@outerlayer/cli 0.20.0 → 0.22.1

package/dist/{chunk-HOKXGFDR.js → chunk-ORNJJ7XN.js}

@@ -1,20 +1,20 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { checkStarterFiles, contextIsGoverned } from './chunk-TWF3RICI.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-FBTGMSQF.js';
-import { isLinkedRepository } from './chunk-CG36IONK.js';
+import { checkStarterFiles, contextIsGoverned, checkBuildSkill } from './chunk-VSUXCMMH.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-BET347JZ.js';
+import { isLinkedRepository } from './chunk-JRCSET55.js';
 import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-PSN33ERW.js';
-import { readStatuslineState, STATE_FRESH_MS } from './chunk-DSF2FWAZ.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-QNLX477Q.js';
-import { C } from './chunk-ANPNT6PM.js';
-import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
-import { checkFormerSkillNames } from './chunk-7UWVLZXD.js';
-import { defaultFetch } from './chunk-FVMYKL6L.js';
+import { checkFormerSkillNames } from './chunk-USWVXQIH.js';
+import { defaultFetch } from './chunk-QF7WZUU6.js';
 import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-QC72I5GQ.js';
+import { readStatuslineState, STATE_FRESH_MS } from './chunk-IZSVXRDR.js';
+import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-G2YNJIGF.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-AEKSX4EY.js';
+import { C } from './chunk-ANPNT6PM.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
+import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
 import { readDeliveryRecord, readDegraded, readSourceCache } from './chunk-YQR6E6OV.js';
 import { deadHooksState, preparePackageManagerCommand } from './chunk-TUSYOL2O.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -192,6 +192,7 @@ function runDoctor(env = {}) {
     ...checkInstalls(env),
     ...starter?.checks ?? [],
     ...laptop ? checkRenamedSkills(env.cwd) : [],
+    ...checkBuildSkillState(env.cwd),
     ...starter !== void 0 && !starter.mcpOutdated ? checkMcpCommand(env.cwd, env.processEnv) : [],
     ...checkContextSource(env.cwd),
     ...checkGovernsList(env.cwd),
@@ -204,6 +205,11 @@ function checkRenamedSkills(cwd) {
   if (dirs === void 0 || contextIsGoverned(dirs.gitCommonDir)) return [];
   return checkFormerSkillNames(dirs.repoRoot);
 }
+function checkBuildSkillState(cwd) {
+  const dirs = findGitDirs(cwd ?? process.cwd());
+  if (dirs === void 0 || contextIsGoverned(dirs.gitCommonDir)) return [];
+  return checkBuildSkill(dirs.repoRoot);
+}
 function checkInstalledCli(home, cwd) {
   const name = "Installed CLI";
   const result = checkInstalledCliStaleness({ home, cwd });
@@ -773,7 +779,7 @@ function checkContextSource(cwd) {
   const governed = readSourceCache(gitCommonDir)?.status === "governed";
   if (!governed && delivery === void 0 && !degraded) return [];
   const checks = [];
-  const name = "Context source";
+  const name = "Control plane";
   if (delivery !== void 0 && existsSync(delivery.dir)) {
     checks.push({ name, status: degraded ? "warn" : "pass", detail: `control plane delivered at ${delivery.sha.slice(0, 7)}` });
   } else if (governed) {
@@ -786,7 +792,7 @@ function checkContextSource(cwd) {
   }
   if (degraded) {
     checks.push({
-      name: "Context source degradation",
+      name: "Control plane degradation",
       status: degraded.kind === "conflict" ? "fail" : "warn",
       detail: degraded.message,
       fix: contextDegradedFix(degraded.kind)
@@ -1169,7 +1175,7 @@ function doctorExitCode(checks) {
 
 // src/doctor-report.ts
 async function gatherDoctorChecks() {
-  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-CLSGABD5.js');
+  const { defaultRunnerConfigPath, hasRunnerBlock, loadRunnerConfig, runnerVmOf } = await import('./config-H4QS332G.js');
   const configPath = defaultRunnerConfigPath();
   const checks = runDoctor({ runnerHost: hasRunnerBlock(configPath) });
   const credential = await credentialChecks();
@@ -1181,7 +1187,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-DHUM5DBB.js');
+    const { runnerHostChecks } = await import('./doctor-FZTS57ZO.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;
@@ -1216,7 +1222,7 @@ async function gatherDoctorChecks() {
       const { existsSync: existsSync3 } = await import('fs');
       if (process.platform !== "linux" || !existsSync3("/run/systemd/system")) return void 0;
       const { inspectService, realInspectProbes } = await import('./inspect-6UYAAXH7.js');
-      const { DEFAULT_UNIT_NAME } = await import('./install-4SEFIIW2.js');
+      const { DEFAULT_UNIT_NAME } = await import('./install-SFACZU7E.js');
       const { dirname: dirname2 } = await import('path');
       return inspectService(DEFAULT_UNIT_NAME, dirname2(configPath), realInspectProbes());
     })();

package/dist/{chunk-M2ZWWTWZ.js → chunk-OW52QLK3.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
+import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
 import { generateKeyPairSync, createPrivateKey, createPublicKey, sign } from 'crypto';
 import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';
 

package/dist/{chunk-PSN33ERW.js → chunk-QC72I5GQ.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { appendContextProvenance } from './chunk-ZJSNLVCE.js';
+import { CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
-import { CONTROL_PLANE_DIR_VARIABLE } from './chunk-G2YNJIGF.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { deadHooksState, huskyPrepareScript, preparePackageManagerCommand } from './chunk-TUSYOL2O.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -624,11 +624,11 @@ async function missingControlPlane(cwd, sessionId, home, env) {
   const dirs = findGitDirs(cwd);
   if (dirs === void 0) return void 0;
   if (existsSync(join(dirs.gitCommonDir, "outerlayer", "materialized.json")) || hasExcludeBlock(dirs.gitCommonDir)) {
-    const { cleanupEarlierCopies } = await import('./context-cleanup-CHEWNYU6.js');
+    const { cleanupEarlierCopies } = await import('./context-cleanup-DSA3HGQU.js');
     cleanupEarlierCopies(dirs);
   }
   if (!contextPossiblyGoverned(cwd, home)) return void 0;
-  const { governanceOf } = await import('./control-plane-launch-34LNRJWR.js');
+  const { governanceOf } = await import('./control-plane-launch-OWSNH6YA.js');
   if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
   recordMissingContext(dirs, sessionId, home);
   const launcher = `${cliInvocation()} claude`;

package/dist/{chunk-FVMYKL6L.js → chunk-QF7WZUU6.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { readCloudConfig, cloudConfigPath } from './chunk-EABW6AJQ.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { signRunnerRequest, signerFor } from './chunk-M2ZWWTWZ.js';
+import { signRunnerRequest, signerFor } from './chunk-OW52QLK3.js';
 
 createRequire(import.meta.url);
 

package/dist/{chunk-IF2OSI5T.js → chunk-QOALB6ZD.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-CG36IONK.js';
-import { resolveRepoIdentity } from './chunk-QNLX477Q.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-JRCSET55.js';
 import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
+import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { openSync, fstatSync, readSync, closeSync } from 'fs';

package/dist/{chunk-ZX4I2MEK.js → chunk-TPKYTORP.js}

@@ -4,6 +4,6 @@ import { createRequire } from 'node:module';
 createRequire(import.meta.url);
 
 // src/runner/protocol.ts
-var RUNNER_PROTOCOL = 21;
+var RUNNER_PROTOCOL = 22;
 
 export { RUNNER_PROTOCOL };

package/dist/{chunk-S5PCA3SN.js → chunk-UF5L4BAI.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-R22NZSGA.js → chunk-URAKVDSI.js}

@@ -1,25 +1,25 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-KYS3TQAG.js';
+import { uploadSpooledSteps } from './chunk-56X5TOJY.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-G3IJ3N6F.js';
-import { writeSyncStatus, spoolDir } from './chunk-PSN33ERW.js';
-import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
-import { applyReportedCost } from './chunk-BKO6JEZI.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-QNLX477Q.js';
-import { C } from './chunk-ANPNT6PM.js';
-import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-T2Q7ISPE.js';
-import { defaultFetch } from './chunk-FVMYKL6L.js';
+import { defaultFetch } from './chunk-QF7WZUU6.js';
 import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
+import { writeSyncStatus, spoolDir } from './chunk-QC72I5GQ.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
+import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
+import { applyReportedCost } from './chunk-BKO6JEZI.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-AEKSX4EY.js';
 import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
+import { C } from './chunk-ANPNT6PM.js';
+import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-T2Q7ISPE.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { removeJournalHooks } from './chunk-TUSYOL2O.js';
 import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-7VUK5RFS.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { signerFor, signRunnerRequest } from './chunk-M2ZWWTWZ.js';
+import { signerFor, signRunnerRequest } from './chunk-OW52QLK3.js';
 import { dirname, basename, join } from 'path';
 import { statSync, readFileSync, readdirSync, mkdirSync, writeFileSync, renameSync, existsSync, rmSync } from 'fs';
 import { execFileSync } from 'child_process';

package/dist/{chunk-BQXFBI7T.js → chunk-URWYRAIC.js}

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
+import { TARGET_TUNNEL, TARGET_LEASE, destinationTarget } from './chunk-GISNHSYL.js';
 import { existsSync, unlinkSync, chmodSync } from 'fs';
 import { request as request$1, createServer } from 'http';
 import { request } from 'https';
@@ -293,15 +294,20 @@ async function startDestination(input) {
     for (const socket of sockets) socket.destroy();
     await Promise.all(listeners.map((listener) => new Promise((resolve) => listener.close(() => resolve()))));
   };
-  return { ...served, close };
+  return { ...served, acceptStream: (stream) => void server.emit("connection", stream), close };
 }
 async function startBuildServices(input) {
+  const streamed = input.serve === "stream";
   const tunnel = await input.startTunnel(join(input.buildDir, "tunnel.sock"), {
     ...input.tunnelOptions,
+    ...streamed ? { socket: false } : {},
     ...input.allowHosts === void 0 ? {} : { allowHosts: input.allowHosts },
     recordPath: join(input.jobDir, "tunnel.json")
   });
   const servers = [];
+  const targets = /* @__PURE__ */ new Map();
+  if (streamed) targets.set(TARGET_TUNNEL, (stream) => tunnel.acceptStream(stream));
+  if (streamed && input.lease !== void 0) targets.set(TARGET_LEASE, (stream) => input.lease.accept(stream));
   const closeAll = async () => {
     await Promise.all(servers.map((s) => s.close()));
     await tunnel.close();
@@ -314,30 +320,39 @@ async function startBuildServices(input) {
     for (const [index, destination] of input.destinations.entries()) {
       const server = await startDestination({
         destination,
-        ...input.serve === "tcp" ? {} : { socketPath: destinationSocketPath(input.buildDir, index) },
-        ...input.serve === "socket" ? {} : { port: input.ports?.destinations?.[index] ?? 0 },
+        ...input.serve === "tcp" || streamed ? {} : { socketPath: destinationSocketPath(input.buildDir, index) },
+        ...input.serve === "socket" || streamed ? {} : { port: input.ports?.destinations?.[index] ?? 0 },
         hostEnv: input.hostEnv,
         onUsed: (name) => tunnel.destinationUsed(name),
         ...input.destinationOptions
       });
       servers.push(server);
+      targets.set(destinationTarget(index), (stream) => server.acceptStream(stream));
       if (server.port !== void 0) destinationPorts.push(server.port);
     }
     const builtIns = input.builtIns === void 0 ? [] : builtInDestinations({ gatewayUrl: input.builtIns.gatewayUrl, itemKey: input.builtIns.itemKey, hostEnv: input.hostEnv, claudeUpstream: input.builtIns.claudeUpstream });
     for (const builtIn of builtIns) {
       const server = await startDestination({
         destination: builtIn.destination,
-        ...input.serve === "tcp" ? {} : { socketPath: join(input.buildDir, builtIn.socket) },
-        ...input.serve === "socket" ? {} : { port: input.ports?.builtIns?.[builtIn.destination.name] ?? 0 },
+        ...input.serve === "tcp" || streamed ? {} : { socketPath: join(input.buildDir, builtIn.socket) },
+        ...input.serve === "socket" || streamed ? {} : { port: input.ports?.builtIns?.[builtIn.destination.name] ?? 0 },
         hostEnv: builtIn.hostEnv,
         drop: builtIn.drop,
         onUsed: (name) => tunnel.destinationUsed(name),
         ...input.destinationOptions
       });
       servers.push(server);
+      targets.set(builtIn.destination.name, (stream) => server.acceptStream(stream));
       if (server.port !== void 0) builtInPorts[builtIn.destination.name] = server.port;
     }
-    return { ...tunnel, proxyPort, destinationPorts, builtInPorts, close: closeAll };
+    return { ...tunnel, streams: {
+      accept: (target, stream) => {
+        const serve = targets.get(target);
+        if (serve === void 0) return false;
+        serve(stream);
+        return true;
+      }
+    }, proxyPort, destinationPorts, builtInPorts, close: closeAll };
   } catch (err) {
     await closeAll();
     throw err;
@@ -413,6 +428,16 @@ function parseClaimedRepositories(value) {
   const at = primaryAt === -1 ? 0 : primaryAt;
   return [{ ...parsed[at], primary: true }, ...parsed.filter((_, index) => index !== at).map((entry) => ({ ...entry, primary: false }))];
 }
+function parseUnreachable(value) {
+  if (!Array.isArray(value)) return [];
+  const entries = [];
+  for (const entry of value) {
+    if (typeof entry !== "object" || entry === null) continue;
+    const { repository, reason } = entry;
+    if (typeof repository === "string" && repository !== "" && typeof reason === "string") entries.push({ repository, reason });
+  }
+  return entries;
+}
 function repositoriesOf(input) {
   if (input.repositories !== void 0 && input.repositories.length > 0) return input.repositories;
   if (input.repository === void 0 || input.repository === null || input.repository === "" || input.branch === void 0) return [];
@@ -620,4 +645,4 @@ function withTunnelRecord(environment, record, onlyWhenUsed = false) {
   };
 }
 
-export { AGENT_CREDENTIAL_MISSING, BUILD_HOME, BUILT_IN_NAMES, CHECKOUT_DIR, CLAUDE_CREDENTIAL_VARIABLES, CLAUDE_PORT, CLAUDE_SOCKET, DESTINATION_BASE_PORT, EVAL_INPUT_DIR, GATEWAY_PORT, GATEWAY_SOCKET, JOB_MOUNT, RELAY_PORT, authorEnvironment, buildEnvironment, builtInEnvironment, checkEnvironment, checkoutPath, claudeCredential, commitIdentityRecord, containerLocalAddress, destinationEnvironment, headerVariables, isRefusedInConfig, isReservedVariable, lifecycleWorkdir, parseClaimIdentity, parseClaimedRepositories, parseIsolation, primaryOf, proxyEnvironment, repositoriesOf, repositoryPath, resolveDestinations, sharedUserEnvironment, startBuildServices, tokenHeader, withGitConfig, withHooksPath, withProxyWarningHidden, withTokenHeader, withTunnelRecord };
+export { AGENT_CREDENTIAL_MISSING, BUILD_HOME, BUILT_IN_NAMES, CHECKOUT_DIR, CLAUDE_CREDENTIAL_VARIABLES, CLAUDE_PORT, CLAUDE_SOCKET, DESTINATION_BASE_PORT, EVAL_INPUT_DIR, GATEWAY_PORT, GATEWAY_SOCKET, JOB_MOUNT, PROXY_WARNING_FLAG, RELAY_PORT, authorEnvironment, buildEnvironment, builtInEnvironment, checkEnvironment, checkoutPath, claudeCredential, commitIdentityRecord, containerLocalAddress, destinationEnvironment, headerVariables, isRefusedInConfig, isReservedVariable, lifecycleWorkdir, parseClaimIdentity, parseClaimedRepositories, parseIsolation, parseUnreachable, primaryOf, proxyEnvironment, repositoriesOf, repositoryPath, resolveDestinations, sharedUserEnvironment, startBuildServices, tokenHeader, withGitConfig, withHooksPath, withProxyWarningHidden, withTokenHeader, withTunnelRecord };

package/dist/{chunk-7UWVLZXD.js → chunk-USWVXQIH.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-NNLA7LLQ.js';
+import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-5OCIHFGE.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { emitTree, ALL_TARGET_IDS, classifyTree } from './chunk-WFSUUUAN.js';
 import { readFileSync, existsSync, unlinkSync, rmdirSync, readdirSync } from 'fs';

package/dist/{chunk-P53VEAOF.js → chunk-V5CG75NX.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { MAX_ALLOW_HOSTS, allowHostProblem } from './chunk-UXYLWVTQ.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-BQXFBI7T.js';
+import { isRefusedInConfig, resolveDestinations, isReservedVariable } from './chunk-URWYRAIC.js';
 import { existsSync, statSync, accessSync, constants, readFileSync } from 'fs';
 import { hostname } from 'os';
 import { join } from 'path';

package/dist/{chunk-6X4SQ5MY.js → chunk-V7SAQ645.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
+import { resolvePackRoot, loadTemplateFiles, loadMaintainedFiles, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MAINTAINED_SKILLS } from './chunk-5OCIHFGE.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { resolvePackRoot, loadTemplateFiles, loadMaintainedFiles, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MAINTAINED_SKILLS } from './chunk-NNLA7LLQ.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { readFileSync, existsSync, mkdirSync, writeFileSync } from 'fs';

package/dist/{chunk-TWF3RICI.js → chunk-VSUXCMMH.js}

@@ -1,14 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { mcpTargetPath, INIT_STDIO_ENTRY, INIT_DOCS_ENTRY, DOCS_MCP_SERVER_NAME } from './chunk-YVZJ6GKF.js';
-import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-6X4SQ5MY.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import { resolvePackRoot, loadTemplateFiles, skillDir } from './chunk-NNLA7LLQ.js';
+import { mcpTargetPath, INIT_STDIO_ENTRY, INIT_DOCS_ENTRY, DOCS_MCP_SERVER_NAME } from './chunk-DIB2WLBL.js';
+import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-V7SAQ645.js';
+import { resolvePackRoot, skillDir, namesCore, loadTemplateFiles, TEMPLATE_SKILLS } from './chunk-5OCIHFGE.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
+import { hasSymlinkComponent } from './chunk-W3SWJ2TD.js';
 import { cloneIsGoverned } from './chunk-YQR6E6OV.js';
+import { emitTree, ALL_TARGET_IDS, classifyTree, splitRawFile } from './chunk-WFSUUUAN.js';
 import { createHash } from 'crypto';
 import { existsSync, readFileSync } from 'fs';
-import { join } from 'path';
+import { join, dirname } from 'path';
 
 createRequire(import.meta.url);
 var SHIPPED_MANIFEST = "shipped.json";
@@ -25,8 +27,9 @@ function currentStarterFiles(packRoot = resolvePackRoot(), policy = POLICY_CONTE
   });
   return [...templates, ...validators, { path: POLICY_PATH, content: policy }];
 }
+var TEMPLATE_VERSION = /(Copied once from the default template by outerlayer init) [^\s;]+(; never overwritten\.)/;
 function contentHash(content) {
-  return createHash("sha256").update(content.replace(/\r\n/g, "\n")).digest("hex");
+  return createHash("sha256").update(content.replace(/\r\n/g, "\n").replace(TEMPLATE_VERSION, "$1$2")).digest("hex");
 }
 function readShippedManifest(packRoot = resolvePackRoot()) {
   const path = join(packRoot, SHIPPED_MANIFEST);
@@ -95,13 +98,31 @@ function mcpItems(root) {
     return { ...base, state: "edited" };
   });
 }
+function retiredFiles(root, shipped, manifest) {
+  if (!manifest.ok) return [];
+  const current = new Set(shipped.map((f) => f.path));
+  const prefixes = TEMPLATE_SKILLS.map((skill) => `${skillDir(skill)}/`);
+  const retired = [];
+  for (const [path, hashes] of manifest.files) {
+    if (current.has(path) || !prefixes.some((prefix) => path.startsWith(prefix))) continue;
+    const abs = join(root, path);
+    if (!existsSync(abs) || hasSymlinkComponent(root, path)) continue;
+    try {
+      retired.push({ path, state: hashes.has(contentHash(readFileSync(abs, "utf8"))) ? "unedited" : "edited" });
+    } catch {
+    }
+  }
+  return retired.sort((a, b) => a.path.localeCompare(b.path));
+}
 function inspectStarterFiles(root, opts = {}) {
   const packRoot = opts.packRoot ?? resolvePackRoot();
   const manifest = readShippedManifest(packRoot);
-  const files = currentStarterFiles(packRoot).map(
-    (file) => ({ kind: "file", path: file.path, state: fileState(root, file, manifest), file })
-  );
-  return { items: [...files, ...mcpItems(root)], manifest: manifest.ok ? "ok" : manifest.problem };
+  const shipped = currentStarterFiles(packRoot);
+  const files = shipped.map((file) => ({ kind: "file", path: file.path, state: fileState(root, file, manifest), file }));
+  const buildEdited = files.some((f) => f.path === `${skillDir("build")}/SKILL.md` && f.state === "edited");
+  const buildPrefix = `${skillDir("build")}/`;
+  const retired = retiredFiles(root, shipped, manifest).filter((f) => !(buildEdited && f.path.startsWith(buildPrefix)));
+  return { items: [...files, ...mcpItems(root)], retired, manifest: manifest.ok ? "ok" : manifest.problem };
 }
 function itemLabel(item) {
   return item.kind === "file" ? item.path : `${item.path} "${item.server}" server`;
@@ -140,17 +161,19 @@ function checkStarterFiles(cwd, opts = {}) {
   const missing = by("missing");
   const edited = by("edited");
   const unreadable = by("unreadable");
+  const retired = report.retired.filter((f) => f.state === "unedited");
   const parts = [];
   if (current.length > 0) parts.push(`${current.length} current`);
   if (outdated.length > 0) parts.push(`outdated and unedited: ${shownPaths(outdated, report.items).join(", ")}`);
   if (missing.length > 0) parts.push(`missing: ${shownPaths(missing, report.items).join(", ")}`);
+  if (retired.length > 0) parts.push(`no longer shipped, unedited: ${retired.map((f) => f.path).join(", ")}`);
   if (edited.length > 0) parts.push(`edited by you, left as they are: ${edited.map(itemLabel).join(", ")}`);
   if (unreadable.length > 0) parts.push(`${unreadable[0].path} is not valid JSON, so its servers were not read`);
   if (report.manifest !== "ok") {
     parts.push(`this CLI's record of earlier versions is ${report.manifest}, so an outdated file cannot be told from an edited one`);
   }
   const mcpOutdated = outdated.some((i) => i.kind === "mcp" && i.server === "outerlayer");
-  const actionable = outdated.length + missing.length > 0;
+  const actionable = outdated.length + missing.length + retired.length > 0;
   const compare = edited.length > 0 ? ` Compare an edited file with this CLI's version: \`${UPDATE} --dry-run\`.` : "";
   if (!actionable && report.manifest === "ok") {
     return { checks: [{ name: NAME, status: "pass", detail: parts.join("; ") + (compare === "" ? "" : `.${compare}`) }], mcpOutdated };
@@ -158,5 +181,81 @@ function checkStarterFiles(cwd, opts = {}) {
   const fix = actionable ? `Run \`${UPDATE}\` to update the outdated files and write the missing ones. It never changes a file you edited.${compare}` : "Reinstall the CLI: `npm install -g @outerlayer/cli`, or run it with `npx -y @outerlayer/cli`.";
   return { checks: [{ name: NAME, status: "warn", detail: parts.join("; "), fix }], mcpOutdated };
 }
+var BUILD_PHASES = ["Intake", "Criteria", "Implement", "Review", "Pull request", "Evidence"];
+var CHANGES_HEADING = "## Changes for this repository";
+var NAME2 = "Build skill";
+function changeHeadings(text) {
+  const lines = text.split(/\r?\n/);
+  const start = lines.findIndex((line) => line.trim() === CHANGES_HEADING);
+  if (start === -1) return [];
+  const headings = [];
+  for (const line of lines.slice(start + 1)) {
+    if (/^## /.test(line)) break;
+    const match = /^### (.+?)\s*$/.exec(line);
+    if (match) headings.push(match[1]);
+  }
+  return headings;
+}
+function skillsFolders() {
+  const probe = `${skillDir("probe")}/SKILL.md`;
+  const compiled = emitTree({
+    entries: classifyTree([probe]).entries,
+    contents: /* @__PURE__ */ new Map([[probe, "---\nname: probe\ndescription: probe\n---\n"]]),
+    assetPaths: [],
+    targets: [...ALL_TARGET_IDS]
+  });
+  return [...new Set(compiled.files.map((file) => dirname(dirname(file.path))))].sort();
+}
+function shortBuild() {
+  const file = loadTemplateFiles().find((f) => f.path === `${skillDir("build")}/SKILL.md`);
+  if (file === void 0) return "";
+  return splitRawFile(file.content).body.split("\n").filter((line) => !line.startsWith("<!--")).join("\n").trim();
+}
+var read = (abs) => {
+  try {
+    return readFileSync(abs, "utf8");
+  } catch {
+    return void 0;
+  }
+};
+function checkBuildSkill(repoRoot) {
+  const folders = [".outerlayer/skills", ...skillsFolders()];
+  const source = `${folders[0]}/build/SKILL.md`;
+  const builds = (existsSync(join(repoRoot, source)) ? [source] : folders.slice(1).map((f) => `${f}/build/SKILL.md`)).map((path) => ({ path, text: read(join(repoRoot, path)) })).filter((b) => b.text !== void 0);
+  const checks = [];
+  const detached = builds.filter((b) => !namesCore(b.text));
+  if (detached.length > 0) {
+    checks.push({
+      name: NAME2,
+      status: "warn",
+      detail: `${detached.map((b) => b.path).join(", ")} does not name outerlayer-build, so it gets no updates from the core`,
+      fix: `Move to the short build, and put your own changes under the name of the phase each applies to:
+
+${shortBuild()}`
+    });
+  }
+  for (const build of builds.filter((b) => namesCore(b.text))) {
+    const unknown = changeHeadings(build.text).filter((heading) => !BUILD_PHASES.includes(heading));
+    if (unknown.length === 0) continue;
+    checks.push({
+      name: NAME2,
+      status: "warn",
+      detail: `${build.path} has ${unknown.map((h) => `"${h}"`).join(", ")} under "Changes for this repository", which matches no phase`,
+      fix: `Rename each heading to a phase: ${BUILD_PHASES.join(", ")}.`
+    });
+  }
+  const lacking = folders.filter(
+    (folder) => namesCore(read(join(repoRoot, folder, "build", "SKILL.md")) ?? "") && !existsSync(join(repoRoot, folder, "outerlayer-build", "SKILL.md"))
+  );
+  if (lacking.length > 0) {
+    checks.push({
+      name: NAME2,
+      status: "warn",
+      detail: `${lacking.join(", ")} holds build with no outerlayer-build beside it`,
+      fix: `Run \`${cliInvocation()} context emit\` to write outerlayer-build, then commit.`
+    });
+  }
+  return checks;
+}
 
-export { canonical, checkStarterFiles, contextIsGoverned, inspectStarterFiles };
+export { canonical, checkBuildSkill, checkStarterFiles, contentHash, contextIsGoverned, inspectStarterFiles, readShippedManifest, skillsFolders };

package/dist/{chunk-Z7K3L4FC.js → chunk-W3SWJ2TD.js}

@@ -4,7 +4,7 @@ import { readContextManifest, removeContextManifest } from './chunk-YQR6E6OV.js'
 import { removePreCommitGuardHook } from './chunk-TUSYOL2O.js';
 import { CONTEXT_PIN_FILENAME } from './chunk-WFSUUUAN.js';
 import { execFileSync } from 'child_process';
-import { existsSync, unlinkSync, lstatSync, readdirSync, rmdirSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
+import { lstatSync, existsSync, unlinkSync, readdirSync, rmdirSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname, isAbsolute } from 'path';
 
 createRequire(import.meta.url);
@@ -171,4 +171,4 @@ function cleanupEarlierCopies(input) {
   return result;
 }
 
-export { cleanupEarlierCopies };
+export { cleanupEarlierCopies, hasSymlinkComponent };

package/dist/{chunk-ECODQ7II.js → chunk-XACXXKQ5.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isSameProcess } from './chunk-JBJTC3UU.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-N2PXGQRL.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
 import { existsSync, readFileSync, rmSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-5VML45HH.js → chunk-XCRZTXRL.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
+import { retiredSkillPaths, removeRetiredSkills } from './chunk-USWVXQIH.js';
+import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-5OCIHFGE.js';
 import { C } from './chunk-ANPNT6PM.js';
-import { retiredSkillPaths, removeRetiredSkills } from './chunk-7UWVLZXD.js';
-import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-NNLA7LLQ.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { emitTree, parseOuterlayerConfig, classifyTree, generatedHeaderSource, CONTEXT_PIN_FILENAME, normalizePath } from './chunk-WFSUUUAN.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, copyFileSync, unlinkSync, rmdirSync, readdirSync } from 'fs';