@outerlayer/cli 0.26.4 → 0.27.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @outerlayer/cli
 
+## 0.27.0
+
+### Minor Changes
+
+- a9019cb: `outerlayer init` installs the five maintained skills once per machine, in `~/.agents/skills/`, with a link to each in `~/.claude/skills/`. Each later `outerlayer` command keeps them at its own version. A repository in the `AGENTS.md` layout carries none of them. After every machine and runner host runs this version and each laptop runs `outerlayer init --local`, run `outerlayer init --update` in a repository to remove its copies. See the upgrade page.
+
+### Patch Changes
+
+- d835cd7: A microVM build keeps running when its runner restarts, crashes or updates. The runner keeps the build's sockets in its systemd service's file descriptor store, and takes the build over when it starts again. This needs the runner installed as a service with `outerlayer runner install --service`, the root helper, and systemd 254 or later. On an older systemd, a runner restart still ends the build.
+- 2c7ce38: A microVM build no longer sees the CPU's virtualization features, so it cannot start its own virtual machines. A root helper from an earlier release does not apply this, so run `outerlayer runner install --service --replace` to install the new helper. On a runner host, `outerlayer doctor` warns about nested virtualization, VMScape and an old runc.
+- 9c3a93c: A microVM build's guest now has `/dev/fd`, `/dev/stdin`, `/dev/stdout` and `/dev/stderr`, so bash process substitution such as `diff <(…) <(…)` works in a build.
+- e4dce78: The README says what `outerlayer runner init` writes on each machine, now that the microVM guest files and the root helper are published.
+- fd0850c: The runner image's end-to-end test gives a restarted runner's build up to 15 seconds to show that its command still runs.
+- b4381a6: The runner's tunnel refuses five more kinds of address. A container build's disk limit holds when `du` cannot measure its volume: two failed checks in a row end the build with `disk_check_failed`.
+- 7663eee: `outerlayer work status` names the repository when a work item's open pull request is in a repository the factory no longer connects.
+
 ## 0.26.4
 
 ### Patch Changes

package/README.md

@@ -216,14 +216,17 @@ content:
   from registries while the image builds, with the host's own `docker
   login`. The tools layer also downloads the pinned `gh` and `tini` releases
   from GitHub, checking each against a digest. The image build runs outside
-  any work item and sends nothing to your factory.
+  any work item and sends nothing to your factory. `outerlayer runner start`
+  builds each build's image the same way, before the build starts. That image
+  build uses the host's network: the build's tunnel does not carry it, and
+  `runner.build.allowHosts` does not limit it.
 - **`outerlayer runner start` with `builtin:vm` hooks** runs each build in its
-  own Firecracker microVM, which has no network device. The guest kernel and
-  helper are not published yet, so no host is offered `builtin:vm` and
-  `outerlayer doctor` fails it. Once they are, the first microVM
-  build downloads a pinned Firecracker release, a guest kernel and a guest
-  helper from github.com, and checks each against a sha256 pinned in the CLI;
-  the requests send nothing about the host. The build reaches the network only
+  own Firecracker microVM, which has no network device. The first microVM
+  build downloads a pinned Firecracker release from github.com. It also
+  downloads a guest kernel and a guest helper from the releases of the public
+  repository `outerlayerai/guest-assets` on github.com. The runner checks each
+  file against a sha256 pinned in the CLI, and the requests send nothing about
+  the host. The microVM reaches the network only
   through the same tunnel a container build uses, which the runner serves on
   Unix sockets and the guest reaches over vsock. In a build with Docker, the
   guest forwards the proxy connections of containers and `docker build` steps
@@ -255,7 +258,7 @@ content:
   stream into `docker exec -i` running `outerlayer receive-files` as that
   unprivileged user, so nothing from the runner's disk is mounted into the
   container and the agent cannot change what it reads. (A build an older
-  runner started keeps its mounted folder and its Unix sockets until it ends.) The build
+  runner started keeps its mounted folder and its Unix sockets until it ends.) The build's container
   reaches the network only through a tunnel the runner serves. The tunnel refuses loopback, private, link-local,
   shared-address, multicast and unique-local addresses and the host's own,
   and it terminates no TLS. The tunnel also serves the build a local git
@@ -461,7 +464,7 @@ before it gives up.
 | `outerlayer work claim --item <n>\|--issue <n> --kind implement\|amend [--repo] [--host] [--seconds]` | Records a lease for this host (default: its own hostname), so two hosts never build the same item at once. The lease belongs to the runner key that claimed it: a live lease held by a different key is refused, even under the same host name, and claiming again with the same key extends it. The first claim creates the host key (`host-key.pem` beside the config file) and binds the runner key to it; from then on every request made with that key is signed. Lease length defaults to 900 seconds, the server's own cap. |
 | `outerlayer work renew --item <n>\|--issue <n> [--repo] [--host] [--seconds]` | Extends this host's own live lease. Refused if the lease has expired, or if a different runner key holds it (403 `claim_not_held`). |
 | `outerlayer work release --item <n>\|--issue <n> [--repo] [--host] [--session-id] [--outcome]` | Marks the lease this API key holds released, optionally recording how the attempt ended. Releasing an already-released lease is a no-op that returns the recorded release time and outcome. Run inside a session with no `--host`, it releases that session's own lease instead (`--session-id` names the session when it cannot be detected), so the item's review opens without ending the session. |
-| `outerlayer runner init [--vm\|--no-vm] [--factory <org>/<factory>] [--app-id <id>] [--config <path>]` | Writes a `runner` block with defaults, keeping every key the config already had. With no `apiKey` in the config and a saved login, it prints the API keys page of the factory `--factory` or `--app-id` names (the only factory the login can use, when neither is given), asks you to paste a runner key made with the Runner preset, and checks it before anything else changes. With no terminal it stops and says what to put in the config. It names `builtin:vm` on a Linux machine where the user can use `/dev/kvm` and Docker Engine can build images once the guest kernel and helper are published (not yet), `builtin:container` on that machine until then, `builtin:container` on any other machine with Docker Engine, and `builtin:process` on one without, and writes no hook script. Refuses rather than overwriting an existing block. On macOS it asks whether to create a Linux VM with Lima, installs Docker Engine and the runner in it, and starts both at login; `--vm` answers yes and `--no-vm` answers no, and a run with no terminal answers no. The runner key and the host key then live only in the VM: the Mac's config loses `apiKey` and `runner` and gains a `runnerVm` note, which `outerlayer doctor` reads. |
+| `outerlayer runner init [--vm\|--no-vm] [--allow-process-builds] [--factory <org>/<factory>] [--app-id <id>] [--config <path>]` | Writes a `runner` block with defaults, keeping every key the config already had. With no `apiKey` in the config and a saved login, it prints the API keys page of the factory `--factory` or `--app-id` names (the only factory the login can use, when neither is given), asks you to paste a runner key made with the Runner preset, and checks it before anything else changes. With no terminal it stops and says what to put in the config. It names `builtin:vm` on x86_64 Linux, not WSL2, where the user can open `/dev/kvm` and Docker Engine 26 or later runs. It names `builtin:container` on any other Linux or WSL2 machine with Docker Engine 26 or later. On a machine with neither, it refuses unless `--allow-process-builds` is given, and then names `builtin:process`. It writes no hook script. Refuses rather than overwriting an existing block. On macOS it asks whether to create a Linux VM with Lima, installs Docker Engine and the runner in it, and starts both at login; `--vm` answers yes, and `--no-vm` answers no, which names `builtin:process`. The runner key and the host key then live only in the VM: the Mac's config loses `apiKey` and `runner` and gains a `runnerVm` note, which `outerlayer doctor` reads. With neither flag and no terminal, it refuses. |
 | `outerlayer runner check [--config <path>]` | Validates the config, the hooks and the key, prints the settings the runner would use, and exits non-zero on a problem. Takes no work and writes no pid file. |
 | `outerlayer runner start [--config <path>]` | Runs the loop: claim work, run it, sync, clean up, report, release with an outcome. Repeat. Reads the `runner` block from the config file (default `~/.outerlayer/config.json`). Refuses to start on a bad config, an unrunnable hook, or a refused key. |
 | `outerlayer runner image --repository <owner/name> [--remote <url>] [--config <path>] [--json]` | Builds the image a repository's builds run in. Fetches the head of the default branch into the runner's cache, builds its `.devcontainer/devcontainer.json` with the devcontainer CLI, ignores every setting that reaches the host or widens the container's privileges, and adds this CLI and a pinned Claude Code. Reuses the image until the recipe or the tools change, keeps the newest three, and writes `recipe.json` beside the image record. Refuses a Compose recipe (`recipe_needs_docker`) and a repository with only named configurations (`recipe_ambiguous`). |

package/dist/{agent-setup-5DXPEO64.js → agent-setup-UW36TAQM.js}

@@ -1,18 +1,18 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { keepHandWritten, runAgentSetup } from './chunk-KNBWOL2B.js';
-import './chunk-WX2WEERU.js';
-import './chunk-VJBFQP3H.js';
-import './chunk-4UFSTKE5.js';
-import './chunk-MQ743JX3.js';
-import './chunk-MCSINUVC.js';
+export { keepHandWritten, runAgentSetup } from './chunk-FP23SVDD.js';
+import './chunk-WUL2OP5A.js';
+import './chunk-XZ6Q6ZNR.js';
+import './chunk-LOKSLO25.js';
+import './chunk-BPKO76QR.js';
+import './chunk-MHX7YX7Y.js';
+import './chunk-BWH36FOC.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-BJ3KTMDH.js';
+import './chunk-7OUOLGUV.js';
 import './chunk-KT4CN6OU.js';
 import './chunk-ANPNT6PM.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-JKNYTNYD.js';
-import './chunk-HBISTTG3.js';
 import './chunk-CRB3POP4.js';
 import './chunk-VWFOKRYS.js';
 import './chunk-YQR6E6OV.js';
@@ -21,9 +21,9 @@ import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-RA3O54FC.js';
-import './chunk-GWRDL75D.js';
-import './chunk-F3BBEBPL.js';
-import './chunk-2K3TCQHW.js';
+import './chunk-Y4OKEFAX.js';
+import './chunk-RHAGBUL5.js';
+import './chunk-2I3LIRZP.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{bridge-5KZ36YDG.js → bridge-B5VJVECY.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-UNF7MWEL.js';
-import './chunk-2K3TCQHW.js';
+export { BRIDGE_ADDRESS, BRIDGE_CIDR, CONTAINER_NO_PROXY, CONTAINER_PROXY, TUNNEL_PORT, dockerClientConfig, startBridgeForward, writeDockerClientConfig } from './chunk-XS3FDWSZ.js';
+import './chunk-2I3LIRZP.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{build-F5QWH7G5.js → build-TNM7HYCA.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-GFHLEVUE.js';
-import './chunk-IZAOO5AR.js';
+export { buildRepositoryImage } from './chunk-24ID7EQ2.js';
+import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 export { RecipeError } from './chunk-B6K7R5UY.js';
-import './chunk-F3BBEBPL.js';
-import './chunk-2K3TCQHW.js';
+import './chunk-RHAGBUL5.js';
+import './chunk-2I3LIRZP.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-16T21:01:44.837Z+065fff7","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-17T00:24:12.932Z+fca5378","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-KDUXCHTY.js → builder-LDJGS2JC.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-QUP6CVBQ.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-JH2GQU5T.js';
 import './chunk-B6K7R5UY.js';
-import './chunk-7RQ73DLO.js';
+import './chunk-YJLHUKYS.js';
 import './chunk-QE3UQAHK.js';
 import './chunk-QZBXLLTV.js';
-import './chunk-GWRDL75D.js';
-import './chunk-F3BBEBPL.js';
-import './chunk-2K3TCQHW.js';
+import './chunk-Y4OKEFAX.js';
+import './chunk-RHAGBUL5.js';
+import './chunk-2I3LIRZP.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 

package/dist/{check-ZSYCR5WG.js → check-JVBAWIN6.js}

@@ -1,64 +1,65 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-V3YJFEZA.js';
-import './chunk-27RDUTQH.js';
-import './chunk-OFTFW7TH.js';
+import { probeCredentials } from './chunk-ZXRWMOJ3.js';
+import './chunk-RK7FWC6B.js';
+import './chunk-RHGF73IU.js';
 import './chunk-ZVB57WI6.js';
-import './chunk-NWPRNKZ5.js';
+import './chunk-ABXQBEYK.js';
 import './chunk-3JVYMD4G.js';
 import './chunk-YETTWTAY.js';
 import './chunk-TPKYTORP.js';
-import './chunk-Q2SVLBMI.js';
-import './chunk-MWPBF2XG.js';
-import './chunk-UNF7MWEL.js';
-import './chunk-VQ7OAG6H.js';
-import './chunk-WK35HB56.js';
+import './chunk-Y7ZCHBYB.js';
+import './chunk-6KKM7VGZ.js';
+import './chunk-XS3FDWSZ.js';
+import './chunk-VS27BP3E.js';
+import './chunk-O2IJTY7L.js';
 import './chunk-ESVW4MJY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-UOGQZQXN.js';
-import './chunk-7Z2WMXM5.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-WVDP6HVZ.js';
+import './chunk-MATUHHN4.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import './chunk-OQUD3UYF.js';
-import './chunk-EHBDYLM6.js';
-import './chunk-SBW4K3XZ.js';
-import './chunk-2J46BQ5Y.js';
+import './chunk-QIVOTQOQ.js';
+import './chunk-UQYBCJ2L.js';
+import './chunk-YF56R4DV.js';
+import './chunk-WSYXLLA5.js';
+import './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
-import './chunk-VGHKTSHU.js';
-import './chunk-6SPXKRQR.js';
-import { parseRunnerEnv } from './chunk-6MZSX4M7.js';
-import './chunk-GFHLEVUE.js';
-import './chunk-IZAOO5AR.js';
+import './chunk-GFUE5TKO.js';
+import './chunk-7AQ5AM7U.js';
+import './chunk-YB3CSYXX.js';
+import { parseRunnerEnv } from './chunk-STSLH5EJ.js';
+import './chunk-24ID7EQ2.js';
+import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-QUP6CVBQ.js';
+import './chunk-JH2GQU5T.js';
 import './chunk-B6K7R5UY.js';
-import './chunk-MXTN35XN.js';
-import './chunk-XLC7KEUV.js';
-import './chunk-OZKEEXVH.js';
-import './chunk-6CGXSMKX.js';
-import './chunk-H57M3HC7.js';
-import './chunk-PZA6ZFYW.js';
+import './chunk-XBPUTQ7E.js';
+import './chunk-GLUKDQS4.js';
+import './chunk-55GNQPO6.js';
+import './chunk-2F762IXY.js';
+import './chunk-N4D5TMVU.js';
 import './chunk-BUP5N3X6.js';
+import './chunk-LOKSLO25.js';
 import './chunk-6BLXUD56.js';
 import './chunk-G2JWZDFA.js';
-import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-JWRX5ZTT.js';
+import { loadRunnerConfig, RunnerConfigError, checkHooks } from './chunk-EPPIISRD.js';
 import './chunk-UXYLWVTQ.js';
-import './chunk-7RQ73DLO.js';
-import './chunk-4UFSTKE5.js';
-import './chunk-MQ743JX3.js';
-import './chunk-MCSINUVC.js';
-import './chunk-UZEQVPKF.js';
+import './chunk-YJLHUKYS.js';
+import './chunk-BPKO76QR.js';
+import './chunk-MHX7YX7Y.js';
+import './chunk-BWH36FOC.js';
+import './chunk-DJHNEGNM.js';
 import './chunk-ZJSNLVCE.js';
 import './chunk-2O5KA67H.js';
 import './chunk-BKO6JEZI.js';
-import './chunk-VPEGE3QZ.js';
+import './chunk-6TRNCUM4.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
+import './chunk-7OUOLGUV.js';
 import './chunk-QE3UQAHK.js';
 import './chunk-ANPNT6PM.js';
 import './chunk-PJDQPF5N.js';
-import './chunk-JKNYTNYD.js';
-import './chunk-HBISTTG3.js';
 import './chunk-T2Q7ISPE.js';
 import './chunk-WZBHBH3J.js';
 import './chunk-CRB3POP4.js';
@@ -69,9 +70,9 @@ import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';
 import './chunk-VNVZDWO3.js';
 import './chunk-RA3O54FC.js';
-import './chunk-GWRDL75D.js';
-import './chunk-F3BBEBPL.js';
-import './chunk-2K3TCQHW.js';
+import './chunk-Y4OKEFAX.js';
+import './chunk-RHAGBUL5.js';
+import './chunk-2I3LIRZP.js';
 import './chunk-JGD5TWQ2.js';
 import './chunk-Z5GEFMRW.js';
 import { readFileSync } from 'fs';

package/dist/{chunk-GFHLEVUE.js → chunk-24ID7EQ2.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-IZAOO5AR.js';
+import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-D7ECMB7B.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
 import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, RecipeError, locateRecipe, readRecipe, assertBuildable, TINI_VERSION, GH_VERSION, writeSanitizedRecipe, classifyProperties, GH_SHA256, TINI_SHA256, SANITIZED_NAME } from './chunk-B6K7R5UY.js';
-import { RUNNER_DIR_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor, RUNNER_FILE_MODE } from './chunk-F3BBEBPL.js';
-import { withGitConfig, tokenHeader, PROXY_WARNING_FLAG } from './chunk-2K3TCQHW.js';
+import { RUNNER_DIR_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
+import { withGitConfig, tokenHeader, PROXY_WARNING_FLAG } from './chunk-2I3LIRZP.js';
 import { RELAY_ID, RELAY_USER } from './chunk-JGD5TWQ2.js';
 import { mkdirSync, rmSync, existsSync, mkdtempSync, cpSync, readFileSync, writeFileSync, readdirSync, lstatSync, readlinkSync } from 'fs';
 import { tmpdir } from 'os';
@@ -184,6 +184,8 @@ function toolsDockerfile(parts) {
     `RUN npm install --global --prefix /out/opt/outerlayer/claude @anthropic-ai/claude-code@${version}`,
     "COPY dist /out/opt/outerlayer/cli/dist",
     "COPY package.json /out/opt/outerlayer/cli/package.json",
+    // `outerlayer claude` installs the maintained skills from this pack into the build's home folder before the agent starts.
+    "COPY skill-pack /out/opt/outerlayer/cli/skill-pack",
     "RUN mkdir -p /out/opt/outerlayer/bin /out/usr/local/bin /out/etc/claude-code /out/build \\",
     " && cp /usr/local/bin/node /out/opt/outerlayer/bin/node \\",
     ` && printf '%s\\n' '#!/bin/sh' 'exec /opt/outerlayer/bin/node /opt/outerlayer/cli/dist/index.js "$@"' > /out/usr/local/bin/outerlayer \\`,
@@ -443,6 +445,7 @@ async function buildRepositoryImage(opts, ports) {
       try {
         cpSync(opts.cli.distDir, join(context, "dist"), { recursive: true });
         cpSync(join(opts.cli.distDir, "..", "package.json"), join(context, "package.json"));
+        cpSync(join(opts.cli.distDir, "..", "skill-pack"), join(context, "skill-pack"), { recursive: true });
         if (opts.guestHelper !== void 0) {
           mkdirSync(join(context, "guest"));
           cpSync(opts.guestHelper.path, join(context, "guest", "outerlayer-guest"));

package/dist/{chunk-H57M3HC7.js → chunk-2F762IXY.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-PZA6ZFYW.js';
-import { resolveGatewayCredentials } from './chunk-MCSINUVC.js';
+import { fetchFactories, selectFactory, saveFactoryConnection, autoConnectedLine } from './chunk-N4D5TMVU.js';
+import { resolveGatewayCredentials } from './chunk-BWH36FOC.js';
 import { findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { resolveRepoIdentity } from './chunk-QE3UQAHK.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-2K3TCQHW.js → chunk-2I3LIRZP.js}

@@ -270,12 +270,16 @@ async function startDestination(input) {
     if (Buffer.byteLength(input.socketPath) > MAX_SOCKET_PATH_BYTES) {
       throw new Error(`${input.socketPath} is too long for a Unix socket; keep the runner's config file nearer the root of the filesystem`);
     }
-    if (existsSync(input.socketPath)) unlinkSync(input.socketPath);
-    await new Promise((resolve, reject) => {
-      server.once("error", reject);
-      server.listen(input.socketPath, () => resolve());
-    });
-    chmodSync(input.socketPath, 438);
+    if (input.listenOn !== void 0) {
+      await input.listenOn(server);
+    } else {
+      if (existsSync(input.socketPath)) unlinkSync(input.socketPath);
+      await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(input.socketPath, () => resolve());
+      });
+      chmodSync(input.socketPath, 438);
+    }
     served.socketPath = input.socketPath;
   }
   if (input.port !== void 0) {
@@ -292,18 +296,26 @@ async function startDestination(input) {
     for (const socket of sockets) socket.destroy();
     await Promise.all(listeners.map((listener) => new Promise((resolve) => listener.close(() => resolve()))));
   };
-  return { ...served, acceptStream: (stream) => void server.emit("connection", stream), close };
+  return { ...served, acceptStream: (stream) => void server.emit("connection", stream), listener: () => input.socketPath === void 0 ? void 0 : server, close };
 }
 async function startBuildServices(input) {
   const streamed = input.serve === "stream";
+  const listenOnFor = (socket) => {
+    const listenOn = input.inherit?.(socket);
+    return listenOn === void 0 ? {} : { listenOn };
+  };
+  const listeners = {};
   const tunnel = await input.startTunnel(join(input.buildDir, "tunnel.sock"), {
     ...input.tunnelOptions,
     ...streamed ? { socket: false } : {},
+    ...streamed ? {} : listenOnFor("tunnel.sock"),
     ...input.allowHosts === void 0 ? {} : { allowHosts: input.allowHosts },
     recordPath: join(input.jobDir, "tunnel.json")
   });
   const servers = [];
   const targets = /* @__PURE__ */ new Map();
+  const tunnelListener = tunnel.listener?.();
+  if (tunnelListener !== void 0) listeners["tunnel.sock"] = tunnelListener;
   if (streamed) targets.set(TARGET_TUNNEL, (stream) => tunnel.acceptStream(stream));
   if (streamed && input.lease !== void 0) targets.set(TARGET_LEASE, (stream) => input.lease.accept(stream));
   const closeAll = async () => {
@@ -319,12 +331,15 @@ async function startBuildServices(input) {
       const server = await startDestination({
         destination,
         ...input.serve === "tcp" || streamed ? {} : { socketPath: destinationSocketPath(input.buildDir, index) },
+        ...input.serve === "tcp" || streamed ? {} : listenOnFor(`dest-${index}.sock`),
         ...input.serve === "socket" || streamed ? {} : { port: input.ports?.destinations?.[index] ?? 0 },
         hostEnv: input.hostEnv,
         onUsed: (name) => tunnel.destinationUsed(name),
         ...input.destinationOptions
       });
       servers.push(server);
+      const listener = server.listener?.();
+      if (listener !== void 0) listeners[`dest-${index}.sock`] = listener;
       targets.set(destinationTarget(index), (stream) => server.acceptStream(stream));
       if (server.port !== void 0) destinationPorts.push(server.port);
     }
@@ -333,6 +348,7 @@ async function startBuildServices(input) {
       const server = await startDestination({
         destination: builtIn.destination,
         ...input.serve === "tcp" || streamed ? {} : { socketPath: join(input.buildDir, builtIn.socket) },
+        ...input.serve === "tcp" || streamed ? {} : listenOnFor(builtIn.socket),
         ...input.serve === "socket" || streamed ? {} : { port: input.ports?.builtIns?.[builtIn.destination.name] ?? 0 },
         hostEnv: builtIn.hostEnv,
         drop: builtIn.drop,
@@ -340,6 +356,8 @@ async function startBuildServices(input) {
         ...input.destinationOptions
       });
       servers.push(server);
+      const listener = server.listener?.();
+      if (listener !== void 0) listeners[builtIn.socket] = listener;
       targets.set(builtIn.destination.name, (stream) => server.acceptStream(stream));
       if (server.port !== void 0) builtInPorts[builtIn.destination.name] = server.port;
     }
@@ -350,7 +368,7 @@ async function startBuildServices(input) {
         serve(stream);
         return true;
       }
-    }, proxyPort, destinationPorts, builtInPorts, close: closeAll };
+    }, proxyPort, destinationPorts, builtInPorts, listeners, close: closeAll };
   } catch (err) {
     await closeAll();
     throw err;

package/dist/{chunk-6CGXSMKX.js → chunk-55GNQPO6.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectActiveSession, autoConnect } from './chunk-H57M3HC7.js';
-import { workPageUrl } from './chunk-PZA6ZFYW.js';
+import { detectActiveSession, autoConnect } from './chunk-2F762IXY.js';
+import { workPageUrl } from './chunk-N4D5TMVU.js';
 import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
-import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-MCSINUVC.js';
+import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-BWH36FOC.js';
 import { readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { resolveRepoIdentity } from './chunk-QE3UQAHK.js';
 import { C } from './chunk-ANPNT6PM.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { signRunnerRequest } from './chunk-GWRDL75D.js';
+import { signRunnerRequest } from './chunk-Y4OKEFAX.js';
 
 createRequire(import.meta.url);
 
@@ -428,7 +428,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-XMZFMBKC.js');
+      const { logHookError } = await import('./hook-fast-3SUJM765.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }
@@ -521,11 +521,22 @@ function mergedUnverifiedLine(data) {
   const at = typeof block.mergedAt === "string" ? ` at ${sanitizeTerminal(block.mergedAt)}` : "";
   return `${C.yellow}Merged, unverified${C.reset}: the pull request merged${at} before its checks or review passed, so the stage stays at review.
 
+`;
+}
+function repositoryDisconnectedLine(data) {
+  const pullRequests = data.pullRequests;
+  if (!Array.isArray(pullRequests)) return "";
+  const names = pullRequests.filter((pr) => pr.repositoryConnected === false).map((pr) => sanitizeTerminal(`${String(pr.repository)}#${String(pr.prNumber)}`));
+  if (names.length === 0) return "";
+  const number = data.number;
+  const item = typeof number === "number" ? String(number) : "<n>";
+  return `${C.yellow}Repository disconnected${C.reset}: this factory no longer connects the repository of ${names.join(", ")}. Connect it again in Settings, or run outerlayer work remove --item ${item} to remove the item from Work.
+
 `;
 }
 function statusOutput(data, json) {
   if (json) return JSON.stringify(data);
-  const document = mergedUnverifiedLine(data) + JSON.stringify(data, null, 2);
+  const document = mergedUnverifiedLine(data) + repositoryDisconnectedLine(data) + JSON.stringify(data, null, 2);
   const criteria = data.criteria;
   if (criteria === void 0) return document;
   if (criteria === null || !Array.isArray(criteria.items)) return `${document}

package/dist/{chunk-MWPBF2XG.js → chunk-6KKM7VGZ.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-UNF7MWEL.js';
+import { BRIDGE_ADDRESS, TUNNEL_PORT, BRIDGE_CIDR } from './chunk-XS3FDWSZ.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { EXEC_PORT } from './chunk-XLC7KEUV.js';
-import { RELAY_PORT } from './chunk-2K3TCQHW.js';
+import { EXEC_PORT } from './chunk-GLUKDQS4.js';
+import { RELAY_PORT } from './chunk-2I3LIRZP.js';
 import { spawn, spawnSync } from 'child_process';
-import { writeFileSync, chmodSync, mkdirSync } from 'fs';
+import { symlinkSync, lstatSync, writeFileSync, chmodSync, mkdirSync } from 'fs';
 
 createRequire(import.meta.url);
 var HELPER_PATH = "/opt/outerlayer/bin/outerlayer-guest";
@@ -31,6 +31,22 @@ function relayPortsFrom(cmdline) {
     return port;
   });
 }
+function linkDescriptorPaths(host) {
+  const links = [
+    ["/dev/fd", "/proc/self/fd"],
+    ["/dev/stdin", "/proc/self/fd/0"],
+    ["/dev/stdout", "/proc/self/fd/1"],
+    ["/dev/stderr", "/proc/self/fd/2"]
+  ];
+  for (const [path, target] of links) {
+    if (host.exists(path)) continue;
+    try {
+      host.symlink(target, path);
+    } catch (err) {
+      host.warn(`vm-init: linking ${path} to ${target} failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  }
+}
 function dockerRequestedBy(cmdline) {
   return new RegExp(`(?:^|\\s)${DOCKER_FLAG.replace(".", "\\.")}=1(?:\\s|$)`).test(cmdline);
 }
@@ -59,6 +75,7 @@ function startDocker(host) {
 }
 function runGuestInit(host, cmdline) {
   const ports = relayPortsFrom(cmdline);
+  linkDescriptorPaths(host);
   host.mount({ source: BUILD_DISK, target: "/build", type: "ext4" });
   host.chmod("/build", WORLD_WRITABLE);
   for (const path of BUILD_DIRECTORIES) {
@@ -101,6 +118,17 @@ function realGuestHost() {
     mkdir: (path, mode) => void mkdirSync(path, { recursive: true, mode }),
     chmod: (path, mode) => chmodSync(path, mode),
     writeFile: (path, text) => writeFileSync(path, text),
+    exists(path) {
+      try {
+        lstatSync(path);
+        return true;
+      } catch {
+        return false;
+      }
+    },
+    symlink: (target, path) => symlinkSync(target, path),
+    warn: (text) => void process.stderr.write(`${text}
+`),
     spawnDetached(argv) {
       const child = spawn(argv[0], argv.slice(1), { detached: true, stdio: ["ignore", "inherit", "inherit"] });
       child.unref();

package/dist/{chunk-VPEGE3QZ.js → chunk-6TRNCUM4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { rewriteControlPlanePaths, rewriteAgentsFilePaths, SUPPORTED_CONTROL_PLANE_LAYOUT, rewriteHookCommand } from './chunk-HCVLP7XA.js';
-import { MAINTAINED_SKILLS } from './chunk-HBISTTG3.js';
+import { MAINTAINED_SKILLS } from './chunk-7OUOLGUV.js';
 import { existsSync, mkdirSync, copyFileSync, lstatSync, readdirSync, writeFileSync, readFileSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-6SPXKRQR.js → chunk-7AQ5AM7U.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { builtinKind } from './chunk-JWRX5ZTT.js';
-import { parseSize } from './chunk-7RQ73DLO.js';
-import { runnerDir } from './chunk-F3BBEBPL.js';
+import { FD_SLOTS_PER_BUILD, FD_STORE_ENV } from './chunk-YB3CSYXX.js';
+import { builtinKind } from './chunk-EPPIISRD.js';
+import { parseSize } from './chunk-YJLHUKYS.js';
+import { runnerDir } from './chunk-RHAGBUL5.js';
 import { dirname } from 'path';
 import { spawnSync } from 'child_process';
 
@@ -28,6 +29,7 @@ ${helperService === void 0 ? "" : `Wants=${helperService}
 User=${unit.user}
 ExecStart=${unit.execStart}
 ${unit.helper === void 0 ? "" : `Environment=OUTERLAYER_HELPER_SOCKET=${unit.helper.socket}
+`}${unit.fdStore === void 0 ? "" : `Environment=${FD_STORE_ENV}=${unit.fdStore}
 `}EnvironmentFile=-${escapeUnitPath(`${unit.configDir}/runner.env`)}
 Restart=on-failure
 RestartForceExitStatus=75
@@ -37,7 +39,10 @@ KillMode=mixed
 TimeoutStopSec=${unit.timeLimitMinutes + STOP_MARGIN_MINUTES}min
 OOMPolicy=continue
 Delegate=yes
-
+${unit.fdStore === void 0 ? "" : `NotifyAccess=all
+FileDescriptorStoreMax=${unit.fdStore}
+FileDescriptorStorePreserve=yes
+`}
 [Install]
 WantedBy=multi-user.target
 `;
@@ -147,7 +152,9 @@ function installService(request, deps) {
     execStart: request.execStart,
     timeLimitMinutes: request.timeLimitMinutes,
     docker: kind === "container" || kind === "vm" || builtinKind(request.hooks.cleanup) === "container" || builtinKind(request.hooks.cleanup) === "vm",
-    ...request.helperSocket !== void 0 && request.helperUnit !== void 0 ? { helper: { unit: request.helperUnit, socket: request.helperSocket } } : {}
+    ...request.helperSocket !== void 0 && request.helperUnit !== void 0 ? { helper: { unit: request.helperUnit, socket: request.helperSocket } } : {},
+    // A microVM build under the helper keeps its sockets in the descriptor store, so the runner can restart and the build goes on.
+    ...kind === "vm" && request.helperSocket !== void 0 && request.helperUnit !== void 0 ? { fdStore: Math.max(1, request.concurrency) * FD_SLOTS_PER_BUILD } : {}
   });
   if (request.print === true) return outcome(true, "printed", [], unit);
   if (own) return outcome(false, "refused", [OWN_HOOKS]);