@outerlayer/cli 0.27.0 → 0.27.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @outerlayer/cli
 
+## 0.27.1
+
+### Patch Changes
+
+- 2f7b6ce: The root helper that `outerlayer runner install --service` installs hides the CPU's virtualization features from a microVM build. The helper that 0.27.0 installed did not, so a build under it still saw them. Run `outerlayer runner install --service --replace` to install this release's helper.
+- 2f7b6ce: On Windows, the link that `outerlayer init` makes for each maintained skill in `~/.claude/skills` points at the skill's folder when `~/.claude` is itself a link to another folder.
+
 ## 0.27.0
 
 ### Minor Changes

package/dist/{build-TNM7HYCA.js → build-HRLACBOZ.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { buildRepositoryImage } from './chunk-24ID7EQ2.js';
+export { buildRepositoryImage } from './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
-export { RecipeError } from './chunk-B6K7R5UY.js';
+export { RecipeError } from './chunk-2BTFKNTR.js';
 import './chunk-RHAGBUL5.js';
 import './chunk-2I3LIRZP.js';
 import './chunk-JGD5TWQ2.js';

package/dist/build-info.json

@@ -1 +1 @@
-{"id":"2026-10-17T00:24:12.932Z+fca5378","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}
+{"id":"2026-10-17T02:13:52.216Z+7e5bff4","root":"/home/runner/_work/outerlayer/outerlayer","pkg":"outerlayer"}

package/dist/{builder-LDJGS2JC.js → builder-6Y6ZWGNH.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+export { MIN_BUILDX_VERSION, builderName, builderSpec, buildxState, ensureBuilder, ensureFailureCount, isOutOfMemory, proxyEnvironment, trackImageBuild } from './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-QE3UQAHK.js';
 import './chunk-QZBXLLTV.js';

package/dist/{check-JVBAWIN6.js → check-YTXFVWK7.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { probeCredentials } from './chunk-ZXRWMOJ3.js';
-import './chunk-RK7FWC6B.js';
+import { probeCredentials } from './chunk-5VMDGJGH.js';
+import './chunk-6VFH52MP.js';
 import './chunk-RHGF73IU.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-ABXQBEYK.js';
@@ -14,13 +14,13 @@ import './chunk-XS3FDWSZ.js';
 import './chunk-VS27BP3E.js';
 import './chunk-O2IJTY7L.js';
 import './chunk-ESVW4MJY.js';
-import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-WVDP6HVZ.js';
+import { placeholderQueues, placeholderProblem, permissionModeProblems, permissionModeProblem, needsClaudeCredential, claudeCredentialCheck, claimPermissionProblem, formerSkillQueues, formerSkillProblem } from './chunk-ZFBJUOYT.js';
 import './chunk-MATUHHN4.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import './chunk-QIVOTQOQ.js';
-import './chunk-UQYBCJ2L.js';
-import './chunk-YF56R4DV.js';
+import './chunk-64GMBWAK.js';
+import './chunk-B7DJVG25.js';
+import './chunk-R7SGBXUD.js';
 import './chunk-WSYXLLA5.js';
 import './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
@@ -28,12 +28,12 @@ import './chunk-GFUE5TKO.js';
 import './chunk-7AQ5AM7U.js';
 import './chunk-YB3CSYXX.js';
 import { parseRunnerEnv } from './chunk-STSLH5EJ.js';
-import './chunk-24ID7EQ2.js';
+import './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+import './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-XBPUTQ7E.js';
 import './chunk-GLUKDQS4.js';
 import './chunk-55GNQPO6.js';

package/dist/{chunk-B6K7R5UY.js → chunk-2BTFKNTR.js}

@@ -264,10 +264,10 @@ function guestAssetsPinned(arch) {
 var JAILER_BINARY_SHA256 = {
   x86_64: "65ef226e96f0ceda55ba643f445801ef2cc0ea667ef67cad8ac4f406c9c8434f"
 };
-var HOST_HELPER_ASSETS_VERSION = "8";
+var HOST_HELPER_ASSETS_VERSION = "9";
 var HOST_HELPER_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${HOST_HELPER_ASSETS_VERSION}`;
 var HOST_HELPER_SHA256 = {
-  x86_64: "7c3a80da5e68adf3eb1eb407df0c770ccef589eb2da2f11735a9f9c05dc0d650"
+  x86_64: "c6f8e8ef6b65e4fff22379aa686d5977864fcbcc06f324672cbb90815a5076e5"
 };
 function hostHelperPinned(arch = "x86_64", hashes = HOST_HELPER_SHA256) {
   return hashes[arch] !== "0".repeat(64);

package/dist/{chunk-ZXRWMOJ3.js → chunk-5VMDGJGH.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-RK7FWC6B.js';
+import { releaseLease, isUnfinished, setStage, jobEnv, runHook, describeHookEnd, provisionMicroVm, deliverCommitHooks, provisionProcess, provisionEnvironment, readProvisionOut, resolveHostBuild, workdirProblem, listenOnBroker, hostEnvironment, hostCommandEnvironment, execArgv, MICROVM_COMMAND_DIR, commandLogOffset, startMicroVmCommand, microVmCommandLine, runCommand, execCommandLine, startSender, startHostServices, finishJob, isContainerTracked, isMicroVmTracked, probeMicroVmCommand, probeCommand, appendCommandLog, judgeProbe, EXIT_CODE_FILE, isTracked, isGroupAlive, outcomeFromExitCode, isTimedOut, readCpuUsec, isIdle, stopOrphanedMicroVms, unfinishedJobs, listUnreadableJobs, listAdoptableJobs, retryFailedReleases, recoverLostJobs, hookLimitsFor, AttemptLogBook, microVmOomKills, needsRenew, renewLease, RENEW_INTERVAL_SECONDS, listTrackedJobs, restartSender, serveLease, vmAlive, writeGuestGhConfig, ALREADY_RELEASED, inTeardown } from './chunk-6VFH52MP.js';
 import { writePendingUpdate } from './chunk-RHGF73IU.js';
 import { JOB_STATE_FORMAT, readsJobState, jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import { readHousekeepingRecord, writeHousekeepingRecord } from './chunk-ABXQBEYK.js';
 import { decideInstalledSwitch } from './chunk-3JVYMD4G.js';
 import { fetchVersionMeta, npmVersion, npmSupportsProvenance, fetchTarballDigest, fetchProvenance, installVersion, auditSignatures } from './chunk-YETTWTAY.js';
 import { RUNNER_PROTOCOL } from './chunk-TPKYTORP.js';
-import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-WVDP6HVZ.js';
+import { currentSkillCommand, formerSkillProblem, placeholderQueues, placeholderProblem } from './chunk-ZFBJUOYT.js';
 import { writeMarker, readMarker, currentVersion, removeMarker, entryIn, versionDir, startedThroughCurrent, switchCurrent, isInLayout, cleanVersions, stagingDir } from './chunk-MATUHHN4.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import { leaseTimeLeftMs, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, createContainerRuntime, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-YF56R4DV.js';
+import { leaseTimeLeftMs, LEASE_SECONDS, provisionContainer, leaseExpiresAtMs, deliverContainerHooks, lifecycleSteps, lifecycleFailureReason, prepareBranch, containerCommandExec, setUpRunnerCgroup, createContainerRuntime, measureDisk, parseCpuList, ensureTunnel, keepGhConfigCurrent, filesAreCopied, gitRemoteFor, startServicesFor, createLeaseChannel } from './chunk-R7SGBXUD.js';
 import { describeCallFailure, retrySend, shortClaim, relativeToRunner, formatDuration, BuildTokens, classifyRefusal, refusalCode, createRunnerLog, formatClock } from './chunk-WSYXLLA5.js';
 import { tagToPull, pullInstruction, imageTag, writeUpdateStatus } from './chunk-M3MHHIUW.js';
 import { isVersion, compareVersions, satisfiesRange } from './chunk-TQMI335S.js';
@@ -19,7 +19,7 @@ import { checkFit } from './chunk-7AQ5AM7U.js';
 import { fdName } from './chunk-YB3CSYXX.js';
 import { claimPidFile, writePidFile, readPidFile, releasePidFile } from './chunk-D7ECMB7B.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
-import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-JH2GQU5T.js';
+import { writeJobFile, ensureRunnerIdentity, readJobFile, builderName, runnerLabelValue, ensureFailureCount, builderSpec, ensureBuilder, spawnRun, BUILD_LABEL, RUNNER_LABEL, readJobFileChecked } from './chunk-EX5MQYEF.js';
 import { isSignatureRefusal, WorkCommandError, getJson, postJson } from './chunk-55GNQPO6.js';
 import { isBuiltinContainer, isBuiltinVm, isBuiltinProcess, loadRunnerConfig, checkHooks, builtinKind, DEFAULT_UPDATE_MAX_WAIT_HOURS } from './chunk-EPPIISRD.js';
 import { exceedsDisk } from './chunk-YJLHUKYS.js';
@@ -2942,7 +2942,7 @@ async function start(configPath, deps = { fetchImpl: fetch }) {
     const outcome = await onStartUnderMarker({
       configPath,
       own: ownVersionOf(deps),
-      check: update.check ? () => update.check(configPath) : async () => (await import('./check-JVBAWIN6.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
+      check: update.check ? () => update.check(configPath) : async () => (await import('./check-YTXFVWK7.js')).runRunnerCheck(configPath, { fetchImpl: deps.fetchImpl }),
       now: () => (deps.now ?? (() => /* @__PURE__ */ new Date()))().getTime(),
       log
     });

package/dist/{chunk-QIVOTQOQ.js → chunk-64GMBWAK.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-UQYBCJ2L.js';
-import { MIN_ENGINE_MAJOR } from './chunk-YF56R4DV.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-B7DJVG25.js';
+import { MIN_ENGINE_MAJOR } from './chunk-R7SGBXUD.js';
 import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-GFUE5TKO.js';
 import { runnerCredentialProblem } from './chunk-EPPIISRD.js';
 import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';

package/dist/{chunk-RK7FWC6B.js → chunk-6VFH52MP.js}

@@ -5,13 +5,13 @@ import { senderPidfile } from './chunk-Y7ZCHBYB.js';
 import { DOCKERD_LOG, HELPER_PATH, HELPER_RECORD } from './chunk-6KKM7VGZ.js';
 import { writeDockerClientConfig } from './chunk-XS3FDWSZ.js';
 import { installScrubContext } from './chunk-VS27BP3E.js';
-import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-YF56R4DV.js';
+import { ADDED_USER, shellQuote, GH_CONFIG_YML, ghHostsYml, AssetError, obtainImage, ensureRootfs, gitRemoteFor, startServicesFor, createLeaseChannel, createBuildDisk, machineConfig, resolveAgentUser, AgentUserError, runBuildSteps, LEASE_SECONDS, createContainerRuntime, stopContainer, cleanupContainer, outOfMemoryReason, containerSenderCommand, signalInContainer, syncInContainer, copyTranscriptsFromContainer, senderAliveScript, helperFirecrackerNote, HelperRefusal, isLiteralAddress, deleteBuildDisk, startCheckContainer, lifecycleSteps, lifecycleFailureReason, writeEvalInput, DeliveryFailure, EVAL_INPUT_NAME, copyTranscripts, senderSignalScript, containerJudgeEnvironment, copyJudgeTree } from './chunk-R7SGBXUD.js';
 import { describeCallFailure, resolveGoverningSource, refusalCode, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, logStamp, createRunnerLog, removeKeptContext, formatDuration, retrySend, formatClock, keptContextTree } from './chunk-WSYXLLA5.js';
 import { fdName } from './chunk-YB3CSYXX.js';
-import { readBranchHead, fetchCommit, diffBetween } from './chunk-24ID7EQ2.js';
+import { readBranchHead, fetchCommit, diffBetween } from './chunk-HWDYLXHH.js';
 import { isSameProcess, startTimeOf } from './chunk-JBJTC3UU.js';
-import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, judgeCommand, JUDGE_MAX_TURNS, MAX_REPORT_BYTES, JUDGE_DIR, COMMAND_DIR } from './chunk-JH2GQU5T.js';
-import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-B6K7R5UY.js';
+import { HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, writeJobFile, readJobFile, childEnvironment, judgeCommand, JUDGE_MAX_TURNS, MAX_REPORT_BYTES, JUDGE_DIR, COMMAND_DIR } from './chunk-EX5MQYEF.js';
+import { CLAUDE_CODE_VERSION, FIRECRACKER_VERSION } from './chunk-2BTFKNTR.js';
 import { waitForAgent, vmExecArgs } from './chunk-XBPUTQ7E.js';
 import { socketPathProblem, vsockLinks, LEASE_LINK, linkVsockSockets } from './chunk-GLUKDQS4.js';
 import { WorkCommandError, postJson, isSignatureRefusal, getJson } from './chunk-55GNQPO6.js';

package/dist/{chunk-UQYBCJ2L.js → chunk-B7DJVG25.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-YF56R4DV.js';
+import { MIN_ENGINE_MAJOR } from './chunk-R7SGBXUD.js';
 import { runnerImageVersion } from './chunk-M3MHHIUW.js';
-import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-B6K7R5UY.js';
+import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-2BTFKNTR.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';
 

package/dist/{chunk-JH2GQU5T.js → chunk-EX5MQYEF.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RecipeError, BUILDKIT_IMAGE } from './chunk-B6K7R5UY.js';
+import { RecipeError, BUILDKIT_IMAGE } from './chunk-2BTFKNTR.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
 import { compareVersions } from './chunk-QE3UQAHK.js';
 import { ensureHostKey } from './chunk-Y4OKEFAX.js';

package/dist/{chunk-24ID7EQ2.js → chunk-HWDYLXHH.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-D7ECMB7B.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, RecipeError, locateRecipe, readRecipe, assertBuildable, TINI_VERSION, GH_VERSION, writeSanitizedRecipe, classifyProperties, GH_SHA256, TINI_SHA256, SANITIZED_NAME } from './chunk-B6K7R5UY.js';
+import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, RecipeError, locateRecipe, readRecipe, assertBuildable, TINI_VERSION, GH_VERSION, writeSanitizedRecipe, classifyProperties, GH_SHA256, TINI_SHA256, SANITIZED_NAME } from './chunk-2BTFKNTR.js';
 import { RUNNER_DIR_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
 import { withGitConfig, tokenHeader, PROXY_WARNING_FLAG } from './chunk-2I3LIRZP.js';
 import { RELAY_ID, RELAY_USER } from './chunk-JGD5TWQ2.js';

package/dist/{chunk-BM7EC3OZ.js → chunk-IMOB4IOI.js}

@@ -4,7 +4,7 @@ import { MAINTAINED_SKILLS, loadMachineSkillFiles, resolvePackRoot, maintainedLi
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { randomBytes } from 'crypto';
-import { existsSync, symlinkSync, lstatSync, readFileSync, mkdirSync, realpathSync, rmSync, renameSync, writeFileSync, cpSync } from 'fs';
+import { existsSync, symlinkSync, realpathSync, lstatSync, readFileSync, mkdirSync, rmSync, renameSync, writeFileSync, cpSync } from 'fs';
 import { join, resolve, dirname, relative } from 'path';
 
 createRequire(import.meta.url);
@@ -12,7 +12,7 @@ var machineSkillsBase = (home) => join(home, ".agents", "skills");
 var claudeSkillsBase = (home) => join(home, ".claude", "skills");
 var errorMessage = (err) => err instanceof Error ? err.message : String(err);
 var defaultLink = (target, path) => {
-  if (process.platform === "win32") symlinkSync(resolve(dirname(path), target), path, "junction");
+  if (process.platform === "win32") symlinkSync(resolve(realpathSync(dirname(path)), target), path, "junction");
   else symlinkSync(target, path, "dir");
 };
 function installedVersion(folder) {

package/dist/{chunk-TXHJ7BGR.js → chunk-LPFOWUHG.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { checkStarterFiles, contextIsGoverned, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills } from './chunk-G3EZA6MK.js';
+import { checkStarterFiles, contextIsGoverned, checkBuildSkill, checkMachineSkills, checkCommittedMaintainedSkills } from './chunk-P33PZIWS.js';
 import { resolveCredentials, getJson, WorkCommandError } from './chunk-55GNQPO6.js';
 import { isLinkedRepository } from './chunk-N4D5TMVU.js';
 import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
@@ -1186,7 +1186,7 @@ async function gatherDoctorChecks() {
     const { runnerVmCheck } = await import('./doctor-53F2PYY7.js');
     checks.push(runnerVmCheck(configPath, { lima: realLima(), home: homeFromEnv(), instance: runnerVm.instance }));
   } else if (hasRunnerBlock(configPath)) {
-    const { runnerHostChecks } = await import('./doctor-6ZIF2BRZ.js');
+    const { runnerHostChecks } = await import('./doctor-Y4NCNSJM.js');
     const hooks = (() => {
       try {
         return loadRunnerConfig(configPath).hooks;

package/dist/{chunk-G3EZA6MK.js → chunk-P33PZIWS.js}

@@ -3,7 +3,7 @@ import { createRequire } from 'node:module';
 import { POLICY_CONTENT, VALIDATOR_FILES, VALIDATORS_DIR, POLICY_PATH } from './chunk-XZ6Q6ZNR.js';
 import { skillsBaseFor, isAgentsMdLayout } from './chunk-LOKSLO25.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import { machineSkillsState, staleClaudeSkills } from './chunk-BM7EC3OZ.js';
+import { machineSkillsState, staleClaudeSkills } from './chunk-IMOB4IOI.js';
 import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, skillDir, namesCore, MACHINE_SKILL_PATH, AGENTS_SKILLS_BASE, MAINTAINED_SKILLS, isMaintainedCopy, loadTemplateFiles, rewriteSkillPaths, restoreSkillPaths, TEMPLATE_SKILLS } from './chunk-7OUOLGUV.js';
 import { mcpTargetPath, INIT_STDIO_ENTRY, INIT_DOCS_ENTRY, DOCS_MCP_SERVER_NAME } from './chunk-KT4CN6OU.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';

package/dist/{chunk-YF56R4DV.js → chunk-R7SGBXUD.js}

@@ -3,11 +3,11 @@ import { createRequire } from 'node:module';
 import { keepStagedContext, describeCallFailure, controlPlaneTokenFailure, refusalCode, resolveGoverningSource, removeStagedContext, stageGovernedContext, pinnedSourceOf, commandWithShim, shimScript } from './chunk-WSYXLLA5.js';
 import { runnerImageVersion } from './chunk-M3MHHIUW.js';
 import { realFdStorePort } from './chunk-YB3CSYXX.js';
-import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-24ID7EQ2.js';
+import { readDefaultBranchHead, cloneRepository, buildRepositoryImage } from './chunk-HWDYLXHH.js';
 import { startTimeOf, isSameProcess } from './chunk-JBJTC3UU.js';
 import { currentCliBuild } from './chunk-OGFGZQA3.js';
-import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, JUDGE_REPORT, MAX_REPORT_BYTES, spawnRun } from './chunk-JH2GQU5T.js';
-import { FIRECRACKER_VERSION, hostHelperPinned, firecrackerArch, MICROVM_ARCHES, RecipeError, DOCKER_FEATURE, CLAUDE_CODE_VERSION, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, DEFAULT_BASE_IMAGE } from './chunk-B6K7R5UY.js';
+import { createDockerHost, builderSpec, runnerLabelValue, RUNNER_LABEL, BUILD_LABEL, prepareRunArgs, containerRunArgs, HASH_ARGV, parseProgramHash, JUDGE_PROGRAM, containerExecArgs, childEnvironment, JUDGE_DIR, JUDGE_REPORT, MAX_REPORT_BYTES, spawnRun } from './chunk-EX5MQYEF.js';
+import { FIRECRACKER_VERSION, hostHelperPinned, firecrackerArch, MICROVM_ARCHES, RecipeError, DOCKER_FEATURE, CLAUDE_CODE_VERSION, GUEST_HELPER_SHA256, GUEST_ASSETS_BASE_URL, GUEST_KERNEL_SHA256, JAILER_BINARY_SHA256, FIRECRACKER_BINARY_SHA256, FIRECRACKER_SHA256, GUEST_ASSETS_VERSION, DEFAULT_BASE_IMAGE } from './chunk-2BTFKNTR.js';
 import { execCapture } from './chunk-XBPUTQ7E.js';
 import { GUEST_CID } from './chunk-GLUKDQS4.js';
 import { WorkCommandError } from './chunk-55GNQPO6.js';

package/dist/{chunk-WVDP6HVZ.js → chunk-ZFBJUOYT.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-QIVOTQOQ.js';
+import { isPlaceholderCommand } from './chunk-64GMBWAK.js';
 import { describeCallFailure } from './chunk-WSYXLLA5.js';
 import { WorkCommandError, getJson } from './chunk-55GNQPO6.js';
 import { sanitizeTerminal } from './chunk-BUP5N3X6.js';

package/dist/{claude-launcher-TKX4WCUN.js → claude-launcher-NQSZBTQ5.js}

@@ -4,7 +4,7 @@ import { sharedSkillNames } from './chunk-6TRNCUM4.js';
 import { GOVERNANCE_VARIABLE, versionAtLeast, MINIMUM_CLAUDE_VERSION, SHIM_SCRIPT, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 export { MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import { setupMachineSkills } from './chunk-BM7EC3OZ.js';
+import { setupMachineSkills } from './chunk-IMOB4IOI.js';
 import './chunk-7OUOLGUV.js';
 import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';

package/dist/{cli-XVXQDKZT.js → cli-GHEOBXC7.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-TXHJ7BGR.js';
-import './chunk-G3EZA6MK.js';
+import { gatherDoctorChecks, doctorExitCode, summarizeChecks, renderDoctorText, recordWrapped, recordUnwrapped, recordRemoval, readManifest, recordInstall, recordStatusline } from './chunk-LPFOWUHG.js';
+import './chunk-P33PZIWS.js';
 import './chunk-XZ6Q6ZNR.js';
 import { verifiedTrackerNames, TRACKERS } from './chunk-55GNQPO6.js';
 import './chunk-2F762IXY.js';
@@ -18,7 +18,7 @@ import './chunk-I7RZHMXW.js';
 import './chunk-BKO6JEZI.js';
 import './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import './chunk-BM7EC3OZ.js';
+import './chunk-IMOB4IOI.js';
 import './chunk-7OUOLGUV.js';
 import './chunk-QE3UQAHK.js';
 import './chunk-KT4CN6OU.js';
@@ -3787,7 +3787,7 @@ ${starter.output}`),
   }
 }
 async function installMachineSkillsForSetup() {
-  const { setupMachineSkills } = await import('./machine-skills-RRF4HLAD.js');
+  const { setupMachineSkills } = await import('./machine-skills-FLIRJYP7.js');
   const result = setupMachineSkills(homeFromEnv());
   for (const failure of result.failures) process.stderr.write(`${C.yellow}!${C.reset} Could not write a maintained skill: ${failure}
 `);
@@ -3813,7 +3813,7 @@ function buildProgram(argv = process.argv) {
   const program2 = new Command();
   program2.name(cliInvocation()).description("OuterLayer \u2014 see what your coding agents actually do").enablePositionalOptions().version(resolveVersion()).hook("preAction", async (_root, command) => {
     if (command.opts().apiKey !== void 0) warnDeprecated(API_KEY_FLAG_DEPRECATION);
-    const { machineRefreshSkipped, refreshMachineSkills } = await import('./machine-skills-RRF4HLAD.js');
+    const { machineRefreshSkipped, refreshMachineSkills } = await import('./machine-skills-FLIRJYP7.js');
     const names = [];
     for (let at = command; at?.parent; at = at.parent) names.push(at.name());
     if (!machineRefreshSkipped(names, command._hidden === true, argv)) refreshMachineSkills(homeFromEnv());
@@ -3857,7 +3857,7 @@ that names ../outerlayer-build/SKILL.md, to ~/.agents/skills/outerlayer-build/SK
 what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocation() + " doctor` reports the same\nstates under Starter files.\n"
   ).action(async (opts) => {
     if (opts.update || opts.dryRun) {
-      const { runInitUpdate, formatInitUpdate, updateFlagProblem } = await import('./init-update-N4HTZGVS.js');
+      const { runInitUpdate, formatInitUpdate, updateFlagProblem } = await import('./init-update-ECWNG47R.js');
       const problem = updateFlagProblem(opts);
       if (problem !== void 0) {
         fail(problem);
@@ -3905,13 +3905,13 @@ what CLIs older than ${FIRST_VERSION_READING_AGENTS_SKILLS} do. \`` + cliInvocat
         if (changed.length > 0 && !opts.json) process.stdout.write(`Removed the claude function from ${changed.join(", ")}.
 `);
       }
-      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-M6MQRGOU.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
+      const shell = !opts.remove && opts.shellFunction !== void 0 ? (await import('./init-cmd-RIDBVSE4.js')).applyShellFunctionFlag(opts.shellFunction, { home: homeFromEnv(), shellPath: process.env.SHELL }) : void 0;
       if (opts.json) writeJson(shell === void 0 ? outcome.result : { ...outcome.result, shellFunction: { outcome: shell.outcome, reason: shell.reason } });
       else process.stdout.write(outcome.text + skillsLine + (shell?.text ?? ""));
       return;
     }
     await installMachineSkillsForSetup();
-    const { runInitCommand } = await import('./init-cmd-M6MQRGOU.js');
+    const { runInitCommand } = await import('./init-cmd-RIDBVSE4.js');
     const code = await runInitCommand(
       { json: opts.json, factory: opts.factory, shellFunction: opts.shellFunction },
       {
@@ -4889,7 +4889,7 @@ function registerRunnerCommands(program2) {
   const configOption = "the cloud config file to run against (default: ~/.outerlayer/config.json)";
   runnerCmd.command("start").description("Run the loop: claim work, run it, report, clean up, repeat").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-TWS5VZEN.js');
-    const { start, RunnerStartError } = await import('./loop-2Y4CUFNP.js');
+    const { start, RunnerStartError } = await import('./loop-AIJZVUNA.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-DKMYYXLH.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     try {
@@ -4908,8 +4908,8 @@ function registerRunnerCommands(program2) {
     "\nReads OUTERLAYER_URL, OUTERLAYER_APP_ID, OUTERLAYER_API_KEY, OUTERLAYER_RUNNER_NAME and one Claude credential\n(CLAUDE_CODE_OAUTH_TOKEN, ANTHROPIC_API_KEY or ANTHROPIC_AUTH_TOKEN) from the environment. OUTERLAYER_AGENT\nis optional and defaults to claude. On a later start it refuses variables that disagree with the config in the volume.\nThe image sets OUTERLAYER_RUNNER_IMAGE; outside the image, use `runner start`.\n"
   ).action(async () => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-TWS5VZEN.js');
-    const { containerStart } = await import('./container-start-JE7HTKZG.js');
-    const { start, RunnerStartError } = await import('./loop-2Y4CUFNP.js');
+    const { containerStart } = await import('./container-start-FHB2VDC4.js');
+    const { start, RunnerStartError } = await import('./loop-AIJZVUNA.js');
     const { RunnerAlreadyRunningError } = await import('./pidfile-DKMYYXLH.js');
     try {
       const result = await containerStart({
@@ -4929,7 +4929,7 @@ function registerRunnerCommands(program2) {
   });
   runnerCmd.command("check").description("Validate the config, the hooks and the key, and print the effective settings").option("--config <path>", configOption).action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-TWS5VZEN.js');
-    const { runRunnerCheck } = await import('./check-JVBAWIN6.js');
+    const { runRunnerCheck } = await import('./check-YTXFVWK7.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const result = await runRunnerCheck(configPath);
     if (!result.ok) {
@@ -4963,7 +4963,7 @@ function registerRunnerCommands(program2) {
     }
     try {
       if (opts.service === true) {
-        const { installServiceCommand } = await import('./command-B2T7VR77.js');
+        const { installServiceCommand } = await import('./command-V7B7GTPZ.js');
         const result2 = await installServiceCommand({
           configPath,
           print: opts.print,
@@ -5019,7 +5019,7 @@ To keep it running, run ${C.yellow}${cliInvocation()} runner install --service${
       return;
     }
     const { defaultRunnerConfigPath } = await import('./config-TWS5VZEN.js');
-    const { uninstallServiceCommand } = await import('./command-B2T7VR77.js');
+    const { uninstallServiceCommand } = await import('./command-V7B7GTPZ.js');
     const result = await uninstallServiceCommand({ configPath: opts.config ?? defaultRunnerConfigPath(), unitName: opts.unitName, home: homeFromEnv() });
     if (result.ok) for (const line of result.lines) process.stdout.write(`${C.green}\u2713${C.reset} ${line}
 `);
@@ -5047,10 +5047,10 @@ already in runner.env is used.
 `
   ).action(async (opts) => {
     const { defaultRunnerConfigPath, RunnerConfigError } = await import('./config-TWS5VZEN.js');
-    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-ETKGFCXR.js');
-    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-GO277GW2.js');
-    const { detectMachine } = await import('./machine-Z2S47JW7.js');
-    const { chooseVm, runVmInit, VmInitError } = await import('./init-Q2RPUUVP.js');
+    const { prepareRunnerInit, runRunnerInit, RunnerInitError, writeRunnerInit } = await import('./init-SWKYV6CL.js');
+    const { obtainRunnerKey, runnerKeyLogin } = await import('./runner-key-EFNTZWNX.js');
+    const { detectMachine } = await import('./machine-OOQ2NXC3.js');
+    const { chooseVm, runVmInit, VmInitError } = await import('./init-3DAGX7UY.js');
     const { AGENT_COMMANDS, credentialFromStdin, isAgentName, restartForCredential, RunnerEnvError } = await import('./runner-env-YRRNRKF4.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     if (opts.agent !== void 0 && !isAgentName(opts.agent)) {
@@ -5201,7 +5201,7 @@ ${C.yellow}The runner will not update itself: ${installErr.message}${C.reset}
       let serviceUp = false;
       let restart;
       if (installedLayout) {
-        const { installServiceCommand } = await import('./command-B2T7VR77.js');
+        const { installServiceCommand } = await import('./command-V7B7GTPZ.js');
         const service = await installServiceCommand({
           configPath,
           entryPath: process.argv[1] ?? "",
@@ -5246,10 +5246,10 @@ Next:
     "\nA repository governed by a control plane builds the control plane's image, at the commit\nthe gateway has stored for it. A repository that governs itself fetches the head of its\ndefault branch into the runner's cache. Either way it reads .devcontainer/devcontainer.json\nand builds the image with the devcontainer CLI. Settings\nthat reach the host or widen the container's privileges are ignored and listed. The\nimage holds this CLI and a pinned Claude Code. Nothing runs inside the image.\n"
   ).action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-TWS5VZEN.js');
-    const { buildRepositoryImage, RecipeError } = await import('./build-TNM7HYCA.js');
+    const { buildRepositoryImage, RecipeError } = await import('./build-HRLACBOZ.js');
     const { currentCliBuild } = await import('./cli-build-K56DK4DS.js');
-    const { createDockerHost } = await import('./docker-MJEEHUUA.js');
-    const { builderSpec } = await import('./builder-LDJGS2JC.js');
+    const { createDockerHost } = await import('./docker-YT6Z3LXI.js');
+    const { builderSpec } = await import('./builder-6Y6ZWGNH.js');
     const { loadRunnerConfig } = await import('./config-TWS5VZEN.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const loaded = (() => {
@@ -5261,7 +5261,7 @@ Next:
     })();
     const memory = loaded?.build?.memory ?? "8g";
     try {
-      const { ensureRunnerIdentity } = await import('./runner-identity-EX7HXPUE.js');
+      const { ensureRunnerIdentity } = await import('./runner-identity-YS2BZXZV.js');
       await ensureRunnerIdentity(configPath, { log: (line) => console.error(line) }).catch((err) => {
         console.error(`the runner's Docker identity could not be stored: ${err instanceof Error ? err.message : String(err)}`);
       });
@@ -5329,7 +5329,7 @@ Next:
   });
   runnerCmd.command("stop").description("Take no more work; finish running jobs, then exit").option("--config <path>", "the cloud config file naming the runner to stop").option("--now", "end running jobs immediately, with outcome stopped").action(async (opts) => {
     const { defaultRunnerConfigPath } = await import('./config-TWS5VZEN.js');
-    const { requestStop } = await import('./loop-2Y4CUFNP.js');
+    const { requestStop } = await import('./loop-AIJZVUNA.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const { runnerImageVersion } = await import('./image-tag-R34J4O3F.js');
     await requestStop(configPath, Boolean(opts.now), void 0, { image: runnerImageVersion() !== void 0 });
@@ -5337,8 +5337,8 @@ Next:
   runnerCmd.command("status").description("List running jobs; with --recent, finished ones too").option("--config <path>", "the cloud config file naming the runner to inspect").option("--recent", "also list finished jobs, newest first, capped at 20").option("--json", "machine-readable JSON output").action(async (opts) => {
     const { defaultRunnerConfigPath, loadRunnerConfig } = await import('./config-TWS5VZEN.js');
     const { jobsDir, runnerDir } = await import('./paths-LHSPNORF.js');
-    const { listJobFiles, runnerProcessState } = await import('./loop-2Y4CUFNP.js');
-    const { renderStatus } = await import('./status-CJCE2FHD.js');
+    const { listJobFiles, runnerProcessState } = await import('./loop-AIJZVUNA.js');
+    const { renderStatus } = await import('./status-7WM7S7JX.js');
     const { readHousekeepingRecord } = await import('./record-3LPTY3G5.js');
     const path2 = await import('path');
     const configPath = opts.config ?? defaultRunnerConfigPath();
@@ -5398,7 +5398,7 @@ Next:
   });
   runnerCmd.command("logs").argument("<item>", "the work item's number in the factory").description("Print the newest attempt's log for one item").option("--config <path>", "the cloud config file naming the runner to inspect").option("-f, --follow", "keep printing as the log grows").action(async (itemArg, opts) => {
     const { defaultRunnerConfigPath } = await import('./config-TWS5VZEN.js');
-    const { listJobFiles } = await import('./loop-2Y4CUFNP.js');
+    const { listJobFiles } = await import('./loop-AIJZVUNA.js');
     const { newestAttempt, logPathFor, tail, RunnerLogsError } = await import('./logs-XHAS6LMZ.js');
     const configPath = opts.config ?? defaultRunnerConfigPath();
     const item = parseTrackerNumber(itemArg);

package/dist/{command-B2T7VR77.js → command-V7B7GTPZ.js}

@@ -3,20 +3,20 @@ import { createRequire } from 'node:module';
 import { runRunnerInstall, launcherSummary, restartNote } from './chunk-QKIQ2R7F.js';
 import './chunk-QHH4OSD4.js';
 import { currentLink, execStartCommand } from './chunk-MATUHHN4.js';
-import { detectMachine } from './chunk-UQYBCJ2L.js';
-import { helperSocketPath, ensureFirecrackerAndJailer } from './chunk-YF56R4DV.js';
+import { detectMachine } from './chunk-B7DJVG25.js';
+import { helperSocketPath, ensureFirecrackerAndJailer } from './chunk-R7SGBXUD.js';
 import './chunk-WSYXLLA5.js';
 import './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
 import { DEFAULT_UNIT_NAME, installService, uninstallService, realTaskScheduler, UNIT_MARKER } from './chunk-7AQ5AM7U.js';
 import './chunk-YB3CSYXX.js';
 import { writeLaunchAgent, launchAgentPath } from './chunk-LF6MLJCY.js';
-import './chunk-24ID7EQ2.js';
+import './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import { readJobFile } from './chunk-JH2GQU5T.js';
-import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, HOST_HELPER_ASSETS_VERSION, hostHelperPinned } from './chunk-B6K7R5UY.js';
+import { readJobFile } from './chunk-EX5MQYEF.js';
+import { firecrackerArch, MICROVM_ARCHES, FIRECRACKER_VERSION, FIRECRACKER_BINARY_SHA256, JAILER_BINARY_SHA256, HOST_HELPER_SHA256, HOST_HELPER_BASE_URL, HOST_HELPER_ASSETS_VERSION, hostHelperPinned } from './chunk-2BTFKNTR.js';
 import './chunk-XBPUTQ7E.js';
 import './chunk-GLUKDQS4.js';
 import './chunk-55GNQPO6.js';

package/dist/{container-start-JE7HTKZG.js → container-start-FHB2VDC4.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-QIVOTQOQ.js';
-import { detectMachine, supportsContainerBuilds, describeMachineDocker } from './chunk-UQYBCJ2L.js';
-import { MIN_ENGINE_MAJOR } from './chunk-YF56R4DV.js';
+import { RunnerInitError, prepareRunnerInit, writeRunnerInit } from './chunk-64GMBWAK.js';
+import { detectMachine, supportsContainerBuilds, describeMachineDocker } from './chunk-B7DJVG25.js';
+import { MIN_ENGINE_MAJOR } from './chunk-R7SGBXUD.js';
 import './chunk-WSYXLLA5.js';
 import { runnerImageVersion, IMAGE_VERSION_VARIABLE } from './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
@@ -10,12 +10,12 @@ import { isAgentName, AGENT_COMMANDS } from './chunk-GFUE5TKO.js';
 import './chunk-7AQ5AM7U.js';
 import './chunk-YB3CSYXX.js';
 import './chunk-STSLH5EJ.js';
-import './chunk-24ID7EQ2.js';
+import './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+import './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-XBPUTQ7E.js';
 import './chunk-GLUKDQS4.js';
 import './chunk-55GNQPO6.js';

package/dist/{docker-MJEEHUUA.js → docker-YT6Z3LXI.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { childEnvironment, createDockerHost, spawnRun } from './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+export { childEnvironment, createDockerHost, spawnRun } from './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-QE3UQAHK.js';
 import './chunk-QZBXLLTV.js';

package/dist/{doctor-6ZIF2BRZ.js → doctor-Y4NCNSJM.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launcherCheck } from './chunk-QHH4OSD4.js';
-import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-WVDP6HVZ.js';
+import { needsClaudeCredential, claudeCredentialCheck, missingPermissionOf, missingPermissionFix } from './chunk-ZFBJUOYT.js';
 import './chunk-MATUHHN4.js';
 import { freeBytes, formatBytes } from './chunk-YYYRBYWG.js';
 import { RepoFilter } from './chunk-TBT347UY.js';
-import './chunk-QIVOTQOQ.js';
-import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-UQYBCJ2L.js';
-import { MIN_ENGINE_MAJOR, helperFirecrackerNote, probeHelper, helperSocketPath } from './chunk-YF56R4DV.js';
+import './chunk-64GMBWAK.js';
+import { detectMachine, supportsContainerBuilds, describeMachineDocker, reachDockerStep, supportsMicroVmBuilds, microVmArchSupported, microVmAssetsPinned } from './chunk-B7DJVG25.js';
+import { MIN_ENGINE_MAJOR, helperFirecrackerNote, probeHelper, helperSocketPath } from './chunk-R7SGBXUD.js';
 import './chunk-WSYXLLA5.js';
 import { runnerImageVersion, imageAdvice, readUpdateStatus, imageTag, pullInstruction } from './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
@@ -15,12 +15,12 @@ import './chunk-GFUE5TKO.js';
 import './chunk-7AQ5AM7U.js';
 import './chunk-YB3CSYXX.js';
 import './chunk-STSLH5EJ.js';
-import './chunk-24ID7EQ2.js';
+import './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import { resolveDevcontainerCli, buildxState, spawnRun } from './chunk-JH2GQU5T.js';
-import { locateRecipe, assertBuildable, readRecipe, RecipeError, FIRECRACKER_VERSION, CLAUDE_CODE_VERSION } from './chunk-B6K7R5UY.js';
+import { resolveDevcontainerCli, buildxState, spawnRun } from './chunk-EX5MQYEF.js';
+import { locateRecipe, assertBuildable, readRecipe, RecipeError, FIRECRACKER_VERSION, CLAUDE_CODE_VERSION } from './chunk-2BTFKNTR.js';
 import './chunk-XBPUTQ7E.js';
 import './chunk-GLUKDQS4.js';
 import { getJson, WorkCommandError, signatureRefusalMessage } from './chunk-55GNQPO6.js';

package/dist/index.js

@@ -22,9 +22,9 @@ if (argv[0] === "statusline") {
   process.exit(0);
 }
 if (argv[0] === "claude") {
-  const { runClaudeLauncher } = await import('./claude-launcher-TKX4WCUN.js');
+  const { runClaudeLauncher } = await import('./claude-launcher-NQSZBTQ5.js');
   process.exit(await runClaudeLauncher(argv.slice(1)));
 }
 (await import('./hook-fast-3SUJM765.js')).recordLinkExitFailure(argv);
-var { runCli } = await import('./cli-XVXQDKZT.js');
+var { runCli } = await import('./cli-GHEOBXC7.js');
 await runCli(process.argv);

package/dist/{init-Q2RPUUVP.js → init-3DAGX7UY.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { npmSupportsProvenance } from './chunk-YETTWTAY.js';
-import { RunnerInitError, readConfigObject } from './chunk-QIVOTQOQ.js';
-import './chunk-UQYBCJ2L.js';
-import './chunk-YF56R4DV.js';
+import { RunnerInitError, readConfigObject } from './chunk-64GMBWAK.js';
+import './chunk-B7DJVG25.js';
+import './chunk-R7SGBXUD.js';
 import './chunk-WSYXLLA5.js';
 import './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
@@ -12,12 +12,12 @@ import { checkFit, VM_SERVICE_NAME, RUNNER_RESERVE_BYTES } from './chunk-7AQ5AM7
 import './chunk-YB3CSYXX.js';
 import './chunk-STSLH5EJ.js';
 import { writeLaunchAgent } from './chunk-LF6MLJCY.js';
-import './chunk-24ID7EQ2.js';
+import './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+import './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-XBPUTQ7E.js';
 import './chunk-GLUKDQS4.js';
 import './chunk-55GNQPO6.js';

package/dist/{init-ETKGFCXR.js → init-SWKYV6CL.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, prepareRunnerInit, readConfigObject, runRunnerInit, writeRunnerInit } from './chunk-QIVOTQOQ.js';
-import './chunk-UQYBCJ2L.js';
-import './chunk-YF56R4DV.js';
+export { PLACEHOLDER_MARKER, RunnerInitError, isPlaceholderCommand, prepareRunnerInit, readConfigObject, runRunnerInit, writeRunnerInit } from './chunk-64GMBWAK.js';
+import './chunk-B7DJVG25.js';
+import './chunk-R7SGBXUD.js';
 import './chunk-WSYXLLA5.js';
 import './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
@@ -10,12 +10,12 @@ import './chunk-GFUE5TKO.js';
 import './chunk-7AQ5AM7U.js';
 import './chunk-YB3CSYXX.js';
 import './chunk-STSLH5EJ.js';
-import './chunk-24ID7EQ2.js';
+import './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+import './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-XBPUTQ7E.js';
 import './chunk-GLUKDQS4.js';
 import './chunk-55GNQPO6.js';

package/dist/{init-cmd-M6MQRGOU.js → init-cmd-RIDBVSE4.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { summarizeChecks, summaryText, renderDoctorText } from './chunk-TXHJ7BGR.js';
-import './chunk-G3EZA6MK.js';
+import { summarizeChecks, summaryText, renderDoctorText } from './chunk-LPFOWUHG.js';
+import './chunk-P33PZIWS.js';
 import { shellFunctionInstalled, removeShellFunction, installShellFunction, SHELL_FUNCTION_LINE } from './chunk-CJJDJ7AT.js';
 import './chunk-XZ6Q6ZNR.js';
 import './chunk-55GNQPO6.js';
@@ -19,7 +19,7 @@ import './chunk-I7RZHMXW.js';
 import './chunk-BKO6JEZI.js';
 import './chunk-HCVLP7XA.js';
 import './chunk-BJ3KTMDH.js';
-import './chunk-BM7EC3OZ.js';
+import './chunk-IMOB4IOI.js';
 import './chunk-7OUOLGUV.js';
 import './chunk-QE3UQAHK.js';
 import './chunk-KT4CN6OU.js';

package/dist/{init-update-N4HTZGVS.js → init-update-ECWNG47R.js}

@@ -2,7 +2,7 @@
 import { createRequire } from 'node:module';
 import { keepHandWritten } from './chunk-FP23SVDD.js';
 import { runEmit, inspectReplacedOutputs } from './chunk-WUL2OP5A.js';
-import { contextIsGoverned, inspectStarterFiles, committedMaintainedFolders, readShippedManifest, skillsFolders, contentHash, canonical } from './chunk-G3EZA6MK.js';
+import { contextIsGoverned, inspectStarterFiles, committedMaintainedFolders, readShippedManifest, skillsFolders, contentHash, canonical } from './chunk-P33PZIWS.js';
 import './chunk-XZ6Q6ZNR.js';
 import { AGENTS_LAYOUT_COMMIT_LINE, COMMIT_LINE } from './chunk-N4D5TMVU.js';
 import './chunk-BUP5N3X6.js';
@@ -14,7 +14,7 @@ import { retiredSkillPaths, removeRetiredSkills } from './chunk-MHX7YX7Y.js';
 import './chunk-BWH36FOC.js';
 import './chunk-ZJSNLVCE.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import './chunk-BM7EC3OZ.js';
+import './chunk-IMOB4IOI.js';
 import { skillDir, MACHINE_SKILL_PATH, writeMaintainedFiles, maintainedFilesForExistingSkills, loadMaintainedFiles, AGENTS_SKILLS_BASE, OUTERLAYER_SKILLS_BASE } from './chunk-7OUOLGUV.js';
 import './chunk-QE3UQAHK.js';
 import { setMcpEntry } from './chunk-KT4CN6OU.js';

package/dist/{loop-2Y4CUFNP.js → loop-AIJZVUNA.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, start, tick, watchTick } from './chunk-ZXRWMOJ3.js';
-import './chunk-RK7FWC6B.js';
+export { RunnerStartError, leaseTimeLeftFor, listJobFiles, logUnusableHelper, probeBuild, probeCredentials, requestStop, runnerProcessState, start, tick, watchTick } from './chunk-5VMDGJGH.js';
+import './chunk-6VFH52MP.js';
 import './chunk-RHGF73IU.js';
 import './chunk-ZVB57WI6.js';
 import './chunk-ABXQBEYK.js';
@@ -14,13 +14,13 @@ import './chunk-XS3FDWSZ.js';
 import './chunk-VS27BP3E.js';
 import './chunk-O2IJTY7L.js';
 import './chunk-ESVW4MJY.js';
-import './chunk-WVDP6HVZ.js';
+import './chunk-ZFBJUOYT.js';
 import './chunk-MATUHHN4.js';
 import './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import './chunk-QIVOTQOQ.js';
-import './chunk-UQYBCJ2L.js';
-import './chunk-YF56R4DV.js';
+import './chunk-64GMBWAK.js';
+import './chunk-B7DJVG25.js';
+import './chunk-R7SGBXUD.js';
 import './chunk-WSYXLLA5.js';
 import './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
@@ -28,12 +28,12 @@ import './chunk-GFUE5TKO.js';
 import './chunk-7AQ5AM7U.js';
 import './chunk-YB3CSYXX.js';
 import './chunk-STSLH5EJ.js';
-import './chunk-24ID7EQ2.js';
+import './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+import './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-XBPUTQ7E.js';
 import './chunk-GLUKDQS4.js';
 import './chunk-55GNQPO6.js';

package/dist/{machine-Z2S47JW7.js → machine-OOQ2NXC3.js}

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-UQYBCJ2L.js';
-import './chunk-YF56R4DV.js';
+export { describeMachineDocker, detectMachine, microVmArchSupported, microVmAssetsPinned, reachDockerStep, supportsContainerBuilds, supportsMicroVmBuilds } from './chunk-B7DJVG25.js';
+import './chunk-R7SGBXUD.js';
 import './chunk-WSYXLLA5.js';
 import './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
 import './chunk-YB3CSYXX.js';
-import './chunk-24ID7EQ2.js';
+import './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+import './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-XBPUTQ7E.js';
 import './chunk-GLUKDQS4.js';
 import './chunk-55GNQPO6.js';

package/dist/{machine-skills-RRF4HLAD.js → machine-skills-FLIRJYP7.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { installMachineSkills, machineRefreshSkipped, machineSkillsState, refreshMachineSkills, setupMachineSkills, staleClaudeSkills } from './chunk-BM7EC3OZ.js';
+export { installMachineSkills, machineRefreshSkipped, machineSkillsState, refreshMachineSkills, setupMachineSkills, staleClaudeSkills } from './chunk-IMOB4IOI.js';
 import './chunk-7OUOLGUV.js';
 import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';

package/dist/{runner-identity-EX7HXPUE.js → runner-identity-YS2BZXZV.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-export { RUNNER_LABEL, builderNameFor, dockerIdentity, ensureRunnerIdentity, pathLabelValue, readRunnerIdentity } from './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+export { RUNNER_LABEL, builderNameFor, dockerIdentity, ensureRunnerIdentity, pathLabelValue, readRunnerIdentity } from './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-YJLHUKYS.js';
 import './chunk-QE3UQAHK.js';
 import './chunk-QZBXLLTV.js';

package/dist/{runner-key-GO277GW2.js → runner-key-EFNTZWNX.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { readConfigObject, RunnerInitError } from './chunk-QIVOTQOQ.js';
-import './chunk-UQYBCJ2L.js';
-import './chunk-YF56R4DV.js';
+import { readConfigObject, RunnerInitError } from './chunk-64GMBWAK.js';
+import './chunk-B7DJVG25.js';
+import './chunk-R7SGBXUD.js';
 import './chunk-WSYXLLA5.js';
 import './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
@@ -10,12 +10,12 @@ import './chunk-GFUE5TKO.js';
 import './chunk-7AQ5AM7U.js';
 import './chunk-YB3CSYXX.js';
 import './chunk-STSLH5EJ.js';
-import './chunk-24ID7EQ2.js';
+import './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+import './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-XBPUTQ7E.js';
 import './chunk-GLUKDQS4.js';
 import { getJson } from './chunk-55GNQPO6.js';

package/dist/{status-CJCE2FHD.js → status-7WM7S7JX.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isReadable, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-RK7FWC6B.js';
+import { isReadable, ALREADY_RELEASED, RENEW_INTERVAL_SECONDS } from './chunk-6VFH52MP.js';
 import { jobStateFormatOf } from './chunk-ZVB57WI6.js';
 import './chunk-Y7ZCHBYB.js';
 import './chunk-6KKM7VGZ.js';
@@ -10,17 +10,17 @@ import './chunk-O2IJTY7L.js';
 import './chunk-ESVW4MJY.js';
 import { formatBytes } from './chunk-YYYRBYWG.js';
 import './chunk-TBT347UY.js';
-import { LEASE_SECONDS } from './chunk-YF56R4DV.js';
+import { LEASE_SECONDS } from './chunk-R7SGBXUD.js';
 import { formatDuration, formatClock, relativeToRunner } from './chunk-WSYXLLA5.js';
 import { pullInstruction } from './chunk-M3MHHIUW.js';
 import './chunk-TQMI335S.js';
 import './chunk-YB3CSYXX.js';
-import './chunk-24ID7EQ2.js';
+import './chunk-HWDYLXHH.js';
 import './chunk-D7ECMB7B.js';
 import './chunk-JBJTC3UU.js';
 import './chunk-OGFGZQA3.js';
-import './chunk-JH2GQU5T.js';
-import './chunk-B6K7R5UY.js';
+import './chunk-EX5MQYEF.js';
+import './chunk-2BTFKNTR.js';
 import './chunk-XBPUTQ7E.js';
 import './chunk-GLUKDQS4.js';
 import './chunk-55GNQPO6.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@outerlayer/cli",
-  "version": "0.27.0",
+  "version": "0.27.1",
   "description": "OuterLayer CLI — commands: init, claude, connect, doctor, login, logout, sync, daemon (alias: watch), emit, work, spec, runner, hooks, mcp, context. Capture and sync coding-agent sessions, and record proof of factory work.",
   "license": "Apache-2.0",
   "author": "Magu Studios, Inc.",