@outerlayer/cli 0.27.1 → 0.28.1

package/dist/{chunk-55GNQPO6.js → chunk-X52PMPOM.js}

@@ -1,15 +1,15 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { detectActiveSession, autoConnect } from './chunk-2F762IXY.js';
-import { workPageUrl } from './chunk-N4D5TMVU.js';
+import { detectActiveSession, autoConnect } from './chunk-LNIFYSNK.js';
+import { workPageUrl } from './chunk-VU7ZJPIR.js';
 import { sanitizeTerminal } from './chunk-BUP5N3X6.js';
-import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-BWH36FOC.js';
-import { readRepoConnection } from './chunk-BJ3KTMDH.js';
-import { resolveRepoIdentity } from './chunk-QE3UQAHK.js';
+import { resolveRepoIdentity } from './chunk-UHU7H57K.js';
 import { C } from './chunk-ANPNT6PM.js';
+import { resolveGatewayCredentials, unauthorizedMessage, defaultFetch } from './chunk-7CK2TJFB.js';
+import { signRunnerRequest } from './chunk-YL2VDSNF.js';
+import { readRepoConnection } from './chunk-BJ3KTMDH.js';
 import { parseTrackerNumber, trackerNumberError } from './chunk-WZBHBH3J.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import { signRunnerRequest } from './chunk-Y4OKEFAX.js';
 
 createRequire(import.meta.url);
 
@@ -428,7 +428,7 @@ async function runWorkLinkSession(opts) {
     return await linkSession(opts);
   } catch (err) {
     if (opts.logFailures) {
-      const { logHookError } = await import('./hook-fast-3SUJM765.js');
+      const { logHookError } = await import('./hook-fast-EFC44SXV.js');
       const reason = err instanceof Error ? err.message : String(err);
       logHookError(opts.home ?? homeFromEnv(opts.env ?? process.env), new Error(`work link-session #${opts.number} failed: ${reason}`));
     }

package/dist/{chunk-YB3CSYXX.js → chunk-XD4ZCMA4.js}

@@ -1,6 +1,8 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { spawn } from 'child_process';
+import { spawn, spawnSync } from 'child_process';
+import { statSync, readFileSync } from 'fs';
+import { join } from 'path';
 
 createRequire(import.meta.url);
 var FD_STORE_ENV = "OUTERLAYER_FD_STORE";
@@ -92,4 +94,81 @@ function realFdStorePort(options = {}) {
   };
 }
 
-export { FD_SLOTS_PER_BUILD, FD_STORE_ENV, fdName, realFdStorePort };
+// src/runner/service/inspect.ts
+var CREDENTIAL_VARIABLES = ["CLAUDE_CODE_OAUTH_TOKEN", "ANTHROPIC_API_KEY"];
+function property(shown, name) {
+  return new RegExp(`^${name}=(.*)$`, "m").exec(shown)?.[1]?.trim();
+}
+function holdsGroup(status, gid) {
+  const primary = /^Gid:\s+(\d+)/m.exec(status)?.[1];
+  const supplementary = /^Groups:[ \t]*(.*)$/m.exec(status)?.[1]?.trim().split(/\s+/).filter((g) => g !== "") ?? [];
+  return [primary, ...supplementary].some((g) => g !== void 0 && Number(g) === gid);
+}
+function parseRunnerEnv(text) {
+  const env = {};
+  for (const line of text.split("\n")) {
+    const match = /^\s*(?:export\s+)?([A-Za-z_][A-Za-z0-9_]*)=(.*)$/.exec(line);
+    if (match === null) continue;
+    env[match[1]] = match[2].trim().replace(/^(["'])(.*)\1$/, "$2");
+  }
+  return env;
+}
+function credentialNames(env) {
+  const set = parseRunnerEnv(env ?? "");
+  return CREDENTIAL_VARIABLES.filter((name) => (set[name] ?? "").trim() !== "");
+}
+function startedWithStore(environ) {
+  const vars = new Map(environ.split("\0").map((entry) => [entry.slice(0, entry.indexOf("=")), entry.slice(entry.indexOf("=") + 1)]));
+  return (vars.get("NOTIFY_SOCKET") ?? "") !== "" && Number(vars.get(FD_STORE_ENV)) > 0;
+}
+function inspectService(unit, configDir, probes) {
+  const shown = probes.show(unit);
+  if (shown === void 0 || property(shown, "LoadState") !== "loaded") return void 0;
+  const pid = Number(property(shown, "MainPID") ?? "0");
+  const mainPid = Number.isInteger(pid) && pid > 0 ? pid : void 0;
+  const delegate = property(shown, "Delegate");
+  const storeMax = Number(property(shown, "FileDescriptorStoreMax"));
+  const status = mainPid === void 0 ? void 0 : probes.readFile(`/proc/${mainPid}/status`);
+  const environ = mainPid === void 0 ? void 0 : probes.readFile(`/proc/${mainPid}/environ`);
+  const systemd = Number(/^systemd (\d+)/.exec(probes.systemctlVersion?.() ?? "")?.[1]);
+  const kvm = probes.kvmGid();
+  return {
+    unit,
+    mainPid,
+    delegate: delegate === void 0 ? void 0 : delegate !== "no",
+    ...Number.isInteger(storeMax) && property(shown, "FileDescriptorStoreMax") !== void 0 ? { fdStoreMax: storeMax } : {},
+    hasKvmGroup: status === void 0 || kvm === void 0 ? void 0 : holdsGroup(status, kvm),
+    ...environ === void 0 ? {} : { startedWithStore: startedWithStore(environ) },
+    ...systemd > 0 ? { systemdVersion: systemd } : {},
+    // `claude.env` first, where the service loads the credential from; `runner.env` holds one that was never moved.
+    credentialVariables: [.../* @__PURE__ */ new Set([...credentialNames(probes.readFile(join(configDir, "claude.env"))), ...credentialNames(probes.readFile(join(configDir, "runner.env")))])]
+  };
+}
+function realInspectProbes() {
+  return {
+    show: (unit) => {
+      const result = spawnSync("systemctl", ["show", "--property=LoadState,MainPID,Delegate,FileDescriptorStoreMax", unit], { encoding: "utf8", timeout: 1e4 });
+      return result.status === 0 ? result.stdout : void 0;
+    },
+    readFile: (path) => {
+      try {
+        return readFileSync(path, "utf8");
+      } catch {
+        return void 0;
+      }
+    },
+    systemctlVersion: () => {
+      const result = spawnSync("systemctl", ["--version"], { encoding: "utf8", timeout: 1e4 });
+      return result.status === 0 ? result.stdout : void 0;
+    },
+    kvmGid: () => {
+      try {
+        return statSync("/dev/kvm").gid;
+      } catch {
+        return void 0;
+      }
+    }
+  };
+}
+
+export { FD_SLOTS_PER_BUILD, FD_STORE_ENV, MIN_SYSTEMD, fdName, inspectService, parseRunnerEnv, realFdStorePort, realInspectProbes };

package/dist/{chunk-Y4OKEFAX.js → chunk-YL2VDSNF.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
+import { hostKeyPath, runnerDir, RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-5K3KB4YR.js';
 import { generateKeyPairSync, createPrivateKey, createPublicKey, sign } from 'crypto';
 import { existsSync, mkdirSync, writeFileSync, readFileSync } from 'fs';
 

package/dist/{chunk-M3MHHIUW.js → chunk-Z3ASAXVU.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
 import { isVersion, compareVersions } from './chunk-TQMI335S.js';
-import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-RHAGBUL5.js';
+import { RUNNER_DIR_MODE, RUNNER_FILE_MODE } from './chunk-5K3KB4YR.js';
 import { readFileSync, mkdirSync, writeFileSync, renameSync } from 'fs';
 import { join } from 'path';
 

package/dist/{chunk-XS3FDWSZ.js → chunk-ZTY7HHYB.js}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { RELAY_PORT, BUILD_HOME } from './chunk-2I3LIRZP.js';
+import { RELAY_PORT, BUILD_HOME } from './chunk-HXAEQPZR.js';
 import { createServer, connect } from 'net';
 
 createRequire(import.meta.url);

package/dist/{claude-launcher-NQSZBTQ5.js → claude-launcher-7RGVOYCD.js}

@@ -1,15 +1,16 @@
 #!/usr/bin/env node
 import { createRequire } from 'node:module';
-import { sharedSkillNames } from './chunk-6TRNCUM4.js';
+import { sharedSkillNames } from './chunk-FGF52V4V.js';
 import { GOVERNANCE_VARIABLE, versionAtLeast, MINIMUM_CLAUDE_VERSION, SHIM_SCRIPT, CONTROL_PLANE_DIR_VARIABLE } from './chunk-HCVLP7XA.js';
 export { MINIMUM_CLAUDE_VERSION } from './chunk-HCVLP7XA.js';
 import { findGitDirs } from './chunk-BJ3KTMDH.js';
-import { setupMachineSkills } from './chunk-IMOB4IOI.js';
-import './chunk-7OUOLGUV.js';
+import { setupMachineSkills } from './chunk-DQYMQ47E.js';
+import './chunk-JGML2VUN.js';
+import './chunk-CDDED64E.js';
+import './chunk-RA3O54FC.js';
 import './chunk-RKOTJQVG.js';
 import './chunk-QZBXLLTV.js';
 import { homeFromEnv } from './chunk-VNVZDWO3.js';
-import './chunk-RA3O54FC.js';
 import './chunk-Z5GEFMRW.js';
 import { spawnSync, execFileSync, spawn } from 'child_process';
 import { existsSync, accessSync, constants, statSync, readFileSync, readdirSync, lstatSync, rmSync, mkdirSync, realpathSync, symlinkSync, renameSync, readlinkSync, writeFileSync } from 'fs';
@@ -240,7 +241,7 @@ async function runClaudeLauncher(args, deps = {}) {
       return 1;
     }
   } else {
-    const { resolveLaunchPlane } = await import('./control-plane-launch-DBQA3KLJ.js');
+    const { resolveLaunchPlane } = await import('./control-plane-launch-FZMD4MXX.js');
     const plane = env[GOVERNANCE_VARIABLE] === "self" ? { kind: "none" } : await resolveLaunchPlane({ cwd, env, home, fetchImpl: deps.fetchImpl, stderr });
     if (plane.kind === "none") {
       const own2 = ownSkillsDirFor(cwd, home, [], stderr);