@outerlayer/cli 0.20.0 → 0.22.0

package/dist/{chunk-QOZKPLVJ.js → chunk-3W333NFO.js}

@@ -223,4 +223,43 @@ function writeSanitizedRecipe(checkoutDir, location, recipe) {
 }
 var SANITIZED_NAME = "outerlayer-recipe.json";
 
-export { RecipeError, SANITIZED_NAME, assertBuildable, classifyProperties, locateRecipe, readRecipe, writeSanitizedRecipe };
+// src/runner/image/pins.ts
+var CLAUDE_CODE_VERSION = "2.1.284";
+var DEFAULT_BASE_IMAGE = "ubuntu:24.04@sha256:008173c23f95b170204355c12626cb5a965d779a7e1283b09e9cffbb1bf33ca3";
+var NODE_IMAGE = "node:22-bookworm-slim@sha256:43ac6c60b8f89723f746e8a92ce91abd5017e627ce1ddfe4238355d3a30b772c";
+var BUILDKIT_IMAGE = "moby/buildkit:v0.33.1@sha256:cec9f139f45e93c5c69c60f8b07cfad9f43f4ef6b6a6cd917527fea5ff2e3dea";
+var GH_VERSION = "2.101.0";
+var GH_SHA256 = {
+  amd64: "9bca2d1c16825f109907a23307628a2f0698fbf99662b73a5cf0b020293072b8",
+  arm64: "b57e8063f18862647c9d22727c32e9da1b963f8bf9db648fe123a6975695640f"
+};
+var TINI_VERSION = "0.19.0";
+var TINI_SHA256 = {
+  amd64: "c5b0666b4cb676901f90dfcb37106783c5fe2077b04590973b885950611b30ee",
+  arm64: "eae1d3aa50c48fb23b8cbdf4e369d0910dfc538566bfd09df89a774aa84a48b9"
+};
+var MICROVM_ARCHES = ["x86_64"];
+function firecrackerArch(nodeArch) {
+  return nodeArch === "x64" ? "x86_64" : nodeArch === "arm64" ? "aarch64" : nodeArch;
+}
+var FIRECRACKER_VERSION = "1.13.1";
+var FIRECRACKER_SHA256 = {
+  x86_64: "59450b9171ff2ebdf2f9a25be3a248a7ba79fb6371aec51a9d6d8eefca7b4faf"
+};
+var FIRECRACKER_BINARY_SHA256 = {
+  x86_64: "7d3924e0c8761edafbf85cb2a94c268ffad249644a40fd02d4e15cde4c206f6e"
+};
+var GUEST_ASSETS_VERSION = "1";
+var GUEST_ASSETS_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${GUEST_ASSETS_VERSION}`;
+var GUEST_KERNEL_SHA256 = {
+  x86_64: "5a2d716d301615c69fefc2f9574954e838269f14d5e8b0d1bad88b680cd372ee"
+};
+var GUEST_HELPER_SHA256 = {
+  x86_64: "4175e89ae8cb633113b5f69ef8b6e206093954411fe53edf86357bc1b7e822f9"
+};
+function guestAssetsPinned(arch) {
+  const zero = "0".repeat(64);
+  return GUEST_KERNEL_SHA256[arch] !== zero && GUEST_HELPER_SHA256[arch] !== zero;
+}
+
+export { BUILDKIT_IMAGE, CLAUDE_CODE_VERSION, DEFAULT_BASE_IMAGE, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GH_SHA256, GH_VERSION, GUEST_ASSETS_BASE_URL, GUEST_ASSETS_VERSION, GUEST_HELPER_SHA256, GUEST_KERNEL_SHA256, MICROVM_ARCHES, NODE_IMAGE, RecipeError, SANITIZED_NAME, TINI_SHA256, TINI_VERSION, assertBuildable, classifyProperties, firecrackerArch, guestAssetsPinned, locateRecipe, readRecipe, writeSanitizedRecipe };

package/dist/{chunk-HOKXGFDR.js → chunk-4JHVPFH6.js}

@@ -1,20 +1,20 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { checkStarterFiles, contextIsGoverned } from './chunk-TWF3RICI.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-FBTGMSQF.js';
-import { isLinkedRepository } from './chunk-CG36IONK.js';
+import { checkStarterFiles, contextIsGoverned, checkBuildSkill } from './chunk-VSUXCMMH.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-2HT2XGJX.js';
+import { isLinkedRepository } from './chunk-JRCSET55.js';
 import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-PSN33ERW.js';
-import { readStatuslineState, STATE_FRESH_MS } from './chunk-DSF2FWAZ.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-QNLX477Q.js';
-import { C } from './chunk-ANPNT6PM.js';
-import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
-import { checkFormerSkillNames } from './chunk-7UWVLZXD.js';
-import { defaultFetch } from './chunk-FVMYKL6L.js';
+import { checkFormerSkillNames } from './chunk-USWVXQIH.js';
+import { defaultFetch } from './chunk-VWLOQ6FI.js';
 import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-6IO62VJS.js';
+import { readStatuslineState, STATE_FRESH_MS } from './chunk-IZSVXRDR.js';
+import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-G2YNJIGF.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-AEKSX4EY.js';
+import { C } from './chunk-ANPNT6PM.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
+import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
 import { readDeliveryRecord, readDegraded, readSourceCache } from './chunk-YQR6E6OV.js';
 import { deadHooksState, preparePackageManagerCommand } from './chunk-TUSYOL2O.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -192,6 +192,7 @@ function runDoctor(env = {}) {
     ...checkInstalls(env),
     ...starter?.checks ?? [],
     ...laptop ? checkRenamedSkills(env.cwd) : [],
+    ...checkBuildSkillState(env.cwd),
     ...starter !== void 0 && !starter.mcpOutdated ? checkMcpCommand(env.cwd, env.processEnv) : [],
     ...checkContextSource(env.cwd),
     ...checkGovernsList(env.cwd),
@@ -204,6 +205,11 @@ function checkRenamedSkills(cwd) {
   if (dirs === void 0 || contextIsGoverned(dirs.gitCommonDir)) return [];
   return checkFormerSkillNames(dirs.repoRoot);
 }
+function checkBuildSkillState(cwd) {
+  const dirs = findGitDirs(cwd ?? process.cwd());
+  if (dirs === void 0 || contextIsGoverned(dirs.gitCommonDir)) return [];
+  return checkBuildSkill(dirs.repoRoot);
+}
 function checkInstalledCli(home, cwd) {
   const name = "Installed CLI";
   const result = checkInstalledCliStaleness({ home, cwd });
@@ -773,7 +779,7 @@ function checkContextSource(cwd) {
   const governed = readSourceCache(gitCommonDir)?.status === "governed";
   if (!governed && delivery === void 0 && !degraded) return [];
   const checks = [];
-  const name = "Context source";
+  const name = "Control plane";
   if (delivery !== void 0 && existsSync(delivery.dir)) {
     checks.push({ name, status: degraded ? "warn" : "pass", detail: `control plane delivered at ${delivery.sha.slice(0, 7)}` });
   } else if (governed) {
@@ -786,7 +792,7 @@ function checkContextSource(cwd) {
   }
   if (degraded) {
     checks.push({
-      name: "Context source degradation",
+      name: "Control plane degradation",
       status: degraded.kind === "conflict" ? "fail" : "warn",
       detail: degraded.message,
       fix: contextDegradedFix(degraded.kind)
@@ -1169,7 +1175,7 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-CLSGABD5.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-7Q52COZ3.js');
   const configPath = defaultRunnerConfigPath();
   const checks = runDoctor({ runnerHost: hasRunnerBlock(configPath) });
   const credential = await credentialChecks();
@@ -1181,7 +1187,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-DHUM5DBB.js');
+    const { runnerHostChecks } = await import('./doctor-3SQGZVYP.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;
@@ -1216,7 +1222,7 @@ async function gatherDoctorChecks() {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-6UYAAXH7.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-4SEFIIW2.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-CZUIW2AF.js');
       const { dirname: dirname2 } = await import('path');
       return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
     })();

package/dist/{chunk-AMFWYESY.js → chunk-4NM3I3VV.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KIGSGZBB.js';
 import { readlinkSync, realpathSync, mkdirSync, unlinkSync, symlinkSync, renameSync, readFileSync, writeFileSync, rmSync, existsSync, readdirSync } from 'fs';
 import { join, basename, sep, resolve } from 'path';
 

package/dist/{chunk-PIZRPNKR.js → chunk-4QKLMNI3.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-7YP7T6GV.js';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-LW7G5TJB.js';
-import { MIN_ENGINE_MAJOR } from './chunk-3ZR7Y23Y.js';
-import { runnerCredentialProblem } from './chunk-P53VEAOF.js';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-7V7KG3YM.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-EXV37PKS.js';
+import { MIN_ENGINE_MAJOR } from './chunk-VX74ND77.js';
+import { runnerCredentialProblem } from './chunk-2CMJLYV6.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-KIGSGZBB.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-NNLA7LLQ.js → chunk-5OCIHFGE.js}

@@ -8,8 +8,10 @@ import { fileURLToPath } from 'url';
 
 createRequire(import.meta.url);
 var TEMPLATE_SKILLS = ["spec", "writing-specs", "writing-tests", "build"];
-var MAINTAINED_SKILLS = ["outerlayer-evidence", "outerlayer-amend", "outerlayer-findings", "outerlayer-cli"];
-var TEMPLATE_CLASS_LINE = "<!-- yours to edit. Copied once from the default template by outerlayer init; never overwritten. -->";
+var MAINTAINED_SKILLS = ["outerlayer-evidence", "outerlayer-amend", "outerlayer-findings", "outerlayer-cli", "outerlayer-build"];
+function templateClassLine(version) {
+  return `<!-- yours to edit. Copied once from the default template by outerlayer init ${version}; never overwritten. -->`;
+}
 function maintainedClassLine(version) {
   return `<!-- maintained by OuterLayer ${version}. Edits are overwritten on the next outerlayer context emit. -->`;
 }
@@ -20,7 +22,7 @@ function skillDir(skill) {
   return `.outerlayer/skills/${skill}`;
 }
 function renderSkillFile(skillClass, content, version) {
-  const line = skillClass === "maintained" ? maintainedClassLine(version) : TEMPLATE_CLASS_LINE;
+  const line = skillClass === "maintained" ? maintainedClassLine(version) : templateClassLine(version);
   const { frontmatterInner, body } = splitRawFile(content);
   if (frontmatterInner === null) return `${line}
 ${content}`;
@@ -77,7 +79,29 @@ function writeMaintainedFiles(repoRoot, files) {
   return { created, rewritten };
 }
 function maintainedFilesForExistingSkills(repoRoot, files) {
-  return files.filter((file) => existsSync(join(repoRoot, skillDir(file.skill))) || formerNameExists(repoRoot, file.skill));
+  return files.filter(
+    (file) => existsSync(join(repoRoot, skillDir(file.skill))) || formerNameExists(repoRoot, file.skill) || requiredByBuild(repoRoot, file.skill)
+  );
+}
+function namesCore(text) {
+  return text.includes("outerlayer-build");
+}
+function requiredByBuild(repoRoot, skill) {
+  if (skill !== "outerlayer-build") return false;
+  const named = (file) => {
+    try {
+      return namesCore(readFileSync(file, "utf8"));
+    } catch {
+      return false;
+    }
+  };
+  if (named(join(repoRoot, skillDir("build"), "SKILL.md"))) return true;
+  const dir = join(repoRoot, ".outerlayer", "validators");
+  try {
+    return readdirSync(dir).some((name) => name.endsWith(".yaml") && named(join(dir, name)));
+  } catch {
+    return false;
+  }
 }
 var FORMER_MAINTAINED_NAMES = {
   amend: "outerlayer-amend",
@@ -97,4 +121,4 @@ function formerNameExists(repoRoot, skill) {
   return Object.entries(FORMER_MAINTAINED_NAMES).some(([former, current]) => current === skill && isMaintainedCopy(repoRoot, former));
 }
 
-export { FORMER_MAINTAINED_NAMES, MAINTAINED_SKILLS, TEMPLATE_SKILLS, isMaintainedCopy, loadMaintainedFiles, loadTemplateFiles, maintainedFilesForExistingSkills, resolvePackRoot, skillDir, writeMaintainedFiles };
+export { FORMER_MAINTAINED_NAMES, MAINTAINED_SKILLS, TEMPLATE_SKILLS, isMaintainedCopy, loadMaintainedFiles, loadTemplateFiles, maintainedFilesForExistingSkills, namesCore, resolvePackRoot, skillDir, writeMaintainedFiles };

package/dist/{chunk-PSN33ERW.js → chunk-6IO62VJS.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
+import { CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
-import { CONTROL_PLANE_DIR_VARIABLE } from './chunk-G2YNJIGF.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { deadHooksState, huskyPrepareScript, preparePackageManagerCommand } from './chunk-TUSYOL2O.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -624,11 +624,11 @@ async function missingControlPlane(cwd, sessionId, home, env) {
   const dirs = findGitDirs(cwd);
   if (dirs === void 0) return void 0;
   if (existsSync(join(dirs.gitCommonDir, "outerlayer", "materialized.json")) || hasExcludeBlock(dirs.gitCommonDir)) {
-    const { cleanupEarlierCopies } = await import('./context-cleanup-CHEWNYU6.js');
+    const { cleanupEarlierCopies } = await import('./context-cleanup-DSA3HGQU.js');
     cleanupEarlierCopies(dirs);
   }
   if (!contextPossiblyGoverned(cwd, home)) return void 0;
-  const { governanceOf } = await import('./control-plane-launch-34LNRJWR.js');
+  const { governanceOf } = await import('./control-plane-launch-SZTE4TUS.js');
   if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
   recordMissingContext(dirs, sessionId, home);
   const launcher = `${cliInvocation()} claude`;

package/dist/{chunk-7YP7T6GV.js → chunk-7V7KG3YM.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { DEFAULT_UNIT_NAME } from './chunk-QEFKA2QD.js';
+import { DEFAULT_UNIT_NAME } from './chunk-I66MQDXH.js';
 import { parseRunnerEnv } from './chunk-6MZSX4M7.js';
-import { RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
+import { RUNNER_FILE_MODE } from './chunk-KIGSGZBB.js';
 import { existsSync, readFileSync, writeFileSync, renameSync, rmSync } from 'fs';
 import { join, dirname } from 'path';