@outerlayer/cli 0.22.1 → 0.22.2

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @outerlayer/cli
 
+## 0.22.2
+
+### Patch Changes
+
+- c523c60: The `outerlayer-build` skill tells its agents to wait for a command that runs past the shell's timeout. A build no longer reports a mutation run as over budget while that run is still going.
+- 2d1bbb2: The CLI names itself and its version in the `User-Agent` of every request it sends to OuterLayer, as `outerlayer-cli/<version>`.
+- 3eae44d: `outerlayer init` keeps every other key of a hook it wraps, such as `timeout`. `outerlayer hooks unwrap` gives the hook back as you wrote it. A hook that runs no command, such as a `prompt` hook, stays as you wrote it. Before, such a hook stopped `init` before the agent setup and doctor steps. A second `init` says again to commit and push `.outerlayer/` while its files are not committed.
+- 750d20b: The amend and build skills merge the base branch into a pull request that has a merge conflict. They no longer rebase it.
+- 641eb3c: In a microVM build, containers and `docker build` steps reach public hosts through the runner's tunnel, under the same `allowHosts` list.
+
 ## 0.22.1
 
 ### Patch Changes

package/README.md

@@ -221,7 +221,10 @@ content:
   helper from github.com, and checks each against a sha256 pinned in the CLI;
   the requests send nothing about the host. The build reaches the network only
   through the same tunnel a container build uses, which the runner serves on
-  Unix sockets and the guest reaches over vsock. The guest's exec agent accepts
+  Unix sockets and the guest reaches over vsock. In a build with Docker, the
+  guest forwards the proxy connections of containers and `docker build` steps
+  from `172.17.0.1:3128` to that tunnel, so the same refusals apply to them.
+  The guest's exec agent accepts
   connections from the host only, and the runner runs every step of the build
   through it, including the build's command (`outerlayer vm-exec` on the host).
 - **`outerlayer runner start` with `builtin:container` hooks** runs each

package/dist/{agent-setup-LTSLXPS3.js → agent-setup-KXPDPTAJ.js}

@@ -1,11 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-O6RJ3QMU.js';
+export { keepHandWritten, runAgentSetup } from './chunk-4OYKJJ2V.js';
 import './chunk-XCRZTXRL.js';
-import './chunk-6YBLN4TR.js';
+import './chunk-SNVXHNU7.js';
 import './chunk-USWVXQIH.js';
-import './chunk-QF7WZUU6.js';
-import './chunk-NTRCK4NH.js';
+import './chunk-QS43O4DR.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-DIB2WLBL.js';

package/dist/bridge-QFN3KJP6.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-WXJXHZVB.js';
+import './chunk-URWYRAIC.js';
+import './chunk-GISNHSYL.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-14T20:11:05.380Z+7c03e06","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-15T01:34:44.161Z+28a91ce","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{check-UYKEMQNR.js → check-N6WLZCER.js}

@@ -1,38 +1,39 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-7FEY33MY.js';
-import './chunk-FOCML5FI.js';
+import { probeCredentials } from './chunk-2CPOAPU4.js';
+import './chunk-KOIMUHIS.js';
+import './chunk-UF5L4BAI.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-I2UOAV7X.js';
 import './chunk-YETTWTAY.js';
 import './chunk-TPKYTORP.js';
 import './chunk-CQAEV3Z5.js';
-import './chunk-UF5L4BAI.js';
-import './chunk-BOMRFYTZ.js';
-import './chunk-JZGFDTNC.js';
-import './chunk-URAKVDSI.js';
-import './chunk-56X5TOJY.js';
+import './chunk-4542B3RR.js';
+import './chunk-SFHR45FA.js';
+import './chunk-WXJXHZVB.js';
+import './chunk-U6RKHNC7.js';
+import './chunk-JD6GWYY7.js';
 import './chunk-ESVW4MJY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-ENTHEUKT.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-IPS2JCHK.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-276D7BJ7.js';
 import './chunk-TBT347UY.js';
-import './chunk-ZPSLJFGL.js';
+import './chunk-ZCXP35T3.js';
 import './chunk-4AVDD7VX.js';
 import './chunk-OBCFK4QD.js';
 import { parseRunnerEnv } from './chunk-6MZSX4M7.js';
-import './chunk-FRNYCJ4W.js';
-import './chunk-5NJIWKD4.js';
+import './chunk-FVDVC2GF.js';
+import './chunk-WKSBSEWT.js';
 import './chunk-3AZYLAJC.js';
 import './chunk-OGFGZQA3.js';
 import './chunk-XR56WEA5.js';
 import './chunk-3W333NFO.js';
 import './chunk-NYTZ7HVN.js';
 import './chunk-2Q3PZ42G.js';
-import './chunk-CUFFDEF3.js';
-import './chunk-BET347JZ.js';
-import './chunk-QOALB6ZD.js';
-import './chunk-JRCSET55.js';
+import './chunk-IMCVQF5F.js';
+import './chunk-FQE5RDHI.js';
+import './chunk-B42BIYC6.js';
+import './chunk-EMUNEAQK.js';
 import './chunk-G3IJ3N6F.js';
 import './chunk-EAQSOE62.js';
 import './chunk-F35VMF5M.js';
@@ -41,13 +42,12 @@ import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
 import './chunk-XACXXKQ5.js';
 import './chunk-JBJTC3UU.js';
-import './chunk-6YBLN4TR.js';
+import './chunk-SNVXHNU7.js';
 import './chunk-USWVXQIH.js';
-import './chunk-QF7WZUU6.js';
-import './chunk-NTRCK4NH.js';
-import './chunk-QC72I5GQ.js';
+import './chunk-QS43O4DR.js';
+import './chunk-HWZCE745.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-F7CU5ABH.js';
+import './chunk-DYEFPYME.js';
 import './chunk-BKO6JEZI.js';
 import './chunk-ZNPE7FW5.js';
 import './chunk-HCVLP7XA.js';
@@ -59,7 +59,7 @@ import './chunk-ANPNT6PM.js';
 import './chunk-T2Q7ISPE.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-CRB3POP4.js';
-import './chunk-5QRP3MVS.js';
+import './chunk-GNPTU4BM.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
 import './chunk-WFSUUUAN.js';

package/dist/{chunk-7FEY33MY.js → chunk-2CPOAPU4.js}

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, commandLogOffset, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, ALREADY_RELEASED } from './chunk-FOCML5FI.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, microVmCommandLine, runCommand, commandLogOffset, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, ALREADY_RELEASED } from './chunk-KOIMUHIS.js';
+import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-UF5L4BAI.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { compareVersions, satisfiesRange } from './chunk-I2UOAV7X.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-YETTWTAY.js';
 import { RUNNER_PROTOCOL } from './chunk-TPKYTORP.js';
 import { writePendingUpdate } from './chunk-CQAEV3Z5.js';
-import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-UF5L4BAI.js';
-import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-ENTHEUKT.js';
+import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-IPS2JCHK.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, cleanVersions, isInLayout, stagingDir } from './chunk-276D7BJ7.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
 import { checkFit } from './chunk-OBCFK4QD.js';
-import { LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, measureDisk, setUpRunnerCgroup, createContainerRuntime, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied } from './chunk-5NJIWKD4.js';
+import { LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, measureDisk, setUpRunnerCgroup, createContainerRuntime, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied } from './chunk-WKSBSEWT.js';
 import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-XR56WEA5.js';
-import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-CUFFDEF3.js';
-import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-BET347JZ.js';
+import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-IMCVQF5F.js';
+import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-FQE5RDHI.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-V5CG75NX.js';
 import { exceedsDisk } from './chunk-7RQ73DLO.js';
 import { claimPidFile, readPidFile, releasePidFile } from './chunk-XACXXKQ5.js';
@@ -1552,7 +1552,7 @@ var CLAIM_REFUSAL_CODES = new Set(
   "pull_request_from_fork pull_request_on_default_branch pull_request_ambiguous pull_request_repository_not_connected repository_not_reachable branch_claimed_elsewhere".split(" ")
 );
 async function tryClaimAndStart(state, item, queue) {
-  const { postJson: postJson2 } = await import('./work-cmd-KWHAYUYB.js');
+  const { postJson: postJson2 } = await import('./work-cmd-SM6DY2WK.js');
   const log = logOf(state);
   const hostKey = await loadHostKey(state.config.configPath);
   const claim = await retrySend(
@@ -2521,7 +2521,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-UYKEMQNR.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-N6WLZCER.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });

package/dist/{chunk-BOMRFYTZ.js → chunk-4542B3RR.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-URAKVDSI.js';
-import { spoolDir } from './chunk-QC72I5GQ.js';
+import { LiveUploader } from './chunk-U6RKHNC7.js';
+import { spoolDir } from './chunk-HWZCE745.js';
 import { CaptureDaemon } from './chunk-AEKSX4EY.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-O6RJ3QMU.js → chunk-4OYKJJ2V.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { runEmit } from './chunk-XCRZTXRL.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-6YBLN4TR.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-SNVXHNU7.js';
 import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-DIB2WLBL.js';
 import { installStarterPack } from './chunk-V7SAQ645.js';
 import { loadTemplateFiles, loadMaintainedFiles, skillDir } from './chunk-5OCIHFGE.js';

package/dist/{chunk-QOALB6ZD.js → chunk-B42BIYC6.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-JRCSET55.js';
-import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-EMUNEAQK.js';
+import { resolveGatewayCredentials } from './chunk-QS43O4DR.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-3V5C64Y5.js → chunk-BVR6MQLS.js}

@@ -1,8 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect, detectActiveSession } from './chunk-QOALB6ZD.js';
-import { defaultFetch } from './chunk-QF7WZUU6.js';
-import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
+import { autoConnect, detectActiveSession } from './chunk-B42BIYC6.js';
+import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-QS43O4DR.js';
 import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-IZSVXRDR.js → chunk-DXDF43YG.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { recordReportedCost } from './chunk-BKO6JEZI.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { decodeWrappedCommand } from './chunk-5QRP3MVS.js';
+import { decodeWrappedCommand } from './chunk-GNPTU4BM.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { readFileSync } from 'fs';
 import { spawn } from 'child_process';

package/dist/{chunk-F7CU5ABH.js → chunk-DYEFPYME.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { decodeWrappedCommand } from './chunk-5QRP3MVS.js';
+import { decodeWrappedCommand } from './chunk-GNPTU4BM.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { readFileSync, mkdirSync, appendFileSync, writeFileSync } from 'fs';
 import { spawn } from 'child_process';

package/dist/{chunk-JRCSET55.js → chunk-EMUNEAQK.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
 import { DEFAULT_DASHBOARD } from './chunk-EAQSOE62.js';
-import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-QS43O4DR.js';
 import { writeRepoConnection, findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { remoteLookupFailed } from './chunk-AEKSX4EY.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
@@ -89,7 +89,7 @@ function result(code, outcome, reason, text) {
 ` };
 }
 function realConnectDeps() {
-  return { fetchImpl: fetch, env: process.env, prompt: promptOnTerminal, now: () => /* @__PURE__ */ new Date() };
+  return { fetchImpl: cliFetch, env: process.env, prompt: promptOnTerminal, now: () => /* @__PURE__ */ new Date() };
 }
 async function promptOnTerminal(question, io = { input: process.stdin, output: process.stderr }) {
   const rl = createInterface(io);
@@ -315,4 +315,4 @@ ${COMMIT_LINE}
   return r.code;
 }
 
-export { COMMIT_LINE, autoConnectedLine, dashboardBase, fetchFactories, isLinkedRepository, listText, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory, slug, workPageUrl };
+export { COMMIT_LINE, autoConnectedLine, dashboardBase, fetchFactories, hasUncommittedPolicy, isLinkedRepository, listText, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory, slug, workPageUrl };

package/dist/{chunk-BET347JZ.js → chunk-FQE5RDHI.js}

@@ -1,10 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectActiveSession, autoConnect } from './chunk-QOALB6ZD.js';
-import { workPageUrl } from './chunk-JRCSET55.js';
+import { detectActiveSession, autoConnect } from './chunk-B42BIYC6.js';
+import { workPageUrl } from './chunk-EMUNEAQK.js';
 import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
-import { defaultFetch } from './chunk-QF7WZUU6.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
+import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-QS43O4DR.js';
 import { readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
 import { C } from './chunk-ANPNT6PM.js';
@@ -428,7 +427,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-O3UUN6SO.js');
+      const { logHookError } = await import('./hook-fast-QUGEI2IT.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }

package/dist/{chunk-FRNYCJ4W.js → chunk-FVDVC2GF.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-5NJIWKD4.js';
+import { MIN_ENGINE_MAJOR } from './chunk-WKSBSEWT.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-3W333NFO.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';

package/dist/{chunk-5QRP3MVS.js → chunk-GNPTU4BM.js}

@@ -220,13 +220,16 @@ function encodeWrappedCommand(command) {
 function decodeWrappedCommand(id) {
   return Buffer.from(id, "base64").toString("utf8");
 }
+function runsCommand(h) {
+  return typeof h.command === "string";
+}
 function listHookCandidates(settings, cliBin) {
   const out = [];
   const hooks = settings?.hooks ?? {};
   for (const event of Object.keys(hooks)) {
     (hooks[event] ?? []).forEach((matcher, matcherIndex) => {
       matcher.hooks.forEach((h, hookIndex) => {
-        if (isOurHookCommandFor(h, cliBin)) return;
+        if (!runsCommand(h) || isOurHookCommandFor(h, cliBin)) return;
         const original = wrappedOriginalCommand(h, cliBin);
         out.push({
           event,
@@ -245,12 +248,14 @@ function wrapHookCommand(cliBin, h, opts = {}) {
   if (isWrapped(h, cliBin)) return h;
   const id = encodeWrappedCommand(h.command);
   const flag = opts.captureOutput ? " --capture-output" : "";
-  return { type: "command", command: `${cliCommand(cliBin)} hook-wrap --id ${id}${flag}`, [WRAP_MARKER]: h.command };
+  return { ...h, command: `${cliCommand(cliBin)} hook-wrap --id ${id}${flag}`, [WRAP_MARKER]: h.command };
 }
 function unwrapHookCommand(h, cliBin) {
   const original = wrappedOriginalCommand(h, cliBin);
   if (original === null) return h;
-  return { type: "command", command: original };
+  const restored = { ...h, command: original };
+  delete restored[WRAP_MARKER];
+  return restored;
 }
 var AUTO_WRAP_EVENTS = ["PreToolUse", "PostToolUse"];
 function wrapHooks(settings, cliBin, opts = {}) {
@@ -268,7 +273,7 @@ function wrapHooks(settings, cliBin, opts = {}) {
       const matcher = matchers[mi];
       for (let hi = 0; hi < matcher.hooks.length; hi++) {
         const h = matcher.hooks[hi];
-        if (isOurHookCommandFor(h, cliBin) || isWrapped(h, cliBin)) continue;
+        if (!runsCommand(h) || isOurHookCommandFor(h, cliBin) || isWrapped(h, cliBin)) continue;
         const candidate = {
           event,
           matcherIndex: mi,

package/dist/{chunk-QC72I5GQ.js → chunk-HWZCE745.js}

@@ -429,7 +429,7 @@ async function handleWorkLaunch(sessionId, home, env, spawnImpl = spawnDetached,
 }
 async function missingRenewalHookContext(home, cwd) {
   try {
-    const { settingsPath, readSettings, isOurHookCommand } = await import('./settings-J2652U5N.js');
+    const { settingsPath, readSettings, isOurHookCommand } = await import('./settings-AKYEOCC2.js');
     const userSettings = readSettings(settingsPath("user", { home }));
     const projectSettings = readSettings(settingsPath("project", { cwd }));
     if (userSettings === null && projectSettings === null) return void 0;
@@ -628,7 +628,7 @@ async function missingControlPlane(cwd, sessionId, home, env) {
     cleanupEarlierCopies(dirs);
   }
   if (!contextPossiblyGoverned(cwd, home)) return void 0;
-  const { governanceOf } = await import('./control-plane-launch-OWSNH6YA.js');
+  const { governanceOf } = await import('./control-plane-launch-HE6OSWKO.js');
   if (await governanceOf({ cwd, env, home }) !== "governed") return void 0;
   recordMissingContext(dirs, sessionId, home);
   const launcher = `${cliInvocation()} claude`;

package/dist/{chunk-CUFFDEF3.js → chunk-IMCVQF5F.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { WorkCommandError, postJson } from './chunk-BET347JZ.js';
-import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-6YBLN4TR.js';
-import { signingFetchFor } from './chunk-QF7WZUU6.js';
+import { WorkCommandError, postJson } from './chunk-FQE5RDHI.js';
+import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-SNVXHNU7.js';
+import { signingFetchFor } from './chunk-QS43O4DR.js';
 import { unsupportedLayout, layoutRefusalReason, composeDelivery } from './chunk-ZNPE7FW5.js';
 import { SHIM_SCRIPT, GOVERNANCE_VARIABLE } from './chunk-HCVLP7XA.js';
 import { readDegraded, readContextManifest, readSourceCache } from './chunk-YQR6E6OV.js';

package/dist/{chunk-ENTHEUKT.js → chunk-IPS2JCHK.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-ZPSLJFGL.js';
-import { describeCallFailure } from './chunk-CUFFDEF3.js';
-import { WorkCommandError, getJson } from './chunk-BET347JZ.js';
+import { isPlaceholderCommand } from './chunk-ZCXP35T3.js';
+import { describeCallFailure } from './chunk-IMCVQF5F.js';
+import { WorkCommandError, getJson } from './chunk-FQE5RDHI.js';
 import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
 import { builtinKind } from './chunk-V5CG75NX.js';
 import { signerFor } from './chunk-OW52QLK3.js';

package/dist/{chunk-56X5TOJY.js → chunk-JD6GWYY7.js}

@@ -1,10 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-QOALB6ZD.js';
+import { autoConnect, detectActiveSession } from './chunk-B42BIYC6.js';
 import { acquireSpoolLockAt } from './chunk-G3IJ3N6F.js';
-import { defaultFetch } from './chunk-QF7WZUU6.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-QS43O4DR.js';
 import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-FOCML5FI.js → chunk-KOIMUHIS.js}

@@ -1,16 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { senderPidfile } from './chunk-BOMRFYTZ.js';
-import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-JZGFDTNC.js';
-import { installScrubContext } from './chunk-URAKVDSI.js';
-import { ADDED_USER, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, shellQuote, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, GH_CONFIG_YML, ghHostsYml, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-5NJIWKD4.js';
+import { senderPidfile } from './chunk-4542B3RR.js';
+import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-SFHR45FA.js';
+import { writeDockerClientConfig } from './chunk-WXJXHZVB.js';
+import { installScrubContext } from './chunk-U6RKHNC7.js';
+import { ADDED_USER, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, shellQuote, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, GH_CONFIG_YML, ghHostsYml, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-WKSBSEWT.js';
 import { readBranchHead, fetchCommit, diffBetween } from './chunk-3AZYLAJC.js';
 import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, COMMAND_DIR, childEnvironment, judgeCommand, JUDGE_MAX_TURNS, MAX_REPORT_BYTES, JUDGE_DIR } from './chunk-XR56WEA5.js';
 import { CLAUDE_CODE_VERSION } from './chunk-3W333NFO.js';
 import { waitForAgent, vmExecArgs } from './chunk-NYTZ7HVN.js';
 import { socketPathProblem, vsockLinks, linkVsockSockets } from './chunk-2Q3PZ42G.js';
-import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, formatDuration, retrySend, formatClock } from './chunk-CUFFDEF3.js';
-import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-BET347JZ.js';
+import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, formatDuration, retrySend, formatClock } from './chunk-IMCVQF5F.js';
+import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-FQE5RDHI.js';
 import { planArtifactUpload } from './chunk-G3IJ3N6F.js';
 import { isBuiltinContainer, isBuiltinProcess, isBuiltinVm, DEFAULT_CHECK_TIME_LIMIT_MINUTES } from './chunk-V5CG75NX.js';
 import { parseSize } from './chunk-7RQ73DLO.js';
@@ -413,7 +414,7 @@ async function waitForDocker(runtime, state, agentUser, now) {
       if (firstLine(granted.stderr) !== "") lastError = `giving the agent's group the Docker socket failed: ${firstLine(granted.stderr)}`;
     } else {
       const answered = await runtime.vm.exec(state.vsockPath, request);
-      if (answered.status === 0) return void 0;
+      if (answered.status === 0) return writeDockerClientConfig(asRoot.bind(null, runtime, state), agentUser);
       lastError = firstLine(answered.stderr) === "" ? "" : `docker info said: ${firstLine(answered.stderr)}`;
     }
     if (now().getTime() >= deadline) break;

package/dist/chunk-QS43O4DR.js

@@ -0,0 +1,113 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
+import { readCloudConfig, cloudConfigPath } from './chunk-EABW6AJQ.js';
+import { cliInvocation } from './chunk-CRB3POP4.js';
+import { homeFromEnv } from './chunk-VNVZDWO3.js';
+import { resolvePackageVersion } from './chunk-RA3O54FC.js';
+import { signRunnerRequest, signerFor } from './chunk-OW52QLK3.js';
+
+createRequire(import.meta.url);
+
+// src/credentials.ts
+var MISSING_HELP = `Run \`${cliInvocation()} login\` to sign in, or set OUTERLAYER_URL / OUTERLAYER_API_KEY / OUTERLAYER_APP_ID. Mint a key in the dashboard: Settings \u2192 API keys.`;
+var NO_FACTORY_MESSAGE = `you are logged in, but no factory is chosen for this repository. Run \`${cliInvocation()} connect\` to choose one, or pass --app-id / set OUTERLAYER_APP_ID.`;
+var NO_FACTORY_OUTSIDE_REPOSITORY_MESSAGE = "you are logged in, but this directory is not in a git repository, so no factory is chosen. Pass --app-id / set OUTERLAYER_APP_ID, or run this from inside a connected repository.";
+var LOGIN_TOKEN_PREFIX = "olu_";
+function unauthorizedMessage(credential) {
+  return credential.startsWith(LOGIN_TOKEN_PREFIX) ? `not authorized \u2014 the login is expired or was revoked. Run \`${cliInvocation()} login\` to sign in again.` : "not authorized \u2014 the API key is unknown, expired, or bound to a different factory. Mint a fresh key: dashboard \u2192 Settings \u2192 API keys.";
+}
+function resolveGatewayCredentials(sources = {}) {
+  const env = sources.env ?? process.env;
+  const config = readCloudConfig(sources.home ?? homeFromEnv(env));
+  const url = sources.url ?? env.OUTERLAYER_URL ?? config.url;
+  const key = sources.apiKey ?? (env.OUTERLAYER_API_KEY || void 0) ?? config.apiKey;
+  const kind = key ? "key" : "login";
+  const credential = key ?? config.accountToken;
+  const cwd = sources.cwd ?? process.cwd();
+  const appId = sources.appId ?? (env.OUTERLAYER_APP_ID || void 0) ?? (kind === "key" ? config.appId : readRepoConnection(cwd)?.appId);
+  if (credential && url && !appId && kind === "login") {
+    const message = findGitDirs(cwd) === void 0 ? NO_FACTORY_OUTSIDE_REPOSITORY_MESSAGE : NO_FACTORY_MESSAGE;
+    return { ok: false, message, url, credential, appId, kind };
+  }
+  if (!url || !credential || !appId) {
+    const missing = [!url && "--url", !credential && "a login or OUTERLAYER_API_KEY", !appId && "--app-id"].filter(Boolean).join(", ");
+    return { ok: false, message: `missing ${missing}. ${MISSING_HELP}`, url, credential, appId, kind };
+  }
+  return { ok: true, url, credential, appId, kind };
+}
+
+// src/signing-fetch.ts
+function bodyBytes(body) {
+  if (body === void 0 || body === null) return new Uint8Array(0);
+  if (typeof body === "string") return new TextEncoder().encode(body);
+  if (body instanceof Uint8Array) return body;
+  if (body instanceof ArrayBuffer) return new Uint8Array(body);
+  return void 0;
+}
+async function savedKeySigner(headers, home) {
+  const authorization = headers.get("authorization");
+  if (authorization === null || !authorization.startsWith("Bearer ")) return void 0;
+  if (headers.has("signature")) return void 0;
+  if (readCloudConfig(home).apiKey !== authorization.slice("Bearer ".length)) return void 0;
+  try {
+    return await signerFor(cloudConfigPath(home));
+  } catch {
+    return void 0;
+  }
+}
+function signedBy(base, signerOf) {
+  return (async (input, init) => {
+    if (input instanceof Request) return base(input, init);
+    const headers = new Headers(init?.headers);
+    const signer = await signerOf(headers);
+    const body = bodyBytes(init?.body);
+    if (signer === void 0 || body === void 0) return base(input, init);
+    const signature = await signRunnerRequest({ method: init?.method ?? "GET", url: input.toString(), body, signer });
+    for (const [name, value] of Object.entries(signature)) headers.set(name, value);
+    return base(input, { ...init, headers });
+  });
+}
+function signingFetch(base, home = () => homeFromEnv()) {
+  return signedBy(base, (headers) => savedKeySigner(headers, home()));
+}
+function signingFetchFor(base, configPath, apiKey) {
+  return signedBy(base, async (headers) => {
+    const authorization = headers.get("authorization");
+    if (authorization !== `Bearer ${apiKey}` || headers.has("signature")) return void 0;
+    try {
+      return await signerFor(configPath);
+    } catch {
+      return void 0;
+    }
+  });
+}
+function cliUserAgent(version = resolvePackageVersion()) {
+  return `outerlayer-cli/${version}`;
+}
+function withHeader(headers, name, value) {
+  if (headers instanceof Headers) {
+    if (headers.has(name)) return headers;
+    const copy = new Headers(headers);
+    copy.set(name, value);
+    return copy;
+  }
+  if (Array.isArray(headers)) {
+    return headers.some(([key]) => key.toLowerCase() === name) ? headers : [...headers, [name, value]];
+  }
+  const record = headers ?? {};
+  return Object.keys(record).some((key) => key.toLowerCase() === name) ? record : { ...record, [name]: value };
+}
+function withCliUserAgent(base, userAgent = () => cliUserAgent()) {
+  return ((input, init) => {
+    if (input instanceof Request) return base(input, init);
+    return base(input, { ...init, headers: withHeader(init?.headers, "user-agent", userAgent()) });
+  });
+}
+function globalFetch(input, init) {
+  return globalThis.fetch(input, init);
+}
+var cliFetch = withCliUserAgent(globalFetch);
+var defaultFetch = signingFetch(cliFetch);
+
+export { cliFetch, defaultFetch, resolveGatewayCredentials, signingFetchFor, unauthorizedMessage };

package/dist/{chunk-ORNJJ7XN.js → chunk-QZX6DAAW.js}

@@ -1,20 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { checkStarterFiles, contextIsGoverned, checkBuildSkill } from './chunk-VSUXCMMH.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-BET347JZ.js';
-import { isLinkedRepository } from './chunk-JRCSET55.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-FQE5RDHI.js';
+import { isLinkedRepository } from './chunk-EMUNEAQK.js';
 import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
 import { checkFormerSkillNames } from './chunk-USWVXQIH.js';
-import { defaultFetch } from './chunk-QF7WZUU6.js';
-import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-QC72I5GQ.js';
-import { readStatuslineState, STATE_FRESH_MS } from './chunk-IZSVXRDR.js';
+import { resolveGatewayCredentials, defaultFetch } from './chunk-QS43O4DR.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-HWZCE745.js';
+import { readStatuslineState, STATE_FRESH_MS } from './chunk-DXDF43YG.js';
 import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
 import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-AEKSX4EY.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
+import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-GNPTU4BM.js';
 import { readDeliveryRecord, readDegraded, readSourceCache } from './chunk-YQR6E6OV.js';
 import { deadHooksState, preparePackageManagerCommand } from './chunk-TUSYOL2O.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -1187,7 +1186,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-FZTS57ZO.js');
+    const { runnerHostChecks } = await import('./doctor-BRN4BGMA.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;