@outerlayer/cli 0.22.1 → 0.23.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @outerlayer/cli
 
+## 0.23.0
+
+### Minor Changes
+
+- 9e49a10: `outerlayer init` keeps instructions in `AGENTS.md` and skills in `.agents/skills/`, with a `.claude/skills` link to `../.agents/skills`. Nothing generated is committed. `outerlayer init --update` moves an existing repository to this layout and removes the generated copies. It never deletes a file you edited. In a repository that uses only Claude Code or Codex, `outerlayer context emit` prints a notice that names `init --update`.
+
+### Patch Changes
+
+- 9810558: The build skill's criteria judge marks a criterion not satisfied when its test checks a stand-in for the outcome, such as the arguments a program starts with, or when the judge's own reason says part of the outcome is not asserted. The implementer and test-strength reviewer briefs say the same: a test proves a criterion only when it runs the code that produces the outcome.
+
+## 0.22.2
+
+### Patch Changes
+
+- c523c60: The `outerlayer-build` skill tells its agents to wait for a command that runs past the shell's timeout. A build no longer reports a mutation run as over budget while that run is still going.
+- 2d1bbb2: The CLI names itself and its version in the `User-Agent` of every request it sends to OuterLayer, as `outerlayer-cli/<version>`.
+- 3eae44d: `outerlayer init` keeps every other key of a hook it wraps, such as `timeout`. `outerlayer hooks unwrap` gives the hook back as you wrote it. A hook that runs no command, such as a `prompt` hook, stays as you wrote it. Before, such a hook stopped `init` before the agent setup and doctor steps. A second `init` says again to commit and push `.outerlayer/` while its files are not committed.
+- 750d20b: The amend and build skills merge the base branch into a pull request that has a merge conflict. They no longer rebase it.
+- 641eb3c: In a microVM build, containers and `docker build` steps reach public hosts through the runner's tunnel, under the same `allowHosts` list.
+
 ## 0.22.1
 
 ### Patch Changes

package/README.md

@@ -221,7 +221,10 @@ content:
   helper from github.com, and checks each against a sha256 pinned in the CLI;
   the requests send nothing about the host. The build reaches the network only
   through the same tunnel a container build uses, which the runner serves on
-  Unix sockets and the guest reaches over vsock. The guest's exec agent accepts
+  Unix sockets and the guest reaches over vsock. In a build with Docker, the
+  guest forwards the proxy connections of containers and `docker build` steps
+  from `172.17.0.1:3128` to that tunnel, so the same refusals apply to them.
+  The guest's exec agent accepts
   connections from the host only, and the runner runs every step of the build
   through it, including the build's command (`outerlayer vm-exec` on the host).
 - **`outerlayer runner start` with `builtin:container` hooks** runs each

package/dist/{agent-setup-LTSLXPS3.js → agent-setup-SNDCEHG2.js}

@@ -1,22 +1,24 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-O6RJ3QMU.js';
-import './chunk-XCRZTXRL.js';
-import './chunk-6YBLN4TR.js';
-import './chunk-USWVXQIH.js';
-import './chunk-QF7WZUU6.js';
-import './chunk-NTRCK4NH.js';
+export { keepHandWritten, runAgentSetup } from './chunk-ZKWKQIJU.js';
+import './chunk-WX2WEERU.js';
+import './chunk-VJBFQP3H.js';
+import './chunk-XGPC3IOR.js';
+import './chunk-MQ743JX3.js';
+import './chunk-QS43O4DR.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-DIB2WLBL.js';
-import './chunk-EABW6AJQ.js';
-import './chunk-V7SAQ645.js';
-import './chunk-5OCIHFGE.js';
+import './chunk-YVZJ6GKF.js';
 import './chunk-ANPNT6PM.js';
+import './chunk-EABW6AJQ.js';
+import './chunk-JKNYTNYD.js';
+import './chunk-HBISTTG3.js';
 import './chunk-CRB3POP4.js';
+import './chunk-VWFOKRYS.js';
 import './chunk-YQR6E6OV.js';
-import './chunk-WFSUUUAN.js';
-import './chunk-7VUK5RFS.js';
+import './chunk-TUSYOL2O.js';
+import './chunk-RKOTJQVG.js';
+import './chunk-QZBXLLTV.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-RA3O54FC.js';
 import './chunk-OW52QLK3.js';

package/dist/{artifact-link-cmd-OWRI5AJX.js → artifact-link-cmd-LEI6EOZE.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal, readEffectiveArtifactSpoolState } from './chunk-G3IJ3N6F.js';
+import { sanitizeTerminal, readEffectiveArtifactSpoolState } from './chunk-BUP5N3X6.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import './chunk-7VUK5RFS.js';
+import './chunk-QZBXLLTV.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/bridge-QFN3KJP6.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-WXJXHZVB.js';
+import './chunk-URWYRAIC.js';
+import './chunk-GISNHSYL.js';
+import './chunk-Z5GEFMRW.js';
+
+createRequire(import.meta.url);

package/dist/{build-6WRNZPVR.js → build-WHHFA7KM.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-3AZYLAJC.js';
-export { RecipeError } from './chunk-3W333NFO.js';
+export { buildRepositoryImage } from './chunk-QILR6TZP.js';
 import './chunk-XACXXKQ5.js';
 import './chunk-JBJTC3UU.js';
+export { RecipeError } from './chunk-3W333NFO.js';
 import './chunk-IHNQWF6F.js';
 import './chunk-URWYRAIC.js';
 import './chunk-GISNHSYL.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-14T20:11:05.380Z+7c03e06","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-15T02:32:03.730Z+264fcdb","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-G3MLDMTI.js → builder-7FBQAWQZ.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-XR56WEA5.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-OGMZJWWD.js';
 import './chunk-3W333NFO.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-AEKSX4EY.js';
-import './chunk-7VUK5RFS.js';
+import './chunk-CBCKD6DO.js';
+import './chunk-QZBXLLTV.js';
 import './chunk-OW52QLK3.js';
 import './chunk-IHNQWF6F.js';
 import './chunk-URWYRAIC.js';

package/dist/{check-UYKEMQNR.js → check-3CGLWMHM.js}

@@ -1,69 +1,69 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-7FEY33MY.js';
-import './chunk-FOCML5FI.js';
+import { probeCredentials } from './chunk-TFGXOHF6.js';
+import './chunk-QSEPKZXR.js';
+import './chunk-CQAEV3Z5.js';
+import './chunk-UF5L4BAI.js';
 import './chunk-3JVYMD4G.js';
-import './chunk-I2UOAV7X.js';
 import './chunk-YETTWTAY.js';
+import './chunk-I2UOAV7X.js';
 import './chunk-TPKYTORP.js';
-import './chunk-CQAEV3Z5.js';
-import './chunk-UF5L4BAI.js';
-import './chunk-BOMRFYTZ.js';
-import './chunk-JZGFDTNC.js';
-import './chunk-URAKVDSI.js';
-import './chunk-56X5TOJY.js';
+import './chunk-WY7HFY62.js';
+import './chunk-Z42JY3LQ.js';
+import './chunk-WXJXHZVB.js';
+import './chunk-DJYOCD65.js';
+import './chunk-D64E222W.js';
 import './chunk-ESVW4MJY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-ENTHEUKT.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-G3LHWUBK.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-276D7BJ7.js';
 import './chunk-TBT347UY.js';
-import './chunk-ZPSLJFGL.js';
+import './chunk-2TT7DEMZ.js';
+import './chunk-C2XZBNHY.js';
+import './chunk-BOG4ENP7.js';
 import './chunk-4AVDD7VX.js';
 import './chunk-OBCFK4QD.js';
 import { parseRunnerEnv } from './chunk-6MZSX4M7.js';
-import './chunk-FRNYCJ4W.js';
-import './chunk-5NJIWKD4.js';
-import './chunk-3AZYLAJC.js';
+import './chunk-QILR6TZP.js';
+import './chunk-XACXXKQ5.js';
+import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-XR56WEA5.js';
+import './chunk-OGMZJWWD.js';
 import './chunk-3W333NFO.js';
 import './chunk-NYTZ7HVN.js';
 import './chunk-2Q3PZ42G.js';
-import './chunk-CUFFDEF3.js';
-import './chunk-BET347JZ.js';
-import './chunk-QOALB6ZD.js';
-import './chunk-JRCSET55.js';
-import './chunk-G3IJ3N6F.js';
-import './chunk-EAQSOE62.js';
-import './chunk-F35VMF5M.js';
+import './chunk-KGKFEONR.js';
+import './chunk-C64D7HR3.js';
+import './chunk-ZLZ3XVPI.js';
+import './chunk-GXV73IIS.js';
+import './chunk-BUP5N3X6.js';
+import './chunk-XSPA5ODY.js';
+import './chunk-GOSFARMS.js';
 import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-V5CG75NX.js';
 import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
-import './chunk-XACXXKQ5.js';
-import './chunk-JBJTC3UU.js';
-import './chunk-6YBLN4TR.js';
-import './chunk-USWVXQIH.js';
-import './chunk-QF7WZUU6.js';
-import './chunk-NTRCK4NH.js';
-import './chunk-QC72I5GQ.js';
+import './chunk-XGPC3IOR.js';
+import './chunk-MQ743JX3.js';
+import './chunk-QS43O4DR.js';
+import './chunk-XOEV4FVK.js';
 import './chunk-ZJSNLVCE.js';
-import './chunk-F7CU5ABH.js';
+import './chunk-DYEFPYME.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-ZNPE7FW5.js';
+import './chunk-VPEGE3QZ.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-AEKSX4EY.js';
-import './chunk-EABW6AJQ.js';
-import './chunk-5OCIHFGE.js';
+import './chunk-CBCKD6DO.js';
 import './chunk-ANPNT6PM.js';
+import './chunk-EABW6AJQ.js';
+import './chunk-HBISTTG3.js';
 import './chunk-T2Q7ISPE.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-CRB3POP4.js';
-import './chunk-5QRP3MVS.js';
+import './chunk-GNPTU4BM.js';
 import './chunk-YQR6E6OV.js';
 import './chunk-TUSYOL2O.js';
-import './chunk-WFSUUUAN.js';
-import './chunk-7VUK5RFS.js';
+import './chunk-RKOTJQVG.js';
+import './chunk-QZBXLLTV.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-RA3O54FC.js';
 import './chunk-OW52QLK3.js';

package/dist/{chunk-ZPSLJFGL.js → chunk-2TT7DEMZ.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-C2XZBNHY.js';
+import { MIN_ENGINE_MAJOR } from './chunk-BOG4ENP7.js';
 import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-4AVDD7VX.js';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-FRNYCJ4W.js';
-import { MIN_ENGINE_MAJOR } from './chunk-5NJIWKD4.js';
 import { runnerCredentialProblem } from './chunk-V5CG75NX.js';
 import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-IHNQWF6F.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';

package/dist/{chunk-3V5C64Y5.js → chunk-6AOZD3LY.js}

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect, detectActiveSession } from './chunk-QOALB6ZD.js';
-import { defaultFetch } from './chunk-QF7WZUU6.js';
-import { unauthorizedMessage, resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
-import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
+import { autoConnect, detectActiveSession } from './chunk-ZLZ3XVPI.js';
+import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-QS43O4DR.js';
+import { resolveRepoIdentity } from './chunk-CBCKD6DO.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';

package/dist/{chunk-5NJIWKD4.js → chunk-BOG4ENP7.js}

@@ -1,21 +1,21 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-3AZYLAJC.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-QILR6TZP.js';
+import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, JUDGE_REPORT, MAX_REPORT_BYTES, spawnRun } from './chunk-XR56WEA5.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, JUDGE_REPORT, MAX_REPORT_BYTES, spawnRun } from './chunk-OGMZJWWD.js';
 import { RecipeError, CLAUDE_CODE_VERSION, firecrackerArch, MICROVM_ARCHES, DEFAULT_BASE_IMAGE, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, FIRECRACKER_VERSION, GUEST_ASSETS_VERSION } from './chunk-3W333NFO.js';
 import { execCapture } from './chunk-NYTZ7HVN.js';
 import { GUEST_CID } from './chunk-2Q3PZ42G.js';
-import { describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-CUFFDEF3.js';
-import { WorkCommandError } from './chunk-BET347JZ.js';
+import { describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-KGKFEONR.js';
+import { WorkCommandError } from './chunk-C64D7HR3.js';
 import { hostAllowed } from './chunk-UXYLWVTQ.js';
 import { parseDuKilobytes } from './chunk-7RQ73DLO.js';
-import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
-import { sharedSkillNames, skillConflictMessage } from './chunk-ZNPE7FW5.js';
+import { sharedSkillNames, skillConflictMessage } from './chunk-VPEGE3QZ.js';
 import { versionAtLeast, MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
-import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-AEKSX4EY.js';
-import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-WFSUUUAN.js';
-import { downconvertSession } from './chunk-7VUK5RFS.js';
+import { setCustomScrubbers, setLocalIdentity, setRepoRoot, parseTranscript, scrubDeep, scrubText } from './chunk-CBCKD6DO.js';
+import { orderSessions, extractFacts, sessionsToTimeline } from './chunk-RKOTJQVG.js';
+import { downconvertSession } from './chunk-QZBXLLTV.js';
 import { rootfsPathFor, diskTemplatesDir, RUNNER_FILE_MODE, deliveryDir, ghConfigDir, runnerDirOfBuild, spoolDir, mirrorDir, buildDir, RUNNER_DIR_MODE, SHIM_DIR, vmAssetsDir } from './chunk-IHNQWF6F.js';
 import { repositoriesOf, primaryOf, RELAY_PORT, repositoryPath, CHECKOUT_DIR, lifecycleWorkdir, claudeCredential, buildEnvironment, startBuildServices, checkEnvironment, AGENT_CREDENTIAL_MISSING, checkoutPath, JOB_MOUNT } from './chunk-URWYRAIC.js';
 import { RELAY_USER, RELAY_ID, UNKNOWN_TRANSPORT_REASON, MAX_MALFORMED_SESSIONS, MALFORMED_REASON, MAX_OPEN_STREAMS, STREAM_WINDOW, SESSION_WINDOW, targetOfPath } from './chunk-GISNHSYL.js';

package/dist/{chunk-G3IJ3N6F.js → chunk-BUP5N3X6.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-7VUK5RFS.js';
+import { ArtifactTombstoneRecordSchema, ArtifactSpoolRecordSchema } from './chunk-QZBXLLTV.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, appendFileSync, writeFileSync, renameSync, unlinkSync, existsSync, readdirSync, readFileSync, statSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-FRNYCJ4W.js → chunk-C2XZBNHY.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-5NJIWKD4.js';
+import { MIN_ENGINE_MAJOR } from './chunk-BOG4ENP7.js';
 import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-3W333NFO.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';

package/dist/{chunk-BET347JZ.js → chunk-C64D7HR3.js}

@@ -1,12 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectActiveSession, autoConnect } from './chunk-QOALB6ZD.js';
-import { workPageUrl } from './chunk-JRCSET55.js';
-import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
-import { defaultFetch } from './chunk-QF7WZUU6.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
+import { detectActiveSession, autoConnect } from './chunk-ZLZ3XVPI.js';
+import { workPageUrl } from './chunk-GXV73IIS.js';
+import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
+import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-QS43O4DR.js';
 import { readRepoConnection } from './chunk-BJ3KTMDH.js';
-import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
+import { resolveRepoIdentity } from './chunk-CBCKD6DO.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -428,7 +427,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-O3UUN6SO.js');
+      const { logHookError } = await import('./hook-fast-27SHD72I.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }

package/dist/{chunk-AEKSX4EY.js → chunk-CBCKD6DO.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { EVENT_TYPES, isHumanUserTurn, INPUT_BAND_BOUNDARIES, parseAgentSession, SCHEMA_VERSION, SPEED_MAX_LENGTH, inputBandOf, BUCKET_MODEL_MAX_LENGTH } from './chunk-7VUK5RFS.js';
+import { EVENT_TYPES, isHumanUserTurn, INPUT_BAND_BOUNDARIES, parseAgentSession, SCHEMA_VERSION, SPEED_MAX_LENGTH, inputBandOf, BUCKET_MODEL_MAX_LENGTH } from './chunk-QZBXLLTV.js';
 import { createHash } from 'crypto';
 import { readFileSync, readdirSync, statSync, mkdirSync, copyFileSync, renameSync, unlinkSync, writeFileSync, stat as stat$1, unwatchFile, watchFile, watch as watch$1 } from 'fs';
 import { type, homedir } from 'os';

package/dist/{chunk-56X5TOJY.js → chunk-D64E222W.js}

@@ -1,15 +1,14 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-QOALB6ZD.js';
-import { acquireSpoolLockAt } from './chunk-G3IJ3N6F.js';
-import { defaultFetch } from './chunk-QF7WZUU6.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
-import { resolveRepoIdentity } from './chunk-AEKSX4EY.js';
+import { autoConnect, detectActiveSession } from './chunk-ZLZ3XVPI.js';
+import { acquireSpoolLockAt } from './chunk-BUP5N3X6.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-QS43O4DR.js';
+import { resolveRepoIdentity } from './chunk-CBCKD6DO.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
-import { StepNameSchema, StepBodySchema } from './chunk-7VUK5RFS.js';
+import { StepNameSchema, StepBodySchema } from './chunk-QZBXLLTV.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { randomUUID } from 'crypto';
 import { readFileSync, existsSync, mkdirSync, writeFileSync, renameSync, appendFileSync } from 'fs';

package/dist/{chunk-URAKVDSI.js → chunk-DJYOCD65.js}

@@ -1,23 +1,22 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { uploadSpooledSteps } from './chunk-56X5TOJY.js';
+import { uploadSpooledSteps } from './chunk-D64E222W.js';
 import { LaunchFilter } from './chunk-ESVW4MJY.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-G3IJ3N6F.js';
-import { defaultFetch } from './chunk-QF7WZUU6.js';
-import { resolveGatewayCredentials, unauthorizedMessage } from './chunk-NTRCK4NH.js';
-import { writeSyncStatus, spoolDir } from './chunk-QC72I5GQ.js';
+import { migrateLegacyArtifactSidecars, planArtifactUpload, artifactsStatePath, sanitizeTerminal, acquireArtifactSpoolLock, artifactBlobsDir, resolveArtifactTurnIndex, isArtifactTombstoned, ARTIFACT_RETRY_MAX_AGE_MS, writeArtifactSpoolState, reclaimUnneededArtifactBlobs, neededArtifactShas } from './chunk-BUP5N3X6.js';
+import { cliFetch, resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-QS43O4DR.js';
+import { writeSyncStatus, spoolDir } from './chunk-XOEV4FVK.js';
 import { readLatestProvenanceForSession, readContextProvenance } from './chunk-ZJSNLVCE.js';
-import { hookExecSpoolPath } from './chunk-F7CU5ABH.js';
+import { hookExecSpoolPath } from './chunk-DYEFPYME.js';
 import { applyReportedCost } from './chunk-BKO6JEZI.js';
 import { readRepoConnection, findGitDirs } from './chunk-BJ3KTMDH.js';
-import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-AEKSX4EY.js';
-import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
+import { setCustomScrubbers, setLocalIdentity, tailTranscript, enrichSessionRepo, scanAll, setRepoRoot, resolveRepoIdentity, sessionIdFromPath, scrubDeep, SOURCE_ADAPTERS } from './chunk-CBCKD6DO.js';
 import { C } from './chunk-ANPNT6PM.js';
+import { readCloudConfig, cloudConfigPath, writeCloudConfig } from './chunk-EABW6AJQ.js';
 import { readLaunchSpoolState, launchStatusIsDecisive, launchedItemsBySession, launchesPath } from './chunk-T2Q7ISPE.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { removeJournalHooks } from './chunk-TUSYOL2O.js';
-import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-7VUK5RFS.js';
+import { CAPTURE_TIERS, inferArtifactKind, bannedPathsForTier, downconvertSession, isHumanUserTurn, turnCountBound, EVENT_TYPES } from './chunk-QZBXLLTV.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { signerFor, signRunnerRequest } from './chunk-OW52QLK3.js';
 import { dirname, basename, join } from 'path';
@@ -573,7 +572,7 @@ var LiveUploader = class {
     this.stopped = false;
     this.warned = /* @__PURE__ */ new Set();
     this.home = opts.home;
-    this.fetchImpl = opts.fetchImpl ?? fetch;
+    this.fetchImpl = opts.fetchImpl ?? cliFetch;
     this.sleepImpl = opts.sleepImpl ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
     this.debounceMs = opts.debounceMs ?? DEFAULT_DEBOUNCE_MS;
     this.env = opts.env ?? process.env;

package/dist/{chunk-IZSVXRDR.js → chunk-DXDF43YG.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { recordReportedCost } from './chunk-BKO6JEZI.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { decodeWrappedCommand } from './chunk-5QRP3MVS.js';
+import { decodeWrappedCommand } from './chunk-GNPTU4BM.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { readFileSync } from 'fs';
 import { spawn } from 'child_process';

package/dist/{chunk-F7CU5ABH.js → chunk-DYEFPYME.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { decodeWrappedCommand } from './chunk-5QRP3MVS.js';
+import { decodeWrappedCommand } from './chunk-GNPTU4BM.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { readFileSync, mkdirSync, appendFileSync, writeFileSync } from 'fs';
 import { spawn } from 'child_process';

package/dist/{chunk-ORNJJ7XN.js → chunk-FX6IHR5C.js}

@@ -1,20 +1,19 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { checkStarterFiles, contextIsGoverned, checkBuildSkill } from './chunk-VSUXCMMH.js';
-import { resolveCredentials, getJson, WorkCommandError } from './chunk-BET347JZ.js';
-import { isLinkedRepository } from './chunk-JRCSET55.js';
-import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
-import { checkFormerSkillNames } from './chunk-USWVXQIH.js';
-import { defaultFetch } from './chunk-QF7WZUU6.js';
-import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
-import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-QC72I5GQ.js';
-import { readStatuslineState, STATE_FRESH_MS } from './chunk-IZSVXRDR.js';
+import { checkStarterFiles, contextIsGoverned, checkBuildSkill } from './chunk-XFGL53GU.js';
+import { resolveCredentials, getJson, WorkCommandError } from './chunk-C64D7HR3.js';
+import { isLinkedRepository } from './chunk-GXV73IIS.js';
+import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
+import { checkFormerSkillNames } from './chunk-MQ743JX3.js';
+import { resolveGatewayCredentials, defaultFetch } from './chunk-QS43O4DR.js';
+import { sanitizeForContext, spoolDir, assessSyncHealth, readSyncStatus, SYNC_STALE_AFTER_MS, formatAgo, checkInstalledCliStaleness, workspaceRootOf, hookFiredMarkerPath, refreshCommand } from './chunk-XOEV4FVK.js';
+import { readStatuslineState, STATE_FRESH_MS } from './chunk-DXDF43YG.js';
 import { hookCommandEscapesControlPlane, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-AEKSX4EY.js';
+import { resolveRepoIdentity, compareVersions, SUPPORTED_VERSIONS } from './chunk-CBCKD6DO.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
-import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-5QRP3MVS.js';
+import { readSettings, settingsPath, isOurStatuslineSlot, statuslineWrappedOriginal, REGISTERED_EVENTS, isOurHookCommand, ourCommandBins, cliBinResolvable, ourDirectScriptBins, wrappedOriginalCommand } from './chunk-GNPTU4BM.js';
 import { readDeliveryRecord, readDegraded, readSourceCache } from './chunk-YQR6E6OV.js';
 import { deadHooksState, preparePackageManagerCommand } from './chunk-TUSYOL2O.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
@@ -1187,7 +1186,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-FZTS57ZO.js');
+    const { runnerHostChecks } = await import('./doctor-4H77CEB7.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;

package/dist/{chunk-ENTHEUKT.js → chunk-G3LHWUBK.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-ZPSLJFGL.js';
-import { describeCallFailure } from './chunk-CUFFDEF3.js';
-import { WorkCommandError, getJson } from './chunk-BET347JZ.js';
-import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
+import { isPlaceholderCommand } from './chunk-2TT7DEMZ.js';
+import { describeCallFailure } from './chunk-KGKFEONR.js';
+import { WorkCommandError, getJson } from './chunk-C64D7HR3.js';
+import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
 import { builtinKind } from './chunk-V5CG75NX.js';
 import { signerFor } from './chunk-OW52QLK3.js';
 import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-URWYRAIC.js';

package/dist/{chunk-5QRP3MVS.js → chunk-GNPTU4BM.js}

@@ -220,13 +220,16 @@ function encodeWrappedCommand(command) {
 function decodeWrappedCommand(id) {
   return Buffer.from(id, "base64").toString("utf8");
 }
+function runsCommand(h) {
+  return typeof h.command === "string";
+}
 function listHookCandidates(settings, cliBin) {
   const out = [];
   const hooks = settings?.hooks ?? {};
   for (const event of Object.keys(hooks)) {
     (hooks[event] ?? []).forEach((matcher, matcherIndex) => {
       matcher.hooks.forEach((h, hookIndex) => {
-        if (isOurHookCommandFor(h, cliBin)) return;
+        if (!runsCommand(h) || isOurHookCommandFor(h, cliBin)) return;
         const original = wrappedOriginalCommand(h, cliBin);
         out.push({
           event,
@@ -245,12 +248,14 @@ function wrapHookCommand(cliBin, h, opts = {}) {
   if (isWrapped(h, cliBin)) return h;
   const id = encodeWrappedCommand(h.command);
   const flag = opts.captureOutput ? " --capture-output" : "";
-  return { type: "command", command: `${cliCommand(cliBin)} hook-wrap --id ${id}${flag}`, [WRAP_MARKER]: h.command };
+  return { ...h, command: `${cliCommand(cliBin)} hook-wrap --id ${id}${flag}`, [WRAP_MARKER]: h.command };
 }
 function unwrapHookCommand(h, cliBin) {
   const original = wrappedOriginalCommand(h, cliBin);
   if (original === null) return h;
-  return { type: "command", command: original };
+  const restored = { ...h, command: original };
+  delete restored[WRAP_MARKER];
+  return restored;
 }
 var AUTO_WRAP_EVENTS = ["PreToolUse", "PostToolUse"];
 function wrapHooks(settings, cliBin, opts = {}) {
@@ -268,7 +273,7 @@ function wrapHooks(settings, cliBin, opts = {}) {
       const matcher = matchers[mi];
       for (let hi = 0; hi < matcher.hooks.length; hi++) {
         const h = matcher.hooks[hi];
-        if (isOurHookCommandFor(h, cliBin) || isWrapped(h, cliBin)) continue;
+        if (!runsCommand(h) || isOurHookCommandFor(h, cliBin) || isWrapped(h, cliBin)) continue;
         const candidate = {
           event,
           matcherIndex: mi,

package/dist/{chunk-JRCSET55.js → chunk-GXV73IIS.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sanitizeTerminal } from './chunk-G3IJ3N6F.js';
-import { DEFAULT_DASHBOARD } from './chunk-EAQSOE62.js';
-import { resolveGatewayCredentials } from './chunk-NTRCK4NH.js';
+import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
+import { DEFAULT_DASHBOARD } from './chunk-XSPA5ODY.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-QS43O4DR.js';
 import { writeRepoConnection, findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
-import { remoteLookupFailed } from './chunk-AEKSX4EY.js';
+import { remoteLookupFailed } from './chunk-CBCKD6DO.js';
 import { readCloudConfig } from './chunk-EABW6AJQ.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { execFileSync } from 'child_process';
@@ -89,7 +89,7 @@ function result(code, outcome, reason, text) {
 ` };
 }
 function realConnectDeps() {
-  return { fetchImpl: fetch, env: process.env, prompt: promptOnTerminal, now: () => /* @__PURE__ */ new Date() };
+  return { fetchImpl: cliFetch, env: process.env, prompt: promptOnTerminal, now: () => /* @__PURE__ */ new Date() };
 }
 async function promptOnTerminal(question, io = { input: process.stdin, output: process.stderr }) {
   const rl = createInterface(io);
@@ -315,4 +315,4 @@ ${COMMIT_LINE}
   return r.code;
 }
 
-export { COMMIT_LINE, autoConnectedLine, dashboardBase, fetchFactories, isLinkedRepository, listText, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory, slug, workPageUrl };
+export { COMMIT_LINE, autoConnectedLine, dashboardBase, fetchFactories, hasUncommittedPolicy, isLinkedRepository, listText, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory, slug, workPageUrl };