@outerlayer/cli 0.27.1 → 0.28.1

package/dist/chunk-QBQHQEUG.js

@@ -0,0 +1,300 @@
+#!/usr/bin/env node
+import { createRequire } from 'node:module';
+import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
+import { isAgentsMdLayout } from './chunk-5B7BEQPR.js';
+import { resolveGatewayCredentials, defaultFetch } from './chunk-7CK2TJFB.js';
+import { versionAtLeast } from './chunk-HCVLP7XA.js';
+import { findGitDirs } from './chunk-BJ3KTMDH.js';
+import { machineSkillsState, staleClaudeSkills } from './chunk-DQYMQ47E.js';
+import { AGENTS_SKILLS_BASE, skillDir, namesCore, MACHINE_SKILL_PATH, isMaintainedCopy, loadTemplateFiles } from './chunk-JGML2VUN.js';
+import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
+import { cliInvocation } from './chunk-CRB3POP4.js';
+import { hasSymlinkComponent } from './chunk-VWFOKRYS.js';
+import { emitTree, ALL_TARGET_IDS, classifyTree, splitRawFile } from './chunk-RKOTJQVG.js';
+import { existsSync, readFileSync, writeFileSync, realpathSync, readdirSync } from 'fs';
+import { join, dirname, posix } from 'path';
+
+createRequire(import.meta.url);
+var PROSE_FILE = /\.mdc?$/;
+var ROOT_FILES = ["AGENTS.md", "CLAUDE.md"];
+var FOLDERS = [AGENTS_SKILLS_BASE, ".claude/skills"];
+var SKILL_BASES = [AGENTS_SKILLS_BASE, ".claude/skills"];
+var RELATIVE_NOTE = ", relative to this skill's folder";
+var escape = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+function withMachinePaths(text, fileDir, skills) {
+  let out = text;
+  const named2 = [];
+  for (const skill of skills) {
+    const spellings = /* @__PURE__ */ new Set();
+    for (const base of SKILL_BASES) {
+      const folder = skillDir(skill, base);
+      spellings.add(folder);
+      spellings.add(`./${folder}`);
+      spellings.add(posix.relative(fileDir, folder));
+    }
+    const alternatives = [...spellings].map(escape);
+    const pattern = new RegExp(`(?<![\\w~./-])(?:${alternatives.join("|")})/([\\w./-]*)(?:${escape(RELATIVE_NOTE)},?)?`, "g");
+    const next = out.replace(pattern, (_match, rest) => `${MACHINE_SKILL_PATH}/${skill}/${rest}`);
+    if (next !== out) named2.push(skill);
+    out = next;
+  }
+  return { text: out, skills: named2 };
+}
+function filesUnder(root, rel) {
+  const found = [];
+  for (const entry of readdirSync(join(root, rel), { withFileTypes: true })) {
+    const path = `${rel}/${entry.name}`;
+    if (entry.isDirectory()) found.push(...filesUnder(root, path));
+    else if (PROSE_FILE.test(entry.name)) found.push(path);
+  }
+  return found;
+}
+function maintainedReferenceRewrites(root, removing) {
+  const removed = (folder) => removing.includes(folder);
+  const holds = (folder) => !removed(folder) && !hasSymlinkComponent(root, folder) && existsSync(join(root, folder));
+  const absent = MAINTAINED_SKILLS.filter((skill) => !SKILL_BASES.some((base) => holds(skillDir(skill, base))));
+  const folders = FOLDERS.filter((folder) => !hasSymlinkComponent(root, folder) && existsSync(join(root, folder)));
+  const candidates = /* @__PURE__ */ new Set([...ROOT_FILES, ...folders.flatMap((folder) => filesUnder(root, folder))]);
+  const rewrites = [];
+  for (const path of [...candidates].sort()) {
+    if (removing.some((folder) => path.startsWith(`${folder}/`)) || hasSymlinkComponent(root, path)) continue;
+    let text;
+    try {
+      text = readFileSync(join(root, path), "utf8");
+    } catch {
+      continue;
+    }
+    const result = withMachinePaths(text, dirname(path), absent);
+    if (result.skills.length > 0) rewrites.push({ path, skills: result.skills, text: result.text });
+  }
+  return rewrites;
+}
+function applyReferenceRewrites(root, rewrites) {
+  for (const rewrite of rewrites) writeFileSync(join(root, rewrite.path), rewrite.text);
+}
+
+// src/build-skill.ts
+var BUILD_PHASES = ["Intake", "Criteria", "Implement", "Review", "Pull request", "Evidence"];
+var MACHINE_CORE = `${MACHINE_SKILL_PATH}/outerlayer-build/SKILL.md`;
+var CHANGES_HEADING = "## Changes for this repository";
+var NAME = "Build skill";
+function changeHeadings(text) {
+  const lines = text.split(/\r?\n/);
+  const start = lines.findIndex((line) => line.trim() === CHANGES_HEADING);
+  if (start === -1) return [];
+  const headings = [];
+  for (const line of lines.slice(start + 1)) {
+    if (/^## /.test(line)) break;
+    const match = /^### (.+?)\s*$/.exec(line);
+    if (match) headings.push(match[1]);
+  }
+  return headings;
+}
+function skillsFolders() {
+  const probe = `${skillDir("probe")}/SKILL.md`;
+  const compiled = emitTree({
+    entries: classifyTree([probe]).entries,
+    contents: /* @__PURE__ */ new Map([[probe, "---\nname: probe\ndescription: probe\n---\n"]]),
+    assetPaths: [],
+    targets: [...ALL_TARGET_IDS]
+  });
+  return [...new Set(compiled.files.map((file) => dirname(dirname(file.path))))].sort();
+}
+function shortBuild() {
+  const file = loadTemplateFiles().find((f) => f.path === `${skillDir("build")}/SKILL.md`);
+  if (file === void 0) return "";
+  return splitRawFile(file.content).body.split("\n").filter((line) => !line.startsWith("<!--")).join("\n").trim();
+}
+var read = (abs) => {
+  try {
+    return readFileSync(abs, "utf8");
+  } catch {
+    return void 0;
+  }
+};
+function buildsOf(repoRoot, folders) {
+  const source = `${folders[0]}/build/SKILL.md`;
+  return (existsSync(join(repoRoot, source)) ? [source] : folders.slice(1).map((f) => `${f}/build/SKILL.md`)).map((path) => ({ path, text: read(join(repoRoot, path)) })).filter((b) => b.text !== void 0);
+}
+function checkBuildSkill(repoRoot) {
+  const folders = [".outerlayer/skills", ...skillsFolders()];
+  const builds = buildsOf(repoRoot, folders);
+  const checks = [];
+  const detached = builds.filter((b) => !namesCore(b.text));
+  if (detached.length > 0) {
+    checks.push({
+      name: NAME,
+      status: "warn",
+      detail: `${detached.map((b) => b.path).join(", ")} does not name outerlayer-build, so it gets no updates from the core`,
+      fix: `Move to the short build, and put your own changes under the name of the phase each applies to:
+
+${shortBuild()}`
+    });
+  }
+  for (const build of builds.filter((b) => namesCore(b.text))) {
+    const unknown = changeHeadings(build.text).filter((heading) => !BUILD_PHASES.includes(heading));
+    if (unknown.length === 0) continue;
+    checks.push({
+      name: NAME,
+      status: "warn",
+      detail: `${build.path} has ${unknown.map((h) => `"${h}"`).join(", ")} under "Changes for this repository", which matches no phase`,
+      fix: `Rename each heading to a phase: ${BUILD_PHASES.join(", ")}.`
+    });
+  }
+  const agentsMd = isAgentsMdLayout(repoRoot);
+  const seen = /* @__PURE__ */ new Set();
+  const lacking = folders.filter((folder) => {
+    const text = read(join(repoRoot, folder, "build", "SKILL.md")) ?? "";
+    if (!namesCore(text) || text.includes(MACHINE_CORE) || existsSync(join(repoRoot, folder, "outerlayer-build", "SKILL.md"))) return false;
+    let key = folder;
+    try {
+      key = realpathSync(join(repoRoot, folder));
+    } catch {
+    }
+    if (seen.has(key)) return false;
+    seen.add(key);
+    return true;
+  });
+  if (lacking.length > 0) {
+    checks.push({
+      name: NAME,
+      status: "warn",
+      detail: `${lacking.join(", ")} holds build with no outerlayer-build beside it`,
+      fix: `Run \`${cliInvocation()} ${agentsMd ? "init --update" : "context emit"}\` to write outerlayer-build, then commit.`
+    });
+  }
+  return checks;
+}
+function committedMaintainedFolders(repoRoot) {
+  const found = [];
+  for (const base of [AGENTS_SKILLS_BASE, ".claude/skills"]) {
+    for (const name of MAINTAINED_SKILLS) {
+      const folder = skillDir(name, base);
+      if (!hasSymlinkComponent(repoRoot, folder) && isMaintainedCopy(repoRoot, name, base)) found.push(folder);
+    }
+  }
+  return found;
+}
+function checkCommittedMaintainedSkills(repoRoot) {
+  if (!isAgentsMdLayout(repoRoot)) return [];
+  const folders = committedMaintainedFolders(repoRoot);
+  if (folders.length === 0) return [];
+  return [
+    {
+      name: "Committed maintained skills",
+      status: "warn",
+      detail: `${folders.join(", ")} ${folders.length === 1 ? "is a maintained skill" : "are maintained skills"} that every machine keeps in ${MACHINE_SKILL_PATH}/ now`,
+      fix: `Run \`${cliInvocation()} init --update\` to remove ${folders.length === 1 ? "it" : "them"}, then commit. Before you commit, every machine and runner host must run this CLI version or later, and each machine a person works on must run \`${cliInvocation()} init --local\`.`
+    }
+  ];
+}
+function checkMaintainedReferences(repoRoot) {
+  if (!isAgentsMdLayout(repoRoot)) return [];
+  const rewrites = maintainedReferenceRewrites(repoRoot, []);
+  if (rewrites.length === 0) return [];
+  return [
+    {
+      name: "Paths to the maintained skills",
+      status: "warn",
+      detail: `${rewrites.map((r) => r.path).join(", ")} ${rewrites.length === 1 ? "names" : "name"} a maintained skill folder that this repository no longer holds`,
+      fix: `Run \`${cliInvocation()} init --update\` to change each path to ${MACHINE_SKILL_PATH}/, then commit.`
+    }
+  ];
+}
+function checkMachineSkills(opts) {
+  const build = buildsOf(opts.repoRoot, [".outerlayer/skills", ...skillsFolders()]).find((b) => b.text.includes(MACHINE_CORE));
+  if (build === void 0) return [];
+  const problems = machineSkillsState(opts.home, opts.version).filter((s) => s.state !== "current");
+  const claudeStale = staleClaudeSkills(opts.home, opts.version);
+  if (problems.length === 0 && claudeStale.length === 0) return [];
+  const parts = [
+    ...problems.map((s) => `${MACHINE_SKILL_PATH}/${s.name} ${s.state === "missing" ? "is missing" : "is from another CLI version"}`),
+    ...claudeStale.map((name) => `~/.claude/skills/${name} is not this CLI version's copy`)
+  ];
+  return [
+    {
+      name: "Maintained skills on this machine",
+      status: "warn",
+      detail: `${build.path} reads ${MACHINE_CORE}, but ${parts.join(", ")}`,
+      fix: `Run \`${cliInvocation()} init --local\` on this machine. If it reports a failed write, fix the permissions on the folder it names first.`
+    }
+  ];
+}
+
+// src/fleet-readiness.ts
+var FIRST_VERSION_WITH_MACHINE_SKILLS = "0.27.0";
+var HOSTS_TIMEOUT_MS = 1e4;
+function shortVersion(host) {
+  return host.cliVersion === null ? "no version" : /\d+\.\d+\.\d+\S*/.exec(host.cliVersion)?.[0] ?? host.cliVersion;
+}
+function judgeFleet(hosts) {
+  const old = (h) => !versionAtLeast(h.cliVersion ?? "", FIRST_VERSION_WITH_MACHINE_SKILLS);
+  const staleBehind = hosts.filter((h) => h.stale && old(h));
+  const behind = hosts.filter((h) => !h.stale && old(h));
+  if (behind.length > 0) return { state: "behind", behind, staleBehind };
+  return { state: "ready", current: hosts.filter((h) => !old(h)), staleBehind };
+}
+function parseHosts(body) {
+  const data = body?.data;
+  if (!Array.isArray(data)) return void 0;
+  const hosts = [];
+  for (const row of data) {
+    if (typeof row?.host !== "string") return void 0;
+    hosts.push({
+      host: row.host,
+      cliVersion: typeof row.cliVersion === "string" ? row.cliVersion : null,
+      lastHeartbeatAt: typeof row.lastHeartbeatAt === "string" ? row.lastHeartbeatAt : null,
+      stale: row.status === "stale"
+    });
+  }
+  return hosts;
+}
+async function fleetReadiness(opts = {}) {
+  const resolved = resolveGatewayCredentials(opts);
+  if (!resolved.ok) return { state: "unknown", reason: sanitizeTerminal(resolved.message) };
+  const fetchImpl = opts.fetchImpl ?? defaultFetch;
+  let status;
+  let body;
+  try {
+    const res = await fetchImpl(`${resolved.url.replace(/\/+$/, "")}/v1/hosts`, {
+      method: "GET",
+      headers: { authorization: `Bearer ${resolved.credential}`, "x-outerlayer-app-id": resolved.appId },
+      signal: AbortSignal.timeout(HOSTS_TIMEOUT_MS)
+    });
+    status = res.status;
+    body = await res.json().catch(() => void 0);
+  } catch (err) {
+    return { state: "unknown", reason: `the gateway did not answer: ${sanitizeTerminal(err instanceof Error ? err.message : String(err))}` };
+  }
+  if (status === 401) return { state: "unknown", reason: `the gateway refused the credential (HTTP 401); run \`${cliInvocation()} login\`` };
+  if (status === 403) return { state: "unknown", reason: "the credential cannot list the factory's runner hosts (HTTP 403); it needs the hosts.read permission" };
+  if (status >= 300) return { state: "unknown", reason: `the gateway did not list the runner hosts (HTTP ${status})` };
+  const hosts = parseHosts(body);
+  if (hosts === void 0) return { state: "unknown", reason: "the gateway's list of runner hosts was not in the expected shape" };
+  return judgeFleet(hosts);
+}
+var named = (hosts) => hosts.map((h) => `${sanitizeTerminal(h.host)} (${sanitizeTerminal(shortVersion(h))})`).join(", ");
+var lastSeen = (hosts) => hosts.map((h) => `${sanitizeTerminal(h.host)} (${sanitizeTerminal(shortVersion(h))}, last heartbeat ${h.lastHeartbeatAt?.slice(0, 10) ?? "never"})`).join(", ");
+function describeFleet(fleet) {
+  const minimum = FIRST_VERSION_WITH_MACHINE_SKILLS;
+  if (fleet.state === "unknown") return [`The runner hosts were not checked: ${fleet.reason}.`];
+  const lines = fleet.state === "behind" ? [`These runner hosts run a CLI older than ${minimum}: ${named(fleet.behind)}. Do not commit the removal until each one updates.`] : fleet.current.length === 0 ? ["No runner host has reported to this factory."] : [`Every runner host that is sending heartbeats runs ${minimum} or later: ${named(fleet.current)}.`];
+  if (fleet.staleBehind.length > 0) {
+    lines.push(`These runner hosts stopped sending heartbeats on an older CLI: ${lastSeen(fleet.staleBehind)}. Update each one before it builds again.`);
+  }
+  return lines;
+}
+var CHECK_NAME = "Runner hosts for the maintained skills";
+async function fleetCheck(opts = {}) {
+  const dirs = findGitDirs(opts.cwd ?? process.cwd());
+  if (dirs === void 0 || checkCommittedMaintainedSkills(dirs.repoRoot).length === 0) return [];
+  const fleet = await fleetReadiness(opts);
+  const detail = describeFleet(fleet).join(" ");
+  if (fleet.state === "unknown") return [{ name: CHECK_NAME, status: "skipped", detail }];
+  if (fleet.state === "behind") {
+    return [{ name: CHECK_NAME, status: "warn", detail, fix: `Wait for each host to update, or run \`${cliInvocation()} runner status\` on it to see why it has not.` }];
+  }
+  return [{ name: CHECK_NAME, status: "pass", detail }];
+}
+
+export { applyReferenceRewrites, checkBuildSkill, checkCommittedMaintainedSkills, checkMachineSkills, checkMaintainedReferences, committedMaintainedFolders, describeFleet, fleetCheck, fleetReadiness, maintainedReferenceRewrites, skillsFolders };

package/dist/{chunk-FP23SVDD.js → chunk-QJFDAKRF.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { runEmit } from './chunk-WUL2OP5A.js';
-import { installStarterPack } from './chunk-XZ6Q6ZNR.js';
-import { AGENTS_MD_LAYOUT, declareAgentsMdLayout, linkClaudeSkills, SKILLS_LINK_PATH, describeSkillsLink, isAgentsMdLayout, holdsTodaysLayoutSources, discoverOuterlayerPaths } from './chunk-LOKSLO25.js';
-import { resolveGitCommonDir, defaultGitRunner } from './chunk-BPKO76QR.js';
-import { loadTemplateFiles, loadMaintainedFiles, skillDir, AGENTS_SKILLS_BASE } from './chunk-7OUOLGUV.js';
+import { runEmit } from './chunk-QKXF7CLR.js';
 import { addStdioMcpEntryIfAbsent, addDocsMcpEntryIfAbsent, DOCS_MCP_SERVER_NAME } from './chunk-KT4CN6OU.js';
+import { installStarterPack } from './chunk-SATUCMAJ.js';
+import { AGENTS_MD_LAYOUT, declareAgentsMdLayout, linkClaudeSkills, SKILLS_LINK_PATH, describeSkillsLink, isAgentsMdLayout, holdsTodaysLayoutSources, discoverOuterlayerPaths } from './chunk-5B7BEQPR.js';
 import { C } from './chunk-ANPNT6PM.js';
+import { resolveGitCommonDir, defaultGitRunner } from './chunk-4XN5FRRJ.js';
+import { loadTemplateFiles, loadMaintainedFiles, skillDir, AGENTS_SKILLS_BASE } from './chunk-JGML2VUN.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { linkedAgentsPath } from './chunk-VWFOKRYS.js';
 import { cloneIsGoverned } from './chunk-YQR6E6OV.js';

package/dist/{chunk-WUL2OP5A.js → chunk-QKXF7CLR.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isAgentsMdLayout, discoverOuterlayerPaths, isForeignTree, toRepoRelative } from './chunk-LOKSLO25.js';
-import { retiredSkillPaths, removeRetiredSkills } from './chunk-MHX7YX7Y.js';
-import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-7OUOLGUV.js';
+import { isAgentsMdLayout, discoverOuterlayerPaths, isForeignTree, toRepoRelative } from './chunk-5B7BEQPR.js';
 import { C } from './chunk-ANPNT6PM.js';
+import { retiredSkillPaths, removeRetiredSkills } from './chunk-P2RWZCV7.js';
+import { maintainedFilesForExistingSkills, loadMaintainedFiles, writeMaintainedFiles } from './chunk-JGML2VUN.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { emitTree, generatedHeaderSource, parseOuterlayerConfig, classifyTree } from './chunk-RKOTJQVG.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync, copyFileSync, unlinkSync, rmdirSync, readdirSync } from 'fs';

package/dist/{chunk-Y7ZCHBYB.js → chunk-QWAYRAUX.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { LiveUploader } from './chunk-VS27BP3E.js';
-import { spoolDir } from './chunk-DJHNEGNM.js';
-import { CaptureDaemon } from './chunk-QE3UQAHK.js';
+import { LiveUploader } from './chunk-2YSCKEL2.js';
+import { CaptureDaemon } from './chunk-UHU7H57K.js';
+import { spoolDir } from './chunk-DKWQMPSL.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
 import { mkdirSync, writeFileSync, rmSync } from 'fs';

package/dist/{chunk-64GMBWAK.js → chunk-R7SS5RLJ.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-B7DJVG25.js';
-import { MIN_ENGINE_MAJOR } from './chunk-R7SGBXUD.js';
-import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-GFUE5TKO.js';
-import { runnerCredentialProblem } from './chunk-EPPIISRD.js';
-import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
+import { detectMachine, supportsContainerBuilds, reachDockerStep, describeMachineDocker, supportsMicroVmBuilds } from './chunk-T57XUI6N.js';
+import { MIN_ENGINE_MAJOR } from './chunk-IKXY47R5.js';
+import { hasStoredCredential, AGENT_COMMANDS, storeClaudeCredential, credentialFromStdin, isAgentName } from './chunk-F4FA3ZUT.js';
+import { runnerCredentialProblem } from './chunk-55XLX5PA.js';
+import { runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-5K3KB4YR.js';
 import { existsSync, readFileSync, mkdirSync, writeFileSync } from 'fs';
 import { dirname } from 'path';
 
@@ -104,7 +104,7 @@ function prepareRunnerInit(configPath, opts = {}) {
   if (hooks === "builtin:process" && opts.allowProcess !== true) throw new RunnerInitError(processRefusal(machine));
   if (agent === "claude" && credential === void 0 && opts.credentialInEnvironment !== true && !hasStoredCredential(configPath)) {
     throw new RunnerInitError(
-      "--agent claude needs Claude's credential, and none was piped on stdin or is in the runner.env beside the config. Pipe a token from `claude setup-token`, or an Anthropic API key: printf '%s' \"$CLAUDE_CODE_OAUTH_TOKEN\" | outerlayer runner init --agent claude"
+      "--agent claude needs Claude's credential, and none was piped on stdin or is in the claude.env beside the config. Pipe a token from `claude setup-token`, or an Anthropic API key: printf '%s' \"$CLAUDE_CODE_OAUTH_TOKEN\" | outerlayer runner init --agent claude"
     );
   }
   return { configPath, config, carried, credential, agent, machine, hooks, needsKey, host: opts.host };

package/dist/{chunk-XZ6Q6ZNR.js → chunk-SATUCMAJ.js}

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, loadTemplateFiles, AGENTS_SKILLS_BASE, loadMaintainedFiles, rewriteSkillPaths, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MAINTAINED_SKILLS, MACHINE_SKILL_PATH } from './chunk-7OUOLGUV.js';
 import { C } from './chunk-ANPNT6PM.js';
+import { resolvePackRoot, OUTERLAYER_SKILLS_BASE, loadTemplateFiles, AGENTS_SKILLS_BASE, loadMaintainedFiles, rewriteSkillPaths, TEMPLATE_SKILLS, skillDir, writeMaintainedFiles, MACHINE_SKILL_PATH } from './chunk-JGML2VUN.js';
+import { MAINTAINED_SKILLS } from './chunk-CDDED64E.js';
+import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { linkedAgentsPath } from './chunk-VWFOKRYS.js';
-import { resolvePackageVersion } from './chunk-RA3O54FC.js';
 import { readFileSync, existsSync, mkdirSync, writeFileSync } from 'fs';
 import { join, dirname } from 'path';
 

package/dist/{chunk-2BTFKNTR.js → chunk-SJZL5F3F.js}

@@ -264,10 +264,10 @@ function guestAssetsPinned(arch) {
 var JAILER_BINARY_SHA256 = {
   x86_64: "65ef226e96f0ceda55ba643f445801ef2cc0ea667ef67cad8ac4f406c9c8434f"
 };
-var HOST_HELPER_ASSETS_VERSION = "9";
+var HOST_HELPER_ASSETS_VERSION = "10";
 var HOST_HELPER_BASE_URL = `https://github.com/outerlayerai/guest-assets/releases/download/guest-${HOST_HELPER_ASSETS_VERSION}`;
 var HOST_HELPER_SHA256 = {
-  x86_64: "c6f8e8ef6b65e4fff22379aa686d5977864fcbcc06f324672cbb90815a5076e5"
+  x86_64: "caa06b7206cceae6d8fc569781b269817ca66cb2ccfe177740fda042ed46bfcc"
 };
 function hostHelperPinned(arch = "x86_64", hashes = HOST_HELPER_SHA256) {
   return hashes[arch] !== "0".repeat(64);

package/dist/{chunk-HWDYLXHH.js → chunk-T2QSWFSU.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-D7ECMB7B.js';
+import { claimPidFile, RunnerAlreadyRunningError, releasePidFile } from './chunk-NUHZV3A4.js';
 import { startTimeOf } from './chunk-JBJTC3UU.js';
-import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, RecipeError, locateRecipe, readRecipe, assertBuildable, TINI_VERSION, GH_VERSION, writeSanitizedRecipe, classifyProperties, GH_SHA256, TINI_SHA256, SANITIZED_NAME } from './chunk-2BTFKNTR.js';
-import { RUNNER_DIR_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
-import { withGitConfig, tokenHeader, PROXY_WARNING_FLAG } from './chunk-2I3LIRZP.js';
+import { CLAUDE_CODE_VERSION, NODE_IMAGE, DEFAULT_BASE_IMAGE, RecipeError, locateRecipe, readRecipe, assertBuildable, TINI_VERSION, GH_VERSION, writeSanitizedRecipe, classifyProperties, GH_SHA256, TINI_SHA256, SANITIZED_NAME } from './chunk-SJZL5F3F.js';
+import { RUNNER_DIR_MODE, repoCacheDir, imagesDir, attemptStamp, runnerDir, rootfsPathFor, RUNNER_FILE_MODE } from './chunk-5K3KB4YR.js';
+import { withGitConfig, tokenHeader, PROXY_WARNING_FLAG } from './chunk-HXAEQPZR.js';
 import { RELAY_ID, RELAY_USER } from './chunk-JGD5TWQ2.js';
 import { mkdirSync, rmSync, existsSync, mkdtempSync, cpSync, readFileSync, writeFileSync, readdirSync, lstatSync, readlinkSync } from 'fs';
 import { tmpdir } from 'os';

package/dist/{chunk-B7DJVG25.js → chunk-T57XUI6N.js}

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { MIN_ENGINE_MAJOR } from './chunk-R7SGBXUD.js';
-import { runnerImageVersion } from './chunk-M3MHHIUW.js';
-import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-2BTFKNTR.js';
+import { MIN_ENGINE_MAJOR } from './chunk-IKXY47R5.js';
+import { runnerImageVersion } from './chunk-Z3ASAXVU.js';
+import { firecrackerArch, MICROVM_ARCHES, guestAssetsPinned } from './chunk-SJZL5F3F.js';
 import { spawnSync } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync } from 'fs';
 

package/dist/{chunk-E5IJ5533.js → chunk-TF7G2PR6.js}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { autoConnect, detectActiveSession } from './chunk-2F762IXY.js';
-import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-BWH36FOC.js';
-import { resolveRepoIdentity } from './chunk-QE3UQAHK.js';
+import { autoConnect, detectActiveSession } from './chunk-LNIFYSNK.js';
+import { resolveRepoIdentity } from './chunk-UHU7H57K.js';
 import { C } from './chunk-ANPNT6PM.js';
+import { defaultFetch, unauthorizedMessage, resolveGatewayCredentials } from './chunk-7CK2TJFB.js';
 import { parseWorkItemEnv } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';

package/dist/{chunk-O2IJTY7L.js → chunk-TVZAC2NP.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { launchRefusalForSession } from './chunk-ESVW4MJY.js';
-import { autoConnect, detectActiveSession } from './chunk-2F762IXY.js';
+import { autoConnect, detectActiveSession } from './chunk-LNIFYSNK.js';
 import { acquireSpoolLockAt } from './chunk-BUP5N3X6.js';
-import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-BWH36FOC.js';
-import { resolveRepoIdentity } from './chunk-QE3UQAHK.js';
+import { resolveRepoIdentity } from './chunk-UHU7H57K.js';
 import { C } from './chunk-ANPNT6PM.js';
+import { resolveGatewayCredentials, defaultFetch, unauthorizedMessage } from './chunk-7CK2TJFB.js';
 import { launchedItemForSession } from './chunk-T2Q7ISPE.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { StepNameSchema, StepBodySchema } from './chunk-QZBXLLTV.js';

package/dist/{chunk-QE3UQAHK.js → chunk-UHU7H57K.js}

@@ -21971,14 +21971,14 @@ var ModelRegistryImpl = class {
 };
 var models_default = {
   version: "1.0.0",
-  generatedAt: "2026-10-16T03:49:42.065Z",
+  generatedAt: "2026-10-17T03:39:49.068Z",
   sources: {
     litellm: {
-      fetchedAt: "2026-10-16T03:49:42.065Z",
-      modelCount: 1960
+      fetchedAt: "2026-10-17T03:39:49.068Z",
+      modelCount: 1961
     },
     openrouter: {
-      fetchedAt: "2026-10-16T03:49:42.065Z",
+      fetchedAt: "2026-10-17T03:39:49.068Z",
       modelCount: 204
     }
   },
@@ -63578,12 +63578,12 @@ var models_default = {
         "top_p"
       ],
       pricing: {
-        inputCostPerToken: 112e-9,
-        outputCostPerToken: 336e-9
+        inputCostPerToken: 5e-8,
+        outputCostPerToken: 15e-8
       },
       context: {
         maxInputTokens: 1048576,
-        maxOutputTokens: 131072
+        maxOutputTokens: 384e3
       },
       capabilities: {
         vision: true,
@@ -67468,6 +67468,25 @@ var models_default = {
         pdfInput: true
       },
       deprecationDate: "2027-10-01"
+    },
+    "reflection/Beam-1.0-501B-A23B": {
+      provider: "together_ai",
+      displayName: "Reflection/Beam 1.0 501B A23B",
+      mode: "chat",
+      source: "litellm",
+      pricing: {
+        inputCostPerToken: 4e-7,
+        outputCostPerToken: 12e-7,
+        cacheReadCostPerToken: 4e-8
+      },
+      context: {
+        maxInputTokens: 1048576
+      },
+      capabilities: {
+        functionCalling: true,
+        structuredOutput: true,
+        promptCaching: true
+      }
     }
   }
 };

package/dist/{chunk-WSYXLLA5.js → chunk-USJZ2LDK.js}

@@ -1,13 +1,13 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { WorkCommandError, postJson } from './chunk-55GNQPO6.js';
-import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-BPKO76QR.js';
-import { signingFetchFor } from './chunk-BWH36FOC.js';
-import { unsupportedLayout, layoutRefusalReason, composeDelivery } from './chunk-6TRNCUM4.js';
+import { WorkCommandError, postJson } from './chunk-X52PMPOM.js';
+import { defaultGitRunner, materializeContext, isStagingWriteFault, lookupGoverningSource } from './chunk-4XN5FRRJ.js';
+import { signingFetchFor } from './chunk-7CK2TJFB.js';
+import { signerFor } from './chunk-YL2VDSNF.js';
+import { SHIM_DIR, stagedContextDir, contextHomeDir, deliveryDir, keptContextDir } from './chunk-5K3KB4YR.js';
+import { unsupportedLayout, layoutRefusalReason, composeDelivery } from './chunk-FGF52V4V.js';
 import { SHIM_SCRIPT, GOVERNANCE_VARIABLE } from './chunk-HCVLP7XA.js';
 import { readDegraded, readContextManifest, readSourceCache } from './chunk-YQR6E6OV.js';
-import { signerFor } from './chunk-Y4OKEFAX.js';
-import { SHIM_DIR, stagedContextDir, contextHomeDir, deliveryDir, keptContextDir } from './chunk-RHAGBUL5.js';
 import { fstatSync, mkdirSync, writeFileSync, chmodSync, rmSync, cpSync, readFileSync, existsSync, lstatSync } from 'fs';
 import { relative, join, dirname } from 'path';
 

package/dist/{chunk-EX5MQYEF.js → chunk-VC5J7QPV.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RecipeError, BUILDKIT_IMAGE } from './chunk-2BTFKNTR.js';
 import { parseSize } from './chunk-YJLHUKYS.js';
-import { compareVersions } from './chunk-QE3UQAHK.js';
-import { ensureHostKey } from './chunk-Y4OKEFAX.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-RHAGBUL5.js';
-import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-2I3LIRZP.js';
+import { RecipeError, BUILDKIT_IMAGE } from './chunk-SJZL5F3F.js';
+import { compareVersions } from './chunk-UHU7H57K.js';
+import { ensureHostKey } from './chunk-YL2VDSNF.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE, runnerDir, jobsDir } from './chunk-5K3KB4YR.js';
+import { CLAUDE_PORT, JOB_MOUNT, GATEWAY_PORT, GATEWAY_SOCKET, CLAUDE_SOCKET, RELAY_PORT, DESTINATION_BASE_PORT } from './chunk-HXAEQPZR.js';
 import { JOIN_DIR, RELAY_ID, JOIN_SOCKET, TARGET_GATEWAY, TARGET_CLAUDE, destinationTarget, RELAY_USER } from './chunk-JGD5TWQ2.js';
 import { StringDecoder } from 'string_decoder';
 import { spawn } from 'child_process';

package/dist/{chunk-N4D5TMVU.js → chunk-VU7ZJPIR.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
-import { isAgentsMdLayout } from './chunk-LOKSLO25.js';
-import { DEFAULT_DASHBOARD } from './chunk-6BLXUD56.js';
-import { cliFetch, resolveGatewayCredentials } from './chunk-BWH36FOC.js';
-import { writeRepoConnection, findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
-import { remoteLookupFailed } from './chunk-QE3UQAHK.js';
+import { remoteLookupFailed } from './chunk-UHU7H57K.js';
+import { isAgentsMdLayout } from './chunk-5B7BEQPR.js';
+import { DEFAULT_DASHBOARD } from './chunk-HOU33DW5.js';
+import { cliFetch, resolveGatewayCredentials } from './chunk-7CK2TJFB.js';
 import { readCloudConfig } from './chunk-PJDQPF5N.js';
+import { writeRepoConnection, findGitDirs, readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { cliInvocation } from './chunk-CRB3POP4.js';
 import { execFileSync } from 'child_process';
 import { createInterface } from 'readline/promises';

package/dist/{chunk-ZFBJUOYT.js → chunk-W3FSGH2M.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { isPlaceholderCommand } from './chunk-64GMBWAK.js';
-import { describeCallFailure } from './chunk-WSYXLLA5.js';
-import { WorkCommandError, getJson } from './chunk-55GNQPO6.js';
+import { isPlaceholderCommand } from './chunk-R7SS5RLJ.js';
+import { describeCallFailure } from './chunk-USJZ2LDK.js';
+import { builtinKind } from './chunk-55XLX5PA.js';
+import { WorkCommandError, getJson } from './chunk-X52PMPOM.js';
 import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
-import { builtinKind } from './chunk-EPPIISRD.js';
-import { signerFor } from './chunk-Y4OKEFAX.js';
-import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-2I3LIRZP.js';
+import { signerFor } from './chunk-YL2VDSNF.js';
+import { CLAUDE_CREDENTIAL_VARIABLES, claudeCredential } from './chunk-HXAEQPZR.js';
 
 createRequire(import.meta.url);
 
@@ -57,7 +57,7 @@ function formerSkillProblem(queues) {
 function needsClaudeCredential(hooks) {
   return builtinKind(hooks.provision) !== "own";
 }
-var CREDENTIAL_FIX = "Run `claude setup-token`, then start the runner with CLAUDE_CODE_OAUTH_TOKEN set to the token it prints (or ANTHROPIC_API_KEY set to an API key), for example with EnvironmentFile= in the runner's systemd unit";
+var CREDENTIAL_FIX = "Run `claude setup-token`, then pipe the token it prints (or an Anthropic API key) to `outerlayer runner init --agent claude`, which stores it in the claude.env beside the config. Or start the runner with CLAUDE_CODE_OAUTH_TOKEN (or ANTHROPIC_API_KEY) set";
 function claudeCredentialCheck(env, options = {}) {
   const name = "Claude credential";
   if (options.service !== void 0) {
@@ -66,13 +66,13 @@ function claudeCredentialCheck(env, options = {}) {
       return {
         name,
         status: "fail",
-        detail: `the service ${unit} has no Claude credential: neither ${CLAUDE_CREDENTIAL_VARIABLES.slice(0, 2).join(" nor ")} is set in its runner.env, so every build fails at provision as agent_credential_missing`,
+        detail: `the service ${unit} has no Claude credential: neither ${CLAUDE_CREDENTIAL_VARIABLES.slice(0, 2).join(" nor ")} is set in its claude.env or runner.env, so every build fails at provision as agent_credential_missing`,
         fix: `${CREDENTIAL_FIX}, then restart the service: sudo systemctl restart ${unit}.`
       };
     }
-    return { name, status: "pass", detail: `${variables[0]} is set in the runner.env of the service ${unit}` };
+    return { name, status: "pass", detail: `${variables[0]} is set in the claude.env or runner.env of the service ${unit}` };
   }
-  const held = claudeCredential(env);
+  const held = claudeCredential(env, { ignoreHeld: options.ignoreHeld === true });
   if (held === void 0) {
     return {
       name,

package/dist/{chunk-GLUKDQS4.js → chunk-WWQVKFN6.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-2I3LIRZP.js';
+import { RELAY_PORT, GATEWAY_SOCKET, GATEWAY_PORT, CLAUDE_SOCKET, CLAUDE_PORT, DESTINATION_BASE_PORT } from './chunk-HXAEQPZR.js';
 import { symlinkSync, unlinkSync } from 'fs';
 import { join } from 'path';