@outerlayer/cli 0.19.0 → 0.19.1

package/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @outerlayer/cli
 
+## 0.19.1
+
+### Patch Changes
+
+- 331130f: A session start that removes an earlier CLI's copies also puts back `.outerlayer-pin.json` when that CLI rewrote it, so `git status` is clean afterwards. A staged change to the pin is left alone.
+
+  `outerlayer init --local --shell-function` adds the `claude` shell function, and `--local --no-shell-function` removes it. `--local` used to skip both flags without a word.
+
 ## 0.19.0
 
 ### Minor Changes

package/dist/{agent-setup-TPR4BBFV.js → agent-setup-AM42SA2D.js}

@@ -1,22 +1,22 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-DJ3ZUSC3.js';
-import './chunk-ZHAUSEEN.js';
+export { keepHandWritten, runAgentSetup } from './chunk-CGGPS7SI.js';
+import './chunk-5VML45HH.js';
 import './chunk-YVZJ6GKF.js';
 import './chunk-6X4SQ5MY.js';
 import './chunk-ANPNT6PM.js';
-import './chunk-452TM7J4.js';
-import './chunk-IXYZUUYQ.js';
+import './chunk-EAEELQVQ.js';
+import './chunk-7UWVLZXD.js';
 import './chunk-FVMYKL6L.js';
 import './chunk-NTRCK4NH.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-NNLA7LLQ.js';
-import './chunk-WFSUUUAN.js';
-import './chunk-7VUK5RFS.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-CRB3POP4.js';
 import './chunk-YQR6E6OV.js';
+import './chunk-WFSUUUAN.js';
+import './chunk-7VUK5RFS.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M2ZWWTWZ.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-13T19:11:37.037Z+109c2bd","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-13T20:24:21.442Z+3c40b5d","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-UWQAL2MN.js → check-W2JGXN3B.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-5MYFOW5V.js';
-import './chunk-6U3MV7TZ.js';
+import { probeCredentials } from './chunk-F2KXHIFI.js';
+import './chunk-B6SCN5NY.js';
 import './chunk-MTP2QEVO.js';
 import './chunk-S5PCA3SN.js';
 import './chunk-3JVYMD4G.js';
@@ -9,28 +9,28 @@ import './chunk-YETTWTAY.js';
 import './chunk-SADUQSO4.js';
 import './chunk-I2UOAV7X.js';
 import './chunk-BWSUPRDK.js';
-import './chunk-5GHGAF6P.js';
+import './chunk-JHGEBPLE.js';
 import './chunk-XNGMQ27R.js';
-import './chunk-7SJPQWBM.js';
+import './chunk-R22NZSGA.js';
 import './chunk-KYS3TQAG.js';
 import './chunk-ESVW4MJY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-DADWEUH3.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-GEMQLBMW.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-AMFWYESY.js';
 import './chunk-TBT347UY.js';
-import './chunk-6D7GT22T.js';
+import './chunk-PIZRPNKR.js';
 import './chunk-7YP7T6GV.js';
-import './chunk-UVG35MWF.js';
-import './chunk-7KSSBQTS.js';
+import './chunk-LW7G5TJB.js';
+import './chunk-3ZR7Y23Y.js';
 import './chunk-OGFGZQA3.js';
 import './chunk-VMJPFQNE.js';
 import './chunk-3UZTIRLF.js';
 import './chunk-GGOMT6KF.js';
 import './chunk-X5H2WYMB.js';
-import './chunk-XSZD4AZ6.js';
+import './chunk-XZ4H4X5F.js';
 import './chunk-QEFKA2QD.js';
 import { parseRunnerEnv } from './chunk-6MZSX4M7.js';
-import './chunk-HPJNLETG.js';
+import './chunk-FBTGMSQF.js';
 import './chunk-IF2OSI5T.js';
 import './chunk-CG36IONK.js';
 import './chunk-G3IJ3N6F.js';
@@ -43,7 +43,7 @@ import './chunk-QOZKPLVJ.js';
 import './chunk-CX22S5BA.js';
 import './chunk-ECODQ7II.js';
 import './chunk-JBJTC3UU.js';
-import './chunk-NFIR3GEE.js';
+import './chunk-PSN33ERW.js';
 import './chunk-F7CU5ABH.js';
 import './chunk-BKO6JEZI.js';
 import './chunk-QNLX477Q.js';
@@ -53,20 +53,20 @@ import './chunk-T2Q7ISPE.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-5QRP3MVS.js';
 import './chunk-LLM3I5YU.js';
-import './chunk-452TM7J4.js';
-import './chunk-IXYZUUYQ.js';
+import './chunk-EAEELQVQ.js';
+import './chunk-7UWVLZXD.js';
 import './chunk-FVMYKL6L.js';
 import './chunk-NTRCK4NH.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-G2YNJIGF.js';
 import './chunk-NNLA7LLQ.js';
-import './chunk-WFSUUUAN.js';
-import './chunk-7VUK5RFS.js';
 import './chunk-EABW6AJQ.js';
 import './chunk-CRB3POP4.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
+import './chunk-WFSUUUAN.js';
+import './chunk-7VUK5RFS.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-RA3O54FC.js';
 import './chunk-M2ZWWTWZ.js';

package/dist/{chunk-7KSSBQTS.js → chunk-3ZR7Y23Y.js}

@@ -5,8 +5,8 @@ import { createDockerHost, childEnvironment, spawnRun } from './chunk-VMJPFQNE.j
 import { builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, JUDGE_DIR, MAX_REPORT_BYTES } from './chunk-3UZTIRLF.js';
 import { execCapture } from './chunk-GGOMT6KF.js';
 import { GUEST_CID } from './chunk-X5H2WYMB.js';
-import { describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-XSZD4AZ6.js';
-import { WorkCommandError } from './chunk-HPJNLETG.js';
+import { describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-XZ4H4X5F.js';
+import { WorkCommandError } from './chunk-FBTGMSQF.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
 import { parseDuKilobytes } from './chunk-7RQ73DLO.js';
 import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-3CWUOFV6.js';

package/dist/{chunk-ZHAUSEEN.js → chunk-5VML45HH.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { C } from './chunk-ANPNT6PM.js';
-import { retiredSkillPaths, removeRetiredSkills } from './chunk-IXYZUUYQ.js';
+import { retiredSkillPaths, removeRetiredSkills } from './chunk-7UWVLZXD.js';
 import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-NNLA7LLQ.js';
-import { emitTree, parseOuterlayerConfig, classifyTree, generatedHeaderSource, CONTEXT_PIN_FILENAME, normalizePath } from './chunk-WFSUUUAN.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
+import { emitTree, parseOuterlayerConfig, classifyTree, generatedHeaderSource, CONTEXT_PIN_FILENAME, normalizePath } from './chunk-WFSUUUAN.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, copyFileSync, unlinkSync, rmdirSync, readdirSync } from 'fs';
 import { join, dirname, relative, sep } from 'path';
 

package/dist/{chunk-6U3MV7TZ.js → chunk-B6SCN5NY.js}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { writeJobFile, readJobFile } from './chunk-SADUQSO4.js';
-import { senderPidfile } from './chunk-5GHGAF6P.js';
+import { senderPidfile } from './chunk-JHGEBPLE.js';
 import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-XNGMQ27R.js';
-import { installScrubContext } from './chunk-7SJPQWBM.js';
-import { AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, shellQuote, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, syncInContainer, copyTranscriptsFromContainer, GH_CONFIG_YML, ghHostsYml, ADDED_USER, isLiteralAddress, signalInContainer, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-7KSSBQTS.js';
+import { installScrubContext } from './chunk-R22NZSGA.js';
+import { AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, shellQuote, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, syncInContainer, copyTranscriptsFromContainer, GH_CONFIG_YML, ghHostsYml, ADDED_USER, isLiteralAddress, signalInContainer, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-3ZR7Y23Y.js';
 import { childEnvironment } from './chunk-VMJPFQNE.js';
 import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, judgeCommand, MAX_REPORT_BYTES, JUDGE_MAX_TURNS, JUDGE_DIR } from './chunk-3UZTIRLF.js';
 import { waitForAgent, vmExecArgs } from './chunk-GGOMT6KF.js';
 import { socketPathProblem, vsockLinks, linkVsockSockets } from './chunk-X5H2WYMB.js';
-import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, formatDuration, retrySend, formatClock } from './chunk-XSZD4AZ6.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-HPJNLETG.js';
+import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, formatDuration, retrySend, formatClock } from './chunk-XZ4H4X5F.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-FBTGMSQF.js';
 import { planArtifactUpload } from './chunk-G3IJ3N6F.js';
 import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-P53VEAOF.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
@@ -19,8 +19,8 @@ import { CLAUDE_CODE_VERSION } from './chunk-CX22S5BA.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
 import { scrubText } from './chunk-QNLX477Q.js';
 import { resolvePackRoot } from './chunk-NNLA7LLQ.js';
-import { parsePolicy } from './chunk-WFSUUUAN.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
+import { parsePolicy } from './chunk-WFSUUUAN.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { resolveVersion } from './chunk-RA3O54FC.js';
 import { signerFor } from './chunk-M2ZWWTWZ.js';

package/dist/{chunk-DJ3ZUSC3.js → chunk-CGGPS7SI.js}

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runEmit } from './chunk-ZHAUSEEN.js';
+import { runEmit } from './chunk-5VML45HH.js';
 import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-YVZJ6GKF.js';
 import { installStarterPack } from './chunk-6X4SQ5MY.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-452TM7J4.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-EAEELQVQ.js';
 import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-NNLA7LLQ.js';
-import { generatedHeaderSource } from './chunk-WFSUUUAN.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { cloneIsGoverned } from './chunk-YQR6E6OV.js';
+import { generatedHeaderSource } from './chunk-WFSUUUAN.js';
 import { execFileSync } from 'child_process';
 import { existsSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-452TM7J4.js → chunk-EAEELQVQ.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { removeRetiredSkills } from './chunk-IXYZUUYQ.js';
+import { removeRetiredSkills } from './chunk-7UWVLZXD.js';
 import { defaultFetch } from './chunk-FVMYKL6L.js';
 import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
 import { loadMaintainedFiles, writeMaintainedFiles } from './chunk-NNLA7LLQ.js';
-import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-WFSUUUAN.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { writeDegraded, writeSourceCache, SOURCE_CACHE_TTL_RETRY_MS, writeContextManifest, SOURCE_CACHE_TTL_SUCCESS_MS, readSourceCache, isSourceCacheFresh, clearDegraded } from './chunk-YQR6E6OV.js';
+import { normalizeRepoName, parseOuterlayerConfig, classifyTree, emitTree } from './chunk-WFSUUUAN.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { withTokenHeader } from './chunk-BQXFBI7T.js';
 import { execFileSync } from 'child_process';

package/dist/{chunk-5MYFOW5V.js → chunk-F2KXHIFI.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-6U3MV7TZ.js';
+import { LEASE_SECONDS, releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, ALREADY_RELEASED } from './chunk-B6SCN5NY.js';
 import { writePendingUpdate } from './chunk-MTP2QEVO.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-S5PCA3SN.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
@@ -8,16 +8,16 @@ import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest
 import { writeJobFile, readJobFile, readJobFileChecked } from './chunk-SADUQSO4.js';
 import { compareVersions, satisfiesRange } from './chunk-I2UOAV7X.js';
 import { RUNNER_PROTOCOL } from './chunk-BWSUPRDK.js';
-import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-DADWEUH3.js';
+import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-GEMQLBMW.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, cleanVersions, isInLayout, stagingDir } from './chunk-AMFWYESY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, measureDisk, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime } from './chunk-7KSSBQTS.js';
+import { provisionContainer, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandLine, measureDisk, setUpRunnerCgroup, parseCpuList, ensureTunnel, keepGhConfigCurrent, createContainerRuntime } from './chunk-3ZR7Y23Y.js';
 import { spawnRun } from './chunk-VMJPFQNE.js';
 import { builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, BUILD_LABEL, RUNNER_LABEL } from './chunk-3UZTIRLF.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-XSZD4AZ6.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-XZ4H4X5F.js';
 import { checkFit } from './chunk-QEFKA2QD.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-HPJNLETG.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-FBTGMSQF.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-P53VEAOF.js';
 import { exceedsDisk } from './chunk-7RQ73DLO.js';
 import { claimPidFile, readPidFile, releasePidFile } from './chunk-ECODQ7II.js';
@@ -1463,7 +1463,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-5EPPD33Y.js');
+  const { postJson: postJson2 } = await import('./work-cmd-5I3J2XQQ.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -2226,7 +2226,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-UWQAL2MN.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-W2JGXN3B.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });

package/dist/{chunk-HPJNLETG.js → chunk-FBTGMSQF.js}

@@ -421,7 +421,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-YAZG5MDX.js');
+      const { logHookError } = await import('./hook-fast-RL5E5OXE.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }

package/dist/{chunk-DADWEUH3.js → chunk-GEMQLBMW.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-6D7GT22T.js';
-import { describeCallFailure } from './chunk-XSZD4AZ6.js';
-import { WorkCommandError, getJson } from './chunk-HPJNLETG.js';
+import { isPlaceholderCommand } from './chunk-PIZRPNKR.js';
+import { describeCallFailure } from './chunk-XZ4H4X5F.js';
+import { WorkCommandError, getJson } from './chunk-FBTGMSQF.js';
 import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
 import { builtinKind } from './chunk-P53VEAOF.js';
 import { signerFor } from './chunk-M2ZWWTWZ.js';

package/dist/{chunk-5TN7GLYX.js → chunk-HOKXGFDR.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { checkStarterFiles, contextIsGoverned } from './chunk-TWF3RICI.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-HPJNLETG.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-FBTGMSQF.js';
 import { isLinkedRepository } from './chunk-CG36IONK.js';
 import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-NFIR3GEE.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-PSN33ERW.js';
 import { readStatuslineState, STATE_FRESH_MS } from './chunk-DSF2FWAZ.js';
 import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-QNLX477Q.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
-import { checkFormerSkillNames } from './chunk-IXYZUUYQ.js';
+import { checkFormerSkillNames } from './chunk-7UWVLZXD.js';
 import { defaultFetch } from './chunk-FVMYKL6L.js';
 import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
@@ -1181,7 +1181,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-23BBJWBX.js');
+    const { runnerHostChecks } = await import('./doctor-DHUM5DBB.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;

package/dist/{chunk-5GHGAF6P.js → chunk-JHGEBPLE.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-7SJPQWBM.js';
-import { spoolDir } from './chunk-NFIR3GEE.js';
+import { LiveUploader } from './chunk-R22NZSGA.js';
+import { spoolDir } from './chunk-PSN33ERW.js';
 import { CaptureDaemon } from './chunk-QNLX477Q.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-UVG35MWF.js → chunk-LW7G5TJB.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-7KSSBQTS.js';
+import { MIN_ENGINE_MAJOR } from './chunk-3ZR7Y23Y.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-CX22S5BA.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';

package/dist/{chunk-6D7GT22T.js → chunk-PIZRPNKR.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-7YP7T6GV.js';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-UVG35MWF.js';
-import { MIN_ENGINE_MAJOR } from './chunk-7KSSBQTS.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-LW7G5TJB.js';
+import { MIN_ENGINE_MAJOR } from './chunk-3ZR7Y23Y.js';
 import { runnerCredentialProblem } from './chunk-P53VEAOF.js';
 import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';

package/dist/{chunk-NFIR3GEE.js → chunk-PSN33ERW.js}

@@ -624,11 +624,11 @@ async function missingControlPlane(cwd, sessionId, home, env) {
   const dirs = findGitDirs(cwd);
   if (dirs === void 0) return void 0;
   if (existsSync(join(dirs.gitCommonDir, "outerlayer", "materialized.json")) || hasExcludeBlock(dirs.gitCommonDir)) {
-    const { cleanupEarlierCopies } = await import('./context-cleanup-HSVYDGMI.js');
+    const { cleanupEarlierCopies } = await import('./context-cleanup-CHEWNYU6.js');
     cleanupEarlierCopies(dirs);
   }
   if (!contextPossiblyGoverned(cwd, home)) return void 0;
-  const { governanceOf } = await import('./control-plane-launch-NYVDJESK.js');
+  const { governanceOf } = await import('./control-plane-launch-34LNRJWR.js');
   if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
   recordMissingContext(dirs, sessionId, home);
   const launcher = `${cliInvocation()} claude`;

package/dist/{chunk-7SJPQWBM.js → chunk-R22NZSGA.js}

@@ -4,7 +4,7 @@ import { uploadSpooledSteps } from './chunk-KYS3TQAG.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-G3IJ3N6F.js';
-import { writeSyncStatus, spoolDir } from './chunk-NFIR3GEE.js';
+import { writeSyncStatus, spoolDir } from './chunk-PSN33ERW.js';
 import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
 import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-QNLX477Q.js';
@@ -14,10 +14,10 @@ import { defaultFetch } from './chunk-FVMYKL6L.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
-import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-7VUK5RFS.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { removeJournalHooks } from './chunk-TUSYOL2O.js';
+import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-7VUK5RFS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { signerFor, signRunnerRequest } from './chunk-M2ZWWTWZ.js';
 import { dirname, basename, join } from 'path';

package/dist/{chunk-XSZD4AZ6.js → chunk-XZ4H4X5F.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { WorkCommandError, postJson } from './chunk-HPJNLETG.js';
+import { WorkCommandError, postJson } from './chunk-FBTGMSQF.js';
 import { composeDelivery } from './chunk-LLM3I5YU.js';
-import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-452TM7J4.js';
+import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-EAEELQVQ.js';
 import { signingFetchFor } from './chunk-FVMYKL6L.js';
 import { SHIM_SCRIPT } from './chunk-G2YNJIGF.js';
 import { readDegraded, readContextManifest, readSourceCache } from './chunk-YQR6E6OV.js';

package/dist/{chunk-VRRGENS4.js → chunk-Z7K3L4FC.js}

@@ -2,6 +2,7 @@
 import { createRequire } from 'node:module';
 import { readContextManifest, removeContextManifest } from './chunk-YQR6E6OV.js';
 import { removePreCommitGuardHook } from './chunk-TUSYOL2O.js';
+import { CONTEXT_PIN_FILENAME } from './chunk-WFSUUUAN.js';
 import { execFileSync } from 'child_process';
 import { existsSync, unlinkSync, lstatSync, readdirSync, rmdirSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname, isAbsolute } from 'path';
@@ -92,6 +93,34 @@ function trackedPaths(repoRoot) {
     return void 0;
   }
 }
+function isPin(text) {
+  try {
+    const value = JSON.parse(text);
+    if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
+    const { schemaVersion, sha, ...rest } = value;
+    return Object.keys(rest).length === 0 && typeof schemaVersion === "number" && typeof sha === "string" && /^[0-9a-f]{40}$/.test(sha);
+  } catch {
+    return false;
+  }
+}
+function pinMayDiffer(repoRoot, args) {
+  try {
+    execFileSync("git", ["diff", "--quiet", ...args, "--", CONTEXT_PIN_FILENAME], { cwd: repoRoot, stdio: "ignore", timeout: 5e3 });
+    return false;
+  } catch {
+    return true;
+  }
+}
+function restorePin(repoRoot) {
+  try {
+    if (!isPin(readFileSync(join(repoRoot, CONTEXT_PIN_FILENAME), "utf8"))) return false;
+    if (pinMayDiffer(repoRoot, ["--cached"]) || !pinMayDiffer(repoRoot, [])) return false;
+    execFileSync("git", ["checkout", "--", CONTEXT_PIN_FILENAME], { cwd: repoRoot, stdio: "ignore", timeout: 5e3 });
+    return true;
+  } catch {
+    return false;
+  }
+}
 function pruneEmptyDirs(start, root) {
   let current = start;
   while (current !== root && current.startsWith(root)) {
@@ -106,7 +135,7 @@ function pruneEmptyDirs(start, root) {
 }
 function cleanupEarlierCopies(input) {
   const { repoRoot, gitCommonDir } = input;
-  const result = { removedFiles: [], excludeRemoved: false, guardRemoved: false };
+  const result = { removedFiles: [], excludeRemoved: false, guardRemoved: false, pinRestored: false };
   if (!hasEarlierCopies(gitCommonDir)) return result;
   let complete = true;
   try {
@@ -132,6 +161,7 @@ function cleanupEarlierCopies(input) {
     return result;
   }
   if (!complete) return result;
+  result.pinRestored = restorePin(repoRoot);
   try {
     result.guardRemoved = removePreCommitGuardHook(repoRoot).removed;
     result.excludeRemoved = removeContextExcludes(gitCommonDir).changed;

package/dist/{claude-launcher-FPPHZPMR.js → claude-launcher-J5M44PFS.js}

@@ -88,7 +88,7 @@ async function runClaudeLauncher(args, deps = {}) {
       return 1;
     }
   } else {
-    const { resolveLaunchPlane } = await import('./control-plane-launch-NYVDJESK.js');
+    const { resolveLaunchPlane } = await import('./control-plane-launch-34LNRJWR.js');
     const plane = await resolveLaunchPlane({ cwd, env, home: homeFromEnv(env), fetchImpl: deps.fetchImpl, stderr });
     if (plane.kind === "none") return run(claude, args, env, cwd, stderr);
     if (plane.kind === "refused") {