@outerlayer/cli 0.14.1 → 0.16.1

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @outerlayer/cli
 
+## 0.16.1
+
+### Patch Changes
+
+- 8f583f5: A build's log now always says the session sender exited before it says sync started. The runner waited only until the sender's process was gone, and Node can report the exit a moment later, so the two lines could swap.
+
+## 0.16.0
+
+### Minor Changes
+
+- 87c8154: `outerlayer emit finding` and `emit findings` now record the time every finding cost. The start is `--started-at`, else the first tool output that contains the finding's `--error` text. The end is `--ended-at`, else the newest event. When the session has events and no start is found, nothing is stored, and the command lists the recent events with their ids. Events now include the session's subagents, with ids such as `a4962c00:e23`. `--find <text>` searches every event and records nothing. `--untimed` records a finding with no time on purpose. A session with no transcript on the machine records findings as before. The starter `/build` skill now tells its agents to record the factory problems they hit; `outerlayer init --update` brings it to repositories set up earlier.
+- a076be0: The maintained skills now start with `outerlayer-`, so none can land on a skill of your own: `amend` is `outerlayer-amend`, `emitting-evidence` is `outerlayer-evidence`, `reporting-findings` is `outerlayer-findings`, and `outerlayer` is `outerlayer-cli`. `outerlayer context emit` writes each under its new name and deletes the old copies, so run it and commit. `--check` reports old copies as `retired`. A skill of your own with an earlier name is left alone. Governed checkouts show each skill once, under its new name, before the control plane is updated. The runner runs `/outerlayer-amend` for a command that still says `/amend`, and says so; change `runner.commands.amend` to match. `outerlayer doctor` lists skill files that still use an earlier name. See https://docs.outerlayer.ai/upgrade.
+
+### Patch Changes
+
+- 7b425ca: A runner build now gives the gateway 10 seconds, and one retry, to say which control plane governs the item's repository. When the lookup still fails, `context_unavailable` says whether it timed out, what status the gateway answered, or what network error occurred. Session starts keep their 2-second limit.
+
+## 0.15.0
+
+### Minor Changes
+
+- 9f42028: `outerlayer work status` now shows the acceptance criteria recorded for an item, in a Criteria section marked "drafted by the build" when the build wrote them, and as `criteria` in `--json`. The `get_work_item` MCP tool returns the same field.
+
+### Patch Changes
+
+- e5b5713: A runner with `runner.update.maxWaitHours` set to 0 now claims nothing while a build runs and an update is pending. A clock tick between two reads in the same pass could leave the wait looking one millisecond short and let that pass claim work.
+- 8d3eacb: Update the runner protocol contract to match the gateway's repository governance answer.
+
 ## 0.14.1
 
 ### Patch Changes

package/dist/{agent-setup-CN2HUBEJ.js → agent-setup-K3ABU5NL.js}

@@ -1,17 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-SXWS25JC.js';
-import './chunk-HFKKFTXU.js';
+export { keepHandWritten, runAgentSetup } from './chunk-5FEK6PNE.js';
+import './chunk-2MNPHL23.js';
 import './chunk-XCK2YAY5.js';
-import './chunk-FOJGZYFC.js';
+import './chunk-42ZI52JW.js';
 import './chunk-YRYMNBGQ.js';
-import './chunk-3NLOVYJQ.js';
-import './chunk-LCEXHCHD.js';
+import './chunk-JEHRUE3F.js';
+import './chunk-WTE3MQML.js';
+import './chunk-C5Y5ZJJZ.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-BYT5O5RV.js';
-import './chunk-ZA5CHAFY.js';
-import './chunk-2M63GG56.js';
+import './chunk-POJMEEJJ.js';
+import './chunk-OHVJA253.js';
 import './chunk-PLMTLGYH.js';
 import './chunk-J5M7BSJQ.js';
 import './chunk-EABW6AJQ.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-09T00:29:08.046Z+2d52691","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-09T18:11:10.939Z+a3c670b","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-SRGR36KI.js → check-CNTMSGOG.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-NHDVD7DU.js';
-import './chunk-4OGPT6I2.js';
+import { probeCredentials } from './chunk-EHAAPRWY.js';
+import './chunk-R4ZQQ7U2.js';
 import './chunk-O765JR4W.js';
 import './chunk-UGP76IZ5.js';
 import './chunk-3JVYMD4G.js';
@@ -9,24 +9,24 @@ import './chunk-YETTWTAY.js';
 import './chunk-RMWLBUCJ.js';
 import './chunk-I2UOAV7X.js';
 import './chunk-HYZRY4KZ.js';
-import './chunk-FI5UYJMQ.js';
-import './chunk-KFRM23WD.js';
-import './chunk-MSASO5O4.js';
+import './chunk-ADJRGVZC.js';
+import './chunk-ONRCEE6D.js';
+import './chunk-U3HXXRTY.js';
 import './chunk-HHJDN6AU.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem } from './chunk-SMHOCDCI.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-FWX735W7.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-TI7B7UEO.js';
 import './chunk-TBT347UY.js';
-import './chunk-Q2UK3C4P.js';
-import './chunk-JYIEHQIF.js';
-import './chunk-RBKIH5ST.js';
+import './chunk-CA3XMYFN.js';
+import './chunk-RSPXEVDX.js';
+import './chunk-EWORLJMO.js';
 import './chunk-KMDLFI4P.js';
 import './chunk-QKFB4K7X.js';
 import './chunk-RSNSZ2LJ.js';
-import './chunk-T5VPP6H7.js';
+import './chunk-OZGHL5Y5.js';
 import './chunk-RLYZLUQ7.js';
 import { parseRunnerEnv } from './chunk-6MZSX4M7.js';
-import './chunk-SWHQ4LUM.js';
+import './chunk-6QRMLNH3.js';
 import './chunk-NPQWKGUA.js';
 import './chunk-IP7BIBXJ.js';
 import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-22RMZBGW.js';
@@ -50,20 +50,21 @@ import './chunk-YRYMNBGQ.js';
 import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
-import './chunk-3NLOVYJQ.js';
-import './chunk-LCEXHCHD.js';
+import './chunk-JEHRUE3F.js';
+import './chunk-WTE3MQML.js';
+import './chunk-C5Y5ZJJZ.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-YO4PSLVB.js';
 import './chunk-BYT5O5RV.js';
-import './chunk-ZA5CHAFY.js';
-import './chunk-2M63GG56.js';
+import './chunk-POJMEEJJ.js';
+import './chunk-OHVJA253.js';
 import './chunk-PLMTLGYH.js';
 import './chunk-J5M7BSJQ.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-PQUM37BK.js';
+import './chunk-6JNURGOA.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';
@@ -130,6 +131,7 @@ async function runRunnerCheck(configPath, deps = {}) {
     return { ok: false, check: "claim permission", message: `${configPath}: ${claimProblem.problem}` };
   }
   const unverifiedReason = probe.ok ? claimProblem.reason : probe.reason;
+  const formerSkill = formerSkillQueues(config);
   const lines = [
     `config              ${configPath}`,
     `host                ${config.host}`,
@@ -145,7 +147,8 @@ async function runRunnerCheck(configPath, deps = {}) {
     `hook cleanup        ${config.hooks.cleanup}`,
     `hook report         ${config.hooks.report ?? "(none)"}`,
     `repos include       ${config.repos?.include?.join(", ") ?? "(all)"}`,
-    `repos exclude       ${config.repos?.exclude?.join(", ") ?? "(none)"}`
+    `repos exclude       ${config.repos?.exclude?.join(", ") ?? "(none)"}`,
+    ...formerSkill.length > 0 ? [`note                ${formerSkillProblem(formerSkill)}`] : []
   ];
   return { ok: true, lines, unverifiedReason, summary: `${config.url} \xB7 app ${config.appId}` };
 }

package/dist/{chunk-HFKKFTXU.js → chunk-2MNPHL23.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { C } from './chunk-YRYMNBGQ.js';
-import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-ZA5CHAFY.js';
-import { emitTree, parseOuterlayerConfig, classifyTree, generatedHeaderSource, CONTEXT_PIN_FILENAME, normalizePath } from './chunk-2M63GG56.js';
+import { retiredSkillPaths, removeRetiredSkills } from './chunk-C5Y5ZJJZ.js';
+import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-POJMEEJJ.js';
+import { emitTree, parseOuterlayerConfig, classifyTree, generatedHeaderSource, CONTEXT_PIN_FILENAME, normalizePath } from './chunk-OHVJA253.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, copyFileSync, readdirSync } from 'fs';
 import { join, dirname, relative, sep } from 'path';
 
@@ -49,9 +50,9 @@ function walk(dir, repoRoot, insideOuterlayer, out) {
     }
   }
 }
-function buildEmitInput(repoRoot, targets, maintained) {
+function buildEmitInput(repoRoot, targets, maintained, excluded = /* @__PURE__ */ new Set()) {
   const bundled = new Map(maintained.map((f) => [f.path, f.content]));
-  const discovered = [.../* @__PURE__ */ new Set([...discoverOuterlayerPaths(repoRoot), ...bundled.keys()])].sort();
+  const discovered = [.../* @__PURE__ */ new Set([...discoverOuterlayerPaths(repoRoot).filter((p) => !excluded.has(p)), ...bundled.keys()])].sort();
   const { entries } = classifyTree(discovered);
   const classified = new Set(entries.map((e) => e.path));
   const contents = /* @__PURE__ */ new Map();
@@ -80,12 +81,13 @@ function writeOutputs(repoRoot, result, maintained) {
   }
   return { files, copies, maintained: [...changedMaintained.created, ...changedMaintained.rewritten] };
 }
-function renderSuccess(targets, files, copies, maintained) {
+function renderSuccess(targets, files, copies, maintained, retired) {
   const copySuffix = copies.length > 0 ? `, ${copies.length} ${copies.length === 1 ? "copy" : "copies"}` : "";
   const lines = [
     `${C.green}\u2713${C.reset} emitted ${files.length} file${files.length === 1 ? "" : "s"}${copySuffix} for ${C.dim}${targets.join(", ")}${C.reset}`
   ];
   for (const path of maintained) lines.push(`  ${C.dim}updated ${path} to this CLI's version${C.reset}`);
+  for (const path of retired) lines.push(`  ${C.dim}removed ${path}: this skill has a new name${C.reset}`);
   return lines.join("\n");
 }
 function renderFailure(errors) {
@@ -179,21 +181,24 @@ function runEmit(opts = {}) {
   if (!existsSync(cwd)) throw new EmitError(`no such directory: ${cwd}`);
   const targets = resolveTargetsFromConfig(cwd);
   const maintained = maintainedFilesForExistingSkills(cwd, loadMaintainedFiles());
-  const built = buildEmitInput(cwd, targets, maintained);
+  const retired = retiredSkillPaths(cwd);
+  const built = buildEmitInput(cwd, targets, maintained, new Set(retired));
   const emitted = emitTree(built.input);
   const { result, kept } = withholdKept(cwd, emitted, opts.keep);
   const hasErrors = result.errors.length > 0;
-  if (opts.check) return runCheck(cwd, opts, targets, result, hasErrors, built.sourcePaths, maintained, kept);
+  if (opts.check) return runCheck(cwd, opts, targets, result, hasErrors, built.sourcePaths, maintained, kept, retired);
   const written = hasErrors ? { files: [], copies: [], maintained: [] } : writeOutputs(cwd, result, maintained);
+  const removed = hasErrors ? [] : removeRetiredSkills(cwd);
   const exitCode = hasErrors ? 1 : 0;
   const output = opts.json ? JSON.stringify({
     targets,
     files: written.files,
     copies: written.copies,
     maintained: written.maintained,
+    retired: removed,
     warnings: result.warnings,
     errors: result.errors
-  }) : hasErrors ? renderFailure(result.errors) : renderSuccess(targets, written.files, written.copies, written.maintained);
+  }) : hasErrors ? renderFailure(result.errors) : renderSuccess(targets, written.files, written.copies, written.maintained, removed);
   if (!opts.quiet) {
     if (opts.json) {
       process.stdout.write(output + "\n");
@@ -211,15 +216,17 @@ function runEmit(opts = {}) {
     copies: written.copies,
     maintained: written.maintained,
     kept,
+    retired: removed,
     warnings: result.warnings,
     errors: result.errors,
     output,
     exitCode
   };
 }
-function runCheck(cwd, opts, targets, result, hasErrors, sourcePaths, maintained, kept) {
+function runCheck(cwd, opts, targets, result, hasErrors, sourcePaths, maintained, kept, retired) {
   const drift = [];
   if (!hasErrors) {
+    for (const path of retired) drift.push({ kind: "retired", path });
     for (const file of maintained) {
       const d = compareFile(cwd, file.path, file.content);
       if (d) drift.push(d);
@@ -233,7 +240,8 @@ function runCheck(cwd, opts, targets, result, hasErrors, sourcePaths, maintained
       const d = compareCopy(cwd, copy);
       if (d) drift.push(d);
     }
-    drift.push(...findOrphans(cwd, computedFiles, sourcePaths));
+    const retiredPaths = new Set(retired);
+    drift.push(...findOrphans(cwd, computedFiles, sourcePaths).filter((d) => !retiredPaths.has(d.path)));
     drift.sort((a, b) => a.path.localeCompare(b.path) || a.kind.localeCompare(b.kind));
   }
   const exitCode = hasErrors || drift.length > 0 ? 1 : 0;
@@ -249,7 +257,7 @@ function runCheck(cwd, opts, targets, result, hasErrors, sourcePaths, maintained
 `);
     }
   }
-  return { targets, files: [], copies: [], maintained: [], kept, warnings: result.warnings, errors: result.errors, drift, output, exitCode };
+  return { targets, files: [], copies: [], maintained: [], kept, retired: [], warnings: result.warnings, errors: result.errors, drift, output, exitCode };
 }
 
 export { EmitError, runEmit };

package/dist/{chunk-FOJGZYFC.js → chunk-42ZI52JW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolvePackRoot, loadTemplateFiles, loadMaintainedFiles, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MAINTAINED_SKILLS } from './chunk-ZA5CHAFY.js';
+import { resolvePackRoot, loadTemplateFiles, loadMaintainedFiles, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MAINTAINED_SKILLS } from './chunk-POJMEEJJ.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { readFileSync, existsSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-SXWS25JC.js → chunk-5FEK6PNE.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runEmit } from './chunk-HFKKFTXU.js';
+import { runEmit } from './chunk-2MNPHL23.js';
 import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-XCK2YAY5.js';
-import { installStarterPack } from './chunk-FOJGZYFC.js';
+import { installStarterPack } from './chunk-42ZI52JW.js';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-3NLOVYJQ.js';
-import { pinExists, readContextManifest } from './chunk-LCEXHCHD.js';
-import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-ZA5CHAFY.js';
-import { generatedHeaderSource } from './chunk-2M63GG56.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-JEHRUE3F.js';
+import { pinExists, readContextManifest } from './chunk-WTE3MQML.js';
+import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-POJMEEJJ.js';
+import { generatedHeaderSource } from './chunk-OHVJA253.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-PQUM37BK.js → chunk-6JNURGOA.js}

@@ -634,7 +634,7 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
       recordHookErrorsSeen(home, hookErrorsBytes);
       if (contextPossiblyGoverned(sessionCwd, home)) {
         try {
-          const { materializeContext: materialize } = await import('./context-materialize-FDHYKNDT.js');
+          const { materializeContext: materialize } = await import('./context-materialize-2WXTS4CW.js');
           const sessionId = typeof payload.session_id === "string" ? payload.session_id : "unknown";
           const result = await materialize({ cwd: sessionCwd, sessionId, home });
           materializeMessage = result.message;

package/dist/{chunk-SWHQ4LUM.js → chunk-6QRMLNH3.js}

@@ -360,7 +360,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-WYQD6D7T.js');
+      const { logHookError } = await import('./hook-fast-D7HV4IXG.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }
@@ -450,6 +450,24 @@ async function runWorkRemove(opts) {
   if (!opts.quiet) process.stdout.write(output + "\n");
   return { data, output };
 }
+function statusOutput(data, json) {
+  if (json) return JSON.stringify(data);
+  const document = JSON.stringify(data, null, 2);
+  const criteria = data.criteria;
+  if (criteria === void 0) return document;
+  if (criteria === null || !Array.isArray(criteria.items)) return `${document}
+
+Criteria: none recorded`;
+  const mark = criteria.drafted === true ? ` ${C.dim}(drafted by the build)${C.reset}` : "";
+  const lines = criteria.items.map((item) => {
+    const proof = typeof item.proof === "string" ? ` ${C.dim}[proof: ${sanitizeTerminal(item.proof)}]${C.reset}` : "";
+    return `  ${sanitizeTerminal(String(item.id))}  ${sanitizeTerminal(String(item.text))}${proof}`;
+  });
+  return `${document}
+
+Criteria${mark}
+${lines.join("\n")}`;
+}
 async function runWorkStatus(opts) {
   const cwd = opts.cwd ?? process.cwd();
   await connectIfOneFits(opts);
@@ -463,7 +481,7 @@ async function runWorkStatus(opts) {
       creds.appId,
       opts.fetchImpl ?? defaultFetch
     );
-    const body = opts.json ? JSON.stringify(data2) : JSON.stringify(data2, null, 2);
+    const body = statusOutput(data2, opts.json === true);
     if (!opts.quiet) process.stdout.write(body + "\n");
     return { data: data2, output: body };
   }
@@ -476,7 +494,7 @@ async function runWorkStatus(opts) {
     throw new WorkCommandError(`no live item for ${repository}#${number}`);
   }
   const { data } = await getJson(creds.url, `/v1/work-items/${item.id}`, creds.apiKey, creds.appId, fetchImpl);
-  const output = opts.json ? JSON.stringify(data) : `${JSON.stringify(data, null, 2)}`;
+  const output = statusOutput(data, opts.json === true);
   if (!opts.quiet) process.stdout.write(output + "\n");
   return { data, output };
 }

package/dist/{chunk-FI5UYJMQ.js → chunk-ADJRGVZC.js}

@@ -4,6 +4,6 @@ import { createRequire } from 'node:module';
 createRequire(import.meta.url);
 
 // src/runner/protocol.ts
-var RUNNER_PROTOCOL = 16;
+var RUNNER_PROTOCOL = 17;
 
 export { RUNNER_PROTOCOL };

package/dist/chunk-C5Y5ZJJZ.js

@@ -0,0 +1,88 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-POJMEEJJ.js';
+import { emitTree, ALL_TARGET_IDS, classifyTree } from './chunk-OHVJA253.js';
+import { readFileSync, existsSync, unlinkSync, rmdirSync, readdirSync } from 'fs';
+import { join, dirname, relative, sep } from 'path';
+
+createRequire(import.meta.url);
+function filesUnder(repoRoot, rel) {
+  try {
+    return readdirSync(join(repoRoot, rel), { recursive: true, withFileTypes: true }).filter((entry) => entry.isFile()).map((entry) => relative(repoRoot, join(entry.parentPath, entry.name)).split(sep).join("/"));
+  } catch {
+    return [];
+  }
+}
+function retiredSkillsPresent(repoRoot) {
+  return Object.keys(FORMER_MAINTAINED_NAMES).filter((former) => isMaintainedCopy(repoRoot, former));
+}
+function retiredSkillPaths(repoRoot, retired = retiredSkillsPresent(repoRoot)) {
+  const paths = /* @__PURE__ */ new Set();
+  for (const former of retired) {
+    const sources = filesUnder(repoRoot, skillDir(former));
+    const compiled = emitTree({
+      entries: classifyTree(sources).entries,
+      contents: new Map(sources.map((path) => [path, readFileSync(join(repoRoot, path), "utf8")])),
+      // A superset is safe: targets ignore a path that is not a skill asset.
+      assetPaths: sources,
+      targets: [...ALL_TARGET_IDS]
+    });
+    for (const path of [...sources, ...compiled.files.map((f) => f.path), ...compiled.copies.map((c) => c.toPath)]) paths.add(path);
+  }
+  return [...paths].filter((path) => existsSync(join(repoRoot, path))).sort();
+}
+function removeRetiredSkills(repoRoot, unsafe) {
+  const removed = retiredSkillPaths(repoRoot).filter((path) => !unsafe?.(path));
+  for (const path of removed) {
+    unlinkSync(join(repoRoot, path));
+    for (let dir = dirname(path); dir !== "."; dir = dirname(dir)) {
+      try {
+        rmdirSync(join(repoRoot, dir));
+      } catch {
+        break;
+      }
+    }
+  }
+  return removed;
+}
+function filesNamingFormerSkills(repoRoot) {
+  const patterns = [
+    ["emitting-evidence", /\bemitting-evidence\b/],
+    ["reporting-findings", /\breporting-findings\b/],
+    ["amend", /`amend` skill|(^|[\s"'`(])\/amend(?![\w-])/m],
+    ["outerlayer", /`outerlayer` skill|skills\/outerlayer\//]
+  ];
+  const retired = retiredSkillsPresent(repoRoot).map((former) => `${skillDir(former)}/`);
+  const hits = [];
+  for (const path of filesUnder(repoRoot, ".outerlayer/skills").sort()) {
+    if (retired.some((dir) => path.startsWith(dir))) continue;
+    const text = readFileSync(join(repoRoot, path), "utf8");
+    const formers = patterns.filter(([, pattern]) => pattern.test(text)).map(([former]) => former);
+    if (formers.length > 0) hits.push({ path, formers });
+  }
+  return hits;
+}
+function checkFormerSkillNames(repoRoot) {
+  const checks = [];
+  const retired = retiredSkillsPresent(repoRoot);
+  if (retired.length > 0) {
+    checks.push({
+      name: "Renamed skills",
+      status: "warn",
+      detail: `copies under earlier names: ${retired.map(skillDir).join(", ")}`,
+      fix: "Run `outerlayer context emit` to replace them with the current names, then commit."
+    });
+  }
+  const hits = filesNamingFormerSkills(repoRoot);
+  if (hits.length > 0) {
+    checks.push({
+      name: "Skill names",
+      status: "warn",
+      detail: `${hits.map((h) => `${h.path} (${h.formers.join(", ")})`).join("; ")} still ${hits.length === 1 ? "names" : "name"} a skill by an earlier name`,
+      fix: `Replace each earlier name with the current one: ${Object.entries(FORMER_MAINTAINED_NAMES).map(([former, current]) => `${former} \u2192 ${current}`).join(", ")}. \`outerlayer init --update\` does this for a file you have not edited.`
+    });
+  }
+  return checks;
+}
+
+export { checkFormerSkillNames, removeRetiredSkills, retiredSkillPaths };

package/dist/{chunk-Q2UK3C4P.js → chunk-CA3XMYFN.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-JYIEHQIF.js';
-import { MIN_ENGINE_MAJOR } from './chunk-RBKIH5ST.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-T5VPP6H7.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-RSPXEVDX.js';
+import { MIN_ENGINE_MAJOR } from './chunk-EWORLJMO.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-OZGHL5Y5.js';
 import { runnerCredentialProblem } from './chunk-22RMZBGW.js';
 import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';

package/dist/{chunk-NHDVD7DU.js → chunk-EHAAPRWY.js}

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-4OGPT6I2.js';
+import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-R4ZQQ7U2.js';
 import { writePendingUpdate } from './chunk-O765JR4W.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-UGP76IZ5.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-YETTWTAY.js';
 import { writeJobFile, readJobFile, readJobFileChecked } from './chunk-RMWLBUCJ.js';
 import { compareVersions, satisfiesRange } from './chunk-I2UOAV7X.js';
-import { RUNNER_PROTOCOL } from './chunk-FI5UYJMQ.js';
-import { placeholderQueues, placeholderProblem } from './chunk-SMHOCDCI.js';
+import { RUNNER_PROTOCOL } from './chunk-ADJRGVZC.js';
+import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-FWX735W7.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, cleanVersions, isInLayout, stagingDir } from './chunk-TI7B7UEO.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-RBKIH5ST.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-EWORLJMO.js';
 import { spawnRun } from './chunk-KMDLFI4P.js';
 import { checkFit } from './chunk-RLYZLUQ7.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-SWHQ4LUM.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-6QRMLNH3.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-22RMZBGW.js';
 import { startTimeOf, claimPidFile, readPidFile, isSameProcess, releasePidFile } from './chunk-N5FOE5PS.js';
 import { builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, BUILD_LABEL, RUNNER_LABEL } from './chunk-4NPZVMJU.js';
@@ -958,9 +958,9 @@ function considerNamedVersion(state, named) {
     logOf(state).line(`this runner cannot update itself to ${named}: ${blocker}`);
   }
 }
-function adoptUpdateWait(state, version) {
+function adoptUpdateWait(state, version, nowMs) {
   const previous = state.updateWait;
-  const wait = { version, sinceMs: previous?.sinceMs ?? nowOf(state).getTime(), holdSinceMs: previous?.holdSinceMs };
+  const wait = { version, sinceMs: previous?.sinceMs ?? nowMs, holdSinceMs: previous?.holdSinceMs };
   state.updateWait = wait;
   return wait;
 }
@@ -1012,7 +1012,7 @@ function runningItems(state) {
 function holdForUpdate(state, version, mayHold = true) {
   const log = logOf(state);
   const nowMs = nowOf(state).getTime();
-  const wait = adoptUpdateWait(state, version);
+  const wait = adoptUpdateWait(state, version, nowMs);
   const failed2 = readLastUpdate(state.config.configPath);
   const failedAtMs = failed2?.to === version && failed2.outcome === "retrying" ? new Date(failed2.at ?? Number.NaN).getTime() : Number.NaN;
   if (failedAtMs < wait.sinceMs) wait.sinceMs = failedAtMs;
@@ -1315,7 +1315,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-RVRQ32EH.js');
+  const { postJson: postJson2 } = await import('./work-cmd-DJQJEZVB.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -1776,7 +1776,9 @@ async function startJob(state, item, queue, claimId, itemKey, branch, identity,
       log.line(`${tag} workdir is not a git checkout, so ${branch} was not checked out`);
     }
   }
-  const cmdline = state.config.commands[queue];
+  const configured = state.config.commands[queue];
+  const cmdline = configured === void 0 ? void 0 : currentSkillCommand(configured);
+  if (cmdline !== configured) log.line(`${tag} ${formerSkillProblem([queue])}`);
   if (!cmdline) {
     log.error(`${tag} has no runner.commands.${queue} in the config file \xB7 ending job as failed`);
     await endJob(state, active, "failed", { stage: "command" });
@@ -2072,7 +2074,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-SRGR36KI.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-CNTMSGOG.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });

package/dist/{chunk-RBKIH5ST.js → chunk-EWORLJMO.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { createDockerHost, childEnvironment, spawnRun } from './chunk-KMDLFI4P.js';
 import { execCapture } from './chunk-QKFB4K7X.js';
 import { GUEST_CID } from './chunk-RSNSZ2LJ.js';
-import { WorkCommandError, postJson } from './chunk-SWHQ4LUM.js';
+import { WorkCommandError, postJson } from './chunk-6QRMLNH3.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
 import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-R7PF5OOU.js';
 import { RecipeError } from './chunk-QOZKPLVJ.js';
@@ -14,10 +14,10 @@ import { parseDuKilobytes } from './chunk-7RQ73DLO.js';
 import { repositoriesOf, primaryOf, RELAY_PORT, CHECKOUT_DIR, JOB_MOUNT, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath } from './chunk-4Q7OMKAT.js';
 import { CLAUDE_CODE_VERSION, firecrackerArch, MICROVM_ARCHES, DEFAULT_BASE_IMAGE, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GUEST_ASSETS_VERSION } from './chunk-CX22S5BA.js';
 import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-JXYVA45C.js';
-import { defaultGitRunner, materializeContext } from './chunk-3NLOVYJQ.js';
-import { readContextManifest, readSourceCache } from './chunk-LCEXHCHD.js';
+import { defaultGitRunner, materializeContext } from './chunk-JEHRUE3F.js';
+import { readContextManifest, readSourceCache } from './chunk-WTE3MQML.js';
 import { signingFetchFor } from './chunk-YO4PSLVB.js';
-import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-2M63GG56.js';
+import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-OHVJA253.js';
 import { downconvertSession } from './chunk-J5M7BSJQ.js';
 import { signerFor } from './chunk-V7NIVOFD.js';
 import { rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, stagedContextDir, contextHomeDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, RUNNER_DIR_MODE, vmAssetsDir } from './chunk-ZM2IMMYN.js';
@@ -1231,6 +1231,19 @@ var NoControlPlane = class extends Error {
 var GatewayConflict = class extends Error {
 };
 var unavailable = (why) => ({ kind: "refused", reason: `context_unavailable: ${why}` });
+var DESIGNATION_LOOKUP = { timeoutMs: 1e4, attempts: 2 };
+function lookupFailureReason(failure, repository) {
+  switch (failure?.kind) {
+    case "timeout":
+      return `the gateway did not answer which repository governs ${repository} within ${failure.timeoutMs / 1e3} seconds, twice`;
+    case "status":
+      return `the gateway answered ${failure.status} when asked which repository governs ${repository}`;
+    case "network":
+      return `the request asking which repository governs ${repository} failed: ${failure.message}`;
+    default:
+      return `the gateway did not say which repository governs ${repository}`;
+  }
+}
 function makeReadable(tree, dir, files) {
   chmodSync(dir, 493);
   chmodSync(tree, 493);
@@ -1268,6 +1281,7 @@ async function stageGovernedContext(input) {
       home: contextHomeDir(configPath),
       cloud: { url, apiKey, appId },
       fetchImpl: signingFetchFor(input.fetchImpl, configPath, apiKey),
+      designationLookup: DESIGNATION_LOOKUP,
       git: git2,
       now: input.now,
       resolveControlPlaneUrl: (repository) => input.controlPlaneUrl(repository),
@@ -1303,7 +1317,7 @@ async function stageGovernedContext(input) {
         if (result.authRejected === true) {
           return finish(unavailable(`the gateway rejected the runner's API key (401/403) when asked which repository governs ${input.repository}`));
         }
-        return finish(unavailable(`the gateway did not say which repository governs ${input.repository}`));
+        return finish(unavailable(lookupFailureReason(result.lookupFailure, input.repository)));
       case "conflict":
         return finish({ kind: "refused", reason: `context_conflict: ${result.message ?? "two control planes claim this repository"}` });
       default: