@outerlayer/cli 0.13.0 → 0.14.1

package/dist/{chunk-3D4OYFCD.js → chunk-MSASO5O4.js}

@@ -4,7 +4,7 @@ import { LaunchFilter } from './chunk-HHJDN6AU.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-CNFVHDHG.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-WUYTWNMA.js';
 import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-JXYVA45C.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-GQD22KKN.js';
@@ -14,7 +14,7 @@ import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH
 import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-J5M7BSJQ.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
 import { signerFor, signRunnerRequest } from './chunk-V7NIVOFD.js';
-import { writeSyncStatus, spoolDir } from './chunk-SFFHGX3G.js';
+import { writeSyncStatus, spoolDir } from './chunk-PQUM37BK.js';
 import { removeJournalHooks } from './chunk-XCCLFVXM.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -928,6 +928,21 @@ var NEVER_REACHED_SERVER_ERROR_CODES = /* @__PURE__ */ new Set([
   "payload_too_large",
   "unreadable_test_results"
 ]);
+async function readUploadedIdentity(response) {
+  let data;
+  try {
+    data = (await response.json()).data;
+  } catch {
+  }
+  return {
+    id: typeof data?.id === "string" ? data.id : null,
+    url: typeof data?.url === "string" ? data.url : null
+  };
+}
+function uploadedArtifactLine(artifact) {
+  const where = artifact.url !== null ? sanitizeTerminal(artifact.url) : artifact.id !== null ? `id ${sanitizeTerminal(artifact.id)} ${C.dim}(the gateway returned no link)${C.reset}` : `${C.dim}(the gateway returned no link)${C.reset}`;
+  return `  ${C.green}\u2191${C.reset} ${sanitizeTerminal(artifact.filename)} ${C.dim}\xB7${C.reset} ${sanitizeTerminal(artifact.caption)} ${C.dim}\xB7${C.reset} ${where}`;
+}
 function splitPayload(payload) {
   const mid = Math.ceil(payload.sessions.length / 2);
   const first = payload.sessions.slice(0, mid);
@@ -1553,10 +1568,12 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
     }
     let artifactsUploaded;
     let artifactsHeld;
+    let uploadedArtifacts;
     const artifactLock = combinedRecords.length > 0 || artifactPlan.held.length > 0 ? await acquireArtifactSpoolLock(home, { waitMs: opts.artifactLockWaitMs }) : void 0;
     if (artifactLock !== void 0 && !artifactLock.ok) {
       artifactsUploaded = 0;
       artifactsHeld = combinedRecords.length + artifactPlan.held.length;
+      uploadedArtifacts = [];
       if (!opts.quiet) {
         process.stderr.write(
           `${C.yellow}!${C.reset} artifacts not attempted: ${artifactLock.reason} \u2014 ${artifactsHeld} record(s) stay queued for the next sync
@@ -1575,6 +1592,7 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
       let uploadedCount = 0;
       let heldCount = livePlan.held.length;
       let droppedCount = 0;
+      const uploadedThisRun = [];
       const warn = (message) => {
         if (!opts.quiet) process.stderr.write(`${C.yellow}!${C.reset} ${message}
 `);
@@ -1651,6 +1669,7 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
         let status;
         let errorCode = "";
         let serverMessage = "";
+        let accepted;
         try {
           const response = await fetchImpl(artifactEndpoint, {
             method: "POST",
@@ -1670,19 +1689,31 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
               if (typeof body.error?.message === "string") serverMessage = body.error.message;
             } catch {
             }
+          } else {
+            accepted = response;
           }
         } catch (err) {
           failure = String(err);
         }
-        if (!failure) {
+        if (accepted !== void 0) {
+          const identity = await readUploadedIdentity(accepted);
           state.set(record.artifactId, {
             state: "uploaded",
             attempts: (existing?.attempts ?? 0) + 1,
             firstSeen: firstSeenIso,
             sha256: record.sha256,
-            reachedServer: true
+            reachedServer: true,
+            ...identity.id !== null ? { serverId: identity.id } : {},
+            ...identity.url !== null ? { url: identity.url } : {}
           });
           uploadedCount += 1;
+          uploadedThisRun.push({
+            artifactId: record.artifactId,
+            filename: record.filename,
+            caption: record.caption,
+            id: identity.id,
+            url: identity.url
+          });
           continue;
         }
         if (status === 401) {
@@ -1739,11 +1770,15 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
         artifactsUploaded = uploadedCount;
         artifactsHeld = heldCount;
         artifactsDropped = droppedCount;
+        uploadedArtifacts = uploadedThisRun;
         if (!opts.quiet) {
           process.stderr.write(
             `${C.dim}artifacts${C.reset} ${uploadedCount} uploaded \xB7 ${heldCount} held \xB7 ${droppedCount} dropped
 `
           );
+          if (!opts.json) {
+            for (const uploaded of uploadedThisRun) process.stdout.write(uploadedArtifactLine(uploaded) + "\n");
+          }
         }
       }
       const persisted = writeArtifactSpoolState(state, home);
@@ -1776,6 +1811,7 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
         );
       }
     }
+    const artifactReport = artifactsUploaded !== void 0 ? { artifactsUploaded, artifactsHeld, uploadedArtifacts } : {};
     let output;
     if (opts.json) {
       output = JSON.stringify({
@@ -1787,7 +1823,7 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
         artifactsDropped,
         tier,
         url,
-        ...artifactsUploaded !== void 0 ? { artifactsUploaded, artifactsHeld } : {}
+        ...artifactReport
       });
     } else {
       const lines = [];
@@ -1826,7 +1862,7 @@ ${C.yellow}!${C.reset} batch ${shippedBatches + 1}/${batches.length} accounting
       url,
       dryRun: false,
       watermarkMs,
-      ...artifactsUploaded !== void 0 ? { artifactsUploaded, artifactsHeld } : {},
+      ...artifactReport,
       output
     };
   }

package/dist/chunk-MTF3PHVZ.js

@@ -0,0 +1,161 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { mcpTargetPath, INIT_STDIO_ENTRY, INIT_DOCS_ENTRY, DOCS_MCP_SERVER_NAME } from './chunk-XCK2YAY5.js';
+import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-FOJGZYFC.js';
+import { pinExists, readContextManifest } from './chunk-LCEXHCHD.js';
+import { resolvePackRoot, loadTemplateFiles, skillDir } from './chunk-ZA5CHAFY.js';
+import { findGitDirs } from './chunk-BJ3KTMDH.js';
+import { createHash } from 'crypto';
+import { existsSync, readFileSync } from 'fs';
+import { join } from 'path';
+
+createRequire(import.meta.url);
+var SHIPPED_MANIFEST = "shipped.json";
+function currentStarterFiles(packRoot = resolvePackRoot(), policy = POLICY_CONTENT) {
+  const templates = loadTemplateFiles(packRoot).map((f) => ({
+    path: f.path,
+    content: f.content,
+    skill: f.skill,
+    source: join(packRoot, "template", f.skill, f.path.slice(skillDir(f.skill).length + 1))
+  }));
+  const validators = VALIDATOR_FILES.map(({ name }) => {
+    const source = join(packRoot, "validators", name);
+    return { path: `${VALIDATORS_DIR}/${name}`, content: readFileSync(source, "utf8"), source };
+  });
+  return [...templates, ...validators, { path: POLICY_PATH, content: policy }];
+}
+function contentHash(content) {
+  return createHash("sha256").update(content.replace(/\r\n/g, "\n")).digest("hex");
+}
+function readShippedManifest(packRoot = resolvePackRoot()) {
+  const path = join(packRoot, SHIPPED_MANIFEST);
+  if (!existsSync(path)) return { ok: false, problem: "missing" };
+  try {
+    const doc = JSON.parse(readFileSync(path, "utf8"));
+    if (doc.schemaVersion !== 1 || doc.files === null || typeof doc.files !== "object" || Array.isArray(doc.files)) {
+      return { ok: false, problem: "unreadable" };
+    }
+    const files = /* @__PURE__ */ new Map();
+    for (const [file, hashes] of Object.entries(doc.files)) {
+      if (!Array.isArray(hashes) || !hashes.every((h) => typeof h === "string" && /^[0-9a-f]{64}$/.test(h))) {
+        return { ok: false, problem: "unreadable" };
+      }
+      files.set(file, new Set(hashes));
+    }
+    return { ok: true, files };
+  } catch {
+    return { ok: false, problem: "unreadable" };
+  }
+}
+function mcpItemsInit() {
+  return [
+    // Through 0.12.0 `init` wrote a command that needs a global install on every teammate's machine.
+    { name: "outerlayer", current: INIT_STDIO_ENTRY, shipped: [{ type: "stdio", command: "outerlayer", args: ["mcp", "serve"] }] },
+    { name: DOCS_MCP_SERVER_NAME, current: INIT_DOCS_ENTRY, shipped: [] }
+  ];
+}
+function canonical(value) {
+  if (Array.isArray(value)) return `[${value.map(canonical).join(",")}]`;
+  if (value !== null && typeof value === "object") {
+    const entries = Object.entries(value).sort(([a], [b]) => a.localeCompare(b));
+    return `{${entries.map(([k, v]) => `${JSON.stringify(k)}:${canonical(v)}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+function fileState(root, file, manifest) {
+  const abs = join(root, file.path);
+  if (!existsSync(abs)) return "missing";
+  const hash = contentHash(readFileSync(abs, "utf8"));
+  if (hash === contentHash(file.content)) return "current";
+  if (manifest.ok && manifest.files.get(file.path)?.has(hash) === true) return "outdated";
+  return "edited";
+}
+function mcpItems(root) {
+  const path = mcpTargetPath(root);
+  let servers;
+  let unreadable = false;
+  if (existsSync(join(root, path))) {
+    try {
+      const doc = JSON.parse(readFileSync(join(root, path), "utf8"));
+      const value = doc.mcpServers;
+      if (value !== void 0 && (value === null || typeof value !== "object" || Array.isArray(value))) unreadable = true;
+      else servers = value ?? {};
+    } catch {
+      unreadable = true;
+    }
+  }
+  return mcpItemsInit().map((item) => {
+    const base = { kind: "mcp", path, server: item.name, entry: item.current };
+    if (unreadable) return { ...base, state: "unreadable" };
+    if (servers === void 0 || !(item.name in servers)) return { ...base, state: "missing" };
+    const have = canonical(servers[item.name]);
+    if (have === canonical(item.current)) return { ...base, state: "current" };
+    if (item.shipped.some((entry) => canonical(entry) === have)) return { ...base, state: "outdated" };
+    return { ...base, state: "edited" };
+  });
+}
+function inspectStarterFiles(root, opts = {}) {
+  const packRoot = opts.packRoot ?? resolvePackRoot();
+  const manifest = readShippedManifest(packRoot);
+  const files = currentStarterFiles(packRoot).map(
+    (file) => ({ kind: "file", path: file.path, state: fileState(root, file, manifest), file })
+  );
+  return { items: [...files, ...mcpItems(root)], manifest: manifest.ok ? "ok" : manifest.problem };
+}
+function itemLabel(item) {
+  return item.kind === "file" ? item.path : `${item.path} "${item.server}" server`;
+}
+function contextIsGoverned(root, gitCommonDir) {
+  return pinExists(root) || readContextManifest(gitCommonDir) !== void 0;
+}
+var NAME = "Starter files";
+var UPDATE = "outerlayer init --update";
+function shownPaths(items, all) {
+  const shown = [];
+  const whole = /* @__PURE__ */ new Set();
+  for (const item of items) {
+    const skill = item.kind === "file" ? item.file.skill : void 0;
+    if (skill !== void 0) {
+      const ofSkill = all.filter((i) => i.kind === "file" && i.file.skill === skill);
+      if (ofSkill.every((i) => items.includes(i))) {
+        if (!whole.has(skill)) shown.push(`${skillDir(skill)}/`);
+        whole.add(skill);
+        continue;
+      }
+    }
+    shown.push(itemLabel(item));
+  }
+  return shown;
+}
+function checkStarterFiles(cwd, opts = {}) {
+  const none = { checks: [], mcpOutdated: false };
+  const dirs = findGitDirs(cwd ?? process.cwd());
+  if (dirs === void 0 || contextIsGoverned(dirs.repoRoot, dirs.gitCommonDir)) return none;
+  const report = inspectStarterFiles(dirs.repoRoot, opts);
+  if (report.items.every((i) => i.kind === "mcp" || i.state === "missing")) return none;
+  const by = (state) => report.items.filter((i) => i.state === state);
+  const current = by("current");
+  const outdated = by("outdated");
+  const missing = by("missing");
+  const edited = by("edited");
+  const unreadable = by("unreadable");
+  const parts = [];
+  if (current.length > 0) parts.push(`${current.length} current`);
+  if (outdated.length > 0) parts.push(`outdated and unedited: ${shownPaths(outdated, report.items).join(", ")}`);
+  if (missing.length > 0) parts.push(`missing: ${shownPaths(missing, report.items).join(", ")}`);
+  if (edited.length > 0) parts.push(`edited by you, left as they are: ${edited.map(itemLabel).join(", ")}`);
+  if (unreadable.length > 0) parts.push(`${unreadable[0].path} is not valid JSON, so its servers were not read`);
+  if (report.manifest !== "ok") {
+    parts.push(`this CLI's record of earlier versions is ${report.manifest}, so an outdated file cannot be told from an edited one`);
+  }
+  const mcpOutdated = outdated.some((i) => i.kind === "mcp" && i.server === "outerlayer");
+  const actionable = outdated.length + missing.length > 0;
+  const compare = edited.length > 0 ? ` Compare an edited file with this CLI's version: \`${UPDATE} --dry-run\`.` : "";
+  if (!actionable && report.manifest === "ok") {
+    return { checks: [{ name: NAME, status: "pass", detail: parts.join("; ") + (compare === "" ? "" : `.${compare}`) }], mcpOutdated };
+  }
+  const fix = actionable ? `Run \`${UPDATE}\` to update the outdated files and write the missing ones. It never changes a file you edited.${compare}` : "Reinstall the CLI: `npm install -g @outerlayer/cli`, or run it with `npx -y @outerlayer/cli`.";
+  return { checks: [{ name: NAME, status: "warn", detail: parts.join("; "), fix }], mcpOutdated };
+}
+
+export { canonical, checkStarterFiles, contextIsGoverned, inspectStarterFiles };

package/dist/{chunk-SVEP7PVH.js → chunk-NHDVD7DU.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-C6IV5BV7.js';
+import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-4OGPT6I2.js';
 import { writePendingUpdate } from './chunk-O765JR4W.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-UGP76IZ5.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
@@ -8,17 +8,17 @@ import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest
 import { writeJobFile, readJobFile, readJobFileChecked } from './chunk-RMWLBUCJ.js';
 import { compareVersions, satisfiesRange } from './chunk-I2UOAV7X.js';
 import { RUNNER_PROTOCOL } from './chunk-FI5UYJMQ.js';
-import { placeholderQueues, placeholderProblem } from './chunk-TOPDNXHZ.js';
+import { placeholderQueues, placeholderProblem } from './chunk-SMHOCDCI.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, cleanVersions, isInLayout, stagingDir } from './chunk-TI7B7UEO.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-MZN7AQOB.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-RBKIH5ST.js';
+import { spawnRun } from './chunk-KMDLFI4P.js';
 import { checkFit } from './chunk-RLYZLUQ7.js';
-import { startTimeOf, claimPidFile, readPidFile, isSameProcess, releasePidFile } from './chunk-N5FOE5PS.js';
-import { spawnRun } from './chunk-3KTA5UU2.js';
-import { builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, BUILD_LABEL, RUNNER_LABEL } from './chunk-NX57IBNK.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-P4MM66C6.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-SWHQ4LUM.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-22RMZBGW.js';
+import { startTimeOf, claimPidFile, readPidFile, isSameProcess, releasePidFile } from './chunk-N5FOE5PS.js';
+import { builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, BUILD_LABEL, RUNNER_LABEL } from './chunk-4NPZVMJU.js';
 import { exceedsDisk } from './chunk-7RQ73DLO.js';
 import { parseClaimedRepositories, repositoriesOf, primaryOf, sharedUserEnvironment, JOB_MOUNT, claudeCredential } from './chunk-4Q7OMKAT.js';
 import { parseClaimIdentity } from './chunk-BYT5O5RV.js';
@@ -1315,7 +1315,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-X7NMJDFL.js');
+  const { postJson: postJson2 } = await import('./work-cmd-RVRQ32EH.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -2072,7 +2072,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-63IDCEEV.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-SRGR36KI.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });

package/dist/{chunk-EFZLAYPE.js → chunk-NPQWKGUA.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-4QVZCVWT.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-YDSMROTB.js';
 import { resolveRepoIdentity } from './chunk-JXYVA45C.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';

package/dist/{chunk-SFFHGX3G.js → chunk-PQUM37BK.js}

@@ -634,7 +634,7 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
       recordHookErrorsSeen(home, hookErrorsBytes);
       if (contextPossiblyGoverned(sessionCwd, home)) {
         try {
-          const { materializeContext: materialize } = await import('./context-materialize-7S6NLLRO.js');
+          const { materializeContext: materialize } = await import('./context-materialize-FDHYKNDT.js');
           const sessionId = typeof payload.session_id === "string" ? payload.session_id : "unknown";
           const result = await materialize({ cwd: sessionCwd, sessionId, home });
           materializeMessage = result.message;

package/dist/{chunk-MJXXRX4M.js → chunk-Q2UK3C4P.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-P6FX4D43.js';
-import { MIN_ENGINE_MAJOR } from './chunk-MZN7AQOB.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-JYIEHQIF.js';
+import { MIN_ENGINE_MAJOR } from './chunk-RBKIH5ST.js';
 import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-T5VPP6H7.js';
 import { runnerCredentialProblem } from './chunk-22RMZBGW.js';
 import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';

package/dist/{chunk-MZN7AQOB.js → chunk-RBKIH5ST.js}

@@ -1,23 +1,23 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-3FMPZPJQ.js';
-import { startTimeOf, isSameProcess } from './chunk-N5FOE5PS.js';
-import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { createDockerHost, childEnvironment, spawnRun } from './chunk-3KTA5UU2.js';
-import { RecipeError } from './chunk-QOZKPLVJ.js';
-import { builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, containerExecArgs } from './chunk-NX57IBNK.js';
-import { CLAUDE_CODE_VERSION, firecrackerArch, MICROVM_ARCHES, DEFAULT_BASE_IMAGE, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GUEST_ASSETS_VERSION } from './chunk-CX22S5BA.js';
+import { createDockerHost, childEnvironment, spawnRun } from './chunk-KMDLFI4P.js';
 import { execCapture } from './chunk-QKFB4K7X.js';
 import { GUEST_CID } from './chunk-RSNSZ2LJ.js';
-import { WorkCommandError, postJson } from './chunk-P4MM66C6.js';
-import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-JXYVA45C.js';
+import { WorkCommandError, postJson } from './chunk-SWHQ4LUM.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-R7PF5OOU.js';
+import { RecipeError } from './chunk-QOZKPLVJ.js';
+import { startTimeOf, isSameProcess } from './chunk-N5FOE5PS.js';
+import { currentCliBuild } from './chunk-OGFGZQA3.js';
+import { builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, containerExecArgs } from './chunk-4NPZVMJU.js';
 import { parseDuKilobytes } from './chunk-7RQ73DLO.js';
 import { repositoriesOf, primaryOf, RELAY_PORT, CHECKOUT_DIR, JOB_MOUNT, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath } from './chunk-4Q7OMKAT.js';
-import { defaultGitRunner, materializeContext } from './chunk-GI4XXD4I.js';
+import { CLAUDE_CODE_VERSION, firecrackerArch, MICROVM_ARCHES, DEFAULT_BASE_IMAGE, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GUEST_ASSETS_VERSION } from './chunk-CX22S5BA.js';
+import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-JXYVA45C.js';
+import { defaultGitRunner, materializeContext } from './chunk-3NLOVYJQ.js';
 import { readContextManifest, readSourceCache } from './chunk-LCEXHCHD.js';
-import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-2M63GG56.js';
 import { signingFetchFor } from './chunk-YO4PSLVB.js';
+import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-2M63GG56.js';
 import { downconvertSession } from './chunk-J5M7BSJQ.js';
 import { signerFor } from './chunk-V7NIVOFD.js';
 import { rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, stagedContextDir, contextHomeDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, RUNNER_DIR_MODE, vmAssetsDir } from './chunk-ZM2IMMYN.js';

package/dist/{chunk-TOPDNXHZ.js → chunk-SMHOCDCI.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-MJXXRX4M.js';
-import { describeCallFailure } from './chunk-MZN7AQOB.js';
-import { WorkCommandError, getJson } from './chunk-P4MM66C6.js';
-import { sanitizeTerminal } from './chunk-CNFVHDHG.js';
+import { isPlaceholderCommand } from './chunk-Q2UK3C4P.js';
+import { describeCallFailure } from './chunk-RBKIH5ST.js';
+import { WorkCommandError, getJson } from './chunk-SWHQ4LUM.js';
 import { builtinKind } from './chunk-22RMZBGW.js';
 import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-4Q7OMKAT.js';
+import { sanitizeTerminal } from './chunk-WUYTWNMA.js';
 import { signerFor } from './chunk-V7NIVOFD.js';
 
 createRequire(import.meta.url);

package/dist/{chunk-P4MM66C6.js → chunk-SWHQ4LUM.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect } from './chunk-EFZLAYPE.js';
+import { autoConnect } from './chunk-NPQWKGUA.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { workPageUrl } from './chunk-4QVZCVWT.js';
-import { sanitizeTerminal } from './chunk-CNFVHDHG.js';
+import { workPageUrl } from './chunk-YDSMROTB.js';
+import { sanitizeTerminal } from './chunk-WUYTWNMA.js';
 import { resolveRepoIdentity } from './chunk-JXYVA45C.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
@@ -360,7 +360,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-PXWKQPN6.js');
+      const { logHookError } = await import('./hook-fast-WYQD6D7T.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }

package/dist/{agent-setup-QE6PSCEZ.js → chunk-SXWS25JC.js}

@@ -1,26 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runEmit } from './chunk-HDTVTA6I.js';
-import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-R7OQTKWT.js';
-import { installStarterPack } from './chunk-DXQ5MHCO.js';
+import { runEmit } from './chunk-HFKKFTXU.js';
+import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-XCK2YAY5.js';
+import { installStarterPack } from './chunk-FOJGZYFC.js';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-GI4XXD4I.js';
-import './chunk-ZJSNLVCE.js';
-import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-TCIW27FM.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-3NLOVYJQ.js';
 import { pinExists, readContextManifest } from './chunk-LCEXHCHD.js';
+import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-ZA5CHAFY.js';
 import { generatedHeaderSource } from './chunk-2M63GG56.js';
-import './chunk-YO4PSLVB.js';
-import './chunk-PLMTLGYH.js';
-import './chunk-J5M7BSJQ.js';
-import './chunk-EABW6AJQ.js';
-import './chunk-BYT5O5RV.js';
-import './chunk-RA3O54FC.js';
-import './chunk-V7NIVOFD.js';
-import './chunk-ZM2IMMYN.js';
-import './chunk-XCCLFVXM.js';
-import './chunk-BJ3KTMDH.js';
-import './chunk-VNVZDWO3.js';
-import './chunk-Z5GEFMRW.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';
@@ -201,4 +188,4 @@ ${renderPaths(paths, kept)}${mcpNote}`;
 `;
 }
 
-export { runAgentSetup };
+export { keepHandWritten, runAgentSetup };

package/dist/{chunk-CNFVHDHG.js → chunk-WUYTWNMA.js}

@@ -214,7 +214,9 @@ function readPersistedArtifactSpoolState(home) {
         attempts: typeof e.attempts === "number" && Number.isFinite(e.attempts) ? e.attempts : 0,
         firstSeen: typeof e.firstSeen === "string" ? e.firstSeen : (/* @__PURE__ */ new Date(0)).toISOString(),
         sha256: typeof e.sha256 === "string" ? e.sha256 : "",
-        reachedServer: e.reachedServer === true
+        reachedServer: e.reachedServer === true,
+        ...typeof e.serverId === "string" ? { serverId: e.serverId } : {},
+        ...typeof e.url === "string" ? { url: e.url } : {}
       });
     }
     return { state, corrupt: false };

package/dist/{chunk-R7OQTKWT.js → chunk-XCK2YAY5.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
-import { existsSync, writeFileSync, mkdirSync, readFileSync } from 'fs';
+import { existsSync, writeFileSync, readFileSync, mkdirSync } from 'fs';
 import { join, dirname } from 'path';
 
 createRequire(import.meta.url);
@@ -62,14 +62,23 @@ function addMcpEntryIfAbsent(repoRoot, name, entry) {
 `);
   return { path: relPath, added: true };
 }
+function setMcpEntry(repoRoot, name, entry) {
+  const relPath = mcpTargetPath(repoRoot);
+  const absPath = join(repoRoot, relPath);
+  const doc = readMcpDoc(absPath, relPath);
+  const servers = doc.mcpServers ?? {};
+  writeFileSync(absPath, `${JSON.stringify({ ...doc, mcpServers: { ...servers, [name]: entry } }, null, 2)}
+`);
+}
 var INIT_STDIO_ENTRY = { type: "stdio", command: "npx", args: ["-y", "@outerlayer/cli", "mcp", "serve"] };
 function addStdioMcpEntryIfAbsent(repoRoot, name = "outerlayer") {
   return addMcpEntryIfAbsent(repoRoot, name, { ...INIT_STDIO_ENTRY, args: [...INIT_STDIO_ENTRY.args] });
 }
 var DOCS_MCP_SERVER_NAME = "outerlayer-docs";
 var DOCS_MCP_URL = "https://docs.outerlayer.ai/mcp";
+var INIT_DOCS_ENTRY = { type: "http", url: DOCS_MCP_URL };
 function addDocsMcpEntryIfAbsent(repoRoot) {
-  return addMcpEntryIfAbsent(repoRoot, DOCS_MCP_SERVER_NAME, { type: "http", url: DOCS_MCP_URL });
+  return addMcpEntryIfAbsent(repoRoot, DOCS_MCP_SERVER_NAME, { ...INIT_DOCS_ENTRY });
 }
 function runMcpInstall(opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
@@ -100,4 +109,4 @@ function handleMcpInstallError(err) {
   process.exitCode = 1;
 }
 
-export { DEFAULT_MCP_COMMAND, DOCS_MCP_SERVER_NAME, McpInstallError, addDocsMcpEntryIfAbsent, addStdioMcpEntryIfAbsent, buildServerEntry, buildStdioServerEntry, defaultMcpUrl, handleMcpInstallError, runMcpInstall };
+export { DEFAULT_MCP_COMMAND, DOCS_MCP_SERVER_NAME, INIT_DOCS_ENTRY, INIT_STDIO_ENTRY, McpInstallError, addDocsMcpEntryIfAbsent, addStdioMcpEntryIfAbsent, buildServerEntry, buildStdioServerEntry, defaultMcpUrl, handleMcpInstallError, mcpTargetPath, runMcpInstall, setMcpEntry };

package/dist/{chunk-4QVZCVWT.js → chunk-YDSMROTB.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal } from './chunk-CNFVHDHG.js';
+import { sanitizeTerminal } from './chunk-WUYTWNMA.js';
 import { remoteLookupFailed } from './chunk-JXYVA45C.js';
 import { DEFAULT_DASHBOARD } from './chunk-4KSQKQXE.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';

package/dist/{chunk-TCIW27FM.js → chunk-ZA5CHAFY.js}

@@ -7,7 +7,7 @@ import { join, dirname } from 'path';
 import { fileURLToPath } from 'url';
 
 createRequire(import.meta.url);
-var TEMPLATE_SKILLS = ["spec", "writing-specs", "build"];
+var TEMPLATE_SKILLS = ["spec", "writing-specs", "writing-tests", "build"];
 var MAINTAINED_SKILLS = ["emitting-evidence", "amend", "reporting-findings", "outerlayer"];
 var TEMPLATE_CLASS_LINE = "<!-- yours to edit. Copied once from the default template by outerlayer init; never overwritten. -->";
 function maintainedClassLine(version) {