@outerlayer/cli 0.15.0 → 0.17.0

package/dist/{chunk-QLTYTPYU.js → chunk-HGECYFEI.js}

@@ -1,18 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { checkStarterFiles } from './chunk-MTF3PHVZ.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-JR6ERP3M.js';
+import { checkStarterFiles, contextIsGoverned } from './chunk-NBGDBTO2.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-S3NYLI2P.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-F47JBIAW.js';
-import { isLinkedRepository } from './chunk-YDSMROTB.js';
+import { isLinkedRepository } from './chunk-3NSNIIBE.js';
 import { sanitizeTerminal } from './chunk-WUYTWNMA.js';
 import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-JXYVA45C.js';
 import { C } from './chunk-YRYMNBGQ.js';
 import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
-import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-LCEXHCHD.js';
+import { readPin, readContextManifest, readDegraded, readSourceCache } from './chunk-WTE3MQML.js';
+import { checkFormerSkillNames } from './chunk-C5Y5ZJJZ.js';
 import { defaultFetch } from './chunk-YO4PSLVB.js';
 import { resolveGatewayCredentials } from './chunk-PLMTLGYH.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-PQUM37BK.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-BWQ66M6N.js';
 import { deadHooksState, preparePackageManagerCommand, contextExcludesPresent } from './chunk-XCCLFVXM.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -189,11 +190,17 @@ function runDoctor(env = {}) {
     ...laptop ? checkStatusline(home, now, env.cwd) : [],
     ...checkInstalls(env),
     ...starter?.checks ?? [],
+    ...laptop ? checkRenamedSkills(env.cwd) : [],
     ...starter !== void 0 && !starter.mcpOutdated ? checkMcpCommand(env.cwd, env.processEnv) : [],
     ...checkContextSource(home, env.cwd),
     ...checkInstalledCli(home, env.cwd ?? process.cwd())
   ];
 }
+function checkRenamedSkills(cwd) {
+  const dirs = findGitDirs(cwd ?? process.cwd());
+  if (dirs === void 0 || contextIsGoverned(dirs.repoRoot, dirs.gitCommonDir)) return [];
+  return checkFormerSkillNames(dirs.repoRoot);
+}
 function checkInstalledCli(home, cwd) {
   const name = "Installed CLI";
   const result = checkInstalledCliStaleness({ home, cwd });
@@ -1077,6 +1084,56 @@ async function credentialChecks(options = {}) {
   const source = env.OUTERLAYER_API_KEY ? "OUTERLAYER_API_KEY" : "~/.outerlayer/config.json";
   return factoryKeyChecks(fetchImpl, resolved.url, resolved.credential, resolved.appId, source, local);
 }
+function governedDetail(source) {
+  return `governed by ${sanitizeTerminal(source.repository)} (ref ${sanitizeTerminal(source.ref)}, stored commit ${sanitizeTerminal(source.sha.slice(0, 7))})`;
+}
+async function governanceChecks(options = {}) {
+  const name = "Governance";
+  const env = options.env ?? process.env;
+  const cwd = options.cwd ?? process.cwd();
+  const resolved = resolveGatewayCredentials({ home: options.home, env, cwd });
+  if (resolved.credential === void 0 || resolved.url === void 0) {
+    return [skippedCheck(name, "there is no credential to ask with", "Run `outerlayer login` to sign in.")];
+  }
+  const local = resolveRepoIdentity(cwd).gitRepo;
+  if (local === void 0) return [skippedCheck(name, "not inside a git repository with a remote")];
+  if (resolved.appId === void 0) return [skippedCheck(name, "no factory is chosen for this repository", CONNECT_FIX)];
+  const fetchImpl = options.fetchImpl ?? defaultFetch;
+  const reply = await askGateway(fetchImpl, resolved.url, `/v1/context/source?${new URLSearchParams({ repo: local.split("/").slice(-2).join("/") }).toString()}`, resolved.credential, resolved.appId);
+  const unanswered = unansweredDetail(reply);
+  if (unanswered !== void 0 && !("failure" in reply) && reply.status === 503) {
+    const message = refusalMessage(reply.body);
+    return [{ name, status: "warn", detail: message === "" ? unanswered : `governed, but ${message}`, fix: "Check that the GitHub App can read the control plane, then run `outerlayer doctor` again." }];
+  }
+  if (unanswered !== void 0) return [{ name, status: "warn", detail: unanswered, fix: NETWORK_FIX }];
+  const { status, body } = reply;
+  if (status === 401 || status === 403) {
+    return [{ name, status: "warn", detail: `the gateway refused to say what governs ${sanitizeTerminal(local)} (HTTP ${status})`, fix: LOGIN_FIX }];
+  }
+  if (status < 200 || status >= 300) {
+    return [{ name, status: "warn", detail: `the gateway did not answer which control plane governs ${sanitizeTerminal(local)} (HTTP ${status})`, fix: UPDATE_FIX }];
+  }
+  const data = body?.data;
+  const source = data?.source;
+  if (source === void 0) {
+    return [
+      {
+        name,
+        status: "warn",
+        detail: "the gateway is too old to say which control plane governs this repository: its answer has no source",
+        fix: UPDATE_FIX
+      }
+    ];
+  }
+  if (source === null) {
+    return [{ name, status: "pass", detail: `${sanitizeTerminal(local)} is self-governed: it supplies its own context` }];
+  }
+  const named = source;
+  if (typeof named.repository !== "string" || typeof named.ref !== "string" || typeof named.sha !== "string") {
+    return [{ name, status: "warn", detail: "the gateway named a control plane without its repository, ref and commit", fix: UPDATE_FIX }];
+  }
+  return [{ name, status: "pass", detail: governedDetail({ repository: named.repository, ref: named.ref, sha: named.sha }) }];
+}
 function doctorExitCode(checks) {
   return checks.some((c) => c.status === "fail") ? 1 : 0;
 }
@@ -1088,14 +1145,14 @@ async function gatherDoctorChecks() {
   const checks = runDoctor({ runnerHost: hasRunnerBlock(configPath) });
   const credential = await credentialChecks();
   checks.push(...credential);
-  if (credential[0]?.status === "pass") checks.push(...await githubAppChecks());
+  if (credential[0]?.status === "pass") checks.push(...await githubAppChecks(), ...await governanceChecks());
   const runnerVm = runnerVmOf(configPath);
   if (runnerVm !== void 0) {
     const { realLima } = await import('./lima-7NPCNGWT.js');
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-CORFPYY6.js');
+    const { runnerHostChecks } = await import('./doctor-4TAIARIG.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;

package/dist/{chunk-SXWS25JC.js → chunk-KG5ECZGJ.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runEmit } from './chunk-HFKKFTXU.js';
+import { runEmit } from './chunk-2MNPHL23.js';
 import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-XCK2YAY5.js';
-import { installStarterPack } from './chunk-FOJGZYFC.js';
+import { installStarterPack } from './chunk-42ZI52JW.js';
 import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-3NLOVYJQ.js';
-import { pinExists, readContextManifest } from './chunk-LCEXHCHD.js';
-import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-ZA5CHAFY.js';
-import { generatedHeaderSource } from './chunk-2M63GG56.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-YZ5F4PIS.js';
+import { pinExists, readContextManifest } from './chunk-WTE3MQML.js';
+import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-POJMEEJJ.js';
+import { generatedHeaderSource } from './chunk-OHVJA253.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-F7GBYX2P.js → chunk-LWSJQJC6.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-HXLMZOKU.js';
-import { describeCallFailure } from './chunk-UUDDPNRJ.js';
-import { WorkCommandError, getJson } from './chunk-JR6ERP3M.js';
+import { isPlaceholderCommand } from './chunk-VQYBXPI7.js';
+import { describeCallFailure } from './chunk-MAK5LYRF.js';
+import { WorkCommandError, getJson } from './chunk-S3NYLI2P.js';
 import { builtinKind } from './chunk-22RMZBGW.js';
 import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-4Q7OMKAT.js';
 import { sanitizeTerminal } from './chunk-WUYTWNMA.js';
@@ -40,6 +40,20 @@ function permissionModeProblems(config) {
 function permissionModeProblem(problems) {
   return problems.map(({ queue, command, value }) => `runner.commands.${queue} is \`${command}\`, and \`${value}\` is not a permission mode Claude Code accepts (${CLAUDE_PERMISSION_MODES.join(", ")}). The command would fail only when a build ran it`).join(". ");
 }
+var FORMER_AMEND_COMMAND = /(^|["'\s])\/amend(?=["'\s]|$)/g;
+function currentSkillCommand(command) {
+  return command.replace(FORMER_AMEND_COMMAND, "$1/outerlayer-amend");
+}
+function formerSkillQueues(config) {
+  return config.queues.filter((queue) => {
+    const command = config.commands[queue];
+    return command !== void 0 && currentSkillCommand(command) !== command;
+  });
+}
+function formerSkillProblem(queues) {
+  const keys = queues.map((queue) => `runner.commands.${queue}`).join(", ");
+  return `${keys} ${queues.length === 1 ? "starts" : "start"} /amend, which is now /outerlayer-amend. The runner runs /outerlayer-amend in its place; edit the config to say so`;
+}
 function needsClaudeCredential(hooks) {
   return builtinKind(hooks.provision) !== "own";
 }
@@ -99,4 +113,4 @@ async function claimPermissionProblem(config, fetchImpl = fetch) {
   }
 }
 
-export { claimPermissionProblem, claudeCredentialCheck, missingPermissionFix, missingPermissionOf, needsClaudeCredential, permissionModeProblem, permissionModeProblems, placeholderProblem, placeholderQueues };
+export { claimPermissionProblem, claudeCredentialCheck, currentSkillCommand, formerSkillProblem, formerSkillQueues, missingPermissionFix, missingPermissionOf, needsClaudeCredential, permissionModeProblem, permissionModeProblems, placeholderProblem, placeholderQueues };

package/dist/{chunk-UUDDPNRJ.js → chunk-MAK5LYRF.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { createDockerHost, childEnvironment, spawnRun } from './chunk-KMDLFI4P.js';
 import { execCapture } from './chunk-QKFB4K7X.js';
 import { GUEST_CID } from './chunk-RSNSZ2LJ.js';
-import { WorkCommandError, postJson } from './chunk-JR6ERP3M.js';
+import { WorkCommandError, postJson } from './chunk-S3NYLI2P.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
 import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-R7PF5OOU.js';
 import { RecipeError } from './chunk-QOZKPLVJ.js';
@@ -14,15 +14,15 @@ import { parseDuKilobytes } from './chunk-7RQ73DLO.js';
 import { repositoriesOf, primaryOf, RELAY_PORT, CHECKOUT_DIR, JOB_MOUNT, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath } from './chunk-4Q7OMKAT.js';
 import { CLAUDE_CODE_VERSION, firecrackerArch, MICROVM_ARCHES, DEFAULT_BASE_IMAGE, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GUEST_ASSETS_VERSION } from './chunk-CX22S5BA.js';
 import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-JXYVA45C.js';
-import { defaultGitRunner, materializeContext } from './chunk-3NLOVYJQ.js';
-import { readContextManifest, readSourceCache } from './chunk-LCEXHCHD.js';
+import { defaultGitRunner, materializeContext } from './chunk-YZ5F4PIS.js';
+import { readContextManifest, readSourceCache } from './chunk-WTE3MQML.js';
 import { signingFetchFor } from './chunk-YO4PSLVB.js';
-import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-2M63GG56.js';
+import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-OHVJA253.js';
 import { downconvertSession } from './chunk-J5M7BSJQ.js';
 import { signerFor } from './chunk-V7NIVOFD.js';
 import { rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, stagedContextDir, contextHomeDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, RUNNER_DIR_MODE, vmAssetsDir } from './chunk-ZM2IMMYN.js';
+import { fstatSync, readFileSync, existsSync, mkdirSync, chmodSync, truncateSync, rmSync, writeFileSync, accessSync, constants, readdirSync, statSync, rmdirSync, renameSync, lstatSync, unlinkSync, openSync, closeSync, mkdtempSync, createWriteStream, createReadStream } from 'fs';
 import { relative, join, dirname, basename } from 'path';
-import { readFileSync, existsSync, mkdirSync, chmodSync, truncateSync, rmSync, writeFileSync, accessSync, constants, readdirSync, statSync, rmdirSync, renameSync, lstatSync, unlinkSync, openSync, closeSync, mkdtempSync, createWriteStream, createReadStream } from 'fs';
 import { spawnSync, spawn } from 'child_process';
 import { availableParallelism, networkInterfaces } from 'os';
 import { randomBytes, createHash } from 'crypto';
@@ -38,16 +38,25 @@ createRequire(import.meta.url);
 function logStamp(at) {
   return at.toISOString().replace(/\.\d{3}Z$/, "Z");
 }
-function createRunnerLog(now = () => /* @__PURE__ */ new Date()) {
+function sameDestination(stat = fstatSync) {
+  try {
+    const out = stat(1);
+    const err = stat(2);
+    return out.dev === err.dev && out.ino === err.ino;
+  } catch {
+    return false;
+  }
+}
+function createRunnerLog(now = () => /* @__PURE__ */ new Date(), io = { stdout: process.stdout, stderr: process.stderr, joined: () => sameDestination() }) {
   const write = (stream, text) => {
     stream.write(`${logStamp(now())} ${text}
 `);
   };
   return {
-    line: (text) => write(process.stdout, text),
+    line: (text) => write(io.stdout, text),
     error: (text) => {
-      write(process.stdout, text);
-      write(process.stderr, text);
+      write(io.stdout, text);
+      if (!io.joined()) write(io.stderr, text);
     }
   };
 }
@@ -1231,6 +1240,19 @@ var NoControlPlane = class extends Error {
 var GatewayConflict = class extends Error {
 };
 var unavailable = (why) => ({ kind: "refused", reason: `context_unavailable: ${why}` });
+var DESIGNATION_LOOKUP = { timeoutMs: 1e4, attempts: 2 };
+function lookupFailureReason(failure, repository) {
+  switch (failure?.kind) {
+    case "timeout":
+      return `the gateway did not answer which repository governs ${repository} within ${failure.timeoutMs / 1e3} seconds, twice`;
+    case "status":
+      return `the gateway answered ${failure.status} when asked which repository governs ${repository}`;
+    case "network":
+      return `the request asking which repository governs ${repository} failed: ${failure.message}`;
+    default:
+      return `the gateway did not say which repository governs ${repository}`;
+  }
+}
 function makeReadable(tree, dir, files) {
   chmodSync(dir, 493);
   chmodSync(tree, 493);
@@ -1268,6 +1290,7 @@ async function stageGovernedContext(input) {
       home: contextHomeDir(configPath),
       cloud: { url, apiKey, appId },
       fetchImpl: signingFetchFor(input.fetchImpl, configPath, apiKey),
+      designationLookup: DESIGNATION_LOOKUP,
       git: git2,
       now: input.now,
       resolveControlPlaneUrl: (repository) => input.controlPlaneUrl(repository),
@@ -1303,7 +1326,7 @@ async function stageGovernedContext(input) {
         if (result.authRejected === true) {
           return finish(unavailable(`the gateway rejected the runner's API key (401/403) when asked which repository governs ${input.repository}`));
         }
-        return finish(unavailable(`the gateway did not say which repository governs ${input.repository}`));
+        return finish(unavailable(lookupFailureReason(result.lookupFailure, input.repository)));
       case "conflict":
         return finish({ kind: "refused", reason: `context_conflict: ${result.message ?? "two control planes claim this repository"}` });
       default:

package/dist/{chunk-MTF3PHVZ.js → chunk-NBGDBTO2.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { mcpTargetPath, INIT_STDIO_ENTRY, INIT_DOCS_ENTRY, DOCS_MCP_SERVER_NAME } from './chunk-XCK2YAY5.js';
-import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-FOJGZYFC.js';
-import { pinExists, readContextManifest } from './chunk-LCEXHCHD.js';
-import { resolvePackRoot, loadTemplateFiles, skillDir } from './chunk-ZA5CHAFY.js';
+import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-42ZI52JW.js';
+import { pinExists, readContextManifest } from './chunk-WTE3MQML.js';
+import { resolvePackRoot, loadTemplateFiles, skillDir } from './chunk-POJMEEJJ.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { createHash } from 'crypto';
 import { existsSync, readFileSync } from 'fs';

package/dist/{chunk-KFRM23WD.js → chunk-NNRTPG7X.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-MSASO5O4.js';
+import { LiveUploader } from './chunk-NWQTTSBB.js';
 import { CaptureDaemon } from './chunk-JXYVA45C.js';
 import { parseWorkItemEnv } from './chunk-GQD22KKN.js';
-import { spoolDir } from './chunk-PQUM37BK.js';
+import { spoolDir } from './chunk-BWQ66M6N.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';
 import { join } from 'path';

package/dist/{chunk-MSASO5O4.js → chunk-NWQTTSBB.js}

@@ -14,7 +14,7 @@ import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH
 import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-J5M7BSJQ.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
 import { signerFor, signRunnerRequest } from './chunk-V7NIVOFD.js';
-import { writeSyncStatus, spoolDir } from './chunk-PQUM37BK.js';
+import { writeSyncStatus, spoolDir } from './chunk-BWQ66M6N.js';
 import { removeJournalHooks } from './chunk-XCCLFVXM.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-2M63GG56.js → chunk-OHVJA253.js}

@@ -8685,4 +8685,4 @@ function sessionsToTimeline(sessions) {
   return out;
 }
 
-export { CONTEXT_PIN_FILENAME, CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_SOURCE_CONFIG_PATH, classifyTree, emitTree, extractFacts, generatedHeaderSource, normalizePath, normalizeRepoName, orderSessions, parseGoverns, parseOuterlayerConfig, parsePolicy, sessionsToTimeline, splitRawFile };
+export { ALL_TARGET_IDS, CONTEXT_PIN_FILENAME, CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_SOURCE_CONFIG_PATH, classifyTree, emitTree, extractFacts, generatedHeaderSource, normalizePath, normalizeRepoName, orderSessions, parseGoverns, parseOuterlayerConfig, parsePolicy, sessionsToTimeline, splitRawFile };

package/dist/{chunk-Z3NOIFDR.js → chunk-ONKJUM6R.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-UUDDPNRJ.js';
+import { MIN_ENGINE_MAJOR } from './chunk-MAK5LYRF.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-CX22S5BA.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';

package/dist/{chunk-T5VPP6H7.js → chunk-OZGHL5Y5.js}

@@ -10,7 +10,7 @@ createRequire(import.meta.url);
 var AGENT_COMMANDS = {
   claude: {
     implement: 'claude -p "/build" --permission-mode bypassPermissions',
-    amend: 'claude -p "/amend" --permission-mode bypassPermissions'
+    amend: 'claude -p "/outerlayer-amend" --permission-mode bypassPermissions'
   }
 };
 function isAgentName(name) {

package/dist/{chunk-ZA5CHAFY.js → chunk-POJMEEJJ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { splitRawFile } from './chunk-2M63GG56.js';
+import { splitRawFile } from './chunk-OHVJA253.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';
@@ -8,7 +8,7 @@ import { fileURLToPath } from 'url';
 
 createRequire(import.meta.url);
 var TEMPLATE_SKILLS = ["spec", "writing-specs", "writing-tests", "build"];
-var MAINTAINED_SKILLS = ["emitting-evidence", "amend", "reporting-findings", "outerlayer"];
+var MAINTAINED_SKILLS = ["outerlayer-evidence", "outerlayer-amend", "outerlayer-findings", "outerlayer-cli"];
 var TEMPLATE_CLASS_LINE = "<!-- yours to edit. Copied once from the default template by outerlayer init; never overwritten. -->";
 function maintainedClassLine(version) {
   return `<!-- maintained by OuterLayer ${version}. Edits are overwritten on the next outerlayer context emit. -->`;
@@ -77,7 +77,24 @@ function writeMaintainedFiles(repoRoot, files) {
   return { created, rewritten };
 }
 function maintainedFilesForExistingSkills(repoRoot, files) {
-  return files.filter((file) => existsSync(join(repoRoot, skillDir(file.skill))));
+  return files.filter((file) => existsSync(join(repoRoot, skillDir(file.skill))) || formerNameExists(repoRoot, file.skill));
+}
+var FORMER_MAINTAINED_NAMES = {
+  amend: "outerlayer-amend",
+  "emitting-evidence": "outerlayer-evidence",
+  "reporting-findings": "outerlayer-findings",
+  outerlayer: "outerlayer-cli"
+};
+var MAINTAINED_LINE = /^<!-- maintained by OuterLayer \S+?\. /m;
+function isMaintainedCopy(repoRoot, skill) {
+  try {
+    return MAINTAINED_LINE.test(readFileSync(join(repoRoot, skillDir(skill), "SKILL.md"), "utf8"));
+  } catch {
+    return false;
+  }
+}
+function formerNameExists(repoRoot, skill) {
+  return Object.entries(FORMER_MAINTAINED_NAMES).some(([former, current]) => current === skill && isMaintainedCopy(repoRoot, former));
 }
 
-export { MAINTAINED_SKILLS, TEMPLATE_SKILLS, loadMaintainedFiles, loadTemplateFiles, maintainedFilesForExistingSkills, resolvePackRoot, skillDir, writeMaintainedFiles };
+export { FORMER_MAINTAINED_NAMES, MAINTAINED_SKILLS, TEMPLATE_SKILLS, isMaintainedCopy, loadMaintainedFiles, loadTemplateFiles, maintainedFilesForExistingSkills, resolvePackRoot, skillDir, writeMaintainedFiles };

package/dist/{chunk-JR6ERP3M.js → chunk-S3NYLI2P.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect } from './chunk-NPQWKGUA.js';
+import { autoConnect } from './chunk-6Y5RUTHO.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { workPageUrl } from './chunk-YDSMROTB.js';
+import { workPageUrl } from './chunk-3NSNIIBE.js';
 import { sanitizeTerminal } from './chunk-WUYTWNMA.js';
 import { resolveRepoIdentity } from './chunk-JXYVA45C.js';
 import { C } from './chunk-YRYMNBGQ.js';
@@ -360,7 +360,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-WYQD6D7T.js');
+      const { logHookError } = await import('./hook-fast-R4FVSZ2H.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }

package/dist/{chunk-HXLMZOKU.js → chunk-VQYBXPI7.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-Z3NOIFDR.js';
-import { MIN_ENGINE_MAJOR } from './chunk-UUDDPNRJ.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-T5VPP6H7.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-ONKJUM6R.js';
+import { MIN_ENGINE_MAJOR } from './chunk-MAK5LYRF.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-OZGHL5Y5.js';
 import { runnerCredentialProblem } from './chunk-22RMZBGW.js';
 import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
@@ -112,7 +112,7 @@ function prepareRunnerInit(configPath, opts = {}) {
 function writeRunnerInit(prepared, runnerKey) {
   const { configPath, config, carried, credential, agent, machine, hooks } = prepared;
   if (prepared.needsKey && runnerKey === void 0) {
-    throw new RunnerInitError(`${configPath}: apiKey is missing, and no runner key was created from the login.`);
+    throw new RunnerInitError(`${configPath}: apiKey is missing, and no runner key was pasted.`);
   }
   if (runnerKey !== void 0) Object.assign(config, { url: runnerKey.url, apiKey: runnerKey.apiKey, appId: runnerKey.appId });
   mkdirSync(runnerDir(configPath), { recursive: true, mode: RUNNER_DIR_MODE });

package/dist/{chunk-LCEXHCHD.js → chunk-WTE3MQML.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_PIN_FILENAME } from './chunk-2M63GG56.js';
+import { CONTEXT_PIN_SCHEMA_VERSION, CONTEXT_PIN_FILENAME } from './chunk-OHVJA253.js';
 import { readFileSync, existsSync, writeFileSync, mkdirSync, utimesSync, statSync, unlinkSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-NXUH742G.js → chunk-WVUIRTWA.js}

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-ASOSIKA4.js';
+import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-G5NPRL2K.js';
+import { writeJobFile, readJobFile, readJobFileChecked } from './chunk-RMWLBUCJ.js';
 import { writePendingUpdate } from './chunk-O765JR4W.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-UGP76IZ5.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-YETTWTAY.js';
-import { writeJobFile, readJobFile, readJobFileChecked } from './chunk-RMWLBUCJ.js';
 import { compareVersions, satisfiesRange } from './chunk-I2UOAV7X.js';
 import { RUNNER_PROTOCOL } from './chunk-ADJRGVZC.js';
-import { placeholderQueues, placeholderProblem } from './chunk-F7GBYX2P.js';
+import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-LWSJQJC6.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, cleanVersions, isInLayout, stagingDir } from './chunk-TI7B7UEO.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-UUDDPNRJ.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, BuildTokens, classifyRefusal, refusalCode, measureDisk, createRunnerLog, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime, formatClock } from './chunk-MAK5LYRF.js';
 import { spawnRun } from './chunk-KMDLFI4P.js';
 import { checkFit } from './chunk-RLYZLUQ7.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-JR6ERP3M.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-S3NYLI2P.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-22RMZBGW.js';
 import { startTimeOf, claimPidFile, readPidFile, isSameProcess, releasePidFile } from './chunk-N5FOE5PS.js';
 import { builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, BUILD_LABEL, RUNNER_LABEL } from './chunk-4NPZVMJU.js';
@@ -1315,7 +1315,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-EQSW5DTD.js');
+  const { postJson: postJson2 } = await import('./work-cmd-Z2WXLZPH.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -1776,7 +1776,9 @@ async function startJob(state, item, queue, claimId, itemKey, branch, identity,
       log.line(`${tag} workdir is not a git checkout, so ${branch} was not checked out`);
     }
   }
-  const cmdline = state.config.commands[queue];
+  const configured = state.config.commands[queue];
+  const cmdline = configured === void 0 ? void 0 : currentSkillCommand(configured);
+  if (cmdline !== configured) log.line(`${tag} ${formerSkillProblem([queue])}`);
   if (!cmdline) {
     log.error(`${tag} has no runner.commands.${queue} in the config file \xB7 ending job as failed`);
     await endJob(state, active, "failed", { stage: "command" });
@@ -2072,7 +2074,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-2JSSXCKJ.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-5XE7XMC4.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });

package/dist/{chunk-JJEGKEFV.js → chunk-YU3VKZ5F.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect } from './chunk-NPQWKGUA.js';
+import { autoConnect } from './chunk-6Y5RUTHO.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
 import { resolveRepoIdentity } from './chunk-JXYVA45C.js';
 import { C } from './chunk-YRYMNBGQ.js';