chunk-C6IV5BV7.js';
 import './chunk-O765JR4W.js';
 import './chunk-UGP76IZ5.js';
 import './chunk-3JVYMD4G.js';
-import './chunk-T6OIJQRT.js';
-import './chunk-I2UOAV7X.js';
 import './chunk-YETTWTAY.js';
+import './chunk-RMWLBUCJ.js';
+import './chunk-I2UOAV7X.js';
 import './chunk-FI5UYJMQ.js';
-import './chunk-5TGQHOUX.js';
-import './chunk-27Y7AX2O.js';
+import './chunk-XJKL4BNU.js';
+import './chunk-3D4OYFCD.js';
 import './chunk-HHJDN6AU.js';
 import './chunk-HYZRY4KZ.js';
-import './chunk-PDRYXERC.js';
+import './chunk-TOPDNXHZ.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-TI7B7UEO.js';
 import './chunk-TBT347UY.js';
-import './chunk-GEBQXUFY.js';
-import './chunk-IBB4D4KE.js';
-import './chunk-SKHN72JO.js';
-import './chunk-VK25O2ZM.js';
-import './chunk-2KLBKHT4.js';
+import './chunk-MJXXRX4M.js';
+import './chunk-P6FX4D43.js';
+import './chunk-MZN7AQOB.js';
+import './chunk-T5VPP6H7.js';
+import './chunk-RLYZLUQ7.js';
 import './chunk-6MZSX4M7.js';
 import './chunk-3FMPZPJQ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-GGMRZPEA.js';
+import './chunk-3KTA5UU2.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-QEESCZ26.js';
+import './chunk-NX57IBNK.js';
 import './chunk-CX22S5BA.js';
 import './chunk-QKFB4K7X.js';
 import './chunk-RSNSZ2LJ.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-6FH2AHJY.js';
-import './chunk-GATMPAMK.js';
+import './chunk-P4MM66C6.js';
+import './chunk-EFZLAYPE.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-C7N4TDHW.js';
-import './chunk-JOXYKGUV.js';
-import './chunk-3ZPYPFNM.js';
-import './chunk-USO2DKBD.js';
+import './chunk-4QVZCVWT.js';
+import './chunk-CNFVHDHG.js';
+import './chunk-JXYVA45C.js';
+import './chunk-4KSQKQXE.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
-import './chunk-XR3BJN33.js';
+import './chunk-22RMZBGW.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
 import './chunk-4Q7OMKAT.js';
 import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
-import './chunk-SZOVKFWB.js';
+import './chunk-GI4XXD4I.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-FO7KKPYG.js';
-import './chunk-G5IEVZGI.js';
-import './chunk-AHZQBGD2.js';
+import './chunk-TCIW27FM.js';
+import './chunk-LCEXHCHD.js';
+import './chunk-2M63GG56.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-325272HM.js';
+import './chunk-J5M7BSJQ.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-YEQL54G5.js';
+import './chunk-SFFHGX3G.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{machine-4JX2D4TS.js → machine-G6PY2J2J.js}

@@ -1,37 +1,37 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-IBB4D4KE.js';
-import './chunk-SKHN72JO.js';
+export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-P6FX4D43.js';
+import './chunk-MZN7AQOB.js';
 import './chunk-3FMPZPJQ.js';
 import './chunk-N5FOE5PS.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-GGMRZPEA.js';
+import './chunk-3KTA5UU2.js';
 import './chunk-QOZKPLVJ.js';
-import './chunk-QEESCZ26.js';
+import './chunk-NX57IBNK.js';
 import './chunk-CX22S5BA.js';
 import './chunk-QKFB4K7X.js';
 import './chunk-RSNSZ2LJ.js';
-import './chunk-6FH2AHJY.js';
-import './chunk-GATMPAMK.js';
+import './chunk-P4MM66C6.js';
+import './chunk-EFZLAYPE.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-C7N4TDHW.js';
-import './chunk-JOXYKGUV.js';
-import './chunk-3ZPYPFNM.js';
-import './chunk-USO2DKBD.js';
+import './chunk-4QVZCVWT.js';
+import './chunk-CNFVHDHG.js';
+import './chunk-JXYVA45C.js';
+import './chunk-4KSQKQXE.js';
 import './chunk-N6LURUEF.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
 import './chunk-4Q7OMKAT.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-SZOVKFWB.js';
+import './chunk-GI4XXD4I.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-FO7KKPYG.js';
-import './chunk-G5IEVZGI.js';
-import './chunk-AHZQBGD2.js';
+import './chunk-TCIW27FM.js';
+import './chunk-LCEXHCHD.js';
+import './chunk-2M63GG56.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-325272HM.js';
+import './chunk-J5M7BSJQ.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-BYT5O5RV.js';
 import './chunk-RA3O54FC.js';

package/dist/{mcp-install-cmd-XZARXNYT.js → mcp-install-cmd-VXVIH7PH.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { DEFAULT_MCP_COMMAND, DOCS_MCP_SERVER_NAME, McpInstallError, addDocsMcpEntryIfAbsent, addStdioMcpEntryIfAbsent, buildServerEntry, buildStdioServerEntry, defaultMcpUrl, handleMcpInstallError, runMcpInstall } from './chunk-A56PYPDF.js';
+export { DEFAULT_MCP_COMMAND, DOCS_MCP_SERVER_NAME, McpInstallError, addDocsMcpEntryIfAbsent, addStdioMcpEntryIfAbsent, buildServerEntry, buildStdioServerEntry, defaultMcpUrl, handleMcpInstallError, runMcpInstall } from './chunk-R7OQTKWT.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-VNVZDWO3.js';

package/dist/{runner-env-WAXTJXZK.js → runner-env-XTC53CHN.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { AGENT_COMMANDS, RunnerEnvError, credentialFromStdin, hasStoredCredential, isAgentName, restartForCredential, storeClaudeCredential } from './chunk-VK25O2ZM.js';
-import './chunk-2KLBKHT4.js';
+export { AGENT_COMMANDS, RunnerEnvError, credentialFromStdin, hasStoredCredential, isAgentName, restartForCredential, storeClaudeCredential } from './chunk-T5VPP6H7.js';
+import './chunk-RLYZLUQ7.js';
 import './chunk-6MZSX4M7.js';
-import './chunk-XR3BJN33.js';
+import './chunk-22RMZBGW.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
 import './chunk-4Q7OMKAT.js';

package/dist/runner-key-TDTLNAKJ.js

@@ -0,0 +1,154 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { readConfigObject, RunnerInitError } from './chunk-MJXXRX4M.js';
+import './chunk-P6FX4D43.js';
+import './chunk-MZN7AQOB.js';
+import './chunk-T5VPP6H7.js';
+import './chunk-RLYZLUQ7.js';
+import './chunk-6MZSX4M7.js';
+import './chunk-3FMPZPJQ.js';
+import './chunk-N5FOE5PS.js';
+import './chunk-OGFGZQA3.js';
+import './chunk-3KTA5UU2.js';
+import './chunk-QOZKPLVJ.js';
+import './chunk-NX57IBNK.js';
+import './chunk-CX22S5BA.js';
+import './chunk-QKFB4K7X.js';
+import './chunk-RSNSZ2LJ.js';
+import { postJson, WorkCommandError, getJson } from './chunk-P4MM66C6.js';
+import './chunk-EFZLAYPE.js';
+import './chunk-IP7BIBXJ.js';
+import './chunk-4QVZCVWT.js';
+import './chunk-CNFVHDHG.js';
+import './chunk-JXYVA45C.js';
+import './chunk-4KSQKQXE.js';
+import './chunk-N6LURUEF.js';
+import './chunk-YRYMNBGQ.js';
+import { runnerCredentialProblem } from './chunk-22RMZBGW.js';
+import './chunk-UXYLWVTQ.js';
+import './chunk-7RQ73DLO.js';
+import './chunk-4Q7OMKAT.js';
+import './chunk-WZBHBH3J.js';
+import './chunk-GI4XXD4I.js';
+import './chunk-ZJSNLVCE.js';
+import './chunk-TCIW27FM.js';
+import './chunk-LCEXHCHD.js';
+import './chunk-2M63GG56.js';
+import './chunk-YO4PSLVB.js';
+import './chunk-PLMTLGYH.js';
+import './chunk-J5M7BSJQ.js';
+import { readCloudConfig } from './chunk-EABW6AJQ.js';
+import './chunk-BYT5O5RV.js';
+import './chunk-RA3O54FC.js';
+import './chunk-V7NIVOFD.js';
+import './chunk-ZM2IMMYN.js';
+import './chunk-XCCLFVXM.js';
+import { readRepoConnection } from './chunk-BJ3KTMDH.js';
+import { homeFromEnv } from './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+import { existsSync } from 'fs';
+import { hostname } from 'os';
+
+createRequire(import.meta.url);
+var RUNNER_KEY_PERMISSIONS = [
+  "sessions.ingest",
+  "evidence.insert",
+  "work.read",
+  "git.read",
+  "context.read",
+  "work.update",
+  "work.claim",
+  "hosts.ingest"
+];
+var MAX_NAME_ATTEMPTS = 10;
+var PASTED_KEY_FALLBACK = "Ask a member who can create keys to make one with the Runner preset on the factory's API keys page, then put it in the runner's config file as apiKey, with the Factory Id as appId, and run this again.";
+function runnerKeyLogin(configPath, opts = {}) {
+  const env = opts.env ?? process.env;
+  const config = existsSync(configPath) ? readConfigObject(configPath) : {};
+  if (config.apiKey !== void 0) {
+    if (opts.appId !== void 0 && opts.appId !== config.appId) {
+      throw new RunnerInitError(
+        `${configPath} already holds a runner key, for the factory its appId names, so --app-id ${opts.appId} creates no key. Leave --app-id out, or give it the same id.`
+      );
+    }
+    return void 0;
+  }
+  const saved = readCloudConfig(opts.home ?? homeFromEnv(env));
+  const own = typeof config.accountToken === "string" && config.accountToken !== "";
+  const accountToken = own ? config.accountToken : saved.accountToken;
+  if (accountToken === void 0 || accountToken === "") return void 0;
+  const url = config.url ?? (own ? void 0 : saved.url);
+  const appId = opts.appId ?? (env.OUTERLAYER_APP_ID || void 0) ?? config.appId ?? readRepoConnection(opts.cwd ?? process.cwd())?.appId;
+  if (appId === void 0) {
+    throw new RunnerInitError(
+      "you are logged in, so this command creates the runner's key, but no factory is chosen. Pass --app-id with the Factory Id from the factory's Settings \u2192 General, or set OUTERLAYER_APP_ID."
+    );
+  }
+  const problem = runnerCredentialProblem({ url, apiKey: accountToken, appId });
+  if (problem !== void 0) {
+    const where = problem.field === "appId" ? "the factory id" : `${configPath}: ${problem.field}`;
+    throw new RunnerInitError(`${where} ${problem.reason}.`);
+  }
+  return { url, accountToken, appId };
+}
+function defaultRunnerKeyName(host = hostname()) {
+  const short = host.replace(/\..*$/, "").trim();
+  return short === "" ? "runner" : short;
+}
+function clause(message) {
+  return message.replace(/\.+$/, "");
+}
+function forbidden(err) {
+  return new RunnerInitError(`your login cannot create a runner key on this factory: ${clause(err.message)}. ${PASTED_KEY_FALLBACK}`);
+}
+async function createKey(login, name, fetchImpl) {
+  for (let attempt = 1; attempt <= MAX_NAME_ATTEMPTS; attempt++) {
+    const tried = attempt === 1 ? name : `${name}-${attempt}`;
+    try {
+      const { data } = await postJson(
+        login.url,
+        "/v1/api-keys",
+        login.accountToken,
+        login.appId,
+        { name: tried, permissions: [...RUNNER_KEY_PERMISSIONS], app_id: login.appId },
+        fetchImpl
+      );
+      const apiKey = data.plaintext_key;
+      if (typeof apiKey !== "string" || apiKey === "") {
+        throw new RunnerInitError(`the gateway created the key ${tried} but did not return it. Delete it on the factory's API keys page, then run this again.`);
+      }
+      return { apiKey, name: tried };
+    } catch (err) {
+      if (!(err instanceof WorkCommandError)) throw err;
+      if (err.status === 409) continue;
+      if (err.status === 403) throw forbidden(err);
+      throw new RunnerInitError(`the runner key was not created: ${clause(err.message)}.`);
+    }
+  }
+  throw new RunnerInitError(
+    `the names ${name} to ${name}-${MAX_NAME_ATTEMPTS} are all taken by keys on this factory. Pass --key-name with another name.`
+  );
+}
+async function checkKey(key, fetchImpl) {
+  const unusable = (why) => new RunnerInitError(
+    `the runner key ${key.name} was created, but ${why}. Nothing else was changed. Delete the key on the factory's API keys page, then run this again.`
+  );
+  let data;
+  try {
+    ({ data } = await getJson(key.url, "/v1/runner/host-key", key.apiKey, key.appId, fetchImpl));
+  } catch (err) {
+    throw unusable(`the gateway did not accept it: ${clause(err instanceof Error ? err.message : String(err))}`);
+  }
+  if (data.bound !== false) {
+    throw unusable("the gateway did not report it as a new runner key");
+  }
+}
+async function createRunnerKey(login, opts = {}) {
+  const fetchImpl = opts.fetchImpl ?? fetch;
+  const created = await createKey(login, opts.name ?? defaultRunnerKeyName(), fetchImpl);
+  const key = { url: login.url, apiKey: created.apiKey, appId: login.appId, name: created.name };
+  await checkKey(key, fetchImpl);
+  return key;
+}
+
+export { RUNNER_KEY_PERMISSIONS, createRunnerKey, defaultRunnerKeyName, runnerKeyLogin };

package/dist/{session-sender-T7PN4YRC.js → session-sender-XVGZFWRK.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { runSessionSender, senderPidfile, startSessionSender } from './chunk-5TGQHOUX.js';
-import './chunk-27Y7AX2O.js';
+export { runSessionSender, senderPidfile, startSessionSender } from './chunk-XJKL4BNU.js';
+import './chunk-3D4OYFCD.js';
 import './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-JOXYKGUV.js';
-import './chunk-3ZPYPFNM.js';
+import './chunk-CNFVHDHG.js';
+import './chunk-JXYVA45C.js';
 import './chunk-YRYMNBGQ.js';
 import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
@@ -16,11 +16,11 @@ import './chunk-5QRP3MVS.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-PLMTLGYH.js';
-import './chunk-325272HM.js';
+import './chunk-J5M7BSJQ.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-YEQL54G5.js';
+import './chunk-SFFHGX3G.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{starter-pack-Z22VRFPF.js → starter-pack-B7JPGEDO.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { StarterPackError, assertKnownTemplate, formatStarterPackOutput, installStarterPack } from './chunk-ZQUCTFXC.js';
+export { StarterPackError, assertKnownTemplate, formatStarterPackOutput, installStarterPack } from './chunk-DXQ5MHCO.js';
 import './chunk-YRYMNBGQ.js';
-import './chunk-FO7KKPYG.js';
-import './chunk-AHZQBGD2.js';
-import './chunk-325272HM.js';
+import './chunk-TCIW27FM.js';
+import './chunk-2M63GG56.js';
+import './chunk-J5M7BSJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-Z5GEFMRW.js';