@outerlayer/cli 0.26.3 → 0.27.0

package/dist/{chunk-XLC7KEUV.js → chunk-GLUKDQS4.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-2K3TCQHW.js';
+import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-2I3LIRZP.js';
 import { symlinkSync, unlinkSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-ZLEXMZFW.js → chunk-JH2GQU5T.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RecipeError, BUILDKIT_IMAGE } from './chunk-TSW4DGV2.js';
-import { parseSize } from './chunk-7RQ73DLO.js';
+import { RecipeError, BUILDKIT_IMAGE } from './chunk-B6K7R5UY.js';
+import { parseSize } from './chunk-YJLHUKYS.js';
 import { compareVersions } from './chunk-QE3UQAHK.js';
-import { ensureHostKey } from './chunk-F6DIHHBS.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-L4CW6LZQ.js';
-import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-2K3TCQHW.js';
+import { ensureHostKey } from './chunk-Y4OKEFAX.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-RHAGBUL5.js';
+import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-2I3LIRZP.js';
 import { JOIN_DIR, RELAY_ID, JOIN_SOCKET, TARGET_GATEWAY, TARGET_CLAUDE, destinationTarget, RELAY_USER } from './chunk-JGD5TWQ2.js';
 import { StringDecoder } from 'string_decoder';
 import { spawn } from 'child_process';

package/dist/{chunk-YVZJ6GKF.js → chunk-KT4CN6OU.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { C } from './chunk-ANPNT6PM.js';
-import { readCloudConfig } from './chunk-EABW6AJQ.js';
+import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { existsSync, writeFileSync, readFileSync, mkdirSync } from 'fs';
 import { join, dirname } from 'path';

package/dist/{chunk-JKNYTNYD.js → chunk-LOKSLO25.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { AGENTS_SKILLS_BASE, OUTERLAYER_SKILLS_BASE } from './chunk-HBISTTG3.js';
+import { AGENTS_SKILLS_BASE, OUTERLAYER_SKILLS_BASE } from './chunk-7OUOLGUV.js';
 import { normalizePath, CONTEXT_PIN_FILENAME } from './chunk-RKOTJQVG.js';
 import { existsSync, readdirSync, readFileSync, mkdirSync, writeFileSync, lstatSync, readlinkSync, symlinkSync, rmdirSync } from 'fs';
 import { relative, sep, join } from 'path';

package/dist/{chunk-665QWBNW.js → chunk-M3MHHIUW.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isVersion, compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-L4CW6LZQ.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-4IFKLYMM.js → chunk-MATUHHN4.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-L4CW6LZQ.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
 import { readlinkSync, realpathSync, mkdirSync, unlinkSync, symlinkSync, renameSync, readFileSync, writeFileSync, rmSync, existsSync, readdirSync } from 'fs';
 import { join, basename, sep, resolve } from 'path';
 

package/dist/{chunk-MQ743JX3.js → chunk-MHX7YX7Y.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-HBISTTG3.js';
+import { skillDir, FORMER_MAINTAINED_NAMES, isMaintainedCopy } from './chunk-7OUOLGUV.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { emitTree, ALL_TARGET_IDS, classifyTree } from './chunk-RKOTJQVG.js';
 import { readFileSync, existsSync, unlinkSync, rmdirSync, readdirSync } from 'fs';

package/dist/{chunk-TEVO3RUV.js → chunk-N4D5TMVU.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
-import { DEFAULT_DASHBOARD } from './chunk-XSPA5ODY.js';
-import { cliFetch, resolveGatewayCredentials } from './chunk-QRZLUUNN.js';
+import { isAgentsMdLayout } from './chunk-LOKSLO25.js';
+import { DEFAULT_DASHBOARD } from './chunk-6BLXUD56.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-BWH36FOC.js';
 import { writeRepoConnection, findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { remoteLookupFailed } from './chunk-QE3UQAHK.js';
-import { readCloudConfig } from './chunk-EABW6AJQ.js';
-import { isAgentsMdLayout } from './chunk-JKNYTNYD.js';
+import { readCloudConfig } from './chunk-PJDQPF5N.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { execFileSync } from 'child_process';
 import { createInterface } from 'readline/promises';

package/dist/{chunk-EORWWFPA.js → chunk-O2IJTY7L.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-HXFRJKMU.js';
+import { autoConnect, detectActiveSession } from './chunk-2F762IXY.js';
 import { acquireSpoolLockAt } from './chunk-BUP5N3X6.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-QRZLUUNN.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-BWH36FOC.js';
 import { resolveRepoIdentity } from './chunk-QE3UQAHK.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';

package/dist/{chunk-EABW6AJQ.js → chunk-PJDQPF5N.js}

@@ -8,18 +8,31 @@ createRequire(import.meta.url);
 function cloudConfigPath(home = homeFromEnv()) {
   return join(home, ".outerlayer", "config.json");
 }
-function readCloudConfig(home = homeFromEnv()) {
+var CloudConfigError = class extends Error {
+};
+function unparseableConfigMessage(path, parserMessage) {
+  return `${path} is not valid JSON (${parserMessage}). Fix it or move it aside.`;
+}
+function readCloudConfigStrict(home = homeFromEnv()) {
   const path = cloudConfigPath(home);
   if (!existsSync(path)) return {};
+  const text = readFileSync(path, "utf8");
+  try {
+    return JSON.parse(text);
+  } catch (err) {
+    throw new CloudConfigError(unparseableConfigMessage(path, err.message));
+  }
+}
+function readCloudConfig(home = homeFromEnv()) {
   try {
-    return JSON.parse(readFileSync(path, "utf8"));
+    return readCloudConfigStrict(home);
   } catch {
     return {};
   }
 }
 function writeCloudConfig(config, home = homeFromEnv()) {
   const path = cloudConfigPath(home);
-  const merged = { ...readCloudConfig(home) };
+  const merged = { ...readCloudConfigStrict(home) };
   for (const [key, value] of Object.entries(config)) {
     if (value !== void 0) merged[key] = value;
   }
@@ -33,7 +46,7 @@ function writeCloudConfig(config, home = homeFromEnv()) {
 function removeCloudConfigKeys(keys, home = homeFromEnv()) {
   const path = cloudConfigPath(home);
   if (!existsSync(path)) return;
-  const stored = { ...readCloudConfig(home) };
+  const stored = { ...readCloudConfigStrict(home) };
   for (const key of keys) delete stored[key];
   writeFileSync(path, JSON.stringify(stored, null, 2) + "\n", { mode: 384 });
   try {
@@ -42,4 +55,4 @@ function removeCloudConfigKeys(keys, home = homeFromEnv()) {
   }
 }
 
-export { cloudConfigPath, readCloudConfig, removeCloudConfigKeys, writeCloudConfig };
+export { CloudConfigError, cloudConfigPath, readCloudConfig, readCloudConfigStrict, removeCloudConfigKeys, writeCloudConfig };

package/dist/{chunk-KDDFI5MR.js → chunk-QHH4OSD4.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { currentLink } from './chunk-4IFKLYMM.js';
+import { currentLink } from './chunk-MATUHHN4.js';
 import { readFileSync, statSync, chmodSync, mkdirSync, writeFileSync, renameSync, rmSync, existsSync, lstatSync, accessSync, constants, realpathSync } from 'fs';
 import { randomBytes } from 'crypto';
 import { join, dirname, delimiter, resolve } from 'path';

package/dist/{chunk-W7LGHNXT.js → chunk-QIVOTQOQ.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-364XDGOK.js';
-import { MIN_ENGINE_MAJOR } from './chunk-VHVFU6QU.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-5PMQDQFV.js';
-import { runnerCredentialProblem } from './chunk-JWRX5ZTT.js';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-L4CW6LZQ.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-UQYBCJ2L.js';
+import { MIN_ENGINE_MAJOR } from './chunk-YF56R4DV.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-GFUE5TKO.js';
+import { runnerCredentialProblem } from './chunk-EPPIISRD.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';
 

package/dist/{chunk-JF572PM5.js → chunk-QKIQ2R7F.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-KDDFI5MR.js';
-import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-4IFKLYMM.js';
+import { launcherPath, writeLauncher, LauncherWriteError, pathNotes } from './chunk-QHH4OSD4.js';
+import { currentVersion, currentLink, isInLayout, packageRootIn, versionDir, switchCurrent, execStartLine } from './chunk-MATUHHN4.js';
 import { compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE } from './chunk-L4CW6LZQ.js';
+import { RUNNER_DIR_MODE } from './chunk-RHAGBUL5.js';
 import { realpathSync, readFileSync, mkdirSync, rmSync, cpSync, existsSync } from 'fs';
 import { dirname, sep, join } from 'path';
 

package/dist/{chunk-L4CW6LZQ.js → chunk-RHAGBUL5.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BUILD_HOME } from './chunk-2K3TCQHW.js';
+import { BUILD_HOME } from './chunk-2I3LIRZP.js';
 import { join, dirname } from 'path';
 
 createRequire(import.meta.url);
@@ -52,6 +52,9 @@ function contextHomeDir(configPath) {
 function stagedContextDir(buildDirPath) {
   return join(buildDirPath, "context");
 }
+function keptContextDir(jobDirPath) {
+  return join(jobDirPath, "governed-context");
+}
 function runnerDirOfBuild(buildDirPath) {
   return dirname(dirname(buildDirPath));
 }
@@ -81,4 +84,4 @@ function deliveryDir(repository, sha) {
   return `${BUILD_HOME}/.outerlayer/context/${repository}/${sha}`;
 }
 
-export { RUNNER_DIR_MODE, RUNNER_FILE_MODE, SHIM_DIR, attemptStamp, buildDir, buildsDir, contextHomeDir, deliveryDir, diskTemplatesDir, ghConfigDir, hostKeyPath, imagesDir, jobDir, jobsDir, mirrorDir, pidFilePath, repoCacheDir, rootfsDir, rootfsPathFor, runnerDir, runnerDirOfBuild, spoolDir, stagedContextDir, vmAssetsDir, vsockPath };
+export { RUNNER_DIR_MODE, RUNNER_FILE_MODE, SHIM_DIR, attemptStamp, buildDir, buildsDir, contextHomeDir, deliveryDir, diskTemplatesDir, ghConfigDir, hostKeyPath, imagesDir, jobDir, jobsDir, keptContextDir, mirrorDir, pidFilePath, repoCacheDir, rootfsDir, rootfsPathFor, runnerDir, runnerDirOfBuild, spoolDir, stagedContextDir, vmAssetsDir, vsockPath };

package/dist/{chunk-TKL74NLB.js → chunk-RHGF73IU.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-L4CW6LZQ.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
 import { readFileSync, existsSync, rmSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';