@outerlayer/cli 0.25.2 → 0.26.1

package/dist/{chunk-DZUANBKP.js → chunk-XPKI5OMT.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectActiveSession, autoConnect } from './chunk-FQCLEH34.js';
-import { workPageUrl } from './chunk-G2T4HCGT.js';
+import { detectActiveSession, autoConnect } from './chunk-HXFRJKMU.js';
+import { workPageUrl } from './chunk-TEVO3RUV.js';
 import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
-import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-GJZEUQ6D.js';
+import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-QRZLUUNN.js';
 import { readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { resolveRepoIdentity } from './chunk-QE3UQAHK.js';
 import { C } from './chunk-ANPNT6PM.js';
@@ -428,7 +428,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-GD7F2EBL.js');
+      const { logHookError } = await import('./hook-fast-REXH5P6R.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }

package/dist/{claude-launcher-FXFXYW2E.js → claude-launcher-O2U6P6ZD.js}

@@ -236,7 +236,7 @@ async function runClaudeLauncher(args, deps = {}) {
       return 1;
     }
   } else {
-    const { resolveLaunchPlane } = await import('./control-plane-launch-FRK5IZXC.js');
+    const { resolveLaunchPlane } = await import('./control-plane-launch-654RV5PO.js');
     const plane = env[GOVERNANCE_VARIABLE] === "self" ? { kind: "none" } : await resolveLaunchPlane({ cwd, env, home, fetchImpl: deps.fetchImpl, stderr });
     if (plane.kind === "none") {
       const own2 = ownSkillsDirFor(cwd, home, [], stderr);

package/dist/{cli-ZBZFCRTK.js → cli-7HVTFJZO.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-WXKAHUGA.js';
+import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-GQOT37HL.js';
 import './chunk-XFGL53GU.js';
 import './chunk-VJBFQP3H.js';
-import { verifiedTrackerNames, TRACKERS } from './chunk-DZUANBKP.js';
-import './chunk-FQCLEH34.js';
-import './chunk-G2T4HCGT.js';
+import { verifiedTrackerNames, TRACKERS } from './chunk-XPKI5OMT.js';
+import './chunk-HXFRJKMU.js';
+import './chunk-TEVO3RUV.js';
 import './chunk-BUP5N3X6.js';
 import './chunk-XSPA5ODY.js';
 import './chunk-GOSFARMS.js';
 import './chunk-MQ743JX3.js';
-import './chunk-GJZEUQ6D.js';
-import { hookFiredMarkerPath, installedCliDistDir } from './chunk-C3AMVSMS.js';
+import './chunk-QRZLUUNN.js';
+import { hookFiredMarkerPath, installedCliDistDir } from './chunk-QIIMZC7W.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-DXDF43YG.js';
 import './chunk-BKO6JEZI.js';
@@ -3784,7 +3784,7 @@ ${starter.output}`),
   }
 }
 async function realConnectDepsForCwd() {
-  const { realConnectDeps } = await import('./connect-cmd-HAFFAVEO.js');
+  const { realConnectDeps } = await import('./connect-cmd-2JHSLBXK.js');
   const { resolveRepoIdentity } = await import('./dist-QPHZE47F.js');
   return {
     ...realConnectDeps(),
@@ -3851,7 +3851,7 @@ edited file, and writes nothing. --control-plane makes no link and says
 what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocation() + " doctor` reports the same\nstates under Starter files.\n"
   ).action(async (opts) => {
     if (opts.update || opts.dryRun) {
-      const { runInitUpdate, formatInitUpdate, updateFlagProblem } = await import('./init-update-HTHYQOHU.js');
+      const { runInitUpdate, formatInitUpdate, updateFlagProblem } = await import('./init-update-FJDKY4SJ.js');
       const problem = updateFlagProblem(opts);
       if (problem !== void 0) {
         fail(problem);
@@ -3898,12 +3898,12 @@ what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocat
         if (changed.length > 0 && !opts.json) process.stdout.write(`Removed the claude function from ${changed.join(", ")}.
 `);
       }
-      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-ZGQ6HMZD.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
+      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-54DMRBNO.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
       if (opts.json) writeJson(shell === void 0 ? outcome.result : { ...outcome.result, shellFunction: { outcome: shell.outcome, reason: shell.reason } });
       else process.stdout.write(outcome.text + (shell?.text ?? ""));
       return;
     }
-    const { runInitCommand } = await import('./init-cmd-ZGQ6HMZD.js');
+    const { runInitCommand } = await import('./init-cmd-54DMRBNO.js');
     const code = await runInitCommand(
       { json: opts.json, factory: opts.factory, shellFunction: opts.shellFunction },
       {
@@ -3915,7 +3915,7 @@ what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocat
           return { ok, text, detail };
         },
         runAgentSetup: async () => {
-          const { runAgentSetup } = await import('./agent-setup-YHFZB2BC.js');
+          const { runAgentSetup } = await import('./agent-setup-PZYQWN4H.js');
           return runAgentSetup({ cwd: process.cwd(), skillsLink: opts.skillsLink !== false });
         },
         runDoctorChecks: gatherDoctorChecks,
@@ -3924,7 +3924,7 @@ what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocat
           shellPath: process.env.SHELL,
           interactive: Boolean(process.stdin.isTTY && process.stderr.isTTY) && opts.json !== true,
           ask: async () => {
-            const { promptOnTerminal } = await import('./connect-cmd-HAFFAVEO.js');
+            const { promptOnTerminal } = await import('./connect-cmd-2JHSLBXK.js');
             const answer = await promptOnTerminal({
               message: `Should plain claude start Claude Code through ${cliInvocation()} claude? That is how a session in a governed repository gets its control plane. It adds one block to your zsh or bash startup file.`,
               options: [
@@ -3963,7 +3963,7 @@ linked (true, false, or null when it could not be checked) and, when false,
 linkUrl.
 `
   ).action(async (opts) => {
-    const { runConnectCommand } = await import('./connect-cmd-HAFFAVEO.js');
+    const { runConnectCommand } = await import('./connect-cmd-2JHSLBXK.js');
     const code = await runConnectCommand({ factory: opts.factory, json: opts.json }, await realConnectDepsForCwd(), {
       stdout: process.stdout,
       stderr: process.stderr
@@ -4041,7 +4041,7 @@ code is 1: revoke the token on /profile/security.
       else fail(found.reason);
       return;
     }
-    const { runSync, SyncConfigError, SyncTransportError } = await import('./sync-cmd-EIRKU5FA.js');
+    const { runSync, SyncConfigError, SyncTransportError } = await import('./sync-cmd-VCLCOME6.js');
     try {
       const result = await runSync({
         url: opts.url,
@@ -4072,7 +4072,7 @@ code is 1: revoke the token on /profile/security.
     if (invokedCommandToken(argv) === "watch") {
       warnDeprecated(`\`${cliInvocation()} watch\` is now \`${cliInvocation()} daemon\`; the old name will be removed in a future release.`);
     }
-    const { runWatch } = await import('./watch-SMF5CW5T.js');
+    const { runWatch } = await import('./watch-SVGL24OX.js');
     await runWatch({ once: opts.once });
   });
   program2.command("hook <event>", { hidden: true }).description("capture-hook fast path, installed by `init`").action(() => {
@@ -4162,7 +4162,7 @@ code is 1: revoke the token on /profile/security.
     process.exitCode = await runBuildCommand({ dir: opts.dir, argv: command });
   });
   program2.command("session-sender", { hidden: true }).description("stream a runner build's sessions to its work item while the build runs").action(async () => {
-    const { runSessionSender } = await import('./session-sender-535VA2CA.js');
+    const { runSessionSender } = await import('./session-sender-P5GVOIUY.js');
     try {
       await runSessionSender();
     } catch (err) {
@@ -4187,7 +4187,6 @@ code is 1: revoke the token on /profile/security.
     }
   });
   registerEmitCommands(program2);
-  registerImportCommands(program2);
   registerHooksCommands(program2);
   registerMcpCommands(program2);
   registerContextCommands(program2);
@@ -4253,7 +4252,7 @@ Compiling .outerlayer/ moved to \`${cliInvocation()} context emit\`.
       await compileContext({ dir: opts.dir, check: opts.check, json: opts.json });
       return;
     }
-    const { runEmitResult, EmitResultError } = await import('./emit-result-cmd-NKAKRBW2.js');
+    const { runEmitResult, EmitResultError } = await import('./emit-result-cmd-NEICBIDU.js');
     try {
       const result = await runEmitResult({
         name,
@@ -4303,7 +4302,7 @@ everywhere, bytes and deep link untouched; a still-queued one is cancelled
 locally so it never uploads. One correction can retire several duplicates.
 `
   ).action(async (file, opts) => {
-    const { runEmitArtifact, EmitArtifactError } = await import('./emit-artifact-cmd-Y2GMWCSD.js');
+    const { runEmitArtifact, EmitArtifactError } = await import('./emit-artifact-cmd-SFUSDWZM.js');
     let pr;
     if (opts.pr !== void 0) {
       pr = parseTrackerNumber(opts.pr);
@@ -4362,7 +4361,7 @@ recent events with their ids. --find <text> searches all of them.
 item that session was launched for is used automatically.
 `
   ).action(async (opts) => {
-    const { runEmitFinding, refuseRemovedFindingFlags, EmitFindingError } = await import('./emit-finding-cmd-3LU7C356.js');
+    const { runEmitFinding, refuseRemovedFindingFlags, EmitFindingError } = await import('./emit-finding-cmd-KMJNYQI7.js');
     try {
       refuseRemovedFindingFlags(opts);
       const result = await runEmitFinding({
@@ -4429,7 +4428,7 @@ the whole batch. "untimed": true records one with no time on purpose.
 that session was launched for is used automatically.
 `
   ).action(async (file, opts) => {
-    const { runEmitFindings, EmitFindingError } = await import('./emit-finding-cmd-3LU7C356.js');
+    const { runEmitFindings, EmitFindingError } = await import('./emit-finding-cmd-KMJNYQI7.js');
     try {
       const result = await runEmitFindings({
         file,
@@ -4464,7 +4463,7 @@ command, the command exits 0, and \`sync\` sends it later. If the gateway refuse
 the step, the command prints why and exits 1.
 `
   ).action(async (name, opts) => {
-    const { runEmitStep, EmitStepError } = await import('./emit-step-cmd-JQ23TRF5.js');
+    const { runEmitStep, EmitStepError } = await import('./emit-step-cmd-AUHA3EXY.js');
     try {
       await runEmitStep({
         name,
@@ -4507,7 +4506,7 @@ of the item, and a (proof: <kind>) annotation names its proof.
   ${cliInvocation()} emit criteria acceptance/412-login.md --item 412
 `
   ).action(async (file, opts) => {
-    const { runEmitCriteria, EmitCriteriaError } = await import('./emit-criteria-cmd-LI7OLHEC.js');
+    const { runEmitCriteria, EmitCriteriaError } = await import('./emit-criteria-cmd-VMZIRJCQ.js');
     try {
       const result = await runEmitCriteria({
         file,
@@ -4531,9 +4530,9 @@ function registerSpecCommands(program2) {
   const specCmd = program2.command("spec").description("Find, file and edit the issue a spec lives in, in your factory's tracker");
   const credentialOptions = (command) => command.option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "factory id the key is bound to (or OUTERLAYER_APP_ID / config)");
   const run = async (action) => {
-    const { WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
-      await action(await import('./spec-cmd-KERLZ6GJ.js'));
+      await action(await import('./spec-cmd-HMFW552G.js'));
     } catch (err) {
       if (err instanceof WorkCommandError) {
         fail(err.message);
@@ -4575,7 +4574,7 @@ takes it, and prints the line that starts your session on it. That
 session links itself and holds the item's lease while it works.
 `
   ).action(async (opts) => {
-    const { runWorkBuild, WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { runWorkBuild, WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
       await runWorkBuild(opts);
     } catch (err) {
@@ -4598,7 +4597,7 @@ renews that session's own 20-minute lease, unless --no-lease or
 --ended is given, or another worker already holds a live one.
 `
   ).action(async (number, opts) => {
-    const { runWorkLinkSession, WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { runWorkLinkSession, WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
       await runWorkLinkSession({ ...opts, number, noLease: opts.lease === false, logFailures: opts.logFailures === true });
     } catch (err) {
@@ -4622,8 +4621,8 @@ criterion's new proof; --ready hands the thread back to a person. At
 most one action flag may be given.
 `
   ).action(async (opts) => {
-    const { runWorkComment, WorkCommentCommandError } = await import('./work-comment-cmd-NDE3O7PN.js');
-    const { WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { runWorkComment, WorkCommentCommandError } = await import('./work-comment-cmd-O3FVX6M4.js');
+    const { WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
       await runWorkComment(opts);
     } catch (err) {
@@ -4644,8 +4643,8 @@ criterion that carries proof or a comment, each with who is waiting
 on whom next.
 `
   ).action(async (opts) => {
-    const { runWorkThreads, WorkCommentCommandError } = await import('./work-comment-cmd-NDE3O7PN.js');
-    const { WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { runWorkThreads, WorkCommentCommandError } = await import('./work-comment-cmd-O3FVX6M4.js');
+    const { WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
       await runWorkThreads(opts);
     } catch (err) {
@@ -4669,8 +4668,8 @@ still running, or that an older runner released, has no log and the
 command exits 1.
 `
   ).action(async (opts) => {
-    const { runWorkLogs, WorkLogsCommandError } = await import('./work-logs-cmd-KUGBBJAO.js');
-    const { WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { runWorkLogs, WorkLogsCommandError } = await import('./work-logs-cmd-2RMJFVNZ.js');
+    const { WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
       await runWorkLogs(opts);
     } catch (err) {
@@ -4693,8 +4692,8 @@ item is not built again until a new build request. Exits 1 when no host
 build is running for the item.
 `
   ).action(async (opts) => {
-    const { runWorkStop, WorkStopCommandError } = await import('./work-stop-cmd-QUEDBM4Q.js');
-    const { WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { runWorkStop, WorkStopCommandError } = await import('./work-stop-cmd-TNJYBLMN.js');
+    const { WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
       await runWorkStop(opts);
     } catch (err) {
@@ -4715,7 +4714,7 @@ deletes anything \u2014 the item is removed from Work only once no
 live addition remains on it.
 `
   ).action(async (opts) => {
-    const { runWorkRemove, WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { runWorkRemove, WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
       await runWorkRemove(opts);
     } catch (err) {
@@ -4727,7 +4726,7 @@ live addition remains on it.
     }
   });
   workCmd.command("status").description("Show one item's stage, gate ledger, and additions").option("--item <number>", "the item's number inside this factory").option("--issue <number>", "issue number, or a Linear/Jira key like ENG-123").option(TRACKER_OPTION_FLAG, "tracker for a keyed --issue, when both hold the key").option("--repo <owner/name>", "repository for an issue number (default: the checkout's remote)").option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "factory id the key is bound to (or OUTERLAYER_APP_ID / config)").action(async (opts) => {
-    const { runWorkStatus, WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { runWorkStatus, WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
       await runWorkStatus(opts);
     } catch (err) {
@@ -4739,7 +4738,7 @@ live addition remains on it.
     }
   });
   workCmd.command("list").description("List live work items for this factory").option("--stage <spec|build|review>", "filter by stage").option("--section <attention|waiting|flowing>", "filter by Queue section").option("--repo <owner/name>", "repository (default: the current checkout's remote)").option("--unclaimed", "only items with no live lease").option("--claimed", "only items with a live lease, held by a host or a local session").option("--startable", "only items a host can start: a build request, no open PR, no live lease").option("--needs <amend>", "only items with a thread waiting on an agent").option("--json", "machine-readable JSON output").option("--url <url>", "cloud base URL (or OUTERLAYER_URL / config)").addOption(apiKeyOption()).option("--app-id <id>", "factory id the key is bound to (or OUTERLAYER_APP_ID / config)").action(async (opts) => {
-    const { runWorkList, WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { runWorkList, WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
       await runWorkList(opts);
     } catch (err) {
@@ -4760,7 +4759,7 @@ by a different key is refused; claiming again with the same key extends
 it. --host is a label only.
 `
   ).action(async (opts) => {
-    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-JCUBRZKN.js');
+    const { runWorkClaim, WorkCommandError } = await import('./work-claim-cmd-WQF5RTCT.js');
     try {
       await runWorkClaim(opts);
     } catch (err) {
@@ -4780,7 +4779,7 @@ Extends the live lease this API key holds. Refused with a 410 if the
 lease has expired, or a 403 if a different key holds it.
 `
   ).action(async (opts) => {
-    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-JCUBRZKN.js');
+    const { runWorkRenew, WorkCommandError } = await import('./work-claim-cmd-WQF5RTCT.js');
     try {
       await runWorkRenew(opts);
     } catch (err) {
@@ -4812,7 +4811,7 @@ applies to a host's lease only. A later tool call in the session
 takes the lease again.
 `
   ).action(async (opts) => {
-    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-JCUBRZKN.js');
+    const { runWorkRelease, WorkCommandError } = await import('./work-claim-cmd-WQF5RTCT.js');
     try {
       await runWorkRelease(opts);
     } catch (err) {
@@ -4839,7 +4838,7 @@ Idempotent: declaring the same pull request twice is a no-op.
 needs your own login; an agent session or a factory key is refused.
 `
   ).action(async (number, opts) => {
-    const { runWorkPr, WorkPrCommandError } = await import('./work-pr-cmd-KKCLXRJL.js');
+    const { runWorkPr, WorkPrCommandError } = await import('./work-pr-cmd-DKTBEFHO.js');
     try {
       await runWorkPr({ ...opts, number });
     } catch (err) {
@@ -4864,8 +4863,8 @@ login, then declares the pull request on the item, as \`work pr\` does.
 Run it again after a change to the title or description.
 `
   ).action(async (opts) => {
-    const { runWorkOpenPr, WorkOpenPrCommandError } = await import('./work-open-pr-cmd-TFIGKPRL.js');
-    const { WorkCommandError } = await import('./work-cmd-C3CFJZYD.js');
+    const { runWorkOpenPr, WorkOpenPrCommandError } = await import('./work-open-pr-cmd-5EP7BKRE.js');
+    const { WorkCommandError } = await import('./work-cmd-TGSNYPSG.js');
     try {
       await runWorkOpenPr(opts);
     } catch (err) {
@@ -4882,7 +4881,7 @@ function registerRunnerCommands(program2) {
   const configOption = "the cloud config file to run against (default: ~/.outerlayer/config.json)";
   runnerCmd.command("start").description("Run the loop: claim work, run it, report, clean up, repeat").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-JJ3EO7SB.js');
-    const { start, RunnerStartError } = await import('./loop-JTKSTVDV.js');
+    const { start, RunnerStartError } = await import('./loop-6JKW5QR5.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-BY5Z6YH7.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     try {
@@ -4901,8 +4900,8 @@ function registerRunnerCommands(program2) {
     "\nReads OUTERLAYER_URL, OUTERLAYER_APP_ID, OUTERLAYER_API_KEY, OUTERLAYER_RUNNER_NAME and one Claude credential\n(CLAUDE_CODE_OAUTH_TOKEN, ANTHROPIC_API_KEY or ANTHROPIC_AUTH_TOKEN) from the environment. OUTERLAYER_AGENT\nis optional and defaults to claude. On a later start it refuses variables that disagree with the config in the volume.\nThe image sets OUTERLAYER_RUNNER_IMAGE; outside the image, use `runner start`.\n"
   ).action(async () => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-JJ3EO7SB.js');
-    const { containerStart } = await import('./container-start-L6LCWH6Z.js');
-    const { start, RunnerStartError } = await import('./loop-JTKSTVDV.js');
+    const { containerStart } = await import('./container-start-SCCR2PRD.js');
+    const { start, RunnerStartError } = await import('./loop-6JKW5QR5.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-BY5Z6YH7.js');
     try {
       const result = await containerStart({
@@ -4922,7 +4921,7 @@ function registerRunnerCommands(program2) {
   });
   runnerCmd.command("check").description("Validate the config, the hooks and the key, and print the effective settings").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-JJ3EO7SB.js');
-    const { runRunnerCheck } = await import('./check-SSEVZJN5.js');
+    const { runRunnerCheck } = await import('./check-3CBJVXZD.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const result = await runRunnerCheck(configPath);
     if (!result.ok) {
@@ -4956,7 +4955,7 @@ function registerRunnerCommands(program2) {
     }
     try {
       if (opts.service === true) {
-        const { installServiceCommand } = await import('./command-A2XBWQGB.js');
+        const { installServiceCommand } = await import('./command-2Q5UDZUO.js');
         const result2 = await installServiceCommand({
           configPath,
           print: opts.print,
@@ -5012,7 +5011,7 @@ To keep it running, run ${C.yellow}${cliInvocation()} runner install --service${
       return;
     }
     const { defaultRunnerConfigPath } = await import('./config-JJ3EO7SB.js');
-    const { uninstallServiceCommand } = await import('./command-A2XBWQGB.js');
+    const { uninstallServiceCommand } = await import('./command-2Q5UDZUO.js');
     const result = await uninstallServiceCommand({ configPath: opts.config ?? defaultRunnerConfigPath(), unitName: opts.unitName, home: homeFromEnv() });
     if (result.ok) for (const line of result.lines) process.stdout.write(`${C.green}\u2713${C.reset} ${line}
 `);
@@ -5040,10 +5039,10 @@ already in runner.env is used.
 `
   ).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-JJ3EO7SB.js');
-    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-ZN47OUB3.js');
-    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-ENQLA4Q6.js');
-    const { detectMachine } = await import('./machine-RCIMAKOA.js');
-    const { chooseVm, runVmInit, VmInitError } = await import('./init-MRREKVT5.js');
+    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-UMON3HZK.js');
+    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-FUNSJ564.js');
+    const { detectMachine } = await import('./machine-XF55O56X.js');
+    const { chooseVm, runVmInit, VmInitError } = await import('./init-NEUTUGEQ.js');
     const { AGENT_COMMANDS, credentialFromStdin, isAgentName, restartForCredential, RunnerEnvError } = await import('./runner-env-2D7MPOIJ.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     if (opts.agent !== void 0 && !isAgentName(opts.agent)) {
@@ -5194,7 +5193,7 @@ ${C.yellow}The runner will not update itself: ${installErr.message}${C.reset}
       let serviceUp = false;
       let restart;
       if (installedLayout) {
-        const { installServiceCommand } = await import('./command-A2XBWQGB.js');
+        const { installServiceCommand } = await import('./command-2Q5UDZUO.js');
         const service = await installServiceCommand({
           configPath,
           entryPath: process.argv[1] ?? "",
@@ -5239,10 +5238,10 @@ Next:
     "\nA repository governed by a control plane builds the control plane's image, at the commit\nthe gateway has stored for it. A repository that governs itself fetches the head of its\ndefault branch into the runner's cache. Either way it reads .devcontainer/devcontainer.json\nand builds the image with the devcontainer CLI. Settings\nthat reach the host or widen the container's privileges are ignored and listed. The\nimage holds this CLI and a pinned Claude Code. Nothing runs inside the image.\n"
   ).action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-JJ3EO7SB.js');
-    const { buildRepositoryImage, RecipeError } = await import('./build-ONH22PN5.js');
+    const { buildRepositoryImage, RecipeError } = await import('./build-JK2DLT6X.js');
     const { currentCliBuild } = await import('./cli-build-K56DK4DS.js');
-    const { createDockerHost } = await import('./docker-FATVQG5M.js');
-    const { builderSpec } = await import('./builder-WPULEVMY.js');
+    const { createDockerHost } = await import('./docker-4X2A5HDY.js');
+    const { builderSpec } = await import('./builder-TMA25KRR.js');
     const { loadRunnerConfig } = await import('./config-JJ3EO7SB.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const loaded = (() => {
@@ -5254,11 +5253,11 @@ Next:
     })();
     const memory = loaded?.build?.memory ?? "8g";
     try {
-      const { ensureRunnerIdentity } = await import('./runner-identity-C2O6Q3RR.js');
+      const { ensureRunnerIdentity } = await import('./runner-identity-NH6RLVMI.js');
       await ensureRunnerIdentity(configPath, { log: (line) => console.error(line) }).catch((err) => {
         console.error(`the runner's Docker identity could not be stored: ${err instanceof Error ? err.message : String(err)}`);
       });
-      const { imageTargetFor } = await import('./governing-source-73APROH6.js');
+      const { imageTargetFor } = await import('./governing-source-J5DF65X5.js');
       const target = await imageTargetFor({ config: loaded, repository: opts.repository, fetchImpl: fetch });
       if (!target.ok) {
         if (opts.json) {
@@ -5322,7 +5321,7 @@ Next:
   });
   runnerCmd.command("stop").description("Take no more work; finish running jobs, then exit").option("--config <path>", "the cloud config file naming the runner to stop").option("--now", "end running jobs immediately, with outcome stopped").action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-JJ3EO7SB.js');
-    const { requestStop } = await import('./loop-JTKSTVDV.js');
+    const { requestStop } = await import('./loop-6JKW5QR5.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const { runnerImageVersion } = await import('./image-tag-5SJ6ZKT7.js');
     await requestStop(configPath, Boolean(opts.now), void 0, { image: runnerImageVersion() !== void 0 });
@@ -5330,8 +5329,8 @@ Next:
   runnerCmd.command("status").description("List running jobs; with --recent, finished ones too").option("--config <path>", "the cloud config file naming the runner to inspect").option("--recent", "also list finished jobs, newest first, capped at 20").option("--json", "machine-readable JSON output").action(async (opts) => {
     const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-JJ3EO7SB.js');
     const { jobsDir, runnerDir } = await import('./paths-ZC6BMWMT.js');
-    const { listJobFiles, runnerProcessState } = await import('./loop-JTKSTVDV.js');
-    const { renderStatus } = await import('./status-OTZ3VX47.js');
+    const { listJobFiles, runnerProcessState } = await import('./loop-6JKW5QR5.js');
+    const { renderStatus } = await import('./status-ULZVKQ7G.js');
     const { readHousekeepingRecord } = await import('./record-K23IN6QN.js');
     const path2 = await import('path');
     const configPath = opts.config ?? defaultRunnerConfigPath();
@@ -5391,7 +5390,7 @@ Next:
   });
   runnerCmd.command("logs").argument("<item>", "the work item's number in the factory").description("Print the newest attempt's log for one item").option("--config <path>", "the cloud config file naming the runner to inspect").option("-f, --follow", "keep printing as the log grows").action(async (itemArg, opts) => {
     const { defaultRunnerConfigPath } = await import('./config-JJ3EO7SB.js');
-    const { listJobFiles } = await import('./loop-JTKSTVDV.js');
+    const { listJobFiles } = await import('./loop-6JKW5QR5.js');
     const { newestAttempt, logPathFor, tail, RunnerLogsError } = await import('./logs-VN2HKDSH.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const item = parseTrackerNumber(itemArg);
@@ -5426,23 +5425,6 @@ function registerHooksCommands(program2) {
     "after",
     "\n`init` auto-wraps PreToolUse/PostToolUse hooks; these subcommands cover the\nrest: manual re-scans, other events, and undo.\n"
   );
-  hooksCmd.command("install-git").description("Remove the git hooks an earlier version installed in this repo").addHelpText(
-    "after",
-    "\nEarlier versions installed a pre-commit guard and commit journal hooks. This removes\nthe ones OuterLayer wrote and leaves any hook it did not write untouched.\n"
-  ).action(() => {
-    const removal = removeJournalHooks(process.cwd());
-    if (removal.removed) {
-      process.stdout.write(`${C.green}\u2713${C.reset} removed the commit journal hooks an earlier version installed \u2192 ${removal.path}
-`);
-    }
-    const guard = removePreCommitGuardHook(process.cwd());
-    if (guard.removed) {
-      process.stdout.write(`${C.green}\u2713${C.reset} removed the pre-commit guard an earlier version installed \u2192 ${guard.path}
-`);
-    }
-    if (!removal.removed && !guard.removed) process.stdout.write(`${C.dim}No git hooks from an earlier version were found.${C.reset}
-`);
-  });
   hooksCmd.command("status").description("List hook entries in user and project settings, marking the wrapped ones").option("--json", "machine-readable JSON output").action((opts) => {
     const report = [];
     for (const scope of ["user", "project"]) {
@@ -5640,7 +5622,7 @@ caller from the bearer token, the gateway answers 401 without that header.
     "after",
     "\nWhat the stdio .mcp.json entry spawns. Reads newline-delimited JSON-RPC 2.0 on\nstdin and writes responses on stdout. The API key comes from OUTERLAYER_API_KEY\nor ~/.outerlayer/config.json at start-up; with neither the command exits 1 and\nprints why, which the MCP client shows as the connect error.\n"
   ).action(async (opts) => {
-    const { runMcpServe, handleMcpServeError } = await import('./mcp-serve-cmd-QBFQN553.js');
+    const { runMcpServe, handleMcpServeError } = await import('./mcp-serve-cmd-U5N5DK3H.js');
     try {
       await runMcpServe({ url: opts.url, appId: opts.appId });
     } catch (err) {
@@ -5648,37 +5630,6 @@ caller from the bearer token, the gateway answers 401 without that header.
     }
   });
 }
-function registerImportCommands(program2) {
-  const importCmd = program2.command("import").description("Import an existing config format into .outerlayer/");
-  importCmd.command("ruler").description("Port a .ruler/ tree into the equivalent .outerlayer/ tree").option("--dir <path>", "repo root to read from (default: cwd)").option("--json", "machine-readable JSON output").addHelpText("after", "\nRuler: https://github.com/intellectronica/ruler. Mostly a rename.\n").action(async (opts) => {
-    const { runImportRuler, ImportRulerError } = await import('./import-ruler-cmd-VJOHOJQ7.js');
-    try {
-      const result = runImportRuler({ cwd: opts.dir, json: opts.json });
-      if (result.exitCode !== 0) process.exitCode = result.exitCode;
-    } catch (err) {
-      if (err instanceof ImportRulerError) {
-        fail(err.message);
-        return;
-      }
-      throw err;
-    }
-  });
-  importCmd.command("capture").description("Install the maintained skills into .outerlayer/").option("--dir <path>", "repo root to write into (default: cwd)").option("--json", "machine-readable JSON output").addHelpText(
-    "after",
-    "\nInstalls the five maintained skills (outerlayer-evidence, outerlayer-amend,\nouterlayer-findings, outerlayer-cli, outerlayer-build) and an AGENTS.md snippet teaching agents to run\n`emit artifact`. A skill that differs from this CLI's bundle is rewritten to it, and the output says so.\n"
-  ).action(async (opts) => {
-    const { runImportCapture, ImportCaptureError } = await import('./import-capture-cmd-TCOKNVBM.js');
-    try {
-      runImportCapture({ cwd: opts.dir, json: opts.json });
-    } catch (err) {
-      if (err instanceof ImportCaptureError) {
-        fail(err.message);
-        return;
-      }
-      throw err;
-    }
-  });
-}
 function registerContextCommands(program2) {
   const contextCmd = program2.command("context").description("Compile agent context");
   contextCmd.command("emit").description("Compile .outerlayer/ into each configured target tool's native files").option("--check", "compare against disk, write nothing, exit 1 on drift (CI mode)").option("--dir <path>", "repo root to read from (default: cwd)").option("--json", "machine-readable JSON output").addHelpText(

package/dist/{command-A2XBWQGB.js → command-2Q5UDZUO.js}

@@ -3,23 +3,23 @@ import { createRequire } from 'node:module';
 import { runRunnerInstall, launcherSummary, restartNote } from './chunk-JF572PM5.js';
 import './chunk-KDDFI5MR.js';
 import { currentLink, execStartCommand } from './chunk-4IFKLYMM.js';
-import { detectMachine } from './chunk-PCADYUQT.js';
-import { helperSocketPath, ensureFirecrackerAndJailer } from './chunk-Z6SWQV77.js';
+import { detectMachine } from './chunk-7NKVMAP6.js';
+import { helperSocketPath, ensureFirecrackerAndJailer } from './chunk-ILL2CWOU.js';
 import './chunk-665QWBNW.js';
 import './chunk-TQMI335S.js';
 import { DEFAULT_UNIT_NAME, installService, uninstallService, realTaskScheduler, UNIT_MARKER } from './chunk-MLD2NA7N.js';
-import './chunk-3RBQSPW5.js';
+import './chunk-AINUN2TT.js';
 import './chunk-PYSKSROG.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import { readJobFile } from './chunk-F4267APM.js';
-import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, HOST_HELPER_ASSETS_VERSION, hostHelperPinned } from './chunk-APBTVIM4.js';
+import { readJobFile } from './chunk-7I6GZSN3.js';
+import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, HOST_HELPER_ASSETS_VERSION, hostHelperPinned } from './chunk-4R24DSL2.js';
 import './chunk-HPOEVC2V.js';
 import './chunk-XGJUNNXL.js';
-import './chunk-WVM6PM2N.js';
-import './chunk-DZUANBKP.js';
-import './chunk-FQCLEH34.js';
-import './chunk-G2T4HCGT.js';
+import './chunk-D7V33CAH.js';
+import './chunk-XPKI5OMT.js';
+import './chunk-HXFRJKMU.js';
+import './chunk-TEVO3RUV.js';
 import './chunk-BUP5N3X6.js';
 import './chunk-XSPA5ODY.js';
 import './chunk-GOSFARMS.js';
@@ -28,9 +28,9 @@ import './chunk-UXYLWVTQ.js';
 import './chunk-7RQ73DLO.js';
 import { realLima } from './chunk-77MM5RYD.js';
 import { writeLaunchAgent, launchAgentPath } from './chunk-LF6MLJCY.js';
-import './chunk-D4UDE2AP.js';
+import './chunk-W3NVHOCS.js';
 import './chunk-MQ743JX3.js';
-import './chunk-GJZEUQ6D.js';
+import './chunk-QRZLUUNN.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-VPEGE3QZ.js';
 import './chunk-HCVLP7XA.js';

package/dist/{connect-cmd-HAFFAVEO.js → connect-cmd-2JHSLBXK.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { AGENTS_LAYOUT_COMMIT_LINE, COMMIT_LINE, autoConnectedLine, commitLineFor, listText as factoryListText, slug as factorySlug, fetchFactories, hasUncommittedPolicy, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory } from './chunk-G2T4HCGT.js';
+export { AGENTS_LAYOUT_COMMIT_LINE, COMMIT_LINE, autoConnectedLine, commitLineFor, listText as factoryListText, slug as factorySlug, fetchFactories, hasUncommittedPolicy, promptOnTerminal, realConnectDeps, runConnect, runConnectCommand, saveFactoryConnection, selectFactory } from './chunk-TEVO3RUV.js';
 import './chunk-BUP5N3X6.js';
 import './chunk-XSPA5ODY.js';
 import './chunk-GOSFARMS.js';
-import './chunk-GJZEUQ6D.js';
+import './chunk-QRZLUUNN.js';
 import './chunk-BJ3KTMDH.js';
 import './chunk-QE3UQAHK.js';
 import './chunk-ANPNT6PM.js';