@outerlayer/cli 0.17.0 → 0.19.0

package/dist/chunk-CRB3POP4.js

@@ -0,0 +1,34 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { homeFromEnv } from './chunk-VNVZDWO3.js';
+import { join, sep } from 'path';
+import { fileURLToPath } from 'url';
+
+createRequire(import.meta.url);
+var CLI_PACKAGE = "@outerlayer/cli";
+function packageRunnerOf(bin) {
+  for (const part of bin.replace(/\\/g, "/").split("/")) {
+    if (part === "_npx") return "npx";
+    if (part === "dlx") return "pnpm dlx";
+    if (part.startsWith("dlx-")) return "yarn dlx";
+    if (part.startsWith("bunx-")) return "bunx";
+  }
+  return void 0;
+}
+function runningModule() {
+  try {
+    return fileURLToPath(import.meta.url);
+  } catch {
+    return "";
+  }
+}
+function cliInvocation(opts = {}) {
+  const bin = opts.bin ?? runningModule();
+  const runner = packageRunnerOf(bin);
+  if (runner !== void 0) return `${runner} ${CLI_PACKAGE}`;
+  const installedCopy = join(opts.home ?? homeFromEnv(), ".outerlayer", "cli") + sep;
+  if (bin.startsWith(installedCopy)) return `npx ${CLI_PACKAGE}`;
+  return "outerlayer";
+}
+
+export { cliInvocation, packageRunnerOf };

package/dist/{chunk-LWSJQJC6.js → chunk-DADWEUH3.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-VQYBXPI7.js';
-import { describeCallFailure } from './chunk-MAK5LYRF.js';
-import { WorkCommandError, getJson } from './chunk-S3NYLI2P.js';
-import { builtinKind } from './chunk-22RMZBGW.js';
-import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-4Q7OMKAT.js';
-import { sanitizeTerminal } from './chunk-WUYTWNMA.js';
-import { signerFor } from './chunk-V7NIVOFD.js';
+import { isPlaceholderCommand } from './chunk-6D7GT22T.js';
+import { describeCallFailure } from './chunk-XSZD4AZ6.js';
+import { WorkCommandError, getJson } from './chunk-HPJNLETG.js';
+import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
+import { builtinKind } from './chunk-P53VEAOF.js';
+import { signerFor } from './chunk-M2ZWWTWZ.js';
+import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-BQXFBI7T.js';
 
 createRequire(import.meta.url);
 

package/dist/{chunk-KG5ECZGJ.js → chunk-DJ3ZUSC3.js}

@@ -1,13 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runEmit } from './chunk-2MNPHL23.js';
-import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-XCK2YAY5.js';
-import { installStarterPack } from './chunk-42ZI52JW.js';
-import { C } from './chunk-YRYMNBGQ.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-YZ5F4PIS.js';
-import { pinExists, readContextManifest } from './chunk-WTE3MQML.js';
-import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-POJMEEJJ.js';
-import { generatedHeaderSource } from './chunk-OHVJA253.js';
+import { runEmit } from './chunk-ZHAUSEEN.js';
+import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-YVZJ6GKF.js';
+import { installStarterPack } from './chunk-6X4SQ5MY.js';
+import { C } from './chunk-ANPNT6PM.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-452TM7J4.js';
+import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-NNLA7LLQ.js';
+import { generatedHeaderSource } from './chunk-WFSUUUAN.js';
+import { cliInvocation } from './chunk-CRB3POP4.js';
+import { cloneIsGoverned } from './chunk-YQR6E6OV.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';
@@ -39,10 +40,9 @@ function gitTopLevel(cwd) {
   }
 }
 function contextComesFromControlPlane(repoRoot) {
-  if (pinExists(repoRoot)) return true;
   const gitCommonDir = resolveGitCommonDir(defaultGitRunner, repoRoot);
   if (gitCommonDir === void 0) throw new GitLookupError("git could not report this repository's git directory");
-  return readContextManifest(gitCommonDir) !== void 0;
+  return cloneIsGoverned(gitCommonDir);
 }
 function mcpReplacementLosesNothing(existing, content) {
   try {
@@ -176,7 +176,7 @@ function renderPaths(paths, kept) {
 `;
 }
 function renderDone(paths, kept, mcpKept) {
-  const mcpNote = mcpKept ? `  ${C.yellow}!${C.reset} The outerlayer and ${DOCS_MCP_SERVER_NAME} entries were not added to .mcp.json, so their MCP servers are not set up. Add them to .mcp.json by hand, or move the servers you wrote into .outerlayer/mcp.json and run \`outerlayer context emit\`.
+  const mcpNote = mcpKept ? `  ${C.yellow}!${C.reset} The outerlayer and ${DOCS_MCP_SERVER_NAME} entries were not added to .mcp.json, so their MCP servers are not set up. Add them to .mcp.json by hand, or move the servers you wrote into .outerlayer/mcp.json and run \`${cliInvocation()} context emit\`.
 ` : "";
   const what = mcpKept ? "the OuterLayer skills" : "the OuterLayer skills and MCP servers";
   if (paths.length === 0) {

package/dist/{chunk-F47JBIAW.js → chunk-DSF2FWAZ.js}

@@ -2,6 +2,7 @@
 import { createRequire } from 'node:module';
 import { recordReportedCost } from './chunk-BKO6JEZI.js';
 import { decodeWrappedCommand } from './chunk-5QRP3MVS.js';
+import { cliInvocation } from './chunk-CRB3POP4.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { readFileSync } from 'fs';
 import { spawn } from 'child_process';
@@ -69,7 +70,7 @@ function renderStatusline(stdin, state, now) {
     segments.push(`${state.unsynced} unsynced`);
   }
   if (!fresh) {
-    segments.push(dim("outerlayer doctor"));
+    segments.push(dim(`${cliInvocation()} doctor`));
   }
   const prefix = "\u2B22 OL";
   return segments.length === 0 ? prefix : `${prefix}  ${segments.join(dim(" \xB7 "))}`;

package/dist/{chunk-N5FOE5PS.js → chunk-ECODQ7II.js}

@@ -1,40 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-ZM2IMMYN.js';
-import { readFileSync, existsSync, rmSync, mkdirSync, writeFileSync } from 'fs';
+import { isSameProcess } from './chunk-JBJTC3UU.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
+import { existsSync, readFileSync, rmSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';
-import { execFileSync } from 'child_process';
 
 createRequire(import.meta.url);
-function startTimeOf(pid) {
-  if (process.platform === "linux") return startTimeOfLinux(pid);
-  return startTimeOfPs(pid);
-}
-function startTimeOfLinux(pid) {
-  try {
-    const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
-    const afterComm = stat.slice(stat.lastIndexOf(")") + 1).trim();
-    const fields = afterComm.split(/\s+/);
-    if (fields[0] === "Z" || fields[0] === "X") return null;
-    const starttime = fields[19];
-    return starttime ?? null;
-  } catch {
-    return null;
-  }
-}
-function startTimeOfPs(pid) {
-  try {
-    const out = execFileSync("ps", ["-o", "lstart=", "-p", String(pid)], { encoding: "utf8" }).trim();
-    return out.length > 0 ? out : null;
-  } catch {
-    return null;
-  }
-}
-function isSameProcess(pid, start) {
-  return startTimeOf(pid) === start;
-}
-
-// src/runner/pidfile.ts
 function readPidFile(path) {
   if (!existsSync(path)) return null;
   try {
@@ -68,4 +39,4 @@ function claimPidFile(path, self, isSameProcessFn = isSameProcess) {
   writePidFile(path, self);
 }
 
-export { RunnerAlreadyRunningError, claimPidFile, isSameProcess, readPidFile, releasePidFile, startTimeOf };
+export { RunnerAlreadyRunningError, claimPidFile, readPidFile, releasePidFile };

package/dist/{chunk-HHJDN6AU.js → chunk-ESVW4MJY.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readLaunchSpoolState, launchesPath } from './chunk-GQD22KKN.js';
+import { readLaunchSpoolState, launchesPath } from './chunk-T2Q7ISPE.js';
 
 createRequire(import.meta.url);
 

package/dist/{chunk-YO4PSLVB.js → chunk-FVMYKL6L.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { readCloudConfig, cloudConfigPath } from './chunk-EABW6AJQ.js';
-import { signRunnerRequest, signerFor } from './chunk-V7NIVOFD.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
+import { signRunnerRequest, signerFor } from './chunk-M2ZWWTWZ.js';
 
 createRequire(import.meta.url);
 

package/dist/chunk-G2YNJIGF.js

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+
+createRequire(import.meta.url);
+
+// src/control-plane-paths.ts
+var CONTROL_PLANE_DIR_VARIABLE = "OUTERLAYER_CONTROL_PLANE_DIR";
+var PROJECT_DIR_SPELLINGS = [
+  /"\$\{?CLAUDE_PROJECT_DIR\}?"\/\.claude(?![\w.-])/g,
+  /\$\{CLAUDE_PROJECT_DIR\}\/\.claude(?![\w.-])/g,
+  /\$CLAUDE_PROJECT_DIR\/\.claude(?![\w.-])/g
+];
+var CONTROL_PLANE_VARIABLE_FORMS = [
+  new RegExp(`\\$\\{${CONTROL_PLANE_DIR_VARIABLE}:-[^}]*\\}/\\.claude(?![\\w.-])`, "g"),
+  new RegExp(`\\$\\{${CONTROL_PLANE_DIR_VARIABLE}\\}/\\.claude(?![\\w.-])`, "g"),
+  new RegExp(`\\$${CONTROL_PLANE_DIR_VARIABLE}/\\.claude(?![\\w.-])`, "g")
+];
+function rewriteHookCommand(command, dir) {
+  return PROJECT_DIR_SPELLINGS.reduce((text, pattern) => text.replace(pattern, () => `${dir}/.claude`), command);
+}
+function rewriteControlPlanePaths(text, dir) {
+  return text.replace(/(?<![\w./~$}:-])(\.outerlayer|\.claude)\//g, (_match, root) => `${dir}/${root}/`);
+}
+function hookCommandEscapesControlPlane(command) {
+  const remaining = [...PROJECT_DIR_SPELLINGS, ...CONTROL_PLANE_VARIABLE_FORMS].reduce((text, pattern) => text.replace(pattern, " "), command);
+  return /\.claude(?:\/|["'\s;|&)]|$)/.test(remaining) || /\$\{?CLAUDE_PROJECT_DIR\}?"?\/\.claude/.test(remaining);
+}
+var MINIMUM_CLAUDE_VERSION = "2.1.284";
+function versionParts(text) {
+  const found = /(\d+)\.(\d+)\.(\d+)/.exec(text);
+  return found === null ? void 0 : [Number(found[1]), Number(found[2]), Number(found[3])];
+}
+function versionAtLeast(text, minimum = MINIMUM_CLAUDE_VERSION) {
+  const have = versionParts(text);
+  const need = versionParts(minimum);
+  if (have === void 0 || need === void 0) return false;
+  const difference = have.map((part, i) => part - need[i]).find((delta) => delta !== 0);
+  return (difference ?? 0) >= 0;
+}
+var SHIM_SCRIPT = `#!/bin/sh
+exec outerlayer claude "$@"
+`;
+
+export { CONTROL_PLANE_DIR_VARIABLE, MINIMUM_CLAUDE_VERSION, SHIM_SCRIPT, hookCommandEscapesControlPlane, rewriteControlPlanePaths, rewriteHookCommand, versionAtLeast };

package/dist/{chunk-WUYTWNMA.js → chunk-G3IJ3N6F.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-J5M7BSJQ.js';
+import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-7VUK5RFS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, appendFileSync, writeFileSync, renameSync, unlinkSync, existsSync, readdirSync, readFileSync, statSync } from 'fs';
 import { join, dirname } from 'path';
@@ -273,7 +273,9 @@ function artifactLockIsStale(path, nowMs, isAlive) {
   }
 }
 async function acquireArtifactSpoolLock(home = homeFromEnv(), opts = {}) {
-  const path = artifactsLockPath(home);
+  return acquireSpoolLockAt(artifactsLockPath(home), opts);
+}
+async function acquireSpoolLockAt(path, opts = {}) {
   const waitMs = opts.waitMs ?? ARTIFACT_LOCK_WAIT_MS;
   const sleep = opts.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
   const isAlive = opts.isAlive ?? processIsAlive;
@@ -460,4 +462,4 @@ function resolveArtifactTurnIndex(turns, filename) {
   return found;
 }
 
-export { ARTIFACT_RETRY_MAX_AGE_MS, acquireArtifactSpoolLock, appendArtifactRecord, appendArtifactTombstone, artifactBlobsDir, artifactsSpoolPath, artifactsStatePath, findPendingArtifactRecord, isArtifactTombstoned, localArtifactIds, migrateLegacyArtifactSidecars, neededArtifactShas, planArtifactUpload, readEffectiveArtifactSpoolState, reclaimUnneededArtifactBlobs, resolveArtifactTurnIndex, sanitizeTerminal, writeArtifactSpoolState };
+export { ARTIFACT_RETRY_MAX_AGE_MS, acquireArtifactSpoolLock, acquireSpoolLockAt, appendArtifactRecord, appendArtifactTombstone, artifactBlobsDir, artifactsSpoolPath, artifactsStatePath, findPendingArtifactRecord, isArtifactTombstoned, localArtifactIds, migrateLegacyArtifactSidecars, neededArtifactShas, planArtifactUpload, readEffectiveArtifactSpoolState, reclaimUnneededArtifactBlobs, resolveArtifactTurnIndex, sanitizeTerminal, writeArtifactSpoolState };

package/dist/{chunk-QKFB4K7X.js → chunk-GGOMT6KF.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EXEC_PORT } from './chunk-RSNSZ2LJ.js';
+import { EXEC_PORT } from './chunk-X5H2WYMB.js';
 import { createConnection } from 'net';
 
 createRequire(import.meta.url);

package/dist/{chunk-N6LURUEF.js → chunk-GOSFARMS.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { C } from './chunk-YRYMNBGQ.js';
+import { C } from './chunk-ANPNT6PM.js';
 import { readCloudConfig, removeCloudConfigKeys } from './chunk-EABW6AJQ.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 

package/dist/{chunk-S3NYLI2P.js → chunk-HPJNLETG.js}

@@ -1,20 +1,69 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect } from './chunk-6Y5RUTHO.js';
-import { detectActiveSession } from './chunk-IP7BIBXJ.js';
-import { workPageUrl } from './chunk-3NSNIIBE.js';
-import { sanitizeTerminal } from './chunk-WUYTWNMA.js';
-import { resolveRepoIdentity } from './chunk-JXYVA45C.js';
-import { C } from './chunk-YRYMNBGQ.js';
+import { detectActiveSession, autoConnect } from './chunk-IF2OSI5T.js';
+import { workPageUrl } from './chunk-CG36IONK.js';
+import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
+import { resolveRepoIdentity } from './chunk-QNLX477Q.js';
+import { C } from './chunk-ANPNT6PM.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
-import { defaultFetch } from './chunk-YO4PSLVB.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-PLMTLGYH.js';
-import { signRunnerRequest } from './chunk-V7NIVOFD.js';
+import { defaultFetch } from './chunk-FVMYKL6L.js';
+import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
 import { readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
+import { signRunnerRequest } from './chunk-M2ZWWTWZ.js';
 
 createRequire(import.meta.url);
 
+// ../trackers/src/descriptor.ts
+var TRACKERS = {
+  github: {
+    label: "GitHub",
+    hasStoredConnection: false,
+    verifiedKeys: false,
+    issueRef: "number",
+    scopeNoun: "repository",
+    connect: { kind: "builtin" }
+  },
+  linear: {
+    label: "Linear",
+    hasStoredConnection: true,
+    verifiedKeys: true,
+    issueRef: "key",
+    scopeNoun: "team",
+    connect: {
+      kind: "oauth",
+      summary: "Read the teams you pick in a workspace, and file specs as issues. One authorization; Linear registers its own webhook."
+    }
+  },
+  jira: {
+    label: "Jira",
+    hasStoredConnection: true,
+    verifiedKeys: true,
+    issueRef: "key",
+    scopeNoun: "project",
+    connect: {
+      kind: "form",
+      summary: "Read the projects you pick on a site, and file specs as issues, with a service account. One webhook is created in Jira by an admin.",
+      intro: "Uses a service account's OAuth client credential. Create one under Atlassian administration, then paste it here. Give it read:jira-work, and write:jira-work to file specs. A credential's scopes are fixed when it is created.",
+      notice: "After connecting, you get a webhook URL and secret to put on one webhook in Jira. That is the only manual step, and the only time the secret is shown.",
+      fields: [
+        { name: "siteUrl", label: "Site URL", placeholder: "https://your-team.atlassian.net" },
+        { name: "clientId", label: "Client ID" },
+        { name: "clientSecret", label: "Client secret", secret: true },
+        {
+          name: "projectKeys",
+          label: "Projects to read",
+          placeholder: "ENG, OPS",
+          helperText: "Project keys, comma separated. Only issues in these projects are listed."
+        }
+      ]
+    }
+  }
+};
+function verifiedTrackerNames(descriptors) {
+  return Object.keys(descriptors).filter((name) => descriptors[name].verifiedKeys);
+}
+
 // src/runner/signature-refusals.ts
 var MESSAGES = /* @__PURE__ */ new Map([
   [
@@ -101,14 +150,8 @@ function parseRetries(raw) {
   const n = parseTrackerNumber(raw);
   return n === void 0 ? 0 : Math.min(n, WORK_LINK_RETRY_DELAYS_MS.length);
 }
-function resolveSubject(opts) {
-  const issue = parsePositiveInt(opts.issue, "--issue");
-  if (issue === void 0) {
-    throw new WorkCommandError("pass --issue");
-  }
-  return { issue };
-}
-var TRACKER_FLAG_HELP = 'expected "linear" or "jira" \u2014 GitHub issues are named by number, with no --tracker';
+var VERIFIED_TRACKERS = verifiedTrackerNames(TRACKERS);
+var TRACKER_FLAG_HELP = `expected ${VERIFIED_TRACKERS.map((name) => `"${name}"`).join(" or ")} \u2014 GitHub issues are named by number, with no --tracker`;
 function resolveWorkSubject(opts) {
   if (opts.issue === void 0) {
     throw new WorkCommandError("pass --issue");
@@ -120,32 +163,36 @@ function resolveWorkSubject(opts) {
     }
     return { repository: resolveRepository(opts.repo, opts.cwd), issue: asNumber };
   }
-  if (opts.tracker !== void 0 && opts.tracker !== "linear" && opts.tracker !== "jira") {
+  const tracker = opts.tracker === void 0 ? void 0 : VERIFIED_TRACKERS.find((name) => name === opts.tracker);
+  if (opts.tracker !== void 0 && tracker === void 0) {
     throw new WorkCommandError(`invalid --tracker "${opts.tracker}": ${TRACKER_FLAG_HELP}`);
   }
-  return { key: String(opts.issue), tracker: opts.tracker, repository: opts.repo };
+  return { key: String(opts.issue), tracker, repository: opts.repo };
 }
 async function postJson(url, path, apiKey, appId, body, fetchImpl, timeoutMs, signer) {
   const deadline = timeoutMs === void 0 ? void 0 : startDeadline(timeoutMs);
   try {
-    return await postJsonBefore(url, path, apiKey, appId, body, fetchImpl, deadline, signer);
+    return await sendJsonBefore("POST", url, path, apiKey, appId, body, fetchImpl, deadline, signer);
   } finally {
     deadline?.clear();
   }
 }
+function patchJson(url, path, apiKey, appId, body, fetchImpl) {
+  return sendJsonBefore("PATCH", url, path, apiKey, appId, body, fetchImpl, void 0, void 0);
+}
 function startDeadline(ms) {
   const controller = new AbortController();
   const timer = setTimeout(() => controller.abort(), ms);
   return { signal: controller.signal, ms, clear: () => clearTimeout(timer) };
 }
-async function postJsonBefore(url, path, apiKey, appId, body, fetchImpl, deadline, signer) {
+async function sendJsonBefore(method, url, path, apiKey, appId, body, fetchImpl, deadline, signer) {
   let response;
   const endpoint = new URL(path, url).toString();
   const payload = JSON.stringify(body);
-  const signature = await signatureHeaders("POST", endpoint, payload ?? "", signer);
+  const signature = await signatureHeaders(method, endpoint, payload ?? "", signer);
   try {
     response = await fetchImpl(endpoint, {
-      method: "POST",
+      method,
       headers: {
         "content-type": "application/json",
         authorization: `Bearer ${apiKey}`,
@@ -264,6 +311,22 @@ async function findLiveItem(creds, repository, subject, fetchImpl) {
   const items = page.data ?? [];
   return items[0] ?? null;
 }
+async function findLiveItemForIssue(creds, opts, fetchImpl) {
+  const subject = resolveWorkSubject(opts);
+  if ("issue" in subject) {
+    const item = await findLiveItem(creds, subject.repository, { issue: subject.issue }, fetchImpl);
+    return { item, label: `${subject.repository}#${subject.issue}` };
+  }
+  const query = new URLSearchParams({ key: subject.key });
+  if (subject.tracker !== void 0) query.set("tracker", subject.tracker);
+  const page = await getJson(creds.url, `/v1/work-items?${query.toString()}`, creds.apiKey, creds.appId, fetchImpl);
+  const items = page.data ?? [];
+  if (items.length > 1) {
+    const trackers = items.map((i) => i.tracker ?? "unknown").join(" and ");
+    throw new WorkCommandError(`${subject.key} names an item in ${trackers}. Pass --tracker to say which.`);
+  }
+  return { item: items[0] ?? null, label: subject.key };
+}
 function environmentFacts(opts) {
   const identity = resolveRepoIdentity(opts.cwd);
   const sessionId = opts.sessionIdOverride ?? detectActiveSession({
@@ -336,9 +399,7 @@ async function runWorkBuild(opts) {
     const { data: data2 } = await postJsonWithRetry(url, "/v1/work-items", apiKey, appId, body2, fetchImpl, retries, sleep);
     const label = data2.number != null ? `#${data2.number}` : String(data2.workItemId);
     const launch = data2.number != null ? `OUTERLAYER_WORK=${data2.number} claude` : null;
-    const branch = typeof data2.branch === "string" && data2.branch !== "" ? data2.branch : null;
-    const output2 = opts.json ? JSON.stringify({ ...data2, ...launch !== null ? { launchCommand: launch } : {} }) : `${C.green}\u2713${C.reset} on Work for you to build ${C.dim}\xB7${C.reset} ${label} ${C.dim}\xB7${C.reset} no host will take it` + (branch !== null ? `
-  branch: ${branch}` : "") + (launch !== null ? `
+    const output2 = opts.json ? JSON.stringify({ ...data2, ...launch !== null ? { launchCommand: launch } : {} }) : `${C.green}\u2713${C.reset} on Work for you to build ${C.dim}\xB7${C.reset} ${label} ${C.dim}\xB7${C.reset} no host will take it` + (launch !== null ? `
   start your session with: ${launch}` : "");
     if (!opts.quiet) process.stdout.write(output2 + "\n");
     return { data: data2, output: output2 };
@@ -360,7 +421,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-R4FVSZ2H.js');
+      const { logHookError } = await import('./hook-fast-YAZG5MDX.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }
@@ -428,13 +489,10 @@ async function runWorkRemove(opts) {
     if (!opts.quiet) process.stdout.write(output2 + "\n");
     return { data: data2, output: output2 };
   }
-  const subject = resolveSubject(opts);
-  const repository = resolveRepository(opts.repo, cwd);
-  const number = subject.issue;
-  const item = await findLiveItem(creds, repository, subject, fetchImpl);
+  const { item, label } = await findLiveItemForIssue(creds, { ...opts, cwd }, fetchImpl);
   if (!item) {
     const data2 = { workItemId: null, removed: true, itemWithdrawn: false, noLiveAddition: true };
-    const output2 = opts.json ? JSON.stringify(data2) : `${C.green}\u2713${C.reset} nothing to remove ${C.dim}\xB7${C.reset} no live addition on ${repository}#${number}`;
+    const output2 = opts.json ? JSON.stringify(data2) : `${C.green}\u2713${C.reset} nothing to remove ${C.dim}\xB7${C.reset} no live addition on ${label}`;
     if (!opts.quiet) process.stdout.write(output2 + "\n");
     return { data: data2, output: output2 };
   }
@@ -485,13 +543,10 @@ async function runWorkStatus(opts) {
     if (!opts.quiet) process.stdout.write(body + "\n");
     return { data: data2, output: body };
   }
-  const subject = resolveSubject(opts);
-  const repository = resolveRepository(opts.repo, cwd);
   const fetchImpl = opts.fetchImpl ?? defaultFetch;
-  const number = subject.issue;
-  const item = await findLiveItem(creds, repository, subject, fetchImpl);
+  const { item, label } = await findLiveItemForIssue(creds, { ...opts, cwd }, fetchImpl);
   if (!item) {
-    throw new WorkCommandError(`no live item for ${repository}#${number}`);
+    throw new WorkCommandError(`no live item for ${label}`);
   }
   const { data } = await getJson(creds.url, `/v1/work-items/${item.id}`, creds.apiKey, creds.appId, fetchImpl);
   const output = statusOutput(data, opts.json === true);
@@ -536,4 +591,4 @@ async function runWorkList(opts) {
   return { data, output };
 }
 
-export { WorkCommandError, environmentFacts, findLiveItem, getJson, isSignatureRefusal, parsePositiveInt, postJson, resolveCredentials, resolveRepository, runWorkBuild, runWorkLinkSession, runWorkList, runWorkRemove, runWorkStatus, signatureRefusalMessage };
+export { TRACKERS, WorkCommandError, environmentFacts, findLiveItemForIssue, getJson, isSignatureRefusal, parsePositiveInt, patchJson, postJson, resolveCredentials, runWorkBuild, runWorkLinkSession, runWorkList, runWorkRemove, runWorkStatus, signatureRefusalMessage, verifiedTrackerNames };

package/dist/{chunk-IP7BIBXJ.js → chunk-IF2OSI5T.js}

@@ -1,5 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-CG36IONK.js';
+import { resolveRepoIdentity } from './chunk-QNLX477Q.js';
+import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
+import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
+import { cliInvocation } from './chunk-CRB3POP4.js';
+import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { openSync, fstatSync, readSync, closeSync } from 'fs';
 import { join } from 'path';
 
@@ -76,4 +82,32 @@ function transcriptPathForSession(sessionId, home, readTailImpl = readTail) {
   return found;
 }
 
-export { detectActiveSession, transcriptPathForSession };
+// src/auto-connect.ts
+async function autoConnect(opts) {
+  const env = opts.env ?? process.env;
+  const home = opts.home ?? homeFromEnv(env);
+  const cwd = opts.cwd ?? process.cwd();
+  const resolved = resolveGatewayCredentials({ url: opts.url, apiKey: opts.apiKey, appId: opts.appId, home, env, cwd });
+  if (resolved.ok || resolved.kind !== "login" || !resolved.credential || !resolved.url) return void 0;
+  const dirs = findGitDirs(cwd);
+  const repository = opts.repository ?? resolveRepoIdentity(cwd).gitRepo;
+  if (dirs === void 0 || repository === void 0) return void 0;
+  const listed = await fetchFactories(opts.fetchImpl ?? fetch, resolved.url, resolved.credential, repository);
+  if (!listed.ok || listed.factories.length === 0) return void 0;
+  const chosen = selectFactory(listed.factories, readRepoConnection(cwd), repository);
+  if (chosen.factory === void 0) {
+    return `you are logged in, but no factory is chosen for this repository, and more than one fits. Run \`${cliInvocation()} connect --factory <org>/<factory>\` with one of:
+${chosen.text}
+Or pass --app-id / set OUTERLAYER_APP_ID.`;
+  }
+  try {
+    saveFactoryConnection(dirs.gitCommonDir, void 0, chosen.factory, /* @__PURE__ */ new Date());
+  } catch {
+    return void 0;
+  }
+  process.stderr.write(`${autoConnectedLine(repository, chosen.factory, chosen.reason)}
+`);
+  return void 0;
+}
+
+export { autoConnect, detectActiveSession, transcriptPathForSession };

package/dist/{chunk-C5Y5ZJJZ.js → chunk-IXYZUUYQ.js}

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-POJMEEJJ.js';
-import { emitTree, ALL_TARGET_IDS, classifyTree } from './chunk-OHVJA253.js';
+import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-NNLA7LLQ.js';
+import { emitTree, ALL_TARGET_IDS, classifyTree } from './chunk-WFSUUUAN.js';
+import { cliInvocation } from './chunk-CRB3POP4.js';
 import { readFileSync, existsSync, unlinkSync, rmdirSync, readdirSync } from 'fs';
 import { join, dirname, relative, sep } from 'path';
 
@@ -70,7 +71,7 @@ function checkFormerSkillNames(repoRoot) {
       name: "Renamed skills",
       status: "warn",
       detail: `copies under earlier names: ${retired.map(skillDir).join(", ")}`,
-      fix: "Run `outerlayer context emit` to replace them with the current names, then commit."
+      fix: `Run \`${cliInvocation()} context emit\` to replace them with the current names, then commit.`
     });
   }
   const hits = filesNamingFormerSkills(repoRoot);
@@ -79,7 +80,7 @@ function checkFormerSkillNames(repoRoot) {
       name: "Skill names",
       status: "warn",
       detail: `${hits.map((h) => `${h.path} (${h.formers.join(", ")})`).join("; ")} still ${hits.length === 1 ? "names" : "name"} a skill by an earlier name`,
-      fix: `Replace each earlier name with the current one: ${Object.entries(FORMER_MAINTAINED_NAMES).map(([former, current]) => `${former} \u2192 ${current}`).join(", ")}. \`outerlayer init --update\` does this for a file you have not edited.`
+      fix: `Replace each earlier name with the current one: ${Object.entries(FORMER_MAINTAINED_NAMES).map(([former, current]) => `${former} \u2192 ${current}`).join(", ")}. \`${cliInvocation()} init --update\` does this for a file you have not edited.`
     });
   }
   return checks;

package/dist/chunk-JBJTC3UU.js

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { readFileSync } from 'fs';
+import { execFileSync } from 'child_process';
+
+createRequire(import.meta.url);
+function startTimeOf(pid) {
+  if (process.platform === "linux") return startTimeOfLinux(pid);
+  return startTimeOfPs(pid);
+}
+function startTimeOfLinux(pid) {
+  try {
+    const stat = readFileSync(`/proc/${pid}/stat`, "utf8");
+    const afterComm = stat.slice(stat.lastIndexOf(")") + 1).trim();
+    const fields = afterComm.split(/\s+/);
+    if (fields[0] === "Z" || fields[0] === "X") return null;
+    const starttime = fields[19];
+    return starttime ?? null;
+  } catch {
+    return null;
+  }
+}
+function startTimeOfPs(pid) {
+  try {
+    const out = execFileSync("ps", ["-o", "lstart=", "-p", String(pid)], { encoding: "utf8" }).trim();
+    return out.length > 0 ? out : null;
+  } catch {
+    return null;
+  }
+}
+function isSameProcess(pid, start) {
+  return startTimeOf(pid) === start;
+}
+
+export { isSameProcess, startTimeOf };