@outerlayer/cli 0.2.0 → 0.4.1

package/dist/loop-JFIBP4B7.js

@@ -0,0 +1,43 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { RunnerStartError, listJobFiles, probeCredentials, requestStop, runnerProcessState, start, tick, watchTick } from './chunk-QY22NZUW.js';
+import './chunk-DM3VFDS3.js';
+import './chunk-QDQEUVUF.js';
+import './chunk-ABIWDUMS.js';
+import './chunk-YYYXRJUW.js';
+import './chunk-CBPPJSAR.js';
+import './chunk-LYCDNMOH.js';
+import './chunk-TBT347UY.js';
+import './chunk-HZRNMGLF.js';
+import './chunk-ZNA27WEV.js';
+import './chunk-N5FOE5PS.js';
+import './chunk-OGFGZQA3.js';
+import './chunk-774HEQL6.js';
+import './chunk-QOZKPLVJ.js';
+import './chunk-W4SQCOZU.js';
+import './chunk-B2G7JHHB.js';
+import './chunk-W5FVUZXV.js';
+import './chunk-BFESLKPP.js';
+import './chunk-WFJ65NUD.js';
+import './chunk-4C4THABW.js';
+import './chunk-5Y3QQRUH.js';
+import './chunk-F6GFZXZ3.js';
+import './chunk-AUFG23AA.js';
+import './chunk-WZBHBH3J.js';
+import './chunk-XDDW4FRS.js';
+import './chunk-WIOZAJ2W.js';
+import './chunk-WO2BXCTQ.js';
+import './chunk-EMY4I27X.js';
+import './chunk-ZJSNLVCE.js';
+import './chunk-BCLJSQCV.js';
+import './chunk-BOLTI6LR.js';
+import './chunk-EABW6AJQ.js';
+import './chunk-RA3O54FC.js';
+import './chunk-M5POMKKW.js';
+import './chunk-ZM2IMMYN.js';
+import './chunk-XCCLFVXM.js';
+import './chunk-BJ3KTMDH.js';
+import './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/machine-ZBPT2J3R.js

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-3TFPDVTI.js';
+import './chunk-HZRNMGLF.js';
+import './chunk-ZNA27WEV.js';
+import './chunk-N5FOE5PS.js';
+import './chunk-OGFGZQA3.js';
+import './chunk-774HEQL6.js';
+import './chunk-QOZKPLVJ.js';
+import './chunk-W4SQCOZU.js';
+import './chunk-B2G7JHHB.js';
+import './chunk-W5FVUZXV.js';
+import './chunk-BFESLKPP.js';
+import './chunk-WFJ65NUD.js';
+import './chunk-4C4THABW.js';
+import './chunk-F6GFZXZ3.js';
+import './chunk-AUFG23AA.js';
+import './chunk-WZBHBH3J.js';
+import './chunk-XDDW4FRS.js';
+import './chunk-WIOZAJ2W.js';
+import './chunk-WO2BXCTQ.js';
+import './chunk-EMY4I27X.js';
+import './chunk-ZJSNLVCE.js';
+import './chunk-BCLJSQCV.js';
+import './chunk-BOLTI6LR.js';
+import './chunk-EABW6AJQ.js';
+import './chunk-RA3O54FC.js';
+import './chunk-M5POMKKW.js';
+import './chunk-ZM2IMMYN.js';
+import './chunk-XCCLFVXM.js';
+import './chunk-BJ3KTMDH.js';
+import './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/mcp-install-cmd-RLK4SO3N.js

@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { DEFAULT_MCP_COMMAND, McpInstallError, addStdioMcpEntryIfAbsent, buildServerEntry, buildStdioServerEntry, defaultMcpUrl, handleMcpInstallError, runMcpInstall } from './chunk-MQ3IPHIZ.js';
+import './chunk-YRYMNBGQ.js';
+import './chunk-EABW6AJQ.js';
+import './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/{mcp-serve-cmd-57EZZOTL.js → mcp-serve-cmd-N6UD2KBX.js}

@@ -1,7 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { C } from './chunk-YRYMNBGQ.js';
-import { readCloudConfig, cloudConfigPath } from './chunk-TFUIDMOB.js';
+import { defaultFetch } from './chunk-BCLJSQCV.js';
+import { resolveGatewayCredentials } from './chunk-BOLTI6LR.js';
+import { cloudConfigPath } from './chunk-EABW6AJQ.js';
+import './chunk-M5POMKKW.js';
+import './chunk-ZM2IMMYN.js';
+import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 import { createInterface } from 'readline';
@@ -17,21 +22,24 @@ function mcpEndpointFromOrigin(origin) {
 function resolveMcpServeTarget(opts = {}) {
   const env = opts.env ?? process.env;
   const home = opts.home ?? homeFromEnv(env);
-  const config = readCloudConfig(home);
-  const apiKey = env.OUTERLAYER_API_KEY || config.apiKey;
+  const resolved = resolveGatewayCredentials({ env, home, appId: opts.appId, cwd: opts.cwd });
+  const apiKey = resolved.credential;
   if (!apiKey) {
     throw new McpServeConfigError(
-      `no API key: set OUTERLAYER_API_KEY or save "apiKey" to ${cloudConfigPath(home)} (run "outerlayer sync" once with --api-key, or mint a key in the dashboard: Settings \u2192 API keys).`
+      `no API key: run "outerlayer login", set OUTERLAYER_API_KEY, or save "apiKey" to ${cloudConfigPath(home)} (mint a key in the dashboard: Settings \u2192 API keys).`
     );
   }
-  const origin = env.OUTERLAYER_URL || config.url;
+  if (!resolved.ok && resolved.kind === "login" && !resolved.appId && resolved.url) {
+    throw new McpServeConfigError(resolved.message);
+  }
+  const origin = resolved.url;
   if (!opts.url && !origin) {
     throw new McpServeConfigError(
-      `no gateway URL: set OUTERLAYER_URL or save "url" to ${cloudConfigPath(home)} (run \`outerlayer login --url <your gateway>\`), or pass --url.`
+      `no gateway URL: set OUTERLAYER_URL or save "url" to ${cloudConfigPath(home)} (run \`outerlayer login\`), or pass --url.`
     );
   }
   const url = opts.url ?? mcpEndpointFromOrigin(origin);
-  const appId = opts.appId ?? env.OUTERLAYER_APP_ID ?? config.appId;
+  const appId = resolved.appId;
   const headers = { Authorization: `Bearer ${apiKey}` };
   if (appId) headers["X-Outerlayer-App-Id"] = appId;
   return { url, headers };
@@ -64,7 +72,7 @@ async function bridgeMessage(line, opts) {
   }
   const notification = isNotification(message);
   const id = requestId(message);
-  const doFetch = opts.fetch ?? fetch;
+  const doFetch = opts.fetch ?? defaultFetch;
   let status;
   let text;
   try {
@@ -93,9 +101,12 @@ async function bridgeMessage(line, opts) {
     return JSON.stringify(body);
   }
   const detail = gatewayErrorMessage(body) ?? text.slice(0, 200);
-  const hint = status === 401 ? ` \u2014 check the API key in ${cloudConfigPath(opts.home ?? homeFromEnv())} (or OUTERLAYER_API_KEY)` : "";
+  const hint = status === 401 ? usesLoginToken(opts.target.headers) ? " \u2014 the login is expired or was revoked; run `outerlayer login` to sign in again" : ` \u2014 check the API key in ${cloudConfigPath(opts.home ?? homeFromEnv())} (or OUTERLAYER_API_KEY)` : "";
   return errorResponse(id, JSON_RPC_GATEWAY_ERROR, `OuterLayer gateway returned HTTP ${status}: ${detail}${hint}`);
 }
+function usesLoginToken(headers) {
+  return (headers.Authorization ?? "").startsWith("Bearer olu_");
+}
 async function runMcpServe(opts = {}) {
   const target = resolveMcpServeTarget(opts);
   const stdin = opts.stdin ?? process.stdin;

package/dist/paths-OYKMVYJP.js

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { RUNNER_DIR_MODE, RUNNER_FILE_MODE, attemptStamp, buildDir, contextHomeDir, diskTemplatesDir, ghConfigDir, hostKeyPath, imagesDir, jobDir, jobsDir, mirrorDir, pidFilePath, repoCacheDir, rootfsDir, rootfsPathFor, runnerDir, runnerDirOfBuild, spoolDir, stagedContextDir, vmAssetsDir, vsockPath } from './chunk-ZM2IMMYN.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/{pidfile-PTW76F56.js → pidfile-UZRH774M.js}

@@ -1,8 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RunnerAlreadyRunningError, claimPidFile, readPidFile, releasePidFile } from './chunk-D77LS3UI.js';
-import './chunk-OZ7C3XUE.js';
-import './chunk-JJP7YLMN.js';
+export { RunnerAlreadyRunningError, claimPidFile, readPidFile, releasePidFile } from './chunk-N5FOE5PS.js';
+import './chunk-ZM2IMMYN.js';
 import './chunk-Z5GEFMRW.js';
 
 createRequire(import.meta.url);

package/dist/real-deps-SU24ZA2K.js

@@ -0,0 +1,21 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { realRunNode, realRunNpm } from './chunk-ABIWDUMS.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);
+
+// src/runner/update/real-deps.ts
+function realUpdateDeps() {
+  const nodePath = process.execPath;
+  return {
+    runNpm: realRunNpm(nodePath),
+    runNode: realRunNode(nodePath),
+    entryPath: process.argv[1] ?? "",
+    nodePath,
+    exit: (code) => process.exit(code),
+    fetchImpl: fetch
+  };
+}
+
+export { realUpdateDeps };

package/dist/relay-L76HDX72.js

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import './chunk-Z5GEFMRW.js';
+import { createServer, connect } from 'net';
+
+createRequire(import.meta.url);
+async function startRelay(opts) {
+  const main = await listenRelay(opts.port, opts.socketPath);
+  const extra = [];
+  try {
+    for (const forward of opts.forwards ?? []) extra.push(await listenRelay(forward.port, forward.socketPath));
+  } catch (err) {
+    await Promise.all([main, ...extra].map((relay) => relay.close()));
+    throw err;
+  }
+  return { port: main.port, close: async () => void await Promise.all([main, ...extra].map((relay) => relay.close())) };
+}
+async function listenRelay(port, socketPath) {
+  const open = /* @__PURE__ */ new Set();
+  const server = createServer((client) => {
+    const upstream = connect(socketPath);
+    open.add(client);
+    client.on("error", () => void 0);
+    upstream.on("error", () => void 0);
+    client.on("close", () => {
+      open.delete(client);
+      upstream.destroy();
+    });
+    upstream.on("close", () => client.destroy());
+    client.pipe(upstream);
+    upstream.pipe(client);
+  });
+  await new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(port, "127.0.0.1", () => resolve());
+  });
+  return {
+    port: server.address().port,
+    close: () => new Promise((resolve) => {
+      for (const socket of open) socket.destroy();
+      server.close(() => resolve());
+    })
+  };
+}
+
+export { startRelay };

package/dist/settings-J2652U5N.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { AUTO_WRAP_EVENTS, REGISTERED_EVENTS, SettingsParseError, cliBinResolvable, cliCommand, decodeWrappedCommand, encodeWrappedCommand, isOurHookCommand, isOurHookCommandFor, isOurStatuslineSlot, isWrapped, listHookCandidates, mergeHooks, mergeStatusline, ourCommandBins, ourDirectScriptBins, parseLifecycleHookCommand, readSettings, removeHooks, removeStatusline, repointWrappedHooks, settingsPath, statuslineCommand, statuslineWrappedOriginal, unwrapHooks, wrapHooks, wrappedOriginalCommand, writeSettings } from './chunk-5QRP3MVS.js';
+import './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/starter-pack-LIZYMKYQ.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { StarterPackError, assertKnownTemplate, formatStarterPackOutput, installStarterPack } from './chunk-ZMYPLFG3.js';
+import './chunk-YRYMNBGQ.js';
+import './chunk-WO2BXCTQ.js';
+import './chunk-EMY4I27X.js';
+import './chunk-RA3O54FC.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/{status-I27IST4L.js → status-UJXWZRN5.js}

@@ -1,20 +1,37 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { formatDuration, formatClock, relativeToRunner, LEASE_SECONDS, RENEW_INTERVAL_SECONDS } from './chunk-DCNOXRMV.js';
-import './chunk-OZ7C3XUE.js';
-import { runnerDir, jobsDir } from './chunk-JJP7YLMN.js';
-import './chunk-Q6CL5THG.js';
-import './chunk-U32VSRLO.js';
-import './chunk-4TNZMO7V.js';
-import './chunk-YRYMNBGQ.js';
-import './chunk-65WXAANR.js';
+import { LEASE_SECONDS, RENEW_INTERVAL_SECONDS } from './chunk-DM3VFDS3.js';
+import './chunk-CBPPJSAR.js';
+import './chunk-LYCDNMOH.js';
+import { formatDuration, formatClock, relativeToRunner } from './chunk-HZRNMGLF.js';
+import './chunk-ZNA27WEV.js';
+import './chunk-N5FOE5PS.js';
+import './chunk-OGFGZQA3.js';
+import './chunk-774HEQL6.js';
+import './chunk-QOZKPLVJ.js';
+import './chunk-W4SQCOZU.js';
+import './chunk-B2G7JHHB.js';
+import './chunk-W5FVUZXV.js';
+import './chunk-BFESLKPP.js';
+import './chunk-WFJ65NUD.js';
+import './chunk-4C4THABW.js';
+import './chunk-5Y3QQRUH.js';
+import './chunk-F6GFZXZ3.js';
+import './chunk-AUFG23AA.js';
 import './chunk-WZBHBH3J.js';
+import './chunk-XDDW4FRS.js';
+import './chunk-WIOZAJ2W.js';
+import './chunk-WO2BXCTQ.js';
+import './chunk-EMY4I27X.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-NXLLURA4.js';
-import './chunk-I3ETLSNE.js';
-import './chunk-YOOSBOKS.js';
-import './chunk-R5KBGVII.js';
-import './chunk-TFUIDMOB.js';
+import './chunk-BCLJSQCV.js';
+import './chunk-BOLTI6LR.js';
+import './chunk-EABW6AJQ.js';
+import './chunk-RA3O54FC.js';
+import './chunk-M5POMKKW.js';
+import { runnerDir, jobsDir } from './chunk-ZM2IMMYN.js';
+import './chunk-XCCLFVXM.js';
+import './chunk-BJ3KTMDH.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 import { join } from 'path';

package/dist/{statusline-fast-3C5OXHDD.js → statusline-fast-SVTMBMD7.js}

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { STATE_FRESH_MS, WRAP_TIMEOUT_MS, localDateString, parseStatuslineArgs, parseStatuslineStdin, readStatuslineState, renderStatusline, runStatuslineFast, runWrappedStatusline, statuslineStatePath } from './chunk-NTTPJV35.js';
-import './chunk-R5KBGVII.js';
+export { STATE_FRESH_MS, WRAP_TIMEOUT_MS, localDateString, parseStatuslineArgs, parseStatuslineStdin, readStatuslineState, renderStatusline, runStatuslineFast, runWrappedStatusline, statuslineStatePath } from './chunk-F47JBIAW.js';
+import './chunk-BKO6JEZI.js';
+import './chunk-5QRP3MVS.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/sync-cmd-4G4A7EVN.js

@@ -0,0 +1,28 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { CHUNK_PART_TARGET_BYTES, RETRYABLE_STATUSES, SyncConfigError, SyncTransportError, isLoopbackUrl, resolveTier, runSync } from './chunk-LT5TZHYH.js';
+export { detectCi } from './chunk-LYCDNMOH.js';
+import './chunk-BCJNHMZT.js';
+import './chunk-TBT347UY.js';
+import './chunk-F7CU5ABH.js';
+import './chunk-BKO6JEZI.js';
+import './chunk-BFESLKPP.js';
+import './chunk-WFJ65NUD.js';
+import './chunk-4C4THABW.js';
+import './chunk-YRYMNBGQ.js';
+import './chunk-DVDEBNQJ.js';
+import './chunk-WZBHBH3J.js';
+import './chunk-5QRP3MVS.js';
+import './chunk-ZJSNLVCE.js';
+import './chunk-BCLJSQCV.js';
+import './chunk-BOLTI6LR.js';
+export { cloudConfigPath, readCloudConfig, writeCloudConfig } from './chunk-EABW6AJQ.js';
+import './chunk-M5POMKKW.js';
+import './chunk-ZM2IMMYN.js';
+import './chunk-UFFXNXLQ.js';
+import './chunk-XCCLFVXM.js';
+import './chunk-BJ3KTMDH.js';
+import './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/version-BWM6VLDI.js

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { resolvePackageVersion, resolveVersion } from './chunk-RA3O54FC.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/{watch-3DTPJETH.js → watch-7SKJKGAA.js}

@@ -1,16 +1,27 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-U32VSRLO.js';
-import { StatuslineAggregator, CaptureDaemon } from './chunk-4TNZMO7V.js';
+import { LiveUploader } from './chunk-LT5TZHYH.js';
+import './chunk-LYCDNMOH.js';
+import './chunk-BCJNHMZT.js';
+import './chunk-TBT347UY.js';
+import './chunk-F7CU5ABH.js';
+import './chunk-BKO6JEZI.js';
+import './chunk-BFESLKPP.js';
+import './chunk-WFJ65NUD.js';
+import { StatuslineAggregator, CaptureDaemon } from './chunk-4C4THABW.js';
 import './chunk-YRYMNBGQ.js';
-import './chunk-65WXAANR.js';
+import './chunk-DVDEBNQJ.js';
 import './chunk-WZBHBH3J.js';
+import './chunk-5QRP3MVS.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-NXLLURA4.js';
-import './chunk-I3ETLSNE.js';
-import './chunk-YOOSBOKS.js';
-import './chunk-R5KBGVII.js';
-import './chunk-TFUIDMOB.js';
+import './chunk-BCLJSQCV.js';
+import './chunk-BOLTI6LR.js';
+import './chunk-EABW6AJQ.js';
+import './chunk-M5POMKKW.js';
+import './chunk-ZM2IMMYN.js';
+import './chunk-UFFXNXLQ.js';
+import './chunk-XCCLFVXM.js';
+import './chunk-BJ3KTMDH.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 import { mkdirSync, writeFileSync } from 'fs';

package/dist/{work-claim-cmd-5AUNCLS2.js → work-claim-cmd-5F7VZ42N.js}

@@ -1,25 +1,31 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { resolveCredentials, WorkCommandError, parsePositiveInt, postJson, resolveRepository, findLiveItem } from './chunk-Q6CL5THG.js';
-export { WorkCommandError } from './chunk-Q6CL5THG.js';
-import './chunk-U32VSRLO.js';
-import './chunk-4TNZMO7V.js';
-import './chunk-YRYMNBGQ.js';
-import './chunk-65WXAANR.js';
+import { RUNNER_PROTOCOL } from './chunk-QDQEUVUF.js';
+import { resolveCredentials, WorkCommandError, parsePositiveInt, postJson, resolveRepository, findLiveItem } from './chunk-W5FVUZXV.js';
+export { WorkCommandError } from './chunk-W5FVUZXV.js';
+import './chunk-BFESLKPP.js';
+import './chunk-WFJ65NUD.js';
+import './chunk-4C4THABW.js';
+import { defaultRunnerConfigPath } from './chunk-5Y3QQRUH.js';
+import './chunk-F6GFZXZ3.js';
+import './chunk-AUFG23AA.js';
 import './chunk-WZBHBH3J.js';
-import './chunk-ZJSNLVCE.js';
-import './chunk-NXLLURA4.js';
-import './chunk-I3ETLSNE.js';
-import './chunk-YOOSBOKS.js';
-import './chunk-R5KBGVII.js';
-import './chunk-TFUIDMOB.js';
-import './chunk-VNVZDWO3.js';
+import { defaultFetch } from './chunk-BCLJSQCV.js';
+import './chunk-BOLTI6LR.js';
+import './chunk-EABW6AJQ.js';
+import { ensureHostKey } from './chunk-M5POMKKW.js';
+import './chunk-ZM2IMMYN.js';
+import './chunk-BJ3KTMDH.js';
+import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 import { hostname } from 'os';
 
 createRequire(import.meta.url);
 var DEFAULT_LEASE_SECONDS = 900;
-var CLAIM_OUTCOMES = ["ok", "failed", "timed_out", "idle", "lease_lost", "interrupted", "stopped"];
+function hostKeyFor(opts) {
+  return ensureHostKey(defaultRunnerConfigPath(opts.home ?? homeFromEnv()));
+}
+var CLAIM_OUTCOMES = ["ok", "incomplete", "failed", "timed_out", "idle", "lease_lost", "interrupted", "stopped"];
 async function resolveItemIdentifier(opts, creds, cwd, fetchImpl) {
   const itemNumber = parsePositiveInt(opts.item, "--item");
   if (itemNumber !== void 0) return itemNumber;
@@ -37,20 +43,23 @@ async function resolveItemIdentifier(opts, creds, cwd, fetchImpl) {
 async function runWorkClaim(opts) {
   const cwd = opts.cwd ?? process.cwd();
   const creds = resolveCredentials(opts);
-  const fetchImpl = opts.fetchImpl ?? fetch;
+  const fetchImpl = opts.fetchImpl ?? defaultFetch;
   if (opts.kind !== "implement" && opts.kind !== "amend") {
     throw new WorkCommandError('--kind is required \u2014 pass "implement" or "amend"');
   }
   const host = opts.host ?? hostname();
   const seconds = parsePositiveInt(opts.seconds, "--seconds") ?? DEFAULT_LEASE_SECONDS;
   const itemId = await resolveItemIdentifier(opts, creds, cwd, fetchImpl);
+  const hostKey = await hostKeyFor(opts);
   const { data } = await postJson(
     creds.url,
     `/v1/work-items/${itemId}/claim`,
     creds.apiKey,
     creds.appId,
-    { host, kind: opts.kind, seconds },
-    fetchImpl
+    { host, kind: opts.kind, seconds, runnerProtocol: RUNNER_PROTOCOL, hostKey: hostKey.hostKey },
+    fetchImpl,
+    void 0,
+    hostKey.signer
   );
   const output = opts.json ? JSON.stringify(data) : `claimed until ${String(data.expiresAt)}`;
   if (!opts.quiet) process.stdout.write(output + "\n");
@@ -59,7 +68,7 @@ async function runWorkClaim(opts) {
 async function runWorkRenew(opts) {
   const cwd = opts.cwd ?? process.cwd();
   const creds = resolveCredentials(opts);
-  const fetchImpl = opts.fetchImpl ?? fetch;
+  const fetchImpl = opts.fetchImpl ?? defaultFetch;
   const host = opts.host ?? hostname();
   const seconds = parsePositiveInt(opts.seconds, "--seconds") ?? DEFAULT_LEASE_SECONDS;
   const itemId = await resolveItemIdentifier(opts, creds, cwd, fetchImpl);
@@ -69,7 +78,9 @@ async function runWorkRenew(opts) {
     creds.apiKey,
     creds.appId,
     { host, seconds },
-    fetchImpl
+    fetchImpl,
+    void 0,
+    (await hostKeyFor(opts)).signer
   );
   const output = opts.json ? JSON.stringify(data) : `claimed until ${String(data.expiresAt)}`;
   if (!opts.quiet) process.stdout.write(output + "\n");
@@ -78,7 +89,7 @@ async function runWorkRenew(opts) {
 async function runWorkRelease(opts) {
   const cwd = opts.cwd ?? process.cwd();
   const creds = resolveCredentials(opts);
-  const fetchImpl = opts.fetchImpl ?? fetch;
+  const fetchImpl = opts.fetchImpl ?? defaultFetch;
   if (opts.outcome !== void 0 && !CLAIM_OUTCOMES.includes(opts.outcome)) {
     throw new WorkCommandError(`--outcome must be one of: ${CLAIM_OUTCOMES.join(", ")}`);
   }
@@ -90,7 +101,9 @@ async function runWorkRelease(opts) {
     creds.apiKey,
     creds.appId,
     opts.outcome === void 0 ? { host } : { host, outcome: opts.outcome },
-    fetchImpl
+    fetchImpl,
+    void 0,
+    (await hostKeyFor(opts)).signer
   );
   const output = opts.json ? JSON.stringify(data) : `released at ${String(data.releasedAt)}`;
   if (!opts.quiet) process.stdout.write(output + "\n");

package/dist/work-cmd-QAUZ7MTD.js

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { WorkCommandError, findLiveItem, getJson, parsePositiveInt, postJson, resolveCredentials, resolveRepository, runWorkBuild, runWorkLinkSession, runWorkList, runWorkRemove, runWorkStatus } from './chunk-W5FVUZXV.js';
+import './chunk-BFESLKPP.js';
+import './chunk-WFJ65NUD.js';
+import './chunk-4C4THABW.js';
+import './chunk-WZBHBH3J.js';
+import './chunk-BCLJSQCV.js';
+import './chunk-BOLTI6LR.js';
+import './chunk-EABW6AJQ.js';
+import './chunk-M5POMKKW.js';
+import './chunk-ZM2IMMYN.js';
+import './chunk-BJ3KTMDH.js';
+import './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/work-comment-cmd-BNCSBTLH.js

@@ -0,0 +1,106 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { resolveCredentials, postJson, getJson } from './chunk-W5FVUZXV.js';
+import { detectActiveSession } from './chunk-BFESLKPP.js';
+import { sanitizeTerminal } from './chunk-WFJ65NUD.js';
+import { resolveRepoIdentity } from './chunk-4C4THABW.js';
+import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
+import { defaultFetch } from './chunk-BCLJSQCV.js';
+import './chunk-BOLTI6LR.js';
+import './chunk-EABW6AJQ.js';
+import './chunk-M5POMKKW.js';
+import './chunk-ZM2IMMYN.js';
+import './chunk-BJ3KTMDH.js';
+import { homeFromEnv } from './chunk-VNVZDWO3.js';
+import './chunk-Z5GEFMRW.js';
+import { randomUUID } from 'crypto';
+
+createRequire(import.meta.url);
+var GREEN = "\x1B[32m";
+var DIM = "\x1B[2m";
+var RESET = "\x1B[0m";
+var WorkCommentCommandError = class extends Error {
+};
+function resolveAction(opts) {
+  const set = ["pass", "fail", "attach", "ready"].filter((flag) => opts[flag] === true);
+  if (set.length > 1) {
+    throw new WorkCommentCommandError(`only one of --${set.join(", --")} may be given \u2014 a comment carries at most one action`);
+  }
+  return set[0];
+}
+async function runWorkComment(opts) {
+  const cwd = opts.cwd ?? process.cwd();
+  const home = opts.home ?? homeFromEnv();
+  const env = opts.env ?? process.env;
+  const now = opts.now ?? (() => /* @__PURE__ */ new Date());
+  const itemNumber = parseTrackerNumber(opts.item);
+  if (itemNumber === void 0) {
+    throw new WorkCommentCommandError(trackerNumberError("--item", opts.item ?? ""));
+  }
+  const action = resolveAction(opts);
+  if (action === "attach" && !opts.artifact) {
+    throw new WorkCommentCommandError("--attach needs --artifact <id>, naming the artifact that becomes the criterion's proof");
+  }
+  if (action === "attach" && !opts.criterion) {
+    throw new WorkCommentCommandError("--attach needs --criterion <id> \u2014 it names which criterion the artifact becomes proof for");
+  }
+  const identity = resolveRepoIdentity(cwd);
+  const sessionId = opts.sessionId ?? detectActiveSession({
+    env,
+    home,
+    cwds: identity.repoRoot !== void 0 ? [identity.repoRoot, cwd] : [cwd],
+    nowMs: now().getTime()
+  });
+  const creds = resolveCredentials({ ...opts, cwd, home, env });
+  const comment = {
+    clientCommentId: randomUUID(),
+    body: opts.body ?? "",
+    ...opts.criterion !== void 0 ? { criterion: opts.criterion } : {},
+    ...action !== void 0 ? { action } : {},
+    ...opts.artifact !== void 0 ? { artifact: opts.artifact } : {},
+    ...sessionId !== void 0 ? { sessionId } : {}
+  };
+  const fetchImpl = opts.fetchImpl ?? defaultFetch;
+  const { data } = await postJson(
+    creds.url,
+    `/v1/work-items/${itemNumber}/comments`,
+    creds.apiKey,
+    creds.appId,
+    { schemaVersion: 1, comment },
+    fetchImpl
+  );
+  const thread = data.thread;
+  const waitingOn = thread?.waitingOn ?? null;
+  const criterionLabel = opts.criterion ? `criterion ${opts.criterion}` : "the general thread";
+  const output = opts.json ? JSON.stringify(data) : `${GREEN}\u2713${RESET} commented on ${criterionLabel} of item #${itemNumber} ${DIM}\xB7${RESET} waiting on ${waitingOn ?? "no one"}`;
+  if (!opts.quiet) process.stdout.write(output + "\n");
+  return { data, output };
+}
+async function runWorkThreads(opts) {
+  const itemNumber = parseTrackerNumber(opts.item);
+  if (itemNumber === void 0) {
+    throw new WorkCommentCommandError(trackerNumberError("--item", opts.item ?? ""));
+  }
+  const creds = resolveCredentials(opts);
+  const fetchImpl = opts.fetchImpl ?? defaultFetch;
+  const { data } = await getJson(creds.url, `/v1/work-items/${itemNumber}/threads`, creds.apiKey, creds.appId, fetchImpl);
+  if (opts.json) {
+    const output2 = JSON.stringify(data);
+    if (!opts.quiet) process.stdout.write(output2 + "\n");
+    return { data, output: output2 };
+  }
+  const page = data;
+  const lines = [renderThread("general", page.general), ...page.criteria.map((t) => renderThread(t.criterion ?? "", t))];
+  const output = lines.join("\n");
+  if (!opts.quiet) process.stdout.write(output + "\n");
+  return { data, output };
+}
+function renderThread(label, thread) {
+  const header = `${DIM}${label === "general" ? "general" : `criterion ${label}`} \xB7 waiting on ${thread.waitingOn ?? "no one"}${RESET}`;
+  const comments = thread.comments.map(
+    (c) => `  ${c.author.kind === "person" ? "person" : "agent"} ${sanitizeTerminal(c.author.name)}: ${sanitizeTerminal(c.body)}${c.action ? ` (${c.action})` : ""}`
+  );
+  return [header, ...comments].join("\n");
+}
+
+export { WorkCommentCommandError, runWorkComment, runWorkThreads };

package/dist/{work-launch-LT663PB3.js → work-launch-YI4CJDAP.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { appendLaunchRecord, launchStatusIsDecisive, launchedItemForSession, launchesPath, parseWorkItemEnv, readLaunchSpoolState } from './chunk-65WXAANR.js';
+export { appendLaunchRecord, launchStatusIsDecisive, launchedItemForSession, launchedItemsBySession, launchesPath, parseWorkItemEnv, readLaunchSpoolState } from './chunk-DVDEBNQJ.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-Z5GEFMRW.js';