@outerlayer/cli 0.17.0 → 0.19.0

package/dist/{chunk-BWQ66M6N.js → chunk-NFIR3GEE.js}

@@ -1,7 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { deadHooksState, huskyPrepareScript, preparePackageManagerCommand } from './chunk-XCCLFVXM.js';
+import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
+import { CONTROL_PLANE_DIR_VARIABLE } from './chunk-G2YNJIGF.js';
+import { cliInvocation } from './chunk-CRB3POP4.js';
+import { deadHooksState, huskyPrepareScript, preparePackageManagerCommand } from './chunk-TUSYOL2O.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync, existsSync, statSync, appendFileSync, opendirSync, unlinkSync } from 'fs';
 import { spawn, execFileSync } from 'child_process';
@@ -56,7 +59,7 @@ function assessSyncHealth(status, now = Date.now(), staleAfterMs = SYNC_STALE_AF
     return {
       level: "unknown",
       headline: "no sync has run on this machine yet",
-      details: ["run `outerlayer sync` once to verify the connection"]
+      details: [`run \`${cliInvocation()} sync\` once to verify the connection`]
     };
   }
   const host = status.url ? safeHost(status.url) : "the configured endpoint";
@@ -71,7 +74,7 @@ function assessSyncHealth(status, now = Date.now(), staleAfterMs = SYNC_STALE_AF
     );
     if (status.pending) details.push(`${status.pending} session(s) waiting to ship`);
     if (status.held) details.push(`${status.held} transcript(s) held \u2014 their launch could not be determined`);
-    details.push("run `outerlayer doctor` for the full picture");
+    details.push(`run \`${cliInvocation()} doctor\` for the full picture`);
     return {
       level: "error",
       headline: `sync is FAILING \u2014 last attempt ${formatAgo(now - Date.parse(status.at))}`,
@@ -104,7 +107,7 @@ function assessSyncHealth(status, now = Date.now(), staleAfterMs = SYNC_STALE_AF
       headline: `sync ran ${formatAgo(age)} but ${host} has never been reached`,
       details: [
         "every run so far had an empty queue, so the connection is unproven",
-        "run `outerlayer sync --all` to verify it"
+        `run \`${cliInvocation()} sync --all\` to verify it`
       ]
     };
   }
@@ -388,7 +391,7 @@ function hookErrorsContext(home, writtenBytes, seenBytes) {
 }
 async function handleWorkLaunch(sessionId, home, env, spawnImpl = spawnDetached, cwd = process.cwd()) {
   if (!sessionId || env.OUTERLAYER_WORK === void 0) return void 0;
-  const { parseWorkItemEnv, appendLaunchRecord } = await import('./work-launch-R5HTAP6X.js');
+  const { parseWorkItemEnv, appendLaunchRecord } = await import('./work-launch-LEQ2MPM3.js');
   const parsed = parseWorkItemEnv(env.OUTERLAYER_WORK);
   if ("reason" in parsed) {
     logHookError(home, new Error(`OUTERLAYER_WORK ignored: ${parsed.reason}`));
@@ -433,7 +436,7 @@ async function missingRenewalHookContext(home, cwd) {
     const registeredIn = (settings) => (settings.hooks?.PostToolUse ?? []).some((block) => (block.hooks ?? []).some((h) => isOurHookCommand(h)));
     const registered = userSettings !== null && registeredIn(userSettings) || projectSettings !== null && registeredIn(projectSettings);
     if (registered) return void 0;
-    return "This install has no PostToolUse hook, so this session's work-item lease will never be renewed while it works and may be lost to another worker mid-session. Run `outerlayer init` to register it.";
+    return `This install has no PostToolUse hook, so this session's work-item lease will never be renewed while it works and may be lost to another worker mid-session. Run \`${cliInvocation()} init\` to register it.`;
   } catch {
     return void 0;
   }
@@ -454,7 +457,7 @@ async function maybeRenewWorkLease(event, sessionId, home = homeFromEnv(), env =
       if (now - statSync(marker).mtimeMs < WORK_LEASE_RENEW_DEBOUNCE_MS) return;
     } catch {
     }
-    const { parseWorkItemEnv } = await import('./work-launch-R5HTAP6X.js');
+    const { parseWorkItemEnv } = await import('./work-launch-LEQ2MPM3.js');
     const parsed = parseWorkItemEnv(env.OUTERLAYER_WORK);
     if ("reason" in parsed) return;
     writeFileSync(marker, String(now));
@@ -470,7 +473,7 @@ async function handleWorkSessionEnd(event, sessionId, _home = homeFromEnv(), env
   try {
     if (event !== "SessionEnd") return;
     if (!sessionId || env.OUTERLAYER_WORK === void 0) return;
-    const { parseWorkItemEnv } = await import('./work-launch-R5HTAP6X.js');
+    const { parseWorkItemEnv } = await import('./work-launch-LEQ2MPM3.js');
     const parsed = parseWorkItemEnv(env.OUTERLAYER_WORK);
     if ("reason" in parsed) return;
     spawnImpl(
@@ -487,7 +490,7 @@ function syncHealthContext(home) {
   if (health.level !== "error") return null;
   return [`OuterLayer sync is failing on this machine: ${health.headline}`, ...health.details.map((d) => `  - ${d}`)].join("\n");
 }
-var UNTRUSTED_STALE_CLI_CONTEXT = "The installed OuterLayer CLI appears stale relative to a checkout near your working directory; run `outerlayer doctor` for details.";
+var UNTRUSTED_STALE_CLI_CONTEXT = `The installed OuterLayer CLI appears stale relative to a checkout near your working directory; run \`${cliInvocation()} doctor\` for details.`;
 function installedCliStalenessContext(home, cwd) {
   const result = checkInstalledCliStaleness({ home, cwd });
   if (result === null || !result.stale) return null;
@@ -499,15 +502,16 @@ function installedCliStalenessContext(home, cwd) {
   return `The installed OuterLayer CLI (~/.outerlayer/cli) is behind the workspace build: installed ${installedLabel}, workspace ${workspaceLabel}.
 ${howToRefresh}`;
 }
-function writeSessionStartContext(event, home, cwd, write, extraParts = []) {
+function writeSessionStartContext(event, home, cwd, write, systemMessage, extraParts = []) {
   try {
     if (event !== "SessionStart") return;
     const parts = [syncHealthContext(home), installedCliStalenessContext(home, cwd), ...extraParts].filter(
       (s) => s !== null
     );
-    if (parts.length === 0) return;
+    if (parts.length === 0 && systemMessage === void 0) return;
     write(
       JSON.stringify({
+        ...systemMessage === void 0 ? {} : { systemMessage },
         hookSpecificOutput: { hookEventName: "SessionStart", additionalContext: parts.join("\n\n") }
       })
     );
@@ -547,10 +551,10 @@ function deadHooksAutoHealContext(cwd, home) {
   const hooksDirLabel = sanitizeForContext(state.hooksDir);
   const script = huskyPrepareScript(state.repoRoot);
   if (script === null) {
-    return `Git hooks are dead in this checkout (${hooksDirLabel} is missing or empty, via core.hooksPath) and package.json declares no husky prepare script to run automatically. Run \`outerlayer doctor\` for the fix.`;
+    return `Git hooks are dead in this checkout (${hooksDirLabel} is missing or empty, via core.hooksPath) and package.json declares no husky prepare script to run automatically. Run \`${cliInvocation()} doctor\` for the fix.`;
   }
   if (recentHealFailure(home, state.repoRoot)) {
-    return `Git hooks are still dead in this checkout (${hooksDirLabel}) \u2014 a previous auto-heal attempt failed recently, so it will not retry yet. Run \`outerlayer doctor\` for the fix.`;
+    return `Git hooks are still dead in this checkout (${hooksDirLabel}) \u2014 a previous auto-heal attempt failed recently, so it will not retry yet. Run \`${cliInvocation()} doctor\` for the fix.`;
   }
   const command = preparePackageManagerCommand(state.repoRoot);
   const [bin, ...args] = command.split(" ");
@@ -563,12 +567,11 @@ function deadHooksAutoHealContext(cwd, home) {
   const after = deadHooksState(state.repoRoot);
   if (after.dead) {
     markHealFailure(home, state.repoRoot);
-    return `OuterLayer ran \`${command}\` to regenerate dead git hooks, but ${hooksDirLabel} is still missing or empty afterward. Run \`outerlayer doctor\` for the fix.`;
+    return `OuterLayer ran \`${command}\` to regenerate dead git hooks, but ${hooksDirLabel} is still missing or empty afterward. Run \`${cliInvocation()} doctor\` for the fix.`;
   }
   clearHealFailureMarker(home, state.repoRoot);
   return null;
 }
-var PIN_FILENAME = ".outerlayer-pin.json";
 function sourceCachePath(gitCommonDir) {
   return join(gitCommonDir, "outerlayer", "source.json");
 }
@@ -576,8 +579,8 @@ function contextPossiblyGoverned(cwd, home = homeFromEnv()) {
   try {
     const found = findGitDirs(cwd);
     if (found === void 0) return false;
-    const { repoRoot, gitCommonDir } = found;
-    if (existsSync(join(repoRoot, PIN_FILENAME))) return true;
+    const { gitCommonDir } = found;
+    if (existsSync(join(gitCommonDir, "outerlayer", "delivery.json"))) return true;
     if (!existsSync(join(home, ".outerlayer", "config.json"))) return false;
     let cache;
     try {
@@ -594,6 +597,73 @@ function contextPossiblyGoverned(cwd, home = homeFromEnv()) {
     return false;
   }
 }
+function recordDeliveredContext(cwd, sessionId, home) {
+  const dirs = findGitDirs(cwd);
+  if (dirs === void 0) return;
+  let record;
+  try {
+    record = JSON.parse(readFileSync(join(dirs.gitCommonDir, "outerlayer", "delivery.json"), "utf8"));
+  } catch {
+    return;
+  }
+  if (typeof record.repository !== "string" || typeof record.sha !== "string") return;
+  appendContextProvenance(
+    {
+      t: (/* @__PURE__ */ new Date()).toISOString(),
+      sessionId,
+      repoRoot: dirs.repoRoot,
+      repository: record.repository,
+      ...typeof record.ref === "string" ? { ref: record.ref } : {},
+      sha: record.sha,
+      verification: "verified"
+    },
+    home
+  );
+}
+async function missingControlPlane(cwd, sessionId, home, env) {
+  const dirs = findGitDirs(cwd);
+  if (dirs === void 0) return void 0;
+  if (existsSync(join(dirs.gitCommonDir, "outerlayer", "materialized.json")) || hasExcludeBlock(dirs.gitCommonDir)) {
+    const { cleanupEarlierCopies } = await import('./context-cleanup-HSVYDGMI.js');
+    cleanupEarlierCopies(dirs);
+  }
+  if (!contextPossiblyGoverned(cwd, home)) return void 0;
+  const { governanceOf } = await import('./control-plane-launch-NYVDJESK.js');
+  if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
+  recordMissingContext(dirs, sessionId, home);
+  const launcher = `${cliInvocation()} claude`;
+  return {
+    person: `This repository's shared instructions and skills are missing from this session, because it did not start through \`${launcher}\`. Start Claude Code with \`${launcher}\`, or run \`${cliInvocation()} init\` once to make plain \`claude\` do the same.`,
+    agent: `This repository is governed by a control plane, and this session did not start through \`${launcher}\`, so the control plane's shared instructions and skills are not loaded. Tell the person to start Claude Code with \`${launcher}\`.`
+  };
+}
+function recordMissingContext(dirs, sessionId, home) {
+  let cache;
+  try {
+    cache = JSON.parse(readFileSync(sourceCachePath(dirs.gitCommonDir), "utf8"));
+  } catch {
+    cache = {};
+  }
+  appendContextProvenance(
+    {
+      t: (/* @__PURE__ */ new Date()).toISOString(),
+      sessionId,
+      repoRoot: dirs.repoRoot,
+      ...typeof cache.repository === "string" ? { repository: cache.repository } : {},
+      ...typeof cache.ref === "string" ? { ref: cache.ref } : {},
+      sha: null,
+      verification: "none"
+    },
+    home
+  );
+}
+function hasExcludeBlock(gitCommonDir) {
+  try {
+    return readFileSync(join(gitCommonDir, "info", "exclude"), "utf8").includes("# BEGIN outerlayer context materialization");
+  } catch {
+    return false;
+  }
+}
 async function runHookFast(event, home = homeFromEnv(), read = readStdin, env = process.env, spawnImpl = spawnDetached) {
   try {
     const stdin = read();
@@ -623,7 +693,7 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
     const hookSessionId = typeof payload.session_id === "string" ? payload.session_id : void 0;
     await maybeRenewWorkLease(resolvedEvent, hookSessionId, home, env, spawnImpl, Date.now(), sessionCwd);
     await handleWorkSessionEnd(resolvedEvent, hookSessionId, home, env, spawnImpl, sessionCwd);
-    let materializeMessage;
+    let missingPlane;
     let deadHooksMessage;
     let workLaunchMessage;
     let hookErrorsMessage;
@@ -632,12 +702,15 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
       const hookErrorsBytes = fileSizeBytes(join(dir, "hook-errors.log"));
       const hookErrorsSeen = hookErrorsSeenBytes(home);
       recordHookErrorsSeen(home, hookErrorsBytes);
-      if (contextPossiblyGoverned(sessionCwd, home)) {
+      if (env[CONTROL_PLANE_DIR_VARIABLE] !== void 0) {
+        try {
+          recordDeliveredContext(sessionCwd, typeof payload.session_id === "string" ? payload.session_id : "unknown", home);
+        } catch (err) {
+          logHookError(home, err);
+        }
+      } else {
         try {
-          const { materializeContext: materialize } = await import('./context-materialize-IV2TUUFO.js');
-          const sessionId = typeof payload.session_id === "string" ? payload.session_id : "unknown";
-          const result = await materialize({ cwd: sessionCwd, sessionId, home });
-          materializeMessage = result.message;
+          missingPlane = await missingControlPlane(sessionCwd, typeof payload.session_id === "string" ? payload.session_id : "unknown", home, env);
         } catch (err) {
           logHookError(home, err);
         }
@@ -665,7 +738,8 @@ async function runHookFast(event, home = homeFromEnv(), read = readStdin, env =
       home,
       sessionCwd,
       (out) => process.stdout.write(out),
-      [materializeMessage, deadHooksMessage, workLaunchMessage, hookErrorsMessage, renewalHookMessage].filter(
+      missingPlane?.person,
+      [missingPlane?.agent, deadHooksMessage, workLaunchMessage, hookErrorsMessage, renewalHookMessage].filter(
         (s) => s !== void 0
       )
     );

package/dist/{chunk-POJMEEJJ.js → chunk-NNLA7LLQ.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { splitRawFile } from './chunk-OHVJA253.js';
+import { splitRawFile } from './chunk-WFSUUUAN.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, readdirSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-PLMTLGYH.js → chunk-NTRCK4NH.js}

@@ -1,18 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readCloudConfig } from './chunk-EABW6AJQ.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
+import { readCloudConfig } from './chunk-EABW6AJQ.js';
+import { cliInvocation } from './chunk-CRB3POP4.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 
 createRequire(import.meta.url);
 
 // src/credentials.ts
-var MISSING_HELP = "Run `outerlayer login` to sign in, or set OUTERLAYER_URL / OUTERLAYER_API_KEY / OUTERLAYER_APP_ID. Mint a key in the dashboard: Settings \u2192 API keys.";
-var NO_FACTORY_MESSAGE = "you are logged in, but no factory is chosen for this repository. Run `outerlayer connect` to choose one, or pass --app-id / set OUTERLAYER_APP_ID.";
+var MISSING_HELP = `Run \`${cliInvocation()} login\` to sign in, or set OUTERLAYER_URL / OUTERLAYER_API_KEY / OUTERLAYER_APP_ID. Mint a key in the dashboard: Settings \u2192 API keys.`;
+var NO_FACTORY_MESSAGE = `you are logged in, but no factory is chosen for this repository. Run \`${cliInvocation()} connect\` to choose one, or pass --app-id / set OUTERLAYER_APP_ID.`;
 var NO_FACTORY_OUTSIDE_REPOSITORY_MESSAGE = "you are logged in, but this directory is not in a git repository, so no factory is chosen. Pass --app-id / set OUTERLAYER_APP_ID, or run this from inside a connected repository.";
 var LOGIN_TOKEN_PREFIX = "olu_";
 function unauthorizedMessage(credential) {
-  return credential.startsWith(LOGIN_TOKEN_PREFIX) ? "not authorized \u2014 the login is expired or was revoked. Run `outerlayer login` to sign in again." : "not authorized \u2014 the API key is unknown, expired, or bound to a different factory. Mint a fresh key: dashboard \u2192 Settings \u2192 API keys.";
+  return credential.startsWith(LOGIN_TOKEN_PREFIX) ? `not authorized \u2014 the login is expired or was revoked. Run \`${cliInvocation()} login\` to sign in again.` : "not authorized \u2014 the API key is unknown, expired, or bound to a different factory. Mint a fresh key: dashboard \u2192 Settings \u2192 API keys.";
 }
 function resolveGatewayCredentials(sources = {}) {
   const env = sources.env ?? process.env;

package/dist/{chunk-22RMZBGW.js → chunk-P53VEAOF.js}

@@ -2,8 +2,8 @@
 import { createRequire } from 'node:module';
 import { MAX_ALLOW_HOSTS, allowHostProblem } from './chunk-UXYLWVTQ.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
-import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-4Q7OMKAT.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
+import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-BQXFBI7T.js';
 import { existsSync, statSync, accessSync, constants, readFileSync } from 'fs';
 import { hostname } from 'os';
 import { join } from 'path';

package/dist/{chunk-RLYZLUQ7.js → chunk-QEFKA2QD.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-22RMZBGW.js';
+import { builtinKind } from './chunk-P53VEAOF.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
-import { runnerDir } from './chunk-ZM2IMMYN.js';
+import { runnerDir } from './chunk-N2PXGQRL.js';
 import { dirname } from 'path';
 import { spawnSync } from 'child_process';