@outerlayer/cli 0.16.1 → 0.17.0

package/dist/{status-XHSGEYO5.js → status-7VNQN5PW.js}

@@ -1,19 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LEASE_SECONDS, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-R4ZQQ7U2.js';
+import { LEASE_SECONDS, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-G5NPRL2K.js';
 import './chunk-RMWLBUCJ.js';
+import './chunk-NNRTPG7X.js';
 import './chunk-HYZRY4KZ.js';
-import './chunk-ONRCEE6D.js';
-import './chunk-U3HXXRTY.js';
+import './chunk-NWQTTSBB.js';
 import './chunk-HHJDN6AU.js';
 import { formatBytes } from './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import { formatDuration, formatClock, relativeToRunner } from './chunk-EWORLJMO.js';
+import { formatDuration, formatClock, relativeToRunner } from './chunk-MAK5LYRF.js';
 import './chunk-KMDLFI4P.js';
 import './chunk-QKFB4K7X.js';
 import './chunk-RSNSZ2LJ.js';
-import './chunk-6QRMLNH3.js';
-import './chunk-NPQWKGUA.js';
+import './chunk-S3NYLI2P.js';
+import './chunk-6Y5RUTHO.js';
 import './chunk-IP7BIBXJ.js';
 import './chunk-22RMZBGW.js';
 import './chunk-UXYLWVTQ.js';
@@ -27,7 +27,7 @@ import './chunk-4Q7OMKAT.js';
 import './chunk-CX22S5BA.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-YDSMROTB.js';
+import './chunk-3NSNIIBE.js';
 import './chunk-WUYTWNMA.js';
 import './chunk-JXYVA45C.js';
 import './chunk-4KSQKQXE.js';
@@ -36,7 +36,7 @@ import './chunk-YRYMNBGQ.js';
 import './chunk-GQD22KKN.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
-import './chunk-JEHRUE3F.js';
+import './chunk-YZ5F4PIS.js';
 import './chunk-WTE3MQML.js';
 import './chunk-C5Y5ZJJZ.js';
 import './chunk-ZJSNLVCE.js';
@@ -50,7 +50,7 @@ import './chunk-EABW6AJQ.js';
 import './chunk-RA3O54FC.js';
 import './chunk-V7NIVOFD.js';
 import { runnerDir, jobsDir } from './chunk-ZM2IMMYN.js';
-import './chunk-6JNURGOA.js';
+import './chunk-BWQ66M6N.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{sync-cmd-5G5EIEHD.js → sync-cmd-GVPPFZ3G.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { CHUNK_PART_TARGET_BYTES, RETRYABLE_STATUSES, SyncConfigError, SyncTransportError, detectCi, isLoopbackUrl, resolveTier, runSync } from './chunk-U3HXXRTY.js';
+export { CHUNK_PART_TARGET_BYTES, RETRYABLE_STATUSES, SyncConfigError, SyncTransportError, detectCi, isLoopbackUrl, resolveTier, runSync } from './chunk-NWQTTSBB.js';
 import './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-IP7BIBXJ.js';
@@ -19,7 +19,7 @@ import './chunk-J5M7BSJQ.js';
 export { cloudConfigPath, readCloudConfig, writeCloudConfig } from './chunk-EABW6AJQ.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-6JNURGOA.js';
+import './chunk-BWQ66M6N.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';

package/dist/{watch-UTOXO4SE.js → watch-23HSAEI6.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-U3HXXRTY.js';
+import { LiveUploader } from './chunk-NWQTTSBB.js';
 import './chunk-HHJDN6AU.js';
 import './chunk-TBT347UY.js';
 import './chunk-IP7BIBXJ.js';
@@ -19,7 +19,7 @@ import './chunk-J5M7BSJQ.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-V7NIVOFD.js';
 import './chunk-ZM2IMMYN.js';
-import './chunk-6JNURGOA.js';
+import './chunk-BWQ66M6N.js';
 import './chunk-XCCLFVXM.js';
 import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{work-claim-cmd-RKHYFE5Y.js → work-claim-cmd-LKL3GHFQ.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { RUNNER_PROTOCOL } from './chunk-ADJRGVZC.js';
-import { resolveCredentials, WorkCommandError, parsePositiveInt, postJson, environmentFacts, resolveRepository, findLiveItem } from './chunk-6QRMLNH3.js';
-export { WorkCommandError } from './chunk-6QRMLNH3.js';
-import './chunk-NPQWKGUA.js';
+import { resolveCredentials, WorkCommandError, parsePositiveInt, postJson, environmentFacts, resolveRepository, findLiveItem } from './chunk-S3NYLI2P.js';
+export { WorkCommandError } from './chunk-S3NYLI2P.js';
+import './chunk-6Y5RUTHO.js';
 import './chunk-IP7BIBXJ.js';
 import { defaultRunnerConfigPath } from './chunk-22RMZBGW.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
 import './chunk-4Q7OMKAT.js';
-import './chunk-YDSMROTB.js';
+import './chunk-3NSNIIBE.js';
 import './chunk-WUYTWNMA.js';
 import './chunk-JXYVA45C.js';
 import './chunk-4KSQKQXE.js';
@@ -118,7 +118,7 @@ async function runWorkRelease(opts) {
       { sessionId, ended: true },
       fetchImpl
     );
-    const { markWorkLeaseRenewed } = await import('./hook-fast-D7HV4IXG.js');
+    const { markWorkLeaseRenewed } = await import('./hook-fast-R4FVSZ2H.js');
     markWorkLeaseRenewed(sessionId, opts.home ?? homeFromEnv(env));
     const output2 = opts.json ? JSON.stringify(data2) : `released session ${sessionId}'s lease on #${itemId}, if it held one`;
     if (!opts.quiet) process.stdout.write(output2 + "\n");

package/dist/{work-cmd-DJQJEZVB.js → work-cmd-Z2WXLZPH.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { WorkCommandError, environmentFacts, findLiveItem, getJson, parsePositiveInt, postJson, resolveCredentials, resolveRepository, runWorkBuild, runWorkLinkSession, runWorkList, runWorkRemove, runWorkStatus } from './chunk-6QRMLNH3.js';
-import './chunk-NPQWKGUA.js';
+export { WorkCommandError, environmentFacts, findLiveItem, getJson, parsePositiveInt, postJson, resolveCredentials, resolveRepository, runWorkBuild, runWorkLinkSession, runWorkList, runWorkRemove, runWorkStatus } from './chunk-S3NYLI2P.js';
+import './chunk-6Y5RUTHO.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-YDSMROTB.js';
+import './chunk-3NSNIIBE.js';
 import './chunk-WUYTWNMA.js';
 import './chunk-JXYVA45C.js';
 import './chunk-4KSQKQXE.js';

package/dist/{work-comment-cmd-A55CUSYE.js → work-comment-cmd-AWHP56M2.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { resolveCredentials, postJson, getJson } from './chunk-6QRMLNH3.js';
-import './chunk-NPQWKGUA.js';
+import { resolveCredentials, postJson, getJson } from './chunk-S3NYLI2P.js';
+import './chunk-6Y5RUTHO.js';
 import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import './chunk-YDSMROTB.js';
+import './chunk-3NSNIIBE.js';
 import { sanitizeTerminal } from './chunk-WUYTWNMA.js';
 import { resolveRepoIdentity } from './chunk-JXYVA45C.js';
 import './chunk-4KSQKQXE.js';

package/dist/{work-open-pr-cmd-E6O53IJD.js → work-open-pr-cmd-IOM4AVQQ.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { itemLabel, runWorkPr, WorkPrCommandError } from './chunk-JJEGKEFV.js';
-import { resolveCredentials } from './chunk-6QRMLNH3.js';
-import './chunk-NPQWKGUA.js';
+import { itemLabel, runWorkPr, WorkPrCommandError } from './chunk-YU3VKZ5F.js';
+import { resolveCredentials } from './chunk-S3NYLI2P.js';
+import './chunk-6Y5RUTHO.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-YDSMROTB.js';
+import './chunk-3NSNIIBE.js';
 import './chunk-WUYTWNMA.js';
 import './chunk-JXYVA45C.js';
 import './chunk-4KSQKQXE.js';

package/dist/{work-pr-cmd-L77K32WK.js → work-pr-cmd-HNEUIEN7.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { WorkPrCommandError, itemLabel, runWorkPr } from './chunk-JJEGKEFV.js';
-import './chunk-NPQWKGUA.js';
+export { WorkPrCommandError, itemLabel, runWorkPr } from './chunk-YU3VKZ5F.js';
+import './chunk-6Y5RUTHO.js';
 import './chunk-IP7BIBXJ.js';
-import './chunk-YDSMROTB.js';
+import './chunk-3NSNIIBE.js';
 import './chunk-WUYTWNMA.js';
 import './chunk-JXYVA45C.js';
 import './chunk-4KSQKQXE.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outerlayer/cli",
-  "version": "0.16.1",
+  "version": "0.17.0",
   "description": "OuterLayer CLI — commands: init, connect, doctor, login, logout, sync, daemon (alias: watch), emit, work, runner, hooks, mcp, import, context. Capture and sync coding-agent sessions, and record proof of factory work.",
   "license": "Apache-2.0",
   "author": "Magu Studios, Inc.",

package/skill-pack/maintained/outerlayer-amend/SKILL.md

@@ -8,6 +8,8 @@ description: >
   "fix what the reviewer failed". Invoke with /outerlayer-amend.
 ---
 
+Run the CLI as `outerlayer`. If that command is not on PATH, run `npx -y @outerlayer/cli` with the same arguments. Every `outerlayer ...` command below follows this rule.
+
 Answer every thread waiting on an agent on one work item's pull request, then
 stop. A work item has one general thread and one thread per acceptance
 criterion. A person's fail on the general thread leaves it waiting on an agent.

package/skill-pack/maintained/outerlayer-cli/SKILL.md

@@ -9,6 +9,8 @@ description: >
   review.
 ---
 
+Run the CLI as `outerlayer`. If that command is not on PATH, run `npx -y @outerlayer/cli` with the same arguments. Every `outerlayer ...` command below follows this rule.
+
 OuterLayer is a software factory. An issue goes in. A reviewed and verified
 pull request comes out, with the evidence that backs it. An agent builds it in
 this repository, on the machine it already runs on.

package/skill-pack/maintained/outerlayer-evidence/SKILL.md

@@ -8,6 +8,8 @@ description: >
   works", and in CI steps that produce verifiable output.
 ---
 
+Run the CLI as `outerlayer`. If that command is not on PATH, run `npx -y @outerlayer/cli` with the same arguments. Every `outerlayer ...` command below follows this rule.
+
 An artifact is an exhibit: evidence *of* a specific change, anchored to the
 pull request and rendered in its evidence comment. Emit the few exhibits the
 spec asks for — a reviewer should see the change working, not a gallery.
@@ -98,7 +100,7 @@ Emit the review report, an HTML file, as a report artifact with no `--for`:
 
     outerlayer emit artifact review.html --caption "Review of the change and what it found"
 
-Then run `outerlayer sync`, and copy the report's deep link from the pull request's evidence comment. Never build the link by hand, and never link a pull request comment. Record the review's verdict on the `code-review` check that `outerlayer init` writes, with that link as its proof:
+Then run `outerlayer sync`. It prints a line for the report that ends with its link (`outerlayer sync --json` lists them under `uploadedArtifacts`). Take the link from that line. If `sync` printed no line for the report, another sync already uploaded it: run `outerlayer sync --link <the artifact id>`, with the id `emit artifact` printed. Never build the link by hand, and never link a pull request comment. Record the review's verdict on the `code-review` check that `outerlayer init` writes, with that link as its proof:
 
     outerlayer emit code-review --item "$OUTERLAYER_WORK" --result pass --link <the report's deep link>
 
@@ -108,7 +110,7 @@ Use `--result fail` when the review left a finding unfixed. Record it once. Outs
 
 Bind the judge's report on each criterion, an HTML file, with `--for acceptance-criteria`. The item page links it at the top of its Criteria tab for the reviewer. Emit it only when the item has recorded criteria.
 
-Then run `outerlayer sync`, copy the report's deep link from the evidence comment the same way, and record the judge's verdict on the `acceptance-criteria` check that `outerlayer init` writes:
+Then run `outerlayer sync`, take the report's deep link from the line it prints the same way, and record the judge's verdict on the `acceptance-criteria` check that `outerlayer init` writes:
 
     outerlayer emit acceptance-criteria --item "$OUTERLAYER_WORK" --result pass --link <the report's deep link>
 

package/skill-pack/maintained/outerlayer-findings/SKILL.md

@@ -12,6 +12,8 @@ description: >
   `outerlayer emit finding` command.
 ---
 
+Run the CLI as `outerlayer`. If that command is not on PATH, run `npx -y @outerlayer/cli` with the same arguments. Every `outerlayer ...` command below follows this rule.
+
 ## What this is for
 
 A finding is a problem in the factory, not in the change: an instruction

package/skill-pack/shipped.json

@@ -14,6 +14,7 @@
       "a6743050c5c387e962ad4264526d9a3c10edf36823e4b6829f200bf79a4e45e7",
       "b0aa9b6962675f772b67a4390c15b6b0100390983d958c656a826a066399f3d0",
       "b95986e95ea3b1ef4202f7f0c00bfcd35865d4fda033b3d6947a5bb9d33cd24c",
+      "e9d086f6b989e3a17f14d6dcaacabd438bed861076f9a620fce61accc8fce4fb",
       "f4e1661c6f87d7ff6d23c6182530fa0a9cb87c4dc3f31e48f2be11f32ebb2c00"
     ],
     ".outerlayer/skills/build/references/agent-briefs.md": [
@@ -36,6 +37,7 @@
       "1d0e000433676a39c7ac4fbf3e92b1fe4235b10240c09f87ec0003f3c8d7956e",
       "1f4fe97ca8f11d6681db5734f3103af5ea175a9472ff1d38b10cb463f4956a6a",
       "4687f56bcec766f1926d58a208418f800a1727c073b5e6047b40e3aaac2bd6c9",
+      "4cfc10bc9d380e67b0ec5c243eb5f2c63f03ee3348d7956a45467620acc656fc",
       "81a764eb317fcb4672bedd35e7b9aa68d1c0b73f82fc2dfa03e5a78758db8f14",
       "985e02b98105b00c356014e003b2d60e9c458c3dcbeef7378274ccb84af031fc"
     ],
@@ -51,15 +53,18 @@
       "9d4d2e5e0307ea8c38cf885cd67d06a939b7fc2bed65f5080ca9610178949d74"
     ],
     ".outerlayer/skills/build/scripts/criterion-citations.mjs": [
-      "0902118ec216182f9d0ba0f6c7966306ad6891d8e846022123d3f86aaf175fce"
+      "0902118ec216182f9d0ba0f6c7966306ad6891d8e846022123d3f86aaf175fce",
+      "aa9446b29c7c8fa4d312b8ec54b2a2a154f52708691a7eaf61e3a1b67ae6a9ef"
     ],
     ".outerlayer/skills/build/scripts/record-criteria.mjs": [
       "36f19e730bc220fa21622b3bb0a306999f038b8220a0a07a1efe21ec0f748729",
       "596e9a78e62cbea040a3bf428cd54bf59687e9e89001fad719304f88d03ca2ea",
-      "64de9445087b247b0781a4e6e025ef97b1259ce1c91819bf541decc26b8f8400"
+      "64de9445087b247b0781a4e6e025ef97b1259ce1c91819bf541decc26b8f8400",
+      "f3d6ed58118209d8b169d00b4283d48f25d3cac5121d2e29364274dd36ed113a"
     ],
     ".outerlayer/skills/spec/SKILL.md": [
       "71e81fabf353ad6117c54e061868538bf00066b78c2528f5a8364445d1def02e",
+      "82f75a53c591f94615dc27c099e94fcf95e2a09b95aceb38b9022d5f7f054cb0",
       "9039ae30d4e836b5c5cfba4a14344e46fd13694ae9e4d88e750abce34dfcd9e6"
     ],
     ".outerlayer/skills/writing-specs/SKILL.md": [
@@ -74,10 +79,12 @@
       "b00f5970b568159ca0bfbc75c3834938749ad5e2e73a80769d88bbe3c8c26737"
     ],
     ".outerlayer/validators/acceptance-criteria.yaml": [
-      "3b2054aa1d4bd9f7441e88eec1a3bdf61b61ad00efa79736e26a5dd601d43910"
+      "3b2054aa1d4bd9f7441e88eec1a3bdf61b61ad00efa79736e26a5dd601d43910",
+      "d9bef4bf0962015c662f1bc16d86807414dfc6e095f99aa3727bc4613676ab2a"
     ],
     ".outerlayer/validators/code-review.yaml": [
       "05041976e4d84d6256ed88995ea4fd1566abc6d3a9574863065cf855dcafcf70",
+      "40653bc6b170f28be1df410d9d8e270987184a2d04cbec588ae07f50afa59ba3",
       "fbdf0baca0064b09e47f5984afc322d582accd142c3377c06622bc6567b0e98c"
     ]
   }

package/skill-pack/template/build/SKILL.md

@@ -8,6 +8,8 @@ description: >
 disable-model-invocation: true
 ---
 
+Run the CLI as `outerlayer`. If that command is not on PATH, run `npx -y @outerlayer/cli` with the same arguments. Every `outerlayer ...` command below follows this rule.
+
 Build one issue into an evidenced pull request. `/spec` writes and gets
 approval for the issue. This skill builds it. It never writes the spec.
 

package/skill-pack/template/build/references/release.md

@@ -48,16 +48,18 @@ request before going on.
 
 ## Record the code review
 
-Once the pull request is linked, run `outerlayer sync`. Copy the review
-report's deep link from the pull request's evidence comment. Never build the
-link by hand, and never link a pull request comment. Then record the review's
-verdict on the `code-review` check, once:
+Once the pull request is linked, run `outerlayer sync`. It prints a line for
+the review report that ends with its link. Take the link from that line. If
+`sync` printed no line for the report, another sync already uploaded it: run
+`outerlayer sync --link <the artifact id>`, with the id `emit artifact`
+printed. Never build the link by hand, and never link a pull request comment.
+Then record the review's verdict on the `code-review` check, once:
 
     outerlayer emit code-review --item "$OUTERLAYER_WORK" --result pass --link <the report's deep link>
 
 Record `--result fail` when the review ended with a blocking finding unfixed.
-When the link has not appeared after a sync, stop and name it as a blocker in
-the final report. Never record the result with another link.
+When neither command gives a link, stop and name it as a blocker in the final
+report. Never record the result with another link.
 
 ## Judge the criteria
 
@@ -83,11 +85,11 @@ that is missing in the evidence phase.
 
 ## Record the criteria verdict
 
-Once the judge's report is synced, copy its deep link from the pull request's
-evidence comment. The link can take up to a minute to appear after the sync.
-If it is not there yet, wait a minute and read the comment again. Never build
-the link by hand, and never link a pull request comment. Then record the
-judge's verdict on the `acceptance-criteria` check, once:
+Once the judge's report is synced, take its deep link from the line `sync`
+printed for it. If `sync` printed no line for the report, run
+`outerlayer sync --link <the artifact id>`, with the id `emit artifact`
+printed. Never build the link by hand, and never link a pull request comment.
+Then record the judge's verdict on the `acceptance-criteria` check, once:
 
     outerlayer emit acceptance-criteria --item "$OUTERLAYER_WORK" --result pass --link <the judge report's deep link>
 

package/skill-pack/template/build/scripts/criterion-citations.mjs

@@ -9,7 +9,8 @@
 // The criteria come from the file `record-criteria.mjs` wrote, by default
 // `<git dir>/build-reports/criteria.json`. A test cites a criterion when the
 // criterion's id appears as a whole token in a test's title or in a comment
-// above it. Only git-tracked test files are scanned, so every link names code
+// above it. `WC-01 counts`, `WC-01: counts` and `WC-01 - counts` all cite
+// WC-01. Only git-tracked test files are scanned, so every link names code
 // that a commit contains. The link names the HEAD commit and is written only
 // when the origin remote is on GitHub; otherwise the test is listed unlinked.
 // A criterion no test cites gets an empty list. An existing block in the
@@ -32,9 +33,13 @@ function escapeRegExp(text) {
   return text.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
 
-/** A pattern that finds `id` as a whole token: not inside a longer id such as `WC-10` for `WC-1`, and still found before a sentence's full stop. */
+/**
+ * A pattern that finds `id` as a whole token: not inside a longer id such as
+ * `WC-10` for `WC-1` or `WC-1:b` for `WC-1`, and still found before a
+ * sentence's full stop or a title's colon, as in `WC-1: counts words`.
+ */
 export function idPattern(id) {
-  return new RegExp(`(?<![A-Za-z0-9_:-])${escapeRegExp(id)}(?![A-Za-z0-9_:-]|\\.[A-Za-z0-9])`);
+  return new RegExp(`(?<![A-Za-z0-9_:-])${escapeRegExp(id)}(?![A-Za-z0-9_-]|:[A-Za-z0-9_-]|\\.[A-Za-z0-9])`);
 }
 
 /** The ids of a criteria file shaped `{ "criteria": [{ "id" }] }`. */

package/skill-pack/template/build/scripts/record-criteria.mjs

@@ -85,10 +85,16 @@ export function classifyEmitFailure(message) {
   return /\brefused \(409\):/.test(message) ? "item-list-stands" : "refused";
 }
 
-/** Builds the `emit` function that runs `outerlayer emit criteria`; `spawn` is `spawnSync`, or a stand-in in tests. */
+/**
+ * Builds the `emit` function that runs `outerlayer emit criteria`; `spawn` is `spawnSync`, or a stand-in in tests.
+ * A machine that ran the CLI through `npx` has no `outerlayer` on PATH, so a missing command falls back to `npx -y @outerlayer/cli`.
+ */
 export function makeEmit(spawn, item) {
   return (file) => {
-    const run = spawn("outerlayer", ["emit", "criteria", file, "--item", item], { encoding: "utf8", timeout: 120000 });
+    const args = ["emit", "criteria", file, "--item", item];
+    const options = { encoding: "utf8", timeout: 120000 };
+    let run = spawn("outerlayer", args, options);
+    if (run.error?.code === "ENOENT") run = spawn("npx", ["-y", "@outerlayer/cli", ...args], options);
     if (run.status === 0) return { ok: true };
     if (run.error) return { ok: false, message: `could not run outerlayer emit criteria: ${run.error.message}` };
     if (run.signal) return { ok: false, message: `outerlayer emit criteria was stopped by ${run.signal}` };

package/skill-pack/template/spec/SKILL.md

@@ -9,6 +9,8 @@ description: >
   /spec <what you want built>.
 ---
 
+Run the CLI as `outerlayer`. If that command is not on PATH, run `npx -y @outerlayer/cli` with the same arguments. Every `outerlayer ...` command below follows this rule.
+
 Take one idea from a sentence to an issue a person can build from. This file
 is the procedure. The content discipline is the `writing-specs` skill: summary
 block, problem before solution, non-goals, Given/When/Then criteria and the

package/skill-pack/validators/acceptance-criteria.yaml

@@ -5,11 +5,12 @@
 # the test that cites it. Write its verdicts as an .html file and emit it as
 # a report artifact bound to this check:
 #   outerlayer emit artifact criteria.html --for acceptance-criteria --caption "Each criterion judged against the test that cites it"
-# Then run `outerlayer sync`, and copy the report's deep link from the pull
-# request's evidence comment. The link can take up to a minute to appear
-# after the sync. If it is not there yet, wait a minute and read the comment
-# again; do not give up after one look. Never build the link by hand, and
-# never link a pull request comment: a comment can be edited or deleted later.
+# Then run `outerlayer sync`. It prints a line for the report that ends with
+# its link; take the link from that line. If `sync` printed no line for it,
+# another sync already uploaded the report: run
+# `outerlayer sync --link <the artifact id>`, with the id `emit artifact`
+# printed. Never build the link by hand, and never link a pull request
+# comment: a comment can be edited or deleted later.
 #
 # Then record the verdict once, with that link as its proof:
 #   outerlayer emit acceptance-criteria --item "$OUTERLAYER_WORK" --result pass --link <the report's deep link>

package/skill-pack/validators/code-review.yaml

@@ -4,11 +4,12 @@
 # findings report (each confirmed finding with its severity and fix, or a
 # clean bill) as an .html file. Emit it as a report artifact with no --for:
 #   outerlayer emit artifact review.html --caption "Review of the change and what it found"
-# Then run `outerlayer sync`, and copy the report's deep link from the pull
-# request's evidence comment. The link can take up to a minute to appear
-# after the sync. If it is not there yet, wait a minute and read the comment
-# again; do not give up after one look. Never build the link by hand, and
-# never link a pull request comment: a comment can be edited or deleted later.
+# Then run `outerlayer sync`. It prints a line for the report that ends with
+# its link; take the link from that line. If `sync` printed no line for it,
+# another sync already uploaded the report: run
+# `outerlayer sync --link <the artifact id>`, with the id `emit artifact`
+# printed. Never build the link by hand, and never link a pull request
+# comment: a comment can be edited or deleted later.
 #
 # Then record the verdict once, with that link as its proof:
 #   outerlayer emit code-review --item "$OUTERLAYER_WORK" --result pass --link <the report's deep link>

package/dist/runner-key-W25ISHI3.js

@@ -1,155 +0,0 @@
-#!/usr/bin/env node
-import { createRequire } from 'node:module';
-import { readConfigObject, RunnerInitError } from './chunk-CA3XMYFN.js';
-import './chunk-RSPXEVDX.js';
-import './chunk-EWORLJMO.js';
-import './chunk-KMDLFI4P.js';
-import './chunk-QKFB4K7X.js';
-import './chunk-RSNSZ2LJ.js';
-import './chunk-OZGHL5Y5.js';
-import './chunk-RLYZLUQ7.js';
-import './chunk-6MZSX4M7.js';
-import { postJson, WorkCommandError, getJson } from './chunk-6QRMLNH3.js';
-import './chunk-NPQWKGUA.js';
-import './chunk-IP7BIBXJ.js';
-import { runnerCredentialProblem } from './chunk-22RMZBGW.js';
-import './chunk-UXYLWVTQ.js';
-import './chunk-R7PF5OOU.js';
-import './chunk-QOZKPLVJ.js';
-import './chunk-N5FOE5PS.js';
-import './chunk-OGFGZQA3.js';
-import './chunk-4NPZVMJU.js';
-import './chunk-7RQ73DLO.js';
-import './chunk-4Q7OMKAT.js';
-import './chunk-CX22S5BA.js';
-import './chunk-YDSMROTB.js';
-import './chunk-WUYTWNMA.js';
-import './chunk-JXYVA45C.js';
-import './chunk-4KSQKQXE.js';
-import './chunk-N6LURUEF.js';
-import './chunk-YRYMNBGQ.js';
-import './chunk-WZBHBH3J.js';
-import './chunk-JEHRUE3F.js';
-import './chunk-WTE3MQML.js';
-import './chunk-C5Y5ZJJZ.js';
-import './chunk-ZJSNLVCE.js';
-import './chunk-YO4PSLVB.js';
-import './chunk-BYT5O5RV.js';
-import './chunk-POJMEEJJ.js';
-import './chunk-OHVJA253.js';
-import './chunk-PLMTLGYH.js';
-import './chunk-J5M7BSJQ.js';
-import { readCloudConfig } from './chunk-EABW6AJQ.js';
-import './chunk-RA3O54FC.js';
-import './chunk-V7NIVOFD.js';
-import './chunk-ZM2IMMYN.js';
-import './chunk-XCCLFVXM.js';
-import { readRepoConnection } from './chunk-BJ3KTMDH.js';
-import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import './chunk-Z5GEFMRW.js';
-import { existsSync } from 'fs';
-import { hostname } from 'os';
-
-createRequire(import.meta.url);
-var RUNNER_KEY_PERMISSIONS = [
-  "sessions.ingest",
-  "evidence.insert",
-  "work.read",
-  "git.read",
-  "context.read",
-  "work.update",
-  "work.claim",
-  "hosts.ingest"
-];
-var MAX_NAME_ATTEMPTS = 10;
-var PASTED_KEY_FALLBACK = "Ask a member who can create keys to make one with the Runner preset on the factory's API keys page, then put it in the runner's config file as apiKey, with the Factory Id as appId, and run this again.";
-function runnerKeyLogin(configPath, opts = {}) {
-  const env = opts.env ?? process.env;
-  const config = existsSync(configPath) ? readConfigObject(configPath) : {};
-  if (config.apiKey !== void 0) {
-    if (opts.appId !== void 0 && opts.appId !== config.appId) {
-      throw new RunnerInitError(
-        `${configPath} already holds a runner key, for the factory its appId names, so --app-id ${opts.appId} creates no key. Leave --app-id out, or give it the same id.`
-      );
-    }
-    return void 0;
-  }
-  const saved = readCloudConfig(opts.home ?? homeFromEnv(env));
-  const own = typeof config.accountToken === "string" && config.accountToken !== "";
-  const accountToken = own ? config.accountToken : saved.accountToken;
-  if (accountToken === void 0 || accountToken === "") return void 0;
-  const url = config.url ?? (own ? void 0 : saved.url);
-  const appId = opts.appId ?? (env.OUTERLAYER_APP_ID || void 0) ?? config.appId ?? readRepoConnection(opts.cwd ?? process.cwd())?.appId;
-  if (appId === void 0) {
-    throw new RunnerInitError(
-      "you are logged in, so this command creates the runner's key, but no factory is chosen. Pass --app-id with the Factory Id from the factory's Settings \u2192 General, or set OUTERLAYER_APP_ID."
-    );
-  }
-  const problem = runnerCredentialProblem({ url, apiKey: accountToken, appId });
-  if (problem !== void 0) {
-    const where = problem.field === "appId" ? "the factory id" : `${configPath}: ${problem.field}`;
-    throw new RunnerInitError(`${where} ${problem.reason}.`);
-  }
-  return { url, accountToken, appId };
-}
-function defaultRunnerKeyName(host = hostname()) {
-  const short = host.replace(/\..*$/, "").trim();
-  return short === "" ? "runner" : short;
-}
-function clause(message) {
-  return message.replace(/\.+$/, "");
-}
-function forbidden(err) {
-  return new RunnerInitError(`your login cannot create a runner key on this factory: ${clause(err.message)}. ${PASTED_KEY_FALLBACK}`);
-}
-async function createKey(login, name, fetchImpl) {
-  for (let attempt = 1; attempt <= MAX_NAME_ATTEMPTS; attempt++) {
-    const tried = attempt === 1 ? name : `${name}-${attempt}`;
-    try {
-      const { data } = await postJson(
-        login.url,
-        "/v1/api-keys",
-        login.accountToken,
-        login.appId,
-        { name: tried, permissions: [...RUNNER_KEY_PERMISSIONS], app_id: login.appId },
-        fetchImpl
-      );
-      const apiKey = data.plaintext_key;
-      if (typeof apiKey !== "string" || apiKey === "") {
-        throw new RunnerInitError(`the gateway created the key ${tried} but did not return it. Delete it on the factory's API keys page, then run this again.`);
-      }
-      return { apiKey, name: tried };
-    } catch (err) {
-      if (!(err instanceof WorkCommandError)) throw err;
-      if (err.status === 409) continue;
-      if (err.status === 403) throw forbidden(err);
-      throw new RunnerInitError(`the runner key was not created: ${clause(err.message)}.`);
-    }
-  }
-  throw new RunnerInitError(
-    `the names ${name} to ${name}-${MAX_NAME_ATTEMPTS} are all taken by keys on this factory. Pass --key-name with another name.`
-  );
-}
-async function checkKey(key, fetchImpl) {
-  const unusable = (why) => new RunnerInitError(
-    `the runner key ${key.name} was created, but ${why}. Nothing else was changed. Delete the key on the factory's API keys page, then run this again.`
-  );
-  let data;
-  try {
-    ({ data } = await getJson(key.url, "/v1/runner/host-key", key.apiKey, key.appId, fetchImpl));
-  } catch (err) {
-    throw unusable(`the gateway did not accept it: ${clause(err instanceof Error ? err.message : String(err))}`);
-  }
-  if (data.bound !== false) {
-    throw unusable("the gateway did not report it as a new runner key");
-  }
-}
-async function createRunnerKey(login, opts = {}) {
-  const fetchImpl = opts.fetchImpl ?? fetch;
-  const created = await createKey(login, opts.name ?? defaultRunnerKeyName(), fetchImpl);
-  const key = { url: login.url, apiKey: created.apiKey, appId: login.appId, name: created.name };
-  await checkKey(key, fetchImpl);
-  return key;
-}
-
-export { RUNNER_KEY_PERMISSIONS, createRunnerKey, defaultRunnerKeyName, runnerKeyLogin };